switchroom 0.13.2 → 0.13.4

package/dist/cli/switchroom.js

@@ -13694,7 +13694,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) \u2014 mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -13755,7 +13755,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) \u2014 a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only \u2014 " + "this agent talks to the named account regardless of fleet active. See RFC H \u00a74.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),
@@ -23872,7 +23872,7 @@ import {
   existsSync as existsSync17,
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync17,
-  readdirSync as readdirSync7,
+  readdirSync as readdirSync8,
   renameSync as renameSync5,
   rmSync as rmSync4,
   statSync as statSync11,
@@ -23943,7 +23943,7 @@ function listSlots(agentDir) {
   if (!existsSync17(dir))
     return [];
   try {
-    return readdirSync7(dir).filter((name) => {
+    return readdirSync8(dir).filter((name) => {
       try {
         return statSync11(join13(dir, name)).isDirectory();
       } catch {
@@ -24115,7 +24115,7 @@ var init_accounts = __esm(() => {
 import { execFileSync as execFileSync8 } from "node:child_process";
 import {
   readFileSync as readFileSync18,
-  readdirSync as readdirSync8,
+  readdirSync as readdirSync9,
   existsSync as existsSync18,
   writeFileSync as writeFileSync10,
   mkdirSync as mkdirSync13,
@@ -24272,7 +24272,7 @@ function cleanupAuthTempDirs(agentDir) {
   if (!existsSync18(dir))
     return;
   try {
-    for (const entry of readdirSync8(dir)) {
+    for (const entry of readdirSync9(dir)) {
       if (entry.startsWith(".setup-token-tmp-")) {
         rmSync5(join14(dir, entry), { recursive: true, force: true });
       }
@@ -25226,7 +25226,7 @@ class AuthBrokerClient {
   closed = false;
   constructor(opts = {}) {
     this.socketPath = resolveAuthBrokerSocketPath(opts);
-    this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS3;
+    this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   }
   getSocketPath() {
     return this.socketPath;
@@ -25477,7 +25477,7 @@ async function withAuthBrokerClient(fn, opts) {
 function authBrokerSocketExists(opts) {
   return existsSync25(resolveAuthBrokerSocketPath(opts));
 }
-var DEFAULT_TIMEOUT_MS3 = 5000, AuthBrokerError, AuthBrokerUnreachableError;
+var DEFAULT_TIMEOUT_MS2 = 5000, AuthBrokerError, AuthBrokerUnreachableError;
 var init_client2 = __esm(() => {
   init_protocol2();
   AuthBrokerError = class AuthBrokerError extends Error {
@@ -25537,7 +25537,7 @@ import {
   existsSync as existsSync26,
   mkdirSync as mkdirSync15,
   readFileSync as readFileSync22,
-  readdirSync as readdirSync12,
+  readdirSync as readdirSync13,
   renameSync as renameSync6,
   rmSync as rmSync10,
   statSync as statSync15,
@@ -25568,7 +25568,7 @@ function listAccounts(home2 = homedir8()) {
   if (!existsSync26(root))
     return [];
   try {
-    return readdirSync12(root).filter((name) => {
+    return readdirSync13(root).filter((name) => {
       try {
         return statSync15(join19(root, name)).isDirectory();
       } catch {
@@ -25730,7 +25730,7 @@ __export(exports_oauth, {
 });
 import * as http from "node:http";
 import * as crypto2 from "node:crypto";
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn2 } from "node:child_process";
 function detectHeadless(env2) {
   const hasDisplay = Boolean(env2.DISPLAY && env2.DISPLAY.trim() !== "" || env2.WAYLAND_DISPLAY && env2.WAYLAND_DISPLAY.trim() !== "");
   const inSsh = Boolean(env2.SSH_CONNECTION && env2.SSH_CONNECTION.trim() !== "" || env2.SSH_TTY && env2.SSH_TTY.trim() !== "");
@@ -25890,7 +25890,7 @@ function buildLoopbackAuthUrl(cfg, redirectUri, state) {
   u.searchParams.set("state", state);
   return u.toString();
 }
-async function openBrowser(url, platform = process.platform, spawnImpl = spawn3) {
+async function openBrowser(url, platform = process.platform, spawnImpl = spawn2) {
   let cmd;
   let args;
   if (platform === "darwin") {
@@ -26407,7 +26407,7 @@ async function waitForApproval(opts) {
   const request = opts._request ?? approvalRequest;
   const lookup = opts._lookup ?? approvalLookup;
   const sleep3 = opts._sleep ?? defaultSleep;
-  const timeoutMs = opts.timeout_ms ?? DEFAULT_TIMEOUT_MS4;
+  const timeoutMs = opts.timeout_ms ?? DEFAULT_TIMEOUT_MS3;
   const initialPoll = opts.initial_poll_ms ?? DEFAULT_INITIAL_POLL_MS;
   const maxPoll = opts.max_poll_ms ?? DEFAULT_MAX_POLL_MS;
   const backoff = opts.backoff ?? DEFAULT_BACKOFF;
@@ -26495,7 +26495,7 @@ async function waitForApproval(opts) {
     }
   }
 }
-var DEFAULT_TIMEOUT_MS4 = 600000, DEFAULT_INITIAL_POLL_MS = 2000, DEFAULT_MAX_POLL_MS = 30000, DEFAULT_BACKOFF = 1.5, DENY_MODES;
+var DEFAULT_TIMEOUT_MS3 = 600000, DEFAULT_INITIAL_POLL_MS = 2000, DEFAULT_MAX_POLL_MS = 30000, DEFAULT_BACKOFF = 1.5, DENY_MODES;
 var init_wait = __esm(() => {
   init_client3();
   DENY_MODES = new Set(["deny", "deny_perm"]);
@@ -27053,7 +27053,7 @@ async function runViaClaude(opts) {
     if (tmuxHasSession(SESSION))
       tmuxKillSession(SESSION);
   }
-  const spawn4 = opts.spawnClaude ?? (() => {
+  const spawn3 = opts.spawnClaude ?? (() => {
     execFileSync11("tmux", [
       "new-session",
       "-d",
@@ -27069,7 +27069,7 @@ async function runViaClaude(opts) {
     ], { stdio: "ignore", timeout: 5000 });
   });
   log("  Spawning claude in a tmux session to mint a broader-scope OAuth token\u2026");
-  spawn4();
+  spawn3();
   try {
     const preFired = new Set;
     const phase1Deadline = Date.now() + urlTimeout;
@@ -27605,7 +27605,7 @@ var init_doctor_status = __esm(() => {
 import {
   existsSync as existsSync46,
   readFileSync as readFileSync42,
-  readdirSync as readdirSync16
+  readdirSync as readdirSync17
 } from "node:fs";
 import { dirname as dirname11, join as join38 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
@@ -27686,7 +27686,7 @@ function probePlaywrightMcpVersion() {
   if (!existsSync46(npxCache))
     return null;
   try {
-    const entries = readdirSync16(npxCache);
+    const entries = readdirSync17(npxCache);
     for (const entry of entries) {
       const pkgPath = join38(npxCache, entry, "node_modules/@playwright/mcp/package.json");
       if (existsSync46(pkgPath)) {
@@ -28834,7 +28834,7 @@ import { join as join42 } from "node:path";
 function runCredentialsMigrationChecks(config, deps = {}) {
   const credDir = deps.credentialsDir ?? join42(homedir23(), ".switchroom", "credentials");
   const existsSync49 = deps.existsSync ?? ((p) => realExistsSync2(p));
-  const readdirSync18 = deps.readdirSync ?? ((p) => realReaddirSync(p));
+  const readdirSync19 = deps.readdirSync ?? ((p) => realReaddirSync(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
     try {
       return realStatSync(p).isDirectory();
@@ -28847,7 +28847,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
   const agentNames = new Set(Object.keys(config.agents ?? {}));
   let entries;
   try {
-    entries = readdirSync18(credDir);
+    entries = readdirSync19(credDir);
   } catch {
     return [
       {
@@ -29403,7 +29403,7 @@ import {
   lstatSync as lstatSync5,
   mkdirSync as mkdirSync27,
   readFileSync as readFileSync45,
-  readdirSync as readdirSync18,
+  readdirSync as readdirSync19,
   statSync as statSync22
 } from "node:fs";
 import { dirname as dirname12, join as join45, resolve as resolve29 } from "node:path";
@@ -29413,7 +29413,7 @@ function findInNvm(bin) {
   if (!existsSync50(nvmRoot))
     return null;
   try {
-    const versions = readdirSync18(nvmRoot).sort().reverse();
+    const versions = readdirSync19(nvmRoot).sort().reverse();
     for (const v of versions) {
       const candidate = join45(nvmRoot, v, "bin", bin);
       try {
@@ -29585,7 +29585,7 @@ function findChromium(homeDir = process.env.HOME ?? "", envBrowsersPath = proces
     if (!existsSync50(cacheDir))
       continue;
     try {
-      const entries = readdirSync18(cacheDir).filter((e) => e.startsWith("chromium"));
+      const entries = readdirSync19(cacheDir).filter((e) => e.startsWith("chromium"));
       for (const entry of entries) {
         const candidates2 = [
           join45(cacheDir, entry, "chrome-linux64", "chrome"),
@@ -29898,7 +29898,7 @@ function checkPendingRetainsQueue(dir) {
   }
   let names;
   try {
-    names = readdirSync18(pendingDir);
+    names = readdirSync19(pendingDir);
   } catch (err) {
     return {
       name: "pending-retains queue",
@@ -30158,7 +30158,7 @@ function checkRepoHygiene(repoRoot) {
     });
   }
   try {
-    const entries = readdirSync18(repoRoot);
+    const entries = readdirSync19(repoRoot);
     for (const name of entries) {
       if (name === "clerk-export-with-secrets.tar.gz")
         continue;
@@ -47248,8 +47248,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.13.2";
-var COMMIT_SHA = "afa0fbea";
+var VERSION = "0.13.4";
+var COMMIT_SHA = "b4fd0264";
 
 // src/cli/agent.ts
 init_source();
@@ -50468,13 +50468,11 @@ import { join as join12 } from "node:path";
 import { execFileSync as execFileSync6 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
-import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, renameSync as renameSync4, mkdirSync as mkdirSync11, existsSync as existsSync14, statSync as statSync9 } from "node:fs";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, renameSync as renameSync4, mkdirSync as mkdirSync11, existsSync as existsSync14, statSync as statSync9, readdirSync as readdirSync7 } from "node:fs";
 import { join as join11 } from "node:path";
-import { spawn as spawn2 } from "node:child_process";
-var DEFAULT_SUMMARIZER_MODEL = "claude-haiku-4-5-20251001";
 var DEFAULT_MAX_TURNS = 50;
-var DEFAULT_TIMEOUT_MS2 = 30000;
 var TOPIC_MAX_CHARS = 117;
+var TURN_TEXT_MAX_CHARS = 1200;
 function extractTurnsFromJsonl(path, maxTurns) {
   let raw;
   try {
@@ -50507,7 +50505,8 @@ function extractTurnsFromJsonl(path, maxTurns) {
     }
     if (obj.type === "user" && obj.message && typeof obj.message === "object") {
       const content = obj.message.content;
-      const text = extractTextBlocks(content);
+      const raw2 = extractTextBlocks(content);
+      const text = raw2 ? extractChannelBody(raw2) : null;
       if (text)
         turns.push({ role: "user", text });
       continue;
@@ -50520,9 +50519,16 @@ function extractTurnsFromJsonl(path, maxTurns) {
       continue;
     }
   }
-  if (turns.length <= maxTurns)
-    return turns;
-  return turns.slice(turns.length - maxTurns);
+  const deduped = [];
+  for (const t of turns) {
+    const prev = deduped[deduped.length - 1];
+    if (prev && prev.role === t.role && prev.text === t.text)
+      continue;
+    deduped.push(t);
+  }
+  if (deduped.length <= maxTurns)
+    return deduped;
+  return deduped.slice(deduped.length - maxTurns);
 }
 function extractChannelBody(raw) {
   const m = raw.match(/<channel[^>]*>([\s\S]*?)<\/channel>/);
@@ -50553,56 +50559,48 @@ function extractTextBlocks(content) {
 `).trim();
   return joined.length > 0 ? joined : null;
 }
-function buildHandoffPrompt(turns) {
-  const system = "You produce concise handoff briefings for an AI assistant that is " + "about to start a fresh session. The next session has no memory of " + `what just happened; your briefing is its only carry-over context.
-
-` + `Output format \u2014 EXACTLY this structure, no preamble:
-` + `## Topic: <one short line, max 100 chars, describing what the user and assistant were most recently focused on>
-
-` + `## Summary
-<one paragraph, what we were working on>
-
-` + `## Open threads
-- <bulleted list of pending/unresolved items; empty list ok>
+function formatTranscriptTail(turns) {
+  const header = `# Handoff \u2014 previous session
 
-` + `## Last exchange
-**User:** <verbatim or near-verbatim last user message, truncated to ~500 chars>
-**Assistant:** <last assistant response, truncated to ~500 chars>
-
-` + `## Key decisions & facts
-- <bullets; empty list ok>
-
-` + `## Active files / paths
-- <bullets; empty list ok>
-
-` + "Keep the whole briefing under ~1500 tokens. Prefer brevity. Omit sections only if truly empty (still emit the heading with '- (none)').";
-  const transcript = turns.map((t) => `### ${t.role.toUpperCase()}
-${t.text}`).join(`
+` + "You are resuming this agent's work. There is no generated summary " + "\u2014 below is the **raw tail of the previous session's transcript** " + "(oldest first, most recent last). Read it to reorient, then carry " + "on. Anything important worth keeping long-term should already be " + `in your memory files \u2014 check those too.
+`;
+  if (turns.length === 0) {
+    return header + `
+_(No recent turns were recoverable from the previous session.)_
+`;
+  }
+  const body = turns.map((t) => {
+    let text = t.text;
+    if (text.length > TURN_TEXT_MAX_CHARS) {
+      text = text.slice(0, TURN_TEXT_MAX_CHARS) + `
+\u2026[truncated]`;
+    }
+    return `### ${t.role === "user" ? "User" : "Assistant"}
+${text}`;
+  }).join(`
 
 `);
-  const user = `Here is the recent session transcript (oldest first). Produce the handoff briefing per the specified format.
+  return `${header}
+## Recent turns
 
-` + transcript;
-  return { system, user };
+${body}
+`;
 }
-function parseHandoffResponse(raw) {
-  const lines = raw.split(/\r?\n/);
-  let start = 0;
-  while (start < lines.length && lines[start].trim() === "")
-    start++;
-  if (start >= lines.length)
-    return null;
-  const first = lines[start].trim();
-  const m = first.match(/^##\s*Topic:\s*(.+)$/i);
-  if (!m)
-    return null;
-  let topic = m[1].trim();
-  if (topic.length > TOPIC_MAX_CHARS) {
-    topic = topic.slice(0, TOPIC_MAX_CHARS) + "\u2026";
+function deriveTopic(turns) {
+  for (let i = turns.length - 1;i >= 0; i--) {
+    if (turns[i].role === "user")
+      return clampTopic(firstLine(turns[i].text));
   }
-  const briefing = lines.slice(start).join(`
-`).trim();
-  return { topic, briefing };
+  if (turns.length > 0)
+    return clampTopic(firstLine(turns[turns.length - 1].text));
+  return "previous session";
+}
+function firstLine(s) {
+  const line = s.split(/\r?\n/).find((l) => l.trim().length > 0) ?? s;
+  return line.trim();
+}
+function clampTopic(s) {
+  return s.length > TOPIC_MAX_CHARS ? s.slice(0, TOPIC_MAX_CHARS) + "\u2026" : s;
 }
 function writeSidecarsAtomic(agentDir, briefing, topic) {
   mkdirSync11(agentDir, { recursive: true });
@@ -50615,99 +50613,24 @@ function writeSidecarsAtomic(agentDir, briefing, topic) {
   renameSync4(handoffTmp, handoffPath);
   renameSync4(topicTmp, topicPath);
 }
-async function summarize(opts) {
-  const model = opts.model ?? DEFAULT_SUMMARIZER_MODEL;
+async function buildHandoff(opts) {
   const maxTurns = opts.maxTurns ?? DEFAULT_MAX_TURNS;
-  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   const turns = extractTurnsFromJsonl(opts.jsonlPath, maxTurns);
   if (turns.length === 0) {
     return "no-turns";
   }
-  const runner = opts.runner ?? defaultClaudeCliRunner;
-  const prompt = buildHandoffPrompt(turns);
-  let raw;
-  try {
-    raw = await runner.run({
-      model,
-      system: prompt.system,
-      user: prompt.user,
-      timeoutMs
-    });
-  } catch (err) {
-    process.stderr.write(`handoff-summarizer: claude -p call failed \u2014 ${errMsg(err)}
-`);
-    return "cli-error";
-  }
-  raw = raw.trim();
-  if (!raw) {
-    return "empty-response";
-  }
-  const parsed = parseHandoffResponse(raw);
-  if (!parsed) {
-    process.stderr.write(`handoff-summarizer: response missing '## Topic:' header; skipping
-`);
-    return "parse-error";
-  }
+  const briefing = formatTranscriptTail(turns);
+  const topic = deriveTopic(turns);
   try {
-    writeSidecarsAtomic(opts.agentDir, parsed.briefing, parsed.topic);
+    writeSidecarsAtomic(opts.agentDir, briefing, topic);
   } catch (err) {
-    process.stderr.write(`handoff-summarizer: sidecar write failed \u2014 ${errMsg(err)}
+    process.stderr.write(`handoff: sidecar write failed \u2014 ${errMsg(err)}
 `);
     return "write-error";
   }
-  await mirrorToHindsight(parsed.briefing, opts).catch(() => {});
+  await mirrorToHindsight(briefing, opts).catch(() => {});
   return "ok";
 }
-var defaultClaudeCliRunner = {
-  async run({ model, system, user, timeoutMs }) {
-    return await new Promise((resolve14, reject) => {
-      const args = [
-        "-p",
-        user,
-        "--model",
-        model,
-        "--append-system-prompt",
-        system,
-        "--no-session-persistence"
-      ];
-      const env2 = {
-        ...process.env,
-        FORCE_COLOR: "0",
-        NO_COLOR: "1"
-      };
-      const child = spawn2("claude", args, {
-        stdio: ["ignore", "pipe", "pipe"],
-        env: env2
-      });
-      let stdout = "";
-      let stderr = "";
-      const timer = setTimeout(() => {
-        child.kill("SIGTERM");
-        reject(new Error(`timeout after ${timeoutMs}ms`));
-      }, timeoutMs);
-      child.stdout.on("data", (d) => {
-        stdout += d.toString("utf-8");
-      });
-      child.stderr.on("data", (d) => {
-        stderr += d.toString("utf-8");
-      });
-      child.on("error", (err) => {
-        clearTimeout(timer);
-        reject(err);
-      });
-      child.on("close", (code) => {
-        clearTimeout(timer);
-        if (code === 0) {
-          resolve14(stdout);
-        } else {
-          const tail = stderr.trim().split(`
-`).slice(-3).join(" | ");
-          reject(new Error(`claude -p exited ${code}: ${tail || "(no stderr)"}`));
-        }
-      });
-    });
-  }
-};
 function errMsg(err) {
   if (err && typeof err === "object" && "message" in err) {
     return String(err.message);
@@ -50738,7 +50661,7 @@ async function mirrorToHindsight(briefing, opts) {
       body: JSON.stringify(body)
     });
   } catch (err) {
-    process.stderr.write(`handoff-summarizer: hindsight mirror failed \u2014 ${errMsg(err)}
+    process.stderr.write(`handoff: hindsight mirror failed \u2014 ${errMsg(err)}
 `);
   }
 }
@@ -50750,7 +50673,7 @@ function findLatestSessionJsonl(claudeConfigDir) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = __require("fs").readdirSync(dir);
+      entries = readdirSync7(dir);
     } catch {
       return;
     }
@@ -51704,7 +51627,7 @@ function enforceUsername(username, agentSlug, expectedUsername, loose, warn) {
 }
 
 // src/setup/profile-picker.ts
-import { existsSync as existsSync20, readdirSync as readdirSync9, statSync as statSync13 } from "node:fs";
+import { existsSync as existsSync20, readdirSync as readdirSync10, statSync as statSync13 } from "node:fs";
 import { resolve as resolve16 } from "node:path";
 var PROFILE_GLOSSES = {
   default: "minimal baseline \u2014 generic chat helper, no opinion.",
@@ -51720,7 +51643,7 @@ function defaultListProfileSkills(profileName) {
     return [];
   }
   try {
-    return readdirSync9(skillsDir).filter((entry) => {
+    return readdirSync10(skillsDir).filter((entry) => {
       try {
         return statSync13(resolve16(skillsDir, entry)).isDirectory();
       } catch {
@@ -53330,7 +53253,6 @@ Scaffolding agent: ${name}
       }
       try {
         const result = reconcileAgent(n, agentConfig, agentsDir, config.telegram, config, configPath, { preserveClaudeMd: opts.preserveClaudeMd });
-        const unitChanges = [];
         const allChanges = [...result.changes];
         if (allChanges.length === 0) {
           console.log(source_default.gray(`  ${n}: already in sync`));
@@ -53341,7 +53263,7 @@ Scaffolding agent: ${name}
           const semantics = result.changesBySemantics;
           if (semantics) {
             const { hot, staleTillRestart } = semantics;
-            const restartRequired = [...semantics.restartRequired, ...unitChanges];
+            const restartRequired = [...semantics.restartRequired];
             if (restartRequired.length > 0) {
               console.log(source_default.yellow(`
   Changed (restart required \u2014 soul/MCP/settings/start.sh):`));
@@ -53384,7 +53306,7 @@ Restart: switchroom agent restart ${n}`));
           }
         }
         const changesBySemantics = result.changesBySemantics;
-        const autoRestartNeeded = !opts.noRestart && (changesBySemantics !== undefined && changesBySemantics.restartRequired.length > 0 || unitChanges.length > 0);
+        const autoRestartNeeded = !opts.noRestart && changesBySemantics !== undefined && changesBySemantics.restartRequired.length > 0;
         const shouldRestart = (opts.restart || opts.gracefulRestart || autoRestartNeeded) && allChanges.length > 0;
         if (shouldRestart) {
           try {
@@ -53815,7 +53737,7 @@ switchroom agent add: ${name}
       process.exit(1);
     }
   }));
-  agent.command("rename <old> <new>").description("Rename an agent slug: stop, snapshot, rename dir + systemd units + vault key, " + "update switchroom.yaml, reconcile, start. Rolls back on any failure.").option("--hindsight <mode>", 'Hindsight bank handling: "preserve" (default, keep old bank) or "fresh" (drop, recreate on first run). "migrate" is deferred.', "preserve").option("-y, --yes", "Skip confirmation prompt").action(withConfigError(async (oldName, newName, opts) => {
+  agent.command("rename <old> <new>").description("Rename an agent slug: stop, snapshot, rename dir + vault key, " + "update switchroom.yaml, reconcile, start. Rolls back on any failure.").option("--hindsight <mode>", 'Hindsight bank handling: "preserve" (default, keep old bank) or "fresh" (drop, recreate on first run). "migrate" is deferred.', "preserve").option("-y, --yes", "Skip confirmation prompt").action(withConfigError(async (oldName, newName, opts) => {
     const configPath = getConfigPath(program3);
     const config = getConfig(program3);
     if (!config.agents[oldName]) {
@@ -53834,7 +53756,7 @@ switchroom agent add: ${name}
     if (!opts.yes) {
       process.stdout.write(source_default.yellow(`
 Rename agent "${oldName}" \u2192 "${newName}"?
-` + `  This will: stop ${oldName}, copy dir, rename systemd units,
+` + `  This will: stop ${oldName}, copy dir,
 ` + `  rename vault keys (if passphrase available), update switchroom.yaml,
 ` + `  reconcile, and start ${newName}.
 ` + `  Hindsight mode: ${hindsightMode}
@@ -55387,7 +55309,7 @@ init_source();
 init_loader();
 init_vault();
 init_hindsight();
-import { readFileSync as readFileSync26, writeFileSync as writeFileSync16, copyFileSync as copyFileSync6, existsSync as existsSync30, readdirSync as readdirSync13, statSync as statSync17 } from "node:fs";
+import { readFileSync as readFileSync26, writeFileSync as writeFileSync16, copyFileSync as copyFileSync6, existsSync as existsSync30, readdirSync as readdirSync14, statSync as statSync17 } from "node:fs";
 import { execFileSync as execFileSync12 } from "node:child_process";
 import { join as join23 } from "node:path";
 import { homedir as homedir10 } from "node:os";
@@ -55412,7 +55334,7 @@ function findClaudeTranscripts() {
   const walk = (dir) => {
     let entries;
     try {
-      entries = readdirSync13(dir);
+      entries = readdirSync14(dir);
     } catch {
       return;
     }
@@ -55771,13 +55693,13 @@ init_loader();
 init_loader();
 init_client();
 import { readFileSync as readFileSync31, existsSync as existsSync34, unlinkSync as unlinkSync9 } from "node:fs";
-import { spawn as spawn4 } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 
 // src/vault/broker/server.ts
 init_compose();
 init_vault();
 import * as net3 from "node:net";
-import { mkdirSync as mkdirSync20, chmodSync as chmodSync7, chownSync, existsSync as existsSync33, readFileSync as readFileSync29, readdirSync as readdirSync14, statSync as statSync19, unlinkSync as unlinkSync8, writeFileSync as writeFileSync18, renameSync as renameSync9 } from "node:fs";
+import { mkdirSync as mkdirSync20, chmodSync as chmodSync7, chownSync, existsSync as existsSync33, readFileSync as readFileSync29, readdirSync as readdirSync15, statSync as statSync19, unlinkSync as unlinkSync8, writeFileSync as writeFileSync18, renameSync as renameSync9 } from "node:fs";
 import { dirname as dirname6, resolve as resolve24, basename as basename5 } from "node:path";
 import * as os4 from "node:os";
 import * as path3 from "node:path";
@@ -59841,7 +59763,7 @@ async function main() {
   let perAgentTargets = [];
   try {
     if (existsSync33(perAgentDir)) {
-      const entries = readdirSync14(perAgentDir, { withFileTypes: true });
+      const entries = readdirSync15(perAgentDir, { withFileTypes: true });
       const flat = [];
       const subdirs = [];
       for (const e of entries) {
@@ -60121,7 +60043,7 @@ function registerVaultBrokerCommand(vaultCmd, program3) {
       const args = ["vault", "broker", "start", "--foreground"];
       if (parentOpts.config)
         args.unshift("--config", parentOpts.config);
-      const child = spawn4(process.execPath, [self2, ...args], {
+      const child = spawn3(process.execPath, [self2, ...args], {
         detached: true,
         stdio: "ignore"
       });
@@ -60408,11 +60330,11 @@ function levelLabel(level) {
 function printDiagnostic(d) {
   const glyph = levelGlyph(d.level);
   const label = levelLabel(d.level);
-  const firstLine = d.message.split(`
+  const firstLine2 = d.message.split(`
 `)[0];
   const rest = d.message.split(`
 `).slice(1);
-  console.log(`  ${glyph} [${label}] ${firstLine}`);
+  console.log(`  ${glyph} [${label}] ${firstLine2}`);
   for (const line of rest) {
     console.log(`          ${source_default.gray(line)}`);
   }
@@ -60807,7 +60729,7 @@ import {
   fsyncSync as fsyncSync5,
   mkdirSync as mkdirSync21,
   openSync as openSync9,
-  readdirSync as readdirSync15,
+  readdirSync as readdirSync16,
   readFileSync as readFileSync33,
   renameSync as renameSync10,
   statSync as statSync20,
@@ -60915,7 +60837,7 @@ function listBackupFiles(dir) {
     return [];
   let entries;
   try {
-    entries = readdirSync15(dir);
+    entries = readdirSync16(dir);
   } catch {
     return [];
   }
@@ -60938,7 +60860,7 @@ function backupVault(opts) {
     throw new Error(`vault backup refused: source is not a valid vault envelope: ${validationError}`);
   }
   mkdirSync21(opts.destDir, { recursive: true, mode: 448 });
-  const dirEntries = readdirSync15(opts.destDir);
+  const dirEntries = readdirSync16(opts.destDir);
   const offender = findAutoUnlockSibling(dirEntries);
   if (offender) {
     throw new Error(`vault backup refused: destination '${opts.destDir}' contains a file ` + `that looks like an auto-unlock credential ('${offender}'). The ` + `machine-bound auto-unlock blob MUST NOT be co-located with the ` + `encrypted vault \u2014 if they're together in version control, the ` + `passphrase gate is bypassed. Move/remove that file and retry.`);
@@ -62707,7 +62629,7 @@ import {
 } from "node:fs";
 import { resolve as resolve26, extname, join as join37, relative, dirname as dirname9 } from "node:path";
 import { homedir as homedir19 } from "node:os";
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 import { timingSafeEqual as timingSafeEqual2, randomBytes as randomBytes10 } from "node:crypto";
 
 // src/web/api.ts
@@ -68623,7 +68545,7 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
               existing.kill();
               ws._logProcess = null;
             }
-            const child = spawn5("docker", ["logs", "-f", "--tail", "20", containerName(agentName)], { stdio: ["ignore", "pipe", "pipe"] });
+            const child = spawn4("docker", ["logs", "-f", "--tail", "20", containerName(agentName)], { stdio: ["ignore", "pipe", "pipe"] });
             child.on("error", (err) => {
               try {
                 ws.send(JSON.stringify({
@@ -70230,7 +70152,7 @@ init_helpers();
 init_loader();
 import { resolve as resolve32 } from "node:path";
 function registerHandoffCommand(program3) {
-  program3.command("handoff <agent>", { hidden: true }).description("Summarize the agent's last session into a handoff briefing " + "(.handoff.md) and topic line (.handoff-topic). [internal \u2014 used by Stop hook]").option("--timeout <secs>", "API call timeout in seconds", "30").option("--max-turns <n>", "Max turns fed to the summarizer", String(DEFAULT_MAX_TURNS)).option("--model <id>", "Anthropic model for the summarizer", DEFAULT_SUMMARIZER_MODEL).action(withConfigError(async (agentName, opts) => {
+  program3.command("handoff <agent>", { hidden: true }).description("Build the agent's session handoff sidecars \u2014 a transcript-tail " + "briefing (.handoff.md) and topic line (.handoff-topic). " + "[internal \u2014 used by the Stop hook]").option("--max-turns <n>", "Max turns kept in the handoff transcript tail", String(DEFAULT_MAX_TURNS)).action(withConfigError(async (agentName, opts) => {
     const config = getConfig(program3);
     const agentConfig = config.agents[agentName];
     if (!agentConfig) {
@@ -70253,17 +70175,13 @@ function registerHandoffCommand(program3) {
 `);
       return;
     }
-    const timeoutMs = Math.max(1, parseInt(opts.timeout, 10)) * 1000;
     const maxTurns = Math.max(1, parseInt(opts.maxTurns, 10));
-    const model = continuity?.summarizer_model ?? opts.model;
     const cappedMaxTurns = continuity?.max_turns_in_briefing ?? maxTurns;
-    const status = await summarize({
+    const status = await buildHandoff({
       jsonlPath: jsonl,
       agentDir,
       agentName,
-      model,
-      maxTurns: cappedMaxTurns,
-      timeoutMs
+      maxTurns: cappedMaxTurns
     });
     process.stderr.write(`handoff: ${status}
 `);
@@ -70276,7 +70194,7 @@ import {
   existsSync as existsSync53,
   mkdirSync as mkdirSync29,
   openSync as openSync11,
-  readdirSync as readdirSync19,
+  readdirSync as readdirSync20,
   readFileSync as readFileSync48,
   renameSync as renameSync11,
   statSync as statSync24,
@@ -70765,7 +70683,7 @@ var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
 function sweepOrphanTmpFiles(stateDir) {
   let entries;
   try {
-    entries = readdirSync19(stateDir);
+    entries = readdirSync20(stateDir);
   } catch {
     return;
   }
@@ -72338,7 +72256,7 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync59, readFileSync as readFileSync52, readdirSync as readdirSync20, statSync as statSync25 } from "node:fs";
+import { existsSync as existsSync59, readFileSync as readFileSync52, readdirSync as readdirSync21, statSync as statSync25 } from "node:fs";
 import { resolve as resolve37, join as join53 } from "node:path";
 import { createHash as createHash12 } from "node:crypto";
 init_merge();
@@ -72357,7 +72275,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
   if (!existsSync59(projectsDir))
     return;
   try {
-    const entries = readdirSync20(projectsDir, { withFileTypes: true });
+    const entries = readdirSync21(projectsDir, { withFileTypes: true });
     let latest;
     for (const entry of entries) {
       if (!entry.isDirectory())
@@ -72595,7 +72513,7 @@ import {
   mkdirSync as mkdirSync32,
   writeFileSync as writeFileSync29,
   readFileSync as readFileSync53,
-  readdirSync as readdirSync21,
+  readdirSync as readdirSync22,
   unlinkSync as unlinkSync12,
   existsSync as existsSync60,
   renameSync as renameSync12
@@ -72638,7 +72556,7 @@ function listRecords() {
   ensureDir2();
   const dir = registryDir();
   const records = [];
-  for (const entry of readdirSync21(dir)) {
+  for (const entry of readdirSync22(dir)) {
     if (!entry.endsWith(".json"))
       continue;
     const id = entry.slice(0, -5);
@@ -72985,7 +72903,7 @@ init_scaffold_integration();
 import {
   chmodSync as chmodSync9,
   mkdirSync as mkdirSync34,
-  readdirSync as readdirSync22,
+  readdirSync as readdirSync23,
   rmSync as rmSync15,
   writeFileSync as writeFileSync30
 } from "node:fs";
@@ -73158,7 +73076,7 @@ function resolveCredentialsDir(env2) {
 function writeSeedFile(dir, email, seed) {
   mkdirSync34(dir, { recursive: true, mode: 448 });
   chmodSync9(dir, 448);
-  for (const name of readdirSync22(dir)) {
+  for (const name of readdirSync23(dir)) {
     rmSync15(join56(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
@@ -73278,9 +73196,9 @@ async function runDriveMcpLauncher(opts) {
   const tier = opts.tier ?? configSecrets.tier;
   const args = buildUvxArgs(tier);
   const env2 = buildChildEnv(process.env, credentialsDir, brokerCreds.accountEmail);
-  const { spawn: spawn6 } = await import("node:child_process");
+  const { spawn: spawn5 } = await import("node:child_process");
   const os5 = await import("node:os");
-  const child = spawn6("uvx", args, {
+  const child = spawn5("uvx", args, {
     stdio: ["pipe", "pipe", "inherit"],
     env: env2
   });
@@ -73315,7 +73233,7 @@ function registerDriveMcpLauncherCommand(program3) {
 
 // src/cli/apply.ts
 init_source();
-import { accessSync as accessSync3, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync67, mkdirSync as mkdirSync36, readdirSync as readdirSync24, renameSync as renameSync13, writeFileSync as writeFileSync32 } from "node:fs";
+import { accessSync as accessSync3, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync67, mkdirSync as mkdirSync36, readdirSync as readdirSync25, renameSync as renameSync13, writeFileSync as writeFileSync32 } from "node:fs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
@@ -73872,7 +73790,7 @@ import {
   chownSync as chownSync2,
   existsSync as existsSync66,
   lstatSync as lstatSync7,
-  readdirSync as readdirSync23,
+  readdirSync as readdirSync24,
   realpathSync as realpathSync6,
   statSync as statSync26
 } from "node:fs";
@@ -73928,7 +73846,7 @@ function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
   });
   const readdir2 = deps.readdir ?? ((p) => {
     try {
-      return readdirSync23(p);
+      return readdirSync24(p);
     } catch {
       return [];
     }
@@ -73974,7 +73892,7 @@ function resolveVaultBindMountDir(homeDir, ctx) {
 function inspectVaultBindMountDir(vaultDir) {
   if (!existsSync67(vaultDir))
     return { kind: "missing" };
-  const entries = readdirSync24(vaultDir);
+  const entries = readdirSync25(vaultDir);
   const unknown = [];
   for (const name of entries) {
     if (KNOWN_VAULT_ARTIFACT_NAMES.has(name))
@@ -74544,7 +74462,7 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync55, existsSync as existsSync68, readdirSync as readdirSync25 } from "node:fs";
+import { readFileSync as readFileSync55, existsSync as existsSync68, readdirSync as readdirSync26 } from "node:fs";
 import { join as join61 } from "node:path";
 import { homedir as homedir34 } from "node:os";
 
@@ -74888,7 +74806,7 @@ function resolveSources(explicitPath) {
   const sources = [];
   let entries;
   try {
-    entries = readdirSync25(agentsDir);
+    entries = readdirSync26(agentsDir);
   } catch {
     return [];
   }
@@ -75176,7 +75094,7 @@ import {
   fsyncSync as fsyncSync6,
   mkdirSync as mkdirSync38,
   openSync as openSync13,
-  readdirSync as readdirSync26,
+  readdirSync as readdirSync27,
   readFileSync as readFileSync57,
   renameSync as renameSync14,
   statSync as statSync27,
@@ -75296,7 +75214,7 @@ function listSkillsOverlayEntries(agent, opts = {}) {
   if (!existsSync70(paths.skillsDir))
     return [];
   const out = [];
-  for (const name of readdirSync26(paths.skillsDir)) {
+  for (const name of readdirSync27(paths.skillsDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
     const full = join63(paths.skillsDir, name);
@@ -75323,7 +75241,7 @@ function listOverlayEntries(agent, opts = {}) {
   if (!existsSync70(paths.scheduleDir))
     return [];
   const out = [];
-  for (const name of readdirSync26(paths.scheduleDir)) {
+  for (const name of readdirSync27(paths.scheduleDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
     const full = join63(paths.scheduleDir, name);
@@ -75475,7 +75393,7 @@ import {
   fsyncSync as fsyncSync7,
   mkdirSync as mkdirSync39,
   openSync as openSync14,
-  readdirSync as readdirSync27,
+  readdirSync as readdirSync28,
   readFileSync as readFileSync58,
   renameSync as renameSync15,
   unlinkSync as unlinkSync15,
@@ -75531,7 +75449,7 @@ function listPendingScheduleEntries(agent, opts = {}) {
   if (!existsSync71(dir))
     return [];
   const out = [];
-  for (const name of readdirSync27(dir).sort()) {
+  for (const name of readdirSync28(dir).sort()) {
     if (!name.endsWith(".meta.json"))
       continue;
     const stageId = name.slice(0, -".meta.json".length);
@@ -76269,7 +76187,7 @@ init_helpers();
 init_loader();
 import {
   existsSync as existsSync75,
-  readdirSync as readdirSync28,
+  readdirSync as readdirSync29,
   readFileSync as readFileSync61,
   renameSync as renameSync16,
   statSync as statSync28,
@@ -76288,7 +76206,7 @@ function planCronUnitRenames(agentsDir, agents) {
       continue;
     let entries;
     try {
-      entries = readdirSync28(telegramDir);
+      entries = readdirSync29(telegramDir);
     } catch {
       continue;
     }
@@ -76443,7 +76361,7 @@ function registerMigrateCommand(program3) {
 // src/cli/hostd.ts
 init_source();
 init_helpers();
-import { existsSync as existsSync76, mkdirSync as mkdirSync40, readdirSync as readdirSync29, readFileSync as readFileSync62, writeFileSync as writeFileSync34, statSync as statSync29, copyFileSync as copyFileSync12 } from "node:fs";
+import { existsSync as existsSync76, mkdirSync as mkdirSync40, readdirSync as readdirSync30, readFileSync as readFileSync62, writeFileSync as writeFileSync34, statSync as statSync29, copyFileSync as copyFileSync12 } from "node:fs";
 import { homedir as homedir36 } from "node:os";
 import { join as join67 } from "node:path";
 import { spawnSync as spawnSync11 } from "node:child_process";
@@ -76644,7 +76562,7 @@ function doStatus() {
   if (existsSync76(dir)) {
     const entries = [];
     try {
-      for (const name of readdirSync29(dir)) {
+      for (const name of readdirSync30(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
         const sockPath = join67(dir, name, "sock");