switchroom 0.15.12 → 0.15.14

package/dist/cli/switchroom.js

@@ -13520,7 +13520,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, TelegramReactionsPollSchema, PollSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, TelegramReactionsPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -13553,11 +13553,29 @@ var init_schema = __esm(() => {
     HttpDiffPollSchema,
     TelegramReactionsPollSchema
   ]);
+  TelegramMessageActionSchema = exports_external.object({
+    type: exports_external.literal("telegram-message"),
+    text: exports_external.string().min(1).describe("Operator-authored message text. Posts to the AGENT'S OWN chat only " + "(the chat is not configurable \u2014 fenced by construction), into the " + "entry-level `topic` when set. Supports ONLY deterministic placeholders " + "{{date}} / {{time}} (UTC, from the fire clock) and {{agent}}. NO vault " + "secrets (use a webhook action for secret-bearing requests) and NO model " + "output \u2014 the text is fully determined by config."),
+    parse_mode: exports_external.enum(["html", "text"]).default("html").describe("Telegram parse mode for the message body.")
+  });
+  WebhookActionSchema = exports_external.object({
+    type: exports_external.literal("webhook"),
+    url: exports_external.string().url().describe("Webhook target. SAME egress fence as an http-diff poll (\u00a76.1): https " + "only, host on the operator egress allowlist, loopback/private/link-local " + "rejected, resolved IP DNS-rebind-pinned. Not agent-writable without an " + "operator commit."),
+    method: exports_external.enum(["GET", "POST"]).default("POST"),
+    headers: exports_external.record(exports_external.string()).optional().describe("Static headers; {{secret}} substitution applies."),
+    body: exports_external.string().optional().describe("Static request body; {{secret}} substitution applies."),
+    secrets: exports_external.array(exports_external.string().regex(/^[a-zA-Z0-9_\-/]+$/, "Secret key names must contain only alphanumeric characters, underscores, hyphens, and forward slashes")).default([]).describe("Vault keys this webhook may inject into headers/body via {{name}}. Each " + "is HOST-PINNED (\u00a76.1): a secret may only be sent to the host it is bound " + "to in operator config, so an approved action cannot exfil it elsewhere.")
+  });
+  ActionSpecSchema = exports_external.discriminatedUnion("type", [
+    TelegramMessageActionSchema,
+    WebhookActionSchema
+  ]);
   ScheduleEntrySchema = exports_external.object({
     cron: exports_external.string().describe("Cron expression (e.g., '0 8 * * *')"),
-    prompt: exports_external.string().describe("Prompt to send at the scheduled time (the escalation prompt when kind=poll; templated with {{diff}})."),
-    kind: exports_external.enum(["poll", "prompt"]).optional().describe("Tier-0 routing (docs/rfcs/cheap-cron-sessions.md). 'prompt' (default) " + "fires a model turn every tick (Tier 1/2 per `context`). 'poll' runs a " + "model-free deterministic check (requires `poll`) and only escalates to " + "a model fire on a hit. Honoured only when SWITCHROOM_CHEAP_CRON is on."),
+    prompt: exports_external.string().optional().describe("Prompt to send at the scheduled time (the escalation prompt when " + "kind=poll; templated with {{diff}}). Required for kind prompt/poll; " + "absent for kind=action (an action has no model fire, so no prompt)."),
+    kind: exports_external.enum(["poll", "prompt", "action"]).optional().describe("Tier-0 routing (docs/rfcs/cheap-cron-sessions.md). 'prompt' (default) " + "fires a model turn every tick (Tier 1/2 per `context`). 'poll' runs a " + "model-free deterministic check (requires `poll`) and only escalates to " + "a model fire on a hit. 'action' runs a model-free deterministic verb " + "(requires `action`) that COMPLETES the work and never escalates \u2014 zero " + "tokens, no session. poll/prompt are honoured only when " + "SWITCHROOM_CHEAP_CRON is on; an action is model-free regardless (the " + "kill-switch governs model tiering, not deterministic actions)."),
     poll: PollSpecSchema.optional().describe("Required iff kind=poll. The declarative poll spec."),
+    action: ActionSpecSchema.optional().describe("Required iff kind=action. The declarative action spec (telegram-message or webhook)."),
     model: exports_external.string().optional().describe("Cron model hint. Reactivated by SWITCHROOM_CHEAP_CRON (was DEPRECATED/" + "IGNORED in v0.8). A known-cheap id (sonnet/haiku family) routes the " + "fire to a fresh cheap cron session (Tier 1, `context: fresh`); 'opus', " + "a custom id, or unset routes to the agent's live session (Tier 2, " + "`context: agent`) \u2014 the conservative default that preserves pre-v0.8 " + "behaviour. Note: a live session's model is fixed at launch, so on Tier " + "2 this is informational. See docs/scheduling.md."),
     context: exports_external.enum(["fresh", "agent"]).optional().describe("Does this cron need the agent, or just a model? 'fresh' \u2192 a minimal-" + "context cheap cron session (Tier 1). 'agent' \u2192 the agent's live " + "session with full persona/memory (Tier 2). Unset \u2192 inferred from " + "`model` (cheap\u2192fresh, else agent). Honoured only when " + "SWITCHROOM_CHEAP_CRON is on."),
     secrets: exports_external.array(exports_external.string().regex(/^[a-zA-Z0-9_\-/]+$/, "Secret key names must contain only alphanumeric characters, underscores, hyphens, and forward slashes")).default([]).describe("Vault key names this cron task may read via the vault-broker daemon. " + "Empty by default \u2014 broker requests for unlisted keys are denied. " + "Note: this is misconfiguration protection (a typo in cron-A doesn't " + "accidentally read cron-B's keys) rather than a security boundary \u2014 " + "anyone who can edit cron scripts can also edit switchroom.yaml, and " + "anyone with the vault passphrase can read the vault file directly. " + "See docs/configuration.md for the full framing."),
@@ -13574,13 +13592,41 @@ var init_schema = __esm(() => {
         message: "kind: poll requires a `poll` spec (http-diff or telegram-reactions)."
       });
     }
-    if (kind === "prompt" && entry.poll) {
+    if (kind !== "poll" && entry.poll) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
         path: ["poll"],
         message: "`poll` is only valid when kind: poll."
       });
     }
+    if (kind === "action" && !entry.action) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["action"],
+        message: "kind: action requires an `action` spec (telegram-message or webhook)."
+      });
+    }
+    if (kind !== "action" && entry.action) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["action"],
+        message: "`action` is only valid when kind: action."
+      });
+    }
+    if (kind !== "action" && (entry.prompt === undefined || entry.prompt.trim() === "")) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["prompt"],
+        message: `kind: ${kind} requires a non-empty \`prompt\`.`
+      });
+    }
+    if (kind === "action" && entry.prompt !== undefined) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["prompt"],
+        message: "`prompt` is not valid for kind: action (an action never fires a model)."
+      });
+    }
   });
   AgentSoulSchema = exports_external.object({
     name: exports_external.string().describe("Agent persona name (e.g., 'Coach', 'Sage')"),
@@ -13714,7 +13760,8 @@ var init_schema = __esm(() => {
     linear_agent: exports_external.object({
       enabled: exports_external.boolean(),
       token: exports_external.string().describe("vault:<key> reference to the Linear OAuth app token (actor=app). " + "Resolved at runtime via the vault broker (canonically " + "vault:linear/<agent>/token). Never an inline literal."),
-      workspace_id: exports_external.string().optional().describe("Optional Linear workspace (organization) id this agent is " + "installed into. Informational \u2014 used for setup hints and " + "multi-workspace disambiguation; the token already scopes the " + "app to its workspace.")
+      workspace_id: exports_external.string().optional().describe("Optional Linear workspace (organization) id this agent is " + "installed into. Informational \u2014 used for setup hints and " + "multi-workspace disambiguation; the token already scopes the " + "app to its workspace."),
+      default_team_id: exports_external.string().optional().describe("Optional Linear team id new captured issues file into when the " + "agent doesn't pass an explicit team_id. Unnecessary for a " + "single-team workspace (auto-resolved); set it only when the " + "workspace has multiple teams. Manage via " + "`switchroom linear-agent set-team <agent> <team>`.")
     }).optional().describe("Linear first-class agent integration (#2298). When enabled, the " + "agent appears in a Linear workspace as an app actor (own name/" + "avatar, @-mentionable, delegate-assignable). Linear AgentSessionEvent " + "webhooks (mention / delegation) wake the agent instantly via the " + "same gateway inject path as webhook_dispatch, tagged " + 'meta.source="linear" with the agent_session_id, and the agent ' + "responds with structured AgentActivity (thought/message/complete/" + "error) via the linear_agent_activity MCP tool. Builds the " + "session-lifecycle layer on top of the plain webhook_sources:[linear] " + "+ webhook_dispatch support (#2272). The OAuth app token is stored in " + "the vault and referenced here as vault:linear/<agent>/token; run " + "`switchroom linear-agent setup <agent>` to provision it. Off by " + "default \u2014 opt in per agent. Cascades from " + "defaults.channels.telegram.linear_agent."),
     chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID \u2014 overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
     default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted \u2014 set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field \u2014 the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
@@ -14640,6 +14687,16 @@ function mergeAgentConfig(defaultsIn, agentIn) {
     }
     merged.reaction_dispatch = combined;
   }
+  const linearEnabled = merged.channels?.telegram?.linear_agent?.enabled === true;
+  if (linearEnabled) {
+    const rd = merged.reaction_dispatch;
+    if (!rd || rd.emojis === undefined) {
+      merged.reaction_dispatch = {
+        enabled: rd?.enabled ?? true,
+        emojis: ["\uD83D\uDC68\u200d\uD83D\uDCBB", "\uD83D\uDCCC"]
+      };
+    }
+  }
   if (defaults.resources || merged.resources) {
     const d = defaults.resources ?? {};
     const a = merged.resources ?? {};
@@ -15396,6 +15453,9 @@ function resolveCronModel(model) {
   return isKnownCheapModel(model) ? model : DEFAULT_CRON_MODEL;
 }
 function resolveCronRouting(input, opts) {
+  if ((input.kind ?? "prompt") === "action") {
+    return { tier: "action", session: null, customModelDowngrade: false };
+  }
   if (!opts.cheapCronEnabled) {
     return { tier: "main", session: "main", customModelDowngrade: false };
   }
@@ -15440,9 +15500,96 @@ var init_cron_routing = __esm(() => {
   OPUS_MODEL_RE = /opus/i;
 });
 
+// src/scheduler/cron-cadence.ts
+function csvSmallestGap(field) {
+  if (!field.includes(","))
+    return null;
+  const parts = field.split(",").map((s) => Number(s)).filter((n) => Number.isInteger(n) && n >= 0);
+  if (parts.length < 2)
+    return null;
+  const sorted = [...parts].sort((a, b) => a - b);
+  let smallest = Infinity;
+  for (let i = 1;i < sorted.length; i++) {
+    const gap = sorted[i] - sorted[i - 1];
+    if (gap > 0 && gap < smallest)
+      smallest = gap;
+  }
+  return Number.isFinite(smallest) ? smallest : null;
+}
+function estimateCronGapMin(expr) {
+  const fields = expr.trim().split(/\s+/);
+  if (fields.length < 5)
+    return Infinity;
+  const [min, hour] = fields;
+  if (min === "*")
+    return 1;
+  const minStep = min.match(/^\*\/(\d+)$/);
+  if (minStep) {
+    const n = Number(minStep[1]);
+    return n > 0 ? n : Infinity;
+  }
+  const minCsv = csvSmallestGap(min);
+  if (minCsv !== null)
+    return minCsv;
+  if (!/^\d+$/.test(min))
+    return Infinity;
+  if (hour === "*")
+    return 60;
+  const hourStep = hour.match(/^\*\/(\d+)$/);
+  if (hourStep) {
+    const n = Number(hourStep[1]);
+    return n > 0 ? n * 60 : Infinity;
+  }
+  const hourCsv = csvSmallestGap(hour);
+  if (hourCsv !== null)
+    return hourCsv * 60;
+  if (/^\d+$/.test(hour))
+    return 1440;
+  return Infinity;
+}
+
 // src/scheduler/tier-selector.ts
-function applyDefaultTier(entry, _frequentGapMin = DEFAULT_FREQUENT_GAP_MIN) {
-  return entry;
+function resolveCronAutoTier(env2 = process.env) {
+  const v = (env2.SWITCHROOM_CRON_AUTO_TIER ?? "").toLowerCase();
+  return v === "1" || v === "true" || v === "on";
+}
+function recommendCronTier(input, frequentGapMin = DEFAULT_FREQUENT_GAP_MIN) {
+  if (input.kind === "action") {
+    return { tier: "action", source: "explicit", reason: "declared kind: action (model-free verb)" };
+  }
+  if (input.kind === "poll") {
+    return { tier: "poll", source: "explicit", reason: "declared kind: poll (model-free check)" };
+  }
+  if (input.context === "fresh") {
+    return { tier: "cheap", source: "explicit", reason: "declared context: fresh (cheap cron session)" };
+  }
+  if (input.context === "agent") {
+    return { tier: "main", source: "explicit", reason: "declared context: agent (full live session)" };
+  }
+  if (input.model !== undefined) {
+    return isKnownCheapModel(input.model) ? { tier: "cheap", source: "explicit", reason: `cheap model '${input.model}' \u2192 cheap cron session` } : { tier: "main", source: "explicit", reason: `model '${input.model}' is not a known-cheap id \u2192 full live session` };
+  }
+  if (input.smallestGapMin <= frequentGapMin) {
+    return {
+      tier: "cheap",
+      source: "cadence-default",
+      reason: `fires every ~${input.smallestGapMin}min (\u2264 ${frequentGapMin}min) \u2014 defaulting to a cheap ` + `session; set context: agent (or an Opus/custom model) if this needs the agent's full context`
+    };
+  }
+  return {
+    tier: "main",
+    source: "cadence-default",
+    reason: `fires every ~${input.smallestGapMin}min (> ${frequentGapMin}min) \u2014 defaulting to the agent's ` + `full session; set model: sonnet (or context: fresh) to run it cheaply`
+  };
+}
+function applyDefaultTier(entry, frequentGapMin = DEFAULT_FREQUENT_GAP_MIN, autoTierEnabled = resolveCronAutoTier()) {
+  if (!autoTierEnabled)
+    return entry;
+  if (entry.kind !== undefined || entry.context !== undefined || entry.model !== undefined) {
+    return entry;
+  }
+  const rec = recommendCronTier({ smallestGapMin: estimateCronGapMin(entry.cron) }, frequentGapMin);
+  return rec.tier === "cheap" ? { ...entry, context: "fresh" } : entry;
 }
 var DEFAULT_FREQUENT_GAP_MIN = 60;
 var init_tier_selector = __esm(() => {
@@ -30758,8 +30905,74 @@ var init_doctor_webkite = __esm(() => {
   init_loader();
 });
 
+// src/cli/doctor-cron-session.ts
+import { statSync as realStatSync } from "node:fs";
+import { resolve as resolve31 } from "node:path";
+function agentRunsCronSession(config, agent) {
+  const raw = config.agents[agent];
+  if (!raw)
+    return false;
+  const resolved = resolveAgentConfig(config.defaults, config.profiles, raw);
+  const entries = (resolved.schedule ?? []).map((e) => applyDefaultTier({ cron: e.cron, kind: e.kind, model: e.model, context: e.context }));
+  return scheduleNeedsCronSession(entries, { cheapCronEnabled: true });
+}
+function runCronSessionChecks(config, deps = defaultDeps2) {
+  const agentsDir = resolveAgentsDir(config);
+  const results = [];
+  for (const agent of Object.keys(config.agents).sort()) {
+    if (!agentRunsCronSession(config, agent))
+      continue;
+    const name = `cron-session: ${agent}`;
+    const alivePath = resolve31(agentsDir, agent, "telegram", ".bridge-alive-cron");
+    let mtimeMs;
+    try {
+      mtimeMs = deps.statMtimeMs(alivePath);
+    } catch (err) {
+      const code = err.code;
+      if (code === "EACCES" || code === "EPERM") {
+        results.push({
+          name,
+          status: "skip",
+          detail: "cron-bridge liveness file present but unreadable by the operator \u2014 re-run doctor without sudo"
+        });
+        continue;
+      }
+      results.push({
+        name,
+        status: "fail",
+        detail: `<${agent}-cron> bridge not registered \u2014 no liveness file at ${alivePath}. Tier-1 cron fires are falling back to the (expensive) main session.`,
+        fix: `Restart the agent (\`switchroom agent restart ${agent} --wait --force\`) and check /var/log/switchroom/cron-session.log for a wizard wedge.`
+      });
+      continue;
+    }
+    const ageMs = deps.now() - mtimeMs;
+    if (ageMs <= MAX_AGE_MS) {
+      results.push({ name, status: "ok", detail: `<${agent}-cron> bridge live (heartbeat ${Math.round(ageMs / 1000)}s ago)` });
+    } else {
+      results.push({
+        name,
+        status: "fail",
+        detail: `<${agent}-cron> bridge heartbeat is stale (${Math.round(ageMs / 1000)}s > ${MAX_AGE_MS / 1000}s) \u2014 the cron session registered then died. Tier-1 fires are falling back to main.`,
+        fix: `Restart the agent (\`switchroom agent restart ${agent} --wait --force\`) and check /var/log/switchroom/cron-session.log.`
+      });
+    }
+  }
+  return results;
+}
+var defaultDeps2, MAX_AGE_MS = 30000;
+var init_doctor_cron_session = __esm(() => {
+  init_loader();
+  init_merge();
+  init_cron_routing();
+  init_tier_selector();
+  defaultDeps2 = {
+    statMtimeMs: (p) => realStatSync(p).mtimeMs,
+    now: () => Date.now()
+  };
+});
+
 // src/cli/doctor-scaffold-wiring.ts
-import { join as join52, resolve as resolve31 } from "node:path";
+import { join as join52, resolve as resolve32 } from "node:path";
 function readJson2(d, path4) {
   if (!d.existsSync(path4))
     return { kind: "absent" };
@@ -30793,7 +31006,7 @@ function checkIntegrationScaffoldWiring(args) {
     ];
   }
   for (const name of agents) {
-    const agentDir = resolve31(agentsDir, name);
+    const agentDir = resolve32(agentsDir, name);
     if (!deps.existsSync(agentDir)) {
       results.push({
         name: `${label}: ${name} scaffold`,
@@ -30833,7 +31046,7 @@ function checkIntegrationScaffoldWiring(args) {
     let trustDetail = "no .claude/.claude.json";
     if (trustRead.kind === "ok") {
       const projects = trustRead.data?.projects ?? {};
-      const proj = projects[resolve31(agentDir)];
+      const proj = projects[resolve32(agentDir)];
       const enabled = proj?.enabledMcpjsonServers;
       if (Array.isArray(enabled) && enabled.includes(mcpKey)) {
         trustOk = true;
@@ -31052,7 +31265,7 @@ var init_doctor_microsoft = __esm(() => {
 import {
   existsSync as realExistsSync4,
   readFileSync as realReadFileSync4,
-  statSync as realStatSync
+  statSync as realStatSync2
 } from "node:fs";
 import { join as join54 } from "node:path";
 import { homedir as homedir31 } from "node:os";
@@ -31061,7 +31274,7 @@ function resolveDeps4(deps) {
   return {
     existsSync: deps.existsSync ?? realExistsSync4,
     readFileSync: deps.readFileSync ?? realReadFileSync4,
-    statSync: deps.statSync ?? realStatSync,
+    statSync: deps.statSync ?? realStatSync2,
     agentsDir: join54(home2, ".switchroom", "agents"),
     now: deps.now ?? Date.now,
     vaultAclReader: deps.vaultAclReader ?? (async () => ({ kind: "unreachable", msg: "no default reader wired" }))
@@ -31260,7 +31473,7 @@ var init_doctor_notion = __esm(() => {
 import {
   existsSync as realExistsSync5,
   readdirSync as realReaddirSync2,
-  statSync as realStatSync2
+  statSync as realStatSync3
 } from "node:fs";
 import { homedir as homedir32 } from "node:os";
 import { join as join55 } from "node:path";
@@ -31270,7 +31483,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
   const readdirSync21 = deps.readdirSync ?? ((p) => realReaddirSync2(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
     try {
-      return realStatSync2(p).isDirectory();
+      return realStatSync3(p).isDirectory();
     } catch {
       return false;
     }
@@ -31912,7 +32125,7 @@ import {
   readdirSync as readdirSync21,
   statSync as statSync25
 } from "node:fs";
-import { dirname as dirname13, join as join59, resolve as resolve32 } from "node:path";
+import { dirname as dirname13, join as join59, resolve as resolve33 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
   const nvmRoot = join59(process.env.HOME ?? "", ".nvm", "versions", "node");
@@ -32926,7 +33139,7 @@ function checkAgents(config, configPath) {
   const statuses = getAllAgentStatuses(config);
   const authStatuses = getAllAuthStatuses(config);
   for (const [name, agentConfig] of Object.entries(config.agents)) {
-    const agentDir = resolve32(agentsDir, name);
+    const agentDir = resolve33(agentsDir, name);
     if (!existsSync57(agentDir)) {
       results.push({
         name: `${name}: scaffold`,
@@ -33109,7 +33322,7 @@ function mffAgentName(config) {
 function mffEnvPath(config) {
   const home2 = process.env.HOME ?? "/root";
   const agent = mffAgentName(config);
-  return agent ? resolve32(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve32(home2, ".switchroom/credentials/my-family-finance/.env");
+  return agent ? resolve33(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve33(home2, ".switchroom/credentials/my-family-finance/.env");
 }
 function mffEnvState(envPath) {
   if (!existsSync57(envPath))
@@ -33525,14 +33738,14 @@ async function checkManifestDrift(probers) {
   return results;
 }
 function runDockerSection(config) {
-  const composePath = resolve32(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
+  const composePath = resolve33(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
   const active = isDockerMode({ composePath });
   let composeYaml;
   let dockerfileAgent;
   try {
     composeYaml = readFileSync51(composePath, "utf8");
   } catch {}
-  const dockerfilePath = resolve32(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
+  const dockerfilePath = resolve33(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
   try {
     dockerfileAgent = readFileSync51(dockerfilePath, "utf8");
   } catch {}
@@ -33657,7 +33870,8 @@ function registerDoctorCommand(program3) {
         })
       },
       { title: "MFF Skill", results: await checkMff(passphrase, vaultPath, config) },
-      { title: "Webkite", results: runWebkiteChecks(config) }
+      { title: "Webkite", results: runWebkiteChecks(config) },
+      { title: "Cron Session", results: runCronSessionChecks(config) }
     ];
     const cwd = process.cwd();
     if (isSwitchroomCheckout(cwd)) {
@@ -33719,6 +33933,7 @@ var init_doctor = __esm(() => {
   init_doctor_hostd();
   init_doctor_drive();
   init_doctor_webkite();
+  init_doctor_cron_session();
   init_doctor_microsoft();
   init_doctor_notion();
   init_doctor_credentials_migration();
@@ -41903,7 +42118,7 @@ class Protocol {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1000;
-        await new Promise((resolve49) => setTimeout(resolve49, pollInterval));
+        await new Promise((resolve50) => setTimeout(resolve50, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -41915,7 +42130,7 @@ class Protocol {
   }
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve49, reject) => {
+    return new Promise((resolve50, reject) => {
       const earlyReject = (error2) => {
         reject(error2);
       };
@@ -41993,7 +42208,7 @@ class Protocol {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve49(parseResult.data);
+            resolve50(parseResult.data);
           }
         } catch (error2) {
           reject(error2);
@@ -42184,12 +42399,12 @@ class Protocol {
         interval = task.pollInterval;
       }
     } catch {}
-    return new Promise((resolve49, reject) => {
+    return new Promise((resolve50, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve49, interval);
+      const timeoutId = setTimeout(resolve50, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
@@ -45174,7 +45389,7 @@ var require_compile = __commonJS((exports2) => {
     const schOrFunc = root.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve49.call(this, root, ref);
+    let _sch = resolve50.call(this, root, ref);
     if (_sch === undefined) {
       const schema = (_a = root.localRefs) === null || _a === undefined ? undefined : _a[ref];
       const { schemaId } = this.opts;
@@ -45201,7 +45416,7 @@ var require_compile = __commonJS((exports2) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve49(root, ref) {
+  function resolve50(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -45731,7 +45946,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
     }
     return uri;
   }
-  function resolve49(baseURI, relativeURI, options) {
+  function resolve50(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse6(baseURI, schemelessOptions), parse6(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
@@ -45959,7 +46174,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
   var fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve49,
+    resolve: resolve50,
     resolveComponent,
     equal,
     serialize,
@@ -49342,12 +49557,12 @@ class StdioServerTransport {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve49) => {
+    return new Promise((resolve50) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve49();
+        resolve50();
       } else {
-        this._stdout.once("drain", resolve49);
+        this._stdout.once("drain", resolve50);
       }
     });
   }
@@ -50252,8 +50467,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.15.12";
-var COMMIT_SHA = "18b7b6e6";
+var VERSION = "0.15.14";
+var COMMIT_SHA = "91ae15d3";
 
 // src/cli/agent.ts
 init_source();
@@ -50353,7 +50568,7 @@ import { createHash as createHash2 } from "node:crypto";
 // src/agents/cron-unit-name.ts
 import { createHash } from "node:crypto";
 function cronUnitHash(cron, prompt) {
-  return createHash("sha256").update(cron).update("\x00").update(prompt).digest("hex").slice(0, 12);
+  return createHash("sha256").update(cron).update("\x00").update(prompt ?? "").digest("hex").slice(0, 12);
 }
 function cronUnitName(cron, prompt) {
   return `cron-${cronUnitHash(cron, prompt)}`;
@@ -50902,8 +51117,8 @@ function findExistingClaudeJson() {
   console.warn("  Alternatively, agents can be onboarded individually via `switchroom agent attach <name>`.");
   return null;
 }
-function copyOnboardingState(sourcePath, agentDir) {
-  const claudeDir = join7(agentDir, ".claude");
+function copyOnboardingState(sourcePath, agentDir, configDirName = ".claude") {
+  const claudeDir = join7(agentDir, configDirName);
   mkdirSync7(claudeDir, { recursive: true });
   const destPath = join7(claudeDir, ".claude.json");
   if (!existsSync11(destPath)) {
@@ -50979,8 +51194,8 @@ function loadUserConfig() {
     return null;
   }
 }
-function preTrustWorkspace(agentDir) {
-  const configPath = join7(agentDir, ".claude", ".claude.json");
+function preTrustWorkspace(agentDir, configDirName = ".claude") {
+  const configPath = join7(agentDir, configDirName, ".claude.json");
   if (!existsSync11(configPath)) {
     return;
   }
@@ -51004,8 +51219,8 @@ function preTrustWorkspace(agentDir) {
     });
   } catch {}
 }
-function ensureMcpServersTrusted(agentDir, serverKeys) {
-  const configPath = join7(agentDir, ".claude", ".claude.json");
+function ensureMcpServersTrusted(agentDir, serverKeys, configDirName = ".claude") {
+  const configPath = join7(agentDir, configDirName, ".claude.json");
   if (!existsSync11(configPath)) {
     return;
   }
@@ -51033,8 +51248,8 @@ function ensureMcpServersTrusted(agentDir, serverKeys) {
     console.warn(`  WARNING: could not update MCP trust allowlist in ${configPath} ` + `(${err instanceof Error ? err.message : String(err)}). ` + `Scaffolded MCP servers (gdrive, agent-config, hostd) may be ` + `silently ignored by Claude Code for this agent.`);
   }
 }
-function createMinimalClaudeConfig(agentDir) {
-  const claudeDir = join7(agentDir, ".claude");
+function createMinimalClaudeConfig(agentDir, configDirName = ".claude") {
+  const claudeDir = join7(agentDir, configDirName);
   mkdirSync7(claudeDir, { recursive: true });
   const configPath = join7(claudeDir, ".claude.json");
   if (!existsSync11(configPath)) {
@@ -51049,6 +51264,11 @@ function createMinimalClaudeConfig(agentDir) {
     });
   }
 }
+function seedCronConfigDir(agentDir, serverKeys) {
+  createMinimalClaudeConfig(agentDir, ".claude-cron");
+  preTrustWorkspace(agentDir, ".claude-cron");
+  ensureMcpServersTrusted(agentDir, serverKeys, ".claude-cron");
+}
 
 // src/repos/bare-clone.ts
 init_paths();
@@ -51513,20 +51733,33 @@ function buildCronSessionContext(agentConfig) {
     cronModelQ: shellSingleQuote(DEFAULT_CRON_MODEL)
   };
 }
-function maybeWriteTrimmedCronMcp(agentDir, mcpServers, cronSessionEnabled) {
+function maybeWriteCronMcp(agentDir, mcpServers, cronSessionEnabled) {
   if (!cronSessionEnabled)
     return null;
   const telegram = mcpServers["switchroom-telegram"];
   if (!telegram)
     return null;
+  const baseStateDir = telegram.env?.TELEGRAM_STATE_DIR;
+  const cronTelegram = {
+    ...telegram,
+    env: {
+      ...telegram.env,
+      ...baseStateDir ? { SWITCHROOM_BRIDGE_ALIVE_PATH: `${baseStateDir}/.bridge-alive-cron` } : {}
+    }
+  };
+  const cronServers = {
+    ...mcpServers,
+    "switchroom-telegram": cronTelegram
+  };
   const cronDir = join9(agentDir, ".claude-cron");
   mkdirSync10(cronDir, { recursive: true });
   const path = join9(cronDir, ".mcp.json");
-  const content = JSON.stringify({ mcpServers: { "switchroom-telegram": telegram } }, null, 2) + `
+  const content = JSON.stringify({ mcpServers: cronServers }, null, 2) + `
 `;
   if (!existsSync14(path) || readFileSync12(path, "utf-8") !== content) {
     writeFileSync5(path, content, { encoding: "utf-8", mode: 384 });
   }
+  seedCronConfigDir(agentDir, Object.keys(cronServers));
   return path;
 }
 function alignAgentUid(name, agentDir, uid, opts = {}) {
@@ -51719,6 +51952,11 @@ function webkiteDenyForAgent(agentConfig) {
 }
 var SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-4-6";
 var SWITCHROOM_DEFAULT_THINKING_EFFORT = "low";
+function resolveMainModel(model) {
+  if (model === undefined || model === "default")
+    return SWITCHROOM_DEFAULT_MAIN_MODEL;
+  return model;
+}
 function dedupe2(items) {
   const seen = new Set;
   const out = [];
@@ -51988,6 +52226,10 @@ function channelsToEnv(agent) {
   if (tg.clear_status_on_completion !== undefined) {
     out.SWITCHROOM_TG_CLEAR_STATUS_ON_COMPLETION = tg.clear_status_on_completion ? "1" : "0";
   }
+  const linearDefaultTeam = tg?.linear_agent?.default_team_id;
+  if (linearDefaultTeam) {
+    out.SWITCHROOM_LINEAR_DEFAULT_TEAM_ID = linearDefaultTeam;
+  }
   return out;
 }
 function buildRepoEnvVars(_agentName, agentDir, agent) {
@@ -52327,6 +52569,7 @@ function buildWorkspaceContext(args) {
     useSwitchroomPlugin: usesSwitchroomTelegramPlugin(agentConfig),
     useHotReloadStable: agentConfig.channels?.telegram?.hotReloadStable === true,
     telegramEnabledFlag: agentConfig.channels?.telegram?.enabled === false ? "false" : "true",
+    linearAgentEnabled: agentConfig.channels?.telegram?.linear_agent?.enabled === true,
     securityPluginDir: DOCKER_SECURITY_PLUGIN_PATH,
     hindsightEnabled: hindsightAutoRecallEnabled,
     hindsightBankIdQ: shellSingleQuote(hindsightBankId),
@@ -52338,7 +52581,7 @@ function buildWorkspaceContext(args) {
     hindsightTopicFilterMode,
     switchroomConfigPathQ: switchroomConfigPath ? shellSingleQuote(resolve11(switchroomConfigPath)) : undefined,
     hostHomeQ: process.env.HOME ? shellSingleQuote(process.env.HOME) : undefined,
-    modelQ: shellSingleQuote(agentConfig.model ?? SWITCHROOM_DEFAULT_MAIN_MODEL),
+    modelQ: shellSingleQuote(resolveMainModel(agentConfig.model)),
     ...buildCronSessionContext(agentConfig),
     thinkingEffort: agentConfig.thinking_effort ?? SWITCHROOM_DEFAULT_THINKING_EFFORT,
     permissionMode: agentConfig.permission_mode,
@@ -52638,7 +52881,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
         useSwitchroomPlugin: usesSwitchroomTelegramPlugin(agentConfig),
         configPath: switchroomConfigPath
       });
-      settings.model = agentConfig.model ?? SWITCHROOM_DEFAULT_MAIN_MODEL;
+      settings.model = resolveMainModel(agentConfig.model);
       const mergedSettings = agentConfig.settings_raw ? deepMergeJson(settings, agentConfig.settings_raw) : settings;
       if (agentConfig.settings_raw && Object.keys(agentConfig.settings_raw).length > 0) {
         mergedSettings._switchroomManagedRawKeys = Object.keys(agentConfig.settings_raw);
@@ -52709,7 +52952,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
     }
     writeIfChanged(mcpJsonPath, () => JSON.stringify({ mcpServers }, null, 2) + `
 `, created, skipped, 384);
-    maybeWriteTrimmedCronMcp(agentDir, mcpServers, buildCronSessionContext(agentConfig).cronSessionEnabled);
+    maybeWriteCronMcp(agentDir, mcpServers, buildCronSessionContext(agentConfig).cronSessionEnabled);
     mcpServerKeysToTrust = Object.keys(mcpServers);
     ensureMcpServersTrusted(agentDir, mcpServerKeysToTrust);
   }
@@ -53429,7 +53672,7 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
       hindsightTopicAliasesJsonQ: hindsightTopicAliasesJson ? shellSingleQuote(hindsightTopicAliasesJson) : undefined,
       hindsightTopicFilterMode,
       hostHomeQ: process.env.HOME ? shellSingleQuote(process.env.HOME) : undefined,
-      modelQ: shellSingleQuote(agentConfig.model ?? SWITCHROOM_DEFAULT_MAIN_MODEL),
+      modelQ: shellSingleQuote(resolveMainModel(agentConfig.model)),
       ...buildCronSessionContext(agentConfig),
       thinkingEffort: agentConfig.thinking_effort ?? SWITCHROOM_DEFAULT_THINKING_EFFORT,
       permissionMode: agentConfig.permission_mode,
@@ -53514,7 +53757,8 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
         schedule: agentConfig.schedule,
         useSwitchroomPlugin: usesSwitchroomTelegramPlugin(agentConfig),
         admin: agentConfig.admin === true || agentConfig.root === true,
-        root: agentConfig.root === true
+        root: agentConfig.root === true,
+        linearAgentEnabled: agentConfig.channels?.telegram?.linear_agent?.enabled === true
       };
       let rendered = renderTemplate(claudeMdSrc, claudeContext);
       const vaultProtocol = renderVaultProtocolFragment(claudeContext);
@@ -53680,7 +53924,7 @@ ${body}
         }
       }
     }
-    settings.model = agentConfig.model ?? SWITCHROOM_DEFAULT_MAIN_MODEL;
+    settings.model = resolveMainModel(agentConfig.model);
     const mergedSettings = agentConfig.settings_raw ? deepMergeJson(settings, agentConfig.settings_raw) : settings;
     if (agentConfig.settings_raw && Object.keys(agentConfig.settings_raw).length > 0) {
       mergedSettings[META_KEY] = Object.keys(agentConfig.settings_raw);
@@ -53783,9 +54027,9 @@ ${body}
       writeFileSync5(mcpJsonPath, after, { encoding: "utf-8", mode: 384 });
       changes.push(mcpJsonPath);
     }
-    const trimmedCronMcp = maybeWriteTrimmedCronMcp(agentDir, mcpServers, buildCronSessionContext(agentConfig).cronSessionEnabled);
-    if (trimmedCronMcp)
-      changes.push(trimmedCronMcp);
+    const cronMcp = maybeWriteCronMcp(agentDir, mcpServers, buildCronSessionContext(agentConfig).cronSessionEnabled);
+    if (cronMcp)
+      changes.push(cronMcp);
     ensureMcpServersTrusted(agentDir, Object.keys(mcpServers));
   }
   const reconcileWorkspaceDir = join9(agentDir, "workspace");
@@ -67041,6 +67285,22 @@ function setLinearAgent(yamlText, agentName, opts) {
   if (opts.workspaceId)
     block.workspace_id = opts.workspaceId;
   doc.setIn(["agents", agentName, "channels", "telegram", "linear_agent"], block);
+  doc.setIn(["agents", agentName, "channels", "telegram", "webhook_via_gateway"], true);
+  return String(doc);
+}
+function setLinearDefaultTeam(yamlText, agentName, teamId) {
+  const doc = import_yaml11.parseDocument(yamlText);
+  ensureAgent(doc, agentName);
+  if (!doc.hasIn(["agents", agentName, "channels", "telegram", "linear_agent"])) {
+    throw new Error(`agent '${agentName}' has no linear_agent block. Run 'switchroom linear-agent setup --agent ${agentName} --token <token>' first.`);
+  }
+  const path4 = ["agents", agentName, "channels", "telegram", "linear_agent", "default_team_id"];
+  if (teamId === null) {
+    if (doc.hasIn(path4))
+      doc.deleteIn(path4);
+  } else {
+    doc.setIn(path4, teamId);
+  }
   return String(doc);
 }
 function setTelegramFeature(yamlText, agentName, feature, value) {
@@ -67642,6 +67902,29 @@ function registerLinearAgentCommand(program3) {
     }
     printLinearInstructions(opts, vaultKey);
   }));
+  linear.command("set-team").description("Set (or clear) the default Linear team captured issues file into for <agent>. Only needed when the workspace has multiple teams \u2014 a single-team workspace auto-resolves. Pass --clear to remove the default.").requiredOption("--agent <name>", "Agent name (must have a linear_agent block)").option("--team <id>", "Linear team id new captured issues default to.").option("--clear", "Remove the configured default team (revert to auto-resolve).").action(withConfigError(async (opts) => {
+    if (!/^[a-z][a-z0-9_-]{0,63}$/.test(opts.agent)) {
+      fail2(`--agent must be a lowercase agent slug (got '${opts.agent}').`);
+    }
+    if (!opts.clear && (!opts.team || opts.team.trim().length === 0)) {
+      fail2("pass either --team <id> or --clear.");
+    }
+    const path4 = getConfigPath(program3);
+    const before = readFileSync39(path4, "utf-8");
+    let after;
+    try {
+      after = setLinearDefaultTeam(before, opts.agent, opts.clear ? null : opts.team.trim());
+    } catch (err) {
+      fail2(err.message);
+    }
+    writeFileSync22(path4, after, "utf-8");
+    if (opts.clear) {
+      console.log(source_default.green(`\u2713 Cleared default Linear team for '${opts.agent}' (auto-resolve).`));
+    } else {
+      console.log(source_default.green(`\u2713 Default Linear team for '${opts.agent}' set to ${opts.team.trim()}.`));
+    }
+    console.log(source_default.gray(`  Run 'switchroom agent restart ${opts.agent}' to pick up the change.`));
+  }));
 }
 function printLinearInstructions(opts, vaultKey) {
   const base = opts.webhookBase ?? "https://<your-switchroom-web-host>";
@@ -68313,17 +68596,19 @@ function collectScheduleEntries(config) {
     const schedule = resolved.schedule ?? [];
     for (let i = 0;i < schedule.length; i++) {
       const entry = schedule[i];
+      const auditMaterial = entry.prompt ?? `action:${JSON.stringify(entry.action ?? {})}`;
       out.push({
         agent,
         scheduleIndex: i,
         cron: entry.cron,
-        prompt: entry.prompt,
-        promptKey: createHash9("sha256").update(entry.prompt).digest("hex").slice(0, 12),
+        ...entry.prompt !== undefined ? { prompt: entry.prompt } : {},
+        promptKey: createHash9("sha256").update(auditMaterial).digest("hex").slice(0, 12),
         ...entry.topic !== undefined ? { topic: entry.topic } : {},
         ...entry.kind !== undefined ? { kind: entry.kind } : {},
         ...entry.model !== undefined ? { model: entry.model } : {},
         ...entry.context !== undefined ? { context: entry.context } : {},
-        ...entry.poll !== undefined ? { poll: entry.poll } : {}
+        ...entry.poll !== undefined ? { poll: entry.poll } : {},
+        ...entry.action !== undefined ? { action: entry.action } : {}
       });
     }
   }
@@ -76040,7 +76325,7 @@ init_loader();
 init_lifecycle();
 import { cpSync as cpSync2, existsSync as existsSync58, mkdirSync as mkdirSync32, readFileSync as readFileSync52, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync26 } from "node:fs";
 import { spawnSync as spawnSync9 } from "node:child_process";
-import { join as join60, dirname as dirname14, resolve as resolve33 } from "node:path";
+import { join as join60, dirname as dirname14, resolve as resolve34 } from "node:path";
 import { homedir as homedir36 } from "node:os";
 var DEFAULT_COMPOSE_PATH = join60(homedir36(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
@@ -76198,7 +76483,7 @@ function planUpdate(opts) {
         opts.syncBundledSkillsFn();
         return;
       }
-      const source = resolve33(import.meta.dirname, "../../skills");
+      const source = resolve34(import.meta.dirname, "../../skills");
       const dest = join60(homedir36(), ".switchroom", "skills", "_bundled");
       if (!existsSync58(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
@@ -76525,7 +76810,7 @@ init_source();
 init_helpers();
 init_loader();
 init_lifecycle();
-import { resolve as resolve34 } from "node:path";
+import { resolve as resolve35 } from "node:path";
 
 // src/cli/version.ts
 init_source();
@@ -76680,7 +76965,7 @@ function registerRestartCommand(program3) {
         }
         const didRestart = res.restarted || !graceful;
         if (didRestart) {
-          const agentDir = resolve34(agentsDir, name);
+          const agentDir = resolve35(agentsDir, name);
           const converged = waitForAuthConverge(name, agentDir);
           if (!converged) {
             console.log(source_default.yellow(`  ${name}: agent is up but auth status didn't converge in 30s \u2014 check logs`));
@@ -76761,7 +77046,7 @@ Dependency manifest`));
 // src/cli/handoff.ts
 init_helpers();
 init_loader();
-import { resolve as resolve35 } from "node:path";
+import { resolve as resolve36 } from "node:path";
 function registerHandoffCommand(program3) {
   program3.command("handoff <agent>", { hidden: true }).description("Build the agent's session handoff sidecars \u2014 a transcript-tail " + "briefing (.handoff.md) and topic line (.handoff-topic). " + "[internal \u2014 used by the Stop hook]").option("--max-turns <n>", "Max turns kept in the handoff transcript tail", String(DEFAULT_MAX_TURNS)).action(withConfigError(async (agentName, opts) => {
     let agentConfig;
@@ -76775,7 +77060,7 @@ function registerHandoffCommand(program3) {
         return;
       }
       const agentsDir = resolveAgentsDir(config);
-      agentDir = resolve35(agentsDir, agentName);
+      agentDir = resolve36(agentsDir, agentName);
     } catch (err) {
       if (!(err instanceof ConfigError))
         throw err;
@@ -76790,7 +77075,7 @@ function registerHandoffCommand(program3) {
 `);
       return;
     }
-    const claudeConfigDir = resolve35(agentDir, ".claude");
+    const claudeConfigDir = resolve36(agentDir, ".claude");
     const jsonl = findLatestSessionJsonl(claudeConfigDir);
     if (!jsonl) {
       process.stderr.write(`handoff: no session JSONL under ${claudeConfigDir}/projects; skipping
@@ -77299,7 +77584,7 @@ function record(stateDir, input, nowFn = Date.now) {
     return result;
   });
 }
-function resolve36(stateDir, fingerprint, nowFn = Date.now) {
+function resolve37(stateDir, fingerprint, nowFn = Date.now) {
   if (!existsSync60(join62(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
@@ -77587,11 +77872,11 @@ function registerIssuesCommand(program3) {
       const stateDir = resolveStateDir2(opts);
       let flipped;
       if (opts.source && opts.code) {
-        flipped = resolve36(stateDir, computeFingerprint(opts.source, opts.code));
+        flipped = resolve37(stateDir, computeFingerprint(opts.source, opts.code));
       } else if (opts.source && !fingerprint) {
         flipped = resolveAllBySource(stateDir, opts.source);
       } else if (fingerprint) {
-        flipped = resolve36(stateDir, fingerprint);
+        flipped = resolve37(stateDir, fingerprint);
       } else {
         process.stderr.write(`issues resolve: need either <fingerprint>, --source, or --source + --code
 `);
@@ -77688,7 +77973,7 @@ function relTime(deltaMs) {
 init_source();
 import { existsSync as existsSync63 } from "node:fs";
 import { homedir as homedir39 } from "node:os";
-import { join as join65, resolve as resolve37 } from "node:path";
+import { join as join65, resolve as resolve38 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash11 } from "node:crypto";
@@ -77895,7 +78180,7 @@ function ensureNodeEnv(opts) {
 
 // src/cli/deps.ts
 function builtinSkillsRoot() {
-  return resolve37(homedir39(), ".switchroom/skills/_bundled");
+  return resolve38(homedir39(), ".switchroom/skills/_bundled");
 }
 function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
@@ -77974,7 +78259,7 @@ function registerDepsCommand(program3) {
 init_helpers();
 init_loader();
 import { existsSync as existsSync64 } from "node:fs";
-import { resolve as resolve38, sep as sep3 } from "node:path";
+import { resolve as resolve39, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync10 } from "node:child_process";
 
 // src/agents/workspace.ts
@@ -78680,8 +78965,8 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const resolvedWorkspace = resolve38(dir);
-    const target = resolve38(resolvedWorkspace, file ?? "AGENTS.md");
+    const resolvedWorkspace = resolve39(dir);
+    const target = resolve39(resolvedWorkspace, file ?? "AGENTS.md");
     if (!isInsideWorkspace(resolvedWorkspace, target)) {
       process.stderr.write(`workspace edit: refusing path traversal outside workspace dir (${target})
 `);
@@ -78749,7 +79034,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve38(dir, ".git");
+    const gitDir = resolve39(dir, ".git");
     if (!existsSync64(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
@@ -78803,7 +79088,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve38(dir, ".git");
+    const gitDir = resolve39(dir, ".git");
     if (!existsSync64(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
@@ -78827,7 +79112,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
     return;
   }
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve38(agentsDir, agentName);
+  const agentDir = resolve39(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync64(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
@@ -78866,7 +79151,7 @@ init_helpers();
 init_loader();
 init_merge();
 import { copyFileSync as copyFileSync10, existsSync as existsSync65, readFileSync as readFileSync57, writeFileSync as writeFileSync31 } from "node:fs";
-import { join as join66, resolve as resolve39 } from "node:path";
+import { join as join66, resolve as resolve40 } from "node:path";
 init_schema();
 function resolveSoulTargetOrExit(program3, agentName) {
   const config = getConfig(program3);
@@ -78879,7 +79164,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const profileName = merged.extends ?? DEFAULT_PROFILE;
   const profilePath = getProfilePath(profileName);
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve39(agentsDir, agentName);
+  const agentDir = resolve40(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync65(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
@@ -78957,7 +79242,7 @@ function registerSoulCommand(program3) {
 init_helpers();
 init_loader();
 import { existsSync as existsSync66, readFileSync as readFileSync58, readdirSync as readdirSync23, statSync as statSync28 } from "node:fs";
-import { resolve as resolve40, join as join67 } from "node:path";
+import { resolve as resolve41, join as join67 } from "node:path";
 import { createHash as createHash13 } from "node:crypto";
 init_merge();
 init_hindsight();
@@ -79055,7 +79340,7 @@ function registerDebugCommand(program3) {
       process.exit(1);
     }
     const agentsDir = resolveAgentsDir(config);
-    const agentDir = resolve40(agentsDir, agentName);
+    const agentDir = resolve41(agentsDir, agentName);
     if (!existsSync66(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
@@ -79232,7 +79517,7 @@ init_source();
 // src/worktree/claim.ts
 import { execFileSync as execFileSync21 } from "node:child_process";
 import { closeSync as closeSync12, mkdirSync as mkdirSync37, openSync as openSync12, existsSync as existsSync68, unlinkSync as unlinkSync13 } from "node:fs";
-import { join as join69, resolve as resolve42 } from "node:path";
+import { join as join69, resolve as resolve43 } from "node:path";
 import { homedir as homedir41 } from "node:os";
 import { randomBytes as randomBytes13 } from "node:crypto";
 
@@ -79246,10 +79531,10 @@ import {
   existsSync as existsSync67,
   renameSync as renameSync13
 } from "node:fs";
-import { join as join68, resolve as resolve41 } from "node:path";
+import { join as join68, resolve as resolve42 } from "node:path";
 import { homedir as homedir40 } from "node:os";
 function registryDir() {
-  return resolve41(process.env.SWITCHROOM_WORKTREE_DIR ?? join68(homedir40(), ".switchroom", "worktrees"));
+  return resolve42(process.env.SWITCHROOM_WORKTREE_DIR ?? join68(homedir40(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
   return join68(registryDir(), `${id}.json`);
@@ -79330,7 +79615,7 @@ function acquireRepoLock(repoPath) {
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve42(process.env.SWITCHROOM_WORKTREE_BASE ?? join69(homedir41(), ".switchroom", "worktree-checkouts"));
+  return resolve43(process.env.SWITCHROOM_WORKTREE_BASE ?? join69(homedir41(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
   return randomBytes13(4).toString("hex");
@@ -80050,20 +80335,20 @@ function wireStdio(child) {
 async function killChild(child, gracefulMs = 3000) {
   if (child.exitCode !== null || child.signalCode !== null)
     return;
-  return new Promise((resolve43) => {
+  return new Promise((resolve44) => {
     let killTimer = null;
     const onExit = () => {
       if (killTimer) {
         clearTimeout(killTimer);
         killTimer = null;
       }
-      resolve43();
+      resolve44();
     };
     child.once("exit", onExit);
     try {
       child.kill("SIGTERM");
     } catch {
-      resolve43();
+      resolve44();
       return;
     }
     killTimer = setTimeout(() => {
@@ -80177,8 +80462,8 @@ async function runMs365McpLauncher(opts, rt) {
   };
   process.on("SIGINT", onSignal);
   process.on("SIGTERM", onSignal);
-  return new Promise((resolve43) => {
-    resolveLauncher = resolve43;
+  return new Promise((resolve44) => {
+    resolveLauncher = resolve44;
   });
 }
 function registerM365McpLauncherCommand(program3) {
@@ -80280,23 +80565,23 @@ async function runNotionMcpLauncher(opts, runtime) {
   };
   process.on("SIGTERM", () => forward("SIGTERM"));
   process.on("SIGINT", () => forward("SIGINT"));
-  const exitCode = await new Promise((resolve43) => {
+  const exitCode = await new Promise((resolve44) => {
     child.once("exit", (code, signal) => {
       clearTimer(heartbeatHandle);
       if (typeof code === "number") {
-        resolve43(code);
+        resolve44(code);
       } else if (signal) {
         const sigCode = { SIGTERM: 15, SIGINT: 2, SIGKILL: 9 }[signal] ?? 1;
-        resolve43(128 + sigCode);
+        resolve44(128 + sigCode);
       } else {
-        resolve43(1);
+        resolve44(1);
       }
     });
     child.once("error", (err) => {
       clearTimer(heartbeatHandle);
       process.stderr.write(`notion-mcp-launcher: child spawn error: ${err.message}
 `);
-      resolve43(1);
+      resolve44(1);
     });
   });
   return exitCode;
@@ -81354,7 +81639,7 @@ agents:
 
 // src/cli/apply.ts
 init_resolver();
-import { dirname as dirname22, join as join74, resolve as resolve44 } from "node:path";
+import { dirname as dirname22, join as join74, resolve as resolve45 } from "node:path";
 import { homedir as homedir43 } from "node:os";
 import { execFileSync as execFileSync24 } from "node:child_process";
 init_vault();
@@ -81955,7 +82240,7 @@ function copyExampleConfig2(name) {
   if (!/^[a-z0-9_-]+$/.test(name)) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
-  const dest = resolve44(process.cwd(), "switchroom.yaml");
+  const dest = resolve45(process.cwd(), "switchroom.yaml");
   if (existsSync74(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
@@ -81966,7 +82251,7 @@ function copyExampleConfig2(name) {
     console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
     return;
   }
-  const exampleFile = resolve44(import.meta.dirname, `../../examples/${name}.yaml`);
+  const exampleFile = resolve45(import.meta.dirname, `../../examples/${name}.yaml`);
   if (!existsSync74(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
@@ -82544,10 +82829,10 @@ import {
   unlinkSync as unlinkSync14,
   writeSync as writeSync8
 } from "node:fs";
-import { join as join76, resolve as resolve45 } from "node:path";
+import { join as join76, resolve as resolve46 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
-  const base = opts.root ? resolve45(opts.root, agent) : resolve45(resolveDualPath(`~/.switchroom/agents/${agent}`));
+  const base = opts.root ? resolve46(opts.root, agent) : resolve46(resolveDualPath(`~/.switchroom/agents/${agent}`));
   const scheduleDir = join76(base, "schedule.d");
   const scheduleStagingDir = join76(scheduleDir, STAGING_SUBDIR);
   const skillsDir = join76(base, "skills.d");
@@ -82943,11 +83228,12 @@ import { existsSync as existsSync78, readFileSync as readFileSync66 } from "node
 import { execFileSync as execFileSync25 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
-var TIER_WEIGHT = { poll: 0, cheap: 1, main: 5 };
+var TIER_WEIGHT = { poll: 0, action: 0, cheap: 1, main: 5 };
 function summarizeScheduleReport(rows, opts = {}) {
   const s = {
     total: 0,
     pollFires: 0,
+    actionFires: 0,
     cheapFires: 0,
     mainFires: 0,
     errors: 0,
@@ -82962,6 +83248,8 @@ function summarizeScheduleReport(rows, opts = {}) {
     const tier = r.tier ?? "main";
     if (tier === "poll")
       s.pollFires += 1;
+    else if (tier === "action")
+      s.actionFires += 1;
     else if (tier === "cheap")
       s.cheapFires += 1;
     else
@@ -82993,11 +83281,12 @@ function parseScheduleJsonl(blob) {
 }
 function formatScheduleReport(agent, s) {
   const modelFires = s.cheapFires + s.mainFires;
-  const savedPct = s.total > 0 ? Math.round(s.pollFires / s.total * 100) : 0;
+  const modelFreePct = s.total > 0 ? Math.round((s.pollFires + s.actionFires) / s.total * 100) : 0;
   const lines = [
     `cron report \u2014 ${agent}`,
     `  total fires        ${s.total}`,
-    `  Tier 0 poll (free) ${s.pollFires}  (${savedPct}% model-free)`,
+    `  Tier 0 poll (free) ${s.pollFires}  (${modelFreePct}% model-free incl. actions)`,
+    `  Tier 0 action(free)${s.actionFires}`,
     `  Tier 1 cheap       ${s.cheapFires}`,
     `  Tier 2 main        ${s.mainFires}`,
     `  model fires        ${modelFires}`,
@@ -83799,7 +84088,7 @@ import {
   writeFileSync as writeFileSync39
 } from "node:fs";
 import { tmpdir as tmpdir5, homedir as homedir45 } from "node:os";
-import { dirname as dirname23, join as join79, relative as relative2, resolve as resolve46 } from "node:path";
+import { dirname as dirname23, join as join79, relative as relative2, resolve as resolve47 } from "node:path";
 import { spawnSync as spawnSync11 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -83997,7 +84286,7 @@ function resolveSkillsPoolDir2(override) {
   }
   if (raw === "~")
     return homedir45();
-  return resolve46(raw);
+  return resolve47(raw);
 }
 function readStdinSync() {
   const chunks = [];
@@ -84281,7 +84570,7 @@ function registerSkillCommand(program3) {
     if (opts.from === undefined) {
       files = loadFromStdin();
     } else {
-      const fromPath = resolve46(opts.from);
+      const fromPath = resolve47(opts.from);
       if (!existsSync80(fromPath)) {
         fail3(`--from path does not exist: ${opts.from}`);
       }
@@ -84350,7 +84639,7 @@ import {
   utimesSync,
   writeFileSync as writeFileSync40
 } from "node:fs";
-import { dirname as dirname24, join as join80, relative as relative3, resolve as resolve47 } from "node:path";
+import { dirname as dirname24, join as join80, relative as relative3, resolve as resolve48 } from "node:path";
 import { homedir as homedir46, tmpdir as tmpdir6 } from "node:os";
 import { spawnSync as spawnSync12 } from "node:child_process";
 init_helpers();
@@ -84361,7 +84650,7 @@ var TRASH_TTL_MS = 24 * 60 * 60 * 1000;
 var PERSONAL_SKILLS_SUBPATH = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
-  const candidate = override ? resolve47(override) : join80(homedir46(), ".switchroom-config");
+  const candidate = override ? resolve48(override) : join80(homedir46(), ".switchroom-config");
   if (!existsSync81(candidate))
     return null;
   return join80(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
@@ -84456,7 +84745,7 @@ function resolveAgent(opts) {
 }
 function resolveAgentsRoot(opts) {
   if (opts.root)
-    return resolve47(opts.root);
+    return resolve48(opts.root);
   return join80(homedir46(), ".switchroom", "agents");
 }
 function personalSkillDir(agentsRoot, agent, name) {
@@ -84486,7 +84775,7 @@ function readStdinSync2() {
   return Buffer.concat(chunks).toString("utf-8");
 }
 function loadFromDir2(dir) {
-  const abs = resolve47(dir);
+  const abs = resolve48(dir);
   if (!statSync32(abs).isDirectory()) {
     fail4(`--from path is not a directory: ${dir}`);
   }
@@ -84680,7 +84969,7 @@ function loadFiles(opts) {
   if (opts.from === undefined) {
     return loadFromStdin2();
   }
-  const p = resolve47(opts.from);
+  const p = resolve48(opts.from);
   if (!existsSync81(p)) {
     fail4(`--from path does not exist: ${opts.from}`);
   }
@@ -84949,18 +85238,18 @@ init_helpers();
 var import_yaml23 = __toESM(require_dist(), 1);
 import { existsSync as existsSync82, readdirSync as readdirSync32, readFileSync as readFileSync69, statSync as statSync33 } from "node:fs";
 import { homedir as homedir47 } from "node:os";
-import { join as join81, resolve as resolve48 } from "node:path";
+import { join as join81, resolve as resolve49 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
 var BUNDLED_SUBDIR = "_bundled";
 var AGENT_NAME_RE3 = /^[a-z][a-z0-9_-]{0,62}$/;
 function defaultAgentsRoot() {
-  return resolve48(homedir47(), ".switchroom/agents");
+  return resolve49(homedir47(), ".switchroom/agents");
 }
 function defaultSharedRoot2() {
-  return resolve48(homedir47(), ".switchroom/skills");
+  return resolve49(homedir47(), ".switchroom/skills");
 }
 function defaultBundledRoot2() {
-  return resolve48(homedir47(), ".switchroom/skills/_bundled");
+  return resolve49(homedir47(), ".switchroom/skills/_bundled");
 }
 function readSkillFrontmatter(skillDir) {
   const mdPath = join81(skillDir, "SKILL.md");