@integrity-labs/agt-cli 0.27.161 → 0.27.163

package/dist/lib/manager-worker.js

@@ -22,7 +22,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-V5RAWFRT.js";
+} from "../chunk-DTZKJYJP.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -64,7 +64,7 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-7RCGHACC.js";
+} from "../chunk-5TBIEU36.js";
 import {
   FLAGS_SCHEMA_VERSION,
   KANBAN_CHECK_COMMAND,
@@ -93,9 +93,10 @@ import {
   resolveChannels,
   resolveConnectivityProbe,
   resolveDmTarget,
+  sumTranscriptUsageInWindow,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-BC26YO7P.js";
+} from "../chunk-3A2H4ZLD.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -103,10 +104,10 @@ import {
 
 // src/lib/manager-worker.ts
 import { createHash as createHash3 } from "crypto";
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync4, appendFileSync, mkdirSync as mkdirSync3, chmodSync, existsSync as existsSync5, rmSync as rmSync2, readdirSync as readdirSync4, statSync as statSync3, unlinkSync, copyFileSync } from "fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync4, appendFileSync, mkdirSync as mkdirSync3, chmodSync, existsSync as existsSync5, rmSync as rmSync2, readdirSync as readdirSync5, statSync as statSync4, unlinkSync, copyFileSync } from "fs";
 import https from "https";
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join9, dirname as dirname2 } from "path";
+import { join as join10, dirname as dirname2 } from "path";
 import { homedir as homedir5 } from "os";
 import { fileURLToPath } from "url";
 
@@ -1976,11 +1977,127 @@ async function maybeReportTokenUsage(args) {
   state2.set(codeName, next);
 }
 
-// src/lib/conversation-evaluator.ts
+// src/lib/workflow-run-reconciler.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
 import { join as join4 } from "path";
 var MIN_CHECK_INTERVAL_MS3 = 5 * 6e4;
-var TRANSCRIPT_MTIME_WINDOW_MS2 = 3 * 24 * 60 * 60 * 1e3;
+var SETTLE_MS = 3e4;
+var TRANSCRIPT_MTIME_WINDOW_MS2 = 2 * 24 * 60 * 60 * 1e3;
+var MAX_RUNS_PER_TICK = 20;
+var lastCheckedAt = /* @__PURE__ */ new Map();
+function emptyTotals() {
+  return { inputTokens: 0, outputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0 };
+}
+function enumerateTranscriptFiles(transcriptDir, nowMs, minMtimeMs = nowMs - TRANSCRIPT_MTIME_WINDOW_MS2) {
+  const out = [];
+  let entries;
+  try {
+    entries = readdirSync2(transcriptDir);
+  } catch {
+    return out;
+  }
+  for (const name of entries) {
+    const path = join4(transcriptDir, name);
+    let st;
+    try {
+      st = statSync2(path);
+    } catch {
+      continue;
+    }
+    if (st.isFile() && name.endsWith(".jsonl")) {
+      if (st.mtimeMs >= minMtimeMs) out.push(path);
+      continue;
+    }
+    if (st.isDirectory()) {
+      const subDir = join4(path, "subagents");
+      let subEntries;
+      try {
+        subEntries = readdirSync2(subDir);
+      } catch {
+        continue;
+      }
+      for (const sub of subEntries) {
+        if (!sub.endsWith(".jsonl")) continue;
+        const subPath = join4(subDir, sub);
+        try {
+          const sst = statSync2(subPath);
+          if (sst.isFile() && sst.mtimeMs >= minMtimeMs) out.push(subPath);
+        } catch {
+        }
+      }
+    }
+  }
+  return out;
+}
+function sumWindowedUsageAcrossContents(contents, startMs, endMs) {
+  const totals = emptyTotals();
+  for (const content of contents) {
+    const r = sumTranscriptUsageInWindow(content, startMs, endMs);
+    totals.inputTokens += r.totals.inputTokens;
+    totals.outputTokens += r.totals.outputTokens;
+    totals.cacheCreationTokens += r.totals.cacheCreationTokens;
+    totals.cacheReadTokens += r.totals.cacheReadTokens;
+  }
+  return totals;
+}
+async function maybeReconcileWorkflowRunTokens(args) {
+  const { api: api2, codeName, agentId, log: log2 } = args;
+  const now = args.now ?? /* @__PURE__ */ new Date();
+  const nowMs = now.getTime();
+  const prev = lastCheckedAt.get(codeName);
+  if (prev !== void 0 && nowMs - prev < MIN_CHECK_INTERVAL_MS3) return;
+  lastCheckedAt.set(codeName, nowMs);
+  let runs;
+  try {
+    const res = await api2.get("/host/workflow-runs/unreconciled");
+    runs = (res?.runs ?? []).filter(
+      (r) => r.agent_id === agentId && !!r.finished_at && nowMs - new Date(r.finished_at).getTime() >= SETTLE_MS
+    );
+  } catch (err) {
+    log2(`[workflow-reconcile] list failed for '${codeName}': ${err.message}`);
+    return;
+  }
+  if (runs.length === 0) return;
+  const dir = args.transcriptDir ?? sessionTranscriptDir(getProjectDir(codeName));
+  const runStartMs = runs.map((r) => new Date(r.started_at).getTime()).filter((t) => Number.isFinite(t));
+  const minMtimeMs = runStartMs.length > 0 ? Math.min(...runStartMs) : nowMs - TRANSCRIPT_MTIME_WINDOW_MS2;
+  const files = enumerateTranscriptFiles(dir, nowMs, minMtimeMs);
+  const contents = [];
+  for (const path of files) {
+    try {
+      contents.push(readFileSync5(path, "utf-8"));
+    } catch {
+    }
+  }
+  if (contents.length === 0) return;
+  let reconciled = 0;
+  for (const run of runs.slice(0, MAX_RUNS_PER_TICK)) {
+    const startMs = new Date(run.started_at).getTime();
+    const endMs = new Date(run.finished_at).getTime();
+    if (!Number.isFinite(startMs) || !Number.isFinite(endMs) || endMs < startMs) continue;
+    const totals = sumWindowedUsageAcrossContents(contents, startMs, endMs);
+    try {
+      await api2.post(`/host/workflow-runs/${run.id}/reconcile-tokens`, {
+        total_input_tokens: totals.inputTokens,
+        total_output_tokens: totals.outputTokens,
+        total_cache_creation_tokens: totals.cacheCreationTokens,
+        total_cache_read_tokens: totals.cacheReadTokens
+      });
+      reconciled++;
+    } catch (err) {
+      log2(`[workflow-reconcile] post failed for run ${run.id}: ${err.message}`);
+    }
+  }
+  if (reconciled > 0) {
+    log2(`[workflow-reconcile] reconciled ${reconciled} run(s) for '${codeName}'`);
+  }
+}
+
+// src/lib/conversation-evaluator.ts
+import { readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
+import { join as join5 } from "path";
+var MIN_CHECK_INTERVAL_MS4 = 5 * 6e4;
+var TRANSCRIPT_MTIME_WINDOW_MS3 = 3 * 24 * 60 * 60 * 1e3;
 var WINDOW_PAD_MS = 5 * 6e4;
 var MAX_TURN_CHARS = 1500;
 var MAX_TRANSCRIPT_CHARS = 6e3;
@@ -2128,7 +2245,7 @@ async function maybeEvaluateConversations(args) {
   const now = args.now ?? /* @__PURE__ */ new Date();
   const nowMs = now.getTime();
   const existing = state3.get(codeName);
-  if (existing && nowMs - existing.lastCheckedAt < MIN_CHECK_INTERVAL_MS3) {
+  if (existing && nowMs - existing.lastCheckedAt < MIN_CHECK_INTERVAL_MS4) {
     return;
   }
   state3.set(codeName, { lastCheckedAt: nowMs });
@@ -2208,24 +2325,24 @@ async function reportSkip(api2, agentId, conversationId, log2, codeName) {
 function readRecentTurns(dir, nowMs) {
   let entries;
   try {
-    entries = readdirSync2(dir);
+    entries = readdirSync3(dir);
   } catch {
     return [];
   }
   const turns = [];
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const full = join4(dir, name);
+    const full = join5(dir, name);
     let mtimeMs;
     try {
-      mtimeMs = statSync2(full).mtimeMs;
+      mtimeMs = statSync3(full).mtimeMs;
     } catch {
       continue;
     }
-    if (nowMs - mtimeMs > TRANSCRIPT_MTIME_WINDOW_MS2) continue;
+    if (nowMs - mtimeMs > TRANSCRIPT_MTIME_WINDOW_MS3) continue;
     let content;
     try {
-      content = readFileSync5(full, "utf8");
+      content = readFileSync6(full, "utf8");
     } catch {
       continue;
     }
@@ -2235,7 +2352,7 @@ function readRecentTurns(dir, nowMs) {
 }
 
 // src/lib/memory-extractor.ts
-var MIN_CHECK_INTERVAL_MS4 = 10 * 6e4;
+var MIN_CHECK_INTERVAL_MS5 = 10 * 6e4;
 var WINDOW_PAD_MS2 = 5 * 6e4;
 var VALID_MEMORY_TYPES = /* @__PURE__ */ new Set(["user", "feedback", "project", "reference"]);
 var SECRET_PATTERNS = [
@@ -2310,7 +2427,7 @@ async function maybeExtractMemories(args) {
   const now = args.now ?? /* @__PURE__ */ new Date();
   const nowMs = now.getTime();
   const existing = state4.get(codeName);
-  if (existing && nowMs - existing.lastCheckedAt < MIN_CHECK_INTERVAL_MS4) {
+  if (existing && nowMs - existing.lastCheckedAt < MIN_CHECK_INTERVAL_MS5) {
     return;
   }
   state4.set(codeName, { lastCheckedAt: nowMs });
@@ -2394,11 +2511,11 @@ async function reportSkip2(api2, agentId, conversationId, log2, codeName) {
 }
 
 // src/lib/activity-cache-monitor.ts
-import { existsSync as existsSync2, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync7 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join5 } from "path";
-var MIN_CHECK_INTERVAL_MS5 = 6e4;
-var STATS_CACHE_PATH = join5(homedir2(), ".claude", "stats-cache.json");
+import { join as join6 } from "path";
+var MIN_CHECK_INTERVAL_MS6 = 6e4;
+var STATS_CACHE_PATH = join6(homedir2(), ".claude", "stats-cache.json");
 var ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 var state5 = { lastObservedDate: null, lastCheckedAt: 0 };
 function selectNewDailyRows(raw, lastObservedDate) {
@@ -2439,14 +2556,14 @@ async function maybeReportActivityCache(args) {
   const { api: api2, log: log2 } = args;
   const now = args.now ?? /* @__PURE__ */ new Date();
   const nowMs = now.getTime();
-  if (nowMs - state5.lastCheckedAt < MIN_CHECK_INTERVAL_MS5) return;
+  if (nowMs - state5.lastCheckedAt < MIN_CHECK_INTERVAL_MS6) return;
   state5.lastCheckedAt = nowMs;
   if (!existsSync2(STATS_CACHE_PATH)) {
     return;
   }
   let raw;
   try {
-    raw = readFileSync6(STATS_CACHE_PATH, "utf-8");
+    raw = readFileSync7(STATS_CACHE_PATH, "utf-8");
   } catch (err) {
     log2(`[activity-cache] readFileSync failed: ${err.message}`);
     return;
@@ -2896,7 +3013,7 @@ var GatewayClientPool = class extends EventEmitter {
 // src/lib/claude-auth-detect.ts
 import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
 import { homedir as homedir3, platform } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import { execFile as execFile2 } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile2);
@@ -2911,8 +3028,8 @@ async function detectClaudeAuth() {
 }
 async function findClaudeCredentialsPaths() {
   const candidates = [
-    join6(homedir3(), ".claude", ".credentials.json"),
-    join6(homedir3(), ".claude", "credentials.json")
+    join7(homedir3(), ".claude", ".credentials.json"),
+    join7(homedir3(), ".claude", "credentials.json")
   ];
   const isLinuxRoot = platform() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
   if (isLinuxRoot) {
@@ -2920,8 +3037,8 @@ async function findClaudeCredentialsPaths() {
       const entries = await readdir2("/home", { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        candidates.push(join6("/home", entry.name, ".claude", ".credentials.json"));
-        candidates.push(join6("/home", entry.name, ".claude", "credentials.json"));
+        candidates.push(join7("/home", entry.name, ".claude", ".credentials.json"));
+        candidates.push(join7("/home", entry.name, ".claude", "credentials.json"));
       }
     } catch {
     }
@@ -3013,18 +3130,18 @@ function normalize(value) {
 }
 
 // src/lib/channel-hash-cache.ts
-import { existsSync as existsSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "fs";
+import { join as join8 } from "path";
 var CACHE_FILENAME = "channel-hash-cache.json";
 function getChannelHashCacheFile(configDir) {
-  return join7(configDir, CACHE_FILENAME);
+  return join8(configDir, CACHE_FILENAME);
 }
 function loadChannelHashCache(target, configDir) {
   const path = getChannelHashCacheFile(configDir);
   if (!existsSync3(path)) return;
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync7(path, "utf-8"));
+    parsed = JSON.parse(readFileSync8(path, "utf-8"));
   } catch {
     return;
   }
@@ -3625,24 +3742,24 @@ function partitionActionableByPoison(actionable, states, config2) {
 }
 
 // src/lib/restart-flags.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync3, readFileSync as readFileSync8, renameSync, rmSync, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync4, readFileSync as readFileSync9, renameSync, rmSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { randomUUID } from "crypto";
 function restartFlagsDir() {
-  return join8(homedir4(), ".augmented", "restart-flags");
+  return join9(homedir4(), ".augmented", "restart-flags");
 }
 function flagPath(codeName) {
-  return join8(restartFlagsDir(), `${codeName}.flag`);
+  return join9(restartFlagsDir(), `${codeName}.flag`);
 }
 function readRestartFlags() {
   const dir = restartFlagsDir();
   if (!existsSync4(dir)) return [];
   const out = [];
-  for (const entry of readdirSync3(dir)) {
+  for (const entry of readdirSync4(dir)) {
     if (!entry.endsWith(".flag")) continue;
     try {
-      const raw = readFileSync8(join8(dir, entry), "utf8");
+      const raw = readFileSync9(join9(dir, entry), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.codeName !== "string" || parsed.codeName.length === 0) {
         parsed.codeName = entry.replace(/\.flag$/, "");
@@ -4190,8 +4307,8 @@ function applyRestartAcks(args) {
 var GATEWAY_PORT_BASE = 18800;
 var GATEWAY_PORT_STEP = 10;
 var GATEWAY_PORT_MAX = 18899;
-var AUGMENTED_DIR = join9(process.env["HOME"] ?? "/tmp", ".augmented");
-var GATEWAY_PORTS_FILE = join9(AUGMENTED_DIR, "gateway-ports.json");
+var AUGMENTED_DIR = join10(process.env["HOME"] ?? "/tmp", ".augmented");
+var GATEWAY_PORTS_FILE = join10(AUGMENTED_DIR, "gateway-ports.json");
 var CHANNEL_SWEEP_INTERVAL_MS = (() => {
   const raw = parseInt(process.env["AGT_CHANNEL_SWEEP_INTERVAL_MS"] ?? "", 10);
   if (!Number.isFinite(raw)) return 5 * 60 * 1e3;
@@ -4540,7 +4657,7 @@ function inboundAgeSecondsFor(codeName) {
 }
 function paneLogAgeSecondsFor(codeName) {
   try {
-    const mtimeMs = statSync3(paneLogPath(codeName)).mtimeMs;
+    const mtimeMs = statSync4(paneLogPath(codeName)).mtimeMs;
     return Math.max(0, Math.floor((Date.now() - mtimeMs) / 1e3));
   } catch (err) {
     if (err?.code === "ENOENT") return null;
@@ -4566,7 +4683,7 @@ var runningMcpServerKeys = /* @__PURE__ */ new Map();
 var runningChannelSecretHashes = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
-    const raw = readFileSync9(join9(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync10(join10(projectDir, ".mcp.json"), "utf-8");
     return createHash3("sha256").update(canonicalJson(JSON.parse(raw))).digest("hex");
   } catch {
     return null;
@@ -4574,7 +4691,7 @@ function projectMcpHash(_codeName, projectDir) {
 }
 function projectMcpKeys(_codeName, projectDir) {
   try {
-    const raw = readFileSync9(join9(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync10(join10(projectDir, ".mcp.json"), "utf-8");
     const parsed = JSON.parse(raw);
     const servers = parsed.mcpServers;
     if (!servers || typeof servers !== "object") return /* @__PURE__ */ new Set();
@@ -4585,7 +4702,7 @@ function projectMcpKeys(_codeName, projectDir) {
 }
 function readMcpHttpServerConfig(projectDir, serverKey, env) {
   try {
-    const raw = readFileSync9(join9(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync10(join10(projectDir, ".mcp.json"), "utf-8");
     const servers = JSON.parse(raw).mcpServers ?? {};
     const entry = servers[serverKey];
     if (entry && typeof entry.url === "string" && (entry.type === "http" || entry.type === void 0)) {
@@ -4613,9 +4730,9 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
   if (integrations.length === 0) return;
   const probeEnv = { ...process.env };
   try {
-    const envIntPath = join9(projectDir, ".env.integrations");
+    const envIntPath = join10(projectDir, ".env.integrations");
     if (existsSync5(envIntPath)) {
-      Object.assign(probeEnv, parseEnvIntegrations(readFileSync9(envIntPath, "utf-8")));
+      Object.assign(probeEnv, parseEnvIntegrations(readFileSync10(envIntPath, "utf-8")));
     }
   } catch {
   }
@@ -4803,7 +4920,7 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
-      readFileSync9(join9(projectDir, ".env.integrations"), "utf-8")
+      readFileSync10(join10(projectDir, ".env.integrations"), "utf-8")
     );
     return channelSecretValueHash(entries, CHANNEL_SECRET_ENV_KEYS);
   } catch {
@@ -4895,7 +5012,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.161" : "dev";
+var agtCliVersion = true ? "0.27.163" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -5072,7 +5189,7 @@ function ensureClaudeManagedSettings(path = claudeManagedSettingsPath()) {
   try {
     let settings = {};
     if (existsSync5(path)) {
-      const raw = readFileSync9(path, "utf-8").trim();
+      const raw = readFileSync10(path, "utf-8").trim();
       if (raw) {
         let parsed;
         try {
@@ -5146,7 +5263,7 @@ async function ensureFrameworkBinary(frameworkId) {
 var CLAUDE_CODE_UPGRADE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var claudeCodeUpgradeInFlight = false;
 function claudeCodeUpgradeMarkerPath() {
-  return join9(homedir5(), ".augmented", ".last-claude-code-upgrade-check");
+  return join10(homedir5(), ".augmented", ".last-claude-code-upgrade-check");
 }
 function stampClaudeCodeUpgradeMarker() {
   try {
@@ -5156,7 +5273,7 @@ function stampClaudeCodeUpgradeMarker() {
 }
 function claudeCodeUpgradeThrottled() {
   try {
-    const lastCheck = parseInt(readFileSync9(claudeCodeUpgradeMarkerPath(), "utf-8").trim(), 10);
+    const lastCheck = parseInt(readFileSync10(claudeCodeUpgradeMarkerPath(), "utf-8").trim(), 10);
     if (!Number.isFinite(lastCheck)) return false;
     return Date.now() - lastCheck < CLAUDE_CODE_UPGRADE_CHECK_INTERVAL_MS;
   } catch {
@@ -5209,7 +5326,7 @@ ${r.stderr}`;
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 function selfUpdateAppliedMarkerPath() {
-  return join9(homedir5(), ".augmented", ".last-self-update-applied");
+  return join10(homedir5(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
 var restartAfterUpgrade = false;
@@ -5232,7 +5349,7 @@ async function checkAndUpdateCli() {
     const isNpmGlobal = !isBrewFormula && resolvedPath.includes("node_modules");
     if (!isBrewFormula && !isNpmGlobal) return;
     const { readFileSync: readF, writeFileSync: writeF } = await import("fs");
-    const markerPath = join9(homedir5(), ".augmented", ".last-update-check");
+    const markerPath = join10(homedir5(), ".augmented", ".last-update-check");
     try {
       const lastCheck = parseInt(readF(markerPath, "utf-8").trim(), 10);
       if (Date.now() - lastCheck < UPDATE_CHECK_INTERVAL_MS) return;
@@ -5489,9 +5606,9 @@ async function applyClaudeAuthToEnv(childEnv, label) {
       throw new Error("claude_auth_mode=api_key but /host/exchange returned no decrypted key");
     }
     childEnv.ANTHROPIC_API_KEY = exchange.anthropicApiKey;
-    const claudeDir = join9(homedir5(), ".claude");
+    const claudeDir = join10(homedir5(), ".claude");
     for (const filename of [".credentials.json", "credentials.json"]) {
-      const p = join9(claudeDir, filename);
+      const p = join10(claudeDir, filename);
       if (existsSync5(p)) {
         try {
           rmSync2(p, { force: true });
@@ -5507,12 +5624,12 @@ async function applyClaudeAuthToEnv(childEnv, label) {
 var evalEmptyMcpConfigPath = null;
 function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync5(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
-  const dir = join9(homedir5(), ".augmented");
+  const dir = join10(homedir5(), ".augmented");
   try {
     mkdirSync3(dir, { recursive: true });
   } catch {
   }
-  const p = join9(dir, ".eval-empty-mcp.json");
+  const p = join10(dir, ".eval-empty-mcp.json");
   writeFileSync4(p, JSON.stringify({ mcpServers: {} }));
   evalEmptyMcpConfigPath = p;
   return p;
@@ -5587,7 +5704,7 @@ function resolveConversationEvalBackend() {
 }
 function loadGatewayPorts() {
   try {
-    return JSON.parse(readFileSync9(GATEWAY_PORTS_FILE, "utf-8"));
+    return JSON.parse(readFileSync10(GATEWAY_PORTS_FILE, "utf-8"));
   } catch {
     return {};
   }
@@ -5617,10 +5734,10 @@ function freePort(codeName) {
   }
 }
 function getStateFile() {
-  return join9(config?.configDir ?? join9(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
+  return join10(config?.configDir ?? join10(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
 }
 function channelHashCacheDir() {
-  return config?.configDir ?? join9(process.env["HOME"] ?? "/tmp", ".augmented");
+  return config?.configDir ?? join10(process.env["HOME"] ?? "/tmp", ".augmented");
 }
 function loadChannelHashCache2() {
   loadChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
@@ -5631,7 +5748,7 @@ function saveChannelHashCache2() {
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
   if (!_channelQuarantineStore) {
-    const dir = config?.configDir ?? join9(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join10(process.env["HOME"] ?? "/tmp", ".augmented");
     _channelQuarantineStore = new ChannelQuarantineStore(defaultQuarantinePath(dir));
   }
   return _channelQuarantineStore;
@@ -5639,16 +5756,13 @@ function channelQuarantineStore() {
 var _hostFlagStore = null;
 function hostFlagStore() {
   if (!_hostFlagStore) {
-    const dir = config?.configDir ?? join9(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join10(process.env["HOME"] ?? "/tmp", ".augmented");
     _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
   }
   return _hostFlagStore;
 }
 function channelQuarantineMode() {
-  const v = process.env["AGT_CHANNEL_QUARANTINE_MODE"]?.toLowerCase();
-  if (v === "off") return "off";
-  if (v === "enforce") return "enforce";
-  return "shadow";
+  return hostFlagStore().getString("channel-quarantine-mode");
 }
 function channelQuarantineDwellMs() {
   const raw = parseInt(process.env["AGT_CHANNEL_QUARANTINE_DWELL_MS"] ?? "", 10);
@@ -5694,7 +5808,7 @@ function log(msg) {
 `;
   if (!managerLogPath) {
     try {
-      managerLogPath = join9(homedir5(), ".augmented", "manager.log");
+      managerLogPath = join10(homedir5(), ".augmented", "manager.log");
       mkdirSync3(dirname2(managerLogPath), { recursive: true });
       if (existsSync5(managerLogPath)) {
         chmodSync(managerLogPath, 384);
@@ -5724,7 +5838,7 @@ function sha256(content) {
 }
 function hashFile(filePath) {
   try {
-    const content = readFileSync9(filePath, "utf-8");
+    const content = readFileSync10(filePath, "utf-8");
     return sha256(content);
   } catch {
     return null;
@@ -5748,13 +5862,13 @@ function parseSkillFrontmatter(content) {
   return out;
 }
 async function refreshSkillsIndexInClaudeMd(configDir, codeName, log2) {
-  const { readdirSync: readdirSync5, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync5 } = await import("fs");
-  const skillsDir = join9(configDir, codeName, "project", ".claude", "skills");
-  const claudeMdPath = join9(configDir, codeName, "project", "CLAUDE.md");
+  const { readdirSync: readdirSync6, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync5 } = await import("fs");
+  const skillsDir = join10(configDir, codeName, "project", ".claude", "skills");
+  const claudeMdPath = join10(configDir, codeName, "project", "CLAUDE.md");
   if (!ex(skillsDir) || !ex(claudeMdPath)) return;
   const entries = [];
-  for (const dir of readdirSync5(skillsDir).sort()) {
-    const skillFile = join9(skillsDir, dir, "SKILL.md");
+  for (const dir of readdirSync6(skillsDir).sort()) {
+    const skillFile = join10(skillsDir, dir, "SKILL.md");
     if (!ex(skillFile)) continue;
     try {
       const { name, description } = parseSkillFrontmatter(rfs(skillFile, "utf-8"));
@@ -5802,10 +5916,10 @@ ${SKILLS_INDEX_END}`;
 }
 async function migrateToProfiles() {
   const homeDir = process.env["HOME"] ?? "/tmp";
-  const sharedConfigPath = join9(homeDir, ".openclaw", "openclaw.json");
+  const sharedConfigPath = join10(homeDir, ".openclaw", "openclaw.json");
   let sharedConfig;
   try {
-    sharedConfig = JSON.parse(readFileSync9(sharedConfigPath, "utf-8"));
+    sharedConfig = JSON.parse(readFileSync10(sharedConfigPath, "utf-8"));
   } catch {
     return;
   }
@@ -5818,19 +5932,19 @@ async function migrateToProfiles() {
     const codeName = agentEntry["id"];
     if (!codeName) continue;
     if (codeName === "main") continue;
-    const profileDir = join9(homeDir, `.openclaw-${codeName}`);
-    if (existsSync5(join9(profileDir, "openclaw.json"))) continue;
+    const profileDir = join10(homeDir, `.openclaw-${codeName}`);
+    if (existsSync5(join10(profileDir, "openclaw.json"))) continue;
     log(`Migrating agent '${codeName}' to per-agent profile`);
     if (adapter.seedProfileConfig) {
       adapter.seedProfileConfig(codeName);
     }
-    const sharedAuthDir = join9(homeDir, ".openclaw", "agents", codeName, "agent");
-    const profileAuthDir = join9(profileDir, "agents", codeName, "agent");
-    const authFile = join9(sharedAuthDir, "auth-profiles.json");
+    const sharedAuthDir = join10(homeDir, ".openclaw", "agents", codeName, "agent");
+    const profileAuthDir = join10(profileDir, "agents", codeName, "agent");
+    const authFile = join10(sharedAuthDir, "auth-profiles.json");
     if (existsSync5(authFile)) {
       mkdirSync3(profileAuthDir, { recursive: true });
-      const authContent = readFileSync9(authFile, "utf-8");
-      writeFileSync4(join9(profileAuthDir, "auth-profiles.json"), authContent);
+      const authContent = readFileSync10(authFile, "utf-8");
+      writeFileSync4(join10(profileAuthDir, "auth-profiles.json"), authContent);
     }
     allocatePort(codeName);
     migrated++;
@@ -5868,7 +5982,7 @@ function readGatewayToken(codeName) {
   }
   const homeDir = process.env["HOME"] ?? "/tmp";
   try {
-    const cfg = JSON.parse(readFileSync9(join9(homeDir, `.openclaw-${codeName}`, "openclaw.json"), "utf-8"));
+    const cfg = JSON.parse(readFileSync10(join10(homeDir, `.openclaw-${codeName}`, "openclaw.json"), "utf-8"));
     return cfg?.gateway?.auth?.token;
   } catch {
     return void 0;
@@ -5877,10 +5991,10 @@ function readGatewayToken(codeName) {
 var GATEWAY_HUNG_TIMEOUT_MS = 5 * 6e4;
 function isGatewayHung(codeName) {
   const homeDir = process.env["HOME"] ?? "/tmp";
-  const jobsPath = join9(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
+  const jobsPath = join10(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
   if (!existsSync5(jobsPath)) return false;
   try {
-    const data = JSON.parse(readFileSync9(jobsPath, "utf-8"));
+    const data = JSON.parse(readFileSync10(jobsPath, "utf-8"));
     const jobs = data.jobs ?? data;
     if (!Array.isArray(jobs)) return false;
     const now = Date.now();
@@ -5913,15 +6027,15 @@ async function ensureGatewayRunning(codeName, adapter) {
       }
       await new Promise((r) => setTimeout(r, 2e3));
       const homeDir = process.env["HOME"] ?? "/tmp";
-      const cronJobsPath = join9(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
+      const cronJobsPath = join10(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
       clearStaleCronRunState(cronJobsPath);
     } else {
       if (status.port) {
         try {
           const homeDir = process.env["HOME"] ?? "/tmp";
-          const configPath = join9(homeDir, `.openclaw-${codeName}`, "openclaw.json");
+          const configPath = join10(homeDir, `.openclaw-${codeName}`, "openclaw.json");
           if (existsSync5(configPath)) {
-            const cfg = JSON.parse(readFileSync9(configPath, "utf-8"));
+            const cfg = JSON.parse(readFileSync10(configPath, "utf-8"));
             if (cfg.gateway?.port !== status.port) {
               if (!cfg.gateway) cfg.gateway = {};
               cfg.gateway.port = status.port;
@@ -5945,9 +6059,9 @@ async function ensureGatewayRunning(codeName, adapter) {
     gatewaysStartedThisCycle.add(codeName);
     try {
       const homeDir = process.env["HOME"] ?? "/tmp";
-      const configPath = join9(homeDir, `.openclaw-${codeName}`, "openclaw.json");
+      const configPath = join10(homeDir, `.openclaw-${codeName}`, "openclaw.json");
       if (existsSync5(configPath)) {
-        const cfg = JSON.parse(readFileSync9(configPath, "utf-8"));
+        const cfg = JSON.parse(readFileSync10(configPath, "utf-8"));
         if (!cfg.gateway) cfg.gateway = {};
         cfg.gateway.port = port;
         writeFileSync4(configPath, JSON.stringify(cfg, null, 2));
@@ -6101,7 +6215,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-W6V2DO3R.js");
+      const { collectDiagnostics } = await import("../persistent-session-7BLPRGWR.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -6195,12 +6309,12 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-LY2H2XR5.js");
+      } = await import("../responsiveness-probe-AL3O7SYZ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
         if (probeCodeNames.length > 0) {
-          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-W6V2DO3R.js");
+          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-7BLPRGWR.js");
           const drainedGiveUps = /* @__PURE__ */ new Map();
           const drainedAcpxFailures = /* @__PURE__ */ new Map();
           const probes = collectResponsivenessProbes(probeCodeNames).map((p) => {
@@ -6234,7 +6348,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-LY2H2XR5.js");
+        } = await import("../responsiveness-probe-AL3O7SYZ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -6491,7 +6605,7 @@ async function pollCycle() {
         }
         killAgentChannelProcesses(prev.codeName, { log });
         freePort(prev.codeName);
-        const agentDir = join9(adapter.getAgentDir(prev.codeName), "provision");
+        const agentDir = join10(adapter.getAgentDir(prev.codeName), "provision");
         await cleanupAgentFiles(prev.codeName, agentDir);
         clearAgentCaches(prev.agentId, prev.codeName);
       }
@@ -6577,10 +6691,10 @@ async function pollCycle() {
         // pending-inbound marker. Best-effort: a write failure is logged by
         // the watchdog, never fails the poll cycle.
         signalGiveUp: (codeName) => {
-          const dir = join9(homedir5(), ".augmented", codeName);
+          const dir = join10(homedir5(), ".augmented", codeName);
           if (!existsSync5(dir)) return;
           atomicWriteFileSync(
-            join9(dir, "watchdog-give-up.json"),
+            join10(dir, "watchdog-give-up.json"),
             JSON.stringify({ gave_up_at: (/* @__PURE__ */ new Date()).toISOString() })
           );
         }
@@ -6682,6 +6796,12 @@ async function processAgent(agent, agentStates) {
       agentId: agent.agent_id,
       log
     });
+    void maybeReconcileWorkflowRunTokens({
+      api,
+      codeName: agent.code_name,
+      agentId: agent.agent_id,
+      log
+    });
     void maybeEvaluateConversations({
       api,
       backend: resolveConversationEvalBackend(),
@@ -6701,7 +6821,7 @@ async function processAgent(agent, agentStates) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const adapter = resolveAgentFramework(agent.code_name);
-  let agentDir = join9(adapter.getAgentDir(agent.code_name), "provision");
+  let agentDir = join10(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
@@ -6905,7 +7025,7 @@ async function processAgent(agent, agentStates) {
   const frameworkId = refreshData.agent.framework ?? "openclaw";
   agentFrameworkCache.set(agent.code_name, frameworkId);
   const frameworkAdapter = getFramework(frameworkId);
-  agentDir = join9(frameworkAdapter.getAgentDir(agent.code_name), "provision");
+  agentDir = join10(frameworkAdapter.getAgentDir(agent.code_name), "provision");
   cacheAgentDeliveryMetadata(agent.code_name, refreshData);
   if (frameworkAdapter.migrateSecretStorage && !migratedSecretStorage.has(agent.code_name)) {
     try {
@@ -6948,7 +7068,7 @@ async function processAgent(agent, agentStates) {
     const changedFiles = [];
     mkdirSync3(agentDir, { recursive: true });
     for (const artifact of artifacts) {
-      const filePath = join9(agentDir, artifact.relativePath);
+      const filePath = join10(agentDir, artifact.relativePath);
       let existingHash;
       let newHash;
       let writeContent = artifact.content;
@@ -6967,8 +7087,8 @@ async function processAgent(agent, agentStates) {
         };
         newHash = sha256(stripDynamicSections(artifact.content));
         try {
-          const projectClaudeMd = join9(config.configDir, agent.code_name, "project", "CLAUDE.md");
-          const existing = readFileSync9(projectClaudeMd, "utf-8");
+          const projectClaudeMd = join10(config.configDir, agent.code_name, "project", "CLAUDE.md");
+          const existing = readFileSync10(projectClaudeMd, "utf-8");
           existingHash = sha256(stripDynamicSections(existing));
         } catch {
           existingHash = null;
@@ -6986,7 +7106,7 @@ async function processAgent(agent, agentStates) {
         const generatorKeys = Object.keys(generatorServers);
         let existingRaw = "";
         try {
-          existingRaw = readFileSync9(filePath, "utf-8");
+          existingRaw = readFileSync10(filePath, "utf-8");
         } catch {
         }
         const existingServers = parseMcp(existingRaw);
@@ -7008,12 +7128,12 @@ async function processAgent(agent, agentStates) {
       }
     }
     if (changedFiles.length > 0) {
-      const isFirst = !existsSync5(join9(agentDir, "CHARTER.md"));
+      const isFirst = !existsSync5(join10(agentDir, "CHARTER.md"));
       const verb = isFirst ? "Provisioning" : "Updating";
       const fileNames = changedFiles.map((f) => f.relativePath).join(", ");
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
-        const filePath = join9(agentDir, file.relativePath);
+        const filePath = join10(agentDir, file.relativePath);
         mkdirSync3(dirname2(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
@@ -7022,12 +7142,12 @@ async function processAgent(agent, agentStates) {
         }
       }
       try {
-        const provSkillsDir = join9(agentDir, ".claude", "skills");
+        const provSkillsDir = join10(agentDir, ".claude", "skills");
         if (existsSync5(provSkillsDir)) {
-          for (const folder of readdirSync4(provSkillsDir)) {
+          for (const folder of readdirSync5(provSkillsDir)) {
             if (folder.startsWith("knowledge-")) {
               try {
-                rmSync2(join9(provSkillsDir, folder), { recursive: true });
+                rmSync2(join10(provSkillsDir, folder), { recursive: true });
               } catch {
               }
             }
@@ -7040,7 +7160,7 @@ async function processAgent(agent, agentStates) {
       const trackedFiles2 = frameworkAdapter.driftTrackedFiles();
       const hashes = /* @__PURE__ */ new Map();
       for (const file of trackedFiles2) {
-        const h = hashFile(join9(agentDir, file));
+        const h = hashFile(join10(agentDir, file));
         if (h) hashes.set(file, h);
       }
       agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -7108,7 +7228,7 @@ async function processAgent(agent, agentStates) {
   if (written && existsSync5(agentDir)) {
     const driftedFiles = [];
     for (const [file, expectedHash] of written) {
-      const localHash = hashFile(join9(agentDir, file));
+      const localHash = hashFile(join10(agentDir, file));
       if (localHash && localHash !== expectedHash) {
         driftedFiles.push(file);
       }
@@ -7119,7 +7239,7 @@ async function processAgent(agent, agentStates) {
       try {
         const localHashes = {};
         for (const file of driftedFiles) {
-          localHashes[file] = hashFile(join9(agentDir, file));
+          localHashes[file] = hashFile(join10(agentDir, file));
         }
         await api.post("/host/drift", {
           agent_id: agent.agent_id,
@@ -7443,18 +7563,18 @@ async function processAgent(agent, agentStates) {
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? "openclaw") === "claude-code") {
     try {
       const agentProvisionDir = agentDir;
-      const projectDir = join9(homedir5(), ".augmented", agent.code_name, "project");
+      const projectDir = join10(homedir5(), ".augmented", agent.code_name, "project");
       mkdirSync3(agentProvisionDir, { recursive: true });
       mkdirSync3(projectDir, { recursive: true });
-      const provisionMcpPath = join9(agentProvisionDir, ".mcp.json");
-      const projectMcpPath = join9(projectDir, ".mcp.json");
+      const provisionMcpPath = join10(agentProvisionDir, ".mcp.json");
+      const projectMcpPath = join10(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
       try {
-        mcpConfig = JSON.parse(readFileSync9(provisionMcpPath, "utf-8"));
+        mcpConfig = JSON.parse(readFileSync10(provisionMcpPath, "utf-8"));
         if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
       } catch {
       }
-      const localDirectChatChannel = join9(homedir5(), ".augmented", "_mcp", "direct-chat-channel.js");
+      const localDirectChatChannel = join10(homedir5(), ".augmented", "_mcp", "direct-chat-channel.js");
       const directChatTeamSettings = refreshData.team?.settings;
       const directChatTz = (() => {
         const tz = directChatTeamSettings?.["timezone"];
@@ -7484,7 +7604,7 @@ async function processAgent(agent, agentStates) {
           log(`Channel credentials written for '${agent.code_name}/direct-chat'`);
         }
       }
-      const staleChannelsPath = join9(projectDir, ".mcp-channels.json");
+      const staleChannelsPath = join10(projectDir, ".mcp-channels.json");
       if (existsSync5(staleChannelsPath)) {
         try {
           rmSync2(staleChannelsPath, { force: true });
@@ -7549,7 +7669,7 @@ async function processAgent(agent, agentStates) {
     }
     if (process.env.AGT_CONNECTIVITY_PROBE_ENABLED === "true") {
       try {
-        const probeProjectDir = join9(homedir5(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join10(homedir5(), ".augmented", agent.code_name, "project");
         await runAgentConnectivityProbes(agent, integrations, probeProjectDir);
       } catch (err) {
         log(`Connectivity probe failed for '${agent.code_name}': ${err.message}`);
@@ -7567,11 +7687,11 @@ async function processAgent(agent, agentStates) {
         recordConfigChurnEvent(agent.agent_id, agent.code_name, FLAP_CHANNEL_INTEGRATIONS, intMembership);
       }
       if (intHash !== prevIntHash) {
-        const projectDir = join9(homedir5(), ".augmented", agent.code_name, "project");
-        const envIntPath = join9(projectDir, ".env.integrations");
+        const projectDir = join10(homedir5(), ".augmented", agent.code_name, "project");
+        const envIntPath = join10(projectDir, ".env.integrations");
         let preWriteEnv;
         try {
-          preWriteEnv = readFileSync9(envIntPath, "utf-8");
+          preWriteEnv = readFileSync10(envIntPath, "utf-8");
         } catch {
           preWriteEnv = void 0;
         }
@@ -7583,9 +7703,9 @@ async function processAgent(agent, agentStates) {
         let rotationHandled = true;
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
-            const projectMcpPath = join9(projectDir, ".mcp.json");
-            const postWriteEnv = readFileSync9(envIntPath, "utf-8");
-            const mcpContent = readFileSync9(projectMcpPath, "utf-8");
+            const projectMcpPath = join10(projectDir, ".mcp.json");
+            const postWriteEnv = readFileSync10(envIntPath, "utf-8");
+            const mcpContent = readFileSync10(projectMcpPath, "utf-8");
             const changedVars = diffEnvIntegrations(preWriteEnv, postWriteEnv);
             const mcpJsonForReap = JSON.parse(mcpContent);
             const affectedServerKeys = findMcpServersUsingVars(mcpJsonForReap, changedVars);
@@ -7665,8 +7785,8 @@ async function processAgent(agent, agentStates) {
             const mcpPath = frameworkAdapter.getMcpPath(agent.code_name);
             if (mcpPath) {
               try {
-                const { readFileSync: readFileSync10 } = await import("fs");
-                const mcpConfig = JSON.parse(readFileSync10(mcpPath, "utf-8"));
+                const { readFileSync: readFileSync11 } = await import("fs");
+                const mcpConfig = JSON.parse(readFileSync11(mcpPath, "utf-8"));
                 if (mcpConfig.mcpServers) {
                   const managedPrefixes = [
                     "composio_",
@@ -7767,7 +7887,7 @@ async function processAgent(agent, agentStates) {
   if (agent.status === "active") {
     if (frameworkAdapter.installPlugin) {
       try {
-        const pluginPath = join9(process.cwd(), "packages", "openclaw-plugin-augmented", "src", "index.ts");
+        const pluginPath = join10(process.cwd(), "packages", "openclaw-plugin-augmented", "src", "index.ts");
         if (existsSync5(pluginPath)) {
           frameworkAdapter.installPlugin(agent.code_name, "augmented", pluginPath, {
             agtHost: requireHost(),
@@ -7833,25 +7953,25 @@ async function processAgent(agent, agentStates) {
         }
       }
       try {
-        const { readdirSync: readdirSync5, rmSync: rmSync3 } = await import("fs");
+        const { readdirSync: readdirSync6, rmSync: rmSync3 } = await import("fs");
         const { homedir: homedir6 } = await import("os");
         const frameworkId2 = frameworkAdapter.id;
         const candidateSkillDirs = [
           // Claude Code — framework runtime tree
-          join9(homedir6(), ".augmented", agent.code_name, "skills"),
+          join10(homedir6(), ".augmented", agent.code_name, "skills"),
           // Claude Code — project tree
-          join9(homedir6(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+          join10(homedir6(), ".augmented", agent.code_name, "project", ".claude", "skills"),
           // OpenClaw — framework runtime tree
-          join9(homedir6(), `.openclaw-${agent.code_name}`, "skills"),
+          join10(homedir6(), `.openclaw-${agent.code_name}`, "skills"),
           // Defensive: legacy provision-side path, not currently an
           // install target but cheap to sweep.
-          join9(agentDir, ".claude", "skills")
+          join10(agentDir, ".claude", "skills")
         ];
         const existingDirs = candidateSkillDirs.filter((d) => existsSync5(d));
         const discoveredEntries = /* @__PURE__ */ new Set();
         for (const dir of existingDirs) {
           try {
-            for (const entry of readdirSync5(dir)) {
+            for (const entry of readdirSync6(dir)) {
               if (entry.startsWith("plugin-") || entry.startsWith("integration-")) {
                 discoveredEntries.add(entry);
               }
@@ -7861,7 +7981,7 @@ async function processAgent(agent, agentStates) {
         }
         const removeSkillFolder = (entry, reason) => {
           for (const dir of existingDirs) {
-            const p = join9(dir, entry);
+            const p = join10(dir, entry);
             if (existsSync5(p)) {
               rmSync3(p, { recursive: true, force: true });
             }
@@ -8041,8 +8161,8 @@ async function processAgent(agent, agentStates) {
       const sess = getSessionState(agent.code_name);
       let mcpJsonParsed = null;
       try {
-        const mcpPath = join9(getProjectDir(agent.code_name), ".mcp.json");
-        mcpJsonParsed = JSON.parse(readFileSync9(mcpPath, "utf-8"));
+        const mcpPath = join10(getProjectDir(agent.code_name), ".mcp.json");
+        mcpJsonParsed = JSON.parse(readFileSync10(mcpPath, "utf-8"));
       } catch {
       }
       reapMissingMcpSessions({
@@ -8251,10 +8371,10 @@ async function processAgent(agent, agentStates) {
         lastWorkTriggerAt.set(agent.code_name, triggerTs);
         if (agentFw === "openclaw" && gatewayRunning && gatewayPort) {
           const homeDir = process.env["HOME"] ?? "/tmp";
-          const jobsPath = join9(homeDir, `.openclaw-${agent.code_name}`, "cron", "jobs.json");
+          const jobsPath = join10(homeDir, `.openclaw-${agent.code_name}`, "cron", "jobs.json");
           if (existsSync5(jobsPath)) {
             try {
-              const jobsData = JSON.parse(readFileSync9(jobsPath, "utf-8"));
+              const jobsData = JSON.parse(readFileSync10(jobsPath, "utf-8"));
               const kanbanJob = (jobsData.jobs ?? []).find(
                 (j) => typeof j.name === "string" && j.name.includes("kanban-work")
               );
@@ -8391,7 +8511,7 @@ In progress for ${age} minutes \u2014 auto-failed`).catch(() => {
   if (trackedFiles.length > 0 && existsSync5(agentDir)) {
     const hashes = /* @__PURE__ */ new Map();
     for (const file of trackedFiles) {
-      const h = hashFile(join9(agentDir, file));
+      const h = hashFile(join10(agentDir, file));
       if (h) hashes.set(file, h);
     }
     agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -8425,19 +8545,19 @@ function cleanupStaleSessions(codeName) {
   lastCleanupAt.set(codeName, Date.now());
   const homeDir = process.env["HOME"] ?? "/tmp";
   for (const agentDir of ["main", codeName]) {
-    const sessionsDir = join9(homeDir, `.openclaw-${codeName}`, "agents", agentDir, "sessions");
+    const sessionsDir = join10(homeDir, `.openclaw-${codeName}`, "agents", agentDir, "sessions");
     cleanupCronSessions(sessionsDir, CRON_SESSION_KEEP_COUNT);
   }
-  const cronRunsDir = join9(homeDir, `.openclaw-${codeName}`, "cron", "runs");
+  const cronRunsDir = join10(homeDir, `.openclaw-${codeName}`, "cron", "runs");
   cleanupOldFiles(cronRunsDir, CRON_RUN_RETENTION_DAYS, ".jsonl");
-  const cronJobsPath = join9(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
+  const cronJobsPath = join10(homeDir, `.openclaw-${codeName}`, "cron", "jobs.json");
   clearStaleCronRunState(cronJobsPath);
 }
 function cleanupCronSessions(sessionsDir, keepCount) {
-  const indexPath = join9(sessionsDir, "sessions.json");
+  const indexPath = join10(sessionsDir, "sessions.json");
   if (!existsSync5(indexPath)) return;
   try {
-    const raw = readFileSync9(indexPath, "utf-8");
+    const raw = readFileSync10(indexPath, "utf-8");
     const index = JSON.parse(raw);
     const cronRunKeys = Object.keys(index).filter((k) => k.includes(":cron:") && k.includes(":run:")).map((k) => ({
       key: k,
@@ -8450,7 +8570,7 @@ function cleanupCronSessions(sessionsDir, keepCount) {
     for (const entry of toDelete) {
       delete index[entry.key];
       if (entry.sessionId) {
-        const sessionFile = join9(sessionsDir, `${entry.sessionId}.jsonl`);
+        const sessionFile = join10(sessionsDir, `${entry.sessionId}.jsonl`);
         try {
           if (existsSync5(sessionFile)) {
             unlinkSync(sessionFile);
@@ -8472,7 +8592,7 @@ function cleanupCronSessions(sessionsDir, keepCount) {
         delete index[parentKey];
         if (parentSessionId) {
           try {
-            const f = join9(sessionsDir, `${parentSessionId}.jsonl`);
+            const f = join10(sessionsDir, `${parentSessionId}.jsonl`);
             if (existsSync5(f)) {
               unlinkSync(f);
               deletedFiles++;
@@ -8493,7 +8613,7 @@ var STALE_RUN_TIMEOUT_MS = 5 * 6e4;
 function clearStaleCronRunState(jobsPath) {
   if (!existsSync5(jobsPath)) return;
   try {
-    const raw = readFileSync9(jobsPath, "utf-8");
+    const raw = readFileSync10(jobsPath, "utf-8");
     const data = JSON.parse(raw);
     const jobs = data.jobs ?? data;
     if (!Array.isArray(jobs)) return;
@@ -8528,11 +8648,11 @@ function cleanupOldFiles(dir, maxAgeDays, ext) {
   const cutoff = Date.now() - maxAgeDays * 24 * 60 * 60 * 1e3;
   let removed = 0;
   try {
-    for (const f of readdirSync4(dir)) {
+    for (const f of readdirSync5(dir)) {
       if (!f.endsWith(ext)) continue;
-      const fullPath = join9(dir, f);
+      const fullPath = join10(dir, f);
       try {
-        const st = statSync3(fullPath);
+        const st = statSync4(fullPath);
         if (st.mtimeMs < cutoff) {
           unlinkSync(fullPath);
           removed++;
@@ -8570,7 +8690,7 @@ var inFlightClaudeTasks = /* @__PURE__ */ new Set();
 var claudeTaskConcurrency = /* @__PURE__ */ new Map();
 var MAX_CLAUDE_CONCURRENCY = 2;
 function claudePidFilePath() {
-  return join9(homedir5(), ".augmented", "manager-claude-pids.json");
+  return join10(homedir5(), ".augmented", "manager-claude-pids.json");
 }
 var inFlightClaudePids = /* @__PURE__ */ new Map();
 function registerClaudeSpawn(record) {
@@ -8910,7 +9030,7 @@ async function fireScheduledTaskViaKanban(codeName, agentId, task, prompt) {
 }
 async function executeAndProcessClaudeTask(codeName, agentId, task, prompt) {
   const projectDir = getProjectDir2(codeName);
-  const mcpConfigPath = join9(projectDir, ".mcp.json");
+  const mcpConfigPath = join10(projectDir, ".mcp.json");
   let runId = null;
   let kanbanItemId = null;
   let taskResult;
@@ -8918,11 +9038,11 @@ async function executeAndProcessClaudeTask(codeName, agentId, task, prompt) {
   const priorRuns = await fetchPriorScheduledRuns(agentId, task.taskId);
   prompt = wrapScheduledTaskPrompt(prompt, { priorRuns });
   try {
-    const claudeMdPath = join9(projectDir, "CLAUDE.md");
+    const claudeMdPath = join10(projectDir, "CLAUDE.md");
     const serverNames = [];
     if (existsSync5(mcpConfigPath)) {
       try {
-        const d = JSON.parse(readFileSync9(mcpConfigPath, "utf-8"));
+        const d = JSON.parse(readFileSync10(mcpConfigPath, "utf-8"));
         if (d.mcpServers) serverNames.push(...Object.keys(d.mcpServers));
       } catch {
       }
@@ -8945,10 +9065,10 @@ async function executeAndProcessClaudeTask(codeName, agentId, task, prompt) {
       claudeArgs.push("--system-prompt-file", claudeMdPath);
     }
     const childEnv = { ...process.env };
-    const envIntPath = join9(projectDir, ".env.integrations");
+    const envIntPath = join10(projectDir, ".env.integrations");
     if (existsSync5(envIntPath)) {
       try {
-        Object.assign(childEnv, parseEnvIntegrations(readFileSync9(envIntPath, "utf-8")));
+        Object.assign(childEnv, parseEnvIntegrations(readFileSync10(envIntPath, "utf-8")));
       } catch {
       }
     }
@@ -9120,8 +9240,8 @@ var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
 async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   const codeName = agent.code_name;
   const projectDir = getProjectDir(codeName);
-  const mcpConfigPath = join9(projectDir, ".mcp.json");
-  const claudeMdPath = join9(projectDir, "CLAUDE.md");
+  const mcpConfigPath = join10(projectDir, ".mcp.json");
+  const claudeMdPath = join10(projectDir, "CLAUDE.md");
   if (restartBreaker.isTripped(codeName)) {
     const trip = restartBreaker.getTrip(codeName);
     return {
@@ -9755,11 +9875,11 @@ ${escapeXml(msg.content)}
       log(`[direct-chat] One-shot spawn for '${agent.codeName}' (msg=${msg.id}; host in-flight=${directChatSpawnGate.hostInFlight}, queued=${directChatSpawnGate.queuedCount})`);
       const { getProjectDir: ccProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
       const projDir = ccProjectDir(agent.codeName);
-      const mcpConfigPath = join9(projDir, ".mcp.json");
+      const mcpConfigPath = join10(projDir, ".mcp.json");
       const serverNames = [];
       if (existsSync5(mcpConfigPath)) {
         try {
-          const d = JSON.parse(readFileSync9(mcpConfigPath, "utf-8"));
+          const d = JSON.parse(readFileSync10(mcpConfigPath, "utf-8"));
           if (d.mcpServers) serverNames.push(...Object.keys(d.mcpServers));
         } catch {
         }
@@ -9778,15 +9898,15 @@ ${escapeXml(msg.content)}
         "--allowedTools",
         allowedTools
       ];
-      const chatClaudeMd = join9(projDir, "CLAUDE.md");
+      const chatClaudeMd = join10(projDir, "CLAUDE.md");
       if (existsSync5(chatClaudeMd)) {
         chatArgs.push("--system-prompt-file", chatClaudeMd);
       }
-      const envIntPath = join9(projDir, ".env.integrations");
+      const envIntPath = join10(projDir, ".env.integrations");
       const childEnv = { ...process.env };
       if (existsSync5(envIntPath)) {
         try {
-          Object.assign(childEnv, parseEnvIntegrations(readFileSync9(envIntPath, "utf-8")));
+          Object.assign(childEnv, parseEnvIntegrations(readFileSync10(envIntPath, "utf-8")));
         } catch {
         }
       }
@@ -10164,12 +10284,12 @@ function getBuiltInSkillContent(skillId) {
   if (builtInSkillCache.has(skillId)) return builtInSkillCache.get(skillId);
   try {
     const candidates = [
-      join9(process.cwd(), "skills", skillId, "SKILL.md"),
-      join9(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "skills", skillId, "SKILL.md")
+      join10(process.cwd(), "skills", skillId, "SKILL.md"),
+      join10(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "skills", skillId, "SKILL.md")
     ];
     for (const candidate of candidates) {
       if (existsSync5(candidate)) {
-        const content = readFileSync9(candidate, "utf-8");
+        const content = readFileSync10(candidate, "utf-8");
         const files = [{ relativePath: "SKILL.md", content }];
         builtInSkillCache.set(skillId, files);
         return files;
@@ -10824,7 +10944,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-G4MYOINJ.js");
+  } = await import("../claude-pair-runtime-ZEFIYDUH.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -11134,8 +11254,8 @@ function parseMemoryFile(raw, fallbackName) {
   };
 }
 async function syncMemories(agent, configDir, log2) {
-  const projectDir = join9(configDir, agent.code_name, "project");
-  const memoryDir = join9(projectDir, "memory");
+  const projectDir = join10(configDir, agent.code_name, "project");
+  const memoryDir = join10(projectDir, "memory");
   const isFreshSync = pendingFreshMemorySync.has(agent.agent_id);
   if (isFreshSync) {
     log2(`[memory-sync] Fresh-sync requested for '${agent.code_name}' \u2014 pulling DB first`);
@@ -11150,10 +11270,10 @@ async function syncMemories(agent, configDir, log2) {
     const prevHashes = memoryFileHashes.get(agent.agent_id) ?? /* @__PURE__ */ new Map();
     const currentHashes = /* @__PURE__ */ new Map();
     const changedMemories = [];
-    for (const file of readdirSync4(memoryDir)) {
+    for (const file of readdirSync5(memoryDir)) {
       if (!file.endsWith(".md")) continue;
       try {
-        const raw = readFileSync9(join9(memoryDir, file), "utf-8");
+        const raw = readFileSync10(join10(memoryDir, file), "utf-8");
         const fileHash = createHash3("sha256").update(raw).digest("hex").slice(0, 16);
         currentHashes.set(file, fileHash);
         if (prevHashes.get(file) === fileHash) continue;
@@ -11178,7 +11298,7 @@ async function syncMemories(agent, configDir, log2) {
       } catch (err) {
         for (const mem of changedMemories) {
           for (const [file] of currentHashes) {
-            const parsed = parseMemoryFile(readFileSync9(join9(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
+            const parsed = parseMemoryFile(readFileSync10(join10(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
             if (parsed?.name === mem.name) currentHashes.delete(file);
           }
         }
@@ -11191,7 +11311,7 @@ async function syncMemories(agent, configDir, log2) {
   }
 }
 async function downloadMemories(agent, memoryDir, log2, { force }) {
-  const localFiles = existsSync5(memoryDir) ? readdirSync4(memoryDir).filter((f) => f.endsWith(".md")).sort() : [];
+  const localFiles = existsSync5(memoryDir) ? readdirSync5(memoryDir).filter((f) => f.endsWith(".md")).sort() : [];
   const localListHash = createHash3("sha256").update(localFiles.join(",")).digest("hex").slice(0, 16);
   const prevLocalHash = lastLocalFileHash.get(agent.agent_id);
   const prevDownload = lastDownloadHash.get(agent.agent_id);
@@ -11213,7 +11333,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
         const mem = dbMemories.memories[i];
         const rawSlug = mem.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "").slice(0, 60);
         const slug = rawSlug || `memory-${i}`;
-        const filePath = join9(memoryDir, `${slug}.md`);
+        const filePath = join10(memoryDir, `${slug}.md`);
         const desired = `---
 name: ${JSON.stringify(mem.name)}
 type: ${mem.type}
@@ -11225,7 +11345,7 @@ ${mem.content}
         if (existsSync5(filePath)) {
           let existing = "";
           try {
-            existing = readFileSync9(filePath, "utf-8");
+            existing = readFileSync10(filePath, "utf-8");
           } catch {
           }
           if (existing === desired) continue;
@@ -11237,7 +11357,7 @@ ${mem.content}
         }
       }
       if (written > 0 || overwritten > 0) {
-        const updatedFiles = readdirSync4(memoryDir).filter((f) => f.endsWith(".md")).sort();
+        const updatedFiles = readdirSync5(memoryDir).filter((f) => f.endsWith(".md")).sort();
         lastLocalFileHash.set(agent.agent_id, createHash3("sha256").update(updatedFiles.join(",")).digest("hex").slice(0, 16));
         log2(`Memory download for '${agent.code_name}': wrote ${written} new, overwrote ${overwritten} stale`);
       }
@@ -11480,7 +11600,7 @@ function startManager(opts) {
   try {
     const stateFile = getStateFile();
     if (existsSync5(stateFile)) {
-      const raw = readFileSync9(stateFile, "utf-8");
+      const raw = readFileSync10(stateFile, "utf-8");
       const parsed = JSON.parse(raw);
       if (Array.isArray(parsed.agents)) {
         state6.agents = parsed.agents;
@@ -11501,7 +11621,7 @@ function startManager(opts) {
     log(`[startup] state rehydration failed (continuing with empty state): ${err.message}`);
   }
   log(
-    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join9(homedir5(), ".augmented", "manager.log")}`
+    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join10(homedir5(), ".augmented", "manager.log")}`
   );
   deployMcpAssets();
   reapOrphanChannelMcps({ log });
@@ -11522,7 +11642,7 @@ async function reapOrphanedClaudePids() {
   const looksLikeClaude = (pid) => {
     if (process.platform !== "linux") return true;
     try {
-      const comm = readFileSync9(`/proc/${pid}/comm`, "utf-8").trim().toLowerCase();
+      const comm = readFileSync10(`/proc/${pid}/comm`, "utf-8").trim().toLowerCase();
       return comm.includes("claude");
     } catch {
       return false;
@@ -11632,14 +11752,14 @@ function restartRunningChannelMcps(basenames) {
   }
 }
 function deployMcpAssets() {
-  const targetDir = join9(homedir5(), ".augmented", "_mcp");
+  const targetDir = join10(homedir5(), ".augmented", "_mcp");
   mkdirSync3(targetDir, { recursive: true });
   const moduleDir = dirname2(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
-    const candidate = join9(dir, "dist", "mcp");
-    if (existsSync5(join9(candidate, "index.js"))) {
+    const candidate = join10(dir, "dist", "mcp");
+    if (existsSync5(join10(candidate, "index.js"))) {
       mcpSourceDir = candidate;
       break;
     }
@@ -11655,7 +11775,7 @@ function deployMcpAssets() {
   const fileHash = (p) => {
     try {
       if (!existsSync5(p)) return null;
-      return createHash3("sha256").update(readFileSync9(p)).digest("hex");
+      return createHash3("sha256").update(readFileSync10(p)).digest("hex");
     } catch {
       return null;
     }
@@ -11682,8 +11802,8 @@ function deployMcpAssets() {
     // natural session restart.
     "augmented-admin.js"
   ]) {
-    const src = join9(mcpSourceDir, file);
-    const dst = join9(targetDir, file);
+    const src = join10(mcpSourceDir, file);
+    const dst = join10(targetDir, file);
     if (!existsSync5(src)) continue;
     const before = fileHash(dst);
     try {
@@ -11701,16 +11821,16 @@ function deployMcpAssets() {
     log(`[manager] Bundle(s) updated: ${changedBasenames.join(", ")} \u2014 signalling running instances to restart`);
     restartRunningChannelMcps(changedBasenames);
   }
-  const localMcpPath = join9(targetDir, "index.js");
+  const localMcpPath = join10(targetDir, "index.js");
   try {
-    const agentsDir = join9(homedir5(), ".augmented", "agents");
+    const agentsDir = join10(homedir5(), ".augmented", "agents");
     if (existsSync5(agentsDir)) {
-      for (const entry of readdirSync4(agentsDir, { withFileTypes: true })) {
+      for (const entry of readdirSync5(agentsDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         for (const subdir of ["provision", "project"]) {
-          const mcpJsonPath = join9(agentsDir, entry.name, subdir, ".mcp.json");
+          const mcpJsonPath = join10(agentsDir, entry.name, subdir, ".mcp.json");
           try {
-            const raw = readFileSync9(mcpJsonPath, "utf-8");
+            const raw = readFileSync10(mcpJsonPath, "utf-8");
             if (!raw.includes("@integrity-labs/augmented-mcp")) continue;
             const mcpConfig = JSON.parse(raw);
             const augServer = mcpConfig.mcpServers?.["augmented"];