@integrity-labs/agt-cli 0.28.1126 → 0.28.1128

package/dist/{chunk-DIOP5LSU.js → chunk-Q272XYOI.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-C5YNHEST.js";
+} from "./chunk-BUCSF5DF.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,13 +79,13 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-JI2D2TA2.js";
+} from "./chunk-EVYDMDOY.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
   paneRemedy,
   summarizeUnanswerablePane
-} from "./chunk-OCMJ5E6J.js";
+} from "./chunk-B6UYVEMD.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -521,6 +521,559 @@ function describeChannelWriteFailure(outcome, channelId, trigger) {
   }
 }
 
+// ../../packages/core/dist/provisioning/frameworks/claudecode/root-rm-guard.js
+import { mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join2 } from "path";
+function createShellGuard() {
+  const REFUSAL = "Refused: don't create or delete files at /. Use your scratch dir (../scratch/).";
+  const SHELLS = ["bash", "sh", "zsh", "dash", "ksh"];
+  const PREFIX_CMDS = ["sudo", "doas", "nice", "nohup", "command", "exec", "time", "stdbuf", "ionice", "env", "builtin"];
+  const KEYWORDS = ["if", "then", "else", "elif", "fi", "do", "done", "while", "until", "for", "in", "!", "{", "}", "case", "esac"];
+  const MAX_DEPTH = 3;
+  function newWord() {
+    return { text: "", expansion: false, glob: false, tilde: false };
+  }
+  function skipParens(src, start) {
+    let depth = 1;
+    let i = start;
+    while (i < src.length) {
+      const c = src[i];
+      if (c === "\\") {
+        i += 2;
+        continue;
+      }
+      if (c === "'") {
+        const j = src.indexOf("'", i + 1);
+        if (j < 0)
+          return -1;
+        i = j + 1;
+        continue;
+      }
+      if (c === '"') {
+        i++;
+        while (i < src.length && src[i] !== '"') {
+          if (src[i] === "\\")
+            i++;
+          i++;
+        }
+        if (i >= src.length)
+          return -1;
+        i++;
+        continue;
+      }
+      if (c === "(")
+        depth++;
+      if (c === ")") {
+        depth--;
+        if (depth === 0)
+          return i;
+      }
+      i++;
+    }
+    return -1;
+  }
+  function lex(src) {
+    const out = { ok: true, heredoc: false, substitution: false, segments: [] };
+    let seg = { words: [], redirOut: [] };
+    let w = null;
+    let pendingRedir = "";
+    const heredocs = [];
+    function endWord() {
+      if (!w)
+        return;
+      if (pendingRedir === "out")
+        seg.redirOut.push(w);
+      else if (pendingRedir === "")
+        seg.words.push(w);
+      pendingRedir = "";
+      w = null;
+    }
+    function endSeg() {
+      endWord();
+      if (seg.words.length || seg.redirOut.length)
+        out.segments.push(seg);
+      seg = { words: [], redirOut: [] };
+    }
+    function word() {
+      if (!w)
+        w = newWord();
+      return w;
+    }
+    let i = 0;
+    while (i < src.length) {
+      const c = src[i];
+      if (c === "\n") {
+        endSeg();
+        i++;
+        while (heredocs.length) {
+          const h = heredocs.shift();
+          let found = false;
+          while (i < src.length) {
+            let end = src.indexOf("\n", i);
+            if (end < 0)
+              end = src.length;
+            let line = src.slice(i, end);
+            i = end + 1;
+            if (h.strip)
+              line = line.replace(/^\t+/, "");
+            if (line === h.delim) {
+              found = true;
+              break;
+            }
+          }
+          if (!found) {
+            out.ok = false;
+            i = src.length;
+          }
+        }
+        continue;
+      }
+      if (c === " " || c === "	") {
+        endWord();
+        i++;
+        continue;
+      }
+      if (c === "#" && !w) {
+        const j = src.indexOf("\n", i);
+        i = j < 0 ? src.length : j;
+        continue;
+      }
+      if (c === "\\") {
+        if (src[i + 1] === "\n") {
+          i += 2;
+          continue;
+        }
+        if (i + 1 >= src.length) {
+          out.ok = false;
+          i++;
+          continue;
+        }
+        word().text += src[i + 1];
+        i += 2;
+        continue;
+      }
+      if (c === "'") {
+        const j = src.indexOf("'", i + 1);
+        if (j < 0) {
+          out.ok = false;
+          break;
+        }
+        word().text += src.slice(i + 1, j);
+        i = j + 1;
+        continue;
+      }
+      if (c === '"') {
+        const cur2 = word();
+        i++;
+        let closed = false;
+        while (i < src.length) {
+          const d = src[i];
+          if (d === '"') {
+            closed = true;
+            i++;
+            break;
+          }
+          if (d === "\\" && i + 1 < src.length) {
+            cur2.text += src[i + 1];
+            i += 2;
+            continue;
+          }
+          if (d === "`") {
+            out.substitution = true;
+            cur2.expansion = true;
+            const j = src.indexOf("`", i + 1);
+            if (j < 0) {
+              out.ok = false;
+              i = src.length;
+              break;
+            }
+            cur2.text += src.slice(i, j + 1);
+            i = j + 1;
+            continue;
+          }
+          if (d === "$") {
+            cur2.expansion = true;
+            if (src[i + 1] === "(") {
+              out.substitution = true;
+              const j = skipParens(src, i + 2);
+              if (j < 0) {
+                out.ok = false;
+                i = src.length;
+                break;
+              }
+              cur2.text += src.slice(i, j + 1);
+              i = j + 1;
+              continue;
+            }
+          }
+          cur2.text += d;
+          i++;
+        }
+        if (!closed) {
+          out.ok = false;
+          break;
+        }
+        continue;
+      }
+      if (c === "`") {
+        out.substitution = true;
+        const cur2 = word();
+        cur2.expansion = true;
+        const j = src.indexOf("`", i + 1);
+        if (j < 0) {
+          out.ok = false;
+          break;
+        }
+        cur2.text += src.slice(i, j + 1);
+        i = j + 1;
+        continue;
+      }
+      if (c === "$") {
+        const cur2 = word();
+        cur2.expansion = true;
+        if (src[i + 1] === "(") {
+          out.substitution = true;
+          const j = skipParens(src, i + 2);
+          if (j < 0) {
+            out.ok = false;
+            break;
+          }
+          cur2.text += src.slice(i, j + 1);
+          i = j + 1;
+          continue;
+        }
+        if (src[i + 1] === "{") {
+          const j = src.indexOf("}", i + 2);
+          if (j < 0) {
+            out.ok = false;
+            break;
+          }
+          cur2.text += src.slice(i, j + 1);
+          i = j + 1;
+          continue;
+        }
+        cur2.text += c;
+        i++;
+        continue;
+      }
+      if (c === ">" || c === "<" && src[i + 1] !== "<" || c === "&" && src[i + 1] === ">") {
+        if (w && /^\d+$/.test(w.text) && !w.expansion)
+          w = null;
+        else
+          endWord();
+        const isOut = c !== "<";
+        i += c === "&" ? 2 : 1;
+        if (isOut && (src[i] === ">" || src[i] === "|"))
+          i++;
+        if (src[i] === "&") {
+          i++;
+          pendingRedir = "in";
+        } else {
+          pendingRedir = isOut ? "out" : "in";
+        }
+        continue;
+      }
+      if (c === "<" && src[i + 1] === "<") {
+        endWord();
+        if (src[i + 2] === "<") {
+          i += 3;
+          pendingRedir = "in";
+          continue;
+        }
+        i += 2;
+        let strip = false;
+        if (src[i] === "-") {
+          strip = true;
+          i++;
+        }
+        while (src[i] === " " || src[i] === "	")
+          i++;
+        let delim = "";
+        while (i < src.length && !/[\s;&|<>()]/.test(src[i])) {
+          const d = src[i];
+          if (d === "'" || d === '"') {
+            const j = src.indexOf(d, i + 1);
+            if (j < 0) {
+              out.ok = false;
+              break;
+            }
+            delim += src.slice(i + 1, j);
+            i = j + 1;
+            continue;
+          }
+          if (d === "\\") {
+            delim += src[i + 1] ?? "";
+            i += 2;
+            continue;
+          }
+          delim += d;
+          i++;
+        }
+        if (!delim) {
+          out.ok = false;
+          break;
+        }
+        out.heredoc = true;
+        heredocs.push({ delim, strip });
+        continue;
+      }
+      if (c === ";" || c === "&" || c === "|" || c === "(" || c === ")") {
+        endSeg();
+        i++;
+        continue;
+      }
+      const cur = word();
+      if (c === "*" || c === "?" || c === "[" || c === "{")
+        cur.glob = true;
+      if (c === "~" && cur.text === "")
+        cur.tilde = true;
+      cur.text += c;
+      i++;
+    }
+    endSeg();
+    if (heredocs.length)
+      out.ok = false;
+    return out;
+  }
+  function basename(p) {
+    const k = p.lastIndexOf("/");
+    return k < 0 ? p : p.slice(k + 1);
+  }
+  function analyzeInto(src, res, depth) {
+    const lexed = lex(src);
+    if (!lexed.ok)
+      res.ok = false;
+    if (lexed.heredoc)
+      res.heredoc = true;
+    if (lexed.substitution)
+      res.substitution = true;
+    for (const seg of lexed.segments) {
+      for (const r of seg.redirOut)
+        res.writes.push(r);
+      const words = seg.words.slice();
+      while (words.length) {
+        const t = words[0].text;
+        if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)) {
+          words.shift();
+          continue;
+        }
+        if (KEYWORDS.indexOf(t) >= 0) {
+          words.shift();
+          continue;
+        }
+        if (PREFIX_CMDS.indexOf(basename(t)) >= 0) {
+          words.shift();
+          while (words.length && /^-/.test(words[0].text))
+            words.shift();
+          continue;
+        }
+        if (basename(t) === "timeout") {
+          words.shift();
+          while (words.length && /^-/.test(words[0].text))
+            words.shift();
+          words.shift();
+          continue;
+        }
+        break;
+      }
+      if (!words.length)
+        continue;
+      const cmd = basename(words[0].text);
+      const args = words.slice(1);
+      if (cmd === "rm") {
+        const inv = { targets: [], recursive: false, targetsUnknown: false };
+        let opts = true;
+        for (const a of args) {
+          if (opts && a.text === "--") {
+            opts = false;
+            continue;
+          }
+          if (opts && a.text.length > 1 && a.text[0] === "-" && !a.expansion) {
+            if (a.text === "--recursive" || a.text[1] !== "-" && /[rR]/.test(a.text))
+              inv.recursive = true;
+            continue;
+          }
+          inv.targets.push(a);
+        }
+        res.rm.push(inv);
+      } else if (cmd === "tee") {
+        for (const a of args)
+          if (!/^-/.test(a.text))
+            res.writes.push(a);
+      } else if (cmd === "xargs") {
+        if (args.some((a) => basename(a.text) === "rm")) {
+          res.rm.push({ targets: [], recursive: false, targetsUnknown: true });
+        }
+      } else if (cmd === "find") {
+        if (args.some((a) => a.text === "-delete" || a.text === "-exec" || a.text === "-execdir"))
+          res.findDelete = true;
+      } else if (SHELLS.indexOf(cmd) >= 0 || cmd === "eval") {
+        if (depth >= MAX_DEPTH) {
+          res.ok = false;
+          continue;
+        }
+        if (cmd === "eval") {
+          analyzeInto(args.map((a) => a.text).join(" "), res, depth + 1);
+        } else {
+          const k = args.findIndex((a) => /^-[A-Za-z]*c[A-Za-z]*$/.test(a.text));
+          if (k >= 0 && args[k + 1])
+            analyzeInto(args[k + 1].text, res, depth + 1);
+        }
+      }
+    }
+  }
+  function analyze(command) {
+    const res = {
+      ok: true,
+      heredoc: false,
+      substitution: false,
+      findDelete: false,
+      rm: [],
+      writes: []
+    };
+    if (typeof command !== "string") {
+      res.ok = false;
+      return res;
+    }
+    analyzeInto(command, res, 0);
+    return res;
+  }
+  function isRootLevelPath(word) {
+    if (!word || word.expansion || word.tilde)
+      return false;
+    const t = word.text;
+    if (t[0] !== "/")
+      return false;
+    const parts = [];
+    for (const p of t.split("/")) {
+      if (p === "" || p === ".")
+        continue;
+      if (p === "..") {
+        parts.pop();
+        continue;
+      }
+      parts.push(p);
+    }
+    return parts.length <= 1;
+  }
+  function hookVerdict(toolName, toolInput) {
+    const ti = toolInput && typeof toolInput === "object" ? toolInput : {};
+    if (toolName === "Write") {
+      const fp = ti["file_path"];
+      if (typeof fp !== "string")
+        return null;
+      return isRootLevelPath({ text: fp, expansion: false, glob: false, tilde: false }) ? REFUSAL : null;
+    }
+    if (toolName !== "Bash")
+      return null;
+    const cmd = ti["command"];
+    if (typeof cmd !== "string" || !cmd)
+      return null;
+    const a = analyze(cmd);
+    for (const inv of a.rm)
+      for (const t of inv.targets)
+        if (isRootLevelPath(t))
+          return REFUSAL;
+    for (const t of a.writes)
+      if (isRootLevelPath(t))
+        return REFUSAL;
+    return null;
+  }
+  return { analyze, isRootLevelPath, hookVerdict, refusal: REFUSAL };
+}
+var shellGuard = createShellGuard();
+var ROOT_RM_HOOK_FILENAME = "agt-root-rm-hook.sh";
+var ROOT_RM_HOOK_JS_FILENAME = "agt-root-rm-hook.mjs";
+var ROOT_RM_HOOK_MATCHER = "Bash|Write";
+function buildRootRmHookJs() {
+  return [
+    "'use strict';",
+    "// ENG-11513 root-level rm/write guard. Generated by provisionRootRmHook; see root-rm-guard.ts.",
+    `const createShellGuard = ${createShellGuard.toString()};`,
+    "let raw = '';",
+    "process.stdin.setEncoding('utf8');",
+    "process.stdin.on('data', (d) => { raw += d; });",
+    "process.stdin.on('end', () => {",
+    "  let code = 0;",
+    "  try {",
+    "    const input = JSON.parse(raw);",
+    "    const reason = createShellGuard().hookVerdict(input && input.tool_name, input && input.tool_input);",
+    "    if (reason) { process.stderr.write(reason + '\\n'); code = 2; }",
+    "  } catch (e) { code = 0; }",
+    "  process.exit(code);",
+    "});",
+    ""
+  ].join("\n");
+}
+function provisionRootRmHookAt(claudeDir) {
+  mkdirSync(claudeDir, { recursive: true });
+  const jsPath = join2(claudeDir, ROOT_RM_HOOK_JS_FILENAME);
+  writeFileSync2(jsPath, buildRootRmHookJs(), { mode: 420 });
+  const hookScriptPath = join2(claudeDir, ROOT_RM_HOOK_FILENAME);
+  writeFileSync2(hookScriptPath, [
+    "#!/usr/bin/env bash",
+    "# ENG-11513: refuse rm of, or writes creating, files directly under /; see root-rm-guard.ts.",
+    "# Fail open: no node, or any error in the matcher, allows the call.",
+    "command -v node >/dev/null 2>&1 || exit 0",
+    `exec node '${jsPath.replace(/'/g, `'\\''`)}'`
+  ].join("\n") + "\n", { mode: 493 });
+  const settingsPath = join2(claudeDir, "settings.local.json");
+  let settings = {};
+  try {
+    settings = JSON.parse(readFileSync2(settingsPath, "utf-8"));
+  } catch {
+  }
+  const hooks = settings["hooks"] ?? {};
+  const groups = Array.isArray(hooks["PreToolUse"]) ? hooks["PreToolUse"] : [];
+  if (!groups.some((g) => (g.hooks ?? []).some((h) => h.command === hookScriptPath))) {
+    groups.push({ matcher: ROOT_RM_HOOK_MATCHER, hooks: [{ type: "command", command: hookScriptPath }] });
+  }
+  hooks["PreToolUse"] = groups;
+  settings["hooks"] = hooks;
+  writeFileSync2(settingsPath, JSON.stringify(settings, null, 2));
+}
+var RM_POLICY_ARTIFACT = "rm-policy.json";
+var RM_POLICY_RELATIVE_PATH = `provision/${RM_POLICY_ARTIFACT}`;
+function stringList(v) {
+  return Array.isArray(v) ? v.filter((x) => typeof x === "string") : [];
+}
+function rmPolicyFromGuardrails(guardrails) {
+  if (guardrails === void 0)
+    return null;
+  const sources = [];
+  for (const g of guardrails) {
+    if (g.enforcement === "disabled")
+      continue;
+    if (g.definitionId === "tool.block_list") {
+      const entries = [...stringList(g.config["blocked_tools"]), ...stringList(g.config["blocked_patterns"])];
+      if (entries.some((e) => /(?:^|[^a-z])(?:rm|delete)(?:[^a-z]|$)/.test(e.toLowerCase()))) {
+        sources.push(g.definitionId);
+      }
+    } else if (g.definitionId === "require-approval-for-actions") {
+      const actions = stringList(g.config["actions"]).map((t) => t.trim().toLowerCase());
+      if (actions.includes("delete"))
+        sources.push(g.definitionId);
+    }
+  }
+  return { no_delete: sources.length > 0, sources };
+}
+function guardrailsForProvision(guardrails, resolved) {
+  return resolved === false ? void 0 : guardrails;
+}
+var RM_POLICY_UNKNOWN = { no_delete: null, sources: [] };
+function parseRmPolicy(text) {
+  if (text === null)
+    return null;
+  try {
+    const v = JSON.parse(text);
+    if (typeof v["no_delete"] !== "boolean")
+      return null;
+    return { no_delete: v["no_delete"], sources: stringList(v["sources"]) };
+  } catch {
+    return null;
+  }
+}
+
 // ../../packages/core/dist/provisioning/frameworks/claudecode/core-knowledge-description.js
 var CORE_KNOWLEDGE_DESCRIPTION_MAX_CHARS = 1024;
 var CORE_KNOWLEDGE_TITLE_MAX_CHARS = 80;
@@ -582,15 +1135,15 @@ function orderTitlesForDescription(entries) {
 }
 
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync4, chmodSync as chmodSync4, readdirSync, rmSync as rmSync2, copyFileSync, lstatSync, realpathSync, symlinkSync, readlinkSync, renameSync as renameSync4, opendirSync } from "fs";
-import { join as join4, relative, dirname as dirname3 } from "path";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync4, chmodSync as chmodSync4, readdirSync, rmSync as rmSync2, copyFileSync, lstatSync, realpathSync, symlinkSync, readlinkSync, renameSync as renameSync4, opendirSync } from "fs";
+import { join as join5, relative, dirname as dirname3 } from "path";
 import { homedir as homedir3, tmpdir } from "os";
 import { execFile } from "child_process";
 
 // ../../packages/core/dist/integrations/xurl-config.js
-import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
 import { homedir } from "os";
-import { dirname, join as join2 } from "path";
+import { dirname, join as join3 } from "path";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 var XURL_FILE_MODE = 384;
 var XURL_AGT_APP_PREFIX = "agt-";
@@ -709,7 +1262,7 @@ function buildAgtXurlApps(integrations) {
 }
 function getXurlStorePath() {
   const home = process.env["HOME"] ?? process.env["USERPROFILE"] ?? homedir();
-  return join2(home, ".xurl");
+  return join3(home, ".xurl");
 }
 function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath()) {
   const agtApps = buildAgtXurlApps(integrations);
@@ -719,7 +1272,7 @@ function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath
   if (existsSync2(filePath)) {
     let raw;
     try {
-      raw = readFileSync2(filePath, "utf-8");
+      raw = readFileSync3(filePath, "utf-8");
     } catch {
       return null;
     }
@@ -730,9 +1283,9 @@ function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath
     existing = parsed;
   }
   const merged = mergeXurlStore(existing, agtApps);
-  mkdirSync(dirname(filePath), { recursive: true });
+  mkdirSync2(dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync2(tmpPath, serializeXurlStore(merged), { mode: XURL_FILE_MODE });
+  writeFileSync3(tmpPath, serializeXurlStore(merged), { mode: XURL_FILE_MODE });
   try {
     renameSync2(tmpPath, filePath);
   } catch (err) {
@@ -750,9 +1303,9 @@ function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath
 }
 
 // ../../packages/core/dist/integrations/framer-credentials.js
-import { chmodSync as chmodSync3, existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync3, rmSync, statSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync as chmodSync3, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync as renameSync3, rmSync, statSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname2, join as join4 } from "path";
 var FRAMER_PROJECTS_CONFIG_VERSION = 2;
 var BARE_PROJECT_ID = /^[A-Za-z0-9]{20}$/u;
 var SLUGGED_PROJECT_ID = /^.+--([A-Za-z0-9]+)/u;
@@ -851,11 +1404,11 @@ function mergeFramerProjectsConfig(existing, inputs, options = {}) {
 var FRAMER_FILE_MODE = 384;
 var MANAGED_SIDECAR_NAME = ".augmented-managed-projects.json";
 function sidecarPathFor(projectsPath) {
-  return join3(dirname2(projectsPath), MANAGED_SIDECAR_NAME);
+  return join4(dirname2(projectsPath), MANAGED_SIDECAR_NAME);
 }
 function readManagedIds(projectsPath) {
   try {
-    const raw = readFileSync3(sidecarPathFor(projectsPath), "utf-8");
+    const raw = readFileSync4(sidecarPathFor(projectsPath), "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed))
       return [];
@@ -874,7 +1427,7 @@ function writeManagedIds(projectsPath, ids) {
       }
       return;
     }
-    writeFileSync3(target, `${JSON.stringify([...ids].sort(), null, "	")}
+    writeFileSync4(target, `${JSON.stringify([...ids].sort(), null, "	")}
 `, {
       mode: FRAMER_FILE_MODE
     });
@@ -887,13 +1440,13 @@ var LOCK_MAX_ATTEMPTS = 50;
 function withStoreLock(projectsPath, fn) {
   const lockDir = `${projectsPath}.lock`;
   try {
-    mkdirSync2(dirname2(projectsPath), { recursive: true, mode: 448 });
+    mkdirSync3(dirname2(projectsPath), { recursive: true, mode: 448 });
   } catch {
   }
   let held = false;
   for (let attempt = 0; attempt < LOCK_MAX_ATTEMPTS && !held; attempt++) {
     try {
-      mkdirSync2(lockDir);
+      mkdirSync3(lockDir);
       held = true;
     } catch {
       try {
@@ -927,9 +1480,9 @@ function asString2(value) {
 function getFramerProjectsPath() {
   const xdg = process.env["XDG_CONFIG_HOME"];
   if (xdg)
-    return join3(xdg, "framer", "projects.json");
+    return join4(xdg, "framer", "projects.json");
   const home = process.env["HOME"] ?? process.env["USERPROFILE"] ?? homedir2();
-  return join3(home, ".config", "framer", "projects.json");
+  return join4(home, ".config", "framer", "projects.json");
 }
 function buildFramerCredentialInputs(integrations) {
   const inputs = [];
@@ -960,7 +1513,7 @@ function writeFramerStoreForIntegrations(integrations, filePath = getFramerProje
     let existing = null;
     if (existsSync3(filePath)) {
       try {
-        existing = readFileSync3(filePath, "utf-8");
+        existing = readFileSync4(filePath, "utf-8");
       } catch {
         return null;
       }
@@ -972,9 +1525,9 @@ function writeFramerStoreForIntegrations(integrations, filePath = getFramerProje
     }
     if (!content)
       return null;
-    mkdirSync2(dirname2(filePath), { recursive: true, mode: 448 });
+    mkdirSync3(dirname2(filePath), { recursive: true, mode: 448 });
     const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-    writeFileSync3(tmpPath, content, { mode: FRAMER_FILE_MODE });
+    writeFileSync4(tmpPath, content, { mode: FRAMER_FILE_MODE });
     try {
       renameSync3(tmpPath, filePath);
     } catch (err) {
@@ -1788,25 +2341,25 @@ var VALID_CODE_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var SECRET_FILE_MODE = 384;
 function writeEnvIntegrationsForAgent(codeName, args) {
   const agentDir = getAgentDir(codeName);
-  const envPath = join4(agentDir, ".env.integrations");
+  const envPath = join5(agentDir, ".env.integrations");
   let existing = null;
   try {
-    existing = readFileSync4(envPath, "utf-8");
+    existing = readFileSync5(envPath, "utf-8");
   } catch {
   }
   if (existing === null && Object.keys(args.updates).length === 0)
     return;
   const content = mergeEnvIntegrationsContent(existing, args);
-  writeFileSync4(envPath, content, { mode: SECRET_FILE_MODE });
+  writeFileSync5(envPath, content, { mode: SECRET_FILE_MODE });
   try {
     chmodSync4(envPath, SECRET_FILE_MODE);
   } catch {
   }
   try {
     const projectDir = getProjectDir2(codeName);
-    mkdirSync3(projectDir, { recursive: true });
-    const dest = join4(projectDir, ".env.integrations");
-    writeFileSync4(dest, content, { mode: SECRET_FILE_MODE });
+    mkdirSync4(projectDir, { recursive: true });
+    const dest = join5(projectDir, ".env.integrations");
+    writeFileSync5(dest, content, { mode: SECRET_FILE_MODE });
     try {
       chmodSync4(dest, SECRET_FILE_MODE);
     } catch {
@@ -1826,16 +2379,16 @@ var MIGRATABLE_FIELD_TO_ENV_VAR = {
   AGT_API_KEY: "AGT_API_KEY"
 };
 function migrateExistingLiteralSecrets(codeName) {
-  const mcpJsonPath = join4(getAgentDir(codeName), "provision", ".mcp.json");
+  const mcpJsonPath = join5(getAgentDir(codeName), "provision", ".mcp.json");
   let config;
   try {
-    config = JSON.parse(readFileSync4(mcpJsonPath, "utf-8"));
+    config = JSON.parse(readFileSync5(mcpJsonPath, "utf-8"));
   } catch {
     return;
   }
   let existingEnvKeys = /* @__PURE__ */ new Set();
   try {
-    existingEnvKeys = new Set(parseEnvFileEntries(readFileSync4(join4(getAgentDir(codeName), ".env.integrations"), "utf-8")).keys());
+    existingEnvKeys = new Set(parseEnvFileEntries(readFileSync5(join5(getAgentDir(codeName), ".env.integrations"), "utf-8")).keys());
   } catch {
   }
   const updates = {};
@@ -1909,8 +2462,8 @@ function ensureIdKeyedLayout(codeName, agentId) {
   assertValidCodeName(codeName);
   assertValidAgentId(agentId);
   const home = getHomeDir();
-  const codeNamePath = join4(home, ".augmented", codeName);
-  const idPath = join4(home, ".augmented", agentId);
+  const codeNamePath = join5(home, ".augmented", codeName);
+  const idPath = join5(home, ".augmented", agentId);
   let state;
   try {
     state = lstatSync(codeNamePath).isSymbolicLink() ? "symlink" : "realdir";
@@ -1925,15 +2478,15 @@ function ensureIdKeyedLayout(codeName, agentId) {
     if (target !== agentId) {
       throw new Error(`Codename symlink ${codeNamePath} points at "${target}", expected "${agentId}"; refusing to provision over a mismatched id-keyed layout.`);
     }
-    mkdirSync3(idPath, { recursive: true });
+    mkdirSync4(idPath, { recursive: true });
     return idPath;
   }
-  mkdirSync3(idPath, { recursive: true });
+  mkdirSync4(idPath, { recursive: true });
   symlinkSync(agentId, codeNamePath);
   return idPath;
 }
 function stagedMigrationLinkPath(home, codeName) {
-  return join4(home, ".augmented", `.${codeName}.migrating`);
+  return join5(home, ".augmented", `.${codeName}.migrating`);
 }
 function cleanupStaleStagedLink(staged) {
   try {
@@ -1953,8 +2506,8 @@ function migrateAgentDirToIdKeyed(codeName, agentId, opts = {}) {
   assertValidCodeName(codeName);
   assertValidAgentId(agentId);
   const home = opts.home ?? getHomeDir();
-  const codeNamePath = join4(home, ".augmented", codeName);
-  const idPath = join4(home, ".augmented", agentId);
+  const codeNamePath = join5(home, ".augmented", codeName);
+  const idPath = join5(home, ".augmented", agentId);
   const staged = stagedMigrationLinkPath(home, codeName);
   let codeNameKind;
   try {
@@ -1992,14 +2545,14 @@ function migrateAgentDirToIdKeyed(codeName, agentId, opts = {}) {
 }
 function getAgentDir(codeName) {
   assertValidCodeName(codeName);
-  return resolveRealAgentPath(join4(getHomeDir(), ".augmented", codeName));
+  return resolveRealAgentPath(join5(getHomeDir(), ".augmented", codeName));
 }
 var migratedCodeNames = /* @__PURE__ */ new Set();
 function migrateLegacyClaudecodeDir(codeName, log2) {
   assertValidCodeName(codeName);
   if (migratedCodeNames.has(codeName))
     return;
-  const legacyRoot = join4(getHomeDir(), ".augmented", codeName, "claudecode");
+  const legacyRoot = join5(getHomeDir(), ".augmented", codeName, "claudecode");
   if (!existsSync4(legacyRoot)) {
     migratedCodeNames.add(codeName);
     return;
@@ -2010,20 +2563,20 @@ function migrateLegacyClaudecodeDir(codeName, log2) {
   };
   try {
     const walkAndMigrate = (srcDir, destDir) => {
-      mkdirSync3(destDir, { recursive: true });
+      mkdirSync4(destDir, { recursive: true });
       for (const entry of readdirSync(srcDir, { withFileTypes: true })) {
-        const src = join4(srcDir, entry.name);
-        const dest = join4(destDir, entry.name);
+        const src = join5(srcDir, entry.name);
+        const dest = join5(destDir, entry.name);
         if (entry.isDirectory()) {
           walkAndMigrate(src, dest);
           continue;
         }
         if (entry.name === ".mcp.json" && existsSync4(dest)) {
           try {
-            const oldCfg = JSON.parse(readFileSync4(src, "utf-8"));
-            const newCfg = JSON.parse(readFileSync4(dest, "utf-8"));
+            const oldCfg = JSON.parse(readFileSync5(src, "utf-8"));
+            const newCfg = JSON.parse(readFileSync5(dest, "utf-8"));
             const merged = { mcpServers: { ...oldCfg.mcpServers ?? {}, ...newCfg.mcpServers ?? {} } };
-            writeFileSync4(dest, JSON.stringify(merged, null, 2));
+            writeFileSync5(dest, JSON.stringify(merged, null, 2));
             emit(`[migrate] '${codeName}' merged .mcp.json (${Object.keys(merged.mcpServers).length} servers)`);
           } catch (err) {
             throw new Error(`Failed merging .mcp.json (${src} \u2192 ${dest}): ${err.message}`);
@@ -2035,8 +2588,8 @@ function migrateLegacyClaudecodeDir(codeName, log2) {
           continue;
         }
         try {
-          const srcStat = readFileSync4(src);
-          const destStat = readFileSync4(dest);
+          const srcStat = readFileSync5(src);
+          const destStat = readFileSync5(dest);
           if (!srcStat.equals(destStat)) {
           }
         } catch (err) {
@@ -2053,25 +2606,25 @@ function migrateLegacyClaudecodeDir(codeName, log2) {
   }
 }
 function syncGitHubBrokerCredentialTooling(projectDir, enabled) {
-  const binDir = join4(projectDir, GITHUB_BROKER_BIN_DIR);
+  const binDir = join5(projectDir, GITHUB_BROKER_BIN_DIR);
   if (!enabled) {
     rmSync2(binDir, { recursive: true, force: true });
     return {};
   }
-  const helperPath = join4(binDir, GIT_CREDENTIAL_HELPER_BASENAME);
-  const shimPath = join4(binDir, GH_SHIM_BASENAME);
-  mkdirSync3(binDir, { recursive: true });
-  writeFileSync4(helperPath, renderGitCredentialHelper(), { mode: BROKER_SCRIPT_MODE });
+  const helperPath = join5(binDir, GIT_CREDENTIAL_HELPER_BASENAME);
+  const shimPath = join5(binDir, GH_SHIM_BASENAME);
+  mkdirSync4(binDir, { recursive: true });
+  writeFileSync5(helperPath, renderGitCredentialHelper(), { mode: BROKER_SCRIPT_MODE });
   chmodSync4(helperPath, BROKER_SCRIPT_MODE);
-  writeFileSync4(shimPath, renderGhShim(), { mode: BROKER_SCRIPT_MODE });
+  writeFileSync5(shimPath, renderGhShim(), { mode: BROKER_SCRIPT_MODE });
   chmodSync4(shimPath, BROKER_SCRIPT_MODE);
   return buildGitCredentialEnv(helperPath);
 }
 function getProjectDir2(codeName) {
-  return join4(getAgentDir(codeName), "project");
+  return join5(getAgentDir(codeName), "project");
 }
 function reapLegacyTokenFile(codeName, onWarn = void 0) {
-  const tokenFilePath = join4(getAgentDir(codeName), ".tokens.json");
+  const tokenFilePath = join5(getAgentDir(codeName), ".tokens.json");
   try {
     rmSync2(tokenFilePath, { force: true });
     return true;
@@ -2081,7 +2634,7 @@ function reapLegacyTokenFile(codeName, onWarn = void 0) {
   }
 }
 function getScratchDir(codeName) {
-  return join4(getAgentDir(codeName), "scratch");
+  return join5(getAgentDir(codeName), "scratch");
 }
 function getAgentTmpDir(codeName) {
   return agentTmpDirFor(getAgentDir(codeName));
@@ -2097,7 +2650,7 @@ function sweepScratchDir(codeName, now = Date.now()) {
   }
   const cutoff = now - SCRATCH_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
   for (const entry of entries) {
-    const full = join4(scratchDir, entry);
+    const full = join5(scratchDir, entry);
     try {
       if (isFreshWithin(full, cutoff))
         continue;
@@ -2125,7 +2678,7 @@ function sweepStrandedArtefactTmpDirs(now = Date.now()) {
   for (const entry of entries) {
     if (!STRANDED_ARTEFACT_TMP_PREFIXES.some((prefix) => entry.startsWith(prefix)))
       continue;
-    const full = join4(root, entry);
+    const full = join5(root, entry);
     try {
       if (isFreshWithin(full, cutoff))
         continue;
@@ -2165,7 +2718,7 @@ function isFreshWithin(path, cutoff) {
         const child = dir.readSync();
         if (child === null)
           break;
-        queue.push(join4(current, child.name));
+        queue.push(join5(current, child.name));
         budget -= 1;
       }
     } catch {
@@ -2182,18 +2735,18 @@ function isFreshWithin(path, cutoff) {
 function syncMcpToProject(codeName) {
   const agentDir = getAgentDir(codeName);
   const projectDir = getProjectDir2(codeName);
-  const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
-  const projectMcpPath = join4(projectDir, ".mcp.json");
+  const provisionMcpPath = join5(agentDir, "provision", ".mcp.json");
+  const projectMcpPath = join5(projectDir, ".mcp.json");
   try {
-    const content = readFileSync4(provisionMcpPath, "utf-8");
-    mkdirSync3(projectDir, { recursive: true });
-    writeFileSync4(projectMcpPath, content, { mode: MCP_FILE_MODE });
+    const content = readFileSync5(provisionMcpPath, "utf-8");
+    mkdirSync4(projectDir, { recursive: true });
+    writeFileSync5(projectMcpPath, content, { mode: MCP_FILE_MODE });
     try {
       chmodSync4(projectMcpPath, MCP_FILE_MODE);
     } catch {
     }
     try {
-      const mismatches = mcpMirrorParityErrors(JSON.parse(content), JSON.parse(readFileSync4(projectMcpPath, "utf-8")));
+      const mismatches = mcpMirrorParityErrors(JSON.parse(content), JSON.parse(readFileSync5(projectMcpPath, "utf-8")));
       for (const m of mismatches) {
         process.stderr.write(`${formatMirrorMismatch(m)} agent=${codeName}
 `);
@@ -2207,19 +2760,19 @@ function syncMcpToProject(codeName) {
 }
 var INTEGRATIONS_SUMMARY_FILE = "integrations-summary.json";
 function integrationsSummaryPath(codeName) {
-  return join4(getAgentDir(codeName), "provision", INTEGRATIONS_SUMMARY_FILE);
+  return join5(getAgentDir(codeName), "provision", INTEGRATIONS_SUMMARY_FILE);
 }
 function writeIntegrationsSummaryForAgent(codeName, summaries) {
   const target = integrationsSummaryPath(codeName);
   try {
-    mkdirSync3(dirname3(target), { recursive: true });
-    writeFileSync4(target, JSON.stringify(summaries, null, 2));
+    mkdirSync4(dirname3(target), { recursive: true });
+    writeFileSync5(target, JSON.stringify(summaries, null, 2));
   } catch {
   }
 }
 function readIntegrationsSummaryForAgent(codeName) {
   try {
-    const raw = readFileSync4(integrationsSummaryPath(codeName), "utf-8");
+    const raw = readFileSync5(integrationsSummaryPath(codeName), "utf-8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed : [];
   } catch {
@@ -2229,10 +2782,10 @@ function readIntegrationsSummaryForAgent(codeName) {
 function renderChannelMessageHandlerForAgent(codeName) {
   const agentDir = getAgentDir(codeName);
   const projectDir = getProjectDir2(codeName);
-  const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
+  const provisionMcpPath = join5(agentDir, "provision", ".mcp.json");
   let mcpServerKeys;
   try {
-    const config = JSON.parse(readFileSync4(provisionMcpPath, "utf-8"));
+    const config = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
     mcpServerKeys = Object.keys(config.mcpServers ?? {});
   } catch {
     return;
@@ -2240,10 +2793,10 @@ function renderChannelMessageHandlerForAgent(codeName) {
   const integrations = readIntegrationsSummaryForAgent(codeName);
   const content = buildChannelMessageHandlerAgent({ mcpServerKeys, integrations });
   for (const baseDir of [agentDir, projectDir]) {
-    const target = join4(baseDir, ".claude", "agents", "channel-message-handler.md");
+    const target = join5(baseDir, ".claude", "agents", "channel-message-handler.md");
     try {
-      mkdirSync3(dirname3(target), { recursive: true });
-      writeFileSync4(target, content);
+      mkdirSync4(dirname3(target), { recursive: true });
+      writeFileSync5(target, content);
     } catch {
     }
   }
@@ -2258,9 +2811,9 @@ function writeMcpJsonGuarded(codeName, path, config) {
   return true;
 }
 function readExistingMcpEnvVar(codeName, serverId, envKey) {
-  const mcpJsonPath = join4(getAgentDir(codeName), "provision", ".mcp.json");
+  const mcpJsonPath = join5(getAgentDir(codeName), "provision", ".mcp.json");
   try {
-    const raw = readFileSync4(mcpJsonPath, "utf-8");
+    const raw = readFileSync5(mcpJsonPath, "utf-8");
     const config = JSON.parse(raw);
     const server = config.mcpServers?.[serverId];
     if (!server || typeof server !== "object")
@@ -2306,7 +2859,7 @@ function ensureWorkspaceTrusted(projectDir) {
       return;
     }
     if (state !== "missing") {
-      const raw = readFileSync4(configPath, "utf-8");
+      const raw = readFileSync5(configPath, "utf-8");
       if (raw.trim()) {
         config = JSON.parse(raw);
       }
@@ -2318,10 +2871,10 @@ function ensureWorkspaceTrusted(projectDir) {
     entry["hasTrustDialogAccepted"] = true;
     projects[projectDir] = entry;
     config["projects"] = projects;
-    mkdirSync3(dirname3(configPath), { recursive: true });
+    mkdirSync4(dirname3(configPath), { recursive: true });
     const tmpPath = `${configPath}.agt-${process.pid}.tmp`;
     try {
-      writeFileSync4(tmpPath, `${JSON.stringify(config, null, 2)}
+      writeFileSync5(tmpPath, `${JSON.stringify(config, null, 2)}
 `, {
         mode: 384,
         flag: "wx"
@@ -2344,11 +2897,11 @@ function ensureWorkspaceTrusted(projectDir) {
 }
 function deployArtifactsToProject(codeName, provisionDir) {
   const projectDir = getProjectDir2(codeName);
-  mkdirSync3(projectDir, { recursive: true });
+  mkdirSync4(projectDir, { recursive: true });
   ensureWorkspaceTrusted(projectDir);
   try {
-    mkdirSync3(getScratchDir(codeName), { recursive: true });
-    mkdirSync3(getAgentTmpDir(codeName), { recursive: true });
+    mkdirSync4(getScratchDir(codeName), { recursive: true });
+    mkdirSync4(getAgentTmpDir(codeName), { recursive: true });
     sweepScratchDir(codeName);
     sweepStrandedArtefactTmpDirs();
   } catch (err) {
@@ -2359,42 +2912,42 @@ function deployArtifactsToProject(codeName, provisionDir) {
   const SKILLS_START = SKILLS_INDEX_SECTION_START;
   const SKILLS_END = SKILLS_INDEX_SECTION_END;
   for (const file of artifactFiles) {
-    const src = join4(provisionDir, file);
-    const dest = join4(projectDir, file);
+    const src = join5(provisionDir, file);
+    const dest = join5(projectDir, file);
     try {
-      const srcContent = readFileSync4(src, "utf-8");
+      const srcContent = readFileSync5(src, "utf-8");
       if (file === "CLAUDE.md" && existsSync4(dest)) {
-        const destContent = readFileSync4(dest, "utf-8");
+        const destContent = readFileSync5(dest, "utf-8");
         const stripIndex = (s) => s.replace(new RegExp(`${SKILLS_START}[\\s\\S]*?${SKILLS_END}`), "").trimEnd();
         if (stripIndex(srcContent) === stripIndex(destContent))
           continue;
         const indexMatch = destContent.match(new RegExp(`${SKILLS_START}[\\s\\S]*?${SKILLS_END}`));
         if (indexMatch) {
-          writeFileSync4(dest, srcContent.trimEnd() + "\n\n" + indexMatch[0] + "\n");
+          writeFileSync5(dest, srcContent.trimEnd() + "\n\n" + indexMatch[0] + "\n");
           continue;
         }
       }
       if (file === ".mcp.json") {
-        writeFileSync4(dest, srcContent, { mode: MCP_FILE_MODE });
+        writeFileSync5(dest, srcContent, { mode: MCP_FILE_MODE });
         try {
           chmodSync4(dest, MCP_FILE_MODE);
         } catch {
         }
       } else {
-        writeFileSync4(dest, srcContent);
+        writeFileSync5(dest, srcContent);
       }
     } catch {
     }
   }
-  const skillsDir = join4(provisionDir, ".claude", "skills");
-  const destSkillsDir = join4(projectDir, ".claude", "skills");
+  const skillsDir = join5(provisionDir, ".claude", "skills");
+  const destSkillsDir = join5(projectDir, ".claude", "skills");
   try {
     if (existsSync4(destSkillsDir)) {
       const srcFolders = existsSync4(skillsDir) ? new Set(readdirSync(skillsDir)) : /* @__PURE__ */ new Set();
       for (const folder of readdirSync(destSkillsDir)) {
         if (folder.startsWith("knowledge-") || folder === "core-knowledge" && !srcFolders.has(folder)) {
           try {
-            rmSync2(join4(destSkillsDir, folder), { recursive: true });
+            rmSync2(join5(destSkillsDir, folder), { recursive: true });
           } catch {
           }
         }
@@ -2402,25 +2955,25 @@ function deployArtifactsToProject(codeName, provisionDir) {
     }
     if (existsSync4(skillsDir)) {
       for (const skillFolder of readdirSync(skillsDir)) {
-        const srcSkillFile = join4(skillsDir, skillFolder, "SKILL.md");
+        const srcSkillFile = join5(skillsDir, skillFolder, "SKILL.md");
         if (!existsSync4(srcSkillFile))
           continue;
-        const destFolder = join4(destSkillsDir, skillFolder);
-        const destFile = join4(destFolder, "SKILL.md");
-        const srcContent = readFileSync4(srcSkillFile, "utf-8");
+        const destFolder = join5(destSkillsDir, skillFolder);
+        const destFile = join5(destFolder, "SKILL.md");
+        const srcContent = readFileSync5(srcSkillFile, "utf-8");
         try {
-          if (existsSync4(destFile) && readFileSync4(destFile, "utf-8") === srcContent)
+          if (existsSync4(destFile) && readFileSync5(destFile, "utf-8") === srcContent)
             continue;
         } catch {
         }
-        mkdirSync3(destFolder, { recursive: true });
-        writeFileSync4(destFile, srcContent);
+        mkdirSync4(destFolder, { recursive: true });
+        writeFileSync5(destFile, srcContent);
       }
     }
   } catch {
   }
-  const agentsDir = join4(provisionDir, ".claude", "agents");
-  const destAgentsDir = join4(projectDir, ".claude", "agents");
+  const agentsDir = join5(provisionDir, ".claude", "agents");
+  const destAgentsDir = join5(projectDir, ".claude", "agents");
   try {
     if (existsSync4(agentsDir)) {
       const sourceAgentFiles = new Set(readdirSync(agentsDir).filter((f) => f.endsWith(".md")));
@@ -2431,28 +2984,28 @@ function deployArtifactsToProject(codeName, provisionDir) {
           if (sourceAgentFiles.has(destFile))
             continue;
           try {
-            rmSync2(join4(destAgentsDir, destFile));
+            rmSync2(join5(destAgentsDir, destFile));
           } catch {
           }
         }
       }
       for (const agentFile of sourceAgentFiles) {
-        const srcPath = join4(agentsDir, agentFile);
-        const destPath = join4(destAgentsDir, agentFile);
-        const srcContent = readFileSync4(srcPath, "utf-8");
+        const srcPath = join5(agentsDir, agentFile);
+        const destPath = join5(destAgentsDir, agentFile);
+        const srcContent = readFileSync5(srcPath, "utf-8");
         try {
-          if (existsSync4(destPath) && readFileSync4(destPath, "utf-8") === srcContent)
+          if (existsSync4(destPath) && readFileSync5(destPath, "utf-8") === srcContent)
             continue;
         } catch {
         }
-        mkdirSync3(destAgentsDir, { recursive: true });
-        writeFileSync4(destPath, srcContent);
+        mkdirSync4(destAgentsDir, { recursive: true });
+        writeFileSync5(destPath, srcContent);
       }
     }
   } catch {
   }
-  const workflowsDir = join4(provisionDir, ".claude", "workflows");
-  const destWorkflowsDir = join4(projectDir, ".claude", "workflows");
+  const workflowsDir = join5(provisionDir, ".claude", "workflows");
+  const destWorkflowsDir = join5(projectDir, ".claude", "workflows");
   try {
     const sourceWorkflowFiles = existsSync4(workflowsDir) ? new Set(readdirSync(workflowsDir).filter((f) => f.endsWith(".js"))) : /* @__PURE__ */ new Set();
     if (existsSync4(destWorkflowsDir)) {
@@ -2462,32 +3015,32 @@ function deployArtifactsToProject(codeName, provisionDir) {
         if (sourceWorkflowFiles.has(destFile))
           continue;
         try {
-          rmSync2(join4(destWorkflowsDir, destFile));
+          rmSync2(join5(destWorkflowsDir, destFile));
         } catch {
         }
       }
     }
     for (const workflowFile of sourceWorkflowFiles) {
-      const srcPath = join4(workflowsDir, workflowFile);
-      const destPath = join4(destWorkflowsDir, workflowFile);
-      const srcContent = readFileSync4(srcPath, "utf-8");
+      const srcPath = join5(workflowsDir, workflowFile);
+      const destPath = join5(destWorkflowsDir, workflowFile);
+      const srcContent = readFileSync5(srcPath, "utf-8");
       try {
-        if (existsSync4(destPath) && readFileSync4(destPath, "utf-8") === srcContent)
+        if (existsSync4(destPath) && readFileSync5(destPath, "utf-8") === srcContent)
           continue;
       } catch {
       }
-      mkdirSync3(destWorkflowsDir, { recursive: true });
-      writeFileSync4(destPath, srcContent);
+      mkdirSync4(destWorkflowsDir, { recursive: true });
+      writeFileSync5(destPath, srcContent);
     }
   } catch {
   }
-  const agentMcpPath = join4(getAgentDir(codeName), "provision", ".mcp.json");
-  const projectMcpPath = join4(projectDir, ".mcp.json");
+  const agentMcpPath = join5(getAgentDir(codeName), "provision", ".mcp.json");
+  const projectMcpPath = join5(projectDir, ".mcp.json");
   try {
-    const agentMcp = JSON.parse(readFileSync4(agentMcpPath, "utf-8"));
+    const agentMcp = JSON.parse(readFileSync5(agentMcpPath, "utf-8"));
     let projectMcp;
     try {
-      projectMcp = JSON.parse(readFileSync4(projectMcpPath, "utf-8"));
+      projectMcp = JSON.parse(readFileSync5(projectMcpPath, "utf-8"));
     } catch {
       projectMcp = { mcpServers: {} };
     }
@@ -2498,7 +3051,7 @@ function deployArtifactsToProject(codeName, provisionDir) {
       return !(entry && typeof entry["url"] === "string" && entry["url"].startsWith("/"));
     }));
     projectMcp["mcpServers"] = { ...stripRelativeUrls(projectServers), ...stripRelativeUrls(agentServers) };
-    writeFileSync4(projectMcpPath, JSON.stringify(projectMcp, null, 2), { mode: MCP_FILE_MODE });
+    writeFileSync5(projectMcpPath, JSON.stringify(projectMcp, null, 2), { mode: MCP_FILE_MODE });
     try {
       chmodSync4(projectMcpPath, MCP_FILE_MODE);
     } catch {
@@ -2508,9 +3061,9 @@ function deployArtifactsToProject(codeName, provisionDir) {
   const agentDir = getAgentDir(codeName);
   for (const envFile of [".env", ".env.integrations"]) {
     try {
-      const content = readFileSync4(join4(agentDir, envFile), "utf-8");
-      const envDest = join4(projectDir, envFile);
-      writeFileSync4(envDest, content, { mode: SECRET_FILE_MODE });
+      const content = readFileSync5(join5(agentDir, envFile), "utf-8");
+      const envDest = join5(projectDir, envFile);
+      writeFileSync5(envDest, content, { mode: SECRET_FILE_MODE });
       try {
         chmodSync4(envDest, SECRET_FILE_MODE);
       } catch {
@@ -2519,16 +3072,16 @@ function deployArtifactsToProject(codeName, provisionDir) {
     }
   }
   try {
-    const gitDir = join4(projectDir, ".git");
-    const hookSrc = join4(provisionDir, ".git-hooks", "pre-commit");
+    const gitDir = join5(projectDir, ".git");
+    const hookSrc = join5(provisionDir, ".git-hooks", "pre-commit");
     if (existsSync4(gitDir) && existsSync4(hookSrc)) {
-      const hooksDir = join4(gitDir, "hooks");
-      mkdirSync3(hooksDir, { recursive: true });
-      const hookDest = join4(hooksDir, "pre-commit");
-      const srcContent = readFileSync4(hookSrc, "utf-8");
-      const upToDate = existsSync4(hookDest) && readFileSync4(hookDest, "utf-8") === srcContent;
+      const hooksDir = join5(gitDir, "hooks");
+      mkdirSync4(hooksDir, { recursive: true });
+      const hookDest = join5(hooksDir, "pre-commit");
+      const srcContent = readFileSync5(hookSrc, "utf-8");
+      const upToDate = existsSync4(hookDest) && readFileSync5(hookDest, "utf-8") === srcContent;
       if (!upToDate)
-        writeFileSync4(hookDest, srcContent);
+        writeFileSync5(hookDest, srcContent);
       chmodSync4(hookDest, 493);
     }
   } catch {
@@ -2536,9 +3089,9 @@ function deployArtifactsToProject(codeName, provisionDir) {
 }
 function provisionStopHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
-  const hookScriptPath = join4(claudeDir, "agt-stop-hook.sh");
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
+  const hookScriptPath = join5(claudeDir, "agt-stop-hook.sh");
   const hookScript = [
     "#!/bin/bash",
     "# Auto-generated by Augmented \u2014 captures persistent session task results.",
@@ -2582,8 +3135,8 @@ function provisionStopHook(codeName) {
     "esac",
     "exit 0"
   ].join("\n") + "\n";
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const ghostHookPath = join4(claudeDir, "agt-ghost-reply-hook.sh");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const ghostHookPath = join5(claudeDir, "agt-ghost-reply-hook.sh");
   const jqNormalizeContent = '(.message.content // .content // []) | if type == "string" then [{type: "text", text: .}] elif type == "array" then . else [] end';
   const ghostHookScript = [
     "#!/bin/bash",
@@ -3470,12 +4023,12 @@ function provisionStopHook(codeName) {
     "fi",
     "exit 0"
   ].join("\n") + "\n";
-  writeFileSync4(ghostHookPath, ghostHookScript, { mode: 493 });
+  writeFileSync5(ghostHookPath, ghostHookScript, { mode: 493 });
   const backlogHookPath = provisionBacklogPullHook(codeName);
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -3489,29 +4042,29 @@ function provisionStopHook(codeName) {
     }
   ];
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionIsolationHook(codeName, agentId) {
   const homeDir = getHomeDir();
-  const augmentedBase = join4(homeDir, ".augmented");
+  const augmentedBase = join5(homeDir, ".augmented");
   if (/["'$`\\\n]/.test(augmentedBase)) {
     throw new Error(`provisionIsolationHook: home directory contains shell metacharacters: ${JSON.stringify(augmentedBase)}`);
   }
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
   const hasAgentId = agentId !== void 0;
   if (hasAgentId)
     assertValidAgentId(agentId);
   const augmentedBaseRe = augmentedBase.replace(/[.[\]()*+?{}|^$]/g, "\\$&");
-  const claudeProjectsBase = join4(homeDir, ".claude", "projects");
+  const claudeProjectsBase = join5(homeDir, ".claude", "projects");
   const claudeProjectsBaseRe = claudeProjectsBase.replace(/[.[\]()*+?{}|^$]/g, "\\$&");
   const mangledBase = augmentedBase.replace(/[^a-zA-Z0-9]/g, "-");
   const ownAgentDir = getAgentDir(codeName);
-  const logFile = join4(ownAgentDir, "isolation.log");
+  const logFile = join5(ownAgentDir, "isolation.log");
   const idAllowClause = hasAgentId ? ` && [ "$AGENT_DIR" != "${agentId}" ]` : "";
   const idAllowClause2 = hasAgentId ? ` || [ "$OWNER" = "${agentId}" ]` : "";
-  const hookScriptPath = join4(claudeDir, "agt-isolation-hook.sh");
+  const hookScriptPath = join5(claudeDir, "agt-isolation-hook.sh");
   const hookScript = [
     "#!/bin/bash",
     "# Auto-generated by Augmented.",
@@ -3786,11 +4339,11 @@ function provisionIsolationHook(codeName, agentId) {
     "",
     "exit 0"
   ].join("\n") + "\n";
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -3805,13 +4358,13 @@ function provisionIsolationHook(codeName, agentId) {
     }
   ];
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionBacklogPullHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
-  const hookScriptPath = join4(claudeDir, "agt-backlog-pull-hook.sh");
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
+  const hookScriptPath = join5(claudeDir, "agt-backlog-pull-hook.sh");
   const hookScript = `#!/usr/bin/env bash
 # Auto-generated by Augmented (CS-1549) \u2014 Stop hook: don't end a turn idle
 # beside a non-empty backlog. Fail-open on every path; blocks at most once per
@@ -3982,14 +4535,14 @@ If you genuinely should not pull it, say so in one line and why (it is deliberat
 jq -cn --arg r "$REASON" '{decision:"block", reason:$r}'
 exit 0
 `;
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
   return hookScriptPath;
 }
 function provisionAutoKanbanProgressHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
-  const hookScriptPath = join4(claudeDir, "agt-auto-kanban-progress-hook.sh");
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
+  const hookScriptPath = join5(claudeDir, "agt-auto-kanban-progress-hook.sh");
   const hookScript = `#!/usr/bin/env bash
 # Auto-generated by Augmented (ENG-6179 / ENG-6241) \u2014 PostToolUse auto-progress.
 # Maps the agent's latest tool action onto its active in-thread kanban progress
@@ -4104,11 +4657,11 @@ BODY="$(jq -nc --arg a "$AGENT_ID" --arg s "$STEP" '{agent_id:$a, step:$s}' 2>/d
 
 exit 0
 `;
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -4120,13 +4673,13 @@ exit 0
     }
   ];
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionChannelProgressHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
-  const hookScriptPath = join4(claudeDir, "agt-channel-progress-hook.sh");
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
+  const hookScriptPath = join5(claudeDir, "agt-channel-progress-hook.sh");
   const hookScript = `#!/usr/bin/env bash
 # Auto-generated by Augmented (ENG-6567 Phase 2) \u2014 PostToolUse channel-progress
 # heartbeat. Writes a throttled local {step, updated_at_ms} the channel MCP reads
@@ -4192,11 +4745,11 @@ else
 fi
 exit 0
 `;
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -4212,7 +4765,7 @@ exit 0
   }
   hooks["PostToolUse"] = groups;
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 var LONG_COMMAND_BOUNDED_TIMEOUT_MS = 12e4;
 var LONG_COMMAND_HOOK_FILENAME = "agt-long-command-hook.sh";
@@ -4576,13 +5129,16 @@ function classifyCommand(words0, loop, depth) {
 }
 `;
 var LONG_COMMAND_MAX_FOREGROUND_TIMEOUT_MS = 18e4;
+function provisionRootRmHook(codeName) {
+  provisionRootRmHookAt(join5(getProjectDir2(codeName), ".claude"));
+}
 function provisionLongCommandHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
-  const hookScriptPath = join4(claudeDir, LONG_COMMAND_HOOK_FILENAME);
-  const jsPath = join4(claudeDir, LONG_COMMAND_HOOK_JS_FILENAME);
-  writeFileSync4(jsPath, LONG_COMMAND_HOOK_JS.replace("__BOUND__", String(LONG_COMMAND_BOUNDED_TIMEOUT_MS)), { mode: 420 });
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
+  const hookScriptPath = join5(claudeDir, LONG_COMMAND_HOOK_FILENAME);
+  const jsPath = join5(claudeDir, LONG_COMMAND_HOOK_JS_FILENAME);
+  writeFileSync5(jsPath, LONG_COMMAND_HOOK_JS.replace("__BOUND__", String(LONG_COMMAND_BOUNDED_TIMEOUT_MS)), { mode: 420 });
   const hookScript = [
     "#!/usr/bin/env bash",
     "# ENG-11393: refuse known-slow foreground shell commands; see index.ts.",
@@ -4590,11 +5146,11 @@ function provisionLongCommandHook(codeName) {
     "command -v node >/dev/null 2>&1 || exit 0",
     `exec node '${jsPath.replace(/'/g, `'\\''`)}'`
   ].join("\n") + "\n";
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -4608,15 +5164,15 @@ function provisionLongCommandHook(codeName) {
   const env = settings["env"] ?? {};
   env["BASH_MAX_TIMEOUT_MS"] = String(LONG_COMMAND_MAX_FOREGROUND_TIMEOUT_MS);
   settings["env"] = env;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionOrientHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
-  const codeRoots = [join4(getHomeDir(), "code"), join4(agentDir, "code")];
-  const hookScriptPath = join4(claudeDir, "agt-orient-hook.sh");
+  const codeRoots = [join5(getHomeDir(), "code"), join5(agentDir, "code")];
+  const hookScriptPath = join5(claudeDir, "agt-orient-hook.sh");
   const hookScript = [
     "#!/bin/bash",
     "# Auto-generated by Augmented (ENG-5397) \u2014 SessionStart orientation hook.",
@@ -4888,11 +5444,11 @@ function provisionOrientHook(codeName) {
     "fi",
     "exit 0"
   ].join("\n") + "\n";
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -4912,15 +5468,15 @@ function provisionOrientHook(codeName) {
   }
   hooks["SessionStart"] = existingSessionStart;
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionPreCompactHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
   const jqNormalizeContent = '(.message.content // .content // []) | if type == "string" then [{type: "text", text: .}] elif type == "array" then . else [] end';
-  const hookScriptPath = join4(claudeDir, "agt-pre-compact-hook.sh");
+  const hookScriptPath = join5(claudeDir, "agt-pre-compact-hook.sh");
   const hookScript = [
     "#!/bin/bash",
     "# Auto-generated by Augmented (ENG-7339) - PreCompact courtesy notice.",
@@ -5024,12 +5580,12 @@ function provisionPreCompactHook(codeName) {
     'if [ "$WROTE" = "1" ]; then date +%s > "$NOTICE_MARKER" 2>/dev/null || true; fi',
     "exit 0"
   ].join("\n") + "\n";
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
   chmodSync4(hookScriptPath, 493);
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -5049,14 +5605,14 @@ function provisionPreCompactHook(codeName) {
   }
   hooks["PreCompact"] = existingPreCompact;
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionSessionStateHook(codeName) {
   const projectDir = getProjectDir2(codeName);
-  const claudeDir = join4(projectDir, ".claude");
-  mkdirSync3(claudeDir, { recursive: true });
+  const claudeDir = join5(projectDir, ".claude");
+  mkdirSync4(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
-  const hookScriptPath = join4(claudeDir, "agt-session-state-hook.sh");
+  const hookScriptPath = join5(claudeDir, "agt-session-state-hook.sh");
   const hookScript = `#!/usr/bin/env bash
 # Auto-generated by Augmented (ENG-6233 / ENG-6268) \u2014 SessionStart session-state
 # recorder. Writes the model + session origin (which only the agent's own
@@ -5133,11 +5689,11 @@ fi
 
 exit 0
 `;
-  writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
-  const settingsPath = join4(claudeDir, "settings.local.json");
+  writeFileSync5(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join5(claudeDir, "settings.local.json");
   let settings = {};
   try {
-    settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+    settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
   } catch {
   }
   const hooks = settings["hooks"] ?? {};
@@ -5153,13 +5709,13 @@ exit 0
   }
   hooks["SessionStart"] = existingSessionStart;
   settings["hooks"] = hooks;
-  writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
 }
 function modifyJsonConfig(filePath, fn) {
   let originalContent;
   let config;
   try {
-    originalContent = readFileSync4(filePath, "utf-8");
+    originalContent = readFileSync5(filePath, "utf-8");
     config = JSON.parse(originalContent);
   } catch {
     return;
@@ -5170,7 +5726,7 @@ function modifyJsonConfig(filePath, fn) {
   const newContent = JSON.stringify(config, null, 2);
   if (newContent === originalContent)
     return;
-  writeFileSync4(filePath, newContent);
+  writeFileSync5(filePath, newContent);
 }
 var SUBAGENT_BUILTIN_TOOLS = [
   "Bash",
@@ -5256,7 +5812,7 @@ function buildSettingsJson(input) {
   const projectDir = getProjectDir2(agent.code_name);
   const agentDir = getAgentDir(agent.code_name);
   const homeDir = getHomeDir();
-  const codenameAliasDir = join4(homeDir, ".augmented", agent.code_name);
+  const codenameAliasDir = join5(homeDir, ".augmented", agent.code_name);
   settings["allowedDirectories"] = [
     .../* @__PURE__ */ new Set([
       projectDir,
@@ -5265,7 +5821,7 @@ function buildSettingsJson(input) {
       // Agent's config dir (.env, schedules, registration)
       codenameAliasDir,
       // Codename symlink alias (== agentDir for legacy agents)
-      join4(homeDir, ".augmented", "_mcp"),
+      join5(homeDir, ".augmented", "_mcp"),
       // Shared MCP binaries
       "/tmp"
       // Temp files
@@ -5365,10 +5921,10 @@ ${integrationsBlock}`;
 function renderAugmentedWorkerForAgent(codeName) {
   const agentDir = getAgentDir(codeName);
   const projectDir = getProjectDir2(codeName);
-  const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
+  const provisionMcpPath = join5(agentDir, "provision", ".mcp.json");
   let mcpServerKeys;
   try {
-    const config = JSON.parse(readFileSync4(provisionMcpPath, "utf-8"));
+    const config = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
     mcpServerKeys = Object.keys(config.mcpServers ?? {});
   } catch {
     return;
@@ -5376,10 +5932,10 @@ function renderAugmentedWorkerForAgent(codeName) {
   const integrations = readIntegrationsSummaryForAgent(codeName);
   const content = buildAugmentedWorkerAgent({ mcpServerKeys, integrations });
   for (const baseDir of [agentDir, projectDir]) {
-    const target = join4(baseDir, ".claude", "agents", "augmented-worker.md");
+    const target = join5(baseDir, ".claude", "agents", "augmented-worker.md");
     try {
-      mkdirSync3(dirname3(target), { recursive: true });
-      writeFileSync4(target, content);
+      mkdirSync4(dirname3(target), { recursive: true });
+      writeFileSync5(target, content);
     } catch {
     }
   }
@@ -5405,8 +5961,8 @@ function buildPostizMcpEntry(integration) {
 }
 function buildMcpJson(input) {
   const mcpServers = {};
-  const turnInitiatorFile = join4(getAgentDir(input.agent.code_name), ".current-turn-initiator.json");
-  const localMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "index.js");
+  const turnInitiatorFile = join5(getAgentDir(input.agent.code_name), ".current-turn-initiator.json");
+  const localMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "index.js");
   mcpServers["augmented"] = {
     command: "node",
     args: [localMcpPath],
@@ -5459,7 +6015,7 @@ function buildMcpJson(input) {
   const xeroIntegration = input.integrations?.find((i) => i.definition_id === "xero");
   if (xeroIntegration) {
     const brokerMode = Boolean(xeroIntegration.id);
-    const localXeroMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "xero.js");
+    const localXeroMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "xero.js");
     mcpServers["xero"] = {
       command: "node",
       args: [localXeroMcpPath],
@@ -5499,7 +6055,7 @@ function buildMcpJson(input) {
         // getProjectDir (the ADR-0049 seam), not the MCP child's inherited
         // cwd, so the path stays correct if Claude Code ever spawns the
         // server from somewhere else.
-        XERO_EXPORT_DIR: join4(getProjectDir2(input.agent.code_name), "xero-exports"),
+        XERO_EXPORT_DIR: join5(getProjectDir2(input.agent.code_name), "xero-exports"),
         PATH: process.env["PATH"] ?? "",
         HOME: process.env["HOME"] ?? ""
       }
@@ -5510,8 +6066,8 @@ function buildMcpJson(input) {
     mcpServers["postiz"] = buildPostizMcpEntry(postizIntegration);
   }
   const remoteOAuthProxyPaths = {
-    proxyPath: join4(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
-    tokenFile: join4(getProjectDir2(input.agent.code_name), ".env.integrations")
+    proxyPath: join5(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
+    tokenFile: join5(getProjectDir2(input.agent.code_name), ".env.integrations")
   };
   for (const integration of input.integrations ?? []) {
     const connectionKey = integration.connection_key;
@@ -5582,7 +6138,7 @@ function buildMcpJson(input) {
   }
   const hasAdminDebug = input.integrations?.some((i) => i.definition_id === "augmented-admin") ?? false;
   if (hasAdminDebug) {
-    const localAdminMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-admin.js");
+    const localAdminMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-admin.js");
     mcpServers["augmented-admin"] = {
       command: "node",
       args: [localAdminMcpPath],
@@ -5596,7 +6152,7 @@ function buildMcpJson(input) {
   }
   const hasSupport = input.integrations?.some((i) => i.definition_id === "augmented-support") ?? false;
   if (hasSupport) {
-    const localSupportMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-support.js");
+    const localSupportMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-support.js");
     mcpServers["augmented-support"] = {
       command: "node",
       args: [localSupportMcpPath],
@@ -5610,7 +6166,7 @@ function buildMcpJson(input) {
   }
   const hasHelpKb = input.integrations?.some((i) => i.definition_id === "augmented-help-kb") ?? false;
   if (hasHelpKb) {
-    const localHelpKbMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-help-kb.js");
+    const localHelpKbMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-help-kb.js");
     mcpServers["augmented-help-kb"] = {
       command: "node",
       args: [localHelpKbMcpPath],
@@ -5624,7 +6180,7 @@ function buildMcpJson(input) {
   }
   const origamiIntegration = input.integrations?.find((i) => i.definition_id === "origami");
   if (origamiIntegration?.stdioMcp === true && origamiIntegration.id) {
-    const localOrigamiMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "origami.js");
+    const localOrigamiMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "origami.js");
     mcpServers["origami"] = {
       command: "node",
       args: [localOrigamiMcpPath],
@@ -5643,7 +6199,7 @@ function buildMcpJson(input) {
       agentId: input.agent.agent_id,
       agentCodeName: input.agent.code_name,
       config: computerUseIntegration.config,
-      proxyPath: join4(getHomeDir(), ".augmented", "_mcp", "computer-use-proxy.js"),
+      proxyPath: join5(getHomeDir(), ".augmented", "_mcp", "computer-use-proxy.js"),
       agentDir: getAgentDir(input.agent.code_name)
     });
     if (rendered.entry) {
@@ -5844,6 +6400,8 @@ var claudeCodeAdapter = {
         content: JSON.stringify(integrationSummaries, null, 2)
       }
     ];
+    const rmPolicy = rmPolicyFromGuardrails(input.guardrails) ?? RM_POLICY_UNKNOWN;
+    artifacts.push({ relativePath: RM_POLICY_ARTIFACT, content: JSON.stringify(rmPolicy, null, 2) });
     const knowledgeEntries = input.knowledge ?? [];
     const delivery = input.knowledgeDelivery ?? "both";
     const includeFiles = delivery === "files" || delivery === "both";
@@ -5889,14 +6447,14 @@ ${sections}`
   },
   async getRegisteredAgents(_profile) {
     const homeDir = getHomeDir();
-    const augDir = join4(homeDir, ".augmented");
+    const augDir = join5(homeDir, ".augmented");
     const agents = /* @__PURE__ */ new Set();
     try {
       const entries = readdirSync(augDir);
       for (const entry of entries) {
         if (entry.startsWith("_") || entry.startsWith("."))
           continue;
-        const agentRoot = join4(augDir, entry);
+        const agentRoot = join5(augDir, entry);
         let st;
         try {
           st = lstatSync(agentRoot);
@@ -5905,11 +6463,11 @@ ${sections}`
         }
         if (st.isSymbolicLink() || !st.isDirectory())
           continue;
-        if (!existsSync4(join4(agentRoot, "registration.json")))
+        if (!existsSync4(join5(agentRoot, "registration.json")))
           continue;
         let codeName = entry;
         try {
-          const reg = JSON.parse(readFileSync4(join4(agentRoot, "registration.json"), "utf8"));
+          const reg = JSON.parse(readFileSync5(join5(agentRoot, "registration.json"), "utf8"));
           if (reg && typeof reg.code_name === "string" && reg.code_name) {
             codeName = reg.code_name;
           }
@@ -5928,9 +6486,9 @@ ${sections}`
       }
       const agentDir = getAgentDir(codeName);
       const projectDir = getProjectDir2(codeName);
-      mkdirSync3(agentDir, { recursive: true });
-      mkdirSync3(projectDir, { recursive: true });
-      writeFileSync4(join4(agentDir, "registration.json"), JSON.stringify({
+      mkdirSync4(agentDir, { recursive: true });
+      mkdirSync4(projectDir, { recursive: true });
+      writeFileSync5(join5(agentDir, "registration.json"), JSON.stringify({
         code_name: codeName,
         agent_id: agentId ?? null,
         team_dir: teamDir,
@@ -5949,7 +6507,7 @@ ${sections}`
   async deregisterAgent(codeName) {
     try {
       const agentDir = getAgentDir(codeName);
-      const regFile = join4(agentDir, "registration.json");
+      const regFile = join5(agentDir, "registration.json");
       if (existsSync4(regFile)) {
         const { unlinkSync: unlinkSync5 } = await import("fs");
         unlinkSync5(regFile);
@@ -5961,7 +6519,7 @@ ${sections}`
   },
   writeAuthProfiles(codeName, profiles) {
     const agentDir = getAgentDir(codeName);
-    mkdirSync3(agentDir, { recursive: true });
+    mkdirSync4(agentDir, { recursive: true });
     const envLines = ["# Augmented auth profiles \u2014 auto-generated, do not edit"];
     for (const p of profiles) {
       if (!p.api_key)
@@ -5975,8 +6533,8 @@ ${sections}`
       }
     }
     if (envLines.length > 1) {
-      const envPath = join4(agentDir, ".env");
-      writeFileSync4(envPath, envLines.join("\n") + "\n");
+      const envPath = join5(agentDir, ".env");
+      writeFileSync5(envPath, envLines.join("\n") + "\n");
       chmodSync4(envPath, SECRET_FILE_MODE);
     }
   },
@@ -6025,7 +6583,7 @@ ${sections}`
     const senderPolicyInternalOnly = options?.senderPolicy?.internal_only === true;
     const senderPolicyEnv = senderPolicyTeamId ? { AGT_TEAM_ID: senderPolicyTeamId } : {};
     const agentDir = getAgentDir(codeName);
-    mkdirSync3(agentDir, { recursive: true });
+    mkdirSync4(agentDir, { recursive: true });
     const persistChannelSecrets = options?.channelSecretDelivery !== "spawn-env";
     const channelSecretUpdates = (updates, fullKeySet) => {
       if (persistChannelSecrets)
@@ -6039,7 +6597,7 @@ ${sections}`
       if (!botToken)
         return missingCredentialField("bot_token");
       const allowedChats = config["allowed_chats"];
-      const localTelegramChannel = join4(getHomeDir(), ".augmented", "_mcp", "telegram-channel.js");
+      const localTelegramChannel = join5(getHomeDir(), ".augmented", "_mcp", "telegram-channel.js");
       const resolvedAgtHostForTelegram = process.env["AGT_HOST"]?.trim() || "https://api.augmented.team";
       const resolvedAgtApiKeyForTelegram = process.env["AGT_API_KEY"]?.trim();
       writeEnvIntegrationsForAgent(codeName, {
@@ -6054,7 +6612,7 @@ ${sections}`
         ...options?.agentId ? { AGT_AGENT_ID: options.agentId } : {},
         ...tzEnv,
         // ENG-6582 (D16): stamp the verified turn initiator for broker MCPs.
-        AGT_TURN_INITIATOR_FILE: join4(getAgentDir(codeName), ".current-turn-initiator.json")
+        AGT_TURN_INITIATOR_FILE: join5(getAgentDir(codeName), ".current-turn-initiator.json")
       };
       if (allowedChats && allowedChats.length > 0) {
         telegramEnv.TELEGRAM_ALLOWED_CHATS = allowedChats.join(",");
@@ -6129,11 +6687,11 @@ ${sections}`
         args: [localTelegramChannel],
         env: telegramEnv
       };
-      const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
-      mkdirSync3(dirname3(provisionMcpPath), { recursive: true });
+      const provisionMcpPath = join5(agentDir, "provision", ".mcp.json");
+      mkdirSync4(dirname3(provisionMcpPath), { recursive: true });
       let mcpConfig2 = { mcpServers: {} };
       try {
-        mcpConfig2 = JSON.parse(readFileSync4(provisionMcpPath, "utf-8"));
+        mcpConfig2 = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
         if (!mcpConfig2.mcpServers)
           mcpConfig2.mcpServers = {};
       } catch {
@@ -6147,13 +6705,13 @@ ${sections}`
     }
     if (isPersistent && (channelId === "discord" || channelId === "slack")) {
       let wrotePersistentCredential = false;
-      const channelDir = join4(getHomeDir(), ".claude", "channels", channelId);
+      const channelDir = join5(getHomeDir(), ".claude", "channels", channelId);
       if (channelId === "discord")
-        mkdirSync3(channelDir, { recursive: true });
+        mkdirSync4(channelDir, { recursive: true });
       if (channelId === "discord") {
         const botToken = config["bot_token"];
         if (botToken) {
-          writeFileSync4(join4(channelDir, ".env"), `DISCORD_BOT_TOKEN=${botToken}
+          writeFileSync5(join5(channelDir, ".env"), `DISCORD_BOT_TOKEN=${botToken}
 `);
           wrotePersistentCredential = true;
         }
@@ -6217,7 +6775,7 @@ ${sections}`
               ...appToken ? { SLACK_APP_TOKEN: appToken } : {}
             }, ["SLACK_BOT_TOKEN", "SLACK_APP_TOKEN"])
           });
-          const localSlackChannel = join4(getHomeDir(), ".augmented", "_mcp", "slack-channel.js");
+          const localSlackChannel = join5(getHomeDir(), ".augmented", "_mcp", "slack-channel.js");
           const slackAvatarEnvUrl = resolveAvatarEnvUrl(options?.agentAvatarUrl).url;
           const slackEntry = {
             command: existsSync4(localSlackChannel) ? "node" : "npx",
@@ -6312,14 +6870,14 @@ ${sections}`
               ...pingAllowedUsers.length > 0 ? { SLACK_PING_ALLOWED_USERS: pingAllowedUsers.join(",") } : {},
               // ENG-6563 (D16): stamp the verified turn initiator so broker MCPs
               // can forward it when the agent files an approval mid-turn.
-              AGT_TURN_INITIATOR_FILE: join4(agentDir, ".current-turn-initiator.json")
+              AGT_TURN_INITIATOR_FILE: join5(agentDir, ".current-turn-initiator.json")
             }
           };
-          const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
-          mkdirSync3(dirname3(provisionMcpPath), { recursive: true });
+          const provisionMcpPath = join5(agentDir, "provision", ".mcp.json");
+          mkdirSync4(dirname3(provisionMcpPath), { recursive: true });
           let mcpConfig2 = { mcpServers: {} };
           try {
-            mcpConfig2 = JSON.parse(readFileSync4(provisionMcpPath, "utf-8"));
+            mcpConfig2 = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
             if (!mcpConfig2.mcpServers)
               mcpConfig2.mcpServers = {};
           } catch {
@@ -6330,7 +6888,7 @@ ${sections}`
           }
           syncMcpToProject(codeName);
           wrotePersistentCredential = true;
-          const staleChannelsPath = join4(getProjectDir2(codeName), ".mcp-channels.json");
+          const staleChannelsPath = join5(getProjectDir2(codeName), ".mcp-channels.json");
           if (existsSync4(staleChannelsPath)) {
             try {
               rmSync2(staleChannelsPath, { force: true });
@@ -6344,11 +6902,11 @@ ${sections}`
       }
       return CHANNEL_WRITE_OK;
     }
-    const mcpJsonPath = join4(agentDir, "provision", ".mcp.json");
-    mkdirSync3(dirname3(mcpJsonPath), { recursive: true });
+    const mcpJsonPath = join5(agentDir, "provision", ".mcp.json");
+    mkdirSync4(dirname3(mcpJsonPath), { recursive: true });
     let mcpConfig;
     try {
-      mcpConfig = JSON.parse(readFileSync4(mcpJsonPath, "utf-8"));
+      mcpConfig = JSON.parse(readFileSync5(mcpJsonPath, "utf-8"));
     } catch {
       mcpConfig = { mcpServers: {} };
     }
@@ -6367,7 +6925,7 @@ ${sections}`
       const appToken = config["app_token"];
       if (!botToken)
         return missingCredentialField("bot_token");
-      const localSlackChannel = join4(getHomeDir(), ".augmented", "_mcp", "slack-channel.js");
+      const localSlackChannel = join5(getHomeDir(), ".augmented", "_mcp", "slack-channel.js");
       const slackThreadAutoFollow = config["thread_auto_follow"];
       const slackAutoFollowEnv = slackThreadAutoFollow && slackThreadAutoFollow !== "off" ? { SLACK_THREAD_AUTO_FOLLOW: slackThreadAutoFollow } : {};
       const slackChannelResponseMode = config["channel_response_mode"];
@@ -6456,7 +7014,7 @@ ${sections}`
             ...slackAgtAuthEnv,
             ...tzEnv,
             // ENG-6563 (D16): stamp the verified turn initiator for broker MCPs.
-            AGT_TURN_INITIATOR_FILE: join4(getAgentDir(codeName), ".current-turn-initiator.json"),
+            AGT_TURN_INITIATOR_FILE: join5(getAgentDir(codeName), ".current-turn-initiator.json"),
             // ENG-6155: avatar URL → bot Slack profile photo (see persistent
             // branch above). Mirrored here so oneshot-mode agents get it too.
             // ENG-6245: slackAvatarEnvUrl is null for data-URI / oversized values.
@@ -6481,7 +7039,7 @@ ${sections}`
             ...slackAgtAuthEnv,
             ...tzEnv,
             // ENG-6563 (D16): stamp the verified turn initiator for broker MCPs.
-            AGT_TURN_INITIATOR_FILE: join4(getAgentDir(codeName), ".current-turn-initiator.json"),
+            AGT_TURN_INITIATOR_FILE: join5(getAgentDir(codeName), ".current-turn-initiator.json"),
             // ENG-6155: avatar URL → bot Slack profile photo (see persistent
             // branch above). Mirrored here so oneshot-mode agents get it too.
             // ENG-6245: slackAvatarEnvUrl is null for data-URI / oversized values.
@@ -6495,12 +7053,12 @@ ${sections}`
       if (!appId || !clientSecret) {
         return missingCredentialField(!appId ? "app_id" : "client_secret");
       }
-      const localTeamsChannel = join4(getHomeDir(), ".augmented", "_mcp", "teams-channel.js");
+      const localTeamsChannel = join5(getHomeDir(), ".augmented", "_mcp", "teams-channel.js");
       const agentDirMs = getAgentDir(codeName);
       try {
-        mkdirSync3(join4(agentDirMs, "msteams-pending-inbound", ".markers"), { recursive: true });
-        mkdirSync3(join4(agentDirMs, "msteams-pending-interactions"), { recursive: true });
-        mkdirSync3(join4(agentDirMs, "msteams-recovery-outbox"), { recursive: true });
+        mkdirSync4(join5(agentDirMs, "msteams-pending-inbound", ".markers"), { recursive: true });
+        mkdirSync4(join5(agentDirMs, "msteams-pending-interactions"), { recursive: true });
+        mkdirSync4(join5(agentDirMs, "msteams-recovery-outbox"), { recursive: true });
       } catch {
       }
       const tenantId = config["tenant_id"] ?? "common";
@@ -6582,7 +7140,7 @@ ${sections}`
     }
     if (channelId === "whatsapp") {
       const provider = config["provider"] ?? "kapso";
-      const localWhatsappChannel = join4(getHomeDir(), ".augmented", "_mcp", "whatsapp-channel.js");
+      const localWhatsappChannel = join5(getHomeDir(), ".augmented", "_mcp", "whatsapp-channel.js");
       if (provider === "baileys") {
         mcpServers["whatsapp"] = {
           command: "node",
@@ -6602,7 +7160,7 @@ ${sections}`
       const phoneNumberId = config["phone_number_id"];
       if (projectApiKey && phoneNumberId) {
         try {
-          mkdirSync3(join4(getAgentDir(codeName), "whatsapp-pending-inbound"), { recursive: true });
+          mkdirSync4(join5(getAgentDir(codeName), "whatsapp-pending-inbound"), { recursive: true });
         } catch {
         }
         writeEnvIntegrationsForAgent(codeName, {
@@ -6634,11 +7192,11 @@ ${sections}`
     return CHANNEL_WRITE_OK;
   },
   hasChannelCredentials(codeName, channelId) {
-    const provisionMcpPath = join4(getAgentDir(codeName), "provision", ".mcp.json");
+    const provisionMcpPath = join5(getAgentDir(codeName), "provision", ".mcp.json");
     if (!existsSync4(provisionMcpPath))
       return false;
     try {
-      const parsed = JSON.parse(readFileSync4(provisionMcpPath, "utf-8"));
+      const parsed = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
       return Boolean(parsed.mcpServers?.[channelId]);
     } catch {
       return false;
@@ -6646,7 +7204,7 @@ ${sections}`
   },
   removeChannelCredentials(codeName, channelId) {
     const agentDir = getAgentDir(codeName);
-    const mcpJsonPath = join4(agentDir, "provision", ".mcp.json");
+    const mcpJsonPath = join5(agentDir, "provision", ".mcp.json");
     modifyJsonConfig(mcpJsonPath, (config) => {
       const mcpServers = config["mcpServers"];
       if (!mcpServers || !(channelId in mcpServers))
@@ -6658,7 +7216,7 @@ ${sections}`
   },
   async updateAgentModel(codeName, model) {
     const agentDir = getAgentDir(codeName);
-    const settingsPath = join4(agentDir, "provision", "settings.json");
+    const settingsPath = join5(agentDir, "provision", "settings.json");
     let changed = false;
     modifyJsonConfig(settingsPath, (config) => {
       config["model"] = model;
@@ -6676,20 +7234,20 @@ ${sections}`
   seedProfileConfig(codeName) {
     const agentDir = getAgentDir(codeName);
     const projectDir = getProjectDir2(codeName);
-    mkdirSync3(join4(agentDir, "provision"), { recursive: true });
-    mkdirSync3(projectDir, { recursive: true });
+    mkdirSync4(join5(agentDir, "provision"), { recursive: true });
+    mkdirSync4(projectDir, { recursive: true });
   },
   syncScheduledTasks(codeName, tasks) {
     const agentDir = getAgentDir(codeName);
-    const schedulesPath = join4(agentDir, "schedules.json");
+    const schedulesPath = join5(agentDir, "schedules.json");
     const mapped = mapScheduledTasks(tasks);
-    mkdirSync3(agentDir, { recursive: true });
-    writeFileSync4(schedulesPath, JSON.stringify({ schedules: mapped }, null, 2));
+    mkdirSync4(agentDir, { recursive: true });
+    writeFileSync5(schedulesPath, JSON.stringify({ schedules: mapped }, null, 2));
     return Promise.resolve();
   },
   writeIntegrations(codeName, integrations, agentId, options) {
     const agentDir = getAgentDir(codeName);
-    mkdirSync3(agentDir, { recursive: true });
+    mkdirSync4(agentDir, { recursive: true });
     const summariesForSidecar = integrations.map((i) => {
       const def = INTEGRATION_REGISTRY.find((d) => d.id === i.definition_id);
       return {
@@ -6804,7 +7362,7 @@ ${sections}`
         xeroEnv.AGT_AGENT_ID = agentId;
         xeroEnv.AGT_INTEGRATION_ID = xeroIntegration.id;
       }
-      const localXeroMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "xero.js");
+      const localXeroMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "xero.js");
       this.writeMcpServer(codeName, "xero", {
         command: "node",
         args: [localXeroMcpPath],
@@ -6816,8 +7374,8 @@ ${sections}`
       this.writeMcpServer(codeName, "postiz", buildPostizMcpEntry(postizIntegration));
     }
     const remoteOAuthProxyPaths = {
-      proxyPath: join4(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
-      tokenFile: join4(getProjectDir2(codeName), ".env.integrations")
+      proxyPath: join5(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
+      tokenFile: join5(getProjectDir2(codeName), ".env.integrations")
     };
     for (const integration of integrations) {
       const connectionKey = integration.connection_key;
@@ -6863,7 +7421,7 @@ ${sections}`
             // ENG-6586 (D16): keep incremental cloud-broker wiring in sync with
             // buildMcpJson so agents that add cloud-broker post-provision still
             // forward the per-turn initiator.
-            AGT_TURN_INITIATOR_FILE: join4(getAgentDir(codeName), ".current-turn-initiator.json"),
+            AGT_TURN_INITIATOR_FILE: join5(getAgentDir(codeName), ".current-turn-initiator.json"),
             PATH: process.env["PATH"] ?? "",
             HOME: process.env["HOME"] ?? ""
           }
@@ -6887,7 +7445,7 @@ ${sections}`
             // ENG-6563 (D16): keep incremental xero-broker wiring in sync with
             // buildMcpJson so agents that add xero-broker post-provision still
             // forward the per-turn initiator.
-            AGT_TURN_INITIATOR_FILE: join4(getAgentDir(codeName), ".current-turn-initiator.json"),
+            AGT_TURN_INITIATOR_FILE: join5(getAgentDir(codeName), ".current-turn-initiator.json"),
             PATH: process.env["PATH"] ?? "",
             HOME: process.env["HOME"] ?? ""
           }
@@ -6896,7 +7454,7 @@ ${sections}`
     }
     const hasAdminDebug = integrations.some((i) => i.definition_id === "augmented-admin");
     if (hasAdminDebug) {
-      const localAdminMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-admin.js");
+      const localAdminMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-admin.js");
       this.writeMcpServer(codeName, "augmented-admin", {
         command: "node",
         args: [localAdminMcpPath],
@@ -6910,7 +7468,7 @@ ${sections}`
     }
     const hasSupport = integrations.some((i) => i.definition_id === "augmented-support");
     if (hasSupport) {
-      const localSupportMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-support.js");
+      const localSupportMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-support.js");
       this.writeMcpServer(codeName, "augmented-support", {
         command: "node",
         args: [localSupportMcpPath],
@@ -6924,7 +7482,7 @@ ${sections}`
     }
     const hasHelpKb = integrations.some((i) => i.definition_id === "augmented-help-kb");
     if (hasHelpKb) {
-      const localHelpKbMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "augmented-help-kb.js");
+      const localHelpKbMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "augmented-help-kb.js");
       this.writeMcpServer(codeName, "augmented-help-kb", {
         command: "node",
         args: [localHelpKbMcpPath],
@@ -6940,7 +7498,7 @@ ${sections}`
     const origamiStdioAgentId = resolveBrokerAgentId(codeName) ?? agentId;
     const origamiStdioExpected = Boolean(origamiStdio?.stdioMcp === true && origamiStdio.id);
     if (origamiStdioExpected && origamiStdioAgentId) {
-      const localOrigamiMcpPath = join4(getHomeDir(), ".augmented", "_mcp", "origami.js");
+      const localOrigamiMcpPath = join5(getHomeDir(), ".augmented", "_mcp", "origami.js");
       this.writeMcpServer(codeName, "origami", {
         command: "node",
         args: [localOrigamiMcpPath],
@@ -6961,7 +7519,7 @@ ${sections}`
         agentId: computerUseAgentId,
         agentCodeName: codeName,
         config: computerUseRow.config,
-        proxyPath: join4(getHomeDir(), ".augmented", "_mcp", "computer-use-proxy.js"),
+        proxyPath: join5(getHomeDir(), ".augmented", "_mcp", "computer-use-proxy.js"),
         agentDir: getAgentDir(codeName)
       });
       if (rendered.entry) {
@@ -7085,9 +7643,9 @@ ${sections}`
       }
     }
     const projectDir = getProjectDir2(codeName);
-    const claudeMdPath = join4(projectDir, "CLAUDE.md");
+    const claudeMdPath = join5(projectDir, "CLAUDE.md");
     try {
-      const existing = readFileSync4(claudeMdPath, "utf-8");
+      const existing = readFileSync5(claudeMdPath, "utf-8");
       const renderSection = options?.renderClaudeMdSection === true;
       const newSection = renderSection ? buildIntegrationsSection(summariesForSidecar) : "";
       const sentinelStart = INTEGRATIONS_SECTION_START.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -7104,13 +7662,13 @@ ${sections}`
         updated = existing;
       }
       if (updated !== existing)
-        writeFileSync4(claudeMdPath, updated);
+        writeFileSync5(claudeMdPath, updated);
       const agentDir2 = getAgentDir(codeName);
-      const envSrc = join4(agentDir2, ".env.integrations");
+      const envSrc = join5(agentDir2, ".env.integrations");
       try {
-        const envContent = readFileSync4(envSrc, "utf-8");
-        const envDest = join4(projectDir, ".env.integrations");
-        writeFileSync4(envDest, envContent, { mode: SECRET_FILE_MODE });
+        const envContent = readFileSync5(envSrc, "utf-8");
+        const envDest = join5(projectDir, ".env.integrations");
+        writeFileSync5(envDest, envContent, { mode: SECRET_FILE_MODE });
         try {
           chmodSync4(envDest, SECRET_FILE_MODE);
         } catch {
@@ -7124,11 +7682,11 @@ ${sections}`
   },
   writeMcpServer(codeName, serverId, config) {
     const agentDir = getAgentDir(codeName);
-    const mcpJsonPath = join4(agentDir, "provision", ".mcp.json");
-    mkdirSync3(join4(agentDir, "provision"), { recursive: true });
+    const mcpJsonPath = join5(agentDir, "provision", ".mcp.json");
+    mkdirSync4(join5(agentDir, "provision"), { recursive: true });
     let mcpConfig;
     try {
-      mcpConfig = JSON.parse(readFileSync4(mcpJsonPath, "utf-8"));
+      mcpConfig = JSON.parse(readFileSync5(mcpJsonPath, "utf-8"));
     } catch {
       mcpConfig = { mcpServers: {} };
     }
@@ -7172,7 +7730,7 @@ ${sections}`
     }
   },
   getMcpPath(codeName) {
-    return join4(getAgentDir(codeName), "provision", ".mcp.json");
+    return join5(getAgentDir(codeName), "provision", ".mcp.json");
   },
   /**
    * ENG-7994: the declared servers from `provision/.mcp.json`. Mirrors what the
@@ -7183,7 +7741,7 @@ ${sections}`
   readMcpServers(codeName) {
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync4(join4(getAgentDir(codeName), "provision", ".mcp.json"), "utf-8"));
+      parsed = JSON.parse(readFileSync5(join5(getAgentDir(codeName), "provision", ".mcp.json"), "utf-8"));
     } catch {
       return {};
     }
@@ -7196,10 +7754,10 @@ ${sections}`
   },
   removeMcpServer(codeName, serverId) {
     const agentDir = getAgentDir(codeName);
-    const mcpJsonPath = join4(agentDir, "provision", ".mcp.json");
+    const mcpJsonPath = join5(agentDir, "provision", ".mcp.json");
     let mcpConfig;
     try {
-      mcpConfig = JSON.parse(readFileSync4(mcpJsonPath, "utf-8"));
+      mcpConfig = JSON.parse(readFileSync5(mcpJsonPath, "utf-8"));
     } catch {
       return;
     }
@@ -7218,24 +7776,24 @@ ${sections}`
     const READ_WRITE_MODE = 420;
     const agentDir = getAgentDir(codeName);
     const projectDir = getProjectDir2(codeName);
-    for (const baseDir of [join4(agentDir, "skills"), join4(projectDir, ".claude", "skills")]) {
-      const skillDir = join4(baseDir, skillId);
-      mkdirSync3(skillDir, { recursive: true });
+    for (const baseDir of [join5(agentDir, "skills"), join5(projectDir, ".claude", "skills")]) {
+      const skillDir = join5(baseDir, skillId);
+      mkdirSync4(skillDir, { recursive: true });
       for (const file of files) {
         assertSafeRelativePath(file.relativePath);
-        const filePath = join4(skillDir, file.relativePath);
+        const filePath = join5(skillDir, file.relativePath);
         const rel = relative(skillDir, filePath);
         if (rel.startsWith("..") || rel === "") {
           throw new Error(`Path traversal detected: ${file.relativePath} resolves outside ${skillDir}`);
         }
-        mkdirSync3(join4(filePath, ".."), { recursive: true });
+        mkdirSync4(join5(filePath, ".."), { recursive: true });
         if (isPluginManaged && existsSync4(filePath)) {
           try {
             chmodSync4(filePath, READ_WRITE_MODE);
           } catch {
           }
         }
-        writeFileSync4(filePath, file.content);
+        writeFileSync5(filePath, file.content);
         if (isPluginManaged) {
           try {
             chmodSync4(filePath, READ_ONLY_MODE);
@@ -7247,11 +7805,11 @@ ${sections}`
   },
   installPlugin(codeName, pluginId, pluginPath, pluginConfig) {
     const agentDir = getAgentDir(codeName);
-    const pluginsJsonPath = join4(agentDir, "plugins.json");
-    mkdirSync3(agentDir, { recursive: true });
+    const pluginsJsonPath = join5(agentDir, "plugins.json");
+    mkdirSync4(agentDir, { recursive: true });
     let pluginsConfig;
     try {
-      pluginsConfig = JSON.parse(readFileSync4(pluginsJsonPath, "utf-8"));
+      pluginsConfig = JSON.parse(readFileSync5(pluginsJsonPath, "utf-8"));
     } catch {
       pluginsConfig = { plugins: {} };
     }
@@ -7264,7 +7822,7 @@ ${sections}`
       installed_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...pluginConfig ? { config: pluginConfig } : {}
     };
-    writeFileSync4(pluginsJsonPath, JSON.stringify(pluginsConfig, null, 2));
+    writeFileSync5(pluginsJsonPath, JSON.stringify(pluginsConfig, null, 2));
   },
   /**
    * Full plugin provisioning: install scripts, register hooks, apply permissions,
@@ -7280,11 +7838,11 @@ ${sections}`
     assertValidCodeName(codeName);
     assertValidCodeName(plugin.slug);
     const projectDir = getProjectDir2(codeName);
-    const claudeDir = join4(projectDir, ".claude");
-    mkdirSync3(claudeDir, { recursive: true });
+    const claudeDir = join5(projectDir, ".claude");
+    mkdirSync4(claudeDir, { recursive: true });
     const sourceSpec = options?.scriptSource ?? `augmented-plugin:${plugin.slug}`;
     this.installPlugin(codeName, plugin.slug, sourceSpec, contextValues);
-    const installedDir = join4(projectDir, ".claude", "plugins", plugin.slug);
+    const installedDir = join5(projectDir, ".claude", "plugins", plugin.slug);
     for (const skill of plugin.skills) {
       const skillId = skill.id;
       assertValidCodeName(skillId);
@@ -7296,10 +7854,10 @@ ${sections}`
     }
     const scriptsConfig = plugin.scripts;
     if (scriptsConfig?.hooks) {
-      const settingsPath = join4(claudeDir, "settings.local.json");
+      const settingsPath = join5(claudeDir, "settings.local.json");
       let settings = {};
       try {
-        settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+        settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
       } catch {
       }
       const existingHooks = settings["hooks"] ?? {};
@@ -7333,13 +7891,13 @@ ${sections}`
         }
       }
       settings["hooks"] = existingHooks;
-      writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+      writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
     }
     if (plugin.allowed_tools.length > 0) {
-      const settingsPath = join4(claudeDir, "settings.local.json");
+      const settingsPath = join5(claudeDir, "settings.local.json");
       let settings = {};
       try {
-        settings = JSON.parse(readFileSync4(settingsPath, "utf-8"));
+        settings = JSON.parse(readFileSync5(settingsPath, "utf-8"));
       } catch {
       }
       const existingPerms = settings["permissions"] ?? {};
@@ -7351,20 +7909,20 @@ ${sections}`
       }
       existingPerms["allow"] = allowList;
       settings["permissions"] = existingPerms;
-      writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
+      writeFileSync5(settingsPath, JSON.stringify(settings, null, 2));
     }
     if (contextValues && Object.keys(contextValues).length > 0) {
-      const configDir = join4(projectDir, `.${plugin.slug}`);
-      mkdirSync3(configDir, { recursive: true });
-      writeFileSync4(join4(configDir, "config.json"), JSON.stringify(contextValues, null, 2));
+      const configDir = join5(projectDir, `.${plugin.slug}`);
+      mkdirSync4(configDir, { recursive: true });
+      writeFileSync5(join5(configDir, "config.json"), JSON.stringify(contextValues, null, 2));
     }
   },
   executePluginHook(ctx) {
     assertValidCodeName(ctx.codeName);
-    const agentRootDir = join4(getHomeDir(), ".augmented", ctx.codeName);
+    const agentRootDir = join5(getHomeDir(), ".augmented", ctx.codeName);
     const projectDir = getProjectDir2(ctx.codeName);
-    mkdirSync3(agentRootDir, { recursive: true });
-    mkdirSync3(projectDir, { recursive: true });
+    mkdirSync4(agentRootDir, { recursive: true });
+    mkdirSync4(projectDir, { recursive: true });
     const startedAt = Date.now();
     return new Promise((resolve) => {
       const child = execFile("bash", ["-c", ctx.script], {
@@ -7418,14 +7976,14 @@ function jsonOutput(data) {
 }
 
 // src/lib/config.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5 } from "fs";
-import { join as join5 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync5 } from "fs";
+import { join as join6 } from "path";
 import { homedir as homedir4 } from "os";
-var AUGMENTED_DIR = join5(homedir4(), ".augmented");
-var CONFIG_PATH = join5(AUGMENTED_DIR, "config.json");
+var AUGMENTED_DIR = join6(homedir4(), ".augmented");
+var CONFIG_PATH = join6(AUGMENTED_DIR, "config.json");
 function ensureAugmentedDir() {
   if (!existsSync5(AUGMENTED_DIR)) {
-    mkdirSync4(AUGMENTED_DIR, { recursive: true });
+    mkdirSync5(AUGMENTED_DIR, { recursive: true });
   }
 }
 function reloadFromShellProfile() {
@@ -7435,10 +7993,10 @@ function loadFromShellProfile(force = false) {
   if (!force && process.env["AGT_HOST"] && process.env["AGT_API_KEY"]) return;
   const shell = process.env["SHELL"] ?? "";
   const home = homedir4();
-  const candidates = shell.includes("zsh") ? [join5(home, ".zshrc"), join5(home, ".zprofile")] : shell.includes("fish") ? [join5(home, ".config", "fish", "config.fish")] : [join5(home, ".bashrc"), join5(home, ".bash_profile")];
+  const candidates = shell.includes("zsh") ? [join6(home, ".zshrc"), join6(home, ".zprofile")] : shell.includes("fish") ? [join6(home, ".config", "fish", "config.fish")] : [join6(home, ".bashrc"), join6(home, ".bash_profile")];
   for (const profile of candidates) {
     try {
-      const content = readFileSync5(profile, "utf-8");
+      const content = readFileSync6(profile, "utf-8");
       for (const key of ["AGT_HOST", "AGT_API_KEY", "AGT_TEAM"]) {
         if (!force && process.env[key]) continue;
         const match = content.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map(
@@ -7463,7 +8021,7 @@ function getApiKey() {
 }
 function getConfig() {
   try {
-    const raw = readFileSync5(CONFIG_PATH, "utf-8");
+    const raw = readFileSync6(CONFIG_PATH, "utf-8");
     return JSON.parse(raw);
   } catch {
     return {};
@@ -7471,7 +8029,7 @@ function getConfig() {
 }
 function saveConfig(config) {
   ensureAugmentedDir();
-  writeFileSync5(CONFIG_PATH, JSON.stringify(config, null, 2));
+  writeFileSync6(CONFIG_PATH, JSON.stringify(config, null, 2));
 }
 function getActiveTeam() {
   const envTeam = process.env["AGT_TEAM"];
@@ -7518,7 +8076,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1126" : "dev";
+var agtCliVersion = true ? "0.28.1128" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7786,13 +8344,13 @@ async function getHostId() {
 }
 
 // src/lib/atomic-write.ts
-import { closeSync, fsyncSync, openSync, writeSync, renameSync as renameSync5, mkdirSync as mkdirSync5 } from "fs";
+import { closeSync, fsyncSync, openSync, writeSync, renameSync as renameSync5, mkdirSync as mkdirSync6 } from "fs";
 import { dirname as dirname4 } from "path";
 function atomicWriteFileSync(path, data) {
   const dirPath = dirname4(path);
   const tmpPath = `${path}.tmp.${process.pid}.${Math.random().toString(36).slice(2, 8)}`;
   try {
-    mkdirSync5(dirPath, { recursive: true });
+    mkdirSync6(dirPath, { recursive: true });
   } catch {
   }
   const fd = openSync(tmpPath, "w", 420);
@@ -7818,16 +8376,16 @@ function atomicWriteFileSync(path, data) {
 }
 
 // src/lib/feature-flags-host.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6, rmSync as rmSync3, statSync as statSync2 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync7, rmSync as rmSync3, statSync as statSync2 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 function defaultFlagsCachePath(configDir) {
-  return join6(configDir, "flags-cache.json");
+  return join7(configDir, "flags-cache.json");
 }
 function readFlagsCache(path) {
   try {
     if (!existsSync6(path)) return null;
-    const parsed = JSON.parse(readFileSync6(path, "utf8"));
+    const parsed = JSON.parse(readFileSync7(path, "utf8"));
     if (!parsed || typeof parsed !== "object") return null;
     const obj = parsed;
     const flags = obj["flags"];
@@ -8097,12 +8655,12 @@ var HostFlagStore = class {
    * The in-memory state stays authoritative and the next heartbeat retries.
    */
   persistPerAgentCaches(updatedAt) {
-    const root = join6(homedir5(), ".augmented");
+    const root = join7(homedir5(), ".augmented");
     for (const agentId of this.mirrorAgentIds) {
       try {
-        const dir = join6(root, agentId);
+        const dir = join7(root, agentId);
         if (!existsSync6(dir)) continue;
-        writeFlagsCache(join6(dir, "flags-cache.json"), {
+        writeFlagsCache(join7(dir, "flags-cache.json"), {
           schema_version: this.lastSchemaVersion,
           updated_at: updatedAt,
           flags: this.flagsForAgent(agentId),
@@ -8116,7 +8674,7 @@ var HostFlagStore = class {
       } catch (err) {
         let removed = "left in place";
         try {
-          rmSync3(join6(root, agentId, "flags-cache.json"), { force: true, recursive: true });
+          rmSync3(join7(root, agentId, "flags-cache.json"), { force: true, recursive: true });
           removed = "stale mirror removed";
         } catch (rmErr) {
           removed = `stale mirror could NOT be removed: ${rmErr.message}`;
@@ -10012,8 +10570,8 @@ function verdictForUnavailableMcpConfig(cause, ctx) {
 }
 
 // src/lib/connectivity-probe-context.ts
-import { delimiter as pathDelimiter, join as join7 } from "path";
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
+import { delimiter as pathDelimiter, join as join8 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync8 } from "fs";
 import { homedir as homedir6 } from "os";
 
 // src/lib/mcp-stdio-probe.ts
@@ -10757,7 +11315,7 @@ function resolveHttpServerEntry(entry, env) {
 function readMcpHttpServerConfig(projectDir, serverKey, env) {
   let servers;
   try {
-    const raw = readFileSync7(join7(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync8(join8(projectDir, ".mcp.json"), "utf-8");
     servers = JSON.parse(raw).mcpServers ?? {};
   } catch {
     return { ok: false, cause: "file-unreadable" };
@@ -10769,7 +11327,7 @@ function readMcpHttpServerConfig(projectDir, serverKey, env) {
 }
 function resolveDeclaredServerKey(projectDir, definitionId, derivedKey) {
   try {
-    const raw = readFileSync7(join7(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync8(join8(projectDir, ".mcp.json"), "utf-8");
     const servers = JSON.parse(raw).mcpServers ?? {};
     const declared = Object.keys(servers);
     if (derivedKey !== definitionId && derivedKey !== sanitizeServerKey(definitionId)) {
@@ -10811,7 +11369,7 @@ function resolveStdioServerEntry(entry, env) {
 function readMcpStdioServerConfig(projectDir, serverKey, env) {
   let servers;
   try {
-    const raw = readFileSync7(join7(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync8(join8(projectDir, ".mcp.json"), "utf-8");
     servers = JSON.parse(raw).mcpServers ?? {};
   } catch {
     return { ok: false, cause: "file-unreadable" };
@@ -10839,15 +11397,15 @@ function toolkitPathDirs() {
   const home = process.env.HOME?.trim() || homedir6();
   return [
     ...PROBE_TOOLKIT_PATH_DIRS,
-    ...PROBE_HOME_RELATIVE_PATH_SEGMENTS.map((seg) => join7(home, seg))
+    ...PROBE_HOME_RELATIVE_PATH_SEGMENTS.map((seg) => join8(home, seg))
   ];
 }
 function buildProbeEnv(projectDir, agentId) {
   const probeEnv = { ...process.env };
   try {
-    const envIntPath = join7(projectDir, ".env.integrations");
+    const envIntPath = join8(projectDir, ".env.integrations");
     if (existsSync7(envIntPath)) {
-      Object.assign(probeEnv, parseEnvIntegrations(readFileSync7(envIntPath, "utf-8")));
+      Object.assign(probeEnv, parseEnvIntegrations(readFileSync8(envIntPath, "utf-8")));
     }
   } catch {
   }
@@ -10855,7 +11413,7 @@ function buildProbeEnv(projectDir, agentId) {
     probeEnv.AGT_AGENT_ID = agentId.trim();
   }
   try {
-    const agentBinDir = join7(projectDir, ".claude", "agt-bin");
+    const agentBinDir = join8(projectDir, ".claude", "agt-bin");
     if (existsSync7(agentBinDir)) {
       const parts = probeEnv.PATH ? probeEnv.PATH.split(pathDelimiter) : [];
       parts.unshift(agentBinDir);
@@ -11249,8 +11807,8 @@ var TunnelWatcher = class {
 
 // src/lib/session-tool-bind-probe-host.ts
 import { execFileSync as syncExecFile } from "child_process";
-import { readFileSync as readFileSync8 } from "fs";
-import { join as join8 } from "path";
+import { readFileSync as readFileSync9 } from "fs";
+import { join as join9 } from "path";
 import { dirname as dirname5 } from "path";
 function deliveryFields(i) {
   const keys = ["source_type", "provider", "mcp_command", "mcp_url", "cli_binary", "cli_package"];
@@ -11264,7 +11822,7 @@ async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts)
   if (integrations.length === 0) return null;
   let mcpRaw = null;
   try {
-    mcpRaw = readFileSync8(join8(projectDir, ".mcp.json"), "utf-8");
+    mcpRaw = readFileSync9(join9(projectDir, ".mcp.json"), "utf-8");
   } catch {
     mcpRaw = null;
   }
@@ -11368,7 +11926,7 @@ var SLACK_MCP_SERVER_KEY = "slack";
 function readSlackTransportDownKeys(projectDir) {
   const none = /* @__PURE__ */ new Set();
   try {
-    const raw = readFileSync8(join8(dirname5(projectDir), SLACK_SOCKET_STATE_FILENAME), "utf-8");
+    const raw = readFileSync9(join9(dirname5(projectDir), SLACK_SOCKET_STATE_FILENAME), "utf-8");
     const state = parseSlackSocketState(raw, Date.now());
     return isSlackInboundTransportDown(state, SLACK_TRANSPORT_DOWN_AFTER_MS) ? /* @__PURE__ */ new Set([SLACK_MCP_SERVER_KEY]) : none;
   } catch {
@@ -11455,11 +12013,11 @@ function describeWorkerModuleFailure(err) {
 // src/lib/drain-transcript-flush.ts
 import { existsSync as existsSync8, readdirSync as readdirSync2 } from "fs";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname6, join as join9, relative as relative2, sep } from "path";
+import { dirname as dirname6, join as join10, relative as relative2, sep } from "path";
 import { spawn as spawn2 } from "child_process";
 
 // src/lib/host-archive-address.ts
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 var DEFAULT_ARCHIVE_ADDRESS_PATH = "/var/lib/augmented/session-archive-address.json";
 var CACHE_TTL_MS = 5 * 60 * 1e3;
 var cache2 = /* @__PURE__ */ new Map();
@@ -11475,7 +12033,7 @@ function readHostArchiveAddress(path) {
   if (hit && now - hit.at < CACHE_TTL_MS) return hit.value;
   let value = null;
   try {
-    const raw = readFileSync9(file, "utf-8");
+    const raw = readFileSync10(file, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       const obj = parsed;
@@ -11499,7 +12057,7 @@ function readHostArchiveAddress(path) {
 
 // src/lib/drain-transcript-flush.ts
 function sessionsBaseDir() {
-  return join9(homedir7(), ".claude", "projects");
+  return join10(homedir7(), ".claude", "projects");
 }
 var PER_FILE_UPLOAD_TIMEOUT_MS = 3e4;
 var UPLOAD_CONCURRENCY = 4;
@@ -11510,7 +12068,7 @@ function listJsonlFiles(dir) {
   const out = [];
   const walk = (d) => {
     for (const entry of readdirSync2(d, { withFileTypes: true })) {
-      const full = join9(d, entry.name);
+      const full = join10(d, entry.name);
       if (entry.isDirectory()) walk(full);
       else if (entry.isFile() && entry.name.endsWith(".jsonl")) out.push(full);
     }
@@ -11527,7 +12085,7 @@ function transcriptObjectKey(keyPrefix, baseDir, file) {
   return `${keyPrefix.replace(/\/+$/, "")}/${rel}`;
 }
 function drainManifestObjectKey(keyPrefix, baseDir, transcriptDir) {
-  return transcriptObjectKey(keyPrefix, baseDir, join9(transcriptDir, DRAIN_MANIFEST_FILENAME));
+  return transcriptObjectKey(keyPrefix, baseDir, join10(transcriptDir, DRAIN_MANIFEST_FILENAME));
 }
 async function flushAgentTranscriptsOnDrain(codeName, deps) {
   const dir = deps.resolveTranscriptDir(codeName);
@@ -11679,7 +12237,7 @@ function drainTranscriptFlushDeps(log2) {
     // tree — the thing host-archive-address.ts's header warns about.
     readSourceLayout: (codeName) => {
       const agentDir = dirname6(getProjectDir(codeName));
-      const codeNameDir = join9(homedir7(), ".augmented", codeName);
+      const codeNameDir = join10(homedir7(), ".augmented", codeName);
       return { layout: agentDir === codeNameDir ? "codename-keyed" : "id-keyed", agentDir };
     },
     readSessionPin: (codeName) => readDailySessionPin(codeName),
@@ -11767,34 +12325,34 @@ function decidePin(opts) {
 // src/commands/manager.ts
 import chalk3 from "chalk";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { homedir as homedir8, userInfo } from "os";
 import { spawn as spawn4 } from "child_process";
 
 // src/lib/watchdog.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync2, closeSync as closeSync2, chmodSync as chmodSync5 } from "fs";
-import { join as join10 } from "path";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, unlinkSync as unlinkSync4, existsSync as existsSync9, mkdirSync as mkdirSync7, openSync as openSync2, closeSync as closeSync2, chmodSync as chmodSync5 } from "fs";
+import { join as join11 } from "path";
 import { spawn as spawn3, execFileSync as execFileSync3 } from "child_process";
-var DEFAULT_CONFIG_DIR = join10(process.env["HOME"] ?? "/tmp", ".augmented");
+var DEFAULT_CONFIG_DIR = join11(process.env["HOME"] ?? "/tmp", ".augmented");
 function getManagerPaths(configDir) {
   return {
-    pidFile: join10(configDir, "manager.pid"),
-    stateFile: join10(configDir, "manager-state.json"),
-    logFile: join10(configDir, "manager.log")
+    pidFile: join11(configDir, "manager.pid"),
+    stateFile: join11(configDir, "manager-state.json"),
+    logFile: join11(configDir, "manager.log")
   };
 }
 function ensureDir(configDir) {
   if (!existsSync9(configDir)) {
-    mkdirSync6(configDir, { recursive: true });
+    mkdirSync7(configDir, { recursive: true });
   }
 }
 function writePidFile(configDir, pid) {
   ensureDir(configDir);
-  writeFileSync6(getManagerPaths(configDir).pidFile, String(pid), { mode: 384 });
+  writeFileSync7(getManagerPaths(configDir).pidFile, String(pid), { mode: 384 });
 }
 function readPidFile(configDir) {
   try {
-    const raw = readFileSync10(getManagerPaths(configDir).pidFile, "utf-8").trim();
+    const raw = readFileSync11(getManagerPaths(configDir).pidFile, "utf-8").trim();
     const pid = parseInt(raw, 10);
     return isNaN(pid) ? null : pid;
   } catch {
@@ -11840,7 +12398,7 @@ function defaultPgrep() {
 }
 function readStateFile(configDir) {
   try {
-    const raw = readFileSync10(getManagerPaths(configDir).stateFile, "utf-8");
+    const raw = readFileSync11(getManagerPaths(configDir).stateFile, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -12036,7 +12594,7 @@ function managerStartCommand(opts) {
     process.exitCode = 1;
     return;
   }
-  const configDir = opts.configDir ?? join11(homedir8(), ".augmented");
+  const configDir = opts.configDir ?? join12(homedir8(), ".augmented");
   if (opts.supervise) {
     if (json) {
       jsonOutput({ ok: false, error: "--supervise is not supported with --json" });
@@ -12132,7 +12690,7 @@ function runSupervisorLoop(intervalSec, configDir) {
 }
 async function managerStopCommand(opts = {}) {
   const json = isJsonMode();
-  const configDir = opts.configDir ?? join11(homedir8(), ".augmented");
+  const configDir = opts.configDir ?? join12(homedir8(), ".augmented");
   try {
     const result = await stopWatchdog(configDir);
     if (!result.stopped && !result.pid) {
@@ -12160,7 +12718,7 @@ async function managerStopCommand(opts = {}) {
 }
 function managerStatusCommand(opts = {}) {
   const json = isJsonMode();
-  const configDir = opts.configDir ?? join11(homedir8(), ".augmented");
+  const configDir = opts.configDir ?? join12(homedir8(), ".augmented");
   const status = getManagerStatus(configDir);
   if (!status) {
     if (json) {
@@ -12270,7 +12828,7 @@ async function managerInstallCommand(opts = {}) {
     process.exitCode = 1;
     return;
   }
-  const configDir = opts.configDir ?? join11(homedir8(), ".augmented");
+  const configDir = opts.configDir ?? join12(homedir8(), ".augmented");
   const rawAgtBin = process.argv[1];
   if (!rawAgtBin) {
     const msg = "Could not resolve the agt binary path from argv. Re-run via the installed `agt` command.";
@@ -12283,7 +12841,7 @@ async function managerInstallCommand(opts = {}) {
   if (process.platform === "darwin") {
     const home = homedir8();
     const protectedRoots = ["Documents", "Downloads", "Desktop", "Movies", "Music", "Pictures"];
-    const offending = protectedRoots.map((r) => join11(home, r)).find((p) => agtBin === p || agtBin.startsWith(`${p}/`));
+    const offending = protectedRoots.map((r) => join12(home, r)).find((p) => agtBin === p || agtBin.startsWith(`${p}/`));
     if (offending) {
       const msg = `agt binary at ${agtBin} sits inside a macOS TCC-protected folder (${offending}). launchd-spawned processes cannot read files there and the manager would EPERM on startup. Either install agt globally (\`npm install -g @integrity-labs/agt-cli\`) or copy the dist outside protected folders before running this command.`;
       if (json) jsonOutput({ ok: false, error: msg });
@@ -12349,7 +12907,7 @@ async function managerInstallSystemUnitCommand(opts = {}) {
     return;
   }
   const user = opts.user ?? "root";
-  const configDir = opts.configDir ?? (user === "root" ? "/root/.augmented" : join11("/home", user, ".augmented"));
+  const configDir = opts.configDir ?? (user === "root" ? "/root/.augmented" : join12("/home", user, ".augmented"));
   const rawAgtBin = process.argv[1];
   if (!rawAgtBin) {
     const msg = "Could not resolve the agt binary path from argv. Re-run via the installed `agt` command.";
@@ -12570,12 +13128,17 @@ export {
   COMPUTER_USE_MCP_KEY,
   extractCommandNotFound,
   describeChannelWriteFailure,
+  shellGuard,
+  RM_POLICY_RELATIVE_PATH,
+  guardrailsForProvision,
+  parseRmPolicy,
   migrateAgentDirToIdKeyed,
   reapLegacyTokenFile,
   provisionStopHook,
   provisionIsolationHook,
   provisionAutoKanbanProgressHook,
   provisionChannelProgressHook,
+  provisionRootRmHook,
   provisionLongCommandHook,
   provisionOrientHook,
   provisionPreCompactHook,
@@ -12664,4 +13227,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DIOP5LSU.js.map
+//# sourceMappingURL=chunk-Q272XYOI.js.map