@integrity-labs/agt-cli 0.28.500 → 0.28.502

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-ICNRQ4L5.js";
+} from "../chunk-KS762LYV.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-XKBUTWON.js";
+} from "../chunk-HMBECQIY.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.500" : "dev";
+var cliVersion = true ? "0.28.502" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.500" : "dev";
+var cliVersion2 = true ? "0.28.502" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-XKBUTWON.js → chunk-HMBECQIY.js}

@@ -4,9 +4,9 @@ import {
 
 // src/lib/persistent-session.ts
 import { spawn as spawn2, execSync as execSync2, execFileSync as execFileSync3 } from "child_process";
-import { join as join5, dirname as dirname3 } from "path";
-import { homedir as homedir5, platform, userInfo as userInfo2 } from "os";
-import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync3, writeFileSync as writeFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync3, lstatSync, realpathSync, renameSync as renameSync2, statSync as statSync2 } from "fs";
+import { join as join6, dirname as dirname4 } from "path";
+import { homedir as homedir6, platform, userInfo as userInfo2 } from "os";
+import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync3, writeFileSync as writeFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync3, lstatSync as lstatSync2, realpathSync as realpathSync2, renameSync as renameSync2, statSync as statSync2 } from "fs";
 
 // src/lib/mcp-sanitize.ts
 import { readFileSync, writeFileSync } from "fs";
@@ -10440,18 +10440,40 @@ function probeMcpEnvSubstitution(args) {
   }
 }
 
+// src/lib/agent-runtime-key.ts
+import { lstatSync, realpathSync } from "fs";
+import { basename, dirname, join } from "path";
+import { homedir } from "os";
+var AGENT_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function agentRuntimeKey(codeName, homeDir) {
+  const home = homeDir ?? (process.env.HOME?.trim() || homedir());
+  const codeNamePath = join(home, ".augmented", codeName);
+  try {
+    if (lstatSync(codeNamePath).isSymbolicLink()) {
+      const augmentedDir = realpathSync(join(home, ".augmented"));
+      const resolvedTarget = realpathSync(codeNamePath);
+      const target = basename(resolvedTarget);
+      if (dirname(resolvedTarget) === augmentedDir && AGENT_ID_RE.test(target)) {
+        return target;
+      }
+    }
+  } catch {
+  }
+  return codeName;
+}
+
 // src/lib/opencode-session.ts
 import { spawn, execSync } from "child_process";
 import { createServer } from "net";
 import { randomBytes } from "crypto";
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3, rmSync as rmSync2, chmodSync as chmodSync2 } from "fs";
-import { homedir as homedir3, userInfo } from "os";
-import { join as join3, dirname as dirname2 } from "path";
+import { homedir as homedir4, userInfo } from "os";
+import { join as join4, dirname as dirname3 } from "path";
 
 // ../../packages/core/dist/provisioning/frameworks/opencode/index.js
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2, readdirSync, rmSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 
 // ../../packages/core/dist/provisioning/channel-env.js
 function buildChannelCredentialEnv(channelId, config) {
@@ -11558,20 +11580,20 @@ function assertValidCodeName(codeName) {
   }
 }
 function getHomeDir() {
-  return process.env["HOME"] ?? process.env["USERPROFILE"] ?? homedir();
+  return process.env["HOME"] ?? process.env["USERPROFILE"] ?? homedir2();
 }
 function agentDir(codeName) {
   assertValidCodeName(codeName);
-  return join(getHomeDir(), ".augmented", codeName);
+  return join2(getHomeDir(), ".augmented", codeName);
 }
 function provisionConfigDir(codeName) {
-  return join(agentDir(codeName), "provision");
+  return join2(agentDir(codeName), "provision");
 }
 function mcpBundlePath() {
-  return join(getHomeDir(), ".augmented", "_mcp", MCP_BUNDLE_BASENAME);
+  return join2(getHomeDir(), ".augmented", "_mcp", MCP_BUNDLE_BASENAME);
 }
 function configPath(codeName) {
-  return join(provisionConfigDir(codeName), CONFIG_FILE);
+  return join2(provisionConfigDir(codeName), CONFIG_FILE);
 }
 function readConfig(codeName) {
   const p2 = configPath(codeName);
@@ -11595,7 +11617,7 @@ function writeConfig(codeName, config) {
 function upsertEnvIntegrations(codeName, updates) {
   if (Object.keys(updates).length === 0)
     return;
-  const p2 = join(agentDir(codeName), ".env.integrations");
+  const p2 = join2(agentDir(codeName), ".env.integrations");
   const lines = /* @__PURE__ */ new Map();
   if (existsSync2(p2)) {
     for (const line2 of readFileSync3(p2, "utf8").split("\n")) {
@@ -11611,7 +11633,7 @@ function upsertEnvIntegrations(codeName, updates) {
 `, { mode: 384 });
 }
 function readEnvIntegrations(codeName) {
-  const p2 = join(agentDir(codeName), ".env.integrations");
+  const p2 = join2(agentDir(codeName), ".env.integrations");
   if (!existsSync2(p2))
     return {};
   const out = {};
@@ -11624,7 +11646,7 @@ function readEnvIntegrations(codeName) {
 }
 var INTEGRATION_KEYS_FILE = "integration-mcp-keys.json";
 function readIntegrationServerKeys(codeName) {
-  const p2 = join(agentDir(codeName), INTEGRATION_KEYS_FILE);
+  const p2 = join2(agentDir(codeName), INTEGRATION_KEYS_FILE);
   if (!existsSync2(p2))
     return [];
   try {
@@ -11636,7 +11658,7 @@ function readIntegrationServerKeys(codeName) {
 }
 function writeIntegrationServerKeys(codeName, keys) {
   mkdirSync(agentDir(codeName), { recursive: true });
-  writeFileSync2(join(agentDir(codeName), INTEGRATION_KEYS_FILE), JSON.stringify([...keys].sort(), null, 2));
+  writeFileSync2(join2(agentDir(codeName), INTEGRATION_KEYS_FILE), JSON.stringify([...keys].sort(), null, 2));
 }
 var ENV_SUBSTITUTION = /^\{env:([A-Za-z_][A-Za-z0-9_]*)\}$/;
 function readChannelServerEnv(codeName, channelId) {
@@ -11701,25 +11723,25 @@ var opencodeAdapter = {
     return configPath(codeName);
   },
   async getRegisteredAgents() {
-    const root = join(getHomeDir(), ".augmented");
+    const root = join2(getHomeDir(), ".augmented");
     if (!existsSync2(root))
       return /* @__PURE__ */ new Set();
     const registered = /* @__PURE__ */ new Set();
     for (const entry of readdirSync(root, { withFileTypes: true })) {
       if (!entry.isDirectory())
         continue;
-      if (existsSync2(join(root, entry.name, "registration.json")))
+      if (existsSync2(join2(root, entry.name, "registration.json")))
         registered.add(entry.name);
     }
     return registered;
   },
   async registerAgent(codeName) {
     mkdirSync(agentDir(codeName), { recursive: true });
-    writeFileSync2(join(agentDir(codeName), "registration.json"), JSON.stringify({ code_name: codeName, framework: FRAMEWORK_ID }, null, 2));
+    writeFileSync2(join2(agentDir(codeName), "registration.json"), JSON.stringify({ code_name: codeName, framework: FRAMEWORK_ID }, null, 2));
     return true;
   },
   async deregisterAgent(codeName) {
-    const marker = join(agentDir(codeName), "registration.json");
+    const marker = join2(agentDir(codeName), "registration.json");
     if (existsSync2(marker))
       rmSync(marker);
     return true;
@@ -11729,7 +11751,7 @@ var opencodeAdapter = {
     const lines = profiles.filter((p2) => p2.api_key).map((p2) => `${p2.provider.toUpperCase()}_API_KEY=${p2.api_key}`);
     if (lines.length === 0)
       return;
-    writeFileSync2(join(agentDir(codeName), ".env"), `${lines.join("\n")}
+    writeFileSync2(join2(agentDir(codeName), ".env"), `${lines.join("\n")}
 `, { mode: 384 });
   },
   writeMcpServer(codeName, serverId, config) {
@@ -11837,7 +11859,7 @@ var opencodeAdapter = {
     const mcp = cfg["mcp"] ?? {};
     mcp[channelId] = {
       type: "local",
-      command: ["node", join(getHomeDir(), ".augmented", "_mcp", serverFile)],
+      command: ["node", join2(getHomeDir(), ".augmented", "_mcp", serverFile)],
       environment,
       enabled: options?.addBinding !== false
     };
@@ -11873,7 +11895,7 @@ var opencodeAdapter = {
       delivery_to: t.delivery_to ?? null
     }));
     mkdirSync(agentDir(codeName), { recursive: true });
-    writeFileSync2(join(agentDir(codeName), SCHEDULES_FILE), JSON.stringify({ schedules }, null, 2));
+    writeFileSync2(join2(agentDir(codeName), SCHEDULES_FILE), JSON.stringify({ schedules }, null, 2));
   },
   removeChannelCredentials(codeName, channelId) {
     this.removeMcpServer?.(codeName, channelId);
@@ -11884,8 +11906,8 @@ registerFramework(opencodeAdapter);
 // src/lib/manager/runtime.ts
 import { createHash } from "crypto";
 import { readFileSync as readFileSync4, appendFileSync, mkdirSync as mkdirSync2, chmodSync, existsSync as existsSync3 } from "fs";
-import { join as join2, dirname } from "path";
-import { homedir as homedir2 } from "os";
+import { join as join3, dirname as dirname2 } from "path";
+import { homedir as homedir3 } from "os";
 function redactForDiskLog(value) {
   try {
     return value.replace(/\b(Bearer\s+)[A-Za-z0-9._-]+\b/gi, "$1[REDACTED]").replace(/\bxox[baprs]-[A-Za-z0-9-]+\b/g, "[REDACTED-SLACK]").replace(/\btlk_[A-Za-z0-9._-]+\b/g, "[REDACTED-HOST]").replace(/\bsk-ant-[A-Za-z0-9_-]+\b/g, "[REDACTED-ANTHROPIC]").replace(/\b\d{8,12}:[A-Za-z0-9_-]{30,}\b/g, "[REDACTED-TELEGRAM]").replace(
@@ -11905,8 +11927,8 @@ function log(msg) {
 `;
   if (!managerLogPath) {
     try {
-      managerLogPath = join2(homedir2(), ".augmented", "manager.log");
-      mkdirSync2(dirname(managerLogPath), { recursive: true });
+      managerLogPath = join3(homedir3(), ".augmented", "manager.log");
+      mkdirSync2(dirname2(managerLogPath), { recursive: true });
       if (existsSync3(managerLogPath)) {
         chmodSync(managerLogPath, 384);
       }
@@ -12263,10 +12285,10 @@ function opencodeTmuxSession(codeName) {
   return `agt-oc-${codeName}`;
 }
 function opencodePaneLogPath(codeName) {
-  return join3(homedir3(), ".augmented", codeName, "opencode-serve.log");
+  return join4(homedir4(), ".augmented", codeName, "opencode-serve.log");
 }
 function opencodeTranscriptPath(codeName) {
-  return join3(dirname2(opencodePaneLogPath(codeName)), "opencode-transcript.json");
+  return join4(dirname3(opencodePaneLogPath(codeName)), "opencode-transcript.json");
 }
 var TRANSCRIPT_REFRESH_MS = 3e3;
 var TRANSCRIPT_MAX_MESSAGES = 100;
@@ -12307,7 +12329,7 @@ async function refreshOpencodeTranscript(codeName) {
   }
   try {
     const target = opencodeTranscriptPath(codeName);
-    mkdirSync3(dirname2(target), { recursive: true });
+    mkdirSync3(dirname3(target), { recursive: true });
     writeFileSync3(target, JSON.stringify(transcript), { mode: 384 });
     try {
       chmodSync2(target, 384);
@@ -12333,7 +12355,7 @@ function stopTranscriptRefresher(codeName) {
   }
 }
 function readProvisionedOpencodeModel(agentDir2) {
-  return readOpencodeModelString(join3(agentDir2, "provision", "opencode.json"));
+  return readOpencodeModelString(join4(agentDir2, "provision", "opencode.json"));
 }
 function readOpencodeModelString(configPath2) {
   try {
@@ -12344,7 +12366,7 @@ function readOpencodeModelString(configPath2) {
   }
 }
 function readOpencodeModelFromConfigDir(configDir) {
-  return parseOpencodeModelRef(readOpencodeModelString(join3(configDir, "opencode.json")));
+  return parseOpencodeModelRef(readOpencodeModelString(join4(configDir, "opencode.json")));
 }
 function materializeEnvPlaceholders(raw, env2) {
   return raw.replace(/\{env:([A-Za-z_][A-Za-z0-9_]*)\}/g, (whole, name) => {
@@ -12355,8 +12377,8 @@ function materializeEnvPlaceholders(raw, env2) {
 var MATERIALIZED_CONFIG_BASENAME = "opencode.jsonc";
 function opencodeGlobalConfigPath(serveEnv) {
   const xdg = serveEnv["XDG_CONFIG_HOME"]?.trim();
-  const base = xdg && xdg.length > 0 ? xdg : join3(serveEnv["HOME"]?.trim() || homedir3(), ".config");
-  return join3(base, "opencode", "opencode.json");
+  const base = xdg && xdg.length > 0 ? xdg : join4(serveEnv["HOME"]?.trim() || homedir4(), ".config");
+  return join4(base, "opencode", "opencode.json");
 }
 function buildGlobalMcpConfig(materializedConfig) {
   let parsed;
@@ -12376,7 +12398,7 @@ function buildGlobalMcpConfig(materializedConfig) {
 }
 function writeConfigFile600(target, content, codeName, log2) {
   try {
-    mkdirSync3(dirname2(target), { recursive: true });
+    mkdirSync3(dirname3(target), { recursive: true });
     writeFileSync3(target, content, { mode: 384 });
     try {
       chmodSync2(target, 384);
@@ -12389,11 +12411,11 @@ function writeConfigFile600(target, content, codeName, log2) {
   }
 }
 function writeMaterializedOpencodeConfig(codeName, projectDir, serveEnv, log2) {
-  const projectTarget = join3(projectDir, MATERIALIZED_CONFIG_BASENAME);
+  const projectTarget = join4(projectDir, MATERIALIZED_CONFIG_BASENAME);
   const globalTarget = opencodeGlobalConfigPath(serveEnv);
   let raw;
   try {
-    raw = readFileSync5(join3(projectDir, "opencode.json"), "utf-8");
+    raw = readFileSync5(join4(projectDir, "opencode.json"), "utf-8");
   } catch {
     for (const t of [projectTarget, globalTarget]) {
       try {
@@ -12502,7 +12524,7 @@ async function startOpencodeSession(config) {
 }
 async function spawnServe(config, session) {
   const { codeName, projectDir, log: log2 } = config;
-  if (!existsSync4(join3(projectDir, "opencode.json"))) {
+  if (!existsSync4(join4(projectDir, "opencode.json"))) {
     log2(`[opencode-session] warning: no opencode.json in ${projectDir} for '${codeName}' (provisioning may not have run)`);
   }
   const tmuxSession = opencodeTmuxSession(codeName);
@@ -12512,7 +12534,7 @@ async function spawnServe(config, session) {
     execSync(`tmux kill-session -t ${tmuxSession} 2>/dev/null`, { stdio: "ignore" });
   } catch {
   }
-  mkdirSync3(join3(homedir3(), ".augmented", codeName), { recursive: true });
+  mkdirSync3(join4(homedir4(), ".augmented", codeName), { recursive: true });
   const serveEnv = {
     ...process.env,
     // ENG-7976: integration + channel credential secrets so the adapter's
@@ -12524,7 +12546,7 @@ async function spawnServe(config, session) {
     ...readAgentProviderEnv(codeName),
     ...stripUndefined(config.serveEnv ?? {}),
     OPENCODE_SERVER_PASSWORD: password,
-    HOME: process.env.HOME?.trim() || homedir3(),
+    HOME: process.env.HOME?.trim() || homedir4(),
     USER: process.env.USER?.trim() || userInfo().username
   };
   if (config.runId) serveEnv["AGT_RUN_ID"] = config.runId;
@@ -12740,7 +12762,7 @@ function stripUndefined(env2) {
 }
 var PROVIDER_KEY_RE = /^[A-Z][A-Z0-9_]*_API_KEY$/;
 function readAgentProviderEnv(codeName, dir) {
-  const file = join3(dir ?? join3(homedir3(), ".augmented", codeName), ".env");
+  const file = join4(dir ?? join4(homedir4(), ".augmented", codeName), ".env");
   const out = {};
   try {
     if (!existsSync4(file)) return out;
@@ -12776,7 +12798,7 @@ var INTEGRATIONS_ENV_BLOCKLIST = /* @__PURE__ */ new Set([
   "DYLD_LIBRARY_PATH"
 ]);
 function readAgentIntegrationsEnv(codeName, dir) {
-  const file = join3(dir ?? join3(homedir3(), ".augmented", codeName), ".env.integrations");
+  const file = join4(dir ?? join4(homedir4(), ".augmented", codeName), ".env.integrations");
   const out = {};
   try {
     if (!existsSync4(file)) return out;
@@ -12804,14 +12826,14 @@ import { randomUUID as randomUUID2 } from "crypto";
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync2, renameSync, statSync, writeFileSync as writeFileSync4 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join4 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join5 } from "path";
 var HISTORY_DAYS = 7;
 function profileDir(codeName) {
-  return join4(homedir4(), ".augmented", codeName);
+  return join5(homedir5(), ".augmented", codeName);
 }
 function dailySessionPath(codeName) {
-  return join4(profileDir(codeName), "daily-session.json");
+  return join5(profileDir(codeName), "daily-session.json");
 }
 function todayLocalIso(now = /* @__PURE__ */ new Date(), timezone) {
   if (timezone) {
@@ -12914,8 +12936,8 @@ function rotateDailySession(codeName, now = /* @__PURE__ */ new Date(), timezone
 }
 var encodeProjectPath = encodeClaudeProjectPath;
 function sessionFileExists(projectDir, sessionId) {
-  const path = join4(
-    homedir4(),
+  const path = join5(
+    homedir5(),
     ".claude",
     "projects",
     encodeProjectPath(projectDir),
@@ -12924,10 +12946,10 @@ function sessionFileExists(projectDir, sessionId) {
   return existsSync5(path);
 }
 function sessionTranscriptDir(projectDir) {
-  return join4(homedir4(), ".claude", "projects", encodeProjectPath(projectDir));
+  return join5(homedir5(), ".claude", "projects", encodeProjectPath(projectDir));
 }
 function sessionFilePath(projectDir, sessionId) {
-  return join4(sessionTranscriptDir(projectDir), `${sessionId}.jsonl`);
+  return join5(sessionTranscriptDir(projectDir), `${sessionId}.jsonl`);
 }
 function transcriptActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__ */ new Date()) {
   if (!sessionId) return null;
@@ -12940,13 +12962,13 @@ function transcriptActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__
 }
 function subagentActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__ */ new Date()) {
   if (!sessionId) return null;
-  const dir = join4(sessionTranscriptDir(projectDir), sessionId, "subagents");
+  const dir = join5(sessionTranscriptDir(projectDir), sessionId, "subagents");
   try {
     let freshestMtimeMs = null;
     for (const name of readdirSync2(dir)) {
       if (!name.endsWith(".jsonl")) continue;
       try {
-        const mtimeMs = statSync(join4(dir, name)).mtimeMs;
+        const mtimeMs = statSync(join5(dir, name)).mtimeMs;
         if (freshestMtimeMs === null || mtimeMs > freshestMtimeMs) freshestMtimeMs = mtimeMs;
       } catch {
       }
@@ -13345,7 +13367,7 @@ function syncClaudeCredsToRoot() {
   if (platform() !== "linux") return true;
   if (typeof process.getuid !== "function" || process.getuid() !== 0) return true;
   for (const filename of [".credentials.json", "credentials.json"]) {
-    if (existsSync6(join5("/root/.claude", filename))) return true;
+    if (existsSync6(join6("/root/.claude", filename))) return true;
   }
   let sourcePath = null;
   try {
@@ -13353,7 +13375,7 @@ function syncClaudeCredsToRoot() {
     outer: for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       for (const filename of [".credentials.json", "credentials.json"]) {
-        const candidate = join5("/home", entry.name, ".claude", filename);
+        const candidate = join6("/home", entry.name, ".claude", filename);
         if (existsSync6(candidate)) {
           sourcePath = candidate;
           break outer;
@@ -13365,7 +13387,7 @@ function syncClaudeCredsToRoot() {
   if (!sourcePath) return false;
   const targetDir = "/root/.claude";
   const sourceFilename = sourcePath.endsWith("credentials.json") && !sourcePath.endsWith(".credentials.json") ? "credentials.json" : ".credentials.json";
-  const targetPath = join5(targetDir, sourceFilename);
+  const targetPath = join6(targetDir, sourceFilename);
   try {
     if (!existsSync6(targetDir)) mkdirSync5(targetDir, { recursive: true, mode: 448 });
     copyFileSync(sourcePath, targetPath);
@@ -13444,12 +13466,12 @@ function buildEgressAllowlist(toolsFrontmatter) {
   return [...domains].sort();
 }
 function egressAllowlistHostPath(codeName, homeDir) {
-  const home = homeDir ?? (process.env.HOME?.trim() || homedir5());
-  return join5(home, ".augmented", "_egress", `${codeName}.txt`);
+  const home = homeDir ?? (process.env.HOME?.trim() || homedir6());
+  return join6(home, ".augmented", "_egress", `${agentRuntimeKey(codeName, home)}.txt`);
 }
 function writeEgressAllowlist(codeName, domains, homeDir) {
   const p2 = egressAllowlistHostPath(codeName, homeDir);
-  mkdirSync5(dirname3(p2), { recursive: true });
+  mkdirSync5(dirname4(p2), { recursive: true });
   writeFileSync5(p2, domains.join("\n") + "\n", { mode: 420 });
   return p2;
 }
@@ -13486,11 +13508,11 @@ function restartEgressSidecar(codeName) {
 function buildDockerRunCommand(args) {
   const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch, forwardTurnFailureNotice } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
-  const agentDir2 = join5(homeDir, ".augmented", codeName);
-  const agentIdDir = join5(homeDir, ".augmented", agentId);
-  const mcpDir = join5(homeDir, ".augmented", "_mcp");
-  const claudeHome = join5(homeDir, ".claude");
-  const claudeJson = join5(homeDir, ".claude.json");
+  const agentDir2 = join6(homeDir, ".augmented", codeName);
+  const agentIdDir = join6(homeDir, ".augmented", agentId);
+  const mcpDir = join6(homeDir, ".augmented", "_mcp");
+  const claudeHome = join6(homeDir, ".claude");
+  const claudeJson = join6(homeDir, ".claude.json");
   const mounts = [
     `-v ${q(`${agentDir2}:${agentDir2}`)}`,
     `-v ${q(`${agentIdDir}:${agentIdDir}`)}`,
@@ -13503,7 +13525,7 @@ function buildDockerRunCommand(args) {
   const cpus = process.env.AGT_ISOLATION_CPUS || "1.0";
   const pids = process.env.AGT_ISOLATION_PIDS || "512";
   const envArgs = [`-e ${q(`HOME=${homeDir}`)}`];
-  envArgs.push(`-e ${q(`npm_config_cache=${join5(agentDir2, ".npm-cache")}`)}`);
+  envArgs.push(`-e ${q(`npm_config_cache=${join6(agentDir2, ".npm-cache")}`)}`);
   if (passApiKey) envArgs.push("-e ANTHROPIC_API_KEY");
   if (passOpenRouter) {
     envArgs.push("-e ANTHROPIC_BASE_URL");
@@ -13571,8 +13593,8 @@ function buildDockerRunCommand(args) {
 }
 function writePersistentClaudeWrapper(args) {
   const { projectDir, claudeBin, initPrompt, claudeArgsJoined } = args;
-  const envIntegrationsPath = join5(projectDir, ".env.integrations");
-  const wrapperPath = join5(projectDir, ".claude", "persistent-claude.sh");
+  const envIntegrationsPath = join6(projectDir, ".env.integrations");
+  const wrapperPath = join6(projectDir, ".claude", "persistent-claude.sh");
   const wrapperLines = [
     "#!/usr/bin/env bash",
     "set -e",
@@ -13591,7 +13613,7 @@ function writePersistentClaudeWrapper(args) {
   wrapperLines.push(
     `exec ${JSON.stringify(claudeBin)} ${initPromptArg}${claudeArgsJoined}`
   );
-  mkdirSync5(join5(projectDir, ".claude"), { recursive: true });
+  mkdirSync5(join6(projectDir, ".claude"), { recursive: true });
   writeFileSync5(wrapperPath, wrapperLines.join("\n") + "\n", { mode: 448 });
   chmodSync3(wrapperPath, 448);
   return wrapperPath;
@@ -13607,15 +13629,15 @@ function collectMcpServerNames(mcpConfigPath) {
   }
 }
 var sessions2 = /* @__PURE__ */ new Map();
-var PANE_LOG_DIR = join5(homedir5(), ".augmented");
+var PANE_LOG_DIR = join6(homedir6(), ".augmented");
 var PANE_TAIL_LINES = 20;
 function paneLogPath(codeName) {
-  return join5(PANE_LOG_DIR, codeName, "pane.log");
+  return join6(PANE_LOG_DIR, codeName, "pane.log");
 }
 function setupPaneLog2(tmuxSession, codeName, log2) {
   const logPath = paneLogPath(codeName);
   try {
-    mkdirSync5(dirname3(logPath), { recursive: true });
+    mkdirSync5(dirname4(logPath), { recursive: true });
     appendFileSync2(
       logPath,
       `
@@ -13637,11 +13659,11 @@ function rotatePaneLogForDayRollover(codeName, log2, agentTimezone, now = /* @__
     if (!existsSync6(logPath)) return null;
     if (statSync2(logPath).size === 0) return null;
     const stamp = todayLocalIso(now, agentTimezone ?? void 0).replace(/-/g, "");
-    const dir = dirname3(logPath);
-    let target = join5(dir, `pane.log-${stamp}`);
+    const dir = dirname4(logPath);
+    let target = join6(dir, `pane.log-${stamp}`);
     if (existsSync6(target)) {
       const hhmmss = now.toISOString().slice(11, 19).replace(/:/g, "");
-      target = join5(dir, `pane.log-${stamp}-${hhmmss}`);
+      target = join6(dir, `pane.log-${stamp}-${hhmmss}`);
     }
     renameSync2(logPath, target);
     writeFileSync5(logPath, "", "utf-8");
@@ -13728,7 +13750,7 @@ function resolveSessionSpawnDecision(args) {
   };
 }
 function directChatSessionStatePath(agentId) {
-  return join5(homedir5(), ".augmented", agentId, "direct-chat-session.json");
+  return join6(homedir6(), ".augmented", agentId, "direct-chat-session.json");
 }
 function readDirectChatSessionState(agentId) {
   try {
@@ -13743,7 +13765,7 @@ function readDirectChatSessionState(agentId) {
 }
 function writeDirectChatSessionState(agentId, state) {
   const p2 = directChatSessionStatePath(agentId);
-  mkdirSync5(dirname3(p2), { recursive: true });
+  mkdirSync5(dirname4(p2), { recursive: true });
   writeFileSync5(p2, JSON.stringify(state));
 }
 function startPersistentSession(config) {
@@ -13800,9 +13822,9 @@ function spawnSession(config, session) {
         log2(`[persistent-session] No Claude Code credentials found under /root/.claude or /home/*. Pair via browser from the host page, or run 'claude /login' on the host.`);
       }
     } else {
-      const claudeDir = join5(homedir5(), ".claude");
+      const claudeDir = join6(homedir6(), ".claude");
       for (const filename of [".credentials.json", "credentials.json"]) {
-        const p2 = join5(claudeDir, filename);
+        const p2 = join6(claudeDir, filename);
         if (existsSync6(p2)) {
           try {
             rmSync3(p2, { force: true });
@@ -13900,7 +13922,7 @@ function spawnSession(config, session) {
     if (config.turnFailureNoticeEnabled && !process.env["AGT_WEDGE_TRANSIENT_NOTICE_ENABLED"]) {
       tmuxSessionEnvArgs.push("-e", "AGT_WEDGE_TRANSIENT_NOTICE_ENABLED=true");
     }
-    const sessionHomeDir = process.env.HOME?.trim() || homedir5();
+    const sessionHomeDir = process.env.HOME?.trim() || homedir6();
     let egress;
     if (egressMode(codeName) === "allowlist") {
       const allowlist = config.egressAllowlist ?? buildEgressAllowlist(null);
@@ -13946,7 +13968,7 @@ function spawnSession(config, session) {
       // Treat empty-string as missing too — `HOME=""` makes ~ resolve
       // to cwd, which is the same broken outcome as no HOME, just
       // better hidden.
-      HOME: process.env.HOME?.trim() || homedir5(),
+      HOME: process.env.HOME?.trim() || homedir6(),
       USER: process.env.USER?.trim() || userInfo2().username
     };
     if (config.runId) {
@@ -13970,7 +13992,7 @@ function spawnSession(config, session) {
     } : { ...tmuxEnv, ...apiKeyEnv, ...openRouterEnv };
     for (const f of probeMcpEnvSubstitution({
       mcpConfigPath,
-      envIntegrationsPath: join5(projectDir, ".env.integrations"),
+      envIntegrationsPath: join6(projectDir, ".env.integrations"),
       baseEnv: probeBaseEnv
     })) {
       log2(`[persistent-session] ${formatMissingVar(f)} agent=${codeName}`);
@@ -14541,15 +14563,15 @@ async function stopAllSessionsAndWait(log2, opts) {
 }
 function resolveRealAgentPath(codeNamePath) {
   try {
-    if (lstatSync(codeNamePath).isSymbolicLink()) {
-      return realpathSync(codeNamePath);
+    if (lstatSync2(codeNamePath).isSymbolicLink()) {
+      return realpathSync2(codeNamePath);
     }
   } catch {
   }
   return codeNamePath;
 }
 function getProjectDir(codeName) {
-  return join5(resolveRealAgentPath(join5(homedir5(), ".augmented", codeName)), "project");
+  return join6(resolveRealAgentPath(join6(homedir6(), ".augmented", codeName)), "project");
 }
 
 export {
@@ -14673,6 +14695,7 @@ export {
   LATE_BOUND_VARS,
   expandTemplateVars,
   parseEnvIntegrations,
+  agentRuntimeKey,
   log,
   sha256,
   hashFile,
@@ -14736,4 +14759,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-XKBUTWON.js.map
+//# sourceMappingURL=chunk-HMBECQIY.js.map