switchroom 0.12.19 → 0.12.21

package/dist/cli/switchroom.js

@@ -13857,7 +13857,11 @@ var init_schema = __esm(() => {
           path: ["approvalAuth"]
         });
       }
-    }).describe("Vault-broker daemon configuration. The broker holds the decrypted vault " + "in memory and serves secrets to cron scripts via a Unix socket, so the " + "vault passphrase is entered once at startup rather than per-cron invocation.")
+    }).describe("Vault-broker daemon configuration. The broker holds the decrypted vault " + "in memory and serves secrets to cron scripts via a Unix socket, so the " + "vault passphrase is entered once at startup rather than per-cron invocation."),
+    backup: exports_external.object({
+      destination: exports_external.string().optional().describe("Destination directory for `switchroom vault backup`. " + "When unset, the CLI defaults to " + "`~/.switchroom-config/vault-backups/` if that operator config " + "repo exists, else `~/.switchroom/vault-backups/`. " + "Path is tilde-expanded at read time. " + "MUST NOT be `~/.switchroom/vault/` (the broker bind-mount dir, " + "validated by `switchroom apply` against an artifact allowlist)."),
+      retain: exports_external.number().int().nonnegative().default(30).describe("How many of the most-recent backups to keep in the destination dir. " + "Older ones are pruned after each new backup is written. Default 30 " + "= roughly a month at daily cadence.")
+    }).optional().describe("Configuration for `switchroom vault backup`. Optional \u2014 the CLI works " + "with built-in defaults if this block is absent. The backed-up file is " + "the AES-256-GCM-encrypted vault envelope; the operator passphrase " + "remains the gate, so committing backups to a private git repo extends " + "durability without weakening encryption (provided the auto-unlock " + "blob is NEVER co-located \u2014 `vault backup` refuses to write into a " + "directory that contains an auto-unlock-shaped sibling).")
   });
   QuotaConfigSchema = exports_external.object({
     weekly_budget_usd: exports_external.number().positive().optional().describe("Weekly USD spend budget. If unset, the greeting shows raw usage only."),
@@ -27440,10 +27444,10 @@ var CHAIN_GENESIS = "GENESIS", SEP = "\x00";
 var init_audit_hashchain = () => {};
 
 // src/host-control/audit-reader.ts
-import { homedir as homedir16 } from "node:os";
-import { join as join32 } from "node:path";
-function defaultAuditLogPath2(home2 = homedir16()) {
-  return join32(home2, ".switchroom", "host-control-audit.log");
+import { homedir as homedir17 } from "node:os";
+import { join as join34 } from "node:path";
+function defaultAuditLogPath2(home2 = homedir17()) {
+  return join34(home2, ".switchroom", "host-control-audit.log");
 }
 function parseAuditLine2(line) {
   const trimmed = line.trim();
@@ -27598,17 +27602,17 @@ var init_doctor_status = __esm(() => {
 
 // src/manifest.ts
 import {
-  existsSync as existsSync44,
-  readFileSync as readFileSync41,
-  readdirSync as readdirSync15
+  existsSync as existsSync46,
+  readFileSync as readFileSync42,
+  readdirSync as readdirSync16
 } from "node:fs";
-import { dirname as dirname11, join as join36 } from "node:path";
+import { dirname as dirname11, join as join38 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
 function locateManifestPath() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const candidate = join36(dir, "dependencies.json");
-    if (existsSync44(candidate))
+    const candidate = join38(dir, "dependencies.json");
+    if (existsSync46(candidate))
       return candidate;
     dir = dirname11(dir);
   }
@@ -27621,7 +27625,7 @@ function loadManifest(manifestPath) {
   }
   let raw;
   try {
-    raw = readFileSync41(path4, "utf-8");
+    raw = readFileSync42(path4, "utf-8");
   } catch (err) {
     throw new Error(`Failed to read manifest at ${path4}: ${err.message}`);
   }
@@ -27677,16 +27681,16 @@ function probeClaudeVersion() {
 }
 function probePlaywrightMcpVersion() {
   const home2 = process.env.HOME ?? "";
-  const npxCache = join36(home2, ".npm/_npx");
-  if (!existsSync44(npxCache))
+  const npxCache = join38(home2, ".npm/_npx");
+  if (!existsSync46(npxCache))
     return null;
   try {
-    const entries = readdirSync15(npxCache);
+    const entries = readdirSync16(npxCache);
     for (const entry of entries) {
-      const pkgPath = join36(npxCache, entry, "node_modules/@playwright/mcp/package.json");
-      if (existsSync44(pkgPath)) {
+      const pkgPath = join38(npxCache, entry, "node_modules/@playwright/mcp/package.json");
+      if (existsSync46(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync41(pkgPath, "utf-8"));
+          const pkg = JSON.parse(readFileSync42(pkgPath, "utf-8"));
           if (pkg.version)
             return pkg.version;
         } catch {}
@@ -27778,13 +27782,13 @@ var init_manifest = __esm(() => {
 });
 
 // src/cli/doctor-docker.ts
-import { readFileSync as readFileSync42 } from "node:fs";
+import { readFileSync as readFileSync43 } from "node:fs";
 function isDockerMode(opts) {
   if (process.env.SWITCHROOM_RUNTIME === "docker")
     return true;
   if (opts?.composePath) {
     try {
-      readFileSync42(opts.composePath, "utf8");
+      readFileSync43(opts.composePath, "utf8");
       return true;
     } catch {}
   }
@@ -27950,11 +27954,11 @@ var init_doctor_docker = __esm(() => {
 });
 
 // src/cli/doctor-auth-broker.ts
-import { existsSync as existsSync45, readFileSync as readFileSync43 } from "node:fs";
-import { createHash as createHash8 } from "node:crypto";
+import { existsSync as existsSync47, readFileSync as readFileSync44 } from "node:fs";
+import { createHash as createHash9 } from "node:crypto";
 import { spawnSync as spawnSync5 } from "node:child_process";
-import { homedir as homedir19 } from "node:os";
-import { join as join37 } from "node:path";
+import { homedir as homedir20 } from "node:os";
+import { join as join39 } from "node:path";
 function defaultDockerInspect(container, format) {
   try {
     const r = spawnSync5("docker", ["inspect", "-f", format, container], { encoding: "utf-8", timeout: 5000 });
@@ -27977,7 +27981,7 @@ function resolveStateDir(deps) {
   return deps.stateDir ?? resolveStatePath("state/auth-broker");
 }
 function sha256Hex(content) {
-  return createHash8("sha256").update(content).digest("hex");
+  return createHash9("sha256").update(content).digest("hex");
 }
 function checkAuthBrokerServiceHealth(deps = {}) {
   const inspect = deps.dockerInspect ?? defaultDockerInspect;
@@ -28054,8 +28058,8 @@ function checkAuthBrokerPerAgentSockets(config, deps = {}) {
 }
 function checkAuthBrokerDrift(deps = {}) {
   const stateDir = resolveStateDir(deps);
-  const indexPath = join37(stateDir, "sha-index.json");
-  if (!existsSync45(indexPath)) {
+  const indexPath = join39(stateDir, "sha-index.json");
+  if (!existsSync47(indexPath)) {
     return {
       name: "auth-broker: drift",
       status: "ok",
@@ -28064,7 +28068,7 @@ function checkAuthBrokerDrift(deps = {}) {
   }
   let index;
   try {
-    index = JSON.parse(readFileSync43(indexPath, "utf-8"));
+    index = JSON.parse(readFileSync44(indexPath, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: drift",
@@ -28073,18 +28077,18 @@ function checkAuthBrokerDrift(deps = {}) {
       fix: "Inspect `~/.switchroom/state/auth-broker/sha-index.json` for corruption."
     };
   }
-  const home2 = deps.home ?? homedir19();
+  const home2 = deps.home ?? homedir20();
   const divergent = [];
   const missingOnDisk = [];
   for (const [label, expected] of Object.entries(index)) {
     const credsPath = accountCredentialsPath(label, home2);
-    if (!existsSync45(credsPath)) {
+    if (!existsSync47(credsPath)) {
       missingOnDisk.push(label);
       continue;
     }
     let got;
     try {
-      got = sha256Hex(readFileSync43(credsPath, "utf-8"));
+      got = sha256Hex(readFileSync44(credsPath, "utf-8"));
     } catch (err) {
       divergent.push(`${label} (read failed: ${err.message})`);
       continue;
@@ -28115,8 +28119,8 @@ function checkAuthBrokerDrift(deps = {}) {
 }
 function checkAuthBrokerThresholdViolations(deps = {}) {
   const stateDir = resolveStateDir(deps);
-  const path4 = join37(stateDir, "threshold-violations.json");
-  if (!existsSync45(path4)) {
+  const path4 = join39(stateDir, "threshold-violations.json");
+  if (!existsSync47(path4)) {
     return {
       name: "auth-broker: threshold violations",
       status: "ok",
@@ -28125,7 +28129,7 @@ function checkAuthBrokerThresholdViolations(deps = {}) {
   }
   let violations;
   try {
-    violations = JSON.parse(readFileSync43(path4, "utf-8"));
+    violations = JSON.parse(readFileSync44(path4, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: threshold violations",
@@ -28159,9 +28163,9 @@ function checkAuthBrokerActiveAccount(config, deps = {}) {
       fix: "Run `switchroom auth use <label>` to pin a fleet-wide account, then `switchroom apply`. Without an active account every agent boot fails."
     };
   }
-  const home2 = deps.home ?? homedir19();
+  const home2 = deps.home ?? homedir20();
   const dir = accountDir(active, home2);
-  if (!existsSync45(dir)) {
+  if (!existsSync47(dir)) {
     return {
       name: "auth-broker: fleet active account",
       status: "fail",
@@ -28170,7 +28174,7 @@ function checkAuthBrokerActiveAccount(config, deps = {}) {
     };
   }
   const creds = accountCredentialsPath(active, home2);
-  if (!existsSync45(creds)) {
+  if (!existsSync47(creds)) {
     return {
       name: "auth-broker: fleet active account",
       status: "fail",
@@ -28307,17 +28311,17 @@ var init_doctor_hostd = () => {};
 import {
   accessSync,
   constants as fsConstants4,
-  existsSync as existsSync46,
+  existsSync as existsSync48,
   realpathSync as realpathSync4,
-  statSync as statSync20
+  statSync as statSync21
 } from "node:fs";
-import { userInfo, homedir as homedir20 } from "node:os";
-import { join as join38 } from "node:path";
+import { userInfo, homedir as homedir21 } from "node:os";
+import { join as join40 } from "node:path";
 function resolveVaultPath2(config) {
   return config.vault?.path ? config.vault.path.replace(/^~/, process.env.HOME ?? "") : resolveStatePath("vault.enc");
 }
 function defaultStatVault(path4) {
-  if (!existsSync46(path4)) {
+  if (!existsSync48(path4)) {
     return { exists: false, readable: false, uid: -1, mode: 0, realPath: path4 };
   }
   let real = path4;
@@ -28327,7 +28331,7 @@ function defaultStatVault(path4) {
   let uid = -1;
   let mode = 0;
   try {
-    const s = statSync20(real);
+    const s = statSync21(real);
     uid = s.uid;
     mode = s.mode & 511;
   } catch {
@@ -28450,7 +28454,7 @@ async function runSecretAccessChecks(config, deps = {}) {
   };
   const passphrase = deps.passphrase ?? process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase) {
-    const sock = deps.brokerOperatorSocket ?? join38(homedir20(), ".switchroom", "broker-operator", "sock");
+    const sock = deps.brokerOperatorSocket ?? join40(homedir21(), ".switchroom", "broker-operator", "sock");
     const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
     for (const name of Object.keys(config.agents ?? {})) {
       const resolved = resolveAgentConfig(config.defaults, config.profiles, config.agents[name]);
@@ -28535,8 +28539,8 @@ import {
   existsSync as realExistsSync,
   readFileSync as realReadFileSync
 } from "node:fs";
-import { join as join39, resolve as resolve28 } from "node:path";
-import { homedir as homedir21 } from "node:os";
+import { join as join41, resolve as resolve28 } from "node:path";
+import { homedir as homedir22 } from "node:os";
 function resolveDeps(config, deps) {
   let agentsDir = deps.agentsDir;
   if (agentsDir === undefined) {
@@ -28659,8 +28663,8 @@ function checkScaffoldWiring(config, driveAgents, d) {
       });
       continue;
     }
-    const mcpPath = join39(agentDir, ".mcp.json");
-    const claudeJsonPath = join39(agentDir, ".claude", ".claude.json");
+    const mcpPath = join41(agentDir, ".mcp.json");
+    const claudeJsonPath = join41(agentDir, ".claude", ".claude.json");
     const mcpRead = readJson(d, mcpPath);
     const trustRead = readJson(d, claudeJsonPath);
     if (mcpRead.kind === "unreadable" || trustRead.kind === "unreadable") {
@@ -28773,7 +28777,7 @@ async function runDriveBrokerReachabilityChecks(config, deps = {}) {
       }
     ];
   }
-  const sock = deps.brokerOperatorSocket ?? join39(homedir21(), ".switchroom", "broker-operator", "sock");
+  const sock = deps.brokerOperatorSocket ?? join41(homedir22(), ".switchroom", "broker-operator", "sock");
   const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
   const results = [];
   for (const agent of driveAgents) {
@@ -28824,12 +28828,12 @@ import {
   readdirSync as realReaddirSync,
   statSync as realStatSync
 } from "node:fs";
-import { homedir as homedir22 } from "node:os";
-import { join as join40 } from "node:path";
+import { homedir as homedir23 } from "node:os";
+import { join as join42 } from "node:path";
 function runCredentialsMigrationChecks(config, deps = {}) {
-  const credDir = deps.credentialsDir ?? join40(homedir22(), ".switchroom", "credentials");
-  const existsSync47 = deps.existsSync ?? ((p) => realExistsSync2(p));
-  const readdirSync17 = deps.readdirSync ?? ((p) => realReaddirSync(p));
+  const credDir = deps.credentialsDir ?? join42(homedir23(), ".switchroom", "credentials");
+  const existsSync49 = deps.existsSync ?? ((p) => realExistsSync2(p));
+  const readdirSync18 = deps.readdirSync ?? ((p) => realReaddirSync(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
     try {
       return realStatSync(p).isDirectory();
@@ -28837,12 +28841,12 @@ function runCredentialsMigrationChecks(config, deps = {}) {
       return false;
     }
   });
-  if (!existsSync47(credDir))
+  if (!existsSync49(credDir))
     return [];
   const agentNames = new Set(Object.keys(config.agents ?? {}));
   let entries;
   try {
-    entries = readdirSync17(credDir);
+    entries = readdirSync18(credDir);
   } catch {
     return [
       {
@@ -28855,7 +28859,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
   const flat = [];
   const perAgentDirs = [];
   for (const e of entries) {
-    const full = join40(credDir, e);
+    const full = join42(credDir, e);
     if (isDirectory(full) && agentNames.has(e)) {
       perAgentDirs.push(e);
     } else {
@@ -28978,19 +28982,19 @@ var init_doctor_inlined_secrets = __esm(() => {
 
 // src/cli/doctor-audit-integrity.ts
 import { readFileSync as fsReadFileSync2 } from "node:fs";
-import { homedir as homedir23 } from "node:os";
-import { join as join41 } from "node:path";
+import { homedir as homedir24 } from "node:os";
+import { join as join43 } from "node:path";
 function rootWrittenLogs(home2) {
   return [
-    { label: "vault-broker", path: join41(home2, ".switchroom", "vault-audit.log") },
+    { label: "vault-broker", path: join43(home2, ".switchroom", "vault-audit.log") },
     {
       label: "hostd",
-      path: join41(home2, ".switchroom", "host-control-audit.log")
+      path: join43(home2, ".switchroom", "host-control-audit.log")
     }
   ];
 }
 function runAuditIntegrityChecks(deps = {}) {
-  const home2 = deps.homeDir ?? homedir23();
+  const home2 = deps.homeDir ?? homedir24();
   const read = deps.readFileSync ?? ((p) => fsReadFileSync2(p, "utf8"));
   const results = [];
   for (const { label, path: path4 } of rootWrittenLogs(home2)) {
@@ -29266,16 +29270,16 @@ var init_client4 = __esm(() => {
 });
 
 // src/cli/doctor-agent-smoke.ts
-import { existsSync as existsSync47 } from "node:fs";
-import { homedir as homedir24 } from "node:os";
-import { join as join42 } from "node:path";
+import { existsSync as existsSync49 } from "node:fs";
+import { homedir as homedir25 } from "node:os";
+import { join as join44 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 async function runAgentSmokeChecks(config, deps = {}) {
   if (deps.fast)
     return [];
-  const home2 = deps.homeDir ?? homedir24();
-  const sock = deps.operatorSockPath ?? join42(home2, ".switchroom", "hostd", "operator", "sock");
-  if (!deps.hostdRequestImpl && !existsSync47(sock)) {
+  const home2 = deps.homeDir ?? homedir25();
+  const sock = deps.operatorSockPath ?? join44(home2, ".switchroom", "hostd", "operator", "sock");
+  if (!deps.hostdRequestImpl && !existsSync49(sock)) {
     return [
       {
         name: "agent liveness",
@@ -29394,25 +29398,25 @@ import { execSync as execSync3, spawnSync as spawnSync7 } from "node:child_proce
 import {
   accessSync as accessSync2,
   constants as fsConstants5,
-  existsSync as existsSync48,
+  existsSync as existsSync50,
   lstatSync as lstatSync5,
-  mkdirSync as mkdirSync26,
-  readFileSync as readFileSync44,
-  readdirSync as readdirSync17,
-  statSync as statSync21
+  mkdirSync as mkdirSync27,
+  readFileSync as readFileSync45,
+  readdirSync as readdirSync18,
+  statSync as statSync22
 } from "node:fs";
-import { dirname as dirname12, join as join43, resolve as resolve29 } from "node:path";
+import { dirname as dirname12, join as join45, resolve as resolve29 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
-  const nvmRoot = join43(process.env.HOME ?? "", ".nvm", "versions", "node");
-  if (!existsSync48(nvmRoot))
+  const nvmRoot = join45(process.env.HOME ?? "", ".nvm", "versions", "node");
+  if (!existsSync50(nvmRoot))
     return null;
   try {
-    const versions = readdirSync17(nvmRoot).sort().reverse();
+    const versions = readdirSync18(nvmRoot).sort().reverse();
     for (const v of versions) {
-      const candidate = join43(nvmRoot, v, "bin", bin);
+      const candidate = join45(nvmRoot, v, "bin", bin);
       try {
-        const s = statSync21(candidate);
+        const s = statSync22(candidate);
         if (s.isFile() || s.isSymbolicLink()) {
           return candidate;
         }
@@ -29575,21 +29579,21 @@ function findChromium(homeDir = process.env.HOME ?? "", envBrowsersPath = proces
   if (envBrowsersPath && envBrowsersPath.length > 0) {
     cacheLocations.push(envBrowsersPath);
   }
-  cacheLocations.push(join43(homeDir, ".cache", "ms-playwright"));
+  cacheLocations.push(join45(homeDir, ".cache", "ms-playwright"));
   for (const cacheDir of cacheLocations) {
-    if (!existsSync48(cacheDir))
+    if (!existsSync50(cacheDir))
       continue;
     try {
-      const entries = readdirSync17(cacheDir).filter((e) => e.startsWith("chromium"));
+      const entries = readdirSync18(cacheDir).filter((e) => e.startsWith("chromium"));
       for (const entry of entries) {
         const candidates2 = [
-          join43(cacheDir, entry, "chrome-linux64", "chrome"),
-          join43(cacheDir, entry, "chrome-linux", "chrome"),
-          join43(cacheDir, entry, "chrome-linux64", "headless_shell"),
-          join43(cacheDir, entry, "chrome-linux", "headless_shell")
+          join45(cacheDir, entry, "chrome-linux64", "chrome"),
+          join45(cacheDir, entry, "chrome-linux", "chrome"),
+          join45(cacheDir, entry, "chrome-linux64", "headless_shell"),
+          join45(cacheDir, entry, "chrome-linux", "headless_shell")
         ];
         for (const path4 of candidates2) {
-          if (existsSync48(path4))
+          if (existsSync50(path4))
             return path4;
         }
       }
@@ -29611,7 +29615,7 @@ function checkChromium() {
 }
 function checkDepsCacheWritable(depsRoot = resolvePath("~/.switchroom/deps")) {
   try {
-    mkdirSync26(depsRoot, { recursive: true });
+    mkdirSync27(depsRoot, { recursive: true });
     accessSync2(depsRoot, fsConstants5.W_OK);
     return {
       name: "~/.switchroom/deps writable",
@@ -29669,8 +29673,8 @@ function checkConfig(config, configPath) {
 function checkLegacyState() {
   const results = [];
   const h = process.env.HOME ?? "/root";
-  const clerkDir = join43(h, LEGACY_STATE_DIR);
-  const clerkPresent = existsSync48(clerkDir);
+  const clerkDir = join45(h, LEGACY_STATE_DIR);
+  const clerkPresent = existsSync50(clerkDir);
   results.push({
     name: "legacy ~/.clerk state",
     status: clerkPresent ? "warn" : "ok",
@@ -29679,7 +29683,7 @@ function checkLegacyState() {
       fix: "Legacy state detected. Run `mv ~/.clerk ~/.switchroom` and rename " + "any top-level `clerk:` key in switchroom.yaml to `switchroom:`. " + "This back-compat shim is REMOVED in v0.13.0 \u2014 no automatic " + "migration exists."
     } : {}
   });
-  const legacySock = join43(h, ".switchroom", "vault-broker.sock");
+  const legacySock = join45(h, ".switchroom", "vault-broker.sock");
   let sockStat = null;
   try {
     sockStat = lstatSync5(legacySock);
@@ -29712,7 +29716,7 @@ function checkVault(config) {
     status: "ok",
     detail: "Approval auth: passphrase (two-factor)"
   };
-  if (!existsSync48(vaultPath)) {
+  if (!existsSync50(vaultPath)) {
     return [
       postureResult,
       {
@@ -29883,8 +29887,8 @@ async function checkHindsight(config) {
 }
 function checkPendingRetainsQueue(dir) {
   const home2 = process.env.HOME ?? "";
-  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join43(home2, ".hindsight", "pending-retains");
-  if (!existsSync48(pendingDir)) {
+  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join45(home2, ".hindsight", "pending-retains");
+  if (!existsSync50(pendingDir)) {
     return {
       name: "pending-retains queue",
       status: "ok",
@@ -29893,7 +29897,7 @@ function checkPendingRetainsQueue(dir) {
   }
   let names;
   try {
-    names = readdirSync17(pendingDir);
+    names = readdirSync18(pendingDir);
   } catch (err) {
     return {
       name: "pending-retains queue",
@@ -29943,7 +29947,7 @@ function classifyReadError(err) {
 }
 function tryReadHostFile(path4) {
   try {
-    return { kind: "ok", content: readFileSync44(path4, "utf-8") };
+    return { kind: "ok", content: readFileSync45(path4, "utf-8") };
   } catch (err) {
     const kind = classifyReadError(err);
     const error = err?.message ?? String(err);
@@ -29955,11 +29959,11 @@ function tryReadHostFile(path4) {
   }
 }
 function parseEnvFile(path4) {
-  if (!existsSync48(path4))
+  if (!existsSync50(path4))
     return {};
   let content;
   try {
-    content = readFileSync44(path4, "utf-8");
+    content = readFileSync45(path4, "utf-8");
   } catch {
     return {};
   }
@@ -30014,7 +30018,7 @@ async function checkTelegram(config) {
     const plugin = agentConfig.channels?.telegram?.plugin ?? "switchroom";
     if (plugin !== "switchroom")
       continue;
-    const envPath = join43(agentsDir, name, "telegram", ".env");
+    const envPath = join45(agentsDir, name, "telegram", ".env");
     const read = tryReadHostFile(envPath);
     if (read.kind === "eacces") {
       results.push({
@@ -30066,7 +30070,7 @@ async function checkTelegram(config) {
 }
 function checkStartShStale(agentName, startShPath) {
   const label = `${agentName}: start.sh scheduler block`;
-  if (!existsSync48(startShPath)) {
+  if (!existsSync50(startShPath)) {
     return {
       name: label,
       status: "warn",
@@ -30076,7 +30080,7 @@ function checkStartShStale(agentName, startShPath) {
   }
   let content;
   try {
-    content = readFileSync44(startShPath, "utf-8");
+    content = readFileSync45(startShPath, "utf-8");
   } catch (err) {
     return {
       name: label,
@@ -30097,7 +30101,7 @@ function checkStartShStale(agentName, startShPath) {
 }
 function checkLeakedHomeSwitchroom(agentName, agentDir) {
   const label = `${agentName}: $HOME/.switchroom symlink (#910)`;
-  const path4 = join43(agentDir, "home", ".switchroom");
+  const path4 = join45(agentDir, "home", ".switchroom");
   let stats;
   try {
     stats = lstatSync5(path4);
@@ -30134,8 +30138,8 @@ function checkLeakedHomeSwitchroom(agentName, agentDir) {
 }
 function checkRepoHygiene(repoRoot) {
   const results = [];
-  const exportDir = join43(repoRoot, "clerk-export");
-  if (existsSync48(exportDir)) {
+  const exportDir = join45(repoRoot, "clerk-export");
+  if (existsSync50(exportDir)) {
     results.push({
       name: "repo hygiene: clerk-export/ on disk (#1072)",
       status: "warn",
@@ -30143,8 +30147,8 @@ function checkRepoHygiene(repoRoot) {
       fix: `Run scripts/migrate-clerk-export-to-vault.sh to move the bundle ` + `into the vault, then delete the on-disk copy.`
     });
   }
-  const knownTarball = join43(repoRoot, "clerk-export-with-secrets.tar.gz");
-  if (existsSync48(knownTarball)) {
+  const knownTarball = join45(repoRoot, "clerk-export-with-secrets.tar.gz");
+  if (existsSync50(knownTarball)) {
     results.push({
       name: "repo hygiene: clerk-export-with-secrets.tar.gz on disk (#1072)",
       status: "warn",
@@ -30153,7 +30157,7 @@ function checkRepoHygiene(repoRoot) {
     });
   }
   try {
-    const entries = readdirSync17(repoRoot);
+    const entries = readdirSync18(repoRoot);
     for (const name of entries) {
       if (name === "clerk-export-with-secrets.tar.gz")
         continue;
@@ -30161,7 +30165,7 @@ function checkRepoHygiene(repoRoot) {
         results.push({
           name: `repo hygiene: ${name} on disk (#1072)`,
           status: "warn",
-          detail: `${join43(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
+          detail: `${join45(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
           fix: `Inspect, migrate any secrets into the vault, then delete the ` + `archive.`
         });
       }
@@ -30184,12 +30188,12 @@ function checkRepoHygiene(repoRoot) {
 }
 function isSwitchroomCheckout(dir) {
   try {
-    if (!existsSync48(join43(dir, ".git")))
+    if (!existsSync50(join45(dir, ".git")))
       return false;
-    const pkgPath = join43(dir, "package.json");
-    if (!existsSync48(pkgPath))
+    const pkgPath = join45(dir, "package.json");
+    if (!existsSync50(pkgPath))
       return false;
-    const pkg = JSON.parse(readFileSync44(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync45(pkgPath, "utf-8"));
     return pkg.name === "switchroom";
   } catch {
     return false;
@@ -30202,7 +30206,7 @@ function checkAgents(config, configPath) {
   const authStatuses = getAllAuthStatuses(config);
   for (const [name, agentConfig] of Object.entries(config.agents)) {
     const agentDir = resolve29(agentsDir, name);
-    if (!existsSync48(agentDir)) {
+    if (!existsSync50(agentDir)) {
       results.push({
         name: `${name}: scaffold`,
         status: "fail",
@@ -30223,7 +30227,7 @@ function checkAgents(config, configPath) {
         fix: `Rotate the bot token (e.g. via \`switchroom vault\`), then run ` + `\`switchroom agent unquarantine ${name}\` and \`switchroom agent restart ${name}\``
       });
     }
-    results.push(checkStartShStale(name, join43(agentDir, "start.sh")));
+    results.push(checkStartShStale(name, join45(agentDir, "start.sh")));
     results.push(checkLeakedHomeSwitchroom(name, agentDir));
     const status = statuses[name];
     const active = status?.active ?? "unknown";
@@ -30300,8 +30304,8 @@ function checkAgents(config, configPath) {
       }
     }
     if (agentConfig.channels?.telegram?.plugin === "switchroom") {
-      const mcpJsonPath = join43(agentDir, ".mcp.json");
-      if (!existsSync48(mcpJsonPath)) {
+      const mcpJsonPath = join45(agentDir, ".mcp.json");
+      if (!existsSync50(mcpJsonPath)) {
         results.push({
           name: `${name}: .mcp.json`,
           status: "fail",
@@ -30310,7 +30314,7 @@ function checkAgents(config, configPath) {
         });
       } else {
         try {
-          const mcp = JSON.parse(readFileSync44(mcpJsonPath, "utf-8"));
+          const mcp = JSON.parse(readFileSync45(mcpJsonPath, "utf-8"));
           const hasSwitchroomTelegram = !!mcp.mcpServers?.["switchroom-telegram"];
           const memoryEnabled = isHindsightEnabled(config);
           const hasHindsight = !!mcp.mcpServers?.hindsight;
@@ -30386,7 +30390,7 @@ function mffEnvPath(config) {
   return agent ? resolve29(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve29(home2, ".switchroom/credentials/my-family-finance/.env");
 }
 function mffEnvState(envPath) {
-  if (!existsSync48(envPath))
+  if (!existsSync50(envPath))
     return "absent";
   try {
     accessSync2(envPath, fsConstants5.R_OK);
@@ -30404,7 +30408,7 @@ function checkMffVaultKeyPresent(passphrase, vaultPath) {
       fix: "Export SWITCHROOM_VAULT_PASSPHRASE to enable MFF vault probes"
     };
   }
-  if (!existsSync48(vaultPath)) {
+  if (!existsSync50(vaultPath)) {
     return {
       name: "mff: vault key present",
       status: "fail",
@@ -30457,7 +30461,7 @@ function deriveEd25519PublicKeyBytes(keyMaterial) {
   }
 }
 function checkMffVaultKeyFormat(passphrase, vaultPath) {
-  if (!passphrase || !existsSync48(vaultPath)) {
+  if (!passphrase || !existsSync50(vaultPath)) {
     return {
       name: "mff: vault key format",
       status: "warn",
@@ -30601,8 +30605,8 @@ async function checkMffAuthFlow(envPath = mffEnvPath(), timeoutMs = 8000) {
     };
   }
   const credDir = dirname12(envPath);
-  const authScript = join43(credDir, "claude-auth.py");
-  if (!existsSync48(authScript)) {
+  const authScript = join45(credDir, "claude-auth.py");
+  if (!existsSync50(authScript)) {
     return {
       name: "mff: auth flow",
       status: "warn",
@@ -30804,11 +30808,11 @@ function runDockerSection(config) {
   let composeYaml;
   let dockerfileAgent;
   try {
-    composeYaml = readFileSync44(composePath, "utf8");
+    composeYaml = readFileSync45(composePath, "utf8");
   } catch {}
   const dockerfilePath = resolve29(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
   try {
-    dockerfileAgent = readFileSync44(dockerfilePath, "utf8");
+    dockerfileAgent = readFileSync45(dockerfilePath, "utf8");
   } catch {}
   return runDockerChecks({
     config,
@@ -46890,13 +46894,13 @@ __export(exports_server2, {
   dispatchTool: () => dispatchTool2,
   TOOLS: () => TOOLS2
 });
-import { randomBytes as randomBytes13 } from "node:crypto";
-import { existsSync as existsSync72, readFileSync as readFileSync59 } from "node:fs";
+import { randomBytes as randomBytes14 } from "node:crypto";
+import { existsSync as existsSync74, readFileSync as readFileSync60 } from "node:fs";
 function selfSocketPath() {
   return `/run/switchroom/hostd/${SELF_AGENT}/sock`;
 }
 function makeRequestId(prefix) {
-  return `${prefix}-${Date.now()}-${randomBytes13(4).toString("hex")}`;
+  return `${prefix}-${Date.now()}-${randomBytes14(4).toString("hex")}`;
 }
 async function dispatchTool2(name, args) {
   if (name === "get_status") {
@@ -46906,7 +46910,7 @@ async function dispatchTool2(name, args) {
     return errorText2("hostd MCP: SWITCHROOM_AGENT_NAME env var is not set \u2014 cannot " + "determine which per-agent socket to talk to.");
   }
   const sockPath = selfSocketPath();
-  if (!existsSync72(sockPath)) {
+  if (!existsSync74(sockPath)) {
     return errorText2(`hostd MCP: socket not bound at ${sockPath}. The host-control ` + `daemon is either not installed (run \`switchroom hostd install\`) ` + `or this agent isn't admin-flagged in switchroom.yaml. RFC C ` + `bind-mounts the per-agent socket only when host_control.enabled ` + `is true AND the agent has admin: true.`);
   }
   let req;
@@ -47025,18 +47029,18 @@ function resolveAuditLogPath() {
   if (process.env.HOSTD_AUDIT_LOG_PATH)
     return process.env.HOSTD_AUDIT_LOG_PATH;
   const bindMounted = "/host-home/.switchroom/host-control-audit.log";
-  if (existsSync72(bindMounted))
+  if (existsSync74(bindMounted))
     return bindMounted;
   return defaultAuditLogPath2();
 }
 function getLastUpdateApplyStatus() {
   const path8 = resolveAuditLogPath();
-  if (!existsSync72(path8)) {
+  if (!existsSync74(path8)) {
     return errorText2(`get_status: audit log not found at ${path8}. No update_apply has run yet?`);
   }
   let raw;
   try {
-    raw = readFileSync59(path8, "utf-8");
+    raw = readFileSync60(path8, "utf-8");
   } catch (err2) {
     return errorText2(`get_status: failed to read audit log at ${path8}: ${err2.message}`);
   }
@@ -47243,8 +47247,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.12.19";
-var COMMIT_SHA = "5f6810ed";
+var VERSION = "0.12.21";
+var COMMIT_SHA = "e32c064";
 
 // src/cli/agent.ts
 init_source();
@@ -55349,7 +55353,7 @@ init_loader();
 init_loader();
 init_vault();
 import { createInterface as createInterface3 } from "node:readline";
-import { readFileSync as readFileSync33 } from "node:fs";
+import { readFileSync as readFileSync34 } from "node:fs";
 
 // src/cli/vault-sweep.ts
 init_source();
@@ -58598,7 +58602,7 @@ class VaultBroker {
           chownSync(abs, operatorUid, operatorUid);
         } catch {}
         const unlockServer = net3.createServer((sock) => {
-          this._handleUnlockConnection(sock);
+          this._handleUnlockConnection(sock, true);
         });
         unlockServer.on("error", (err) => rejectP(err));
         unlockServer.listen(unlockAbs, () => {
@@ -59598,9 +59602,9 @@ class VaultBroker {
       socket.write(encodeResponse(errorResponse("INTERNAL", msg)));
     }
   }
-  _handleUnlockConnection(socket) {
+  _handleUnlockConnection(socket, isOperator = false) {
     let unlockPeer = null;
-    if (process.platform === "linux") {
+    if (!isOperator && process.platform === "linux") {
       unlockPeer = this.testOpts._testIdentify ? this.testOpts._testIdentify(this.unlockSocketPath, socket) : identify(this.unlockSocketPath, socket);
       if (unlockPeer === null) {
         this.auditLogger.write({
@@ -59615,9 +59619,9 @@ class VaultBroker {
         return;
       }
     }
-    const auditPid = unlockPeer?.pid ?? process.pid;
-    const auditCaller = unlockPeer !== null ? callerFromPeer(unlockPeer) : `pid:${process.pid}`;
-    const auditCgroup = unlockPeer?.systemdUnit ?? undefined;
+    const auditPid = isOperator ? process.pid : unlockPeer?.pid ?? process.pid;
+    const auditCaller = isOperator ? "operator" : unlockPeer !== null ? callerFromPeer(unlockPeer) : `pid:${process.pid}`;
+    const auditCgroup = isOperator ? undefined : unlockPeer?.systemdUnit ?? undefined;
     let buffer = "";
     socket.on("data", (chunk) => {
       buffer += chunk.toString("utf8");
@@ -60758,6 +60762,289 @@ The token file was written to the agent directory (mode 0600).`));
   });
 }
 
+// src/cli/vault-backup.ts
+init_source();
+init_loader();
+import { existsSync as existsSync38 } from "node:fs";
+import { join as join32 } from "node:path";
+
+// src/vault/backup.ts
+import {
+  createHash as createHash7,
+  randomBytes as randomBytes9
+} from "node:crypto";
+import {
+  appendFileSync as appendFileSync2,
+  closeSync as closeSync9,
+  existsSync as existsSync37,
+  fsyncSync as fsyncSync5,
+  mkdirSync as mkdirSync21,
+  openSync as openSync9,
+  readdirSync as readdirSync15,
+  readFileSync as readFileSync33,
+  renameSync as renameSync10,
+  statSync as statSync20,
+  symlinkSync as symlinkSync4,
+  unlinkSync as unlinkSync10,
+  writeSync as writeSync5
+} from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { join as join31, resolve as resolvePath2 } from "node:path";
+var LATEST_SYMLINK = "vault.enc.latest.bak";
+var MANIFEST_FILE = "manifest.jsonl";
+var DEFAULT_RETAIN = 30;
+var FILENAME_PREFIX = "vault.enc.";
+var FILENAME_SUFFIX = ".bak";
+var AUTO_UNLOCK_FILENAME_PATTERNS = [
+  /auto-unlock/i,
+  /^\.?vault-auto/i
+];
+var KNOWN_BACKUP_DIR_ARTIFACTS = new Set([
+  LATEST_SYMLINK,
+  MANIFEST_FILE,
+  ".git",
+  ".gitignore",
+  "README.md"
+]);
+function computeBackupFilename(now) {
+  const Y = now.getUTCFullYear().toString().padStart(4, "0");
+  const M = (now.getUTCMonth() + 1).toString().padStart(2, "0");
+  const D = now.getUTCDate().toString().padStart(2, "0");
+  const h = now.getUTCHours().toString().padStart(2, "0");
+  const m = now.getUTCMinutes().toString().padStart(2, "0");
+  const s = now.getUTCSeconds().toString().padStart(2, "0");
+  return `${FILENAME_PREFIX}${Y}${M}${D}-${h}${m}${s}${FILENAME_SUFFIX}`;
+}
+function parseBackupFilename(name) {
+  if (!name.startsWith(FILENAME_PREFIX))
+    return null;
+  if (!name.endsWith(FILENAME_SUFFIX))
+    return null;
+  const inner = name.slice(FILENAME_PREFIX.length, -FILENAME_SUFFIX.length);
+  if (!/^\d{8}-\d{6}$/.test(inner))
+    return null;
+  return inner;
+}
+function validateVaultEnvelopeFile(path4) {
+  let buf;
+  try {
+    buf = readFileSync33(path4);
+  } catch (err) {
+    return `cannot read ${path4}: ${err.message}`;
+  }
+  if (buf.length === 0) {
+    return `${path4} is empty`;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(buf.toString("utf8"));
+  } catch {
+    return `${path4} is not valid JSON (vault envelope is JSON)`;
+  }
+  if (!parsed || typeof parsed !== "object") {
+    return `${path4} is not a JSON object`;
+  }
+  const obj = parsed;
+  for (const required of ["salt", "iv", "data", "tag"]) {
+    if (typeof obj[required] !== "string" || obj[required].length === 0) {
+      return `${path4} is missing or empty required field '${required}'`;
+    }
+  }
+  if (obj.kdf !== undefined) {
+    const k = obj.kdf;
+    if (typeof k.N !== "number" || typeof k.r !== "number" || typeof k.p !== "number") {
+      return `${path4} has malformed kdf field`;
+    }
+  }
+  return null;
+}
+function resolveBackupDestination(input) {
+  if (input.cliToFlag)
+    return resolvePath2(input.cliToFlag);
+  if (input.configDestination)
+    return resolvePath2(input.configDestination);
+  if (input.hasSwitchroomConfigRepo) {
+    return join31(input.home, ".switchroom-config", "vault-backups");
+  }
+  return join31(input.home, ".switchroom", "vault-backups");
+}
+function findAutoUnlockSibling(entries) {
+  for (const name of entries) {
+    if (KNOWN_BACKUP_DIR_ARTIFACTS.has(name))
+      continue;
+    if (AUTO_UNLOCK_FILENAME_PATTERNS.some((re) => re.test(name))) {
+      return name;
+    }
+  }
+  return null;
+}
+function selectBackupsToPrune(sortedNewestFirst, retain) {
+  if (retain < 0)
+    throw new Error("retain must be >= 0");
+  return sortedNewestFirst.slice(retain);
+}
+function listBackupFiles(dir) {
+  if (!existsSync37(dir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync15(dir);
+  } catch {
+    return [];
+  }
+  return entries.filter((n) => parseBackupFilename(n) !== null).sort((a, b) => {
+    const ka = parseBackupFilename(a);
+    const kb = parseBackupFilename(b);
+    return kb.localeCompare(ka);
+  });
+}
+function sha256OfFile(path4) {
+  const h = createHash7("sha256");
+  h.update(readFileSync33(path4));
+  return h.digest("hex");
+}
+function backupVault(opts) {
+  const now = opts.now ?? new Date;
+  const retain = opts.retain ?? DEFAULT_RETAIN;
+  const validationError = validateVaultEnvelopeFile(opts.vaultPath);
+  if (validationError) {
+    throw new Error(`vault backup refused: source is not a valid vault envelope: ${validationError}`);
+  }
+  mkdirSync21(opts.destDir, { recursive: true, mode: 448 });
+  const dirEntries = readdirSync15(opts.destDir);
+  const offender = findAutoUnlockSibling(dirEntries);
+  if (offender) {
+    throw new Error(`vault backup refused: destination '${opts.destDir}' contains a file ` + `that looks like an auto-unlock credential ('${offender}'). The ` + `machine-bound auto-unlock blob MUST NOT be co-located with the ` + `encrypted vault \u2014 if they're together in version control, the ` + `passphrase gate is bypassed. Move/remove that file and retry.`);
+  }
+  const filename = computeBackupFilename(now);
+  const fullPath = join31(opts.destDir, filename);
+  const tmpName = `.tmp.${process.pid}.${randomBytes9(4).toString("hex")}`;
+  const tmpPath = join31(opts.destDir, tmpName);
+  const src = readFileSync33(opts.vaultPath);
+  const fd = openSync9(tmpPath, "wx", 384);
+  try {
+    writeSync5(fd, src);
+    fsyncSync5(fd);
+  } finally {
+    closeSync9(fd);
+  }
+  if (existsSync37(fullPath)) {
+    try {
+      unlinkSync10(tmpPath);
+    } catch {}
+    throw new Error(`vault backup refused: '${fullPath}' already exists ` + `(sub-second collision with another backup). Retry in 1 second, ` + `or check for a concurrent backup process.`);
+  }
+  renameSync10(tmpPath, fullPath);
+  const stat = statSync20(fullPath);
+  const sha256 = sha256OfFile(fullPath);
+  const row = {
+    ts: now.toISOString(),
+    file: filename,
+    size_bytes: stat.size,
+    sha256
+  };
+  appendFileSync2(join31(opts.destDir, MANIFEST_FILE), JSON.stringify(row) + `
+`, { mode: 384 });
+  const latestPath = join31(opts.destDir, LATEST_SYMLINK);
+  try {
+    unlinkSync10(latestPath);
+  } catch {}
+  try {
+    symlinkSync4(filename, latestPath);
+  } catch {}
+  try {
+    const dirFd = openSync9(opts.destDir, "r");
+    try {
+      fsyncSync5(dirFd);
+    } finally {
+      closeSync9(dirFd);
+    }
+  } catch {}
+  const sorted = listBackupFiles(opts.destDir);
+  const pruneNames = selectBackupsToPrune(sorted, retain);
+  for (const old of pruneNames) {
+    try {
+      unlinkSync10(join31(opts.destDir, old));
+    } catch {}
+  }
+  if (pruneNames.length > 0) {
+    try {
+      const dirFd = openSync9(opts.destDir, "r");
+      try {
+        fsyncSync5(dirFd);
+      } finally {
+        closeSync9(dirFd);
+      }
+    } catch {}
+  }
+  return {
+    destDir: opts.destDir,
+    filename,
+    fullPath,
+    bytes: stat.size,
+    sha256,
+    pruned: pruneNames
+  };
+}
+function defaultHome() {
+  return process.env.HOME ?? homedir16();
+}
+
+// src/cli/vault-backup.ts
+function getLiveVaultPath(configPath) {
+  try {
+    const cfg = loadConfig(configPath);
+    if (cfg.vault?.path)
+      return resolvePath(cfg.vault.path);
+  } catch {}
+  return resolvePath("~/.switchroom/vault/vault.enc");
+}
+function registerVaultBackupCommand(vault, program3) {
+  vault.command("backup").description("Write a dated, encrypted backup of the vault to a configured directory. " + "Default destination: ~/.switchroom-config/vault-backups/ if that operator " + "config repo exists, else ~/.switchroom/vault-backups/. Rotated to the last " + "30 backups by default.").option("--to <path>", "Destination directory for the backup. Overrides config and default. " + "MUST NOT be ~/.switchroom/vault/ (the broker's bind-mounted dir, " + "validated by `switchroom apply` against an allowlist). Created with mode 0700.").option("--retain <n>", `Keep only the N most recent backups in the destination dir (default ${DEFAULT_RETAIN}). ` + `Older ones are pruned after the new backup is written.`).action(async (opts) => {
+    try {
+      const parentOpts = program3.opts();
+      const vaultPath = getLiveVaultPath(parentOpts.config);
+      let configDestination;
+      try {
+        const cfg = loadConfig(parentOpts.config);
+        const backupCfg = cfg.vault?.backup;
+        if (backupCfg?.destination) {
+          configDestination = resolvePath(backupCfg.destination);
+        }
+      } catch {}
+      const home2 = defaultHome();
+      const hasSwitchroomConfigRepo = existsSync38(join32(home2, ".switchroom-config"));
+      const destDir = resolveBackupDestination({
+        cliToFlag: opts.to ? resolvePath(opts.to) : undefined,
+        configDestination,
+        home: home2,
+        hasSwitchroomConfigRepo
+      });
+      let retain = DEFAULT_RETAIN;
+      if (opts.retain !== undefined) {
+        const n = Number(opts.retain);
+        if (!Number.isInteger(n) || n < 0) {
+          console.error(source_default.red(`Error: --retain must be a non-negative integer (got ${JSON.stringify(opts.retain)})`));
+          process.exit(1);
+        }
+        retain = n;
+      }
+      const result = backupVault({ vaultPath, destDir, retain });
+      console.log(`${source_default.green("\u2713")} vault backup written`);
+      console.log(`  ${source_default.dim("path:")}   ${result.fullPath}`);
+      console.log(`  ${source_default.dim("size:")}   ${result.bytes} bytes`);
+      console.log(`  ${source_default.dim("sha256:")} ${result.sha256}`);
+      if (result.pruned.length > 0) {
+        console.log(`  ${source_default.dim("pruned:")} ${result.pruned.length} older backup(s)`);
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.error(source_default.red(`Error: ${msg}`));
+      process.exit(1);
+    }
+  });
+}
+
 // src/cli/vault.ts
 function isSandboxContext() {
   return process.env.SWITCHROOM_RUNTIME === "docker";
@@ -60992,7 +61279,7 @@ function registerVaultCommand(program3) {
       let value;
       if (opts.file) {
         try {
-          value = readFileSync33(resolvePath(opts.file), "utf8");
+          value = readFileSync34(resolvePath(opts.file), "utf8");
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           console.error(source_default.red(`Error reading file: ${msg}`));
@@ -61298,11 +61585,12 @@ Push passphrase to broker for future requests? [Y/n]: `);
   registerVaultDoctorCommand(vault, program3);
   registerVaultAuditCommand(vault, program3);
   registerVaultGrantCommands(vault, program3);
+  registerVaultBackupCommand(vault, program3);
 }
 
 // src/cli/telegram.ts
 init_source();
-import { existsSync as existsSync37, readFileSync as readFileSync34, writeFileSync as writeFileSync20 } from "node:fs";
+import { existsSync as existsSync39, readFileSync as readFileSync35, writeFileSync as writeFileSync20 } from "node:fs";
 
 // src/web/webhook-dispatch.ts
 function renderTemplate2(template, ctx) {
@@ -61601,7 +61889,7 @@ function registerDisableVerb(tg, program3) {
 }
 async function applyYamlEdit(program3, agent, feature, value, dryRun) {
   const path4 = getConfigPath(program3);
-  const before = readFileSync34(path4, "utf-8");
+  const before = readFileSync35(path4, "utf-8");
   let after;
   try {
     after = setTelegramFeature(before, agent, feature, value);
@@ -61616,7 +61904,7 @@ async function applyYamlEdit(program3, agent, feature, value, dryRun) {
 }
 async function applyYamlRemove(program3, agent, feature, dryRun) {
   const path4 = getConfigPath(program3);
-  const before = readFileSync34(path4, "utf-8");
+  const before = readFileSync35(path4, "utf-8");
   const after = removeTelegramFeature(before, agent, feature);
   if (before === after) {
     console.log(source_default.yellow(`No change \u2014 ${feature.replace("_", "-")} is not set for agent '${agent}'.`));
@@ -61665,7 +61953,7 @@ function fail(msg) {
 }
 async function applyYamlAddWebhook(program3, agent, source, dryRun) {
   const path4 = getConfigPath(program3);
-  const before = readFileSync34(path4, "utf-8");
+  const before = readFileSync35(path4, "utf-8");
   let after;
   try {
     after = addWebhookSource(before, agent, source);
@@ -61685,7 +61973,7 @@ async function applyYamlAddWebhook(program3, agent, source, dryRun) {
 }
 async function applyYamlRemoveWebhook(program3, agent, source, dryRun) {
   const path4 = getConfigPath(program3);
-  const before = readFileSync34(path4, "utf-8");
+  const before = readFileSync35(path4, "utf-8");
   const after = removeWebhookSource(before, agent, source);
   if (before === after) {
     console.log(source_default.yellow(`No change \u2014 webhook source '${source}' is not currently enabled for agent '${agent}'.`));
@@ -61702,7 +61990,7 @@ async function vaultPut(program3, key, value) {
   const configPath = program3.optsWithGlobals().config ?? undefined;
   const vaultPath = resolveVaultPath(configPath);
   const passphrase = await getVaultPassphrase();
-  if (!existsSync37(vaultPath)) {
+  if (!existsSync39(vaultPath)) {
     createVault(passphrase, vaultPath);
     console.log(source_default.gray(`  Created new vault at ${vaultPath}`));
   }
@@ -61742,7 +62030,7 @@ function registerDispatchVerb(tg, _program) {
     }
     let payload;
     try {
-      payload = JSON.parse(readFileSync34(opts.payload, "utf-8"));
+      payload = JSON.parse(readFileSync35(opts.payload, "utf-8"));
     } catch (err) {
       fail(`Could not read payload file '${opts.payload}': ${err.message}`);
     }
@@ -62071,15 +62359,15 @@ async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFA
 // src/cli/memory.ts
 init_loader();
 var import_yaml10 = __toESM(require_dist(), 1);
-import { existsSync as existsSync38, readFileSync as readFileSync35, writeFileSync as writeFileSync21 } from "node:fs";
-import { join as join31 } from "node:path";
+import { existsSync as existsSync40, readFileSync as readFileSync36, writeFileSync as writeFileSync21 } from "node:fs";
+import { join as join33 } from "node:path";
 function readRecallLog(agentDir, limit) {
-  const path4 = join31(agentDir, ".claude", "plugins", "data", "hindsight-memory-inline", "state", "recall_log.jsonl");
-  if (!existsSync38(path4))
+  const path4 = join33(agentDir, ".claude", "plugins", "data", "hindsight-memory-inline", "state", "recall_log.jsonl");
+  if (!existsSync40(path4))
     return [];
   let raw;
   try {
-    raw = readFileSync35(path4, "utf-8");
+    raw = readFileSync36(path4, "utf-8");
   } catch {
     return [];
   }
@@ -62273,8 +62561,8 @@ Cross-agent reflection plan
     const url = `http://127.0.0.1:${ports.apiPort}/mcp/`;
     const configPath = getConfigPath(program3);
     try {
-      if (existsSync38(configPath)) {
-        const raw = readFileSync35(configPath, "utf-8");
+      if (existsSync40(configPath)) {
+        const raw = readFileSync36(configPath, "utf-8");
         const doc = import_yaml10.default.parseDocument(raw);
         if (!doc.has("memory")) {
           doc.set("memory", { backend: "hindsight", shared_collection: "shared", config: { provider, url } });
@@ -62315,7 +62603,7 @@ Cross-agent reflection plan
       process.exit(1);
     })() : Object.keys(config.agents);
     for (const name of targets) {
-      const agentDir = join31(agentsDir, name);
+      const agentDir = join33(agentsDir, name);
       const entries = readRecallLog(agentDir, limit);
       if (opts.json) {
         for (const e of entries) {
@@ -62381,32 +62669,32 @@ init_source();
 init_merge();
 init_lifecycle();
 import {
-  readFileSync as readFileSync39,
-  existsSync as existsSync42,
+  readFileSync as readFileSync40,
+  existsSync as existsSync44,
   realpathSync as realpathSync3,
-  mkdirSync as mkdirSync24,
-  openSync as openSync9,
-  closeSync as closeSync9,
-  writeSync as writeSync5,
+  mkdirSync as mkdirSync25,
+  openSync as openSync10,
+  closeSync as closeSync10,
+  writeSync as writeSync6,
   constants as fsConstants3
 } from "node:fs";
-import { resolve as resolve26, extname, join as join35, relative, dirname as dirname9 } from "node:path";
-import { homedir as homedir18 } from "node:os";
+import { resolve as resolve26, extname, join as join37, relative, dirname as dirname9 } from "node:path";
+import { homedir as homedir19 } from "node:os";
 import { spawn as spawn5 } from "node:child_process";
-import { timingSafeEqual as timingSafeEqual2, randomBytes as randomBytes9 } from "node:crypto";
+import { timingSafeEqual as timingSafeEqual2, randomBytes as randomBytes10 } from "node:crypto";
 
 // src/web/api.ts
 init_lifecycle();
 init_manager();
 init_hindsight();
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync40, readFileSync as readFileSync37 } from "node:fs";
+import { existsSync as existsSync42, readFileSync as readFileSync38 } from "node:fs";
 import { resolve as resolve25 } from "node:path";
 init_audit_reader();
 
 // src/scheduler/dispatch.ts
 init_merge();
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 function collectScheduleEntries(config) {
   const out = [];
   const agentNames = Object.keys(config.agents).sort();
@@ -62423,7 +62711,7 @@ function collectScheduleEntries(config) {
         scheduleIndex: i,
         cron: entry.cron,
         prompt: entry.prompt,
-        promptKey: createHash7("sha256").update(entry.prompt).digest("hex").slice(0, 12)
+        promptKey: createHash8("sha256").update(entry.prompt).digest("hex").slice(0, 12)
       });
     }
   }
@@ -66901,9 +67189,9 @@ class PostHog extends PostHogBackendClient {
 // src/analytics/posthog.ts
 init_paths();
 import {
-  existsSync as existsSync39,
-  mkdirSync as mkdirSync21,
-  readFileSync as readFileSync36,
+  existsSync as existsSync41,
+  mkdirSync as mkdirSync22,
+  readFileSync as readFileSync37,
   writeFileSync as writeFileSync22
 } from "node:fs";
 import { dirname as dirname8 } from "node:path";
@@ -66923,8 +67211,8 @@ function getDistinctId() {
     return cachedDistinctId;
   const path4 = resolveStatePath("analytics-id");
   try {
-    if (existsSync39(path4)) {
-      const existing = readFileSync36(path4, "utf-8").trim();
+    if (existsSync41(path4)) {
+      const existing = readFileSync37(path4, "utf-8").trim();
       if (existing) {
         cachedDistinctId = existing;
         return existing;
@@ -66934,7 +67222,7 @@ function getDistinctId() {
   const id = randomUUID3();
   cachedDistinctId = id;
   try {
-    mkdirSync21(dirname8(path4), { recursive: true });
+    mkdirSync22(dirname8(path4), { recursive: true });
     writeFileSync22(path4, id, "utf-8");
   } catch {}
   return id;
@@ -67012,8 +67300,8 @@ init_account_store();
 init_client2();
 
 // telegram-plugin/registry/turns-schema.ts
-import { chmodSync as chmodSync8, mkdirSync as mkdirSync22 } from "fs";
-import { join as join33 } from "path";
+import { chmodSync as chmodSync8, mkdirSync as mkdirSync23 } from "fs";
+import { join as join35 } from "path";
 var DatabaseClass = null;
 function loadDatabaseClass() {
   if (DatabaseClass != null)
@@ -67072,9 +67360,9 @@ function applySchema(db) {
 }
 function openTurnsDb(agentDir) {
   const Database2 = loadDatabaseClass();
-  const dir = join33(agentDir, "telegram");
-  mkdirSync22(dir, { recursive: true, mode: 448 });
-  const path4 = join33(dir, "registry.db");
+  const dir = join35(agentDir, "telegram");
+  mkdirSync23(dir, { recursive: true, mode: 448 });
+  const path4 = join35(dir, "registry.db");
   const db = new Database2(path4, { create: true });
   applySchema(db);
   try {
@@ -67487,9 +67775,9 @@ async function handleGetSystemHealth(home2) {
   };
   try {
     const logPath = defaultAuditLogPath2(home2);
-    if (existsSync40(logPath)) {
+    if (existsSync42(logPath)) {
       hostd.auditLogPresent = true;
-      const raw = readFileSync37(logPath, "utf-8");
+      const raw = readFileSync38(logPath, "utf-8");
       hostd.recent = readAndFilter(raw, {}, 10);
     }
   } catch (err) {
@@ -67568,9 +67856,9 @@ async function handleGetApprovals() {
 }
 
 // src/web/webhook-handler.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync41, mkdirSync as mkdirSync23, readFileSync as readFileSync38, writeFileSync as writeFileSync23 } from "fs";
-import { join as join34 } from "path";
-import { homedir as homedir17 } from "os";
+import { appendFileSync as appendFileSync3, existsSync as existsSync43, mkdirSync as mkdirSync24, readFileSync as readFileSync39, writeFileSync as writeFileSync23 } from "fs";
+import { join as join36 } from "path";
+import { homedir as homedir18 } from "os";
 
 // src/web/webhook-verify.ts
 import { createHmac as createHmac2, timingSafeEqual } from "crypto";
@@ -67689,9 +67977,9 @@ var DEDUP_MAX = 1000;
 var DEDUP_TTL_MS = 24 * 60 * 60 * 1000;
 function loadDedupFile(path4) {
   try {
-    if (!existsSync41(path4))
+    if (!existsSync43(path4))
       return {};
-    const raw = JSON.parse(readFileSync38(path4, "utf-8"));
+    const raw = JSON.parse(readFileSync39(path4, "utf-8"));
     return typeof raw.deliveries === "object" && raw.deliveries !== null ? raw.deliveries : {};
   } catch {
     return {};
@@ -67713,8 +68001,8 @@ var agentDedupCache = new Map;
 function createFileDedupStore(resolveAgentDir) {
   return {
     check(agent, deliveryId, now) {
-      const telegramDir = join34(resolveAgentDir(agent), "telegram");
-      const filePath = join34(telegramDir, "webhook-dedup.json");
+      const telegramDir = join36(resolveAgentDir(agent), "telegram");
+      const filePath = join36(telegramDir, "webhook-dedup.json");
       if (!agentDedupCache.has(agent)) {
         agentDedupCache.set(agent, loadDedupFile(filePath));
       }
@@ -67724,7 +68012,7 @@ function createFileDedupStore(resolveAgentDir) {
       }
       deliveries[deliveryId] = now;
       try {
-        mkdirSync23(telegramDir, { recursive: true });
+        mkdirSync24(telegramDir, { recursive: true });
         saveDedupFile(filePath, deliveries, now);
       } catch {}
       return;
@@ -67766,9 +68054,9 @@ function shouldWriteThrottleIssue(agent, source, now, windowMap) {
   return true;
 }
 function writeThrottleIssue(agent, source, now, telegramDir, log) {
-  const issuesPath = join34(telegramDir, "issues.jsonl");
+  const issuesPath = join36(telegramDir, "issues.jsonl");
   try {
-    mkdirSync23(telegramDir, { recursive: true });
+    mkdirSync24(telegramDir, { recursive: true });
     const record = {
       ts: now,
       agent,
@@ -67781,7 +68069,7 @@ function writeThrottleIssue(agent, source, now, telegramDir, log) {
       first_seen: now,
       last_seen: now
     };
-    appendFileSync2(issuesPath, JSON.stringify(record) + `
+    appendFileSync3(issuesPath, JSON.stringify(record) + `
 `, { mode: 384 });
   } catch (err) {
     log(`webhook-ingest: agent='${agent}' source='${source}' issues.jsonl write failed: ${err.message}
@@ -67791,7 +68079,7 @@ function writeThrottleIssue(agent, source, now, telegramDir, log) {
 async function handleWebhookIngest(args, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = (deps.now ?? Date.now)();
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join34(homedir17(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join36(homedir18(), ".switchroom", "agents", a));
   const rateLimiter = deps.rateLimiter ?? defaultRateLimiter;
   const dedupStore = deps.dedupStore ?? createFileDedupStore(resolveAgentDir);
   if (!args.agentExists) {
@@ -67845,7 +68133,7 @@ async function handleWebhookIngest(args, deps = {}) {
   const retryAfter = rpm !== undefined ? rateLimiter.check(args.agent, source, rpm, now) : null;
   if (retryAfter !== null) {
     const agentDir2 = resolveAgentDir(args.agent);
-    const telegramDir2 = join34(agentDir2, "telegram");
+    const telegramDir2 = join36(agentDir2, "telegram");
     if (shouldWriteThrottleIssue(args.agent, source, now)) {
       writeThrottleIssue(args.agent, source, now, telegramDir2, log);
     }
@@ -67864,10 +68152,10 @@ async function handleWebhookIngest(args, deps = {}) {
   const eventType = source === "github" ? args.headers.get("x-github-event") ?? "unknown" : args.source;
   const rendered = source === "github" ? renderGithubEvent(eventType, payload) : renderGenericEvent(args.source, payload);
   const agentDir = resolveAgentDir(args.agent);
-  const telegramDir = join34(agentDir, "telegram");
-  const logPath = join34(telegramDir, "webhook-events.jsonl");
+  const telegramDir = join36(agentDir, "telegram");
+  const logPath = join36(telegramDir, "webhook-events.jsonl");
   try {
-    mkdirSync23(telegramDir, { recursive: true });
+    mkdirSync24(telegramDir, { recursive: true });
     const record = {
       ts: now,
       source,
@@ -67875,7 +68163,7 @@ async function handleWebhookIngest(args, deps = {}) {
       rendered_text: rendered.text,
       payload
     };
-    appendFileSync2(logPath, JSON.stringify(record) + `
+    appendFileSync3(logPath, JSON.stringify(record) + `
 `, { mode: 384 });
   } catch (err) {
     log(`webhook-ingest: agent='${args.agent}' source='${source}' write failed: ${err.message}
@@ -67918,27 +68206,27 @@ function resolveWebToken() {
   const fromEnv = process.env.SWITCHROOM_WEB_TOKEN;
   if (fromEnv && fromEnv.length > 0)
     return fromEnv;
-  const home2 = process.env.HOME ?? homedir18();
-  const tokenPath = join35(home2, ".switchroom", "web-token");
-  if (existsSync42(tokenPath)) {
-    const existing = readFileSync39(tokenPath, "utf8").trim();
+  const home2 = process.env.HOME ?? homedir19();
+  const tokenPath = join37(home2, ".switchroom", "web-token");
+  if (existsSync44(tokenPath)) {
+    const existing = readFileSync40(tokenPath, "utf8").trim();
     if (existing.length > 0)
       return existing;
   }
-  const token = randomBytes9(32).toString("hex");
-  mkdirSync24(dirname9(tokenPath), { recursive: true, mode: 448 });
+  const token = randomBytes10(32).toString("hex");
+  mkdirSync25(dirname9(tokenPath), { recursive: true, mode: 448 });
   try {
-    const fd = openSync9(tokenPath, fsConstants3.O_WRONLY | fsConstants3.O_CREAT | fsConstants3.O_EXCL, 384);
+    const fd = openSync10(tokenPath, fsConstants3.O_WRONLY | fsConstants3.O_CREAT | fsConstants3.O_EXCL, 384);
     try {
-      writeSync5(fd, token + `
+      writeSync6(fd, token + `
 `);
     } finally {
-      closeSync9(fd);
+      closeSync10(fd);
     }
     return token;
   } catch (err) {
     if (err.code === "EEXIST") {
-      const existing = readFileSync39(tokenPath, "utf8").trim();
+      const existing = readFileSync40(tokenPath, "utf8").trim();
       if (existing.length > 0)
         return existing;
     }
@@ -68004,11 +68292,11 @@ function checkWsAuth(req, token, server) {
   return presented !== null && constantTimeEqual(presented, token);
 }
 function loadWebhookSecrets() {
-  const path4 = join35(homedir18(), ".switchroom", "webhook-secrets.json");
-  if (!existsSync42(path4))
+  const path4 = join37(homedir19(), ".switchroom", "webhook-secrets.json");
+  if (!existsSync44(path4))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync39(path4, "utf-8"));
+    const parsed = JSON.parse(readFileSync40(path4, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch (err) {
     process.stderr.write(`webhook-ingest: failed to parse ${path4}: ${err.message} \u2014 webhooks will return 401 until fixed
@@ -68107,7 +68395,7 @@ function parseRoute(pathname, method) {
 }
 function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
   const uiDirRaw = resolve26(import.meta.dirname, "ui");
-  const uiDir = existsSync42(uiDirRaw) ? realpathSync3(uiDirRaw) : uiDirRaw;
+  const uiDir = existsSync44(uiDirRaw) ? realpathSync3(uiDirRaw) : uiDirRaw;
   const token = resolveWebToken();
   const localhostOnly = hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1";
   const server = Bun.serve({
@@ -68262,8 +68550,8 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
         }
       }
       let filePath = pathname === "/" ? "/index.html" : pathname;
-      const fullPath = join35(uiDir, filePath);
-      if (!existsSync42(fullPath)) {
+      const fullPath = join37(uiDir, filePath);
+      if (!existsSync44(fullPath)) {
         return new Response("Not Found", { status: 404 });
       }
       let realFullPath;
@@ -68278,7 +68566,7 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
       }
       const ext = extname(realFullPath);
       const contentType = MIME_TYPES[ext] ?? "application/octet-stream";
-      const content = readFileSync39(realFullPath);
+      const content = readFileSync40(realFullPath);
       return new Response(content, {
         headers: { "Content-Type": contentType }
       });
@@ -68412,7 +68700,7 @@ Starting Switchroom dashboard...
 // src/cli/setup.ts
 init_source();
 init_loader();
-import { existsSync as existsSync43, copyFileSync as copyFileSync8, readFileSync as readFileSync40, writeFileSync as writeFileSync24, mkdirSync as mkdirSync25 } from "node:fs";
+import { existsSync as existsSync45, copyFileSync as copyFileSync8, readFileSync as readFileSync41, writeFileSync as writeFileSync24, mkdirSync as mkdirSync26 } from "node:fs";
 import { resolve as resolve27, dirname as dirname10 } from "node:path";
 init_vault();
 init_manager();
@@ -68552,7 +68840,7 @@ async function stepConfigFile(configPath, nonInteractive) {
       existingConfig = null;
     }
   }
-  if (existingConfig && existsSync43(existingConfig)) {
+  if (existingConfig && existsSync45(existingConfig)) {
     if (!nonInteractive) {
       const useExisting = await askYesNo(`  Found ${source_default.cyan(existingConfig)}. Use it?`, true);
       if (!useExisting) {
@@ -68580,10 +68868,10 @@ async function copyExampleConfig(nonInteractive) {
   }
   const srcFile = resolve27(examplesDir, `${choice}.yaml`);
   const destFile = resolvePath("~/.switchroom/switchroom.yaml");
-  if (!existsSync43(srcFile)) {
+  if (!existsSync45(srcFile)) {
     throw new ConfigError(`Example config not found: ${choice}.yaml`);
   }
-  mkdirSync25(dirname10(destFile), { recursive: true });
+  mkdirSync26(dirname10(destFile), { recursive: true });
   copyFileSync8(srcFile, destFile);
   console.log(source_default.green(`  Copied ${choice}.yaml -> ${destFile}`));
   console.log(source_default.yellow(`  Edit ${destFile} to customize, then re-run switchroom setup.`));
@@ -68664,7 +68952,7 @@ async function resolveOrPromptToken(rawToken, label, config, nonInteractive) {
       try {
         const { openVault: openVault2 } = await Promise.resolve().then(() => (init_vault(), exports_vault));
         const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-        if (existsSync43(vaultPath)) {
+        if (existsSync45(vaultPath)) {
           const secrets = openVault2(passphrase, vaultPath);
           const key = rawToken.replace("vault:", "");
           const entry = secrets[key];
@@ -68692,7 +68980,7 @@ async function resolveOrPromptToken(rawToken, label, config, nonInteractive) {
 async function storeTokenInVault(config, vaultRef, token) {
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
   const key = vaultRef.replace("vault:", "");
-  if (!existsSync43(vaultPath)) {
+  if (!existsSync45(vaultPath)) {
     console.log(source_default.gray("  Creating encrypted vault..."));
     let passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
     if (!passphrase) {
@@ -68812,7 +69100,7 @@ async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   try {
     const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
     const passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
-    if (passphrase && existsSync43(vaultPath)) {
+    if (passphrase && existsSync45(vaultPath)) {
       const existing = getStringSecret(passphrase, vaultPath, "hindsight-api-key");
       if (existing) {
         console.log(source_default.gray("  Note: legacy 'hindsight-api-key' is in your vault but is no longer used. You can remove it with `switchroom vault rm hindsight-api-key`."));
@@ -68972,13 +69260,13 @@ async function stepAutoUnlock(config, switchroomConfigPath, nonInteractive) {
     return;
   }
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync43(vaultPath)) {
+  if (!existsSync45(vaultPath)) {
     console.log(source_default.gray("  Skipping (vault not created yet)."));
     return;
   }
   const credPathRaw = config.vault?.broker?.autoUnlockCredentialPath ?? "~/.switchroom/vault-auto-unlock";
   const credPath = resolvePath(credPathRaw);
-  if (config.vault?.broker?.autoUnlock === true && existsSync43(credPath)) {
+  if (config.vault?.broker?.autoUnlock === true && existsSync45(credPath)) {
     console.log(source_default.green(`  ${STEP_DONE} Already configured (${credPath})`));
     return;
   }
@@ -69044,9 +69332,9 @@ async function stepAutoUnlock(config, switchroomConfigPath, nonInteractive) {
   const choice = await askChoice("  Approval posture", [PASSPHRASE_CHOICE, TELEGRAM_ID_CHOICE]);
   if (choice === TELEGRAM_ID_CHOICE) {
     try {
-      const yamlPath = existsSync43(resolve27(process.cwd(), "switchroom.yaml")) ? resolve27(process.cwd(), "switchroom.yaml") : resolve27(process.cwd(), "switchroom.yml");
-      if (existsSync43(yamlPath)) {
-        const content = readFileSync40(yamlPath, "utf-8");
+      const yamlPath = existsSync45(resolve27(process.cwd(), "switchroom.yaml")) ? resolve27(process.cwd(), "switchroom.yaml") : resolve27(process.cwd(), "switchroom.yml");
+      if (existsSync45(yamlPath)) {
+        const content = readFileSync41(yamlPath, "utf-8");
         const result = insertVaultBrokerApprovalAuth(content, "telegram-id");
         if (result.kind === "rewritten") {
           writeFileSync24(yamlPath, result.content, "utf-8");
@@ -69080,8 +69368,8 @@ async function stepDangerousMode(config, nonInteractive) {
       resolve27(process.cwd(), "switchroom.yml")
     ];
     for (const configPath of configPaths) {
-      if (existsSync43(configPath)) {
-        let content = readFileSync40(configPath, "utf-8");
+      if (existsSync45(configPath)) {
+        let content = readFileSync41(configPath, "utf-8");
         const agentNames = Object.keys(config.agents);
         for (const name of agentNames) {
           const agentPattern = new RegExp(`(^  ${name}:\\s*\\n)`, "m");
@@ -69210,17 +69498,17 @@ init_doctor();
 init_source();
 init_loader();
 init_lifecycle();
-import { cpSync as cpSync2, existsSync as existsSync49, mkdirSync as mkdirSync27, readFileSync as readFileSync45, realpathSync as realpathSync5, rmSync as rmSync12, statSync as statSync22 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync51, mkdirSync as mkdirSync28, readFileSync as readFileSync46, realpathSync as realpathSync5, rmSync as rmSync12, statSync as statSync23 } from "node:fs";
 import { spawnSync as spawnSync8 } from "node:child_process";
-import { join as join44, dirname as dirname13, resolve as resolve30 } from "node:path";
-import { homedir as homedir25 } from "node:os";
-var DEFAULT_COMPOSE_PATH = join44(homedir25(), ".switchroom", "compose", "docker-compose.yml");
+import { join as join46, dirname as dirname13, resolve as resolve30 } from "node:path";
+import { homedir as homedir26 } from "node:os";
+var DEFAULT_COMPOSE_PATH = join46(homedir26(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
   let dir = dirname13(scriptPath);
   for (let i = 0;i < 12; i++) {
-    if (existsSync49(join44(dir, ".git"))) {
+    if (existsSync51(join46(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync45(join44(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync46(join46(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
@@ -69272,7 +69560,7 @@ function planUpdate(opts) {
   steps.push({
     name: "pull-images",
     description: "Pull broker / kernel / agent images from GHCR",
-    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync49(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
+    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync51(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
     run: () => {
       const r = runner("docker", [
         "compose",
@@ -69351,17 +69639,17 @@ function planUpdate(opts) {
         return;
       }
       const source = resolve30(import.meta.dirname, "../../skills");
-      const dest = join44(homedir25(), ".switchroom", "skills", "_bundled");
-      if (!existsSync49(source)) {
+      const dest = join46(homedir26(), ".switchroom", "skills", "_bundled");
+      if (!existsSync51(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
 `);
         return;
       }
       try {
-        if (existsSync49(dest)) {
+        if (existsSync51(dest)) {
           rmSync12(dest, { recursive: true, force: true });
         }
-        mkdirSync27(dirname13(dest), { recursive: true });
+        mkdirSync28(dirname13(dest), { recursive: true });
         cpSync2(source, dest, { recursive: true, dereference: false });
       } catch (err) {
         throw new Error(`sync-bundled-skills failed: ${err.message}`);
@@ -69461,14 +69749,14 @@ function defaultStatusProbe(composePath) {
     } catch {}
     if (scriptPath) {
       try {
-        cliBuiltAt = new Date(statSync22(scriptPath).mtimeMs).toISOString();
+        cliBuiltAt = new Date(statSync23(scriptPath).mtimeMs).toISOString();
       } catch {}
       let dir = dirname13(scriptPath);
       for (let i = 0;i < 8; i++) {
-        const pkgPath = join44(dir, "package.json");
-        if (existsSync49(pkgPath)) {
+        const pkgPath = join46(dir, "package.json");
+        if (existsSync51(pkgPath)) {
           try {
-            const pkg = JSON.parse(readFileSync45(pkgPath, "utf-8"));
+            const pkg = JSON.parse(readFileSync46(pkgPath, "utf-8"));
             if (typeof pkg.version === "string")
               cliVersion = pkg.version;
           } catch (err) {
@@ -69489,7 +69777,7 @@ function defaultStatusProbe(composePath) {
     warnings.push("could not resolve CLI version (no package.json found above the resolved script path)");
   }
   const services = [];
-  if (!existsSync49(composePath)) {
+  if (!existsSync51(composePath)) {
     warnings.push(`compose file not found at ${composePath}; service status unknown`);
     return { cliVersion, cliBuiltAt, services, warnings };
   }
@@ -69684,8 +69972,8 @@ init_source();
 init_helpers();
 init_lifecycle();
 import { execSync as execSync4 } from "node:child_process";
-import { existsSync as existsSync50, readFileSync as readFileSync46 } from "node:fs";
-import { dirname as dirname14, join as join45 } from "node:path";
+import { existsSync as existsSync52, readFileSync as readFileSync47 } from "node:fs";
+import { dirname as dirname14, join as join47 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync4("claude --version 2>/dev/null", {
@@ -69735,11 +70023,11 @@ function formatUptime3(timestamp) {
 function locateSwitchroomInstallDir() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const pkgPath = join45(dir, "package.json");
-    if (existsSync50(pkgPath)) {
+    const pkgPath = join47(dir, "package.json");
+    if (existsSync52(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync46(pkgPath, "utf-8"));
-        if (pkg.name === "switchroom" && existsSync50(join45(dir, ".git"))) {
+        const pkg = JSON.parse(readFileSync47(pkgPath, "utf-8"));
+        if (pkg.name === "switchroom" && existsSync52(join47(dir, ".git"))) {
           return dir;
         }
       } catch {}
@@ -69957,20 +70245,20 @@ function registerHandoffCommand(program3) {
 
 // src/issues/store.ts
 import {
-  closeSync as closeSync10,
-  existsSync as existsSync51,
-  mkdirSync as mkdirSync28,
-  openSync as openSync10,
-  readdirSync as readdirSync18,
-  readFileSync as readFileSync47,
-  renameSync as renameSync10,
-  statSync as statSync23,
-  unlinkSync as unlinkSync10,
+  closeSync as closeSync11,
+  existsSync as existsSync53,
+  mkdirSync as mkdirSync29,
+  openSync as openSync11,
+  readdirSync as readdirSync19,
+  readFileSync as readFileSync48,
+  renameSync as renameSync11,
+  statSync as statSync24,
+  unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync25,
-  writeSync as writeSync6
+  writeSync as writeSync7
 } from "node:fs";
-import { join as join46 } from "node:path";
-import { randomBytes as randomBytes10 } from "node:crypto";
+import { join as join48 } from "node:path";
+import { randomBytes as randomBytes11 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
 
 // src/issues/types.ts
@@ -70289,12 +70577,12 @@ function redactedMarker(ruleId) {
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path4 = join46(stateDir, ISSUES_FILE);
-  if (!existsSync51(path4))
+  const path4 = join48(stateDir, ISSUES_FILE);
+  if (!existsSync53(path4))
     return [];
   let raw;
   try {
-    raw = readFileSync47(path4, "utf-8");
+    raw = readFileSync48(path4, "utf-8");
   } catch {
     return [];
   }
@@ -70367,7 +70655,7 @@ function record(stateDir, input, nowFn = Date.now) {
   });
 }
 function resolve33(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync51(join46(stateDir, ISSUES_FILE)))
+  if (!existsSync53(join48(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -70385,7 +70673,7 @@ function resolve33(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function resolveAllBySource(stateDir, source, nowFn = Date.now) {
-  if (!existsSync51(join46(stateDir, ISSUES_FILE)))
+  if (!existsSync53(join48(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -70403,7 +70691,7 @@ function resolveAllBySource(stateDir, source, nowFn = Date.now) {
   });
 }
 function prune(stateDir, opts = {}) {
-  if (!existsSync51(join46(stateDir, ISSUES_FILE)))
+  if (!existsSync53(join48(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -70433,24 +70721,24 @@ function prune(stateDir, opts = {}) {
   });
 }
 function ensureDir(stateDir) {
-  mkdirSync28(stateDir, { recursive: true });
+  mkdirSync29(stateDir, { recursive: true });
 }
 function writeAll(stateDir, events) {
-  const path4 = join46(stateDir, ISSUES_FILE);
+  const path4 = join48(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
-  const tmp = `${path4}.tmp-${process.pid}-${randomBytes10(4).toString("hex")}`;
+  const tmp = `${path4}.tmp-${process.pid}-${randomBytes11(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
   writeFileSync25(tmp, body, "utf-8");
-  renameSync10(tmp, path4);
+  renameSync11(tmp, path4);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
 var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
 function sweepOrphanTmpFiles(stateDir) {
   let entries;
   try {
-    entries = readdirSync18(stateDir);
+    entries = readdirSync19(stateDir);
   } catch {
     return;
   }
@@ -70458,11 +70746,11 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath = join46(stateDir, entry);
+    const tmpPath = join48(stateDir, entry);
     try {
-      const stat = statSync23(tmpPath);
+      const stat = statSync24(tmpPath);
       if (stat.mtimeMs < cutoff) {
-        unlinkSync10(tmpPath);
+        unlinkSync11(tmpPath);
       }
     } catch {}
   }
@@ -70470,14 +70758,14 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join46(stateDir, ISSUES_LOCK);
+  const lockPath = join48(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
     try {
-      fd = openSync10(lockPath, "wx");
+      fd = openSync11(lockPath, "wx");
       try {
-        writeSync6(fd, String(process.pid));
+        writeSync7(fd, String(process.pid));
       } catch {}
     } catch (err) {
       const e = err;
@@ -70495,30 +70783,30 @@ function withLock(stateDir, fn) {
     return fn();
   } finally {
     try {
-      closeSync10(fd);
+      closeSync11(fd);
     } catch {}
     try {
-      unlinkSync10(lockPath);
+      unlinkSync11(lockPath);
     } catch {}
   }
 }
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync47(lockPath, "utf-8").trim();
+    pidStr = readFileSync48(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
   const pid = Number(pidStr);
   if (!Number.isFinite(pid) || pid <= 0) {
     try {
-      unlinkSync10(lockPath);
+      unlinkSync11(lockPath);
     } catch {}
     return true;
   }
   if (pid === process.pid) {
     try {
-      unlinkSync10(lockPath);
+      unlinkSync11(lockPath);
     } catch {}
     return true;
   }
@@ -70533,7 +70821,7 @@ function tryStealStaleLock(lockPath) {
       return false;
   }
   try {
-    unlinkSync10(lockPath);
+    unlinkSync11(lockPath);
   } catch {}
   return true;
 }
@@ -70753,21 +71041,21 @@ function relTime(deltaMs) {
 
 // src/cli/deps.ts
 init_source();
-import { existsSync as existsSync54 } from "node:fs";
-import { homedir as homedir28 } from "node:os";
-import { join as join49, resolve as resolve34 } from "node:path";
+import { existsSync as existsSync56 } from "node:fs";
+import { homedir as homedir29 } from "node:os";
+import { join as join51, resolve as resolve34 } from "node:path";
 
 // src/deps/python.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 import {
-  existsSync as existsSync52,
-  mkdirSync as mkdirSync29,
-  readFileSync as readFileSync48,
+  existsSync as existsSync54,
+  mkdirSync as mkdirSync30,
+  readFileSync as readFileSync49,
   rmSync as rmSync13,
   writeFileSync as writeFileSync26
 } from "node:fs";
-import { dirname as dirname15, join as join47 } from "node:path";
-import { homedir as homedir26 } from "node:os";
+import { dirname as dirname15, join as join49 } from "node:path";
+import { homedir as homedir27 } from "node:os";
 import { execFileSync as execFileSync14 } from "node:child_process";
 
 class PythonEnvError extends Error {
@@ -70779,26 +71067,26 @@ class PythonEnvError extends Error {
   }
 }
 function defaultPythonCacheRoot() {
-  return join47(homedir26(), ".switchroom", "deps", "python");
+  return join49(homedir27(), ".switchroom", "deps", "python");
 }
 function hashFile(path4) {
-  return createHash9("sha256").update(readFileSync48(path4)).digest("hex");
+  return createHash10("sha256").update(readFileSync49(path4)).digest("hex");
 }
 function ensurePythonEnv(opts) {
   const { skillName, requirementsPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultPythonCacheRoot();
   const hostPython = opts.pythonBin ?? "python3";
-  if (!existsSync52(requirementsPath)) {
+  if (!existsSync54(requirementsPath)) {
     throw new PythonEnvError(`requirements file not found: ${requirementsPath}`);
   }
-  const venvDir = join47(cacheRoot, skillName);
-  const stampPath = join47(venvDir, ".requirements.sha256");
-  const binDir = join47(venvDir, "bin");
-  const pythonBin = join47(binDir, "python");
-  const pipBin = join47(binDir, "pip");
+  const venvDir = join49(cacheRoot, skillName);
+  const stampPath = join49(venvDir, ".requirements.sha256");
+  const binDir = join49(venvDir, "bin");
+  const pythonBin = join49(binDir, "python");
+  const pipBin = join49(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
-  if (!force && existsSync52(stampPath) && existsSync52(pythonBin)) {
-    const existingHash = readFileSync48(stampPath, "utf8").trim();
+  if (!force && existsSync54(stampPath) && existsSync54(pythonBin)) {
+    const existingHash = readFileSync49(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -70810,10 +71098,10 @@ function ensurePythonEnv(opts) {
       };
     }
   }
-  if (existsSync52(venvDir)) {
+  if (existsSync54(venvDir)) {
     rmSync13(venvDir, { recursive: true, force: true });
   }
-  mkdirSync29(dirname15(venvDir), { recursive: true });
+  mkdirSync30(dirname15(venvDir), { recursive: true });
   try {
     execFileSync14(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
@@ -70845,17 +71133,17 @@ function ensurePythonEnv(opts) {
 }
 
 // src/deps/node.ts
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import {
   copyFileSync as copyFileSync9,
-  existsSync as existsSync53,
-  mkdirSync as mkdirSync30,
-  readFileSync as readFileSync49,
+  existsSync as existsSync55,
+  mkdirSync as mkdirSync31,
+  readFileSync as readFileSync50,
   rmSync as rmSync14,
   writeFileSync as writeFileSync27
 } from "node:fs";
-import { dirname as dirname16, join as join48 } from "node:path";
-import { homedir as homedir27 } from "node:os";
+import { dirname as dirname16, join as join50 } from "node:path";
+import { homedir as homedir28 } from "node:os";
 import { execFileSync as execFileSync15 } from "node:child_process";
 
 class NodeEnvError extends Error {
@@ -70878,23 +71166,23 @@ var LOCKFILES_FOR = {
   npm: ["package-lock.json"]
 };
 function defaultNodeCacheRoot() {
-  return join48(homedir27(), ".switchroom", "deps", "node");
+  return join50(homedir28(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
   const sourceDir = dirname16(packageJsonPath);
-  const hasher = createHash10("sha256");
+  const hasher = createHash11("sha256");
   hasher.update(`package.json
 `);
-  hasher.update(readFileSync49(packageJsonPath));
+  hasher.update(readFileSync50(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
-    const lockPath = join48(sourceDir, lockName);
-    if (existsSync53(lockPath)) {
+    const lockPath = join50(sourceDir, lockName);
+    if (existsSync55(lockPath)) {
       hasher.update(`
 `);
       hasher.update(lockName);
       hasher.update(`
 `);
-      hasher.update(readFileSync49(lockPath));
+      hasher.update(readFileSync50(lockPath));
     }
   }
   return hasher.digest("hex");
@@ -70903,17 +71191,17 @@ function ensureNodeEnv(opts) {
   const { skillName, packageJsonPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultNodeCacheRoot();
   const installer = opts.installer ?? "bun";
-  if (!existsSync53(packageJsonPath)) {
+  if (!existsSync55(packageJsonPath)) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
   const sourceDir = dirname16(packageJsonPath);
-  const envDir = join48(cacheRoot, skillName);
-  const stampPath = join48(envDir, ".package.sha256");
-  const nodeModulesDir = join48(envDir, "node_modules");
-  const binDir = join48(nodeModulesDir, ".bin");
+  const envDir = join50(cacheRoot, skillName);
+  const stampPath = join50(envDir, ".package.sha256");
+  const nodeModulesDir = join50(envDir, "node_modules");
+  const binDir = join50(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
-  if (!force && existsSync53(stampPath) && existsSync53(nodeModulesDir)) {
-    const existingHash = readFileSync49(stampPath, "utf8").trim();
+  if (!force && existsSync55(stampPath) && existsSync55(nodeModulesDir)) {
+    const existingHash = readFileSync50(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -70924,16 +71212,16 @@ function ensureNodeEnv(opts) {
       };
     }
   }
-  if (existsSync53(envDir)) {
+  if (existsSync55(envDir)) {
     rmSync14(envDir, { recursive: true, force: true });
   }
-  mkdirSync30(envDir, { recursive: true });
-  copyFileSync9(packageJsonPath, join48(envDir, "package.json"));
+  mkdirSync31(envDir, { recursive: true });
+  copyFileSync9(packageJsonPath, join50(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
-    const lockPath = join48(sourceDir, lockName);
-    if (existsSync53(lockPath)) {
-      copyFileSync9(lockPath, join48(envDir, lockName));
+    const lockPath = join50(sourceDir, lockName);
+    if (existsSync55(lockPath)) {
+      copyFileSync9(lockPath, join50(envDir, lockName));
       copiedLockfile = true;
     }
   }
@@ -70962,28 +71250,28 @@ function ensureNodeEnv(opts) {
 
 // src/cli/deps.ts
 function builtinSkillsRoot() {
-  return resolve34(homedir28(), ".switchroom/skills/_bundled");
+  return resolve34(homedir29(), ".switchroom/skills/_bundled");
 }
 function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
   deps.command("rebuild <skill>").description("Rebuild the Python venv and/or Node node_modules cache for a skill").option("-p, --python", "Rebuild only the Python env").option("-n, --node", "Rebuild only the Node env").action(async (skill, opts) => {
     const skillsRoot = builtinSkillsRoot();
-    if (!existsSync54(skillsRoot)) {
+    if (!existsSync56(skillsRoot)) {
       console.error(source_default.red(`Bundled skills pool dir not found at ${skillsRoot} \u2014 run \`switchroom update\` to install it.`));
       process.exit(1);
     }
-    const skillDir = join49(skillsRoot, skill);
-    if (!existsSync54(skillDir)) {
+    const skillDir = join51(skillsRoot, skill);
+    if (!existsSync56(skillDir)) {
       console.error(source_default.red(`Unknown skill: ${skill} (no dir at ${skillDir})`));
       process.exit(1);
     }
-    const requirementsPath = join49(skillDir, "requirements.txt");
-    const packageJsonPath = join49(skillDir, "package.json");
-    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync54(requirementsPath));
-    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync54(packageJsonPath));
+    const requirementsPath = join51(skillDir, "requirements.txt");
+    const packageJsonPath = join51(skillDir, "package.json");
+    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync56(requirementsPath));
+    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync56(packageJsonPath));
     let did = 0;
     if (wantPython) {
-      if (!existsSync54(requirementsPath)) {
+      if (!existsSync56(requirementsPath)) {
         console.error(source_default.red(`Skill "${skill}" has no requirements.txt at ${requirementsPath}`));
         process.exit(1);
       }
@@ -71007,7 +71295,7 @@ function registerDepsCommand(program3) {
       }
     }
     if (wantNode) {
-      if (!existsSync54(packageJsonPath)) {
+      if (!existsSync56(packageJsonPath)) {
         console.error(source_default.red(`Skill "${skill}" has no package.json at ${packageJsonPath}`));
         process.exit(1);
       }
@@ -71040,7 +71328,7 @@ function registerDepsCommand(program3) {
 // src/cli/workspace.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync55 } from "node:fs";
+import { existsSync as existsSync57 } from "node:fs";
 import { resolve as resolve35, sep as sep2 } from "node:path";
 import { spawnSync as spawnSync9 } from "node:child_process";
 
@@ -71817,7 +72105,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve35(dir, ".git");
-    if (!existsSync55(gitDir)) {
+    if (!existsSync57(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
       return;
@@ -71871,7 +72159,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve35(dir, ".git");
-    if (!existsSync55(gitDir)) {
+    if (!existsSync57(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
       return;
@@ -71896,7 +72184,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve35(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync55(dir)) {
+  if (!existsSync57(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
 `);
     return;
@@ -71932,8 +72220,8 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync10, existsSync as existsSync56, readFileSync as readFileSync50, writeFileSync as writeFileSync28 } from "node:fs";
-import { join as join50, resolve as resolve36 } from "node:path";
+import { copyFileSync as copyFileSync10, existsSync as existsSync58, readFileSync as readFileSync51, writeFileSync as writeFileSync28 } from "node:fs";
+import { join as join52, resolve as resolve36 } from "node:path";
 init_schema();
 function resolveSoulTargetOrExit(program3, agentName) {
   const config = getConfig(program3);
@@ -71948,7 +72236,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve36(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync56(workspaceDir)) {
+  if (!existsSync58(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
     process.exit(1);
   }
@@ -71957,7 +72245,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
     profileName,
     profilePath,
     workspaceDir,
-    soulPath: join50(workspaceDir, "SOUL.md"),
+    soulPath: join52(workspaceDir, "SOUL.md"),
     soul: merged.soul
   };
 }
@@ -71974,11 +72262,11 @@ function registerSoulCommand(program3) {
     const t = resolveSoulTargetOrExit(program3, agentName);
     if (!t)
       return;
-    if (!existsSync56(t.soulPath)) {
+    if (!existsSync58(t.soulPath)) {
       console.error(`soul: ${t.soulPath} does not exist yet \u2014 run ` + `\`switchroom soul reset ${agentName}\` to seed it.`);
       process.exit(1);
     }
-    process.stdout.write(readFileSync50(t.soulPath, "utf-8"));
+    process.stdout.write(readFileSync51(t.soulPath, "utf-8"));
   }));
   cmd.command("reset <agent>").description("Re-seed SOUL.md from the agent's current profile " + "(backs the existing file up to SOUL.md.bak first)").option("-y, --yes", "Skip the confirmation prompt").action(withConfigError(async (agentName, opts) => {
     const t = resolveSoulTargetOrExit(program3, agentName);
@@ -71989,7 +72277,7 @@ function registerSoulCommand(program3) {
       console.error(`soul: profile "${t.profileName}" ships no SOUL.md.hbs \u2014 ` + `nothing to re-seed from.`);
       process.exit(1);
     }
-    const exists = existsSync56(t.soulPath);
+    const exists = existsSync58(t.soulPath);
     if (exists && !opts.yes) {
       if (!isInteractive()) {
         console.error(`soul: ${t.soulPath} already exists. Re-run with --yes to ` + `replace it (the current file is backed up to SOUL.md.bak).`);
@@ -72004,7 +72292,7 @@ function registerSoulCommand(program3) {
     let backupPath;
     if (exists) {
       backupPath = `${t.soulPath}.bak`;
-      if (existsSync56(backupPath)) {
+      if (existsSync58(backupPath)) {
         backupPath = `${t.soulPath}.bak.${Date.now()}`;
       }
       copyFileSync10(t.soulPath, backupPath);
@@ -72023,9 +72311,9 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync57, readFileSync as readFileSync51, readdirSync as readdirSync19, statSync as statSync24 } from "node:fs";
-import { resolve as resolve37, join as join51 } from "node:path";
-import { createHash as createHash11 } from "node:crypto";
+import { existsSync as existsSync59, readFileSync as readFileSync52, readdirSync as readdirSync20, statSync as statSync25 } from "node:fs";
+import { resolve as resolve37, join as join53 } from "node:path";
+import { createHash as createHash12 } from "node:crypto";
 init_merge();
 init_hindsight();
 function formatBytes(bytes) {
@@ -72035,23 +72323,23 @@ function estimateTokens(bytes) {
   return Math.round(bytes / 4);
 }
 function sha256(content) {
-  return createHash11("sha256").update(content).digest("hex").slice(0, 16);
+  return createHash12("sha256").update(content).digest("hex").slice(0, 16);
 }
 function findLatestTranscriptJsonl(claudeConfigDir) {
-  const projectsDir = join51(claudeConfigDir, "projects");
-  if (!existsSync57(projectsDir))
+  const projectsDir = join53(claudeConfigDir, "projects");
+  if (!existsSync59(projectsDir))
     return;
   try {
-    const entries = readdirSync19(projectsDir, { withFileTypes: true });
+    const entries = readdirSync20(projectsDir, { withFileTypes: true });
     let latest;
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const projectPath = join51(projectsDir, entry.name);
-      const transcriptPath = join51(projectPath, "transcript.jsonl");
-      if (!existsSync57(transcriptPath))
+      const projectPath = join53(projectsDir, entry.name);
+      const transcriptPath = join53(projectPath, "transcript.jsonl");
+      if (!existsSync59(transcriptPath))
         continue;
-      const stat3 = statSync24(transcriptPath);
+      const stat3 = statSync25(transcriptPath);
       if (!latest || stat3.mtimeMs > latest.mtime) {
         latest = { path: transcriptPath, mtime: stat3.mtimeMs };
       }
@@ -72063,7 +72351,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
 }
 function extractLatestUserMessage(transcriptPath) {
   try {
-    const content = readFileSync51(transcriptPath, "utf-8");
+    const content = readFileSync52(transcriptPath, "utf-8");
     const lines = content.trim().split(`
 `).filter(Boolean);
     for (let i = lines.length - 1;i >= 0; i--) {
@@ -72112,16 +72400,16 @@ function registerDebugCommand(program3) {
     }
     const agentsDir = resolveAgentsDir(config);
     const agentDir = resolve37(agentsDir, agentName);
-    if (!existsSync57(agentDir)) {
+    if (!existsSync59(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
     }
     const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-    const claudeConfigDir = join51(agentDir, ".claude");
-    const claudeMdPath = join51(agentDir, "CLAUDE.md");
-    const soulMdPath = join51(agentDir, "SOUL.md");
-    const workspaceSoulMdPath = join51(workspaceDir, "SOUL.md");
-    const handoffPath = join51(agentDir, ".handoff.md");
+    const claudeConfigDir = join53(agentDir, ".claude");
+    const claudeMdPath = join53(agentDir, "CLAUDE.md");
+    const soulMdPath = join53(agentDir, "SOUL.md");
+    const workspaceSoulMdPath = join53(workspaceDir, "SOUL.md");
+    const handoffPath = join53(agentDir, ".handoff.md");
     const lastN = parseInt(opts.last, 10);
     if (isNaN(lastN) || lastN < 1) {
       console.error("--last must be a positive integer");
@@ -72167,7 +72455,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Append System Prompt (per-session) ===
 `);
-    const handoffContent = existsSync57(handoffPath) ? readFileSync51(handoffPath, "utf-8") : "";
+    const handoffContent = existsSync59(handoffPath) ? readFileSync52(handoffPath, "utf-8") : "";
     if (handoffContent.trim().length > 0) {
       console.log(`-- Handoff Briefing (${formatBytes(handoffContent.length)}) --`);
       console.log(handoffContent);
@@ -72178,7 +72466,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== CLAUDE.md (auto-loaded by Claude Code) ===
 `);
-    const claudeMdContent = existsSync57(claudeMdPath) ? readFileSync51(claudeMdPath, "utf-8") : "";
+    const claudeMdContent = existsSync59(claudeMdPath) ? readFileSync52(claudeMdPath, "utf-8") : "";
     if (claudeMdContent.trim().length > 0) {
       console.log(`(${formatBytes(claudeMdContent.length)})`);
       console.log(claudeMdContent);
@@ -72189,7 +72477,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Persona (SOUL.md) ===
 `);
-    const soulMdContent = existsSync57(soulMdPath) ? readFileSync51(soulMdPath, "utf-8") : existsSync57(workspaceSoulMdPath) ? readFileSync51(workspaceSoulMdPath, "utf-8") : "";
+    const soulMdContent = existsSync59(soulMdPath) ? readFileSync52(soulMdPath, "utf-8") : existsSync59(workspaceSoulMdPath) ? readFileSync52(workspaceSoulMdPath, "utf-8") : "";
     if (soulMdContent.trim().length > 0) {
       console.log(`(${formatBytes(soulMdContent.length)})`);
       console.log(soulMdContent);
@@ -72270,31 +72558,31 @@ init_source();
 
 // src/worktree/claim.ts
 import { execFileSync as execFileSync16 } from "node:child_process";
-import { closeSync as closeSync11, mkdirSync as mkdirSync32, openSync as openSync11, existsSync as existsSync59, unlinkSync as unlinkSync12 } from "node:fs";
-import { join as join53, resolve as resolve39 } from "node:path";
-import { homedir as homedir30 } from "node:os";
-import { randomBytes as randomBytes11 } from "node:crypto";
+import { closeSync as closeSync12, mkdirSync as mkdirSync33, openSync as openSync12, existsSync as existsSync61, unlinkSync as unlinkSync13 } from "node:fs";
+import { join as join55, resolve as resolve39 } from "node:path";
+import { homedir as homedir31 } from "node:os";
+import { randomBytes as randomBytes12 } from "node:crypto";
 
 // src/worktree/registry.ts
 import {
-  mkdirSync as mkdirSync31,
+  mkdirSync as mkdirSync32,
   writeFileSync as writeFileSync29,
-  readFileSync as readFileSync52,
-  readdirSync as readdirSync20,
-  unlinkSync as unlinkSync11,
-  existsSync as existsSync58,
-  renameSync as renameSync11
+  readFileSync as readFileSync53,
+  readdirSync as readdirSync21,
+  unlinkSync as unlinkSync12,
+  existsSync as existsSync60,
+  renameSync as renameSync12
 } from "node:fs";
-import { join as join52, resolve as resolve38 } from "node:path";
-import { homedir as homedir29 } from "node:os";
+import { join as join54, resolve as resolve38 } from "node:path";
+import { homedir as homedir30 } from "node:os";
 function registryDir() {
-  return resolve38(process.env.SWITCHROOM_WORKTREE_DIR ?? join52(homedir29(), ".switchroom", "worktrees"));
+  return resolve38(process.env.SWITCHROOM_WORKTREE_DIR ?? join54(homedir30(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join52(registryDir(), `${id}.json`);
+  return join54(registryDir(), `${id}.json`);
 }
 function ensureDir2() {
-  mkdirSync31(registryDir(), { recursive: true });
+  mkdirSync32(registryDir(), { recursive: true });
 }
 function writeRecord(record2) {
   ensureDir2();
@@ -72302,12 +72590,12 @@ function writeRecord(record2) {
   const tmp = `${target}.tmp${process.pid}`;
   writeFileSync29(tmp, JSON.stringify(record2, null, 2) + `
 `, { mode: 384 });
-  renameSync11(tmp, target);
+  renameSync12(tmp, target);
 }
 function readRecord(id) {
   const path7 = recordPath(id);
   try {
-    const raw = readFileSync52(path7, "utf8");
+    const raw = readFileSync53(path7, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -72316,14 +72604,14 @@ function readRecord(id) {
 function deleteRecord(id) {
   const path7 = recordPath(id);
   try {
-    unlinkSync11(path7);
+    unlinkSync12(path7);
   } catch {}
 }
 function listRecords() {
   ensureDir2();
   const dir = registryDir();
   const records = [];
-  for (const entry of readdirSync20(dir)) {
+  for (const entry of readdirSync21(dir)) {
     if (!entry.endsWith(".json"))
       continue;
     const id = entry.slice(0, -5);
@@ -72340,14 +72628,14 @@ function countByRepo(repoPath) {
 // src/worktree/claim.ts
 function acquireRepoLock(repoPath) {
   const lockDir = registryDir();
-  mkdirSync32(lockDir, { recursive: true });
+  mkdirSync33(lockDir, { recursive: true });
   const lockName = repoPath.replace(/[^A-Za-z0-9]/g, "_");
-  const lockPath = join53(lockDir, `.lock-${lockName}`);
+  const lockPath = join55(lockDir, `.lock-${lockName}`);
   const deadline = Date.now() + 5000;
   let fd = null;
   while (fd === null) {
     try {
-      fd = openSync11(lockPath, "wx");
+      fd = openSync12(lockPath, "wx");
     } catch (err) {
       if (err.code !== "EEXIST")
         throw err;
@@ -72360,19 +72648,19 @@ function acquireRepoLock(repoPath) {
   }
   return () => {
     try {
-      closeSync11(fd);
+      closeSync12(fd);
     } catch {}
     try {
-      unlinkSync12(lockPath);
+      unlinkSync13(lockPath);
     } catch {}
   };
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve39(process.env.SWITCHROOM_WORKTREE_BASE ?? join53(homedir30(), ".switchroom", "worktree-checkouts"));
+  return resolve39(process.env.SWITCHROOM_WORKTREE_BASE ?? join55(homedir31(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
-  return randomBytes11(4).toString("hex");
+  return randomBytes12(4).toString("hex");
 }
 function sanitizeTaskName(name) {
   return name.toLowerCase().replace(/[^a-z0-9_-]/g, "-").replace(/-{2,}/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
@@ -72391,12 +72679,12 @@ function resolveRepoPath(repo, codeRepos) {
 }
 function expandHome(p) {
   if (p.startsWith("~/"))
-    return join53(homedir30(), p.slice(2));
+    return join55(homedir31(), p.slice(2));
   return p;
 }
 async function claimWorktree(input, codeRepos) {
   const repoPath = resolveRepoPath(input.repo, codeRepos);
-  if (!existsSync59(repoPath)) {
+  if (!existsSync61(repoPath)) {
     throw new Error(`Repository path does not exist: ${repoPath}`);
   }
   let concurrencyCap = DEFAULT_CONCURRENCY;
@@ -72418,8 +72706,8 @@ async function claimWorktree(input, codeRepos) {
     const taskSuffix = input.taskName ? sanitizeTaskName(input.taskName) : "task";
     branch = `task/${taskSuffix}-${id}`;
     const baseDir = worktreesBaseDir();
-    mkdirSync32(baseDir, { recursive: true });
-    worktreePath = join53(baseDir, `${id}-${taskSuffix}`);
+    mkdirSync33(baseDir, { recursive: true });
+    worktreePath = join55(baseDir, `${id}-${taskSuffix}`);
     const now = new Date().toISOString();
     const record2 = {
       id,
@@ -72450,7 +72738,7 @@ async function claimWorktree(input, codeRepos) {
 
 // src/worktree/release.ts
 import { execFileSync as execFileSync17 } from "node:child_process";
-import { existsSync as existsSync60 } from "node:fs";
+import { existsSync as existsSync62 } from "node:fs";
 function releaseWorktree(input) {
   const { id } = input;
   const record2 = readRecord(id);
@@ -72458,7 +72746,7 @@ function releaseWorktree(input) {
     return { released: true };
   }
   let gitSuccess = true;
-  if (existsSync60(record2.path)) {
+  if (existsSync62(record2.path)) {
     try {
       execFileSync17("git", ["worktree", "remove", "--force", record2.path], {
         cwd: record2.repo,
@@ -72497,7 +72785,7 @@ function listWorktrees() {
 
 // src/worktree/reaper.ts
 import { execFileSync as execFileSync18 } from "node:child_process";
-import { existsSync as existsSync61 } from "node:fs";
+import { existsSync as existsSync63 } from "node:fs";
 var STALE_THRESHOLD_MS = 10 * 60 * 1000;
 function isPathInUse(path7) {
   try {
@@ -72524,7 +72812,7 @@ function hasUncommittedChanges(repoPath, worktreePath) {
 function reapRecord(record2) {
   const { id, path: path7, repo, branch, ownerAgent } = record2;
   let warning = null;
-  if (existsSync61(path7)) {
+  if (existsSync63(path7)) {
     if (hasUncommittedChanges(repo, path7)) {
       warning = `[worktree-reaper] Reaped worktree with uncommitted changes: ` + `id=${id} branch=${branch} agent=${ownerAgent ?? "unknown"} path=${path7}`;
     }
@@ -72545,7 +72833,7 @@ function runReaper(nowMs) {
   const warnings = [];
   for (const record2 of records) {
     const heartbeatAge = now - new Date(record2.heartbeatAt).getTime();
-    const worktreeExists = existsSync61(record2.path);
+    const worktreeExists = existsSync63(record2.path);
     if (!worktreeExists) {
       deleteRecord(record2.id);
       reaped.push(record2.id);
@@ -72669,12 +72957,12 @@ init_drive();
 init_scaffold_integration();
 import {
   chmodSync as chmodSync9,
-  mkdirSync as mkdirSync33,
-  readdirSync as readdirSync21,
+  mkdirSync as mkdirSync34,
+  readdirSync as readdirSync22,
   rmSync as rmSync15,
   writeFileSync as writeFileSync30
 } from "node:fs";
-import { join as join54 } from "node:path";
+import { join as join56 } from "node:path";
 function encodeCredentialsFilename(email) {
   const SAFE = new Set([
     ..."ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
@@ -72838,16 +73126,16 @@ function resolveCredentialsDir(env2) {
   if (explicit && explicit.length > 0)
     return explicit;
   const stateBase = env2.SWITCHROOM_CONTAINER === "1" ? "/state/agent" : env2.HOME ?? ".";
-  return join54(stateBase, "google-workspace-mcp", "credentials");
+  return join56(stateBase, "google-workspace-mcp", "credentials");
 }
 function writeSeedFile(dir, email, seed) {
-  mkdirSync33(dir, { recursive: true, mode: 448 });
+  mkdirSync34(dir, { recursive: true, mode: 448 });
   chmodSync9(dir, 448);
-  for (const name of readdirSync21(dir)) {
-    rmSync15(join54(dir, name), { force: true, recursive: true });
+  for (const name of readdirSync22(dir)) {
+    rmSync15(join56(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
-  const filePath = join54(dir, filename);
+  const filePath = join56(dir, filename);
   writeFileSync30(filePath, JSON.stringify(seed), { mode: 384 });
   chmodSync9(filePath, 384);
   return filePath;
@@ -73000,7 +73288,7 @@ function registerDriveMcpLauncherCommand(program3) {
 
 // src/cli/apply.ts
 init_source();
-import { accessSync as accessSync3, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync65, mkdirSync as mkdirSync35, readdirSync as readdirSync23, renameSync as renameSync12, writeFileSync as writeFileSync32 } from "node:fs";
+import { accessSync as accessSync3, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync67, mkdirSync as mkdirSync36, readdirSync as readdirSync24, renameSync as renameSync13, writeFileSync as writeFileSync32 } from "node:fs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
@@ -73345,16 +73633,16 @@ agents:
 
 // src/cli/apply.ts
 init_resolver();
-import { dirname as dirname19, join as join58, resolve as resolve41 } from "node:path";
-import { homedir as homedir32 } from "node:os";
+import { dirname as dirname19, join as join60, resolve as resolve41 } from "node:path";
+import { homedir as homedir33 } from "node:os";
 import { execFileSync as execFileSync19 } from "node:child_process";
 init_vault();
 init_loader();
 init_loader();
 
 // src/cli/update-prompt-hook.ts
-import { existsSync as existsSync62, readFileSync as readFileSync53, writeFileSync as writeFileSync31, chmodSync as chmodSync10, mkdirSync as mkdirSync34 } from "node:fs";
-import { join as join55 } from "node:path";
+import { existsSync as existsSync64, readFileSync as readFileSync54, writeFileSync as writeFileSync31, chmodSync as chmodSync10, mkdirSync as mkdirSync35 } from "node:fs";
+import { join as join57 } from "node:path";
 var HOOK_FILENAME = "update-card-on-prompt.sh";
 function updatePromptHookScript() {
   return `#!/bin/bash
@@ -73420,12 +73708,12 @@ exit 0
 `;
 }
 function installUpdatePromptHook(agentDir) {
-  const hooksDir = join55(agentDir, ".claude", "hooks");
-  mkdirSync34(hooksDir, { recursive: true });
-  const scriptPath = join55(hooksDir, HOOK_FILENAME);
+  const hooksDir = join57(agentDir, ".claude", "hooks");
+  mkdirSync35(hooksDir, { recursive: true });
+  const scriptPath = join57(hooksDir, HOOK_FILENAME);
   const desired = updatePromptHookScript();
   let installed = false;
-  const existing = existsSync62(scriptPath) ? readFileSync53(scriptPath, "utf-8") : "";
+  const existing = existsSync64(scriptPath) ? readFileSync54(scriptPath, "utf-8") : "";
   if (existing !== desired) {
     writeFileSync31(scriptPath, desired, { mode: 493 });
     chmodSync10(scriptPath, 493);
@@ -73435,11 +73723,11 @@ function installUpdatePromptHook(agentDir) {
       chmodSync10(scriptPath, 493);
     } catch {}
   }
-  const settingsPath = join55(agentDir, ".claude", "settings.json");
-  if (!existsSync62(settingsPath)) {
+  const settingsPath = join57(agentDir, ".claude", "settings.json");
+  if (!existsSync64(settingsPath)) {
     return { scriptPath, settingsPath, installed };
   }
-  const raw = readFileSync53(settingsPath, "utf-8");
+  const raw = readFileSync54(settingsPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -73555,13 +73843,13 @@ function detectInstallType() {
 // src/cli/operator-uid.ts
 import {
   chownSync as chownSync2,
-  existsSync as existsSync64,
+  existsSync as existsSync66,
   lstatSync as lstatSync7,
-  readdirSync as readdirSync22,
+  readdirSync as readdirSync23,
   realpathSync as realpathSync6,
-  statSync as statSync25
+  statSync as statSync26
 } from "node:fs";
-import { join as join57 } from "node:path";
+import { join as join59 } from "node:path";
 function resolveOperatorUid() {
   const sudoUid = process.env.SUDO_UID;
   if (sudoUid !== undefined) {
@@ -73577,19 +73865,19 @@ function resolveOperatorUid() {
   return;
 }
 function operatorOwnedPaths(home2) {
-  const root = join57(home2, ".switchroom");
+  const root = join59(home2, ".switchroom");
   return [
-    join57(root, "vault"),
-    join57(root, "vault-auto-unlock"),
-    join57(root, "vault-audit.log"),
-    join57(root, "host-control-audit.log"),
-    join57(root, "accounts"),
-    join57(root, "compose")
+    join59(root, "vault"),
+    join59(root, "vault-auto-unlock"),
+    join59(root, "vault-audit.log"),
+    join59(root, "host-control-audit.log"),
+    join59(root, "accounts"),
+    join59(root, "compose")
   ];
 }
 function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
   const chown = deps.chown ?? ((p, u, g) => chownSync2(p, u, g));
-  const exists = deps.exists ?? ((p) => existsSync64(p));
+  const exists = deps.exists ?? ((p) => existsSync66(p));
   const isSymlink = deps.isSymlink ?? ((p) => {
     try {
       return lstatSync7(p).isSymbolicLink();
@@ -73599,7 +73887,7 @@ function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
   });
   const isDir = deps.isDir ?? ((p) => {
     try {
-      return statSync25(p).isDirectory();
+      return statSync26(p).isDirectory();
     } catch {
       return false;
     }
@@ -73613,7 +73901,7 @@ function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
   });
   const readdir2 = deps.readdir ?? ((p) => {
     try {
-      return readdirSync22(p);
+      return readdirSync23(p);
     } catch {
       return [];
     }
@@ -73633,7 +73921,7 @@ function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
     } catch {}
     if (isDir(target)) {
       for (const entry of readdir2(target)) {
-        visit(join57(target, entry));
+        visit(join59(target, entry));
       }
     }
   };
@@ -73647,19 +73935,19 @@ var EMBEDDED_EXAMPLES = {
   switchroom: switchroom_default,
   minimal: minimal_default
 };
-var DEFAULT_COMPOSE_PATH2 = join58(homedir32(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH2 = join60(homedir33(), ".switchroom", "compose", "docker-compose.yml");
 var COMPOSE_PROJECT2 = "switchroom";
 function resolveVaultBindMountDir(homeDir, ctx) {
   const isCustomPath = ctx.migrationKind === "custom-path-skipped";
   if (isCustomPath && ctx.customVaultPath) {
     return dirname19(ctx.customVaultPath);
   }
-  return join58(homeDir, ".switchroom", "vault");
+  return join60(homeDir, ".switchroom", "vault");
 }
 function inspectVaultBindMountDir(vaultDir) {
-  if (!existsSync65(vaultDir))
+  if (!existsSync67(vaultDir))
     return { kind: "missing" };
-  const entries = readdirSync23(vaultDir);
+  const entries = readdirSync24(vaultDir);
   const unknown = [];
   for (const name of entries) {
     if (KNOWN_VAULT_ARTIFACT_NAMES.has(name))
@@ -73683,32 +73971,32 @@ function hasVaultRefs(value) {
   return false;
 }
 async function ensureHostMountSources(config) {
-  const home2 = homedir32();
+  const home2 = homedir33();
   const dirs = [
-    join58(home2, ".switchroom", "approvals"),
-    join58(home2, ".switchroom", "scheduler"),
-    join58(home2, ".switchroom", "logs"),
-    join58(home2, ".switchroom", "compose"),
-    join58(home2, ".switchroom", "broker-operator")
+    join60(home2, ".switchroom", "approvals"),
+    join60(home2, ".switchroom", "scheduler"),
+    join60(home2, ".switchroom", "logs"),
+    join60(home2, ".switchroom", "compose"),
+    join60(home2, ".switchroom", "broker-operator")
   ];
   for (const name of Object.keys(config.agents)) {
-    dirs.push(join58(home2, ".switchroom", "agents", name));
-    dirs.push(join58(home2, ".switchroom", "logs", name));
-    dirs.push(join58(home2, ".claude", "projects", name));
+    dirs.push(join60(home2, ".switchroom", "agents", name));
+    dirs.push(join60(home2, ".switchroom", "logs", name));
+    dirs.push(join60(home2, ".claude", "projects", name));
   }
   for (const dir of dirs) {
     await mkdir(dir, { recursive: true });
   }
-  const autoUnlockPath = join58(home2, ".switchroom", "vault-auto-unlock");
-  if (!existsSync65(autoUnlockPath)) {
+  const autoUnlockPath = join60(home2, ".switchroom", "vault-auto-unlock");
+  if (!existsSync67(autoUnlockPath)) {
     writeFileSync32(autoUnlockPath, "", { mode: 384 });
   }
-  const auditLogPath = join58(home2, ".switchroom", "vault-audit.log");
-  if (!existsSync65(auditLogPath)) {
+  const auditLogPath = join60(home2, ".switchroom", "vault-audit.log");
+  if (!existsSync67(auditLogPath)) {
     writeFileSync32(auditLogPath, "", { mode: 420 });
   }
-  const hostdAuditLogPath = join58(home2, ".switchroom", "host-control-audit.log");
-  if (!existsSync65(hostdAuditLogPath)) {
+  const hostdAuditLogPath = join60(home2, ".switchroom", "host-control-audit.log");
+  if (!existsSync67(hostdAuditLogPath)) {
     writeFileSync32(hostdAuditLogPath, "", { mode: 420 });
   }
 }
@@ -73729,7 +74017,7 @@ ${out.trim()}`;
 }
 function runApplyPreflight(config, opts = {}) {
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (hasVaultRefs(config) && !existsSync65(vaultPath)) {
+  if (hasVaultRefs(config) && !existsSync67(vaultPath)) {
     throw new Error(`Config references vault keys (vault:<name>) but ${vaultPath} is missing. ` + `Run \`switchroom setup\` first to initialise the vault.`);
   }
   const detect = opts.detectComposeV2 ?? detectComposeV2;
@@ -73740,7 +74028,7 @@ function runApplyPreflight(config, opts = {}) {
   detectAndReportLegacyGdriveSlots(vaultPath);
 }
 function detectAndReportLegacyGdriveSlots(vaultPath) {
-  if (!existsSync65(vaultPath))
+  if (!existsSync67(vaultPath))
     return;
   const passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase)
@@ -73779,19 +74067,19 @@ function detectAndReportLegacyGdriveSlots(vaultPath) {
 `));
   }
 }
-function writeInstallTypeCache(homeDir = homedir32()) {
+function writeInstallTypeCache(homeDir = homedir33()) {
   const ctx = detectInstallType();
-  const dir = join58(homeDir, ".switchroom");
-  const out = join58(dir, "install-type.json");
+  const dir = join60(homeDir, ".switchroom");
+  const out = join60(dir, "install-type.json");
   const tmp = `${out}.tmp`;
-  mkdirSync35(dir, { recursive: true });
+  mkdirSync36(dir, { recursive: true });
   const payload = {
     install_type: ctx.install_type,
     detected_at: new Date().toISOString(),
     source_paths: ctx.source_paths
   };
   writeFileSync32(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
-  renameSync12(tmp, out);
+  renameSync13(tmp, out);
   return out;
 }
 async function runApply(config, options, deps = {}, switchroomConfigPath) {
@@ -73831,14 +74119,14 @@ Applying switchroom config...
       writeOut(source_default.green(`  + ${name}`) + source_default.gray(` (${agentConfig.extends ?? "default"}) \u2014 ${detail}
 `));
       try {
-        installUpdatePromptHook(join58(agentsDir, name));
+        installUpdatePromptHook(join60(agentsDir, name));
       } catch (hookErr) {
         writeOut(source_default.gray(`    (update-prompt hook install failed for ${name}: ${hookErr.message})
 `));
       }
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join58(agentsDir, name), uid, {
+        alignAgentUid(name, join60(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -73875,7 +74163,7 @@ Applying switchroom config...
     for (const name of agentNames) {
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join58(agentsDir, name), uid, {
+        alignAgentUid(name, join60(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -73889,7 +74177,7 @@ Applying switchroom config...
   }
   const vaultPathConfigured = config.vault?.path;
   const customVaultPath = vaultPathConfigured ? resolvePath(vaultPathConfigured) : undefined;
-  const migrationResult = migrateVaultLayout(homedir32(), {
+  const migrationResult = migrateVaultLayout(homedir33(), {
     customVaultPath
   });
   switch (migrationResult.kind) {
@@ -73915,7 +74203,7 @@ Applying switchroom config...
       writeErr(formatDivergentRecoveryMessage(migrationResult.details));
       process.exit(4);
   }
-  const postMigrationInspect = inspectVaultLayout(homedir32());
+  const postMigrationInspect = inspectVaultLayout(homedir33());
   const acceptable = [
     "no-vault",
     "already-migrated",
@@ -73930,7 +74218,7 @@ Applying switchroom config...
 `));
     process.exit(5);
   }
-  const vaultDir = resolveVaultBindMountDir(homedir32(), {
+  const vaultDir = resolveVaultBindMountDir(homedir33(), {
     migrationKind: migrationResult.kind,
     customVaultPath
   });
@@ -73960,7 +74248,7 @@ Applying switchroom config...
     imageTag: composeImageTag,
     buildMode: options.buildLocal ? "local" : "pull",
     buildContext: options.buildContext,
-    homeDir: homedir32(),
+    homeDir: homedir33(),
     switchroomConfigPath,
     operatorUid
   });
@@ -73980,7 +74268,7 @@ Wrote `) + composePath + source_default.gray(` (${composeBytes} bytes)
   writeOut(source_default.gray(`  (If pull returns 401, login to ghcr.io first: see docs/operators/install.md#ghcr-auth)
 `));
   if (process.geteuid?.() === 0 && operatorUid !== undefined) {
-    const restored = restoreOperatorOwnership(homedir32(), operatorUid);
+    const restored = restoreOperatorOwnership(homedir33(), operatorUid);
     if (restored.length > 0) {
       writeOut(source_default.gray(`  Restored operator ownership of ${restored.length} ~/.switchroom path(s)
 `));
@@ -74028,7 +74316,7 @@ function copyExampleConfig2(name) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
   const dest = resolve41(process.cwd(), "switchroom.yaml");
-  if (existsSync65(dest)) {
+  if (existsSync67(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
   }
@@ -74039,7 +74327,7 @@ function copyExampleConfig2(name) {
     return;
   }
   const exampleFile = resolve41(import.meta.dirname, `../../examples/${name}.yaml`);
-  if (!existsSync65(exampleFile)) {
+  if (!existsSync67(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
   copyFileSync11(exampleFile, dest);
@@ -74050,8 +74338,8 @@ function findUnwritableAgentDirs(config, opts) {
   const targets = opts.only ? [opts.only] : Object.keys(config.agents ?? {});
   const unwritable = [];
   for (const name of targets) {
-    const startSh = join58(agentsDir, name, "start.sh");
-    if (!existsSync65(startSh))
+    const startSh = join60(agentsDir, name, "start.sh");
+    if (!existsSync67(startSh))
       continue;
     try {
       accessSync3(startSh, fsConstants6.W_OK);
@@ -74229,9 +74517,9 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync54, existsSync as existsSync66, readdirSync as readdirSync24 } from "node:fs";
-import { join as join59 } from "node:path";
-import { homedir as homedir33 } from "node:os";
+import { readFileSync as readFileSync55, existsSync as existsSync68, readdirSync as readdirSync25 } from "node:fs";
+import { join as join61 } from "node:path";
+import { homedir as homedir34 } from "node:os";
 
 // src/status-ask/report.ts
 function parseJsonl(content) {
@@ -74505,7 +74793,7 @@ function runReport(opts) {
   for (const src of sources) {
     let content;
     try {
-      content = readFileSync54(src.path, "utf-8");
+      content = readFileSync55(src.path, "utf-8");
     } catch (err) {
       process.stderr.write(`status-ask report: cannot read ${src.path}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -74552,7 +74840,7 @@ function runReport(opts) {
 function resolveSources(explicitPath) {
   if (explicitPath != null && explicitPath.trim() !== "") {
     const trimmed = explicitPath.trim();
-    if (!existsSync66(trimmed)) {
+    if (!existsSync68(trimmed)) {
       process.stderr.write(`status-ask report: ${trimmed}: file not found
 `);
       process.exit(1);
@@ -74566,20 +74854,20 @@ function resolveSources(explicitPath) {
     const config = loadConfig();
     agentsDir = resolveAgentsDir(config);
   } catch {
-    agentsDir = join59(homedir33(), ".switchroom", "agents");
+    agentsDir = join61(homedir34(), ".switchroom", "agents");
   }
-  if (!existsSync66(agentsDir))
+  if (!existsSync68(agentsDir))
     return [];
   const sources = [];
   let entries;
   try {
-    entries = readdirSync24(agentsDir);
+    entries = readdirSync25(agentsDir);
   } catch {
     return [];
   }
   for (const name of entries) {
-    const path8 = join59(agentsDir, name, "runtime-metrics.jsonl");
-    if (existsSync66(path8)) {
+    const path8 = join61(agentsDir, name, "runtime-metrics.jsonl");
+    if (existsSync68(path8)) {
       sources.push({ path: path8, agent: name });
     }
   }
@@ -74600,17 +74888,17 @@ function inferAgentFromPath(p) {
 
 // src/cli/agent-config.ts
 init_helpers();
-import { join as join60 } from "node:path";
-import { homedir as homedir34 } from "node:os";
+import { join as join62 } from "node:path";
+import { homedir as homedir35 } from "node:os";
 import {
-  existsSync as existsSync67,
-  mkdirSync as mkdirSync36,
-  appendFileSync as appendFileSync3,
-  readFileSync as readFileSync55
+  existsSync as existsSync69,
+  mkdirSync as mkdirSync37,
+  appendFileSync as appendFileSync4,
+  readFileSync as readFileSync56
 } from "node:fs";
-var AUDIT_ROOT = join60(homedir34(), ".switchroom", "audit");
+var AUDIT_ROOT = join62(homedir35(), ".switchroom", "audit");
 function auditPathFor(agent) {
-  return join60(AUDIT_ROOT, agent, "agent-config.jsonl");
+  return join62(AUDIT_ROOT, agent, "agent-config.jsonl");
 }
 function appendAudit(agent, cmd, args, exit, opts = {}) {
   const row = {
@@ -74624,10 +74912,10 @@ function appendAudit(agent, cmd, args, exit, opts = {}) {
   const path8 = opts.auditPath ?? auditPathFor(agent);
   const dir = path8.slice(0, path8.lastIndexOf("/"));
   try {
-    if (!existsSync67(dir)) {
-      mkdirSync36(dir, { recursive: true });
+    if (!existsSync69(dir)) {
+      mkdirSync37(dir, { recursive: true });
     }
-    appendFileSync3(path8, JSON.stringify(row) + `
+    appendFileSync4(path8, JSON.stringify(row) + `
 `, { flag: "a" });
   } catch {}
 }
@@ -74636,7 +74924,7 @@ function isContainerContext(env2 = process.env, opts = {}) {
     return true;
   const probe2 = opts.dockerEnvPath ?? "/.dockerenv";
   try {
-    if (existsSync67(probe2))
+    if (existsSync69(probe2))
       return true;
   } catch {}
   return false;
@@ -74697,11 +74985,11 @@ function getAgentSlice(config, agent) {
 }
 function readAuditTail(agent, limit, opts = {}) {
   const path8 = opts.auditPath ?? auditPathFor(agent);
-  if (!existsSync67(path8))
+  if (!existsSync69(path8))
     return [];
   let raw;
   try {
-    raw = readFileSync55(path8, "utf-8");
+    raw = readFileSync56(path8, "utf-8");
   } catch {
     return [];
   }
@@ -74856,61 +75144,61 @@ var import_yaml14 = __toESM(require_dist(), 1);
 // src/config/overlay-writer.ts
 init_paths();
 import {
-  closeSync as closeSync12,
-  existsSync as existsSync68,
-  fsyncSync as fsyncSync5,
-  mkdirSync as mkdirSync37,
-  openSync as openSync12,
-  readdirSync as readdirSync25,
-  readFileSync as readFileSync56,
-  renameSync as renameSync13,
-  statSync as statSync26,
-  unlinkSync as unlinkSync13,
-  writeSync as writeSync7
+  closeSync as closeSync13,
+  existsSync as existsSync70,
+  fsyncSync as fsyncSync6,
+  mkdirSync as mkdirSync38,
+  openSync as openSync13,
+  readdirSync as readdirSync26,
+  readFileSync as readFileSync57,
+  renameSync as renameSync14,
+  statSync as statSync27,
+  unlinkSync as unlinkSync14,
+  writeSync as writeSync8
 } from "node:fs";
-import { join as join61, resolve as resolve42 } from "node:path";
+import { join as join63, resolve as resolve42 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
   const base = opts.root ? resolve42(opts.root, agent) : resolve42(resolveDualPath(`~/.switchroom/agents/${agent}`));
-  const scheduleDir = join61(base, "schedule.d");
-  const scheduleStagingDir = join61(scheduleDir, STAGING_SUBDIR);
-  const skillsDir = join61(base, "skills.d");
-  const skillsStagingDir = join61(skillsDir, STAGING_SUBDIR);
+  const scheduleDir = join63(base, "schedule.d");
+  const scheduleStagingDir = join63(scheduleDir, STAGING_SUBDIR);
+  const skillsDir = join63(base, "skills.d");
+  const skillsStagingDir = join63(skillsDir, STAGING_SUBDIR);
   return {
     agentRoot: base,
     scheduleDir,
     scheduleStagingDir,
     skillsDir,
     skillsStagingDir,
-    lockPath: join61(base, ".lock"),
+    lockPath: join63(base, ".lock"),
     stagingDir: scheduleStagingDir
   };
 }
 function ensureDirs(paths) {
-  mkdirSync37(paths.scheduleDir, { recursive: true });
-  mkdirSync37(paths.scheduleStagingDir, { recursive: true });
+  mkdirSync38(paths.scheduleDir, { recursive: true });
+  mkdirSync38(paths.scheduleStagingDir, { recursive: true });
 }
 function ensureSkillsDirs(paths) {
-  mkdirSync37(paths.skillsDir, { recursive: true });
-  mkdirSync37(paths.skillsStagingDir, { recursive: true });
+  mkdirSync38(paths.skillsDir, { recursive: true });
+  mkdirSync38(paths.skillsStagingDir, { recursive: true });
 }
 function withAgentLock(paths, fn) {
-  mkdirSync37(paths.agentRoot, { recursive: true });
+  mkdirSync38(paths.agentRoot, { recursive: true });
   const start = Date.now();
   const TIMEOUT_MS = 5000;
   let fd = null;
   while (Date.now() - start < TIMEOUT_MS) {
     try {
-      fd = openSync12(paths.lockPath, "wx");
+      fd = openSync13(paths.lockPath, "wx");
       break;
     } catch (err) {
       const e = err;
       if (e.code !== "EEXIST")
         throw err;
       try {
-        const age = Date.now() - statSync26(paths.lockPath).mtimeMs;
+        const age = Date.now() - statSync27(paths.lockPath).mtimeMs;
         if (age > 30000) {
-          unlinkSync13(paths.lockPath);
+          unlinkSync14(paths.lockPath);
           continue;
         }
       } catch {}
@@ -74925,10 +75213,10 @@ function withAgentLock(paths, fn) {
     return fn();
   } finally {
     try {
-      closeSync12(fd);
+      closeSync13(fd);
     } catch {}
     try {
-      unlinkSync13(paths.lockPath);
+      unlinkSync14(paths.lockPath);
     } catch {}
   }
 }
@@ -74936,16 +75224,16 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureDirs(paths);
-    const stagingPath = join61(paths.scheduleStagingDir, `${slug}.yaml`);
-    const finalPath = join61(paths.scheduleDir, `${slug}.yaml`);
-    const fd = openSync12(stagingPath, "w", 384);
+    const stagingPath = join63(paths.scheduleStagingDir, `${slug}.yaml`);
+    const finalPath = join63(paths.scheduleDir, `${slug}.yaml`);
+    const fd = openSync13(stagingPath, "w", 384);
     try {
-      writeSync7(fd, yamlText);
-      fsyncSync5(fd);
+      writeSync8(fd, yamlText);
+      fsyncSync6(fd);
     } finally {
-      closeSync12(fd);
+      closeSync13(fd);
     }
-    renameSync13(stagingPath, finalPath);
+    renameSync14(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -74953,40 +75241,40 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureSkillsDirs(paths);
-    const stagingPath = join61(paths.skillsStagingDir, `${slug}.yaml`);
-    const finalPath = join61(paths.skillsDir, `${slug}.yaml`);
-    const fd = openSync12(stagingPath, "w", 384);
+    const stagingPath = join63(paths.skillsStagingDir, `${slug}.yaml`);
+    const finalPath = join63(paths.skillsDir, `${slug}.yaml`);
+    const fd = openSync13(stagingPath, "w", 384);
     try {
-      writeSync7(fd, yamlText);
-      fsyncSync5(fd);
+      writeSync8(fd, yamlText);
+      fsyncSync6(fd);
     } finally {
-      closeSync12(fd);
+      closeSync13(fd);
     }
-    renameSync13(stagingPath, finalPath);
+    renameSync14(stagingPath, finalPath);
     return finalPath;
   });
 }
 function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join61(paths.skillsDir, `${slug}.yaml`);
-    if (!existsSync68(finalPath))
+    const finalPath = join63(paths.skillsDir, `${slug}.yaml`);
+    if (!existsSync70(finalPath))
       return false;
-    unlinkSync13(finalPath);
+    unlinkSync14(finalPath);
     return true;
   });
 }
 function listSkillsOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync68(paths.skillsDir))
+  if (!existsSync70(paths.skillsDir))
     return [];
   const out = [];
-  for (const name of readdirSync25(paths.skillsDir)) {
+  for (const name of readdirSync26(paths.skillsDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join61(paths.skillsDir, name);
+    const full = join63(paths.skillsDir, name);
     try {
-      const raw = readFileSync56(full, "utf-8");
+      const raw = readFileSync57(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -74996,24 +75284,24 @@ function listSkillsOverlayEntries(agent, opts = {}) {
 function deleteOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join61(paths.scheduleDir, `${slug}.yaml`);
-    if (!existsSync68(finalPath))
+    const finalPath = join63(paths.scheduleDir, `${slug}.yaml`);
+    if (!existsSync70(finalPath))
       return false;
-    unlinkSync13(finalPath);
+    unlinkSync14(finalPath);
     return true;
   });
 }
 function listOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync68(paths.scheduleDir))
+  if (!existsSync70(paths.scheduleDir))
     return [];
   const out = [];
-  for (const name of readdirSync25(paths.scheduleDir)) {
+  for (const name of readdirSync26(paths.scheduleDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join61(paths.scheduleDir, name);
+    const full = join63(paths.scheduleDir, name);
     try {
-      const raw = readFileSync56(full, "utf-8");
+      const raw = readFileSync57(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -75155,38 +75443,38 @@ function reconcileAgentCronOnly(agent) {
 
 // src/cli/agent-config-pending.ts
 import {
-  closeSync as closeSync13,
-  existsSync as existsSync69,
-  fsyncSync as fsyncSync6,
-  mkdirSync as mkdirSync38,
-  openSync as openSync13,
-  readdirSync as readdirSync26,
-  readFileSync as readFileSync57,
-  renameSync as renameSync14,
-  unlinkSync as unlinkSync14,
+  closeSync as closeSync14,
+  existsSync as existsSync71,
+  fsyncSync as fsyncSync7,
+  mkdirSync as mkdirSync39,
+  openSync as openSync14,
+  readdirSync as readdirSync27,
+  readFileSync as readFileSync58,
+  renameSync as renameSync15,
+  unlinkSync as unlinkSync15,
   writeFileSync as writeFileSync33,
-  writeSync as writeSync8
+  writeSync as writeSync9
 } from "node:fs";
-import { join as join62 } from "node:path";
-import { randomBytes as randomBytes12 } from "node:crypto";
+import { join as join64 } from "node:path";
+import { randomBytes as randomBytes13 } from "node:crypto";
 var STAGE_ID_PREFIX = "cap_";
 function pendingDir(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  return join62(paths.scheduleDir, ".pending");
+  return join64(paths.scheduleDir, ".pending");
 }
 function ensurePendingDir(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  mkdirSync38(dir, { recursive: true });
+  mkdirSync39(dir, { recursive: true });
   return dir;
 }
 function newStageId() {
-  return `${STAGE_ID_PREFIX}${randomBytes12(4).toString("hex")}`;
+  return `${STAGE_ID_PREFIX}${randomBytes13(4).toString("hex")}`;
 }
 function stagePendingScheduleEntry(opts) {
   const dir = ensurePendingDir(opts.agent, { root: opts.root });
   const stageId = opts.stageId ?? newStageId();
-  const yamlPath = join62(dir, `${stageId}.yaml`);
-  const metaPath = join62(dir, `${stageId}.meta.json`);
+  const yamlPath = join64(dir, `${stageId}.yaml`);
+  const metaPath = join64(dir, `${stageId}.meta.json`);
   const meta = {
     v: 1,
     stage_id: stageId,
@@ -75198,14 +75486,14 @@ function stagePendingScheduleEntry(opts) {
   };
   const yamlTmp = `${yamlPath}.tmp-${process.pid}`;
   {
-    const fd = openSync13(yamlTmp, "w", 384);
+    const fd = openSync14(yamlTmp, "w", 384);
     try {
-      writeSync8(fd, opts.yamlText);
-      fsyncSync6(fd);
+      writeSync9(fd, opts.yamlText);
+      fsyncSync7(fd);
     } finally {
-      closeSync13(fd);
+      closeSync14(fd);
     }
-    renameSync14(yamlTmp, yamlPath);
+    renameSync15(yamlTmp, yamlPath);
   }
   writeFileSync33(metaPath, JSON.stringify(meta, null, 2) + `
 `, { mode: 384 });
@@ -75213,19 +75501,19 @@ function stagePendingScheduleEntry(opts) {
 }
 function listPendingScheduleEntries(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  if (!existsSync69(dir))
+  if (!existsSync71(dir))
     return [];
   const out = [];
-  for (const name of readdirSync26(dir).sort()) {
+  for (const name of readdirSync27(dir).sort()) {
     if (!name.endsWith(".meta.json"))
       continue;
     const stageId = name.slice(0, -".meta.json".length);
-    const metaPath = join62(dir, name);
-    const yamlPath = join62(dir, `${stageId}.yaml`);
-    if (!existsSync69(yamlPath))
+    const metaPath = join64(dir, name);
+    const yamlPath = join64(dir, `${stageId}.yaml`);
+    if (!existsSync71(yamlPath))
       continue;
     try {
-      const meta = JSON.parse(readFileSync57(metaPath, "utf-8"));
+      const meta = JSON.parse(readFileSync58(metaPath, "utf-8"));
       if (meta?.v !== 1 || typeof meta.stage_id !== "string")
         continue;
       out.push({ stageId: meta.stage_id, agent: meta.agent, yamlPath, metaPath, meta });
@@ -75240,12 +75528,12 @@ function commitPendingScheduleEntry(opts) {
     return { committed: false, reason: "not_found" };
   const slug = match.meta.entry.name ?? match.stageId;
   const paths = overlayPathsFor(opts.agent, { root: opts.root });
-  const finalPath = join62(paths.scheduleDir, `${slug}.yaml`);
-  if (existsSync69(finalPath)) {
+  const finalPath = join64(paths.scheduleDir, `${slug}.yaml`);
+  if (existsSync71(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
-  renameSync14(match.yamlPath, finalPath);
-  unlinkSync14(match.metaPath);
+  renameSync15(match.yamlPath, finalPath);
+  unlinkSync15(match.metaPath);
   return { committed: true, path: finalPath, slug };
 }
 function denyPendingScheduleEntry(opts) {
@@ -75254,16 +75542,16 @@ function denyPendingScheduleEntry(opts) {
   if (!match)
     return { denied: false, reason: "not_found" };
   try {
-    unlinkSync14(match.yamlPath);
+    unlinkSync15(match.yamlPath);
   } catch {}
   try {
-    unlinkSync14(match.metaPath);
+    unlinkSync15(match.metaPath);
   } catch {}
   return { denied: true };
 }
 
 // src/cli/agent-config-write.ts
-import { existsSync as existsSync70, readFileSync as readFileSync58 } from "node:fs";
+import { existsSync as existsSync72, readFileSync as readFileSync59 } from "node:fs";
 var MAX_ENTRIES_PER_AGENT = 20;
 function checkOperatorContext(verb, env2 = process.env) {
   if (env2.SWITCHROOM_OPERATOR === "1")
@@ -75497,8 +75785,8 @@ function scheduleRemove(opts) {
   }
   let priorContent = null;
   try {
-    if (existsSync70(match.path))
-      priorContent = readFileSync58(match.path, "utf-8");
+    if (existsSync72(match.path))
+      priorContent = readFileSync59(match.path, "utf-8");
   } catch {}
   deleteOverlayEntry(agent, match.slug, { root: opts.root });
   const reconcileFn = opts.reconcile === undefined ? opts.root ? null : reconcileAgentCronOnly : opts.reconcile;
@@ -75690,10 +75978,10 @@ function registerAgentConfigWriteCommands(program3) {
 
 // src/cli/agent-config-skill-write.ts
 var import_yaml15 = __toESM(require_dist(), 1);
-import { existsSync as existsSync71 } from "node:fs";
+import { existsSync as existsSync73 } from "node:fs";
 init_reconcile_default_skills();
 var import_yaml16 = __toESM(require_dist(), 1);
-import { join as join63 } from "node:path";
+import { join as join65 } from "node:path";
 var MAX_SKILLS_PER_AGENT = 20;
 var V1_ALLOWED_SOURCE_PREFIX = "bundled:";
 function exitCodeFor2(code) {
@@ -75768,8 +76056,8 @@ function skillInstall(opts) {
     return err("E_SKILL_QUOTA_EXCEEDED", `agent ${agent} already has ${used} overlay-installed skills (cap ${MAX_SKILLS_PER_AGENT})`);
   }
   const poolDir = opts.bundledSkillsPoolDir ?? getBundledSkillsPoolDir();
-  const skillPath = join63(poolDir, skillName);
-  if (!existsSync71(skillPath)) {
+  const skillPath = join65(poolDir, skillName);
+  if (!existsSync73(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
   const yamlText = import_yaml15.stringify({ skills: [skillName] });
@@ -75953,27 +76241,27 @@ init_source();
 init_helpers();
 init_loader();
 import {
-  existsSync as existsSync73,
-  readdirSync as readdirSync27,
-  readFileSync as readFileSync60,
-  renameSync as renameSync15,
-  statSync as statSync27,
-  unlinkSync as unlinkSync15
+  existsSync as existsSync75,
+  readdirSync as readdirSync28,
+  readFileSync as readFileSync61,
+  renameSync as renameSync16,
+  statSync as statSync28,
+  unlinkSync as unlinkSync16
 } from "node:fs";
-import { createHash as createHash12 } from "node:crypto";
-import { join as join64 } from "node:path";
+import { createHash as createHash13 } from "node:crypto";
+import { join as join66 } from "node:path";
 function planCronUnitRenames(agentsDir, agents) {
   const plans = [];
   for (const [agentName, agentConfig] of Object.entries(agents)) {
     const schedule = agentConfig.schedule ?? [];
     if (schedule.length === 0)
       continue;
-    const telegramDir = join64(agentsDir, agentName, "telegram");
-    if (!existsSync73(telegramDir))
+    const telegramDir = join66(agentsDir, agentName, "telegram");
+    if (!existsSync75(telegramDir))
       continue;
     let entries;
     try {
-      entries = readdirSync27(telegramDir);
+      entries = readdirSync28(telegramDir);
     } catch {
       continue;
     }
@@ -75990,8 +76278,8 @@ function planCronUnitRenames(agentsDir, agents) {
         continue;
       plans.push({
         agent: agentName,
-        from: join64(telegramDir, file),
-        to: join64(telegramDir, canonical),
+        from: join66(telegramDir, file),
+        to: join66(telegramDir, canonical),
         scheduleIdx: idx,
         entry
       });
@@ -76000,10 +76288,10 @@ function planCronUnitRenames(agentsDir, agents) {
   return plans;
 }
 function sha256File2(path8) {
-  return createHash12("sha256").update(readFileSync60(path8)).digest("hex");
+  return createHash13("sha256").update(readFileSync61(path8)).digest("hex");
 }
 function renamePair(from, to, opts = {}) {
-  if (existsSync73(to)) {
+  if (existsSync75(to)) {
     let identical = false;
     try {
       identical = sha256File2(from) === sha256File2(to);
@@ -76013,7 +76301,7 @@ function renamePair(from, to, opts = {}) {
     if (identical) {
       if (!opts.dryRun) {
         try {
-          unlinkSync15(from);
+          unlinkSync16(from);
         } catch {}
       }
       return { kind: "deduped", legacy: from };
@@ -76021,13 +76309,13 @@ function renamePair(from, to, opts = {}) {
     return { kind: "skipped", reason: "target exists, legacy preserved", legacy: from };
   }
   if (!opts.dryRun)
-    renameSync15(from, to);
+    renameSync16(from, to);
   return { kind: "renamed" };
 }
 function extractPromptFromLegacyScript(path8) {
   let body;
   try {
-    body = readFileSync60(path8, "utf-8");
+    body = readFileSync61(path8, "utf-8");
   } catch {
     return null;
   }
@@ -76096,7 +76384,7 @@ function registerMigrateCommand(program3) {
         const fromSidecar = p.from.replace(/\.sh$/, ".source");
         const toSidecar = p.to.replace(/\.sh$/, ".source");
         let sidecarStatus = null;
-        if (existsSync73(fromSidecar) && statSync27(fromSidecar).isFile()) {
+        if (existsSync75(fromSidecar) && statSync28(fromSidecar).isFile()) {
           sidecarStatus = renamePair(fromSidecar, toSidecar);
         }
         switch (status.kind) {
@@ -76128,9 +76416,9 @@ function registerMigrateCommand(program3) {
 // src/cli/hostd.ts
 init_source();
 init_helpers();
-import { existsSync as existsSync74, mkdirSync as mkdirSync39, readdirSync as readdirSync28, readFileSync as readFileSync61, writeFileSync as writeFileSync34, statSync as statSync28, copyFileSync as copyFileSync12 } from "node:fs";
-import { homedir as homedir35 } from "node:os";
-import { join as join65 } from "node:path";
+import { existsSync as existsSync76, mkdirSync as mkdirSync40, readdirSync as readdirSync29, readFileSync as readFileSync62, writeFileSync as writeFileSync34, statSync as statSync29, copyFileSync as copyFileSync12 } from "node:fs";
+import { homedir as homedir36 } from "node:os";
+import { join as join67 } from "node:path";
 import { spawnSync as spawnSync11 } from "node:child_process";
 init_audit_reader();
 var DEFAULT_IMAGE_TAG = "latest";
@@ -76221,14 +76509,14 @@ networks:
 `;
 }
 function hostdDir() {
-  return join65(homedir35(), ".switchroom", "hostd");
+  return join67(homedir36(), ".switchroom", "hostd");
 }
 function hostdComposePath() {
-  return join65(hostdDir(), "docker-compose.yml");
+  return join67(hostdDir(), "docker-compose.yml");
 }
 function backupExistingCompose() {
   const p = hostdComposePath();
-  if (!existsSync74(p))
+  if (!existsSync76(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -76261,9 +76549,9 @@ async function doInstall(opts, program3) {
   }
   const dir = hostdDir();
   const composePath = hostdComposePath();
-  mkdirSync39(dir, { recursive: true });
+  mkdirSync40(dir, { recursive: true });
   const yaml = renderHostdComposeFile({
-    hostHome: homedir35(),
+    hostHome: homedir36(),
     imageTag: opts.tag ?? DEFAULT_IMAGE_TAG,
     operatorUid: resolveOperatorUid()
   });
@@ -76305,7 +76593,7 @@ function doStatus() {
   const composeYml = hostdComposePath();
   console.log(source_default.bold("switchroom-hostd"));
   console.log("");
-  if (!existsSync74(composeYml)) {
+  if (!existsSync76(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom hostd install` to set up."));
     return;
@@ -76326,15 +76614,15 @@ function doStatus() {
   } else {
     console.log(source_default.green(`  container:  ${ps.stdout.trim()}`));
   }
-  if (existsSync74(dir)) {
+  if (existsSync76(dir)) {
     const entries = [];
     try {
-      for (const name of readdirSync28(dir)) {
+      for (const name of readdirSync29(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
-        const sockPath = join65(dir, name, "sock");
-        if (existsSync74(sockPath)) {
-          const st = statSync28(sockPath);
+        const sockPath = join67(dir, name, "sock");
+        if (existsSync76(sockPath)) {
+          const st = statSync29(sockPath);
           if ((st.mode & 61440) === 49152) {
             entries.push(`${name} \u2192 ${sockPath}`);
           }
@@ -76352,7 +76640,7 @@ function doStatus() {
 }
 function doUninstall() {
   const composeYml = hostdComposePath();
-  if (!existsSync74(composeYml)) {
+  if (!existsSync76(composeYml)) {
     console.log(source_default.yellow("  No hostd install detected (no compose file at this path)."));
     return;
   }
@@ -76376,12 +76664,12 @@ function registerHostdCommand(program3) {
   hostd.command("uninstall").description("Stop the hostd container. Leaves the compose file in place for re-install.").action(() => doUninstall());
   hostd.command("audit").description("Tail and filter the hostd audit log (privileged-verb call history)").option("--tail <n>", "Number of matching entries to show (default: 50)", "50").option("--agent <name>", "Filter to a specific caller agent").option("--op <verb>", "Filter to a specific hostd verb (e.g. update_apply, agent_restart)").option("--error", "Show only failed (error/denied) entries").option("--verbose", "Show the captured stderr / error tail under each failed row").option("--path <file>", "Override audit log path (for debugging)").action((opts) => {
     const logPath = opts.path ?? defaultAuditLogPath2();
-    if (!existsSync74(logPath)) {
+    if (!existsSync76(logPath)) {
       console.error(source_default.yellow(`Audit log not found at ${logPath}.`) + source_default.gray(`
 The log is created when hostd handles its first privileged-verb request.`));
       return;
     }
-    const raw = readFileSync61(logPath, "utf-8");
+    const raw = readFileSync62(logPath, "utf-8");
     const limit = Math.max(1, parseInt(opts.tail ?? "50", 10) || 50);
     const filters = {
       agent: opts.agent,