switchroom 0.13.58 → 0.13.60

package/dist/cli/switchroom.js

@@ -29659,19 +29659,123 @@ var init_doctor_drive = __esm(() => {
   init_doctor_secret_access();
 });
 
+// src/cli/doctor-scaffold-wiring.ts
+import { join as join45, resolve as resolve30 } from "node:path";
+function readJson2(d, path4) {
+  if (!d.existsSync(path4))
+    return { kind: "absent" };
+  let raw;
+  try {
+    raw = d.readFileSync(path4);
+  } catch (err) {
+    const code = err?.code;
+    if (code === "EACCES" || code === "EPERM")
+      return { kind: "unreadable" };
+    return { kind: "absent" };
+  }
+  try {
+    return { kind: "ok", data: JSON.parse(raw) };
+  } catch {
+    return { kind: "corrupt" };
+  }
+}
+function checkIntegrationScaffoldWiring(args) {
+  const { label, mcpKey, agents, agentsDir, deps } = args;
+  const results = [];
+  if (agents.length === 0)
+    return results;
+  if (agentsDir === undefined) {
+    return [
+      {
+        name: `${label}: scaffold wiring`,
+        status: "warn",
+        detail: "could not resolve the agents directory (no switchroom block) \u2014 skipped scaffold wiring check"
+      }
+    ];
+  }
+  for (const name of agents) {
+    const agentDir = resolve30(agentsDir, name);
+    if (!deps.existsSync(agentDir)) {
+      results.push({
+        name: `${label}: ${name} scaffold`,
+        status: "warn",
+        detail: `${agentDir} not scaffolded yet \u2014 run \`switchroom apply\``
+      });
+      continue;
+    }
+    const mcpPath = join45(agentDir, ".mcp.json");
+    const claudeJsonPath = join45(agentDir, ".claude", ".claude.json");
+    const mcpRead = readJson2(deps, mcpPath);
+    const trustRead = readJson2(deps, claudeJsonPath);
+    if (mcpRead.kind === "unreadable" || trustRead.kind === "unreadable") {
+      results.push({
+        name: `${label}: ${name} scaffold`,
+        status: "skip",
+        detail: "scaffold files are agent-UID-owned (mode 0600) \u2014 unverifiable from the host operator; the agent process reads them fine. Verify in-container if needed: `docker exec switchroom-" + name + " sh -lc 'python3 -m json.tool /state/agent/.mcp.json >/dev/null && echo ok'`"
+      });
+      continue;
+    }
+    let mcpOk = false;
+    let mcpDetail = `no .mcp.json`;
+    if (mcpRead.kind === "ok") {
+      const mcpServers = mcpRead.data?.mcpServers ?? {};
+      const entry = mcpServers[mcpKey];
+      if (!entry) {
+        mcpDetail = `.mcp.json has no ${mcpKey} server`;
+      } else if (!entry.env || Object.keys(entry.env).length === 0) {
+        mcpDetail = `${mcpKey} entry has no env block \u2014 Claude spawns MCP with a sanitized env; the launcher can't reach switchroom.yaml/the broker (bug-8 class)`;
+      } else {
+        mcpOk = true;
+      }
+    } else if (mcpRead.kind === "corrupt") {
+      mcpDetail = ".mcp.json exists but is not valid JSON (corrupt)";
+    }
+    let trustOk = false;
+    let trustDetail = "no .claude/.claude.json";
+    if (trustRead.kind === "ok") {
+      const projects = trustRead.data?.projects ?? {};
+      const proj = projects[resolve30(agentDir)];
+      const enabled = proj?.enabledMcpjsonServers;
+      if (Array.isArray(enabled) && enabled.includes(mcpKey)) {
+        trustOk = true;
+      } else {
+        trustDetail = `${mcpKey} not in projects[].enabledMcpjsonServers \u2014 Claude silently ignores the un-allowlisted server (bug-9 / scaffold-ordering class)`;
+      }
+    } else if (trustRead.kind === "corrupt") {
+      trustDetail = ".claude.json exists but is not valid JSON (corrupt)";
+    }
+    if (mcpOk && trustOk) {
+      results.push({
+        name: `${label}: ${name} scaffold`,
+        status: "ok",
+        detail: `${mcpKey} wired in .mcp.json (with env) and trusted in .claude.json`
+      });
+    } else {
+      results.push({
+        name: `${label}: ${name} scaffold`,
+        status: "fail",
+        detail: !mcpOk ? mcpDetail : trustDetail,
+        fix: "`switchroom agent restart " + name + "` (reconcile regenerates .mcp.json + re-trusts); if it persists, this is a scaffold bug \u2014 report it"
+      });
+    }
+  }
+  return results;
+}
+var init_doctor_scaffold_wiring = () => {};
+
 // src/cli/doctor-microsoft.ts
 import {
   existsSync as realExistsSync2,
   readFileSync as realReadFileSync2
 } from "node:fs";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 import { homedir as homedir25 } from "node:os";
 function resolveDeps2(deps) {
   const home2 = deps.homeDir?.() ?? homedir25();
   return {
     existsSync: deps.existsSync ?? realExistsSync2,
     readFileSync: deps.readFileSync ?? realReadFileSync2,
-    agentsDir: join45(home2, ".switchroom", "agents"),
+    agentsDir: join46(home2, ".switchroom", "agents"),
     now: deps.now ?? Date.now
   };
 }
@@ -29765,7 +29869,7 @@ function checkOAuthClient2(config, anyAgentEnabled) {
   ];
 }
 function readHeartbeat(d, agentName) {
-  const path4 = join45(d.agentsDir, agentName, "m365-launcher.heartbeat.json");
+  const path4 = join46(d.agentsDir, agentName, "m365-launcher.heartbeat.json");
   if (!d.existsSync(path4)) {
     return { error: "heartbeat file missing \u2014 launcher has not yet started" };
   }
@@ -29840,9 +29944,21 @@ function runMicrosoftChecks(config, deps = {}) {
   const msAgents = computeMicrosoftEnabledAgents(config);
   results.push(...checkOAuthClient2(config, msAgents.length > 0));
   results.push(...checkLauncherHeartbeat(msAgents, d));
+  results.push(...checkIntegrationScaffoldWiring({
+    label: "microsoft",
+    mcpKey: "ms-365",
+    agents: msAgents,
+    agentsDir: d.agentsDir,
+    deps: {
+      existsSync: d.existsSync,
+      readFileSync: (path4) => d.readFileSync(path4, "utf-8")
+    }
+  }));
   return results;
 }
-var init_doctor_microsoft = () => {};
+var init_doctor_microsoft = __esm(() => {
+  init_doctor_scaffold_wiring();
+});
 
 // src/cli/doctor-notion.ts
 import {
@@ -29850,7 +29966,7 @@ import {
   readFileSync as realReadFileSync3,
   statSync as realStatSync
 } from "node:fs";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 import { homedir as homedir26 } from "node:os";
 function resolveDeps3(deps) {
   const home2 = deps.homeDir?.() ?? homedir26();
@@ -29858,7 +29974,7 @@ function resolveDeps3(deps) {
     existsSync: deps.existsSync ?? realExistsSync3,
     readFileSync: deps.readFileSync ?? realReadFileSync3,
     statSync: deps.statSync ?? realStatSync,
-    agentsDir: join46(home2, ".switchroom", "agents"),
+    agentsDir: join47(home2, ".switchroom", "agents"),
     now: deps.now ?? Date.now,
     vaultAclReader: deps.vaultAclReader ?? (async () => ({ kind: "unreachable", msg: "no default reader wired" }))
   };
@@ -29983,7 +30099,7 @@ function checkLauncherHeartbeat2(notionAgents, d) {
     return [];
   const results = [];
   for (const name of notionAgents) {
-    const heartbeatPath = join46(d.agentsDir, name, "notion-launcher.heartbeat.json");
+    const heartbeatPath = join47(d.agentsDir, name, "notion-launcher.heartbeat.json");
     if (!d.existsSync(heartbeatPath)) {
       results.push({
         name: `notion:launcher-heartbeat:${name}`,
@@ -30033,11 +30149,22 @@ async function runNotionChecks(config, deps = {}) {
   if (notionAgents.length > 0 && config.notion_workspace) {
     results.push(...await checkVaultAclAligned(config, notionAgents, d));
     results.push(...checkLauncherHeartbeat2(notionAgents, d));
+    results.push(...checkIntegrationScaffoldWiring({
+      label: "notion",
+      mcpKey: "notion",
+      agents: notionAgents,
+      agentsDir: d.agentsDir,
+      deps: {
+        existsSync: d.existsSync,
+        readFileSync: (path4) => d.readFileSync(path4, "utf-8")
+      }
+    }));
   }
   return results;
 }
 var HEARTBEAT_STALE_MS;
 var init_doctor_notion = __esm(() => {
+  init_doctor_scaffold_wiring();
   HEARTBEAT_STALE_MS = 60 * 1000;
 });
 
@@ -30048,9 +30175,9 @@ import {
   statSync as realStatSync2
 } from "node:fs";
 import { homedir as homedir27 } from "node:os";
-import { join as join47 } from "node:path";
+import { join as join48 } from "node:path";
 function runCredentialsMigrationChecks(config, deps = {}) {
-  const credDir = deps.credentialsDir ?? join47(homedir27(), ".switchroom", "credentials");
+  const credDir = deps.credentialsDir ?? join48(homedir27(), ".switchroom", "credentials");
   const existsSync49 = deps.existsSync ?? ((p) => realExistsSync4(p));
   const readdirSync19 = deps.readdirSync ?? ((p) => realReaddirSync(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
@@ -30078,7 +30205,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
   const flat = [];
   const perAgentDirs = [];
   for (const e of entries) {
-    const full = join47(credDir, e);
+    const full = join48(credDir, e);
     if (isDirectory(full) && agentNames.has(e)) {
       perAgentDirs.push(e);
     } else {
@@ -30202,13 +30329,13 @@ var init_doctor_inlined_secrets = __esm(() => {
 // src/cli/doctor-audit-integrity.ts
 import { readFileSync as fsReadFileSync2 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function rootWrittenLogs(home2) {
   return [
-    { label: "vault-broker", path: join48(home2, ".switchroom", "vault-audit.log") },
+    { label: "vault-broker", path: join49(home2, ".switchroom", "vault-audit.log") },
     {
       label: "hostd",
-      path: join48(home2, ".switchroom", "host-control-audit.log")
+      path: join49(home2, ".switchroom", "host-control-audit.log")
     }
   ];
 }
@@ -30273,7 +30400,7 @@ var init_doctor_audit_integrity = __esm(() => {
 import { connect as connect2 } from "node:net";
 async function hostdRequest(opts, req) {
   const timeoutMs = opts.timeoutMs ?? 5000;
-  return new Promise((resolve30, reject) => {
+  return new Promise((resolve31, reject) => {
     const socket = connect2(opts.socketPath);
     let buf = "";
     let settled = false;
@@ -30319,7 +30446,7 @@ async function hostdRequest(opts, req) {
         settled = true;
         clearTimeout(timer);
         socket.end();
-        resolve30(resp);
+        resolve31(resp);
       } catch (err) {
         if (settled)
           return;
@@ -30352,13 +30479,13 @@ var init_client4 = __esm(() => {
 // src/cli/doctor-agent-smoke.ts
 import { existsSync as existsSync49 } from "node:fs";
 import { homedir as homedir29 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 async function runAgentSmokeChecks(config, deps = {}) {
   if (deps.fast)
     return [];
   const home2 = deps.homeDir ?? homedir29();
-  const sock = deps.operatorSockPath ?? join49(home2, ".switchroom", "hostd", "operator", "sock");
+  const sock = deps.operatorSockPath ?? join50(home2, ".switchroom", "hostd", "operator", "sock");
   if (!deps.hostdRequestImpl && !existsSync49(sock)) {
     return [
       {
@@ -30439,7 +30566,7 @@ var init_doctor_agent_smoke = __esm(() => {
 import { execFileSync as execFileSync14 } from "node:child_process";
 import { existsSync as existsSync50, statSync as statSync22 } from "node:fs";
 import { homedir as homedir30 } from "node:os";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 function probeBindMountInode(hostPath, brokerContainerPath, opts) {
   const statHost = opts?.statHost ?? defaultStatHost;
   const statBroker = opts?.statBroker ?? defaultStatBroker;
@@ -30585,13 +30712,13 @@ function runVaultBrokerDurabilityChecks(_config, opts) {
     probeBrokerUnlocked(opts?.statusProbe),
     probeAutoUnlockBlob(home2),
     probeMachineIdMount(),
-    formatBindMountResult("vault-broker: vault.enc bind mount", join50(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc", probe2(join50(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc")),
-    formatBindMountResult("vault-broker: vault-grants.db bind mount (#1737)", join50(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db", probe2(join50(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db")),
-    formatBindMountResult("vault-broker: vault-audit.log bind mount (#1025)", join50(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log", probe2(join50(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log"))
+    formatBindMountResult("vault-broker: vault.enc bind mount", join51(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc", probe2(join51(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc")),
+    formatBindMountResult("vault-broker: vault-grants.db bind mount (#1737)", join51(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db", probe2(join51(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db")),
+    formatBindMountResult("vault-broker: vault-audit.log bind mount (#1025)", join51(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log", probe2(join51(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log"))
   ];
 }
 function probeAutoUnlockBlob(home2) {
-  const blobPath = join50(home2, ".switchroom", "vault-auto-unlock");
+  const blobPath = join51(home2, ".switchroom", "vault-auto-unlock");
   if (!existsSync50(blobPath)) {
     return {
       name: "vault-broker: auto-unlock blob",
@@ -30702,16 +30829,16 @@ import {
   readdirSync as readdirSync19,
   statSync as statSync23
 } from "node:fs";
-import { dirname as dirname12, join as join51, resolve as resolve30 } from "node:path";
+import { dirname as dirname12, join as join52, resolve as resolve31 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
-  const nvmRoot = join51(process.env.HOME ?? "", ".nvm", "versions", "node");
+  const nvmRoot = join52(process.env.HOME ?? "", ".nvm", "versions", "node");
   if (!existsSync51(nvmRoot))
     return null;
   try {
     const versions = readdirSync19(nvmRoot).sort().reverse();
     for (const v of versions) {
-      const candidate = join51(nvmRoot, v, "bin", bin);
+      const candidate = join52(nvmRoot, v, "bin", bin);
       try {
         const s = statSync23(candidate);
         if (s.isFile() || s.isSymbolicLink()) {
@@ -30876,7 +31003,7 @@ function findChromium(homeDir = process.env.HOME ?? "", envBrowsersPath = proces
   if (envBrowsersPath && envBrowsersPath.length > 0) {
     cacheLocations.push(envBrowsersPath);
   }
-  cacheLocations.push(join51(homeDir, ".cache", "ms-playwright"));
+  cacheLocations.push(join52(homeDir, ".cache", "ms-playwright"));
   for (const cacheDir of cacheLocations) {
     if (!existsSync51(cacheDir))
       continue;
@@ -30884,10 +31011,10 @@ function findChromium(homeDir = process.env.HOME ?? "", envBrowsersPath = proces
       const entries = readdirSync19(cacheDir).filter((e) => e.startsWith("chromium"));
       for (const entry of entries) {
         const candidates2 = [
-          join51(cacheDir, entry, "chrome-linux64", "chrome"),
-          join51(cacheDir, entry, "chrome-linux", "chrome"),
-          join51(cacheDir, entry, "chrome-linux64", "headless_shell"),
-          join51(cacheDir, entry, "chrome-linux", "headless_shell")
+          join52(cacheDir, entry, "chrome-linux64", "chrome"),
+          join52(cacheDir, entry, "chrome-linux", "chrome"),
+          join52(cacheDir, entry, "chrome-linux64", "headless_shell"),
+          join52(cacheDir, entry, "chrome-linux", "headless_shell")
         ];
         for (const path4 of candidates2) {
           if (existsSync51(path4))
@@ -30997,7 +31124,7 @@ function checkUserDeclaredMcps(name, agentConfig, config, renderedMcpServers) {
 function checkLegacyState() {
   const results = [];
   const h = process.env.HOME ?? "/root";
-  const clerkDir = join51(h, LEGACY_STATE_DIR);
+  const clerkDir = join52(h, LEGACY_STATE_DIR);
   const clerkPresent = existsSync51(clerkDir);
   results.push({
     name: "legacy ~/.clerk state",
@@ -31007,7 +31134,7 @@ function checkLegacyState() {
       fix: "Legacy state detected. Run `mv ~/.clerk ~/.switchroom` and rename " + "any top-level `clerk:` key in switchroom.yaml to `switchroom:`. " + "This back-compat shim is REMOVED in v0.13.0 \u2014 no automatic " + "migration exists."
     } : {}
   });
-  const legacySock = join51(h, ".switchroom", "vault-broker.sock");
+  const legacySock = join52(h, ".switchroom", "vault-broker.sock");
   let sockStat = null;
   try {
     sockStat = lstatSync5(legacySock);
@@ -31303,7 +31430,7 @@ async function checkHindsight(config) {
 }
 function checkPendingRetainsQueue(dir) {
   const home2 = process.env.HOME ?? "";
-  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join51(home2, ".hindsight", "pending-retains");
+  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join52(home2, ".hindsight", "pending-retains");
   if (!existsSync51(pendingDir)) {
     return {
       name: "pending-retains queue",
@@ -31434,7 +31561,7 @@ async function checkTelegram(config) {
     const plugin = agentConfig.channels?.telegram?.plugin ?? "switchroom";
     if (plugin !== "switchroom")
       continue;
-    const envPath = join51(agentsDir, name, "telegram", ".env");
+    const envPath = join52(agentsDir, name, "telegram", ".env");
     const read = tryReadHostFile(envPath);
     if (read.kind === "eacces") {
       results.push({
@@ -31517,7 +31644,7 @@ function checkStartShStale(agentName, startShPath) {
 }
 function checkLeakedHomeSwitchroom(agentName, agentDir) {
   const label = `${agentName}: $HOME/.switchroom symlink (#910)`;
-  const path4 = join51(agentDir, "home", ".switchroom");
+  const path4 = join52(agentDir, "home", ".switchroom");
   let stats;
   try {
     stats = lstatSync5(path4);
@@ -31554,7 +31681,7 @@ function checkLeakedHomeSwitchroom(agentName, agentDir) {
 }
 function checkRepoHygiene(repoRoot) {
   const results = [];
-  const exportDir = join51(repoRoot, "clerk-export");
+  const exportDir = join52(repoRoot, "clerk-export");
   if (existsSync51(exportDir)) {
     results.push({
       name: "repo hygiene: clerk-export/ on disk (#1072)",
@@ -31563,7 +31690,7 @@ function checkRepoHygiene(repoRoot) {
       fix: `Run scripts/migrate-clerk-export-to-vault.sh to move the bundle ` + `into the vault, then delete the on-disk copy.`
     });
   }
-  const knownTarball = join51(repoRoot, "clerk-export-with-secrets.tar.gz");
+  const knownTarball = join52(repoRoot, "clerk-export-with-secrets.tar.gz");
   if (existsSync51(knownTarball)) {
     results.push({
       name: "repo hygiene: clerk-export-with-secrets.tar.gz on disk (#1072)",
@@ -31581,7 +31708,7 @@ function checkRepoHygiene(repoRoot) {
         results.push({
           name: `repo hygiene: ${name} on disk (#1072)`,
           status: "warn",
-          detail: `${join51(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
+          detail: `${join52(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
           fix: `Inspect, migrate any secrets into the vault, then delete the ` + `archive.`
         });
       }
@@ -31604,9 +31731,9 @@ function checkRepoHygiene(repoRoot) {
 }
 function isSwitchroomCheckout(dir) {
   try {
-    if (!existsSync51(join51(dir, ".git")))
+    if (!existsSync51(join52(dir, ".git")))
       return false;
-    const pkgPath = join51(dir, "package.json");
+    const pkgPath = join52(dir, "package.json");
     if (!existsSync51(pkgPath))
       return false;
     const pkg = JSON.parse(readFileSync46(pkgPath, "utf-8"));
@@ -31621,7 +31748,7 @@ function checkAgents(config, configPath) {
   const statuses = getAllAgentStatuses(config);
   const authStatuses = getAllAuthStatuses(config);
   for (const [name, agentConfig] of Object.entries(config.agents)) {
-    const agentDir = resolve30(agentsDir, name);
+    const agentDir = resolve31(agentsDir, name);
     if (!existsSync51(agentDir)) {
       results.push({
         name: `${name}: scaffold`,
@@ -31643,7 +31770,7 @@ function checkAgents(config, configPath) {
         fix: `Rotate the bot token (e.g. via \`switchroom vault\`), then run ` + `\`switchroom agent unquarantine ${name}\` and \`switchroom agent restart ${name}\``
       });
     }
-    results.push(checkStartShStale(name, join51(agentDir, "start.sh")));
+    results.push(checkStartShStale(name, join52(agentDir, "start.sh")));
     results.push(checkLeakedHomeSwitchroom(name, agentDir));
     const status = statuses[name];
     const active = status?.active ?? "unknown";
@@ -31720,7 +31847,7 @@ function checkAgents(config, configPath) {
       }
     }
     if (agentConfig.channels?.telegram?.plugin === "switchroom") {
-      const mcpJsonPath = join51(agentDir, ".mcp.json");
+      const mcpJsonPath = join52(agentDir, ".mcp.json");
       if (!existsSync51(mcpJsonPath)) {
         results.push({
           name: `${name}: .mcp.json`,
@@ -31804,7 +31931,7 @@ function mffAgentName(config) {
 function mffEnvPath(config) {
   const home2 = process.env.HOME ?? "/root";
   const agent = mffAgentName(config);
-  return agent ? resolve30(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve30(home2, ".switchroom/credentials/my-family-finance/.env");
+  return agent ? resolve31(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve31(home2, ".switchroom/credentials/my-family-finance/.env");
 }
 function mffEnvState(envPath) {
   if (!existsSync51(envPath))
@@ -32022,7 +32149,7 @@ async function checkMffAuthFlow(envPath = mffEnvPath(), timeoutMs = 8000) {
     };
   }
   const credDir = dirname12(envPath);
-  const authScript = join51(credDir, "claude-auth.py");
+  const authScript = join52(credDir, "claude-auth.py");
   if (!existsSync51(authScript)) {
     return {
       name: "mff: auth flow",
@@ -32220,14 +32347,14 @@ async function checkManifestDrift(probers) {
   return results;
 }
 function runDockerSection(config) {
-  const composePath = resolve30(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
+  const composePath = resolve31(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
   const active = isDockerMode({ composePath });
   let composeYaml;
   let dockerfileAgent;
   try {
     composeYaml = readFileSync46(composePath, "utf8");
   } catch {}
-  const dockerfilePath = resolve30(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
+  const dockerfilePath = resolve31(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
   try {
     dockerfileAgent = readFileSync46(dockerfilePath, "utf8");
   } catch {}
@@ -40594,7 +40721,7 @@ class Protocol {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1000;
-        await new Promise((resolve47) => setTimeout(resolve47, pollInterval));
+        await new Promise((resolve48) => setTimeout(resolve48, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -40606,7 +40733,7 @@ class Protocol {
   }
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve47, reject) => {
+    return new Promise((resolve48, reject) => {
       const earlyReject = (error2) => {
         reject(error2);
       };
@@ -40684,7 +40811,7 @@ class Protocol {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve47(parseResult.data);
+            resolve48(parseResult.data);
           }
         } catch (error2) {
           reject(error2);
@@ -40875,12 +41002,12 @@ class Protocol {
         interval = task.pollInterval;
       }
     } catch {}
-    return new Promise((resolve47, reject) => {
+    return new Promise((resolve48, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve47, interval);
+      const timeoutId = setTimeout(resolve48, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
@@ -43865,7 +43992,7 @@ var require_compile = __commonJS((exports2) => {
     const schOrFunc = root.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve47.call(this, root, ref);
+    let _sch = resolve48.call(this, root, ref);
     if (_sch === undefined) {
       const schema = (_a = root.localRefs) === null || _a === undefined ? undefined : _a[ref];
       const { schemaId } = this.opts;
@@ -43892,7 +44019,7 @@ var require_compile = __commonJS((exports2) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve47(root, ref) {
+  function resolve48(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -44422,7 +44549,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
     }
     return uri;
   }
-  function resolve47(baseURI, relativeURI, options) {
+  function resolve48(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse6(baseURI, schemelessOptions), parse6(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
@@ -44650,7 +44777,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
   var fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve47,
+    resolve: resolve48,
     resolveComponent,
     equal,
     serialize,
@@ -48033,12 +48160,12 @@ class StdioServerTransport {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve47) => {
+    return new Promise((resolve48) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve47();
+        resolve48();
       } else {
-        this._stdout.once("drain", resolve47);
+        this._stdout.once("drain", resolve48);
       }
     });
   }
@@ -48930,8 +49057,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.13.58";
-var COMMIT_SHA = "20818078";
+var VERSION = "0.13.60";
+var COMMIT_SHA = "9696d125";
 
 // src/cli/agent.ts
 init_source();
@@ -50475,6 +50602,26 @@ function resolveNotionMcpEntry(agentName, agentConfig, switchroomConfig) {
   };
   return entry;
 }
+var INTEGRATION_MCP_RESOLVERS = [
+  {
+    label: "Google Workspace",
+    emitKey: "gdrive",
+    retractionKey: "gdrive",
+    resolve: resolveGdriveMcpEntry
+  },
+  {
+    label: "Microsoft 365",
+    emitKey: "ms-365",
+    retractionKey: "ms-365",
+    resolve: resolveMs365McpEntry
+  },
+  {
+    label: "Notion",
+    emitKey: "notion",
+    retractionKey: "notion",
+    resolve: resolveNotionMcpEntry
+  }
+];
 function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchroomConfig, userIdOverride, switchroomConfigPath) {
   const agentConfig = resolveAgentConfig(switchroomConfig?.defaults, switchroomConfig?.profiles, agentConfigRaw);
   const agentDir = resolve10(agentsDir, name);
@@ -50583,18 +50730,10 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
           settings.mcpServers[entry.key] = entry.value;
         }
       }
-      {
-        const gdrive = resolveGdriveMcpEntry(name, agentConfig, switchroomConfig);
-        if (gdrive && !settings.mcpServers[gdrive.key]) {
-          settings.mcpServers[gdrive.key] = gdrive.value;
-        }
-        const ms365 = resolveMs365McpEntry(name, agentConfig, switchroomConfig);
-        if (ms365 && !settings.mcpServers[ms365.key]) {
-          settings.mcpServers[ms365.key] = ms365.value;
-        }
-        const notion = resolveNotionMcpEntry(name, agentConfig, switchroomConfig);
-        if (notion && !settings.mcpServers[notion.key]) {
-          settings.mcpServers[notion.key] = notion.value;
+      for (const integration of INTEGRATION_MCP_RESOLVERS) {
+        const entry = integration.resolve(name, agentConfig, switchroomConfig);
+        if (entry && !settings.mcpServers[entry.key]) {
+          settings.mcpServers[entry.key] = entry.value;
         }
       }
       installHindsightPlugin(name, agentDir, switchroomConfig);
@@ -50661,17 +50800,11 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
       }
     }
     if (switchroomConfig) {
-      const gdrive = resolveGdriveMcpEntry(name, agentConfig, switchroomConfig);
-      if (gdrive) {
-        mcpServers[gdrive.key] = gdrive.value;
-      }
-      const ms365 = resolveMs365McpEntry(name, agentConfig, switchroomConfig);
-      if (ms365) {
-        mcpServers[ms365.key] = ms365.value;
-      }
-      const notion = resolveNotionMcpEntry(name, agentConfig, switchroomConfig);
-      if (notion) {
-        mcpServers[notion.key] = notion.value;
+      for (const integration of INTEGRATION_MCP_RESOLVERS) {
+        const entry = integration.resolve(name, agentConfig, switchroomConfig);
+        if (entry) {
+          mcpServers[entry.key] = entry.value;
+        }
       }
     }
     if (agentConfig.mcp_servers) {
@@ -51075,15 +51208,6 @@ function buildSettingsHooksBlock(p) {
         }
       ]
     },
-    {
-      hooks: [
-        {
-          type: "command",
-          command: wrap("hook:ack-first-pretool", `node "${join8(DOCKER_BUNDLED_HOOKS_PATH, "ack-first-pretool.mjs")}"`),
-          timeout: 5
-        }
-      ]
-    },
     {
       matcher: "^(Write|Edit|MultiEdit)$",
       hooks: [
@@ -51478,23 +51602,13 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
       }
     }
     {
-      const gdrive = resolveGdriveMcpEntry(name, agentConfig, switchroomConfig);
-      if (gdrive) {
-        mcpServers[gdrive.key] = gdrive.value;
-      } else {
-        delete mcpServers["gdrive"];
-      }
-      const ms365 = resolveMs365McpEntry(name, agentConfig, switchroomConfig);
-      if (ms365) {
-        mcpServers[ms365.key] = ms365.value;
-      } else {
-        delete mcpServers["ms-365"];
-      }
-      const notion = resolveNotionMcpEntry(name, agentConfig, switchroomConfig);
-      if (notion) {
-        mcpServers[notion.key] = notion.value;
-      } else {
-        delete mcpServers["notion"];
+      for (const integration of INTEGRATION_MCP_RESOLVERS) {
+        const entry = integration.resolve(name, agentConfig, switchroomConfig);
+        if (entry) {
+          mcpServers[entry.key] = entry.value;
+        } else {
+          delete mcpServers[integration.retractionKey];
+        }
       }
     }
     if (agentConfig.mcp_servers) {
@@ -51677,17 +51791,11 @@ ${body}
       }
     }
     {
-      const gdrive = resolveGdriveMcpEntry(name, agentConfig, switchroomConfig);
-      if (gdrive) {
-        mcpServers[gdrive.key] = gdrive.value;
-      }
-      const ms365 = resolveMs365McpEntry(name, agentConfig, switchroomConfig);
-      if (ms365) {
-        mcpServers[ms365.key] = ms365.value;
-      }
-      const notion = resolveNotionMcpEntry(name, agentConfig, switchroomConfig);
-      if (notion) {
-        mcpServers[notion.key] = notion.value;
+      for (const integration of INTEGRATION_MCP_RESOLVERS) {
+        const entry = integration.resolve(name, agentConfig, switchroomConfig);
+        if (entry) {
+          mcpServers[entry.key] = entry.value;
+        }
       }
     }
     if (agentConfig.mcp_servers) {
@@ -72182,15 +72290,15 @@ init_loader();
 init_lifecycle();
 import { cpSync as cpSync2, existsSync as existsSync52, mkdirSync as mkdirSync28, readFileSync as readFileSync47, realpathSync as realpathSync5, rmSync as rmSync12, statSync as statSync24 } from "node:fs";
 import { spawnSync as spawnSync8 } from "node:child_process";
-import { join as join52, dirname as dirname13, resolve as resolve31 } from "node:path";
+import { join as join53, dirname as dirname13, resolve as resolve32 } from "node:path";
 import { homedir as homedir31 } from "node:os";
-var DEFAULT_COMPOSE_PATH = join52(homedir31(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH = join53(homedir31(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
   let dir = dirname13(scriptPath);
   for (let i = 0;i < 12; i++) {
-    if (existsSync52(join52(dir, ".git"))) {
+    if (existsSync52(join53(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync47(join52(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync47(join53(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
@@ -72320,8 +72428,8 @@ function planUpdate(opts) {
         opts.syncBundledSkillsFn();
         return;
       }
-      const source = resolve31(import.meta.dirname, "../../skills");
-      const dest = join52(homedir31(), ".switchroom", "skills", "_bundled");
+      const source = resolve32(import.meta.dirname, "../../skills");
+      const dest = join53(homedir31(), ".switchroom", "skills", "_bundled");
       if (!existsSync52(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
 `);
@@ -72435,7 +72543,7 @@ function defaultStatusProbe(composePath) {
       } catch {}
       let dir = dirname13(scriptPath);
       for (let i = 0;i < 8; i++) {
-        const pkgPath = join52(dir, "package.json");
+        const pkgPath = join53(dir, "package.json");
         if (existsSync52(pkgPath)) {
           try {
             const pkg = JSON.parse(readFileSync47(pkgPath, "utf-8"));
@@ -72647,7 +72755,7 @@ init_source();
 init_helpers();
 init_loader();
 init_lifecycle();
-import { resolve as resolve32 } from "node:path";
+import { resolve as resolve33 } from "node:path";
 
 // src/cli/version.ts
 init_source();
@@ -72655,7 +72763,7 @@ init_helpers();
 init_lifecycle();
 import { execSync as execSync4 } from "node:child_process";
 import { existsSync as existsSync53, readFileSync as readFileSync48 } from "node:fs";
-import { dirname as dirname14, join as join53 } from "node:path";
+import { dirname as dirname14, join as join54 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync4("claude --version 2>/dev/null", {
@@ -72705,11 +72813,11 @@ function formatUptime3(timestamp) {
 function locateSwitchroomInstallDir() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const pkgPath = join53(dir, "package.json");
+    const pkgPath = join54(dir, "package.json");
     if (existsSync53(pkgPath)) {
       try {
         const pkg = JSON.parse(readFileSync48(pkgPath, "utf-8"));
-        if (pkg.name === "switchroom" && existsSync53(join53(dir, ".git"))) {
+        if (pkg.name === "switchroom" && existsSync53(join54(dir, ".git"))) {
           return dir;
         }
       } catch {}
@@ -72802,7 +72910,7 @@ function registerRestartCommand(program3) {
         }
         const didRestart = res.restarted || !graceful;
         if (didRestart) {
-          const agentDir = resolve32(agentsDir, name);
+          const agentDir = resolve33(agentsDir, name);
           const converged = waitForAuthConverge(name, agentDir);
           if (!converged) {
             console.log(source_default.yellow(`  ${name}: agent is up but auth status didn't converge in 30s \u2014 check logs`));
@@ -72883,7 +72991,7 @@ Dependency manifest`));
 // src/cli/handoff.ts
 init_helpers();
 init_loader();
-import { resolve as resolve33 } from "node:path";
+import { resolve as resolve34 } from "node:path";
 function registerHandoffCommand(program3) {
   program3.command("handoff <agent>", { hidden: true }).description("Build the agent's session handoff sidecars \u2014 a transcript-tail " + "briefing (.handoff.md) and topic line (.handoff-topic). " + "[internal \u2014 used by the Stop hook]").option("--max-turns <n>", "Max turns kept in the handoff transcript tail", String(DEFAULT_MAX_TURNS)).action(withConfigError(async (agentName, opts) => {
     let agentConfig;
@@ -72897,7 +73005,7 @@ function registerHandoffCommand(program3) {
         return;
       }
       const agentsDir = resolveAgentsDir(config);
-      agentDir = resolve33(agentsDir, agentName);
+      agentDir = resolve34(agentsDir, agentName);
     } catch (err) {
       if (!(err instanceof ConfigError))
         throw err;
@@ -72912,7 +73020,7 @@ function registerHandoffCommand(program3) {
 `);
       return;
     }
-    const claudeConfigDir = resolve33(agentDir, ".claude");
+    const claudeConfigDir = resolve34(agentDir, ".claude");
     const jsonl = findLatestSessionJsonl(claudeConfigDir);
     if (!jsonl) {
       process.stderr.write(`handoff: no session JSONL under ${claudeConfigDir}/projects; skipping
@@ -72946,7 +73054,7 @@ import {
   writeFileSync as writeFileSync26,
   writeSync as writeSync7
 } from "node:fs";
-import { join as join54 } from "node:path";
+import { join as join55 } from "node:path";
 import { randomBytes as randomBytes12 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
 
@@ -73266,7 +73374,7 @@ function redactedMarker(ruleId) {
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path4 = join54(stateDir, ISSUES_FILE);
+  const path4 = join55(stateDir, ISSUES_FILE);
   if (!existsSync54(path4))
     return [];
   let raw;
@@ -73343,8 +73451,8 @@ function record(stateDir, input, nowFn = Date.now) {
     return result;
   });
 }
-function resolve34(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync54(join54(stateDir, ISSUES_FILE)))
+function resolve35(stateDir, fingerprint, nowFn = Date.now) {
+  if (!existsSync54(join55(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -73362,7 +73470,7 @@ function resolve34(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function resolveAllBySource(stateDir, source, nowFn = Date.now) {
-  if (!existsSync54(join54(stateDir, ISSUES_FILE)))
+  if (!existsSync54(join55(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -73380,7 +73488,7 @@ function resolveAllBySource(stateDir, source, nowFn = Date.now) {
   });
 }
 function prune(stateDir, opts = {}) {
-  if (!existsSync54(join54(stateDir, ISSUES_FILE)))
+  if (!existsSync54(join55(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -73413,7 +73521,7 @@ function ensureDir(stateDir) {
   mkdirSync29(stateDir, { recursive: true });
 }
 function writeAll(stateDir, events) {
-  const path4 = join54(stateDir, ISSUES_FILE);
+  const path4 = join55(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path4}.tmp-${process.pid}-${randomBytes12(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
@@ -73435,7 +73543,7 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath = join54(stateDir, entry);
+    const tmpPath = join55(stateDir, entry);
     try {
       const stat = statSync25(tmpPath);
       if (stat.mtimeMs < cutoff) {
@@ -73447,7 +73555,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join54(stateDir, ISSUES_LOCK);
+  const lockPath = join55(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -73631,11 +73739,11 @@ function registerIssuesCommand(program3) {
       const stateDir = resolveStateDir2(opts);
       let flipped;
       if (opts.source && opts.code) {
-        flipped = resolve34(stateDir, computeFingerprint(opts.source, opts.code));
+        flipped = resolve35(stateDir, computeFingerprint(opts.source, opts.code));
       } else if (opts.source && !fingerprint) {
         flipped = resolveAllBySource(stateDir, opts.source);
       } else if (fingerprint) {
-        flipped = resolve34(stateDir, fingerprint);
+        flipped = resolve35(stateDir, fingerprint);
       } else {
         process.stderr.write(`issues resolve: need either <fingerprint>, --source, or --source + --code
 `);
@@ -73732,7 +73840,7 @@ function relTime(deltaMs) {
 init_source();
 import { existsSync as existsSync57 } from "node:fs";
 import { homedir as homedir34 } from "node:os";
-import { join as join57, resolve as resolve35 } from "node:path";
+import { join as join58, resolve as resolve36 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash11 } from "node:crypto";
@@ -73743,7 +73851,7 @@ import {
   rmSync as rmSync13,
   writeFileSync as writeFileSync27
 } from "node:fs";
-import { dirname as dirname15, join as join55 } from "node:path";
+import { dirname as dirname15, join as join56 } from "node:path";
 import { homedir as homedir32 } from "node:os";
 import { execFileSync as execFileSync15 } from "node:child_process";
 
@@ -73756,7 +73864,7 @@ class PythonEnvError extends Error {
   }
 }
 function defaultPythonCacheRoot() {
-  return join55(homedir32(), ".switchroom", "deps", "python");
+  return join56(homedir32(), ".switchroom", "deps", "python");
 }
 function hashFile(path4) {
   return createHash11("sha256").update(readFileSync50(path4)).digest("hex");
@@ -73768,11 +73876,11 @@ function ensurePythonEnv(opts) {
   if (!existsSync55(requirementsPath)) {
     throw new PythonEnvError(`requirements file not found: ${requirementsPath}`);
   }
-  const venvDir = join55(cacheRoot, skillName);
-  const stampPath = join55(venvDir, ".requirements.sha256");
-  const binDir = join55(venvDir, "bin");
-  const pythonBin = join55(binDir, "python");
-  const pipBin = join55(binDir, "pip");
+  const venvDir = join56(cacheRoot, skillName);
+  const stampPath = join56(venvDir, ".requirements.sha256");
+  const binDir = join56(venvDir, "bin");
+  const pythonBin = join56(binDir, "python");
+  const pipBin = join56(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
   if (!force && existsSync55(stampPath) && existsSync55(pythonBin)) {
     const existingHash = readFileSync50(stampPath, "utf8").trim();
@@ -73831,7 +73939,7 @@ import {
   rmSync as rmSync14,
   writeFileSync as writeFileSync28
 } from "node:fs";
-import { dirname as dirname16, join as join56 } from "node:path";
+import { dirname as dirname16, join as join57 } from "node:path";
 import { homedir as homedir33 } from "node:os";
 import { execFileSync as execFileSync16 } from "node:child_process";
 
@@ -73855,7 +73963,7 @@ var LOCKFILES_FOR = {
   npm: ["package-lock.json"]
 };
 function defaultNodeCacheRoot() {
-  return join56(homedir33(), ".switchroom", "deps", "node");
+  return join57(homedir33(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
   const sourceDir = dirname16(packageJsonPath);
@@ -73864,7 +73972,7 @@ function hashDepInputs(packageJsonPath) {
 `);
   hasher.update(readFileSync51(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
-    const lockPath = join56(sourceDir, lockName);
+    const lockPath = join57(sourceDir, lockName);
     if (existsSync56(lockPath)) {
       hasher.update(`
 `);
@@ -73884,10 +73992,10 @@ function ensureNodeEnv(opts) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
   const sourceDir = dirname16(packageJsonPath);
-  const envDir = join56(cacheRoot, skillName);
-  const stampPath = join56(envDir, ".package.sha256");
-  const nodeModulesDir = join56(envDir, "node_modules");
-  const binDir = join56(nodeModulesDir, ".bin");
+  const envDir = join57(cacheRoot, skillName);
+  const stampPath = join57(envDir, ".package.sha256");
+  const nodeModulesDir = join57(envDir, "node_modules");
+  const binDir = join57(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
   if (!force && existsSync56(stampPath) && existsSync56(nodeModulesDir)) {
     const existingHash = readFileSync51(stampPath, "utf8").trim();
@@ -73905,12 +74013,12 @@ function ensureNodeEnv(opts) {
     rmSync14(envDir, { recursive: true, force: true });
   }
   mkdirSync31(envDir, { recursive: true });
-  copyFileSync9(packageJsonPath, join56(envDir, "package.json"));
+  copyFileSync9(packageJsonPath, join57(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
-    const lockPath = join56(sourceDir, lockName);
+    const lockPath = join57(sourceDir, lockName);
     if (existsSync56(lockPath)) {
-      copyFileSync9(lockPath, join56(envDir, lockName));
+      copyFileSync9(lockPath, join57(envDir, lockName));
       copiedLockfile = true;
     }
   }
@@ -73939,7 +74047,7 @@ function ensureNodeEnv(opts) {
 
 // src/cli/deps.ts
 function builtinSkillsRoot() {
-  return resolve35(homedir34(), ".switchroom/skills/_bundled");
+  return resolve36(homedir34(), ".switchroom/skills/_bundled");
 }
 function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
@@ -73949,13 +74057,13 @@ function registerDepsCommand(program3) {
       console.error(source_default.red(`Bundled skills pool dir not found at ${skillsRoot} \u2014 run \`switchroom update\` to install it.`));
       process.exit(1);
     }
-    const skillDir = join57(skillsRoot, skill);
+    const skillDir = join58(skillsRoot, skill);
     if (!existsSync57(skillDir)) {
       console.error(source_default.red(`Unknown skill: ${skill} (no dir at ${skillDir})`));
       process.exit(1);
     }
-    const requirementsPath = join57(skillDir, "requirements.txt");
-    const packageJsonPath = join57(skillDir, "package.json");
+    const requirementsPath = join58(skillDir, "requirements.txt");
+    const packageJsonPath = join58(skillDir, "package.json");
     const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync57(requirementsPath));
     const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync57(packageJsonPath));
     let did = 0;
@@ -74018,7 +74126,7 @@ function registerDepsCommand(program3) {
 init_helpers();
 init_loader();
 import { existsSync as existsSync58 } from "node:fs";
-import { resolve as resolve36, sep as sep3 } from "node:path";
+import { resolve as resolve37, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync9 } from "node:child_process";
 
 // src/agents/workspace.ts
@@ -74724,8 +74832,8 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const resolvedWorkspace = resolve36(dir);
-    const target = resolve36(resolvedWorkspace, file ?? "AGENTS.md");
+    const resolvedWorkspace = resolve37(dir);
+    const target = resolve37(resolvedWorkspace, file ?? "AGENTS.md");
     if (!isInsideWorkspace(resolvedWorkspace, target)) {
       process.stderr.write(`workspace edit: refusing path traversal outside workspace dir (${target})
 `);
@@ -74793,7 +74901,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve36(dir, ".git");
+    const gitDir = resolve37(dir, ".git");
     if (!existsSync58(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
@@ -74847,7 +74955,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve36(dir, ".git");
+    const gitDir = resolve37(dir, ".git");
     if (!existsSync58(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
@@ -74871,7 +74979,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
     return;
   }
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve36(agentsDir, agentName);
+  const agentDir = resolve37(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync58(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
@@ -74910,7 +75018,7 @@ init_helpers();
 init_loader();
 init_merge();
 import { copyFileSync as copyFileSync10, existsSync as existsSync59, readFileSync as readFileSync52, writeFileSync as writeFileSync29 } from "node:fs";
-import { join as join58, resolve as resolve37 } from "node:path";
+import { join as join59, resolve as resolve38 } from "node:path";
 init_schema();
 function resolveSoulTargetOrExit(program3, agentName) {
   const config = getConfig(program3);
@@ -74923,7 +75031,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const profileName = merged.extends ?? DEFAULT_PROFILE;
   const profilePath = getProfilePath(profileName);
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve37(agentsDir, agentName);
+  const agentDir = resolve38(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync59(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
@@ -74934,7 +75042,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
     profileName,
     profilePath,
     workspaceDir,
-    soulPath: join58(workspaceDir, "SOUL.md"),
+    soulPath: join59(workspaceDir, "SOUL.md"),
     soul: merged.soul
   };
 }
@@ -75001,7 +75109,7 @@ function registerSoulCommand(program3) {
 init_helpers();
 init_loader();
 import { existsSync as existsSync60, readFileSync as readFileSync53, readdirSync as readdirSync21, statSync as statSync26 } from "node:fs";
-import { resolve as resolve38, join as join59 } from "node:path";
+import { resolve as resolve39, join as join60 } from "node:path";
 import { createHash as createHash13 } from "node:crypto";
 init_merge();
 init_hindsight();
@@ -75015,7 +75123,7 @@ function sha256(content) {
   return createHash13("sha256").update(content).digest("hex").slice(0, 16);
 }
 function findLatestTranscriptJsonl(claudeConfigDir) {
-  const projectsDir = join59(claudeConfigDir, "projects");
+  const projectsDir = join60(claudeConfigDir, "projects");
   if (!existsSync60(projectsDir))
     return;
   try {
@@ -75024,8 +75132,8 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const projectPath = join59(projectsDir, entry.name);
-      const transcriptPath = join59(projectPath, "transcript.jsonl");
+      const projectPath = join60(projectsDir, entry.name);
+      const transcriptPath = join60(projectPath, "transcript.jsonl");
       if (!existsSync60(transcriptPath))
         continue;
       const stat3 = statSync26(transcriptPath);
@@ -75088,17 +75196,17 @@ function registerDebugCommand(program3) {
       process.exit(1);
     }
     const agentsDir = resolveAgentsDir(config);
-    const agentDir = resolve38(agentsDir, agentName);
+    const agentDir = resolve39(agentsDir, agentName);
     if (!existsSync60(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
     }
     const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-    const claudeConfigDir = join59(agentDir, ".claude");
-    const claudeMdPath = join59(agentDir, "CLAUDE.md");
-    const soulMdPath = join59(agentDir, "SOUL.md");
-    const workspaceSoulMdPath = join59(workspaceDir, "SOUL.md");
-    const handoffPath = join59(agentDir, ".handoff.md");
+    const claudeConfigDir = join60(agentDir, ".claude");
+    const claudeMdPath = join60(agentDir, "CLAUDE.md");
+    const soulMdPath = join60(agentDir, "SOUL.md");
+    const workspaceSoulMdPath = join60(workspaceDir, "SOUL.md");
+    const handoffPath = join60(agentDir, ".handoff.md");
     const lastN = parseInt(opts.last, 10);
     if (isNaN(lastN) || lastN < 1) {
       console.error("--last must be a positive integer");
@@ -75248,7 +75356,7 @@ init_source();
 // src/worktree/claim.ts
 import { execFileSync as execFileSync17 } from "node:child_process";
 import { closeSync as closeSync12, mkdirSync as mkdirSync33, openSync as openSync12, existsSync as existsSync62, unlinkSync as unlinkSync13 } from "node:fs";
-import { join as join61, resolve as resolve40 } from "node:path";
+import { join as join62, resolve as resolve41 } from "node:path";
 import { homedir as homedir36 } from "node:os";
 import { randomBytes as randomBytes13 } from "node:crypto";
 
@@ -75262,13 +75370,13 @@ import {
   existsSync as existsSync61,
   renameSync as renameSync12
 } from "node:fs";
-import { join as join60, resolve as resolve39 } from "node:path";
+import { join as join61, resolve as resolve40 } from "node:path";
 import { homedir as homedir35 } from "node:os";
 function registryDir() {
-  return resolve39(process.env.SWITCHROOM_WORKTREE_DIR ?? join60(homedir35(), ".switchroom", "worktrees"));
+  return resolve40(process.env.SWITCHROOM_WORKTREE_DIR ?? join61(homedir35(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join60(registryDir(), `${id}.json`);
+  return join61(registryDir(), `${id}.json`);
 }
 function ensureDir2() {
   mkdirSync32(registryDir(), { recursive: true });
@@ -75319,7 +75427,7 @@ function acquireRepoLock(repoPath) {
   const lockDir = registryDir();
   mkdirSync33(lockDir, { recursive: true });
   const lockName = repoPath.replace(/[^A-Za-z0-9]/g, "_");
-  const lockPath = join61(lockDir, `.lock-${lockName}`);
+  const lockPath = join62(lockDir, `.lock-${lockName}`);
   const deadline = Date.now() + 5000;
   let fd = null;
   while (fd === null) {
@@ -75346,7 +75454,7 @@ function acquireRepoLock(repoPath) {
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve40(process.env.SWITCHROOM_WORKTREE_BASE ?? join61(homedir36(), ".switchroom", "worktree-checkouts"));
+  return resolve41(process.env.SWITCHROOM_WORKTREE_BASE ?? join62(homedir36(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
   return randomBytes13(4).toString("hex");
@@ -75368,7 +75476,7 @@ function resolveRepoPath(repo, codeRepos) {
 }
 function expandHome(p) {
   if (p.startsWith("~/"))
-    return join61(homedir36(), p.slice(2));
+    return join62(homedir36(), p.slice(2));
   return p;
 }
 async function claimWorktree(input, codeRepos) {
@@ -75396,7 +75504,7 @@ async function claimWorktree(input, codeRepos) {
     branch = `task/${taskSuffix}-${id}`;
     const baseDir = worktreesBaseDir();
     mkdirSync33(baseDir, { recursive: true });
-    worktreePath = join61(baseDir, `${id}-${taskSuffix}`);
+    worktreePath = join62(baseDir, `${id}-${taskSuffix}`);
     const now = new Date().toISOString();
     const record2 = {
       id,
@@ -75651,7 +75759,7 @@ import {
   rmSync as rmSync15,
   writeFileSync as writeFileSync31
 } from "node:fs";
-import { join as join62 } from "node:path";
+import { join as join63 } from "node:path";
 function encodeCredentialsFilename(email) {
   const SAFE = new Set([
     ..."ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
@@ -75841,16 +75949,16 @@ function resolveCredentialsDir(env2) {
   if (explicit && explicit.length > 0)
     return explicit;
   const stateBase = env2.SWITCHROOM_CONTAINER === "1" ? "/state/agent" : env2.HOME ?? ".";
-  return join62(stateBase, "google-workspace-mcp", "credentials");
+  return join63(stateBase, "google-workspace-mcp", "credentials");
 }
 function writeSeedFile(dir, email, seed) {
   mkdirSync34(dir, { recursive: true, mode: 448 });
   chmodSync9(dir, 448);
   for (const name of readdirSync23(dir)) {
-    rmSync15(join62(dir, name), { force: true, recursive: true });
+    rmSync15(join63(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
-  const filePath = join62(dir, filename);
+  const filePath = join63(dir, filename);
   writeFileSync31(filePath, JSON.stringify(seed), { mode: 384 });
   chmodSync9(filePath, 384);
   return filePath;
@@ -76010,7 +76118,7 @@ function registerDriveMcpLauncherCommand(program3) {
 init_scaffold_integration();
 import { spawn as spawn6 } from "node:child_process";
 import { writeFileSync as writeFileSync32, mkdirSync as mkdirSync35 } from "node:fs";
-import { dirname as dirname17, join as join63 } from "node:path";
+import { dirname as dirname17, join as join64 } from "node:path";
 var SOFTERIA_TOKEN_ENV = "MS365_MCP_OAUTH_TOKEN";
 var DEFAULT_REFRESH_LEAD_MS = 5 * 60 * 1000;
 var MAX_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
@@ -76042,7 +76150,7 @@ function writeRefreshHeartbeat(agentName, data) {
 function heartbeatPath(agentName) {
   const override = process.env.SWITCHROOM_M365_HEARTBEAT_DIR;
   if (override) {
-    return join63(override, `m365-launcher-${agentName}.heartbeat.json`);
+    return join64(override, `m365-launcher-${agentName}.heartbeat.json`);
   }
   return "/state/agent/m365-launcher.heartbeat.json";
 }
@@ -76066,20 +76174,20 @@ function wireStdio(child) {
 async function killChild(child, gracefulMs = 3000) {
   if (child.exitCode !== null || child.signalCode !== null)
     return;
-  return new Promise((resolve41) => {
+  return new Promise((resolve42) => {
     let killTimer = null;
     const onExit = () => {
       if (killTimer) {
         clearTimeout(killTimer);
         killTimer = null;
       }
-      resolve41();
+      resolve42();
     };
     child.once("exit", onExit);
     try {
       child.kill("SIGTERM");
     } catch {
-      resolve41();
+      resolve42();
       return;
     }
     killTimer = setTimeout(() => {
@@ -76193,8 +76301,8 @@ async function runMs365McpLauncher(opts, rt) {
   };
   process.on("SIGINT", onSignal);
   process.on("SIGTERM", onSignal);
-  return new Promise((resolve41) => {
-    resolveLauncher = resolve41;
+  return new Promise((resolve42) => {
+    resolveLauncher = resolve42;
   });
 }
 function registerM365McpLauncherCommand(program3) {
@@ -76296,23 +76404,23 @@ async function runNotionMcpLauncher(opts, runtime) {
   };
   process.on("SIGTERM", () => forward("SIGTERM"));
   process.on("SIGINT", () => forward("SIGINT"));
-  const exitCode = await new Promise((resolve41) => {
+  const exitCode = await new Promise((resolve42) => {
     child.once("exit", (code, signal) => {
       clearTimer(heartbeatHandle);
       if (typeof code === "number") {
-        resolve41(code);
+        resolve42(code);
       } else if (signal) {
         const sigCode = { SIGTERM: 15, SIGINT: 2, SIGKILL: 9 }[signal] ?? 1;
-        resolve41(128 + sigCode);
+        resolve42(128 + sigCode);
       } else {
-        resolve41(1);
+        resolve42(1);
       }
     });
     child.once("error", (err) => {
       clearTimer(heartbeatHandle);
       process.stderr.write(`notion-mcp-launcher: child spawn error: ${err.message}
 `);
-      resolve41(1);
+      resolve42(1);
     });
   });
   return exitCode;
@@ -76961,7 +77069,7 @@ agents:
 
 // src/cli/apply.ts
 init_resolver();
-import { dirname as dirname21, join as join67, resolve as resolve42 } from "node:path";
+import { dirname as dirname21, join as join68, resolve as resolve43 } from "node:path";
 import { homedir as homedir38 } from "node:os";
 import { execFileSync as execFileSync20 } from "node:child_process";
 init_vault();
@@ -76970,7 +77078,7 @@ init_loader();
 
 // src/cli/update-prompt-hook.ts
 import { existsSync as existsSync66, readFileSync as readFileSync55, writeFileSync as writeFileSync34, chmodSync as chmodSync10, mkdirSync as mkdirSync37 } from "node:fs";
-import { join as join64 } from "node:path";
+import { join as join65 } from "node:path";
 var HOOK_FILENAME = "update-card-on-prompt.sh";
 function updatePromptHookScript() {
   return `#!/bin/bash
@@ -77036,9 +77144,9 @@ exit 0
 `;
 }
 function installUpdatePromptHook(agentDir) {
-  const hooksDir = join64(agentDir, ".claude", "hooks");
+  const hooksDir = join65(agentDir, ".claude", "hooks");
   mkdirSync37(hooksDir, { recursive: true });
-  const scriptPath = join64(hooksDir, HOOK_FILENAME);
+  const scriptPath = join65(hooksDir, HOOK_FILENAME);
   const desired = updatePromptHookScript();
   let installed = false;
   const existing = existsSync66(scriptPath) ? readFileSync55(scriptPath, "utf-8") : "";
@@ -77051,7 +77159,7 @@ function installUpdatePromptHook(agentDir) {
       chmodSync10(scriptPath, 493);
     } catch {}
   }
-  const settingsPath = join64(agentDir, ".claude", "settings.json");
+  const settingsPath = join65(agentDir, ".claude", "settings.json");
   if (!existsSync66(settingsPath)) {
     return { scriptPath, settingsPath, installed };
   }
@@ -77177,7 +77285,7 @@ import {
   realpathSync as realpathSync6,
   statSync as statSync27
 } from "node:fs";
-import { join as join66 } from "node:path";
+import { join as join67 } from "node:path";
 function resolveOperatorUid() {
   const sudoUid = process.env.SUDO_UID;
   if (sudoUid !== undefined) {
@@ -77193,14 +77301,14 @@ function resolveOperatorUid() {
   return;
 }
 function operatorOwnedPaths(home2) {
-  const root = join66(home2, ".switchroom");
+  const root = join67(home2, ".switchroom");
   return [
-    join66(root, "vault"),
-    join66(root, "vault-auto-unlock"),
-    join66(root, "vault-audit.log"),
-    join66(root, "host-control-audit.log"),
-    join66(root, "accounts"),
-    join66(root, "compose")
+    join67(root, "vault"),
+    join67(root, "vault-auto-unlock"),
+    join67(root, "vault-audit.log"),
+    join67(root, "host-control-audit.log"),
+    join67(root, "accounts"),
+    join67(root, "compose")
   ];
 }
 function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
@@ -77249,7 +77357,7 @@ function restoreOperatorOwnership(home2, operatorUid, deps = {}) {
     } catch {}
     if (isDir(target)) {
       for (const entry of readdir2(target)) {
-        visit(join66(target, entry));
+        visit(join67(target, entry));
       }
     }
   };
@@ -77263,14 +77371,14 @@ var EMBEDDED_EXAMPLES = {
   switchroom: switchroom_default,
   minimal: minimal_default
 };
-var DEFAULT_COMPOSE_PATH2 = join67(homedir38(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH2 = join68(homedir38(), ".switchroom", "compose", "docker-compose.yml");
 var COMPOSE_PROJECT2 = "switchroom";
 function resolveVaultBindMountDir(homeDir, ctx) {
   const isCustomPath = ctx.migrationKind === "custom-path-skipped";
   if (isCustomPath && ctx.customVaultPath) {
     return dirname21(ctx.customVaultPath);
   }
-  return join67(homeDir, ".switchroom", "vault");
+  return join68(homeDir, ".switchroom", "vault");
 }
 function inspectVaultBindMountDir(vaultDir) {
   if (!existsSync69(vaultDir))
@@ -77301,42 +77409,42 @@ function hasVaultRefs(value) {
 async function ensureHostMountSources(config) {
   const home2 = homedir38();
   const dirs = [
-    join67(home2, ".switchroom", "approvals"),
-    join67(home2, ".switchroom", "scheduler"),
-    join67(home2, ".switchroom", "logs"),
-    join67(home2, ".switchroom", "compose"),
-    join67(home2, ".switchroom", "broker-operator")
+    join68(home2, ".switchroom", "approvals"),
+    join68(home2, ".switchroom", "scheduler"),
+    join68(home2, ".switchroom", "logs"),
+    join68(home2, ".switchroom", "compose"),
+    join68(home2, ".switchroom", "broker-operator")
   ];
   for (const name of Object.keys(config.agents)) {
-    dirs.push(join67(home2, ".switchroom", "agents", name));
-    dirs.push(join67(home2, ".switchroom", "logs", name));
-    dirs.push(join67(home2, ".claude", "projects", name));
-    dirs.push(join67(home2, ".switchroom", "audit", name));
-    if (existsSync69(join67(home2, ".switchroom-config"))) {
-      dirs.push(join67(home2, ".switchroom-config", "agents", name, "personal-skills"));
+    dirs.push(join68(home2, ".switchroom", "agents", name));
+    dirs.push(join68(home2, ".switchroom", "logs", name));
+    dirs.push(join68(home2, ".claude", "projects", name));
+    dirs.push(join68(home2, ".switchroom", "audit", name));
+    if (existsSync69(join68(home2, ".switchroom-config"))) {
+      dirs.push(join68(home2, ".switchroom-config", "agents", name, "personal-skills"));
     }
   }
   for (const dir of dirs) {
     await mkdir(dir, { recursive: true });
   }
-  const autoUnlockPath = join67(home2, ".switchroom", "vault-auto-unlock");
+  const autoUnlockPath = join68(home2, ".switchroom", "vault-auto-unlock");
   if (!existsSync69(autoUnlockPath)) {
     writeFileSync35(autoUnlockPath, "", { mode: 384 });
   }
-  const auditLogPath = join67(home2, ".switchroom", "vault-audit.log");
+  const auditLogPath = join68(home2, ".switchroom", "vault-audit.log");
   if (!existsSync69(auditLogPath)) {
     writeFileSync35(auditLogPath, "", { mode: 420 });
   }
-  const grantsDbPath = join67(home2, ".switchroom", "vault-grants.db");
+  const grantsDbPath = join68(home2, ".switchroom", "vault-grants.db");
   if (!existsSync69(grantsDbPath)) {
     writeFileSync35(grantsDbPath, "", { mode: 384 });
   }
-  const hostdAuditLogPath = join67(home2, ".switchroom", "host-control-audit.log");
+  const hostdAuditLogPath = join68(home2, ".switchroom", "host-control-audit.log");
   if (!existsSync69(hostdAuditLogPath)) {
     writeFileSync35(hostdAuditLogPath, "", { mode: 420 });
   }
   for (const name of Object.keys(config.agents)) {
-    const tokenPath = join67(home2, ".switchroom", "agents", name, ".vault-token");
+    const tokenPath = join68(home2, ".switchroom", "agents", name, ".vault-token");
     if (!existsSync69(tokenPath)) {
       writeFileSync35(tokenPath, "", { mode: 384 });
     }
@@ -77345,15 +77453,15 @@ async function ensureHostMountSources(config) {
       chownSync4(tokenPath, uid, uid);
     } catch {}
   }
-  const fleetDir = join67(home2, ".switchroom", "fleet");
+  const fleetDir = join68(home2, ".switchroom", "fleet");
   await mkdir(fleetDir, { recursive: true });
-  const invariantsPath = join67(fleetDir, "switchroom-invariants.md");
+  const invariantsPath = join68(fleetDir, "switchroom-invariants.md");
   const invariantsCanonical = renderFleetInvariants();
   const invariantsCurrent = existsSync69(invariantsPath) ? readFileSync56(invariantsPath, "utf-8") : null;
   if (invariantsCurrent !== invariantsCanonical) {
     writeFileSync35(invariantsPath, invariantsCanonical, { mode: 420 });
   }
-  const fleetClaudePath = join67(fleetDir, "CLAUDE.md");
+  const fleetClaudePath = join68(fleetDir, "CLAUDE.md");
   if (!existsSync69(fleetClaudePath)) {
     writeFileSync35(fleetClaudePath, [
       "# Switchroom fleet defaults",
@@ -77438,8 +77546,8 @@ function detectAndReportLegacyGdriveSlots(vaultPath) {
 }
 function writeInstallTypeCache(homeDir = homedir38()) {
   const ctx = detectInstallType();
-  const dir = join67(homeDir, ".switchroom");
-  const out = join67(dir, "install-type.json");
+  const dir = join68(homeDir, ".switchroom");
+  const out = join68(dir, "install-type.json");
   const tmp = `${out}.tmp`;
   mkdirSync38(dir, { recursive: true });
   const payload = {
@@ -77488,14 +77596,14 @@ Applying switchroom config...
       writeOut(source_default.green(`  + ${name}`) + source_default.gray(` (${agentConfig.extends ?? "default"}) \u2014 ${detail}
 `));
       try {
-        installUpdatePromptHook(join67(agentsDir, name));
+        installUpdatePromptHook(join68(agentsDir, name));
       } catch (hookErr) {
         writeOut(source_default.gray(`    (update-prompt hook install failed for ${name}: ${hookErr.message})
 `));
       }
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join67(agentsDir, name), uid, {
+        alignAgentUid(name, join68(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -77532,7 +77640,7 @@ Applying switchroom config...
     for (const name of agentNames) {
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join67(agentsDir, name), uid, {
+        alignAgentUid(name, join68(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -77684,7 +77792,7 @@ function copyExampleConfig2(name) {
   if (!/^[a-z0-9_-]+$/.test(name)) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
-  const dest = resolve42(process.cwd(), "switchroom.yaml");
+  const dest = resolve43(process.cwd(), "switchroom.yaml");
   if (existsSync69(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
@@ -77695,7 +77803,7 @@ function copyExampleConfig2(name) {
     console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
     return;
   }
-  const exampleFile = resolve42(import.meta.dirname, `../../examples/${name}.yaml`);
+  const exampleFile = resolve43(import.meta.dirname, `../../examples/${name}.yaml`);
   if (!existsSync69(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
@@ -77707,7 +77815,7 @@ function findUnwritableAgentDirs(config, opts) {
   const targets = opts.only ? [opts.only] : Object.keys(config.agents ?? {});
   const unwritable = [];
   for (const name of targets) {
-    const startSh = join67(agentsDir, name, "start.sh");
+    const startSh = join68(agentsDir, name, "start.sh");
     if (!existsSync69(startSh))
       continue;
     try {
@@ -77887,7 +77995,7 @@ function runRedactStdin() {
 
 // src/cli/status-ask.ts
 import { readFileSync as readFileSync57, existsSync as existsSync70, readdirSync as readdirSync26 } from "node:fs";
-import { join as join68 } from "node:path";
+import { join as join69 } from "node:path";
 import { homedir as homedir39 } from "node:os";
 
 // src/status-ask/report.ts
@@ -78223,7 +78331,7 @@ function resolveSources(explicitPath) {
     const config = loadConfig();
     agentsDir = resolveAgentsDir(config);
   } catch {
-    agentsDir = join68(homedir39(), ".switchroom", "agents");
+    agentsDir = join69(homedir39(), ".switchroom", "agents");
   }
   if (!existsSync70(agentsDir))
     return [];
@@ -78235,7 +78343,7 @@ function resolveSources(explicitPath) {
     return [];
   }
   for (const name of entries) {
-    const path8 = join68(agentsDir, name, "runtime-metrics.jsonl");
+    const path8 = join69(agentsDir, name, "runtime-metrics.jsonl");
     if (existsSync70(path8)) {
       sources.push({ path: path8, agent: name });
     }
@@ -78257,7 +78365,7 @@ function inferAgentFromPath(p) {
 
 // src/cli/agent-config.ts
 init_helpers();
-import { join as join69 } from "node:path";
+import { join as join70 } from "node:path";
 import { homedir as homedir40 } from "node:os";
 import {
   existsSync as existsSync71,
@@ -78265,9 +78373,9 @@ import {
   appendFileSync as appendFileSync4,
   readFileSync as readFileSync58
 } from "node:fs";
-var AUDIT_ROOT = join69(homedir40(), ".switchroom", "audit");
+var AUDIT_ROOT = join70(homedir40(), ".switchroom", "audit");
 function auditPathFor(agent) {
-  return join69(AUDIT_ROOT, agent, "agent-config.jsonl");
+  return join70(AUDIT_ROOT, agent, "agent-config.jsonl");
 }
 function appendAudit(agent, cmd, args, exit, opts = {}) {
   const row = {
@@ -78525,21 +78633,21 @@ import {
   unlinkSync as unlinkSync14,
   writeSync as writeSync8
 } from "node:fs";
-import { join as join70, resolve as resolve43 } from "node:path";
+import { join as join71, resolve as resolve44 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
-  const base = opts.root ? resolve43(opts.root, agent) : resolve43(resolveDualPath(`~/.switchroom/agents/${agent}`));
-  const scheduleDir = join70(base, "schedule.d");
-  const scheduleStagingDir = join70(scheduleDir, STAGING_SUBDIR);
-  const skillsDir = join70(base, "skills.d");
-  const skillsStagingDir = join70(skillsDir, STAGING_SUBDIR);
+  const base = opts.root ? resolve44(opts.root, agent) : resolve44(resolveDualPath(`~/.switchroom/agents/${agent}`));
+  const scheduleDir = join71(base, "schedule.d");
+  const scheduleStagingDir = join71(scheduleDir, STAGING_SUBDIR);
+  const skillsDir = join71(base, "skills.d");
+  const skillsStagingDir = join71(skillsDir, STAGING_SUBDIR);
   return {
     agentRoot: base,
     scheduleDir,
     scheduleStagingDir,
     skillsDir,
     skillsStagingDir,
-    lockPath: join70(base, ".lock"),
+    lockPath: join71(base, ".lock"),
     stagingDir: scheduleStagingDir
   };
 }
@@ -78593,8 +78701,8 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureDirs(paths);
-    const stagingPath = join70(paths.scheduleStagingDir, `${slug}.yaml`);
-    const finalPath = join70(paths.scheduleDir, `${slug}.yaml`);
+    const stagingPath = join71(paths.scheduleStagingDir, `${slug}.yaml`);
+    const finalPath = join71(paths.scheduleDir, `${slug}.yaml`);
     const fd = openSync13(stagingPath, "w", 384);
     try {
       writeSync8(fd, yamlText);
@@ -78610,8 +78718,8 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureSkillsDirs(paths);
-    const stagingPath = join70(paths.skillsStagingDir, `${slug}.yaml`);
-    const finalPath = join70(paths.skillsDir, `${slug}.yaml`);
+    const stagingPath = join71(paths.skillsStagingDir, `${slug}.yaml`);
+    const finalPath = join71(paths.skillsDir, `${slug}.yaml`);
     const fd = openSync13(stagingPath, "w", 384);
     try {
       writeSync8(fd, yamlText);
@@ -78626,7 +78734,7 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
 function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join70(paths.skillsDir, `${slug}.yaml`);
+    const finalPath = join71(paths.skillsDir, `${slug}.yaml`);
     if (!existsSync72(finalPath))
       return false;
     unlinkSync14(finalPath);
@@ -78641,7 +78749,7 @@ function listSkillsOverlayEntries(agent, opts = {}) {
   for (const name of readdirSync27(paths.skillsDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join70(paths.skillsDir, name);
+    const full = join71(paths.skillsDir, name);
     try {
       const raw = readFileSync59(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
@@ -78653,7 +78761,7 @@ function listSkillsOverlayEntries(agent, opts = {}) {
 function deleteOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join70(paths.scheduleDir, `${slug}.yaml`);
+    const finalPath = join71(paths.scheduleDir, `${slug}.yaml`);
     if (!existsSync72(finalPath))
       return false;
     unlinkSync14(finalPath);
@@ -78668,7 +78776,7 @@ function listOverlayEntries(agent, opts = {}) {
   for (const name of readdirSync27(paths.scheduleDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join70(paths.scheduleDir, name);
+    const full = join71(paths.scheduleDir, name);
     try {
       const raw = readFileSync59(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
@@ -78824,12 +78932,12 @@ import {
   writeFileSync as writeFileSync36,
   writeSync as writeSync9
 } from "node:fs";
-import { join as join71 } from "node:path";
+import { join as join72 } from "node:path";
 import { randomBytes as randomBytes14 } from "node:crypto";
 var STAGE_ID_PREFIX = "cap_";
 function pendingDir(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  return join71(paths.scheduleDir, ".pending");
+  return join72(paths.scheduleDir, ".pending");
 }
 function ensurePendingDir(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
@@ -78842,8 +78950,8 @@ function newStageId() {
 function stagePendingScheduleEntry(opts) {
   const dir = ensurePendingDir(opts.agent, { root: opts.root });
   const stageId = opts.stageId ?? newStageId();
-  const yamlPath = join71(dir, `${stageId}.yaml`);
-  const metaPath = join71(dir, `${stageId}.meta.json`);
+  const yamlPath = join72(dir, `${stageId}.yaml`);
+  const metaPath = join72(dir, `${stageId}.meta.json`);
   const meta = {
     v: 1,
     stage_id: stageId,
@@ -78877,8 +78985,8 @@ function listPendingScheduleEntries(agent, opts = {}) {
     if (!name.endsWith(".meta.json"))
       continue;
     const stageId = name.slice(0, -".meta.json".length);
-    const metaPath = join71(dir, name);
-    const yamlPath = join71(dir, `${stageId}.yaml`);
+    const metaPath = join72(dir, name);
+    const yamlPath = join72(dir, `${stageId}.yaml`);
     if (!existsSync73(yamlPath))
       continue;
     try {
@@ -78897,7 +79005,7 @@ function commitPendingScheduleEntry(opts) {
     return { committed: false, reason: "not_found" };
   const slug = match.meta.entry.name ?? match.stageId;
   const paths = overlayPathsFor(opts.agent, { root: opts.root });
-  const finalPath = join71(paths.scheduleDir, `${slug}.yaml`);
+  const finalPath = join72(paths.scheduleDir, `${slug}.yaml`);
   if (existsSync73(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
@@ -79403,7 +79511,7 @@ var import_yaml16 = __toESM(require_dist(), 1);
 import { existsSync as existsSync75 } from "node:fs";
 init_reconcile_default_skills();
 var import_yaml17 = __toESM(require_dist(), 1);
-import { join as join72 } from "node:path";
+import { join as join73 } from "node:path";
 var MAX_SKILLS_PER_AGENT = 20;
 var V1_ALLOWED_SOURCE_PREFIX = "bundled:";
 function exitCodeFor2(code) {
@@ -79478,7 +79586,7 @@ function skillInstall(opts) {
     return err("E_SKILL_QUOTA_EXCEEDED", `agent ${agent} already has ${used} overlay-installed skills (cap ${MAX_SKILLS_PER_AGENT})`);
   }
   const poolDir = opts.bundledSkillsPoolDir ?? getBundledSkillsPoolDir();
-  const skillPath = join72(poolDir, skillName);
+  const skillPath = join73(poolDir, skillName);
   if (!existsSync75(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
@@ -79657,7 +79765,7 @@ import {
   writeFileSync as writeFileSync37
 } from "node:fs";
 import { tmpdir as tmpdir4, homedir as homedir41 } from "node:os";
-import { dirname as dirname22, join as join73, relative as relative2, resolve as resolve44 } from "node:path";
+import { dirname as dirname22, join as join74, relative as relative2, resolve as resolve45 } from "node:path";
 import { spawnSync as spawnSync10 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -79851,11 +79959,11 @@ function scanForClaudeP2(content) {
 function resolveSkillsPoolDir2(override) {
   const raw = override ?? "~/.switchroom/skills";
   if (raw.startsWith("~/")) {
-    return join73(homedir41(), raw.slice(2));
+    return join74(homedir41(), raw.slice(2));
   }
   if (raw === "~")
     return homedir41();
-  return resolve44(raw);
+  return resolve45(raw);
 }
 function readStdinSync() {
   const chunks = [];
@@ -79890,7 +79998,7 @@ function loadFromDir(dir) {
   const walk2 = (sub) => {
     const entries = readdirSync29(sub, { withFileTypes: true });
     for (const ent of entries) {
-      const full = join73(sub, ent.name);
+      const full = join74(sub, ent.name);
       const rel = relative2(abs, full);
       if (ent.isSymbolicLink()) {
         fail2(`refusing to read symlink inside --from dir: ${rel}`);
@@ -79925,7 +80033,7 @@ function loadFromTarball(tarPath) {
       fail2(`tarball contains disallowed path: ${JSON.stringify(entry)} \u2014 ` + `refusing to extract before any file is written`);
     }
   }
-  const staging = mkdtempSync5(join73(tmpdir4(), "skill-apply-extract-"));
+  const staging = mkdtempSync5(join74(tmpdir4(), "skill-apply-extract-"));
   try {
     const flags = isGz ? ["-xzf"] : ["-xf"];
     const r = spawnSync10("tar", [
@@ -80011,8 +80119,8 @@ function validatePayload(name, files) {
           errors2.push(`${path8} fails \`bash -n\` syntax check: ${(r.stderr ?? "").trim()}`);
         }
       } else if (PY_SCRIPT_RE2.test(path8)) {
-        const tmp = mkdtempSync5(join73(tmpdir4(), "skill-apply-py-"));
-        const tmpPy = join73(tmp, "check.py");
+        const tmp = mkdtempSync5(join74(tmpdir4(), "skill-apply-py-"));
+        const tmpPy = join74(tmp, "check.py");
         try {
           writeFileSync37(tmpPy, content);
           const r = spawnSync10("python3", ["-m", "py_compile", tmpPy], {
@@ -80035,7 +80143,7 @@ function diffSummary(currentDir, files) {
   if (existsSync76(currentDir)) {
     const walk2 = (sub) => {
       for (const ent of readdirSync29(sub, { withFileTypes: true })) {
-        const full = join73(sub, ent.name);
+        const full = join74(sub, ent.name);
         const rel = relative2(currentDir, full);
         if (ent.isDirectory()) {
           walk2(full);
@@ -80071,7 +80179,7 @@ function writePayload(poolDir, name, files) {
   if (!existsSync76(poolDir)) {
     mkdirSync42(poolDir, { recursive: true, mode: 493 });
   }
-  const target = join73(poolDir, name);
+  const target = join74(poolDir, name);
   let targetIsSymlink = false;
   try {
     const st = lstatSync8(target);
@@ -80082,11 +80190,11 @@ function writePayload(poolDir, name, files) {
   if (targetIsSymlink) {
     fail2(`refusing to overwrite symlink at ${target}; investigate manually`);
   }
-  const staging = mkdtempSync5(join73(poolDir, `.skill-apply-stage-${name}-`));
+  const staging = mkdtempSync5(join74(poolDir, `.skill-apply-stage-${name}-`));
   let oldRename = null;
   try {
     for (const [path8, content] of Object.entries(files)) {
-      const full = join73(staging, path8);
+      const full = join74(staging, path8);
       mkdirSync42(dirname22(full), { recursive: true, mode: 493 });
       const fd = openSync15(full, "wx");
       try {
@@ -80139,7 +80247,7 @@ function registerSkillCommand(program3) {
     if (opts.from === undefined) {
       files = loadFromStdin();
     } else {
-      const fromPath = resolve44(opts.from);
+      const fromPath = resolve45(opts.from);
       if (!existsSync76(fromPath)) {
         fail2(`--from path does not exist: ${opts.from}`);
       }
@@ -80164,7 +80272,7 @@ function registerSkillCommand(program3) {
     }
     const config = loadConfig();
     const poolDir = resolveSkillsPoolDir2(config.switchroom?.skills_dir);
-    const currentDir = join73(poolDir, name);
+    const currentDir = join74(poolDir, name);
     console.log(source_default.bold(`Skill: ${name}`) + source_default.gray(` (${Object.keys(files).length} files, ${sumBytes(files)} bytes)`));
     console.log(source_default.bold("Diff vs current pool content:"));
     console.log(diffSummary(currentDir, files));
@@ -80208,7 +80316,7 @@ import {
   utimesSync,
   writeFileSync as writeFileSync38
 } from "node:fs";
-import { dirname as dirname23, join as join74, relative as relative3, resolve as resolve45 } from "node:path";
+import { dirname as dirname23, join as join75, relative as relative3, resolve as resolve46 } from "node:path";
 import { homedir as homedir42, tmpdir as tmpdir5 } from "node:os";
 import { spawnSync as spawnSync11 } from "node:child_process";
 init_helpers();
@@ -80219,10 +80327,10 @@ var TRASH_TTL_MS = 24 * 60 * 60 * 1000;
 var PERSONAL_SKILLS_SUBPATH = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
-  const candidate = override ? resolve45(override) : join74(homedir42(), ".switchroom-config");
+  const candidate = override ? resolve46(override) : join75(homedir42(), ".switchroom-config");
   if (!existsSync77(candidate))
     return null;
-  return join74(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
+  return join75(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
 }
 var MIRROR_PRIOR_TTL_MS = 24 * 60 * 60 * 1000;
 function sweepMirrorPriors(configSkillsRoot) {
@@ -80240,7 +80348,7 @@ function sweepMirrorPriors(configSkillsRoot) {
       if (now - ts < MIRROR_PRIOR_TTL_MS)
         continue;
       try {
-        rmSync17(join74(configSkillsRoot, ent), { recursive: true, force: true });
+        rmSync17(join75(configSkillsRoot, ent), { recursive: true, force: true });
       } catch {}
     }
   } catch {}
@@ -80249,7 +80357,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
   const configSkillsRoot = resolveConfigSkillsDir(agent);
   if (!configSkillsRoot)
     return;
-  const dest = join74(configSkillsRoot, name);
+  const dest = join75(configSkillsRoot, name);
   try {
     if (liveSkillDir !== null) {
       try {
@@ -80264,19 +80372,19 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     if (liveSkillDir === null) {
       sweepMirrorPriors(configSkillsRoot);
       if (existsSync77(dest)) {
-        const trash = join74(configSkillsRoot, `.${name}-trash-${Date.now()}`);
+        const trash = join75(configSkillsRoot, `.${name}-trash-${Date.now()}`);
         renameSync17(dest, trash);
       }
       return;
     }
     mkdirSync43(configSkillsRoot, { recursive: true, mode: 493 });
     sweepMirrorPriors(configSkillsRoot);
-    const staging = mkdtempSync6(join74(configSkillsRoot, `.${name}-staging-`));
+    const staging = mkdtempSync6(join75(configSkillsRoot, `.${name}-staging-`));
     const walk2 = (src, dst) => {
       mkdirSync43(dst, { recursive: true, mode: 493 });
       for (const ent of readdirSync30(src, { withFileTypes: true })) {
-        const s = join74(src, ent.name);
-        const d = join74(dst, ent.name);
+        const s = join75(src, ent.name);
+        const d = join75(dst, ent.name);
         if (ent.isSymbolicLink())
           continue;
         if (ent.isDirectory())
@@ -80288,7 +80396,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     };
     walk2(liveSkillDir, staging);
     if (existsSync77(dest)) {
-      const prior = join74(configSkillsRoot, `.${name}-prior-${Date.now()}`);
+      const prior = join75(configSkillsRoot, `.${name}-prior-${Date.now()}`);
       renameSync17(dest, prior);
     }
     renameSync17(staging, dest);
@@ -80314,14 +80422,14 @@ function resolveAgent(opts) {
 }
 function resolveAgentsRoot(opts) {
   if (opts.root)
-    return resolve45(opts.root);
-  return join74(homedir42(), ".switchroom", "agents");
+    return resolve46(opts.root);
+  return join75(homedir42(), ".switchroom", "agents");
 }
 function personalSkillDir(agentsRoot, agent, name) {
-  return join74(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
+  return join75(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
 }
 function trashDir(agentsRoot, agent) {
-  return join74(agentsRoot, agent, ".claude", TRASH_DIRNAME);
+  return join75(agentsRoot, agent, ".claude", TRASH_DIRNAME);
 }
 function readStdinSync2() {
   const chunks = [];
@@ -80344,14 +80452,14 @@ function readStdinSync2() {
   return Buffer.concat(chunks).toString("utf-8");
 }
 function loadFromDir2(dir) {
-  const abs = resolve45(dir);
+  const abs = resolve46(dir);
   if (!statSync30(abs).isDirectory()) {
     fail3(`--from path is not a directory: ${dir}`);
   }
   const files = {};
   const walk2 = (sub) => {
     for (const ent of readdirSync30(sub, { withFileTypes: true })) {
-      const full = join74(sub, ent.name);
+      const full = join75(sub, ent.name);
       if (ent.isSymbolicLink()) {
         fail3(`refusing to read symlink in --from dir: ${relative3(abs, full)}`);
       }
@@ -80404,8 +80512,8 @@ function behavioralValidate(files) {
         errors2.push(`${path8} fails \`bash -n\`: ${(r.stderr ?? "").trim()}`);
       }
     } else if (PY_SCRIPT_RE.test(path8)) {
-      const tmp = mkdtempSync6(join74(tmpdir5(), "skill-personal-py-"));
-      const tmpPy = join74(tmp, "check.py");
+      const tmp = mkdtempSync6(join75(tmpdir5(), "skill-personal-py-"));
+      const tmpPy = join75(tmp, "check.py");
       try {
         writeFileSync38(tmpPy, content);
         const r = spawnSync11("python3", ["-m", "py_compile", tmpPy], {
@@ -80429,7 +80537,7 @@ function sweepTrash(agentsRoot, agent) {
   for (const ent of readdirSync30(trash, { withFileTypes: true })) {
     if (!ent.isDirectory())
       continue;
-    const entPath = join74(trash, ent.name);
+    const entPath = join75(trash, ent.name);
     try {
       const st = statSync30(entPath);
       if (now - st.mtimeMs > TRASH_TTL_MS) {
@@ -80450,11 +80558,11 @@ function writePersonalSkill(targetDir, files) {
     fail3(`refusing to overwrite symlink at ${targetDir}; investigate manually`);
   }
   mkdirSync43(dirname23(targetDir), { recursive: true, mode: 493 });
-  const staging = mkdtempSync6(join74(dirname23(targetDir), `.skill-personal-stage-`));
+  const staging = mkdtempSync6(join75(dirname23(targetDir), `.skill-personal-stage-`));
   let oldRename = null;
   try {
     for (const [path8, content] of Object.entries(files)) {
-      const full = join74(staging, path8);
+      const full = join75(staging, path8);
       mkdirSync43(dirname23(full), { recursive: true, mode: 493 });
       const fd = openSync16(full, "wx");
       try {
@@ -80538,7 +80646,7 @@ function loadFiles(opts) {
   if (opts.from === undefined) {
     return loadFromStdin2();
   }
-  const p = resolve45(opts.from);
+  const p = resolve46(opts.from);
   if (!existsSync77(p)) {
     fail3(`--from path does not exist: ${opts.from}`);
   }
@@ -80587,10 +80695,10 @@ function editPersonalAction(name, opts) {
 }
 var CLONE_SOURCE_RE = /^(shared|bundled):([a-z0-9][a-z0-9_-]{0,62})$/;
 function defaultSharedRoot() {
-  return join74(homedir42(), ".switchroom", "skills");
+  return join75(homedir42(), ".switchroom", "skills");
 }
 function defaultBundledRoot() {
-  return join74(homedir42(), ".switchroom", "skills", "_bundled");
+  return join75(homedir42(), ".switchroom", "skills", "_bundled");
 }
 function resolveCloneSource(source, opts) {
   const m = CLONE_SOURCE_RE.exec(source);
@@ -80600,7 +80708,7 @@ function resolveCloneSource(source, opts) {
   const tier = m[1];
   const slug = m[2];
   const root = tier === "bundled" ? opts.bundledRoot ?? defaultBundledRoot() : opts.sharedRoot ?? defaultSharedRoot();
-  const dir = join74(root, slug);
+  const dir = join75(root, slug);
   if (!existsSync77(dir)) {
     fail3(`clone source ${JSON.stringify(source)} not found at ${dir}; ` + `check \`switchroom skill search --tier ${tier}\``, 1);
   }
@@ -80616,7 +80724,7 @@ function readSourceFiles(dir) {
   const skipped = [];
   const walk2 = (sub) => {
     for (const ent of readdirSync30(sub, { withFileTypes: true })) {
-      const full = join74(sub, ent.name);
+      const full = join75(sub, ent.name);
       if (ent.isSymbolicLink()) {
         continue;
       }
@@ -80727,7 +80835,7 @@ function removePersonalAction(name, opts) {
   const trashRoot = trashDir(agentsRoot, agent);
   mkdirSync43(trashRoot, { recursive: true, mode: 493 });
   const ts = Date.now();
-  const trashTarget = join74(trashRoot, `${name}-${ts}`);
+  const trashTarget = join75(trashRoot, `${name}-${ts}`);
   renameSync17(target, trashTarget);
   const now = new Date(ts);
   utimesSync(trashTarget, now, now);
@@ -80746,7 +80854,7 @@ function listPersonalAction(opts) {
   const agent = resolveAgent(opts);
   const agentsRoot = resolveAgentsRoot(opts);
   sweepTrash(agentsRoot, agent);
-  const skillsDir = join74(agentsRoot, agent, ".claude", "skills");
+  const skillsDir = join75(agentsRoot, agent, ".claude", "skills");
   const personal = [];
   if (existsSync77(skillsDir)) {
     for (const ent of readdirSync30(skillsDir, { withFileTypes: true })) {
@@ -80755,7 +80863,7 @@ function listPersonalAction(opts) {
       if (!ent.name.startsWith(PERSONAL_PREFIX))
         continue;
       const skillName = ent.name.slice(PERSONAL_PREFIX.length);
-      const skillPath = join74(skillsDir, ent.name);
+      const skillPath = join75(skillsDir, ent.name);
       let fileCount = 0;
       let totalBytes = 0;
       const walk2 = (sub) => {
@@ -80763,10 +80871,10 @@ function listPersonalAction(opts) {
           if (e.isFile()) {
             fileCount += 1;
             try {
-              totalBytes += statSync30(join74(sub, e.name)).size;
+              totalBytes += statSync30(join75(sub, e.name)).size;
             } catch {}
           } else if (e.isDirectory()) {
-            walk2(join74(sub, e.name));
+            walk2(join75(sub, e.name));
           }
         }
       };
@@ -80807,21 +80915,21 @@ init_helpers();
 var import_yaml19 = __toESM(require_dist(), 1);
 import { existsSync as existsSync78, readdirSync as readdirSync31, readFileSync as readFileSync64, statSync as statSync31 } from "node:fs";
 import { homedir as homedir43 } from "node:os";
-import { join as join75, resolve as resolve46 } from "node:path";
+import { join as join76, resolve as resolve47 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
 var BUNDLED_SUBDIR = "_bundled";
 var AGENT_NAME_RE3 = /^[a-z][a-z0-9_-]{0,62}$/;
 function defaultAgentsRoot() {
-  return resolve46(homedir43(), ".switchroom/agents");
+  return resolve47(homedir43(), ".switchroom/agents");
 }
 function defaultSharedRoot2() {
-  return resolve46(homedir43(), ".switchroom/skills");
+  return resolve47(homedir43(), ".switchroom/skills");
 }
 function defaultBundledRoot2() {
-  return resolve46(homedir43(), ".switchroom/skills/_bundled");
+  return resolve47(homedir43(), ".switchroom/skills/_bundled");
 }
 function readSkillFrontmatter(skillDir) {
-  const mdPath = join75(skillDir, "SKILL.md");
+  const mdPath = join76(skillDir, "SKILL.md");
   if (!existsSync78(mdPath))
     return null;
   let content;
@@ -80854,7 +80962,7 @@ function readSkillFrontmatter(skillDir) {
   return { fm: parsed };
 }
 function statSkillMd(skillDir) {
-  const mdPath = join75(skillDir, "SKILL.md");
+  const mdPath = join76(skillDir, "SKILL.md");
   try {
     const st = statSync31(mdPath);
     return { size: st.size, mtime: st.mtime.toISOString() };
@@ -80865,7 +80973,7 @@ function statSkillMd(skillDir) {
 function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   if (!AGENT_NAME_RE3.test(agent))
     return [];
-  const skillsDir = join75(agentsRoot, agent, ".claude/skills");
+  const skillsDir = join76(agentsRoot, agent, ".claude/skills");
   if (!existsSync78(skillsDir))
     return [];
   const out = [];
@@ -80878,7 +80986,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   for (const ent of entries) {
     if (!ent.startsWith(PERSONAL_PREFIX2))
       continue;
-    const dirPath = join75(skillsDir, ent);
+    const dirPath = join76(skillsDir, ent);
     try {
       if (!statSync31(dirPath).isDirectory())
         continue;
@@ -80918,7 +81026,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
       continue;
     if (ent.startsWith("."))
       continue;
-    const dirPath = join75(sharedRoot, ent);
+    const dirPath = join76(sharedRoot, ent);
     try {
       if (!statSync31(dirPath).isDirectory())
         continue;
@@ -80954,7 +81062,7 @@ function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
   for (const ent of entries) {
     if (ent.startsWith("."))
       continue;
-    const dirPath = join75(bundledRoot, ent);
+    const dirPath = join76(bundledRoot, ent);
     try {
       if (!statSync31(dirPath).isDirectory())
         continue;
@@ -81100,7 +81208,7 @@ init_source();
 init_helpers();
 import { existsSync as existsSync80, mkdirSync as mkdirSync44, readdirSync as readdirSync32, readFileSync as readFileSync66, writeFileSync as writeFileSync39, statSync as statSync32, copyFileSync as copyFileSync12 } from "node:fs";
 import { homedir as homedir44 } from "node:os";
-import { join as join76 } from "node:path";
+import { join as join77 } from "node:path";
 import { spawnSync as spawnSync13 } from "node:child_process";
 init_audit_reader();
 var DEFAULT_IMAGE_TAG = "latest";
@@ -81191,10 +81299,10 @@ networks:
 `;
 }
 function hostdDir() {
-  return join76(homedir44(), ".switchroom", "hostd");
+  return join77(homedir44(), ".switchroom", "hostd");
 }
 function hostdComposePath() {
-  return join76(hostdDir(), "docker-compose.yml");
+  return join77(hostdDir(), "docker-compose.yml");
 }
 function backupExistingCompose() {
   const p = hostdComposePath();
@@ -81302,7 +81410,7 @@ function doStatus() {
       for (const name of readdirSync32(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
-        const sockPath = join76(dir, name, "sock");
+        const sockPath = join77(dir, name, "sock");
         if (existsSync80(sockPath)) {
           const st = statSync32(sockPath);
           if ((st.mode & 61440) === 49152) {