imprnt 0.1.3-edge.60 → 0.1.3-edge.62

package/CLAUDE.md

@@ -148,13 +148,13 @@ imprnt keeps exactly two "robot" helpers, carried over from PAI (the system impr
 
 ## Updating & contradictions
 
-Correct the ONE entity note. Everything links by ID so the fix propagates. Old name → `aliases`. A contradiction stamps the stale line `> superseded by [[...]]`. Marked, never silently overwritten. Because `raw/` is immutable, any claim is traceable to its snapshot, and a schema change is just a `reingest` over `raw/`.
+Correct the ONE entity note. Everything links by ID so the fix propagates. Old name → `aliases`. A contradiction stamps the stale line `> superseded by [[...]]`. Marked, never silently overwritten. Because `raw/` is immutable, any claim is traceable to its snapshot, and a schema change is just re-running `ingest` over `raw/`.
 
 ## Migrating existing structured knowledge
 
 A migration is the one-time bulk WRITE: snapshot every chosen source into `raw/<source>/` (immutable, complete), then the LLM fans each source out into atomic, domain-filed, linked notes. Two rules keep it honest:
 
-- **Re-derive from the ORIGINAL source, not a prior vault.** When you rebuild the vault, go back to the original snapshots in `raw/`. Don't reshuffle a previous vault's notes (that migrates yesterday's mistakes forward). A schema change is just a `reingest` over `raw/`.
+- **Re-derive from the ORIGINAL source, not a prior vault.** When you rebuild the vault, go back to the original snapshots in `raw/`. Don't reshuffle a previous vault's notes (that migrates yesterday's mistakes forward). A schema change is just re-running `ingest` over `raw/`.
 - **But preserve genuine prior enrichment.** When a *source* is already an atomic, enriched note (a prior system's knowledge notes), map its fields onto this contract and keep its typed links. Don't re-derive it from scratch (that pays the LLM to downgrade good work). Re-deriving from scratch is for *unstructured* sources (the dense prose blobs).
 
 **A dense multi-topic source splits into atomic linked notes: one snapshot, many notes.** Real migration sources are dense blobs covering many objects at once (a health-overview file = the med stack + a health profile + an insurance-critical prescription decision + the doctor-as-a-person). Don't file the whole blob as one note. That loses the entity graph (the doctor never becomes a `people/`, the decision never becomes a linkable note). Instead: split it into one atomic note per object across the right folders (`people/` for the doctor, `holdings/kind:med` for a tracked drug+dose, `health/`/`identity/` for the profile/decision), link them, and keep the single `raw/` snapshot as the shared provenance for all of them. `ingest` writes one snapshot. The LLM fans it out into the right number of notes.
@@ -176,11 +176,11 @@ Core is the vault + `ingest → recall → check`. Everything else (a task-mirro
 - **Write** single-writer-per-path: a plugin writes only its own folder and **proposes** vault-note changes for `ingest`/you to apply. It never mutates a note. Frontmatter labels are **slug-namespaced** (`whenful.synced`), read-your-own-only. Core ignores unknown keys.
 - **`recall` searches `vault/` only, forever.** Sibling dirs + `raw/` are outside the corpus by construction. A plugin surfaces into search only by **proposing one low-frequency summary note** (the escape hatch).
 - **Behavior plugins** are a separate class: ship a fixed-size fragment the **user wires into the agent's system prompt**. The vault never auto-injects. Remove = delete the wire-in. No referee for conflicting fragments, the user owns composition. (The old system imposed. imprnt composes.)
-- **Harness plugins** are the third class: they customize Claude Code itself, never the vault (timemachine's PreToolUse snapshot hook, the statusline, a skill). The same plugin folder doubles as a **native Claude Code plugin** (`.claude-plugin/plugin.json` + `hooks/` + `skills/`, Anthropic's format) and/or carries **`imp-settings.json`** (the settings keys Claude only takes via config, e.g. `statusLine`, with `${PLUGIN_DIR}` as the plugin's absolute dir). `imp` carries enabled ones into every session it launches: one `--plugin-dir` per native plugin + one merged `--settings`. Stock `claude` stays stock, nothing is ever written to settings files, `plugin rm` undoes everything.
+- **Harness plugins** are the third class: they customize Claude Code itself, never the vault (timemachine's PreToolUse snapshot hook, the statusline, a skill). The same plugin folder doubles as a **native Claude Code plugin** (`.claude-plugin/plugin.json` + `hooks/` + `skills/`, Anthropic's format) and/or carries **`imp-settings.json`** (the settings keys Claude only takes via config, e.g. `statusLine`, with `${PLUGIN_DIR}` as the plugin's absolute dir). `imp` carries enabled ones into every claude session it launches: one `--plugin-dir` per native plugin + one merged `--settings` (gemini has no host for claude harness plugins, so `imp --gemini` skips them with a warning). Stock `claude` stays stock, nothing is ever written to settings files, `plugin rm` undoes everything.
 - **Capability modules** are the one bend in "share nothing": a module may *provide* a capability another *consumes* (the session-host brokers an authed-session token to the kleinanzeigen watcher). Bounded so it can't re-bloat core: the consumer copies a tiny client (`sessionToken(site) -> string | null`) over a **localhost broker**, never imports the provider or reads its folder. The invariant that replaces "no cross-plugin reads": **removing a provider degrades a consumer gracefully** (`null` = host down, fall back), never breaks it. This is a third contact surface (vault . agent-context . broker), fenced like the sync edge: deterministic, answer-on-request, auditable (token fingerprint, never the token), never resident. The litmus extends: zero core edits to add/remove a *provider* too, because there is no capability registry in core. Credential-holding modules follow the auth finding: human login once, read-only attach, never copy a profile, never automate the password. Full rules: `plugins/README.md`.
 - **Secrets are env vars at the plugin's edge.** A plugin calling an external service reads its key from an env var named in its README and fails loud when missing. Keys never land in the vault, the plugin folder, or anything committed. No central secret store.
 - **Commands only, no forced daemon.** The user schedules sync. Install/remove is manual (README `## Install` / `## Remove` + `rm -rf`), no registry.
-- **Core ↔ plugin contact = exactly three convention-based aggregators**, all dumb and uniform: `imprnt check --all` globs `plugins/*/check.js` (each plugin's built artifact), runs each with `node`, reads **exit code only**, forwards stdout verbatim, never parses plugin output. `imprnt ingest --apply` files staged notes the plugins drop in `plugins/*/proposed/`. `imp` turns the enable list into launch flags (`--plugin-dir` per native plugin + one merged `--settings`) for the session it spawns. All discover by filename/dir convention, never by import, never by naming a specific plugin. Fence: core may provide read-only *aggregation* helpers, never write/orchestration. (Not k8s liveness/readiness. Nothing runs, so the only health question is "is the data sound", which is what `check` answers.)
+- **Core ↔ plugin contact = exactly four convention-based contact points**, all dumb and uniform: `imprnt check --all` globs `plugins/*/check.js` (each plugin's built artifact), runs each with `node`, reads **exit code only**, forwards stdout verbatim, never parses plugin output. `imprnt ingest --apply` files staged notes the plugins drop in `plugins/*/proposed/`. `imp` turns the enable list into launch flags (`--plugin-dir` per native plugin + one merged `--settings`) for the session it spawns. `imprnt <module> <command>` dispatches to `plugins/<module>/<module>.js` (stdio inherited, exit code passed through, a built-in subcommand always wins, zero per-module logic). All discover by filename/dir convention, never by import, never by naming a specific plugin. Fence: core may provide read-only *aggregation* helpers, never write/orchestration. (Not k8s liveness/readiness. Nothing runs, so the only health question is "is the data sound", which is what `check` answers.)
 
 ## Out of scope (on purpose)
 No task management. No auto-injected context. No background loop. No self-grading. No MCP/vector/embeddings on the vault. No sensitivity machinery (it's private by being private). **No `out/` zone for deliverables.** A produced artifact (an article, an export) lives in your artifacts dir and a vault note points to it. The vault holds knowledge, not outputs. Every plugin is a self-contained dir you can `rm -rf`. "It belongs" is not a reason to add it. (Plugin-contract out-of-scope list lives in `plugins/README.md`.)

package/README.md

@@ -127,7 +127,7 @@ asking ("add the anti-slop plugin"), each a separate `imprnt-plugin-*` package:
 | `imprnt-plugin-anti-slop` | Rules that keep its prose from reading like AI. |
 | `imprnt-plugin-whenful` | A local mirror of your [Whenful](https://whenful.com) tasks, shown inline at read. |
 | `imprnt-plugin-kleinanzeigen` | A watcher for your Kleinanzeigen inbox: regex triage of buyer messages, drafts, a phone digest. You press send. |
-| `imprnt-plugin-session-host` | A warm browser holding your logged-in sessions, providing the authed-session capability. You enroll each site once. |
+| `imprnt-plugin-session-host` | A warm browser holding your logged-in sessions, providing the authed-session capability. You enroll each site once. Not yet on npm: install from a repo checkout with `imprnt plugin add session-host --from <dir>`. |
 | `imprnt-plugin-timemachine` | Snapshots your work before each change so you can recover what the agent breaks. |
 | `imprnt-plugin-statusline` | A customizable status line: model, branch, context, cost, rate limits, clock. |
 | `imprnt-plugin-telegram` | Your vault from your phone: text a bot, the answer comes from your notes. |
@@ -164,7 +164,7 @@ assistant that files and recalls for you:
 
 The docs are the website, [imprnt.dev](https://imprnt.dev), built straight from markdown in
 [`site/docs/`](site/docs/) (the single source): getting started, how it works, the model, plugins,
-architecture, design decisions, and contributing. Edit a file there and the site updates on the next
+design decisions, and contributing. Edit a file there and the site updates on the next
 deploy.
 
 - [`CLAUDE.md`](CLAUDE.md), the contract your assistant reads inside the vault: note formats, conventions.
@@ -174,8 +174,8 @@ deploy.
 
 The engine is built with [Bun](https://bun.sh) and [Turborepo](https://turborepo.com) (dev tools
 only, never needed by people who use it through their assistant). Clone, `bun install`,
-`bun run build`, `bun run test`. The architecture and the build-and-release model are in the
-[architecture](https://imprnt.dev/architecture/) and [contributing](https://imprnt.dev/contributing/) docs.
+`bun run build`, `bun run test`. The reasoning behind the design and the build-and-release model are in the
+[design decisions](https://imprnt.dev/design-decisions/) and [contributing](https://imprnt.dev/contributing/) docs.
 
 ## License
 

package/dist/cli.js

@@ -737,12 +737,19 @@ function readRegistry() {
     for (const [k, v] of Object.entries(raw?.vaults ?? {}))
       if (typeof v === "string")
         vaults[k] = v;
+    const defaultModels = {};
+    for (const [k, v] of Object.entries(raw?.defaultModels ?? {}))
+      if (typeof v === "string")
+        defaultModels[k] = v;
+    const passthrough = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
     return {
+      ...passthrough,
       default: typeof raw?.default === "string" ? raw.default : undefined,
       vaults,
       defaultAgent: typeof raw?.defaultAgent === "string" ? raw.defaultAgent : undefined,
       skipPermissions: typeof raw?.skipPermissions === "boolean" ? raw.skipPermissions : undefined,
-      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined
+      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined,
+      defaultModels: Object.keys(defaultModels).length ? defaultModels : undefined
     };
   } catch {
     return { vaults: {} };
@@ -766,14 +773,9 @@ function registerVault(path, opts = {}) {
   const name = opts.name ?? "personal";
   reg.vaults[name] = path;
   reg.default = name;
-  const p = configPath();
-  try {
-    mkdirSync2(dirname2(p), { recursive: true });
-    writeFileSync5(p, JSON.stringify(reg, null, 2) + `
-`);
-  } catch (e) {
-    return { status: "error", current: path, error: e instanceof Error ? e.message : String(e) };
-  }
+  const w = writeRegistry(reg);
+  if (!w.ok)
+    return { status: "error", current: path, error: w.error };
   return { status: "registered", current: path };
 }
 function readDefaultAgent() {
@@ -792,12 +794,25 @@ function setSkipPermissions(on) {
   reg.skipPermissions = on;
   return writeRegistry(reg);
 }
-function readDefaultModel() {
-  return readRegistry().defaultModel;
+function readDefaultModel(agent) {
+  const reg = readRegistry();
+  const scoped = reg.defaultModels?.[agent];
+  if (scoped !== undefined)
+    return scoped;
+  return agent === (reg.defaultAgent ?? "claude") ? reg.defaultModel : undefined;
 }
-function setDefaultModel(model) {
+function setDefaultModel(model, agent) {
   const reg = readRegistry();
-  reg.defaultModel = model || undefined;
+  const models = { ...reg.defaultModels ?? {} };
+  const legacyAgent = reg.defaultAgent ?? "claude";
+  if (reg.defaultModel && models[legacyAgent] === undefined)
+    models[legacyAgent] = reg.defaultModel;
+  reg.defaultModel = undefined;
+  if (model)
+    models[agent] = model;
+  else
+    delete models[agent];
+  reg.defaultModels = Object.keys(models).length ? models : undefined;
   return writeRegistry(reg);
 }
 function writeRegistry(reg) {
@@ -842,8 +857,9 @@ var init_registry = () => {};
 // scripts/lib/launch.ts
 import { existsSync as existsSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, realpathSync, rmSync as rmSync3, statSync as statSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
-import { isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
+import { basename as basename2, isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
+import { createInterface } from "node:readline/promises";
 function importPath(root, target) {
   if (target.startsWith("~/"))
     return join8(homedir2(), target.slice(2));
@@ -1009,11 +1025,21 @@ function joinFragments(parts) {
 
 `);
 }
+function flagHead(args) {
+  const term = args.indexOf("--");
+  return term < 0 ? args : args.slice(0, term);
+}
 function claudeRenderArgs(spec) {
   const systemPrompt = spec.insideProject ? spec.globals : joinFragments([spec.cast, spec.pointer, spec.globals]);
   const harness = spec.pluginsRoot ? harnessFlags(spec.pluginsRoot) : [];
   const extra = spec.addDirs.flatMap((d) => ["--add-dir", d]);
-  const pass = spec.skipPermissions && !spec.passthrough.includes("--dangerously-skip-permissions") ? ["--dangerously-skip-permissions", ...spec.passthrough] : spec.passthrough;
+  const lead = [];
+  const head = flagHead(spec.passthrough);
+  if (spec.skipPermissions && !head.includes("--dangerously-skip-permissions"))
+    lead.push("--dangerously-skip-permissions");
+  if (spec.model && !head.some((a) => a === "--model" || a.startsWith("--model=")))
+    lead.push("--model", spec.model);
+  const pass = lead.length ? [...lead, ...spec.passthrough] : spec.passthrough;
   const body = systemPrompt ? mergeFragment(pass, systemPrompt, extra) : [...pass, ...extra];
   return [...harness, ...body];
 }
@@ -1023,6 +1049,19 @@ function expandGeminiModel(m) {
 function escapeGeminiImports(text) {
   return text.replaceAll("@", "\\@");
 }
+function trackGeminiTempDir(dir) {
+  geminiTempDirs.add(dir);
+  if (geminiCleanupArmed)
+    return;
+  geminiCleanupArmed = true;
+  process.on("exit", () => {
+    for (const d of geminiTempDirs) {
+      try {
+        rmSync3(d, { recursive: true, force: true });
+      } catch {}
+    }
+  });
+}
 function geminiRenderArgs(spec) {
   const includes = [];
   const systemPrompt = joinFragments([spec.cast, spec.pointer, spec.globals]);
@@ -1030,11 +1069,7 @@ function geminiRenderArgs(spec) {
     const dir = mkdtempSync2(join8(tmpdir2(), "imprnt-gemini-"));
     writeFileSync6(join8(dir, "GEMINI.md"), escapeGeminiImports(systemPrompt) + `
 `);
-    process.on("exit", () => {
-      try {
-        rmSync3(dir, { recursive: true, force: true });
-      } catch {}
-    });
+    trackGeminiTempDir(dir);
     includes.push(dir);
   }
   includes.push(...spec.addDirs);
@@ -1042,23 +1077,30 @@ function geminiRenderArgs(spec) {
     console.error("imp: gemini does not host claude harness plugins (statusline, timemachine) - skipping them");
   }
   const lead = [];
+  const head = flagHead(spec.passthrough);
   if (spec.skipPermissions) {
-    if (!spec.passthrough.includes("--yolo") && !spec.passthrough.includes("-y"))
+    if (!head.includes("--yolo") && !head.includes("-y"))
       lead.push("--yolo");
-    if (!spec.passthrough.includes("--skip-trust"))
+    if (!head.includes("--skip-trust"))
       lead.push("--skip-trust");
   }
   const pass = [...spec.passthrough];
-  const mIdx = pass.findIndex((a) => a === "-m" || a === "--model");
-  if (mIdx >= 0 && pass[mIdx + 1] !== undefined) {
-    pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
-  } else if (mIdx < 0 && spec.model) {
+  const mEnd = flagHead(pass).length;
+  const isModelFlag = (a) => a === "-m" || a === "--model" || a.startsWith("-m=") || a.startsWith("--model=");
+  const mIdx = pass.slice(0, mEnd).findIndex(isModelFlag);
+  if (mIdx >= 0) {
+    const tok = pass[mIdx];
+    const eq = tok.indexOf("=");
+    if (eq >= 0)
+      pass[mIdx] = tok.slice(0, eq + 1) + expandGeminiModel(tok.slice(eq + 1));
+    else if (mIdx + 1 < mEnd && pass[mIdx + 1] !== undefined)
+      pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
+  } else if (spec.model) {
     pass.unshift("-m", expandGeminiModel(spec.model));
   }
-  const rIdx = pass.findIndex((a) => a === "-r" || a === "--resume");
-  if (rIdx >= 0 && (pass[rIdx + 1] === undefined || pass[rIdx + 1].startsWith("-"))) {
+  const rIdx = valuelessResumeIndex(pass);
+  if (rIdx >= 0)
     pass.splice(rIdx + 1, 0, "latest");
-  }
   const flags = includes.length ? ["--include-directories", includes.join(",")] : [];
   return [...lead, ...flags, ...pass];
 }
@@ -1071,11 +1113,88 @@ function parseGeminiSessions(stdout) {
   }
   return out;
 }
+function valuelessResumeIndex(args) {
+  const term = args.indexOf("--");
+  const end = term < 0 ? args.length : term;
+  let i = -1;
+  for (let k = 0;k < end; k++) {
+    if (args[k] === "-r" || args[k] === "--resume") {
+      i = k;
+      break;
+    }
+  }
+  if (i < 0)
+    return -1;
+  const next = i + 1 < end ? args[i + 1] : undefined;
+  return next === undefined || next.startsWith("-") ? i : -1;
+}
+function listGeminiSessions(cwd) {
+  const r = spawnSync2("gemini", ["--list-sessions", "--skip-trust"], { cwd, encoding: "utf8" });
+  if (r.error || r.status !== 0)
+    return { sessions: [], ran: false };
+  const stdout = r.stdout || "";
+  const sessions = parseGeminiSessions(stdout);
+  if (!sessions.length && stdout.trim() && !/\(\s*0\s*\)|no sessions/i.test(stdout)) {
+    console.error("imp: couldn't parse gemini's session list (its format may have changed) - starting fresh");
+  }
+  return { sessions, ran: true };
+}
+async function pickGeminiSession(sessions, label) {
+  const cols = process.stdout.columns || 80;
+  const nameW = Math.max(20, Math.min(64, cols - 16));
+  const trunc = (s) => s.length > nameW ? s.slice(0, nameW - 1) + "…" : s;
+  process.stderr.write(`
+  resume a chat - gemini · ${label}
+
+`);
+  sessions.forEach((s, i) => {
+    process.stderr.write(`  ${String(i + 1).padStart(2)}  ${trunc(s.name).padEnd(nameW)}  ${s.age.replace(/\s*ago$/, "")}
+`);
+  });
+  process.stderr.write(`
+`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = (await rl.question("  number to resume · enter for newest · q to cancel › ")).trim();
+  rl.close();
+  if (answer === "")
+    return "latest";
+  if (answer.toLowerCase() === "q")
+    return null;
+  const n = Number(answer);
+  if (Number.isInteger(n) && n >= 1 && n <= sessions.length)
+    return sessions[n - 1].id;
+  process.stderr.write(`  not a valid choice - starting a fresh session
+`);
+  return null;
+}
+async function geminiResolveResume(passthrough, cwd) {
+  const rIdx = valuelessResumeIndex(passthrough);
+  if (rIdx < 0)
+    return passthrough;
+  if (!(process.stdin.isTTY && process.stdout.isTTY))
+    return passthrough;
+  const { sessions, ran } = listGeminiSessions(cwd);
+  if (!ran)
+    return passthrough;
+  if (!sessions.length) {
+    console.error("imp: no saved gemini chats for this project yet - starting fresh");
+    return passthrough.filter((_, i) => i !== rIdx);
+  }
+  const chosen = await pickGeminiSession(sessions, basename2(cwd));
+  if (chosen === null)
+    return passthrough.filter((_, i) => i !== rIdx);
+  const out = [...passthrough];
+  out.splice(rIdx + 1, 0, chosen);
+  return out;
+}
 function resolveLaunch(passthrough, config = {}) {
+  const term = passthrough.indexOf("--");
+  const head = term < 0 ? passthrough : passthrough.slice(0, term);
+  const tail = term < 0 ? [] : passthrough.slice(term);
   let agentFlag;
   let yoloFlag;
   const rest = [];
-  for (const a of passthrough) {
+  for (const a of head) {
     if (a === "--gemini")
       agentFlag = agentFlag ?? "gemini";
     else if (a === "--claude")
@@ -1088,14 +1207,15 @@ function resolveLaunch(passthrough, config = {}) {
       rest.push(a);
   }
   const name = agentFlag ?? process.env.IMPRNT_AGENT ?? config.agent ?? "claude";
-  let backend = backends[name];
+  let backend = Object.hasOwn(backends, name) ? backends[name] : undefined;
   if (!backend) {
     console.error(`imp: unknown agent "${name}" - falling back to claude (valid: ${Object.keys(backends).join(", ")})`);
     backend = claudeBackend;
   }
-  const envYolo = "IMPRNT_YOLO" in process.env ? !["0", "false", ""].includes(process.env.IMPRNT_YOLO ?? "") : undefined;
+  const yoloEnv = process.env.IMPRNT_YOLO;
+  const envYolo = yoloEnv === undefined ? undefined : !["0", "false", "", "off", "no"].includes(yoloEnv.toLowerCase());
   const skipPermissions = yoloFlag ?? envYolo ?? config.yolo ?? false;
-  return { backend, skipPermissions, passthrough: rest };
+  return { backend, skipPermissions, passthrough: [...rest, ...tail] };
 }
 function launchBackend(backend, cwd, args, env = process.env) {
   if (!isDir(cwd)) {
@@ -1110,7 +1230,7 @@ function launchBackend(backend, cwd, args, env = process.env) {
   }
   return r.status ?? 1;
 }
-var claudeBackend, GEMINI_MODEL_ALIASES, geminiBackend, backends;
+var claudeBackend, GEMINI_MODEL_ALIASES, geminiTempDirs, geminiCleanupArmed = false, geminiBackend, backends;
 var init_launch = __esm(() => {
   init_plugins();
   init_global();
@@ -1127,10 +1247,12 @@ var init_launch = __esm(() => {
     gemma31: "gemma-4-31b-it",
     gemma26: "gemma-4-26b-a4b-it"
   };
+  geminiTempDirs = new Set;
   geminiBackend = {
     name: "gemini",
     missingHint: "Install the Gemini CLI first: npm i -g @google/gemini-cli",
-    renderArgs: geminiRenderArgs
+    renderArgs: geminiRenderArgs,
+    resolveResume: geminiResolveResume
   };
   backends = {
     claude: claudeBackend,
@@ -1173,7 +1295,7 @@ var init_manifest = () => {};
 var exports_ingest = {};
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync6 } from "node:fs";
 import { createHash } from "node:crypto";
-import { basename as basename2, extname, join as join10, relative as relative3 } from "node:path";
+import { basename as basename3, extname, join as join10, relative as relative3 } from "node:path";
 function slugify(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 60);
 }
@@ -1254,7 +1376,7 @@ function applyStaged(staged, vault) {
     return "error";
   }
   const title = text.match(/^#\s+(.+)$/m)?.[1]?.trim() ?? "";
-  const slug = deriveSlug([fmScalar2(fm, "slug"), title, basename2(staged, ".md")]);
+  const slug = deriveSlug([fmScalar2(fm, "slug"), title, basename3(staged, ".md")]);
   if (!slug) {
     console.error(`  ✗ ${staged}: can't derive a slug - slug:, the H1 title, and the filename all slugify to nothing`);
     return "error";
@@ -1481,7 +1603,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
     console.log(`unchanged (hash ${hash}) — skipping ${src}. note: ${prior.note}`);
     process.exit(0);
   }
-  fname = basename2(src);
+  fname = basename3(src);
   dateMatch = fname.match(/(\d{4}-\d{2}-\d{2})/) || text.match(/^\s*date:\s*(\d{4}-\d{2}-\d{2})/im);
   date = dateMatch ? dateMatch[1] : new Date().toISOString().slice(0, 10);
   lines = text.split(/\r?\n/);
@@ -1515,7 +1637,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
   }
   recurringSpeaker = [...turnsBySpeaker.values()].some((n) => n >= 2);
   isTranscript = isFile && looksLikeTranscript(speakers, turnCount, contentLines, recurringSpeaker);
-  slugBasis = slugHint || subject || [...speakers].join("-") || (isFile ? basename2(src, extname(src)) : text.slice(0, 60));
+  slugBasis = slugHint || subject || [...speakers].join("-") || (isFile ? basename3(src, extname(src)) : text.slice(0, 60));
   subjectSlug = slugify(slugBasis) || "source";
   noteSlug = `${date}-${subjectSlug}`;
   rawDir = join10(vault, "..", "raw", isTranscript ? "transcripts" : "adhoc");
@@ -1756,7 +1878,7 @@ var init_tags = __esm(() => {
 // scripts/recall.ts
 var exports_recall = {};
 import { lstatSync as lstatSync2, readdirSync as readdirSync6, readFileSync as readFileSync11 } from "node:fs";
-import { basename as basename3, join as join12, relative as relative4 } from "node:path";
+import { basename as basename4, join as join12, relative as relative4 } from "node:path";
 function walk2(dir2) {
   const out = [];
   for (const entry of readdirSync6(dir2)) {
@@ -1973,7 +2095,7 @@ var init_recall = __esm(() => {
       for (const t of tokens)
         tf.set(t, (tf.get(t) ?? 0) + weight);
     };
-    add([...tokenize(titleText), ...tokenize(basename3(path, ".md"))], TITLE_BOOST);
+    add([...tokenize(titleText), ...tokenize(basename4(path, ".md"))], TITLE_BOOST);
     add(tokenize(aliases), TITLE_BOOST);
     add(tags.flatMap(tokenize), TAG_BOOST);
     add(tokenize(summary), SUMMARY_BOOST);
@@ -2038,7 +2160,7 @@ var init_recall = __esm(() => {
 var exports_snapshot = {};
 import { readdirSync as readdirSync7, readFileSync as readFileSync12, copyFileSync as copyFileSync2, mkdirSync as mkdirSync4, existsSync as existsSync11, statSync as statSync7, lstatSync as lstatSync3 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { join as join13, relative as relative5, basename as basename4, extname as extname2, resolve as resolve5, sep as sep3 } from "node:path";
+import { join as join13, relative as relative5, basename as basename5, extname as extname2, resolve as resolve5, sep as sep3 } from "node:path";
 function destWithinRaw(rawRoot, dest) {
   const rootResolved = resolve5(rawRoot);
   const destResolved = resolve5(rootResolved, dest);
@@ -2050,7 +2172,7 @@ function collect(p, base) {
   let skippedLinks = 0;
   const st = statSync7(p);
   if (st.isFile())
-    return { files: [{ abs: p, rel: basename4(p) }], skippedLinks };
+    return { files: [{ abs: p, rel: basename5(p) }], skippedLinks };
   const out = [];
   const walk3 = (dir2) => {
     for (const entry of readdirSync7(dir2)) {
@@ -2221,6 +2343,13 @@ function hostMemoryStores() {
     }
   }).sort();
 }
+function memoryIndexHasContent(dir2) {
+  try {
+    return readFileSync13(join14(dir2, "MEMORY.md"), "utf8").split(/\r?\n/).some((l) => l.trim() !== "" && l.trim() !== "# Memory index");
+  } catch {
+    return false;
+  }
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2400,10 +2529,18 @@ var init_check = __esm(() => {
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
   memoryStores = hostMemoryStores();
-  strayStores = memoryStores.map((dir2) => ({
-    dir: dir2,
-    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
-  })).filter((s) => s.files.length > 0);
+  strayStores = memoryStores.map((dir2) => {
+    let files3 = [];
+    try {
+      if (existsSync12(dir2))
+        files3 = readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort();
+    } catch (e) {
+      console.error(`⚠ host auto-memory sweep: could not read ${dir2} (${e instanceof Error ? e.message : String(e)}) - skipping it`);
+    }
+    if (memoryIndexHasContent(dir2))
+      files3.push("MEMORY.md (has content)");
+    return { dir: dir2, files: files3 };
+  }).filter((s) => s.files.length > 0);
   strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
   for (const s of strayStores)
     review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
@@ -2528,10 +2665,10 @@ all plugin checks passed.`);
 var exports_cli = {};
 import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
+import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename6 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 import { fileURLToPath } from "node:url";
-import { createInterface } from "node:readline/promises";
+import { createInterface as createInterface2 } from "node:readline/promises";
 function pluginRoot() {
   const local = projectRoot();
   if (process.env.IMPRNT_ROOT || process.env.IMPRINT_ROOT)
@@ -2578,7 +2715,7 @@ function physicalTarget(target) {
     const parent = dirname4(existing);
     if (parent === existing)
       return target;
-    tail.unshift(basename5(existing));
+    tail.unshift(basename6(existing));
     existing = parent;
   }
   try {
@@ -2607,61 +2744,6 @@ function controlSlot(dst) {
     return "keep";
   return "blocked-non-regular-file";
 }
-function listGeminiSessions(cwd) {
-  const r = spawnSync4("gemini", ["--list-sessions", "--skip-trust"], { cwd, encoding: "utf8" });
-  return parseGeminiSessions(r.stdout || "");
-}
-async function pickGeminiSession(sessions, label) {
-  const cols = process.stdout.columns || 80;
-  const nameW = Math.max(20, Math.min(64, cols - 16));
-  const trunc = (s) => s.length > nameW ? s.slice(0, nameW - 1) + "…" : s;
-  process.stderr.write(`
-  resume a chat — gemini · ${label}
-
-`);
-  sessions.forEach((s, i) => {
-    process.stderr.write(`  ${String(i + 1).padStart(2)}  ${trunc(s.name).padEnd(nameW)}  ${s.age.replace(/\s*ago$/, "")}
-`);
-  });
-  process.stderr.write(`
-`);
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = (await rl.question("  number to resume · enter for newest · q to cancel › ")).trim();
-  rl.close();
-  if (answer === "")
-    return "latest";
-  if (answer.toLowerCase() === "q")
-    return null;
-  const n = Number(answer);
-  if (Number.isInteger(n) && n >= 1 && n <= sessions.length)
-    return sessions[n - 1].id;
-  process.stderr.write(`  not a valid choice — starting a fresh session
-`);
-  return null;
-}
-async function resolveGeminiResume(backendName, passthrough, cwd) {
-  if (backendName !== "gemini")
-    return passthrough;
-  const rIdx = passthrough.findIndex((a) => a === "-r" || a === "--resume");
-  if (rIdx < 0)
-    return passthrough;
-  const next = passthrough[rIdx + 1];
-  if (next !== undefined && !next.startsWith("-"))
-    return passthrough;
-  if (!(process.stdin.isTTY && process.stdout.isTTY))
-    return passthrough;
-  const sessions = listGeminiSessions(cwd);
-  if (!sessions.length) {
-    console.error("imp: no saved gemini chats for this project yet — starting fresh");
-    return passthrough.filter((_, i) => i !== rIdx);
-  }
-  const chosen = await pickGeminiSession(sessions, basename5(cwd));
-  if (chosen === null)
-    return passthrough.filter((_, i) => i !== rIdx);
-  const out = [...passthrough];
-  out.splice(rIdx + 1, 0, chosen);
-  return out;
-}
 var here, pkgRoot, cmd, rest, asImp;
 var init_cli = __esm(async () => {
   init_resolve();
@@ -2711,8 +2793,8 @@ var init_cli = __esm(async () => {
     case "lair": {
       const home = requireVaultHome();
       const { backend, skipPermissions, passthrough } = resolveLaunch(rest, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
-      const resumed = await resolveGeminiResume(backend.name, passthrough, home);
-      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel() });
+      const resumed = backend.resolveResume ? await backend.resolveResume(passthrough, home) : passthrough;
+      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel(backend.name) });
       process.exit(launchBackend(backend, home, backend.renderArgs(spec), spec.env));
     }
     case "context": {
@@ -2735,8 +2817,8 @@ var init_cli = __esm(async () => {
         console.log("set: imprnt agent <claude|gemini>   override one session: imp --gemini | imp --claude");
         break;
       }
-      if (name !== "claude" && name !== "gemini") {
-        console.error(`unknown agent "${name}" — valid: claude, gemini`);
+      if (!Object.hasOwn(backends, name)) {
+        console.error(`unknown agent "${name}" — valid: ${Object.keys(backends).join(", ")}`);
         process.exit(1);
       }
       const r = setDefaultAgent(name);
@@ -2769,29 +2851,32 @@ var init_cli = __esm(async () => {
       break;
     }
     case "model": {
+      const envAgent = process.env.IMPRNT_AGENT;
+      const agentName = envAgent ?? readDefaultAgent() ?? "claude";
+      const agent = agentName in backends ? agentName : "claude";
       const [arg] = rest;
       if (!arg) {
-        const m = readDefaultModel();
-        console.log(`default model: ${m ?? "(agent's own default)"}`);
+        const m = readDefaultModel(agent);
+        console.log(`default model for ${agent}: ${m ?? "(agent's own default)"}`);
         console.log("set: imprnt model <alias|id>   clear: imprnt model off");
-        console.log("gemini aliases: pro=gemini-3.1-pro-preview, flash=gemini-3.5-flash, pro25=gemini-2.5-pro, lite=gemini-3.1-flash-lite, gemma31, gemma26");
+        console.log(`gemini aliases: ${Object.entries(GEMINI_MODEL_ALIASES).map(([k, v]) => `${k}=${v}`).join(", ")}`);
         break;
       }
       if (arg === "off" || arg === "default" || arg === "none") {
-        const r2 = setDefaultModel("");
+        const r2 = setDefaultModel("", agent);
         if (!r2.ok) {
           console.error(`could not clear default model (${configPath()}): ${r2.error}`);
           process.exit(1);
         }
-        console.log(`default model cleared (${configPath()}) — the agent uses its own default`);
+        console.log(`default model for ${agent} cleared (${configPath()}) — the agent uses its own default`);
         break;
       }
-      const r = setDefaultModel(arg);
+      const r = setDefaultModel(arg, agent);
       if (!r.ok) {
         console.error(`could not set default model (${configPath()}): ${r.error}`);
         process.exit(1);
       }
-      console.log(`default model set to ${arg} (${configPath()})`);
+      console.log(`default model for ${agent} set to ${arg} (${configPath()})`);
       break;
     }
     case "plugin": {
@@ -2999,7 +3084,7 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         const inPlace = isVaultProject(process.cwd());
         const display = inPlace ? process.cwd() : "~/imprnt";
         const fallback = inPlace ? process.cwd() : join15(homedir4(), "imprnt");
-        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const rl = createInterface2({ input: process.stdin, output: process.stdout });
         const answer = (await rl.question(`vault location [${display}]: `)).trim();
         rl.close();
         target = answer ? resolvePath(answer) : fallback;
@@ -3062,7 +3147,10 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         added.push("CLAUDE.md");
       }
       try {
+        const prevMode = statSync9(target).mode & 511;
         chmodSync(target, 448);
+        if (prevMode !== 448)
+          console.log(`locked ${target} to owner-only (chmod 700, was ${prevMode.toString(8).padStart(3, "0")})`);
       } catch (e) {
         console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
       }
@@ -3111,8 +3199,8 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         }
         const raw = bare ? [] : [cmd, ...rest];
         const { backend, skipPermissions, passthrough } = resolveLaunch(raw, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
-        const resumed = await resolveGeminiResume(backend.name, passthrough, process.cwd());
-        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel() });
+        const resumed = backend.resolveResume ? await backend.resolveResume(passthrough, process.cwd()) : passthrough;
+        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel(backend.name) });
         process.exit(launchBackend(backend, process.cwd(), backend.renderArgs(spec), spec.env));
       }
       console.log(`imprnt — deterministic-first markdown knowledge vault
@@ -3132,7 +3220,7 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt context                           print the vault contract — agents run this before writing any note
   imprnt agent [claude|gemini]             show or set the per-machine default agent backend for imp
   imprnt yolo [on|off]                      show or set the per-machine skip-permissions default for imp
-  imprnt model [alias|id|off]               show or set the per-machine default model (gemini aliases: pro, flash, pro25, lite, ...)
+  imprnt model [alias|id|off]               show or set the per-machine default model for the current default agent (gemini aliases: pro, flash, pro25, lite, ...)
   imprnt check [--all] [--vault D]         integrity (orphan links, disconnected notes, uncovered snapshots) + regenerate index.md; --all also runs each plugins/*/check.js
   imprnt ingest --apply <file> [--vault D] file a pre-enriched staged note from a plugin into the vault (snapshot + resolve); --apply-all globs plugins/*/proposed/
   imprnt hot [--vault D]                   needs-review + the session primer

package/dist/imp.js

@@ -737,12 +737,19 @@ function readRegistry() {
     for (const [k, v] of Object.entries(raw?.vaults ?? {}))
       if (typeof v === "string")
         vaults[k] = v;
+    const defaultModels = {};
+    for (const [k, v] of Object.entries(raw?.defaultModels ?? {}))
+      if (typeof v === "string")
+        defaultModels[k] = v;
+    const passthrough = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
     return {
+      ...passthrough,
       default: typeof raw?.default === "string" ? raw.default : undefined,
       vaults,
       defaultAgent: typeof raw?.defaultAgent === "string" ? raw.defaultAgent : undefined,
       skipPermissions: typeof raw?.skipPermissions === "boolean" ? raw.skipPermissions : undefined,
-      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined
+      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined,
+      defaultModels: Object.keys(defaultModels).length ? defaultModels : undefined
     };
   } catch {
     return { vaults: {} };
@@ -766,14 +773,9 @@ function registerVault(path, opts = {}) {
   const name = opts.name ?? "personal";
   reg.vaults[name] = path;
   reg.default = name;
-  const p = configPath();
-  try {
-    mkdirSync2(dirname2(p), { recursive: true });
-    writeFileSync5(p, JSON.stringify(reg, null, 2) + `
-`);
-  } catch (e) {
-    return { status: "error", current: path, error: e instanceof Error ? e.message : String(e) };
-  }
+  const w = writeRegistry(reg);
+  if (!w.ok)
+    return { status: "error", current: path, error: w.error };
   return { status: "registered", current: path };
 }
 function readDefaultAgent() {
@@ -792,12 +794,25 @@ function setSkipPermissions(on) {
   reg.skipPermissions = on;
   return writeRegistry(reg);
 }
-function readDefaultModel() {
-  return readRegistry().defaultModel;
+function readDefaultModel(agent) {
+  const reg = readRegistry();
+  const scoped = reg.defaultModels?.[agent];
+  if (scoped !== undefined)
+    return scoped;
+  return agent === (reg.defaultAgent ?? "claude") ? reg.defaultModel : undefined;
 }
-function setDefaultModel(model) {
+function setDefaultModel(model, agent) {
   const reg = readRegistry();
-  reg.defaultModel = model || undefined;
+  const models = { ...reg.defaultModels ?? {} };
+  const legacyAgent = reg.defaultAgent ?? "claude";
+  if (reg.defaultModel && models[legacyAgent] === undefined)
+    models[legacyAgent] = reg.defaultModel;
+  reg.defaultModel = undefined;
+  if (model)
+    models[agent] = model;
+  else
+    delete models[agent];
+  reg.defaultModels = Object.keys(models).length ? models : undefined;
   return writeRegistry(reg);
 }
 function writeRegistry(reg) {
@@ -842,8 +857,9 @@ var init_registry = () => {};
 // scripts/lib/launch.ts
 import { existsSync as existsSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, realpathSync, rmSync as rmSync3, statSync as statSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
-import { isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
+import { basename as basename2, isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
+import { createInterface } from "node:readline/promises";
 function importPath(root, target) {
   if (target.startsWith("~/"))
     return join8(homedir2(), target.slice(2));
@@ -1009,11 +1025,21 @@ function joinFragments(parts) {
 
 `);
 }
+function flagHead(args) {
+  const term = args.indexOf("--");
+  return term < 0 ? args : args.slice(0, term);
+}
 function claudeRenderArgs(spec) {
   const systemPrompt = spec.insideProject ? spec.globals : joinFragments([spec.cast, spec.pointer, spec.globals]);
   const harness = spec.pluginsRoot ? harnessFlags(spec.pluginsRoot) : [];
   const extra = spec.addDirs.flatMap((d) => ["--add-dir", d]);
-  const pass = spec.skipPermissions && !spec.passthrough.includes("--dangerously-skip-permissions") ? ["--dangerously-skip-permissions", ...spec.passthrough] : spec.passthrough;
+  const lead = [];
+  const head = flagHead(spec.passthrough);
+  if (spec.skipPermissions && !head.includes("--dangerously-skip-permissions"))
+    lead.push("--dangerously-skip-permissions");
+  if (spec.model && !head.some((a) => a === "--model" || a.startsWith("--model=")))
+    lead.push("--model", spec.model);
+  const pass = lead.length ? [...lead, ...spec.passthrough] : spec.passthrough;
   const body = systemPrompt ? mergeFragment(pass, systemPrompt, extra) : [...pass, ...extra];
   return [...harness, ...body];
 }
@@ -1023,6 +1049,19 @@ function expandGeminiModel(m) {
 function escapeGeminiImports(text) {
   return text.replaceAll("@", "\\@");
 }
+function trackGeminiTempDir(dir) {
+  geminiTempDirs.add(dir);
+  if (geminiCleanupArmed)
+    return;
+  geminiCleanupArmed = true;
+  process.on("exit", () => {
+    for (const d of geminiTempDirs) {
+      try {
+        rmSync3(d, { recursive: true, force: true });
+      } catch {}
+    }
+  });
+}
 function geminiRenderArgs(spec) {
   const includes = [];
   const systemPrompt = joinFragments([spec.cast, spec.pointer, spec.globals]);
@@ -1030,11 +1069,7 @@ function geminiRenderArgs(spec) {
     const dir = mkdtempSync2(join8(tmpdir2(), "imprnt-gemini-"));
     writeFileSync6(join8(dir, "GEMINI.md"), escapeGeminiImports(systemPrompt) + `
 `);
-    process.on("exit", () => {
-      try {
-        rmSync3(dir, { recursive: true, force: true });
-      } catch {}
-    });
+    trackGeminiTempDir(dir);
     includes.push(dir);
   }
   includes.push(...spec.addDirs);
@@ -1042,23 +1077,30 @@ function geminiRenderArgs(spec) {
     console.error("imp: gemini does not host claude harness plugins (statusline, timemachine) - skipping them");
   }
   const lead = [];
+  const head = flagHead(spec.passthrough);
   if (spec.skipPermissions) {
-    if (!spec.passthrough.includes("--yolo") && !spec.passthrough.includes("-y"))
+    if (!head.includes("--yolo") && !head.includes("-y"))
       lead.push("--yolo");
-    if (!spec.passthrough.includes("--skip-trust"))
+    if (!head.includes("--skip-trust"))
       lead.push("--skip-trust");
   }
   const pass = [...spec.passthrough];
-  const mIdx = pass.findIndex((a) => a === "-m" || a === "--model");
-  if (mIdx >= 0 && pass[mIdx + 1] !== undefined) {
-    pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
-  } else if (mIdx < 0 && spec.model) {
+  const mEnd = flagHead(pass).length;
+  const isModelFlag = (a) => a === "-m" || a === "--model" || a.startsWith("-m=") || a.startsWith("--model=");
+  const mIdx = pass.slice(0, mEnd).findIndex(isModelFlag);
+  if (mIdx >= 0) {
+    const tok = pass[mIdx];
+    const eq = tok.indexOf("=");
+    if (eq >= 0)
+      pass[mIdx] = tok.slice(0, eq + 1) + expandGeminiModel(tok.slice(eq + 1));
+    else if (mIdx + 1 < mEnd && pass[mIdx + 1] !== undefined)
+      pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
+  } else if (spec.model) {
     pass.unshift("-m", expandGeminiModel(spec.model));
   }
-  const rIdx = pass.findIndex((a) => a === "-r" || a === "--resume");
-  if (rIdx >= 0 && (pass[rIdx + 1] === undefined || pass[rIdx + 1].startsWith("-"))) {
+  const rIdx = valuelessResumeIndex(pass);
+  if (rIdx >= 0)
     pass.splice(rIdx + 1, 0, "latest");
-  }
   const flags = includes.length ? ["--include-directories", includes.join(",")] : [];
   return [...lead, ...flags, ...pass];
 }
@@ -1071,11 +1113,88 @@ function parseGeminiSessions(stdout) {
   }
   return out;
 }
+function valuelessResumeIndex(args) {
+  const term = args.indexOf("--");
+  const end = term < 0 ? args.length : term;
+  let i = -1;
+  for (let k = 0;k < end; k++) {
+    if (args[k] === "-r" || args[k] === "--resume") {
+      i = k;
+      break;
+    }
+  }
+  if (i < 0)
+    return -1;
+  const next = i + 1 < end ? args[i + 1] : undefined;
+  return next === undefined || next.startsWith("-") ? i : -1;
+}
+function listGeminiSessions(cwd) {
+  const r = spawnSync2("gemini", ["--list-sessions", "--skip-trust"], { cwd, encoding: "utf8" });
+  if (r.error || r.status !== 0)
+    return { sessions: [], ran: false };
+  const stdout = r.stdout || "";
+  const sessions = parseGeminiSessions(stdout);
+  if (!sessions.length && stdout.trim() && !/\(\s*0\s*\)|no sessions/i.test(stdout)) {
+    console.error("imp: couldn't parse gemini's session list (its format may have changed) - starting fresh");
+  }
+  return { sessions, ran: true };
+}
+async function pickGeminiSession(sessions, label) {
+  const cols = process.stdout.columns || 80;
+  const nameW = Math.max(20, Math.min(64, cols - 16));
+  const trunc = (s) => s.length > nameW ? s.slice(0, nameW - 1) + "…" : s;
+  process.stderr.write(`
+  resume a chat - gemini · ${label}
+
+`);
+  sessions.forEach((s, i) => {
+    process.stderr.write(`  ${String(i + 1).padStart(2)}  ${trunc(s.name).padEnd(nameW)}  ${s.age.replace(/\s*ago$/, "")}
+`);
+  });
+  process.stderr.write(`
+`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = (await rl.question("  number to resume · enter for newest · q to cancel › ")).trim();
+  rl.close();
+  if (answer === "")
+    return "latest";
+  if (answer.toLowerCase() === "q")
+    return null;
+  const n = Number(answer);
+  if (Number.isInteger(n) && n >= 1 && n <= sessions.length)
+    return sessions[n - 1].id;
+  process.stderr.write(`  not a valid choice - starting a fresh session
+`);
+  return null;
+}
+async function geminiResolveResume(passthrough, cwd) {
+  const rIdx = valuelessResumeIndex(passthrough);
+  if (rIdx < 0)
+    return passthrough;
+  if (!(process.stdin.isTTY && process.stdout.isTTY))
+    return passthrough;
+  const { sessions, ran } = listGeminiSessions(cwd);
+  if (!ran)
+    return passthrough;
+  if (!sessions.length) {
+    console.error("imp: no saved gemini chats for this project yet - starting fresh");
+    return passthrough.filter((_, i) => i !== rIdx);
+  }
+  const chosen = await pickGeminiSession(sessions, basename2(cwd));
+  if (chosen === null)
+    return passthrough.filter((_, i) => i !== rIdx);
+  const out = [...passthrough];
+  out.splice(rIdx + 1, 0, chosen);
+  return out;
+}
 function resolveLaunch(passthrough, config = {}) {
+  const term = passthrough.indexOf("--");
+  const head = term < 0 ? passthrough : passthrough.slice(0, term);
+  const tail = term < 0 ? [] : passthrough.slice(term);
   let agentFlag;
   let yoloFlag;
   const rest = [];
-  for (const a of passthrough) {
+  for (const a of head) {
     if (a === "--gemini")
       agentFlag = agentFlag ?? "gemini";
     else if (a === "--claude")
@@ -1088,14 +1207,15 @@ function resolveLaunch(passthrough, config = {}) {
       rest.push(a);
   }
   const name = agentFlag ?? process.env.IMPRNT_AGENT ?? config.agent ?? "claude";
-  let backend = backends[name];
+  let backend = Object.hasOwn(backends, name) ? backends[name] : undefined;
   if (!backend) {
     console.error(`imp: unknown agent "${name}" - falling back to claude (valid: ${Object.keys(backends).join(", ")})`);
     backend = claudeBackend;
   }
-  const envYolo = "IMPRNT_YOLO" in process.env ? !["0", "false", ""].includes(process.env.IMPRNT_YOLO ?? "") : undefined;
+  const yoloEnv = process.env.IMPRNT_YOLO;
+  const envYolo = yoloEnv === undefined ? undefined : !["0", "false", "", "off", "no"].includes(yoloEnv.toLowerCase());
   const skipPermissions = yoloFlag ?? envYolo ?? config.yolo ?? false;
-  return { backend, skipPermissions, passthrough: rest };
+  return { backend, skipPermissions, passthrough: [...rest, ...tail] };
 }
 function launchBackend(backend, cwd, args, env = process.env) {
   if (!isDir(cwd)) {
@@ -1110,7 +1230,7 @@ function launchBackend(backend, cwd, args, env = process.env) {
   }
   return r.status ?? 1;
 }
-var claudeBackend, GEMINI_MODEL_ALIASES, geminiBackend, backends;
+var claudeBackend, GEMINI_MODEL_ALIASES, geminiTempDirs, geminiCleanupArmed = false, geminiBackend, backends;
 var init_launch = __esm(() => {
   init_plugins();
   init_global();
@@ -1127,10 +1247,12 @@ var init_launch = __esm(() => {
     gemma31: "gemma-4-31b-it",
     gemma26: "gemma-4-26b-a4b-it"
   };
+  geminiTempDirs = new Set;
   geminiBackend = {
     name: "gemini",
     missingHint: "Install the Gemini CLI first: npm i -g @google/gemini-cli",
-    renderArgs: geminiRenderArgs
+    renderArgs: geminiRenderArgs,
+    resolveResume: geminiResolveResume
   };
   backends = {
     claude: claudeBackend,
@@ -1173,7 +1295,7 @@ var init_manifest = () => {};
 var exports_ingest = {};
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync6 } from "node:fs";
 import { createHash } from "node:crypto";
-import { basename as basename2, extname, join as join10, relative as relative3 } from "node:path";
+import { basename as basename3, extname, join as join10, relative as relative3 } from "node:path";
 function slugify(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 60);
 }
@@ -1254,7 +1376,7 @@ function applyStaged(staged, vault) {
     return "error";
   }
   const title = text.match(/^#\s+(.+)$/m)?.[1]?.trim() ?? "";
-  const slug = deriveSlug([fmScalar2(fm, "slug"), title, basename2(staged, ".md")]);
+  const slug = deriveSlug([fmScalar2(fm, "slug"), title, basename3(staged, ".md")]);
   if (!slug) {
     console.error(`  ✗ ${staged}: can't derive a slug - slug:, the H1 title, and the filename all slugify to nothing`);
     return "error";
@@ -1481,7 +1603,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
     console.log(`unchanged (hash ${hash}) — skipping ${src}. note: ${prior.note}`);
     process.exit(0);
   }
-  fname = basename2(src);
+  fname = basename3(src);
   dateMatch = fname.match(/(\d{4}-\d{2}-\d{2})/) || text.match(/^\s*date:\s*(\d{4}-\d{2}-\d{2})/im);
   date = dateMatch ? dateMatch[1] : new Date().toISOString().slice(0, 10);
   lines = text.split(/\r?\n/);
@@ -1515,7 +1637,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
   }
   recurringSpeaker = [...turnsBySpeaker.values()].some((n) => n >= 2);
   isTranscript = isFile && looksLikeTranscript(speakers, turnCount, contentLines, recurringSpeaker);
-  slugBasis = slugHint || subject || [...speakers].join("-") || (isFile ? basename2(src, extname(src)) : text.slice(0, 60));
+  slugBasis = slugHint || subject || [...speakers].join("-") || (isFile ? basename3(src, extname(src)) : text.slice(0, 60));
   subjectSlug = slugify(slugBasis) || "source";
   noteSlug = `${date}-${subjectSlug}`;
   rawDir = join10(vault, "..", "raw", isTranscript ? "transcripts" : "adhoc");
@@ -1756,7 +1878,7 @@ var init_tags = __esm(() => {
 // scripts/recall.ts
 var exports_recall = {};
 import { lstatSync as lstatSync2, readdirSync as readdirSync6, readFileSync as readFileSync11 } from "node:fs";
-import { basename as basename3, join as join12, relative as relative4 } from "node:path";
+import { basename as basename4, join as join12, relative as relative4 } from "node:path";
 function walk2(dir2) {
   const out = [];
   for (const entry of readdirSync6(dir2)) {
@@ -1973,7 +2095,7 @@ var init_recall = __esm(() => {
       for (const t of tokens)
         tf.set(t, (tf.get(t) ?? 0) + weight);
     };
-    add([...tokenize(titleText), ...tokenize(basename3(path, ".md"))], TITLE_BOOST);
+    add([...tokenize(titleText), ...tokenize(basename4(path, ".md"))], TITLE_BOOST);
     add(tokenize(aliases), TITLE_BOOST);
     add(tags.flatMap(tokenize), TAG_BOOST);
     add(tokenize(summary), SUMMARY_BOOST);
@@ -2038,7 +2160,7 @@ var init_recall = __esm(() => {
 var exports_snapshot = {};
 import { readdirSync as readdirSync7, readFileSync as readFileSync12, copyFileSync as copyFileSync2, mkdirSync as mkdirSync4, existsSync as existsSync11, statSync as statSync7, lstatSync as lstatSync3 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { join as join13, relative as relative5, basename as basename4, extname as extname2, resolve as resolve5, sep as sep3 } from "node:path";
+import { join as join13, relative as relative5, basename as basename5, extname as extname2, resolve as resolve5, sep as sep3 } from "node:path";
 function destWithinRaw(rawRoot, dest) {
   const rootResolved = resolve5(rawRoot);
   const destResolved = resolve5(rootResolved, dest);
@@ -2050,7 +2172,7 @@ function collect(p, base) {
   let skippedLinks = 0;
   const st = statSync7(p);
   if (st.isFile())
-    return { files: [{ abs: p, rel: basename4(p) }], skippedLinks };
+    return { files: [{ abs: p, rel: basename5(p) }], skippedLinks };
   const out = [];
   const walk3 = (dir2) => {
     for (const entry of readdirSync7(dir2)) {
@@ -2221,6 +2343,13 @@ function hostMemoryStores() {
     }
   }).sort();
 }
+function memoryIndexHasContent(dir2) {
+  try {
+    return readFileSync13(join14(dir2, "MEMORY.md"), "utf8").split(/\r?\n/).some((l) => l.trim() !== "" && l.trim() !== "# Memory index");
+  } catch {
+    return false;
+  }
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2400,10 +2529,18 @@ var init_check = __esm(() => {
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
   memoryStores = hostMemoryStores();
-  strayStores = memoryStores.map((dir2) => ({
-    dir: dir2,
-    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
-  })).filter((s) => s.files.length > 0);
+  strayStores = memoryStores.map((dir2) => {
+    let files3 = [];
+    try {
+      if (existsSync12(dir2))
+        files3 = readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort();
+    } catch (e) {
+      console.error(`⚠ host auto-memory sweep: could not read ${dir2} (${e instanceof Error ? e.message : String(e)}) - skipping it`);
+    }
+    if (memoryIndexHasContent(dir2))
+      files3.push("MEMORY.md (has content)");
+    return { dir: dir2, files: files3 };
+  }).filter((s) => s.files.length > 0);
   strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
   for (const s of strayStores)
     review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
@@ -2528,10 +2665,10 @@ all plugin checks passed.`);
 var exports_cli = {};
 import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
+import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename6 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 import { fileURLToPath } from "node:url";
-import { createInterface } from "node:readline/promises";
+import { createInterface as createInterface2 } from "node:readline/promises";
 function pluginRoot() {
   const local = projectRoot();
   if (process.env.IMPRNT_ROOT || process.env.IMPRINT_ROOT)
@@ -2578,7 +2715,7 @@ function physicalTarget(target) {
     const parent = dirname4(existing);
     if (parent === existing)
       return target;
-    tail.unshift(basename5(existing));
+    tail.unshift(basename6(existing));
     existing = parent;
   }
   try {
@@ -2607,61 +2744,6 @@ function controlSlot(dst) {
     return "keep";
   return "blocked-non-regular-file";
 }
-function listGeminiSessions(cwd) {
-  const r = spawnSync4("gemini", ["--list-sessions", "--skip-trust"], { cwd, encoding: "utf8" });
-  return parseGeminiSessions(r.stdout || "");
-}
-async function pickGeminiSession(sessions, label) {
-  const cols = process.stdout.columns || 80;
-  const nameW = Math.max(20, Math.min(64, cols - 16));
-  const trunc = (s) => s.length > nameW ? s.slice(0, nameW - 1) + "…" : s;
-  process.stderr.write(`
-  resume a chat — gemini · ${label}
-
-`);
-  sessions.forEach((s, i) => {
-    process.stderr.write(`  ${String(i + 1).padStart(2)}  ${trunc(s.name).padEnd(nameW)}  ${s.age.replace(/\s*ago$/, "")}
-`);
-  });
-  process.stderr.write(`
-`);
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = (await rl.question("  number to resume · enter for newest · q to cancel › ")).trim();
-  rl.close();
-  if (answer === "")
-    return "latest";
-  if (answer.toLowerCase() === "q")
-    return null;
-  const n = Number(answer);
-  if (Number.isInteger(n) && n >= 1 && n <= sessions.length)
-    return sessions[n - 1].id;
-  process.stderr.write(`  not a valid choice — starting a fresh session
-`);
-  return null;
-}
-async function resolveGeminiResume(backendName, passthrough, cwd) {
-  if (backendName !== "gemini")
-    return passthrough;
-  const rIdx = passthrough.findIndex((a) => a === "-r" || a === "--resume");
-  if (rIdx < 0)
-    return passthrough;
-  const next = passthrough[rIdx + 1];
-  if (next !== undefined && !next.startsWith("-"))
-    return passthrough;
-  if (!(process.stdin.isTTY && process.stdout.isTTY))
-    return passthrough;
-  const sessions = listGeminiSessions(cwd);
-  if (!sessions.length) {
-    console.error("imp: no saved gemini chats for this project yet — starting fresh");
-    return passthrough.filter((_, i) => i !== rIdx);
-  }
-  const chosen = await pickGeminiSession(sessions, basename5(cwd));
-  if (chosen === null)
-    return passthrough.filter((_, i) => i !== rIdx);
-  const out = [...passthrough];
-  out.splice(rIdx + 1, 0, chosen);
-  return out;
-}
 var here, pkgRoot, cmd, rest, asImp;
 var init_cli = __esm(async () => {
   init_resolve();
@@ -2711,8 +2793,8 @@ var init_cli = __esm(async () => {
     case "lair": {
       const home = requireVaultHome();
       const { backend, skipPermissions, passthrough } = resolveLaunch(rest, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
-      const resumed = await resolveGeminiResume(backend.name, passthrough, home);
-      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel() });
+      const resumed = backend.resolveResume ? await backend.resolveResume(passthrough, home) : passthrough;
+      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel(backend.name) });
       process.exit(launchBackend(backend, home, backend.renderArgs(spec), spec.env));
     }
     case "context": {
@@ -2735,8 +2817,8 @@ var init_cli = __esm(async () => {
         console.log("set: imprnt agent <claude|gemini>   override one session: imp --gemini | imp --claude");
         break;
       }
-      if (name !== "claude" && name !== "gemini") {
-        console.error(`unknown agent "${name}" — valid: claude, gemini`);
+      if (!Object.hasOwn(backends, name)) {
+        console.error(`unknown agent "${name}" — valid: ${Object.keys(backends).join(", ")}`);
         process.exit(1);
       }
       const r = setDefaultAgent(name);
@@ -2769,29 +2851,32 @@ var init_cli = __esm(async () => {
       break;
     }
     case "model": {
+      const envAgent = process.env.IMPRNT_AGENT;
+      const agentName = envAgent ?? readDefaultAgent() ?? "claude";
+      const agent = agentName in backends ? agentName : "claude";
       const [arg] = rest;
       if (!arg) {
-        const m = readDefaultModel();
-        console.log(`default model: ${m ?? "(agent's own default)"}`);
+        const m = readDefaultModel(agent);
+        console.log(`default model for ${agent}: ${m ?? "(agent's own default)"}`);
         console.log("set: imprnt model <alias|id>   clear: imprnt model off");
-        console.log("gemini aliases: pro=gemini-3.1-pro-preview, flash=gemini-3.5-flash, pro25=gemini-2.5-pro, lite=gemini-3.1-flash-lite, gemma31, gemma26");
+        console.log(`gemini aliases: ${Object.entries(GEMINI_MODEL_ALIASES).map(([k, v]) => `${k}=${v}`).join(", ")}`);
         break;
       }
       if (arg === "off" || arg === "default" || arg === "none") {
-        const r2 = setDefaultModel("");
+        const r2 = setDefaultModel("", agent);
         if (!r2.ok) {
           console.error(`could not clear default model (${configPath()}): ${r2.error}`);
           process.exit(1);
         }
-        console.log(`default model cleared (${configPath()}) — the agent uses its own default`);
+        console.log(`default model for ${agent} cleared (${configPath()}) — the agent uses its own default`);
         break;
       }
-      const r = setDefaultModel(arg);
+      const r = setDefaultModel(arg, agent);
       if (!r.ok) {
         console.error(`could not set default model (${configPath()}): ${r.error}`);
         process.exit(1);
       }
-      console.log(`default model set to ${arg} (${configPath()})`);
+      console.log(`default model for ${agent} set to ${arg} (${configPath()})`);
       break;
     }
     case "plugin": {
@@ -2999,7 +3084,7 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         const inPlace = isVaultProject(process.cwd());
         const display = inPlace ? process.cwd() : "~/imprnt";
         const fallback = inPlace ? process.cwd() : join15(homedir4(), "imprnt");
-        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const rl = createInterface2({ input: process.stdin, output: process.stdout });
         const answer = (await rl.question(`vault location [${display}]: `)).trim();
         rl.close();
         target = answer ? resolvePath(answer) : fallback;
@@ -3062,7 +3147,10 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         added.push("CLAUDE.md");
       }
       try {
+        const prevMode = statSync9(target).mode & 511;
         chmodSync(target, 448);
+        if (prevMode !== 448)
+          console.log(`locked ${target} to owner-only (chmod 700, was ${prevMode.toString(8).padStart(3, "0")})`);
       } catch (e) {
         console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
       }
@@ -3111,8 +3199,8 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         }
         const raw = bare ? [] : [cmd, ...rest];
         const { backend, skipPermissions, passthrough } = resolveLaunch(raw, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
-        const resumed = await resolveGeminiResume(backend.name, passthrough, process.cwd());
-        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel() });
+        const resumed = backend.resolveResume ? await backend.resolveResume(passthrough, process.cwd()) : passthrough;
+        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: resumed, skipPermissions, model: readDefaultModel(backend.name) });
         process.exit(launchBackend(backend, process.cwd(), backend.renderArgs(spec), spec.env));
       }
       console.log(`imprnt — deterministic-first markdown knowledge vault
@@ -3132,7 +3220,7 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt context                           print the vault contract — agents run this before writing any note
   imprnt agent [claude|gemini]             show or set the per-machine default agent backend for imp
   imprnt yolo [on|off]                      show or set the per-machine skip-permissions default for imp
-  imprnt model [alias|id|off]               show or set the per-machine default model (gemini aliases: pro, flash, pro25, lite, ...)
+  imprnt model [alias|id|off]               show or set the per-machine default model for the current default agent (gemini aliases: pro, flash, pro25, lite, ...)
   imprnt check [--all] [--vault D]         integrity (orphan links, disconnected notes, uncovered snapshots) + regenerate index.md; --all also runs each plugins/*/check.js
   imprnt ingest --apply <file> [--vault D] file a pre-enriched staged note from a plugin into the vault (snapshot + resolve); --apply-all globs plugins/*/proposed/
   imprnt hot [--vault D]                   needs-review + the session primer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imprnt",
-  "version": "0.1.3-edge.60",
+  "version": "0.1.3-edge.62",
   "description": "Deterministic-first, plain-markdown knowledge vault. Code does the bulk transform. The LLM only touches the irreducibly-semantic 20%. Native grep plus BM25 retrieval, zero MCP on the vault.",
   "type": "module",
   "bin": {