@integrity-labs/agt-cli 0.27.8 → 0.27.9-test.11

package/dist/bin/agt.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
   ApiError,
-  DEFAULT_AGT_HOST,
+  LITERAL_SECRET_PATTERNS,
+  PROD_AGT_HOST,
   api,
   error,
   exchangeApiKey,
@@ -27,7 +28,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-IB655E5U.js";
+} from "../chunk-N2EBL4PZ.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -53,11 +54,11 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-YSBGIXJG.js";
+} from "../chunk-45I2X4M7.js";
 
 // src/bin/agt.ts
-import { join as join15 } from "path";
-import { homedir as homedir6 } from "os";
+import { join as join20 } from "path";
+import { homedir as homedir9 } from "os";
 import { Command } from "commander";
 
 // src/commands/whoami.ts
@@ -551,11 +552,11 @@ async function lintCommand(path) {
       process.exitCode = 1;
       return;
     }
-    const { readdirSync: readdirSync3, statSync: statSync2 } = await import("fs");
-    const entries = readdirSync3(augmentedDir);
+    const { readdirSync: readdirSync7, statSync: statSync5 } = await import("fs");
+    const entries = readdirSync7(augmentedDir);
     for (const entry of entries) {
       const entryPath = join2(augmentedDir, entry);
-      if (statSync2(entryPath).isDirectory()) {
+      if (statSync5(entryPath).isDirectory()) {
         dirs.push({ name: entry, dir: entryPath });
       }
     }
@@ -828,7 +829,11 @@ async function channelSlackSetupCommand(agentCodeName, options) {
     const manifest = generateSlackAppManifest({
       agent_name: agent2.display_name ?? agentCodeName,
       description: `Augmented-managed Slack bot for agent ${agentCodeName}`,
-      scopes: selectedScopes
+      scopes: selectedScopes,
+      // ENG-6044: per-agent slash commands carry the code-name suffix.
+      // No-op until a slash_command_url is supplied, but keeps this
+      // manifest consistent with the API-generated ones.
+      agent_code_name: agent2.code_name ?? agentCodeName
     });
     const manifestObj = serializeManifestForSlackCli(manifest);
     const manifestJson = JSON.stringify(manifestObj, null, 2);
@@ -1435,6 +1440,23 @@ async function provisionCommand(codeName, options) {
     };
   }
   const resolvedChannels = resolveChannels(agentChannelPolicy, orgChannelPolicy);
+  spinner.text = "Fetching integrations\u2026";
+  const agentId = agentData.agent_id;
+  let integrations = [];
+  let integrationsError = null;
+  try {
+    const integrationsData = await api.post("/host/agent-integrations", { agent_id: agentId });
+    integrations = integrationsData.integrations ?? [];
+  } catch (err) {
+    integrationsError = err.message;
+    if (!json) {
+      spinner.stop();
+      warn(
+        `Could not fetch integrations: ${integrationsError}. .mcp.json may be missing integration servers.`
+      );
+      spinner.start("Provisioning\u2026");
+    }
+  }
   const frameworkId = agentData.framework ?? "openclaw";
   const adapter = getFramework(frameworkId);
   spinner.text = `Building ${adapter.label} config\u2026`;
@@ -1445,6 +1467,7 @@ async function provisionCommand(codeName, options) {
     toolsFrontmatter,
     toolsContent,
     resolvedChannels,
+    integrations,
     deploymentTarget: target,
     gatewayPort: 9e3
   };
@@ -1478,6 +1501,8 @@ async function provisionCommand(codeName, options) {
         charter_hash: provisionOutput.charterHash,
         tools_hash: provisionOutput.toolsHash,
         channels: resolvedChannels.length,
+        integrations: integrations.length,
+        integrations_error: integrationsError,
         artifacts: provisionOutput.artifacts.map((a) => ({
           path: a.relativePath,
           size: a.content.length
@@ -1534,6 +1559,8 @@ async function provisionCommand(codeName, options) {
       charter_hash: provisionOutput.charterHash,
       tools_hash: provisionOutput.toolsHash,
       channels: resolvedChannels.length,
+      integrations: integrations.length,
+      integrations_error: integrationsError,
       artifacts: provisionOutput.artifacts.map((a) => a.relativePath)
     });
     return;
@@ -1546,6 +1573,7 @@ async function provisionCommand(codeName, options) {
   info(`CHARTER hash:   ${provisionOutput.charterHash.slice(0, 12)}\u2026`);
   info(`TOOLS hash:  ${provisionOutput.toolsHash.slice(0, 12)}\u2026`);
   info(`Channels:    ${resolvedChannels.length} active`);
+  info(`Integrations: ${integrations.length}${integrationsError ? " (fetch failed)" : ""}`);
   info(`Artifacts:   ${provisionOutput.artifacts.map((a) => a.relativePath).join(", ")}`);
   console.log();
   info("Next steps:");
@@ -1557,8 +1585,9 @@ async function provisionCommand(codeName, options) {
 import chalk10 from "chalk";
 import ora10 from "ora";
 import { spawn } from "child_process";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync7 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync7 } from "fs";
+import { delimiter, dirname as dirname3, join as join10 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/impersonate-flag.ts
 var ENV_VAR = "AGT_IMPERSONATE_ENABLED";
@@ -1590,10 +1619,12 @@ production.
 }
 
 // src/lib/impersonate-state.ts
+import { createHash } from "crypto";
 import {
   chmodSync,
   existsSync as existsSync2,
   mkdirSync as mkdirSync4,
+  readdirSync,
   readFileSync as readFileSync2,
   renameSync,
   rmSync,
@@ -1604,6 +1635,12 @@ import { join as join6 } from "path";
 var IMPERSONATE_ROOT = join6(homedir(), ".augmented-impersonate");
 var ACTIVE_DIR = join6(IMPERSONATE_ROOT, "active");
 var ACTIVE_MANIFEST_PATH = join6(ACTIVE_DIR, "manifest.json");
+var SESSION_FILE_PREFIX = "session-";
+var SESSION_FILE_SUFFIX = ".json";
+function sessionManifestPath(projectCwd) {
+  const hash = createHash("sha256").update(projectCwd).digest("hex").slice(0, 16);
+  return join6(ACTIVE_DIR, `${SESSION_FILE_PREFIX}${hash}${SESSION_FILE_SUFFIX}`);
+}
 var CODE_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function assertValidCodeName(codeName) {
   if (!CODE_NAME_RE.test(codeName)) {
@@ -1627,36 +1664,84 @@ function ensureImpersonateWorkdir(codeName) {
   mkdirSync4(dir, { recursive: true });
   return dir;
 }
-function readActiveManifest() {
-  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return null;
+function validateManifest(parsed) {
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const m = parsed;
+  const backupsOk = typeof m.backups === "object" && m.backups !== null && Object.values(m.backups).every(
+    (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
+  );
+  if (typeof m.code_name !== "string" || typeof m.agent_id !== "string" || typeof m.team_id !== "string" || typeof m.token !== "string" || typeof m.expires_at !== "number" || typeof m.session_id !== "string" || typeof m.minted_at !== "string" || typeof m.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
+  // the right environment. Required, not optional, because writing the
+  // wrong host on an existing session would point exit at a server
+  // that has no record of the session — silently misleading.
+  typeof m.host !== "string" || m.host.length === 0 || !backupsOk) {
+    return null;
+  }
+  return parsed;
+}
+function readManifestFile(path) {
+  if (!existsSync2(path)) return null;
   try {
-    const raw = readFileSync2(ACTIVE_MANIFEST_PATH, "utf-8");
-    const parsed = JSON.parse(raw);
-    const backupsOk = typeof parsed.backups === "object" && parsed.backups !== null && Object.values(parsed.backups).every(
-      (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
-    );
-    if (typeof parsed.code_name !== "string" || typeof parsed.agent_id !== "string" || typeof parsed.team_id !== "string" || typeof parsed.token !== "string" || typeof parsed.expires_at !== "number" || typeof parsed.session_id !== "string" || typeof parsed.minted_at !== "string" || typeof parsed.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
-    // the right environment. Required, not optional, because writing the
-    // wrong host on an existing session would point exit at a server
-    // that has no record of the session — silently misleading.
-    typeof parsed.host !== "string" || parsed.host.length === 0 || !backupsOk) {
-      return null;
-    }
-    return parsed;
+    return validateManifest(JSON.parse(readFileSync2(path, "utf-8")));
   } catch {
     return null;
   }
 }
+function migrateLegacyManifest() {
+  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return;
+  const legacy = readManifestFile(ACTIVE_MANIFEST_PATH);
+  try {
+    if (!legacy) {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+      return;
+    }
+    const target = sessionManifestPath(legacy.project_cwd);
+    if (!existsSync2(target)) {
+      mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
+      renameSync(ACTIVE_MANIFEST_PATH, target);
+      chmodSync(target, 384);
+    } else {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+    }
+  } catch {
+  }
+}
+function readActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  return readManifestFile(sessionManifestPath(projectCwd));
+}
+function listActiveManifests() {
+  migrateLegacyManifest();
+  let entries;
+  try {
+    entries = readdirSync(ACTIVE_DIR);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const entry of entries) {
+    if (!entry.startsWith(SESSION_FILE_PREFIX) || !entry.endsWith(SESSION_FILE_SUFFIX)) {
+      continue;
+    }
+    const manifest = readManifestFile(join6(ACTIVE_DIR, entry));
+    if (manifest) out.push(manifest);
+  }
+  return out;
+}
 function writeActiveManifest(manifest) {
+  migrateLegacyManifest();
   mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
-  const tmp = ACTIVE_MANIFEST_PATH + ".tmp";
+  const path = sessionManifestPath(manifest.project_cwd);
+  const tmp = path + ".tmp";
   writeFileSync4(tmp, JSON.stringify(manifest, null, 2), { mode: 384 });
   chmodSync(tmp, 384);
-  renameSync(tmp, ACTIVE_MANIFEST_PATH);
+  renameSync(tmp, path);
 }
-function clearActiveManifest() {
-  if (existsSync2(ACTIVE_MANIFEST_PATH)) {
-    rmSync(ACTIVE_MANIFEST_PATH);
+function clearActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  const path = sessionManifestPath(projectCwd);
+  if (existsSync2(path)) {
+    rmSync(path);
   }
 }
 function isExpired(manifest, now = Date.now()) {
@@ -1756,7 +1841,7 @@ import {
   copyFileSync,
   existsSync as existsSync4,
   mkdirSync as mkdirSync5,
-  readdirSync,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync3,
   renameSync as renameSync3,
   rmdirSync,
@@ -1814,7 +1899,7 @@ function unregisterIntroduceHook(backup) {
   if (created_claude_dir) {
     const claudeDir = dirOf(settings_path);
     try {
-      if (existsSync4(claudeDir) && readdirSync(claudeDir).length === 0) {
+      if (existsSync4(claudeDir) && readdirSync2(claudeDir).length === 0) {
         rmdirSync(claudeDir);
       }
     } catch {
@@ -1850,7 +1935,7 @@ import {
   copyFileSync as copyFileSync2,
   existsSync as existsSync5,
   mkdirSync as mkdirSync6,
-  readdirSync as readdirSync2,
+  readdirSync as readdirSync3,
   readFileSync as readFileSync4,
   renameSync as renameSync4,
   rmdirSync as rmdirSync2,
@@ -1920,7 +2005,7 @@ function unregisterStatusLine(backup) {
   if (created_claude_dir) {
     const claudeDir = dirname2(settings_path);
     try {
-      if (existsSync5(claudeDir) && readdirSync2(claudeDir).length === 0) {
+      if (existsSync5(claudeDir) && readdirSync3(claudeDir).length === 0) {
         rmdirSync2(claudeDir);
       }
     } catch {
@@ -1996,12 +2081,86 @@ function buildIntroduction(input4) {
   const lines = [`I'm ${spokenName}${codeSuffix}${roleClause}.`, ""];
   if (integrations.length > 0) {
     lines.push(`Connected integrations: ${integrations.join(", ")}.`);
+    lines.push("");
+    lines.push(
+      "If the operator asks what you can do, call each MCP server's `tools/list` and report the actual tool inventory. Do not narrate capabilities from CHARTER.md \u2014 it describes intent, not runtime state. Tools that fail to enumerate (server failed to spawn, env missing, etc.) should be reported as such, not silently omitted."
+    );
   } else {
     lines.push("No integrations are connected.");
   }
   return lines.join("\n");
 }
 
+// src/lib/impersonate-mcp-rewrite.ts
+var SERVER_HOME_MCP_PATH_RE = /^\/home\/[^/]+\/\.augmented\/_mcp\/([^/]+)$/;
+var CHANNEL_SERVER_KEYS = /* @__PURE__ */ new Set([
+  "slack",
+  "telegram",
+  "msteams",
+  "direct-chat",
+  "discord"
+]);
+function rewriteMcpJsonForImpersonation(mcpJson, ctx) {
+  const parsed = JSON.parse(mcpJson);
+  if (!isPlainObject(parsed)) {
+    throw new Error(
+      `rewriteMcpJsonForImpersonation: expected an object at the JSON root, got ${typeof parsed}`
+    );
+  }
+  const servers = parsed["mcpServers"];
+  if (!isPlainObject(servers)) {
+    throw new Error(
+      "rewriteMcpJsonForImpersonation: expected an object-typed `mcpServers` field"
+    );
+  }
+  const rewrittenServers = {};
+  for (const [serverName, raw] of Object.entries(servers)) {
+    rewrittenServers[serverName] = rewriteServerEntry(serverName, raw, ctx);
+  }
+  const out = { ...parsed, mcpServers: rewrittenServers };
+  return JSON.stringify(out, null, 2);
+}
+function rewriteServerEntry(serverName, raw, ctx) {
+  if (!isPlainObject(raw)) return raw;
+  let args = raw["args"];
+  if (Array.isArray(args)) {
+    args = args.map((arg) => {
+      if (typeof arg !== "string") return arg;
+      const m = SERVER_HOME_MCP_PATH_RE.exec(arg);
+      if (!m) return arg;
+      return `${ctx.cliMcpBundleDir}/${m[1]}`;
+    });
+  }
+  const env = isPlainObject(raw["env"]) ? { ...raw["env"] } : {};
+  fillIfEmpty(env, "AGT_HOST", ctx.apiHost);
+  fillIfEmpty(env, "AGT_API_KEY", ctx.impersonationToken);
+  if (ctx.agentSessionToken) {
+    fillIfEmpty(env, "AGT_AGENT_SESSION_TOKEN", ctx.agentSessionToken);
+  }
+  fillIfEmpty(env, "HOME", ctx.operatorHome);
+  fillIfEmpty(env, "AGT_AGENT_ID", ctx.agentId);
+  fillIfEmpty(env, "AGT_AGENT_CODE_NAME", ctx.agentCodeName);
+  if ("PATH" in env) {
+    env["PATH"] = ctx.operatorPath;
+  }
+  if (env["AGT_RUN_ID"] === "${AGT_RUN_ID}") {
+    delete env["AGT_RUN_ID"];
+  }
+  if (CHANNEL_SERVER_KEYS.has(serverName)) {
+    env["AGT_ACT_AS_AGENT_ID"] = ctx.agentId;
+  }
+  return { ...raw, args, env };
+}
+function fillIfEmpty(env, key, value) {
+  const current = env[key];
+  if (typeof current !== "string" || current.length === 0 || current === `\${${key}}`) {
+    env[key] = value;
+  }
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
 // src/commands/impersonate.ts
 var SWAP_FILES = ["CLAUDE.md", ".mcp.json"];
 var AGENT_IMPERSONATION_HEADER = "X-Agent-Impersonation";
@@ -2017,13 +2176,15 @@ async function impersonateConnectCommand(token, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const existing = readActiveManifest();
-  if (existing) {
-    const msg = `An impersonation session is already active (${existing.code_name}). Run \`agt impersonate exit\` first.`;
-    if (json) jsonOutput({ ok: false, error: msg });
-    else error(msg);
-    process.exitCode = 1;
-    return;
+  if (!options.workdir) {
+    const existing = readActiveManifest(process.cwd());
+    if (existing) {
+      const msg = `An impersonation session is already active in this directory (${existing.code_name}). Run \`agt impersonate exit\` here first, or connect from a different directory.`;
+      if (json) jsonOutput({ ok: false, error: msg });
+      else error(msg);
+      process.exitCode = 1;
+      return;
+    }
   }
   if (!options.workdir) {
     const workTreeRoot = findGitWorkTreeRoot(process.cwd());
@@ -2041,7 +2202,7 @@ async function impersonateConnectCommand(token, options = {}) {
     isSilent: json
   });
   spinner.start();
-  const host2 = (options.apiHost ?? DEFAULT_AGT_HOST).replace(/\/+$/, "");
+  const host2 = (options.apiHost ?? PROD_AGT_HOST).replace(/\/+$/, "");
   let bundle;
   try {
     const res = await fetch(`${host2}/impersonate/agent/redeem`, {
@@ -2071,10 +2232,28 @@ async function impersonateConnectCommand(token, options = {}) {
   );
   writeFileSync7(
     join10(personaDir, ".mcp.json"),
-    bundle.artifacts[".mcp.json"]
+    rewriteMcpJsonForImpersonation(bundle.artifacts[".mcp.json"], {
+      operatorHome: process.env.HOME ?? "",
+      operatorPath: resolveOperatorPath(),
+      cliMcpBundleDir: resolveCliMcpBundleDir(),
+      impersonationToken: bundle.token,
+      agentSessionToken: bundle.agent_session_token ?? null,
+      apiHost: host2,
+      agentId: bundle.agent.agent_id,
+      agentCodeName: bundle.agent.code_name
+    })
   );
   spinner.text = "Swapping persona files\u2026";
   const projectCwd = options.workdir ? ensureImpersonateWorkdir(bundle.agent.code_name) : process.cwd();
+  const existingForTarget = readActiveManifest(projectCwd);
+  if (existingForTarget) {
+    spinner.fail("Impersonation already active for this agent.");
+    const msg = `An impersonation session is already active in ${projectCwd} (${existingForTarget.code_name}). Run \`agt impersonate exit\` there first.`;
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
   const backups = {};
   const swapped = [];
   let hookBackup;
@@ -2164,10 +2343,16 @@ async function impersonateConnectCommand(token, options = {}) {
   }
   info("Launching Claude Code\u2026 (use `--no-launch` next time to skip)");
   console.log();
+  const launch = buildImpersonateClaudeLaunch(
+    projectCwd,
+    process.env,
+    bundle.agent.agent_id
+  );
   await new Promise((resolve2) => {
-    const child = spawn("claude", {
+    const child = spawn("claude", launch.args, {
       stdio: "inherit",
-      cwd: projectCwd
+      cwd: projectCwd,
+      env: launch.env
     });
     child.on("error", (err) => {
       if (err.code === "ENOENT") {
@@ -2190,33 +2375,8 @@ async function impersonateConnectCommand(token, options = {}) {
   console.log();
   info("When done: `agt impersonate exit` (still active).");
 }
-async function impersonateCurrentCommand() {
-  requireImpersonateEnabled();
-  const json = isJsonMode();
-  const manifest = readActiveManifest();
-  if (!manifest) {
-    if (json) jsonOutput({ ok: true, active: null });
-    else info("No active impersonation.");
-    return;
-  }
+function printManifestText(manifest) {
   const expired = isExpired(manifest);
-  if (json) {
-    jsonOutput({
-      ok: true,
-      active: {
-        code_name: manifest.code_name,
-        agent_id: manifest.agent_id,
-        team_id: manifest.team_id,
-        session_id: manifest.session_id,
-        minted_at: manifest.minted_at,
-        expires_at: manifest.expires_at,
-        expired,
-        project_cwd: manifest.project_cwd,
-        host: manifest.host
-      }
-    });
-    return;
-  }
   console.log();
   console.log(chalk10.bold(`Impersonating: ${manifest.code_name}`));
   console.log(`  Agent ID:    ${chalk10.dim(manifest.agent_id)}`);
@@ -2230,15 +2390,92 @@ async function impersonateCurrentCommand() {
   console.log(`  Host:        ${chalk10.dim(manifest.host)}`);
   console.log();
 }
-async function impersonateExitCommand() {
+function manifestToJson(manifest) {
+  return {
+    code_name: manifest.code_name,
+    agent_id: manifest.agent_id,
+    team_id: manifest.team_id,
+    session_id: manifest.session_id,
+    minted_at: manifest.minted_at,
+    expires_at: manifest.expires_at,
+    expired: isExpired(manifest),
+    project_cwd: manifest.project_cwd,
+    host: manifest.host
+  };
+}
+async function impersonateCurrentCommand(opts = {}) {
+  requireImpersonateEnabled();
+  const json = isJsonMode();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: manifests.map(manifestToJson) });
+      return;
+    }
+    if (manifests.length === 0) {
+      info("No active impersonations.");
+      return;
+    }
+    console.log();
+    console.log(chalk10.bold(`Active impersonations (${manifests.length}):`));
+    for (const m of manifests) printManifestText(m);
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
+  if (!manifest) {
+    const others = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: null, others_active: others.length });
+      return;
+    }
+    if (others.length > 0) {
+      info(
+        `No active impersonation in this directory \u2014 ${others.length} active elsewhere. Run \`agt impersonate current --all\` to list them.`
+      );
+    } else {
+      info("No active impersonation.");
+    }
+    return;
+  }
+  if (json) {
+    jsonOutput({ ok: true, active: manifestToJson(manifest) });
+    return;
+  }
+  printManifestText(manifest);
+}
+async function impersonateExitCommand(opts = {}) {
   requireImpersonateEnabled();
   const json = isJsonMode();
-  const manifest = readActiveManifest();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (manifests.length === 0) {
+      if (json) jsonOutput({ ok: true, was_active: false, exited: [] });
+      else info("No active impersonation to exit.");
+      return;
+    }
+    const exited = [];
+    for (const manifest2 of manifests) {
+      await performImpersonateExit(manifest2, { json, silent: true });
+      exited.push(manifest2.code_name);
+    }
+    if (json) {
+      jsonOutput({ ok: true, was_active: true, exited });
+    } else {
+      success(`Exited ${exited.length} impersonation session(s): ${exited.join(", ")}`);
+      info("Restart Claude Code to pick up your original persona.");
+    }
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
   if (!manifest) {
     if (json) jsonOutput({ ok: true, was_active: false });
     else info("No active impersonation to exit.");
     return;
   }
+  await performImpersonateExit(manifest, { json, silent: false });
+}
+async function performImpersonateExit(manifest, opts) {
+  const { json, silent } = opts;
   let stopOk = true;
   let stopDetail = null;
   try {
@@ -2295,7 +2532,8 @@ async function impersonateExitCommand() {
       if (!json) error(`Failed to remove introduce hook: ${msg}`);
     }
   }
-  clearActiveManifest();
+  clearActiveManifest(manifest.project_cwd);
+  if (silent) return;
   if (json) {
     jsonOutput({
       ok: true,
@@ -2316,9 +2554,32 @@ async function impersonateExitCommand() {
   }
   info("Restart Claude Code to pick up your original persona.");
 }
+async function autoExitExpiredImpersonation() {
+  let manifests;
+  try {
+    manifests = listActiveManifests();
+  } catch {
+    return;
+  }
+  const expired = manifests.filter((m) => isExpired(m));
+  if (expired.length === 0) return;
+  for (const manifest of expired) {
+    try {
+      if (!isJsonMode()) {
+        console.error(
+          chalk10.cyan(
+            `\u2139 Impersonation session for ${manifest.code_name} expired \u2014 auto-exiting and restoring your files.`
+          )
+        );
+      }
+      await performImpersonateExit(manifest, { json: isJsonMode(), silent: true });
+    } catch {
+    }
+  }
+}
 async function impersonateIntroduceCommand() {
   try {
-    const manifest = readActiveManifest();
+    const manifest = readActiveManifest(process.cwd());
     if (!manifest || isExpired(manifest)) return;
     const cwd = manifest.project_cwd;
     const identity = readClaudeMdIdentity(join10(cwd, "CLAUDE.md"));
@@ -2347,6 +2608,43 @@ function readMcpIntegrations(path) {
     return [];
   }
 }
+function resolveCliMcpBundleDir() {
+  const moduleDir = dirname3(fileURLToPath2(import.meta.url));
+  const candidates = [
+    join10(moduleDir, "mcp"),
+    join10(moduleDir, "..", "mcp"),
+    join10(moduleDir, "..", "..", "mcp")
+  ];
+  for (const candidate of candidates) {
+    if (existsSync6(join10(candidate, "index.js"))) return candidate;
+  }
+  return candidates[candidates.length - 1];
+}
+function resolveOperatorPath(execPath = process.execPath, inheritedPath = process.env.PATH ?? "") {
+  const nodeBinDir = dirname3(execPath);
+  const segments = inheritedPath.split(delimiter).filter((s) => s.length > 0);
+  if (!segments.includes(nodeBinDir)) {
+    segments.unshift(nodeBinDir);
+  }
+  return segments.join(delimiter);
+}
+function buildImpersonateClaudeLaunch(projectCwd, inheritEnv = process.env, agentId = null) {
+  const env = {
+    ...inheritEnv,
+    ENABLE_CLAUDEAI_MCP_SERVERS: "false"
+  };
+  if (agentId !== null && agentId.length > 0) {
+    env.AGT_ACT_AS_AGENT_ID = agentId;
+  }
+  return {
+    args: [
+      "--strict-mcp-config",
+      "--mcp-config",
+      join10(projectCwd, ".mcp.json")
+    ],
+    env
+  };
+}
 
 // src/commands/drift.ts
 import chalk11 from "chalk";
@@ -2354,13 +2652,13 @@ import ora11 from "ora";
 
 // ../../packages/core/dist/drift/live-state-reader.js
 import { readFile } from "fs/promises";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { join as join11 } from "path";
 import JSON5 from "json5";
 async function hashFile(filePath) {
   try {
     const content = await readFile(filePath);
-    return createHash("sha256").update(content).digest("hex");
+    return createHash2("sha256").update(content).digest("hex");
   } catch {
     return null;
   }
@@ -2802,6 +3100,97 @@ async function hostRotateKeyCommand(hostName) {
     process.exitCode = 1;
   }
 }
+async function hostMaintenanceWindowCommand(hostName, opts) {
+  const teamSlug = requireTeam();
+  if (!teamSlug) return;
+  const json = isJsonMode();
+  const path = `/hosts/${encodeURIComponent(hostName)}/maintenance-window`;
+  const setting = opts.clear || opts.start !== void 0 || opts.end !== void 0 || opts.tz !== void 0;
+  if (!setting) {
+    const spinner2 = ora12({ text: "Fetching maintenance window\u2026", isSilent: json });
+    spinner2.start();
+    try {
+      const data = await api.get(path);
+      spinner2.stop();
+      if (json) {
+        jsonOutput({ ok: true, ...data });
+        return;
+      }
+      const ov = data.override;
+      const hasOverride = ov.maintenance_window_start !== null || ov.maintenance_window_end !== null || ov.maintenance_timezone !== null;
+      info(`Host:      ${chalk12.bold(hostName)}`);
+      info(
+        `Effective: ${chalk12.green(`${data.effective.start}\u2013${data.effective.end}`)} ${data.effective.timezone}`
+      );
+      info(
+        `Override:  ${hasOverride ? chalk12.cyan("set") : chalk12.dim("none (default 01:00\u201302:00)")}`
+      );
+      info("Set with --start/--end/--tz, or --clear to follow the default.");
+    } catch (err) {
+      spinner2.fail("Failed to fetch maintenance window.");
+      if (json) jsonOutput({ ok: false, error: err.message });
+      else error(err.message);
+      process.exitCode = 1;
+    }
+    return;
+  }
+  if (opts.clear && (opts.start !== void 0 || opts.end !== void 0 || opts.tz !== void 0)) {
+    const msg = "Use --clear on its own \u2014 it cannot be combined with --start/--end/--tz.";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  if (!opts.clear && opts.start === void 0 !== (opts.end === void 0)) {
+    const msg = "Provide both --start and --end (or use --clear).";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  if (!opts.clear && opts.tz !== void 0 && opts.start === void 0) {
+    const msg = "Provide --start and --end when setting --tz (or use --clear).";
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
+  let resolvedTz = opts.tz ?? null;
+  if (!opts.clear && opts.tz === void 0) {
+    try {
+      const cur = await api.get(path);
+      resolvedTz = cur.override.maintenance_timezone;
+    } catch (err) {
+      const spinner0 = ora12({ isSilent: json });
+      spinner0.fail("Failed to read current maintenance window.");
+      if (json) jsonOutput({ ok: false, error: err.message });
+      else error(err.message);
+      process.exitCode = 1;
+      return;
+    }
+  }
+  const payload = opts.clear ? { maintenance_window_start: null, maintenance_window_end: null, maintenance_timezone: null } : {
+    maintenance_window_start: opts.start ?? null,
+    maintenance_window_end: opts.end ?? null,
+    maintenance_timezone: resolvedTz
+  };
+  const spinner = ora12({ text: "Updating maintenance window\u2026", isSilent: json });
+  spinner.start();
+  try {
+    const data = await api.post(path, payload);
+    spinner.succeed(`Maintenance window updated for ${chalk12.bold(hostName)}.`);
+    if (json) {
+      jsonOutput({ ok: true, ...data });
+      return;
+    }
+    if (data.note) info(data.note);
+  } catch (err) {
+    spinner.fail("Failed to update maintenance window.");
+    if (json) jsonOutput({ ok: false, error: err.message });
+    else error(err.message);
+    process.exitCode = 1;
+  }
+}
 async function hostDecommissionCommand(hostName) {
   const teamSlug = requireTeam();
   if (!teamSlug) return;
@@ -2989,7 +3378,7 @@ function terminate(child) {
 // src/commands/manager-watch.tsx
 import { useEffect, useState, useMemo } from "react";
 import { render, Box, Text, useApp, useInput } from "ink";
-import { existsSync as existsSync6, readFileSync as readFileSync6, statSync, openSync, readSync, closeSync } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, statSync, openSync, readSync, closeSync } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join12 } from "path";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3021,7 +3410,7 @@ function managerWatchCommand(opts = {}) {
 }
 function readState(stateFile) {
   try {
-    if (!existsSync6(stateFile)) return null;
+    if (!existsSync7(stateFile)) return null;
     const raw = readFileSync6(stateFile, "utf-8");
     return JSON.parse(raw);
   } catch {
@@ -3029,7 +3418,7 @@ function readState(stateFile) {
   }
 }
 function tailLogFile(logFile, lines) {
-  if (!existsSync6(logFile)) return [];
+  if (!existsSync7(logFile)) return [];
   try {
     const fileSize = statSync(logFile).size;
     if (fileSize === 0) return [];
@@ -3270,7 +3659,7 @@ function truncate(s, max) {
   return s.length > max ? `${s.slice(0, Math.max(0, max - 1))}\u2026` : s;
 }
 function streamLogFile(logFile) {
-  if (!existsSync6(logFile)) {
+  if (!existsSync7(logFile)) {
     process.stderr.write(`No manager log found at ${logFile}.
 Start the manager first: agt manager start
 `);
@@ -3316,14 +3705,14 @@ Start the manager first: agt manager start
 // src/commands/agent.ts
 import chalk14 from "chalk";
 import JSON52 from "json5";
-import { readFileSync as readFileSync7, existsSync as existsSync7 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 import { join as join13 } from "path";
 async function agentShowCommand(codeName, opts) {
   const json = isJsonMode();
   const unifiedDir = join13(opts.configDir, codeName, "provision");
   const legacyDir = join13(opts.configDir, codeName, "claudecode", "provision");
-  const agentDir = existsSync7(unifiedDir) ? unifiedDir : legacyDir;
-  const hasLocalConfig = existsSync7(agentDir);
+  const agentDir = existsSync8(unifiedDir) ? unifiedDir : legacyDir;
+  const hasLocalConfig = existsSync8(agentDir);
   let apiChannels = null;
   let apiAgent = null;
   if (getApiKey()) {
@@ -3357,7 +3746,7 @@ async function agentShowCommand(codeName, opts) {
   let agentState = null;
   if (hasLocalConfig) {
     const charterPath = join13(agentDir, "CHARTER.md");
-    if (existsSync7(charterPath)) {
+    if (existsSync8(charterPath)) {
       const raw = readFileSync7(charterPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
@@ -3365,7 +3754,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const toolsPath = join13(agentDir, "TOOLS.md");
-    if (existsSync7(toolsPath)) {
+    if (existsSync8(toolsPath)) {
       const raw = readFileSync7(toolsPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
@@ -3373,7 +3762,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const openclawPath = join13(agentDir, "openclaw.json5");
-    if (existsSync7(openclawPath)) {
+    if (existsSync8(openclawPath)) {
       try {
         const raw = readFileSync7(openclawPath, "utf-8");
         openclawConfig = JSON52.parse(raw);
@@ -3381,7 +3770,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const statePath = join13(opts.configDir, "manager-state.json");
-    if (existsSync7(statePath)) {
+    if (existsSync8(statePath)) {
       try {
         const raw = readFileSync7(statePath, "utf-8");
         const state = JSON.parse(raw);
@@ -3720,8 +4109,8 @@ async function kanbanRecurringDisableCommand(titleOrId, opts) {
 }
 
 // src/commands/setup.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7, accessSync, constants as fsConstants } from "fs";
-import { join as join14, dirname as dirname3 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7, accessSync, constants as fsConstants } from "fs";
+import { join as join14, dirname as dirname4 } from "path";
 import { homedir as homedir5 } from "os";
 import chalk16 from "chalk";
 import ora14 from "ora";
@@ -3736,7 +4125,7 @@ function detectShellProfile() {
     return fishConfig;
   }
   const bashrc = join14(home, ".bashrc");
-  if (existsSync8(bashrc)) return bashrc;
+  if (existsSync9(bashrc)) return bashrc;
   return join14(home, ".bash_profile");
 }
 function maybeWriteSystemWideEnv(apiUrl, apiKey, consoleUrl) {
@@ -3763,7 +4152,7 @@ function quoteForFishShell(value) {
 }
 function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
   const envPath = "/etc/environment";
-  if (!existsSync8(envPath)) return false;
+  if (!existsSync9(envPath)) return false;
   try {
     accessSync(envPath, fsConstants.W_OK);
   } catch {
@@ -3789,7 +4178,7 @@ function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
 }
 function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
   const profileD = "/etc/profile.d";
-  if (!existsSync8(profileD)) return false;
+  if (!existsSync9(profileD)) return false;
   try {
     accessSync(profileD, fsConstants.W_OK);
   } catch {
@@ -3812,7 +4201,7 @@ function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
 }
 function ensureBashrcSourcesProfileD() {
   const bashrc = "/etc/bashrc";
-  if (!existsSync8(bashrc)) return false;
+  if (!existsSync9(bashrc)) return false;
   try {
     accessSync(bashrc, fsConstants.W_OK);
   } catch {
@@ -3858,7 +4247,7 @@ function buildExportLines(shell, apiUrl, apiKey, consoleUrl) {
   lines.push("");
   return lines.join("\n");
 }
-async function setupCommand(token) {
+async function setupCommand(token, options = {}) {
   const json = isJsonMode();
   const shortTokenPattern = /^[A-HJ-NP-Z2-9]{4}-[A-HJ-NP-Z2-9]{4}$/i;
   const legacyTokenPattern = /^prov_[a-f0-9]{64}$/i;
@@ -3873,11 +4262,24 @@ async function setupCommand(token) {
     return;
   }
   const normalizedToken = shortTokenPattern.test(token) ? token.toUpperCase() : token.toLowerCase();
-  let apiUrl = process.env["AGT_HOST"];
+  const apiHostFlag = options.apiHost?.trim();
+  const envHost = process.env["AGT_HOST"]?.trim();
+  const apiUrl = apiHostFlag || envHost;
   if (!apiUrl) {
-    apiUrl = "https://api.augmented.team";
-    if (!json) {
-      info(`No AGT_HOST set \u2014 using default: ${chalk16.bold(apiUrl)}`);
+    const msg = "Cannot determine API host for token exchange. Pass --api-host <url> or set AGT_HOST before running `agt setup`.\n  Production:        --api-host https://api.augmented.team\n  Non-prod stage:    --api-host https://<stage>.api.staging.augmented.team\n  Local development: --api-host http://api.agt.localhost:1355";
+    if (json) {
+      jsonOutput({ ok: false, error: msg });
+    } else {
+      error(msg);
+    }
+    process.exitCode = 1;
+    return;
+  }
+  if (!json) {
+    if (apiHostFlag) {
+      info(`Exchanging token against ${chalk16.bold(apiUrl)} (from --api-host)`);
+    } else {
+      info(`Exchanging token against ${chalk16.bold(apiUrl)} (from AGT_HOST)`);
     }
   }
   const spinner = ora14({ text: "Exchanging provisioning token\u2026", isSilent: json });
@@ -3945,12 +4347,12 @@ async function setupCommand(token) {
     );
   }
   const exportLines = buildExportLines(shell, finalApiUrl, setupResult.api_key, consoleUrl);
-  const profileDir = dirname3(profilePath);
-  if (!existsSync8(profileDir)) {
+  const profileDir = dirname4(profilePath);
+  if (!existsSync9(profileDir)) {
     mkdirSync7(profileDir, { recursive: true });
   }
   const marker = "# Augmented (agt) host configuration";
-  const current = existsSync8(profilePath) ? readFileSync8(profilePath, "utf-8") : "";
+  const current = existsSync9(profilePath) ? readFileSync8(profilePath, "utf-8") : "";
   let updated;
   if (current.includes(marker)) {
     updated = current.replace(
@@ -4529,10 +4931,10 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 
 // src/commands/update.ts
 import { execFileSync, execSync } from "child_process";
-import { existsSync as existsSync9, realpathSync as realpathSync2 } from "fs";
+import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.8" : "dev";
+var cliVersion = true ? "0.27.9-test.11" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4636,7 +5038,7 @@ function performUpdate(version) {
 function detectBrewOwner() {
   for (const prefix of ["/home/linuxbrew/.linuxbrew", "/opt/homebrew", "/usr/local"]) {
     const cellar = `${prefix}/Cellar`;
-    if (!existsSync9(cellar)) continue;
+    if (!existsSync10(cellar)) continue;
     try {
       return execSync(`stat -c %U "${cellar}" 2>/dev/null || stat -f %Su "${cellar}"`, { encoding: "utf-8" }).trim() || null;
     } catch {
@@ -4763,6 +5165,397 @@ async function checkForUpdateOnStartup() {
   }
 }
 
+// src/commands/audit-subagents.ts
+import { homedir as homedir6 } from "os";
+import { join as join16 } from "path";
+
+// src/lib/subagent-mcp-audit.ts
+import { readdirSync as readdirSync4, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
+import { join as join15 } from "path";
+function parseFrontmatter(content) {
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!match) return null;
+  const out = {};
+  const lines = match[1].split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const m = line.match(/^(name|tools|background):\s*(.*)$/);
+    if (!m) continue;
+    const [, key, rawValue] = m;
+    const trimmed = rawValue.trim();
+    if (key === "tools" && trimmed === "") {
+      const items = [];
+      let j = i + 1;
+      while (j < lines.length) {
+        const nextRaw = lines[j];
+        const itemMatch = nextRaw.match(/^(\s+)-\s*(.+?)\s*$/);
+        if (!itemMatch) break;
+        items.push(itemMatch[2].replace(/^['"](.*)['"]$/, "$1"));
+        j++;
+      }
+      if (items.length > 0) {
+        out.tools = items.join(", ");
+        i = j - 1;
+        continue;
+      }
+    }
+    out[key] = trimmed;
+  }
+  return out;
+}
+function toolsExcludeMcp(tools) {
+  if (tools.length === 0) return false;
+  if (/\bmcp__/.test(tools)) return false;
+  if (/\*/.test(tools)) return false;
+  if (/\bAll tools\b/i.test(tools)) return false;
+  return true;
+}
+function findSubagentFiles(dir, depth = 0) {
+  if (depth > 6) return [];
+  let entries;
+  try {
+    entries = readdirSync4(dir);
+  } catch {
+    return [];
+  }
+  const out = [];
+  const isAgentsDir = dir.endsWith("/agents") || dir.endsWith("\\agents");
+  for (const entry of entries) {
+    const full = join15(dir, entry);
+    let s;
+    try {
+      s = statSync2(full);
+    } catch {
+      continue;
+    }
+    if (s.isDirectory()) {
+      out.push(...findSubagentFiles(full, depth + 1));
+    } else if (s.isFile() && isAgentsDir && entry.endsWith(".md")) {
+      out.push(full);
+    }
+  }
+  return out;
+}
+function auditSubagentMcpBindings(rootDirs) {
+  const findings = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const root of rootDirs) {
+    for (const file of findSubagentFiles(root)) {
+      if (seen.has(file)) continue;
+      seen.add(file);
+      let content;
+      try {
+        content = readFileSync9(file, "utf-8");
+      } catch {
+        continue;
+      }
+      const fm = parseFrontmatter(content);
+      if (!fm || typeof fm.tools !== "string") continue;
+      if (!toolsExcludeMcp(fm.tools)) continue;
+      findings.push({
+        file,
+        name: fm.name ?? "<unknown>",
+        tools: fm.tools,
+        reason: "restrictive-tools-no-mcp"
+      });
+    }
+  }
+  return findings;
+}
+function formatFinding(f) {
+  return `[manager-worker] [subagent-mcp-audit] file=${f.file} name=${f.name} reason=${f.reason} tools=${JSON.stringify(f.tools)}`;
+}
+
+// src/commands/audit-subagents.ts
+function defaultRoots() {
+  const home = homedir6();
+  return [
+    join16(home, ".claude", "agents"),
+    join16(home, ".claude", "plugins"),
+    join16(process.cwd(), ".claude", "agents")
+  ];
+}
+async function auditSubagentsCommand(options = {}) {
+  const roots = defaultRoots();
+  const findings = auditSubagentMcpBindings(roots);
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings, roots }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write("No restrictive sub-agents found \u2014 every sub-agent under the scanned roots either inherits the parent toolset or explicitly includes mcp__* wildcards.\n");
+  } else {
+    process.stdout.write(`Found ${findings.length} sub-agent${findings.length === 1 ? "" : "s"} whose tools allowlist excludes mcp__*:
+
+`);
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 ${f.name}  (${f.file})
+`);
+      process.stdout.write(`    tools: ${f.tools}
+`);
+    }
+    process.stdout.write(
+      "\nThese sub-agents will return \"No such tool available.\" for every mcp__* call when dispatched from a managed agent. If the parent needs to do MCP-tool work, dispatch the Augmented plugin's `augmented-worker` sub-agent instead \u2014 it omits `tools:` so it inherits the parent's full toolset including every MCP server. See ENG-5897.\n"
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
+// src/lib/mcp-render-allowlist-audit.ts
+import { readdirSync as readdirSync5, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join17 } from "path";
+function expectedWildcard(serverKey) {
+  return `mcp__${serverKey.replace(/-/g, "_")}__*`;
+}
+function parseMcpWildcardsFromToolsLine(content) {
+  const toolsLine = content.split("\n").find((l) => l.startsWith("tools:"));
+  if (!toolsLine) return null;
+  const value = toolsLine.replace(/^tools:\s*/, "").trim();
+  if (value.length === 0) return [];
+  return value.split(/\s*,\s*/).map((t) => t.trim()).filter((t) => t.startsWith("mcp__"));
+}
+function readMcpServerKeys(mcpJsonPath) {
+  try {
+    const config = JSON.parse(readFileSync10(mcpJsonPath, "utf-8"));
+    return Object.keys(config.mcpServers ?? {});
+  } catch {
+    return null;
+  }
+}
+function auditMcpRenderAllowlist(rootDir = join17(homedir7(), ".augmented")) {
+  const findings = [];
+  let entries;
+  try {
+    entries = readdirSync5(rootDir);
+  } catch {
+    return findings;
+  }
+  for (const entry of entries) {
+    const agentDir = join17(rootDir, entry);
+    let s;
+    try {
+      s = statSync3(agentDir);
+    } catch {
+      continue;
+    }
+    if (!s.isDirectory() || entry.startsWith("_") || entry.startsWith(".")) continue;
+    for (const scope of ["provision", "project"]) {
+      const mcpJsonPath = scope === "provision" ? join17(agentDir, "provision", ".mcp.json") : join17(agentDir, "project", ".mcp.json");
+      const keys = readMcpServerKeys(mcpJsonPath);
+      if (keys === null || keys.length === 0) continue;
+      const expected = new Set(keys.map(expectedWildcard));
+      for (const subagent of ["channel-message-handler", "augmented-worker"]) {
+        const mdPath = scope === "provision" ? join17(agentDir, ".claude", "agents", `${subagent}.md`) : join17(agentDir, "project", ".claude", "agents", `${subagent}.md`);
+        let content;
+        try {
+          content = readFileSync10(mdPath, "utf-8");
+        } catch {
+          continue;
+        }
+        const declared = parseMcpWildcardsFromToolsLine(content);
+        if (declared === null) continue;
+        const declaredSet = new Set(declared);
+        const missing = [...expected].filter((w) => !declaredSet.has(w));
+        if (missing.length > 0) {
+          findings.push({ agent: entry, subagent, scope, missing, file: mdPath });
+        }
+      }
+    }
+  }
+  return findings;
+}
+function formatRenderDriftFinding(f) {
+  return `[manager-worker] [mcp-render-drift] agent=${f.agent} subagent=${f.subagent} scope=${f.scope} missing=${JSON.stringify(f.missing)} file=${f.file}`;
+}
+
+// src/commands/audit-mcp-render.ts
+async function auditMcpRenderCommand(options = {}) {
+  const findings = auditMcpRenderAllowlist();
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write(
+      "No render drift found. Every managed agent's sub-agent .md `tools:` allowlist covers every server in its `.mcp.json`.\n"
+    );
+  } else {
+    process.stdout.write(
+      `Found ${findings.length} sub-agent .md file${findings.length === 1 ? "" : "s"} with a stale tools allowlist:
+
+`
+    );
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 ${f.agent}/${f.scope}/${f.subagent}.md
+`);
+      process.stdout.write(`    missing: ${f.missing.join(", ")}
+`);
+      process.stdout.write(`    file:    ${f.file}
+`);
+    }
+    process.stdout.write(
+      '\nA missing wildcard means the sub-agent will get "No such tool available." on any call to that MCP server. The fix is to force a re-render (e.g. by adding/removing any MCP server, which routes through syncMcpToProject), OR restart the manager so the next poll picks up the live `.mcp.json` state. The root-cause write path that bypassed the render chokepoint is tracked in ENG-5922.\n'
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatRenderDriftFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
+// src/commands/audit-secrets.ts
+import { homedir as homedir8 } from "os";
+import { join as join19 } from "path";
+
+// src/lib/secret-leak-audit.ts
+import { readdirSync as readdirSync6, readFileSync as readFileSync11, statSync as statSync4 } from "fs";
+import { join as join18 } from "path";
+var SECRET_KEY_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
+function isTemplated(value) {
+  return value.includes("${");
+}
+function matchesKnownSecretShape(value) {
+  return LITERAL_SECRET_PATTERNS.some(({ re }) => re.test(value));
+}
+function isWorldReadable(mode) {
+  return (mode & 63) !== 0;
+}
+function octal(mode) {
+  return `0${(mode & 511).toString(8)}`;
+}
+function scanMcpFile(file, agent2, findings) {
+  let mode = null;
+  try {
+    mode = statSync4(file).mode;
+  } catch {
+    return;
+  }
+  if (mode !== null && isWorldReadable(mode)) {
+    findings.push({ kind: "world-readable-secret-file", file, agent: agent2, mode: octal(mode) });
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync11(file, "utf-8"));
+  } catch {
+    return;
+  }
+  const servers = parsed?.mcpServers;
+  if (typeof servers !== "object" || servers === null) return;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null) continue;
+    const entry = raw;
+    const blocks = [
+      [entry.env, "env"],
+      [entry.headers, "header"]
+    ];
+    for (const [block, location] of blocks) {
+      if (!block) continue;
+      for (const [field, value] of Object.entries(block)) {
+        if (typeof value !== "string" || value.length === 0) continue;
+        if (isTemplated(value)) continue;
+        if (!SECRET_KEY_NAME_RE.test(field) && !matchesKnownSecretShape(value)) continue;
+        findings.push({ kind: "literal-secret-in-mcp", file, agent: agent2, server, field, location });
+      }
+    }
+  }
+}
+function scanEnvIntegrations(file, agent2, findings) {
+  let mode;
+  try {
+    mode = statSync4(file).mode;
+  } catch {
+    return;
+  }
+  if (isWorldReadable(mode)) {
+    findings.push({ kind: "world-readable-secret-file", file, agent: agent2, mode: octal(mode) });
+  }
+}
+function auditSecretLeaks(augmentedRoot) {
+  const findings = [];
+  let agents;
+  try {
+    agents = readdirSync6(augmentedRoot);
+  } catch {
+    return findings;
+  }
+  for (const agent2 of agents) {
+    const agentDir = join18(augmentedRoot, agent2);
+    try {
+      if (!statSync4(agentDir).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    scanMcpFile(join18(agentDir, "provision", ".mcp.json"), agent2, findings);
+    scanMcpFile(join18(agentDir, "project", ".mcp.json"), agent2, findings);
+    scanEnvIntegrations(join18(agentDir, ".env.integrations"), agent2, findings);
+  }
+  return findings;
+}
+function formatSecretFinding(f) {
+  const parts = [
+    "[audit-secrets]",
+    `kind=${f.kind}`,
+    `agent=${f.agent}`,
+    `file=${f.file}`
+  ];
+  if (f.server) parts.push(`server=${f.server}`);
+  if (f.field) parts.push(`field=${f.field}`);
+  if (f.location) parts.push(`location=${f.location}`);
+  if (f.mode) parts.push(`mode=${f.mode}`);
+  return parts.join(" ");
+}
+
+// src/commands/audit-secrets.ts
+function describe(f) {
+  if (f.kind === "literal-secret-in-mcp") {
+    return `literal secret in ${f.location} field '${f.field}' of server '${f.server}'`;
+  }
+  return `secret file is mode ${f.mode} (expected 0600)`;
+}
+async function auditSecretsCommand(options = {}) {
+  const root = options.root ?? join19(homedir8(), ".augmented");
+  const findings = auditSecretLeaks(root);
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings, root }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write(
+      `No literal secrets or world-readable secret files found under ${root}.
+`
+    );
+  } else {
+    process.stdout.write(
+      `Found ${findings.length} secret-handling issue${findings.length === 1 ? "" : "s"} under ${root}:
+
+`
+    );
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 [${f.agent}] ${describe(f)}
+`);
+      process.stdout.write(`    ${f.file}
+`);
+    }
+    process.stdout.write(
+      "\nLiteral secrets in .mcp.json should be `${VAR}` placeholders with the raw value in .env.integrations (mode 0600). See docs/operator/credential-migration-eng5898.md.\n"
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatSecretFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
 // src/commands/integration.ts
 import chalk19 from "chalk";
 import ora17 from "ora";
@@ -4770,7 +5563,7 @@ async function integrationListCommand() {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching integrations\u2026", isSilent: json }).start();
   try {
-    const data = await api.get("/integrations/bindings");
+    const data = await api.get("/integrations/installs");
     spinner.stop();
     if (json) {
       jsonOutput({ integrations: data });
@@ -4797,7 +5590,7 @@ async function integrationShowCommand(slug) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -4805,7 +5598,7 @@ async function integrationShowCommand(slug) {
       process.exitCode = 1;
       return;
     }
-    const scopes = await api.get(`/integrations/bindings/${integration2.id}/scopes`);
+    const scopes = await api.get(`/integrations/installs/${integration2.id}/scopes`);
     spinner.stop();
     if (json) {
       jsonOutput({ integration: integration2, scopes });
@@ -4839,7 +5632,7 @@ async function integrationInstallCommand(slug, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Installing integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -4856,7 +5649,7 @@ async function integrationInstallCommand(slug, options) {
       return;
     }
     const scopes = options.scopes?.split(",").map((s) => s.trim()).filter(Boolean) ?? [];
-    const result = await api.post("/integrations/bindings/install", {
+    const result = await api.post("/integrations/installs/install", {
       agent_id: agent2.agent_id,
       plugin_id: integration2.id,
       scopes
@@ -4889,7 +5682,7 @@ async function integrationUninstallCommand(slug, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Uninstalling integration\u2026", isSilent: json }).start();
   try {
-    const all = await api.get("/integrations/bindings");
+    const all = await api.get("/integrations/installs");
     const integration2 = all.find((p) => p.slug === slug);
     if (!integration2) {
       spinner.stop();
@@ -4905,7 +5698,7 @@ async function integrationUninstallCommand(slug, options) {
       process.exitCode = 1;
       return;
     }
-    await api.post("/integrations/bindings/uninstall", {
+    await api.post("/integrations/installs/uninstall", {
       agent_id: agent2.agent_id,
       plugin_id: integration2.id
     });
@@ -4920,7 +5713,7 @@ async function integrationRequestsCommand() {
   const json = isJsonMode();
   const spinner = ora17({ text: "Fetching scope requests\u2026", isSilent: json }).start();
   try {
-    const requests = await api.get("/integrations/bindings/scope-requests");
+    const requests = await api.get("/integrations/installs/scope-requests");
     spinner.stop();
     if (json) {
       jsonOutput({ requests });
@@ -4946,7 +5739,7 @@ async function integrationApproveCommand(requestId, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Approving request\u2026", isSilent: json }).start();
   try {
-    const result = await api.put(`/integrations/bindings/scope-requests/${requestId}`, {
+    const result = await api.put(`/integrations/installs/scope-requests/${requestId}`, {
       status: "approved",
       review_notes: options.notes
     });
@@ -4965,7 +5758,7 @@ async function integrationDenyCommand(requestId, options) {
   const json = isJsonMode();
   const spinner = ora17({ text: "Denying request\u2026", isSilent: json }).start();
   try {
-    const result = await api.put(`/integrations/bindings/scope-requests/${requestId}`, {
+    const result = await api.put(`/integrations/installs/scope-requests/${requestId}`, {
       status: "denied",
       review_notes: options.reason
     });
@@ -5027,7 +5820,7 @@ async function integrationEnrolCommand(options) {
     }
     let displayName = options.displayName;
     if (!displayName) {
-      const defs = await api.get("/integrations/bindings");
+      const defs = await api.get("/integrations/installs");
       const def = defs.find((d) => d.slug === options.def);
       displayName = def?.name ?? options.def;
     }
@@ -5064,17 +5857,29 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.8" : "dev";
+var cliVersion2 = true ? "0.27.9-test.11" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
-program.hook("preAction", (thisCommand) => {
+program.hook("preAction", async (thisCommand, actionCommand) => {
   const root = thisCommand.optsWithGlobals();
   if (root.json) {
     setJsonMode(true);
   }
+  const segs = [];
+  for (let c = actionCommand; c && c.parent; c = c.parent) segs.unshift(c.name());
+  const cmdPath = segs.join(" ");
+  if (cmdPath !== "impersonate introduce" && cmdPath !== "impersonate exit") {
+    await autoExitExpiredImpersonation();
+  }
 });
 program.command("whoami").description("Show the authenticated host, team, and user from AGT_API_KEY").action(whoamiCommand);
-program.command("setup <token>").description("One-command host setup: exchange provisioning token, configure env vars, verify, and start manager").action(setupCommand);
+program.command("setup <token>").description("One-command host setup: exchange provisioning token, configure env vars, verify, and start manager").option(
+  "--api-host <url>",
+  // ENG-5831: required when AGT_HOST is not set in the shell — the setup
+  // command no longer silently defaults to prod. Mirrors `agt impersonate
+  // connect --api-host` (ENG-5773).
+  "API host to exchange the provisioning token against. Takes precedence over AGT_HOST. Required when AGT_HOST is unset (e.g. https://test.api.staging.augmented.team for the test stage; https://api.augmented.team for prod)."
+).action(setupCommand);
 var team = program.command("team").description("Manage teams");
 team.command("list").description("List teams you belong to").action(teamListCommand);
 team.command("create <name>").description("Create a new team and set it as active").action(teamCreateCommand);
@@ -5105,8 +5910,12 @@ impersonate.command("connect <token>").description(
     })
   )
 );
-impersonate.command("current").description('Print the active impersonation (or "none")').action(impersonateCurrentCommand);
-impersonate.command("exit").description("End the active impersonation, restore project files, and notify the server").action(impersonateExitCommand);
+impersonate.command("current").description('Print the active impersonation for this directory (or "none")').option("--all", "List every active impersonation session on this machine").action(
+  (opts) => impersonateCurrentCommand({ all: opts.all === true })
+);
+impersonate.command("exit").description("End this directory's impersonation, restore project files, and notify the server").option("--all", "Exit every active impersonation session on this machine").action(
+  (opts) => impersonateExitCommand({ all: opts.all === true })
+);
 impersonate.command("introduce", { hidden: true }).description("Print the impersonated agent's self-introduction (SessionStart hook target)").action(impersonateIntroduceCommand);
 program.command("init").description("Create a new agent (interactive wizard, or non-interactive with --name)").option("--name <display-name>", "Agent display name (triggers non-interactive mode)").option("--code-name <code-name>", "Agent code name (kebab-case, derived from --name if omitted)").option("--description <text>", "Short agent description").option("--env <environment>", "Environment: dev | stage | prod", "dev").option("--risk-tier <tier>", "Risk tier: Low | Medium | High", "Low").option("--budget-type <type>", "Budget type: tokens | dollars | both", "tokens").option("--budget-tokens <number>", "Token budget limit", "10000").option("--budget-dollars <number>", "Dollar budget limit", "10").option("--budget-window <window>", "Budget window: daily | weekly | monthly", "daily").option("--budget-enforcement <mode>", "Budget enforcement: block | throttle | alert | degrade", "block").option("--channels <list>", "Comma-separated channel IDs").option("--logging <mode>", "Logging mode: redacted | hash-only | full-local", "redacted").action(initCommand);
 program.command("lint").argument("[path]", "Path to agent directory (default: all agents in .augmented/)").description("Lint CHARTER.md and TOOLS.md files").action(lintCommand);
@@ -5133,6 +5942,7 @@ host.command("unassign <host-name> <agent-code-names...>").description("Unassign
 host.command("agents [host-name]").description("List agents assigned to a host (omit name to auto-resolve from AGT_API_KEY)").action(hostAgentsCommand);
 host.command("rotate-key <host-name>").description("Rotate the API key for a host (revokes the old key)").action(hostRotateKeyCommand);
 host.command("decommission <host-name>").description("Decommission a host (revokes key, marks inactive)").action(hostDecommissionCommand);
+host.command("maintenance-window <host-name>").description("View or set the host maintenance window for restart-causing updates").option("--start <HH:MM>", "Window start, 24h local time (e.g. 01:00)").option("--end <HH:MM>", "Window end, 24h local time (e.g. 02:00)").option("--tz <IANA>", "Window timezone (e.g. Australia/Sydney)").option("--clear", "Clear the override and follow the default 01:00\u201302:00").action(hostMaintenanceWindowCommand);
 host.command("pair <host-name>").description("Start an SSM port-forward + shell to re-authenticate Claude Code on an EC2 host").option("--port <port>", "Local port to forward for the OAuth callback", "54545").option("--no-shell", "Start the tunnel only; do not open an interactive shell").action(
   (hostName, opts) => hostPairCommand(hostName, {
     port: opts.port,
@@ -5140,16 +5950,16 @@ host.command("pair <host-name>").description("Start an SSM port-forward + shell
   })
 );
 var manager = program.command("manager").description("Host config sync daemon \u2014 keeps local agent files in sync with API");
-manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
-manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStopCommand);
-manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStatusCommand);
-manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
-manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerInstallCommand);
+manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
+manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerStopCommand);
+manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerStatusCommand);
+manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
+manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join20(homedir9(), ".augmented")).action(managerInstallCommand);
 manager.command("uninstall").description("Remove the OS-level supervisor (launchctl unload + delete plist on macOS). Idempotent.").action(managerUninstallCommand);
 manager.command("install-system-unit").description("Install a system-level systemd unit (Linux, root) so the manager auto-starts on every boot. For headless EC2 hosts \u2014 survives reboot without `loginctl enable-linger`. (ENG-4706)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files (defaults to /root/.augmented or /home/<user>/.augmented)").option("--user <name>", "Unix user the manager runs as", "root").action(managerInstallSystemUnitCommand);
 manager.command("uninstall-system-unit").description("Remove the system-level systemd unit (Linux, root). Idempotent. (ENG-4706)").action(managerUninstallSystemUnitCommand);
 var agent = program.command("agent").description("Inspect and manage agents");
-agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join15(homedir6(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
+agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join20(homedir9(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
 var kanban = program.command("kanban").description("Manage agent kanban boards");
 kanban.command("list").description("List kanban board items for an agent").requiredOption("--agent <code-name>", "Agent code name").action(kanbanListCommand);
 kanban.command("add <title>").description("Add a new item to an agent kanban board").requiredOption("--agent <code-name>", "Agent code name").option("--priority <1|2|3>", "Priority: 1=high, 2=medium, 3=low", "2").option("--status <status>", "Initial status: backlog | todo | in_progress", "todo").option("--description <text>", "Item description").option("--estimate <minutes>", "Estimated time in minutes").option("--deliverable <text>", "Expected output/deliverable").action(kanbanAddCommand);
@@ -5177,10 +5987,17 @@ integration.command("approve <request-id>").description("Approve a scope request
 integration.command("deny <request-id>").description("Deny a scope request").option("--reason <text>", "Denial reason").action(integrationDenyCommand);
 integration.command("enrol").description("Enrol an integration with an API key or webhook secret (no OAuth flow)").requiredOption("--def <code-name>", "Integration definition code_name (e.g. resend, xero)").requiredOption("--scope <org|team|agent>", "Install scope").option("--api-key <value>", "API key (sets auth_type=api_key)").option("--access-token <value>", "Bearer access token (sets auth_type=oauth2)").option("--webhook-secret <value>", "Webhook signing secret (sets auth_type=webhook)").option("--display-name <name>", "Override display name (defaults to the definition\u2019s display_name)").option("--agent <code-name>", "Agent code name (required for agent scope)").action(integrationEnrolCommand);
 program.command("update").description("Check for and install CLI updates").option("--force", "Update even if manager or agent sessions are running").action(updateCommand);
+var audit = program.command("audit").description("Operator audits \u2014 sub-agent MCP bindings, etc.");
+audit.command("subagents").description("Find sub-agents whose tools allowlist would block mcp__* calls on dispatch (ENG-5897)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditSubagentsCommand);
+audit.command("mcp-render").description("Find managed agents whose subagent .md tools allowlist is stale vs .mcp.json (ENG-5922)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditMcpRenderCommand);
+audit.command("secrets").description("Find literal secrets in .mcp.json and world-readable secret files (ENG-5901)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditSecretsCommand);
 var skipUpdateCheck = process.argv.includes("--skip-update-check") || process.argv.includes("--json") || process.argv[2] === "update";
 if (!skipUpdateCheck) {
   checkForUpdateOnStartup().catch(() => {
   });
 }
-program.parse();
+program.parseAsync().catch((err) => {
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exitCode = 1;
+});
 //# sourceMappingURL=agt.js.map