@integrity-labs/agt-cli 0.27.8-test.9 → 0.27.9-test.11

package/dist/bin/agt.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   ApiError,
+  LITERAL_SECRET_PATTERNS,
   PROD_AGT_HOST,
   api,
   error,
@@ -27,7 +28,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-NFBRJGNU.js";
+} from "../chunk-N2EBL4PZ.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -53,11 +54,11 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-HT6EETEL.js";
+} from "../chunk-45I2X4M7.js";
 
 // src/bin/agt.ts
-import { join as join15 } from "path";
-import { homedir as homedir6 } from "os";
+import { join as join20 } from "path";
+import { homedir as homedir9 } from "os";
 import { Command } from "commander";
 
 // src/commands/whoami.ts
@@ -551,11 +552,11 @@ async function lintCommand(path) {
       process.exitCode = 1;
       return;
     }
-    const { readdirSync: readdirSync3, statSync: statSync2 } = await import("fs");
-    const entries = readdirSync3(augmentedDir);
+    const { readdirSync: readdirSync7, statSync: statSync5 } = await import("fs");
+    const entries = readdirSync7(augmentedDir);
     for (const entry of entries) {
       const entryPath = join2(augmentedDir, entry);
-      if (statSync2(entryPath).isDirectory()) {
+      if (statSync5(entryPath).isDirectory()) {
         dirs.push({ name: entry, dir: entryPath });
       }
     }
@@ -828,7 +829,11 @@ async function channelSlackSetupCommand(agentCodeName, options) {
     const manifest = generateSlackAppManifest({
       agent_name: agent2.display_name ?? agentCodeName,
       description: `Augmented-managed Slack bot for agent ${agentCodeName}`,
-      scopes: selectedScopes
+      scopes: selectedScopes,
+      // ENG-6044: per-agent slash commands carry the code-name suffix.
+      // No-op until a slash_command_url is supplied, but keeps this
+      // manifest consistent with the API-generated ones.
+      agent_code_name: agent2.code_name ?? agentCodeName
     });
     const manifestObj = serializeManifestForSlackCli(manifest);
     const manifestJson = JSON.stringify(manifestObj, null, 2);
@@ -1435,6 +1440,23 @@ async function provisionCommand(codeName, options) {
     };
   }
   const resolvedChannels = resolveChannels(agentChannelPolicy, orgChannelPolicy);
+  spinner.text = "Fetching integrations\u2026";
+  const agentId = agentData.agent_id;
+  let integrations = [];
+  let integrationsError = null;
+  try {
+    const integrationsData = await api.post("/host/agent-integrations", { agent_id: agentId });
+    integrations = integrationsData.integrations ?? [];
+  } catch (err) {
+    integrationsError = err.message;
+    if (!json) {
+      spinner.stop();
+      warn(
+        `Could not fetch integrations: ${integrationsError}. .mcp.json may be missing integration servers.`
+      );
+      spinner.start("Provisioning\u2026");
+    }
+  }
   const frameworkId = agentData.framework ?? "openclaw";
   const adapter = getFramework(frameworkId);
   spinner.text = `Building ${adapter.label} config\u2026`;
@@ -1445,6 +1467,7 @@ async function provisionCommand(codeName, options) {
     toolsFrontmatter,
     toolsContent,
     resolvedChannels,
+    integrations,
     deploymentTarget: target,
     gatewayPort: 9e3
   };
@@ -1478,6 +1501,8 @@ async function provisionCommand(codeName, options) {
         charter_hash: provisionOutput.charterHash,
         tools_hash: provisionOutput.toolsHash,
         channels: resolvedChannels.length,
+        integrations: integrations.length,
+        integrations_error: integrationsError,
         artifacts: provisionOutput.artifacts.map((a) => ({
           path: a.relativePath,
           size: a.content.length
@@ -1534,6 +1559,8 @@ async function provisionCommand(codeName, options) {
       charter_hash: provisionOutput.charterHash,
       tools_hash: provisionOutput.toolsHash,
       channels: resolvedChannels.length,
+      integrations: integrations.length,
+      integrations_error: integrationsError,
       artifacts: provisionOutput.artifacts.map((a) => a.relativePath)
     });
     return;
@@ -1546,6 +1573,7 @@ async function provisionCommand(codeName, options) {
   info(`CHARTER hash:   ${provisionOutput.charterHash.slice(0, 12)}\u2026`);
   info(`TOOLS hash:  ${provisionOutput.toolsHash.slice(0, 12)}\u2026`);
   info(`Channels:    ${resolvedChannels.length} active`);
+  info(`Integrations: ${integrations.length}${integrationsError ? " (fetch failed)" : ""}`);
   info(`Artifacts:   ${provisionOutput.artifacts.map((a) => a.relativePath).join(", ")}`);
   console.log();
   info("Next steps:");
@@ -1558,7 +1586,7 @@ import chalk10 from "chalk";
 import ora10 from "ora";
 import { spawn } from "child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname3, join as join10 } from "path";
+import { delimiter, dirname as dirname3, join as join10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/impersonate-flag.ts
@@ -1591,10 +1619,12 @@ production.
 }
 
 // src/lib/impersonate-state.ts
+import { createHash } from "crypto";
 import {
   chmodSync,
   existsSync as existsSync2,
   mkdirSync as mkdirSync4,
+  readdirSync,
   readFileSync as readFileSync2,
   renameSync,
   rmSync,
@@ -1605,6 +1635,12 @@ import { join as join6 } from "path";
 var IMPERSONATE_ROOT = join6(homedir(), ".augmented-impersonate");
 var ACTIVE_DIR = join6(IMPERSONATE_ROOT, "active");
 var ACTIVE_MANIFEST_PATH = join6(ACTIVE_DIR, "manifest.json");
+var SESSION_FILE_PREFIX = "session-";
+var SESSION_FILE_SUFFIX = ".json";
+function sessionManifestPath(projectCwd) {
+  const hash = createHash("sha256").update(projectCwd).digest("hex").slice(0, 16);
+  return join6(ACTIVE_DIR, `${SESSION_FILE_PREFIX}${hash}${SESSION_FILE_SUFFIX}`);
+}
 var CODE_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function assertValidCodeName(codeName) {
   if (!CODE_NAME_RE.test(codeName)) {
@@ -1628,36 +1664,84 @@ function ensureImpersonateWorkdir(codeName) {
   mkdirSync4(dir, { recursive: true });
   return dir;
 }
-function readActiveManifest() {
-  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return null;
+function validateManifest(parsed) {
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const m = parsed;
+  const backupsOk = typeof m.backups === "object" && m.backups !== null && Object.values(m.backups).every(
+    (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
+  );
+  if (typeof m.code_name !== "string" || typeof m.agent_id !== "string" || typeof m.team_id !== "string" || typeof m.token !== "string" || typeof m.expires_at !== "number" || typeof m.session_id !== "string" || typeof m.minted_at !== "string" || typeof m.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
+  // the right environment. Required, not optional, because writing the
+  // wrong host on an existing session would point exit at a server
+  // that has no record of the session — silently misleading.
+  typeof m.host !== "string" || m.host.length === 0 || !backupsOk) {
+    return null;
+  }
+  return parsed;
+}
+function readManifestFile(path) {
+  if (!existsSync2(path)) return null;
   try {
-    const raw = readFileSync2(ACTIVE_MANIFEST_PATH, "utf-8");
-    const parsed = JSON.parse(raw);
-    const backupsOk = typeof parsed.backups === "object" && parsed.backups !== null && Object.values(parsed.backups).every(
-      (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
-    );
-    if (typeof parsed.code_name !== "string" || typeof parsed.agent_id !== "string" || typeof parsed.team_id !== "string" || typeof parsed.token !== "string" || typeof parsed.expires_at !== "number" || typeof parsed.session_id !== "string" || typeof parsed.minted_at !== "string" || typeof parsed.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
-    // the right environment. Required, not optional, because writing the
-    // wrong host on an existing session would point exit at a server
-    // that has no record of the session — silently misleading.
-    typeof parsed.host !== "string" || parsed.host.length === 0 || !backupsOk) {
-      return null;
-    }
-    return parsed;
+    return validateManifest(JSON.parse(readFileSync2(path, "utf-8")));
   } catch {
     return null;
   }
 }
+function migrateLegacyManifest() {
+  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return;
+  const legacy = readManifestFile(ACTIVE_MANIFEST_PATH);
+  try {
+    if (!legacy) {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+      return;
+    }
+    const target = sessionManifestPath(legacy.project_cwd);
+    if (!existsSync2(target)) {
+      mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
+      renameSync(ACTIVE_MANIFEST_PATH, target);
+      chmodSync(target, 384);
+    } else {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+    }
+  } catch {
+  }
+}
+function readActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  return readManifestFile(sessionManifestPath(projectCwd));
+}
+function listActiveManifests() {
+  migrateLegacyManifest();
+  let entries;
+  try {
+    entries = readdirSync(ACTIVE_DIR);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const entry of entries) {
+    if (!entry.startsWith(SESSION_FILE_PREFIX) || !entry.endsWith(SESSION_FILE_SUFFIX)) {
+      continue;
+    }
+    const manifest = readManifestFile(join6(ACTIVE_DIR, entry));
+    if (manifest) out.push(manifest);
+  }
+  return out;
+}
 function writeActiveManifest(manifest) {
+  migrateLegacyManifest();
   mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
-  const tmp = ACTIVE_MANIFEST_PATH + ".tmp";
+  const path = sessionManifestPath(manifest.project_cwd);
+  const tmp = path + ".tmp";
   writeFileSync4(tmp, JSON.stringify(manifest, null, 2), { mode: 384 });
   chmodSync(tmp, 384);
-  renameSync(tmp, ACTIVE_MANIFEST_PATH);
+  renameSync(tmp, path);
 }
-function clearActiveManifest() {
-  if (existsSync2(ACTIVE_MANIFEST_PATH)) {
-    rmSync(ACTIVE_MANIFEST_PATH);
+function clearActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  const path = sessionManifestPath(projectCwd);
+  if (existsSync2(path)) {
+    rmSync(path);
   }
 }
 function isExpired(manifest, now = Date.now()) {
@@ -1757,7 +1841,7 @@ import {
   copyFileSync,
   existsSync as existsSync4,
   mkdirSync as mkdirSync5,
-  readdirSync,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync3,
   renameSync as renameSync3,
   rmdirSync,
@@ -1815,7 +1899,7 @@ function unregisterIntroduceHook(backup) {
   if (created_claude_dir) {
     const claudeDir = dirOf(settings_path);
     try {
-      if (existsSync4(claudeDir) && readdirSync(claudeDir).length === 0) {
+      if (existsSync4(claudeDir) && readdirSync2(claudeDir).length === 0) {
         rmdirSync(claudeDir);
       }
     } catch {
@@ -1851,7 +1935,7 @@ import {
   copyFileSync as copyFileSync2,
   existsSync as existsSync5,
   mkdirSync as mkdirSync6,
-  readdirSync as readdirSync2,
+  readdirSync as readdirSync3,
   readFileSync as readFileSync4,
   renameSync as renameSync4,
   rmdirSync as rmdirSync2,
@@ -1921,7 +2005,7 @@ function unregisterStatusLine(backup) {
   if (created_claude_dir) {
     const claudeDir = dirname2(settings_path);
     try {
-      if (existsSync5(claudeDir) && readdirSync2(claudeDir).length === 0) {
+      if (existsSync5(claudeDir) && readdirSync3(claudeDir).length === 0) {
         rmdirSync2(claudeDir);
       }
     } catch {
@@ -2009,6 +2093,13 @@ function buildIntroduction(input4) {
 
 // src/lib/impersonate-mcp-rewrite.ts
 var SERVER_HOME_MCP_PATH_RE = /^\/home\/[^/]+\/\.augmented\/_mcp\/([^/]+)$/;
+var CHANNEL_SERVER_KEYS = /* @__PURE__ */ new Set([
+  "slack",
+  "telegram",
+  "msteams",
+  "direct-chat",
+  "discord"
+]);
 function rewriteMcpJsonForImpersonation(mcpJson, ctx) {
   const parsed = JSON.parse(mcpJson);
   if (!isPlainObject(parsed)) {
@@ -2024,12 +2115,12 @@ function rewriteMcpJsonForImpersonation(mcpJson, ctx) {
   }
   const rewrittenServers = {};
   for (const [serverName, raw] of Object.entries(servers)) {
-    rewrittenServers[serverName] = rewriteServerEntry(raw, ctx);
+    rewrittenServers[serverName] = rewriteServerEntry(serverName, raw, ctx);
   }
   const out = { ...parsed, mcpServers: rewrittenServers };
   return JSON.stringify(out, null, 2);
 }
-function rewriteServerEntry(raw, ctx) {
+function rewriteServerEntry(serverName, raw, ctx) {
   if (!isPlainObject(raw)) return raw;
   let args = raw["args"];
   if (Array.isArray(args)) {
@@ -2043,14 +2134,26 @@ function rewriteServerEntry(raw, ctx) {
   const env = isPlainObject(raw["env"]) ? { ...raw["env"] } : {};
   fillIfEmpty(env, "AGT_HOST", ctx.apiHost);
   fillIfEmpty(env, "AGT_API_KEY", ctx.impersonationToken);
+  if (ctx.agentSessionToken) {
+    fillIfEmpty(env, "AGT_AGENT_SESSION_TOKEN", ctx.agentSessionToken);
+  }
   fillIfEmpty(env, "HOME", ctx.operatorHome);
   fillIfEmpty(env, "AGT_AGENT_ID", ctx.agentId);
   fillIfEmpty(env, "AGT_AGENT_CODE_NAME", ctx.agentCodeName);
+  if ("PATH" in env) {
+    env["PATH"] = ctx.operatorPath;
+  }
+  if (env["AGT_RUN_ID"] === "${AGT_RUN_ID}") {
+    delete env["AGT_RUN_ID"];
+  }
+  if (CHANNEL_SERVER_KEYS.has(serverName)) {
+    env["AGT_ACT_AS_AGENT_ID"] = ctx.agentId;
+  }
   return { ...raw, args, env };
 }
 function fillIfEmpty(env, key, value) {
   const current = env[key];
-  if (typeof current !== "string" || current.length === 0) {
+  if (typeof current !== "string" || current.length === 0 || current === `\${${key}}`) {
     env[key] = value;
   }
 }
@@ -2073,13 +2176,15 @@ async function impersonateConnectCommand(token, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const existing = readActiveManifest();
-  if (existing) {
-    const msg = `An impersonation session is already active (${existing.code_name}). Run \`agt impersonate exit\` first.`;
-    if (json) jsonOutput({ ok: false, error: msg });
-    else error(msg);
-    process.exitCode = 1;
-    return;
+  if (!options.workdir) {
+    const existing = readActiveManifest(process.cwd());
+    if (existing) {
+      const msg = `An impersonation session is already active in this directory (${existing.code_name}). Run \`agt impersonate exit\` here first, or connect from a different directory.`;
+      if (json) jsonOutput({ ok: false, error: msg });
+      else error(msg);
+      process.exitCode = 1;
+      return;
+    }
   }
   if (!options.workdir) {
     const workTreeRoot = findGitWorkTreeRoot(process.cwd());
@@ -2129,8 +2234,10 @@ async function impersonateConnectCommand(token, options = {}) {
     join10(personaDir, ".mcp.json"),
     rewriteMcpJsonForImpersonation(bundle.artifacts[".mcp.json"], {
       operatorHome: process.env.HOME ?? "",
+      operatorPath: resolveOperatorPath(),
       cliMcpBundleDir: resolveCliMcpBundleDir(),
       impersonationToken: bundle.token,
+      agentSessionToken: bundle.agent_session_token ?? null,
       apiHost: host2,
       agentId: bundle.agent.agent_id,
       agentCodeName: bundle.agent.code_name
@@ -2138,6 +2245,15 @@ async function impersonateConnectCommand(token, options = {}) {
   );
   spinner.text = "Swapping persona files\u2026";
   const projectCwd = options.workdir ? ensureImpersonateWorkdir(bundle.agent.code_name) : process.cwd();
+  const existingForTarget = readActiveManifest(projectCwd);
+  if (existingForTarget) {
+    spinner.fail("Impersonation already active for this agent.");
+    const msg = `An impersonation session is already active in ${projectCwd} (${existingForTarget.code_name}). Run \`agt impersonate exit\` there first.`;
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
   const backups = {};
   const swapped = [];
   let hookBackup;
@@ -2259,33 +2375,8 @@ async function impersonateConnectCommand(token, options = {}) {
   console.log();
   info("When done: `agt impersonate exit` (still active).");
 }
-async function impersonateCurrentCommand() {
-  requireImpersonateEnabled();
-  const json = isJsonMode();
-  const manifest = readActiveManifest();
-  if (!manifest) {
-    if (json) jsonOutput({ ok: true, active: null });
-    else info("No active impersonation.");
-    return;
-  }
+function printManifestText(manifest) {
   const expired = isExpired(manifest);
-  if (json) {
-    jsonOutput({
-      ok: true,
-      active: {
-        code_name: manifest.code_name,
-        agent_id: manifest.agent_id,
-        team_id: manifest.team_id,
-        session_id: manifest.session_id,
-        minted_at: manifest.minted_at,
-        expires_at: manifest.expires_at,
-        expired,
-        project_cwd: manifest.project_cwd,
-        host: manifest.host
-      }
-    });
-    return;
-  }
   console.log();
   console.log(chalk10.bold(`Impersonating: ${manifest.code_name}`));
   console.log(`  Agent ID:    ${chalk10.dim(manifest.agent_id)}`);
@@ -2299,15 +2390,92 @@ async function impersonateCurrentCommand() {
   console.log(`  Host:        ${chalk10.dim(manifest.host)}`);
   console.log();
 }
-async function impersonateExitCommand() {
+function manifestToJson(manifest) {
+  return {
+    code_name: manifest.code_name,
+    agent_id: manifest.agent_id,
+    team_id: manifest.team_id,
+    session_id: manifest.session_id,
+    minted_at: manifest.minted_at,
+    expires_at: manifest.expires_at,
+    expired: isExpired(manifest),
+    project_cwd: manifest.project_cwd,
+    host: manifest.host
+  };
+}
+async function impersonateCurrentCommand(opts = {}) {
+  requireImpersonateEnabled();
+  const json = isJsonMode();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: manifests.map(manifestToJson) });
+      return;
+    }
+    if (manifests.length === 0) {
+      info("No active impersonations.");
+      return;
+    }
+    console.log();
+    console.log(chalk10.bold(`Active impersonations (${manifests.length}):`));
+    for (const m of manifests) printManifestText(m);
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
+  if (!manifest) {
+    const others = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: null, others_active: others.length });
+      return;
+    }
+    if (others.length > 0) {
+      info(
+        `No active impersonation in this directory \u2014 ${others.length} active elsewhere. Run \`agt impersonate current --all\` to list them.`
+      );
+    } else {
+      info("No active impersonation.");
+    }
+    return;
+  }
+  if (json) {
+    jsonOutput({ ok: true, active: manifestToJson(manifest) });
+    return;
+  }
+  printManifestText(manifest);
+}
+async function impersonateExitCommand(opts = {}) {
   requireImpersonateEnabled();
   const json = isJsonMode();
-  const manifest = readActiveManifest();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (manifests.length === 0) {
+      if (json) jsonOutput({ ok: true, was_active: false, exited: [] });
+      else info("No active impersonation to exit.");
+      return;
+    }
+    const exited = [];
+    for (const manifest2 of manifests) {
+      await performImpersonateExit(manifest2, { json, silent: true });
+      exited.push(manifest2.code_name);
+    }
+    if (json) {
+      jsonOutput({ ok: true, was_active: true, exited });
+    } else {
+      success(`Exited ${exited.length} impersonation session(s): ${exited.join(", ")}`);
+      info("Restart Claude Code to pick up your original persona.");
+    }
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
   if (!manifest) {
     if (json) jsonOutput({ ok: true, was_active: false });
     else info("No active impersonation to exit.");
     return;
   }
+  await performImpersonateExit(manifest, { json, silent: false });
+}
+async function performImpersonateExit(manifest, opts) {
+  const { json, silent } = opts;
   let stopOk = true;
   let stopDetail = null;
   try {
@@ -2364,7 +2532,8 @@ async function impersonateExitCommand() {
       if (!json) error(`Failed to remove introduce hook: ${msg}`);
     }
   }
-  clearActiveManifest();
+  clearActiveManifest(manifest.project_cwd);
+  if (silent) return;
   if (json) {
     jsonOutput({
       ok: true,
@@ -2385,9 +2554,32 @@ async function impersonateExitCommand() {
   }
   info("Restart Claude Code to pick up your original persona.");
 }
+async function autoExitExpiredImpersonation() {
+  let manifests;
+  try {
+    manifests = listActiveManifests();
+  } catch {
+    return;
+  }
+  const expired = manifests.filter((m) => isExpired(m));
+  if (expired.length === 0) return;
+  for (const manifest of expired) {
+    try {
+      if (!isJsonMode()) {
+        console.error(
+          chalk10.cyan(
+            `\u2139 Impersonation session for ${manifest.code_name} expired \u2014 auto-exiting and restoring your files.`
+          )
+        );
+      }
+      await performImpersonateExit(manifest, { json: isJsonMode(), silent: true });
+    } catch {
+    }
+  }
+}
 async function impersonateIntroduceCommand() {
   try {
-    const manifest = readActiveManifest();
+    const manifest = readActiveManifest(process.cwd());
     if (!manifest || isExpired(manifest)) return;
     const cwd = manifest.project_cwd;
     const identity = readClaudeMdIdentity(join10(cwd, "CLAUDE.md"));
@@ -2428,6 +2620,14 @@ function resolveCliMcpBundleDir() {
   }
   return candidates[candidates.length - 1];
 }
+function resolveOperatorPath(execPath = process.execPath, inheritedPath = process.env.PATH ?? "") {
+  const nodeBinDir = dirname3(execPath);
+  const segments = inheritedPath.split(delimiter).filter((s) => s.length > 0);
+  if (!segments.includes(nodeBinDir)) {
+    segments.unshift(nodeBinDir);
+  }
+  return segments.join(delimiter);
+}
 function buildImpersonateClaudeLaunch(projectCwd, inheritEnv = process.env, agentId = null) {
   const env = {
     ...inheritEnv,
@@ -2452,13 +2652,13 @@ import ora11 from "ora";
 
 // ../../packages/core/dist/drift/live-state-reader.js
 import { readFile } from "fs/promises";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { join as join11 } from "path";
 import JSON5 from "json5";
 async function hashFile(filePath) {
   try {
     const content = await readFile(filePath);
-    return createHash("sha256").update(content).digest("hex");
+    return createHash2("sha256").update(content).digest("hex");
   } catch {
     return null;
   }
@@ -2900,6 +3100,97 @@ async function hostRotateKeyCommand(hostName) {
     process.exitCode = 1;
   }
 }
+async function hostMaintenanceWindowCommand(hostName, opts) {
+  const teamSlug = requireTeam();
+  if (!teamSlug) return;
+  const json = isJsonMode();
+  const path = `/hosts/${encodeURIComponent(hostName)}/maintenance-window`;
+  const setting = opts.clear || opts.start !== void 0 || opts.end !== void 0 || opts.tz !== void 0;
+  if (!setting) {
+    const spinner2 = ora12({ text: "Fetching maintenance window\u2026", isSilent: json });
+    spinner2.start();
+    try {
+      const data = await api.get(path);
+      spinner2.stop();
+      if (json) {
+        jsonOutput({ ok: true, ...data });
+        return;
+      }
+      const ov = data.override;
+      const hasOverride = ov.maintenance_window_start !== null || ov.maintenance_window_end !== null || ov.maintenance_timezone !== null;
+      info(`Host:      ${chalk12.bold(hostName)}`);
+      info(
+        `Effective: ${chalk12.green(`${data.effective.start}\u2013${data.effective.end}`)} ${data.effective.timezone}`
+      );
+      info(
+        `Override:  ${hasOverride ? chalk12.cyan("set") : chalk12.dim("none (default 01:00\u201302:00)")}`
+      );
+      info("Set with --start/--end/--tz, or --clear to follow the default.");
+    } catch (err) {
+      spinner2.fail("Failed to fetch maintenance window.");
+      if (json) jsonOutput({ ok: false, error: err.message });
+      else error(err.message);
+      process.exitCode = 1;
+    }
+    return;
+  }
+  if (opts.clear && (opts.start !== void 0 || opts.end !== void 0 || opts.tz !== void 0)) {
+    const msg = "Use --clear on its own \u2014 it cannot be combined with --start/--end/--tz.";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  if (!opts.clear && opts.start === void 0 !== (opts.end === void 0)) {
+    const msg = "Provide both --start and --end (or use --clear).";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  if (!opts.clear && opts.tz !== void 0 && opts.start === void 0) {
+    const msg = "Provide --start and --end when setting --tz (or use --clear).";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  let resolvedTz = opts.tz ?? null;
+  if (!opts.clear && opts.tz === void 0) {
+    try {
+      const cur = await api.get(path);
+      resolvedTz = cur.override.maintenance_timezone;
+    } catch (err) {
+      const spinner0 = ora12({ isSilent: json });
+      spinner0.fail("Failed to read current maintenance window.");
+      if (json) jsonOutput({ ok: false, error: err.message });
+      else error(err.message);
+      process.exitCode = 1;
+      return;
+    }
+  }
+  const payload = opts.clear ? { maintenance_window_start: null, maintenance_window_end: null, maintenance_timezone: null } : {
+    maintenance_window_start: opts.start ?? null,
+    maintenance_window_end: opts.end ?? null,
+    maintenance_timezone: resolvedTz
+  };
+  const spinner = ora12({ text: "Updating maintenance window\u2026", isSilent: json });
+  spinner.start();
+  try {
+    const data = await api.post(path, payload);
+    spinner.succeed(`Maintenance window updated for ${chalk12.bold(hostName)}.`);
+    if (json) {
+      jsonOutput({ ok: true, ...data });
+      return;
+    }
+    if (data.note) info(data.note);
+  } catch (err) {
+    spinner.fail("Failed to update maintenance window.");
+    if (json) jsonOutput({ ok: false, error: err.message });
+    else error(err.message);
+    process.exitCode = 1;
+  }
+}
 async function hostDecommissionCommand(hostName) {
   const teamSlug = requireTeam();
   if (!teamSlug) return;
@@ -4643,7 +4934,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.8-test.9" : "dev";
+var cliVersion = true ? "0.27.9-test.11" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4874,6 +5165,397 @@ async function checkForUpdateOnStartup() {
   }
 }
 
+// src/commands/audit-subagents.ts
+import { homedir as homedir6 } from "os";
+import { join as join16 } from "path";
+
+// src/lib/subagent-mcp-audit.ts
+import { readdirSync as readdirSync4, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
+import { join as join15 } from "path";
+function parseFrontmatter(content) {
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!match) return null;
+  const out = {};
+  const lines = match[1].split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const m = line.match(/^(name|tools|background):\s*(.*)$/);
+    if (!m) continue;
+    const [, key, rawValue] = m;
+    const trimmed = rawValue.trim();
+    if (key === "tools" && trimmed === "") {
+      const items = [];
+      let j = i + 1;
+      while (j < lines.length) {
+        const nextRaw = lines[j];
+        const itemMatch = nextRaw.match(/^(\s+)-\s*(.+?)\s*$/);
+        if (!itemMatch) break;
+        items.push(itemMatch[2].replace(/^['"](.*)['"]$/, "$1"));
+        j++;
+      }
+      if (items.length > 0) {
+        out.tools = items.join(", ");
+        i = j - 1;
+        continue;
+      }
+    }
+    out[key] = trimmed;
+  }
+  return out;
+}
+function toolsExcludeMcp(tools) {
+  if (tools.length === 0) return false;
+  if (/\bmcp__/.test(tools)) return false;
+  if (/\*/.test(tools)) return false;
+  if (/\bAll tools\b/i.test(tools)) return false;
+  return true;
+}
+function findSubagentFiles(dir, depth = 0) {
+  if (depth > 6) return [];
+  let entries;
+  try {
+    entries = readdirSync4(dir);
+  } catch {
+    return [];
+  }
+  const out = [];
+  const isAgentsDir = dir.endsWith("/agents") || dir.endsWith("\\agents");
+  for (const entry of entries) {
+    const full = join15(dir, entry);
+    let s;
+    try {
+      s = statSync2(full);
+    } catch {
+      continue;
+    }
+    if (s.isDirectory()) {
+      out.push(...findSubagentFiles(full, depth + 1));
+    } else if (s.isFile() && isAgentsDir && entry.endsWith(".md")) {
+      out.push(full);
+    }
+  }
+  return out;
+}
+function auditSubagentMcpBindings(rootDirs) {
+  const findings = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const root of rootDirs) {
+    for (const file of findSubagentFiles(root)) {
+      if (seen.has(file)) continue;
+      seen.add(file);
+      let content;
+      try {
+        content = readFileSync9(file, "utf-8");
+      } catch {
+        continue;
+      }
+      const fm = parseFrontmatter(content);
+      if (!fm || typeof fm.tools !== "string") continue;
+      if (!toolsExcludeMcp(fm.tools)) continue;
+      findings.push({
+        file,
+        name: fm.name ?? "<unknown>",
+        tools: fm.tools,
+        reason: "restrictive-tools-no-mcp"
+      });
+    }
+  }
+  return findings;
+}
+function formatFinding(f) {
+  return `[manager-worker] [subagent-mcp-audit] file=${f.file} name=${f.name} reason=${f.reason} tools=${JSON.stringify(f.tools)}`;
+}
+
+// src/commands/audit-subagents.ts
+function defaultRoots() {
+  const home = homedir6();
+  return [
+    join16(home, ".claude", "agents"),
+    join16(home, ".claude", "plugins"),
+    join16(process.cwd(), ".claude", "agents")
+  ];
+}
+async function auditSubagentsCommand(options = {}) {
+  const roots = defaultRoots();
+  const findings = auditSubagentMcpBindings(roots);
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings, roots }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write("No restrictive sub-agents found \u2014 every sub-agent under the scanned roots either inherits the parent toolset or explicitly includes mcp__* wildcards.\n");
+  } else {
+    process.stdout.write(`Found ${findings.length} sub-agent${findings.length === 1 ? "" : "s"} whose tools allowlist excludes mcp__*:
+
+`);
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 ${f.name}  (${f.file})
+`);
+      process.stdout.write(`    tools: ${f.tools}
+`);
+    }
+    process.stdout.write(
+      "\nThese sub-agents will return \"No such tool available.\" for every mcp__* call when dispatched from a managed agent. If the parent needs to do MCP-tool work, dispatch the Augmented plugin's `augmented-worker` sub-agent instead \u2014 it omits `tools:` so it inherits the parent's full toolset including every MCP server. See ENG-5897.\n"
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
+// src/lib/mcp-render-allowlist-audit.ts
+import { readdirSync as readdirSync5, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join17 } from "path";
+function expectedWildcard(serverKey) {
+  return `mcp__${serverKey.replace(/-/g, "_")}__*`;
+}
+function parseMcpWildcardsFromToolsLine(content) {
+  const toolsLine = content.split("\n").find((l) => l.startsWith("tools:"));
+  if (!toolsLine) return null;
+  const value = toolsLine.replace(/^tools:\s*/, "").trim();
+  if (value.length === 0) return [];
+  return value.split(/\s*,\s*/).map((t) => t.trim()).filter((t) => t.startsWith("mcp__"));
+}
+function readMcpServerKeys(mcpJsonPath) {
+  try {
+    const config = JSON.parse(readFileSync10(mcpJsonPath, "utf-8"));
+    return Object.keys(config.mcpServers ?? {});
+  } catch {
+    return null;
+  }
+}
+function auditMcpRenderAllowlist(rootDir = join17(homedir7(), ".augmented")) {
+  const findings = [];
+  let entries;
+  try {
+    entries = readdirSync5(rootDir);
+  } catch {
+    return findings;
+  }
+  for (const entry of entries) {
+    const agentDir = join17(rootDir, entry);
+    let s;
+    try {
+      s = statSync3(agentDir);
+    } catch {
+      continue;
+    }
+    if (!s.isDirectory() || entry.startsWith("_") || entry.startsWith(".")) continue;
+    for (const scope of ["provision", "project"]) {
+      const mcpJsonPath = scope === "provision" ? join17(agentDir, "provision", ".mcp.json") : join17(agentDir, "project", ".mcp.json");
+      const keys = readMcpServerKeys(mcpJsonPath);
+      if (keys === null || keys.length === 0) continue;
+      const expected = new Set(keys.map(expectedWildcard));
+      for (const subagent of ["channel-message-handler", "augmented-worker"]) {
+        const mdPath = scope === "provision" ? join17(agentDir, ".claude", "agents", `${subagent}.md`) : join17(agentDir, "project", ".claude", "agents", `${subagent}.md`);
+        let content;
+        try {
+          content = readFileSync10(mdPath, "utf-8");
+        } catch {
+          continue;
+        }
+        const declared = parseMcpWildcardsFromToolsLine(content);
+        if (declared === null) continue;
+        const declaredSet = new Set(declared);
+        const missing = [...expected].filter((w) => !declaredSet.has(w));
+        if (missing.length > 0) {
+          findings.push({ agent: entry, subagent, scope, missing, file: mdPath });
+        }
+      }
+    }
+  }
+  return findings;
+}
+function formatRenderDriftFinding(f) {
+  return `[manager-worker] [mcp-render-drift] agent=${f.agent} subagent=${f.subagent} scope=${f.scope} missing=${JSON.stringify(f.missing)} file=${f.file}`;
+}
+
+// src/commands/audit-mcp-render.ts
+async function auditMcpRenderCommand(options = {}) {
+  const findings = auditMcpRenderAllowlist();
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write(
+      "No render drift found. Every managed agent's sub-agent .md `tools:` allowlist covers every server in its `.mcp.json`.\n"
+    );
+  } else {
+    process.stdout.write(
+      `Found ${findings.length} sub-agent .md file${findings.length === 1 ? "" : "s"} with a stale tools allowlist:
+
+`
+    );
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 ${f.agent}/${f.scope}/${f.subagent}.md
+`);
+      process.stdout.write(`    missing: ${f.missing.join(", ")}
+`);
+      process.stdout.write(`    file:    ${f.file}
+`);
+    }
+    process.stdout.write(
+      '\nA missing wildcard means the sub-agent will get "No such tool available." on any call to that MCP server. The fix is to force a re-render (e.g. by adding/removing any MCP server, which routes through syncMcpToProject), OR restart the manager so the next poll picks up the live `.mcp.json` state. The root-cause write path that bypassed the render chokepoint is tracked in ENG-5922.\n'
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatRenderDriftFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
+// src/commands/audit-secrets.ts
+import { homedir as homedir8 } from "os";
+import { join as join19 } from "path";
+
+// src/lib/secret-leak-audit.ts
+import { readdirSync as readdirSync6, readFileSync as readFileSync11, statSync as statSync4 } from "fs";
+import { join as join18 } from "path";
+var SECRET_KEY_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
+function isTemplated(value) {
+  return value.includes("${");
+}
+function matchesKnownSecretShape(value) {
+  return LITERAL_SECRET_PATTERNS.some(({ re }) => re.test(value));
+}
+function isWorldReadable(mode) {
+  return (mode & 63) !== 0;
+}
+function octal(mode) {
+  return `0${(mode & 511).toString(8)}`;
+}
+function scanMcpFile(file, agent2, findings) {
+  let mode = null;
+  try {
+    mode = statSync4(file).mode;
+  } catch {
+    return;
+  }
+  if (mode !== null && isWorldReadable(mode)) {
+    findings.push({ kind: "world-readable-secret-file", file, agent: agent2, mode: octal(mode) });
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync11(file, "utf-8"));
+  } catch {
+    return;
+  }
+  const servers = parsed?.mcpServers;
+  if (typeof servers !== "object" || servers === null) return;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null) continue;
+    const entry = raw;
+    const blocks = [
+      [entry.env, "env"],
+      [entry.headers, "header"]
+    ];
+    for (const [block, location] of blocks) {
+      if (!block) continue;
+      for (const [field, value] of Object.entries(block)) {
+        if (typeof value !== "string" || value.length === 0) continue;
+        if (isTemplated(value)) continue;
+        if (!SECRET_KEY_NAME_RE.test(field) && !matchesKnownSecretShape(value)) continue;
+        findings.push({ kind: "literal-secret-in-mcp", file, agent: agent2, server, field, location });
+      }
+    }
+  }
+}
+function scanEnvIntegrations(file, agent2, findings) {
+  let mode;
+  try {
+    mode = statSync4(file).mode;
+  } catch {
+    return;
+  }
+  if (isWorldReadable(mode)) {
+    findings.push({ kind: "world-readable-secret-file", file, agent: agent2, mode: octal(mode) });
+  }
+}
+function auditSecretLeaks(augmentedRoot) {
+  const findings = [];
+  let agents;
+  try {
+    agents = readdirSync6(augmentedRoot);
+  } catch {
+    return findings;
+  }
+  for (const agent2 of agents) {
+    const agentDir = join18(augmentedRoot, agent2);
+    try {
+      if (!statSync4(agentDir).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    scanMcpFile(join18(agentDir, "provision", ".mcp.json"), agent2, findings);
+    scanMcpFile(join18(agentDir, "project", ".mcp.json"), agent2, findings);
+    scanEnvIntegrations(join18(agentDir, ".env.integrations"), agent2, findings);
+  }
+  return findings;
+}
+function formatSecretFinding(f) {
+  const parts = [
+    "[audit-secrets]",
+    `kind=${f.kind}`,
+    `agent=${f.agent}`,
+    `file=${f.file}`
+  ];
+  if (f.server) parts.push(`server=${f.server}`);
+  if (f.field) parts.push(`field=${f.field}`);
+  if (f.location) parts.push(`location=${f.location}`);
+  if (f.mode) parts.push(`mode=${f.mode}`);
+  return parts.join(" ");
+}
+
+// src/commands/audit-secrets.ts
+function describe(f) {
+  if (f.kind === "literal-secret-in-mcp") {
+    return `literal secret in ${f.location} field '${f.field}' of server '${f.server}'`;
+  }
+  return `secret file is mode ${f.mode} (expected 0600)`;
+}
+async function auditSecretsCommand(options = {}) {
+  const root = options.root ?? join19(homedir8(), ".augmented");
+  const findings = auditSecretLeaks(root);
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings, root }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write(
+      `No literal secrets or world-readable secret files found under ${root}.
+`
+    );
+  } else {
+    process.stdout.write(
+      `Found ${findings.length} secret-handling issue${findings.length === 1 ? "" : "s"} under ${root}:
+
+`
+    );
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 [${f.agent}] ${describe(f)}
+`);
+      process.stdout.write(`    ${f.file}
+`);
+    }
+    process.stdout.write(
+      "\nLiteral secrets in .mcp.json should be `${VAR}` placeholders with the raw value in .env.integrations (mode 0600). See docs/operator/credential-migration-eng5898.md.\n"
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatSecretFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
 // src/commands/integration.ts
 import chalk19 from "chalk";
 import ora17 from "ora";
@@ -4881,7 +5563,7 @@ async function integrationListCommand() {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching integrations\u2026", isSilent: json }).start();
   try {
-    const data = await api.get("/integrations/bindings");
+    const data = await api.get("/integrations/installs");
     spinner.stop();
     if (json) {
       jsonOutput({ integrations: data });
@@ -4908,7 +5590,7 @@ async function integrationShowCommand(slug) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -4916,7 +5598,7 @@ async function integrationShowCommand(slug) {
       process.exitCode = 1;
       return;
     }
-    const scopes = await api.get(`/integrations/bindings/${integration2.id}/scopes`);
+    const scopes = await api.get(`/integrations/installs/${integration2.id}/scopes`);
     spinner.stop();
     if (json) {
       jsonOutput({ integration: integration2, scopes });
@@ -4950,7 +5632,7 @@ async function integrationInstallCommand(slug, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Installing integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -4967,7 +5649,7 @@ async function integrationInstallCommand(slug, options) {
       return;
     }
     const scopes = options.scopes?.split(",").map((s) => s.trim()).filter(Boolean) ?? [];
-    const result = await api.post("/integrations/bindings/install", {
+    const result = await api.post("/integrations/installs/install", {
       agent_id: agent2.agent_id,
       plugin_id: integration2.id,
       scopes
@@ -5000,7 +5682,7 @@ async function integrationUninstallCommand(slug, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Uninstalling integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -5016,7 +5698,7 @@ async function integrationUninstallCommand(slug, options) {
       process.exitCode = 1;
       return;
     }
-    await api.post("/integrations/bindings/uninstall", {
+    await api.post("/integrations/installs/uninstall", {
       agent_id: agent2.agent_id,
       plugin_id: integration2.id
     });
@@ -5031,7 +5713,7 @@ async function integrationRequestsCommand() {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching scope requests\u2026", isSilent: json }).start();
   try {
-    const requests = await api.get("/integrations/bindings/scope-requests");
+    const requests = await api.get("/integrations/installs/scope-requests");
     spinner.stop();
     if (json) {
       jsonOutput({ requests });
@@ -5057,7 +5739,7 @@ async function integrationApproveCommand(requestId, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Approving request\u2026", isSilent: json }).start();
   try {
-    const result = await api.put(`/integrations/bindings/scope-requests/${requestId}`, {
+    const result = await api.put(`/integrations/installs/scope-requests/${requestId}`, {
       status: "approved",
       review_notes: options.notes
     });
@@ -5076,7 +5758,7 @@ async function integrationDenyCommand(requestId, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Denying request\u2026", isSilent: json }).start();
   try {
-    const result = await api.put(`/integrations/bindings/scope-requests/${requestId}`, {
+    const result = await api.put(`/integrations/installs/scope-requests/${requestId}`, {
       status: "denied",
       review_notes: options.reason
     });
@@ -5138,7 +5820,7 @@ async function integrationEnrolCommand(options) {
     }
     let displayName = options.displayName;
     if (!displayName) {
-      const defs = await api.get("/integrations/bindings");
+      const defs = await api.get("/integrations/installs");
       const def = defs.find((d) => d.slug === options.def);
       displayName = def?.name ?? options.def;
     }
@@ -5175,14 +5857,20 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.8-test.9" : "dev";
+var cliVersion2 = true ? "0.27.9-test.11" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
-program.hook("preAction", (thisCommand) => {
+program.hook("preAction", async (thisCommand, actionCommand) => {
   const root = thisCommand.optsWithGlobals();
   if (root.json) {
     setJsonMode(true);
   }
+  const segs = [];
+  for (let c = actionCommand; c && c.parent; c = c.parent) segs.unshift(c.name());
+  const cmdPath = segs.join(" ");
+  if (cmdPath !== "impersonate introduce" && cmdPath !== "impersonate exit") {
+    await autoExitExpiredImpersonation();
+  }
 });
 program.command("whoami").description("Show the authenticated host, team, and user from AGT_API_KEY").action(whoamiCommand);
 program.command("setup <token>").description("One-command host setup: exchange provisioning token, configure env vars, verify, and start manager").option(
@@ -5222,8 +5910,12 @@ impersonate.command("connect <token>").description(
     })
   )
 );
-impersonate.command("current").description('Print the active impersonation (or "none")').action(impersonateCurrentCommand);
-impersonate.command("exit").description("End the active impersonation, restore project files, and notify the server").action(impersonateExitCommand);
+impersonate.command("current").description('Print the active impersonation for this directory (or "none")').option("--all", "List every active impersonation session on this machine").action(
+  (opts) => impersonateCurrentCommand({ all: opts.all === true })
+);
+impersonate.command("exit").description("End this directory's impersonation, restore project files, and notify the server").option("--all", "Exit every active impersonation session on this machine").action(
+  (opts) => impersonateExitCommand({ all: opts.all === true })
+);
 impersonate.command("introduce", { hidden: true }).description("Print the impersonated agent's self-introduction (SessionStart hook target)").action(impersonateIntroduceCommand);
 program.command("init").description("Create a new agent (interactive wizard, or non-interactive with --name)").option("--name <display-name>", "Agent display name (triggers non-interactive mode)").option("--code-name <code-name>", "Agent code name (kebab-case, derived from --name if omitted)").option("--description <text>", "Short agent description").option("--env <environment>", "Environment: dev | stage | prod", "dev").option("--risk-tier <tier>", "Risk tier: Low | Medium | High", "Low").option("--budget-type <type>", "Budget type: tokens | dollars | both", "tokens").option("--budget-tokens <number>", "Token budget limit", "10000").option("--budget-dollars <number>", "Dollar budget limit", "10").option("--budget-window <window>", "Budget window: daily | weekly | monthly", "daily").option("--budget-enforcement <mode>", "Budget enforcement: block | throttle | alert | degrade", "block").option("--channels <list>", "Comma-separated channel IDs").option("--logging <mode>", "Logging mode: redacted | hash-only | full-local", "redacted").action(initCommand);
 program.command("lint").argument("[path]", "Path to agent directory (default: all agents in .augmented/)").description("Lint CHARTER.md and TOOLS.md files").action(lintCommand);
@@ -5250,6 +5942,7 @@ host.command("unassign <host-name> <agent-code-names...>").description("Unassign
 host.command("agents [host-name]").description("List agents assigned to a host (omit name to auto-resolve from AGT_API_KEY)").action(hostAgentsCommand);
 host.command("rotate-key <host-name>").description("Rotate the API key for a host (revokes the old key)").action(hostRotateKeyCommand);
 host.command("decommission <host-name>").description("Decommission a host (revokes key, marks inactive)").action(hostDecommissionCommand);
+host.command("maintenance-window <host-name>").description("View or set the host maintenance window for restart-causing updates").option("--start <HH:MM>", "Window start, 24h local time (e.g. 01:00)").option("--end <HH:MM>", "Window end, 24h local time (e.g. 02:00)").option("--tz <IANA>", "Window timezone (e.g. Australia/Sydney)").option("--clear", "Clear the override and follow the default 01:00\u201302:00").action(hostMaintenanceWindowCommand);
 host.command("pair <host-name>").description("Start an SSM port-forward + shell to re-authenticate Claude Code on an EC2 host").option("--port <port>", "Local port to forward for the OAuth callback", "54545").option("--no-shell", "Start the tunnel only; do not open an interactive shell").action(
   (hostName, opts) => hostPairCommand(hostName, {
     port: opts.port,
@@ -5257,16 +5950,16 @@ host.command("pair <host-name>").description("Start an SSM port-forward + shell
   })
 );
 var manager = program.command("manager").description("Host config sync daemon \u2014 keeps local agent files in sync with API");
-manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
-manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStopCommand);
-manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStatusCommand);
-manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
-manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerInstallCommand);
+manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
+manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerStopCommand);
+manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerStatusCommand);
+manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
+manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerInstallCommand);
 manager.command("uninstall").description("Remove the OS-level supervisor (launchctl unload + delete plist on macOS). Idempotent.").action(managerUninstallCommand);
 manager.command("install-system-unit").description("Install a system-level systemd unit (Linux, root) so the manager auto-starts on every boot. For headless EC2 hosts \u2014 survives reboot without `loginctl enable-linger`. (ENG-4706)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files (defaults to /root/.augmented or /home/<user>/.augmented)").option("--user <name>", "Unix user the manager runs as", "root").action(managerInstallSystemUnitCommand);
 manager.command("uninstall-system-unit").description("Remove the system-level systemd unit (Linux, root). Idempotent. (ENG-4706)").action(managerUninstallSystemUnitCommand);
 var agent = program.command("agent").description("Inspect and manage agents");
-agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join15(homedir6(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
+agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join20(homedir9(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
 var kanban = program.command("kanban").description("Manage agent kanban boards");
 kanban.command("list").description("List kanban board items for an agent").requiredOption("--agent <code-name>", "Agent code name").action(kanbanListCommand);
 kanban.command("add <title>").description("Add a new item to an agent kanban board").requiredOption("--agent <code-name>", "Agent code name").option("--priority <1|2|3>", "Priority: 1=high, 2=medium, 3=low", "2").option("--status <status>", "Initial status: backlog | todo | in_progress", "todo").option("--description <text>", "Item description").option("--estimate <minutes>", "Estimated time in minutes").option("--deliverable <text>", "Expected output/deliverable").action(kanbanAddCommand);
@@ -5294,10 +5987,17 @@ integration.command("approve <request-id>").description("Approve a scope request
 integration.command("deny <request-id>").description("Deny a scope request").option("--reason <text>", "Denial reason").action(integrationDenyCommand);
 integration.command("enrol").description("Enrol an integration with an API key or webhook secret (no OAuth flow)").requiredOption("--def <code-name>", "Integration definition code_name (e.g. resend, xero)").requiredOption("--scope <org|team|agent>", "Install scope").option("--api-key <value>", "API key (sets auth_type=api_key)").option("--access-token <value>", "Bearer access token (sets auth_type=oauth2)").option("--webhook-secret <value>", "Webhook signing secret (sets auth_type=webhook)").option("--display-name <name>", "Override display name (defaults to the definition\u2019s display_name)").option("--agent <code-name>", "Agent code name (required for agent scope)").action(integrationEnrolCommand);
 program.command("update").description("Check for and install CLI updates").option("--force", "Update even if manager or agent sessions are running").action(updateCommand);
+var audit = program.command("audit").description("Operator audits \u2014 sub-agent MCP bindings, etc.");
+audit.command("subagents").description("Find sub-agents whose tools allowlist would block mcp__* calls on dispatch (ENG-5897)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditSubagentsCommand);
+audit.command("mcp-render").description("Find managed agents whose subagent .md tools allowlist is stale vs .mcp.json (ENG-5922)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditMcpRenderCommand);
+audit.command("secrets").description("Find literal secrets in .mcp.json and world-readable secret files (ENG-5901)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditSecretsCommand);
 var skipUpdateCheck = process.argv.includes("--skip-update-check") || process.argv.includes("--json") || process.argv[2] === "update";
 if (!skipUpdateCheck) {
   checkForUpdateOnStartup().catch(() => {
   });
 }
-program.parse();
+program.parseAsync().catch((err) => {
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exitCode = 1;
+});
 //# sourceMappingURL=agt.js.map