@integrity-labs/agt-cli 0.28.836 → 0.28.838

package/dist/mcp/index.js

@@ -3596,49 +3596,49 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative, options, skipNormalization) {
+    function resolveComponent(base, relative2, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse3(serialize(base, options), options);
-        relative = parse3(serialize(relative, options), options);
+        relative2 = parse3(serialize(relative2, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative.scheme) {
-        target.scheme = relative.scheme;
-        target.userinfo = relative.userinfo;
-        target.host = relative.host;
-        target.port = relative.port;
-        target.path = removeDotSegments(relative.path || "");
-        target.query = relative.query;
+      if (!options.tolerant && relative2.scheme) {
+        target.scheme = relative2.scheme;
+        target.userinfo = relative2.userinfo;
+        target.host = relative2.host;
+        target.port = relative2.port;
+        target.path = removeDotSegments(relative2.path || "");
+        target.query = relative2.query;
       } else {
-        if (relative.userinfo !== void 0 || relative.host !== void 0 || relative.port !== void 0) {
-          target.userinfo = relative.userinfo;
-          target.host = relative.host;
-          target.port = relative.port;
-          target.path = removeDotSegments(relative.path || "");
-          target.query = relative.query;
+        if (relative2.userinfo !== void 0 || relative2.host !== void 0 || relative2.port !== void 0) {
+          target.userinfo = relative2.userinfo;
+          target.host = relative2.host;
+          target.port = relative2.port;
+          target.path = removeDotSegments(relative2.path || "");
+          target.query = relative2.query;
         } else {
-          if (!relative.path) {
+          if (!relative2.path) {
             target.path = base.path;
-            if (relative.query !== void 0) {
-              target.query = relative.query;
+            if (relative2.query !== void 0) {
+              target.query = relative2.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative.path[0] === "/") {
-              target.path = removeDotSegments(relative.path);
+            if (relative2.path[0] === "/") {
+              target.path = removeDotSegments(relative2.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative.path;
+                target.path = "/" + relative2.path;
               } else if (!base.path) {
-                target.path = relative.path;
+                target.path = relative2.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative2.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative.query;
+            target.query = relative2.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -3646,7 +3646,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative.fragment;
+      target.fragment = relative2.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -11591,10 +11591,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep2, value } = collItem;
+        const { start, key, sep: sep3, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep2?.[0],
+          next: key ?? sep3?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -11608,7 +11608,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep2) {
+          if (!keyProps.anchor && !keyProps.tag && !sep3) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -11632,7 +11632,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -11648,7 +11648,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep2, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -11739,7 +11739,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep2 = "";
+        let sep3 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -11753,13 +11753,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep2 + cb;
-              sep2 = "";
+                comment += sep3 + cb;
+              sep3 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep2 += source;
+                sep3 += source;
               hasSpace = true;
               break;
             default:
@@ -11802,18 +11802,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i = 0; i < fc.items.length; ++i) {
         const collItem = fc.items[i];
-        const { start, key, sep: sep2, value } = collItem;
+        const { start, key, sep: sep3, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep2?.[0],
+          next: key ?? sep3?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep2 && !value) {
+          if (!props.anchor && !props.tag && !sep3 && !value) {
             if (i === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i < fc.items.length - 1)
@@ -11867,8 +11867,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep2 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep2, null, props, onError);
+        if (!isMap && !sep3 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -11880,7 +11880,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep3 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -11891,8 +11891,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep2)
-                for (const st of sep2) {
+              if (sep3)
+                for (const st of sep3) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -11909,7 +11909,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep2, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -12089,7 +12089,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i + 1;
       }
       let value = "";
-      let sep2 = "";
+      let sep3 = "";
       let prevMoreIndented = false;
       for (let i = 0; i < contentStart; ++i)
         value += lines[i][0].slice(trimIndent) + "\n";
@@ -12106,24 +12106,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep2 + indent.slice(trimIndent) + content;
-          sep2 = "\n";
+          value += sep3 + indent.slice(trimIndent) + content;
+          sep3 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep2 === " ")
-            sep2 = "\n";
-          else if (!prevMoreIndented && sep2 === "\n")
-            sep2 = "\n\n";
-          value += sep2 + indent.slice(trimIndent) + content;
-          sep2 = "\n";
+          if (sep3 === " ")
+            sep3 = "\n";
+          else if (!prevMoreIndented && sep3 === "\n")
+            sep3 = "\n\n";
+          value += sep3 + indent.slice(trimIndent) + content;
+          sep3 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep2 === "\n")
+          if (sep3 === "\n")
             value += "\n";
           else
-            sep2 = "\n";
+            sep3 = "\n";
         } else {
-          value += sep2 + content;
-          sep2 = " ";
+          value += sep3 + content;
+          sep3 = " ";
           prevMoreIndented = false;
         }
       }
@@ -12305,25 +12305,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep2 = " ";
+      let sep3 = " ";
       let pos = first.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep2 === "\n")
-            res += sep2;
+          if (sep3 === "\n")
+            res += sep3;
           else
-            sep2 = "\n";
+            sep3 = "\n";
         } else {
-          res += sep2 + match[1];
-          sep2 = " ";
+          res += sep3 + match[1];
+          sep3 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep2 + (match?.[1] ?? "");
+      return res + sep3 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -13131,14 +13131,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep2, value }) {
+    function stringifyItem({ start, key, sep: sep3, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep2)
-        for (const st of sep2)
+      if (sep3)
+        for (const st of sep3)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -14288,18 +14288,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep2;
+          let sep3;
           if (scalar.end) {
-            sep2 = scalar.end;
-            sep2.push(this.sourceToken);
+            sep3 = scalar.end;
+            sep3.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep2 = [this.sourceToken];
+            sep3 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep2 }]
+            items: [{ start, key: scalar, sep: sep3 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -14452,15 +14452,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep2 = it.sep;
-                  sep2.push(this.sourceToken);
+                  const sep3 = it.sep;
+                  sep3.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep2 }]
+                    items: [{ start: start2, key, sep: sep3 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -14654,13 +14654,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep2 = fc.end.splice(1, fc.end.length);
-            sep2.push(this.sourceToken);
+            const sep3 = fc.end.splice(1, fc.end.length);
+            sep3.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep2 }]
+              items: [{ start, key: fc, sep: sep3 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -18867,7 +18867,7 @@ var require_filters = __commonJS({
       return r.copySafeness(str, res);
     }
     _exports.indent = indent;
-    function join5(arr, del, attr) {
+    function join7(arr, del, attr) {
       del = del || "";
       if (attr) {
         arr = lib.map(arr, function(v) {
@@ -18876,7 +18876,7 @@ var require_filters = __commonJS({
       }
       return arr.join(del);
     }
-    _exports.join = join5;
+    _exports.join = join7;
     function last(arr) {
       return arr[arr.length - 1];
     }
@@ -20042,9 +20042,9 @@ var require_handler = __commonJS({
         if (this.fsw.closed) {
           return;
         }
-        const dirname2 = sysPath.dirname(file);
+        const dirname3 = sysPath.dirname(file);
         const basename2 = sysPath.basename(file);
-        const parent = this.fsw._getWatchedDir(dirname2);
+        const parent = this.fsw._getWatchedDir(dirname3);
         let prevStats = stats;
         if (parent.has(basename2))
           return;
@@ -20071,7 +20071,7 @@ var require_handler = __commonJS({
                 prevStats = newStats2;
               }
             } catch (error2) {
-              this.fsw._remove(dirname2, basename2);
+              this.fsw._remove(dirname3, basename2);
             }
           } else if (parent.has(basename2)) {
             const at = newStats.atimeMs;
@@ -20335,11 +20335,11 @@ var require_chokidar = __commonJS({
           if (matcher.path === string3)
             return true;
           if (matcher.recursive) {
-            const relative = sysPath.relative(matcher.path, string3);
-            if (!relative) {
+            const relative2 = sysPath.relative(matcher.path, string3);
+            if (!relative2) {
               return false;
             }
-            return !relative.startsWith("..") && !sysPath.isAbsolute(relative);
+            return !relative2.startsWith("..") && !sysPath.isAbsolute(relative2);
           }
           return false;
         };
@@ -21307,11 +21307,11 @@ var require_globals = __commonJS({
         }
       };
     }
-    function _joiner(sep2) {
-      sep2 = sep2 || ",";
+    function _joiner(sep3) {
+      sep3 = sep3 || ",";
       var first = true;
       return function() {
-        var val = first ? "" : sep2;
+        var val = first ? "" : sep3;
         first = false;
         return val;
       };
@@ -21341,8 +21341,8 @@ var require_globals = __commonJS({
         cycler: function cycler() {
           return _cycler(Array.prototype.slice.call(arguments));
         },
-        joiner: function joiner(sep2) {
-          return _joiner(sep2);
+        joiner: function joiner(sep3) {
+          return _joiner(sep3);
         }
       };
     }
@@ -22368,7 +22368,7 @@ var require_nunjucks = __commonJS({
 });
 
 // src/index.ts
-import { mkdtemp, writeFile } from "fs/promises";
+import { writeFile } from "fs/promises";
 import {
   closeSync,
   constants as fsConstants,
@@ -29692,8 +29692,8 @@ function kanbanGetErrorMessage(status, id, fallbackMessage) {
 }
 
 // src/index.ts
-import { homedir as homedir3, tmpdir } from "os";
-import { basename, isAbsolute, join as join4, resolve as pathResolve, sep } from "path";
+import { homedir as homedir3 } from "os";
+import { basename, isAbsolute as isAbsolute2, join as join6, resolve as pathResolve, sep as sep2 } from "path";
 
 // src/host-file-path.ts
 var SKILL_BODY_PATH_MAX_BYTES = 512 * 1024;
@@ -29784,9 +29784,9 @@ function openContained(target, roots, opts) {
     }
   }
 }
-function isContained(candidate, root, sep2) {
+function isContained(candidate, root, sep3) {
   if (candidate === root) return true;
-  const rootWithSep = root.endsWith(sep2) ? root : root + sep2;
+  const rootWithSep = root.endsWith(sep3) ? root : root + sep3;
   return candidate.startsWith(rootWithSep);
 }
 function resolveHostFilePath(toolName, args, opts) {
@@ -29865,6 +29865,72 @@ function resolveHostFilePath(toolName, args, opts) {
   }
 }
 
+// src/artefact-work-dir.ts
+import { mkdir, mkdtemp } from "fs/promises";
+import { existsSync } from "fs";
+import { dirname, join as join2 } from "path";
+
+// ../core/dist/provisioning/frameworks/claudecode/agent-dir-alias.js
+import { isAbsolute, join, relative, sep } from "path";
+var VALID_CODE_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var VALID_AGENT_ID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+var INITIATOR_BASENAME = ".current-turn-initiator.json";
+function isSafeAgentSegment(segment) {
+  return VALID_CODE_NAME.test(segment) || VALID_AGENT_ID.test(segment);
+}
+function initiatorDirSegment(initiatorFile, homeDir) {
+  const rel = relative(join(homeDir, ".augmented"), initiatorFile);
+  if (!rel || isAbsolute(rel))
+    return null;
+  const parts = rel.split(sep);
+  if (parts.length !== 2 || parts[1] !== INITIATOR_BASENAME)
+    return null;
+  const segment = parts[0];
+  if (segment === void 0)
+    return null;
+  return isSafeAgentSegment(segment) ? segment : null;
+}
+function resolveAgentDirAlias(input) {
+  const { codeName, turnInitiatorFile, agentId, homeDir } = input;
+  const codeNameTrimmed = typeof codeName === "string" ? codeName.trim() : "";
+  if (codeNameTrimmed && VALID_CODE_NAME.test(codeNameTrimmed)) {
+    return join(homeDir, ".augmented", codeNameTrimmed);
+  }
+  const initiator = typeof turnInitiatorFile === "string" ? turnInitiatorFile.trim() : "";
+  if (initiator) {
+    const segment = initiatorDirSegment(initiator, homeDir);
+    if (segment)
+      return join(homeDir, ".augmented", segment);
+  }
+  const agentIdTrimmed = typeof agentId === "string" ? agentId.trim() : "";
+  if (agentIdTrimmed && VALID_AGENT_ID.test(agentIdTrimmed)) {
+    return join(homeDir, ".augmented", agentIdTrimmed);
+  }
+  return null;
+}
+function resolveAgentScratchDir(input) {
+  const alias = resolveAgentDirAlias(input);
+  return alias === null ? null : join(alias, "scratch");
+}
+
+// src/artefact-work-dir.ts
+async function makeArtefactWorkDir(prefix, env2) {
+  const scratch = resolveAgentScratchDir(env2);
+  if (scratch === null) {
+    throw new Error(
+      "Cannot save the artefact: none of AGT_AGENT_CODE_NAME, AGT_TURN_INITIATOR_FILE or AGT_AGENT_ID is set, so this server cannot tell which agent directory the file belongs in."
+    );
+  }
+  const agentDir = dirname(scratch);
+  if (!existsSync(agentDir)) {
+    throw new Error(
+      `Cannot save the artefact: the agent directory ${agentDir} does not exist on this host.`
+    );
+  }
+  await mkdir(scratch, { recursive: true });
+  return mkdtemp(join2(scratch, prefix));
+}
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -44642,12 +44708,12 @@ function selectIntegrationsToRefresh(input) {
 }
 
 // src/self-restart.ts
-import { existsSync, mkdirSync, renameSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync, renameSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { join } from "path";
+import { join as join3 } from "path";
 import { randomUUID } from "crypto";
 function restartFlagsDir() {
-  return join(homedir(), ".augmented", "restart-flags");
+  return join3(homedir(), ".augmented", "restart-flags");
 }
 function isSelfRestartEnabled(env2) {
   const raw = (env2.AGT_AGENT_SELF_RESTART_ENABLED ?? "").trim().toLowerCase();
@@ -44658,8 +44724,8 @@ function buildAgentRestartFlag(codeName, reason, nowMs) {
 }
 function writeAgentRestartFlag(codeName, reason, nowMs) {
   const dir = restartFlagsDir();
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-  const path = join(dir, `${codeName}.flag`);
+  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+  const path = join3(dir, `${codeName}.flag`);
   const flag = buildAgentRestartFlag(codeName, reason, nowMs);
   const tmpPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
   writeFileSync(tmpPath, JSON.stringify(flag) + "\n", "utf8");
@@ -44668,18 +44734,18 @@ function writeAgentRestartFlag(codeName, reason, nowMs) {
 }
 
 // src/self-restart-confirm.ts
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync2 } from "fs";
+import { existsSync as existsSync4, readdirSync, readFileSync as readFileSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { join as join4 } from "path";
 
 // src/restart-confirm.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname2 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 var RESTART_CONFIRM_MAX_AGE_MS = 10 * 60 * 1e3;
 function writeRestartConfirmMarker(filePath, marker) {
-  const dir = dirname(filePath);
-  if (!existsSync2(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
+  const dir = dirname2(filePath);
+  if (!existsSync3(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
   const tmpPath = `${filePath}.${process.pid}.${randomUUID2()}.tmp`;
   writeFileSync2(tmpPath, JSON.stringify(marker) + "\n", { encoding: "utf8", mode: 384 });
   renameSync2(tmpPath, filePath);
@@ -44688,7 +44754,7 @@ function writeRestartConfirmMarker(filePath, marker) {
 // src/self-restart-confirm.ts
 var SELF_RESTART_PENDING_FRESHNESS_MS = 5 * 60 * 1e3;
 function selfRestartAgentDir(codeName) {
-  return join2(homedir2(), ".augmented", codeName);
+  return join4(homedir2(), ".augmented", codeName);
 }
 function selectFreshestPending(candidates, nowMs, maxAgeMs) {
   let best = null;
@@ -44701,7 +44767,7 @@ function selectFreshestPending(candidates, nowMs, maxAgeMs) {
   return best;
 }
 function readMarkerDir(dir, toCandidate) {
-  if (!existsSync3(dir)) return [];
+  if (!existsSync4(dir)) return [];
   const out = [];
   let entries;
   try {
@@ -44712,7 +44778,7 @@ function readMarkerDir(dir, toCandidate) {
   for (const entry of entries) {
     if (!entry.endsWith(".json") || entry.endsWith(".tmp")) continue;
     try {
-      const parsed = JSON.parse(readFileSync2(join2(dir, entry), "utf8"));
+      const parsed = JSON.parse(readFileSync2(join4(dir, entry), "utf8"));
       if (!parsed || typeof parsed !== "object") continue;
       const candidate = toCandidate(parsed);
       if (candidate) out.push(candidate);
@@ -44722,7 +44788,7 @@ function readMarkerDir(dir, toCandidate) {
   return out;
 }
 function readPendingCandidates(agentDir) {
-  const slack = readMarkerDir(join2(agentDir, "slack-pending-inbound"), (p2) => {
+  const slack = readMarkerDir(join4(agentDir, "slack-pending-inbound"), (p2) => {
     const channel = p2["channel"];
     if (typeof channel !== "string" || channel.length === 0) return null;
     const threadTs = p2["thread_ts"];
@@ -44730,7 +44796,7 @@ function readPendingCandidates(agentDir) {
     if (typeof threadTs === "string" && threadTs.length > 0) reply["thread_ts"] = threadTs;
     return { source: "slack", receivedAtMs: Date.parse(String(p2["received_at"])), reply };
   });
-  const telegram = readMarkerDir(join2(agentDir, "telegram-pending-inbound"), (p2) => {
+  const telegram = readMarkerDir(join4(agentDir, "telegram-pending-inbound"), (p2) => {
     const chatId = p2["chat_id"];
     if (chatId == null || typeof chatId !== "string" && typeof chatId !== "number") return null;
     const reply = { chat_id: chatId };
@@ -44751,17 +44817,17 @@ function captureSelfRestartConfirm(opts) {
     // human, so buildBackOnlineText degrades to the generic copy.
     reply: best.reply
   };
-  const file = best.source === "slack" ? join2(opts.agentDir, "slack-restart-confirm.json") : join2(opts.agentDir, "telegram-restart-confirm.json");
+  const file = best.source === "slack" ? join4(opts.agentDir, "slack-restart-confirm.json") : join4(opts.agentDir, "telegram-restart-confirm.json");
   writeRestartConfirmMarker(file, marker);
   return best.source;
 }
 
 // ../core/dist/integrations/forwarded-tools-report.js
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join3 } from "path";
+import { join as join5 } from "path";
 var FORWARDED_TOOLS_REPORT_FILENAME = "forwarded-tools.json";
 function forwardedToolsReportPath(agentDir) {
-  return join3(agentDir, FORWARDED_TOOLS_REPORT_FILENAME);
+  return join5(agentDir, FORWARDED_TOOLS_REPORT_FILENAME);
 }
 function writeForwardedToolsReport(agentDir, report) {
   try {
@@ -48250,9 +48316,9 @@ async function forwardToolCall(toolName, args) {
       // root to its canonical form so both sides of the comparison are real
       // paths. Falls back to the unresolved join if the dir is missing, which
       // then simply refuses (there is nothing to read anyway).
-      agentDir: canonicalAgentDir(join4(homedir3(), ".augmented", AGT_AGENT_CODE_NAME)),
+      agentDir: canonicalAgentDir(join6(homedir3(), ".augmented", AGT_AGENT_CODE_NAME)),
       // agent-dir-allow: immediately realpath-resolved to the ADR-0049 agent_id-keyed dir before use as a containment root
-      path: { isAbsolute, resolve: pathResolve, join: join4, sep },
+      path: { isAbsolute: isAbsolute2, resolve: pathResolve, join: join6, sep: sep2 },
       // O_NOFOLLOW is the whole point of opening by flags: the path is already
       // symlink-resolved, so a symlink at the final component means it was
       // swapped after the check, and this turns that into an ELOOP.
@@ -48648,7 +48714,12 @@ async function fetchArtefactRevision(artefactId) {
   }
 }
 async function saveArtefactSourceToFile(artefactId) {
-  const dir = await mkdtemp(join4(tmpdir(), "augmented-artefact-source-"));
+  const dir = await makeArtefactWorkDir("augmented-artefact-source-", {
+    codeName: AGT_AGENT_CODE_NAME,
+    turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
+    agentId: AGT_AGENT_ID,
+    homeDir: homedir3()
+  });
   const readOnce = async () => {
     const before = await fetchArtefactRevision(artefactId);
     const assembled = await assembleArtefactSource(
@@ -48662,7 +48733,7 @@ async function saveArtefactSourceToFile(artefactId) {
   };
   let result = await readOnce();
   if (result.revisionState !== "stable") result = await readOnce();
-  const filePath = join4(dir, safeDownloadName(`${artefactId}.html`, `${artefactId}.html`));
+  const filePath = join6(dir, safeDownloadName(`${artefactId}.html`, `${artefactId}.html`));
   await writeFile(filePath, result.html, "utf8");
   return {
     path: filePath,
@@ -48741,7 +48812,7 @@ async function exportArtefactToFile(dir, artefactId, format, item) {
     return { kind: "pending", jobId: outcome.jobId, retryAfterMs: outcome.retryAfterMs };
   }
   const fallback = `${artefactId}${item !== void 0 ? `-item-${item + 1}` : ""}.${format}`;
-  const filePath = join4(dir, safeDownloadName(outcome.body.filename, fallback));
+  const filePath = join6(dir, safeDownloadName(outcome.body.filename, fallback));
   const buf = Buffer.from(outcome.body.base64, "base64");
   await writeFile(filePath, buf);
   return {
@@ -48764,7 +48835,12 @@ async function resolveItemCountForPng(artefactId) {
   return { count: 1, total: 1 };
 }
 async function downloadArtefactText(params) {
-  const dir = await mkdtemp(join4(tmpdir(), "augmented-artefact-"));
+  const dir = await makeArtefactWorkDir("augmented-artefact-", {
+    codeName: AGT_AGENT_CODE_NAME,
+    turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
+    agentId: AGT_AGENT_ID,
+    homeDir: homedir3()
+  });
   let items;
   let truncatedFrom = null;
   if (params.format === "pdf") {