@integrity-labs/agt-cli 0.28.626 → 0.28.628

package/dist/lib/manager-worker.js

@@ -54,7 +54,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-4NCEO44Q.js";
+} from "../chunk-G3FPZ4KK.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -196,8 +196,8 @@ import {
 import { createHash as createHash17 } from "crypto";
 import { readFileSync as readFileSync28, writeFileSync as writeFileSync14, mkdirSync as mkdirSync11, existsSync as existsSync15, rmSync as rmSync5, readdirSync as readdirSync9, statSync as statSync8, copyFileSync } from "fs";
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join34, dirname as dirname9, delimiter as pathDelimiter } from "path";
-import { homedir as homedir16 } from "os";
+import { join as join35, dirname as dirname9, delimiter as pathDelimiter } from "path";
+import { homedir as homedir17 } from "os";
 import { fileURLToPath } from "url";
 
 // src/lib/single-flight.ts
@@ -215,8 +215,8 @@ function createSingleFlight(task, opts = {}) {
     }
     running2 = true;
     let markSettled;
-    settled = new Promise((resolve) => {
-      markSettled = resolve;
+    settled = new Promise((resolve2) => {
+      markSettled = resolve2;
     });
     const primary = (async () => {
       try {
@@ -1556,6 +1556,62 @@ var DependencyRecoveryLedger = class {
   }
 };
 
+// src/lib/mcp-assets-ready.ts
+import { existsSync as nodeExistsSync, readFileSync as nodeReadFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join4, resolve, sep } from "path";
+function getSharedMcpDir(homeDir = homedir2()) {
+  return join4(homeDir, ".augmented", "_mcp");
+}
+function isPathInsideDir(candidate, dir) {
+  const resolvedDir = resolve(dir);
+  const resolvedCandidate = resolve(candidate);
+  if (resolvedCandidate === resolvedDir) return false;
+  return resolvedCandidate.startsWith(resolvedDir.endsWith(sep) ? resolvedDir : resolvedDir + sep);
+}
+function findMissingMcpBundles(mcpConfigPath, deps = {}) {
+  const existsSync16 = deps.existsSync ?? nodeExistsSync;
+  const readFileSync29 = deps.readFileSync ?? nodeReadFileSync;
+  const mcpDir = deps.mcpDir ?? getSharedMcpDir();
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync29(mcpConfigPath, "utf-8"));
+  } catch {
+    return [];
+  }
+  const servers = parsed?.mcpServers;
+  if (!servers || typeof servers !== "object" || Array.isArray(servers)) return [];
+  const missing = [];
+  const seenPaths = /* @__PURE__ */ new Set();
+  for (const [key, rawEntry] of Object.entries(servers)) {
+    if (!rawEntry || typeof rawEntry !== "object" || Array.isArray(rawEntry)) continue;
+    const entry = rawEntry;
+    if (entry.command !== "node") continue;
+    if (!Array.isArray(entry.args) || entry.args.length === 0) continue;
+    const bundlePath = entry.args[0];
+    if (typeof bundlePath !== "string" || bundlePath.length === 0) continue;
+    if (!isPathInsideDir(bundlePath, mcpDir)) continue;
+    const resolvedBundlePath = resolve(bundlePath);
+    if (seenPaths.has(resolvedBundlePath)) continue;
+    let present;
+    try {
+      present = existsSync16(bundlePath);
+    } catch {
+      continue;
+    }
+    if (!present) {
+      seenPaths.add(resolvedBundlePath);
+      missing.push({ key, path: bundlePath });
+    }
+  }
+  return missing.sort((a, b) => a.key.localeCompare(b.key));
+}
+function formatMissingMcpBundles(missing) {
+  if (missing.length === 0) return "all declared MCP bundles present";
+  const detail = missing.map((m) => `${m.key} (${m.path})`).join(", ");
+  return `MCP bundle(s) not yet on disk in the host-shared _mcp mount: ${detail}`;
+}
+
 // src/lib/self-update-coalesce.ts
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "fs";
 import { dirname as dirname3 } from "path";
@@ -1925,14 +1981,14 @@ function formatReaperBootLine(opts) {
 }
 
 // src/lib/direct-chat-delivery.ts
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 var DEFAULT_DIRECT_CHAT_MAX_AGE_MS = 30 * 6e4;
 function directChatMaxAgeMs() {
   const raw = parseInt(process.env["AGT_DIRECT_CHAT_MAX_AGE_MS"] ?? "", 10);
   return Number.isFinite(raw) && raw >= 0 ? raw : DEFAULT_DIRECT_CHAT_MAX_AGE_MS;
 }
 function directChatDoorbellPath(agentId, home) {
-  return join4(home, ".augmented", agentId, "direct-chat-doorbell");
+  return join5(home, ".augmented", agentId, "direct-chat-doorbell");
 }
 function isDirectChatMessageExpired(createdAt, nowMs, maxAgeMs) {
   if (!maxAgeMs || maxAgeMs <= 0) return false;
@@ -1944,15 +2000,15 @@ function isDirectChatMessageExpired(createdAt, nowMs, maxAgeMs) {
 
 // src/lib/id-keyed-migration.ts
 import { existsSync as existsSync2, lstatSync, readlinkSync, renameSync } from "fs";
-import { join as join5 } from "path";
-import { homedir as homedir2 } from "os";
+import { join as join6 } from "path";
+import { homedir as homedir3 } from "os";
 var ID_KEYED_MIGRATION_FLAG = "id-keyed-layout-migration";
 function agentHasActiveWhatsapp(channelConfigs, codeNameDir) {
   if (channelConfigs && Object.prototype.hasOwnProperty.call(channelConfigs, "whatsapp")) {
     return true;
   }
   try {
-    if (existsSync2(join5(codeNameDir, "whatsapp-pending-inbound"))) return true;
+    if (existsSync2(join6(codeNameDir, "whatsapp-pending-inbound"))) return true;
   } catch {
   }
   return false;
@@ -1982,12 +2038,12 @@ function finishTranscriptMove(oldCwd, newCwd, codeName, log2) {
   log2(`[id-keyed-migration] moved transcript store for '${codeName}' to the id-keyed key`);
 }
 function maybeMigrateAgentToIdKeyedLayout(agent, deps) {
-  const home = deps.home ?? homedir2();
+  const home = deps.home ?? homedir3();
   const { code_name: codeName, agent_id: agentId } = agent;
-  const codeNamePath = join5(home, ".augmented", codeName);
-  const idPath = join5(home, ".augmented", agentId);
-  const oldCwd = join5(home, ".augmented", codeName, "project");
-  const newCwd = join5(idPath, "project");
+  const codeNamePath = join6(home, ".augmented", codeName);
+  const idPath = join6(home, ".augmented", agentId);
+  const oldCwd = join6(home, ".augmented", codeName, "project");
+  const newCwd = join6(idPath, "project");
   let codeNameKind;
   try {
     codeNameKind = lstatSync(codeNamePath).isSymbolicLink() ? "symlink" : "realdir";
@@ -2115,7 +2171,7 @@ function collectEnvGates(env) {
 
 // ../../packages/core/dist/direct-chat/cursor-advance-telemetry.js
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 var CURSOR_SHORTFALL_COUNTER_SUFFIX = "-cursor-advance-classifications.json";
 function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
   if (!agentDir)
@@ -2123,7 +2179,7 @@ function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
   const key = cursorAdvanceCounterKey(route, verdict);
   if (key === null)
     return;
-  const path = join6(agentDir, `${source}${CURSOR_SHORTFALL_COUNTER_SUFFIX}`);
+  const path = join7(agentDir, `${source}${CURSOR_SHORTFALL_COUNTER_SUFFIX}`);
   const counts = {};
   try {
     const parsed = JSON.parse(readFileSync7(path, "utf-8"));
@@ -2143,8 +2199,8 @@ function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
 }
 
 // src/lib/artifact-stream.ts
-import { join as join7 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join8 } from "path";
+import { homedir as homedir4 } from "os";
 import { readdir, stat, readFile } from "fs/promises";
 var ARTEFACT_ENTRY_FILE = "index.html";
 function errMessage(err) {
@@ -2229,7 +2285,7 @@ var ArtifactStreamScanner = class {
         return;
       }
       for (const name of names) {
-        const file = join7(this.artifactsDir, name, ARTEFACT_ENTRY_FILE);
+        const file = join8(this.artifactsDir, name, ARTEFACT_ENTRY_FILE);
         const mtime = await this.fsDeps.mtimeMs(file).catch(() => null);
         if (mtime === null) continue;
         if (this.seenMtime.get(name) === mtime) continue;
@@ -2260,7 +2316,7 @@ var ArtifactStreamScanner = class {
   }
 };
 function artifactsDirFor(codeName) {
-  return join7(homedir3(), ".augmented", codeName, "artifacts");
+  return join8(homedir4(), ".augmented", codeName, "artifacts");
 }
 var nodeArtifactFs = {
   async listArtefactNames(artifactsDir) {
@@ -2312,6 +2368,7 @@ async function maybeReportUsageBanner(args) {
   const next = {
     lastPct: existing?.lastPct ?? null,
     lastWeekResetsAt: existing?.lastWeekResetsAt ?? null,
+    lastLimitScope: existing?.lastLimitScope ?? null,
     lastCheckedAt: nowMs
   };
   if (!tail) {
@@ -2326,7 +2383,7 @@ async function maybeReportUsageBanner(args) {
   }
   const observedAtIso = next.lastWeekResetsAt;
   const weekResetsAtIso = observation.weekResetsAt.toISOString();
-  if (existing && existing.lastPct === observation.pct && observedAtIso === weekResetsAtIso) {
+  if (existing && existing.lastPct === observation.pct && observedAtIso === weekResetsAtIso && existing.lastLimitScope === observation.limitScope) {
     state.set(codeName, next);
     return;
   }
@@ -2340,10 +2397,25 @@ async function maybeReportUsageBanner(args) {
       // server cannot tell a measurement from a guess, which is how a reset
       // three days early reached an operator as a precise timestamp.
       reset_precision: observation.resetPrecision,
+      // ENG-9007 wired the producer end. `classifyLimitScope` had been reading
+      // the banner's qualifier and `parseUsageBanner` had been returning it on
+      // every observation, but this POST never carried it — so the API's
+      // validate-or-'unknown' contract (host-runtime.ts: an older host that
+      // does not send it is not an error) resolved EVERY observation on the
+      // fleet to `limit_scope: 'unknown'`, and every usage alert rendered
+      // "banner qualifier not recognised, treated as weekly".
+      //
+      // That sentence was false on its face for the commonest banner of all —
+      // "You've used 93% of your weekly limit", whose qualifier the parser
+      // hard-codes to 'weekly'. Nothing was unrecognised; nobody had asked.
+      // Sending the field is the whole fix: a session cap can now be told from
+      // a weekly one, which is what ENG-9007 exists to do.
+      limit_scope: observation.limitScope,
       source: "pane_log"
     });
     next.lastPct = observation.pct;
     next.lastWeekResetsAt = weekResetsAtIso;
+    next.lastLimitScope = observation.limitScope;
     state.set(codeName, next);
   } catch (err) {
     log2(`[usage-banner] POST /host/usage-observations failed for '${codeName}': ${err.message}`);
@@ -2354,13 +2426,13 @@ async function maybeReportUsageBanner(args) {
 // src/lib/claude-account-fingerprint.ts
 import { createHash as createHash6 } from "crypto";
 import { readFile as readFile3, readdir as readdir3 } from "fs/promises";
-import { homedir as homedir5, platform as platform2 } from "os";
-import { dirname as dirname4, join as join9 } from "path";
+import { homedir as homedir6, platform as platform2 } from "os";
+import { dirname as dirname4, join as join10 } from "path";
 
 // src/lib/claude-auth-detect.ts
 import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
-import { homedir as homedir4, platform } from "os";
-import { join as join8 } from "path";
+import { homedir as homedir5, platform } from "os";
+import { join as join9 } from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
@@ -2375,16 +2447,16 @@ async function detectClaudeAuth() {
 }
 async function findClaudeCredentialsPaths() {
   const candidates = [
-    join8(homedir4(), ".claude", ".credentials.json"),
-    join8(homedir4(), ".claude", "credentials.json")
+    join9(homedir5(), ".claude", ".credentials.json"),
+    join9(homedir5(), ".claude", "credentials.json")
   ];
   const isLinuxRoot = platform() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
   if (isLinuxRoot) {
     try {
       const entries = await readdir2("/home", { withFileTypes: true });
       for (const entry of entries.filter((entry2) => entry2.isDirectory()).sort((a, b) => a.name.localeCompare(b.name))) {
-        candidates.push(join8("/home", entry.name, ".claude", ".credentials.json"));
-        candidates.push(join8("/home", entry.name, ".claude", "credentials.json"));
+        candidates.push(join9("/home", entry.name, ".claude", ".credentials.json"));
+        candidates.push(join9("/home", entry.name, ".claude", "credentials.json"));
       }
     } catch {
     }
@@ -2462,13 +2534,13 @@ function parseExpiresAt(raw) {
 
 // src/lib/claude-account-fingerprint.ts
 async function candidateHomes() {
-  const homes = [homedir5()];
+  const homes = [homedir6()];
   const isLinuxRoot = platform2() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
   if (isLinuxRoot) {
     try {
       const entries = await readdir3("/home", { withFileTypes: true });
       for (const entry of entries.filter((e) => e.isDirectory()).sort((a, b) => a.name.localeCompare(b.name))) {
-        homes.push(join9("/home", entry.name));
+        homes.push(join10("/home", entry.name));
       }
     } catch {
     }
@@ -2488,11 +2560,11 @@ async function homeOfActiveCredentials() {
 async function claudeConfigCandidatePaths() {
   const paths = [];
   const configDir = process.env["CLAUDE_CONFIG_DIR"]?.trim();
-  if (configDir) paths.push(join9(configDir, ".claude.json"));
+  if (configDir) paths.push(join10(configDir, ".claude.json"));
   const activeHome = await homeOfActiveCredentials();
-  if (activeHome) paths.push(join9(activeHome, ".claude.json"));
+  if (activeHome) paths.push(join10(activeHome, ".claude.json"));
   for (const home of await candidateHomes()) {
-    const path = join9(home, ".claude.json");
+    const path = join10(home, ".claude.json");
     if (!paths.includes(path)) paths.push(path);
   }
   return paths;
@@ -2590,10 +2662,10 @@ function diffAuthTuples(recorded, current) {
 
 // src/lib/account-enforcement-marker.ts
 import { mkdirSync as mkdirSync4, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join11 } from "path";
 function accountEnforcementMarkerPath(codeName) {
-  return join10(homedir6(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
+  return join11(homedir7(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
 }
 function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.stderr.write(`${m}
 `), text) {
@@ -2601,8 +2673,8 @@ function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.std
     clearAccountEnforcementMarker(codeName, log2);
     return;
   }
-  const dir = join10(homedir6(), ".augmented", codeName);
-  const path = join10(dir, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
+  const dir = join11(homedir7(), ".augmented", codeName);
+  const path = join11(dir, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
   const tempPath = `${path}.${process.pid}.tmp`;
   try {
     mkdirSync4(dir, { recursive: true });
@@ -2628,7 +2700,7 @@ function clearAccountEnforcementMarker(codeName, log2 = (m) => process.stderr.wr
 
 // src/lib/token-usage-monitor.ts
 import { readdirSync, readFileSync as readFileSync8, statSync } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 var MIN_CHECK_INTERVAL_MS2 = 6e4;
 var TRANSCRIPT_MTIME_WINDOW_MS = 2 * 24 * 60 * 60 * 1e3;
 var MAX_ENTRIES_PER_POST = 200;
@@ -2657,7 +2729,7 @@ async function maybeReportTokenUsage(args) {
     if (!name.endsWith(".jsonl")) continue;
     const sessionId = name.slice(0, -".jsonl".length);
     if (!sessionId) continue;
-    const path = join11(dir, name);
+    const path = join12(dir, name);
     let st;
     try {
       st = statSync(path);
@@ -2755,7 +2827,7 @@ async function maybeReportTokenUsage(args) {
 
 // src/lib/workflow-run-reconciler.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 var MIN_CHECK_INTERVAL_MS3 = 5 * 6e4;
 var SETTLE_MS = 3e4;
 var TRANSCRIPT_MTIME_WINDOW_MS2 = 2 * 24 * 60 * 60 * 1e3;
@@ -2774,7 +2846,7 @@ function collectJsonlRecursive(dir, minMtimeMs, out, depth) {
     return;
   }
   for (const name of entries) {
-    const p = join12(dir, name);
+    const p = join13(dir, name);
     let st;
     try {
       st = statSync2(p);
@@ -2797,7 +2869,7 @@ function enumerateTranscriptFiles(transcriptDir, nowMs, minMtimeMs = nowMs - TRA
     return out;
   }
   for (const name of entries) {
-    const path = join12(transcriptDir, name);
+    const path = join13(transcriptDir, name);
     let st;
     try {
       st = statSync2(path);
@@ -2809,7 +2881,7 @@ function enumerateTranscriptFiles(transcriptDir, nowMs, minMtimeMs = nowMs - TRA
       continue;
     }
     if (st.isDirectory()) {
-      collectJsonlRecursive(join12(path, "subagents"), minMtimeMs, out, 0);
+      collectJsonlRecursive(join13(path, "subagents"), minMtimeMs, out, 0);
     }
   }
   return out;
@@ -2900,7 +2972,7 @@ async function maybeReconcileWorkflowRunTokens(args) {
 
 // src/lib/conversation-evaluator.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var MIN_CHECK_INTERVAL_MS4 = 5 * 6e4;
 var TRANSCRIPT_MTIME_WINDOW_MS3 = 7 * 24 * 60 * 60 * 1e3;
 var WINDOW_PAD_MS = 5 * 6e4;
@@ -3336,7 +3408,7 @@ function readRecentTurns(dir, nowMs) {
       return;
     }
     for (const ent of entries) {
-      const full = join13(d, ent.name);
+      const full = join14(d, ent.name);
       if (ent.isDirectory()) {
         visit(full);
         continue;
@@ -3641,18 +3713,18 @@ async function reportSkip2(api2, agentId, conversationId, log2, codeName) {
 }
 
 // src/lib/tool-call-audit.ts
-import { homedir as homedir10 } from "os";
-import { join as join18 } from "path";
+import { homedir as homedir11 } from "os";
+import { join as join19 } from "path";
 
 // src/lib/agent-logging-mode.ts
 import { readFileSync as readFileSync11 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join14 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join15 } from "path";
 var LOGGING_MODES = ["hash-only", "redacted", "full-local"];
 function charterPath(codeName, homeDir) {
-  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir7());
+  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir8());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join14(home, ".augmented", key, "provision", "CHARTER.md");
+  return join15(home, ".augmented", key, "provision", "CHARTER.md");
 }
 function readAgentLoggingMode(codeName, homeDir) {
   let raw;
@@ -3682,14 +3754,14 @@ function loggingModeWithholdsTargets(reading) {
 // src/lib/tool-call-path-salt.ts
 import { randomBytes } from "crypto";
 import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync12, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir8 } from "os";
-import { dirname as dirname5, join as join15 } from "path";
+import { homedir as homedir9 } from "os";
+import { dirname as dirname5, join as join16 } from "path";
 var SALT_BYTES = 32;
 var SALT_RE = /^[0-9a-f]{64}$/;
 function pathSaltPath(codeName, homeDir) {
-  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir8());
+  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir9());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join15(home, ".augmented", key, "tool-call-path-salt");
+  return join16(home, ".augmented", key, "tool-call-path-salt");
 }
 function readToolCallPathSalt(codeName, homeDir) {
   let file;
@@ -3766,7 +3838,7 @@ function readHostArchiveAddress(path) {
 
 // src/lib/tool-call-extractor.ts
 import { closeSync, fstatSync, openSync, readFileSync as readFileSync14, readSync, readdirSync as readdirSync4 } from "fs";
-import { basename, join as join16, relative } from "path";
+import { basename, join as join17, relative } from "path";
 import { StringDecoder } from "string_decoder";
 
 // src/lib/tool-call-redaction.ts
@@ -3895,7 +3967,7 @@ function redactToolTargetInner(toolName, input, ctx) {
 var EXTRACTOR_VERSION = "e1";
 function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
   const files = [];
-  const mainAbs = join16(transcriptDir, `${sessionId}.jsonl`);
+  const mainAbs = join17(transcriptDir, `${sessionId}.jsonl`);
   files.push({
     absPath: mainAbs,
     relPath: relative(projectsRoot, mainAbs),
@@ -3903,7 +3975,7 @@ function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
     isSubagent: false,
     subagentId: null
   });
-  const subDir = join16(transcriptDir, sessionId, "subagents");
+  const subDir = join17(transcriptDir, sessionId, "subagents");
   let entries;
   try {
     entries = readdirSync4(subDir);
@@ -3912,7 +3984,7 @@ function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
   }
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const abs = join16(subDir, name);
+    const abs = join17(subDir, name);
     const stem = basename(name, ".jsonl");
     files.push({
       absPath: abs,
@@ -4111,8 +4183,8 @@ function extractTranscriptWindow(file, opts, from) {
 
 // src/lib/tool-call-cursor.ts
 import { existsSync as existsSync4, readFileSync as readFileSync15 } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join17 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join18 } from "path";
 var COVERAGE_DISPOSITIONS = [
   "ok",
   "not_entitled",
@@ -4165,9 +4237,9 @@ function parseCursorKey(key) {
   return { sessionId: sessionId.length > 0 ? sessionId : null, transcriptRef: key.slice(i + 1) };
 }
 function cursorStatePath(codeName, homeDir) {
-  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir9());
+  const home = homeDir ?? (process.env["HOME"]?.trim() || homedir10());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join17(home, ".augmented", key, "tool-call-cursors.json");
+  return join18(home, ".augmented", key, "tool-call-cursors.json");
 }
 function loadCursors(path) {
   const out = /* @__PURE__ */ new Map();
@@ -4579,8 +4651,8 @@ async function maybeScanToolCalls(args) {
     if (!salt && !hashOnly) {
       log2(`[tool-call-audit] ${codeName}: no path-hash salt available \u2014 file targets withheld`);
     }
-    const home = args.homeDir ?? (process.env["HOME"]?.trim() || homedir10());
-    const projectsRoot = args.projectsRoot ?? join18(home, ".claude", "projects");
+    const home = args.homeDir ?? (process.env["HOME"]?.trim() || homedir11());
+    const projectsRoot = args.projectsRoot ?? join19(home, ".claude", "projects");
     const transcriptDir = args.transcriptDir ?? sessionTranscriptDir(getProjectDir(codeName));
     const current = peekCurrentSession(codeName);
     const sessionIds = current ? [current.sessionId] : [];
@@ -4610,10 +4682,10 @@ async function maybeScanToolCalls(args) {
 
 // src/lib/activity-cache-monitor.ts
 import { existsSync as existsSync5, readFileSync as readFileSync16 } from "fs";
-import { homedir as homedir11 } from "os";
-import { join as join19 } from "path";
+import { homedir as homedir12 } from "os";
+import { join as join20 } from "path";
 var MIN_CHECK_INTERVAL_MS7 = 6e4;
-var STATS_CACHE_PATH = join19(homedir11(), ".claude", "stats-cache.json");
+var STATS_CACHE_PATH = join20(homedir12(), ".claude", "stats-cache.json");
 var ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 var state6 = { lastObservedDate: null, lastCheckedAt: 0 };
 function selectNewDailyRows(raw, lastObservedDate) {
@@ -4894,10 +4966,10 @@ function computeChannelConfigHash(input) {
 
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync7 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 var CACHE_FILENAME = "channel-hash-cache.json";
 function getChannelHashCacheFile(configDir) {
-  return join20(configDir, CACHE_FILENAME);
+  return join21(configDir, CACHE_FILENAME);
 }
 function loadChannelHashCache(target, configDir) {
   const path = getChannelHashCacheFile(configDir);
@@ -4925,7 +4997,7 @@ function saveChannelHashCache(source, configDir) {
 
 // src/lib/sender-policy-baseline.ts
 import { existsSync as existsSync7, readFileSync as readFileSync18 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 var BASELINE_FILENAME = "sender-policy-baseline.json";
 var SENDER_POLICY_BASELINE_VERSION = 1;
 var BASELINE_CONCERNS = ["senderPolicy", "slackBehaviour", "msteamsBehaviour"];
@@ -4937,7 +5009,7 @@ function createDeliveryBaselineMaps() {
   };
 }
 function getSenderPolicyBaselineFile(configDir) {
-  return join21(configDir, BASELINE_FILENAME);
+  return join22(configDir, BASELINE_FILENAME);
 }
 function loadSenderPolicyBaseline(target, configDir, log2) {
   const path = getSenderPolicyBaselineFile(configDir);
@@ -5467,7 +5539,7 @@ function planGlobalSkillSync(globalSkills, prevIds, hashOf, knownHash, options)
 }
 
 // src/lib/manager/integration-skill-cache.ts
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function integrationSkillHashKey(agentId, skillId) {
   return `plugin-skill:${agentId}:${skillId}`;
 }
@@ -5483,16 +5555,16 @@ function forgetIntegrationSkill(cache3, agentId, skillId) {
 function removeIntegrationSkillFolder(opts) {
   forgetIntegrationSkill(opts.cache, opts.agentId, opts.entry);
   for (const dir of opts.dirs) {
-    opts.removeDir(join22(dir, opts.entry));
+    opts.removeDir(join23(dir, opts.entry));
   }
 }
 
 // src/lib/manager/managed-skill-manifest.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname6, join as join23 } from "path";
+import { dirname as dirname6, join as join24 } from "path";
 var MANIFEST_VERSION = 1;
 function managedSkillManifestPath(agentRootDir) {
-  return join23(agentRootDir, "managed-skills.json");
+  return join24(agentRootDir, "managed-skills.json");
 }
 function readManagedSkillManifest(path) {
   try {
@@ -5590,7 +5662,7 @@ function resolveModelChain(refreshData) {
   const modelDefaults = refreshData.model_defaults;
   const platform3 = modelDefaults?.platform ?? {};
   const org = modelDefaults?.org ?? {};
-  function resolve(tier) {
+  function resolve2(tier) {
     const agentField = `${tier}_model`;
     const platformField = `default_${tier}_model`;
     const agentVal = agent?.[agentField];
@@ -5602,16 +5674,16 @@ function resolveModelChain(refreshData) {
     return void 0;
   }
   return {
-    primary: resolve("primary"),
-    secondary: resolve("secondary"),
-    tertiary: resolve("tertiary")
+    primary: resolve2("primary"),
+    secondary: resolve2("secondary"),
+    tertiary: resolve2("tertiary")
   };
 }
 
 // src/lib/manager/claude-auth.ts
 import { existsSync as existsSync9, rmSync as rmSync3 } from "fs";
-import { join as join24 } from "path";
-import { homedir as homedir12 } from "os";
+import { join as join25 } from "path";
+import { homedir as homedir13 } from "os";
 async function applyClaudeAuthToEnv(childEnv, label) {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -5623,9 +5695,9 @@ async function applyClaudeAuthToEnv(childEnv, label) {
       throw new Error("claude_auth_mode=api_key but /host/exchange returned no decrypted key");
     }
     childEnv.ANTHROPIC_API_KEY = exchange.anthropicApiKey;
-    const claudeDir = join24(homedir12(), ".claude");
+    const claudeDir = join25(homedir13(), ".claude");
     for (const filename of [".credentials.json", "credentials.json"]) {
-      const p = join24(claudeDir, filename);
+      const p = join25(claudeDir, filename);
       if (existsSync9(p)) {
         try {
           rmSync3(p, { force: true });
@@ -5708,7 +5780,7 @@ function heartbeatRuntimeAuthFields(probeVerdict) {
 
 // src/lib/manager/kanban/parsers.ts
 import { existsSync as existsSync10, readFileSync as readFileSync20 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var STANDUP_TEMPLATES = /* @__PURE__ */ new Set(["daily-standup", "end-of-day-summary"]);
 var TASK_UPDATE_TEMPLATES = /* @__PURE__ */ new Set(["hourly-status", "task-update"]);
 var PLAN_TEMPLATES = /* @__PURE__ */ new Set(["morning-plan"]);
@@ -5860,8 +5932,8 @@ function getBuiltInSkillContent(skillId) {
   if (builtInSkillCache.has(skillId)) return builtInSkillCache.get(skillId);
   try {
     const candidates = [
-      join25(process.cwd(), "skills", skillId, "SKILL.md"),
-      join25(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
+      join26(process.cwd(), "skills", skillId, "SKILL.md"),
+      join26(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
     ];
     for (const candidate of candidates) {
       if (existsSync10(candidate)) {
@@ -6007,11 +6079,11 @@ function formatBoardForPrompt(items, template) {
 
 // src/lib/manager/kanban/nudge-state-cache.ts
 import { existsSync as existsSync11, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 var CACHE_FILENAME2 = "kanban-nudge-state.json";
 var KANBAN_NUDGE_STATE_VERSION = 1;
 function getKanbanNudgeStateFile(configDir) {
-  return join26(configDir, CACHE_FILENAME2);
+  return join27(configDir, CACHE_FILENAME2);
 }
 function loadKanbanNudgeState(target, configDir) {
   const path = getKanbanNudgeStateFile(configDir);
@@ -6228,7 +6300,7 @@ async function maybePostSlackThreadHint(agentCodeName, channelId, primaryTs) {
 // src/lib/manager/channels/telegram.ts
 import https from "https";
 function telegramApiCall(botToken, method, body) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const postData = JSON.stringify(body);
     const req = https.request({
       hostname: "api.telegram.org",
@@ -6245,7 +6317,7 @@ function telegramApiCall(botToken, method, body) {
       });
       res.on("end", () => {
         try {
-          resolve(JSON.parse(data));
+          resolve2(JSON.parse(data));
         } catch {
           reject(new Error("Invalid JSON from Telegram API"));
         }
@@ -6552,7 +6624,7 @@ async function finishRun(runId, outcome, options = {}) {
         log(
           `[runs] finish attempt ${attempt + 1}/${maxRetries + 1} failed for run_id=${runId} outcome=${outcome} status=${status} error_id=${errId} \u2014 retrying`
         );
-        await new Promise((resolve) => setTimeout(resolve, baseMs * 2 ** attempt));
+        await new Promise((resolve2) => setTimeout(resolve2, baseMs * 2 ** attempt));
         continue;
       }
       log(
@@ -6637,8 +6709,8 @@ function closeSessionRunForCode(codeName, outcome, reason) {
 // src/lib/manager/scheduler/kanban-route.ts
 import { createHash as createHash12 } from "crypto";
 import { writeFileSync as writeFileSync10, renameSync as renameSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync22, unlinkSync as unlinkSync2 } from "fs";
-import { homedir as homedir13 } from "os";
-import { join as join27, dirname as dirname7 } from "path";
+import { homedir as homedir14 } from "os";
+import { join as join28, dirname as dirname7 } from "path";
 
 // src/lib/manager/scheduler/notify.ts
 import { createHash as createHash11 } from "crypto";
@@ -6997,7 +7069,7 @@ function resolveScheduledSlackTarget(task) {
 }
 function stampScheduledTurnMarker(codeName, taskId, target) {
   try {
-    const file = join27(homedir13(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+    const file = join28(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
     const marker = { ts: Date.now(), task_id: taskId, ...target ? { target } : {} };
     const tmp = `${file}.tmp`;
     writeFileSync10(tmp, JSON.stringify(marker), "utf8");
@@ -7007,7 +7079,7 @@ function stampScheduledTurnMarker(codeName, taskId, target) {
   }
 }
 function clearScheduledTurnMarkerForTask(codeName, taskId) {
-  const file = join27(homedir13(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+  const file = join28(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
   try {
     const raw = JSON.parse(readFileSync22(file, "utf8"));
     if (typeof raw?.task_id !== "string" || raw.task_id !== taskId) return;
@@ -7069,7 +7141,7 @@ async function routeScheduledTaskViaKanban(codeName, agentId, task, prompt, dura
       return false;
     }
     try {
-      const doorbell = directChatDoorbellPath(agentId, homedir13());
+      const doorbell = directChatDoorbellPath(agentId, homedir14());
       mkdirSync7(dirname7(doorbell), { recursive: true });
       writeFileSync10(doorbell, String(Date.now()));
     } catch (err) {
@@ -7221,12 +7293,12 @@ async function processClaudeTaskResult(codeName, agentId, templateId, rawOutput,
 
 // src/lib/manager/scheduler/execution.ts
 import { createHash as createHash13 } from "crypto";
-import { homedir as homedir14 } from "os";
-import { join as join29 } from "path";
+import { homedir as homedir15 } from "os";
+import { join as join30 } from "path";
 
 // src/lib/agent-serving-probe.ts
 import { readFileSync as readFileSync23, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 var RATE_LIMIT_WINDOW_MS = 6 * 60 * 60 * 1e3;
 function probeRateLimit(args) {
   const now = args.now ?? /* @__PURE__ */ new Date();
@@ -7242,7 +7314,7 @@ function probeRateLimit(args) {
   let newest = UNKNOWN_RATE_LIMIT;
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const path = join28(dir, name);
+    const path = join29(dir, name);
     try {
       const st = statSync5(path);
       if (!st.isFile() || st.mtimeMs < startMs) continue;
@@ -7313,7 +7385,7 @@ function shouldLogUsageCapDeferral(site, codeName, limitedUntil) {
 
 // src/lib/manager/scheduler/execution.ts
 function claudePidFilePath() {
-  return join29(homedir14(), ".augmented", "manager-claude-pids.json");
+  return join30(homedir15(), ".augmented", "manager-claude-pids.json");
 }
 var inFlightClaudePids = /* @__PURE__ */ new Map();
 function registerClaudeSpawn(record) {
@@ -7384,7 +7456,7 @@ async function syncAndCheckClaudeScheduler(agent, tasks, boardItems, refreshData
 
 // src/lib/occupancy-gate.ts
 import { closeSync as closeSync2, openSync as openSync2, readdirSync as readdirSync6, readSync as readSync2, statSync as statSync6 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 function rostersMeasuredZero(mode, attested, runtimeRunning) {
   return mode === "enforce" && attested && runtimeRunning;
 }
@@ -7473,10 +7545,10 @@ function candidateTranscriptPaths(dir) {
   let complete = true;
   for (const name of top) {
     if (name.endsWith(".jsonl")) {
-      paths.push(join30(dir, name));
+      paths.push(join31(dir, name));
       continue;
     }
-    const subDir = join30(dir, name, "subagents");
+    const subDir = join31(dir, name, "subagents");
     let subs;
     try {
       subs = readdirSync6(subDir);
@@ -7485,7 +7557,7 @@ function candidateTranscriptPaths(dir) {
       continue;
     }
     for (const sub of subs) {
-      if (sub.endsWith(".jsonl")) paths.push(join30(subDir, sub));
+      if (sub.endsWith(".jsonl")) paths.push(join31(subDir, sub));
     }
   }
   return { paths, complete };
@@ -8969,7 +9041,7 @@ async function fireOpencodeScheduledTask(agent, task) {
 import { createHash as createHash16 } from "crypto";
 import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync25, renameSync as renameSync5, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "fs";
 import { randomUUID } from "crypto";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 
 // src/lib/telegram-ingest.ts
 import https2 from "https";
@@ -9191,7 +9263,7 @@ function buildTelegramPeerClassifierConfigFromEnv(env, opts) {
 }
 
 // src/lib/telegram-ingest.ts
-var nodeHttpsTelegramFetch = (url, init) => new Promise((resolve, reject) => {
+var nodeHttpsTelegramFetch = (url, init) => new Promise((resolve2, reject) => {
   const u = new URL(url);
   const body = init?.body;
   const headers = { ...init?.headers ?? {} };
@@ -9217,7 +9289,7 @@ var nodeHttpsTelegramFetch = (url, init) => new Promise((resolve, reject) => {
       });
       res.on("end", () => {
         const status = res.statusCode ?? 0;
-        resolve({
+        resolve2({
           ok: status >= 200 && status < 300,
           status,
           json: async () => JSON.parse(data.length > 0 ? data : "{}")
@@ -9406,8 +9478,8 @@ function defaultAddReaction2(botToken, fetchImpl, log2) {
   };
 }
 function sleep(ms) {
-  return new Promise((resolve) => {
-    setTimeout(resolve, ms).unref?.();
+  return new Promise((resolve2) => {
+    setTimeout(resolve2, ms).unref?.();
   });
 }
 function startTelegramIngest(config2) {
@@ -9517,7 +9589,7 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
   let filePath;
   try {
     dir = getFramework("opencode").getAgentDir(codeName);
-    filePath = join31(dir, "telegram-getupdates-offset-opencode.json");
+    filePath = join32(dir, "telegram-getupdates-offset-opencode.json");
   } catch {
     dir = null;
     filePath = null;
@@ -9797,14 +9869,14 @@ function partitionActionableByPoison(actionable, states, config2) {
 
 // src/lib/restart-flags.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync7, readFileSync as readFileSync26, renameSync as renameSync6, rmSync as rmSync4, writeFileSync as writeFileSync12 } from "fs";
-import { homedir as homedir15 } from "os";
-import { join as join32 } from "path";
+import { homedir as homedir16 } from "os";
+import { join as join33 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function restartFlagsDir() {
-  return join32(homedir15(), ".augmented", "restart-flags");
+  return join33(homedir16(), ".augmented", "restart-flags");
 }
 function flagPath(codeName) {
-  return join32(restartFlagsDir(), `${codeName}.flag`);
+  return join33(restartFlagsDir(), `${codeName}.flag`);
 }
 function readRestartFlags() {
   const dir = restartFlagsDir();
@@ -9813,7 +9885,7 @@ function readRestartFlags() {
   for (const entry of readdirSync7(dir)) {
     if (!entry.endsWith(".flag")) continue;
     try {
-      const raw = readFileSync26(join32(dir, entry), "utf8");
+      const raw = readFileSync26(join33(dir, entry), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.codeName !== "string" || parsed.codeName.length === 0) {
         parsed.codeName = entry.replace(/\.flag$/, "");
@@ -9932,7 +10004,7 @@ async function sendError(flag, opts, text) {
 
 // src/lib/restart-context.ts
 import { readdirSync as readdirSync8, readFileSync as readFileSync27, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, unlinkSync as unlinkSync4 } from "fs";
-import { dirname as dirname8, join as join33 } from "path";
+import { dirname as dirname8, join as join34 } from "path";
 var SLACK_PENDING_INBOUND_DIRNAME = "slack-pending-inbound";
 var SLACK_RESTART_CONTEXT_DIRNAME = "slack-restart-context";
 var MAX_TOPIC_CHARS = 140;
@@ -9944,10 +10016,10 @@ function augmentedAgentDir(codeName) {
   return dirname8(getProjectDir(codeName));
 }
 function slackPendingInboundDir(codeName) {
-  return join33(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
+  return join34(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
 }
 function slackRestartContextDir(codeName) {
-  return join33(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
+  return join34(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
 }
 function sanitizeTopic(raw) {
   const cleaned = raw.replace(/\s+/g, " ").trim().replace(/[<>]/g, " ").replace(/\s+/g, " ").trim();
@@ -10007,7 +10079,7 @@ function pruneHintsExcept(codeName, freshFilenames) {
     if (!filename.endsWith(".json")) continue;
     if (freshFilenames.has(filename)) continue;
     try {
-      unlinkSync4(join33(ctxDir, filename));
+      unlinkSync4(join34(ctxDir, filename));
     } catch {
     }
   }
@@ -10028,7 +10100,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       }
       const markers = [];
       for (const filename of markerFilenames.slice(0, cap)) {
-        const parsed = readStrandedMarker(join33(markerDir, filename));
+        const parsed = readStrandedMarker(join34(markerDir, filename));
         if (parsed) markers.push({ filename, channel: parsed.channel, thread_ts: parsed.thread_ts });
       }
       if (markers.length === 0) {
@@ -10042,7 +10114,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       const freshFilenames = /* @__PURE__ */ new Set();
       for (const { filename, hint } of hints) {
         try {
-          writeHintFile(join33(ctxDir, filename), ctxDir, hint);
+          writeHintFile(join34(ctxDir, filename), ctxDir, hint);
           freshFilenames.add(filename);
         } catch (err) {
           log2(`[restart-context] ${codeName}: hint write failed for ${filename}: ${err.message}`);
@@ -11644,7 +11716,7 @@ var runningChannelSecretHashes = /* @__PURE__ */ new Map();
 var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
-    const raw = readFileSync28(join34(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
     return createHash17("sha256").update(canonicalJson(JSON.parse(raw))).digest("hex");
   } catch {
     return null;
@@ -11652,7 +11724,7 @@ function projectMcpHash(_codeName, projectDir) {
 }
 function projectMcpKeys(_codeName, projectDir) {
   try {
-    const raw = readFileSync28(join34(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
     const parsed = JSON.parse(raw);
     const servers = parsed.mcpServers;
     if (!servers || typeof servers !== "object") return /* @__PURE__ */ new Set();
@@ -11670,7 +11742,7 @@ function seedSessionLaunchBaselines(codeName, projectDir) {
   else runningMcpServerKeys.delete(codeName);
   let launchStructure = null;
   try {
-    const raw = readFileSync28(join34(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
     launchStructure = managedMcpStructureHashFromFile(
       JSON.parse(raw),
       isManagedMcpServerKey
@@ -11792,7 +11864,7 @@ async function runAgentSessionToolBindProbes(agent, integrations, projectDir, op
   if (result && result.rebindCandidates.length > 0 && hostFlagStore().getBoolean("session-tool-rebind")) {
     let mcpJsonForRebind = null;
     try {
-      mcpJsonForRebind = JSON.parse(readFileSync28(join34(projectDir, ".mcp.json"), "utf-8"));
+      mcpJsonForRebind = JSON.parse(readFileSync28(join35(projectDir, ".mcp.json"), "utf-8"));
     } catch {
       mcpJsonForRebind = null;
     }
@@ -11937,7 +12009,7 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
-      readFileSync28(join34(projectDir, ".env.integrations"), "utf-8")
+      readFileSync28(join35(projectDir, ".env.integrations"), "utf-8")
     );
     return channelSecretValueHash(entries, CHANNEL_SECRET_ENV_KEYS);
   } catch {
@@ -12033,7 +12105,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.626" : "dev";
+var agtCliVersion = true ? "0.28.628" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12320,7 +12392,7 @@ async function reapSupersededRuntimeImages(imageUri, localTag) {
   }
 }
 function runAsync(cmd, args, opts) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     import("child_process").then(({ spawn }) => {
       const child = spawn(cmd, args, { stdio: ["ignore", "pipe", "pipe"], cwd: opts.cwd });
       let stdout = "";
@@ -12354,7 +12426,7 @@ function runAsync(cmd, args, opts) {
         if (settled) return;
         settled = true;
         clearTimeout(timer3);
-        resolve({ code: code ?? -1, stdout, stderr });
+        resolve2({ code: code ?? -1, stdout, stderr });
       });
     }).catch(reject);
   });
@@ -12421,7 +12493,7 @@ async function ensureOpencodeBinary() {
   try {
     const prefix = execFileSync3("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
     if (prefix) {
-      const npmBin = join34(prefix, "bin");
+      const npmBin = join35(prefix, "bin");
       const current = (process.env.PATH ?? "").split(pathDelimiter);
       if (!current.includes(npmBin)) {
         process.env.PATH = [npmBin, ...current.filter(Boolean)].join(pathDelimiter);
@@ -12538,7 +12610,7 @@ ${r.stderr}`;
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 function selfUpdateAppliedMarkerPath() {
-  return join34(homedir16(), ".augmented", ".last-self-update-applied");
+  return join35(homedir17(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
 var selfUpdatePinnedLogged = false;
@@ -12567,7 +12639,7 @@ async function checkAndUpdateCli(opts) {
     const isNpmGlobal = !isBrewFormula && resolvedPath.includes("node_modules");
     if (!isBrewFormula && !isNpmGlobal) return "noop";
     const { readFileSync: readF, writeFileSync: writeF } = await import("fs");
-    const markerPath = join34(homedir16(), ".augmented", ".last-update-check");
+    const markerPath = join35(homedir17(), ".augmented", ".last-update-check");
     if (!force) {
       try {
         const lastCheck = parseInt(readF(markerPath, "utf-8").trim(), 10);
@@ -12973,7 +13045,7 @@ async function runClaudeRuntimeAuthProbe() {
   ];
   try {
     const { stdout, stderr } = await execFilePromiseLong(resolveClaudeBinary(), args, {
-      cwd: homedir16(),
+      cwd: homedir17(),
       timeout: RUNTIME_AUTH_PROBE_TIMEOUT_MS,
       stdin: "ignore",
       env: childEnv,
@@ -13020,12 +13092,12 @@ async function checkClaudeAuth() {
 var evalEmptyMcpConfigPath = null;
 function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync15(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
-  const dir = join34(homedir16(), ".augmented");
+  const dir = join35(homedir17(), ".augmented");
   try {
     mkdirSync11(dir, { recursive: true });
   } catch {
   }
-  const p = join34(dir, ".eval-empty-mcp.json");
+  const p = join35(dir, ".eval-empty-mcp.json");
   writeFileSync14(p, JSON.stringify({ mcpServers: {} }));
   evalEmptyMcpConfigPath = p;
   return p;
@@ -13051,7 +13123,7 @@ async function runEvalClaude(prompt, model) {
     ""
   ];
   const { stdout } = await execFilePromiseLong(resolveClaudeBinary(), args, {
-    cwd: homedir16(),
+    cwd: homedir17(),
     timeout: 12e4,
     stdin: "ignore",
     env: childEnv,
@@ -13120,10 +13192,10 @@ function resolveConversationEvalBackend() {
   return conversationEvalBackend;
 }
 function getStateFile() {
-  return join34(config?.configDir ?? join34(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
+  return join35(config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
 }
 function channelHashCacheDir() {
-  return config?.configDir ?? join34(process.env["HOME"] ?? "/tmp", ".augmented");
+  return config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
 }
 function loadChannelHashCache2() {
   loadChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
@@ -13177,7 +13249,7 @@ function removeDeliveryBaselineEntries(agentId) {
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
   if (!_channelQuarantineStore) {
-    const dir = config?.configDir ?? join34(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
     _channelQuarantineStore = new ChannelQuarantineStore(defaultQuarantinePath(dir));
   }
   return _channelQuarantineStore;
@@ -13194,7 +13266,7 @@ function claudeMdSizeFor(codeName) {
 var _hostFlagStore = null;
 function hostFlagStore() {
   if (!_hostFlagStore) {
-    const dir = config?.configDir ?? join34(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
     _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
   }
   return _hostFlagStore;
@@ -13268,12 +13340,12 @@ function parseSkillFrontmatter(content) {
 }
 async function refreshSkillsIndexInClaudeMd(configDir, codeName, log2) {
   const { readdirSync: readdirSync10, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync15 } = await import("fs");
-  const skillsDir = join34(configDir, codeName, "project", ".claude", "skills");
-  const claudeMdPath = join34(configDir, codeName, "project", "CLAUDE.md");
+  const skillsDir = join35(configDir, codeName, "project", ".claude", "skills");
+  const claudeMdPath = join35(configDir, codeName, "project", "CLAUDE.md");
   if (!ex(skillsDir) || !ex(claudeMdPath)) return;
   const entries = [];
   for (const dir of readdirSync10(skillsDir).sort()) {
-    const skillFile = join34(skillsDir, dir, "SKILL.md");
+    const skillFile = join35(skillsDir, dir, "SKILL.md");
     if (!ex(skillFile)) continue;
     try {
       const { name, description } = parseSkillFrontmatter(rfs(skillFile, "utf-8"));
@@ -13777,10 +13849,10 @@ async function pollCycleInner() {
                 const paneTail = readFileSync28(paneLogPath(codeName), "utf8").slice(-65536);
                 const transient = detectTransientApiErrorInLog(paneTail);
                 if (transient) {
-                  const wedgeHome = join34(homedir16(), ".augmented", codeName);
+                  const wedgeHome = join35(homedir17(), ".augmented", codeName);
                   if (existsSync15(wedgeHome)) {
                     atomicWriteFileSync(
-                      join34(wedgeHome, "watchdog-give-up.json"),
+                      join35(wedgeHome, "watchdog-give-up.json"),
                       JSON.stringify({
                         gave_up_at: wedgeNow.toISOString(),
                         reason: "transient_overload"
@@ -14074,7 +14146,7 @@ async function pollCycleInner() {
         const adapter = resolveAgentFramework(prev.codeName);
         stopAgentRuntime2(prev.codeName, "removed-from-host");
         killAgentChannelProcesses(prev.codeName, { log });
-        const agentDir = join34(adapter.getAgentDir(prev.codeName), "provision");
+        const agentDir = join35(adapter.getAgentDir(prev.codeName), "provision");
         await cleanupAgentFiles(prev.codeName, agentDir);
         clearAgentCaches(prev.agentId, prev.codeName);
       }
@@ -14161,10 +14233,10 @@ async function pollCycleInner() {
         // pending-inbound marker. Best-effort: a write failure is logged by
         // the watchdog, never fails the poll cycle.
         signalGiveUp: (codeName) => {
-          const dir = join34(homedir16(), ".augmented", codeName);
+          const dir = join35(homedir17(), ".augmented", codeName);
           if (!existsSync15(dir)) return;
           atomicWriteFileSync(
-            join34(dir, "watchdog-give-up.json"),
+            join35(dir, "watchdog-give-up.json"),
             JSON.stringify({ gave_up_at: (/* @__PURE__ */ new Date()).toISOString() })
           );
         }
@@ -14360,7 +14432,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const adapter = resolveAgentFramework(agent.code_name);
-  let agentDir = join34(adapter.getAgentDir(agent.code_name), "provision");
+  let agentDir = join35(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
@@ -14534,7 +14606,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   const frameworkId = refreshData.agent.framework ?? DEFAULT_FRAMEWORK;
   agentFrameworkCache.set(agent.code_name, frameworkId);
   const frameworkAdapter = getFramework(frameworkId);
-  agentDir = join34(frameworkAdapter.getAgentDir(agent.code_name), "provision");
+  agentDir = join35(frameworkAdapter.getAgentDir(agent.code_name), "provision");
   cacheAgentDeliveryMetadata(agent.code_name, refreshData);
   agentRestartTimezoneInputs.set(agent.code_name, {
     agentTimezone: typeof refreshData.agent.timezone === "string" ? refreshData.agent.timezone : null,
@@ -14583,7 +14655,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     const changedFiles = [];
     mkdirSync11(agentDir, { recursive: true });
     for (const artifact of artifacts) {
-      const filePath = join34(agentDir, artifact.relativePath);
+      const filePath = join35(agentDir, artifact.relativePath);
       let existingHash;
       let newHash;
       let writeContent = artifact.content;
@@ -14602,7 +14674,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         };
         newHash = sha256(stripDynamicSections(artifact.content));
         try {
-          const projectClaudeMd = join34(config.configDir, agent.code_name, "project", "CLAUDE.md");
+          const projectClaudeMd = join35(config.configDir, agent.code_name, "project", "CLAUDE.md");
           const existing = readFileSync28(projectClaudeMd, "utf-8");
           existingHash = sha256(stripDynamicSections(existing));
         } catch {
@@ -14653,12 +14725,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
     }
     if (changedFiles.length > 0) {
-      const isFirst = !existsSync15(join34(agentDir, "CHARTER.md"));
+      const isFirst = !existsSync15(join35(agentDir, "CHARTER.md"));
       const verb = isFirst ? "Provisioning" : "Updating";
       const fileNames = changedFiles.map((f) => f.relativePath).join(", ");
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
-        const filePath = join34(agentDir, file.relativePath);
+        const filePath = join35(agentDir, file.relativePath);
         mkdirSync11(dirname9(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
@@ -14667,12 +14739,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
       }
       try {
-        const provSkillsDir = join34(agentDir, ".claude", "skills");
+        const provSkillsDir = join35(agentDir, ".claude", "skills");
         if (existsSync15(provSkillsDir)) {
           for (const folder of readdirSync9(provSkillsDir)) {
             if (folder.startsWith("knowledge-")) {
               try {
-                rmSync5(join34(provSkillsDir, folder), { recursive: true });
+                rmSync5(join35(provSkillsDir, folder), { recursive: true });
               } catch {
               }
             }
@@ -14685,7 +14757,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const trackedFiles2 = frameworkAdapter.driftTrackedFiles();
       const hashes = /* @__PURE__ */ new Map();
       for (const file of trackedFiles2) {
-        const h = hashFile(join34(agentDir, file));
+        const h = hashFile(join35(agentDir, file));
         if (h) hashes.set(file, h);
       }
       agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -14703,14 +14775,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
     if (Array.isArray(refreshData.workflows)) {
       try {
-        const provWorkflowsDir = join34(agentDir, ".claude", "workflows");
+        const provWorkflowsDir = join35(agentDir, ".claude", "workflows");
         if (existsSync15(provWorkflowsDir)) {
           const expected = new Set(refreshData.workflows.map((w) => `${w.name}.js`));
           for (const file of readdirSync9(provWorkflowsDir)) {
             if (!file.endsWith(".js")) continue;
             if (expected.has(file)) continue;
             try {
-              rmSync5(join34(provWorkflowsDir, file));
+              rmSync5(join35(provWorkflowsDir, file));
             } catch {
             }
           }
@@ -14792,7 +14864,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   if (written && existsSync15(agentDir)) {
     const driftedFiles = [];
     for (const [file, expectedHash] of written) {
-      const localHash = hashFile(join34(agentDir, file));
+      const localHash = hashFile(join35(agentDir, file));
       if (localHash && localHash !== expectedHash) {
         driftedFiles.push(file);
       }
@@ -14803,7 +14875,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       try {
         const localHashes = {};
         for (const file of driftedFiles) {
-          localHashes[file] = hashFile(join34(agentDir, file));
+          localHashes[file] = hashFile(join35(agentDir, file));
         }
         await api.post("/host/drift", {
           agent_id: agent.agent_id,
@@ -15005,7 +15077,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     const addedChannels = [...restartDecision.added];
     const writeDmNoticeMarkers = isChannelAddRestart ? () => {
       try {
-        const agentAugmentedDir = join34(homedir16(), ".augmented", agent.code_name);
+        const agentAugmentedDir = join35(homedir17(), ".augmented", agent.code_name);
         mkdirSync11(agentAugmentedDir, { recursive: true });
         const markerJson = JSON.stringify({
           version: 1,
@@ -15013,7 +15085,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           added: addedChannels
         });
         for (const file of ["slack-channel-add-restart.json", "telegram-channel-add-restart.json"]) {
-          atomicWriteFileSync(join34(agentAugmentedDir, file), markerJson);
+          atomicWriteFileSync(join35(agentAugmentedDir, file), markerJson);
         }
       } catch (err) {
         log(`[hot-reload] channel-add DM-notice marker write failed for '${agent.code_name}' (non-fatal): ${err.message}`);
@@ -15202,18 +15274,18 @@ async function processAgent(agent, agentStates, managedToolkits) {
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code") {
     try {
       const agentProvisionDir = agentDir;
-      const projectDir = join34(homedir16(), ".augmented", agent.code_name, "project");
+      const projectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
       mkdirSync11(agentProvisionDir, { recursive: true });
       mkdirSync11(projectDir, { recursive: true });
-      const provisionMcpPath = join34(agentProvisionDir, ".mcp.json");
-      const projectMcpPath = join34(projectDir, ".mcp.json");
+      const provisionMcpPath = join35(agentProvisionDir, ".mcp.json");
+      const projectMcpPath = join35(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
       try {
         mcpConfig = JSON.parse(readFileSync28(provisionMcpPath, "utf-8"));
         if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
       } catch {
       }
-      const localDirectChatChannel = join34(homedir16(), ".augmented", "_mcp", "direct-chat-channel.js");
+      const localDirectChatChannel = join35(homedir17(), ".augmented", "_mcp", "direct-chat-channel.js");
       const directChatTeamSettings = refreshData.team?.settings;
       const directChatTz = (() => {
         const tz = directChatTeamSettings?.["timezone"];
@@ -15239,7 +15311,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           // ~/.augmented/<codeName>/.current-turn-initiator.json. Note getAgentDir
           // returns the agent root (NOT the /provision subdir `agentDir` points at),
           // so it byte-matches the broker readers' path.
-          AGT_TURN_INITIATOR_FILE: join34(
+          AGT_TURN_INITIATOR_FILE: join35(
             frameworkAdapter.getAgentDir(agent.code_name),
             ".current-turn-initiator.json"
           )
@@ -15259,7 +15331,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           log(`Channel credentials written for '${agent.code_name}/direct-chat'`);
         }
       }
-      const staleChannelsPath = join34(projectDir, ".mcp-channels.json");
+      const staleChannelsPath = join35(projectDir, ".mcp-channels.json");
       if (existsSync15(staleChannelsPath)) {
         try {
           rmSync5(staleChannelsPath, { force: true });
@@ -15349,7 +15421,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
     if (hostFlagStore().getBoolean("connectivity-probe")) {
       try {
-        const probeProjectDir = join34(homedir16(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
         let probeSet = integrations;
         try {
           const quarantined = await api.post("/host/agent-integrations/quarantined", { agent_id: agent.agent_id });
@@ -15395,7 +15467,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const forceDue = attemptsLeft > 0;
       let probeRan = false;
       try {
-        const probeProjectDir = join34(homedir16(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
         probeRan = await runAgentSessionToolBindProbes(agent, integrations, probeProjectDir, { forceDue });
       } catch (err) {
         log(`Session-tool-bind probe failed for '${agent.code_name}': ${err.message}`);
@@ -15472,8 +15544,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);
       if (intHash !== prevIntHash) {
-        const projectDir = join34(homedir16(), ".augmented", agent.code_name, "project");
-        const envIntPath = join34(projectDir, ".env.integrations");
+        const projectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
+        const envIntPath = join35(projectDir, ".env.integrations");
         let preWriteEnv;
         try {
           preWriteEnv = readFileSync28(envIntPath, "utf-8");
@@ -15495,7 +15567,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
-            const projectMcpPath = join34(projectDir, ".mcp.json");
+            const projectMcpPath = join35(projectDir, ".mcp.json");
             const postWriteEnv = readFileSync28(envIntPath, "utf-8");
             const mcpContent = readFileSync28(projectMcpPath, "utf-8");
             const changedVars = diffEnvIntegrations(preWriteEnv, postWriteEnv);
@@ -15760,16 +15832,16 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
       try {
         const { readdirSync: readdirSync10, rmSync: rmSync6 } = await import("fs");
-        const { homedir: homedir17 } = await import("os");
+        const { homedir: homedir18 } = await import("os");
         const frameworkId2 = frameworkAdapter.id;
         const candidateSkillDirs = [
           // Claude Code — framework runtime tree
-          join34(homedir17(), ".augmented", agent.code_name, "skills"),
+          join35(homedir18(), ".augmented", agent.code_name, "skills"),
           // Claude Code — project tree
-          join34(homedir17(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+          join35(homedir18(), ".augmented", agent.code_name, "project", ".claude", "skills"),
           // Defensive: legacy provision-side path, not currently an
           // install target but cheap to sweep.
-          join34(agentDir, ".claude", "skills")
+          join35(agentDir, ".claude", "skills")
         ];
         const existingDirs = candidateSkillDirs.filter((d) => existsSync15(d));
         const discoveredEntries = /* @__PURE__ */ new Set();
@@ -15810,7 +15882,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         const sharedSkillsPayload = refreshAny.shared_skills;
         const desiredResolved = globalSkillsPayload !== void 0 || sharedSkillsPayload !== void 0;
         const manifestPath = managedSkillManifestPath(
-          join34(homedir16(), ".augmented", agent.code_name)
+          join35(homedir17(), ".augmented", agent.code_name)
         );
         const prevIds = /* @__PURE__ */ new Set([
           ...agentState.knownGlobalSkillIds.get(agent.agent_id) ?? /* @__PURE__ */ new Set(),
@@ -15830,15 +15902,15 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
         if (plan.removes.length) {
           const globalSkillDirs = [
-            join34(homedir16(), ".augmented", agent.code_name, "skills"),
-            join34(homedir16(), ".augmented", agent.code_name, "project", ".claude", "skills"),
-            join34(agentDir, ".claude", "skills")
+            join35(homedir17(), ".augmented", agent.code_name, "skills"),
+            join35(homedir17(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+            join35(agentDir, ".claude", "skills")
           ];
           for (const id of plan.removes) {
             let prunedAny = false;
             for (const dir of globalSkillDirs) {
-              const p = join34(dir, id);
-              if (existsSync15(p) && existsSync15(join34(p, "SKILL.md"))) {
+              const p = join35(dir, id);
+              if (existsSync15(p) && existsSync15(join35(p, "SKILL.md"))) {
                 rmSync5(p, { recursive: true, force: true });
                 prunedAny = true;
               }
@@ -16070,7 +16142,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         const sess = getSessionState(agent.code_name);
         let mcpJsonParsed = null;
         try {
-          const mcpPath = join34(getProjectDir(agent.code_name), ".mcp.json");
+          const mcpPath = join35(getProjectDir(agent.code_name), ".mcp.json");
           mcpJsonParsed = JSON.parse(readFileSync28(mcpPath, "utf-8"));
         } catch {
         }
@@ -16505,7 +16577,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
   if (trackedFiles.length > 0 && existsSync15(agentDir)) {
     const hashes = /* @__PURE__ */ new Map();
     for (const file of trackedFiles) {
-      const h = hashFile(join34(agentDir, file));
+      const h = hashFile(join35(agentDir, file));
       if (h) hashes.set(file, h);
     }
     agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -16520,7 +16592,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
         refreshData.agent.onboarding_state
       );
       const obStep = obState.step;
-      const markerPath = join34(homedir16(), ".augmented", agent.code_name, "onboarding-drive.json");
+      const markerPath = join35(homedir17(), ".augmented", agent.code_name, "onboarding-drive.json");
       const marker = readOnboardingDriveMarker(markerPath);
       const obContactRaw = refreshData.agent.manager_last_contacted_at;
       const obContact = typeof obContactRaw === "string" && obContactRaw ? obContactRaw : null;
@@ -16622,7 +16694,7 @@ async function ensureOpencodeRuntime(agent, refreshData, agentTimezone) {
   }
   stopOpencodeSlackIngest(codeName, log);
   stopOpencodeTelegramIngest(codeName, log);
-  const opencodeProjectDir = join34(getFramework("opencode").getAgentDir(codeName), "provision");
+  const opencodeProjectDir = join35(getFramework("opencode").getAgentDir(codeName), "provision");
   const serveEnv = {
     AGT_HOST: requireHost(),
     AGT_API_KEY: getApiKey() ?? void 0,
@@ -16677,8 +16749,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     });
   }
   const projectDir = getProjectDir(codeName);
-  const mcpConfigPath = join34(projectDir, ".mcp.json");
-  const claudeMdPath = join34(projectDir, "CLAUDE.md");
+  const mcpConfigPath = join35(projectDir, ".mcp.json");
+  const claudeMdPath = join35(projectDir, "CLAUDE.md");
   if (restartBreaker.isTripped(codeName)) {
     const trip = restartBreaker.getTrip(codeName);
     return {
@@ -16688,6 +16760,21 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
       detail: trip.statusMessage
     };
   }
+  if ((agentFrameworkCache.get(codeName) ?? DEFAULT_FRAMEWORK) === "claude-code" && !isSessionHealthy(codeName)) {
+    const missingMcpBundles = findMissingMcpBundles(mcpConfigPath);
+    if (missingMcpBundles.length > 0) {
+      const detail = formatMissingMcpBundles(missingMcpBundles);
+      log(
+        `[persistent-session] '${codeName}': deferring spawn \u2014 ${detail}. Not counted as a restart; will spawn once the host deploys them.`
+      );
+      return {
+        decision: "skipped-mcp-assets-not-ready",
+        spawnAttempted: false,
+        sessionHealthyAfter: false,
+        detail
+      };
+    }
+  }
   const teamSettingsForTz = refreshData.team?.settings;
   const agentTimezone = (() => {
     const ownTzRaw = refreshData.agent?.timezone;
@@ -17780,7 +17867,7 @@ async function processDirectChatMessage(agent, msg) {
     const useDoorbell = hostFlagStore().getBoolean("direct-chat-doorbell") || isolationMode(agent.codeName) === "docker";
     if (useDoorbell) {
       try {
-        const doorbell = directChatDoorbellPath(agent.agentId, homedir16());
+        const doorbell = directChatDoorbellPath(agent.agentId, homedir17());
         mkdirSync11(dirname9(doorbell), { recursive: true });
         writeFileSync14(doorbell, String(Date.now()));
         log(`[direct-chat] Doorbell rung for '${agent.codeName}' (msg=${msg.id}) \u2014 in-session MCP will pull via the cursor`);
@@ -17909,7 +17996,7 @@ ${formatRunMarker(run_id)}` : KANBAN_CHECK_COMMAND;
   }
   if (run_id) openInjectedRunByCode.set(codeName, run_id);
   try {
-    const doorbell = directChatDoorbellPath(agentId, homedir16());
+    const doorbell = directChatDoorbellPath(agentId, homedir17());
     mkdirSync11(dirname9(doorbell), { recursive: true });
     writeFileSync14(doorbell, String(Date.now()));
   } catch (err) {
@@ -18269,8 +18356,8 @@ function parseMemoryFile(raw, fallbackName) {
   };
 }
 async function syncMemories(agent, configDir, log2) {
-  const projectDir = join34(configDir, agent.code_name, "project");
-  const memoryDir = join34(projectDir, "memory");
+  const projectDir = join35(configDir, agent.code_name, "project");
+  const memoryDir = join35(projectDir, "memory");
   const isFreshSync = pendingFreshMemorySync.has(agent.agent_id);
   if (isFreshSync) {
     log2(`[memory-sync] Fresh-sync requested for '${agent.code_name}' \u2014 pulling DB first`);
@@ -18288,7 +18375,7 @@ async function syncMemories(agent, configDir, log2) {
     for (const file of readdirSync9(memoryDir)) {
       if (!file.endsWith(".md")) continue;
       try {
-        const raw = readFileSync28(join34(memoryDir, file), "utf-8");
+        const raw = readFileSync28(join35(memoryDir, file), "utf-8");
         const fileHash = createHash17("sha256").update(raw).digest("hex").slice(0, 16);
         currentHashes.set(file, fileHash);
         if (prevHashes.get(file) === fileHash) continue;
@@ -18313,7 +18400,7 @@ async function syncMemories(agent, configDir, log2) {
       } catch (err) {
         for (const mem of changedMemories) {
           for (const [file] of currentHashes) {
-            const parsed = parseMemoryFile(readFileSync28(join34(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
+            const parsed = parseMemoryFile(readFileSync28(join35(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
             if (parsed?.name === mem.name) currentHashes.delete(file);
           }
         }
@@ -18348,7 +18435,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
         const mem = dbMemories.memories[i];
         const rawSlug = mem.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "").slice(0, 60);
         const slug = rawSlug || `memory-${i}`;
-        const filePath = join34(memoryDir, `${slug}.md`);
+        const filePath = join35(memoryDir, `${slug}.md`);
         const desired = `---
 name: ${JSON.stringify(mem.name)}
 type: ${mem.type}
@@ -18522,7 +18609,7 @@ async function reportSelfUpdateRestarts() {
       });
     })
   ).then(() => void 0);
-  const deadline = new Promise((resolve) => setTimeout(resolve, 3e3));
+  const deadline = new Promise((resolve2) => setTimeout(resolve2, 3e3));
   await Promise.race([posts, deadline]);
 }
 function scheduleNext() {
@@ -18656,7 +18743,7 @@ function startManager(opts) {
     log(`[startup] state rehydration failed (continuing with empty state): ${err.message}`);
   }
   log(
-    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join34(homedir16(), ".augmented", "manager.log")}`
+    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join35(homedir17(), ".augmented", "manager.log")}`
   );
   deployMcpAssets();
   reapOrphanChannelMcps({ log });
@@ -18782,14 +18869,14 @@ function restartRunningChannelMcps(basenames) {
   }
 }
 function deployMcpAssets() {
-  const targetDir = join34(homedir16(), ".augmented", "_mcp");
+  const targetDir = join35(homedir17(), ".augmented", "_mcp");
   mkdirSync11(targetDir, { recursive: true });
   const moduleDir = dirname9(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
-    const candidate = join34(dir, "dist", "mcp");
-    if (existsSync15(join34(candidate, "index.js"))) {
+    const candidate = join35(dir, "dist", "mcp");
+    if (existsSync15(join35(candidate, "index.js"))) {
       mcpSourceDir = candidate;
       break;
     }
@@ -18802,6 +18889,8 @@ function deployMcpAssets() {
     return;
   }
   const changedBasenames = [];
+  const attemptedFiles = [];
+  const failedFiles = [];
   const fileHash = (p) => {
     try {
       if (!existsSync15(p)) return null;
@@ -18876,9 +18965,10 @@ function deployMcpAssets() {
     // needs restarting to pick up a token rotation.
     "xero.js"
   ]) {
-    const src = join34(mcpSourceDir, file);
-    const dst = join34(targetDir, file);
+    const src = join35(mcpSourceDir, file);
+    const dst = join35(targetDir, file);
     if (!existsSync15(src)) continue;
+    attemptedFiles.push(file);
     const before = fileHash(dst);
     try {
       copyFileSync(src, dst);
@@ -18887,22 +18977,29 @@ function deployMcpAssets() {
         changedBasenames.push(file.replace(/\.js$/, ""));
       }
     } catch (err) {
+      failedFiles.push(file);
       log(`[manager] Failed to deploy ${file}: ${err.message}`);
     }
   }
-  log(`[manager] MCP assets deployed to ${targetDir}`);
+  if (failedFiles.length > 0) {
+    log(
+      `[manager] MCP asset deployment INCOMPLETE for ${targetDir} \u2014 ${failedFiles.length}/${attemptedFiles.length} bundle(s) failed to copy: ${failedFiles.join(", ")}. Agents declaring these bundles will be held out of spawn (ENG-9125) until this succeeds. A read-only target directory is the usual cause.`
+    );
+  } else {
+    log(`[manager] MCP assets deployed to ${targetDir} (${attemptedFiles.length} bundle(s))`);
+  }
   if (changedBasenames.length > 0) {
     log(`[manager] Bundle(s) updated: ${changedBasenames.join(", ")} \u2014 signalling running instances to restart`);
     restartRunningChannelMcps(changedBasenames);
   }
-  const localMcpPath = join34(targetDir, "index.js");
+  const localMcpPath = join35(targetDir, "index.js");
   try {
-    const agentsDir = join34(homedir16(), ".augmented", "agents");
+    const agentsDir = join35(homedir17(), ".augmented", "agents");
     if (existsSync15(agentsDir)) {
       for (const entry of readdirSync9(agentsDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         for (const subdir of ["provision", "project"]) {
-          const mcpJsonPath = join34(agentsDir, entry.name, subdir, ".mcp.json");
+          const mcpJsonPath = join35(agentsDir, entry.name, subdir, ".mcp.json");
           try {
             const raw = readFileSync28(mcpJsonPath, "utf-8");
             if (!raw.includes("@integrity-labs/augmented-mcp")) continue;