@integrity-labs/agt-cli 0.28.643 → 0.28.644

package/dist/lib/manager-worker.js

@@ -55,7 +55,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-M24MLZPT.js";
+} from "../chunk-V2NZ2PAA.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -195,9 +195,33 @@ import {
 
 // src/lib/manager-worker.ts
 import { createHash as createHash17 } from "crypto";
-import { readFileSync as readFileSync28, writeFileSync as writeFileSync14, mkdirSync as mkdirSync11, existsSync as existsSync15, rmSync as rmSync5, readdirSync as readdirSync9, statSync as statSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync14, mkdirSync as mkdirSync11, existsSync as existsSync15, rmSync as rmSync5, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
+
+// src/lib/atomic-file-replace.ts
+import { copyFileSync, renameSync, unlinkSync } from "fs";
+import { join, dirname, basename } from "path";
+function atomicCopyFileSync(src, dst, unique = defaultUnique) {
+  const tmp = join(dirname(dst), `.${basename(dst)}.tmp-${unique()}`);
+  try {
+    copyFileSync(src, tmp);
+    renameSync(tmp, dst);
+  } catch (err) {
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw err;
+  }
+}
+var seq = 0;
+function defaultUnique() {
+  seq += 1;
+  return `${process.pid}-${seq}-${Date.now().toString(36)}`;
+}
+
+// src/lib/manager-worker.ts
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join35, dirname as dirname9, delimiter as pathDelimiter } from "path";
+import { join as join36, dirname as dirname10, delimiter as pathDelimiter } from "path";
 import { homedir as homedir17 } from "os";
 import { fileURLToPath } from "url";
 
@@ -241,16 +265,16 @@ function createSingleFlight(task, opts = {}) {
 
 // src/lib/claude-code-upgrade-throttle.ts
 import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
+import { dirname as dirname2, join as join2 } from "path";
 import { homedir } from "os";
 var CLAUDE_CODE_UPGRADE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 function claudeCodeUpgradeMarkerPath() {
-  return join(homedir(), ".augmented", ".last-claude-code-upgrade-check");
+  return join2(homedir(), ".augmented", ".last-claude-code-upgrade-check");
 }
 function stampClaudeCodeUpgradeMarker() {
   try {
     const markerPath = claudeCodeUpgradeMarkerPath();
-    mkdirSync(dirname(markerPath), { recursive: true });
+    mkdirSync(dirname2(markerPath), { recursive: true });
     writeFileSync(markerPath, String(Date.now()));
   } catch {
   }
@@ -690,7 +714,7 @@ function isSlackBehaviourRestrictive(subset) {
 
 // src/lib/onboarding-drive.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname3 } from "path";
 var ONBOARDING_REINJECT_INTERVAL_MS = 45 * 6e4;
 var ONBOARDING_MAX_NUDGES = 3;
 var ONBOARDING_MIN_STANDDOWN_AGE_MS = 60 * 6e4;
@@ -841,7 +865,7 @@ function readOnboardingDriveMarker(path) {
   return null;
 }
 function writeOnboardingDriveMarker(path, marker) {
-  mkdirSync2(dirname2(path), { recursive: true });
+  mkdirSync2(dirname3(path), { recursive: true });
   writeFileSync2(path, JSON.stringify(marker) + "\n", "utf8");
 }
 function clearOnboardingDriveMarker(path) {
@@ -853,7 +877,7 @@ function clearOnboardingDriveMarker(path) {
 
 // src/lib/channel-quarantine.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 var ESSENTIAL_CHANNEL_KEYS = /* @__PURE__ */ new Set(["direct-chat", "augmented"]);
 var OPTIONAL_CHANNEL_KEYS = /* @__PURE__ */ new Set([
   "telegram",
@@ -885,7 +909,7 @@ function classifyChannelCriticality(serverKey, entry) {
   return "essential";
 }
 function defaultQuarantinePath(configDir) {
-  return join2(configDir, "channel-quarantine.json");
+  return join3(configDir, "channel-quarantine.json");
 }
 var ChannelQuarantineStore = class {
   path;
@@ -985,10 +1009,10 @@ function isQuarantineFile(value) {
 
 // src/lib/claude-md-size.ts
 import { readFileSync as readFileSync4 } from "fs";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 function measureClaudeMd(configDir, codeName, ceiling = CLAUDE_MD_MAX_CHARS) {
   try {
-    const buf = readFileSync4(join3(configDir, codeName, "project", "CLAUDE.md"));
+    const buf = readFileSync4(join4(configDir, codeName, "project", "CLAUDE.md"));
     const chars = buf.toString("utf8").length;
     return { chars, bytes: buf.length, ceiling, overCeiling: chars > ceiling };
   } catch {
@@ -1566,9 +1590,9 @@ var DependencyRecoveryLedger = class {
 // src/lib/mcp-assets-ready.ts
 import { existsSync as nodeExistsSync, readFileSync as nodeReadFileSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join4, resolve, sep } from "path";
+import { join as join5, resolve, sep } from "path";
 function getSharedMcpDir(homeDir = homedir2()) {
-  return join4(homeDir, ".augmented", "_mcp");
+  return join5(homeDir, ".augmented", "_mcp");
 }
 function isPathInsideDir(candidate, dir) {
   const resolvedDir = resolve(dir);
@@ -1621,7 +1645,7 @@ function formatMissingMcpBundles(missing) {
 
 // src/lib/self-update-coalesce.ts
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "fs";
-import { dirname as dirname3 } from "path";
+import { dirname as dirname4 } from "path";
 var DEFAULT_SELF_UPDATE_COALESCE_MS = 30 * 60 * 1e3;
 function resolveCoalesceWindowMs(env = process.env) {
   const raw = env.AGT_SELF_UPDATE_COALESCE_MS;
@@ -1643,7 +1667,7 @@ function readLastSelfUpdateAppliedMs(markerPath, now = Date.now(), read = (p) =>
   return v;
 }
 function stampLastSelfUpdateApplied(markerPath, now = Date.now(), write = (p, v) => {
-  mkdirSync3(dirname3(p), { recursive: true });
+  mkdirSync3(dirname4(p), { recursive: true });
   writeFileSync3(p, v);
 }) {
   try {
@@ -1988,14 +2012,14 @@ function formatReaperBootLine(opts) {
 }
 
 // src/lib/direct-chat-delivery.ts
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var DEFAULT_DIRECT_CHAT_MAX_AGE_MS = 30 * 6e4;
 function directChatMaxAgeMs() {
   const raw = parseInt(process.env["AGT_DIRECT_CHAT_MAX_AGE_MS"] ?? "", 10);
   return Number.isFinite(raw) && raw >= 0 ? raw : DEFAULT_DIRECT_CHAT_MAX_AGE_MS;
 }
 function directChatDoorbellPath(agentId, home) {
-  return join5(home, ".augmented", agentId, "direct-chat-doorbell");
+  return join6(home, ".augmented", agentId, "direct-chat-doorbell");
 }
 function isDirectChatMessageExpired(createdAt, nowMs, maxAgeMs) {
   if (!maxAgeMs || maxAgeMs <= 0) return false;
@@ -2006,8 +2030,8 @@ function isDirectChatMessageExpired(createdAt, nowMs, maxAgeMs) {
 }
 
 // src/lib/id-keyed-migration.ts
-import { existsSync as existsSync2, lstatSync, readlinkSync, renameSync } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync2, lstatSync, readlinkSync, renameSync as renameSync2 } from "fs";
+import { join as join7 } from "path";
 import { homedir as homedir3 } from "os";
 var ID_KEYED_MIGRATION_FLAG = "id-keyed-layout-migration";
 function agentHasActiveWhatsapp(channelConfigs, codeNameDir) {
@@ -2015,7 +2039,7 @@ function agentHasActiveWhatsapp(channelConfigs, codeNameDir) {
     return true;
   }
   try {
-    if (existsSync2(join6(codeNameDir, "whatsapp-pending-inbound"))) return true;
+    if (existsSync2(join7(codeNameDir, "whatsapp-pending-inbound"))) return true;
   } catch {
   }
   return false;
@@ -2041,16 +2065,16 @@ function finishTranscriptMove(oldCwd, newCwd, codeName, log2) {
     );
     return;
   }
-  renameSync(from, to);
+  renameSync2(from, to);
   log2(`[id-keyed-migration] moved transcript store for '${codeName}' to the id-keyed key`);
 }
 function maybeMigrateAgentToIdKeyedLayout(agent, deps) {
   const home = deps.home ?? homedir3();
   const { code_name: codeName, agent_id: agentId } = agent;
-  const codeNamePath = join6(home, ".augmented", codeName);
-  const idPath = join6(home, ".augmented", agentId);
-  const oldCwd = join6(home, ".augmented", codeName, "project");
-  const newCwd = join6(idPath, "project");
+  const codeNamePath = join7(home, ".augmented", codeName);
+  const idPath = join7(home, ".augmented", agentId);
+  const oldCwd = join7(home, ".augmented", codeName, "project");
+  const newCwd = join7(idPath, "project");
   let codeNameKind;
   try {
     codeNameKind = lstatSync(codeNamePath).isSymbolicLink() ? "symlink" : "realdir";
@@ -2178,7 +2202,7 @@ function collectEnvGates(env) {
 
 // ../../packages/core/dist/direct-chat/cursor-advance-telemetry.js
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var CURSOR_SHORTFALL_COUNTER_SUFFIX = "-cursor-advance-classifications.json";
 function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
   if (!agentDir)
@@ -2186,7 +2210,7 @@ function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
   const key = cursorAdvanceCounterKey(route, verdict);
   if (key === null)
     return;
-  const path = join7(agentDir, `${source}${CURSOR_SHORTFALL_COUNTER_SUFFIX}`);
+  const path = join8(agentDir, `${source}${CURSOR_SHORTFALL_COUNTER_SUFFIX}`);
   const counts = {};
   try {
     const parsed = JSON.parse(readFileSync7(path, "utf-8"));
@@ -2206,7 +2230,7 @@ function recordCursorAdvanceOutcome(agentDir, source, route, verdict) {
 }
 
 // src/lib/artifact-stream.ts
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { homedir as homedir4 } from "os";
 import { readdir, stat, readFile } from "fs/promises";
 var ARTEFACT_ENTRY_FILE = "index.html";
@@ -2292,7 +2316,7 @@ var ArtifactStreamScanner = class {
         return;
       }
       for (const name of names) {
-        const file = join8(this.artifactsDir, name, ARTEFACT_ENTRY_FILE);
+        const file = join9(this.artifactsDir, name, ARTEFACT_ENTRY_FILE);
         const mtime = await this.fsDeps.mtimeMs(file).catch(() => null);
         if (mtime === null) continue;
         if (this.seenMtime.get(name) === mtime) continue;
@@ -2323,7 +2347,7 @@ var ArtifactStreamScanner = class {
   }
 };
 function artifactsDirFor(codeName) {
-  return join8(homedir4(), ".augmented", codeName, "artifacts");
+  return join9(homedir4(), ".augmented", codeName, "artifacts");
 }
 var nodeArtifactFs = {
   async listArtefactNames(artifactsDir) {
@@ -2434,12 +2458,12 @@ async function maybeReportUsageBanner(args) {
 import { createHash as createHash6 } from "crypto";
 import { readFile as readFile3, readdir as readdir3 } from "fs/promises";
 import { homedir as homedir6, platform as platform2 } from "os";
-import { dirname as dirname4, join as join10 } from "path";
+import { dirname as dirname5, join as join11 } from "path";
 
 // src/lib/claude-auth-detect.ts
 import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
 import { homedir as homedir5, platform } from "os";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
@@ -2454,16 +2478,16 @@ async function detectClaudeAuth() {
 }
 async function findClaudeCredentialsPaths() {
   const candidates = [
-    join9(homedir5(), ".claude", ".credentials.json"),
-    join9(homedir5(), ".claude", "credentials.json")
+    join10(homedir5(), ".claude", ".credentials.json"),
+    join10(homedir5(), ".claude", "credentials.json")
   ];
   const isLinuxRoot = platform() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
   if (isLinuxRoot) {
     try {
       const entries = await readdir2("/home", { withFileTypes: true });
       for (const entry of entries.filter((entry2) => entry2.isDirectory()).sort((a, b) => a.name.localeCompare(b.name))) {
-        candidates.push(join9("/home", entry.name, ".claude", ".credentials.json"));
-        candidates.push(join9("/home", entry.name, ".claude", "credentials.json"));
+        candidates.push(join10("/home", entry.name, ".claude", ".credentials.json"));
+        candidates.push(join10("/home", entry.name, ".claude", "credentials.json"));
       }
     } catch {
     }
@@ -2547,7 +2571,7 @@ async function candidateHomes() {
     try {
       const entries = await readdir3("/home", { withFileTypes: true });
       for (const entry of entries.filter((e) => e.isDirectory()).sort((a, b) => a.name.localeCompare(b.name))) {
-        homes.push(join10("/home", entry.name));
+        homes.push(join11("/home", entry.name));
       }
     } catch {
     }
@@ -2558,7 +2582,7 @@ async function homeOfActiveCredentials() {
   for (const path of await findClaudeCredentialsPaths()) {
     try {
       await readFile3(path, "utf-8");
-      return dirname4(dirname4(path));
+      return dirname5(dirname5(path));
     } catch {
     }
   }
@@ -2567,11 +2591,11 @@ async function homeOfActiveCredentials() {
 async function claudeConfigCandidatePaths() {
   const paths = [];
   const configDir = process.env["CLAUDE_CONFIG_DIR"]?.trim();
-  if (configDir) paths.push(join10(configDir, ".claude.json"));
+  if (configDir) paths.push(join11(configDir, ".claude.json"));
   const activeHome = await homeOfActiveCredentials();
-  if (activeHome) paths.push(join10(activeHome, ".claude.json"));
+  if (activeHome) paths.push(join11(activeHome, ".claude.json"));
   for (const home of await candidateHomes()) {
-    const path = join10(home, ".claude.json");
+    const path = join11(home, ".claude.json");
     if (!paths.includes(path)) paths.push(path);
   }
   return paths;
@@ -2668,11 +2692,11 @@ function diffAuthTuples(recorded, current) {
 }
 
 // src/lib/account-enforcement-marker.ts
-import { mkdirSync as mkdirSync4, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
+import { mkdirSync as mkdirSync4, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 function accountEnforcementMarkerPath(codeName) {
-  return join11(homedir7(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
+  return join12(homedir7(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
 }
 function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.stderr.write(`${m}
 `), text) {
@@ -2680,13 +2704,13 @@ function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.std
     clearAccountEnforcementMarker(codeName, log2);
     return;
   }
-  const dir = join11(homedir7(), ".augmented", codeName);
-  const path = join11(dir, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
+  const dir = join12(homedir7(), ".augmented", codeName);
+  const path = join12(dir, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
   const tempPath = `${path}.${process.pid}.tmp`;
   try {
     mkdirSync4(dir, { recursive: true });
     writeFileSync5(tempPath, serializeAccountEnforcementMarker(level, text), "utf-8");
-    renameSync2(tempPath, path);
+    renameSync3(tempPath, path);
   } catch (err) {
     try {
       rmSync2(tempPath, { force: true });
@@ -2707,7 +2731,7 @@ function clearAccountEnforcementMarker(codeName, log2 = (m) => process.stderr.wr
 
 // src/lib/token-usage-monitor.ts
 import { readdirSync, readFileSync as readFileSync8, statSync } from "fs";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 var MIN_CHECK_INTERVAL_MS2 = 6e4;
 var TRANSCRIPT_MTIME_WINDOW_MS = 2 * 24 * 60 * 60 * 1e3;
 var MAX_ENTRIES_PER_POST = 200;
@@ -2736,7 +2760,7 @@ async function maybeReportTokenUsage(args) {
     if (!name.endsWith(".jsonl")) continue;
     const sessionId = name.slice(0, -".jsonl".length);
     if (!sessionId) continue;
-    const path = join12(dir, name);
+    const path = join13(dir, name);
     let st;
     try {
       st = statSync(path);
@@ -2834,7 +2858,7 @@ async function maybeReportTokenUsage(args) {
 
 // src/lib/workflow-run-reconciler.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var MIN_CHECK_INTERVAL_MS3 = 5 * 6e4;
 var SETTLE_MS = 3e4;
 var TRANSCRIPT_MTIME_WINDOW_MS2 = 2 * 24 * 60 * 60 * 1e3;
@@ -2853,7 +2877,7 @@ function collectJsonlRecursive(dir, minMtimeMs, out, depth) {
     return;
   }
   for (const name of entries) {
-    const p = join13(dir, name);
+    const p = join14(dir, name);
     let st;
     try {
       st = statSync2(p);
@@ -2876,7 +2900,7 @@ function enumerateTranscriptFiles(transcriptDir, nowMs, minMtimeMs = nowMs - TRA
     return out;
   }
   for (const name of entries) {
-    const path = join13(transcriptDir, name);
+    const path = join14(transcriptDir, name);
     let st;
     try {
       st = statSync2(path);
@@ -2888,7 +2912,7 @@ function enumerateTranscriptFiles(transcriptDir, nowMs, minMtimeMs = nowMs - TRA
       continue;
     }
     if (st.isDirectory()) {
-      collectJsonlRecursive(join13(path, "subagents"), minMtimeMs, out, 0);
+      collectJsonlRecursive(join14(path, "subagents"), minMtimeMs, out, 0);
     }
   }
   return out;
@@ -2979,7 +3003,7 @@ async function maybeReconcileWorkflowRunTokens(args) {
 
 // src/lib/conversation-evaluator.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 var MIN_CHECK_INTERVAL_MS4 = 5 * 6e4;
 var TRANSCRIPT_MTIME_WINDOW_MS3 = 7 * 24 * 60 * 60 * 1e3;
 var WINDOW_PAD_MS = 5 * 6e4;
@@ -3415,7 +3439,7 @@ function readRecentTurns(dir, nowMs) {
       return;
     }
     for (const ent of entries) {
-      const full = join14(d, ent.name);
+      const full = join15(d, ent.name);
       if (ent.isDirectory()) {
         visit(full);
         continue;
@@ -3721,17 +3745,17 @@ async function reportSkip2(api2, agentId, conversationId, log2, codeName) {
 
 // src/lib/tool-call-audit.ts
 import { homedir as homedir11 } from "os";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 
 // src/lib/agent-logging-mode.ts
 import { readFileSync as readFileSync11 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 var LOGGING_MODES = ["hash-only", "redacted", "full-local"];
 function charterPath(codeName, homeDir) {
   const home = homeDir ?? (process.env["HOME"]?.trim() || homedir8());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join15(home, ".augmented", key, "provision", "CHARTER.md");
+  return join16(home, ".augmented", key, "provision", "CHARTER.md");
 }
 function readAgentLoggingMode(codeName, homeDir) {
   let raw;
@@ -3760,15 +3784,15 @@ function loggingModeWithholdsTargets(reading) {
 
 // src/lib/tool-call-path-salt.ts
 import { randomBytes } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync12, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync12, renameSync as renameSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir9 } from "os";
-import { dirname as dirname5, join as join16 } from "path";
+import { dirname as dirname6, join as join17 } from "path";
 var SALT_BYTES = 32;
 var SALT_RE = /^[0-9a-f]{64}$/;
 function pathSaltPath(codeName, homeDir) {
   const home = homeDir ?? (process.env["HOME"]?.trim() || homedir9());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join16(home, ".augmented", key, "tool-call-path-salt");
+  return join17(home, ".augmented", key, "tool-call-path-salt");
 }
 function readToolCallPathSalt(codeName, homeDir) {
   let file;
@@ -3787,13 +3811,13 @@ function readToolCallPathSalt(codeName, homeDir) {
   const salt = randomBytes(SALT_BYTES).toString("hex");
   const tmp = `${file}.tmp.${process.pid}`;
   try {
-    mkdirSync5(dirname5(file), { recursive: true, mode: 448 });
+    mkdirSync5(dirname6(file), { recursive: true, mode: 448 });
     writeFileSync6(tmp, `${salt}
 `, { encoding: "utf-8", mode: 384 });
-    renameSync3(tmp, file);
+    renameSync4(tmp, file);
   } catch {
     try {
-      unlinkSync(tmp);
+      unlinkSync2(tmp);
     } catch {
     }
     return null;
@@ -3845,7 +3869,7 @@ function readHostArchiveAddress(path) {
 
 // src/lib/tool-call-extractor.ts
 import { closeSync, fstatSync, openSync, readFileSync as readFileSync14, readSync, readdirSync as readdirSync4 } from "fs";
-import { basename, join as join17, relative } from "path";
+import { basename as basename2, join as join18, relative } from "path";
 import { StringDecoder } from "string_decoder";
 
 // src/lib/tool-call-redaction.ts
@@ -3974,7 +3998,7 @@ function redactToolTargetInner(toolName, input, ctx) {
 var EXTRACTOR_VERSION = "e1";
 function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
   const files = [];
-  const mainAbs = join17(transcriptDir, `${sessionId}.jsonl`);
+  const mainAbs = join18(transcriptDir, `${sessionId}.jsonl`);
   files.push({
     absPath: mainAbs,
     relPath: relative(projectsRoot, mainAbs),
@@ -3982,7 +4006,7 @@ function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
     isSubagent: false,
     subagentId: null
   });
-  const subDir = join17(transcriptDir, sessionId, "subagents");
+  const subDir = join18(transcriptDir, sessionId, "subagents");
   let entries;
   try {
     entries = readdirSync4(subDir);
@@ -3991,8 +4015,8 @@ function enumerateSessionTranscripts(transcriptDir, sessionId, projectsRoot) {
   }
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const abs = join17(subDir, name);
-    const stem = basename(name, ".jsonl");
+    const abs = join18(subDir, name);
+    const stem = basename2(name, ".jsonl");
     files.push({
       absPath: abs,
       relPath: relative(projectsRoot, abs),
@@ -4191,7 +4215,7 @@ function extractTranscriptWindow(file, opts, from) {
 // src/lib/tool-call-cursor.ts
 import { existsSync as existsSync4, readFileSync as readFileSync15 } from "fs";
 import { homedir as homedir10 } from "os";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 var COVERAGE_DISPOSITIONS = [
   "ok",
   "not_entitled",
@@ -4246,7 +4270,7 @@ function parseCursorKey(key) {
 function cursorStatePath(codeName, homeDir) {
   const home = homeDir ?? (process.env["HOME"]?.trim() || homedir10());
   const key = agentRuntimeKey(codeName, homeDir);
-  return join18(home, ".augmented", key, "tool-call-cursors.json");
+  return join19(home, ".augmented", key, "tool-call-cursors.json");
 }
 function loadCursors(path) {
   const out = /* @__PURE__ */ new Map();
@@ -4659,7 +4683,7 @@ async function maybeScanToolCalls(args) {
       log2(`[tool-call-audit] ${codeName}: no path-hash salt available \u2014 file targets withheld`);
     }
     const home = args.homeDir ?? (process.env["HOME"]?.trim() || homedir11());
-    const projectsRoot = args.projectsRoot ?? join19(home, ".claude", "projects");
+    const projectsRoot = args.projectsRoot ?? join20(home, ".claude", "projects");
     const transcriptDir = args.transcriptDir ?? sessionTranscriptDir(getProjectDir(codeName));
     const current = peekCurrentSession(codeName);
     const sessionIds = current ? [current.sessionId] : [];
@@ -4690,9 +4714,9 @@ async function maybeScanToolCalls(args) {
 // src/lib/activity-cache-monitor.ts
 import { existsSync as existsSync5, readFileSync as readFileSync16 } from "fs";
 import { homedir as homedir12 } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 var MIN_CHECK_INTERVAL_MS7 = 6e4;
-var STATS_CACHE_PATH = join20(homedir12(), ".claude", "stats-cache.json");
+var STATS_CACHE_PATH = join21(homedir12(), ".claude", "stats-cache.json");
 var ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 var state6 = { lastObservedDate: null, lastCheckedAt: 0 };
 function selectNewDailyRows(raw, lastObservedDate) {
@@ -4973,10 +4997,10 @@ function computeChannelConfigHash(input) {
 
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync7 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 var CACHE_FILENAME = "channel-hash-cache.json";
 function getChannelHashCacheFile(configDir) {
-  return join21(configDir, CACHE_FILENAME);
+  return join22(configDir, CACHE_FILENAME);
 }
 function loadChannelHashCache(target, configDir) {
   const path = getChannelHashCacheFile(configDir);
@@ -5004,7 +5028,7 @@ function saveChannelHashCache(source, configDir) {
 
 // src/lib/sender-policy-baseline.ts
 import { existsSync as existsSync7, readFileSync as readFileSync18 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 var BASELINE_FILENAME = "sender-policy-baseline.json";
 var SENDER_POLICY_BASELINE_VERSION = 1;
 var BASELINE_CONCERNS = ["senderPolicy", "slackBehaviour", "msteamsBehaviour"];
@@ -5016,7 +5040,7 @@ function createDeliveryBaselineMaps() {
   };
 }
 function getSenderPolicyBaselineFile(configDir) {
-  return join22(configDir, BASELINE_FILENAME);
+  return join23(configDir, BASELINE_FILENAME);
 }
 function loadSenderPolicyBaseline(target, configDir, log2) {
   const path = getSenderPolicyBaselineFile(configDir);
@@ -5546,7 +5570,7 @@ function planGlobalSkillSync(globalSkills, prevIds, hashOf, knownHash, options)
 }
 
 // src/lib/manager/integration-skill-cache.ts
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function integrationSkillHashKey(agentId, skillId) {
   return `plugin-skill:${agentId}:${skillId}`;
 }
@@ -5562,16 +5586,16 @@ function forgetIntegrationSkill(cache3, agentId, skillId) {
 function removeIntegrationSkillFolder(opts) {
   forgetIntegrationSkill(opts.cache, opts.agentId, opts.entry);
   for (const dir of opts.dirs) {
-    opts.removeDir(join23(dir, opts.entry));
+    opts.removeDir(join24(dir, opts.entry));
   }
 }
 
 // src/lib/manager/managed-skill-manifest.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname6, join as join24 } from "path";
+import { dirname as dirname7, join as join25 } from "path";
 var MANIFEST_VERSION = 1;
 function managedSkillManifestPath(agentRootDir) {
-  return join24(agentRootDir, "managed-skills.json");
+  return join25(agentRootDir, "managed-skills.json");
 }
 function readManagedSkillManifest(path) {
   try {
@@ -5585,7 +5609,7 @@ function readManagedSkillManifest(path) {
 }
 function writeManagedSkillManifest(path, ids) {
   try {
-    mkdirSync6(dirname6(path), { recursive: true });
+    mkdirSync6(dirname7(path), { recursive: true });
     const body = {
       version: MANIFEST_VERSION,
       globalSkillIds: [...ids].sort()
@@ -5703,7 +5727,7 @@ function resolveModelChain(refreshData) {
 
 // src/lib/manager/claude-auth.ts
 import { existsSync as existsSync9, rmSync as rmSync3 } from "fs";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 import { homedir as homedir13 } from "os";
 async function applyClaudeAuthToEnv(childEnv, label) {
   const apiKey = getApiKey();
@@ -5716,9 +5740,9 @@ async function applyClaudeAuthToEnv(childEnv, label) {
       throw new Error("claude_auth_mode=api_key but /host/exchange returned no decrypted key");
     }
     childEnv.ANTHROPIC_API_KEY = exchange.anthropicApiKey;
-    const claudeDir = join25(homedir13(), ".claude");
+    const claudeDir = join26(homedir13(), ".claude");
     for (const filename of [".credentials.json", "credentials.json"]) {
-      const p = join25(claudeDir, filename);
+      const p = join26(claudeDir, filename);
       if (existsSync9(p)) {
         try {
           rmSync3(p, { force: true });
@@ -5801,7 +5825,7 @@ function heartbeatRuntimeAuthFields(probeVerdict) {
 
 // src/lib/manager/kanban/parsers.ts
 import { existsSync as existsSync10, readFileSync as readFileSync20 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 var STANDUP_TEMPLATES = /* @__PURE__ */ new Set(["daily-standup", "end-of-day-summary"]);
 var TASK_UPDATE_TEMPLATES = /* @__PURE__ */ new Set(["hourly-status", "task-update"]);
 var PLAN_TEMPLATES = /* @__PURE__ */ new Set(["morning-plan"]);
@@ -5953,8 +5977,8 @@ function getBuiltInSkillContent(skillId) {
   if (builtInSkillCache.has(skillId)) return builtInSkillCache.get(skillId);
   try {
     const candidates = [
-      join26(process.cwd(), "skills", skillId, "SKILL.md"),
-      join26(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
+      join27(process.cwd(), "skills", skillId, "SKILL.md"),
+      join27(new URL(".", import.meta.url).pathname, "..", "..", "..", "..", "..", "..", "skills", skillId, "SKILL.md")
     ];
     for (const candidate of candidates) {
       if (existsSync10(candidate)) {
@@ -6100,11 +6124,11 @@ function formatBoardForPrompt(items, template) {
 
 // src/lib/manager/kanban/nudge-state-cache.ts
 import { existsSync as existsSync11, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 var CACHE_FILENAME2 = "kanban-nudge-state.json";
 var KANBAN_NUDGE_STATE_VERSION = 1;
 function getKanbanNudgeStateFile(configDir) {
-  return join27(configDir, CACHE_FILENAME2);
+  return join28(configDir, CACHE_FILENAME2);
 }
 function loadKanbanNudgeState(target, configDir) {
   const path = getKanbanNudgeStateFile(configDir);
@@ -6729,9 +6753,9 @@ function closeSessionRunForCode(codeName, outcome, reason) {
 
 // src/lib/manager/scheduler/kanban-route.ts
 import { createHash as createHash12 } from "crypto";
-import { writeFileSync as writeFileSync10, renameSync as renameSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync22, unlinkSync as unlinkSync2 } from "fs";
+import { writeFileSync as writeFileSync10, renameSync as renameSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync22, unlinkSync as unlinkSync3 } from "fs";
 import { homedir as homedir14 } from "os";
-import { join as join28, dirname as dirname7 } from "path";
+import { join as join29, dirname as dirname8 } from "path";
 
 // src/lib/manager/scheduler/notify.ts
 import { createHash as createHash11 } from "crypto";
@@ -7090,21 +7114,21 @@ function resolveScheduledSlackTarget(task) {
 }
 function stampScheduledTurnMarker(codeName, taskId, target) {
   try {
-    const file = join28(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+    const file = join29(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
     const marker = { ts: Date.now(), task_id: taskId, ...target ? { target } : {} };
     const tmp = `${file}.tmp`;
     writeFileSync10(tmp, JSON.stringify(marker), "utf8");
-    renameSync4(tmp, file);
+    renameSync5(tmp, file);
   } catch (err) {
     log(`[scheduled-kanban] scheduled-turn marker write failed for '${codeName}': ${err.message}`);
   }
 }
 function clearScheduledTurnMarkerForTask(codeName, taskId) {
-  const file = join28(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
+  const file = join29(homedir14(), ".augmented", codeName, SCHEDULED_TURN_MARKER_FILENAME);
   try {
     const raw = JSON.parse(readFileSync22(file, "utf8"));
     if (typeof raw?.task_id !== "string" || raw.task_id !== taskId) return;
-    unlinkSync2(file);
+    unlinkSync3(file);
     log(`[scheduled-kanban] scheduled-turn marker cleared for '${codeName}' (task ${taskId} complete)`);
   } catch {
   }
@@ -7163,7 +7187,7 @@ async function routeScheduledTaskViaKanban(codeName, agentId, task, prompt, dura
     }
     try {
       const doorbell = directChatDoorbellPath(agentId, homedir14());
-      mkdirSync7(dirname7(doorbell), { recursive: true });
+      mkdirSync7(dirname8(doorbell), { recursive: true });
       writeFileSync10(doorbell, String(Date.now()));
     } catch (err) {
       log(`[scheduled-kanban] doorbell ring failed for '${codeName}': ${err.message} (notice still queued)`);
@@ -7315,11 +7339,11 @@ async function processClaudeTaskResult(codeName, agentId, templateId, rawOutput,
 // src/lib/manager/scheduler/execution.ts
 import { createHash as createHash13 } from "crypto";
 import { homedir as homedir15 } from "os";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 
 // src/lib/agent-serving-probe.ts
 import { readFileSync as readFileSync23, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var RATE_LIMIT_WINDOW_MS = 6 * 60 * 60 * 1e3;
 function probeRateLimit(args) {
   const now = args.now ?? /* @__PURE__ */ new Date();
@@ -7335,7 +7359,7 @@ function probeRateLimit(args) {
   let newest = UNKNOWN_RATE_LIMIT;
   for (const name of entries) {
     if (!name.endsWith(".jsonl")) continue;
-    const path = join29(dir, name);
+    const path = join30(dir, name);
     try {
       const st = statSync5(path);
       if (!st.isFile() || st.mtimeMs < startMs) continue;
@@ -7406,7 +7430,7 @@ function shouldLogUsageCapDeferral(site, codeName, limitedUntil) {
 
 // src/lib/manager/scheduler/execution.ts
 function claudePidFilePath() {
-  return join30(homedir15(), ".augmented", "manager-claude-pids.json");
+  return join31(homedir15(), ".augmented", "manager-claude-pids.json");
 }
 var inFlightClaudePids = /* @__PURE__ */ new Map();
 function registerClaudeSpawn(record) {
@@ -7477,7 +7501,7 @@ async function syncAndCheckClaudeScheduler(agent, tasks, boardItems, refreshData
 
 // src/lib/occupancy-gate.ts
 import { closeSync as closeSync2, openSync as openSync2, readdirSync as readdirSync6, readSync as readSync2, statSync as statSync6 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 function rostersMeasuredZero(mode, attested, runtimeRunning) {
   return mode === "enforce" && attested && runtimeRunning;
 }
@@ -7566,10 +7590,10 @@ function candidateTranscriptPaths(dir) {
   let complete = true;
   for (const name of top) {
     if (name.endsWith(".jsonl")) {
-      paths.push(join31(dir, name));
+      paths.push(join32(dir, name));
       continue;
     }
-    const subDir = join31(dir, name, "subagents");
+    const subDir = join32(dir, name, "subagents");
     let subs;
     try {
       subs = readdirSync6(subDir);
@@ -7578,7 +7602,7 @@ function candidateTranscriptPaths(dir) {
       continue;
     }
     for (const sub of subs) {
-      if (sub.endsWith(".jsonl")) paths.push(join31(subDir, sub));
+      if (sub.endsWith(".jsonl")) paths.push(join32(subDir, sub));
     }
   }
   return { paths, complete };
@@ -9060,9 +9084,9 @@ async function fireOpencodeScheduledTask(agent, task) {
 
 // src/lib/opencode-telegram-ingest.ts
 import { createHash as createHash16 } from "crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync25, renameSync as renameSync5, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync25, renameSync as renameSync6, unlinkSync as unlinkSync4, writeFileSync as writeFileSync11 } from "fs";
 import { randomUUID } from "crypto";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 
 // src/lib/telegram-ingest.ts
 import https2 from "https";
@@ -9610,7 +9634,7 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
   let filePath;
   try {
     dir = getFramework("opencode").getAgentDir(codeName);
-    filePath = join32(dir, "telegram-getupdates-offset-opencode.json");
+    filePath = join33(dir, "telegram-getupdates-offset-opencode.json");
   } catch {
     dir = null;
     filePath = null;
@@ -9648,11 +9672,11 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
           }),
           { mode: 384 }
         );
-        renameSync5(tmpPath, filePath);
+        renameSync6(tmpPath, filePath);
       } catch (err) {
         log2(`[telegram-ingest:${codeName}] offset persist failed: ${err instanceof Error ? err.message : String(err)}`);
         try {
-          if (existsSync13(tmpPath)) unlinkSync3(tmpPath);
+          if (existsSync13(tmpPath)) unlinkSync4(tmpPath);
         } catch {
         }
       }
@@ -9889,15 +9913,15 @@ function partitionActionableByPoison(actionable, states, config2) {
 }
 
 // src/lib/restart-flags.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync7, readFileSync as readFileSync26, renameSync as renameSync6, rmSync as rmSync4, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync7, readFileSync as readFileSync26, renameSync as renameSync7, rmSync as rmSync4, writeFileSync as writeFileSync12 } from "fs";
 import { homedir as homedir16 } from "os";
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function restartFlagsDir() {
-  return join33(homedir16(), ".augmented", "restart-flags");
+  return join34(homedir16(), ".augmented", "restart-flags");
 }
 function flagPath(codeName) {
-  return join33(restartFlagsDir(), `${codeName}.flag`);
+  return join34(restartFlagsDir(), `${codeName}.flag`);
 }
 function readRestartFlags() {
   const dir = restartFlagsDir();
@@ -9906,7 +9930,7 @@ function readRestartFlags() {
   for (const entry of readdirSync7(dir)) {
     if (!entry.endsWith(".flag")) continue;
     try {
-      const raw = readFileSync26(join33(dir, entry), "utf8");
+      const raw = readFileSync26(join34(dir, entry), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.codeName !== "string" || parsed.codeName.length === 0) {
         parsed.codeName = entry.replace(/\.flag$/, "");
@@ -10024,8 +10048,8 @@ async function sendError(flag, opts, text) {
 }
 
 // src/lib/restart-context.ts
-import { readdirSync as readdirSync8, readFileSync as readFileSync27, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, unlinkSync as unlinkSync4 } from "fs";
-import { dirname as dirname8, join as join34 } from "path";
+import { readdirSync as readdirSync8, readFileSync as readFileSync27, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, unlinkSync as unlinkSync5 } from "fs";
+import { dirname as dirname9, join as join35 } from "path";
 var SLACK_PENDING_INBOUND_DIRNAME = "slack-pending-inbound";
 var SLACK_RESTART_CONTEXT_DIRNAME = "slack-restart-context";
 var MAX_TOPIC_CHARS = 140;
@@ -10034,13 +10058,13 @@ var RECONSTRUCT_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 var WINDOW_PAD_MS3 = 5 * 6e4;
 var DEFAULT_MAX_MARKERS_PER_AGENT = 25;
 function augmentedAgentDir(codeName) {
-  return dirname8(getProjectDir(codeName));
+  return dirname9(getProjectDir(codeName));
 }
 function slackPendingInboundDir(codeName) {
-  return join34(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
+  return join35(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
 }
 function slackRestartContextDir(codeName) {
-  return join34(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
+  return join35(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
 }
 function sanitizeTopic(raw) {
   const cleaned = raw.replace(/\s+/g, " ").trim().replace(/[<>]/g, " ").replace(/\s+/g, " ").trim();
@@ -10100,7 +10124,7 @@ function pruneHintsExcept(codeName, freshFilenames) {
     if (!filename.endsWith(".json")) continue;
     if (freshFilenames.has(filename)) continue;
     try {
-      unlinkSync4(join34(ctxDir, filename));
+      unlinkSync5(join35(ctxDir, filename));
     } catch {
     }
   }
@@ -10121,7 +10145,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       }
       const markers = [];
       for (const filename of markerFilenames.slice(0, cap)) {
-        const parsed = readStrandedMarker(join34(markerDir, filename));
+        const parsed = readStrandedMarker(join35(markerDir, filename));
         if (parsed) markers.push({ filename, channel: parsed.channel, thread_ts: parsed.thread_ts });
       }
       if (markers.length === 0) {
@@ -10135,7 +10159,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       const freshFilenames = /* @__PURE__ */ new Set();
       for (const { filename, hint } of hints) {
         try {
-          writeHintFile(join34(ctxDir, filename), ctxDir, hint);
+          writeHintFile(join35(ctxDir, filename), ctxDir, hint);
           freshFilenames.add(filename);
         } catch (err) {
           log2(`[restart-context] ${codeName}: hint write failed for ${filename}: ${err.message}`);
@@ -11512,7 +11536,7 @@ var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
   const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-JAME5YLS.js");
-  const newest = newestPendingInboundActivityMtimeMs(dirname9(paneLogPath(codeName)));
+  const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
 }
@@ -11761,7 +11785,7 @@ var runningChannelSecretHashes = /* @__PURE__ */ new Map();
 var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
-    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join36(projectDir, ".mcp.json"), "utf-8");
     return createHash17("sha256").update(canonicalJson(JSON.parse(raw))).digest("hex");
   } catch {
     return null;
@@ -11769,7 +11793,7 @@ function projectMcpHash(_codeName, projectDir) {
 }
 function projectMcpKeys(_codeName, projectDir) {
   try {
-    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join36(projectDir, ".mcp.json"), "utf-8");
     const parsed = JSON.parse(raw);
     const servers = parsed.mcpServers;
     if (!servers || typeof servers !== "object") return /* @__PURE__ */ new Set();
@@ -11787,7 +11811,7 @@ function seedSessionLaunchBaselines(codeName, projectDir) {
   else runningMcpServerKeys.delete(codeName);
   let launchStructure = null;
   try {
-    const raw = readFileSync28(join35(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync28(join36(projectDir, ".mcp.json"), "utf-8");
     launchStructure = managedMcpStructureHashFromFile(
       JSON.parse(raw),
       isManagedMcpServerKey
@@ -11913,7 +11937,7 @@ async function runAgentSessionToolBindProbes(agent, integrations, projectDir, op
   if (result && result.rebindCandidates.length > 0 && hostFlagStore().getBoolean("session-tool-rebind")) {
     let mcpJsonForRebind = null;
     try {
-      mcpJsonForRebind = JSON.parse(readFileSync28(join35(projectDir, ".mcp.json"), "utf-8"));
+      mcpJsonForRebind = JSON.parse(readFileSync28(join36(projectDir, ".mcp.json"), "utf-8"));
     } catch {
       mcpJsonForRebind = null;
     }
@@ -12058,7 +12082,7 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
-      readFileSync28(join35(projectDir, ".env.integrations"), "utf-8")
+      readFileSync28(join36(projectDir, ".env.integrations"), "utf-8")
     );
     return channelSecretValueHash(entries, CHANNEL_SECRET_ENV_KEYS);
   } catch {
@@ -12154,7 +12178,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.643" : "dev";
+var agtCliVersion = true ? "0.28.644" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12249,7 +12273,7 @@ async function ensureToolkitCli(toolkitSlug) {
         toolkitCliEnsured.add(toolkitSlug);
         return;
       }
-      brewBinDir = dirname9(brewPath);
+      brewBinDir = dirname10(brewPath);
       const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
       log(`[toolkit-install] ${toolkitSlug}: installing via brew (${pkg})\u2026`);
       if (isRoot) {
@@ -12503,7 +12527,7 @@ function ensureClaudeManagedSettings(path = claudeManagedSettingsPath()) {
     }
     if (settings.channelsEnabled === true) return "ok";
     settings.channelsEnabled = true;
-    mkdirSync11(dirname9(path), { recursive: true });
+    mkdirSync11(dirname10(path), { recursive: true });
     writeFileSync14(path, `${JSON.stringify(settings, null, 2)}
 `);
     log(`[managed-settings] set channelsEnabled:true in ${path} (ENG-5786 \u2014 unblocks Claude Code channels)`);
@@ -12542,7 +12566,7 @@ async function ensureOpencodeBinary() {
   try {
     const prefix = execFileSync3("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
     if (prefix) {
-      const npmBin = join35(prefix, "bin");
+      const npmBin = join36(prefix, "bin");
       const current = (process.env.PATH ?? "").split(pathDelimiter);
       if (!current.includes(npmBin)) {
         process.env.PATH = [npmBin, ...current.filter(Boolean)].join(pathDelimiter);
@@ -12599,7 +12623,7 @@ async function ensureFrameworkBinary(frameworkId) {
       log(`Claude Code install failed: ${err.message}`);
       return;
     }
-    const brewBinDir = dirname9(brewPath);
+    const brewBinDir = dirname10(brewPath);
     if (!process.env.PATH?.split(":").includes(brewBinDir)) {
       process.env.PATH = `${brewBinDir}:${process.env.PATH ?? ""}`;
     }
@@ -12659,7 +12683,7 @@ ${r.stderr}`;
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 function selfUpdateAppliedMarkerPath() {
-  return join35(homedir17(), ".augmented", ".last-self-update-applied");
+  return join36(homedir17(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
 var selfUpdatePinnedLogged = false;
@@ -12688,7 +12712,7 @@ async function checkAndUpdateCli(opts) {
     const isNpmGlobal = !isBrewFormula && resolvedPath.includes("node_modules");
     if (!isBrewFormula && !isNpmGlobal) return "noop";
     const { readFileSync: readF, writeFileSync: writeF } = await import("fs");
-    const markerPath = join35(homedir17(), ".augmented", ".last-update-check");
+    const markerPath = join36(homedir17(), ".augmented", ".last-update-check");
     if (!force) {
       try {
         const lastCheck = parseInt(readF(markerPath, "utf-8").trim(), 10);
@@ -13141,12 +13165,12 @@ async function checkClaudeAuth() {
 var evalEmptyMcpConfigPath = null;
 function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync15(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
-  const dir = join35(homedir17(), ".augmented");
+  const dir = join36(homedir17(), ".augmented");
   try {
     mkdirSync11(dir, { recursive: true });
   } catch {
   }
-  const p = join35(dir, ".eval-empty-mcp.json");
+  const p = join36(dir, ".eval-empty-mcp.json");
   writeFileSync14(p, JSON.stringify({ mcpServers: {} }));
   evalEmptyMcpConfigPath = p;
   return p;
@@ -13241,10 +13265,10 @@ function resolveConversationEvalBackend() {
   return conversationEvalBackend;
 }
 function getStateFile() {
-  return join35(config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
+  return join36(config?.configDir ?? join36(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
 }
 function channelHashCacheDir() {
-  return config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
+  return config?.configDir ?? join36(process.env["HOME"] ?? "/tmp", ".augmented");
 }
 function loadChannelHashCache2() {
   loadChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
@@ -13298,7 +13322,7 @@ function removeDeliveryBaselineEntries(agentId) {
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
   if (!_channelQuarantineStore) {
-    const dir = config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join36(process.env["HOME"] ?? "/tmp", ".augmented");
     _channelQuarantineStore = new ChannelQuarantineStore(defaultQuarantinePath(dir));
   }
   return _channelQuarantineStore;
@@ -13315,7 +13339,7 @@ function claudeMdSizeFor(codeName) {
 var _hostFlagStore = null;
 function hostFlagStore() {
   if (!_hostFlagStore) {
-    const dir = config?.configDir ?? join35(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join36(process.env["HOME"] ?? "/tmp", ".augmented");
     _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
   }
   return _hostFlagStore;
@@ -13389,12 +13413,12 @@ function parseSkillFrontmatter(content) {
 }
 async function refreshSkillsIndexInClaudeMd(configDir, codeName, log2) {
   const { readdirSync: readdirSync10, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync15 } = await import("fs");
-  const skillsDir = join35(configDir, codeName, "project", ".claude", "skills");
-  const claudeMdPath = join35(configDir, codeName, "project", "CLAUDE.md");
+  const skillsDir = join36(configDir, codeName, "project", ".claude", "skills");
+  const claudeMdPath = join36(configDir, codeName, "project", "CLAUDE.md");
   if (!ex(skillsDir) || !ex(claudeMdPath)) return;
   const entries = [];
   for (const dir of readdirSync10(skillsDir).sort()) {
-    const skillFile = join35(skillsDir, dir, "SKILL.md");
+    const skillFile = join36(skillsDir, dir, "SKILL.md");
     if (!ex(skillFile)) continue;
     try {
       const { name, description } = parseSkillFrontmatter(rfs(skillFile, "utf-8"));
@@ -13898,10 +13922,10 @@ async function pollCycleInner() {
                 const paneTail = readFileSync28(paneLogPath(codeName), "utf8").slice(-65536);
                 const transient = detectTransientApiErrorInLog(paneTail);
                 if (transient) {
-                  const wedgeHome = join35(homedir17(), ".augmented", codeName);
+                  const wedgeHome = join36(homedir17(), ".augmented", codeName);
                   if (existsSync15(wedgeHome)) {
                     atomicWriteFileSync(
-                      join35(wedgeHome, "watchdog-give-up.json"),
+                      join36(wedgeHome, "watchdog-give-up.json"),
                       JSON.stringify({
                         gave_up_at: wedgeNow.toISOString(),
                         reason: "transient_overload"
@@ -14198,7 +14222,7 @@ async function pollCycleInner() {
         const adapter = resolveAgentFramework(prev.codeName);
         stopAgentRuntime2(prev.codeName, "removed-from-host");
         killAgentChannelProcesses(prev.codeName, { log });
-        const agentDir = join35(adapter.getAgentDir(prev.codeName), "provision");
+        const agentDir = join36(adapter.getAgentDir(prev.codeName), "provision");
         await cleanupAgentFiles(prev.codeName, agentDir);
         clearAgentCaches(prev.agentId, prev.codeName);
       }
@@ -14285,10 +14309,10 @@ async function pollCycleInner() {
         // pending-inbound marker. Best-effort: a write failure is logged by
         // the watchdog, never fails the poll cycle.
         signalGiveUp: (codeName) => {
-          const dir = join35(homedir17(), ".augmented", codeName);
+          const dir = join36(homedir17(), ".augmented", codeName);
           if (!existsSync15(dir)) return;
           atomicWriteFileSync(
-            join35(dir, "watchdog-give-up.json"),
+            join36(dir, "watchdog-give-up.json"),
             JSON.stringify({ gave_up_at: (/* @__PURE__ */ new Date()).toISOString() })
           );
         },
@@ -14309,7 +14333,7 @@ async function pollCycleInner() {
           const dir = getFramework("claude-code").getAgentDir(codeName);
           if (!existsSync15(dir)) return;
           atomicWriteFileSync(
-            join35(dir, "watchdog-give-up.json"),
+            join36(dir, "watchdog-give-up.json"),
             JSON.stringify({
               gave_up_at: (/* @__PURE__ */ new Date()).toISOString(),
               reason: "usage_limit",
@@ -14571,7 +14595,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const adapter = resolveAgentFramework(agent.code_name);
-  let agentDir = join35(adapter.getAgentDir(agent.code_name), "provision");
+  let agentDir = join36(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
@@ -14745,7 +14769,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   const frameworkId = refreshData.agent.framework ?? DEFAULT_FRAMEWORK;
   agentFrameworkCache.set(agent.code_name, frameworkId);
   const frameworkAdapter = getFramework(frameworkId);
-  agentDir = join35(frameworkAdapter.getAgentDir(agent.code_name), "provision");
+  agentDir = join36(frameworkAdapter.getAgentDir(agent.code_name), "provision");
   cacheAgentDeliveryMetadata(agent.code_name, refreshData);
   agentRestartTimezoneInputs.set(agent.code_name, {
     agentTimezone: typeof refreshData.agent.timezone === "string" ? refreshData.agent.timezone : null,
@@ -14794,7 +14818,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     const changedFiles = [];
     mkdirSync11(agentDir, { recursive: true });
     for (const artifact of artifacts) {
-      const filePath = join35(agentDir, artifact.relativePath);
+      const filePath = join36(agentDir, artifact.relativePath);
       let existingHash;
       let newHash;
       let writeContent = artifact.content;
@@ -14813,7 +14837,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         };
         newHash = sha256(stripDynamicSections(artifact.content));
         try {
-          const projectClaudeMd = join35(config.configDir, agent.code_name, "project", "CLAUDE.md");
+          const projectClaudeMd = join36(config.configDir, agent.code_name, "project", "CLAUDE.md");
           const existing = readFileSync28(projectClaudeMd, "utf-8");
           existingHash = sha256(stripDynamicSections(existing));
         } catch {
@@ -14864,13 +14888,13 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
     }
     if (changedFiles.length > 0) {
-      const isFirst = !existsSync15(join35(agentDir, "CHARTER.md"));
+      const isFirst = !existsSync15(join36(agentDir, "CHARTER.md"));
       const verb = isFirst ? "Provisioning" : "Updating";
       const fileNames = changedFiles.map((f) => f.relativePath).join(", ");
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
-        const filePath = join35(agentDir, file.relativePath);
-        mkdirSync11(dirname9(filePath), { recursive: true });
+        const filePath = join36(agentDir, file.relativePath);
+        mkdirSync11(dirname10(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
         } else {
@@ -14878,12 +14902,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
       }
       try {
-        const provSkillsDir = join35(agentDir, ".claude", "skills");
+        const provSkillsDir = join36(agentDir, ".claude", "skills");
         if (existsSync15(provSkillsDir)) {
           for (const folder of readdirSync9(provSkillsDir)) {
             if (folder.startsWith("knowledge-")) {
               try {
-                rmSync5(join35(provSkillsDir, folder), { recursive: true });
+                rmSync5(join36(provSkillsDir, folder), { recursive: true });
               } catch {
               }
             }
@@ -14896,7 +14920,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const trackedFiles2 = frameworkAdapter.driftTrackedFiles();
       const hashes = /* @__PURE__ */ new Map();
       for (const file of trackedFiles2) {
-        const h = hashFile(join35(agentDir, file));
+        const h = hashFile(join36(agentDir, file));
         if (h) hashes.set(file, h);
       }
       agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -14914,14 +14938,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
     if (Array.isArray(refreshData.workflows)) {
       try {
-        const provWorkflowsDir = join35(agentDir, ".claude", "workflows");
+        const provWorkflowsDir = join36(agentDir, ".claude", "workflows");
         if (existsSync15(provWorkflowsDir)) {
           const expected = new Set(refreshData.workflows.map((w) => `${w.name}.js`));
           for (const file of readdirSync9(provWorkflowsDir)) {
             if (!file.endsWith(".js")) continue;
             if (expected.has(file)) continue;
             try {
-              rmSync5(join35(provWorkflowsDir, file));
+              rmSync5(join36(provWorkflowsDir, file));
             } catch {
             }
           }
@@ -15003,7 +15027,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   if (written && existsSync15(agentDir)) {
     const driftedFiles = [];
     for (const [file, expectedHash] of written) {
-      const localHash = hashFile(join35(agentDir, file));
+      const localHash = hashFile(join36(agentDir, file));
       if (localHash && localHash !== expectedHash) {
         driftedFiles.push(file);
       }
@@ -15014,7 +15038,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       try {
         const localHashes = {};
         for (const file of driftedFiles) {
-          localHashes[file] = hashFile(join35(agentDir, file));
+          localHashes[file] = hashFile(join36(agentDir, file));
         }
         await api.post("/host/drift", {
           agent_id: agent.agent_id,
@@ -15216,7 +15240,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     const addedChannels = [...restartDecision.added];
     const writeDmNoticeMarkers = isChannelAddRestart ? () => {
       try {
-        const agentAugmentedDir = join35(homedir17(), ".augmented", agent.code_name);
+        const agentAugmentedDir = join36(homedir17(), ".augmented", agent.code_name);
         mkdirSync11(agentAugmentedDir, { recursive: true });
         const markerJson = JSON.stringify({
           version: 1,
@@ -15224,7 +15248,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           added: addedChannels
         });
         for (const file of ["slack-channel-add-restart.json", "telegram-channel-add-restart.json"]) {
-          atomicWriteFileSync(join35(agentAugmentedDir, file), markerJson);
+          atomicWriteFileSync(join36(agentAugmentedDir, file), markerJson);
         }
       } catch (err) {
         log(`[hot-reload] channel-add DM-notice marker write failed for '${agent.code_name}' (non-fatal): ${err.message}`);
@@ -15413,18 +15437,18 @@ async function processAgent(agent, agentStates, managedToolkits) {
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code") {
     try {
       const agentProvisionDir = agentDir;
-      const projectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
+      const projectDir = join36(homedir17(), ".augmented", agent.code_name, "project");
       mkdirSync11(agentProvisionDir, { recursive: true });
       mkdirSync11(projectDir, { recursive: true });
-      const provisionMcpPath = join35(agentProvisionDir, ".mcp.json");
-      const projectMcpPath = join35(projectDir, ".mcp.json");
+      const provisionMcpPath = join36(agentProvisionDir, ".mcp.json");
+      const projectMcpPath = join36(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
       try {
         mcpConfig = JSON.parse(readFileSync28(provisionMcpPath, "utf-8"));
         if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
       } catch {
       }
-      const localDirectChatChannel = join35(homedir17(), ".augmented", "_mcp", "direct-chat-channel.js");
+      const localDirectChatChannel = join36(homedir17(), ".augmented", "_mcp", "direct-chat-channel.js");
       const directChatTeamSettings = refreshData.team?.settings;
       const directChatTz = (() => {
         const tz = directChatTeamSettings?.["timezone"];
@@ -15450,7 +15474,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           // ~/.augmented/<codeName>/.current-turn-initiator.json. Note getAgentDir
           // returns the agent root (NOT the /provision subdir `agentDir` points at),
           // so it byte-matches the broker readers' path.
-          AGT_TURN_INITIATOR_FILE: join35(
+          AGT_TURN_INITIATOR_FILE: join36(
             frameworkAdapter.getAgentDir(agent.code_name),
             ".current-turn-initiator.json"
           )
@@ -15470,7 +15494,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           log(`Channel credentials written for '${agent.code_name}/direct-chat'`);
         }
       }
-      const staleChannelsPath = join35(projectDir, ".mcp-channels.json");
+      const staleChannelsPath = join36(projectDir, ".mcp-channels.json");
       if (existsSync15(staleChannelsPath)) {
         try {
           rmSync5(staleChannelsPath, { force: true });
@@ -15560,7 +15584,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
     if (hostFlagStore().getBoolean("connectivity-probe")) {
       try {
-        const probeProjectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join36(homedir17(), ".augmented", agent.code_name, "project");
         let probeSet = integrations;
         try {
           const quarantined = await api.post("/host/agent-integrations/quarantined", { agent_id: agent.agent_id });
@@ -15606,7 +15630,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const forceDue = attemptsLeft > 0;
       let probeRan = false;
       try {
-        const probeProjectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join36(homedir17(), ".augmented", agent.code_name, "project");
         probeRan = await runAgentSessionToolBindProbes(agent, integrations, probeProjectDir, { forceDue });
       } catch (err) {
         log(`Session-tool-bind probe failed for '${agent.code_name}': ${err.message}`);
@@ -15683,8 +15707,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);
       if (intHash !== prevIntHash) {
-        const projectDir = join35(homedir17(), ".augmented", agent.code_name, "project");
-        const envIntPath = join35(projectDir, ".env.integrations");
+        const projectDir = join36(homedir17(), ".augmented", agent.code_name, "project");
+        const envIntPath = join36(projectDir, ".env.integrations");
         let preWriteEnv;
         try {
           preWriteEnv = readFileSync28(envIntPath, "utf-8");
@@ -15706,7 +15730,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
-            const projectMcpPath = join35(projectDir, ".mcp.json");
+            const projectMcpPath = join36(projectDir, ".mcp.json");
             const postWriteEnv = readFileSync28(envIntPath, "utf-8");
             const mcpContent = readFileSync28(projectMcpPath, "utf-8");
             const changedVars = diffEnvIntegrations(preWriteEnv, postWriteEnv);
@@ -15976,12 +16000,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
         const frameworkId2 = frameworkAdapter.id;
         const candidateSkillDirs = [
           // Claude Code — framework runtime tree
-          join35(homedir18(), ".augmented", agent.code_name, "skills"),
+          join36(homedir18(), ".augmented", agent.code_name, "skills"),
           // Claude Code — project tree
-          join35(homedir18(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+          join36(homedir18(), ".augmented", agent.code_name, "project", ".claude", "skills"),
           // Defensive: legacy provision-side path, not currently an
           // install target but cheap to sweep.
-          join35(agentDir, ".claude", "skills")
+          join36(agentDir, ".claude", "skills")
         ];
         const existingDirs = candidateSkillDirs.filter((d) => existsSync15(d));
         const discoveredEntries = /* @__PURE__ */ new Set();
@@ -16022,7 +16046,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         const sharedSkillsPayload = refreshAny.shared_skills;
         const desiredResolved = globalSkillsPayload !== void 0 || sharedSkillsPayload !== void 0;
         const manifestPath = managedSkillManifestPath(
-          join35(homedir17(), ".augmented", agent.code_name)
+          join36(homedir17(), ".augmented", agent.code_name)
         );
         const prevIds = /* @__PURE__ */ new Set([
           ...agentState.knownGlobalSkillIds.get(agent.agent_id) ?? /* @__PURE__ */ new Set(),
@@ -16042,15 +16066,15 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
         if (plan.removes.length) {
           const globalSkillDirs = [
-            join35(homedir17(), ".augmented", agent.code_name, "skills"),
-            join35(homedir17(), ".augmented", agent.code_name, "project", ".claude", "skills"),
-            join35(agentDir, ".claude", "skills")
+            join36(homedir17(), ".augmented", agent.code_name, "skills"),
+            join36(homedir17(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+            join36(agentDir, ".claude", "skills")
           ];
           for (const id of plan.removes) {
             let prunedAny = false;
             for (const dir of globalSkillDirs) {
-              const p = join35(dir, id);
-              if (existsSync15(p) && existsSync15(join35(p, "SKILL.md"))) {
+              const p = join36(dir, id);
+              if (existsSync15(p) && existsSync15(join36(p, "SKILL.md"))) {
                 rmSync5(p, { recursive: true, force: true });
                 prunedAny = true;
               }
@@ -16282,7 +16306,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
         const sess = getSessionState(agent.code_name);
         let mcpJsonParsed = null;
         try {
-          const mcpPath = join35(getProjectDir(agent.code_name), ".mcp.json");
+          const mcpPath = join36(getProjectDir(agent.code_name), ".mcp.json");
           mcpJsonParsed = JSON.parse(readFileSync28(mcpPath, "utf-8"));
         } catch {
         }
@@ -16717,7 +16741,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
   if (trackedFiles.length > 0 && existsSync15(agentDir)) {
     const hashes = /* @__PURE__ */ new Map();
     for (const file of trackedFiles) {
-      const h = hashFile(join35(agentDir, file));
+      const h = hashFile(join36(agentDir, file));
       if (h) hashes.set(file, h);
     }
     agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -16732,7 +16756,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
         refreshData.agent.onboarding_state
       );
       const obStep = obState.step;
-      const markerPath = join35(homedir17(), ".augmented", agent.code_name, "onboarding-drive.json");
+      const markerPath = join36(homedir17(), ".augmented", agent.code_name, "onboarding-drive.json");
       const marker = readOnboardingDriveMarker(markerPath);
       const obContactRaw = refreshData.agent.manager_last_contacted_at;
       const obContact = typeof obContactRaw === "string" && obContactRaw ? obContactRaw : null;
@@ -16834,7 +16858,7 @@ async function ensureOpencodeRuntime(agent, refreshData, agentTimezone) {
   }
   stopOpencodeSlackIngest(codeName, log);
   stopOpencodeTelegramIngest(codeName, log);
-  const opencodeProjectDir = join35(getFramework("opencode").getAgentDir(codeName), "provision");
+  const opencodeProjectDir = join36(getFramework("opencode").getAgentDir(codeName), "provision");
   const serveEnv = {
     AGT_HOST: requireHost(),
     AGT_API_KEY: getApiKey() ?? void 0,
@@ -16889,8 +16913,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     });
   }
   const projectDir = getProjectDir(codeName);
-  const mcpConfigPath = join35(projectDir, ".mcp.json");
-  const claudeMdPath = join35(projectDir, "CLAUDE.md");
+  const mcpConfigPath = join36(projectDir, ".mcp.json");
+  const claudeMdPath = join36(projectDir, "CLAUDE.md");
   if (restartBreaker.isTripped(codeName)) {
     const trip = restartBreaker.getTrip(codeName);
     return {
@@ -17927,7 +17951,7 @@ async function processDirectChatMessageOpencode(agent, msg) {
         body
       });
       recordCursorAdvanceOutcome(
-        dirname9(paneLogPath(agent.codeName)),
+        dirname10(paneLogPath(agent.codeName)),
         "direct-chat-manager",
         "reply",
         verdict
@@ -17957,7 +17981,7 @@ async function processDirectChatMessageOpencode(agent, msg) {
     } catch (err) {
       if (!recorded) {
         recordCursorAdvanceOutcome(
-          dirname9(paneLogPath(agent.codeName)),
+          dirname10(paneLogPath(agent.codeName)),
           "direct-chat-manager",
           "reply",
           { outcome: "failed", error: err.message, expected: 1 }
@@ -18009,7 +18033,7 @@ async function processDirectChatMessage(agent, msg) {
     if (useDoorbell) {
       try {
         const doorbell = directChatDoorbellPath(agent.agentId, homedir17());
-        mkdirSync11(dirname9(doorbell), { recursive: true });
+        mkdirSync11(dirname10(doorbell), { recursive: true });
         writeFileSync14(doorbell, String(Date.now()));
         log(`[direct-chat] Doorbell rung for '${agent.codeName}' (msg=${msg.id}) \u2014 in-session MCP will pull via the cursor`);
         return;
@@ -18138,7 +18162,7 @@ ${formatRunMarker(run_id)}` : KANBAN_CHECK_COMMAND;
   if (run_id) openInjectedRunByCode.set(codeName, run_id);
   try {
     const doorbell = directChatDoorbellPath(agentId, homedir17());
-    mkdirSync11(dirname9(doorbell), { recursive: true });
+    mkdirSync11(dirname10(doorbell), { recursive: true });
     writeFileSync14(doorbell, String(Date.now()));
   } catch (err) {
     log(`[kanban] doorbell ring failed for '${codeName}': ${err.message} (notice still queued)`);
@@ -18497,8 +18521,8 @@ function parseMemoryFile(raw, fallbackName) {
   };
 }
 async function syncMemories(agent, configDir, log2) {
-  const projectDir = join35(configDir, agent.code_name, "project");
-  const memoryDir = join35(projectDir, "memory");
+  const projectDir = join36(configDir, agent.code_name, "project");
+  const memoryDir = join36(projectDir, "memory");
   const isFreshSync = pendingFreshMemorySync.has(agent.agent_id);
   if (isFreshSync) {
     log2(`[memory-sync] Fresh-sync requested for '${agent.code_name}' \u2014 pulling DB first`);
@@ -18516,7 +18540,7 @@ async function syncMemories(agent, configDir, log2) {
     for (const file of readdirSync9(memoryDir)) {
       if (!file.endsWith(".md")) continue;
       try {
-        const raw = readFileSync28(join35(memoryDir, file), "utf-8");
+        const raw = readFileSync28(join36(memoryDir, file), "utf-8");
         const fileHash = createHash17("sha256").update(raw).digest("hex").slice(0, 16);
         currentHashes.set(file, fileHash);
         if (prevHashes.get(file) === fileHash) continue;
@@ -18541,7 +18565,7 @@ async function syncMemories(agent, configDir, log2) {
       } catch (err) {
         for (const mem of changedMemories) {
           for (const [file] of currentHashes) {
-            const parsed = parseMemoryFile(readFileSync28(join35(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
+            const parsed = parseMemoryFile(readFileSync28(join36(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
             if (parsed?.name === mem.name) currentHashes.delete(file);
           }
         }
@@ -18576,7 +18600,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
         const mem = dbMemories.memories[i];
         const rawSlug = mem.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "").slice(0, 60);
         const slug = rawSlug || `memory-${i}`;
-        const filePath = join35(memoryDir, `${slug}.md`);
+        const filePath = join36(memoryDir, `${slug}.md`);
         const desired = `---
 name: ${JSON.stringify(mem.name)}
 type: ${mem.type}
@@ -18906,7 +18930,7 @@ function startManager(opts) {
     log(`[startup] state rehydration failed (continuing with empty state): ${err.message}`);
   }
   log(
-    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join35(homedir17(), ".augmented", "manager.log")}`
+    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join36(homedir17(), ".augmented", "manager.log")}`
   );
   deployMcpAssets();
   reapOrphanChannelMcps({ log });
@@ -19032,18 +19056,18 @@ function restartRunningChannelMcps(basenames) {
   }
 }
 function deployMcpAssets() {
-  const targetDir = join35(homedir17(), ".augmented", "_mcp");
+  const targetDir = join36(homedir17(), ".augmented", "_mcp");
   mkdirSync11(targetDir, { recursive: true });
-  const moduleDir = dirname9(fileURLToPath(import.meta.url));
+  const moduleDir = dirname10(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
-    const candidate = join35(dir, "dist", "mcp");
-    if (existsSync15(join35(candidate, "index.js"))) {
+    const candidate = join36(dir, "dist", "mcp");
+    if (existsSync15(join36(candidate, "index.js"))) {
       mcpSourceDir = candidate;
       break;
     }
-    const parent = dirname9(dir);
+    const parent = dirname10(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -19128,13 +19152,13 @@ function deployMcpAssets() {
     // needs restarting to pick up a token rotation.
     "xero.js"
   ]) {
-    const src = join35(mcpSourceDir, file);
-    const dst = join35(targetDir, file);
+    const src = join36(mcpSourceDir, file);
+    const dst = join36(targetDir, file);
     if (!existsSync15(src)) continue;
     attemptedFiles.push(file);
     const before = fileHash(dst);
     try {
-      copyFileSync(src, dst);
+      atomicCopyFileSync(src, dst);
       const after = fileHash(dst);
       if (before !== after && RESTARTABLE_CHANNEL_FILES.has(file)) {
         changedBasenames.push(file.replace(/\.js$/, ""));
@@ -19155,14 +19179,14 @@ function deployMcpAssets() {
     log(`[manager] Bundle(s) updated: ${changedBasenames.join(", ")} \u2014 signalling running instances to restart`);
     restartRunningChannelMcps(changedBasenames);
   }
-  const localMcpPath = join35(targetDir, "index.js");
+  const localMcpPath = join36(targetDir, "index.js");
   try {
-    const agentsDir = join35(homedir17(), ".augmented", "agents");
+    const agentsDir = join36(homedir17(), ".augmented", "agents");
     if (existsSync15(agentsDir)) {
       for (const entry of readdirSync9(agentsDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         for (const subdir of ["provision", "project"]) {
-          const mcpJsonPath = join35(agentsDir, entry.name, subdir, ".mcp.json");
+          const mcpJsonPath = join36(agentsDir, entry.name, subdir, ".mcp.json");
           try {
             const raw = readFileSync28(mcpJsonPath, "utf-8");
             if (!raw.includes("@integrity-labs/augmented-mcp")) continue;