@coreplane/switchboard 1.201.0 → 1.202.0

package/dist/cli.js

@@ -544,6 +544,9 @@ var init_policy = __esm({
       { action: "deploy:write", resource: "command", when: [grant("deploy:write")] },
       { action: "env:write", resource: "command", when: [grant("env:write")] },
       { action: "setup:write", resource: "command", when: [grant("setup:write")] },
+      // `contract render` reads host paths the caller names: CLI-only, the read
+      // grant by name — no chat baseline holds it.
+      { action: "contract:read", resource: "command", when: [grant("contract:read")] },
       // ── mcp (external MCP servers live in the three config tiers) ────────────
       { action: "mcp:read", resource: "command", when: [grant("mcp:read")] },
       { action: "mcp:write", resource: "command", when: [grant("mcp:write")] },
@@ -1181,6 +1184,301 @@ var init_schedules = __esm({
   }
 });
 
+// ../../src/core/ship/contract.ts
+function parsePlanUnit(planMarkdown, unitId) {
+  const lines = planMarkdown.split("\n");
+  const start2 = lines.findIndex((l) => {
+    const m = UNIT_HEADING.exec(l);
+    return m !== null && m[1] === unitId;
+  });
+  if (start2 < 0) return void 0;
+  let end = lines.findIndex((l, i) => i > start2 && ANY_HEADING.test(l));
+  if (end < 0) end = lines.length;
+  const body = lines.slice(start2, end);
+  while (body.length > 1 && /^\s*$/.test(body[body.length - 1])) body.pop();
+  if (body.length > 1 && /^---\s*$/.test(body[body.length - 1])) body.pop();
+  while (body.length > 1 && /^\s*$/.test(body[body.length - 1])) body.pop();
+  const heading = UNIT_HEADING.exec(body[0]);
+  return { id: heading[1], title: heading[2], section: body.join("\n"), bullets: parseBullets(body.slice(1)) };
+}
+function planUnitIds(planMarkdown) {
+  return planMarkdown.split("\n").map((l) => UNIT_HEADING.exec(l)?.[1]).filter((id) => id !== void 0);
+}
+function bulletSpans(sectionLines) {
+  const spans = [];
+  for (let i = 1; i < sectionLines.length; i++) {
+    const m = BULLET.exec(sectionLines[i]);
+    if (!m) continue;
+    if (spans.length > 0) spans[spans.length - 1].end = i;
+    spans.push({ key: m[1], start: i, end: sectionLines.length });
+  }
+  return spans;
+}
+function bulletBody(lines) {
+  const first = BULLET.exec(lines[0]);
+  const head = first[2] ?? "";
+  const rest = lines.slice(1);
+  while (rest.length > 0 && /^\s*$/.test(rest[rest.length - 1])) rest.pop();
+  if (rest.length === 0) return head.trim();
+  const indent = Math.min(...rest.filter((l) => l.trim() !== "").map((l) => /^\s*/.exec(l)[0].length));
+  const dedented = rest.map((l) => l.slice(Math.min(indent, /^\s*/.exec(l)[0].length)));
+  return [head.trim(), ...dedented].filter((l, i) => i > 0 || l !== "").join("\n");
+}
+function parseBullets(bodyLines) {
+  const withHeading = ["", ...bodyLines];
+  const out = {};
+  for (const span of bulletSpans(withHeading)) out[span.key] = bulletBody(withHeading.slice(span.start, span.end));
+  return out;
+}
+function expandItemList(list) {
+  const out = [];
+  const ranged = /(\d+)\s*(?:–|-|to)\s*(\d+)/g;
+  let rest = list;
+  for (const m of list.matchAll(ranged)) {
+    const from = Number(m[1]);
+    const to = Number(m[2]);
+    if (to >= from && to - from <= 100) for (let n2 = from; n2 <= to; n2++) out.push(n2);
+    rest = rest.replace(m[0], " ");
+  }
+  for (const m of rest.matchAll(/\d+/g)) out.push(Number(m[0]));
+  return out;
+}
+function specNameOf(mention) {
+  const m = /^(?:docs\/reference\/specs\/)?([a-z0-9-]+\.md)$/.exec(mention);
+  return m?.[1];
+}
+function specItemRefs(section) {
+  const seen = /* @__PURE__ */ new Set();
+  const refs = [];
+  const add = (spec, item) => {
+    const key = `${spec}#${item}`;
+    if (seen.has(key)) return;
+    seen.add(key);
+    refs.push({ spec, item });
+  };
+  const named = [];
+  for (const m of section.matchAll(NAMED_REF)) {
+    const spec = m[1] ?? m[2] ?? m[3];
+    named.push({ index: m.index, end: m.index + m[0].length, spec, items: expandItemList(m[4]) });
+  }
+  const mentions = [...section.matchAll(ANY_MD_MENTION)].map((m) => ({ index: m.index, spec: specNameOf(m[0]) }));
+  const bare = [];
+  for (const m of section.matchAll(ITEM_LIST)) {
+    if (named.some((n2) => m.index >= n2.index && m.index < n2.end)) continue;
+    bare.push({ index: m.index, items: expandItemList(m[1]) });
+  }
+  const all = [
+    ...named.map((n2) => ({ index: n2.index, spec: n2.spec, items: n2.items })),
+    ...bare.map((b) => ({
+      index: b.index,
+      spec: mentions.filter((x) => x.index < b.index).at(-1)?.spec,
+      items: b.items
+    }))
+  ].sort((a, b) => a.index - b.index);
+  for (const ref of all) if (ref.spec !== void 0) for (const item of ref.items) add(ref.spec, item);
+  return refs;
+}
+function parseSpecItem(specMarkdown, item) {
+  const lines = specMarkdown.split("\n");
+  const start2 = lines.findIndex((l) => Number(SPEC_ITEM.exec(l)?.[1]) === item);
+  if (start2 < 0) return void 0;
+  let end = lines.findIndex((l, i) => i > start2 && (SPEC_ITEM.test(l) || /^#{1,3} /.test(l)));
+  if (end < 0) end = lines.length;
+  const body = lines.slice(start2, end);
+  while (body.length > 1 && /^\s*$/.test(body[body.length - 1])) body.pop();
+  return body.join("\n");
+}
+function parseValidationRows(specMarkdown) {
+  const rows = [];
+  for (const line2 of specMarkdown.split("\n")) {
+    if (!line2.startsWith("|")) continue;
+    const cells = line2.trim().replace(/^\||\|$/g, "").split(/(?<!\\)\|/).map((c) => c.trim());
+    if (cells.length < 2) continue;
+    if (/^-+$/.test(cells[0]) || cells[0] === "Criterion" && cells[1] === "Proof") continue;
+    rows.push({ criterion: cells[0], proof: cells.slice(1).join(" | ") });
+  }
+  return rows;
+}
+function itemNumbersNamed(criterion) {
+  const out = /* @__PURE__ */ new Set();
+  const lead = /^(\d+(?:\s*[,/]\s*\d+)*)\s*:/.exec(criterion);
+  if (lead) for (const n2 of expandItemList(lead[1])) out.add(n2);
+  for (const m of criterion.matchAll(ITEM_LIST)) for (const n2 of expandItemList(m[1])) out.add(n2);
+  return out;
+}
+function resolveSpecRow(ref, specMarkdown) {
+  if (specMarkdown === void 0) return { ...ref, specRead: false, text: void 0, validation: [] };
+  return {
+    ...ref,
+    specRead: true,
+    text: parseSpecItem(specMarkdown, ref.item),
+    validation: parseValidationRows(specMarkdown).filter((row) => itemNumbersNamed(row.criterion).has(ref.item))
+  };
+}
+function contractFromPlan(input) {
+  const unit = parsePlanUnit(input.planMarkdown, input.unitId);
+  if (!unit) {
+    const ids = planUnitIds(input.planMarkdown);
+    throw new Error(
+      `the plan has no unit ${input.unitId} (its units: ${ids.length > 0 ? ids.join(", ") : "none \u2014 no `### U<n>.` heading"})`
+    );
+  }
+  return {
+    unit,
+    specRows: specItemRefs(unit.section).map((ref) => resolveSpecRow(ref, input.readSpec(ref.spec))),
+    agentRules: input.agentRules,
+    guards: GUARDS,
+    rebase: { branch: input.rebase?.branch, onto: input.rebase?.onto }
+  };
+}
+function unitBody(unit, dropApproach) {
+  const lines = unit.section.split("\n");
+  if (dropApproach) {
+    const span = bulletSpans(lines).find((s) => s.key === "Approach");
+    if (span) lines.splice(span.start, span.end - span.start, APPROACH_DROPPED);
+  }
+  return lines.slice(1).join("\n").trim();
+}
+function hasApproach(unit) {
+  return "Approach" in unit.bullets;
+}
+function renderFirstInstruction(rebase) {
+  const branch = rebase.branch ? `\`${rebase.branch}\`` : "the unit's branch";
+  const onto = rebase.onto ? `\`${rebase.onto}\`` : "the merged parent";
+  return `Rebase ${branch} onto ${onto} before any other work \u2014 the parent unit has merged and the base has moved; the only writes are your own on that branch. A conflict ends the unit: report it as the handoff and stop.`;
+}
+function renderSpecRow(row, dropText) {
+  const head = `#### ${row.spec} item ${row.item}`;
+  if (!row.specRead) return `${head}
+
+(not found: no spec ${row.spec} was readable)`;
+  if (row.text === void 0) return `${head}
+
+(not found: ${row.spec} has no item ${row.item})`;
+  const text = dropText ? `(text dropped \u2014 read item ${row.item} in the spec)` : row.text;
+  const rows = row.validation.length === 0 ? `(no validation row names item ${row.item})` : ["| Criterion | Proof |", "|---|---|", ...row.validation.map((r) => `| ${r.criterion} | ${r.proof} |`)].join(
+    "\n"
+  );
+  return `${head}
+
+${text}
+
+${rows}`;
+}
+function renderSpecRows(rows, dropped) {
+  if (rows.length === 0)
+    return "(none \u2014 the unit names no spec rows; until decided, a unit naming none receives none, not the covering specs' rows by path)";
+  if (dropped.rows) return rows.map((r) => `- ${r.spec} item ${r.item}`).join("\n");
+  return rows.map((r) => renderSpecRow(r, dropped.text)).join("\n\n");
+}
+function renderAgentRules(rules, dropped) {
+  if (!rules) return "(none \u2014 the repository has neither AGENTS.md nor CLAUDE.md)";
+  if (dropped)
+    return `Source: ${rules.file}
+
+(dropped to fit the contract's budget \u2014 read ${rules.file} at the head)`;
+  return `Source: ${rules.file}
+
+${rules.text.trim()}`;
+}
+function renderGuards(guards) {
+  return [
+    "Never weaken a guard: each refuses one class of change, and the review runs them over your range.",
+    ...guards.map((g) => `- \`${g.name}\` \u2014 ${g.refuses}`)
+  ].join("\n");
+}
+function renderContract(contract, opts) {
+  const maxChars = opts.maxChars ?? DEFAULT_CONTRACT_MAX_CHARS;
+  const hasSpecText = contract.specRows.some((r) => r.text !== void 0);
+  const ladder = [
+    { part: "approach", present: hasApproach(contract.unit) },
+    { part: "agentRules", present: contract.agentRules !== void 0 },
+    { part: "specText", present: hasSpecText },
+    { part: "specRows", present: contract.specRows.length > 0 }
+  ];
+  const compose = (dropped2) => {
+    const has = (p) => dropped2.includes(p);
+    const parts = [
+      CONTRACT_HEADING,
+      `${CONTRACT_SECTION_HEADINGS.firstInstruction}
+
+${renderFirstInstruction(contract.rebase)}`,
+      `${CONTRACT_SECTION_HEADINGS.unit} ${contract.unit.id} \u2014 ${contract.unit.title}
+
+${unitBody(contract.unit, has("approach"))}`,
+      `${CONTRACT_SECTION_HEADINGS.specRows}
+
+${renderSpecRows(contract.specRows, { text: has("specText"), rows: has("specRows") })}`,
+      `${CONTRACT_SECTION_HEADINGS.agentRules}
+
+${renderAgentRules(contract.agentRules, has("agentRules"))}`,
+      `${CONTRACT_SECTION_HEADINGS.guards}
+
+${renderGuards(contract.guards)}`
+    ];
+    if (dropped2.length > 0)
+      parts.push(`Cut to fit ${maxChars} characters: ${dropped2.map((p) => DROP_NOTE[p]).join("; ")}.`);
+    return parts.join("\n\n");
+  };
+  const dropped = [];
+  let text = compose(dropped);
+  for (const step of ladder) {
+    if (text.length <= maxChars) break;
+    if (!step.present) continue;
+    dropped.push(step.part);
+    text = compose(dropped);
+  }
+  return { text, chars: text.length, dropped, overBudget: text.length > maxChars };
+}
+var GUARDS, CONTRACT_HEADING, CONTRACT_SECTION_HEADINGS, DEFAULT_CONTRACT_MAX_CHARS, UNIT_HEADING, ANY_HEADING, BULLET, SPEC_MENTION, ITEM_LIST, NAMED_REF, ANY_MD_MENTION, SPEC_ITEM, APPROACH_DROPPED, DROP_NOTE;
+var init_contract = __esm({
+  "../../src/core/ship/contract.ts"() {
+    "use strict";
+    GUARDS = [
+      {
+        name: "specs:check",
+        refuses: "a spec whose `file::describe::it` proof names a test that does not exist, or whose Code/Tests header path is gone \u2014 a test cannot be renamed or deleted out from under its spec row"
+      },
+      {
+        name: "specs:coverage --test-guard",
+        refuses: "a deleted test file, a removed test title or an added skip marker in a test file unless a spec covering that file changes in the same range; a lower assertion count or a rename is printed for the reviewer to dispose of"
+      },
+      {
+        name: "hygiene:check",
+        refuses: "a new imprint in the public tree (a company, a person, a tracker reference, a plan id, a platform id, a date); the recorded list only shrinks"
+      },
+      {
+        name: "decisions:check",
+        refuses: "a record under docs/decisions or docs/plans without a valid status, a superseded one that names no successor, and any edit to an accepted record's body"
+      }
+    ];
+    CONTRACT_HEADING = "## Contract";
+    CONTRACT_SECTION_HEADINGS = {
+      firstInstruction: "### First instruction",
+      unit: "### Unit",
+      specRows: "### Spec rows",
+      agentRules: "### Agent rules",
+      guards: "### Guards"
+    };
+    DEFAULT_CONTRACT_MAX_CHARS = 48e3;
+    UNIT_HEADING = /^### (U\d+)\. (.+?)\s*$/;
+    ANY_HEADING = /^#{2,3} /;
+    BULLET = /^- \*\*([^*]+)\*\*:(?:\s?(.*))?$/;
+    SPEC_MENTION = /`(?:docs\/reference\/specs\/)?([a-z0-9-]+\.md)`|\[([a-z0-9-]+\.md)\]\([^)]*\)|(?<![\w/.-])(?:docs\/reference\/specs\/)?([a-z0-9-]+\.md)(?![\w/])/g;
+    ITEM_LIST = /\b[Ii]tems?\s+(\d+(?:\s*(?:,|and|&|–|-|to|\/)\s*\d+)*)/g;
+    NAMED_REF = new RegExp(`(?:${SPEC_MENTION.source})\\s+(?:\\([^)]*\\)\\s+)?${ITEM_LIST.source}`, "g");
+    ANY_MD_MENTION = /(?<![\w/.-])(?:[\w.-]+\/)*([\w.-]+\.md)(?![\w/])/g;
+    SPEC_ITEM = /^(\d+)\. /;
+    APPROACH_DROPPED = "- **Approach**: (dropped to fit the contract's budget \u2014 read it in the plan)";
+    DROP_NOTE = {
+      approach: "the unit's Approach text was dropped (read it in the plan)",
+      agentRules: "the agent rules were dropped (read the file at the head)",
+      specText: "the spec items' text was dropped (read them in the specs; their proof rows stay)",
+      specRows: "the spec rows' proof rows were dropped too (their names stay above)"
+    };
+  }
+});
+
 // ../../src/agents/registry.ts
 function getAgent(name) {
   const a = AGENTS[name];
@@ -1189,10 +1487,11 @@ function getAgent(name) {
   }
   return a;
 }
-var PR_DESCRIPTION_TEMPLATE, NEVER_MERGE, CODING_SYSTEM, CODING_SYSTEM_RESIDENT, REVIEW_VERDICT_INSTRUCTION, REVIEW_SPEC_CHECK, REVIEW_WHOLE_CHANGE, REVIEW_SYSTEM, REVIEW_SYSTEM_RESIDENT, RESEARCH_SYSTEM, GENERAL_SYSTEM, AGENTS;
+var PR_DESCRIPTION_TEMPLATE, NEVER_MERGE, CONTRACT_HEADINGS_LIST, UNIT_CONTRACT, CODING_SYSTEM, CODING_SYSTEM_RESIDENT, REVIEW_VERDICT_INSTRUCTION, REVIEW_SPEC_CHECK, REVIEW_UNIT_CONTRACT, REVIEW_WHOLE_CHANGE, REVIEW_SYSTEM, REVIEW_SYSTEM_RESIDENT, RESEARCH_SYSTEM, GENERAL_SYSTEM, AGENTS;
 var init_registry = __esm({
   "../../src/agents/registry.ts"() {
     "use strict";
+    init_contract();
     PR_DESCRIPTION_TEMPLATE = `PR description \u2014 submit it with the submit_pr_description tool for EVERY PR (this is the default, not something to wait to be asked for). Switchboard renders the GitHub body from the object you submit, so never author PR-body markdown yourself. Content contract per field (each renders as its own section): prose is unwrapped \u2014 no hard line breaks inside a paragraph. Always hyperlink the triggering issue/request. Never fabricate validation \u2014 state exactly what you ran and the real result. Keep each field concise, not padded.
 EVERY PR includes one that already exists when you push \u2014 opened by a person, by dependabot, or by an earlier run. After EVERY push to such a PR: read its current title and body (\`github_issue_get\` with the PR number works for pull requests; \`gh pr view\` where gh exists), judge them against the change as it now stands at the pushed head, and submit the object that describes the PR as it is NOW \u2014 carry forward what the existing body says that is still true (a dependency bump's release notes belong in whatWhy), add what you changed, and anchor the Tour at the new head. Switchboard replaces the PR's title and body with your rendering. A description that describes an earlier state of its branch is a bug; "it is someone else's PR" is never a reason to leave it.
 - **title**: the PR title \u2014 one line naming the change, specific enough to pick out of a PR list.
@@ -1203,6 +1502,8 @@ EVERY PR includes one that already exists when you push \u2014 opened by a perso
 - **Risks & implications** (\`risks\`): what could break, the blast radius, and any migration/rollout/compatibility concerns (or "none" \u2014 and why).
 - **Validation** (\`validation\`): what you tested and the actual results as { criterion, proof } rows (commands run, pass/fail), plus how the reviewer can verify it themselves; the optional summary line carries the overall result.`;
     NEVER_MERGE = `NEVER merge a pull request and NEVER approve one \u2014 no merge or approve command, no merge/approve API call, no pushing to the default branch. Your deliverable is the pushed branch plus the submitted description; Switchboard's own GitHub writes are the PR open/edit, never an approval or a merge \u2014 a human decides what merges.`;
+    CONTRACT_HEADINGS_LIST = Object.values(CONTRACT_SECTION_HEADINGS).map((h) => `\`${h}\``).join(", ");
+    UNIT_CONTRACT = `UNIT CONTRACT: when your first user turn carries a \`${CONTRACT_HEADING}\` block \u2014 its sub-headings, in this order: ${CONTRACT_HEADINGS_LIST} \u2014 it is the contract for one plan unit, rendered by Switchboard from the plan itself, and it outranks any free-text task beside it. Do its first instruction first: the rebase of the unit's branch onto the merged parent (a conflict ends the unit \u2014 report it and stop; never resolve it by force). Then implement the unit's section as written: every test scenario it lists is added as a test, every spec row it names is updated so its proof binding resolves, the agent rules are followed, and no guard it names is weakened. The review is handed the same block and checks the diff against it: a test scenario the unit listed and the diff did not add is a finding at minor severity \u2014 the same severity as a spec contradiction. Never edit the plan record itself; where the unit is wrong or a criterion could not be proven, say so in your final message.`;
     CODING_SYSTEM = `You are Switchboard's coding agent, operating from a Slack request.
 
 You work inside a dedicated workspace directory with bash, read_file, and write_file tools.
@@ -1224,6 +1525,8 @@ Workflow for shipping a PR:
 
 ${NEVER_MERGE}
 
+${UNIT_CONTRACT}
+
 ${PR_DESCRIPTION_TEMPLATE}
 
 Maintain the user-facing status card with the update_status tool: right after you decide your plan, post it as a checklist (\u25CB pending items), then update it whenever an item starts (\u2731) or finishes (\u2713). Items are short outcomes ("Clone repo and read the diff", "Run the test suite"), never commands. Mark an item \u2713 only after it has actually happened \u2014 never pre-mark reporting/posting steps. This is the only progress the user sees while you work.
@@ -1252,6 +1555,8 @@ Workflow for shipping a change:
 
 ${NEVER_MERGE}
 
+${UNIT_CONTRACT}
+
 ${PR_DESCRIPTION_TEMPLATE}
 
 Maintain the user-facing status card with the update_status tool: right after you decide your plan, post it as a checklist (\u25CB pending items), then update it whenever an item starts (\u2731) or finishes (\u2713). Items are short outcomes ("Implement the fix", "Run the test suite"), never commands. Mark an item \u2713 only after it has actually happened \u2014 never pre-mark reporting/posting steps. This is the only progress the user sees while you work.
@@ -1261,6 +1566,7 @@ Your final message is posted to Slack \u2014 keep it readable, lead with the out
     REVIEW_VERDICT_INSTRUCTION = `VERDICT: before your final message, call the submit_verdict tool exactly once with \`approve\` (no blocking issues \u2014 nits alone are not blocking) or \`request_changes\`, a one-line summary, \`head\` = the output of \`git rev-parse HEAD\` in the checkout you reviewed, and \`findings\` \u2014 every issue you report as a structured entry with a stable id you assign in order (F1, F2, \u2026), a severity of exactly blocking|major|minor|nit, the file (plus line when it points at one), and a one-line title. The findings array is the index of your review: the full explanation of each finding stays in your prose, keyed by the same ids. Switchboard writes the verdict as the first line of the GitHub comment itself and lists the findings under it; a review with no submitted verdict is posted as not approving, so never skip it. An \`approve\` carrying a blocking finding is downgraded to \`request_changes\` \u2014 approve only when nothing blocking remains. Do not write "LGTM" in your own text \u2014 the verdict line carries it.`;
     REVIEW_SPEC_CHECK = `3. SPEC CONTRADICTION CHECK, when the repository has \`docs/reference/specs/\`: list the specs the change touches \u2014 \`npm run --silent specs:coverage -- --changed origin/<base>...HEAD\` (\`<base>\` is the PR's base branch) when the repository's package.json has that script, otherwise match the changed paths against each spec's \`- **Code**:\` / \`- **Tests**:\` header lines (a header path covers itself and everything beneath it). If the command fails for any reason \u2014 dependencies not installed, tsx missing, a cold checkout \u2014 fall back to matching the header lines by hand; never install dependencies or build to make it run. Then read ONLY those specs, never the whole specs tree \u2014 fold the reads into your gather batch where you can. For each touched spec, judge whether the diff contradicts a numbered behavior statement or a validation criterion: code that now does what the spec says it does not, a criterion whose named test the diff removed or retitled, a behavior the diff deleted that the spec still promises. A contradiction is a finding of severity \`minor\` or higher titled \`Spec contradiction \u2014 <spec file> item <n>: <what the code now does vs what the spec says>\`; a spec updated in the same diff to match the code is not a finding. A repository with no \`docs/reference/specs/\` has nothing to check \u2014 skip this step silently.
    3a. TEST GUARD, in the same repositories: run \`npm run --silent specs:coverage -- --changed origin/<base>...HEAD --test-guard\` (fold it into the same batch). It compares every test file the diff touches at the base and at the head and prints one line per thing lost, in two classes. A \`test-guard: <file> \u2014 removed: \u2026\` line is deterministic \u2014 the test file deleted, an it/test/describe title gone with no new title to pair with, a skip/only/todo marker (\`.skip(\`, \`.only(\`, \`xit(\`, \`xdescribe(\`, \`it.todo(\`, \`test.todo(\`) on a test the base ran \u2014 and each one is a finding of severity \`minor\` or higher titled \`Test removed \u2014 <file>: <what>\` whose explanation quotes the guard's line exactly as printed. A \`test-guard: <file> \u2014 check: \u2026\` line is a heuristic \u2014 fewer \`expect(\` calls in the file, a title gone while another arrived (a rename or a split) \u2014 and you dispose of every one of them explicitly in your review, never silently: either "weakened", which makes it a finding at \`minor\`, or "refactor, verification intact" with one clause saying why. A line ending \`\u2014 allowed by <spec>\` is licensed by a spec change in the same diff and is neither; \`test-guard ok\` is nothing to report. If the command fails for any reason, judge the same facts from the diff by hand \u2014 a deleted test file, a removed title, a new skip marker, fewer assertions \u2014 and file each one the diff does not license the same way; never install or build to make it run.`;
+    REVIEW_UNIT_CONTRACT = `   3b. UNIT CONTRACT, when this prompt carries a \`${CONTRACT_HEADING}\` block after the REVIEW TARGET block (its sub-headings, in order: ${CONTRACT_HEADINGS_LIST}): it is what the coding child was handed for this plan unit, rendered by Switchboard from the plan, and the diff is judged against it. Read the unit's Test scenarios and find each one in the diff: a test scenario the unit listed and the diff did not add is a finding of severity \`minor\` titled \`Contract \u2014 test scenario missing: <the scenario>\` \u2014 the same severity as a spec contradiction. For each spec row the block names, check its proof binding resolves in the diff; a named row the diff leaves untouched is disposed of out loud, as in 3a: one clause on why it needed no change, or a finding at \`minor\` titled \`Contract \u2014 spec row not updated: <spec> item <n>\`. A guard the block names that the diff weakens is the guard's own finding (3a). No \`${CONTRACT_HEADING}\` block in this prompt \u2192 nothing to check; skip this step silently.`;
     REVIEW_WHOLE_CHANGE = `   - READ THE WHOLE CHANGE: the REVIEW TARGET block states the PR's size as GitHub reports it (files, +/\u2212) and \`diff_digest\` states the totals of what it covered \u2014 they must agree, and every file the digest lists must be in the diff you read. A tool output ending in \`...[truncated N chars]\` was cut short; when the digest or your diff shows fewer files or lines than the PR, read the rest file by file (\`git diff <base>...HEAD -- <path>\`) until every file is covered. Never judge from a partial diff: Switchboard does not post a verdict whose digest covered less than the PR.`;
     REVIEW_SYSTEM = `You are Switchboard's code review agent, operating from a Slack request.
 
@@ -1276,6 +1582,7 @@ ${REVIEW_WHOLE_CHANGE}
    - if the PR is enormous (>~6k changed lines), print the riskiest files in full (state mutation, auth, concurrency, data deletion, public APIs) and only the diff hunks for the rest \u2014 and say which files you skimmed
 2. ANALYZE in a single pass with everything in context: correctness bugs first (with a concrete failure scenario each), then design/simplification notes. At most 2-3 targeted follow-up reads if a specific caller or callee is load-bearing \u2014 never a general exploration loop.
 ${REVIEW_SPEC_CHECK}
+${REVIEW_UNIT_CONTRACT}
 4. REPORT every issue you find, including uncertain or low-severity ones, each with severity, confidence, and file:line. Order findings most-severe first. If the change looks correct, say so plainly \u2014 do not manufacture findings.
 
 Do NOT post your review to GitHub yourself \u2014 no \`gh pr comment\`, no API call to create a comment. When the review is of a PR, Switchboard posts your final message to that PR automatically by default (as a comment \u2014 never an approval or a merge); just produce the review as your final message. If the request asks not to post (e.g. "don't post" / "slack only"), Switchboard handles that too \u2014 you still only write the review.
@@ -1301,6 +1608,7 @@ ${REVIEW_WHOLE_CHANGE}
    - if the change is enormous (>~6k changed lines), print the riskiest files in full (state mutation, auth, concurrency, data deletion, public APIs) and only the diff hunks for the rest \u2014 and say which files you skimmed
 2. ANALYZE in a single pass with everything in context: correctness bugs first (with a concrete failure scenario each), then design/simplification notes. At most 2-3 targeted follow-up reads if a specific caller or callee is load-bearing \u2014 never a general exploration loop.
 ${REVIEW_SPEC_CHECK}
+${REVIEW_UNIT_CONTRACT}
 4. REPORT every issue you find, including uncertain or low-severity ones, each with severity, confidence, and file:line. Order findings most-severe first. If the change looks correct, say so plainly \u2014 do not manufacture findings.
 
 Do NOT post your review to GitHub yourself \u2014 no API call to create a comment. When the review is of a PR, Switchboard posts your final message to that PR automatically by default (as a comment \u2014 never an approval or a merge); just produce the review as your final message. If the request asks not to post (e.g. "don't post" / "slack only"), Switchboard handles that too \u2014 you still only write the review.
@@ -10151,8 +10459,107 @@ ${quote(current ?? "")}`;
   }
 });
 
-// ../../src/core/commands/deploy.ts
+// ../../src/core/commands/contract.ts
+import { basename, dirname as dirname8, join as join10 } from "node:path";
 import { z as z6 } from "zod";
+function repoRootOfPlan(planPath) {
+  const plans = dirname8(planPath);
+  const docs = dirname8(plans);
+  if (basename(plans) === "plans" && basename(docs) === "docs") return dirname8(docs);
+  return plans;
+}
+function renderOutput(output) {
+  const o = output;
+  const dropped = Array.isArray(o.dropped) && o.dropped.length > 0 ? o.dropped.map(String).join(", ") : "none";
+  const over = o.overBudget === true ? " \u2014 still over the budget" : "";
+  return `${String(o.text)}
+
+(${String(o.chars)} characters; budget ${String(o.maxChars)}; dropped: ${dropped}${over})`;
+}
+function registerContractCommands(registry) {
+  for (const cmd of contractCommands) registry.register(cmd);
+}
+var defineCommand3, SPECS_DIR, RULES_FILES, contractRender, contractCommands;
+var init_contract2 = __esm({
+  "../../src/core/commands/contract.ts"() {
+    "use strict";
+    init_commandRegistry();
+    init_contract();
+    defineCommand3 = commandDefiner();
+    SPECS_DIR = join10("docs", "reference", "specs");
+    RULES_FILES = ["AGENTS.md", "CLAUDE.md"];
+    contractRender = defineCommand3({
+      id: "contract.render",
+      options: z6.object({
+        plan: z6.string().min(1).describe("path of the plan record (docs/plans/<file>.md)"),
+        unit: z6.string().regex(/^U\d+$/, "expected a unit id like U<n>").describe("the unit to render, as its heading spells it (U<n>)"),
+        root: z6.string().min(1).optional().describe("the repository root the specs and rules are read under (default: the root the plan path implies)"),
+        branch: z6.string().min(1).optional().describe("the unit's branch, named in the first instruction"),
+        onto: z6.string().min(1).optional().describe("the merged parent the branch is rebased onto"),
+        maxChars: z6.coerce.number().int().positive().optional().describe(`the rendered block's budget in characters (default ${DEFAULT_CONTRACT_MAX_CHARS})`)
+      }),
+      action: "contract:read",
+      effect: "read",
+      surfaces: { chat: false, mcp: false, http: false },
+      describe: "Render one plan unit's child contract \u2014 its section, the spec rows it names with their proof bindings, the repository's agent rules, the guards \u2014 as the `## Contract` block a coding prompt carries, and measure it.",
+      render: renderOutput,
+      handler: async ({ options, deps }) => {
+        const planMarkdown = await deps.contract.readFile(options.plan);
+        if (planMarkdown === void 0) throw new CommandError("not_found", `plan not found: ${options.plan}`);
+        const root = options.root ?? repoRootOfPlan(options.plan);
+        const unit = parsePlanUnit(planMarkdown, options.unit);
+        const specs = /* @__PURE__ */ new Map();
+        for (const spec of new Set(unit ? specItemRefs(unit.section).map((r) => r.spec) : []))
+          specs.set(spec, await deps.contract.readFile(join10(root, SPECS_DIR, spec)));
+        let agentRules;
+        for (const file of RULES_FILES) {
+          const text = await deps.contract.readFile(join10(root, file));
+          if (text !== void 0) {
+            agentRules = { file, text };
+            break;
+          }
+        }
+        let contract;
+        try {
+          contract = contractFromPlan({
+            planMarkdown,
+            unitId: options.unit,
+            readSpec: (spec) => specs.get(spec),
+            ...agentRules ? { agentRules } : {},
+            rebase: { branch: options.branch, onto: options.onto }
+          });
+        } catch (err2) {
+          throw new CommandError("invalid_input", err2 instanceof Error ? err2.message : String(err2));
+        }
+        const maxChars = options.maxChars ?? DEFAULT_CONTRACT_MAX_CHARS;
+        const rendered = renderContract(contract, { maxChars });
+        return {
+          plan: options.plan,
+          root,
+          unit: { id: contract.unit.id, title: contract.unit.title },
+          specRows: contract.specRows.map((r) => ({
+            spec: r.spec,
+            item: r.item,
+            found: r.text !== void 0,
+            validationRows: r.validation.length
+          })),
+          agentRules: agentRules?.file ?? null,
+          chars: rendered.chars,
+          maxChars,
+          dropped: rendered.dropped,
+          overBudget: rendered.overBudget,
+          text: rendered.text
+        };
+      }
+    });
+    contractCommands = [
+      contractRender
+    ];
+  }
+});
+
+// ../../src/core/commands/deploy.ts
+import { z as z7 } from "zod";
 function toOptions(o, dryRun, affected) {
   return {
     only: o.only,
@@ -10262,7 +10669,7 @@ async function copyImages(copies, account2, deps) {
 function registerDeployCommands(registry) {
   for (const cmd of deployCommands) registry.register(cmd);
 }
-var defineCommand3, workerList, positiveInt, gitRef, deployOptions, planJson, deployPlan, allOptions, copiedImage, listCopies, deployAll, restartOptions, deployRestart, initOptions, deployInit, configOptions, deployConfig, secretNames, secretsOptions, deploySecrets, imagesOptions, deployImages, deployCommands;
+var defineCommand4, workerList, positiveInt, gitRef, deployOptions, planJson, deployPlan, allOptions, copiedImage, listCopies, deployAll, restartOptions, deployRestart, initOptions, deployInit, configOptions, deployConfig, secretNames, secretsOptions, deploySecrets, imagesOptions, deployImages, deployCommands;
 var init_deploy = __esm({
   "../../src/core/commands/deploy.ts"() {
     "use strict";
@@ -10275,16 +10682,16 @@ var init_deploy = __esm({
     init_wranglerTemplate();
     init_secrets();
     init_commandRegistry();
-    defineCommand3 = commandDefiner();
-    workerList = z6.string().transform(
+    defineCommand4 = commandDefiner();
+    workerList = z7.string().transform(
       (s) => s.split(",").map((x) => x.trim()).filter(Boolean)
     ).refine(
       (names) => names.every((n2) => DEPLOY_ORDER.includes(n2)),
       `expected a comma list of Workers (${DEPLOY_ORDER.join(", ")})`
     ).transform((names) => [...new Set(names)]);
-    positiveInt = z6.coerce.number().int().positive();
-    gitRef = z6.string().regex(/^[A-Za-z0-9_./^~@{}][A-Za-z0-9_./^~@{}-]{0,199}$/, "expected a git revision (a sha, tag, branch, or HEAD^)");
-    deployOptions = z6.object({
+    positiveInt = z7.coerce.number().int().positive();
+    gitRef = z7.string().regex(/^[A-Za-z0-9_./^~@{}][A-Za-z0-9_./^~@{}-]{0,199}$/, "expected a git revision (a sha, tag, branch, or HEAD^)");
+    deployOptions = z7.object({
       only: workerList.optional().describe(
         `deploy only these Workers (comma list of ${DEPLOY_ORDER.join(", ")}); with --affected, only those of them that are affected`
       ),
@@ -10303,7 +10710,7 @@ var init_deploy = __esm({
       poll: positiveInt.optional().describe("seconds between preflight retries (default 60)")
     });
     planJson = (plan) => plan;
-    deployPlan = defineCommand3({
+    deployPlan = defineCommand4({
       id: "deploy.plan",
       options: deployOptions,
       action: "deploy:read",
@@ -10319,7 +10726,7 @@ var init_deploy = __esm({
     });
     copiedImage = (c) => ({ kind: c.kind, source: c.source, target: c.target });
     listCopies = (copies) => copies.map((c) => `${c.kind} \u2190 ${c.source}`).join(", ");
-    deployAll = defineCommand3({
+    deployAll = defineCommand4({
       id: "deploy.all",
       options: allOptions,
       action: "deploy:write",
@@ -10370,15 +10777,15 @@ ${formatDeployResults(result.results, result.notAttempted)}`
         return output(result.results, copies, []);
       }
     });
-    restartOptions = z6.object({
-      only: z6.enum(["bot"]).optional().describe("the Worker to restart \u2014 only `bot` has a long-lived container (default bot)"),
+    restartOptions = z7.object({
+      only: z7.enum(["bot"]).optional().describe("the Worker to restart \u2014 only `bot` has a long-lived container (default bot)"),
       force: flag.optional().describe(
         "restart even when the bot cannot be consulted (no JSON on /healthz) \u2014 the fail-closed cases; runs in flight never refuse, they hand off"
       ),
       waitMax: positiveInt.optional().describe("minutes to wait out a refusal (the bot not answering with JSON) before giving up (default 10)"),
       poll: positiveInt.optional().describe("seconds between retries while refused (default 60)")
     });
-    deployRestart = defineCommand3({
+    deployRestart = defineCommand4({
       id: "deploy.restart",
       options: restartOptions,
       action: "deploy:write",
@@ -10419,12 +10826,12 @@ ${formatDeployResults(result.results, result.notAttempted)}`
         };
       }
     });
-    initOptions = z6.object({
+    initOptions = z7.object({
       check: flag.optional().describe(
         "compare only: report each rendered file that differs from the one on disk and fail when any does (the `deploy:check` gate); nothing is written"
       )
     });
-    deployInit = defineCommand3({
+    deployInit = defineCommand4({
       id: "deploy.init",
       options: initOptions,
       action: "deploy:write",
@@ -10471,12 +10878,12 @@ ${formatDeployResults(result.results, result.notAttempted)}`
         return output;
       }
     });
-    configOptions = z6.object({
-      source: z6.string().min(1).optional().describe(
+    configOptions = z7.object({
+      source: z7.string().min(1).optional().describe(
         "read the config from this source instead of the profile's configSource (a path, github://owner/repo/path@ref, or op://Vault/Item/field)"
       )
     });
-    deployConfig = defineCommand3({
+    deployConfig = defineCommand4({
       id: "deploy.config",
       options: configOptions,
       action: "deploy:write",
@@ -10511,21 +10918,21 @@ the bot reads it on its next start: \`deploy restart\``;
         return output;
       }
     });
-    secretNames = z6.string().transform(
+    secretNames = z7.string().transform(
       (s) => s.split(",").map((x) => x.trim()).filter(Boolean)
     ).refine(
       (names) => names.length > 0 && names.every((n2) => /^[A-Z][A-Z0-9_]*$/.test(n2)),
       "expected a comma list of secret names (SCREAMING_SNAKE)"
     ).transform((names) => [...new Set(names)]);
-    secretsOptions = z6.object({
+    secretsOptions = z7.object({
       only: secretNames.optional().describe("put only these secrets (comma list of names from deploy/secrets.manifest.json)")
     });
-    deploySecrets = defineCommand3({
+    deploySecrets = defineCommand4({
       id: "deploy.secrets",
       args: [
         {
           name: "worker",
-          schema: z6.enum(DEPLOY_ORDER),
+          schema: z7.enum(DEPLOY_ORDER),
           describe: `the Worker to provision (${DEPLOY_ORDER.join(", ")})`
         }
       ],
@@ -10587,12 +10994,12 @@ the bot reads it on its next start: \`deploy restart\``;
         return output;
       }
     });
-    imagesOptions = z6.object({
+    imagesOptions = z7.object({
       dryRun: flag.optional().describe(
         "say which images the account registry already holds at the version and which would be copied; nothing is copied"
       )
     });
-    deployImages = defineCommand3({
+    deployImages = defineCommand4({
       id: "deploy.images",
       options: imagesOptions,
       action: "deploy:write",
@@ -10643,25 +11050,25 @@ the bot reads it on its next start: \`deploy restart\``;
 });
 
 // ../../src/core/commands/env.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function registerEnvCommands(registry) {
   for (const cmd of envCommands) registry.register(cmd);
 }
-var defineCommand4, envBootstrap, envCommands;
+var defineCommand5, envBootstrap, envCommands;
 var init_env = __esm({
   "../../src/core/commands/env.ts"() {
     "use strict";
     init_bootstrap();
     init_commandRegistry();
-    defineCommand4 = commandDefiner();
-    envBootstrap = defineCommand4({
+    defineCommand5 = commandDefiner();
+    envBootstrap = defineCommand5({
       id: "env.bootstrap",
-      options: z7.object({
-        env: z7.string().min(1).describe("environment to materialize (UAT only; anything else is refused)"),
-        service: z7.string().min(1).describe("which downstream service's toolchain env to fill"),
+      options: z8.object({
+        env: z8.string().min(1).describe("environment to materialize (UAT only; anything else is refused)"),
+        service: z8.string().min(1).describe("which downstream service's toolchain env to fill"),
         apply: flag.optional().describe("resolve the refs and WRITE the chmod-600 env file (default: dry-run)"),
-        out: z7.string().min(1).optional().describe("env-file path (default .agent-env/<service>.<env>.env)"),
-        manifest: z7.string().min(1).optional().describe(`manifest path (default ${DEFAULT_MANIFEST_PATH})`)
+        out: z8.string().min(1).optional().describe("env-file path (default .agent-env/<service>.<env>.env)"),
+        manifest: z8.string().min(1).optional().describe(`manifest path (default ${DEFAULT_MANIFEST_PATH})`)
       }),
       action: "env:write",
       effect: "write",
@@ -12260,7 +12667,7 @@ var init_selfImprovement = __esm({
 });
 
 // ../../src/core/commands/friction.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 async function ledgerOf(deps) {
   let ledger;
   try {
@@ -12288,7 +12695,7 @@ function inProgressHint(diagnosis, finished) {
 function registerFrictionCommands(registry) {
   for (const cmd of frictionCommands) registry.register(cmd);
 }
-var defineCommand5, positiveInt2, repoSlug, NO_LEDGER_MESSAGE, NO_REPO_MESSAGE, asJson, render, visibleRuns, frictionReport, frictionPropose, frictionAnalyze, frictionCommands;
+var defineCommand6, positiveInt2, repoSlug, NO_LEDGER_MESSAGE, NO_REPO_MESSAGE, asJson, render, visibleRuns, frictionReport, frictionPropose, frictionAnalyze, frictionCommands;
 var init_friction = __esm({
   "../../src/core/commands/friction.ts"() {
     "use strict";
@@ -12299,19 +12706,19 @@ var init_friction = __esm({
     init_runEventLines();
     init_runFriction();
     init_selfImprovement();
-    defineCommand5 = commandDefiner();
-    positiveInt2 = z8.coerce.number().int().positive();
-    repoSlug = z8.string().refine((s) => /^[\w.-]+\/[\w.-]+$/.test(s), "expected an owner/name slug");
+    defineCommand6 = commandDefiner();
+    positiveInt2 = z9.coerce.number().int().positive();
+    repoSlug = z9.string().refine((s) => /^[\w.-]+\/[\w.-]+$/.test(s), "expected an owner/name slug");
     NO_LEDGER_MESSAGE = "Run history is not configured in this deployment (`runHistory`), so there are no recent runs to analyze.";
     NO_REPO_MESSAGE = "Set `selfImprovement.repo` (an `owner/name`) in config.yaml to tell `friction propose` where to file issues.";
     asJson = (r) => r;
     render = (output) => formatSelfImprovementReport(output);
     visibleRuns = (caller) => predicateFor(caller.actor, "runs:read", "run");
-    frictionReport = defineCommand5({
+    frictionReport = defineCommand6({
       id: "friction.report",
       enabledWhen: (caps) => caps.runHistory,
-      options: z8.object({
-        sinceMs: z8.coerce.number().int().nonnegative().optional().describe("only runs finished at or after this epoch ms"),
+      options: z9.object({
+        sinceMs: z9.coerce.number().int().nonnegative().optional().describe("only runs finished at or after this epoch ms"),
         limit: positiveInt2.optional().describe("newest n runs (default: the ledger's retained window)"),
         minRuns: positiveInt2.optional().describe("distinct runs a pattern must recur in (default selfImprovement.minRuns, else 2)")
       }),
@@ -12337,10 +12744,10 @@ var init_friction = __esm({
         });
       }
     });
-    frictionPropose = defineCommand5({
+    frictionPropose = defineCommand6({
       id: "friction.propose",
       enabledWhen: (caps) => caps.runHistory,
-      options: z8.object({
+      options: z9.object({
         dryRun: flag.optional().describe("compute and report everything, file nothing"),
         top: positiveInt2.optional().describe("proposals filed per pass (default selfImprovement.top, else 3)"),
         minRuns: positiveInt2.optional().describe("distinct runs a pattern must recur in (default selfImprovement.minRuns, else 2)"),
@@ -12372,17 +12779,17 @@ var init_friction = __esm({
         }
       }
     });
-    frictionAnalyze = defineCommand5({
+    frictionAnalyze = defineCommand6({
       id: "friction.analyze",
       args: [
         {
           name: "source",
-          schema: z8.string().optional(),
+          schema: z9.string().optional(),
           describe: "a saved run stream: JSON lines of run events or a curl'ed /runs/:id/events SSE capture (default: stdin)"
         }
       ],
-      options: z8.object({
-        slowMs: z8.coerce.number().nonnegative().optional().describe("a tool call slower than this many ms is a slow-tool finding"),
+      options: z9.object({
+        slowMs: z9.coerce.number().nonnegative().optional().describe("a tool call slower than this many ms is a slow-tool finding"),
         inProgress: flag.optional().describe("the capture was taken mid-run: a trailing call without a result is still executing, not a dead run")
       }),
       action: "friction:read",
@@ -12435,7 +12842,7 @@ var init_friction = __esm({
 });
 
 // ../../src/core/commandSurface.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 function camelToKebab(s) {
   return s.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`);
 }
@@ -12507,7 +12914,7 @@ function isBooleanSchema(schema) {
   return false;
 }
 function jsonSchemaOf(schema) {
-  const out = z9.toJSONSchema(unwrap(schema), { io: "input" });
+  const out = z10.toJSONSchema(unwrap(schema), { io: "input" });
   delete out.$schema;
   return out;
 }
@@ -12519,7 +12926,7 @@ function jsonSchemaFor(cmd) {
     if (!acceptsUndefined(arg.schema)) required.push(arg.name);
   }
   if (cmd.options) {
-    const opts = z9.toJSONSchema(cmd.options, { io: "input" });
+    const opts = z10.toJSONSchema(cmd.options, { io: "input" });
     Object.assign(properties, opts.properties ?? {});
     required.push(...opts.required ?? []);
   }
@@ -12731,15 +13138,15 @@ function chatCommandList(commands) {
 function registerHelpCommands(registry) {
   for (const cmd of helpCommands) registry.register(cmd);
 }
-var defineCommand6, DIRECTIVES_HELP, helpShow, helpCommands;
+var defineCommand7, DIRECTIVES_HELP, helpShow, helpCommands;
 var init_help = __esm({
   "../../src/core/commands/help.ts"() {
     "use strict";
     init_commandRegistry();
     init_commandSurface();
-    defineCommand6 = commandDefiner();
+    defineCommand7 = commandDefiner();
     DIRECTIVES_HELP = "`agent:review model:anthropic/claude-opus-5 effort:low look at PR 42` (effort: low | medium | high \u2014 lower = faster turns)";
-    helpShow = defineCommand6({
+    helpShow = defineCommand7({
       id: "help.show",
       action: "help:read",
       effect: "read",
@@ -14503,7 +14910,7 @@ var init_service = __esm({
 });
 
 // ../../src/core/commands/mcp.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 async function serviceOf(deps) {
   const svc = await deps.mcp.service();
   if ("unavailable" in svc) throw new CommandError("unavailable", svc.unavailable);
@@ -14597,7 +15004,7 @@ function renderShow(output) {
 function registerMcpCommands(registry) {
   for (const cmd of MCP_COMMANDS) registry.register(cmd);
 }
-var defineCommand7, serverName, serverUrl, scopeOption, channelOption2, nameArg, mcpList, mcpAdd, mcpConnect, mcpShow, mcpRemove, MCP_COMMANDS;
+var defineCommand8, serverName, serverUrl, scopeOption, channelOption2, nameArg, mcpList, mcpAdd, mcpConnect, mcpShow, mcpRemove, MCP_COMMANDS;
 var init_mcp = __esm({
   "../../src/core/commands/mcp.ts"() {
     "use strict";
@@ -14605,18 +15012,18 @@ var init_mcp = __esm({
     init_service();
     init_authorize();
     init_commandRegistry();
-    defineCommand7 = commandDefiner();
-    serverName = z10.string().refine((s) => MCP_SERVER_NAME_PATTERN.test(s), "expected a slug: lowercase letters, digits, dashes (\u2264 32 chars)");
-    serverUrl = z10.string().refine((s) => /^https?:\/\/\S+$/.test(s), "expected an http(s) URL");
-    scopeOption = z10.enum(["me", "channel", "org"]).optional().describe(
+    defineCommand8 = commandDefiner();
+    serverName = z11.string().refine((s) => MCP_SERVER_NAME_PATTERN.test(s), "expected a slug: lowercase letters, digits, dashes (\u2264 32 chars)");
+    serverUrl = z11.string().refine((s) => /^https?:\/\/\S+$/.test(s), "expected an http(s) URL");
+    scopeOption = z11.enum(["me", "channel", "org"]).optional().describe(
       "whose server: yours (`me`, default), this channel's (`channel`, channel-config rights), or org-wide (`org`, admins)"
     );
-    channelOption2 = z10.string().optional().describe("target channel for `--scope channel` and for `list` (default: the channel you are speaking in)");
+    channelOption2 = z11.string().optional().describe("target channel for `--scope channel` and for `list` (default: the channel you are speaking in)");
     nameArg = { name: "name", schema: serverName, describe: "the server's name (see `mcp list`)" };
-    mcpList = defineCommand7({
+    mcpList = defineCommand8({
       id: "mcp.list",
       enabledWhen: (caps) => caps.mcp,
-      options: z10.object({ channel: channelOption2 }),
+      options: z11.object({ channel: channelOption2 }),
       action: "mcp:read",
       effect: "read",
       describe: "External MCP servers your runs in this channel can use \u2014 org-wide, this channel's, and your own \u2014 with state and agents; never a credential.",
@@ -14628,7 +15035,7 @@ var init_mcp = __esm({
         return { servers };
       }
     });
-    mcpAdd = defineCommand7({
+    mcpAdd = defineCommand8({
       id: "mcp.add",
       enabledWhen: (caps) => caps.mcp,
       args: [
@@ -14638,15 +15045,15 @@ var init_mcp = __esm({
           describe: "a short slug for the server (becomes the tool prefix mcp__<name>__)"
         }
       ],
-      options: z10.object({
+      options: z11.object({
         url: serverUrl.describe("the server's Streamable-HTTP endpoint (https://\u2026/mcp)"),
         scope: scopeOption,
-        agents: z10.string().transform(
+        agents: z11.string().transform(
           (s) => s.split(",").map((a) => a.trim()).filter(Boolean)
         ).optional().describe(
           "comma-separated agents that may use it (default general,research; only org servers may name coding/review/ship)"
         ),
-        auth: z10.enum(["oauth", "bearer", "none"]).optional().describe(
+        auth: z11.enum(["oauth", "bearer", "none"]).optional().describe(
           "how the server authenticates: `oauth` (you sign in on a one-time link), `bearer` (you paste a token on a one-time link), or `none`; omit to detect it from the server"
         ),
         channel: channelOption2
@@ -14671,11 +15078,11 @@ var init_mcp = __esm({
         );
       }
     });
-    mcpConnect = defineCommand7({
+    mcpConnect = defineCommand8({
       id: "mcp.connect",
       enabledWhen: (caps) => caps.mcp,
       args: [nameArg],
-      options: z10.object({ scope: scopeOption, channel: channelOption2 }),
+      options: z11.object({ scope: scopeOption, channel: channelOption2 }),
       action: "mcp:write",
       effect: "write",
       describe: "A fresh one-time link to sign in to an OAuth server or enter (or replace) a bearer server's token \u2014 only you can complete it; it expires in 10 minutes.",
@@ -14689,11 +15096,11 @@ var init_mcp = __esm({
         return await via(() => svc.connect(actor, target, args.name));
       }
     });
-    mcpShow = defineCommand7({
+    mcpShow = defineCommand8({
       id: "mcp.show",
       enabledWhen: (caps) => caps.mcp,
       args: [nameArg],
-      options: z10.object({ scope: scopeOption, channel: channelOption2 }),
+      options: z11.object({ scope: scopeOption, channel: channelOption2 }),
       action: "mcp:read",
       effect: "read",
       describe: "One MCP server's entry plus a live probe of the tools it offers (names, read-only flags); never a credential.",
@@ -14709,11 +15116,11 @@ var init_mcp = __esm({
         return await via(() => svc.show(actor, target, args.name));
       }
     });
-    mcpRemove = defineCommand7({
+    mcpRemove = defineCommand8({
       id: "mcp.remove",
       enabledWhen: (caps) => caps.mcp,
       args: [nameArg],
-      options: z10.object({ scope: scopeOption, channel: channelOption2 }),
+      options: z11.object({ scope: scopeOption, channel: channelOption2 }),
       action: "mcp:write",
       effect: "write",
       describe: "Remove an MCP server you added and its stored credential (yours freely; channel ones need channel-config rights, org-wide ones admin rights).",
@@ -15151,7 +15558,7 @@ var init_llmOutput = __esm({
 });
 
 // ../../src/core/memory/reflection.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 function shouldReflect(input) {
   if (input.agentName !== void 0 && NO_REFLECT_AGENTS.has(input.agentName)) return false;
   return input.toolCalls > 0 || input.historyTurns >= REFLECT_MIN_TURNS;
@@ -15370,7 +15777,7 @@ var init_reflection = __esm({
       "Output raw JSON with no code fence and no prose."
     ].join("\n");
     SUMMARY_INHERITANCE = ["user", "repo", "channel"];
-    REFLECTION_ENVELOPE = jsonOutput(z11.object({ facts: z11.array(z11.unknown()), summary: z11.unknown().optional() }), {
+    REFLECTION_ENVELOPE = jsonOutput(z12.object({ facts: z12.array(z12.unknown()), summary: z12.unknown().optional() }), {
       name: "reflection-envelope"
     });
     SCOPE_KINDS = ["org", "user", "repo", "channel"];
@@ -15602,7 +16009,7 @@ var init_memory = __esm({
 });
 
 // ../../src/core/commands/memory.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function scopeKeyOfMemoryId(id) {
   const m = /^mem:(.+):\d+$/.exec(id);
   return m ? m[1] : void 0;
@@ -15656,18 +16063,18 @@ _(limit ${limit} reached \u2014 there may be more; narrow with words or raise \`
 function registerMemoryCommands(registry) {
   for (const cmd of memoryCommands) registry.register(cmd);
 }
-var defineCommand8, MEMORY_LIST_LIMIT, MEMORY_LIST_MAX_LIMIT, MEMORY_OFF_MESSAGE, memoryId, repoScopeKey, channelScopeKey, isSharedScope, LIST_SCOPES, memoryList, memoryForget, memoryCommands;
+var defineCommand9, MEMORY_LIST_LIMIT, MEMORY_LIST_MAX_LIMIT, MEMORY_OFF_MESSAGE, memoryId, repoScopeKey, channelScopeKey, isSharedScope, LIST_SCOPES, memoryList, memoryForget, memoryCommands;
 var init_memory2 = __esm({
   "../../src/core/commands/memory.ts"() {
     "use strict";
     init_authorize();
     init_commandRegistry();
     init_memory();
-    defineCommand8 = commandDefiner();
+    defineCommand9 = commandDefiner();
     MEMORY_LIST_LIMIT = 20;
     MEMORY_LIST_MAX_LIMIT = 50;
     MEMORY_OFF_MESSAGE = "Memory is off in this deployment (`memory.enabled` is not set), so there is nothing to list or forget.";
-    memoryId = z12.string().refine(
+    memoryId = z13.string().refine(
       (id) => scopeKeyOfMemoryId(id) !== void 0,
       "expected a memory id like mem:<scope>:<n> (see `memory list`)"
     );
@@ -15675,21 +16082,21 @@ var init_memory2 = __esm({
     channelScopeKey = (channelId) => deriveScopeKey("channel", { channelId });
     isSharedScope = (key, keys) => key === keys.org || key.startsWith("repo:") || key.startsWith("channel:");
     LIST_SCOPES = ["me", "org", "repo", "channel", "all"];
-    memoryList = defineCommand8({
+    memoryList = defineCommand9({
       id: "memory.list",
       enabledWhen: (caps) => caps.memory,
       args: [
         {
           name: "query",
-          schema: z12.string().optional(),
+          schema: z13.string().optional(),
           describe: "words a record must mention (whole-token match)",
           rest: true
         }
       ],
-      options: z12.object({
-        scope: z12.enum(LIST_SCOPES).optional().describe("which scopes to list (default all: yours, this repo's, this channel's, and the shared org scope)"),
-        limit: z12.coerce.number().int().min(1).max(MEMORY_LIST_MAX_LIMIT).optional().describe(`records per scope (default ${MEMORY_LIST_LIMIT}, max ${MEMORY_LIST_MAX_LIMIT})`),
-        repo: z12.string().refine((s) => /^[\w.-]+\/[\w.-]+$/.test(s), "expected an owner/name slug").optional().describe("the repo whose scope to list (default: the repo this thread is bound to)")
+      options: z13.object({
+        scope: z13.enum(LIST_SCOPES).optional().describe("which scopes to list (default all: yours, this repo's, this channel's, and the shared org scope)"),
+        limit: z13.coerce.number().int().min(1).max(MEMORY_LIST_MAX_LIMIT).optional().describe(`records per scope (default ${MEMORY_LIST_LIMIT}, max ${MEMORY_LIST_MAX_LIMIT})`),
+        repo: z13.string().refine((s) => /^[\w.-]+\/[\w.-]+$/.test(s), "expected an owner/name slug").optional().describe("the repo whose scope to list (default: the repo this thread is bound to)")
       }),
       action: "memory:read",
       effect: "read",
@@ -15743,7 +16150,7 @@ var init_memory2 = __esm({
         };
       }
     });
-    memoryForget = defineCommand8({
+    memoryForget = defineCommand9({
       id: "memory.forget",
       enabledWhen: (caps) => caps.memory,
       args: [{ name: "id", schema: memoryId, describe: "the record id (`mem:<scope>:<n>`, from `memory list`)" }],
@@ -15878,7 +16285,7 @@ var init_residentDiskBudget = __esm({
 });
 
 // ../../src/core/commands/repo.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 async function adminOf(deps, span) {
   const api = await deps.repo.admin();
   if ("unavailable" in api) throw new CommandError("unavailable", api.unavailable);
@@ -15986,7 +16393,7 @@ ${clipOpOutput(text)}
 \`\`\`` : `${icon} ${str3(o.summary)}`;
 }
 function defineOp(op) {
-  return defineCommand9({
+  return defineCommand10({
     id: `repo.${op}`,
     // The op needs a backend: the resident service, or the local workspace (`defaultOperations`).
     enabledWhen: (caps) => caps.residents || caps.execution === "local",
@@ -16044,7 +16451,7 @@ function defineOp(op) {
 function registerRepoCommands(registry) {
   for (const cmd of repoCommands) registry.register(cmd);
 }
-var defineCommand9, DEFAULT_COMMANDS, DEFAULT_REF, SETTLE_POLL_MS, SETTLE_MAX_MS, repoSlug2, gitRef2, command, slugArg, n, obj, str3, repoList, repoOnboard, COMMAND_KEYS, dryRunOptions, repoOffboard, repoRebuild, repoReconfigure, NO_OPS_BACKEND_MESSAGE, repoTest, repoBuild, repoCommands;
+var defineCommand10, DEFAULT_COMMANDS, DEFAULT_REF, SETTLE_POLL_MS, SETTLE_MAX_MS, repoSlug2, gitRef2, command, slugArg, n, obj, str3, repoList, repoOnboard, COMMAND_KEYS, dryRunOptions, repoOffboard, repoRebuild, repoReconfigure, NO_OPS_BACKEND_MESSAGE, repoTest, repoBuild, repoCommands;
 var init_repo = __esm({
   "../../src/core/commands/repo.ts"() {
     "use strict";
@@ -16052,19 +16459,19 @@ var init_repo = __esm({
     init_residentAdmin();
     init_repoToolchain();
     init_residentDiskBudget();
-    defineCommand9 = commandDefiner();
+    defineCommand10 = commandDefiner();
     DEFAULT_COMMANDS = NPM_FALLBACK_COMMANDS;
     DEFAULT_REF = "main";
     SETTLE_POLL_MS = 1e4;
     SETTLE_MAX_MS = 12 * 6e4;
-    repoSlug2 = z13.string().refine((s) => parseSlug(s) !== void 0, "expected a GitHub owner/name slug").transform((s) => parseSlug(s));
-    gitRef2 = z13.string().refine((s) => validRef(s) !== void 0, "expected a plausible git branch ref (e.g. main)");
-    command = z13.string().min(1);
+    repoSlug2 = z14.string().refine((s) => parseSlug(s) !== void 0, "expected a GitHub owner/name slug").transform((s) => parseSlug(s));
+    gitRef2 = z14.string().refine((s) => validRef(s) !== void 0, "expected a plausible git branch ref (e.g. main)");
+    command = z14.string().min(1);
     slugArg = { name: "slug", schema: repoSlug2, describe: "GitHub owner/name of the repo" };
     n = (v) => String(typeof v === "number" ? v : v ?? "?");
     obj = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : {};
     str3 = (v) => typeof v === "string" ? v : String(v ?? "?");
-    repoList = defineCommand9({
+    repoList = defineCommand10({
       id: "repo.list",
       enabledWhen: (caps) => caps.residents,
       action: "repo:read",
@@ -16081,11 +16488,11 @@ var init_repo = __esm({
         return res.data;
       }
     });
-    repoOnboard = defineCommand9({
+    repoOnboard = defineCommand10({
       id: "repo.onboard",
       enabledWhen: (caps) => caps.residents,
       args: [slugArg],
-      options: z13.object({
+      options: z14.object({
         ref: gitRef2.optional().describe(`default branch to keep warm (default ${DEFAULT_REF})`),
         test: command.optional().describe(
           "the repo's test command (default: detected from the repo root \u2014 `<pm> test`, or a no-op without a test script)"
@@ -16172,10 +16579,10 @@ var init_repo = __esm({
       settle: (output, { deps }) => settleProvisioning(deps, str3(output.slug))
     });
     COMMAND_KEYS = ["install", "build", "test"];
-    dryRunOptions = z13.object({
+    dryRunOptions = z14.object({
       dryRun: flag.optional().describe("compute and return the itemized plan without executing")
     });
-    repoOffboard = defineCommand9({
+    repoOffboard = defineCommand10({
       id: "repo.offboard",
       enabledWhen: (caps) => caps.residents,
       args: [slugArg],
@@ -16209,7 +16616,7 @@ var init_repo = __esm({
         return { ...r.data, slug: args.slug, dryRun };
       }
     });
-    repoRebuild = defineCommand9({
+    repoRebuild = defineCommand10({
       id: "repo.rebuild",
       enabledWhen: (caps) => caps.residents,
       args: [slugArg],
@@ -16248,11 +16655,11 @@ var init_repo = __esm({
         return { ...r.data, slug: args.slug, dryRun };
       }
     });
-    repoReconfigure = defineCommand9({
+    repoReconfigure = defineCommand10({
       id: "repo.reconfigure",
       enabledWhen: (caps) => caps.residents,
       args: [slugArg],
-      options: z13.object({
+      options: z14.object({
         ref: gitRef2.optional().describe("new default branch"),
         test: command.optional().describe("new test command"),
         build: command.optional().describe("new build command"),
@@ -17479,7 +17886,7 @@ var init_runsService = __esm({
 });
 
 // ../../src/core/commands/review.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 function artifactJson(a) {
   return {
     ...a.model !== void 0 ? { model: a.model } : {},
@@ -17548,7 +17955,7 @@ function refused2(err2) {
 function registerReviewCommands(registry) {
   for (const cmd of reviewCommands) registry.register(cmd);
 }
-var defineCommand10, runId, ABRIDGE_OFF_MESSAGE, reviewAbridge, reviewCommands;
+var defineCommand11, runId, ABRIDGE_OFF_MESSAGE, reviewAbridge, reviewCommands;
 var init_review = __esm({
   "../../src/core/commands/review.ts"() {
     "use strict";
@@ -17557,17 +17964,17 @@ var init_review = __esm({
     init_reviewAbridge();
     init_runRecord();
     init_runsService();
-    defineCommand10 = commandDefiner();
-    runId = z14.string().regex(RUN_ID_PATTERN);
+    defineCommand11 = commandDefiner();
+    runId = z15.string().regex(RUN_ID_PATTERN);
     ABRIDGE_OFF_MESSAGE = "The abridged reading diff is off in this deployment: it needs the `meat` binary on the bot host, the Anthropic provider's credential, `review.readingDiff.provider` not `off`, and run history to store it.";
-    reviewAbridge = defineCommand10({
+    reviewAbridge = defineCommand11({
       id: "review.abridge",
       // Hidden unless the abridging can happen here (the binary, the credential,
       // the switch) AND there is a record to append to.
       enabledWhen: (caps) => caps.runHistory && caps.readingDiffAbridge,
       args: [{ name: "id", schema: runId, describe: "run id of a finished PR review" }],
-      options: z14.object({
-        model: z14.string().min(1).optional().describe("meat's model (default review.readingDiff.meatModel, else claude-opus-5)"),
+      options: z15.object({
+        model: z15.string().min(1).optional().describe("meat's model (default review.readingDiff.meatModel, else claude-opus-5)"),
         force: flag.optional().describe("recompute even when an abridged diff is already stored, or retry a failed one"),
         wait: flag.optional().describe("block until the abridging finishes and answer the outcome instead of `running`")
       }),
@@ -17599,7 +18006,7 @@ var init_review = __esm({
 });
 
 // ../../src/core/commands/runs.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 function unwrap2(res) {
   if (res.ok) return res.value;
   throw new CommandError(res.error, res.error === "not_found" ? "run not found" : "run already finished");
@@ -17640,7 +18047,7 @@ function wrapEvent(e) {
 function registerRunsCommands(registry) {
   for (const cmd of runsCommands) registry.register(cmd);
 }
-var defineCommand11, runId2, positiveInt3, idArg, logDenied, asJson2, runsList, runsGet, runsEvents, runsFriction, runsStop, runsCommands;
+var defineCommand12, runId2, positiveInt3, idArg, logDenied, asJson2, runsList, runsGet, runsEvents, runsFriction, runsStop, runsCommands;
 var init_runs = __esm({
   "../../src/core/commands/runs.ts"() {
     "use strict";
@@ -17649,21 +18056,21 @@ var init_runs = __esm({
     init_commandRegistry();
     init_runRecord();
     init_runsService();
-    defineCommand11 = commandDefiner();
-    runId2 = z15.string().regex(RUN_ID_PATTERN);
-    positiveInt3 = z15.coerce.number().int().positive();
+    defineCommand12 = commandDefiner();
+    runId2 = z16.string().regex(RUN_ID_PATTERN);
+    positiveInt3 = z16.coerce.number().int().positive();
     idArg = { name: "id", schema: runId2, describe: "run id" };
     logDenied = (entry) => console.log(JSON.stringify({ audit: "authz", ...entry }));
     asJson2 = (v) => v;
-    runsList = defineCommand11({
+    runsList = defineCommand12({
       id: "runs.list",
-      options: z15.object({
-        status: z15.enum(["active", "finished", "all"]).default("active").describe("which runs: live (default), persisted, or both"),
-        agent: z15.string().min(1).optional().describe("only runs of this agent"),
-        channel: z15.string().min(1).optional().describe("only runs in this platform-namespaced channel (`slack:C0123`, `http:ops`)"),
-        sinceMs: z15.coerce.number().int().nonnegative().optional().describe("only runs started at or after this epoch ms"),
+      options: z16.object({
+        status: z16.enum(["active", "finished", "all"]).default("active").describe("which runs: live (default), persisted, or both"),
+        agent: z16.string().min(1).optional().describe("only runs of this agent"),
+        channel: z16.string().min(1).optional().describe("only runs in this platform-namespaced channel (`slack:C0123`, `http:ops`)"),
+        sinceMs: z16.coerce.number().int().nonnegative().optional().describe("only runs started at or after this epoch ms"),
         limit: positiveInt3.max(RUN_LIST_MAX_LIMIT).optional().describe(`page size (max ${RUN_LIST_MAX_LIMIT})`),
-        before: z15.coerce.number().int().nonnegative().optional().describe("page cursor: runs finished before this epoch ms"),
+        before: z16.coerce.number().int().nonnegative().optional().describe("page cursor: runs finished before this epoch ms"),
         beforeId: runId2.optional().describe("page cursor tie-breaker: the last id of the previous page")
       }),
       action: "runs:read",
@@ -17674,11 +18081,11 @@ var init_runs = __esm({
         return asJson2(await (await deps.runs()).listRuns({ ...options, visibleTo }));
       }
     });
-    runsGet = defineCommand11({
+    runsGet = defineCommand12({
       id: "runs.get",
       args: [idArg],
-      options: z15.object({
-        include: z15.enum(["messages"]).optional().describe("add the run's events, free text wrapped as untrusted content")
+      options: z16.object({
+        include: z16.enum(["messages"]).optional().describe("add the run's events, free text wrapped as untrusted content")
       }),
       action: "runs:read",
       effect: "read",
@@ -17698,11 +18105,11 @@ var init_runs = __esm({
         return asJson2(view);
       }
     });
-    runsEvents = defineCommand11({
+    runsEvents = defineCommand12({
       id: "runs.events",
       args: [idArg],
-      options: z15.object({
-        afterSeq: z15.coerce.number().int().nonnegative().optional().describe("events with seq greater than this"),
+      options: z16.object({
+        afterSeq: z16.coerce.number().int().nonnegative().optional().describe("events with seq greater than this"),
         limit: positiveInt3.max(MAX_EVENTS_PAGE).optional().describe(`page size (max ${MAX_EVENTS_PAGE})`)
       }),
       action: "runs:read",
@@ -17716,7 +18123,7 @@ var init_runs = __esm({
         return asJson2({ ...page2, events: page2.events.map(wrapEvent) });
       }
     });
-    runsFriction = defineCommand11({
+    runsFriction = defineCommand12({
       id: "runs.friction",
       args: [idArg],
       action: "runs:read",
@@ -17729,10 +18136,10 @@ var init_runs = __esm({
         return asJson2(unwrap2(await runs.getRunFriction(args.id)));
       }
     });
-    runsStop = defineCommand11({
+    runsStop = defineCommand12({
       id: "runs.stop",
       args: [idArg],
-      options: z15.object({ mode: z15.enum(["soft", "hard"]).describe("soft = finish the current step; hard = abort now") }),
+      options: z16.object({ mode: z16.enum(["soft", "hard"]).describe("soft = finish the current step; hard = abort now") }),
       action: "runs:write",
       effect: "write",
       describe: "Request a live run to stop (`--mode soft` = finish the current step; `hard` = abort now). Records the caller as the actor.",
@@ -17756,16 +18163,16 @@ var init_runs = __esm({
 function registerScheduleCommands(registry) {
   for (const cmd of scheduleCommands) registry.register(cmd);
 }
-var defineCommand12, ACTION_LABEL, utc, scheduleList, scheduleCommands;
+var defineCommand13, ACTION_LABEL, utc, scheduleList, scheduleCommands;
 var init_schedule = __esm({
   "../../src/core/commands/schedule.ts"() {
     "use strict";
     init_commandRegistry();
     init_schedules();
-    defineCommand12 = commandDefiner();
+    defineCommand13 = commandDefiner();
     ACTION_LABEL = { healthz: "keep-alive", watchdog: "resident watchdog" };
     utc = (ms) => `${new Date(ms).toISOString().slice(0, 16).replace("T", " ")} UTC`;
-    scheduleList = defineCommand12({
+    scheduleList = defineCommand13({
       id: "schedule.list",
       enabledWhen: (caps) => caps.schedules,
       action: "schedule:read",
@@ -18029,7 +18436,7 @@ var init_plan2 = __esm({
 });
 
 // ../../src/core/commands/setup.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 async function gatherAnswers(o, setup) {
   const ask = setup.prompt;
   const given = (v) => v !== void 0;
@@ -18099,33 +18506,33 @@ function capabilityLine(c) {
 function registerSetupCommands(registry) {
   for (const cmd of setupCommands) registry.register(cmd);
 }
-var defineCommand13, secret, digits, workerName, hostname2, httpUrl, account, initOptions2, DEFAULT_NAME, setupInit, ASK, setupCommands;
+var defineCommand14, secret, digits, workerName, hostname2, httpUrl, account, initOptions2, DEFAULT_NAME, setupInit, ASK, setupCommands;
 var init_setup = __esm({
   "../../src/core/commands/setup.ts"() {
     "use strict";
     init_plan2();
     init_commandRegistry();
     init_deploy();
-    defineCommand13 = commandDefiner();
-    secret = z16.string().min(1);
-    digits = z16.string().regex(/^\d+$/, "expected a number");
-    workerName = z16.string().regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, "expected a Worker name: lowercase letters, digits, hyphens");
-    hostname2 = z16.string().regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/, "expected a bare DNS name (example.com)");
-    httpUrl = z16.string().regex(/^https?:\/\/\S+$/, "expected an http(s) URL");
-    account = z16.string().regex(/^[0-9a-f]{32}$/, "expected a Cloudflare account id: 32 hex characters");
-    initOptions2 = z16.object({
-      organization: z16.string().min(1).optional().describe("the GitHub organization (or user) this installation serves \u2014 config.yaml's `organization`"),
+    defineCommand14 = commandDefiner();
+    secret = z17.string().min(1);
+    digits = z17.string().regex(/^\d+$/, "expected a number");
+    workerName = z17.string().regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, "expected a Worker name: lowercase letters, digits, hyphens");
+    hostname2 = z17.string().regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/, "expected a bare DNS name (example.com)");
+    httpUrl = z17.string().regex(/^https?:\/\/\S+$/, "expected an http(s) URL");
+    account = z17.string().regex(/^[0-9a-f]{32}$/, "expected a Cloudflare account id: 32 hex characters");
+    initOptions2 = z17.object({
+      organization: z17.string().min(1).optional().describe("the GitHub organization (or user) this installation serves \u2014 config.yaml's `organization`"),
       anthropicKey: secret.optional().describe("an Anthropic API key \u2192 ANTHROPIC_API_KEY and the `anthropic` provider"),
       openaiCompatible: httpUrl.optional().describe(
         "an OpenAI-compatible endpoint's base URL (https://api.openai.com/v1, http://localhost:11434/v1) \u2192 the `openai` provider"
       ),
-      model: z16.string().min(1).optional().describe("with --openai-compatible: the model every agent runs on at that endpoint (openai/<model>)"),
+      model: z17.string().min(1).optional().describe("with --openai-compatible: the model every agent runs on at that endpoint (openai/<model>)"),
       modelKey: secret.optional().describe("with --openai-compatible: the endpoint's key \u2192 OPENAI_API_KEY (a local endpoint needs none)"),
       slackAppToken: secret.optional().describe("the Slack app-level token (xapp-\u2026) \u2192 SLACK_APP_TOKEN"),
       slackBotToken: secret.optional().describe("the Slack bot token (xoxb-\u2026) \u2192 SLACK_BOT_TOKEN"),
       githubAppId: digits.optional().describe("the GitHub App's id \u2192 GITHUB_APP_ID"),
       githubInstallationId: digits.optional().describe("the GitHub App's installation id \u2192 GITHUB_APP_INSTALLATION_ID"),
-      githubPrivateKeyFile: z16.string().min(1).optional().describe("path to the GitHub App's private key (PEM) \u2192 GITHUB_APP_PRIVATE_KEY, one quoted line"),
+      githubPrivateKeyFile: z17.string().min(1).optional().describe("path to the GitHub App's private key (PEM) \u2192 GITHUB_APP_PRIVATE_KEY, one quoted line"),
       cloudflare: account.optional().describe(
         "a Cloudflare account id: also write deploy/profile.json and render the Worker configs (needs --zone; from a checkout's root, or anywhere when this CLI is the published package)"
       ),
@@ -18135,7 +18542,7 @@ var init_setup = __esm({
       dryRun: flag.optional().describe("write nothing; print each file as it would be written, secrets masked")
     });
     DEFAULT_NAME = "switchboard";
-    setupInit = defineCommand13({
+    setupInit = defineCommand14({
       id: "setup.init",
       options: initOptions2,
       action: "setup:write",
@@ -18235,13 +18642,13 @@ function renderStatus(output) {
 function registerStatusCommands(registry) {
   for (const cmd of statusCommands) registry.register(cmd);
 }
-var defineCommand14, statusShow, statusCommands;
+var defineCommand15, statusShow, statusCommands;
 var init_status = __esm({
   "../../src/core/commands/status.ts"() {
     "use strict";
     init_commandRegistry();
-    defineCommand14 = commandDefiner();
-    statusShow = defineCommand14({
+    defineCommand15 = commandDefiner();
+    statusShow = defineCommand15({
       id: "status.show",
       action: "status:read",
       effect: "read",
@@ -18278,6 +18685,7 @@ function registerCoreCommands(registry) {
   registerDeployCommands(registry);
   registerEnvCommands(registry);
   registerSetupCommands(registry);
+  registerContractCommands(registry);
 }
 function coreCommandGroups() {
   const registry = new CommandRegistry({ audit: () => {
@@ -18290,6 +18698,7 @@ var init_all = __esm({
     "use strict";
     init_commandRegistry();
     init_config3();
+    init_contract2();
     init_deploy();
     init_env();
     init_friction();
@@ -18445,7 +18854,8 @@ var init_githubRepoInspect = __esm({
 });
 
 // ../../src/core/commandCatalogue.ts
-import { readFileSync as readFileSync12 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync12 } from "node:fs";
+import { readFile as readFile2 } from "node:fs/promises";
 function unstampedStatus() {
   let version2 = "unknown";
   try {
@@ -18471,6 +18881,9 @@ function defaultOperations(config, secrets, caller) {
 function readSource(source2) {
   return Promise.resolve(readFileSync12(source2 === "-" ? 0 : source2, "utf8"));
 }
+async function readOptionalFile(path) {
+  return existsSync10(path) ? readFile2(path, "utf8") : void 0;
+}
 function once(provided) {
   if (typeof provided !== "function") {
     const ready = Promise.resolve(provided);
@@ -18559,7 +18972,9 @@ function buildCoreCommands(config, store, wiring) {
     env: { bootstrap: bootstrapOnHost },
     status: { snapshot: () => (wiring.status ?? unstampedStatus)() },
     // `setup init` writes the operator's working directory — the one the CLI runs in.
-    setup: hostSetupIO()
+    setup: hostSetupIO(),
+    // `contract render` reads the paths the CLI caller names (CLI-only).
+    contract: { readFile: readOptionalFile }
   };
   return bindCommands(registry, deps);
 }
@@ -19535,7 +19950,7 @@ var init_tracingExecutor = __esm({
 });
 
 // ../../src/core/prDescription.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 function parsePrDescription(input) {
   return PrDescriptionSchema.parse(input);
 }
@@ -19823,34 +20238,34 @@ var init_prDescription = __esm({
   "../../src/core/prDescription.ts"() {
     "use strict";
     init_redact();
-    line = z17.string().trim().min(1).refine((s) => !/[\r\n]/.test(s), "must be a single line (no embedded newlines)");
-    prose = z17.string().trim().min(1);
-    TourAnchorSchema = z17.object({
+    line = z18.string().trim().min(1).refine((s) => !/[\r\n]/.test(s), "must be a single line (no embedded newlines)");
+    prose = z18.string().trim().min(1);
+    TourAnchorSchema = z18.object({
       // Repo-relative: no leading `/`, no `..` SEGMENT (a filename like `a..b.ts` is fine).
-      path: z17.string().trim().min(1).refine((p) => !p.startsWith("/") && !p.split("/").includes(".."), "path must be repo-relative"),
-      from: z17.number().int().positive(),
-      to: z17.number().int().positive()
+      path: z18.string().trim().min(1).refine((p) => !p.startsWith("/") && !p.split("/").includes(".."), "path must be repo-relative"),
+      from: z18.number().int().positive(),
+      to: z18.number().int().positive()
     }).refine((a) => a.to >= a.from, "to must be >= from");
-    TourStepSchema = z17.object({
+    TourStepSchema = z18.object({
       title: line,
       description: prose,
       lookFor: prose.optional(),
       anchor: TourAnchorSchema
     });
-    PrDescriptionSchema = z17.object({
+    PrDescriptionSchema = z18.object({
       /** The PR title's single source. Metadata for the PR's own title field —
        *  never rendered into the body (GitHub shows the title itself). */
       title: line,
       tldr: prose,
       whatWhy: prose,
-      tour: z17.array(TourStepSchema).min(1),
+      tour: z18.array(TourStepSchema).min(1),
       /** Every touched file the Tour steps did not cover, one line each. */
-      remaining: z17.array(z17.object({ path: line, note: prose })),
-      decisions: z17.array(z17.object({ title: line, rationale: prose })).min(1),
+      remaining: z18.array(z18.object({ path: line, note: prose })),
+      decisions: z18.array(z18.object({ title: line, rationale: prose })).min(1),
       risks: prose,
-      validation: z17.object({
+      validation: z18.object({
         summary: prose.optional(),
-        criteria: z17.array(z17.object({ criterion: prose, proof: prose })).min(1)
+        criteria: z18.array(z18.object({ criterion: prose, proof: prose })).min(1)
       })
     });
     REPO_RE = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
@@ -19994,7 +20409,7 @@ var init_reviewVerdict = __esm({
 });
 
 // ../../src/core/diffDigest.ts
-function basename(p) {
+function basename2(p) {
   const i = p.lastIndexOf("/");
   return i === -1 ? p : p.slice(i + 1);
 }
@@ -20031,7 +20446,7 @@ function riskReasons(entry, paths) {
   if (any(AUTH_RE)) reasons.push("auth/permission-sensitive");
   if (any(INFRA_RE)) reasons.push("infra/deploy config");
   if (entry.status === "deleted") reasons.push("whole-file deletion");
-  if (candidates.some((p) => LOCKFILES.has(basename(p).toLowerCase()))) reasons.push("lockfile");
+  if (candidates.some((p) => LOCKFILES.has(basename2(p).toLowerCase()))) reasons.push("lockfile");
   const churn = entry.adds + entry.dels;
   if (churn >= LARGE_CHURN) reasons.push(`large change (${churn} lines)`);
   return reasons;
@@ -20626,7 +21041,7 @@ ${skill.body}${footer}`;
 });
 
 // ../../src/tools/workspace.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var bashTool, readFileTool, writeFileTool, NAME_STATUS_MARK, NAME_STATUS_MARK_LINE, OUTPUT_CUT_RE, diffDigestTool, submitVerdictTool, submitDispositionsTool, submitPrDescriptionTool, updateStatusTool, TOOLSETS;
 var init_workspace = __esm({
   "../../src/tools/workspace.ts"() {
@@ -20930,7 +21345,7 @@ ${raw.trim()}`;
         try {
           desc = parsePrDescription(input);
         } catch (err2) {
-          const detail = err2 instanceof z18.ZodError ? err2.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ") : String(err2);
+          const detail = err2 instanceof z19.ZodError ? err2.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ") : String(err2);
           return `error: invalid PR description \u2014 ${detail}`;
         }
         ctx.onPrDescription?.(desc);
@@ -21791,14 +22206,9 @@ Target repository: ${input.repo}. ` + (workspace ? `Your shell starts in the wor
     ...head.verified ? { verifiedAtAttach: true } : {}
   }) : void 0;
   const agentSystem = (head) => {
-    const target = targetBlock(head);
-    const baseSystem = target ? `${residentSystem ?? agent.system}
-
-${target}` : residentSystem;
-    const trailing = [blocks.skills, blocks.mcp].filter((b) => Boolean(b));
-    return trailing.length > 0 ? [baseSystem ?? agent.system, ...trailing].join("\n\n") : baseSystem;
+    return [residentSystem ?? agent.system, targetBlock(head), input.contract, blocks.skills, blocks.mcp].filter((b) => Boolean(b)).join("\n\n");
   };
-  return (head) => [blocks.memory, blocks.config, blocks.about, blocks.instructions, agentSystem(head) ?? agent.system].filter((part) => Boolean(part)).join("\n\n");
+  return (head) => [blocks.memory, blocks.config, blocks.about, blocks.instructions, agentSystem(head)].filter((part) => Boolean(part)).join("\n\n");
 }
 async function settleReviewedHead(input) {
   return input.span ? input.span.span("run.settle_reviewed_head", (span) => settle(input, span)) : settle(input, void 0);
@@ -24129,15 +24539,15 @@ var init_frontmatter = __esm({
 });
 
 // ../../src/skills/stores.ts
-import { existsSync as existsSync10, readFileSync as readFileSync13, readdirSync as readdirSync2 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync11, readFileSync as readFileSync13, readdirSync as readdirSync2 } from "node:fs";
+import { join as join11 } from "node:path";
 function loadBundledSkills(dir) {
-  if (!existsSync10(dir)) return [];
+  if (!existsSync11(dir)) return [];
   const skills = [];
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const file = join10(dir, entry.name, "SKILL.md");
-    if (!existsSync10(file)) continue;
+    const file = join11(dir, entry.name, "SKILL.md");
+    if (!existsSync11(file)) continue;
     try {
       skills.push(parseSkillMarkdown(readFileSync13(file, "utf8")));
     } catch (err2) {
@@ -25746,9 +26156,18 @@ ${findings}
 Review:
 ${input.review}`;
 }
+function withContractInFirstUserTurn(messages, block) {
+  const at = messages.findIndex((m) => m.role === "user");
+  if (at < 0) return [...messages, { role: "user", content: [{ type: "text", text: block }] }];
+  return messages.map((m, i) => i === at ? { ...m, content: [...m.content, { type: "text", text: block }] } : m);
+}
 async function runShipCodingChild(input, ctx, opts, roundSpan) {
   const { entry, clip: clip3, now } = ctx;
   const { control, github, logKey } = input;
+  const messages = opts.contract ? withContractInFirstUserTurn(
+    opts.messages,
+    renderContract(opts.contract, { maxChars: DEFAULT_CONTRACT_MAX_CHARS }).text
+  ) : opts.messages;
   const spec = input.child("coding");
   const ws = await attachRoundWorkspace({
     factory: input.factory,
@@ -25828,7 +26247,7 @@ ${shipBranchContract(entry.branch)}`;
       provider: spec.provider,
       model: spec.model,
       agent: clip3(spec.agent),
-      messages: opts.messages,
+      messages,
       ...roundSpan ? { span: roundSpan } : {},
       backend: ws.selection.backend,
       system,
@@ -25850,7 +26269,7 @@ ${shipBranchContract(entry.branch)}`;
       });
       if (turnTarget) {
         descriptionTurnRan = true;
-        const turnMessages = [...opts.messages];
+        const turnMessages = [...messages];
         const run2 = (span) => runDescriptionTurn({
           ...span ? { span } : {},
           target: turnTarget,
@@ -25920,6 +26339,7 @@ var init_codingChild = __esm({
     init_reviewVerdict();
     init_codingPrPostStep();
     init_reviewRound();
+    init_contract();
   }
 });
 
@@ -26003,6 +26423,7 @@ async function runShipReviewChild(input, ctx, round, roundSpan) {
       repo: entry.repo,
       workspace: binding?.workspace,
       prTarget: { repo: entry.repo, pr: pr.number, ref: entry.branch, baseRef: entry.base },
+      ...round.contract ? { contract: renderContract(round.contract, { maxChars: DEFAULT_CONTRACT_MAX_CHARS }).text } : {},
       blocks: input.blocks(spec)
     });
     const clipped = clip3(spec.agent);
@@ -26091,6 +26512,7 @@ var init_reviewChild = __esm({
     init_reviewVerdict();
     init_reviewedHead();
     init_reviewRound();
+    init_contract();
   }
 });
 
@@ -27775,8 +28197,8 @@ var init_runHistoryWriter = __esm({
 });
 
 // ../../src/core/runStore.ts
-import { chmodSync as chmodSync2, existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync14, renameSync as renameSync2, rmSync as rmSync3, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join11, resolve as resolve9 } from "node:path";
+import { chmodSync as chmodSync2, existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync14, renameSync as renameSync2, rmSync as rmSync3, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join12, resolve as resolve9 } from "node:path";
 function isValidRunId(id) {
   return typeof id === "string" && RUN_ID_PATTERN.test(id);
 }
@@ -27818,7 +28240,7 @@ function buildRunStore(cfg, secrets, deps) {
   const now = deps.now ?? Date.now;
   const policy = retentionPolicyOf(cfg);
   if (cfg.store === "file") {
-    const store = new FileRunStore(join11(deps.dataDir, RUNS_DIR), { policy, now });
+    const store = new FileRunStore(join12(deps.dataDir, RUNS_DIR), { policy, now });
     store.sweep();
     const timer = (deps.setInterval ?? setInterval)(() => store.sweep(), SWEEP_INTERVAL_MS);
     timer.unref?.();
@@ -27885,7 +28307,7 @@ var init_runStore = __esm({
         this.now = opts.now ?? Date.now;
       }
       recordPath(id) {
-        return join11(this.dir, `${id}.json`);
+        return join12(this.dir, `${id}.json`);
       }
       ensureDir() {
         mkdirSync8(this.dir, { recursive: true, mode: DIR_MODE });
@@ -27907,8 +28329,8 @@ var init_runStore = __esm({
       }
       /** Every valid index line, a repeated id resolved to its last line. */
       readIndex() {
-        const path = join11(this.dir, INDEX_FILE);
-        if (!existsSync11(path)) return [];
+        const path = join12(this.dir, INDEX_FILE);
+        if (!existsSync12(path)) return [];
         const byId = /* @__PURE__ */ new Map();
         for (const line2 of readFileSync14(path, "utf8").split("\n")) {
           if (!line2.trim()) continue;
@@ -27939,7 +28361,7 @@ var init_runStore = __esm({
         const keptIds = new Set(kept.map((r) => r.id));
         for (const item of index) if (!keptIds.has(item.id)) rmSync3(this.recordPath(item.id), { force: true });
         this.writeAtomic(
-          join11(this.dir, INDEX_FILE),
+          join12(this.dir, INDEX_FILE),
           kept.map((r) => JSON.stringify(r)).join("\n") + (kept.length ? "\n" : "")
         );
         return kept;
@@ -27989,7 +28411,7 @@ var init_runStore = __esm({
       async delete(id) {
         if (!isValidRunId(id)) return;
         const index = this.readIndex();
-        if (!index.some((r) => r.id === id) && !existsSync11(this.recordPath(id))) return;
+        if (!index.some((r) => r.id === id) && !existsSync12(this.recordPath(id))) return;
         this.ensureDir();
         rmSync3(this.recordPath(id), { force: true });
         this.compact(index.filter((r) => r.id !== id));
@@ -27997,7 +28419,7 @@ var init_runStore = __esm({
       /** Delete everything outside policy now (start-up and the 6 h timer). A
        *  missing directory means nothing to sweep. */
       sweep() {
-        if (!existsSync11(this.dir)) return;
+        if (!existsSync12(this.dir)) return;
         this.compact(this.readIndex());
       }
     };
@@ -28807,8 +29229,8 @@ var init_registry3 = __esm({
 });
 
 // ../../src/mcp/secretStore.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname8, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname9, resolve as resolve10 } from "node:path";
 var FileMcpSecretStore, MCP_SECRET_WORKER_TIMEOUT_MS, WorkerMcpSecretStore;
 var init_secretStore = __esm({
   "../../src/mcp/secretStore.ts"() {
@@ -28821,7 +29243,7 @@ var init_secretStore = __esm({
         this.path = resolve10(path);
       }
       read() {
-        if (!existsSync12(this.path)) return { credentials: {}, tickets: {} };
+        if (!existsSync13(this.path)) return { credentials: {}, tickets: {} };
         const raw = JSON.parse(readFileSync15(this.path, "utf8"));
         const credentials = {};
         for (const [k, v] of Object.entries(raw.credentials ?? {})) if (isSealedCredential(v)) credentials[k] = v;
@@ -28830,7 +29252,7 @@ var init_secretStore = __esm({
         return { credentials, tickets };
       }
       write(doc) {
-        mkdirSync9(dirname8(this.path), { recursive: true });
+        mkdirSync9(dirname9(this.path), { recursive: true });
         writeFileSync8(this.path, JSON.stringify(doc, null, 2));
       }
       async putCredential(sealed) {
@@ -31582,18 +32004,18 @@ var init_liveView = __esm({
 
 // ../../src/channels/webAssets.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync16, statSync as statSync3 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function contentTypeFor(path) {
   const dot = path.lastIndexOf(".");
   return (dot === -1 ? void 0 : CONTENT_TYPES[path.slice(dot)]) ?? "application/octet-stream";
 }
 function webDistDir(env, packageRoot) {
-  return env.SWITCHBOARD_WEB_DIST ?? join12(packageRoot, WEB_DIST_DIR);
+  return env.SWITCHBOARD_WEB_DIST ?? join13(packageRoot, WEB_DIST_DIR);
 }
 function loadWebAssets(distDir) {
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync16(join12(distDir, ".vite", "manifest.json"), "utf8"));
+    manifest = JSON.parse(readFileSync16(join13(distDir, ".vite", "manifest.json"), "utf8"));
   } catch (err2) {
     throw new Error(
       `web app manifest not found under ${distDir} \u2014 build it first (npm run build in web/): ${err2 instanceof Error ? err2.message : String(err2)}`,
@@ -31607,9 +32029,9 @@ function loadWebAssets(distDir) {
     css: (entryChunk.css ?? []).map((f) => `/${f}`)
   };
   const files = /* @__PURE__ */ new Map();
-  const assetsDir = join12(distDir, "assets");
+  const assetsDir = join13(distDir, "assets");
   for (const name of readdirSync3(assetsDir)) {
-    const full = join12(assetsDir, name);
+    const full = join13(assetsDir, name);
     if (statSync3(full).isFile()) files.set(`/assets/${name}`, readFileSync16(full));
   }
   const serve = (req, res) => {
@@ -33587,7 +34009,7 @@ __export(index_exports, {
   runBot: () => runBot
 });
 import { createServer } from "node:http";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 async function runBot() {
   for (const v of ["SLACK_BOT_TOKEN", "SLACK_APP_TOKEN"]) {
     if (!processSecrets.get(v)) {
@@ -34155,7 +34577,7 @@ var init_index = __esm({
     init_secrets2();
     DATA_DIR = installationPath(OPERATOR_ROOT, "data");
     CONFIG_PATH2 = process.env.SWITCHBOARD_CONFIG ?? installationPath(OPERATOR_ROOT, "config/config.yaml");
-    OVERRIDES_PATH = process.env.SWITCHBOARD_OVERRIDES ?? join13(DATA_DIR, "overrides.json");
+    OVERRIDES_PATH = process.env.SWITCHBOARD_OVERRIDES ?? join14(DATA_DIR, "overrides.json");
     PROCESS_STARTED_AT = systemClock();
     sampleProcessMetrics = startProcessMetrics();
     INTERRUPTED_WRITE_BUDGET_MS = 1e4;
@@ -34199,8 +34621,8 @@ init_source();
 init_invokedAsScript();
 init_secrets2();
 import { Console } from "node:console";
-import { existsSync as existsSync13 } from "node:fs";
-import { join as join14 } from "node:path";
+import { existsSync as existsSync14 } from "node:fs";
+import { join as join15 } from "node:path";
 var CONFIG_PATH3 = process.env.SWITCHBOARD_CONFIG ?? installationPath(OPERATOR_ROOT, "config/config.yaml");
 var DATA_DIR2 = installationPath(OPERATOR_ROOT, "data");
 var CLI_CALLER = { kind: "cli", id: CLI_ACTOR.id, actor: CLI_ACTOR };
@@ -34387,7 +34809,7 @@ function missingBotConfig(configPath) {
   );
 }
 async function loadBotConfig(configPath, overridesPath, opts = {}) {
-  if (parseConfigLocation(configPath).kind === "file" && !(opts.exists ?? existsSync13)(configPath))
+  if (parseConfigLocation(configPath).kind === "file" && !(opts.exists ?? existsSync14)(configPath))
     throw missingBotConfig(configPath);
   return openConfigStore(configPath, {
     overridesPath,
@@ -34416,7 +34838,7 @@ function bindBotConfig(configPath, overridesPath, opts = {}) {
 }
 function cliCapabilities(configPath, env, secrets, opts = {}) {
   if (parseConfigLocation(configPath).kind !== "file") return ALL_CAPABILITIES;
-  if (!(opts.exists ?? existsSync13)(configPath)) return ALL_CAPABILITIES;
+  if (!(opts.exists ?? existsSync14)(configPath)) return ALL_CAPABILITIES;
   try {
     return capabilitiesFrom((opts.load ?? loadAppConfig)(configPath), env, secrets, { meatBinary: meatOnPath(env) });
   } catch {
@@ -34425,7 +34847,7 @@ function cliCapabilities(configPath, env, secrets, opts = {}) {
 }
 function wireCli() {
   const warn = (m) => console.error(m);
-  const botConfig = bindBotConfig(CONFIG_PATH3, join14(DATA_DIR2, "cli-overrides.json"));
+  const botConfig = bindBotConfig(CONFIG_PATH3, join15(DATA_DIR2, "cli-overrides.json"));
   let loaded;
   const bot = () => loaded ??= botConfig().then((config) => ({
     config,