@integrity-labs/agt-cli 0.28.1123 → 0.28.1125

package/dist/lib/manager-worker.js

@@ -1,3 +1,6 @@
+import {
+  hostClaudeOneShotArgs
+} from "../chunk-JEC3BUC6.js";
 import {
   ApiError,
   COMPUTER_USE_MCP_KEY,
@@ -68,7 +71,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-E2RGZJA2.js";
+} from "../chunk-JHKH2EYM.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -155,7 +158,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-IXCMKMDT.js";
+} from "../chunk-C5YNHEST.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -265,7 +268,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-J7GZNCX2.js";
+} from "../chunk-JI2D2TA2.js";
 import {
   classifyUnanswerablePane,
   paneRemedy
@@ -284,7 +287,7 @@ import "../chunk-DGUM43GV.js";
 
 // src/lib/manager-worker.ts
 import { createHash as createHash20 } from "crypto";
-import { readFileSync as readFileSync34, writeFileSync as writeFileSync18, mkdirSync as mkdirSync15, existsSync as existsSync19, rmSync as rmSync8, readdirSync as readdirSync13, statSync as statSync14, unlinkSync as unlinkSync6, renameSync as renameSync11, utimesSync as utimesSync4 } from "fs";
+import { readFileSync as readFileSync34, writeFileSync as writeFileSync18, mkdirSync as mkdirSync16, existsSync as existsSync19, rmSync as rmSync8, readdirSync as readdirSync13, statSync as statSync14, unlinkSync as unlinkSync6, renameSync as renameSync11, utimesSync as utimesSync4 } from "fs";
 
 // src/lib/atomic-file-replace.ts
 import { copyFileSync, renameSync, unlinkSync } from "fs";
@@ -3334,24 +3337,6 @@ async function maybePollHostUsage(deps) {
   }
 }
 
-// src/lib/claude-host-args.ts
-var HOST_CLAUDE_RETENTION_SETTINGS = JSON.stringify({ cleanupPeriodDays: 3650 });
-function hostClaudeOneShotArgs(emptyMcpConfigPath) {
-  return [
-    // No project config, no MCP, no tools: these exercise the model or auth only.
-    "--mcp-config",
-    emptyMcpConfigPath,
-    "--strict-mcp-config",
-    "--permission-mode",
-    "auto",
-    "--allowedTools",
-    "",
-    // ENG-11277: never age anything out of the shared ~/.claude from here.
-    "--settings",
-    HOST_CLAUDE_RETENTION_SETTINGS
-  ];
-}
-
 // src/lib/claude-account-fingerprint.ts
 import { createHash as createHash6 } from "crypto";
 import { readFile as readFile3, readdir as readdir3 } from "fs/promises";
@@ -7889,10 +7874,10 @@ function resolveModelChain(refreshData) {
 }
 
 // src/lib/manager/claude-auth.ts
-import { existsSync as existsSync14, rmSync as rmSync6 } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync14, lstatSync as lstatSync2, mkdirSync as mkdirSync11, rmSync as rmSync6 } from "fs";
 import { join as join34 } from "path";
 import { homedir as homedir13 } from "os";
-async function applyClaudeAuthToEnv(childEnv, label) {
+async function applyClaudeAuthToEnv(childEnv, label, options = {}) {
   const apiKey = getApiKey();
   if (!apiKey) {
     throw new Error("AGT_API_KEY is not set");
@@ -7903,7 +7888,11 @@ async function applyClaudeAuthToEnv(childEnv, label) {
       throw new Error("claude_auth_mode=api_key but /host/exchange returned no decrypted key");
     }
     childEnv.ANTHROPIC_API_KEY = exchange.anthropicApiKey;
-    const claudeDir = join34(homedir13(), ".claude");
+    if (options.isolateApiKeyConfigDir) {
+      ensurePrivateConfigDir(options.isolateApiKeyConfigDir);
+      childEnv.CLAUDE_CONFIG_DIR = options.isolateApiKeyConfigDir;
+    }
+    const claudeDir = claudeConfigDirForChild(childEnv);
     for (const filename of [".credentials.json", "credentials.json"]) {
       const p = join34(claudeDir, filename);
       if (existsSync14(p)) {
@@ -7914,9 +7903,29 @@ async function applyClaudeAuthToEnv(childEnv, label) {
         }
       }
     }
-  } else {
-    delete childEnv.ANTHROPIC_API_KEY;
+    return { isolated: !!options.isolateApiKeyConfigDir };
   }
+  delete childEnv.ANTHROPIC_API_KEY;
+  return { isolated: false };
+}
+function claudeConfigDirForChild(childEnv) {
+  return childEnv.CLAUDE_CONFIG_DIR?.trim() || join34(homedir13(), ".claude");
+}
+function ensurePrivateConfigDir(dir, platform4 = process.platform, chmod = chmodSync2) {
+  mkdirSync11(dir, { recursive: true, mode: 448 });
+  const st = lstatSync2(dir);
+  if (!st.isDirectory()) {
+    throw new Error(`isolated Claude config dir ${dir} is not a real directory (symlink or file); refusing`);
+  }
+  if (platform4 === "win32") return;
+  if ((st.mode & 511) !== 448) chmod(dir, 448);
+  const mode = lstatSync2(dir).mode & 511;
+  if (mode !== 448) {
+    throw new Error(`isolated Claude config dir ${dir} could not be made private (mode ${mode.toString(8)}); refusing`);
+  }
+}
+function oneShotIsolatedConfigDir() {
+  return join34(homedir13(), ".augmented", "claude-oneshot");
 }
 
 // src/lib/claude-runtime-auth-probe.ts
@@ -8891,7 +8900,7 @@ function closeSessionRunForCode(codeName, outcome, reason) {
 
 // src/lib/manager/scheduler/kanban-route.ts
 import { createHash as createHash15 } from "crypto";
-import { writeFileSync as writeFileSync14, renameSync as renameSync8, mkdirSync as mkdirSync11, readFileSync as readFileSync28, unlinkSync as unlinkSync3 } from "fs";
+import { writeFileSync as writeFileSync14, renameSync as renameSync8, mkdirSync as mkdirSync12, readFileSync as readFileSync28, unlinkSync as unlinkSync3 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join36, dirname as dirname9 } from "path";
 
@@ -9329,7 +9338,7 @@ async function routeScheduledTaskViaKanban(codeName, agentId, task, prompt, dura
     }
     try {
       const doorbell = directChatDoorbellPath(agentId, homedir14());
-      mkdirSync11(dirname9(doorbell), { recursive: true });
+      mkdirSync12(dirname9(doorbell), { recursive: true });
       writeFileSync14(doorbell, String(Date.now()));
     } catch (err) {
       log(`[scheduled-kanban] doorbell ring failed for '${codeName}': ${err.message} (notice still queued)`);
@@ -11515,7 +11524,7 @@ async function fireOpencodeScheduledTask(agent, task) {
 
 // src/lib/opencode-telegram-ingest.ts
 import { createHash as createHash19 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync12, readFileSync as readFileSync31, renameSync as renameSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync15 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync13, readFileSync as readFileSync31, renameSync as renameSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync15 } from "fs";
 import { randomUUID } from "crypto";
 import { join as join40 } from "path";
 
@@ -12197,7 +12206,7 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
       if (!filePath || !dir) return;
       const tmpPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
       try {
-        mkdirSync12(dir, { recursive: true, mode: 448 });
+        mkdirSync13(dir, { recursive: true, mode: 448 });
         writeFileSync15(
           tmpPath,
           JSON.stringify({
@@ -12454,7 +12463,7 @@ function partitionActionableByPoison(actionable, states, config2) {
 }
 
 // src/lib/restart-flags.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync13, readdirSync as readdirSync11, readFileSync as readFileSync32, renameSync as renameSync10, rmSync as rmSync7, writeFileSync as writeFileSync16 } from "fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync14, readdirSync as readdirSync11, readFileSync as readFileSync32, renameSync as renameSync10, rmSync as rmSync7, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir16 } from "os";
 import { join as join41 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
@@ -12589,7 +12598,7 @@ async function sendError(flag, opts, text) {
 }
 
 // src/lib/restart-context.ts
-import { readdirSync as readdirSync12, readFileSync as readFileSync33, writeFileSync as writeFileSync17, mkdirSync as mkdirSync14, unlinkSync as unlinkSync5 } from "fs";
+import { readdirSync as readdirSync12, readFileSync as readFileSync33, writeFileSync as writeFileSync17, mkdirSync as mkdirSync15, unlinkSync as unlinkSync5 } from "fs";
 import { dirname as dirname10, join as join42 } from "path";
 var SLACK_PENDING_INBOUND_DIRNAME = "slack-pending-inbound";
 var SLACK_RESTART_CONTEXT_DIRNAME = "slack-restart-context";
@@ -12656,7 +12665,7 @@ function readStrandedMarker(path) {
   return null;
 }
 function writeHintFile(path, dir, hint) {
-  mkdirSync14(dir, { recursive: true, mode: 448 });
+  mkdirSync15(dir, { recursive: true, mode: 448 });
   writeFileSync17(path, JSON.stringify(hint), { mode: 384 });
 }
 function pruneHintsExcept(codeName, freshFilenames) {
@@ -14183,7 +14192,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-OICDEM3R.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-KCICZE6E.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14941,7 +14950,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1123" : "dev";
+var agtCliVersion = true ? "0.28.1125" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15309,7 +15318,7 @@ function ensureClaudeManagedSettings(path = claudeManagedSettingsPath()) {
       for (const [k, v] of missingEnv) env[k] = v;
       settings["env"] = env;
     }
-    mkdirSync15(dirname11(path), { recursive: true });
+    mkdirSync16(dirname11(path), { recursive: true });
     writeFileSync18(path, `${JSON.stringify(settings, null, 2)}
 `);
     const changed = [
@@ -15975,7 +15984,9 @@ async function runClaudeRuntimeAuthProbe() {
 async function runHostUsageCommand() {
   try {
     const childEnv = { ...process.env };
-    await applyClaudeAuthToEnv(childEnv, "host-usage-poll");
+    await applyClaudeAuthToEnv(childEnv, "host-usage-poll", {
+      isolateApiKeyConfigDir: oneShotIsolatedConfigDir()
+    });
     const emptyMcp = ensureEvalEmptyMcpConfig();
     const args = [
       ...USAGE_COMMAND_ARGS,
@@ -16031,7 +16042,7 @@ function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync19(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
   const dir = join43(homedir17(), ".augmented");
   try {
-    mkdirSync15(dir, { recursive: true });
+    mkdirSync16(dir, { recursive: true });
   } catch {
   }
   const p = join43(dir, ".eval-empty-mcp.json");
@@ -16041,7 +16052,9 @@ function ensureEvalEmptyMcpConfig() {
 }
 async function runEvalClaude(prompt, model) {
   const childEnv = { ...process.env };
-  await applyClaudeAuthToEnv(childEnv, "conversation-eval");
+  await applyClaudeAuthToEnv(childEnv, "conversation-eval", {
+    isolateApiKeyConfigDir: oneShotIsolatedConfigDir()
+  });
   const emptyMcp = ensureEvalEmptyMcpConfig();
   const args = [
     "-p",
@@ -16567,7 +16580,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-URAR5HDF.js");
+      const { collectDiagnostics } = await import("../persistent-session-E5IR3RBF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16709,7 +16722,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-URAR5HDF.js");
+      const { collectDiagnostics } = await import("../persistent-session-E5IR3RBF.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16917,7 +16930,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-OICDEM3R.js");
+      } = await import("../responsiveness-probe-KCICZE6E.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -17034,7 +17047,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-OICDEM3R.js");
+        } = await import("../responsiveness-probe-KCICZE6E.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17320,7 +17333,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-OICDEM3R.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-KCICZE6E.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -17351,7 +17364,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-URAR5HDF.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-E5IR3RBF.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -17516,7 +17529,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-QYQXJNZP.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-VYP4VCMX.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -18715,7 +18728,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   try {
     const artifacts = generateArtifacts(agent, refreshData, frameworkAdapter, renderIntegrationsSection);
     const changedFiles = [];
-    mkdirSync15(agentDir, { recursive: true });
+    mkdirSync16(agentDir, { recursive: true });
     for (const artifact of artifacts) {
       const filePath = join43(agentDir, artifact.relativePath);
       let existingHash;
@@ -18793,7 +18806,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
         const filePath = join43(agentDir, file.relativePath);
-        mkdirSync15(dirname11(filePath), { recursive: true });
+        mkdirSync16(dirname11(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
         } else {
@@ -19223,7 +19236,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     const writeDmNoticeMarkers = isChannelAddRestart ? () => {
       try {
         const agentAugmentedDir = join43(homedir17(), ".augmented", agent.code_name);
-        mkdirSync15(agentAugmentedDir, { recursive: true });
+        mkdirSync16(agentAugmentedDir, { recursive: true });
         const markerJson = JSON.stringify({
           version: 1,
           at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -19530,8 +19543,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
     try {
       const agentProvisionDir = agentDir;
       const projectDir = join43(homedir17(), ".augmented", agent.code_name, "project");
-      mkdirSync15(agentProvisionDir, { recursive: true });
-      mkdirSync15(projectDir, { recursive: true });
+      mkdirSync16(agentProvisionDir, { recursive: true });
+      mkdirSync16(projectDir, { recursive: true });
       const provisionMcpPath = join43(agentProvisionDir, ".mcp.json");
       const projectMcpPath = join43(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
@@ -22103,7 +22116,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-OICDEM3R.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-KCICZE6E.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -22146,7 +22159,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-URAR5HDF.js");
+        const { collectDiagnostics } = await import("../persistent-session-E5IR3RBF.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22197,7 +22210,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-URAR5HDF.js");
+      const { collectDiagnostics } = await import("../persistent-session-E5IR3RBF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22624,7 +22637,7 @@ async function processDirectChatMessage(agent, msg) {
     if (useDoorbell) {
       try {
         const doorbell = directChatDoorbellPath(agent.agentId, homedir17());
-        mkdirSync15(dirname11(doorbell), { recursive: true });
+        mkdirSync16(dirname11(doorbell), { recursive: true });
         writeFileSync18(doorbell, String(Date.now()));
         log(`[direct-chat] Doorbell rung for '${agent.codeName}' (msg=${msg.id}) \u2014 in-session MCP will pull via the cursor`);
         return;
@@ -22753,7 +22766,7 @@ ${formatRunMarker(run_id)}` : KANBAN_CHECK_COMMAND;
   if (run_id) openInjectedRunByCode.set(codeName, run_id);
   try {
     const doorbell = directChatDoorbellPath(agentId, homedir17());
-    mkdirSync15(dirname11(doorbell), { recursive: true });
+    mkdirSync16(dirname11(doorbell), { recursive: true });
     writeFileSync18(doorbell, String(Date.now()));
   } catch (err) {
     log(`[kanban] doorbell ring failed for '${codeName}': ${err.message} (notice still queued)`);
@@ -22870,7 +22883,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-NHQCMIW6.js");
+  } = await import("../claude-pair-runtime-5OBFRZWS.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -23173,7 +23186,7 @@ function saveMemoryManifest(agentId, configDir, codeName) {
   if (!manifest) return;
   try {
     const path = memoryManifestPath(configDir, codeName);
-    mkdirSync15(memoryRetirementDir(configDir, codeName), { recursive: true });
+    mkdirSync16(memoryRetirementDir(configDir, codeName), { recursive: true });
     const tmp = `${path}.tmp`;
     writeFileSync18(tmp, JSON.stringify(manifest, null, 2));
     renameSync11(tmp, path);
@@ -23278,7 +23291,7 @@ function applyMemoryTombstones(opts) {
         continue;
       }
       const destDir = retiredMemoryDir(configDir, agent.code_name);
-      mkdirSync15(destDir, { recursive: true });
+      mkdirSync16(destDir, { recursive: true });
       const stamp = Date.now();
       let dest = join43(destDir, `${entry.file}.${stamp}.retired`);
       for (let n = 1; existsSync19(dest); n++) {
@@ -23503,7 +23516,7 @@ async function downloadMemories(agent, memoryDir, log2, { force, configDir }) {
     lastDownloadHash.set(agent.agent_id, responseHash);
     lastLocalFileHash.set(agent.agent_id, localListHash);
     if (memories?.length) {
-      mkdirSync15(memoryDir, { recursive: true });
+      mkdirSync16(memoryDir, { recursive: true });
       const manifest = loadMemoryManifest(agent.agent_id, configDir, agent.code_name);
       let written = 0;
       let overwritten = 0;
@@ -24079,7 +24092,7 @@ function restartRunningChannelMcps(basenames) {
 }
 function deployMcpAssets() {
   const targetDir = join43(homedir17(), ".augmented", "_mcp");
-  mkdirSync15(targetDir, { recursive: true });
+  mkdirSync16(targetDir, { recursive: true });
   const moduleDir = dirname11(fileURLToPath2(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;