@polderlabs/bizar 10.19.3 → 10.19.6

package/cli/bin.mjs

@@ -129,7 +129,8 @@ function showHelp() {
     bizar install
     bizar audit
     bizar doctor
-    bizar update --all --dry-run
+    bizar update --dry-run                   # Preview what would change
+    bizar update --force --yes               # Non-interactive full re-emit
 
   Run \`bizar <command> --help\` for per-command help.
 

package/cli/commands/hook.mjs

@@ -40,6 +40,7 @@ export const HOOK_PROGRAMS = Object.freeze({
   'pretooluse-bash': 'pretooluse-bash.mjs',
   'pretooluse-editwrite': 'pretooluse-editwrite.mjs',
   'sessionend-recall': 'sessionend-recall.mjs',
+  'sessionstart-model-sync': 'sessionstart-model-sync.mjs',
   'sessionstart-prime': 'sessionstart-prime.mjs',
   'simplify-guard': 'simplify-guard.mjs',
   telemetry: 'telemetry.mjs',
@@ -61,6 +62,7 @@ export const EVENT_CHAINS = Object.freeze({
   ]),
   'session-start': Object.freeze([
     'control-inbox',
+    'sessionstart-model-sync',
     'sessionstart-prime',
     'persistent-mode',
     'telemetry',

package/cli/commands/install.mjs

@@ -3,10 +3,15 @@
  *
  * install + update command families.
  * v4.4.11+ — 'bizar install' and 'bizar update' share the same code path.
+ *
+ * v10.19.6 — `bizar update` now honors `--dry-run` / `--force` / `--yes`
+ * the same way `bizar install` does. The previous implementation called
+ * a legacy `runUpdate(args)` that swallowed every flag; this version
+ * routes update through `parseFlags` + `runInstaller` + `runRepair` so
+ * the documented flags actually do what they claim.
  */
 import chalk from 'chalk';
 import { runInstaller } from '../install.mjs';
-import { runUpdate } from '../update.mjs';
 import { runRepair } from '../repair.mjs';
 import { parseFlags } from '../provision.mjs';
 
@@ -61,35 +66,53 @@ export function showInstallHelp() {
 
 export function showUpdateHelp() {
   console.log(`
-  bizar update — Update @anthropic-ai/claude-code + @polderlabs/bizar
-  (which bundles the CLI, SDK, agents, skills, hooks, and commands). Detects what's
-  installed and only touches what's missing or out of date.
+  bizar update — Update @polderlabs/bizar (CLI + SDK + agents +
+  skills + hooks + commands). Refreshing Claude Code itself is also
+  handled when the bundled install.sh runs under --force.
+
   Usage:
-    bizar update                       Update all installed Bizar components
-    bizar update --check               Only print current vs. latest; do not update
-    bizar update --channel=stable|beta Pick the npm dist-tag (default: stable)
+    bizar update                       Refresh every Bizar-managed surface
     bizar update --dry-run             Print what would happen, change nothing
-    bizar update --force               Override .bizar/PRE_PUSH_NOTES.md blockers
-    bizar update --yes                 Same as --force, but named for one-line scripts
+    bizar update --force | --deep      Full clean re-emit: wipe Bizar-managed
+                                        dirs, back up settings env vars,
+                                        re-sync everything from the repo
+    bizar update --yes | -y            Assume yes for any non-destructive prompt
+    bizar update --non-interactive     Alias for --yes
     bizar update --help                Show this help
-  Components updated:
-    @anthropic-ai/claude-code   the Claude Code CLI itself
-    @polderlabs/bizar            CLI + SDK + agents + skills + hooks
-  Behavior (v4.4.7+):
-    • Single unified provisioner. 'bizar install' and 'bizar update' are
-      the same code path with different mode flags. Every step is
-      idempotent — re-running is safe.
-    • Re-runs the provisioner so installed Claude Code surfaces match
-      the just-upgraded npm version.
-    • Runs 'bizar doctor' after a successful update to catch config
-      regressions before claude tries to start.
-    • With --check: prints the version matrix and release-notes excerpt
-      between current and latest, exits non-zero if an update is available.
+
+  Behavior (v10.19.6+):
+    Single unified provisioner — the same code path as 'bizar install'
+    with mode=update. Every step is idempotent; re-running is safe.
+
+    1. Re-emits skills, commands, rules, hooks, agents, and workflows
+       from the repo source into ~/.claude/ (or $CLAUDE_CONFIG_DIR),
+       overwriting only the Bizar-managed surface and pruning stale
+       entries (F-141).
+    2. Writes the install marker so subsequent runs short-circuit when
+       nothing has changed.
+    3. With --force, re-runs the F-183 clean-install flow: wipes
+       ~/.claude/{agents,skills,commands,hooks,rules,workflows,plugins}/
+       and ~/.agents/, stashes the prior settings.json env block into
+       BIZAR_SAVED_ENV, then re-emits settings.json with the operator's
+       ANTHROPIC_* and BIZAR_* keys union-merged back in (so gateway
+       URL, auth token, and BIZAR_HOME are preserved across the wipe).
+    4. Runs 'bizar doctor' after a successful update so config
+       regressions surface before the next Claude Code session.
+    5. Repairs stale bin symlinks so the operator picks up the new code
+       on the next shell prompt.
+
+  Idempotency note:
+    When the SDK on disk matches the published npm version, every step
+    above is a no-op — settings.json is rewritten only if its hash
+    drifted, sync targets are skipped when the file set is unchanged,
+    and the bin symlink repair short-circuits. A clean re-run is fast.
+
   Examples:
-    bizar update                       Full auto-update (recommended)
-    bizar update --check               Show version matrix + notes, do nothing
-    bizar update --channel=beta        Upgrade to latest beta build
-    bizar update --dry-run             Preview what would change
+    bizar update                       Refresh the managed surface
+    bizar update --dry-run             Preview every step
+    bizar update --force               Full clean re-emit, preserved env
+    bizar update --force --yes         Same, no prompts (script-friendly)
+
   Errors:
     Network failures (registry offline / DNS) and npm permission issues
     are surfaced with the raw npm output. The provisioner never silently
@@ -97,7 +120,34 @@ export function showUpdateHelp() {
   `);
 }
 
+// ── Shared post-install teardown ────────────────────────────────────────────────
+
+/**
+ * Run `runRepair({})` after install/update and surface any repointed
+ * bin symlinks to the operator. Both `install()` and `update()` share
+ * this block; the previous `bizar update` skipped it entirely (audit
+ * A6), so a freshly-upgraded Bizar left stale bin symlinks pointing at
+ * the prior install until the operator manually re-sourced their shell.
+ *
+ * @param {object} [opts]
+ * @param {(opts: object) => Promise<{ ok: boolean, fixed: string[], notes?: string[] }>} [opts.runRepair]
+ *   Dependency-injected for tests; defaults to the real `runRepair`.
+ */
+async function runPostInstallerRepair({ runRepair: runRepairDep = runRepair } = {}) {
+  try {
+    const r = await runRepairDep({});
+    if (r.fixed.length > 0) {
+      console.log(chalk.cyan('\n  Repair: repointed stale bin symlinks:'));
+      for (const f of r.fixed) console.log(`    ${f}`);
+      console.log(chalk.dim('    Re-run your shell or `hash -r` to pick up the new path.'));
+    }
+  } catch (err) {
+    console.log(chalk.dim(`  Repair skipped: ${err.message}`));
+  }
+}
+
 // ── Command runners ────────────────────────────────────────────────────────────
+
 export async function install(args, isHelpRequest) {
   if (isHelpRequest) {
     showInstallHelp();
@@ -122,16 +172,10 @@ export async function install(args, isHelpRequest) {
   }
   // v4.4.3 — After install, repair any stale bin symlinks so the
   // user picks up the new code.
-  try {
-    const r = await runRepair({});
-    if (r.fixed.length > 0) {
-      console.log(chalk.cyan('\n  Repair: repointed stale bin symlinks:'));
-      for (const f of r.fixed) console.log(`    ${f}`);
-      console.log(chalk.dim('    Re-run your shell or `hash -r` to pick up the new path.'));
-    }
-  } catch (err) {
-    console.log(chalk.dim(`  Repair skipped: ${err.message}`));
-  }
+  await runPostInstallerRepair();
+  // v10.19.6 — propagate install failure to the parent shell so
+  // `bizar install && bizar doctor` short-circuits on install errors.
+  if (!result?.ok) process.exit(1);
 }
 
 export async function update(args, isHelpRequest) {
@@ -139,7 +183,46 @@ export async function update(args, isHelpRequest) {
     showUpdateHelp();
     return;
   }
-  await runUpdate(args);
+  // v10.19.6 — route update through the same flag-parsing + installer
+  // pipeline as install so `--dry-run`, `--force`, `--yes`, etc. do
+  // what they claim. See `runUpdateWithFlags` for the testable
+  // dependency-injected core.
+  await runUpdateWithFlags({ args });
+}
+
+/**
+ * Testable core of `update()`. Default arguments bind to the real
+ * `runInstaller` / `parseFlags` / `runRepair` from this module; tests
+ * inject stubs to assert the wiring without touching disk.
+ *
+ * Sequence (mirrors install() so the audit's documented "Runs doctor +
+ * runs repair" promises become true):
+ *   1. `parseFlags(args)` → `{ mode, dryRun, force, yes }`
+ *   2. `runInstaller({ mode, dryRun, force, yes })` — runs the
+ *      provisioner, then post-install `runDoctor({ silent: true })`.
+ *   3. `runRepair({})` — repoint stale bin symlinks.
+ *   4. If `runInstaller` returned `{ ok: false }`, exit(1) so scripts
+ *      that gate on the exit code (`bizar update && bizar doctor`) see
+ *      the failure.
+ *
+ * @param {object} [opts]
+ * @param {string[]} [opts.args]
+ * @param {(opts: { mode: string, dryRun: boolean, force: boolean, yes: boolean }) => Promise<{ ok?: boolean }>} [opts.runInstaller]
+ * @param {(argv: string[]) => { mode: string, dryRun: boolean, force: boolean, yes: boolean }} [opts.parseFlags]
+ * @param {(opts: { dryRun?: boolean }) => Promise<{ ok: boolean, fixed: string[] }>} [opts.runRepair]
+ * @returns {Promise<{ ok?: boolean }>}
+ */
+export async function runUpdateWithFlags({
+  args = [],
+  runInstaller: runInstallerDep = runInstaller,
+  parseFlags: parseFlagsDep = parseFlags,
+  runRepair: runRepairDep = runRepair,
+} = {}) {
+  const { mode, dryRun, force, yes } = parseFlagsDep(args);
+  const result = await runInstallerDep({ mode, dryRun, force, yes });
+  await runPostInstallerRepair({ runRepair: runRepairDep });
+  if (!result?.ok) process.exit(1);
+  return result;
 }
 
 // ── run() entry point (used by bin.mjs dispatcher) ──────────────────────────────

package/cli/commands/models.mjs

@@ -634,23 +634,23 @@ export function deriveModelLabel(modelId, profile) {
 }
 
 /**
- * Sync `userSelected.models` into Claude Code's `modelPicker` array
+ * Sync `userSelected.models` into Claude Code's `modelPicker` setting
  * (settings.json). The picker is what populates `/model` — `modelOverrides`
  * alone only silences diagnostics, it does NOT add entries to the picker.
  *
- * Per Claude Code's settings reference: `modelPicker` is an array of
- * `{ id, label }` entries that replaces the gateway-discovered picker
- * contents. Scope is User-or-managed (settings.json is in scope). Each
- * entry preserves the operator's pick order from `userSelected.models`.
+ * Per Claude Code's settings reference: `modelPicker` is an OBJECT with an
+ * `options` array. Each option has `{ model, label?, description? }`.
+ * Scope is User-or-managed (settings.json is in scope). The `options`
+ * array preserves the operator's pick order from `userSelected.models`.
  *
  * Behavior:
  *   - Reads settings.json; preserves every other field (env, mcpServers,
  *     permissions, hooks, etc.).
- *   - Writes `modelPicker` as an array of `{ id, label }`.
+ *   - Writes `modelPicker = { options: [{ model, label }] }`.
  *   - Filters out picks the live gateway rejects (same stale-ID contract as
  *     `applyModelOverrides`); the surviving picks fill the picker.
- *   - Empty pick list → writes `modelPicker: []` so the picker falls back
- *     to whatever Claude Code's defaults surface.
+ *   - Empty pick list → writes `modelPicker: { options: [] }` so Claude
+ *     Code falls back to its built-in picker.
  *   - Atomic replace via temp-file + rename (matches `applyModels`).
  *   - Refuses to overwrite a corrupt settings.json.
  *   - When `settingsJsonPath === null`, returns a no-op (tests).
@@ -663,7 +663,7 @@ export function deriveModelLabel(modelId, profile) {
  * }} opts
  * @returns {{
  *   wrote: boolean,
- *   entries: Array<{id: string, label: string}>,
+ *   options: Array<{model: string, label: string, description?: string}>,
  *   skippedStale: string[],
  *   settingsPath: string|null,
  * }}
@@ -673,13 +673,20 @@ export function applyModelPicker({ settingsJsonPath, pickedIds, profiles = {}, l
     ? join(homedir(), '.claude', 'settings.json')
     : settingsJsonPath;
   if (path === null) {
-    return { wrote: false, entries: [], skippedStale: [], settingsPath: null };
+    return { wrote: false, options: [], skippedStale: [], settingsPath: null };
   }
   const live = new Set(Array.isArray(liveIds) ? liveIds : []);
   const picks = Array.isArray(pickedIds) ? pickedIds.filter((id) => typeof id === 'string' && id.trim()) : [];
   const surviving = live.size === 0 ? picks : picks.filter((id) => live.has(id));
   const skipped = live.size === 0 ? [] : picks.filter((id) => !live.has(id));
-  const entries = surviving.map((id) => ({ id, label: deriveModelLabel(id, profiles?.[id]) }));
+  const options = surviving.map((id) => {
+    const profile = profiles?.[id];
+    const label = deriveModelLabel(id, profile);
+    const option = { model: id, label };
+    const description = profile && typeof profile.description === 'string' && profile.description.trim();
+    if (description) option.description = description.trim();
+    return option;
+  });
 
   let settings = {};
   if (existsSync(path)) {
@@ -687,12 +694,12 @@ export function applyModelPicker({ settingsJsonPath, pickedIds, profiles = {}, l
       const parsed = JSON.parse(readFileSync(path, 'utf8'));
       if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) settings = parsed;
     } catch {
-      return { wrote: false, entries: [], skippedStale: skipped, settingsPath: path };
+      return { wrote: false, options: [], skippedStale: skipped, settingsPath: path };
     }
   }
-  settings.modelPicker = entries;
+  settings.modelPicker = { options };
   writeAtomic(path, JSON.stringify(settings, null, 2) + '\n');
-  return { wrote: true, entries, skippedStale: skipped, settingsPath: path };
+  return { wrote: true, options, skippedStale: skipped, settingsPath: path };
 }
 
 // ── F-190 / IMP-017 refresh + operator-override preservation ────────────────
@@ -1654,7 +1661,7 @@ export async function run(name, args, isHelpRequest) {
       console.log(chalk.yellow(`    Settings sync skipped ${sync.skippedStale.length} stale id(s): ${sync.skippedStale.join(', ')}`));
     }
     if (picker.wrote) {
-      console.log(chalk.dim(`    /model picker populated with ${picker.entries.length} entr${picker.entries.length === 1 ? 'y' : 'ies'}`));
+      console.log(chalk.dim(`    /model picker populated with ${picker.options.length} entr${picker.options.length === 1 ? 'y' : 'ies'}`));
     }
   }
   return true;

package/cli/commands/util.mjs

@@ -182,17 +182,14 @@ export async function runTestGate() {
 
 export async function run(name, args, isHelpRequest) {
   switch (name) {
-    case 'update':
-      // `bizar update` lives in commands/install.mjs (the install/update
-      // pair share a code path). Proxy to it.
-      if (isHelpRequest) {
-        const { showUpdateHelp } = await import('./install.mjs');
-        showUpdateHelp();
-      } else {
-        const { runUpdate } = await import('./install.mjs');
-        await runUpdate(args, {});
-      }
-      break;
+    // NOTE: 'update' is intentionally NOT routed through this dispatcher.
+    // `cli/bin.mjs` dispatches 'install' / 'update' directly to
+    // `cli/commands/install.mjs`, which owns both commands (they share
+    // the same code path). The legacy branch below used to import
+    // `runUpdate` from `./install.mjs`, but that module never exported
+    // `runUpdate` — the import would throw at runtime. The branch was
+    // dead code, deleted in v10.19.6 as part of the `bizar update` audit
+    // fix.
 
     case 'audit':
       if (isHelpRequest) showAuditHelp();

package/cli/provision.mjs

@@ -1431,10 +1431,11 @@ if (import.meta.url === `file://${process.argv[1]}`) {
   });
 }
 
-// Back-compat alias — `bizar update` historically
-// called `runUpdate(args)`; we collapsed install + update onto
-// `runProvision({ mode: 'update', ... })`. Keep `runUpdate` importable so
-// `cli/commands/install.mjs` (which still uses the historical signature)
-// works without modification.
+// Back-compat alias — `bizar update` historically called `runUpdate(args)`;
+// install + update now share `runProvision({ mode: 'update', ... })`.
+// `runUpdate` is retained as an importable export for external SDK
+// consumers (re-exported from `cli/update.mjs`); `cli/commands/install.mjs`
+// no longer imports it — its `update()` command routes through `parseFlags`
+// → `runInstaller({ mode: 'update', ... })` instead.
 export const runUpdate = (subargs, opts = {}) =>
   runProvision({ ...opts, mode: 'update', subargs });

package/config/claude/hooks/sessionstart-model-sync.mjs

@@ -0,0 +1,202 @@
+#!/usr/bin/env node
+/**
+ * sessionstart-model-sync.mjs — Claude Code SessionStart hook.
+ *
+ * Re-applies the operator's `userSelected.models` block (from
+ * `~/.config/bizar/config/claude/model-router.json`) into the three
+ * Claude Code settings keys that the operator owns:
+ *
+ *   - modelPicker   → { options: [{ model, label }] } in user pick order
+ *   - modelOverrides → { <id>: <id> } self-map for every live pick
+ *   - model         → reset to the first user pick if the current value
+ *                     starts with `claude-` (the dead gateway namespace —
+ *                     the live gateway rejects it with model_not_found)
+ *
+ * Why this hook exists:
+ *   Claude Code's `/model` picker rewrites `~/.claude/settings.json` on
+ *   every user pick. The rewrite preserves most keys but drops `modelPicker`
+ *   and rewrites `model` to whatever the gateway returned (often the dead
+ *   `claude-<provider>/<model>[1m]` shape). Without this hook the operator
+ *   loses their picker list between every Claude Code session.
+ *
+ * Scope guarantee:
+ *   This hook ONLY touches `modelPicker`, `modelOverrides`, and `model`.
+ *   Env, mcpServers, permissions, hooks, and every other operator key is
+ *   left untouched. The source of truth for picks
+ *   (`~/.config/bizar/config/claude/model-router.json`) is also untouched.
+ *
+ * Failure policy:
+ *   This is an advisory hook. Any failure (missing router, malformed JSON,
+ *   unwritable settings.json, etc.) is logged to
+ *   `~/.config/bizar/hook-logs/model-sync-DATE.jsonl` and swallowed. The
+ *   hook always exits 0 — the operator's existing picks survive whatever
+ *   Claude Code wrote last, and a broken sync must not block session start.
+ *
+ * Claude Code SessionStart input:
+ *   { session_id, transcript_path, cwd, hook_event_name, source }
+ *
+ * Claude Code SessionStart output:
+ *   { hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext } }
+ */
+
+'use strict';
+
+import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+
+const HOOK_LOG_DIR = join(homedir(), '.config', 'bizar', 'hook-logs');
+
+function readJsonIfObject(path) {
+  if (!existsSync(path)) return null;
+  try {
+    const parsed = JSON.parse(readFileSync(path, 'utf8'));
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
+function readRouterPath() {
+  const envOverride = process.env.BIZAR_MODEL_ROUTER_CONFIG;
+  if (envOverride && typeof envOverride === 'string' && envOverride.trim()) {
+    return envOverride;
+  }
+  return join(homedir(), '.config', 'bizar', 'config', 'claude', 'model-router.json');
+}
+
+function readSettingsPath() {
+  return join(homedir(), '.claude', 'settings.json');
+}
+
+// Mirrors `cli/commands/models.mjs#deriveModelLabel` without the profile
+// override branch. The picker label is meant to be derived from the model
+// id; the profile `name`/`displayName` is used elsewhere in `applyModelPicker`
+// only when present, but for our session-start re-apply the id-derived label
+// is sufficient and matches the helper's behaviour for every live id in the
+// router file.
+function deriveModelLabel(modelId) {
+  const id = String(modelId || '').trim();
+  if (!id) return '';
+  const slash = id.indexOf('/');
+  const tail = slash >= 0 ? id.slice(slash + 1) : id;
+  return tail
+    .replace(/[\\/]+/g, ' ')
+    .replace(/[-_]+/g, ' ')
+    .replace(/:/g, ' ')
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
+function atomicWriteJson(path, value) {
+  const dir = dirname(path);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
+  writeFileSync(tmp, JSON.stringify(value, null, 2) + '\n');
+  renameSync(tmp, path);
+}
+
+function logEvent(entry) {
+  try {
+    mkdirSync(HOOK_LOG_DIR, { recursive: true });
+    const today = new Date().toISOString().slice(0, 10);
+    appendFileSync(
+      join(HOOK_LOG_DIR, `model-sync-${today}.jsonl`),
+      JSON.stringify({ ts: new Date().toISOString(), ...entry }) + '\n',
+    );
+  } catch {
+    /* best-effort */
+  }
+}
+
+function buildPayload(appliedCount, modelAfter) {
+  const note = appliedCount > 0
+    ? `Bizar reapplied ${appliedCount} model picker option(s) to ~/.claude/settings.json (model=${modelAfter}).`
+    : '';
+  return {
+    hookSpecificOutput: {
+      hookEventName: 'SessionStart',
+      additionalContext: note,
+    },
+  };
+}
+
+function syncOnce() {
+  const routerPath = readRouterPath();
+  const router = readJsonIfObject(routerPath);
+  const userSelected = router && typeof router === 'object' ? router.userSelected : null;
+  const models = userSelected && Array.isArray(userSelected.models) ? userSelected.models : [];
+  const profiles = userSelected && userSelected.profiles && typeof userSelected.profiles === 'object'
+    ? userSelected.profiles
+    : {};
+  const liveIds = models.filter((id) => typeof id === 'string' && id.trim());
+  if (liveIds.length === 0) {
+    return { applied: 0, modelAfter: null, skipped: 'no-userSelected' };
+  }
+
+  const settingsPath = readSettingsPath();
+  const settings = readJsonIfObject(settingsPath) || {};
+  const before = {
+    model: typeof settings.model === 'string' ? settings.model : null,
+    modelPicker: settings.modelPicker || null,
+    modelOverrides: settings.modelOverrides || null,
+  };
+
+  const options = liveIds.map((id) => {
+    const option = { model: id, label: deriveModelLabel(id) };
+    const profile = profiles[id];
+    if (profile && typeof profile.description === 'string' && profile.description.trim()) {
+      option.description = profile.description.trim();
+    }
+    return option;
+  });
+
+  settings.modelPicker = { options };
+  settings.modelOverrides = Object.fromEntries(liveIds.map((id) => [id, id]));
+
+  let modelChanged = false;
+  if (typeof settings.model === 'string' && settings.model.startsWith('claude-')) {
+    settings.model = liveIds[0];
+    modelChanged = true;
+  }
+
+  atomicWriteJson(settingsPath, settings);
+
+  const after = {
+    model: typeof settings.model === 'string' ? settings.model : null,
+    modelPickerOptions: options.length,
+    modelOverridesCount: Object.keys(settings.modelOverrides).length,
+    modelChanged,
+  };
+
+  logEvent({ event: 'sessionstart-model-sync', routerPath, before, after });
+  return { applied: options.length, modelAfter: after.model, modelChanged };
+}
+
+function run() {
+  let raw = '';
+  process.stdin.setEncoding('utf8');
+  process.stdin.on('data', (chunk) => { raw += chunk; });
+  process.stdin.on('end', () => {
+    let input = {};
+    try { input = JSON.parse(raw || '{}'); } catch { input = {}; }
+    const sessionId = String(input.session_id || '');
+    const source = String(input.source || 'startup');
+    try {
+      const result = syncOnce();
+      const payload = buildPayload(result.applied, result.modelAfter);
+      process.stdout.write(JSON.stringify(payload) + '\n');
+    } catch (err) {
+      logEvent({
+        event: 'sessionstart-model-sync-error',
+        sessionId: sessionId || null,
+        source,
+        error: err && err.message ? err.message : String(err),
+      });
+      // Advisory hook — never block session start on a sync failure.
+      process.stdout.write('{}\n');
+    }
+  });
+}
+
+run();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "10.19.3",
+  "version": "10.19.6",
   "description": "Autonomous, human-in-the-loop multi-agent harness for Claude Code with guarded workflows, typed SDK primitives, and MCP tools.",
   "type": "module",
   "bin": {

package/packages/sdk/dist/version.d.ts

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export declare const SDK_VERSION: "10.19.3";
+export declare const SDK_VERSION: "10.19.6";
 //# sourceMappingURL=version.d.ts.map

package/packages/sdk/dist/version.js

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export const SDK_VERSION = "10.19.3";
+export const SDK_VERSION = "10.19.6";
 //# sourceMappingURL=version.js.map

package/packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar-sdk",
-  "version": "10.19.3",
+  "version": "10.19.6",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",