@mindrian_os/cli 2.0.0-beta.3 → 2.0.0-beta.31

package/scripts/session-start

@@ -0,0 +1,1942 @@
+#!/usr/bin/env bash
+# session-start: SessionStart hook handler for MindrianOS
+# Loads room context into Claude's additionalContext for session continuity
+# Must complete in under 2 seconds
+#
+# Phase 88-07 addition: after Phase 83 ACTIVE ROOM CONTEXT, inject a
+# TRIPLE_CONTEXT block per active section via lib/memory/triple-context-
+# formatter.cjs. Reads .mindrian/session-snapshot.json (88-06 producer)
+# with fallback to live folder-memory.readTriple walk. Budget-capped via
+# SESSION_START_BUDGET_TOKENS env var (default 5000).
+
+set -euo pipefail
+
+# ---------------------------------------------------------------------------
+# Workspace guard (added 2026-04-13 after wrong-workspace incident).
+# See docs/autopsies/2026-04-13-wrong-workspace-incident.md
+#
+# ~/.claude/plugins/ is where Claude Code installs plugins for READ access.
+# It is NOT a dev workspace. Dev work must happen in ~/MindrianOS-Plugin/.
+# Commits to the plugin cache directory never reach github and silently
+# diverge from the real release pipeline. We prevent that here.
+# ---------------------------------------------------------------------------
+if [[ "${PWD}" == "${HOME}/.claude/plugins/"* ]] \
+   || [[ "${PWD}" == "/home/jsagi/.claude/plugins/"* ]] \
+   || [[ "${PWD}" == "/Users/"*"/.claude/plugins/"* ]]; then
+  cat >&2 <<'EOF'
+
+  WORKSPACE GUARD TRIPPED
+
+  You are running MindrianOS session-start from inside the plugin cache
+  directory. This is the install location, not a dev workspace.
+
+  Dev work must happen in ~/MindrianOS-Plugin/.
+
+  If you are developing: cd ~/MindrianOS-Plugin && claude
+  If you are a user reading the plugin: you are in the right place but
+  should not be running scripts manually here.
+
+  See docs/autopsies/2026-04-13-wrong-workspace-incident.md
+
+EOF
+  exit 1
+fi
+
+# ---------------------------------------------------------------------------
+# Node version preflight (added 2026-04-15 for v1.10.9, plan 85-01).
+#
+# MindrianOS v1.10.9+ requires Node >= 22.5.0 for node:sqlite. If the
+# installed Node is older, print a friendly upgrade message and exit 0.
+# This is a SOFT fail: session-start is non-critical and must NEVER hard-
+# fail the Claude Code launch. The plugin continues with reduced
+# functionality (banner may show unknown, memory layer may no-op) rather
+# than crashing the user's shell. SESSION_START_NODE_PREFLIGHT_SKIP=1
+# bypasses this check for the preflight test fixture.
+# ---------------------------------------------------------------------------
+if [ -z "${SESSION_START_NODE_PREFLIGHT_SKIP:-}" ]; then
+  NODE_VERSION_RAW=$(node -e "process.stdout.write(process.versions.node)" 2>/dev/null || echo "")
+  if [ -n "$NODE_VERSION_RAW" ]; then
+    NODE_OK=$(node -e "
+      var v = (process.env.FORCE_NODE_VERSION || process.versions.node).split('.').map(Number);
+      var major = v[0] || 0, minor = v[1] || 0;
+      process.stdout.write((major > 22 || (major === 22 && minor >= 5)) ? 'ok' : 'old');
+    " 2>/dev/null || echo "ok")
+    if [ "$NODE_OK" = "old" ]; then
+      DETECTED="${FORCE_NODE_VERSION:-$NODE_VERSION_RAW}"
+      echo "MindrianOS v1.10.9+ requires Node >= 22.5.0. You are running Node ${DETECTED}. Please upgrade Node (nvm install 22, fnm install 22, or your package manager) and restart Claude Code. Plugin will continue with reduced functionality until Node is upgraded." >&2
+      exit 0
+    fi
+  fi
+fi
+
+# Cross-platform file modification time (epoch seconds)
+portable_stat_mtime() {
+  local file="$1"
+  if [ "$(uname -s)" = "Darwin" ]; then
+    stat -f %m "$file" 2>/dev/null || echo 0
+  else
+    stat -c %Y "$file" 2>/dev/null || echo 0
+  fi
+}
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/.." && pwd)"
+# 2026-07-05 Windows/git-bash fix: under git-bash (MSYS), `pwd` above returns an
+# MSYS-style path (e.g. /c/Users/jsagi/...). Every `node -e "...require('$PLUGIN_ROOT/...')..."`
+# call below passes this string straight into Node's require(), but Windows-native
+# node.exe does not understand MSYS paths -- it reads /c/Users/... literally and
+# fails with "Cannot find module", which the version-resolution catch (below) then
+# silently degrades to "unknown" (the confirmed live root cause of the
+# "[MindrianOS vunknown]" banner on a real Windows machine, 2026-07-05). Normalize
+# ONCE here to the Windows-native mixed form (C:/Users/... -- forward slashes, so
+# no backslash-escaping needed inside the node -e JS string literals below) via
+# git-bash's own cygpath, and use PLUGIN_ROOT_FOR_NODE everywhere a path gets
+# passed into a `require()` call. On Linux/macOS (no cygpath), this is a no-op.
+if command -v cygpath >/dev/null 2>&1; then
+  PLUGIN_ROOT_FOR_NODE="$(cygpath -m "$PLUGIN_ROOT" 2>/dev/null || echo "$PLUGIN_ROOT")"
+else
+  PLUGIN_ROOT_FOR_NODE="$PLUGIN_ROOT"
+fi
+
+# Determine working directory (where user's project is)
+WORK_DIR="${PWD}"
+ROOM_DIR=$("${SCRIPT_DIR}/resolve-room" "$WORK_DIR") || ROOM_DIR=""
+
+# Read current version from plugin.json via platform.cjs (plan 85-06 sweep).
+# python3 is a Microsoft Store alias stub on Windows and produces "vunknown".
+# platform.cjs.readPluginJsonVersion is a fail-safe Node-native read.
+# 2026-07-05 fix: the catch previously swallowed the real error and printed
+# only 'unknown' to stdout, hiding WHY resolution failed. That logging fix
+# then revealed the ACTUAL cause live on a real Windows machine: an MSYS-style
+# path (/c/Users/...) reaching node's require(), which node.exe cannot resolve
+# -- now fixed at the source via PLUGIN_ROOT_FOR_NODE above (cygpath -m
+# normalization). Both fixes land together: the path is correct AND, if
+# anything else ever throws here, the real error is logged instead of hidden.
+PLUGIN_VERSION=$(node -e "try{process.stdout.write(require('$PLUGIN_ROOT_FOR_NODE/lib/core/platform.cjs').readPluginJsonVersion('$PLUGIN_ROOT_FOR_NODE'))}catch(e){process.stderr.write('[session-start] PLUGIN_VERSION resolution failed: '+(e&&e.stack||e)+'\n');process.stdout.write('unknown')}" 2>>"${TMPDIR:-/tmp}/mindrian-session-start-version-errors.log" || echo "unknown")
+
+# plan 85-06 (WIN-FIX-H-02): resolve banner script path via platform.cjs so
+# future .cmd wrappers on win32 can be substituted without editing session-
+# start. On linux/darwin this returns ${PLUGIN_ROOT}/scripts/banner with a
+# forward slash; on win32 it returns the same with a backslash.
+BANNER_SCRIPT=$(node -e "try{process.stdout.write(require('$PLUGIN_ROOT_FOR_NODE/lib/core/platform.cjs').resolveHookScript('banner','$PLUGIN_ROOT_FOR_NODE'))}catch(e){process.stdout.write('$SCRIPT_DIR/banner')}" 2>/dev/null || echo "${SCRIPT_DIR}/banner")
+
+# Version marker for update detection (D-01, D-02)
+LAST_VERSION_FILE="$HOME/.mindrian-last-version"
+LAST_VERSION=""
+if [ -f "$LAST_VERSION_FILE" ]; then
+  LAST_VERSION=$(cat "$LAST_VERSION_FILE" 2>/dev/null || echo "")
+fi
+
+# --- BEGIN Phase 126 Plan 07 install-state migration (BEFORE Phase 123 writer) ---
+# Phase 126 Plan 07. The migration is ADDITIVE only (CONTEXT.md D3): v1 -> v2
+# adds schema_version + topology_class + last_acceptance_run +
+# renderer_contract_version while preserving v1 fields byte-identical.
+# Future-version (schema_version > 2) emits a stderr warn + defers to
+# `/mos:doctor --fix`; the file is NEVER downgraded silently.
+#
+# This block runs BEFORE the Phase 123 install-state record block below so
+# downstream readers see the v2 shape. Errors here NEVER crash session-start
+# (the script is a hook; soft-fail is the contract). Stderr passes through so
+# users see the future-version deferral message; stdout is suppressed so the
+# block does not pollute the additionalContext JSON.
+#
+# Canon Part 8: LOCAL only -- the module reads/writes $HOME/.mindrian/ ; the
+# node -e shim below makes ZERO network calls. Verified in the lib/core
+# /install-state.cjs source (see file header).
+if [ -f "$PLUGIN_ROOT/lib/core/install-state.cjs" ]; then
+  env \
+    INSTALL_STATE_MOD_PATH="$PLUGIN_ROOT/lib/core/install-state.cjs" \
+    node -e '
+      try {
+        var m = require(process.env.INSTALL_STATE_MOD_PATH);
+        var r = m.migrateIfNeeded({ home: process.env.HOME });
+        if (r && r.migrated) {
+          process.stderr.write("[session-start] install-state migrated v" + r.fromVersion + " -> v" + r.toVersion + "\n");
+        } else if (r && r.futureVersion) {
+          process.stderr.write("[session-start] install-state future-version detected (schema_version=" + r.currentVersion + "); deferring to /mos:doctor --fix\n");
+        }
+      } catch (e) {
+        process.stderr.write("[session-start] install-state migration error: " + (e && e.message) + " (continuing with existing path)\n");
+      }
+    ' >/dev/null || true
+fi
+# --- END Phase 126 Plan 07 install-state migration ---
+
+# --- BEGIN install-state record (Phase 123, single writer, EARLY -- before Step A/B) ---
+# Phase 123 Plan-02 (HARNESS-123-05). Canon Part 8: LOCAL only -- no fetch/http/
+# curl/brain.mindrian/tavily anywhere in this block. Per D-03 + RESEARCH Override
+# 4: the write happens BEFORE Step A's statusline migration (at ~L1078) so the
+# record is on disk before any downstream consumer reads it. The
+# `~/.mindrian-last-version` write folds into this same step so there is no
+# window where one is fresh and the other is stale (Pitfall 7 fix: the old
+# line-419 write only fired on cold start, leaving the file stale on every
+# session that had an active room).
+#
+# Field defaults at this offset:
+#   - statusline_renders_version defaults to "unknown" -- WRAPPER_DST is not set
+#     until Step A (~L1079), and doctor's class-I (Plan-03) computes it live
+#     from the deployed shim. An optional best-effort refresh after Step A may
+#     update just this one field; it NEVER gates this early write.
+#   - last_version_file_value captures the PREVIOUS ~/.mindrian-last-version
+#     value (read at $LAST_VERSION_FILE above, ~L101-104). The transition-banner
+#     block at ~L401-407 still has access to $LAST_VERSION via the shell
+#     variable -- read-before-write ordering is preserved.
+_INSTALL_STATE_DIR="$HOME/.mindrian"
+_INSTALL_STATE_JSON="$_INSTALL_STATE_DIR/install-state.json"
+mkdir -p "$_INSTALL_STATE_DIR" 2>/dev/null || true
+env \
+  PLUGIN_ROOT_FOR_RESOLVE="$PLUGIN_ROOT_FOR_NODE" \
+  PLUGIN_VERSION_FOR_RESOLVE="$PLUGIN_VERSION" \
+  INSTALL_STATE_JSON_PATH="$_INSTALL_STATE_JSON" \
+  LAST_VERSION_FILE_FOR_RESOLVE="$LAST_VERSION_FILE" \
+  node -e '
+    var fs = require("fs"); var os = require("os"); var path = require("path");
+    var home = os.homedir();
+    var r = { root: null, source: "not-found", topology: "not-found" };
+    try {
+      r = require(process.env.PLUGIN_ROOT_FOR_RESOLVE + "/lib/core/active-plugin-root.cjs").resolveActivePluginRoot();
+    } catch (_) { /* swallow */ }
+    var installedPluginsVersion = "unknown";
+    try {
+      var ip = JSON.parse(fs.readFileSync(path.join(home, ".claude/plugins/installed_plugins.json"), "utf8"));
+      var keys = Object.keys((ip && ip.plugins) || {});
+      for (var i = 0; i < keys.length; i++) {
+        var name = String(keys[i]).split("@")[0];
+        if (name !== "mos" && name !== "mindrian-os") continue;
+        var entry = ip.plugins[keys[i]];
+        if (Array.isArray(entry)) entry = entry[0];
+        if (entry && entry.version) { installedPluginsVersion = entry.version; break; }
+      }
+    } catch (_) { /* swallow */ }
+    var lastVersionFile = process.env.LAST_VERSION_FILE_FOR_RESOLVE || path.join(home, ".mindrian-last-version");
+    var lastVersionFileValue = null;
+    try { lastVersionFileValue = fs.readFileSync(lastVersionFile, "utf8").trim() || null; } catch (_) { /* absent ok */ }
+    var pathBinVersion = "unknown";
+    try {
+      var m = String(process.env.PATH || "").match(/[/\\\\](?:mos|mindrian-os)[/\\\\]([^/\\\\:]+)[/\\\\]bin(?::|;|$)/);
+      if (m) pathBinVersion = m[1];
+    } catch (_) { /* swallow */ }
+    // Plan 123-02 amendment (HARNESS-123-05 fix, surfaced 2026-05-13 by Plan-06 pre-flight
+    // class-I --pre-tag gate): prefer the resolver root basename = what Claude Code actually
+    // has installed per active-plugin-root.cjs resolution chain, NOT the dev-workspace
+    // plugin.json version (which can lead or lag the live install). The record reflects the
+    // LIVE install; class I catches drift, doctor --fix recovers. Fallbacks in order:
+    // resolver-root-basename -> installed_plugins.json entry -> dev-workspace plugin.json -> "unknown".
+    var activeVersion = (r.root && path.basename(r.root)) || installedPluginsVersion || process.env.PLUGIN_VERSION_FOR_RESOLVE || "unknown";
+    // surfaces[] -- walk the static manifest, record observed/ok per surface.
+    var surfaces = [];
+    try {
+      var man = JSON.parse(fs.readFileSync(process.env.PLUGIN_ROOT_FOR_RESOLVE + "/data/deployment-surfaces.json", "utf8"));
+      var expand = function(p) {
+        return p.replace(/\$HOME/g, home)
+                .replace(/<active_root>/g, r.root || "")
+                .replace(/<dev_clone_root>/g, r.topology === "dev-clone" ? (r.root || "") : "");
+      };
+      for (var j = 0; j < (man.surfaces || []).length; j++) {
+        var s = man.surfaces[j];
+        if (s.topology_scope === "dev-clone" && r.topology !== "dev-clone") {
+          surfaces.push({ id: s.id, path: null, check_kind: s.check_kind, expected: s.expected, observed: "skipped-non-dev-clone", ok: null });
+          continue;
+        }
+        if (s.id === "install-state-record") {
+          // Self -- excluded from its own check (D-08).
+          surfaces.push({ id: s.id, path: expand(s.path), check_kind: s.check_kind, expected: s.expected, observed: "self-excluded", ok: null });
+          continue;
+        }
+        var fp = expand(s.path);
+        var observed = null, ok = null;
+        try {
+          if (s.check_kind === "marker") {
+            var content = fs.readFileSync(fp, "utf8");
+            observed = content.indexOf(s.expected) !== -1 ? s.expected : null;
+            ok = !!observed;
+          } else if (s.check_kind === "exact-value") {
+            var c = "";
+            try { c = fs.readFileSync(fp, "utf8"); } catch (_) { /* missing -> ok=false */ }
+            var exp = (s.expected === "<active_version>") ? activeVersion : String(s.expected).replace(/\$HOME/g, home);
+            observed = c.trim();
+            ok = c.indexOf(exp) !== -1;
+          } else {
+            // observed-only
+            observed = fs.existsSync(fp) ? "present" : "absent";
+            ok = null;
+          }
+        } catch (_) {
+          observed = "absent";
+          ok = (s.check_kind === "observed-only") ? null : false;
+        }
+        surfaces.push({ id: s.id, path: fp, check_kind: s.check_kind, expected: s.expected, observed: observed, ok: ok });
+      }
+    } catch (_) { /* manifest unreadable -- surfaces stays [] */ }
+    var rec = {
+      active_version: activeVersion,
+      active_root: r.root,
+      topology: r.topology,
+      resolved_at: new Date().toISOString(),
+      surfaces: surfaces,
+      installed_plugins_version: installedPluginsVersion,
+      statusline_renders_version: "unknown",
+      last_version_file_value: lastVersionFileValue,
+      path_bin_version: pathBinVersion
+    };
+    // Phase 126 Plan 07: preserve v2 schema fields across the Phase 123 record
+    // rewrite. CONTEXT.md D3 invariant: NEVER downgrade. If the existing file
+    // has schema_version > 2 (a future-version file from a newer beta the user
+    // previously installed then rolled back from), SKIP the write entirely so
+    // the file stays untouched until `/mos:doctor --fix` runs. Otherwise,
+    // additively merge schema_version + topology_class + last_acceptance_run
+    // + renderer_contract_version from the existing file onto the freshly-
+    // derived record. The Phase 126 migrator at the top of session-start
+    // populates these fields for v1 installs before this block runs; for
+    // already-v2 installs the merge is a no-op preservation.
+    var skipWrite = false;
+    var existing = null;
+    try {
+      if (fs.existsSync(process.env.INSTALL_STATE_JSON_PATH)) {
+        existing = JSON.parse(fs.readFileSync(process.env.INSTALL_STATE_JSON_PATH, "utf8"));
+      }
+    } catch (_) { /* corrupt -- treat as if absent */ }
+    if (existing && typeof existing.schema_version === "number" && existing.schema_version > 2) {
+      // Future-version: do NOT downgrade. Leave the file alone.
+      skipWrite = true;
+    } else {
+      // Merge v2 fields onto the new record. Defaults are applied when the
+      // existing file lacks a field (covers the edge case where the migrator
+      // did not run first -- e.g., a stale install where lib/core/install-
+      // state.cjs is missing on disk).
+      rec.schema_version = 2;
+      rec.topology_class = (existing && existing.topology_class) || (function (t) {
+        switch (t) {
+          case "marketplace-cache": return "healthy";
+          case "direct":            return "healthy";
+          case "dev-clone":         return "healthy";
+          case "not-found":         return "missing";
+          case "legacy":            return "drifted";
+          default:                  return "drifted";
+        }
+      })(r.topology);
+      rec.last_acceptance_run = (existing && Object.prototype.hasOwnProperty.call(existing, "last_acceptance_run"))
+        ? existing.last_acceptance_run : null;
+      rec.renderer_contract_version = (existing && existing.renderer_contract_version) || "unknown";
+    }
+    if (!skipWrite) {
+      try { fs.writeFileSync(process.env.INSTALL_STATE_JSON_PATH, JSON.stringify(rec, null, 2) + "\n"); } catch (_) { /* swallow */ }
+    }
+    try { fs.writeFileSync(lastVersionFile, activeVersion + "\n"); } catch (_) { /* swallow */ }
+  ' 2>/dev/null || true
+# --- END install-state record ---
+
+# =============================================================================
+# STABLE PREFIX (identical across sessions -- enables prompt cache hits)
+# This section MUST NOT change between sessions. Any edits here bust the cache.
+# =============================================================================
+
+stable_prefix="[MindrianOS v${PLUGIN_VERSION}] You are Larry.
+
+## Identity (STABLE)
+MindrianOS is a commercial Claude Code + Cowork plugin delivering PWS methodology as installable skills, commands, agents, and hooks. Users get Larry (AI teaching personality) plus a structured Data Room that passively captures insights and proactively surfaces gaps, contradictions, and convergence signals.
+
+## UI Enforcement (MANDATORY)
+All /mos: command output MUST follow the 4-zone anatomy from skills/ui-system/SKILL.md:
+1. Header Panel (room name, command, venture stage)
+2. Content Body (use the body_shape declared in the command's frontmatter)
+3. Intelligence Strip (conditional -- show if proactive findings exist)
+4. Action Footer (NEVER omit -- always suggest 2-3 next commands)
+
+Symbol vocabulary: use ONLY these glyphs: ■ ▼ ▶ ▷ ├─ └─ ✓ • ⚠ ⚡ ⬜ →
+Colors: green=success, cyan=info, yellow=warning, red=critical, gray=muted
+NO EMOJI anywhere in output. NO exceptions.
+
+## Dashboard Export Integrity (MANDATORY)
+When generating a dashboard, room export, or standalone HTML visualization:
+- ALWAYS use scripts/generate-standalone or scripts/serve-dashboard
+- NEVER generate HTML by hand -- the template at dashboard/index.html has full Cytoscape.js graph, De Stijl styling, intelligence panel, layer toggles, and chat UI
+- Improvised HTML will always be inferior to the real template
+
+## JTBD-context-only (Phase 114 -- precedence: initialPrompt wins)
+The agent frontmatter declares initialPrompt, which the platform auto-submits as turn 1. Larry's response to initialPrompt IS the greeting -- do NOT render an additional greeting block on top.
+Treat the room-state context below (venture stage, entry counts, section names, MINTO health, JTBD nudges) as awareness Larry already has. Use it to inform the response to initialPrompt -- reference specific state where natural, do not list it.
+Nudge content (when used) remains calibrated -- preserve wording exactly. Max 2-3 nudges woven into the response, never as a bulleted list at the top.
+NEVER describe features or slash commands abstractly. Every reference must connect to what the user HAS in their room and what they will GET from the action.
+Command menu rendering: only show the menu after the agent's response to initialPrompt completes (i.e., the menu is the closer, not the opener).
+On Desktop and Cowork, no SessionStart hook fires -- this block does not appear; initialPrompt + preloaded substrate carry the entire turn.
+Per Canon Part 10 sub-claim 1, conversation IS the surface; commands are internals -- this rule operationalizes that at the activation layer."
+
+# =============================================================================
+# DYNAMIC SUFFIX (changes per session -- room state, proactive signals, nudges)
+# =============================================================================
+
+context=""
+
+if [ -d "$ROOM_DIR" ]; then
+  # Fire-and-forget room hierarchy graph sync (Phase 59.2, D-16: never blocks)
+  ROOMS_HOME="${MINDRIAN_ROOMS_HOME:-$HOME/MindrianRooms}"
+  node "${SCRIPT_DIR}/sync-rooms-graph" "$ROOMS_HOME" >/dev/null 2>&1 &
+  node "${SCRIPT_DIR}/sync-rooms-brain" "$ROOMS_HOME" >/dev/null 2>&1 &
+
+  # =============================================================================
+  # CONTEXT INTELLIGENCE: Archetype detection + tiered loading (CTX-01, CTX-02, CTX-05)
+  # =============================================================================
+
+  # Detect user archetype and session count
+  ARCHETYPE_JSON=$(node "${PLUGIN_ROOT}/lib/core/user-archetype.cjs" "$ROOM_DIR" 2>/dev/null || echo '{"archetype":"default","confidence":"low","signals":[],"sessionCount":0,"domain":null}')
+  USER_ARCHETYPE=$(echo "$ARCHETYPE_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).archetype)}catch(_){console.log('default')}})" 2>/dev/null || echo "default")
+  SESSION_COUNT=$(echo "$ARCHETYPE_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).sessionCount||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+  ROOM_DOMAIN=$(echo "$ARCHETYPE_JSON" | node -e "process.stdin.on('data',d=>{try{const j=JSON.parse(d);console.log(j.domain||'')}catch(_){console.log('')}})" 2>/dev/null || echo "")
+
+  # Get MCP session profile recommendation
+  MCP_PROFILE_JSON=$(node "${PLUGIN_ROOT}/lib/core/mcp-profiles.cjs" get "$USER_ARCHETYPE" 2>/dev/null || echo '{"profile":"think","servers":["mindrian"],"maxTools":15}')
+  MCP_PROFILE=$(echo "$MCP_PROFILE_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).profile)}catch(_){console.log('think')}})" 2>/dev/null || echo "think")
+
+  # Read context bridge file for budget-aware tiering
+  CTX_PCT_RAW=""
+  BRIDGE_FILE="/tmp/mindrian-context-state"
+  if [ -f "$BRIDGE_FILE" ]; then
+    BRIDGE_AGE=$(( $(date +%s) - $(portable_stat_mtime "$BRIDGE_FILE") ))
+    if [ "$BRIDGE_AGE" -lt 300 ]; then
+      CTX_PCT_RAW=$(node -e "try{const d=require('fs').readFileSync('$BRIDGE_FILE','utf8');console.log(JSON.parse(d).ctx_pct||0)}catch(_){console.log(0)}" 2>/dev/null || echo "0")
+    fi
+  fi
+  CTX_PCT_INT="${CTX_PCT_RAW%.*}"
+  CTX_PCT_INT="${CTX_PCT_INT:-0}"
+
+  # Determine context tier based on budget and archetype (CTX-02)
+  # Tiers: minimal (~500 tokens) / balanced (~2K tokens) / rich (~5K tokens)
+  CONTEXT_TIER="balanced"
+  if [ "$CTX_PCT_INT" -ge 70 ]; then
+    CONTEXT_TIER="minimal"
+  elif [ "$CTX_PCT_INT" -lt 30 ] || [ "$USER_ARCHETYPE" = "venturist" ]; then
+    CONTEXT_TIER="rich"
+  fi
+  # Students default to minimal unless budget is wide open
+  if [ "$USER_ARCHETYPE" = "student" ] && [ "$CTX_PCT_INT" -ge 30 ]; then
+    CONTEXT_TIER="minimal"
+  fi
+
+  # Room exists -- compute state and build context
+  state_output=$("${SCRIPT_DIR}/compute-state" "$ROOM_DIR" 2>/dev/null || echo "Could not compute room state. Your room exists but state analysis failed. Try /mos:status to diagnose.")
+
+  # Read USER.md if exists
+  user_context=""
+  if [ -f "${ROOM_DIR}/USER.md" ]; then
+    user_context=$(cat "${ROOM_DIR}/USER.md" 2>/dev/null || true)
+  fi
+
+  # Read existing STATE.md if exists (last persisted state)
+  state_md=""
+  if [ -f "${ROOM_DIR}/STATE.md" ]; then
+    state_md=$(cat "${ROOM_DIR}/STATE.md" 2>/dev/null || true)
+  fi
+
+  # =============================================================================
+  # RETURNING USER GREETING (CTX-05)
+  # Session count > 3 triggers domain-specific greeting instead of full intro
+  # =============================================================================
+  RETURNING_USER_HINT=""
+  if [ "$SESSION_COUNT" -gt 3 ] && [ -n "$ROOM_DOMAIN" ]; then
+    RETURNING_USER_HINT="[Returning User] This is session #${SESSION_COUNT}. Skip the full introduction. Greet with domain awareness: \"I see you're continuing work on ${ROOM_DOMAIN}.\" Then go straight to actionable nudges."
+  fi
+
+  # =============================================================================
+  # OPPORTUNITY BANK SUMMARY (ONBD-04)
+  # Surface banked opportunities in returning user greeting
+  # =============================================================================
+  OPP_BANK_SUMMARY=""
+  OPP_BANK_DIR="${ROOM_DIR}/opportunity-bank"
+  if [ -d "$OPP_BANK_DIR" ]; then
+    OPP_BANK_JSON=$(node -e "
+      const ops = require('${PLUGIN_ROOT_FOR_NODE}/lib/core/opportunity-ops.cjs');
+      const result = ops.listOpportunities('${ROOM_DIR}');
+      const opps = result.opportunities || [];
+      if (opps.length === 0) { console.log(''); process.exit(0); }
+      const sorted = opps.sort((a,b) => (b.frontmatter.confidence||0) - (a.frontmatter.confidence||0));
+      const top = sorted[0];
+      console.log(JSON.stringify({
+        count: opps.length,
+        top_problem: (top.frontmatter.problem || '').substring(0, 100),
+        top_confidence: top.frontmatter.confidence || 0,
+        uncertainty_count: opps.filter(o => o.frontmatter.knight_position === 'uncertainty').length,
+        risk_count: opps.filter(o => o.frontmatter.knight_position === 'risk').length
+      }));
+    " 2>/dev/null || echo "")
+
+    if [ -n "$OPP_BANK_JSON" ]; then
+      OPP_COUNT=$(echo "$OPP_BANK_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).count||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+      if [ "$OPP_COUNT" -gt 0 ] 2>/dev/null; then
+        OPP_TOP=$(echo "$OPP_BANK_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).top_problem||'')}catch(_){console.log('')}})" 2>/dev/null || echo "")
+        OPP_CONF=$(echo "$OPP_BANK_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).top_confidence||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+        OPP_UNC=$(echo "$OPP_BANK_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).uncertainty_count||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+        OPP_RISK=$(echo "$OPP_BANK_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).risk_count||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+        OPP_BANK_SUMMARY="[Opportunity Bank] ${OPP_COUNT} banked opportunities (${OPP_RISK} risk, ${OPP_UNC} uncertainty). Strongest: \"${OPP_TOP}\" (confidence: ${OPP_CONF}). Reference in greeting: mention the count and strongest opportunity. Suggest /mos:opportunities to review the bank."
+      fi
+    fi
+  fi
+
+  # =============================================================================
+  # TIERED CONTEXT LOADING (CTX-02)
+  # minimal: state summary only (~500 tokens)
+  # balanced: state + user + brief proactive (~2K tokens)
+  # rich: state + user + full proactive + learnings (~5K tokens)
+  # =============================================================================
+
+  if [ "$CONTEXT_TIER" = "minimal" ]; then
+    # ~500 tokens: just state summary, no proactive analysis
+    context="\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[Context Tier: minimal | Archetype: ${USER_ARCHETYPE} | MCP Profile: ${MCP_PROFILE}]\n\n[Room State]\n${state_output}"
+    if [ -n "$RETURNING_USER_HINT" ]; then
+      context="${context}\n\n${RETURNING_USER_HINT}"
+    fi
+    if [ -n "$OPP_BANK_SUMMARY" ]; then
+      context="${context}\n\n${OPP_BANK_SUMMARY}"
+    fi
+  elif [ "$CONTEXT_TIER" = "rich" ]; then
+    # ~5K tokens: full context with proactive analysis, learnings, and detailed nudges
+    proactive_output=$("${SCRIPT_DIR}/analyze-room" "$ROOM_DIR" 2>/dev/null || echo "")
+    context="\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[Context Tier: rich | Archetype: ${USER_ARCHETYPE} | MCP Profile: ${MCP_PROFILE}]\n\n[Room State]\n${state_output}"
+    if [ -n "$RETURNING_USER_HINT" ]; then
+      context="${context}\n\n${RETURNING_USER_HINT}"
+    fi
+    if [ -n "$OPP_BANK_SUMMARY" ]; then
+      context="${context}\n\n${OPP_BANK_SUMMARY}"
+    fi
+    if [ -n "$user_context" ]; then
+      context="${context}\n\nUser context:\n${user_context}"
+    fi
+    if [ -n "$proactive_output" ] && [ "$proactive_output" != "NO_ROOM" ]; then
+      context="${context}\n\n## Proactive Room Intelligence\n${proactive_output}"
+    fi
+  else
+    # balanced (~2K tokens): state + user + brief proactive
+    proactive_output=$("${SCRIPT_DIR}/analyze-room" "$ROOM_DIR" 2>/dev/null || echo "")
+    context="\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[Context Tier: balanced | Archetype: ${USER_ARCHETYPE} | MCP Profile: ${MCP_PROFILE}]\n\n[Room State]\n${state_output}"
+    if [ -n "$RETURNING_USER_HINT" ]; then
+      context="${context}\n\n${RETURNING_USER_HINT}"
+    fi
+    if [ -n "$OPP_BANK_SUMMARY" ]; then
+      context="${context}\n\n${OPP_BANK_SUMMARY}"
+    fi
+    if [ -n "$user_context" ]; then
+      context="${context}\n\nUser context:\n${user_context}"
+    fi
+    if [ -n "$proactive_output" ] && [ "$proactive_output" != "NO_ROOM" ]; then
+      # Truncate proactive output for balanced tier (first 30 lines max)
+      proactive_brief=$(echo "$proactive_output" | head -30)
+      context="${context}\n\n## Proactive Room Intelligence (summary)\n${proactive_brief}"
+    fi
+  fi
+
+  # Read context bridge file for budget display (reuses BRIDGE_FILE read from tiering)
+  CTX_BUDGET=""
+  if [ -f "$BRIDGE_FILE" ]; then
+    BRIDGE_AGE_DISP=$(( $(date +%s) - $(portable_stat_mtime "$BRIDGE_FILE") ))
+    if [ "$BRIDGE_AGE_DISP" -lt 300 ]; then
+      CTX_MODEL=$(node -e "try{const d=require('fs').readFileSync('$BRIDGE_FILE','utf8');console.log(JSON.parse(d).model_name||'unknown')}catch(_){console.log('unknown')}" 2>/dev/null || echo "unknown")
+      CTX_PCT=$(node -e "try{const d=require('fs').readFileSync('$BRIDGE_FILE','utf8');console.log(JSON.parse(d).ctx_pct||0)}catch(_){console.log(0)}" 2>/dev/null || echo "0")
+      CTX_SIZE=$(node -e "try{const d=require('fs').readFileSync('$BRIDGE_FILE','utf8');console.log(JSON.parse(d).ctx_size||200000)}catch(_){console.log(200000)}" 2>/dev/null || echo "200000")
+      if [ -n "$CTX_PCT" ]; then
+        CTX_BUDGET="[Context Budget] Model: ${CTX_MODEL:-unknown}, Usage: ${CTX_PCT}%, Window: ${CTX_SIZE:-200000} tokens, Tier: ${CONTEXT_TIER}"
+        # Add warning if above threshold
+        CTX_INT="${CTX_PCT%.*}"
+        if [ "${CTX_INT:-0}" -ge 85 ]; then
+          CTX_BUDGET="${CTX_BUDGET} -- CRITICAL: Consider suggesting /clear"
+        elif [ "${CTX_INT:-0}" -ge 70 ]; then
+          CTX_BUDGET="${CTX_BUDGET} -- WARNING: Context getting tight"
+        fi
+      fi
+    fi
+  fi
+
+  if [ -n "$CTX_BUDGET" ]; then
+    context="${context}\n\n${CTX_BUDGET}"
+  fi
+
+  # Detect integrations
+  INTEG_OUTPUT=$(node "${PLUGIN_ROOT}/bin/mindrian-tools.cjs" detect-integrations 2>/dev/null || echo "{}")
+  INTEG_COUNT=$(echo "$INTEG_OUTPUT" | node -e "let s='';process.stdin.on('data',c=>s+=c);process.stdin.on('end',()=>{try{const d=JSON.parse(s);console.log(Object.values(d).filter(v=>v&&v.status==='connected').length)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+
+  if [ "$INTEG_COUNT" -gt 0 ]; then
+    context="${context}\n\nIntegrations: ${INTEG_COUNT} connected"
+  fi
+
+  # Track session analytics
+  bash "${SCRIPT_DIR}/track-analytics" session-start 2>/dev/null &
+
+  # Generate learnings from usage patterns
+  bash "${SCRIPT_DIR}/learn-from-usage" 2>/dev/null
+
+  # Load learnings if available (skip on minimal tier to save tokens)
+  if [ "$CONTEXT_TIER" != "minimal" ] && [ -f "${ROOM_DIR}/.learnings.md" ]; then
+    learnings=$(cat "${ROOM_DIR}/.learnings.md" 2>/dev/null || true)
+    if [ -n "$learnings" ]; then
+      context="${context}\n\n## Usage Learnings (adapt your behavior accordingly)\n${learnings}"
+    fi
+  fi
+
+  # Student learning progress injection (CTX-06 - read)
+  if [ "$USER_ARCHETYPE" = "student" ] && [ -f "${ROOM_DIR}/.context/learning-progress.md" ]; then
+    progress_summary=$(head -10 "${ROOM_DIR}/.context/learning-progress.md" 2>/dev/null || true)
+    if [ -n "$progress_summary" ]; then
+      context="${context}\n\n## Learning Progress\n${progress_summary}"
+    fi
+  fi
+
+  # Multi-room context (ROOM-05)
+  REGISTRY="${WORK_DIR}/.rooms/registry.json"
+  if [ -f "$REGISTRY" ]; then
+    room_count=$(node -e "try{const r=require('$REGISTRY');console.log(Object.keys(r.rooms||{}).length)}catch(_){console.log(0)}" 2>/dev/null || echo "0")
+
+    if [ "$room_count" -gt 1 ]; then
+      other_rooms=$(node -e "
+try {
+  const r = require('$REGISTRY');
+  const active = r.active || '';
+  const rooms = r.rooms || {};
+  const lines = [];
+  for (const name of Object.keys(rooms)) {
+    if (name === active) continue;
+    const room = rooms[name] || {};
+    const status = room.status || 'parked';
+    const sym = status === 'parked' ? String.fromCharCode(9654) : String.fromCharCode(9655);
+    const display = room.venture_name || name;
+    lines.push('  ' + sym + ' ' + display.padEnd(25).slice(0, 25) + ' ' + status);
+  }
+  if (lines.length) console.log(lines.slice(0, 5).join('\n'));
+  if (lines.length > 5) console.log('  ...and ' + (lines.length - 5) + ' more (/mos:rooms list)');
+} catch (_) {}
+" 2>/dev/null || echo "")
+
+      if [ -n "$other_rooms" ]; then
+        context="${context}\n\n  Other rooms detected -- fire the AskUserQuestion card (the room-chooser) offering these as options; never render this as a prose list (SEED-021):\n${other_rooms}\n\n  ▷ /mos:rooms                      Manage your rooms (non-option footer, not part of the card)"
+      fi
+    fi
+  fi
+
+  # Generate JTBD nudges + dynamic command menu
+  jtbd_output=$("${SCRIPT_DIR}/build-jtbd-nudges" "$ROOM_DIR" "$PLUGIN_ROOT" 2>/dev/null || echo "")
+
+  # Add nudges to dynamic context
+  context="${context}\n\n## Your Nudges for This Session\n${jtbd_output}"
+
+  # Combine: stable prefix + dynamic suffix
+  context="${stable_prefix}${context}\n\nThe user has an active Data Room."
+else
+  # Cold start: show De Stijl Mondrian banner on EVERY cold start (no room detected).
+  # Banner path resolved via platform.cjs.resolveHookScript (plan 85-06).
+  if [ -n "$LAST_VERSION" ] && [ "$LAST_VERSION" != "$PLUGIN_VERSION" ]; then
+    # Plugin was updated -- show version transition banner
+    bash "${BANNER_SCRIPT}" "$PLUGIN_VERSION" "$LAST_VERSION" >&2 2>/dev/null || true
+  else
+    # Standard cold start or first install -- show current version banner
+    bash "${BANNER_SCRIPT}" "$PLUGIN_VERSION" >&2 2>/dev/null || true
+  fi
+
+  # Determine onboarding type from LAST_VERSION markers (kept separate from banner)
+  if [ -z "$LAST_VERSION" ]; then
+    # First-ever cold start -- no marker file exists
+    :
+  elif [ "$LAST_VERSION" != "$PLUGIN_VERSION" ]; then
+    # Plugin was updated
+    :
+  fi
+  # Phase 123 Plan-02 (HARNESS-123-05): the line-419 cold-start-only
+  # ~/.mindrian-last-version write was REMOVED. The single writer is now the
+  # EARLY install-state record block at ~L107-220 (right after LAST_VERSION_FILE
+  # is read), which rewrites ~/.mindrian-last-version unconditionally per D-03
+  # + RESEARCH Override 4. Pitfall 7 fix.
+
+  # Check onboarding status (per ONBOARD-01)
+  ONBOARD_STATUS=$("${SCRIPT_DIR}/check-onboard" 2>/dev/null || echo "CURRENT")
+  ONBOARD_TYPE=$(echo "$ONBOARD_STATUS" | head -1)
+
+  # Command count computed LIVE (was a hardcoded "45" literal that drifted
+  # stale across every command-count-adding phase -- confirmed 2026-07-05 via
+  # a real Windows cross-check: disk had 107 clean commands/*.md, the banner
+  # still advertised 45, and doc archaeology showed the same literal frozen at
+  # 71/66/72/83 at various earlier points. Never recompute by hand again.
+  LIVE_COMMAND_COUNT=$(ls -1 "${PLUGIN_ROOT}/commands/"*.md 2>/dev/null | wc -l | tr -d ' ')
+  if [ -z "$LIVE_COMMAND_COUNT" ] || [ "$LIVE_COMMAND_COUNT" = "0" ]; then LIVE_COMMAND_COUNT="all"; fi
+  # FIRST-REWARD DECLARATION (Phase 267.3, ruling D-A). This branch is declared
+  # in data/first-reward-surfaces.json as id `session-start:COLD_START_MENU`,
+  # interactive_first_reward `--none (diagnostic surface)`. A bash hook has no
+  # frontmatter block, so the declaration lives in that registry instead and is
+  # validated by `node scripts/check-reward-before-investment.cjs --surfaces .`,
+  # wired fail-closed as gate 10d of scripts/verify-release. Change the prose
+  # below and you must revisit the record: the registry's `anchor` field points
+  # at a literal inside this assignment, and tests/test-267.3-session-start-
+  # declaration.cjs reds the moment that literal stops existing.
+  COLD_START_MENU="---\nGet started:\n  /mos:new-project .... Start a new venture project\n  /mos:help ........... See what Larry can help with\n  /mos:diagnose ....... Classify your problem type\n\nOr just talk -- Larry is a thinking partner first.\nType /mos: to see ${LIVE_COMMAND_COUNT} commands.\n  /mos:update ......... Check for latest features\n---"
+
+  # FIRST_INSTALL_HANDOFF (Phase 267.2 W1, HOOK-09): the FIRST_INSTALL
+  # branch's own trailing block, replacing that branch's use of
+  # ${COLD_START_MENU} (decision D-F: the COLD_START_MENU variable itself
+  # stays byte-identical and is still interpolated by the UPDATE and
+  # MODE_ROUTING branches below). Names the one open question as the next
+  # move and hands the rest of the turn to scripts/first-install-router.cjs,
+  # which classifies the user's free-text answer locally and routes it.
+  FIRST_INSTALL_HANDOFF="---\nThat one question is the whole ask. scripts/first-install-router.cjs is already listening on this turn -- it classifies your answer locally and routes what happens next, no menu required.\n---"
+
+  # Enable auto-update by default for new installs
+  if [ "$ONBOARD_TYPE" = "FIRST_INSTALL" ]; then
+    mkdir -p "$HOME/.mindrian" 2>/dev/null
+    touch "$HOME/.mindrian/auto-update" 2>/dev/null
+  fi
+
+  # FIRST-REWARD DECLARATION (Phase 267.3, ruling D-A; rewritten Phase 267.2
+  # W1, HOOK-09). Declared in data/first-reward-surfaces.json as id
+  # `session-start:FIRST_INSTALL`, interactive_first_reward `instant_brief`.
+  # This branch no longer promises a reward in prose: it hands first contact
+  # to scripts/first-install-router.cjs, which classifies the user's one-
+  # sentence free-text answer locally and, on the venture-shaped path, fires
+  # the room-free Instant Brief pipeline (lib/core/mva-orchestrator.cjs) out
+  # of band, draining the rendered result as additionalContext one turn
+  # later (closing GAP R-1, .planning/research/2026-08-27-hooked-first-
+  # install-audit.md). The registry record was updated in this same change.
+  # Change the prose below and you must revisit the record: the registry's
+  # `anchor` field points at a literal inside this assignment, and
+  # tests/test-267.3-session-start-declaration.cjs reds the moment that
+  # literal stops existing.
+  if [ "$ONBOARD_TYPE" = "FIRST_INSTALL" ]; then
+    context="${stable_prefix}\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[MindrianOS Onboarding] First install detected.\n\nThis is the user's very first session with MindrianOS. Welcome them warmly using one of your signature openers (\"Very simply...\", \"Here's the thing...\", \"One thing I've learned...\"). Be conversational and direct. No emoji. No filler phrases like \"I'd be happy to help\" or \"Great question!\". Your turn wears exactly one De Stijl glyph, per Canon Part 12.\n\nAsk ONE open question, in your own voice, about what they are working on or what brought them here today, and accept a free-text answer. Do NOT render a command menu, an options card, or a numbered list on this turn: scripts/first-install-router.cjs classifies that free-text answer and injects the routing instruction itself, so nothing here needs to be chosen or offered by the model.\n\nAfter the user answers, present capabilities as natural actions (not slash commands):\n- You can tell Larry about a meeting you had and he will file and analyze it\n- You can ask Larry to diagnose what type of problem you are working on\n- You can ask Larry to grade your venture honestly\n- You can ask Larry to find relevant grants and opportunities\n- You can ask Larry to get 6 different perspectives on your work\n- You can ask Larry to query your knowledge graph\n- You can start a new project and Larry will set up your Data Room\n\nAfter the onboarding conversation completes or the user skips, run: bash \"${PLUGIN_ROOT}/scripts/check-onboard\" --write\n\n${FIRST_INSTALL_HANDOFF}"
+
+  # FIRST-REWARD DECLARATION (Phase 267.3, ruling D-A). Declared in
+  # data/first-reward-surfaces.json as id `session-start:UPDATE`,
+  # interactive_first_reward `--none (diagnostic surface)`. The what-is-new
+  # digest below is real machinery reading CHANGELOG.md, but its output is fully
+  # predictable given the version pair, which is the "a state report is not a
+  # reward" case docs/reward-before-investment-rule.md:59-60 already names. This
+  # opt-out is honest, not a deferred gap; nothing is queued against it.
+  elif [ "$ONBOARD_TYPE" = "UPDATE" ]; then
+    PREV_VER=$(echo "$ONBOARD_STATUS" | grep "^PREVIOUS=" | cut -d= -f2)
+    CHANGELOG_DIFF=$(sed -n "/^## \[${PLUGIN_VERSION}\]/,/^## \[${PREV_VER}\]/p" "$PLUGIN_ROOT/CHANGELOG.md" 2>/dev/null | head -n -1 | grep "^- " || echo "")
+    ONBOARD_STEPS=$(sed -n "/^## \[${PLUGIN_VERSION}\]/,/^## \[/{ /^  - \"/p; }" "$PLUGIN_ROOT/CHANGELOG.md" 2>/dev/null | sed 's/^  - "//;s/"$//' || echo "")
+
+    WHATS_NEW=""
+    if [ -n "$ONBOARD_STEPS" ]; then
+      WHATS_NEW="$ONBOARD_STEPS"
+    elif [ -n "$CHANGELOG_DIFF" ]; then
+      WHATS_NEW="$CHANGELOG_DIFF"
+    fi
+
+    context="${stable_prefix}\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[Update] v${PREV_VER} -> v${PLUGIN_VERSION}.\n\nWelcome back. The user has updated from v${PREV_VER} to v${PLUGIN_VERSION}. Greet them warmly using a signature opener. No emoji. No filler.\n\nSince they last checked in, here is what you learned to do:\n${WHATS_NEW}\n\nCRITICAL: Frame EVERY new capability using the JTBD formula:\n\"When [situation the user faces], you want to [progress they are trying to make], so you can [outcome]. Now you can: /mos:command\"\n\nDo NOT list features technically. Instead, for each new capability:\n1. Name a REAL struggling moment the user has (based on what venture builders actually face)\n2. Show how this capability REMOVES that struggle\n3. End with the specific command and time estimate\n\nExample for model routing: \"When you are running deep methodology sessions and burning through tokens, you want to control cost without sacrificing teaching quality. Now you can: /mos:models set balanced -- Opus for teaching, Haiku for scanning, 66% less cost.\"\n\nExample for parallel agents: \"When you have 3 weak Sections and only 30 minutes before a meeting, you want to fill all the gaps at once. Now you can: /mos:act --swarm -- 3 frameworks in parallel, 5 minutes instead of 45.\"\n\nAfter showing what is new with JTBD framing, offer the full tour: \"Want to see everything? /mos:onboard -- 7 steps, 3 minutes.\"\n\nThen run: bash \"${PLUGIN_ROOT}/scripts/check-onboard\" --write\n\nThen show the command menu below.\n\n${COLD_START_MENU}"
+
+  else
+    # CURRENT -- returning no-room user with mode routing
+
+    # Read scratchpad for cross-session continuity (CONV-06)
+    SCRATCHPAD_SUMMARY=""
+    SCRATCHPAD_JSON=$(node -e "const sp = require('${PLUGIN_ROOT_FOR_NODE}/lib/core/scratchpad-ops.cjs'); console.log(JSON.stringify(sp.readScratchpad()))" 2>/dev/null || echo "")
+    if [ -n "$SCRATCHPAD_JSON" ]; then
+      SP_OPP_COUNT=$(echo "$SCRATCHPAD_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).opportunities.length||0)}catch(_){console.log(0)}})" 2>/dev/null || echo "0")
+      SP_PERSONA=$(echo "$SCRATCHPAD_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).persona||'')}catch(_){console.log('')}})" 2>/dev/null || echo "")
+      SP_LAST=$(echo "$SCRATCHPAD_JSON" | node -e "process.stdin.on('data',d=>{try{console.log(JSON.parse(d).last_updated||'')}catch(_){console.log('')}})" 2>/dev/null || echo "")
+      if [ "$SP_OPP_COUNT" -gt 0 ] 2>/dev/null; then
+        SCRATCHPAD_SUMMARY="[Scratchpad] ${SP_OPP_COUNT} banked opportunities from previous sessions."
+        if [ -n "$SP_PERSONA" ]; then
+          SCRATCHPAD_SUMMARY="${SCRATCHPAD_SUMMARY} Detected persona: ${SP_PERSONA}."
+        fi
+        if [ -n "$SP_LAST" ]; then
+          SCRATCHPAD_SUMMARY="${SCRATCHPAD_SUMMARY} Last active: ${SP_LAST}."
+        fi
+        SCRATCHPAD_SUMMARY="${SCRATCHPAD_SUMMARY} Reference these in your greeting: 'Last time we captured ${SP_OPP_COUNT} opportunities. Want to continue exploring, or are you ready to build a room?'"
+      fi
+    fi
+
+    # MODE_ROUTING: Three entry modes for no-room sessions
+    #
+    # FIRST-REWARD DECLARATION (Phase 267.3, ruling D-A). Declared in
+    # data/first-reward-surfaces.json as id `session-start:MODE_ROUTING`,
+    # interactive_first_reward `--none (diagnostic surface)`. This branch asks
+    # the user to pick an entry mode before handing anything back, which is
+    # investment before reward, the exact ordering the rule exists to prevent.
+    # No reward member of the closed vocabulary would be a true statement about
+    # it, so it declares the opt-out. Fixing the ordering is Phase 267.2's
+    # onboarding-flow work, not a declaration change.
+    MODE_MENU="Fire the AskUserQuestion card with these three modes as the options; never render this menu as text (SEED-021).\n\n  [1] Just Talk\n      \"Help me think through something -- no strings attached\"\n      Larry explores with you. Nothing saved. Pure thinking partner.\n\n  [2] Explore + Capture\n      \"Help me explore -- and catch the structure as it emerges\"\n      Larry talks AND detects patterns, personas, opportunities.\n      When you are ready, everything seeds a Data Room.\n\n  [3] Build a Room\n      \"I know what I am building -- let me set up the room first\"\n      Jump straight to /mos:new-project and start working.\n\nDefault to Just Talk if the navigator starts talking instead of picking."
+
+    context="${stable_prefix}\n\n--- DYNAMIC SESSION CONTEXT ---\n\n[MindrianOS Mode Routing] No room detected. Fire the AskUserQuestion card with the three modes below as options; default to Just Talk if the navigator starts talking instead of picking; never render this menu as text (SEED-021).\n\n${MODE_MENU}"
+
+    # Inject scratchpad context if present (CONV-06)
+    if [ -n "$SCRATCHPAD_SUMMARY" ]; then
+      context="${context}\n\n${SCRATCHPAD_SUMMARY}"
+    fi
+
+    context="${context}\n\n## Mode Behavior Instructions\n\nAfter the user selects a mode (or defaults to Mode 1 by just talking):\n\n**Mode 1 (Just Talk):** You are a thinking partner. No methodology routing, no filing, no room creation suggestions unless the user explicitly asks. Use the Ask-Tell Dial naturally. Do NOT suggest /mos:new-project unprompted.\n\n**Mode 2 (Explore+Capture):** You are a thinking partner who ALSO detects persona (TTO/Researcher/Business) within the first 2-3 exchanges. Once persona is detected, follow the corresponding Brain framework chain (see conversation-mode skill). Actively look for well-defined problems and mirror solutions to bank as opportunities. Tell the user when you spot one.\n\n**Mode 3 (Build a Room):** Immediately route to /mos:new-project. Say: Let us set up your Data Room. Tell me about what you are building. Then follow the new-project flow.\n\n**Default:** If the user just starts talking without selecting a mode number, treat as Mode 1. If they mention technologies, patents, research, or business opportunities within the first 2 exchanges, suggest upgrading to Mode 2: Sounds like there is real structure here. Want me to start capturing it? (That is Mode 2.)\n\nAFTER showing the mode menu, show the command menu:\n\n${COLD_START_MENU}"
+  fi
+fi
+
+# ---------------------------------------------------------------------------
+# ACTIVE ROOM CONTEXT injection (Phase 83-02, SCOPE-INJ-01/03)
+#
+# Reads ~/MindrianRooms/.rooms/registry.json "active" field, resolves the
+# room path and project name from its STATE.md, and appends a locked
+# ACTIVE ROOM CONTEXT + CROSS-ROOM POLICY block to $context. Graceful
+# no-registry / no-active fallback: block is omitted silently, no error.
+# See .planning/phases/83-cross-session-scope-injection/83-02-PLAN.md
+# ---------------------------------------------------------------------------
+inject_active_room_context() {
+  # Resolve MindrianRooms root (3-way fallback).
+  local rooms_root=""
+  if [ -n "${MINDRIAN_ROOMS_ROOT:-}" ]; then
+    rooms_root="${MINDRIAN_ROOMS_ROOT}"
+  elif [ -d "${HOME}/MindrianRooms" ]; then
+    rooms_root="${HOME}/MindrianRooms"
+  else
+    local found
+    found=$(find "${HOME}" -maxdepth 2 -type d -name MindrianRooms 2>/dev/null | head -1 || true)
+    if [ -n "$found" ]; then
+      rooms_root="$found"
+    fi
+  fi
+
+  if [ -z "$rooms_root" ]; then
+    echo "[scope-injection] no MindrianRooms root resolved, skipping" >&2
+    return 0
+  fi
+
+  local registry="${rooms_root}/.rooms/registry.json"
+  if [ ! -f "$registry" ]; then
+    echo "[scope-injection] no registry at ${registry}, skipping" >&2
+    return 0
+  fi
+
+  # Extract active field via node (python3 is a Microsoft Store alias
+  # stub on Windows; node is a hard plugin dependency so it works
+  # everywhere). Ported from inline python3 in plan 85-01.
+  local active
+  active=$(node -e "try{const d=require(process.argv[1]);const a=(d.active||'').toString();process.stdout.write(a.trim())}catch(_){}" "$registry" 2>/dev/null || echo "")
+
+  if [ -z "$active" ]; then
+    echo "[scope-injection] registry active field empty, skipping" >&2
+    return 0
+  fi
+
+  local active_path="${rooms_root}/${active}"
+  if [ ! -d "$active_path" ]; then
+    echo "[scope-injection] active room directory missing: ${active_path}, skipping" >&2
+    return 0
+  fi
+
+  # Parse project name from STATE.md frontmatter (bounded read, prompt-injection safe).
+  local project="unspecified"
+  local state_md="${active_path}/STATE.md"
+  if [ -f "$state_md" ]; then
+    local raw
+    raw=$(head -n 30 "$state_md" 2>/dev/null | grep -m1 '^project:' | sed 's/^project:[[:space:]]*//' || true)
+    # Strip backticks, newlines, and trim whitespace. Cap at 120 chars.
+    raw=$(printf '%s' "$raw" | tr -d '`' | tr -d '\r\n' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//' | cut -c1-120)
+    if [ -n "$raw" ]; then
+      project="$raw"
+    fi
+  fi
+
+  # Section focus from statusline tracking file if present.
+  local section_focus="no current section"
+  local tracking="${HOME}/.mindrian/statusline-section"
+  if [ -f "$tracking" ]; then
+    local sraw
+    sraw=$(head -n 1 "$tracking" 2>/dev/null | tr -d '\r\n' | cut -c1-120 || true)
+    if [ -n "$sraw" ]; then
+      section_focus="$sraw"
+    fi
+  fi
+
+  # Build and append the locked block. Format is mandated by
+  # 83-02-PLAN.md section 5 and 83-CONTEXT.md REVISION 2.
+  local block
+  block="\n\n## ACTIVE ROOM CONTEXT\n\nYou are scoped to the room: ${active}\nPath: ${active_path}\nProject: ${project}\nSection focus: ${section_focus}\n\n## CROSS-ROOM POLICY\n\nWhen the user mentions a room name or topic that maps to a different\nroom than the active one, you must:\n1. Acknowledge the mismatch out loud and name both rooms\n2. Ask whether to switch the active room or continue in the current scope\n3. Refuse to draft artifacts that belong to a different room without\n   explicit user confirmation of intent\n4. Never file content derived from another room into the active room"
+
+  context="${context}${block}"
+}
+
+inject_active_room_context || true
+
+# ---------------------------------------------------------------------------
+# Phase 88.1-06: SessionStart MINTO banner (navigator re-entry affordance)
+#
+# Emits a compact 4-line banner AFTER the Phase 83 ACTIVE ROOM CONTEXT
+# block and BEFORE the Phase 88-07 TRIPLE_CONTEXT block. Format:
+#
+#   MindrianOS v${version}
+#   Room: ${room_slug}
+#   Focus (top 3 recently-active sections):
+#     ${glyph1} ${section1}: "${gt1_truncated}"
+#     ${glyph2} ${section2}: "${gt2_truncated}"
+#     ${glyph3} ${section3}: "${gt3_truncated}"
+#
+# Ordering contract: identity (ACTIVE ROOM) -> focus snapshot (this
+# banner) -> full per-section memory (TRIPLE_CONTEXT). The banner is
+# the re-entry affordance per Canon Part 1; TRIPLE_CONTEXT below is
+# the full LOCAL context per Canon Part 3.
+#
+# Budget policy: banner reserves ~200 tokens when all 3 rows render.
+# Under tight SESSION_START_BUDGET_TOKENS the formatter drops rows in
+# reverse order (3rd -> 2nd -> 1st), then drops the focus-header
+# entirely, leaving brand + room visible. TRIPLE_CONTEXT below honors
+# its own 5000-token default budget independently.
+#
+# Soft-fail contract: `env node -e ... 2>/dev/null || echo ""` means
+# any internal failure (malformed triple, missing module, stat error)
+# emits nothing and session-start continues. Banner errors NEVER block
+# startup.
+#
+# Part 8 boundary: triples are read via lib/core/folder-memory.cjs
+# readTriple (the canonical Phase 88-01 contract). Version is read from
+# .claude-plugin/plugin.json (LOCAL). Zero Brain / fetch / external
+# calls in the payload.
+#
+# Plan 88.1-04 cache reuse: the formatter's classifyHealth +
+# truncateGoverningThought come from lib/core/statusline-cache.cjs so
+# the banner glyph is byte-identical with statusline + /mos:status.
+# ---------------------------------------------------------------------------
+if [ -n "${ROOM_DIR}" ] && [ -d "${ROOM_DIR}" ]; then
+  BANNER_MINTO=$(env ROOM_DIR_ENV="${ROOM_DIR}" PLUGIN_ROOT_ENV="${PLUGIN_ROOT}" node -e '
+    "use strict";
+    const fs = require("fs");
+    const path = require("path");
+    const roomDir = process.env.ROOM_DIR_ENV;
+    const pluginRoot = process.env.PLUGIN_ROOT_ENV;
+    try {
+      const fmt = require(path.join(pluginRoot, "lib", "memory", "sessionstart-banner-formatter.cjs"));
+      const fm = require(path.join(pluginRoot, "lib", "core", "folder-memory.cjs"));
+      // Plan 88.1-04 cache reuse: warm statusline-cache for the top-3
+      // sections so the next statusline tick hits the cache. Cache module
+      // is optional; banner still renders without it.
+      let cache = null;
+      try {
+        cache = require(path.join(pluginRoot, "lib", "core", "statusline-cache.cjs"));
+      } catch (_e) { cache = null; }
+
+      // Derive room slug from the room directory basename. Callers can
+      // override via MINDRIAN_ROOM_SLUG but default is reliable.
+      const roomSlug = process.env.MINDRIAN_ROOM_SLUG || path.basename(roomDir);
+
+      // Enumerate subdirs with ROOM.md; compute effective activity mtime
+      // per section as max(section_root_mtime, MINTO.md mtime, max
+      // artifact .md mtime). Caller owns fs reads so the formatter stays
+      // pure (Part 8).
+      let entries = [];
+      try {
+        entries = fs.readdirSync(roomDir, { withFileTypes: true })
+          .filter((d) => d.isDirectory() && d.name[0] !== ".");
+      } catch (_e) { entries = []; }
+
+      const triples = {};
+      for (const d of entries) {
+        const sp = path.join(roomDir, d.name);
+        try {
+          if (!fs.existsSync(path.join(sp, "ROOM.md"))) continue;
+          // Warm-cache lookup first; fall through to readTriple on miss.
+          let t = null;
+          if (cache && typeof cache.getCached === "function") {
+            const hit = cache.getCached(roomDir, sp);
+            if (hit && hit.fresh && hit.value) t = hit.value;
+          }
+          if (!t) {
+            t = fm.readTriple(sp);
+            if (cache && typeof cache.setCached === "function") {
+              try { cache.setCached(roomDir, sp, t); } catch (_e) {}
+            }
+          }
+
+          // Compute effective activity mtime.
+          let mtime = 0;
+          try {
+            const sstat = fs.statSync(sp);
+            if (sstat && sstat.mtimeMs) mtime = Math.max(mtime, sstat.mtimeMs);
+          } catch (_e) {}
+          try {
+            const mpath = path.join(sp, "MINTO.md");
+            if (fs.existsSync(mpath)) {
+              const mst = fs.statSync(mpath);
+              if (mst && mst.mtimeMs) mtime = Math.max(mtime, mst.mtimeMs);
+            }
+          } catch (_e) {}
+          try {
+            const items = fs.readdirSync(sp);
+            for (const n of items) {
+              if (n[0] === ".") continue;
+              if (!n.endsWith(".md")) continue;
+              if (n === "ROOM.md" || n === "STATE.md" || n === "MINTO.md" || n === "TEAM-STATE.md") continue;
+              const fst = fs.statSync(path.join(sp, n));
+              if (fst && fst.mtimeMs) mtime = Math.max(mtime, fst.mtimeMs);
+            }
+          } catch (_e) {}
+
+          // Attach the effective mtime onto the reasoning payload for
+          // the formatter top-3 selector. Non-destructive decoration.
+          if (t && t.reasoning && typeof t.reasoning === "object") {
+            t.reasoning._mtime = mtime;
+          }
+          triples[d.name] = t;
+        } catch (_e) { /* skip this section */ }
+      }
+
+      // Resolve version dynamically (never hardcoded; release-safe).
+      const version = fmt.readPluginVersion(pluginRoot);
+
+      // Budget: reserve ~200 tokens for the banner. Under very tight
+      // total budget the formatter drops rows to fit.
+      let budget = fmt.BANNER_RESERVE_TOKENS || 200;
+      const envBudget = parseInt(process.env.SESSION_START_BUDGET_TOKENS || "", 10);
+      if (Number.isFinite(envBudget) && envBudget > 0 && envBudget < 1000) {
+        // Under very tight total budget (< 1000), proportionally shrink
+        // the banner share so TRIPLE_CONTEXT still has room downstream.
+        budget = Math.max(50, Math.floor(envBudget * 0.2));
+      }
+
+      const out = fmt.formatBanner({
+        roomRoot: roomDir,
+        roomSlug: roomSlug,
+        triples: triples,
+        version: version,
+        budget: budget,
+      });
+      process.stdout.write(out || "");
+    } catch (_e) { /* soft-fail: emit nothing */ }
+  ' 2>/dev/null || echo "")
+  if [ -n "${BANNER_MINTO}" ]; then
+    context="${context}
+
+${BANNER_MINTO}"
+  fi
+fi
+# --- end Phase 88.1-06 banner ---
+
+# ---------------------------------------------------------------------------
+# Phase 88-07: TRIPLE_CONTEXT injection (per-section memory triple)
+#
+# Wakes Larry up per-section with what references belong, what state the
+# section is in, what the governing thought is, what arguments support it,
+# and what decisions the user has already made. Consumes 88-06's
+# .mindrian/session-snapshot.json when present; falls back to live
+# folder-memory.readTriple walk when the snapshot is missing (e.g. first
+# session after install, or the room was modified outside a previous Stop).
+#
+# Ordering contract: this block MUST appear AFTER the Phase 83 ACTIVE ROOM
+# CONTEXT block (which anchors the room identity) and BEFORE the SEALED
+# ROOMS walker (which scopes cross-room policy). Test 7 asserts the
+# ACTIVE ROOM CONTEXT -> TRIPLE_CONTEXT sequence.
+#
+# Budget: the formatter enforces DEFAULT_BUDGET_TOKENS = 5000 (grounded in
+# a measured baseline ~3825-token session-start emission; see
+# .planning/phases/88-feynman-minto-memory-layer/88-07-SUMMARY.md). Users
+# override via SESSION_START_BUDGET_TOKENS env var; the env propagates into
+# the node -e subshell automatically (process.env inheritance).
+#
+# Soft-fail contract: the || echo "" + 2>/dev/null on the outer node
+# invocation means any failure inside the Node payload (malformed JSON,
+# readTriple throw, formatter crash) emits nothing and the hook exits 0.
+# See lib/memory/session-start-triple-injection.test.cjs Test 8.
+#
+# No direct MINTO.md reads: goes through lib/core/folder-memory.cjs per
+# the 88-01 read contract (Phase 88 decision: readTriple is the ONLY
+# supported way to read the triple).
+# ---------------------------------------------------------------------------
+if [ -n "${ROOM_DIR}" ] && [ -d "${ROOM_DIR}" ] && [ -d "${ROOM_DIR}/.mindrian" ]; then
+  # env-prefix inside a command substitution does NOT propagate; we use `env`
+  # to set ROOM_DIR_ENV + PLUGIN_ROOT_ENV for the node -e subshell only.
+  # SESSION_START_BUDGET_TOKENS is inherited automatically via the outer
+  # process env (no explicit forwarding needed).
+  #
+  # Phase 90-03: this block now ALSO computes Brain staleness per section
+  # via lib/core/brain-md-staleness.cjs and enqueues regen for stale
+  # sections through lib/core/brain-derivation-queue.cjs. The scan is
+  # LOCAL-only per Canon Part 8 (no content queries to Brain). Feature
+  # flag: BRAIN_STALENESS_SKIP=1 disables the Brain annotation and enqueue
+  # paths, restoring pre-90-03 behavior byte-for-byte (emergency disable).
+  TRIPLE_CONTEXT=$(env ROOM_DIR_ENV="${ROOM_DIR}" PLUGIN_ROOT_ENV="${PLUGIN_ROOT}" node -e '
+    "use strict";
+    const fs = require("fs");
+    const path = require("path");
+    const roomDir = process.env.ROOM_DIR_ENV;
+    const pluginRoot = process.env.PLUGIN_ROOT_ENV;
+    try {
+      const fm = require(path.join(pluginRoot, "lib", "core", "folder-memory.cjs"));
+      const fmt = require(path.join(pluginRoot, "lib", "memory", "triple-context-formatter.cjs"));
+      // Phase 90-03 integration modules (loaded lazily; soft-fail if unavailable).
+      let brainStale = null;
+      let brainQueue = null;
+      if (process.env.BRAIN_STALENESS_SKIP !== "1") {
+        try { brainStale = require(path.join(pluginRoot, "lib", "core", "brain-md-staleness.cjs")); }
+        catch (_e) { brainStale = null; }
+        try { brainQueue = require(path.join(pluginRoot, "lib", "core", "brain-derivation-queue.cjs")); }
+        catch (_e) { brainQueue = null; }
+      }
+      // 1. Try snapshot-first (88-06 producer contract). Falls through to
+      // live readTriple walk if snapshot is missing or malformed.
+      let sections = {};
+      try {
+        const snapPath = path.join(roomDir, ".mindrian", "session-snapshot.json");
+        if (fs.existsSync(snapPath)) {
+          const raw = fs.readFileSync(snapPath, "utf8");
+          const parsed = JSON.parse(raw);
+          if (parsed && parsed.sections && typeof parsed.sections === "object") {
+            sections = parsed.sections;
+          }
+        }
+      } catch (_e) { /* malformed snapshot -> fallback below */ }
+      // 2. Fallback: walk sections via folder-memory.readTriple. Triggered
+      // when snapshot is absent, unparseable, or empty.
+      if (!sections || Object.keys(sections).length === 0) {
+        let entries = [];
+        try {
+          entries = fs.readdirSync(roomDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory() && d.name[0] !== ".");
+        } catch (_e) { entries = []; }
+        sections = {};
+        for (const d of entries) {
+          const sp = path.join(roomDir, d.name);
+          try {
+            if (!fs.existsSync(path.join(sp, "ROOM.md"))) continue;
+            sections[d.name] = fm.readTriple(sp);
+          } catch (_e) { /* skip this section */ }
+        }
+      }
+      // 3. Read optional pending-tier1-regen.json (88-05 producer).
+      let pendingTier1 = null;
+      try {
+        const ptp = path.join(roomDir, ".mindrian", "pending-tier1-regen.json");
+        if (fs.existsSync(ptp)) {
+          const pj = JSON.parse(fs.readFileSync(ptp, "utf8"));
+          pendingTier1 = Array.isArray(pj) ? pj : (pj && pj.pending) || [];
+        }
+      } catch (_e) { pendingTier1 = null; }
+      // 4. Read optional minto-stale.json (88-06 producer).
+      let staleReport = null;
+      try {
+        const msp = path.join(roomDir, ".mindrian", "minto-stale.json");
+        if (fs.existsSync(msp)) {
+          const sj = JSON.parse(fs.readFileSync(msp, "utf8"));
+          staleReport = Array.isArray(sj) ? sj : (sj && sj.sections) || [];
+        }
+      } catch (_e) { staleReport = null; }
+      // 5. Phase 90-03: compute Brain staleness per section, attach to
+      // sections[name].brain, and enqueue regen for sections whose
+      // recommended_action === "enqueue_regen". Enqueue is fired-and-forget:
+      // the drain runs on next UserPromptSubmit (Phase 90-02). Brain-offline
+      // suppresses enqueue. Room-wide suppression: if NO section has a
+      // BRAIN.md on disk, we do not render any Brain line (backward-compat
+      // for users who have never run a derivation yet).
+      //
+      // brain-md-staleness is an async module, so we run an async IIFE.
+      // When skipped (BRAIN_STALENESS_SKIP=1 or module unavailable), we
+      // still need to format + emit the TRIPLE_CONTEXT block synchronously
+      // (no Brain annotations attached).
+      (async function () {
+        if (brainStale) {
+          const enqueueJobs = [];
+          let anyBrainMdSeen = false;
+          for (const name of Object.keys(sections)) {
+            const sp = path.join(roomDir, name);
+            let brainRes = null;
+            try {
+              // readTriple is the source of truth for governing_thought.
+              // Snapshot path may have a pre-fetched triple; refresh via
+              // readTriple for the most-current hash.
+              const triple = fm.readTriple(sp);
+              brainRes = await brainStale.computeBrainStaleness(sp, triple);
+              if (brainRes && brainRes.exists === true) anyBrainMdSeen = true;
+            } catch (_e) { brainRes = null; }
+            if (brainRes) {
+              sections[name] = sections[name] || {};
+              sections[name].brain = brainRes;
+              if (brainRes.recommended_action === "enqueue_regen" && brainQueue) {
+                enqueueJobs.push({ section: name, sectionPath: sp, brainRes: brainRes });
+              }
+            }
+          }
+          // Backward-compat: suppress "absent" lines when no section has
+          // ever been derived. Rooms with zero BRAIN.md would otherwise
+          // see noisy "Brain derivation: absent" annotations everywhere.
+          if (!anyBrainMdSeen) {
+            for (const name of Object.keys(sections)) {
+              if (sections[name] && sections[name].brain && sections[name].brain.staleness === "absent") {
+                delete sections[name].brain;
+              }
+            }
+          }
+          // Fire-and-forget enqueues (advisory; do not block).
+          for (const job of enqueueJobs) {
+            try {
+              const triple = fm.readTriple(job.sectionPath);
+              const currentGt = (triple && triple.reasoning && triple.reasoning.governing_thought != null)
+                ? String(triple.reasoning.governing_thought) : "";
+              const cryp = require("crypto");
+              const newHash = "sha256:" + cryp.createHash("sha256").update(currentGt.normalize("NFC")).digest("hex");
+              const prevHash = job.brainRes.stale_reason === "governing_thought_changed"
+                ? null
+                : newHash;
+              brainQueue.enqueue(roomDir, job.section, prevHash, newHash, "session_start_stale");
+            } catch (_e) { /* advisory; do not block session-start */ }
+          }
+        }
+        // 6. Format and emit (always runs, even when Brain staleness skipped).
+        const block = fmt.formatTripleContext({
+          sections: sections,
+          pendingTier1: pendingTier1,
+          staleReport: staleReport,
+        });
+        process.stdout.write(block || "");
+      })().catch(function (_e) { /* soft-fail: emit nothing */ });
+    } catch (_e) { /* soft-fail: emit nothing */ }
+  ' 2>/dev/null || echo "")
+  if [ -n "${TRIPLE_CONTEXT}" ]; then
+    context="${context}
+
+${TRIPLE_CONTEXT}"
+  fi
+fi
+# --- end Phase 88-07 / Phase 90-03 ---
+
+# ---------------------------------------------------------------------------
+# Phase 88-13: Feynman-MINTO guardian, session-start health check.
+#
+# Walks active sections, runs every registered validator, enqueues regen
+# intents via the debouncer for any critical violation, and cleans orphan
+# tmp files left behind by 88-04-B mid-write crashes. BACKGROUNDED with
+# soft-fail so the guardian can NEVER block session-start under its 10s
+# budget. Guardian is advisory at runtime; only pre-commit mode exits 2.
+# See .planning/phases/88-feynman-minto-memory-layer/88-13-SUMMARY.md
+# ---------------------------------------------------------------------------
+if [ -n "${ROOM_DIR}" ] && [ -d "${ROOM_DIR}" ]; then
+  ( node "${PLUGIN_ROOT}/scripts/feynman-minto-guardian.cjs" session-start "${ROOM_DIR}" >/dev/null 2>&1 || true ) &
+  ( node "${PLUGIN_ROOT}/scripts/feynman-minto-guardian.cjs" clean-tmp "${ROOM_DIR}" >/dev/null 2>&1 || true ) &
+fi
+# --- end Phase 88-13 guardian session-start ---
+
+# ---------------------------------------------------------------------------
+# SEALED ROOMS walker (Phase 83-03, SCOPE-INJ-02/06)
+#
+# Walks the MindrianRooms root at top level for any subdirectory containing
+# a GUARDRAIL.md file, parses the first 3 prose lines (after stripping
+# frontmatter, h1 title, code fences), and appends a locked SEALED ROOMS
+# block to $context. Treats GUARDRAIL.md content as untrusted user data:
+# strip backticks, newlines, fences; join 3 lines with " | " separator.
+# Alphabetical order, cap at 10 rooms with "and N more" suffix. Hard 500ms
+# budget via background subshell + wait loop; partial results on timeout.
+# Graceful empty fallback: block omitted entirely, no error.
+# See .planning/phases/83-cross-session-scope-injection/83-03-PLAN.md
+# ---------------------------------------------------------------------------
+walk_sealed_rooms() {
+  # Resolve MindrianRooms root (same 3-way fallback as 83-02).
+  local rooms_root=""
+  if [ -n "${MINDRIAN_ROOMS_ROOT:-}" ]; then
+    rooms_root="${MINDRIAN_ROOMS_ROOT}"
+  elif [ -d "${HOME}/MindrianRooms" ]; then
+    rooms_root="${HOME}/MindrianRooms"
+  else
+    local found
+    found=$(find "${HOME}" -maxdepth 2 -type d -name MindrianRooms 2>/dev/null | head -1 || true)
+    if [ -n "$found" ]; then
+      rooms_root="$found"
+    fi
+  fi
+
+  if [ -z "$rooms_root" ] || [ ! -d "$rooms_root" ]; then
+    echo "[sealed-walker] no MindrianRooms root resolved, skipping" >&2
+    return 0
+  fi
+
+  # Run the walk + parse in a background subshell, write result to tempfile,
+  # enforce a 500ms hard cap via a wait loop. Partial results are acceptable.
+  local tmp
+  tmp=$(mktemp 2>/dev/null || echo "/tmp/mos-sealed-$$")
+  : > "$tmp"
+
+  # Gate the GUARDRAIL parser on python3 availability. On Windows without
+  # real python3 (e.g. Microsoft Store alias stub), the sealed-room walker
+  # is a no-op and the session-start hook continues without sealed-room
+  # context. Plan 85-06 will replace this with a node-native walker.
+  if ! command -v python3 >/dev/null 2>&1; then
+    echo "[skip] python3 feature gated: sealed-room GUARDRAIL walker" >&2
+    return 0
+  fi
+
+  (
+    # List top-level GUARDRAIL.md files, maxdepth 2 (root/<room>/GUARDRAIL.md).
+    # Do NOT follow symlinks (no -L) to avoid loops. Parser body lives in
+    # scripts/sealed-walker.py (extracted in plan 85-01 so session-start
+    # stays free of inline python invocations).
+    find "$rooms_root" -maxdepth 2 -mindepth 2 -type f -name GUARDRAIL.md -print0 2>/dev/null \
+      | python3 "${SCRIPT_DIR}/sealed-walker.py" > "$tmp" 2>/dev/null
+  ) &
+  local walker_pid=$!
+
+  # 500ms wait loop (10 x 50ms). Kill if still running.
+  local waited=0
+  while [ $waited -lt 10 ]; do
+    if ! kill -0 "$walker_pid" 2>/dev/null; then
+      break
+    fi
+    sleep 0.05
+    waited=$((waited + 1))
+  done
+  if kill -0 "$walker_pid" 2>/dev/null; then
+    kill "$walker_pid" 2>/dev/null || true
+    echo "[sealed-walker] 500ms budget exceeded, using partial results" >&2
+  fi
+  wait "$walker_pid" 2>/dev/null || true
+
+  # Read the tempfile and build the block.
+  if [ ! -s "$tmp" ]; then
+    rm -f "$tmp" 2>/dev/null || true
+    return 0
+  fi
+
+  local body=""
+  local more_line=""
+  while IFS=$'\t' read -r name rel rules; do
+    if [ "$name" = "__MORE__" ]; then
+      more_line="... and ${rel} more sealed rooms (run /mos:rooms list-sealed for the full set)"
+      continue
+    fi
+    if [ -z "$name" ]; then
+      continue
+    fi
+    if [ -z "$rules" ]; then
+      rules="(no hard rules parsed)"
+    fi
+    body="${body}\n- ${name} (path: ${rel})\n  Hard rules: ${rules}"
+  done < "$tmp"
+  rm -f "$tmp" 2>/dev/null || true
+
+  if [ -z "$body" ]; then
+    return 0
+  fi
+
+  local header="## SEALED ROOMS (DO NOT LEAK CONTENT INTO THIS SESSION)\n\nThe following rooms exist on this machine and are sealed by GUARDRAIL.md.\nYou must NOT pull content from them, draft artifacts about them, or\nreference them in this session unless the user explicitly switches to\none of them via /mos:rooms switch <name>."
+
+  local block="\n\n${header}\n${body}"
+  if [ -n "$more_line" ]; then
+    block="${block}\n${more_line}"
+  fi
+
+  context="${context}${block}"
+}
+
+# Export rooms_root into env for the python subshell via SEALED_ROOMS_ROOT.
+if [ -n "${MINDRIAN_ROOMS_ROOT:-}" ]; then
+  export SEALED_ROOMS_ROOT="${MINDRIAN_ROOMS_ROOT}"
+elif [ -d "${HOME}/MindrianRooms" ]; then
+  export SEALED_ROOMS_ROOT="${HOME}/MindrianRooms"
+fi
+walk_sealed_rooms || true
+unset SEALED_ROOMS_ROOT
+
+# ---------------------------------------------------------------------------
+# Phase 84-03: RECENT SESSIONS IN THIS ROOM injection (additive to Phase 83).
+#
+# Calls scripts/memory-lifecycle.cjs session-start which:
+#   1. Resolves the active room from ~/MindrianRooms/.rooms/registry.json
+#      (same registry Phase 83 ACTIVE ROOM CONTEXT block uses)
+#   2. Opens room/.mindrian/room.db via lib/core/room-db.cjs (lazygraph +
+#      memory schema in a single idempotent call)
+#   3. Inserts a new sessions row and writes .mindrian/current-session.json
+#   4. Formats the previous N sessions into a RECENT SESSIONS markdown
+#      block and prints it to stdout
+#
+# The output is appended to $context AFTER the Phase 83 ACTIVE ROOM CONTEXT
+# block. If no active room, no registry, or first session in the room, the
+# output is empty and the concatenation is a no-op. Phase 83 block remains
+# byte-identical. See .planning/phases/84-smart-notebook/84-03-PLAN.md
+# ---------------------------------------------------------------------------
+memory_block=""
+if [ -x "$(command -v node)" ] && [ -f "${PLUGIN_ROOT}/scripts/memory-lifecycle.cjs" ]; then
+  memory_block=$(node "${PLUGIN_ROOT}/scripts/memory-lifecycle.cjs" session-start 2>/dev/null || true)
+fi
+if [ -n "$memory_block" ]; then
+  context="${context}\n\n${memory_block}"
+fi
+
+# Auto-configure statusline: deploy the statusline DISPATCHER shim and point
+# settings.json at it. The shim (scripts/statusline-mos-dispatch) carries zero
+# logic -- it resolves the active plugin version at runtime and exec's that
+# version's scripts/statusline-mos, which does the real work. So a wrapper fix
+# in plugin vN+1 takes effect next session with no further re-stamp, and a
+# wrapper bug never sits stale on the deployment surface. See
+# scripts/statusline-mos-dispatch, scripts/statusline-mos, lib/core/active-plugin-root.cjs.
+CLAUDE_CONFIG_DIR="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
+CLAUDE_SETTINGS="${CLAUDE_CONFIG_DIR}/settings.json"
+WRAPPER_DST="${CLAUDE_CONFIG_DIR}/statusline-mos"
+DISPATCH_SRC="${PLUGIN_ROOT}/scripts/statusline-mos-dispatch"
+
+# Step A: deploy / migrate the dispatcher shim. One-time migration from an old
+# logic-bearing wrapper; no-op once it's already the dispatcher; never touches a
+# non-MindrianOS file at that path (don't clobber a user customization).
+if [ -f "$DISPATCH_SRC" ]; then
+  _need_statusline_restamp="yes"
+  if [ -f "$WRAPPER_DST" ]; then
+    if grep -q 'MINDRIAN-STATUSLINE-DISPATCH' "$WRAPPER_DST" 2>/dev/null; then
+      _need_statusline_restamp="no"   # already the dispatcher
+    elif ! grep -q 'MindrianOS statusline' "$WRAPPER_DST" 2>/dev/null; then
+      _need_statusline_restamp="no"   # not a MindrianOS file -- leave it
+    fi
+  fi
+  if [ "$_need_statusline_restamp" = "yes" ]; then
+    mkdir -p "$CLAUDE_CONFIG_DIR" 2>/dev/null || true
+    cp "$DISPATCH_SRC" "$WRAPPER_DST" 2>/dev/null || true
+    chmod +x "$WRAPPER_DST" 2>/dev/null || true
+  fi
+fi
+# Fallback for plugin versions before the dispatcher existed: if the dispatcher
+# source is absent (older PLUGIN_ROOT) but the legacy full wrapper is present,
+# keep the prior behavior so we don't leave the user with no statusline.
+if [ ! -f "$DISPATCH_SRC" ] && [ -f "${PLUGIN_ROOT}/scripts/statusline-mos" ]; then
+  mkdir -p "$CLAUDE_CONFIG_DIR" 2>/dev/null || true
+  cp "${PLUGIN_ROOT}/scripts/statusline-mos" "$WRAPPER_DST" 2>/dev/null || true
+  chmod +x "$WRAPPER_DST" 2>/dev/null || true
+fi
+
+# Step B: detection-driven settings.json migration.
+# Only rewrite when the current statusLine command contains "context-monitor"
+# but does NOT already contain "statusline-mos". This preserves user
+# customizations and is idempotent across repeated session starts.
+if [ -f "$CLAUDE_SETTINGS" ] && [ -f "$WRAPPER_DST" ]; then
+  CURRENT_STATUSLINE=$(node -e "try{const d=require('$CLAUDE_SETTINGS');const sl=d.statusLine||{};process.stdout.write((sl.command||'').toString())}catch(_){}" 2>/dev/null || echo "")
+  if [[ "$CURRENT_STATUSLINE" == *"context-monitor"* ]] && [[ "$CURRENT_STATUSLINE" != *"statusline-mos"* ]]; then
+    node -e "
+try {
+  const fs = require('fs');
+  const wrapper = process.argv[1];
+  const settings = process.argv[2];
+  const d = JSON.parse(fs.readFileSync(settings, 'utf8'));
+  const cur = d.statusLine || {};
+  const curCmd = (cur && typeof cur === 'object') ? (cur.command || '') : '';
+  if (curCmd.indexOf('context-monitor') !== -1 && curCmd.indexOf('statusline-mos') === -1) {
+    if (!('_savedStatusLine' in d)) d._savedStatusLine = cur;
+    d.statusLine = { type: 'command', command: 'bash \"' + wrapper + '\"' };
+    fs.writeFileSync(settings, JSON.stringify(d, null, 2));
+  }
+} catch (_) {}
+" "$WRAPPER_DST" "$CLAUDE_SETTINGS" 2>/dev/null || true
+  fi
+fi
+
+# --- BEGIN install-state manifest reconcile (Phase 123, on-version-change) ---
+# Phase 123 Plan-02 (HARNESS-123-06). Canon Part 8: LOCAL only.
+# Walk data/deployment-surfaces.json for owned (owner=session-start) surfaces
+# whose reconcile == on-version-change. Step A above already re-stamps the
+# statusline-dispatch-shim surface unconditionally (cheap + idempotent); Step B
+# rewrites the settings-statusline-command surface. The ~/.mindrian-last-version
+# surface is rewritten in the EARLY install-state record block. The one
+# remaining manifest-driven action is the dev-clone-pre-commit-hook surface:
+# on a dev-clone topology + version change, idempotently install/update the
+# Phase 108 schema-alias drift-guard pre-commit hook via scripts/install-pre-
+# commit.sh. Skipped entirely on a non-dev-clone box.
+if [ "$PLUGIN_VERSION" != "$LAST_VERSION" ] || [ -z "$LAST_VERSION" ]; then
+  _MOS_TOPOLOGY=$(node -e 'try { var r = require(process.env.PLUGIN_ROOT_FOR_RESOLVE + "/lib/core/active-plugin-root.cjs").resolveActivePluginRoot(); process.stdout.write(r.topology || "not-found"); } catch (_) { process.stdout.write("not-found"); }' PLUGIN_ROOT_FOR_RESOLVE="$PLUGIN_ROOT_FOR_NODE" 2>/dev/null)
+  if [ "$_MOS_TOPOLOGY" = "dev-clone" ] && [ -x "$PLUGIN_ROOT/scripts/install-pre-commit.sh" ]; then
+    # Idempotent: scripts/install-pre-commit.sh checks for the marker before
+    # appending; a hook that already invokes check-schema-aliases.cjs is a no-op.
+    bash "$PLUGIN_ROOT/scripts/install-pre-commit.sh" >/dev/null 2>&1 || true
+  fi
+fi
+# --- END install-state manifest reconcile ---
+
+# --- BEGIN cache prune (Phase 123, on version change) ---
+# Phase 123 Plan-05 (HARNESS-123-13). Canon Part 8: LOCAL only -- pure fs ops.
+# Prune stale marketplace-cache version dirs on version change: keep the
+# active version + N=2 most-recent non-active by mtime; everything else gets
+# rmSync'd. NEVER touches the active dir (belt + suspenders inside the
+# helper). Skips entirely if installed_plugins.json is unreadable -- never
+# guesses. Placed AFTER the manifest reconcile so owned surfaces are fresh
+# BEFORE sibling cache dirs get touched. Best-effort: a prune failure
+# (`|| true`) never blocks session startup.
+if [ "$PLUGIN_VERSION" != "$LAST_VERSION" ] || [ -z "$LAST_VERSION" ]; then
+  env PLUGIN_ROOT_FOR_PRUNE="$PLUGIN_ROOT_FOR_NODE" HOME_FOR_PRUNE="$HOME" node -e '
+    try {
+      var mod = require(process.env.PLUGIN_ROOT_FOR_PRUNE + "/lib/core/cache-prune.cjs");
+      var r = mod.pruneMarketplaceCache({ home: process.env.HOME_FOR_PRUNE });
+      if (r.skipped) {
+        process.stderr.write("cache-prune skipped: " + r.reason + "\n");
+      } else if (r.removed.length > 0) {
+        process.stderr.write("cache-prune removed: " + r.removed.join(", ") + " (kept: " + r.kept.join(", ") + ")\n");
+      }
+    } catch (e) {
+      process.stderr.write("cache-prune failed: " + (e && e.message) + "\n");
+    }
+  ' 2>/dev/null || true
+fi
+# --- END cache prune ---
+
+# --- BEGIN feynman timeline refresh (Phase 124, best-effort) ---
+# Phase 124-03 (TEMPORAL-124-03). Canon Part 8: LOCAL only -- the timeline-runner
+# reads ONLY room.db via lib/core/navigation.cjs (D-03). Refreshes every section's
+# FEYNMAN.md `## Timeline (auto)` block when the SQL is newer than the rendered
+# watermark (D-09). Best-effort: a failure (`|| true`) never blocks session startup.
+# Mirrors the cache-prune cascade pattern verbatim. The slot is a no-op when no
+# active room is resolvable. The active room is resolved via the same registry
+# resolver used by scripts/brain-derive-command.cjs so the slot works even when
+# the surrounding session-start state does not export ROOM_DIR at this point.
+env PLUGIN_ROOT_FOR_FEYNMAN="$PLUGIN_ROOT_FOR_NODE" ACTIVE_ROOM_FOR_FEYNMAN="${ROOM_DIR:-}" node -e '
+  try {
+    var fs = require("node:fs");
+    var path = require("node:path");
+    var os = require("node:os");
+    // Resolve active room: prefer the surrounding shell ROOM_DIR; otherwise fall
+    // back to the registry resolver (mirror of scripts/brain-derive-command.cjs).
+    var roomDir = process.env.ACTIVE_ROOM_FOR_FEYNMAN || "";
+    if (!roomDir) {
+      var roomsRoot = process.env.MINDRIAN_ROOMS_ROOT
+        || process.env.MINDRIAN_ROOMS_HOME
+        || path.join(os.homedir(), "MindrianRooms");
+      var regPath = path.join(roomsRoot, ".rooms", "registry.json");
+      if (!fs.existsSync(regPath)) process.exit(0);
+      var reg = JSON.parse(fs.readFileSync(regPath, "utf8"));
+      if (!reg || !reg.active || !reg.rooms || !reg.rooms[reg.active]) process.exit(0);
+      roomDir = path.resolve(roomsRoot, reg.rooms[reg.active].path || reg.active);
+    }
+    if (!fs.existsSync(roomDir)) process.exit(0);
+    // Try to open room.db so the runner can do the watermark check + memory_event log.
+    var db = null;
+    try {
+      var dbPath = path.join(roomDir, ".mindrian", "room.db");
+      if (fs.existsSync(dbPath)) {
+        var sqlite = require("node:sqlite");
+        db = new sqlite.DatabaseSync(dbPath);
+      }
+    } catch (_) { db = null; }
+    var runner = require(process.env.PLUGIN_ROOT_FOR_FEYNMAN + "/lib/core/feynman/timeline-runner.cjs");
+    var result = runner.refreshAll(roomDir, { db: db });
+    if (db) { try { db.close(); } catch (_) {} }
+    if (result && result.refreshed && result.refreshed.length > 0) {
+      process.stderr.write("feynman-timeline-refresh: " + result.refreshed.length + " section(s) refreshed\n");
+    }
+  } catch (e) {
+    process.stderr.write("feynman-timeline-refresh failed: " + (e && e.message) + "\n");
+  }
+' 2>/dev/null || true
+# --- END feynman timeline refresh ---
+
+# --- BEGIN dial memory refresh (Phase 143.1-05, best-effort) ---
+# Phase 143.1-05 (MEMDIAL-02 runner half). Canon Part 8: LOCAL only -- the
+# dial-memory-runner is a THIN SHIM over the Phase 124 timeline-runner and reads
+# ONLY room.db via lib/core/navigation.cjs (D-03). Refreshes every section's
+# `## Dial Memory (auto)` block FROM the graph (SELECTED_REACH / PIVOTED / DRSCH
+# relationship layer), the human-authored body byte-preserved (D-02). Fired on the
+# SAME hybrid trigger as the Phase 124 timeline (session-start cascade + the
+# /mos:dial-memory-refresh manual command). Best-effort: a failure (`|| true`)
+# never blocks session startup. The slot is a no-op when no active room resolves.
+env PLUGIN_ROOT_FOR_DIAL="$PLUGIN_ROOT_FOR_NODE" ACTIVE_ROOM_FOR_DIAL="${ROOM_DIR:-}" node -e '
+  try {
+    var fs = require("node:fs");
+    var path = require("node:path");
+    var os = require("node:os");
+    var roomDir = process.env.ACTIVE_ROOM_FOR_DIAL || "";
+    if (!roomDir) {
+      var roomsRoot = process.env.MINDRIAN_ROOMS_ROOT
+        || process.env.MINDRIAN_ROOMS_HOME
+        || path.join(os.homedir(), "MindrianRooms");
+      var regPath = path.join(roomsRoot, ".rooms", "registry.json");
+      if (!fs.existsSync(regPath)) process.exit(0);
+      var reg = JSON.parse(fs.readFileSync(regPath, "utf8"));
+      if (!reg || !reg.active || !reg.rooms || !reg.rooms[reg.active]) process.exit(0);
+      roomDir = path.resolve(roomsRoot, reg.rooms[reg.active].path || reg.active);
+    }
+    if (!fs.existsSync(roomDir)) process.exit(0);
+    var db = null;
+    try {
+      var dbPath = path.join(roomDir, ".mindrian", "room.db");
+      if (fs.existsSync(dbPath)) {
+        var sqlite = require("node:sqlite");
+        db = new sqlite.DatabaseSync(dbPath);
+      }
+    } catch (_) { db = null; }
+    var runner = require(process.env.PLUGIN_ROOT_FOR_DIAL + "/lib/core/feynman/dial-memory-runner.cjs");
+    var result = runner.refreshAll(roomDir, { db: db });
+    if (db) { try { db.close(); } catch (_) {} }
+    if (result && result.refreshed && result.refreshed.length > 0) {
+      process.stderr.write("dial-memory-refresh: " + result.refreshed.length + " section(s) refreshed\n");
+    }
+  } catch (e) {
+    process.stderr.write("dial-memory-refresh failed: " + (e && e.message) + "\n");
+  }
+' 2>/dev/null || true
+# --- END dial memory refresh ---
+
+# --- BEGIN gsd planning-artifact reconcile (Phase 149, best-effort) ---
+# Phase 149-02 (GAM-02 / GAM-05 / GAM-07). Canon Part 8: LOCAL only -- the
+# reconcile-runner reads room DATA ONLY via lib/core/navigation.cjs (the Phase 109
+# chokepoint) and writes planning_artifact + requirement nodes + FEEDS_INTO /
+# INFORMS / VALIDATES lineage edges; the .planning markdown is the source-of-meaning
+# read, never egressed. Idempotent: backfill on first run, diff-and-upsert on every
+# session-start (D-01 universal safety net + D-02 session-start IS the reconcile
+# trigger). Tri-polar: Desktop / Cowork land here since they have no PostToolUse
+# hook. Best-effort: a failure (`|| true`) never blocks session startup. Mirrors the
+# Phase 124 timeline-refresh + Phase 143.1 dial-memory slots verbatim. The slot is a
+# no-op when no active room resolves. The plugin dog-foods its own .planning by
+# pointing opts.planningDir at PLUGIN_ROOT/.planning when the active room is the
+# mindrianOS plugin room (same registry resolver, no new resolver added).
+env PLUGIN_ROOT_FOR_GSD="$PLUGIN_ROOT" ACTIVE_ROOM_FOR_GSD="${ROOM_DIR:-}" node -e '
+  try {
+    var fs = require("node:fs");
+    var path = require("node:path");
+    var os = require("node:os");
+    // Resolve active room: prefer the surrounding shell ROOM_DIR; otherwise fall
+    // back to the registry resolver (mirror of the Phase 124 timeline slot).
+    var roomDir = process.env.ACTIVE_ROOM_FOR_GSD || "";
+    if (!roomDir) {
+      var roomsRoot = process.env.MINDRIAN_ROOMS_ROOT
+        || process.env.MINDRIAN_ROOMS_HOME
+        || path.join(os.homedir(), "MindrianRooms");
+      var regPath = path.join(roomsRoot, ".rooms", "registry.json");
+      if (!fs.existsSync(regPath)) process.exit(0);
+      var reg = JSON.parse(fs.readFileSync(regPath, "utf8"));
+      if (!reg || !reg.active || !reg.rooms || !reg.rooms[reg.active]) process.exit(0);
+      roomDir = path.resolve(roomsRoot, reg.rooms[reg.active].path || reg.active);
+    }
+    if (!fs.existsSync(roomDir)) process.exit(0);
+    // Try to open room.db so the reconcile can upsert nodes + edges.
+    var db = null;
+    try {
+      var dbPath = path.join(roomDir, ".mindrian", "room.db");
+      if (fs.existsSync(dbPath)) {
+        var sqlite = require("node:sqlite");
+        db = new sqlite.DatabaseSync(dbPath);
+      }
+    } catch (_) { db = null; }
+    if (!db) process.exit(0);
+    var pluginRoot = process.env.PLUGIN_ROOT_FOR_GSD || "";
+    var runner = require(pluginRoot + "/lib/core/planning/reconcile-runner.cjs");
+    // Dog-food: when the active room IS the plugin workspace, reconcile the
+    // plugins OWN .planning tree (it lives at PLUGIN_ROOT/.planning, not
+    // ROOM_DIR/.planning). Detect by comparing resolved paths.
+    var reconcileOpts = { db: db };
+    try {
+      if (pluginRoot && path.resolve(roomDir) === path.resolve(pluginRoot)) {
+        reconcileOpts.planningDir = path.join(pluginRoot, ".planning");
+      }
+    } catch (_) {}
+    var result = runner.reconcilePlanningArtifacts(roomDir, reconcileOpts);
+    try { db.close(); } catch (_) {}
+    if (result && result.upserted > 0) {
+      process.stderr.write("gsd-planning-reconcile: " + result.upserted + " artifact node(s) upserted, "
+        + result.requirement_nodes + " requirement node(s), " + result.edges + " lineage edge(s)\n");
+    }
+  } catch (e) {
+    process.stderr.write("gsd-planning-reconcile failed: " + (e && e.message) + "\n");
+  }
+' 2>/dev/null || true
+# --- END gsd planning-artifact reconcile ---
+
+# --- BEGIN memory-cortex reconcile (Phase 150, best-effort) ---
+# Phase 150-03 (MEM-01). Canon Part 8: LOCAL only -- the reconcile-memory-runner
+# reads room DATA ONLY via lib/core/navigation.cjs (the Phase 109 chokepoint) and
+# writes memory_artifact nodes + governing_thought / navigator_persona / decision
+# projections + STATES / DESCRIBES / INFORMS cortex edges; the per-folder memory
+# markdown is the source-of-meaning read, never egressed. Idempotent: backfill on
+# first run, diff-and-upsert on every session-start (D-01 universal safety net +
+# D-02 session-start IS the reconcile trigger). Tri-polar: Desktop / Cowork land
+# here since they have no PostToolUse hook. Best-effort: a failure (`|| true`)
+# never blocks session startup. Mirrors the Phase 149 planning-artifact reconcile
+# slot verbatim. The slot is a no-op when no active room resolves. The plugin
+# dog-foods its own per-folder memory files by pointing opts.sectionRoot at
+# PLUGIN_ROOT when the active room is the mindrianOS plugin room (same registry
+# resolver, no new resolver added).
+env PLUGIN_ROOT_FOR_MEM="$PLUGIN_ROOT" ACTIVE_ROOM_FOR_MEM="${ROOM_DIR:-}" node -e '
+  try {
+    var fs = require("node:fs");
+    var path = require("node:path");
+    var os = require("node:os");
+    // Resolve active room: prefer the surrounding shell ROOM_DIR; otherwise fall
+    // back to the registry resolver (mirror of the Phase 149 reconcile slot).
+    var roomDir = process.env.ACTIVE_ROOM_FOR_MEM || "";
+    if (!roomDir) {
+      var roomsRoot = process.env.MINDRIAN_ROOMS_ROOT
+        || process.env.MINDRIAN_ROOMS_HOME
+        || path.join(os.homedir(), "MindrianRooms");
+      var regPath = path.join(roomsRoot, ".rooms", "registry.json");
+      if (!fs.existsSync(regPath)) process.exit(0);
+      var reg = JSON.parse(fs.readFileSync(regPath, "utf8"));
+      if (!reg || !reg.active || !reg.rooms || !reg.rooms[reg.active]) process.exit(0);
+      roomDir = path.resolve(roomsRoot, reg.rooms[reg.active].path || reg.active);
+    }
+    if (!fs.existsSync(roomDir)) process.exit(0);
+    // Try to open room.db so the reconcile can upsert nodes + edges.
+    var db = null;
+    try {
+      var dbPath = path.join(roomDir, ".mindrian", "room.db");
+      if (fs.existsSync(dbPath)) {
+        var sqlite = require("node:sqlite");
+        db = new sqlite.DatabaseSync(dbPath);
+      }
+    } catch (_) { db = null; }
+    if (!db) process.exit(0);
+    var pluginRoot = process.env.PLUGIN_ROOT_FOR_MEM || "";
+    var runner = require(pluginRoot + "/lib/core/memory/reconcile-memory-runner.cjs");
+    // Dog-food: when the active room IS the plugin workspace, reconcile the
+    // plugins OWN per-folder memory files (PLUGIN_ROOT as the section root, not
+    // ROOM_DIR). Detect by comparing resolved paths.
+    var reconcileOpts = { db: db };
+    try {
+      if (pluginRoot && path.resolve(roomDir) === path.resolve(pluginRoot)) {
+        reconcileOpts.sectionRoot = pluginRoot;
+      }
+    } catch (_) {}
+    var result = runner.reconcileMemoryArtifacts(roomDir, reconcileOpts);
+    try { db.close(); } catch (_) {}
+    if (result && result.upserted > 0) {
+      process.stderr.write("memory-cortex-reconcile: " + result.upserted + " memory node(s) upserted, "
+        + (result.unchanged || 0) + " unchanged, "
+        + result.decision_nodes + " decision node(s), " + result.edges + " cortex edge(s)\n");
+    }
+  } catch (e) {
+    process.stderr.write("memory-cortex-reconcile failed: " + (e && e.message) + "\n");
+  }
+' 2>/dev/null || true
+# --- END memory-cortex reconcile ---
+
+# --- BEGIN Phase 145 scout cadence (best-effort, self-throttled) ---
+# Phase 145-02 (SCHED-01 CLI default). Canon Part 8: LOCAL only -- the
+# scout-cadence-runner is zero-egress (Plan 01 T-145-01/02): it makes NO Brain
+# query and NO web fetch; HSI / whitespace / reverse-salient / opportunity scans
+# are all LOCAL compute, and competitor-watch is emitted as a public-SIGNAL query
+# plan for the surface layer, never fetched here. Soft-fail contract: a failure in
+# the scout cadence NEVER blocks or aborts session startup (`|| true`, stderr+stdout
+# to /dev/null, no-op when no room resolves). The throttle lives INSIDE the runner's
+# Plan-01 guard (last-run timestamp keyed by room-path hash), so the cadence is
+# at-most-once-per-interval (default 24h): most sessions are a sub-millisecond
+# throttle short-circuit and add no foreground work to startup. We deliberately do
+# NOT pass --force here -- session-start owns the throttled DEFAULT path; cron owns
+# the --force path (see commands/scout.md). Emergency disable: SCOUT_CADENCE_SKIP=1
+# skips the slot entirely, mirroring the BRAIN_STALENESS_SKIP convention.
+if [ "${SCOUT_CADENCE_SKIP:-}" != "1" ] && [ -n "${ROOM_DIR:-}" ] && [ -d "${ROOM_DIR}" ]; then
+  ( node "${PLUGIN_ROOT}/scripts/scout-cadence-runner.cjs" "${ROOM_DIR}" >/dev/null 2>&1 || true ) &
+fi
+# --- END Phase 145 scout cadence ---
+
+# ---------------------------------------------------------------------------
+# Phase 87-01a (SEC-04): ensure ROOM.md + MINTO.md pre-commit hook installed.
+# Self-healing: re-installs if missing or drifted. Worktree-aware via
+# `git rev-parse --git-path hooks/pre-commit` (R-87-01a-WIN). This defeats
+# the "--no-verify slipped through once and now the hook file is gone"
+# anti-pattern. On subsequent sessions the hook is always restored.
+# Non-fatal: any failure is swallowed so session-start never blocks startup.
+# ---------------------------------------------------------------------------
+if command -v git >/dev/null 2>&1; then
+  SETUP_HOOKS_REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || echo "")
+  if [ -n "$SETUP_HOOKS_REPO_ROOT" ] && [ -x "$SETUP_HOOKS_REPO_ROOT/scripts/setup-hooks.sh" ]; then
+    GUARD_SRC="$SETUP_HOOKS_REPO_ROOT/scripts/hooks/pre-commit-room-minto-guard.sh"
+    # R-87-01a-WIN: use --git-path so worktrees resolve the correct hooks dir
+    HOOK_REL=$(git rev-parse --git-path hooks/pre-commit 2>/dev/null || echo "")
+    if [ -n "$HOOK_REL" ]; then
+      case "$HOOK_REL" in
+        /*) HOOK_DST="$HOOK_REL" ;;
+        *)  HOOK_DST="$SETUP_HOOKS_REPO_ROOT/$HOOK_REL" ;;
+      esac
+    else
+      HOOK_DST="$SETUP_HOOKS_REPO_ROOT/.git/hooks/pre-commit"
+    fi
+    if [ ! -f "$HOOK_DST" ] || ! cmp -s "$GUARD_SRC" "$HOOK_DST" 2>/dev/null; then
+      bash "$SETUP_HOOKS_REPO_ROOT/scripts/setup-hooks.sh" >/dev/null 2>&1 || true
+    fi
+  fi
+fi
+
+# Check for updates (async, non-blocking, max 3 second timeout)
+# Only check once per day - cache result
+UPDATE_CACHE="/tmp/mindrian-update-check"
+TODAY=$(date -u +"%Y-%m-%d")
+SHOULD_CHECK=true
+
+if [ -f "$UPDATE_CACHE" ]; then
+  CACHE_DATE=$(head -1 "$UPDATE_CACHE" 2>/dev/null || echo "")
+  if [ "$CACHE_DATE" = "$TODAY" ]; then
+    SHOULD_CHECK=false
+    # Read cached result
+    CACHED_STATUS=$(sed -n '2p' "$UPDATE_CACHE" 2>/dev/null || echo "")
+    if [ "$CACHED_STATUS" = "UPDATE_AVAILABLE" ]; then
+      CACHED_LATEST=$(sed -n '3p' "$UPDATE_CACHE" 2>/dev/null || echo "")
+      # Auto-update: apply update silently if consent exists
+      AUTO_UPDATE_FLAG="$HOME/.mindrian/auto-update"
+      if [ -f "$AUTO_UPDATE_FLAG" ]; then
+        AUTO_RESULT=$("${SCRIPT_DIR}/self-update" install 2>/dev/null | head -1 || echo "UPDATE_FAILED")
+        if [ "$AUTO_RESULT" = "UPDATED" ]; then
+          context="${context}\n\n[Auto-Updated] MindrianOS updated to ${CACHED_LATEST}. Run /mos:update to see what's new."
+          echo "$TODAY" > "$UPDATE_CACHE"
+          echo "UP_TO_DATE" >> "$UPDATE_CACHE"
+        else
+          context="${context}\n\n[Update Available] MindrianOS ${CACHED_LATEST} is available. Auto-update failed -- run /mos:update manually."
+        fi
+      else
+        context="${context}\n\n[Update Available] MindrianOS ${CACHED_LATEST} is available. Run /mos:update to see what's new.\nEnable auto-updates: mkdir -p ~/.mindrian && touch ~/.mindrian/auto-update"
+      fi
+    fi
+  fi
+fi
+
+if $SHOULD_CHECK; then
+  # Run check in background, cache result
+  (
+    UPDATE_RESULT=$("${SCRIPT_DIR}/check-update" 2>/dev/null || echo "CHECK_FAILED")
+    STATUS=$(echo "$UPDATE_RESULT" | head -1)
+    echo "$TODAY" > "$UPDATE_CACHE"
+    echo "$STATUS" >> "$UPDATE_CACHE"
+    if [ "$STATUS" = "UPDATE_AVAILABLE" ]; then
+      LATEST=$(echo "$UPDATE_RESULT" | grep "^LATEST=" | cut -d= -f2)
+      echo "$LATEST" >> "$UPDATE_CACHE"
+    fi
+  ) &
+fi
+
+# Phase 251-01 (CACHE-02b, skeleton-to-SessionStart): the FIRE-IF-FORK
+# imperative (~330 B/turn) moves here from the per-turn engine block
+# (scripts/intent-classifier.cjs's renderEngineDecisionWithDial concatenation
+# no longer appends it). Delivery mechanism: SessionStart additionalContext
+# is the sanctioned mechanism (tier0-removal handoff Section 6: no always-on
+# skill primitive exists); the hooks.json SessionStart matcher
+# 'startup|clear|compact' re-seeds this doctrine after every compaction,
+# which resolves the measurement's survives-compaction caveat. PostCompact
+# cannot carry hookSpecificOutput (95-RESEARCH.md), so the compact re-seed
+# rides SessionStart(compact), not post-compact. Appended unconditionally
+# (paid once at 1.25x cache-write, then read at 0.1x for the rest of the
+# session); the per-turn block keeps only the byte-frozen marker.
+NAV_CARD_FIRE_DOCTRINE="\n\n## NAVIGATION CARD-FIRE CONTRACT (session doctrine)\n\nEvery per-turn NAVIGATION DECISION block ends with the frozen line [AskUserQuestion contract: shape=F.X verbs=N]. That marker is the per-turn gate flag; only the imperative below moved here.\n\n[FIRE-IF-FORK]: if the fork shown in the option rows above the marker is genuinely unanswered and relevant to the current conversation, call the AskUserQuestion tool in THAT response with the options shown. If the navigator already answered in plain text or the gate is unrelated, do NOT fire it -- acknowledge and proceed instead. Never reproduce the block as text (SEED-021).\n\nThe [AskUserQuestion payload: ...] line carries shape, mode, verb_count, recommended; the option labels are the rows above it.\n\nA line reading [NAV DECISION unchanged - prior block stands] means the previous turn's decision still applies."
+context="${context}${NAV_CARD_FIRE_DOCTRINE}"
+
+# Escape string for JSON embedding
+escape_for_json() {
+  local s="$1"
+  s="${s//\\/\\\\}"
+  s="${s//\"/\\\"}"
+  s="${s//$'\n'/\\n}"
+  s="${s//$'\r'/\\r}"
+  s="${s//$'\t'/\\t}"
+  printf '%s' "$s"
+}
+
+escaped_context=$(escape_for_json "$context")
+
+# 88.1-03: systemMessage retrofit.
+# Compute a tight one-line status string the user sees alongside the
+# additionalContext injection. Reports room slug + active section count +
+# aggregate MINTO health glyph (Canon Part 2 vocabulary: check/warn/low/--).
+# LOCAL-only (Canon Part 8): never references Brain endpoints. Soft-fail
+# at every boundary -- on any failure the systemMessage is "loaded room:
+# <slug>" with unknown section count / health glyph, and session-start
+# still exits 0 with its additionalContext payload intact.
+SYSTEM_MESSAGE=""
+if [ -n "${ROOM_DIR:-}" ] && [ -d "${ROOM_DIR}" ]; then
+  ROOM_SLUG=$(basename "${ROOM_DIR}" 2>/dev/null || echo "unknown")
+  SESSION_START_SM=$(env ROOM_DIR_ENV="${ROOM_DIR}" PLUGIN_ROOT_ENV="${PLUGIN_ROOT}" node -e '
+    "use strict";
+    try {
+      const fs = require("fs");
+      const path = require("path");
+      const roomDir = process.env.ROOM_DIR_ENV;
+      const pluginRoot = process.env.PLUGIN_ROOT_ENV;
+      const fm = require(path.join(pluginRoot, "lib", "core", "folder-memory.cjs"));
+      const fmt = require(path.join(pluginRoot, "lib", "memory", "triple-context-formatter.cjs"));
+      let entries = [];
+      try {
+        entries = fs.readdirSync(roomDir, { withFileTypes: true })
+          .filter((d) => d.isDirectory() && d.name[0] !== ".");
+      } catch (_e) { entries = []; }
+      const scores = [];
+      let sectionCount = 0;
+      for (const d of entries) {
+        const sp = path.join(roomDir, d.name);
+        try {
+          if (!fs.existsSync(path.join(sp, "ROOM.md"))) continue;
+          sectionCount += 1;
+          const t = fm.readTriple(sp);
+          if (t && t.reasoning && typeof t.reasoning.reasoning_health_score === "number") {
+            scores.push(t.reasoning.reasoning_health_score);
+          }
+        } catch (_e) { /* skip this section */ }
+      }
+      let median = null;
+      if (scores.length > 0) {
+        const sorted = scores.slice().sort((a, b) => a - b);
+        const mid = Math.floor(sorted.length / 2);
+        median = sorted.length % 2 === 0
+          ? (sorted[mid - 1] + sorted[mid]) / 2
+          : sorted[mid];
+      }
+      const glyph = fmt.classifyHealth(median);
+      process.stdout.write(sectionCount + "|" + glyph);
+    } catch (_e) { process.stdout.write("0|--"); }
+  ' 2>/dev/null || echo "0|--")
+  SECTION_COUNT="${SESSION_START_SM%|*}"
+  HEALTH_GLYPH="${SESSION_START_SM##*|}"
+  SYSTEM_MESSAGE="loaded room: ${ROOM_SLUG}, ${SECTION_COUNT} active sections, MINTO health ${HEALTH_GLYPH}"
+else
+  SYSTEM_MESSAGE="session-start: no active room"
+fi
+escaped_sysmsg=$(escape_for_json "$SYSTEM_MESSAGE")
+
+# --- BEGIN Brain status (Phase 123, Plan-7) ---
+#
+# Brain status emission. Replaces the pre-Plan-7 MCP-centric drift check, which
+# tested only the shell env var MINDRIAN_BRAIN_KEY and missed the standard
+# install (key in ~/.mindrian.env); on an HTTP-path install it also emitted a
+# misleading MCP-server-not-found WARN even when the HTTP client was perfectly
+# healthy. The block below replaces that drift check entirely.
+#
+# This block shells out to lib/core/resolve-brain-key.cjs (the single Brain-key
+# resolver) and emits ONE of three positive status lines:
+#
+#   - "Brain: HTTP client active" -- key resolved (host dropped from the
+#     banner as of phase 339, 2026-09-03; see the comment below).
+#   - "Brain: NOT loaded -- permissions too open: ... (run: chmod 600 ~/.mindrian.env)"
+#     -- SEC-02 POSIX permission rejection (POSIX-only -- no-op on Windows).
+#   - "Brain: not configured (Tier 0)" -- no key found anywhere.
+#
+# The SEC-02 rejection routes through this same status channel -- never bare
+# stderr. The resolver returns { key, source, available, reason } as JSON;
+# we parse it with a tiny inline node one-liner (bash has no JSON parser and
+# adding jq as a dependency would couple session-start to a system package).
+#
+# Canon Part 8: the block is purely LOCAL -- the resolver only CHECKS for a
+# key, never calls Brain. The status line no longer names a host (phase
+# 339, 2026-09-03): this banner is prose a user reads on EVERY session
+# start, so a wrong host here would be a lie repeated constantly across an
+# origin change. Deriving it would mean shelling out to node from this bash
+# script on the session start path, adding a node spawn to print a hostname
+# for a purely cosmetic gain in startup latency paid on every session. The
+# origin already has one authoritative reporter: `node scripts/doctor.cjs`
+# class M layer 6.
+# ---------------------------------------------------------------------------
+_BRAIN_KEY_JSON="$(node "$PLUGIN_ROOT/lib/core/resolve-brain-key.cjs" 2>/dev/null || echo '{"available":false,"reason":"resolver failed"}')"
+_BRAIN_AVAILABLE="$(printf '%s' "$_BRAIN_KEY_JSON" | node -e "let s='';process.stdin.on('data',c=>s+=c).on('end',()=>{try{process.stdout.write(String(JSON.parse(s).available));}catch(_){process.stdout.write('false');}})" 2>/dev/null)"
+_BRAIN_REASON="$(printf '%s' "$_BRAIN_KEY_JSON" | node -e "let s='';process.stdin.on('data',c=>s+=c).on('end',()=>{try{const j=JSON.parse(s);process.stdout.write(j.reason||'');}catch(_){process.stdout.write('');}})" 2>/dev/null)"
+if [ "$_BRAIN_AVAILABLE" = "true" ]; then
+  echo "Brain: HTTP client active" >&2
+elif [ -n "$_BRAIN_REASON" ] && printf '%s' "$_BRAIN_REASON" | grep -q "permissions too open"; then
+  echo "Brain: NOT loaded -- $_BRAIN_REASON  (run: chmod 600 ~/.mindrian.env)" >&2
+else
+  echo "Brain: not configured (Tier 0)" >&2
+fi
+unset _BRAIN_KEY_JSON _BRAIN_AVAILABLE _BRAIN_REASON
+# --- END Brain status ---
+
+# ---------------------------------------------------------------------------
+# 260517-dcw dogfood-bridge drain (Canon Part 6 Product-as-Venture)
+# ---------------------------------------------------------------------------
+# Drain ~/.mindrian/dogfood-queue.jsonl into ~/MindrianRooms/mindrian/room.db
+# via the Phase 109 navigation chokepoint, then regenerate STATE.md ## Live (auto).
+# Soft-fail on every step -- session-start MUST NEVER crash. Per Canon Part 8 the
+# entire pipeline is LOCAL-only (no network surface anywhere in the two scripts).
+# The MINDRIAN_DOGFOOD_DRAIN_SKIP=1 env var bypasses for CI / preflight test fixtures.
+# Output redirected to /dev/null so the drain never pollutes the additionalContext
+# JSON envelope below.
+if [ -z "${MINDRIAN_DOGFOOD_DRAIN_SKIP:-}" ] && [ -f "$PLUGIN_ROOT/scripts/dogfood-emit.cjs" ]; then
+  node "$PLUGIN_ROOT/scripts/dogfood-emit.cjs" >/dev/null 2>&1 || true
+  node "$PLUGIN_ROOT/scripts/dogfood-derive.cjs" >/dev/null 2>&1 || true
+fi
+# --- end 260517-dcw dogfood-bridge drain ---
+
+# Output context injection as JSON
+# Cursor hooks expect additional_context
+# Claude Code hooks expect hookSpecificOutput.additionalContext
+# Only emit the field consumed by the current platform to avoid double injection
+# 88.1-03: systemMessage is a sibling field on the JSON envelope per the
+# Claude Code 2.1.x hook spec; rendered as a one-line status to the user.
+if [ -n "${CURSOR_PLUGIN_ROOT:-}" ]; then
+  printf '{\n  "additional_context": "%s",\n  "systemMessage": "%s"\n}\n' "$escaped_context" "$escaped_sysmsg"
+elif [ -n "${CLAUDE_PLUGIN_ROOT:-}" ]; then
+  printf '{\n  "hookSpecificOutput": {\n    "hookEventName": "SessionStart",\n    "additionalContext": "%s"\n  },\n  "systemMessage": "%s"\n}\n' "$escaped_context" "$escaped_sysmsg"
+else
+  printf '{\n  "additional_context": "%s",\n  "systemMessage": "%s"\n}\n' "$escaped_context" "$escaped_sysmsg"
+fi
+
+exit 0