@integrity-labs/agt-cli 0.28.509 → 0.28.511

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-S5X4XFAC.js";
+} from "../chunk-I3DZ3LI5.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -173,7 +173,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-7U63M5R6.js";
+} from "../chunk-OQBHTDWK.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -182,7 +182,7 @@ import {
 import { createHash as createHash16 } from "crypto";
 import { readFileSync as readFileSync22, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, existsSync as existsSync12, rmSync as rmSync5, readdirSync as readdirSync7, statSync as statSync6, copyFileSync } from "fs";
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join27, dirname as dirname8, delimiter as pathDelimiter } from "path";
+import { join as join28, dirname as dirname8, delimiter as pathDelimiter } from "path";
 import { homedir as homedir12 } from "os";
 import { fileURLToPath } from "url";
 
@@ -1899,7 +1899,19 @@ var NON_SECRET_ENV_GATES = [
   "AGT_DISABLE_MSTEAMS_HOST_ROUTES",
   "AGT_DEPLOY_CRONS",
   "AGT_CONV_EVAL_BACKEND",
-  "AGT_CLI_RELEASE_CHANNEL"
+  "AGT_CLI_RELEASE_CHANNEL",
+  // ENG-8341: the host-local self-update pin. It OUTRANKS
+  // hosts.desired_agt_cli_version in resolveEffectivePinRaw, so without it the
+  // control plane cannot resolve a host's true target: a host env-pinned to X
+  // while the DB says NULL is CORRECT to sit behind `latest`, and a drift
+  // monitor that cannot see the env pin would page on exactly the hosts an
+  // operator deliberately held back. A version string, not a secret (and
+  // SECRET_NAME_PATTERN would drop it if it were shaped like one).
+  "AGT_CLI_PIN_VERSION",
+  // ENG-8341: the paired escape hatch. A host allowing urgent upgrades can
+  // legitimately be AHEAD of its pin, which is the other direction of the same
+  // false positive.
+  "AGT_CLI_PIN_ALLOW_URGENT"
 ];
 var SECRET_NAME_PATTERN = /(KEY|SECRET|TOKEN|PASSWORD|PASSWD|CREDENTIAL|PRIVATE|SIGNING|WEBHOOK)/i;
 function listCapturableEnvGateNames() {
@@ -4290,12 +4302,33 @@ function planGlobalSkillSync(globalSkills, prevIds, hashOf, knownHash, options)
   return { installs, removes, currentIds };
 }
 
+// src/lib/manager/integration-skill-cache.ts
+import { join as join17 } from "path";
+function integrationSkillHashKey(agentId, skillId) {
+  return `plugin-skill:${agentId}:${skillId}`;
+}
+function shouldWriteIntegrationSkill(cache, agentId, skillId, contentHash) {
+  return cache.get(integrationSkillHashKey(agentId, skillId)) !== contentHash;
+}
+function rememberIntegrationSkill(cache, agentId, skillId, contentHash) {
+  cache.set(integrationSkillHashKey(agentId, skillId), contentHash);
+}
+function forgetIntegrationSkill(cache, agentId, skillId) {
+  cache.delete(integrationSkillHashKey(agentId, skillId));
+}
+function removeIntegrationSkillFolder(opts) {
+  forgetIntegrationSkill(opts.cache, opts.agentId, opts.entry);
+  for (const dir of opts.dirs) {
+    opts.removeDir(join17(dir, opts.entry));
+  }
+}
+
 // src/lib/manager/managed-skill-manifest.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname5, join as join17 } from "path";
+import { dirname as dirname5, join as join18 } from "path";
 var MANIFEST_VERSION = 1;
 function managedSkillManifestPath(agentRootDir) {
-  return join17(agentRootDir, "managed-skills.json");
+  return join18(agentRootDir, "managed-skills.json");
 }
 function readManagedSkillManifest(path) {
   try {
@@ -4413,7 +4446,7 @@ function resolveModelChain(refreshData) {
 
 // src/lib/manager/claude-auth.ts
 import { existsSync as existsSync7, rmSync as rmSync3 } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 import { homedir as homedir8 } from "os";
 async function applyClaudeAuthToEnv(childEnv, label) {
   const apiKey = getApiKey();
@@ -4426,9 +4459,9 @@ async function applyClaudeAuthToEnv(childEnv, label) {
       throw new Error("claude_auth_mode=api_key but /host/exchange returned no decrypted key");
     }
     childEnv.ANTHROPIC_API_KEY = exchange.anthropicApiKey;
-    const claudeDir = join18(homedir8(), ".claude");
+    const claudeDir = join19(homedir8(), ".claude");
     for (const filename of [".credentials.json", "credentials.json"]) {
-      const p = join18(claudeDir, filename);
+      const p = join19(claudeDir, filename);
       if (existsSync7(p)) {
         try {
           rmSync3(p, { force: true });
@@ -4444,7 +4477,7 @@ async function applyClaudeAuthToEnv(childEnv, label) {
 
 // src/lib/manager/kanban/parsers.ts
 import { existsSync as existsSync8, readFileSync as readFileSync15 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 var STANDUP_TEMPLATES = /* @__PURE__ */ new Set(["daily-standup", "end-of-day-summary"]);
 var TASK_UPDATE_TEMPLATES = /* @__PURE__ */ new Set(["hourly-status", "task-update"]);
 var PLAN_TEMPLATES = /* @__PURE__ */ new Set(["morning-plan"]);
@@ -4583,8 +4616,8 @@ function getBuiltInSkillContent(skillId) {
   if (builtInSkillCache.has(skillId)) return builtInSkillCache.get(skillId);
   try {
     const candidates = [
-      join19(process.cwd(), "skills", skillId, "SKILL.md"),
-      join19(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
+      join20(process.cwd(), "skills", skillId, "SKILL.md"),
+      join20(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
     ];
     for (const candidate of candidates) {
       if (existsSync8(candidate)) {
@@ -4730,11 +4763,11 @@ function formatBoardForPrompt(items, template) {
 
 // src/lib/manager/kanban/nudge-state-cache.ts
 import { existsSync as existsSync9, readFileSync as readFileSync16, writeFileSync as writeFileSync8 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 var CACHE_FILENAME2 = "kanban-nudge-state.json";
 var KANBAN_NUDGE_STATE_VERSION = 1;
 function getKanbanNudgeStateFile(configDir) {
-  return join20(configDir, CACHE_FILENAME2);
+  return join21(configDir, CACHE_FILENAME2);
 }
 function loadKanbanNudgeState(target, configDir) {
   const path = getKanbanNudgeStateFile(configDir);
@@ -5343,7 +5376,7 @@ function closeScheduledRunsForCode(codeName, outcome, reason) {
 import { createHash as createHash11 } from "crypto";
 import { writeFileSync as writeFileSync9, renameSync as renameSync3, mkdirSync as mkdirSync6, readFileSync as readFileSync17, unlinkSync } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join21, dirname as dirname6 } from "path";
+import { join as join22, dirname as dirname6 } from "path";
 
 // src/lib/manager/scheduler/notify.ts
 import { createHash as createHash10 } from "crypto";
@@ -5684,7 +5717,7 @@ function resolveScheduledSlackTarget(task) {
 }
 function stampScheduledTurnMarker(codeName, taskId, target) {
   try {
-    const file = join21(homedir9(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+    const file = join22(homedir9(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
     const marker = { ts: Date.now(), task_id: taskId, ...target ? { target } : {} };
     const tmp = `${file}.tmp`;
     writeFileSync9(tmp, JSON.stringify(marker), "utf8");
@@ -5694,7 +5727,7 @@ function stampScheduledTurnMarker(codeName, taskId, target) {
   }
 }
 function clearScheduledTurnMarkerForTask(codeName, taskId) {
-  const file = join21(homedir9(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+  const file = join22(homedir9(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
   try {
     const raw = JSON.parse(readFileSync17(file, "utf8"));
     if (typeof raw?.task_id !== "string" || raw.task_id !== taskId) return;
@@ -5909,11 +5942,11 @@ async function processClaudeTaskResult(codeName, agentId, templateId, rawOutput,
 // src/lib/manager/scheduler/execution.ts
 import { createHash as createHash12 } from "crypto";
 import { homedir as homedir10 } from "os";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 
 // src/lib/agent-serving-probe.ts
 import { readFileSync as readFileSync18, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 var RATE_LIMIT_WINDOW_MS = 6 * 60 * 60 * 1e3;
 function probeRateLimit(args) {
   const now = args.now ?? /* @__PURE__ */ new Date();
@@ -5929,7 +5962,7 @@ function probeRateLimit(args) {
   let newest = UNKNOWN_RATE_LIMIT;
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const path = join22(dir, name);
+    const path = join23(dir, name);
     try {
       const st = statSync4(path);
       if (!st.isFile() || st.mtimeMs < startMs) continue;
@@ -6000,7 +6033,7 @@ function shouldLogUsageCapDeferral(site, codeName, limitedUntil) {
 
 // src/lib/manager/scheduler/execution.ts
 function claudePidFilePath() {
-  return join23(homedir10(), ".augmented", "manager-claude-pids.json");
+  return join24(homedir10(), ".augmented", "manager-claude-pids.json");
 }
 var inFlightClaudePids = /* @__PURE__ */ new Map();
 function registerClaudeSpawn(record) {
@@ -7235,7 +7268,7 @@ async function fireOpencodeScheduledTask(agent, task) {
 import { createHash as createHash15 } from "crypto";
 import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync19, renameSync as renameSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
 import { randomUUID } from "crypto";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 
 // src/lib/telegram-ingest.ts
 import https2 from "https";
@@ -7783,7 +7816,7 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
   let filePath;
   try {
     dir = getFramework("opencode").getAgentDir(codeName);
-    filePath = join24(dir, "telegram-getupdates-offset-opencode.json");
+    filePath = join25(dir, "telegram-getupdates-offset-opencode.json");
   } catch {
     dir = null;
     filePath = null;
@@ -8064,13 +8097,13 @@ function partitionActionableByPoison(actionable, states, config2) {
 // src/lib/restart-flags.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync8, readdirSync as readdirSync5, readFileSync as readFileSync20, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function restartFlagsDir() {
-  return join25(homedir11(), ".augmented", "restart-flags");
+  return join26(homedir11(), ".augmented", "restart-flags");
 }
 function flagPath(codeName) {
-  return join25(restartFlagsDir(), `${codeName}.flag`);
+  return join26(restartFlagsDir(), `${codeName}.flag`);
 }
 function readRestartFlags() {
   const dir = restartFlagsDir();
@@ -8079,7 +8112,7 @@ function readRestartFlags() {
   for (const entry of readdirSync5(dir)) {
     if (!entry.endsWith(".flag")) continue;
     try {
-      const raw = readFileSync20(join25(dir, entry), "utf8");
+      const raw = readFileSync20(join26(dir, entry), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.codeName !== "string" || parsed.codeName.length === 0) {
         parsed.codeName = entry.replace(/\.flag$/, "");
@@ -8198,7 +8231,7 @@ async function sendError(flag, opts, text) {
 
 // src/lib/restart-context.ts
 import { readdirSync as readdirSync6, readFileSync as readFileSync21, writeFileSync as writeFileSync12, mkdirSync as mkdirSync9, unlinkSync as unlinkSync3 } from "fs";
-import { dirname as dirname7, join as join26 } from "path";
+import { dirname as dirname7, join as join27 } from "path";
 var SLACK_PENDING_INBOUND_DIRNAME = "slack-pending-inbound";
 var SLACK_RESTART_CONTEXT_DIRNAME = "slack-restart-context";
 var MAX_TOPIC_CHARS = 140;
@@ -8210,10 +8243,10 @@ function augmentedAgentDir(codeName) {
   return dirname7(getProjectDir(codeName));
 }
 function slackPendingInboundDir(codeName) {
-  return join26(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
+  return join27(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
 }
 function slackRestartContextDir(codeName) {
-  return join26(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
+  return join27(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
 }
 function sanitizeTopic(raw) {
   const cleaned = raw.replace(/\s+/g, " ").trim().replace(/[<>]/g, " ").replace(/\s+/g, " ").trim();
@@ -8273,7 +8306,7 @@ function pruneHintsExcept(codeName, freshFilenames) {
     if (!filename.endsWith(".json")) continue;
     if (freshFilenames.has(filename)) continue;
     try {
-      unlinkSync3(join26(ctxDir, filename));
+      unlinkSync3(join27(ctxDir, filename));
     } catch {
     }
   }
@@ -8294,7 +8327,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       }
       const markers = [];
       for (const filename of markerFilenames.slice(0, cap)) {
-        const parsed = readStrandedMarker(join26(markerDir, filename));
+        const parsed = readStrandedMarker(join27(markerDir, filename));
         if (parsed) markers.push({ filename, channel: parsed.channel, thread_ts: parsed.thread_ts });
       }
       if (markers.length === 0) {
@@ -8308,7 +8341,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       const freshFilenames = /* @__PURE__ */ new Set();
       for (const { filename, hint } of hints) {
         try {
-          writeHintFile(join26(ctxDir, filename), ctxDir, hint);
+          writeHintFile(join27(ctxDir, filename), ctxDir, hint);
           freshFilenames.add(filename);
         } catch (err) {
           log2(`[restart-context] ${codeName}: hint write failed for ${filename}: ${err.message}`);
@@ -9662,7 +9695,7 @@ var runningChannelSecretHashes = /* @__PURE__ */ new Map();
 var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
-    const raw = readFileSync22(join27(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
     return createHash16("sha256").update(canonicalJson(JSON.parse(raw))).digest("hex");
   } catch {
     return null;
@@ -9670,7 +9703,7 @@ function projectMcpHash(_codeName, projectDir) {
 }
 function projectMcpKeys(_codeName, projectDir) {
   try {
-    const raw = readFileSync22(join27(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
     const parsed = JSON.parse(raw);
     const servers = parsed.mcpServers;
     if (!servers || typeof servers !== "object") return /* @__PURE__ */ new Set();
@@ -9688,7 +9721,7 @@ function seedSessionLaunchBaselines(codeName, projectDir) {
   else runningMcpServerKeys.delete(codeName);
   let launchStructure = null;
   try {
-    const raw = readFileSync22(join27(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
     launchStructure = managedMcpStructureHashFromFile(
       JSON.parse(raw),
       isManagedMcpServerKey
@@ -9798,7 +9831,7 @@ async function runAgentSessionToolBindProbes(agent, integrations, projectDir, op
   if (result && result.rebindCandidates.length > 0 && hostFlagStore().getBoolean("session-tool-rebind")) {
     let mcpJsonForRebind = null;
     try {
-      mcpJsonForRebind = JSON.parse(readFileSync22(join27(projectDir, ".mcp.json"), "utf-8"));
+      mcpJsonForRebind = JSON.parse(readFileSync22(join28(projectDir, ".mcp.json"), "utf-8"));
     } catch {
       mcpJsonForRebind = null;
     }
@@ -9942,7 +9975,7 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
-      readFileSync22(join27(projectDir, ".env.integrations"), "utf-8")
+      readFileSync22(join28(projectDir, ".env.integrations"), "utf-8")
     );
     return channelSecretValueHash(entries, CHANNEL_SECRET_ENV_KEYS);
   } catch {
@@ -10038,7 +10071,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.509" : "dev";
+var agtCliVersion = true ? "0.28.511" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -10426,7 +10459,7 @@ async function ensureOpencodeBinary() {
   try {
     const prefix = execFileSync2("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
     if (prefix) {
-      const npmBin = join27(prefix, "bin");
+      const npmBin = join28(prefix, "bin");
       const current = (process.env.PATH ?? "").split(pathDelimiter);
       if (!current.includes(npmBin)) {
         process.env.PATH = [npmBin, ...current.filter(Boolean)].join(pathDelimiter);
@@ -10543,7 +10576,7 @@ ${r.stderr}`;
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 function selfUpdateAppliedMarkerPath() {
-  return join27(homedir12(), ".augmented", ".last-self-update-applied");
+  return join28(homedir12(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
 var selfUpdatePinnedLogged = false;
@@ -10571,7 +10604,7 @@ async function checkAndUpdateCli(opts) {
     const isNpmGlobal = !isBrewFormula && resolvedPath.includes("node_modules");
     if (!isBrewFormula && !isNpmGlobal) return "noop";
     const { readFileSync: readF, writeFileSync: writeF } = await import("fs");
-    const markerPath = join27(homedir12(), ".augmented", ".last-update-check");
+    const markerPath = join28(homedir12(), ".augmented", ".last-update-check");
     if (!force) {
       try {
         const lastCheck = parseInt(readF(markerPath, "utf-8").trim(), 10);
@@ -10931,12 +10964,12 @@ async function checkClaudeAuth() {
 var evalEmptyMcpConfigPath = null;
 function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync12(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
-  const dir = join27(homedir12(), ".augmented");
+  const dir = join28(homedir12(), ".augmented");
   try {
     mkdirSync10(dir, { recursive: true });
   } catch {
   }
-  const p = join27(dir, ".eval-empty-mcp.json");
+  const p = join28(dir, ".eval-empty-mcp.json");
   writeFileSync13(p, JSON.stringify({ mcpServers: {} }));
   evalEmptyMcpConfigPath = p;
   return p;
@@ -11028,10 +11061,10 @@ function resolveConversationEvalBackend() {
   return conversationEvalBackend;
 }
 function getStateFile() {
-  return join27(config?.configDir ?? join27(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
+  return join28(config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
 }
 function channelHashCacheDir() {
-  return config?.configDir ?? join27(process.env["HOME"] ?? "/tmp", ".augmented");
+  return config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
 }
 function loadChannelHashCache2() {
   loadChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
@@ -11085,7 +11118,7 @@ function removeDeliveryBaselineEntries(agentId) {
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
   if (!_channelQuarantineStore) {
-    const dir = config?.configDir ?? join27(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
     _channelQuarantineStore = new ChannelQuarantineStore(defaultQuarantinePath(dir));
   }
   return _channelQuarantineStore;
@@ -11102,7 +11135,7 @@ function claudeMdSizeFor(codeName) {
 var _hostFlagStore = null;
 function hostFlagStore() {
   if (!_hostFlagStore) {
-    const dir = config?.configDir ?? join27(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
     _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
   }
   return _hostFlagStore;
@@ -11173,12 +11206,12 @@ function parseSkillFrontmatter(content) {
 }
 async function refreshSkillsIndexInClaudeMd(configDir, codeName, log2) {
   const { readdirSync: readdirSync8, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync14 } = await import("fs");
-  const skillsDir = join27(configDir, codeName, "project", ".claude", "skills");
-  const claudeMdPath = join27(configDir, codeName, "project", "CLAUDE.md");
+  const skillsDir = join28(configDir, codeName, "project", ".claude", "skills");
+  const claudeMdPath = join28(configDir, codeName, "project", "CLAUDE.md");
   if (!ex(skillsDir) || !ex(claudeMdPath)) return;
   const entries = [];
   for (const dir of readdirSync8(skillsDir).sort()) {
-    const skillFile = join27(skillsDir, dir, "SKILL.md");
+    const skillFile = join28(skillsDir, dir, "SKILL.md");
     if (!ex(skillFile)) continue;
     try {
       const { name, description } = parseSkillFrontmatter(rfs(skillFile, "utf-8"));
@@ -11245,7 +11278,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-BDNW4K6M.js");
+      const { collectDiagnostics } = await import("../persistent-session-CMG4VWT6.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11352,7 +11385,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-BDNW4K6M.js");
+      const { collectDiagnostics } = await import("../persistent-session-CMG4VWT6.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11467,7 +11500,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-KR73VA2S.js");
+      } = await import("../responsiveness-probe-COMUJVPF.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11531,7 +11564,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-KR73VA2S.js");
+        } = await import("../responsiveness-probe-COMUJVPF.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11623,10 +11656,10 @@ async function pollCycle() {
                 const paneTail = readFileSync22(paneLogPath(codeName), "utf8").slice(-65536);
                 const transient = detectTransientApiErrorInLog(paneTail);
                 if (transient) {
-                  const wedgeHome = join27(homedir12(), ".augmented", codeName);
+                  const wedgeHome = join28(homedir12(), ".augmented", codeName);
                   if (existsSync12(wedgeHome)) {
                     atomicWriteFileSync(
-                      join27(wedgeHome, "watchdog-give-up.json"),
+                      join28(wedgeHome, "watchdog-give-up.json"),
                       JSON.stringify({
                         gave_up_at: wedgeNow.toISOString(),
                         reason: "transient_overload"
@@ -11897,7 +11930,7 @@ async function pollCycle() {
         const adapter = resolveAgentFramework(prev.codeName);
         stopAgentRuntime2(prev.codeName, "removed-from-host");
         killAgentChannelProcesses(prev.codeName, { log });
-        const agentDir = join27(adapter.getAgentDir(prev.codeName), "provision");
+        const agentDir = join28(adapter.getAgentDir(prev.codeName), "provision");
         await cleanupAgentFiles(prev.codeName, agentDir);
         clearAgentCaches(prev.agentId, prev.codeName);
       }
@@ -11984,10 +12017,10 @@ async function pollCycle() {
         // pending-inbound marker. Best-effort: a write failure is logged by
         // the watchdog, never fails the poll cycle.
         signalGiveUp: (codeName) => {
-          const dir = join27(homedir12(), ".augmented", codeName);
+          const dir = join28(homedir12(), ".augmented", codeName);
           if (!existsSync12(dir)) return;
           atomicWriteFileSync(
-            join27(dir, "watchdog-give-up.json"),
+            join28(dir, "watchdog-give-up.json"),
             JSON.stringify({ gave_up_at: (/* @__PURE__ */ new Date()).toISOString() })
           );
         }
@@ -12129,7 +12162,7 @@ async function processAgent(agent, agentStates) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const adapter = resolveAgentFramework(agent.code_name);
-  let agentDir = join27(adapter.getAgentDir(agent.code_name), "provision");
+  let agentDir = join28(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
@@ -12303,7 +12336,7 @@ async function processAgent(agent, agentStates) {
   const frameworkId = refreshData.agent.framework ?? DEFAULT_FRAMEWORK;
   agentFrameworkCache.set(agent.code_name, frameworkId);
   const frameworkAdapter = getFramework(frameworkId);
-  agentDir = join27(frameworkAdapter.getAgentDir(agent.code_name), "provision");
+  agentDir = join28(frameworkAdapter.getAgentDir(agent.code_name), "provision");
   cacheAgentDeliveryMetadata(agent.code_name, refreshData);
   agentRestartTimezoneInputs.set(agent.code_name, {
     agentTimezone: typeof refreshData.agent.timezone === "string" ? refreshData.agent.timezone : null,
@@ -12352,7 +12385,7 @@ async function processAgent(agent, agentStates) {
     const changedFiles = [];
     mkdirSync10(agentDir, { recursive: true });
     for (const artifact of artifacts) {
-      const filePath = join27(agentDir, artifact.relativePath);
+      const filePath = join28(agentDir, artifact.relativePath);
       let existingHash;
       let newHash;
       let writeContent = artifact.content;
@@ -12371,7 +12404,7 @@ async function processAgent(agent, agentStates) {
         };
         newHash = sha256(stripDynamicSections(artifact.content));
         try {
-          const projectClaudeMd = join27(config.configDir, agent.code_name, "project", "CLAUDE.md");
+          const projectClaudeMd = join28(config.configDir, agent.code_name, "project", "CLAUDE.md");
           const existing = readFileSync22(projectClaudeMd, "utf-8");
           existingHash = sha256(stripDynamicSections(existing));
         } catch {
@@ -12422,12 +12455,12 @@ async function processAgent(agent, agentStates) {
       }
     }
     if (changedFiles.length > 0) {
-      const isFirst = !existsSync12(join27(agentDir, "CHARTER.md"));
+      const isFirst = !existsSync12(join28(agentDir, "CHARTER.md"));
       const verb = isFirst ? "Provisioning" : "Updating";
       const fileNames = changedFiles.map((f) => f.relativePath).join(", ");
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
-        const filePath = join27(agentDir, file.relativePath);
+        const filePath = join28(agentDir, file.relativePath);
         mkdirSync10(dirname8(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
@@ -12436,12 +12469,12 @@ async function processAgent(agent, agentStates) {
         }
       }
       try {
-        const provSkillsDir = join27(agentDir, ".claude", "skills");
+        const provSkillsDir = join28(agentDir, ".claude", "skills");
         if (existsSync12(provSkillsDir)) {
           for (const folder of readdirSync7(provSkillsDir)) {
             if (folder.startsWith("knowledge-")) {
               try {
-                rmSync5(join27(provSkillsDir, folder), { recursive: true });
+                rmSync5(join28(provSkillsDir, folder), { recursive: true });
               } catch {
               }
             }
@@ -12454,7 +12487,7 @@ async function processAgent(agent, agentStates) {
       const trackedFiles2 = frameworkAdapter.driftTrackedFiles();
       const hashes = /* @__PURE__ */ new Map();
       for (const file of trackedFiles2) {
-        const h = hashFile(join27(agentDir, file));
+        const h = hashFile(join28(agentDir, file));
         if (h) hashes.set(file, h);
       }
       agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -12472,14 +12505,14 @@ async function processAgent(agent, agentStates) {
     }
     if (Array.isArray(refreshData.workflows)) {
       try {
-        const provWorkflowsDir = join27(agentDir, ".claude", "workflows");
+        const provWorkflowsDir = join28(agentDir, ".claude", "workflows");
         if (existsSync12(provWorkflowsDir)) {
           const expected = new Set(refreshData.workflows.map((w) => `${w.name}.js`));
           for (const file of readdirSync7(provWorkflowsDir)) {
             if (!file.endsWith(".js")) continue;
             if (expected.has(file)) continue;
             try {
-              rmSync5(join27(provWorkflowsDir, file));
+              rmSync5(join28(provWorkflowsDir, file));
             } catch {
             }
           }
@@ -12561,7 +12594,7 @@ async function processAgent(agent, agentStates) {
   if (written && existsSync12(agentDir)) {
     const driftedFiles = [];
     for (const [file, expectedHash] of written) {
-      const localHash = hashFile(join27(agentDir, file));
+      const localHash = hashFile(join28(agentDir, file));
       if (localHash && localHash !== expectedHash) {
         driftedFiles.push(file);
       }
@@ -12572,7 +12605,7 @@ async function processAgent(agent, agentStates) {
       try {
         const localHashes = {};
         for (const file of driftedFiles) {
-          localHashes[file] = hashFile(join27(agentDir, file));
+          localHashes[file] = hashFile(join28(agentDir, file));
         }
         await api.post("/host/drift", {
           agent_id: agent.agent_id,
@@ -12774,7 +12807,7 @@ async function processAgent(agent, agentStates) {
     const addedChannels = [...restartDecision.added];
     const writeDmNoticeMarkers = isChannelAddRestart ? () => {
       try {
-        const agentAugmentedDir = join27(homedir12(), ".augmented", agent.code_name);
+        const agentAugmentedDir = join28(homedir12(), ".augmented", agent.code_name);
         mkdirSync10(agentAugmentedDir, { recursive: true });
         const markerJson = JSON.stringify({
           version: 1,
@@ -12782,7 +12815,7 @@ async function processAgent(agent, agentStates) {
           added: addedChannels
         });
         for (const file of ["slack-channel-add-restart.json", "telegram-channel-add-restart.json"]) {
-          atomicWriteFileSync(join27(agentAugmentedDir, file), markerJson);
+          atomicWriteFileSync(join28(agentAugmentedDir, file), markerJson);
         }
       } catch (err) {
         log(`[hot-reload] channel-add DM-notice marker write failed for '${agent.code_name}' (non-fatal): ${err.message}`);
@@ -12971,18 +13004,18 @@ async function processAgent(agent, agentStates) {
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code") {
     try {
       const agentProvisionDir = agentDir;
-      const projectDir = join27(homedir12(), ".augmented", agent.code_name, "project");
+      const projectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
       mkdirSync10(agentProvisionDir, { recursive: true });
       mkdirSync10(projectDir, { recursive: true });
-      const provisionMcpPath = join27(agentProvisionDir, ".mcp.json");
-      const projectMcpPath = join27(projectDir, ".mcp.json");
+      const provisionMcpPath = join28(agentProvisionDir, ".mcp.json");
+      const projectMcpPath = join28(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
       try {
         mcpConfig = JSON.parse(readFileSync22(provisionMcpPath, "utf-8"));
         if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
       } catch {
       }
-      const localDirectChatChannel = join27(homedir12(), ".augmented", "_mcp", "direct-chat-channel.js");
+      const localDirectChatChannel = join28(homedir12(), ".augmented", "_mcp", "direct-chat-channel.js");
       const directChatTeamSettings = refreshData.team?.settings;
       const directChatTz = (() => {
         const tz = directChatTeamSettings?.["timezone"];
@@ -13008,7 +13041,7 @@ async function processAgent(agent, agentStates) {
           // ~/.augmented/<codeName>/.current-turn-initiator.json. Note getAgentDir
           // returns the agent root (NOT the /provision subdir `agentDir` points at),
           // so it byte-matches the broker readers' path.
-          AGT_TURN_INITIATOR_FILE: join27(
+          AGT_TURN_INITIATOR_FILE: join28(
             frameworkAdapter.getAgentDir(agent.code_name),
             ".current-turn-initiator.json"
           )
@@ -13028,7 +13061,7 @@ async function processAgent(agent, agentStates) {
           log(`Channel credentials written for '${agent.code_name}/direct-chat'`);
         }
       }
-      const staleChannelsPath = join27(projectDir, ".mcp-channels.json");
+      const staleChannelsPath = join28(projectDir, ".mcp-channels.json");
       if (existsSync12(staleChannelsPath)) {
         try {
           rmSync5(staleChannelsPath, { force: true });
@@ -13118,7 +13151,7 @@ async function processAgent(agent, agentStates) {
     }
     if (hostFlagStore().getBoolean("connectivity-probe")) {
       try {
-        const probeProjectDir = join27(homedir12(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
         let probeSet = integrations;
         try {
           const quarantined = await api.post("/host/agent-integrations/quarantined", { agent_id: agent.agent_id });
@@ -13164,7 +13197,7 @@ async function processAgent(agent, agentStates) {
       const forceDue = attemptsLeft > 0;
       let probeRan = false;
       try {
-        const probeProjectDir = join27(homedir12(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
         probeRan = await runAgentSessionToolBindProbes(agent, integrations, probeProjectDir, { forceDue });
       } catch (err) {
         log(`Session-tool-bind probe failed for '${agent.code_name}': ${err.message}`);
@@ -13241,8 +13274,8 @@ async function processAgent(agent, agentStates) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);
       if (intHash !== prevIntHash) {
-        const projectDir = join27(homedir12(), ".augmented", agent.code_name, "project");
-        const envIntPath = join27(projectDir, ".env.integrations");
+        const projectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
+        const envIntPath = join28(projectDir, ".env.integrations");
         let preWriteEnv;
         try {
           preWriteEnv = readFileSync22(envIntPath, "utf-8");
@@ -13264,7 +13297,7 @@ async function processAgent(agent, agentStates) {
         }
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
-            const projectMcpPath = join27(projectDir, ".mcp.json");
+            const projectMcpPath = join28(projectDir, ".mcp.json");
             const postWriteEnv = readFileSync22(envIntPath, "utf-8");
             const mcpContent = readFileSync22(projectMcpPath, "utf-8");
             const changedVars = diffEnvIntegrations(preWriteEnv, postWriteEnv);
@@ -13507,10 +13540,21 @@ async function processAgent(agent, agentStates) {
           }));
           const bundle = buildIntegrationBundle(renderedScopes);
           const contentHash = createHash17("sha256").update(bundleFingerprint(bundle.files)).digest("hex").slice(0, 12);
-          const hashKey = `plugin-skill:${agent.agent_id}:${integrationSkillId}`;
-          if (agentState.knownSkillHashes.get(hashKey) === contentHash) continue;
+          if (!shouldWriteIntegrationSkill(
+            agentState.knownSkillHashes,
+            agent.agent_id,
+            integrationSkillId,
+            contentHash
+          )) {
+            continue;
+          }
           frameworkAdapter.installSkillFiles(agent.code_name, integrationSkillId, bundle.files);
-          agentState.knownSkillHashes.set(hashKey, contentHash);
+          rememberIntegrationSkill(
+            agentState.knownSkillHashes,
+            agent.agent_id,
+            integrationSkillId,
+            contentHash
+          );
           for (const s of scopes) installedIntegrationSkills.push(s.skill_name);
           log(`Installed integration skill bundle '${integrationSkillId}' for '${agent.code_name}' (${scopes.length} scope(s))`);
         } catch (err) {
@@ -13523,12 +13567,12 @@ async function processAgent(agent, agentStates) {
         const frameworkId2 = frameworkAdapter.id;
         const candidateSkillDirs = [
           // Claude Code — framework runtime tree
-          join27(homedir13(), ".augmented", agent.code_name, "skills"),
+          join28(homedir13(), ".augmented", agent.code_name, "skills"),
           // Claude Code — project tree
-          join27(homedir13(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+          join28(homedir13(), ".augmented", agent.code_name, "project", ".claude", "skills"),
           // Defensive: legacy provision-side path, not currently an
           // install target but cheap to sweep.
-          join27(agentDir, ".claude", "skills")
+          join28(agentDir, ".claude", "skills")
         ];
         const existingDirs = candidateSkillDirs.filter((d) => existsSync12(d));
         const discoveredEntries = /* @__PURE__ */ new Set();
@@ -13543,12 +13587,17 @@ async function processAgent(agent, agentStates) {
           }
         }
         const removeSkillFolder = (entry, reason) => {
-          for (const dir of existingDirs) {
-            const p = join27(dir, entry);
-            if (existsSync12(p)) {
-              rmSync6(p, { recursive: true, force: true });
+          removeIntegrationSkillFolder({
+            cache: agentState.knownSkillHashes,
+            agentId: agent.agent_id,
+            entry,
+            dirs: existingDirs,
+            removeDir: (p) => {
+              if (existsSync12(p)) {
+                rmSync6(p, { recursive: true, force: true });
+              }
             }
-          }
+          });
           log(`Removed ${reason} '${entry}' for '${agent.code_name}' (framework=${frameworkId2})`);
         };
         for (const entry of discoveredEntries) {
@@ -13564,7 +13613,7 @@ async function processAgent(agent, agentStates) {
         const sharedSkillsPayload = refreshAny.shared_skills;
         const desiredResolved = globalSkillsPayload !== void 0 || sharedSkillsPayload !== void 0;
         const manifestPath = managedSkillManifestPath(
-          join27(homedir12(), ".augmented", agent.code_name)
+          join28(homedir12(), ".augmented", agent.code_name)
         );
         const prevIds = /* @__PURE__ */ new Set([
           ...agentState.knownGlobalSkillIds.get(agent.agent_id) ?? /* @__PURE__ */ new Set(),
@@ -13584,15 +13633,15 @@ async function processAgent(agent, agentStates) {
         }
         if (plan.removes.length) {
           const globalSkillDirs = [
-            join27(homedir12(), ".augmented", agent.code_name, "skills"),
-            join27(homedir12(), ".augmented", agent.code_name, "project", ".claude", "skills"),
-            join27(agentDir, ".claude", "skills")
+            join28(homedir12(), ".augmented", agent.code_name, "skills"),
+            join28(homedir12(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+            join28(agentDir, ".claude", "skills")
           ];
           for (const id of plan.removes) {
             let prunedAny = false;
             for (const dir of globalSkillDirs) {
-              const p = join27(dir, id);
-              if (existsSync12(p) && existsSync12(join27(p, "SKILL.md"))) {
+              const p = join28(dir, id);
+              if (existsSync12(p) && existsSync12(join28(p, "SKILL.md"))) {
                 rmSync5(p, { recursive: true, force: true });
                 prunedAny = true;
               }
@@ -13823,7 +13872,7 @@ async function processAgent(agent, agentStates) {
         const sess = getSessionState(agent.code_name);
         let mcpJsonParsed = null;
         try {
-          const mcpPath = join27(getProjectDir(agent.code_name), ".mcp.json");
+          const mcpPath = join28(getProjectDir(agent.code_name), ".mcp.json");
           mcpJsonParsed = JSON.parse(readFileSync22(mcpPath, "utf-8"));
         } catch {
         }
@@ -14250,7 +14299,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
   if (trackedFiles.length > 0 && existsSync12(agentDir)) {
     const hashes = /* @__PURE__ */ new Map();
     for (const file of trackedFiles) {
-      const h = hashFile(join27(agentDir, file));
+      const h = hashFile(join28(agentDir, file));
       if (h) hashes.set(file, h);
     }
     agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -14265,7 +14314,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
         refreshData.agent.onboarding_state
       );
       const obStep = obState.step;
-      const markerPath = join27(homedir12(), ".augmented", agent.code_name, "onboarding-drive.json");
+      const markerPath = join28(homedir12(), ".augmented", agent.code_name, "onboarding-drive.json");
       const marker = readOnboardingDriveMarker(markerPath);
       const decision = decideOnboardingDrive(obStep, marker, Date.now(), obState.generation ?? 0);
       if (decision.clearMarker) {
@@ -14353,7 +14402,7 @@ async function ensureOpencodeRuntime(agent, refreshData, agentTimezone) {
   }
   stopOpencodeSlackIngest(codeName, log);
   stopOpencodeTelegramIngest(codeName, log);
-  const opencodeProjectDir = join27(getFramework("opencode").getAgentDir(codeName), "provision");
+  const opencodeProjectDir = join28(getFramework("opencode").getAgentDir(codeName), "provision");
   const serveEnv = {
     AGT_HOST: requireHost(),
     AGT_API_KEY: getApiKey() ?? void 0,
@@ -14403,8 +14452,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     });
   }
   const projectDir = getProjectDir(codeName);
-  const mcpConfigPath = join27(projectDir, ".mcp.json");
-  const claudeMdPath = join27(projectDir, "CLAUDE.md");
+  const mcpConfigPath = join28(projectDir, ".mcp.json");
+  const claudeMdPath = join28(projectDir, "CLAUDE.md");
   if (restartBreaker.isTripped(codeName)) {
     const trip = restartBreaker.getTrip(codeName);
     return {
@@ -15023,7 +15072,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-BDNW4K6M.js");
+        const { collectDiagnostics } = await import("../persistent-session-CMG4VWT6.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15073,7 +15122,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-BDNW4K6M.js");
+      const { collectDiagnostics } = await import("../persistent-session-CMG4VWT6.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15591,7 +15640,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-5CDR4XPI.js");
+  } = await import("../claude-pair-runtime-AK6RLKSR.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -15845,8 +15894,8 @@ function parseMemoryFile(raw, fallbackName) {
   };
 }
 async function syncMemories(agent, configDir, log2) {
-  const projectDir = join27(configDir, agent.code_name, "project");
-  const memoryDir = join27(projectDir, "memory");
+  const projectDir = join28(configDir, agent.code_name, "project");
+  const memoryDir = join28(projectDir, "memory");
   const isFreshSync = pendingFreshMemorySync.has(agent.agent_id);
   if (isFreshSync) {
     log2(`[memory-sync] Fresh-sync requested for '${agent.code_name}' \u2014 pulling DB first`);
@@ -15864,7 +15913,7 @@ async function syncMemories(agent, configDir, log2) {
     for (const file of readdirSync7(memoryDir)) {
       if (!file.endsWith(".md")) continue;
       try {
-        const raw = readFileSync22(join27(memoryDir, file), "utf-8");
+        const raw = readFileSync22(join28(memoryDir, file), "utf-8");
         const fileHash = createHash16("sha256").update(raw).digest("hex").slice(0, 16);
         currentHashes.set(file, fileHash);
         if (prevHashes.get(file) === fileHash) continue;
@@ -15889,7 +15938,7 @@ async function syncMemories(agent, configDir, log2) {
       } catch (err) {
         for (const mem of changedMemories) {
           for (const [file] of currentHashes) {
-            const parsed = parseMemoryFile(readFileSync22(join27(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
+            const parsed = parseMemoryFile(readFileSync22(join28(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
             if (parsed?.name === mem.name) currentHashes.delete(file);
           }
         }
@@ -15924,7 +15973,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
         const mem = dbMemories.memories[i];
         const rawSlug = mem.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "").slice(0, 60);
         const slug = rawSlug || `memory-${i}`;
-        const filePath = join27(memoryDir, `${slug}.md`);
+        const filePath = join28(memoryDir, `${slug}.md`);
         const desired = `---
 name: ${JSON.stringify(mem.name)}
 type: ${mem.type}
@@ -16227,7 +16276,7 @@ function startManager(opts) {
     log(`[startup] state rehydration failed (continuing with empty state): ${err.message}`);
   }
   log(
-    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join27(homedir12(), ".augmented", "manager.log")}`
+    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join28(homedir12(), ".augmented", "manager.log")}`
   );
   deployMcpAssets();
   reapOrphanChannelMcps({ log });
@@ -16353,14 +16402,14 @@ function restartRunningChannelMcps(basenames) {
   }
 }
 function deployMcpAssets() {
-  const targetDir = join27(homedir12(), ".augmented", "_mcp");
+  const targetDir = join28(homedir12(), ".augmented", "_mcp");
   mkdirSync10(targetDir, { recursive: true });
   const moduleDir = dirname8(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
-    const candidate = join27(dir, "dist", "mcp");
-    if (existsSync12(join27(candidate, "index.js"))) {
+    const candidate = join28(dir, "dist", "mcp");
+    if (existsSync12(join28(candidate, "index.js"))) {
       mcpSourceDir = candidate;
       break;
     }
@@ -16440,8 +16489,8 @@ function deployMcpAssets() {
     // needs restarting to pick up a token rotation.
     "xero.js"
   ]) {
-    const src = join27(mcpSourceDir, file);
-    const dst = join27(targetDir, file);
+    const src = join28(mcpSourceDir, file);
+    const dst = join28(targetDir, file);
     if (!existsSync12(src)) continue;
     const before = fileHash(dst);
     try {
@@ -16459,14 +16508,14 @@ function deployMcpAssets() {
     log(`[manager] Bundle(s) updated: ${changedBasenames.join(", ")} \u2014 signalling running instances to restart`);
     restartRunningChannelMcps(changedBasenames);
   }
-  const localMcpPath = join27(targetDir, "index.js");
+  const localMcpPath = join28(targetDir, "index.js");
   try {
-    const agentsDir = join27(homedir12(), ".augmented", "agents");
+    const agentsDir = join28(homedir12(), ".augmented", "agents");
     if (existsSync12(agentsDir)) {
       for (const entry of readdirSync7(agentsDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         for (const subdir of ["provision", "project"]) {
-          const mcpJsonPath = join27(agentsDir, entry.name, subdir, ".mcp.json");
+          const mcpJsonPath = join28(agentsDir, entry.name, subdir, ".mcp.json");
           try {
             const raw = readFileSync22(mcpJsonPath, "utf-8");
             if (!raw.includes("@integrity-labs/augmented-mcp")) continue;