switchroom 0.16.38 → 0.16.47

package/dist/cli/switchroom.js

@@ -13542,7 +13542,7 @@ var init_zod = __esm(() => {
 function isValidTimezone(value) {
   return TIMEZONE_REGEX.test(value);
 }
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -14005,7 +14005,7 @@ var init_schema = __esm(() => {
     secrets: exports_external.array(exports_external.string().regex(/^[a-zA-Z0-9_\-/]+$/, "Secret key names must contain only alphanumeric characters, underscores, hyphens, and forward slashes")).optional(),
     reactions: ReactionsSchema,
     reaction_dispatch: ReactionDispatchSchema,
-    model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only (no spaces or shell specials)").optional().describe("Claude model override (e.g., 'claude-sonnet-4-6')"),
+    model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only (no spaces or shell specials)").optional().describe("Claude model override (e.g., 'claude-sonnet-5')"),
     thinking_effort: exports_external.enum(["low", "medium", "high", "xhigh", "max"]).optional().describe("Adaptive-thinking effort level passed as --effort to the claude CLI. " + "Per-agent override wins over defaults.thinking_effort. " + "lower = faster/cheaper, higher = more reasoning. Omit to use Claude's default."),
     permission_mode: exports_external.enum(["acceptEdits", "auto", "bypassPermissions", "default", "dontAsk", "plan"]).optional().describe("Permission mode passed as --permission-mode to the claude CLI. " + "Per-agent override wins over defaults.permission_mode. " + "Warning: bypassPermissions and dontAsk skip all safety checks \u2014 use only in trusted sandboxes."),
     fallback_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Fallback model name must be alphanumeric with ._-/[]: only").optional().describe("Fallback model passed as --fallback-model to the claude CLI. " + "Per-agent override wins over defaults.fallback_model. " + "Used when the primary model is overloaded. Note: only functional in --print (non-interactive) mode per Claude CLI docs; silently no-ops in interactive sessions."),
@@ -14136,6 +14136,11 @@ var init_schema = __esm(() => {
   WebServiceConfigSchema = exports_external.object({
     managed: exports_external.boolean().default(false).describe("Whether `switchroom update` refreshes the web-service container " + "(dashboard + GitHub-webhook receiver) via `switchroom webd " + "install`. Default: false \u2014 existing installs run the web server " + "as the legacy `switchroom-web.service` systemd unit and must not " + "be surprised by a container takeover of host loopback 127.0.0.1:" + "8080 mid-update. Set true ONLY after cutting over to the " + "container (stop+disable the systemd unit, `switchroom webd " + "install`). The container runs in its own compose project " + "(`switchroom-web`), separate from the agent fleet, with " + "network_mode: host so it keeps owning loopback:8080 for the " + "cloudflared tunnel + tailscale serve consumers.")
   });
+  FleetHealthConfigSchema = exports_external.object({
+    owner_agent: exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,50}$/, {
+      message: "owner_agent must match the standard agent-name pattern"
+    }).optional().describe("The admin agent that runs the Fleet Health sensor + deep-dive crons " + "(RFC fleet-health.md). Default unset \u2192 the feature is inert: no crons " + "are scheduled and the admin page renders its empty state. The named " + "agent must be admin: true. A dedicated owner (not any admin) keeps " + "the fleet-health work attributable, its memory scoped, and its token " + "spend accountable. The detection runs ONLY as operator-set schedules " + "on this agent \u2014 never a self-authored loop (on-leash, " + "no-self-escalation).")
+  });
   HostdConfigSchema = exports_external.object({
     config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit \u00a73). Default false \u2014 the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true, admin agents can propose unified-diff " + "patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
     config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit \u00a75). Default 3 cards/hour; min 1, " + "max 20. ENFORCED server-side: a caller exceeding this in a sliding " + "1-hour window is rejected with `E_RATE_LIMITED` (carrying a " + "`retry_after` fix) instead of posting another operator approval " + "card \u2014 so a looping agent is throttled rather than spamming the chat.")
@@ -14184,6 +14189,7 @@ var init_schema = __esm(() => {
     quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
     host_control: HostControlConfigSchema.default({}).describe("Host-control daemon configuration. Defaults to enabled=true since " + "RFC C Phase 2 (reference/rfcs/host-control-daemon.md). Omit the block " + "to accept defaults; set `enabled: false` only on legacy systemd-" + "mode installs (removal tracked as RFC C Phase 3)."),
     hostd: HostdConfigSchema.default({}).describe("hostd verb-level knobs (RFC admin-agent-config-edit). Distinct " + "from `host_control:` which governs whether the daemon runs at " + "all. Scopes the opt-in flag and rate cap for the " + "`config_propose_edit` verb (disabled by default)."),
+    fleet_health: FleetHealthConfigSchema.default({}).describe("Fleet Health \u2014 job-spec-anchored, operator-facing issue tracker (RFC " + "fleet-health.md, serves fleet-stays-healthy). Assigns the owner agent " + "that runs the nightly model-free sensor + weekly deep-dive. Default " + "unset owner_agent \u2192 inert; the admin page renders an empty state."),
     web_service: WebServiceConfigSchema.default({}).describe("Web-service container (dashboard + GitHub-webhook receiver) config. " + "Defaults to managed=false so existing systemd-mode installs are " + "untouched. Set managed: true after cutting over to the " + "`switchroom-web` container \u2014 then `switchroom update` keeps it " + "refreshed. See `switchroom webd install`."),
     google_accounts: exports_external.record(exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
       message: "Account key must be a Google account email like 'alice@example.com' (colons not allowed)"
@@ -15682,7 +15688,7 @@ function scheduleNeedsCronSession(entries, opts) {
     return r.session === "cron";
   });
 }
-var DEFAULT_CRON_MODEL = "claude-sonnet-4-6", CHEAP_MODEL_RE, OPUS_MODEL_RE;
+var DEFAULT_CRON_MODEL = "claude-sonnet-5", CHEAP_MODEL_RE, OPUS_MODEL_RE;
 var init_cron_routing = __esm(() => {
   CHEAP_MODEL_RE = /(^|[^a-z])(sonnet|haiku)([^a-z]|$)/i;
   OPUS_MODEL_RE = /opus/i;
@@ -22263,6 +22269,14 @@ function renderExecutionDisciplineFragment(context = {}, profilesRoot = PROFILES
   const template = import_handlebars.default.compile(source, { noEscape: true });
   return template(context).trimEnd();
 }
+function renderReplyDisciplineFragment(context = {}, profilesRoot = PROFILES_ROOT) {
+  const fragPath = join4(resolve4(profilesRoot, "_shared"), "reply-discipline.md.hbs");
+  if (!existsSync6(fragPath))
+    return "";
+  const source = readFileSync6(fragPath, "utf-8");
+  const template = import_handlebars.default.compile(source, { noEscape: true });
+  return template(context).trimEnd();
+}
 function renderProfileClaudeTemplate(profileName, profilesRoot = PROFILES_ROOT) {
   const profileDir = resolve4(profilesRoot, profileName);
   const hbsPath = join4(profileDir, "CLAUDE.md.hbs");
@@ -22296,7 +22310,7 @@ var init_profiles = __esm(() => {
     return typeof value === "number" && Number.isFinite(value);
   });
   SHARED_FRAGMENTS_DIR = resolve4(PROFILES_ROOT, "_shared");
-  SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline"];
+  SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline"];
   for (const name of SHARED_FRAGMENTS) {
     const fragPath = join4(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
     if (existsSync6(fragPath)) {
@@ -24883,6 +24897,26 @@ import { homedir as homedir5 } from "node:os";
 import { execSync, execFileSync as execFileSync4 } from "node:child_process";
 import { join as join10, resolve as resolve11 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
+function prependReplyDiscipline(rendered, context) {
+  const replyDiscipline = renderReplyDisciplineFragment(context);
+  if (!replyDiscipline)
+    return rendered;
+  const newlineIdx = rendered.indexOf(`
+`);
+  if (newlineIdx === -1) {
+    return rendered.trimEnd() + `
+
+` + replyDiscipline + `
+`;
+  }
+  const title = rendered.slice(0, newlineIdx);
+  const body = rendered.slice(newlineIdx + 1).replace(/^\n+/, "");
+  return title + `
+
+` + replyDiscipline + `
+
+` + body;
+}
 function renderFleetInvariants() {
   return [
     "<!--",
@@ -25452,6 +25486,67 @@ function copyDirRecursive2(src, dest) {
     }
   }
 }
+function writeFileSyncIfChanged(filePath, content, mode) {
+  if (existsSync15(filePath)) {
+    try {
+      if (readFileSync13(filePath, "utf-8") === content)
+        return false;
+    } catch {}
+  }
+  writeFileSync5(filePath, content, mode !== undefined ? { encoding: "utf-8", mode } : "utf-8");
+  return true;
+}
+function dirContentEquals(src, dest, topLevelOverrides) {
+  if (!existsSync15(src) || !existsSync15(dest))
+    return false;
+  let srcEntries;
+  let destEntries;
+  try {
+    srcEntries = readdirSync6(src).sort();
+    destEntries = readdirSync6(dest).sort();
+  } catch {
+    return false;
+  }
+  if (srcEntries.length !== destEntries.length)
+    return false;
+  for (let i = 0;i < srcEntries.length; i++) {
+    if (srcEntries[i] !== destEntries[i])
+      return false;
+  }
+  for (const entry of srcEntries) {
+    const s = join10(src, entry);
+    const d = join10(dest, entry);
+    let sStat;
+    let dStat;
+    try {
+      sStat = statSync7(s);
+      dStat = statSync7(d);
+    } catch {
+      return false;
+    }
+    if (sStat.isDirectory() !== dStat.isDirectory())
+      return false;
+    if (sStat.isDirectory()) {
+      if (!dirContentEquals(s, d))
+        return false;
+    } else {
+      if ((sStat.mode & 64) !== (dStat.mode & 64))
+        return false;
+      try {
+        const expected = topLevelOverrides?.[entry];
+        if (expected !== undefined) {
+          if (readFileSync13(d, "utf-8") !== expected)
+            return false;
+        } else if (!readFileSync13(s).equals(readFileSync13(d))) {
+          return false;
+        }
+      } catch {
+        return false;
+      }
+    }
+  }
+  return true;
+}
 function seedWorkspaceBootstrapFiles(params) {
   const profileWorkspaceDir = join10(params.profilePath, "workspace");
   if (!existsSync15(profileWorkspaceDir)) {
@@ -25624,11 +25719,21 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
     return null;
   }
   const destPath = join10(agentDir, ".claude", "plugins", "hindsight-memory");
-  if (existsSync15(destPath)) {
-    rmSync3(destPath, { recursive: true, force: true });
-  }
-  copyDirRecursive2(sourcePath, destPath);
   const additionalBanks = resolveUsers(switchroomConfig, agentName).additionalBanks;
+  let expectedSettings = null;
+  try {
+    const vendorSettingsPath = join10(sourcePath, "settings.json");
+    if (existsSync15(vendorSettingsPath)) {
+      expectedSettings = renderHindsightSettingsOverrides(readFileSync13(vendorSettingsPath, "utf-8"), additionalBanks);
+    }
+  } catch {}
+  const upToDate = dirContentEquals(sourcePath, destPath, expectedSettings != null ? { "settings.json": expectedSettings } : undefined);
+  if (!upToDate) {
+    if (existsSync15(destPath)) {
+      rmSync3(destPath, { recursive: true, force: true });
+    }
+    copyDirRecursive2(sourcePath, destPath);
+  }
   applyHindsightSettingsOverrides(destPath, additionalBanks);
   const bankId = agentMemory?.collection ?? agentName;
   const mcpUrl = memory.config?.url ?? "http://127.0.0.1:8888/mcp/";
@@ -25645,11 +25750,17 @@ function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
   } catch {
     return;
   }
+  const next = renderHindsightSettingsOverrides(raw, additionalBanks);
+  if (next == null)
+    return;
+  writeFileSyncIfChanged(settingsPath, next);
+}
+function renderHindsightSettingsOverrides(raw, additionalBanks) {
   let settings;
   try {
     settings = JSON.parse(raw);
   } catch {
-    return;
+    return null;
   }
   settings.retainEveryNTurns = 1;
   settings.recallMaxMemories = 8;
@@ -25659,8 +25770,8 @@ function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
   if (additionalBanks.length > 0) {
     settings.recallAdditionalBanks = [...additionalBanks];
   }
-  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2) + `
-`, "utf-8");
+  return JSON.stringify(settings, null, 2) + `
+`;
 }
 function buildWorkspaceContext(args) {
   const {
@@ -26011,8 +26122,8 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
       if (agentConfig.settings_raw && Object.keys(agentConfig.settings_raw).length > 0) {
         mergedSettings._switchroomManagedRawKeys = Object.keys(agentConfig.settings_raw);
       }
-      writeFileSync5(settingsPath, JSON.stringify(mergedSettings, null, 2) + `
-`, "utf-8");
+      writeFileSyncIfChanged(settingsPath, JSON.stringify(mergedSettings, null, 2) + `
+`);
     }
   }
   let mcpServerKeysToTrust = null;
@@ -26092,6 +26203,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
       rerenderWithFingerprint(join10(agentDir, dest), () => {
         let rendered = renderTemplate(srcPath, context);
         if (dest === "CLAUDE.md") {
+          rendered = prependReplyDiscipline(rendered, context);
           const vaultProtocol = renderVaultProtocolFragment(context);
           if (vaultProtocol) {
             rendered = rendered.trimEnd() + `
@@ -26261,7 +26373,7 @@ ${fmLines}
 
 ${body}
 `;
-      writeFileSync5(mdPath, content, "utf-8");
+      writeFileSyncIfChanged(mdPath, content);
     }
   }
   {
@@ -26576,6 +26688,8 @@ function buildSettingsHooksBlock(p) {
 ` + `  - Question with a short answer \u2192 just reply with the answer.
 ` + "  - Complex tool-driven work \u2192 go straight to the tools (the " + "compose-area preview is the ambient liveness signal), then reply " + 'once with the answer or a genuine mid-work pivot ("halfway ' + 'through \u2014 found an unexpected issue, want me to continue?"). Not ' + `"still working".
 
+` + "NARRATE YOUR INTENT (your reasoning is NOT shown to the user). The " + "user cannot see your thinking \u2014 only your tool activity and your " + "replies. So before you fire a burst of tools or work silently for a " + "while, first write ONE short plain-language line of intent as " + "ordinary working text (NOT a reply tool call): name what you are " + 'about to do and why \u2014 "Now checking the gateway logs to find why ' + 'the turn stalled". The framework mirrors that line into the live ' + "compose-area preview the user watches; because it is plain text and " + "not a reply, it is never a chat message and never pings. One intent " + "line before a silent stretch, in plain words, never raw tool names " + '("calling Bash", "Read(x)") and never a debug dump. And when you run ' + "a Bash command, always give it a plain-English `description` naming " + "the goal \u2014 that description, not the raw command, is what the user " + "sees. This intent narration is the ONE thing to keep saying; it is " + "NOT the placeholder ack banned above (that is a chat reply, which " + `you still skip).
+
 ` + 'Do NOT send a trailing confirmation after your answer \u2014 no "Done.", ' + '"Sent.", "Hope that helps." as a separate message once you have ' + "already replied. Your answer is the last thing the user should " + `see; a follow-up "Done." is dead-air clutter (and the user's ` + `device already pinged on the answer). Stop after the answer.
 
 ` + "GROUND BEFORE YOU ASSERT. Any fact in your reply that can change " + "(a number, a status, a price, a date, who-uses-what, anything " + '"current" or "latest") must come from a source you actually checked ' + "THIS turn: your data tool, a file, the web. Memory and what you " + '"already know" are leads to verify, not sources. If you have not ' + "checked it this turn, do not state it as fact: go get it now, or tell " + "the user you will confirm and then do it. A confident wrong number is " + `worse than "let me check".
@@ -26906,6 +27020,7 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
         linearAgentEnabled: agentConfig.channels?.telegram?.linear_agent?.enabled === true
       };
       let rendered = renderTemplate(claudeMdSrc, claudeContext);
+      rendered = prependReplyDiscipline(rendered, claudeContext);
       const vaultProtocol = renderVaultProtocolFragment(claudeContext);
       if (vaultProtocol) {
         rendered = rendered.trimEnd() + `
@@ -27530,9 +27645,22 @@ messaging a capable colleague \u2014 not a tool emitting output. Five beats:
    compose the full answer. This holds even for a pure-thinking
    answer: if it will run to a paragraph, ack first. It is the line
    between a colleague and a black box.
-2. **Then go quiet and work.** Heads-down is correct \u2014 do NOT narrate
-   every tool call. A typing indicator runs automatically while you
-   work; you do not maintain it.
+2. **Then go quiet and work \u2014 but leave a trail of intent.** Heads-down
+   is correct: do NOT narrate every tool call, and a typing indicator
+   runs automatically (you do not maintain it). One thing you SHOULD do,
+   because your private reasoning is never shown to the user: before a
+   burst of tool calls or a long silent stretch, drop ONE short
+   plain-language line of intent in your own working text \u2014 *what* you
+   are about to do and *why* ("Now checking the gateway logs to find why
+   the turn stalled"). Write it as ordinary text, NOT a \`reply\` call, so
+   it never becomes a chat message and never pings \u2014 the framework
+   mirrors that line into the live preview the user watches while you
+   work. One line per stretch, plain words, never raw tool names
+   ("calling Bash") or debug dumps. It is the difference between the user
+   seeing "checking the logs to find the stall" and seeing a black box.
+   When a step is a \`Bash\` command, always give it a plain-English
+   \`description\` naming the goal \u2014 that description, not the raw command,
+   is what the user sees.
 3. **Surface meaningful progress** at genuine inflection points \u2014 a
    hard step finished, a blocker, a pivot, dispatching a sub-agent, a
    notably slow wait, a finding worth knowing now. One short \`reply\`,
@@ -27703,53 +27831,34 @@ operator and stop \u2014 don't theorise about auth or tokens; it just means
 a stored value reached a tool argument.`, TELEGRAM_FORMATTING_FLOOR_CARD = `## Formatting for Telegram
 
 You're writing for a phone screen in Telegram. Every reply renders as rich Markdown
-(Bot API 10.1). Format to make the message **scannable and easy to read**, not
-decorated. These are communication tools \u2014 use them with judgment. Most short replies
-need none of them.
-
-### Mechanical rules (always)
-- Separate paragraphs with a blank line (\`\\n\\n\`). A single newline collapses onto the
-  same line and reads as a wall of text.
-- Keep paragraphs short \u2014 1 to 4 lines. Break before the reader has to work for it.
-- Hard cap is 32768 characters. Long before that, ask whether a wall of text is the
-  right answer at all.
-
-### The toolkit, and when to reach for each
-- **Bold** \u2014 the one key fact or the answer. Not every noun. If everything is bold,
-  nothing is.
-- *Italic* \u2014 light emphasis, asides, labels.
-- \`code spans\` \u2014 every identifier: filenames, commands, config keys, agent / account /
-  slot names, error codes. Tap-to-copy, and visually distinct from prose.
-- Code fences \u2014 multi-line output: diffs, logs, command blocks, JSON. Add a language
-  hint (\` \`\`\`diff \`, \` \`\`\`json \`) when it sharpens the render.
-- Bulleted list \u2014 3+ parallel items the reader will scan or compare. Never for a single
-  thought or a flowing narrative.
-- Numbered list \u2014 ordered steps or ranked items.
-- Task lists (\`- [x]\` / \`- [ ]\`) \u2014 progress on a checklist of steps the reader is
-  tracking. Renders as real checkboxes; reserve for genuine done/not-done state.
-- Tables \u2014 2-D data only (rows \u00d7 columns): per-account usage, status fields. Render as
-  real tables (up to 20 columns). Overkill for a flat list.
-- Headings (\`#\`) \u2014 only in a long, multi-section answer. Clutter on a short reply.
-- Blockquotes (\`>\`) \u2014 quoted text or indented continuation. Telegram drops leading
-  spaces, so use \`>\`, never literal indentation.
-- \`==highlight==\` \u2014 a single word or value the reader's eye must land on. Stronger
-  than bold; use at most once per message.
-- Dividers (\`---\`) \u2014 between genuinely separate sections. Heavy; use sparingly.
-
-Tables, headings, dividers, task lists, lists, blockquotes and \`==highlight==\` all
-render as rich blocks (Bot API 10.1) \u2014 reach for whichever cuts the reader's scanning
-effort. The ONE exception: sub/superscript (\`H~2~O\`, \`x^2^\`) falls back to literal
-text, so don't use it.
-
-### The why
-Structure exists for the reader, not the writer. A two-item bullet list is worse than a
-sentence. A heading on a three-line reply is noise. Reach for structure only when it
-**reduces the reader's effort** \u2014 parallel options, scannable data, ordered steps \u2014 and
-stay in prose when the thought is connected. When in doubt: shorter and plainer wins.
+(Bot API 10.1). One shared spec, three tiers:
+
+- **Short answers (a line or two): plain prose, no formatting.** "on it, pulling the
+  logs now" is already perfect. No bold, no bullets, no headings.
+- **Default: light structure.** Bold ONLY the one key fact or answer, never more. Use
+  a list only for 3+ genuinely parallel items the reader will scan or compare; two
+  items or a flowing thought stay prose. \`code spans\` for identifiers: filenames,
+  commands, config keys, error codes (tap-to-copy).
+- **Long answers may add tables / headings / blockquotes, but only when they genuinely
+  aid scanning**: a table for real 2-D data (rows x columns), headings only in a
+  multi-section answer, \`>\` for quoted text. If the structure doesn't cut the
+  reader's effort, drop it.
+
+The framework normalizes mechanics in code on every outbound message: block spacing
+(one blank line between distinct blocks), em/en dashes, and \`\u2022\` bullet markers are
+rewritten deterministically at send time. Don't fight it or hand-tune spacing; write
+the content, the gateway makes the typography consistent. Over-bolded messages (most
+of the text bold, or whole paragraphs/lists bolded) have their bold stripped at send
+time, so bold sparingly.
+
+Hard cap is 32768 characters. Long before that, ask whether a wall of text is the
+right answer at all. Structure exists for the reader, not the writer: a two-item
+bullet list is worse than a sentence, a heading on a three-line reply is noise. When
+in doubt, shorter and plainer wins.
 
 Every turn that answers a user message ends with a user-visible \`reply\` (or
 \`stream_reply\` done=true) \u2014 Telegram is all the user sees; your terminal output
-never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-4-6", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
+never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
 var init_scaffold = __esm(() => {
   init_source();
   init_cron_unit_name();
@@ -39474,6 +39583,50 @@ var init_client5 = __esm(() => {
   init_protocol3();
 });
 
+// src/web/fleet-health-read.ts
+import { readFileSync as readFileSync46 } from "node:fs";
+import { resolve as resolve29 } from "node:path";
+import { homedir as homedir24 } from "node:os";
+function fleetHealthLedgerPath(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir24()) {
+  return resolve29(home2, ".switchroom", "fleet-health", "ledger.json");
+}
+function readFleetHealth(path4) {
+  let ledger;
+  try {
+    ledger = JSON.parse(readFileSync46(path4, "utf-8"));
+  } catch {
+    return {
+      owner_agent: null,
+      generated_at: null,
+      summary: null,
+      records: [],
+      empty: true,
+      reason: EMPTY_REASON
+    };
+  }
+  const rawRecords = Array.isArray(ledger.records) ? ledger.records : [];
+  const records = rawRecords.map((r) => {
+    const n = Number(r?.priority_score);
+    return { ...r, priority_score: Number.isFinite(n) ? n : 0 };
+  });
+  const ranked = [...records].sort((a, b) => b.priority_score - a.priority_score);
+  return {
+    owner_agent: ledger.owner_agent ?? null,
+    generated_at: ledger.generated_at ?? null,
+    summary: ledger.summary ?? null,
+    records: ranked,
+    empty: ranked.length === 0,
+    ...ranked.length === 0 ? { reason: EMPTY_REASON } : {}
+  };
+}
+function handleGetFleetHealth(path4 = fleetHealthLedgerPath()) {
+  return readFleetHealth(path4);
+}
+var EMPTY_REASON;
+var init_fleet_health_read = __esm(() => {
+  EMPTY_REASON = "Fleet Health is not wired up yet \u2014 no ledger at " + "~/.switchroom/fleet-health/ledger.json. Assign an owner agent " + "(`fleet_health.owner_agent` in switchroom.yaml) and schedule its " + "nightly sensor cron. See reference/rfcs/fleet-health.md.";
+});
+
 // src/cli/doctor-status.ts
 function statusGlyph(status) {
   switch (status) {
@@ -39518,7 +39671,7 @@ var init_thinking_effort_risk = __esm(() => {
 // src/manifest.ts
 import {
   existsSync as existsSync56,
-  readFileSync as readFileSync51,
+  readFileSync as readFileSync52,
   readdirSync as readdirSync19
 } from "node:fs";
 import { dirname as dirname16, join as join50 } from "node:path";
@@ -39540,7 +39693,7 @@ function loadManifest(manifestPath) {
   }
   let raw;
   try {
-    raw = readFileSync51(path4, "utf-8");
+    raw = readFileSync52(path4, "utf-8");
   } catch (err) {
     throw new Error(`Failed to read manifest at ${path4}: ${err.message}`);
   }
@@ -39605,7 +39758,7 @@ function probePlaywrightMcpVersion() {
       const pkgPath = join50(npxCache, entry, "node_modules/@playwright/mcp/package.json");
       if (existsSync56(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync51(pkgPath, "utf-8"));
+          const pkg = JSON.parse(readFileSync52(pkgPath, "utf-8"));
           if (pkg.version)
             return pkg.version;
         } catch {}
@@ -39840,7 +39993,7 @@ var init_doctor_memory = __esm(() => {
 });
 
 // src/cli/doctor-docker.ts
-import { readFileSync as readFileSync52 } from "node:fs";
+import { readFileSync as readFileSync53 } from "node:fs";
 import { spawnSync as spawnSync8 } from "node:child_process";
 function imageTagOf(ref) {
   if (!ref)
@@ -39856,7 +40009,7 @@ function isDockerMode(opts) {
     return true;
   if (opts?.composePath) {
     try {
-      readFileSync52(opts.composePath, "utf8");
+      readFileSync53(opts.composePath, "utf8");
       return true;
     } catch {}
   }
@@ -40138,10 +40291,10 @@ var init_doctor_docker = __esm(() => {
 });
 
 // src/cli/doctor-auth-broker.ts
-import { existsSync as existsSync57, readFileSync as readFileSync53 } from "node:fs";
+import { existsSync as existsSync57, readFileSync as readFileSync54 } from "node:fs";
 import { createHash as createHash11 } from "node:crypto";
 import { spawnSync as spawnSync9 } from "node:child_process";
-import { homedir as homedir27 } from "node:os";
+import { homedir as homedir28 } from "node:os";
 import { join as join51 } from "node:path";
 function defaultDockerInspect(container, format) {
   try {
@@ -40252,7 +40405,7 @@ function checkAuthBrokerDrift(deps = {}) {
   }
   let index;
   try {
-    index = JSON.parse(readFileSync53(indexPath, "utf-8"));
+    index = JSON.parse(readFileSync54(indexPath, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: drift",
@@ -40261,7 +40414,7 @@ function checkAuthBrokerDrift(deps = {}) {
       fix: "Inspect `~/.switchroom/state/auth-broker/sha-index.json` for corruption."
     };
   }
-  const home2 = deps.home ?? homedir27();
+  const home2 = deps.home ?? homedir28();
   const divergent = [];
   const missingOnDisk = [];
   for (const [label, expected] of Object.entries(index)) {
@@ -40272,7 +40425,7 @@ function checkAuthBrokerDrift(deps = {}) {
     }
     let got;
     try {
-      got = sha256Hex(readFileSync53(credsPath, "utf-8"));
+      got = sha256Hex(readFileSync54(credsPath, "utf-8"));
     } catch (err) {
       divergent.push(`${label} (read failed: ${err.message})`);
       continue;
@@ -40313,7 +40466,7 @@ function checkAuthBrokerThresholdViolations(deps = {}) {
   }
   let violations;
   try {
-    violations = JSON.parse(readFileSync53(path4, "utf-8"));
+    violations = JSON.parse(readFileSync54(path4, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: threshold violations",
@@ -40347,7 +40500,7 @@ function checkAuthBrokerActiveAccount(config, deps = {}) {
       fix: "Run `switchroom auth use <label>` to pin a fleet-wide account, then `switchroom apply`. Without an active account every agent boot fails."
     };
   }
-  const home2 = deps.home ?? homedir27();
+  const home2 = deps.home ?? homedir28();
   const dir = accountDir(active, home2);
   if (!existsSync57(dir)) {
     return {
@@ -40499,7 +40652,7 @@ import {
   realpathSync as realpathSync5,
   statSync as statSync23
 } from "node:fs";
-import { userInfo, homedir as homedir28 } from "node:os";
+import { userInfo, homedir as homedir29 } from "node:os";
 import { join as join52 } from "node:path";
 function resolveVaultPath2(config) {
   return config.vault?.path ? config.vault.path.replace(/^~/, process.env.HOME ?? "") : resolveStatePath("vault.enc");
@@ -40638,7 +40791,7 @@ async function runSecretAccessChecks(config, deps = {}) {
   };
   const passphrase = deps.passphrase ?? process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase) {
-    const sock = deps.brokerOperatorSocket ?? join52(homedir28(), ".switchroom", "broker-operator", "sock");
+    const sock = deps.brokerOperatorSocket ?? join52(homedir29(), ".switchroom", "broker-operator", "sock");
     const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
     for (const name of Object.keys(config.agents ?? {})) {
       const resolved = resolveAgentConfig(config.defaults, config.profiles, config.agents[name]);
@@ -40723,8 +40876,8 @@ import {
   existsSync as realExistsSync,
   readFileSync as realReadFileSync
 } from "node:fs";
-import { join as join53, resolve as resolve32 } from "node:path";
-import { homedir as homedir29 } from "node:os";
+import { join as join53, resolve as resolve33 } from "node:path";
+import { homedir as homedir30 } from "node:os";
 function resolveDeps(config, deps) {
   let agentsDir = deps.agentsDir;
   if (agentsDir === undefined) {
@@ -40838,7 +40991,7 @@ function checkScaffoldWiring(config, driveAgents, d) {
     ];
   }
   for (const name of driveAgents) {
-    const agentDir = resolve32(d.agentsDir, name);
+    const agentDir = resolve33(d.agentsDir, name);
     if (!d.existsSync(agentDir)) {
       results.push({
         name: `drive: ${name} scaffold`,
@@ -40876,7 +41029,7 @@ function checkScaffoldWiring(config, driveAgents, d) {
     let trustOk = false;
     let trustDetail = "no .claude/.claude.json";
     if (trustRead.kind === "ok") {
-      const proj = trustRead.data?.projects?.[resolve32(agentDir)];
+      const proj = trustRead.data?.projects?.[resolve33(agentDir)];
       const enabled = proj?.enabledMcpjsonServers;
       if (Array.isArray(enabled) && enabled.includes("gdrive")) {
         trustOk = true;
@@ -40961,7 +41114,7 @@ async function runDriveBrokerReachabilityChecks(config, deps = {}) {
       }
     ];
   }
-  const sock = deps.brokerOperatorSocket ?? join53(homedir29(), ".switchroom", "broker-operator", "sock");
+  const sock = deps.brokerOperatorSocket ?? join53(homedir30(), ".switchroom", "broker-operator", "sock");
   const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
   const results = [];
   for (const agent of driveAgents) {
@@ -41016,7 +41169,7 @@ import {
   closeSync as realCloseSync
 } from "node:fs";
 import { join as join54 } from "node:path";
-import { homedir as homedir30 } from "node:os";
+import { homedir as homedir31 } from "node:os";
 function defaultReadHead(p, n) {
   let fd;
   try {
@@ -41044,7 +41197,7 @@ function resolveDeps2(config, deps) {
     }
   }
   return {
-    homeDir: deps.homeDir ?? homedir30(),
+    homeDir: deps.homeDir ?? homedir31(),
     agentsDir,
     existsSync: deps.existsSync ?? ((p) => realExistsSync2(p)),
     readFileSync: deps.readFileSync ?? ((p) => realReadFileSync2(p, "utf-8")),
@@ -41201,7 +41354,7 @@ var init_doctor_webkite = __esm(() => {
 
 // src/cli/doctor-cron-session.ts
 import { statSync as realStatSync } from "node:fs";
-import { resolve as resolve33 } from "node:path";
+import { resolve as resolve34 } from "node:path";
 function agentRunsCronSession(config, agent) {
   const raw = config.agents[agent];
   if (!raw)
@@ -41217,7 +41370,7 @@ function runCronSessionChecks(config, deps = defaultDeps2) {
     if (!agentRunsCronSession(config, agent))
       continue;
     const name = `cron-session: ${agent}`;
-    const alivePath = resolve33(agentsDir, agent, "telegram", ".bridge-alive-cron");
+    const alivePath = resolve34(agentsDir, agent, "telegram", ".bridge-alive-cron");
     let mtimeMs;
     try {
       mtimeMs = deps.statMtimeMs(alivePath);
@@ -41266,7 +41419,7 @@ var init_doctor_cron_session = __esm(() => {
 });
 
 // src/cli/doctor-scaffold-wiring.ts
-import { join as join55, resolve as resolve34 } from "node:path";
+import { join as join55, resolve as resolve35 } from "node:path";
 function readJson2(d, path4) {
   if (!d.existsSync(path4))
     return { kind: "absent" };
@@ -41300,7 +41453,7 @@ function checkIntegrationScaffoldWiring(args) {
     ];
   }
   for (const name of agents) {
-    const agentDir = resolve34(agentsDir, name);
+    const agentDir = resolve35(agentsDir, name);
     if (!deps.existsSync(agentDir)) {
       results.push({
         name: `${label}: ${name} scaffold`,
@@ -41340,7 +41493,7 @@ function checkIntegrationScaffoldWiring(args) {
     let trustDetail = "no .claude/.claude.json";
     if (trustRead.kind === "ok") {
       const projects = trustRead.data?.projects ?? {};
-      const proj = projects[resolve34(agentDir)];
+      const proj = projects[resolve35(agentDir)];
       const enabled = proj?.enabledMcpjsonServers;
       if (Array.isArray(enabled) && enabled.includes(mcpKey)) {
         trustOk = true;
@@ -41375,9 +41528,9 @@ import {
   readFileSync as realReadFileSync3
 } from "node:fs";
 import { join as join56 } from "node:path";
-import { homedir as homedir31 } from "node:os";
+import { homedir as homedir32 } from "node:os";
 function resolveDeps3(deps) {
-  const home2 = deps.homeDir?.() ?? homedir31();
+  const home2 = deps.homeDir?.() ?? homedir32();
   return {
     existsSync: deps.existsSync ?? realExistsSync3,
     readFileSync: deps.readFileSync ?? realReadFileSync3,
@@ -41562,9 +41715,9 @@ import {
   statSync as realStatSync2
 } from "node:fs";
 import { join as join57 } from "node:path";
-import { homedir as homedir32 } from "node:os";
+import { homedir as homedir33 } from "node:os";
 function resolveDeps4(deps) {
-  const home2 = deps.homeDir?.() ?? homedir32();
+  const home2 = deps.homeDir?.() ?? homedir33();
   return {
     existsSync: deps.existsSync ?? realExistsSync4,
     readFileSync: deps.readFileSync ?? realReadFileSync4,
@@ -41915,10 +42068,10 @@ import {
   readdirSync as realReaddirSync2,
   statSync as realStatSync3
 } from "node:fs";
-import { homedir as homedir33 } from "node:os";
+import { homedir as homedir34 } from "node:os";
 import { join as join58 } from "node:path";
 function runCredentialsMigrationChecks(config, deps = {}) {
-  const credDir = deps.credentialsDir ?? join58(homedir33(), ".switchroom", "credentials");
+  const credDir = deps.credentialsDir ?? join58(homedir34(), ".switchroom", "credentials");
   const existsSync59 = deps.existsSync ?? ((p) => realExistsSync5(p));
   const readdirSync21 = deps.readdirSync ?? ((p) => realReaddirSync2(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
@@ -42069,7 +42222,7 @@ var init_doctor_inlined_secrets = __esm(() => {
 
 // src/cli/doctor-audit-integrity.ts
 import { readFileSync as fsReadFileSync2 } from "node:fs";
-import { homedir as homedir34 } from "node:os";
+import { homedir as homedir35 } from "node:os";
 import { join as join59 } from "node:path";
 function rootWrittenLogs(home2) {
   return [
@@ -42081,7 +42234,7 @@ function rootWrittenLogs(home2) {
   ];
 }
 function runAuditIntegrityChecks(deps = {}) {
-  const home2 = deps.homeDir ?? homedir34();
+  const home2 = deps.homeDir ?? homedir35();
   const read = deps.readFileSync ?? ((p) => fsReadFileSync2(p, "utf8"));
   const results = [];
   for (const { label, path: path4 } of rootWrittenLogs(home2)) {
@@ -42139,13 +42292,13 @@ var init_doctor_audit_integrity = __esm(() => {
 
 // src/cli/doctor-agent-smoke.ts
 import { existsSync as existsSync59 } from "node:fs";
-import { homedir as homedir35 } from "node:os";
+import { homedir as homedir36 } from "node:os";
 import { join as join60 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 async function runAgentSmokeChecks(config, deps = {}) {
   if (deps.fast)
     return [];
-  const home2 = deps.homeDir ?? homedir35();
+  const home2 = deps.homeDir ?? homedir36();
   const sock = deps.operatorSockPath ?? join60(home2, ".switchroom", "hostd", "operator", "sock");
   if (!deps.hostdRequestImpl && !existsSync59(sock)) {
     return [
@@ -42226,7 +42379,7 @@ var init_doctor_agent_smoke = __esm(() => {
 // src/cli/doctor-vault-broker-durability.ts
 import { execFileSync as execFileSync18 } from "node:child_process";
 import { existsSync as existsSync60, statSync as statSync24 } from "node:fs";
-import { homedir as homedir36 } from "node:os";
+import { homedir as homedir37 } from "node:os";
 import { join as join61 } from "node:path";
 function probeBindMountInode(hostPath, brokerContainerPath, opts) {
   const statHost = opts?.statHost ?? defaultStatHost;
@@ -42370,7 +42523,7 @@ function defaultBrokerStatusProbe() {
   }
 }
 function runVaultBrokerDurabilityChecks(_config, opts) {
-  const home2 = homedir36();
+  const home2 = homedir37();
   const probe2 = opts?.inodeProbe ?? probeBindMountInode;
   return [
     probeBrokerUnlocked(opts?.statusProbe),
@@ -42629,11 +42782,11 @@ import {
   existsSync as existsSync61,
   lstatSync as lstatSync7,
   mkdirSync as mkdirSync32,
-  readFileSync as readFileSync54,
+  readFileSync as readFileSync55,
   readdirSync as readdirSync21,
   statSync as statSync25
 } from "node:fs";
-import { dirname as dirname17, join as join62, resolve as resolve35 } from "node:path";
+import { dirname as dirname17, join as join62, resolve as resolve36 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
   const nvmRoot = join62(process.env.HOME ?? "", ".nvm", "versions", "node");
@@ -43441,7 +43594,7 @@ function classifyReadError(err) {
 }
 function tryReadHostFile(path4) {
   try {
-    return { kind: "ok", content: readFileSync54(path4, "utf-8") };
+    return { kind: "ok", content: readFileSync55(path4, "utf-8") };
   } catch (err) {
     const kind = classifyReadError(err);
     const error = err?.message ?? String(err);
@@ -43457,7 +43610,7 @@ function parseEnvFile(path4) {
     return {};
   let content;
   try {
-    content = readFileSync54(path4, "utf-8");
+    content = readFileSync55(path4, "utf-8");
   } catch {
     return {};
   }
@@ -43574,7 +43727,7 @@ function checkStartShStale(agentName, startShPath) {
   }
   let content;
   try {
-    content = readFileSync54(startShPath, "utf-8");
+    content = readFileSync55(startShPath, "utf-8");
   } catch (err) {
     return {
       name: label,
@@ -43687,7 +43840,7 @@ function isSwitchroomCheckout(dir) {
     const pkgPath = join62(dir, "package.json");
     if (!existsSync61(pkgPath))
       return false;
-    const pkg = JSON.parse(readFileSync54(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync55(pkgPath, "utf-8"));
     return pkg.name === "switchroom";
   } catch {
     return false;
@@ -43699,7 +43852,7 @@ function checkAgents(config, configPath) {
   const statuses = getAllAgentStatuses(config);
   const authStatuses = getAllAuthStatuses(config);
   for (const [name, agentConfig] of Object.entries(config.agents)) {
-    const agentDir = resolve35(agentsDir, name);
+    const agentDir = resolve36(agentsDir, name);
     if (!existsSync61(agentDir)) {
       results.push({
         name: `${name}: scaffold`,
@@ -43808,7 +43961,7 @@ function checkAgents(config, configPath) {
         });
       } else {
         try {
-          const mcp = JSON.parse(readFileSync54(mcpJsonPath, "utf-8"));
+          const mcp = JSON.parse(readFileSync55(mcpJsonPath, "utf-8"));
           const hasSwitchroomTelegram = !!mcp.mcpServers?.["switchroom-telegram"];
           const memoryEnabled = isHindsightEnabled(config);
           const hasHindsight = !!mcp.mcpServers?.hindsight;
@@ -43882,7 +44035,7 @@ function mffAgentName(config) {
 function mffEnvPath(config) {
   const home2 = process.env.HOME ?? "/root";
   const agent = mffAgentName(config);
-  return agent ? resolve35(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve35(home2, ".switchroom/credentials/my-family-finance/.env");
+  return agent ? resolve36(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve36(home2, ".switchroom/credentials/my-family-finance/.env");
 }
 function mffEnvState(envPath) {
   if (!existsSync61(envPath))
@@ -44298,16 +44451,16 @@ async function checkManifestDrift(probers) {
   return results;
 }
 function runDockerSection(config) {
-  const composePath = resolve35(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
+  const composePath = resolve36(process.env.HOME ?? "", ".switchroom", "compose", "docker-compose.yml");
   const active = isDockerMode({ composePath });
   let composeYaml;
   let dockerfileAgent;
   try {
-    composeYaml = readFileSync54(composePath, "utf8");
+    composeYaml = readFileSync55(composePath, "utf8");
   } catch {}
-  const dockerfilePath = resolve35(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
+  const dockerfilePath = resolve36(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
   try {
-    dockerfileAgent = readFileSync54(dockerfilePath, "utf8");
+    dockerfileAgent = readFileSync55(dockerfilePath, "utf8");
   } catch {}
   return runDockerChecks({
     config,
@@ -47300,7 +47453,7 @@ vault:
 # Every agent inherits this. Per-agent fields win on conflict.
 # tools/skills/schedule are unioned; scalars are overridden.
 defaults:
-  model: claude-sonnet-4-6
+  model: claude-sonnet-5
   # The switchroom-telegram fork is the default. Uncomment to fall back to
   # the upstream marketplace plugin: channels.telegram.plugin: official
   channels:
@@ -47583,7 +47736,7 @@ memory:
   shared_collection: shared
 
 defaults:
-  model: claude-sonnet-4-6
+  model: claude-sonnet-5
   tools:
     allow: [all]
   subagents:
@@ -47708,7 +47861,7 @@ var CONNECTION_HEALTH_FILENAME = "connection-health.json";
 var init_connection_health = () => {};
 
 // src/cli/update-prompt-hook.ts
-import { existsSync as existsSync77, readFileSync as readFileSync66, writeFileSync as writeFileSync38, chmodSync as chmodSync10, mkdirSync as mkdirSync44 } from "node:fs";
+import { existsSync as existsSync77, readFileSync as readFileSync67, writeFileSync as writeFileSync38, chmodSync as chmodSync10, mkdirSync as mkdirSync44 } from "node:fs";
 import { join as join77 } from "node:path";
 function containerHookCommand() {
   return join77(CONTAINER_AGENT_DIR, ".claude", "hooks", HOOK_FILENAME);
@@ -47782,7 +47935,7 @@ function installUpdatePromptHook(agentDir) {
   const scriptPath = join77(hooksDir, HOOK_FILENAME);
   const desired = updatePromptHookScript();
   let installed = false;
-  const existing = existsSync77(scriptPath) ? readFileSync66(scriptPath, "utf-8") : "";
+  const existing = existsSync77(scriptPath) ? readFileSync67(scriptPath, "utf-8") : "";
   if (existing !== desired) {
     writeFileSync38(scriptPath, desired, { mode: 493 });
     chmodSync10(scriptPath, 493);
@@ -47796,7 +47949,7 @@ function installUpdatePromptHook(agentDir) {
   if (!existsSync77(settingsPath)) {
     return { scriptPath, settingsPath, installed };
   }
-  const raw = readFileSync66(settingsPath, "utf-8");
+  const raw = readFileSync67(settingsPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -48020,7 +48173,7 @@ __export(exports_voice_sidecar_token, {
   VOICE_SIDECAR_TOKEN_ENV: () => VOICE_SIDECAR_TOKEN_ENV
 });
 import { randomBytes as randomBytes14 } from "node:crypto";
-import { chmodSync as chmodSync11, chownSync as chownSync7, existsSync as existsSync79, mkdirSync as mkdirSync45, readFileSync as readFileSync67, rmSync as rmSync17, writeFileSync as writeFileSync39 } from "node:fs";
+import { chmodSync as chmodSync11, chownSync as chownSync7, existsSync as existsSync79, mkdirSync as mkdirSync45, readFileSync as readFileSync68, rmSync as rmSync17, writeFileSync as writeFileSync39 } from "node:fs";
 import { dirname as dirname26 } from "node:path";
 async function defaultResolveOrSeedToken(home2, writeErr) {
   const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { resolveOperatorVaultPassphrase }] = await Promise.all([
@@ -48056,7 +48209,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   if (engine !== "local") {
     try {
       if (existsSync79(envPath)) {
-        const body = readFileSync67(envPath, "utf-8");
+        const body = readFileSync68(envPath, "utf-8");
         if (body.includes(`${VOICE_SIDECAR_TOKEN_ENV}=`))
           rmSync17(envPath);
       }
@@ -48079,7 +48232,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
     let body = "";
     try {
       if (existsSync79(envPath))
-        body = readFileSync67(envPath, "utf-8");
+        body = readFileSync68(envPath, "utf-8");
     } catch {}
     const line = `${VOICE_SIDECAR_TOKEN_ENV}=${token}`;
     const keyRe = new RegExp(`^${VOICE_SIDECAR_TOKEN_ENV}=.*$`, "m");
@@ -48132,12 +48285,12 @@ __export(exports_apply, {
   DEFAULT_COMPOSE_PATH: () => DEFAULT_COMPOSE_PATH2,
   COMPOSE_PROJECT: () => COMPOSE_PROJECT2
 });
-import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync80, mkdirSync as mkdirSync46, readFileSync as readFileSync68, readdirSync as readdirSync27, renameSync as renameSync15, writeFileSync as writeFileSync40 } from "node:fs";
+import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync80, mkdirSync as mkdirSync46, readFileSync as readFileSync69, readdirSync as readdirSync27, renameSync as renameSync15, writeFileSync as writeFileSync40 } from "node:fs";
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
-import { dirname as dirname27, join as join79, resolve as resolve48 } from "node:path";
-import { homedir as homedir46 } from "node:os";
+import { dirname as dirname27, join as join79, resolve as resolve49 } from "node:path";
+import { homedir as homedir47 } from "node:os";
 import { execFileSync as execFileSync25 } from "node:child_process";
 function effectiveLiteLLMEnabled(config, agentResolvedLitellm) {
   return agentResolvedLitellm?.enabled ?? config.litellm?.enabled ?? false;
@@ -48175,7 +48328,7 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
     Promise.resolve().then(() => (init_provision(), exports_provision)),
     Promise.resolve().then(() => (init_telegram_yaml(), exports_telegram_yaml))
   ]);
-  const passphrase = await resolveOperatorVaultPassphrase(ctx.home ?? homedir46());
+  const passphrase = await resolveOperatorVaultPassphrase(ctx.home ?? homedir47());
   if (passphrase === null) {
     const { getViaBrokerStructured: getViaBrokerStructured3 } = await Promise.resolve().then(() => (init_client(), exports_client));
     const alreadyProvisioned = [];
@@ -48217,7 +48370,7 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   let configText = null;
   if (switchroomConfigPath && existsSync80(switchroomConfigPath)) {
     try {
-      configText = readFileSync68(switchroomConfigPath, "utf-8");
+      configText = readFileSync69(switchroomConfigPath, "utf-8");
     } catch (err) {
       ctx.writeErr(source_default.yellow(`  ! litellm: could not read config for ACL grants (${err.message}); keys will be provisioned but agents may lack read-ACL.
 `));
@@ -48459,7 +48612,7 @@ async function ensureHostMountSources(config) {
   await mkdir2(fleetDir, { recursive: true });
   const invariantsPath = join79(fleetDir, "switchroom-invariants.md");
   const invariantsCanonical = renderFleetInvariants();
-  const invariantsCurrent = existsSync80(invariantsPath) ? readFileSync68(invariantsPath, "utf-8") : null;
+  const invariantsCurrent = existsSync80(invariantsPath) ? readFileSync69(invariantsPath, "utf-8") : null;
   if (invariantsCurrent !== invariantsCanonical) {
     writeFileSync40(invariantsPath, invariantsCanonical, { mode: 420 });
   }
@@ -48546,7 +48699,7 @@ function detectAndReportLegacyGdriveSlots(vaultPath) {
 `));
   }
 }
-function writeInstallTypeCache(homeDir = homedir46()) {
+function writeInstallTypeCache(homeDir = homedir47()) {
   const ctx = detectInstallType();
   const dir = join79(homeDir, ".switchroom");
   const out = join79(dir, "install-type.json");
@@ -48663,7 +48816,7 @@ Applying switchroom config...
       writeOut,
       writeErr,
       failures,
-      home: homedir46()
+      home: homedir47()
     });
   }
   await ensureHostMountSources(config);
@@ -48685,7 +48838,7 @@ Applying switchroom config...
   }
   const vaultPathConfigured = config.vault?.path;
   const customVaultPath = vaultPathConfigured ? resolvePath(vaultPathConfigured) : undefined;
-  const migrationResult = migrateVaultLayout(homedir46(), {
+  const migrationResult = migrateVaultLayout(homedir47(), {
     customVaultPath
   });
   switch (migrationResult.kind) {
@@ -48711,7 +48864,7 @@ Applying switchroom config...
       writeErr(formatDivergentRecoveryMessage(migrationResult.details));
       process.exit(4);
   }
-  const postMigrationInspect = inspectVaultLayout(homedir46());
+  const postMigrationInspect = inspectVaultLayout(homedir47());
   const acceptable = [
     "no-vault",
     "already-migrated",
@@ -48726,7 +48879,7 @@ Expected one of: ${acceptable.join(", ")}
 `));
     process.exit(5);
   }
-  const vaultDir = resolveVaultBindMountDir(homedir46(), {
+  const vaultDir = resolveVaultBindMountDir(homedir47(), {
     migrationKind: migrationResult.kind,
     customVaultPath
   });
@@ -48757,7 +48910,7 @@ vault.enc.lock (PID-file flock from saveVault), and
   });
   if (!skipScaffold) {
     const { provisionVoiceSidecarToken: provisionVoiceSidecarToken2 } = await Promise.resolve().then(() => (init_voice_sidecar_token(), exports_voice_sidecar_token));
-    await provisionVoiceSidecarToken2(composePath, homedir46(), {
+    await provisionVoiceSidecarToken2(composePath, homedir47(), {
       writeOut,
       writeErr,
       operatorUid
@@ -48773,7 +48926,7 @@ Wrote `) + displayComposePath + source_default.gray(` (${composeBytes} bytes)
   writeOut(source_default.gray(`  (If pull returns 401, login to ghcr.io first: see docs/operators/install.md#ghcr-auth)
 `));
   if (process.geteuid?.() === 0 && operatorUid !== undefined) {
-    const restored = restoreOperatorOwnership(homedir46(), operatorUid);
+    const restored = restoreOperatorOwnership(homedir47(), operatorUid);
     if (restored.length > 0) {
       writeOut(source_default.gray(`  Restored operator ownership of ${restored.length} ~/.switchroom path(s)
 `));
@@ -48820,7 +48973,7 @@ function copyExampleConfig2(name) {
   if (!/^[a-z0-9_-]+$/.test(name)) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
-  const dest = resolve48(process.cwd(), "switchroom.yaml");
+  const dest = resolve49(process.cwd(), "switchroom.yaml");
   if (existsSync80(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
@@ -48831,7 +48984,7 @@ function copyExampleConfig2(name) {
     console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
     return;
   }
-  const exampleFile = resolve48(import.meta.dirname, `../../examples/${name}.yaml`);
+  const exampleFile = resolve49(import.meta.dirname, `../../examples/${name}.yaml`);
   if (!existsSync80(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
@@ -49027,7 +49180,7 @@ var init_apply = __esm(() => {
     switchroom: switchroom_default,
     minimal: minimal_default
   };
-  DEFAULT_COMPOSE_PATH2 = join79(homedir46(), ".switchroom", "compose", "docker-compose.yml");
+  DEFAULT_COMPOSE_PATH2 = join79(homedir47(), ".switchroom", "compose", "docker-compose.yml");
   SELF_ELEVATE_PRESERVED_ENV = [
     "HOME",
     "SWITCHROOM_CONFIG",
@@ -54502,7 +54655,7 @@ class Protocol {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1000;
-        await new Promise((resolve53) => setTimeout(resolve53, pollInterval));
+        await new Promise((resolve54) => setTimeout(resolve54, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -54514,7 +54667,7 @@ class Protocol {
   }
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve53, reject) => {
+    return new Promise((resolve54, reject) => {
       const earlyReject = (error2) => {
         reject(error2);
       };
@@ -54592,7 +54745,7 @@ class Protocol {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve53(parseResult.data);
+            resolve54(parseResult.data);
           }
         } catch (error2) {
           reject(error2);
@@ -54783,12 +54936,12 @@ class Protocol {
         interval = task.pollInterval;
       }
     } catch {}
-    return new Promise((resolve53, reject) => {
+    return new Promise((resolve54, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve53, interval);
+      const timeoutId = setTimeout(resolve54, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode2.InvalidRequest, "Request cancelled"));
@@ -57773,7 +57926,7 @@ var require_compile = __commonJS((exports2) => {
     const schOrFunc = root.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve53.call(this, root, ref);
+    let _sch = resolve54.call(this, root, ref);
     if (_sch === undefined) {
       const schema = (_a = root.localRefs) === null || _a === undefined ? undefined : _a[ref];
       const { schemaId } = this.opts;
@@ -57800,7 +57953,7 @@ var require_compile = __commonJS((exports2) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve53(root, ref) {
+  function resolve54(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -58330,7 +58483,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
     }
     return uri;
   }
-  function resolve53(baseURI, relativeURI, options) {
+  function resolve54(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse6(baseURI, schemelessOptions), parse6(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
@@ -58558,7 +58711,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
   var fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve53,
+    resolve: resolve54,
     resolveComponent,
     equal,
     serialize,
@@ -61941,12 +62094,12 @@ class StdioServerTransport {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve53) => {
+    return new Promise((resolve54) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve53();
+        resolve54();
       } else {
-        this._stdout.once("drain", resolve53);
+        this._stdout.once("drain", resolve54);
       }
     });
   }
@@ -62472,7 +62625,7 @@ __export(exports_server2, {
   TOOLS: () => TOOLS2
 });
 import { randomBytes as randomBytes16 } from "node:crypto";
-import { existsSync as existsSync89, readFileSync as readFileSync77 } from "node:fs";
+import { existsSync as existsSync89, readFileSync as readFileSync78 } from "node:fs";
 function selfSocketPath() {
   return `/run/switchroom/hostd/${SELF_AGENT}/sock`;
 }
@@ -62689,7 +62842,7 @@ function getLastUpdateApplyStatus() {
   }
   let raw;
   try {
-    raw = readFileSync77(path8, "utf-8");
+    raw = readFileSync78(path8, "utf-8");
   } catch (err2) {
     return errorText2(`get_status: failed to read audit log at ${path8}: ${err2.message}`);
   }
@@ -62968,6 +63121,475 @@ var init_server4 = __esm(() => {
   ];
 });
 
+// src/fleet-health/detect.ts
+function parseTurns(text) {
+  const out = [];
+  for (const raw of text.split(`
+`)) {
+    const line = raw.trim();
+    if (!line)
+      continue;
+    try {
+      out.push(JSON.parse(line));
+    } catch {}
+  }
+  return out;
+}
+function isoFromTs(ts) {
+  if (typeof ts !== "number" || !Number.isFinite(ts))
+    return null;
+  return new Date(ts * 1000).toISOString();
+}
+function detectTurnFindings(agent, turns) {
+  const findings = [];
+  for (const t of turns) {
+    const tid = t.turn_id ?? "?";
+    const st = t.status;
+    const tl = typeof t.tools === "number" ? t.tools : 0;
+    const dur = typeof t.duration_ms === "number" ? t.duration_ms : 0;
+    const synthetic = tid.includes("synthetic-");
+    const ts = isoFromTs(t.ts);
+    if (st !== "complete" && st !== "no_reply") {
+      findings.push({
+        signal: "killed-incomplete-turn",
+        agent,
+        turn_id: tid,
+        log_pointer: `turns.jsonl:${tid} status=${st}`,
+        ts
+      });
+    }
+    if (dur > HANG_MS && tl <= HANG_MAXTOOLS) {
+      findings.push({
+        signal: "hang-long-stalled",
+        agent,
+        turn_id: tid,
+        log_pointer: `turns.jsonl:${tid} ${Math.floor(dur / 1000)}s tools=${tl}`,
+        ts
+      });
+    }
+    if (st === "complete" && tl === 0 && !synthetic) {
+      findings.push({
+        signal: "silent-no-op-candidate",
+        agent,
+        turn_id: tid,
+        log_pointer: `turns.jsonl:${tid} tools=0`,
+        ts
+      });
+    }
+  }
+  return findings;
+}
+function detectGatewayFindings(agent, logText, logName = `logs/${agent}/gateway-supervisor.log`) {
+  const findings = [];
+  const gw_hits = {
+    "duplicate-delivery-represent": 0,
+    "represent-escalation": 0,
+    "reply-delivery-failure": 0
+  };
+  const lines = logText.split(`
+`);
+  for (const [name, re] of Object.entries(GATEWAY_SIGNATURES)) {
+    for (let i = 0;i < lines.length; i++) {
+      const line = lines[i];
+      if (!line)
+        continue;
+      if (re.test(line)) {
+        gw_hits[name] += 1;
+        findings.push({
+          signal: name,
+          agent,
+          turn_id: extractTurnId(line) ?? `${agent}:gw#${i + 1}`,
+          log_pointer: `${logName}:${i + 1}`,
+          ts: extractTs(line)
+        });
+      }
+    }
+  }
+  return { findings, gw_hits };
+}
+function extractTurnId(line) {
+  const m = line.match(/\d+:_#\d+/);
+  return m ? m[0] : null;
+}
+function extractTs(line) {
+  const m = line.match(/\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z?/);
+  return m ? m[0] : null;
+}
+function scanAgent(agent, turnsText, gatewayText) {
+  const turns = parseTurns(turnsText);
+  const status_mix = {};
+  for (const t of turns) {
+    const st = t.status ?? "unknown";
+    status_mix[st] = (status_mix[st] ?? 0) + 1;
+  }
+  const turnFindings = detectTurnFindings(agent, turns);
+  const { findings: gwFindings, gw_hits } = detectGatewayFindings(agent, gatewayText);
+  const findings = [...turnFindings, ...gwFindings];
+  const escalate = turnFindings.some((f) => f.signal === "killed-incomplete-turn" || f.signal === "hang-long-stalled" || f.signal === "silent-no-op-candidate") || gw_hits["duplicate-delivery-represent"] > 0 || gw_hits["reply-delivery-failure"] > 0;
+  return { agent, turns: turns.length, status_mix, findings, gw_hits, escalate };
+}
+var HANG_MS = 360000, HANG_MAXTOOLS = 2, GATEWAY_SIGNATURES;
+var init_detect = __esm(() => {
+  GATEWAY_SIGNATURES = {
+    "duplicate-delivery-represent": /represent duplicate-send/,
+    "represent-escalation": /obligation escalation/,
+    "reply-delivery-failure": /tg-post method=sendRichMessage[^\n]*status=err/
+  };
+});
+
+// src/fleet-health/mapping.ts
+function mapSignal(signal) {
+  return SIGNAL_MAP[signal];
+}
+function dedupKeyFor(finding) {
+  const m = mapSignal(finding.signal);
+  return `${m.job_spec}:${m.signature}`;
+}
+function frequencyFactor(count) {
+  return Math.log10(1 + Math.max(0, count));
+}
+function recencyFactor(newestIso, now = new Date, windowDays = 30) {
+  if (!newestIso)
+    return 0;
+  const newest = Date.parse(newestIso);
+  if (!Number.isFinite(newest))
+    return 0;
+  const ageMs = now.getTime() - newest;
+  const dayMs = 86400000;
+  if (ageMs <= dayMs)
+    return 1;
+  const windowMs = windowDays * dayMs;
+  if (ageMs >= windowMs)
+    return 0.1;
+  const frac = (ageMs - dayMs) / (windowMs - dayMs);
+  return 1 - frac * 0.9;
+}
+function reachFactor(reachCount) {
+  return Math.max(1, reachCount);
+}
+function issuePriority(severity, frequency, reachCount, newestIso, now = new Date, windowDays = 30) {
+  return severity * frequencyFactor(frequency) * reachFactor(reachCount) * recencyFactor(newestIso, now, windowDays);
+}
+var SIGNAL_MAP, ALL_JOB_SPECS;
+var init_mapping = __esm(() => {
+  SIGNAL_MAP = {
+    "silent-no-op-candidate": {
+      failure_mode: "silent-no-op",
+      severity: 3,
+      job_spec: "know-what-my-agent-is-doing",
+      signature: "silent-no-op:completed-zero-tools"
+    },
+    "duplicate-delivery-represent": {
+      failure_mode: "duplicate",
+      severity: 2,
+      job_spec: "talk-to-agents-from-anywhere",
+      signature: "represent-duplicate-send:reply-tool-not-called"
+    },
+    "reply-delivery-failure": {
+      failure_mode: "success-theater",
+      severity: 3,
+      job_spec: "talk-to-agents-from-anywhere",
+      signature: "reply-delivery-failure:sendRichMessage-err"
+    },
+    "hang-long-stalled": {
+      failure_mode: "partial",
+      severity: 2,
+      job_spec: "steer-or-queue-mid-flight",
+      signature: "hang:long-stalled-turn"
+    },
+    "killed-incomplete-turn": {
+      failure_mode: "missed-trigger",
+      severity: 3,
+      job_spec: "steer-or-queue-mid-flight",
+      signature: "killed:incomplete-turn"
+    },
+    "represent-escalation": {
+      failure_mode: "drift",
+      severity: 1,
+      job_spec: "feel-like-a-colleague",
+      signature: "represent:obligation-escalation"
+    }
+  };
+  ALL_JOB_SPECS = [
+    "act-in-my-tools-with-an-identity",
+    "approve-what-my-agent-can-touch",
+    "crons-use-the-model-only-when-it-earns-it",
+    "deliver-files-i-can-open",
+    "extend-without-forking",
+    "feel-like-a-colleague",
+    "fleet-stays-healthy",
+    "get-better-the-longer-they-run",
+    "get-from-zero-to-a-working-fleet",
+    "give-each-agent-its-own-workspace",
+    "idempotent-update-and-restart",
+    "keep-my-subscription-honest",
+    "know-what-my-agent-is-doing",
+    "operate-the-fleet-from-telegram",
+    "remember-across-sessions",
+    "restart-and-know-what-im-running",
+    "run-a-fleet-of-specialists",
+    "see-my-whole-fleet-from-one-screen",
+    "share-auth-across-the-fleet",
+    "steer-or-queue-mid-flight",
+    "survive-reboots-and-real-life",
+    "talk-to-agents-from-anywhere",
+    "track-plan-quota-live"
+  ];
+});
+
+// src/fleet-health/ledger.ts
+function indexPriorIssues(prior) {
+  const idx = new Map;
+  if (!prior?.records)
+    return idx;
+  for (const rec of prior.records) {
+    for (const iss of rec.issues ?? []) {
+      idx.set(iss.dedup_key, {
+        gh_issue: iss.gh_issue,
+        frequency: iss.frequency,
+        status: iss.status,
+        job_spec: rec.job_spec,
+        failure_mode: iss.failure_mode,
+        severity: iss.severity
+      });
+    }
+  }
+  return idx;
+}
+function newer(a, b) {
+  if (!a)
+    return b;
+  if (!b)
+    return a;
+  return Date.parse(a) >= Date.parse(b) ? a : b;
+}
+function buildLedger(findings, opts = {}) {
+  const now = opts.now ?? new Date;
+  const windowDays = opts.windowDays ?? 30;
+  const priorIdx = indexPriorIssues(opts.prior ?? null);
+  const nowIso = now.toISOString();
+  const aggs = new Map;
+  for (const f of findings) {
+    const m = mapSignal(f.signal);
+    const key = dedupKeyFor(f);
+    let agg = aggs.get(key);
+    if (!agg) {
+      agg = {
+        dedup_key: key,
+        job_spec: m.job_spec,
+        failure_mode: m.failure_mode,
+        severity: m.severity,
+        occurrences: [],
+        reach: new Set,
+        newest: null,
+        count: 0
+      };
+      aggs.set(key, agg);
+    }
+    agg.count += 1;
+    agg.reach.add(f.agent);
+    agg.newest = newer(agg.newest, f.ts);
+    if (agg.occurrences.length < 50) {
+      agg.occurrences.push({
+        agent: f.agent,
+        turn_id: f.turn_id,
+        log_pointer: f.log_pointer
+      });
+    }
+  }
+  const byJob = new Map;
+  for (const agg of aggs.values()) {
+    const count = agg.count;
+    const prior = priorIdx.get(agg.dedup_key);
+    let status = "open";
+    if (count <= RESOLVED_THRESHOLD && prior && prior.frequency > RESOLVED_THRESHOLD) {
+      status = "resolved-pending-verify";
+    } else if (prior?.status === "resolved-pending-verify" && count <= RESOLVED_THRESHOLD) {
+      status = "closed";
+    }
+    const issue2 = {
+      dedup_key: agg.dedup_key,
+      failure_mode: agg.failure_mode,
+      severity: agg.severity,
+      frequency: count,
+      reach: [...agg.reach].sort(),
+      recency: agg.newest,
+      occurrences: agg.occurrences,
+      ...prior?.gh_issue !== undefined ? { gh_issue: prior.gh_issue } : {},
+      status
+    };
+    const list2 = byJob.get(agg.job_spec) ?? [];
+    list2.push(issue2);
+    byJob.set(agg.job_spec, list2);
+  }
+  for (const [dedup_key, prior] of priorIdx) {
+    if (aggs.has(dedup_key))
+      continue;
+    if (prior.status !== "open" && prior.status !== "resolved-pending-verify") {
+      continue;
+    }
+    const issue2 = {
+      dedup_key,
+      failure_mode: prior.failure_mode,
+      severity: prior.severity,
+      frequency: 0,
+      reach: [],
+      recency: null,
+      occurrences: [],
+      ...prior.gh_issue !== undefined ? { gh_issue: prior.gh_issue } : {},
+      status: "closed"
+    };
+    const list2 = byJob.get(prior.job_spec) ?? [];
+    list2.push(issue2);
+    byJob.set(prior.job_spec, list2);
+  }
+  const records = ALL_JOB_SPECS.map((job_spec) => {
+    const issues = byJob.get(job_spec) ?? [];
+    const openIssues = issues.filter((i) => i.status === "open");
+    const priority_score = issues.reduce((max, i) => {
+      const s = issuePriority(i.severity, i.frequency, i.reach.length, i.recency, now, windowDays);
+      return Math.max(max, s);
+    }, 0);
+    const gh_issues = issues.filter((i) => i.status !== "closed").map((i) => i.gh_issue).filter((n) => typeof n === "number");
+    return {
+      job_spec,
+      open_issue_count: openIssues.length,
+      last_scanned: nowIso,
+      priority_score: Number(priority_score.toFixed(4)),
+      gh_issues,
+      last_deep_dive: findLastDeepDive(opts.prior ?? null, job_spec),
+      issues
+    };
+  });
+  return {
+    ...opts.ownerAgent ? { owner_agent: opts.ownerAgent } : {},
+    generated_at: nowIso,
+    ...opts.summary ? { summary: opts.summary } : {},
+    records
+  };
+}
+function findLastDeepDive(prior, job_spec) {
+  if (!prior?.records)
+    return null;
+  const rec = prior.records.find((r) => r.job_spec === job_spec);
+  return rec?.last_deep_dive ?? null;
+}
+var RESOLVED_THRESHOLD = 3;
+var init_ledger = __esm(() => {
+  init_mapping();
+});
+
+// src/fleet-health/scan.ts
+var exports_scan = {};
+__export(exports_scan, {
+  writeLedger: () => writeLedger,
+  runScan: () => runScan,
+  resolveSwitchroomBase: () => resolveSwitchroomBase,
+  readLedgerIfPresent: () => readLedgerIfPresent,
+  listAgents: () => listAgents,
+  ledgerPathForBase: () => ledgerPathForBase
+});
+import {
+  readFileSync as readFileSync80,
+  readdirSync as readdirSync35,
+  existsSync as existsSync92,
+  mkdirSync as mkdirSync53,
+  writeFileSync as writeFileSync46
+} from "node:fs";
+import { resolve as resolve54, dirname as dirname30 } from "node:path";
+import { homedir as homedir56 } from "node:os";
+function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir56()) {
+  return resolve54(home2, ".switchroom");
+}
+function listAgents(base) {
+  const dir = resolve54(base, "agents");
+  if (!existsSync92(dir))
+    return [];
+  try {
+    return readdirSync35(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+  } catch {
+    return [];
+  }
+}
+function runScan(opts = {}) {
+  const base = opts.base ?? resolveSwitchroomBase();
+  const log = opts.log ?? (() => {});
+  const agents = listAgents(base);
+  const findings = [];
+  const perAgent = [];
+  const skipped = [];
+  let scanned = 0;
+  for (const agent of agents) {
+    const turnsPath = resolve54(base, "agents", agent, "turns.jsonl");
+    const gwPath = resolve54(base, "logs", agent, "gateway-supervisor.log");
+    let turnsText = "";
+    let gwText = "";
+    let sawArtifact = false;
+    try {
+      if (existsSync92(turnsPath)) {
+        turnsText = readFileSync80(turnsPath, "utf-8");
+        sawArtifact = true;
+      }
+    } catch (e) {
+      log(`fleet-health: WARN skipping ${agent} turns.jsonl unreadable: ${String(e)}`);
+    }
+    try {
+      if (existsSync92(gwPath)) {
+        gwText = readFileSync80(gwPath, "utf-8");
+        sawArtifact = true;
+      }
+    } catch (e) {
+      log(`fleet-health: WARN ${agent} gateway log unreadable: ${String(e)}`);
+    }
+    if (!sawArtifact) {
+      skipped.push(agent);
+      continue;
+    }
+    try {
+      const res = scanAgent(agent, turnsText, gwText);
+      perAgent.push(res);
+      findings.push(...res.findings);
+      scanned++;
+    } catch (e) {
+      log(`fleet-health: WARN scan failed for ${agent}: ${String(e)}`);
+      skipped.push(agent);
+    }
+  }
+  const prior = readLedgerIfPresent(base);
+  const ledger = buildLedger(findings, {
+    ownerAgent: opts.ownerAgent,
+    now: opts.now,
+    windowDays: opts.windowDays,
+    prior
+  });
+  return { ledger, perAgent, agentsScanned: scanned, agentsSkipped: skipped };
+}
+function readLedgerIfPresent(base) {
+  const path8 = ledgerPathForBase(base);
+  try {
+    if (!existsSync92(path8))
+      return null;
+    return JSON.parse(readFileSync80(path8, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function ledgerPathForBase(base) {
+  return fleetHealthLedgerPath(dirname30(base));
+}
+function writeLedger(base, ledger) {
+  const path8 = ledgerPathForBase(base);
+  mkdirSync53(dirname30(path8), { recursive: true });
+  writeFileSync46(path8, JSON.stringify(ledger, null, 2) + `
+`, "utf-8");
+  return path8;
+}
+var init_scan = __esm(() => {
+  init_fleet_health_read();
+  init_detect();
+  init_ledger();
+});
+
 // src/cli/index.ts
 init_esm();
 
@@ -62976,8 +63598,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.38";
-var COMMIT_SHA = "6b75d6d7";
+var VERSION = "0.15.48";
+var COMMIT_SHA = "eee77212";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -76615,8 +77237,16 @@ var HINDSIGHT_DEFAULT_UI_PORT = 9999;
 var HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000;
 var HINDSIGHT_CONSUMER_NAME = "hindsight";
 var HINDSIGHT_DEFAULT_UID = 11000;
-var HINDSIGHT_IMAGE = "ghcr.io/switchroom/switchroom-hindsight:latest";
-var HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-4-6";
+var HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight";
+var HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
+function hindsightImageRef(tag) {
+  const t = tag?.trim();
+  if (!t)
+    return HINDSIGHT_IMAGE;
+  const v = t.replace(/^v/, "");
+  return `${HINDSIGHT_IMAGE_REPO}:v${v}`;
+}
+var HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5";
 var HINDSIGHT_DEFAULT_MCP_STATELESS = true;
 var HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
 var HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true";
@@ -76693,7 +77323,7 @@ function isHindsightContainerExists() {
     return false;
   }
 }
-function startHindsight(ports, litellm) {
+function startHindsight(ports, litellm, imageTag) {
   const apiPort = ports?.apiPort ?? HINDSIGHT_DEFAULT_API_PORT;
   const uiPort = ports?.uiPort ?? HINDSIGHT_DEFAULT_UI_PORT;
   const envArgs = [
@@ -76756,7 +77386,7 @@ x-litellm-tags: service:hindsight`);
   } else {
     args.push("-p", `127.0.0.1:${apiPort}:8888`, "-p", `127.0.0.1:${uiPort}:9999`);
   }
-  args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, HINDSIGHT_IMAGE);
+  args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, hindsightImageRef(imageTag));
   execFileSync16("docker", args, { stdio: "pipe" });
 }
 function stopHindsight() {
@@ -76767,8 +77397,8 @@ function stopHindsight() {
     execFileSync16("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
 }
-function pullHindsightImage() {
-  execFileSync16("docker", ["pull", HINDSIGHT_IMAGE], { stdio: "inherit" });
+function pullHindsightImage(imageTag) {
+  execFileSync16("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
 }
 function getRunningHindsightPorts() {
   const readPort = (containerPort) => {
@@ -77055,7 +77685,7 @@ Cross-agent reflection plan
     }
     console.log();
   }));
-  memory.command("setup").description("Manage the Hindsight Docker container").option("--stop", "Stop and remove the Hindsight container").option("--status", "Show Hindsight container status").option("--recreate", "Pull the latest image and recreate the container (reusing its current port). Used by `switchroom update` to keep the hindsight singleton current.").option("--provider <provider>", "LLM provider (ollama, openai, anthropic)").action(async (opts) => {
+  memory.command("setup").description("Manage the Hindsight Docker container").option("--stop", "Stop and remove the Hindsight container").option("--status", "Show Hindsight container status").option("--recreate", "Pull the latest image and recreate the container (reusing its current port). Used by `switchroom update` to keep the hindsight singleton current.").option("--tag <version>", "Pin the hindsight image tag to pull + run (e.g. v0.15.18), overriding the " + "default floating `:latest`. Threaded through by `switchroom rollout` so a " + "version-pinned roll recreates hindsight on the SAME tag as the rest of the " + "fleet. Omit for `:latest` (the standalone default).").option("--provider <provider>", "LLM provider (ollama, openai, anthropic)").action(async (opts) => {
     if (opts.status) {
       if (!isDockerAvailable()) {
         console.log(source_default.red("  Docker is not available."));
@@ -77105,9 +77735,9 @@ Cross-agent reflection plan
       return;
     }
     if (recreate) {
-      console.log(source_default.gray("  Pulling latest Hindsight image..."));
+      console.log(source_default.gray(`  Pulling ${opts.tag ? `Hindsight image ${opts.tag}` : "latest Hindsight image"}...`));
       try {
-        pullHindsightImage();
+        pullHindsightImage(opts.tag);
       } catch (err) {
         console.error(source_default.red(`
   Failed to pull Hindsight image: ${err.message}
@@ -77142,7 +77772,7 @@ Cross-agent reflection plan
     console.log(source_default.gray("  Starting Hindsight Docker container..."));
     try {
       const litellmCfg = await resolveLiteLLMForHindsight(getConfig(program3));
-      startHindsight(ports, litellmCfg);
+      startHindsight(ports, litellmCfg, opts.tag);
       if (litellmCfg) {
         console.log(source_default.gray("  LiteLLM routing enabled for hindsight (--network host)."));
       }
@@ -77349,7 +77979,7 @@ init_merge();
 init_loader();
 init_client();
 import {
-  readFileSync as readFileSync49,
+  readFileSync as readFileSync50,
   existsSync as existsSync54,
   realpathSync as realpathSync4,
   mkdirSync as mkdirSync30,
@@ -77358,8 +77988,8 @@ import {
   writeSync as writeSync6,
   constants as fsConstants3
 } from "node:fs";
-import { resolve as resolve30, extname, join as join49, relative, dirname as dirname14 } from "node:path";
-import { homedir as homedir26 } from "node:os";
+import { resolve as resolve31, extname, join as join49, relative, dirname as dirname14 } from "node:path";
+import { homedir as homedir27 } from "node:os";
 import { timingSafeEqual as timingSafeEqual3, randomBytes as randomBytes11 } from "node:crypto";
 
 // src/web/api.ts
@@ -79192,10 +79822,13 @@ async function handleGetSummary(deps, now = Date.now()) {
   };
 }
 
+// src/web/server.ts
+init_fleet_health_read();
+
 // src/web/webhook-handler.ts
-import { appendFileSync as appendFileSync4, existsSync as existsSync52, mkdirSync as mkdirSync29, readFileSync as readFileSync47, writeFileSync as writeFileSync27 } from "fs";
+import { appendFileSync as appendFileSync4, existsSync as existsSync52, mkdirSync as mkdirSync29, readFileSync as readFileSync48, writeFileSync as writeFileSync27 } from "fs";
 import { join as join47 } from "path";
-import { homedir as homedir25 } from "os";
+import { homedir as homedir26 } from "os";
 
 // src/web/webhook-verify.ts
 import { createHmac as createHmac2, timingSafeEqual } from "crypto";
@@ -79359,7 +79992,7 @@ function escapeHtml3(s) {
 import net4 from "node:net";
 function forwardToGateway(socketPath, req, opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 5000;
-  return new Promise((resolve29) => {
+  return new Promise((resolve30) => {
     let settled = false;
     let buf = "";
     const done = (value) => {
@@ -79369,7 +80002,7 @@ function forwardToGateway(socketPath, req, opts = {}) {
       try {
         conn.destroy();
       } catch {}
-      resolve29(value);
+      resolve30(value);
     };
     const conn = net4.createConnection(socketPath);
     conn.setEncoding("utf8");
@@ -79400,20 +80033,20 @@ function forwardToGateway(socketPath, req, opts = {}) {
 }
 
 // src/web/webhook-edge.ts
-import { existsSync as existsSync51, readFileSync as readFileSync46 } from "fs";
+import { existsSync as existsSync51, readFileSync as readFileSync47 } from "fs";
 import { join as join46 } from "path";
-import { homedir as homedir24 } from "os";
+import { homedir as homedir25 } from "os";
 import { timingSafeEqual as timingSafeEqual2 } from "crypto";
 var EDGE_HEADER = "x-switchroom-edge";
 function edgeSecretPath() {
-  return join46(homedir24(), ".switchroom", "webhook-edge-secret");
+  return join46(homedir25(), ".switchroom", "webhook-edge-secret");
 }
 function loadEdgeSecret(path4) {
   const p = path4 ?? edgeSecretPath();
   try {
     if (!existsSync51(p))
       return null;
-    const raw = readFileSync46(p, "utf-8").trim();
+    const raw = readFileSync47(p, "utf-8").trim();
     return raw.length > 0 ? raw : null;
   } catch {
     return null;
@@ -79447,7 +80080,7 @@ function loadDedupFile(path4) {
   try {
     if (!existsSync52(path4))
       return {};
-    const raw = JSON.parse(readFileSync47(path4, "utf-8"));
+    const raw = JSON.parse(readFileSync48(path4, "utf-8"));
     return typeof raw.deliveries === "object" && raw.deliveries !== null ? raw.deliveries : {};
   } catch {
     return {};
@@ -79547,7 +80180,7 @@ function writeThrottleIssue(agent, source, now, telegramDir, log) {
 async function handleWebhookIngest(args, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = (deps.now ?? Date.now)();
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join47(homedir25(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join47(homedir26(), ".switchroom", "agents", a));
   const rateLimiter = deps.rateLimiter ?? defaultRateLimiter;
   const dedupStore = deps.dedupStore ?? createFileDedupStore(resolveAgentDir);
   if (!args.agentExists) {
@@ -79700,8 +80333,8 @@ async function handleWebhookIngest(args, deps = {}) {
 init_loader();
 import { createConnection as createConnection3 } from "node:net";
 import { createHash as createHash10 } from "node:crypto";
-import { join as join48, resolve as resolve29 } from "node:path";
-import { existsSync as existsSync53, readFileSync as readFileSync48 } from "node:fs";
+import { join as join48, resolve as resolve30 } from "node:path";
+import { existsSync as existsSync53, readFileSync as readFileSync49 } from "node:fs";
 
 // src/agent-scheduler/channel-target.ts
 init_merge();
@@ -79818,11 +80451,11 @@ function resolveAgentChat(config, sessionId, agentsDir) {
     const threadId = topicId !== undefined ? topicId === null ? undefined : parseInt(topicId, 10) || undefined : channel.threadId;
     return { chatId: channel.chatId, threadId };
   }
-  const accessPath = resolve29(agentsDir, agentName, "telegram", "access.json");
+  const accessPath = resolve30(agentsDir, agentName, "telegram", "access.json");
   if (!existsSync53(accessPath))
     return null;
   try {
-    const raw = readFileSync48(accessPath, "utf-8");
+    const raw = readFileSync49(accessPath, "utf-8");
     const access = JSON.parse(raw);
     const chatId = access.allowFrom?.[0];
     if (!chatId)
@@ -79833,7 +80466,7 @@ function resolveAgentChat(config, sessionId, agentsDir) {
   }
 }
 async function injectInbound(agentsDir, agentName, chatId, threadId, text, promptKey) {
-  const socketPath = resolve29(agentsDir, agentName, "telegram", "gateway.sock");
+  const socketPath = resolve30(agentsDir, agentName, "telegram", "gateway.sock");
   if (!existsSync53(socketPath)) {
     return { ok: false, error: `agent ${agentName} gateway socket not found \u2014 is it running?` };
   }
@@ -79881,7 +80514,7 @@ async function injectInbound(agentsDir, agentName, chatId, threadId, text, promp
   });
 }
 function readHistoryDb(agentsDir, agentName, limit) {
-  const dbPath = resolve29(agentsDir, agentName, "telegram", "history.db");
+  const dbPath = resolve30(agentsDir, agentName, "telegram", "history.db");
   if (!existsSync53(dbPath))
     return null;
   try {
@@ -79910,7 +80543,7 @@ function readHistoryDb(agentsDir, agentName, limit) {
   }
 }
 function startHistoryPoll(ctx, agentsDir, agentName, sessionId, pollIntervalMs = 2000) {
-  const dbPath = resolve29(agentsDir, agentName, "telegram", "history.db");
+  const dbPath = resolve30(agentsDir, agentName, "telegram", "history.db");
   let SqliteDatabase = null;
   try {
     const meta = import.meta;
@@ -80028,15 +80661,14 @@ function turnsToMessages(turns) {
   }
   return messages;
 }
-var SWITCHROOM_MODELS = [
-  "claude-sonnet-4-6",
-  "claude-opus-4-8",
-  "claude-haiku-4-5-20251001",
-  "claude-fable-5"
-];
-function switchroomModelOptions() {
+var SWITCHROOM_MODELS = ["fable", "opus", "sonnet", "haiku"];
+function configuredModel(config, agentName) {
+  const agentModel = agentName ? config.agents?.[agentName]?.model : undefined;
+  return agentModel ?? config.defaults?.model ?? "sonnet";
+}
+function switchroomModelOptions(config, agentName) {
   return {
-    model: "claude-sonnet-4-6",
+    model: configuredModel(config, agentName),
     provider: "switchroom",
     providers: [
       {
@@ -80164,7 +80796,7 @@ async function handleHermesRest(method, pathname, config, search = "") {
     return {
       status: 200,
       body: {
-        model: "claude-sonnet-4-6",
+        model: configuredModel(config),
         provider: "switchroom",
         capabilities: {}
       }
@@ -80235,7 +80867,7 @@ async function handleHermesRest(method, pathname, config, search = "") {
     return { status: 200, body: { providers: [] } };
   }
   if (method === "GET" && pathname.startsWith("/api/model/options")) {
-    return { status: 200, body: switchroomModelOptions() };
+    return { status: 200, body: switchroomModelOptions(config) };
   }
   if (method === "POST" && pathname === "/api/model/set") {
     return { status: 200, body: { ok: true } };
@@ -80467,11 +81099,15 @@ async function onHermesMessage(ctx, raw) {
       break;
     }
     case "model.options": {
-      sendResponse(ctx, rpcOk(id, switchroomModelOptions()));
+      const sessionId = String(params.session_id ?? ctx.activeSessionId ?? "");
+      const agentName = sessionId ? parseHermesSessionId(sessionId).agentName : undefined;
+      sendResponse(ctx, rpcOk(id, switchroomModelOptions(config, agentName)));
       break;
     }
     case "model.info": {
-      sendResponse(ctx, rpcOk(id, { model: "claude-sonnet-4-6", provider: "switchroom" }));
+      const sessionId = String(params.session_id ?? ctx.activeSessionId ?? "");
+      const agentName = sessionId ? parseHermesSessionId(sessionId).agentName : undefined;
+      sendResponse(ctx, rpcOk(id, { model: configuredModel(config, agentName), provider: "switchroom" }));
       break;
     }
     case "config.set": {
@@ -80577,7 +81213,8 @@ var SPA_TAB_ROUTES = new Set([
   "memory",
   "connections",
   "schedule",
-  "approvals"
+  "approvals",
+  "fleet-health"
 ]);
 function resolveDashboardFilePath(pathname) {
   const routeName = pathname.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -80607,10 +81244,10 @@ function resolveWebToken() {
   const fromEnv = process.env.SWITCHROOM_WEB_TOKEN;
   if (fromEnv && fromEnv.length > 0)
     return fromEnv;
-  const home2 = process.env.HOME ?? homedir26();
+  const home2 = process.env.HOME ?? homedir27();
   const tokenPath = join49(home2, ".switchroom", "web-token");
   if (existsSync54(tokenPath)) {
-    const existing = readFileSync49(tokenPath, "utf8").trim();
+    const existing = readFileSync50(tokenPath, "utf8").trim();
     if (existing.length > 0)
       return existing;
   }
@@ -80627,7 +81264,7 @@ function resolveWebToken() {
     return token;
   } catch (err) {
     if (err.code === "EEXIST") {
-      const existing = readFileSync49(tokenPath, "utf8").trim();
+      const existing = readFileSync50(tokenPath, "utf8").trim();
       if (existing.length > 0)
         return existing;
     }
@@ -80700,11 +81337,11 @@ function checkWsAuth(req, token, server) {
   return presented !== null && constantTimeEqual(presented, token);
 }
 function loadWebhookSecrets() {
-  const path4 = join49(homedir26(), ".switchroom", "webhook-secrets.json");
+  const path4 = join49(homedir27(), ".switchroom", "webhook-secrets.json");
   if (!existsSync54(path4))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync49(path4, "utf-8"));
+    const parsed = JSON.parse(readFileSync50(path4, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch (err) {
     process.stderr.write(`webhook-ingest: failed to parse ${path4}: ${err.message} \u2014 webhooks will return 401 until fixed
@@ -80839,6 +81476,9 @@ function parseRoute(pathname, method) {
   if (method === "GET" && pathname === "/api/approvals") {
     return { handler: "getApprovals", params: {} };
   }
+  if (method === "GET" && pathname === "/api/fleet-health") {
+    return { handler: "getFleetHealth", params: {} };
+  }
   if (method === "GET" && pathname === "/api/grants") {
     return { handler: "getGrants", params: {} };
   }
@@ -80882,7 +81522,7 @@ function parseRoute(pathname, method) {
   return null;
 }
 function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
-  const uiDirRaw = resolve30(import.meta.dirname, "ui");
+  const uiDirRaw = resolve31(import.meta.dirname, "ui");
   const uiDir = existsSync54(uiDirRaw) ? realpathSync4(uiDirRaw) : uiDirRaw;
   const token = resolveWebToken();
   const freshConfig = () => {
@@ -81034,6 +81674,8 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
             return (async () => jsonResponse(withStamp(await cachedSchedule())))();
           case "getApprovals":
             return (async () => jsonResponse(withStamp(await cachedApprovals())))();
+          case "getFleetHealth":
+            return jsonResponse(handleGetFleetHealth());
           case "getGrants":
             return (async () => jsonResponse(withStamp(await cachedGrants())))();
           case "getAccounts":
@@ -81188,12 +81830,12 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
         return new Response("Not Found", { status: 404 });
       }
       const rel = relative(uiDir, realFullPath);
-      if (rel.startsWith("..") || resolve30(uiDir, rel) !== realFullPath) {
+      if (rel.startsWith("..") || resolve31(uiDir, rel) !== realFullPath) {
         return new Response("Forbidden", { status: 403 });
       }
       const ext = extname(realFullPath);
       const contentType = MIME_TYPES[ext] ?? "application/octet-stream";
-      const content = readFileSync49(realFullPath);
+      const content = readFileSync50(realFullPath);
       const headers = { "Content-Type": contentType };
       const cacheControl = dashboardCacheControl(ext);
       if (cacheControl)
@@ -81368,8 +82010,8 @@ Starting Switchroom dashboard...
 init_source();
 init_loader();
 init_scaffold();
-import { existsSync as existsSync55, copyFileSync as copyFileSync8, readFileSync as readFileSync50, writeFileSync as writeFileSync28, mkdirSync as mkdirSync31 } from "node:fs";
-import { resolve as resolve31, dirname as dirname15 } from "node:path";
+import { existsSync as existsSync55, copyFileSync as copyFileSync8, readFileSync as readFileSync51, writeFileSync as writeFileSync28, mkdirSync as mkdirSync31 } from "node:fs";
+import { resolve as resolve32, dirname as dirname15 } from "node:path";
 init_state();
 init_vault();
 init_manager();
@@ -81650,14 +82292,14 @@ async function stepConfigFile(configPath, nonInteractive) {
     console.log(source_default.green(`  ${STEP_DONE} Config loaded`) + source_default.gray(` (${Object.keys(config.agents).length} agents)`));
     const hasExplicitTimezone = config.switchroom?.timezone !== undefined || config.defaults?.timezone !== undefined;
     if (!hasExplicitTimezone) {
-      await writeDetectedTimezone(resolve31(existingConfig), nonInteractive);
+      await writeDetectedTimezone(resolve32(existingConfig), nonInteractive);
     }
-    return { config, configPath: resolve31(existingConfig) };
+    return { config, configPath: resolve32(existingConfig) };
   }
   return await copyExampleConfig(nonInteractive);
 }
 async function copyExampleConfig(nonInteractive) {
-  const examplesDir = resolve31(import.meta.dirname, "../../examples");
+  const examplesDir = resolve32(import.meta.dirname, "../../examples");
   let choice;
   if (nonInteractive) {
     choice = "switchroom";
@@ -81668,7 +82310,7 @@ async function copyExampleConfig(nonInteractive) {
     ]);
     choice = choice.split(" ")[0];
   }
-  const srcFile = resolve31(examplesDir, `${choice}.yaml`);
+  const srcFile = resolve32(examplesDir, `${choice}.yaml`);
   const destFile = resolvePath("~/.switchroom/switchroom.yaml");
   if (!existsSync55(srcFile)) {
     throw new ConfigError(`Example config not found: ${choice}.yaml`);
@@ -81680,12 +82322,12 @@ async function copyExampleConfig(nonInteractive) {
   await writeDetectedTimezone(destFile, nonInteractive);
   const config = loadConfig(destFile);
   console.log(source_default.green(`  ${STEP_DONE} Config loaded`) + source_default.gray(` (${Object.keys(config.agents).length} agents)`));
-  return { config, configPath: resolve31(destFile) };
+  return { config, configPath: resolve32(destFile) };
 }
 async function writeDetectedTimezone(destFile, nonInteractive, detect = detectServerTimezone, prompt = ask) {
   const detected = detect();
   if (detected !== undefined && detected !== "UTC" && isValidTimezone(detected)) {
-    const before2 = readFileSync50(destFile, "utf-8");
+    const before2 = readFileSync51(destFile, "utf-8");
     const after2 = setSwitchroomTimezone(before2, detected);
     if (after2 !== before2)
       writeFileSync28(destFile, after2);
@@ -81706,7 +82348,7 @@ async function writeDetectedTimezone(destFile, nonInteractive, detect = detectSe
     console.error(source_default.yellow(`  \u26a0 "${zone}" is not a valid IANA zone (expected Region/City like ` + '"Australia/Melbourne"). Skipping \u2014 agents will use UTC. ' + "Edit switchroom.timezone in switchroom.yaml by hand."));
     return;
   }
-  const before = readFileSync50(destFile, "utf-8");
+  const before = readFileSync51(destFile, "utf-8");
   const after = setSwitchroomTimezone(before, zone);
   if (after !== before)
     writeFileSync28(destFile, after);
@@ -82258,9 +82900,9 @@ async function stepAutoUnlock(config, switchroomConfigPath, nonInteractive) {
   const choice = await askChoice("  Approval posture", [PASSPHRASE_CHOICE, TELEGRAM_ID_CHOICE]);
   if (choice === TELEGRAM_ID_CHOICE) {
     try {
-      const yamlPath = existsSync55(resolve31(process.cwd(), "switchroom.yaml")) ? resolve31(process.cwd(), "switchroom.yaml") : resolve31(process.cwd(), "switchroom.yml");
+      const yamlPath = existsSync55(resolve32(process.cwd(), "switchroom.yaml")) ? resolve32(process.cwd(), "switchroom.yaml") : resolve32(process.cwd(), "switchroom.yml");
       if (existsSync55(yamlPath)) {
-        const content = readFileSync50(yamlPath, "utf-8");
+        const content = readFileSync51(yamlPath, "utf-8");
         const result = insertVaultBrokerApprovalAuth(content, "telegram-id");
         if (result.kind === "rewritten") {
           writeFileSync28(yamlPath, result.content, "utf-8");
@@ -82290,12 +82932,12 @@ async function stepDangerousMode(config, nonInteractive) {
   }
   if (enableDangerous) {
     const configPaths = [
-      resolve31(process.cwd(), "switchroom.yaml"),
-      resolve31(process.cwd(), "switchroom.yml")
+      resolve32(process.cwd(), "switchroom.yaml"),
+      resolve32(process.cwd(), "switchroom.yml")
     ];
     for (const configPath of configPaths) {
       if (existsSync55(configPath)) {
-        let content = readFileSync50(configPath, "utf-8");
+        let content = readFileSync51(configPath, "utf-8");
         const agentNames = Object.keys(config.agents);
         for (const name of agentNames) {
           const agentPattern = new RegExp(`(^  ${name}:\\s*\\n)`, "m");
@@ -82325,7 +82967,7 @@ async function stepOnboardingGuidance(config, nonInteractive) {
   const agentNames = Object.keys(config.agents);
   let allAuthenticated = true;
   for (const name of agentNames) {
-    const agentDir = resolve31(agentsDir, name);
+    const agentDir = resolve32(agentsDir, name);
     const status = getAuthStatus(name, agentDir);
     if (status.authenticated) {
       console.log(`  ${source_default.green("OK")} ${source_default.bold(name)}` + source_default.gray(` - authenticated (expires: ${status.timeUntilExpiry ?? "unknown"})`));
@@ -82425,10 +83067,10 @@ init_source();
 init_loader();
 init_lifecycle();
 init_compose_env();
-import { cpSync as cpSync2, existsSync as existsSync62, mkdirSync as mkdirSync33, readFileSync as readFileSync55, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync27, chownSync as chownSync5 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync62, mkdirSync as mkdirSync33, readFileSync as readFileSync56, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync27, chownSync as chownSync5 } from "node:fs";
 import { spawnSync as spawnSync12 } from "node:child_process";
-import { join as join63, dirname as dirname18, resolve as resolve36 } from "node:path";
-import { homedir as homedir37 } from "node:os";
+import { join as join63, dirname as dirname18, resolve as resolve37 } from "node:path";
+import { homedir as homedir38 } from "node:os";
 
 // src/cli/release-yaml.ts
 var import_yaml19 = __toESM(require_dist(), 1);
@@ -82520,7 +83162,7 @@ ${lines.join(`
 function defaultPersistPin(configPath) {
   return (pin) => {
     const path4 = configPath ?? findConfigFile();
-    const before = readFileSync55(path4, "utf8");
+    const before = readFileSync56(path4, "utf8");
     const after = setReleasePinInConfig(before, pin);
     if (after === before)
       return;
@@ -82534,13 +83176,13 @@ function defaultPersistPin(configPath) {
     } catch {}
   };
 }
-var DEFAULT_COMPOSE_PATH = join63(homedir37(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH = join63(homedir38(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
   let dir = dirname18(scriptPath);
   for (let i = 0;i < 12; i++) {
     if (existsSync62(join63(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync55(join63(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync56(join63(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
@@ -82730,8 +83372,8 @@ function planUpdate(opts) {
         opts.syncBundledSkillsFn();
         return;
       }
-      const source = resolve36(import.meta.dirname, "../../skills");
-      const dest = join63(homedir37(), ".switchroom", "skills", "_bundled");
+      const source = resolve37(import.meta.dirname, "../../skills");
+      const dest = join63(homedir38(), ".switchroom", "skills", "_bundled");
       if (!existsSync62(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
 `);
@@ -82777,7 +83419,7 @@ function planUpdate(opts) {
     description: "docker compose up -d --remove-orphans (recreates services with new images / compose)",
     run: () => {
       try {
-        const composeText = readFileSync55(composePath, "utf8");
+        const composeText = readFileSync56(composePath, "utf8");
         const pf = validateBindSources(composeText);
         if (!pf.ok)
           throw new Error(formatPreflightError(pf));
@@ -82859,7 +83501,7 @@ function defaultStatusProbe(composePath) {
         const pkgPath = join63(dir, "package.json");
         if (existsSync62(pkgPath)) {
           try {
-            const pkg = JSON.parse(readFileSync55(pkgPath, "utf-8"));
+            const pkg = JSON.parse(readFileSync56(pkgPath, "utf-8"));
             if (typeof pkg.version === "string")
               cliVersion = pkg.version;
           } catch (err) {
@@ -83076,8 +83718,8 @@ function registerUpdateCommand(program3) {
 // src/cli/rollout.ts
 init_helpers();
 import { spawnSync as spawnSync13 } from "node:child_process";
-import { readFileSync as readFileSync56, chownSync as chownSync6, statSync as statSync28 } from "node:fs";
-import { homedir as homedir38 } from "node:os";
+import { readFileSync as readFileSync57, chownSync as chownSync6, statSync as statSync28 } from "node:fs";
+import { homedir as homedir39 } from "node:os";
 init_operator_uid();
 init_atomic();
 init_audit_reader();
@@ -83121,6 +83763,7 @@ function planRollout(agents, opts = {}) {
   if (!opts.skipWeb) {
     steps.push({ kind: "refresh-web" });
     steps.push({ kind: "refresh-hostd" });
+    steps.push({ kind: "refresh-hindsight" });
   }
   steps.push({ kind: "sweep" });
   return steps;
@@ -83146,6 +83789,9 @@ function formatRolloutPlan(steps, target) {
       case "refresh-hostd":
         lines.push(`  ${n}. hostd install --tag ${target} (separate compose project)`);
         break;
+      case "refresh-hindsight":
+        lines.push(`  ${n}. refresh hindsight \u2014 pull ${target} + recreate (standalone docker run, not compose)`);
+        break;
       case "sweep":
         lines.push(`  ${n}. sweep \u2014 print per-agent version table`);
         break;
@@ -83219,11 +83865,14 @@ function executeRollout(steps, target, deps, execOpts = {}) {
       case "apply": {
         deps.log(`ROLL_STEP apply \u2014 regenerating compose for ${target}`);
         emit({ phase: "apply", target });
-        const applyArgs = execOpts.hostdContext ? ["apply", "--pin", target] : ["apply"];
+        const applyArgs = execOpts.hostdContext ? ["apply", "--pin", target, "--compose-only", "--non-interactive"] : ["apply"];
         const r = deps.run(applyArgs);
         if (r.status !== 0) {
           return { ok: false, rolled, failedStep: "apply", warnings };
         }
+        if (execOpts.hostdContext) {
+          warnings.push(`apply ran --compose-only (hostd is unprivileged and cannot ` + `write per-agent state dirs). Compose + compose-level env/` + `healthcheck are up to date, but per-agent template changes ` + `(start.sh / .mcp.json / settings.json) are NOT applied \u2014 run ` + `a host-side \`sudo switchroom apply\` if this release changed them.`);
+        }
         break;
       }
       case "restart-agent": {
@@ -83265,6 +83914,25 @@ function executeRollout(steps, target, deps, execOpts = {}) {
           warnings.push(`hostd refresh failed (non-fatal); agents already rolled`);
         break;
       }
+      case "refresh-hindsight": {
+        const hindsightExists = deps.hindsightExists ?? isHindsightContainerExists;
+        if (!hindsightExists()) {
+          deps.log(`ROLL_STEP refresh-hindsight \u2014 no hindsight container on this host; skipping`);
+          break;
+        }
+        deps.log(`ROLL_STEP refresh-hindsight \u2014 memory setup --recreate --tag ${target} (pull ${target} + recreate)`);
+        const r = deps.run(["memory", "setup", "--recreate", "--tag", target]);
+        if (r.status !== 0) {
+          deps.log(`  \u2717 hindsight recreate FAILED \u2014 the memory backend is DOWN (the ` + `recreate stopped + removed the old container before the failed ` + `start). Run \`switchroom memory setup\` to bring it back. \u2014 STOPPING`);
+          return {
+            ok: false,
+            rolled,
+            failedStep: "refresh-hindsight",
+            warnings
+          };
+        }
+        break;
+      }
       case "sweep": {
         deps.log(`ROLL_STEP sweep`);
         for (const a of rolled) {
@@ -83278,10 +83946,10 @@ function executeRollout(steps, target, deps, execOpts = {}) {
   return { ok: true, rolled, warnings };
 }
 function resolveRollbackTarget(auditLogPath) {
-  const logPath = auditLogPath ?? defaultAuditLogPath2(homedir38());
+  const logPath = auditLogPath ?? defaultAuditLogPath2(homedir39());
   let raw;
   try {
-    raw = readFileSync56(logPath, "utf8");
+    raw = readFileSync57(logPath, "utf8");
   } catch {
     return null;
   }
@@ -83296,7 +83964,7 @@ function resolveRollbackTarget(auditLogPath) {
 }
 function registerRolloutCommand(program3) {
   const hostdCtx = isHostdContext2();
-  program3.command("rollout").description("Deploy a pinned version to the fleet, safely (staggered restart + " + "per-agent version assert + web/hostd refresh)." + (hostdCtx ? "" : " Run with sudo.")).option("--pin <version>", "Version to roll (e.g. v0.15.18). Defaults to release.pin from config.").option("--agents <list>", "Comma-separated subset of agents to roll (default: all configured).").option("--skip-web", "Skip the web + hostd refresh step.").option("--allow-downgrade", "Permit rolling to an older semver tag (operator-approved rollback path). " + "When set, the downgrade guard is relaxed so --pin may be older than the " + "current release.pin. All other safety rails apply unchanged.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
+  program3.command("rollout").description("Deploy a pinned version to the fleet, safely (staggered restart + " + "per-agent version assert + web/hostd refresh)." + (hostdCtx ? "" : " Run with sudo.")).option("--pin <version>", "Version to roll (e.g. v0.15.18). Defaults to release.pin from config.").option("--agents <list>", "Comma-separated subset of agents to roll (default: all configured).").option("--skip-web", "Skip the web + hostd + hindsight refresh step.").option("--allow-downgrade", "Permit rolling to an older semver tag (operator-approved rollback path). " + "When set, the downgrade guard is relaxed so --pin may be older than the " + "current release.pin. All other safety rails apply unchanged.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
     const config = getConfig(program3);
     let resolvedPin = opts.pin;
     if (opts.allowDowngrade && !resolvedPin) {
@@ -83395,7 +84063,7 @@ function registerRolloutCommand(program3) {
       emitPhase: (phase) => process.stdout.write(encodeRolloutPhaseLine(phase) + `
 `),
       persistPin: (pin) => {
-        const before = readFileSync56(configPath, "utf8");
+        const before = readFileSync57(configPath, "utf8");
         const after = setReleasePinInConfig(before, pin);
         if (after === before)
           return;
@@ -83443,7 +84111,7 @@ function registerRolloutCommand(program3) {
   });
 }
 function registerRollbackCommand(program3) {
-  program3.command("rollback").description("Roll the fleet back to the previous version (operator-approved downgrade). " + "Defaults to the version captured in the last completed rollout's prior_pin. " + "Equivalent to `rollout --allow-downgrade [--pin <version>]`.").option("--to <version>", "Explicit version to roll back to (e.g. v0.15.17). " + "Omit to use the last completed rollout's prior_pin.").option("--agents <list>", "Comma-separated subset of agents to roll back (default: all configured).").option("--skip-web", "Skip the web + hostd refresh step.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
+  program3.command("rollback").description("Roll the fleet back to the previous version (operator-approved downgrade). " + "Defaults to the version captured in the last completed rollout's prior_pin. " + "Equivalent to `rollout --allow-downgrade [--pin <version>]`.").option("--to <version>", "Explicit version to roll back to (e.g. v0.15.17). " + "Omit to use the last completed rollout's prior_pin.").option("--agents <list>", "Comma-separated subset of agents to roll back (default: all configured).").option("--skip-web", "Skip the web + hostd + hindsight refresh step.").option("--dry-run", "Print the plan and exit without changing anything.").action(async (opts) => {
     const rolloutArgs = ["--allow-downgrade"];
     if (opts.to)
       rolloutArgs.push("--pin", opts.to);
@@ -83462,14 +84130,14 @@ init_source();
 init_helpers();
 init_loader();
 init_lifecycle();
-import { resolve as resolve37 } from "node:path";
+import { resolve as resolve38 } from "node:path";
 
 // src/cli/version.ts
 init_source();
 init_helpers();
 init_lifecycle();
 import { execSync as execSync4 } from "node:child_process";
-import { existsSync as existsSync63, readFileSync as readFileSync57 } from "node:fs";
+import { existsSync as existsSync63, readFileSync as readFileSync58 } from "node:fs";
 import { dirname as dirname19, join as join64 } from "node:path";
 function getClaudeCodeVersion() {
   try {
@@ -83523,7 +84191,7 @@ function locateSwitchroomInstallDir() {
     const pkgPath = join64(dir, "package.json");
     if (existsSync63(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync57(pkgPath, "utf-8"));
+        const pkg = JSON.parse(readFileSync58(pkgPath, "utf-8"));
         if (pkg.name === "switchroom" && existsSync63(join64(dir, ".git"))) {
           return dir;
         }
@@ -83617,7 +84285,7 @@ function registerRestartCommand(program3) {
         }
         const didRestart = res.restarted || !graceful;
         if (didRestart) {
-          const agentDir = resolve37(agentsDir, name);
+          const agentDir = resolve38(agentsDir, name);
           const converged = waitForAuthConverge(name, agentDir);
           if (!converged) {
             console.log(source_default.yellow(`  ${name}: agent is up but auth status didn't converge in 30s \u2014 check logs`));
@@ -83698,7 +84366,7 @@ Dependency manifest`));
 // src/cli/handoff.ts
 init_helpers();
 init_loader();
-import { resolve as resolve38 } from "node:path";
+import { resolve as resolve39 } from "node:path";
 function registerHandoffCommand(program3) {
   program3.command("handoff <agent>", { hidden: true }).description("Build the agent's session handoff sidecars \u2014 a transcript-tail " + "briefing (.handoff.md) and topic line (.handoff-topic). " + "[internal \u2014 used by the Stop hook]").option("--max-turns <n>", "Max turns kept in the handoff transcript tail", String(DEFAULT_MAX_TURNS)).action(withConfigError(async (agentName, opts) => {
     let agentConfig;
@@ -83712,7 +84380,7 @@ function registerHandoffCommand(program3) {
         return;
       }
       const agentsDir = resolveAgentsDir(config);
-      agentDir = resolve38(agentsDir, agentName);
+      agentDir = resolve39(agentsDir, agentName);
     } catch (err) {
       if (!(err instanceof ConfigError))
         throw err;
@@ -83727,7 +84395,7 @@ function registerHandoffCommand(program3) {
 `);
       return;
     }
-    const claudeConfigDir = resolve38(agentDir, ".claude");
+    const claudeConfigDir = resolve39(agentDir, ".claude");
     const jsonl = findLatestSessionJsonl(claudeConfigDir);
     if (!jsonl) {
       process.stderr.write(`handoff: no session JSONL under ${claudeConfigDir}/projects; skipping
@@ -83754,7 +84422,7 @@ import {
   mkdirSync as mkdirSync34,
   openSync as openSync11,
   readdirSync as readdirSync22,
-  readFileSync as readFileSync58,
+  readFileSync as readFileSync59,
   renameSync as renameSync12,
   statSync as statSync29,
   unlinkSync as unlinkSync11,
@@ -84164,7 +84832,7 @@ function readAll(stateDir) {
     return [];
   let raw;
   try {
-    raw = readFileSync58(path4, "utf-8");
+    raw = readFileSync59(path4, "utf-8");
   } catch {
     return [];
   }
@@ -84236,7 +84904,7 @@ function record(stateDir, input, nowFn = Date.now) {
     return result;
   });
 }
-function resolve39(stateDir, fingerprint, nowFn = Date.now) {
+function resolve40(stateDir, fingerprint, nowFn = Date.now) {
   if (!existsSync64(join65(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
@@ -84375,7 +85043,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync58(lockPath, "utf-8").trim();
+    pidStr = readFileSync59(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -84524,11 +85192,11 @@ function registerIssuesCommand(program3) {
       const stateDir = resolveStateDir2(opts);
       let flipped;
       if (opts.source && opts.code) {
-        flipped = resolve39(stateDir, computeFingerprint(opts.source, opts.code));
+        flipped = resolve40(stateDir, computeFingerprint(opts.source, opts.code));
       } else if (opts.source && !fingerprint) {
         flipped = resolveAllBySource(stateDir, opts.source);
       } else if (fingerprint) {
-        flipped = resolve39(stateDir, fingerprint);
+        flipped = resolve40(stateDir, fingerprint);
       } else {
         process.stderr.write(`issues resolve: need either <fingerprint>, --source, or --source + --code
 `);
@@ -84624,20 +85292,20 @@ function relTime(deltaMs) {
 // src/cli/deps.ts
 init_source();
 import { existsSync as existsSync67 } from "node:fs";
-import { homedir as homedir41 } from "node:os";
-import { join as join68, resolve as resolve40 } from "node:path";
+import { homedir as homedir42 } from "node:os";
+import { join as join68, resolve as resolve41 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash12 } from "node:crypto";
 import {
   existsSync as existsSync65,
   mkdirSync as mkdirSync35,
-  readFileSync as readFileSync59,
+  readFileSync as readFileSync60,
   rmSync as rmSync13,
   writeFileSync as writeFileSync30
 } from "node:fs";
 import { dirname as dirname20, join as join66 } from "node:path";
-import { homedir as homedir39 } from "node:os";
+import { homedir as homedir40 } from "node:os";
 import { execFileSync as execFileSync19 } from "node:child_process";
 
 class PythonEnvError extends Error {
@@ -84649,10 +85317,10 @@ class PythonEnvError extends Error {
   }
 }
 function defaultPythonCacheRoot() {
-  return join66(homedir39(), ".switchroom", "deps", "python");
+  return join66(homedir40(), ".switchroom", "deps", "python");
 }
 function hashFile(path4) {
-  return createHash12("sha256").update(readFileSync59(path4)).digest("hex");
+  return createHash12("sha256").update(readFileSync60(path4)).digest("hex");
 }
 function ensurePythonEnv(opts) {
   const { skillName, requirementsPath, force = false } = opts;
@@ -84668,7 +85336,7 @@ function ensurePythonEnv(opts) {
   const pipBin = join66(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
   if (!force && existsSync65(stampPath) && existsSync65(pythonBin)) {
-    const existingHash = readFileSync59(stampPath, "utf8").trim();
+    const existingHash = readFileSync60(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -84720,12 +85388,12 @@ import {
   copyFileSync as copyFileSync9,
   existsSync as existsSync66,
   mkdirSync as mkdirSync36,
-  readFileSync as readFileSync60,
+  readFileSync as readFileSync61,
   rmSync as rmSync14,
   writeFileSync as writeFileSync31
 } from "node:fs";
 import { dirname as dirname21, join as join67 } from "node:path";
-import { homedir as homedir40 } from "node:os";
+import { homedir as homedir41 } from "node:os";
 import { execFileSync as execFileSync20 } from "node:child_process";
 
 class NodeEnvError extends Error {
@@ -84748,14 +85416,14 @@ var LOCKFILES_FOR = {
   npm: ["package-lock.json"]
 };
 function defaultNodeCacheRoot() {
-  return join67(homedir40(), ".switchroom", "deps", "node");
+  return join67(homedir41(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
   const sourceDir = dirname21(packageJsonPath);
   const hasher = createHash13("sha256");
   hasher.update(`package.json
 `);
-  hasher.update(readFileSync60(packageJsonPath));
+  hasher.update(readFileSync61(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
     const lockPath = join67(sourceDir, lockName);
     if (existsSync66(lockPath)) {
@@ -84764,7 +85432,7 @@ function hashDepInputs(packageJsonPath) {
       hasher.update(lockName);
       hasher.update(`
 `);
-      hasher.update(readFileSync60(lockPath));
+      hasher.update(readFileSync61(lockPath));
     }
   }
   return hasher.digest("hex");
@@ -84783,7 +85451,7 @@ function ensureNodeEnv(opts) {
   const binDir = join67(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
   if (!force && existsSync66(stampPath) && existsSync66(nodeModulesDir)) {
-    const existingHash = readFileSync60(stampPath, "utf8").trim();
+    const existingHash = readFileSync61(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -84832,7 +85500,7 @@ function ensureNodeEnv(opts) {
 
 // src/cli/deps.ts
 function builtinSkillsRoot() {
-  return resolve40(homedir41(), ".switchroom/skills/_bundled");
+  return resolve41(homedir42(), ".switchroom/skills/_bundled");
 }
 function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
@@ -84911,7 +85579,7 @@ function registerDepsCommand(program3) {
 init_helpers();
 init_loader();
 import { existsSync as existsSync68 } from "node:fs";
-import { resolve as resolve41, sep as sep3 } from "node:path";
+import { resolve as resolve42, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync14 } from "node:child_process";
 
 // src/agents/workspace.ts
@@ -85617,8 +86285,8 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const resolvedWorkspace = resolve41(dir);
-    const target = resolve41(resolvedWorkspace, file ?? "AGENTS.md");
+    const resolvedWorkspace = resolve42(dir);
+    const target = resolve42(resolvedWorkspace, file ?? "AGENTS.md");
     if (!isInsideWorkspace(resolvedWorkspace, target)) {
       process.stderr.write(`workspace edit: refusing path traversal outside workspace dir (${target})
 `);
@@ -85686,7 +86354,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve41(dir, ".git");
+    const gitDir = resolve42(dir, ".git");
     if (!existsSync68(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
@@ -85740,7 +86408,7 @@ function registerWorkspaceCommand(program3) {
     const dir = resolveAgentWorkspaceDirOrExit(program3, agentName);
     if (!dir)
       return;
-    const gitDir = resolve41(dir, ".git");
+    const gitDir = resolve42(dir, ".git");
     if (!existsSync68(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
@@ -85764,7 +86432,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
     return;
   }
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve41(agentsDir, agentName);
+  const agentDir = resolve42(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync68(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
@@ -85802,8 +86470,8 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync10, existsSync as existsSync69, readFileSync as readFileSync61, writeFileSync as writeFileSync32 } from "node:fs";
-import { join as join69, resolve as resolve42 } from "node:path";
+import { copyFileSync as copyFileSync10, existsSync as existsSync69, readFileSync as readFileSync62, writeFileSync as writeFileSync32 } from "node:fs";
+import { join as join69, resolve as resolve43 } from "node:path";
 init_scaffold();
 init_profiles();
 init_schema();
@@ -85818,7 +86486,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const profileName = merged.extends ?? DEFAULT_PROFILE;
   const profilePath = getProfilePath(profileName);
   const agentsDir = resolveAgentsDir(config);
-  const agentDir = resolve42(agentsDir, agentName);
+  const agentDir = resolve43(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
   if (!existsSync69(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
@@ -85850,7 +86518,7 @@ function registerSoulCommand(program3) {
       console.error(`soul: ${t.soulPath} does not exist yet \u2014 run ` + `\`switchroom soul reset ${agentName}\` to seed it.`);
       process.exit(1);
     }
-    process.stdout.write(readFileSync61(t.soulPath, "utf-8"));
+    process.stdout.write(readFileSync62(t.soulPath, "utf-8"));
   }));
   cmd.command("reset <agent>").description("Re-seed SOUL.md from the agent's current profile " + "(backs the existing file up to SOUL.md.bak first)").option("-y, --yes", "Skip the confirmation prompt").action(withConfigError(async (agentName, opts) => {
     const t = resolveSoulTargetOrExit(program3, agentName);
@@ -85895,8 +86563,8 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync70, readFileSync as readFileSync62, readdirSync as readdirSync23, statSync as statSync30 } from "node:fs";
-import { resolve as resolve43, join as join70 } from "node:path";
+import { existsSync as existsSync70, readFileSync as readFileSync63, readdirSync as readdirSync23, statSync as statSync30 } from "node:fs";
+import { resolve as resolve44, join as join70 } from "node:path";
 import { createHash as createHash14 } from "node:crypto";
 init_merge();
 init_hindsight();
@@ -85911,7 +86579,7 @@ function readMcpServerNames(agentDir) {
   if (!existsSync70(mcpPath))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync62(mcpPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync63(mcpPath, "utf-8"));
     return Object.keys(parsed.mcpServers ?? {});
   } catch {
     return null;
@@ -85946,7 +86614,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
 }
 function extractLatestUserMessage(transcriptPath) {
   try {
-    const content = readFileSync62(transcriptPath, "utf-8");
+    const content = readFileSync63(transcriptPath, "utf-8");
     const lines = content.trim().split(`
 `).filter(Boolean);
     for (let i = lines.length - 1;i >= 0; i--) {
@@ -85994,7 +86662,7 @@ function registerDebugCommand(program3) {
       process.exit(1);
     }
     const agentsDir = resolveAgentsDir(config);
-    const agentDir = resolve43(agentsDir, agentName);
+    const agentDir = resolve44(agentsDir, agentName);
     if (!existsSync70(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
@@ -86050,7 +86718,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Append System Prompt (per-session) ===
 `);
-    const handoffContent = existsSync70(handoffPath) ? readFileSync62(handoffPath, "utf-8") : "";
+    const handoffContent = existsSync70(handoffPath) ? readFileSync63(handoffPath, "utf-8") : "";
     if (handoffContent.trim().length > 0) {
       console.log(`-- Handoff Briefing (${formatBytes(handoffContent.length)}) --`);
       console.log(handoffContent);
@@ -86061,7 +86729,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== CLAUDE.md (auto-loaded by Claude Code) ===
 `);
-    const claudeMdContent = existsSync70(claudeMdPath) ? readFileSync62(claudeMdPath, "utf-8") : "";
+    const claudeMdContent = existsSync70(claudeMdPath) ? readFileSync63(claudeMdPath, "utf-8") : "";
     if (claudeMdContent.trim().length > 0) {
       console.log(`(${formatBytes(claudeMdContent.length)})`);
       console.log(claudeMdContent);
@@ -86072,7 +86740,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Persona (SOUL.md) ===
 `);
-    const soulMdContent = existsSync70(soulMdPath) ? readFileSync62(soulMdPath, "utf-8") : existsSync70(workspaceSoulMdPath) ? readFileSync62(workspaceSoulMdPath, "utf-8") : "";
+    const soulMdContent = existsSync70(soulMdPath) ? readFileSync63(soulMdPath, "utf-8") : existsSync70(workspaceSoulMdPath) ? readFileSync63(workspaceSoulMdPath, "utf-8") : "";
     if (soulMdContent.trim().length > 0) {
       console.log(`(${formatBytes(soulMdContent.length)})`);
       console.log(soulMdContent);
@@ -86136,8 +86804,8 @@ function registerDebugCommand(program3) {
     const fleetDir = join70(agentsDir, "..", "fleet");
     const fleetInvPath = join70(fleetDir, "switchroom-invariants.md");
     const fleetClaudePath = join70(fleetDir, "CLAUDE.md");
-    const fleetInvBytes = existsSync70(fleetInvPath) ? readFileSync62(fleetInvPath, "utf-8").length : 0;
-    const fleetClaudeBytes = existsSync70(fleetClaudePath) ? readFileSync62(fleetClaudePath, "utf-8").length : 0;
+    const fleetInvBytes = existsSync70(fleetInvPath) ? readFileSync63(fleetInvPath, "utf-8").length : 0;
+    const fleetClaudeBytes = existsSync70(fleetClaudePath) ? readFileSync63(fleetClaudePath, "utf-8").length : 0;
     const fleetBytes = fleetInvBytes + fleetClaudeBytes;
     const totalBytes = stableBytes + perSessionBytes + claudeMdBytes + fleetBytes + perTurnBytes + userBytes;
     console.log(`Stable prefix:     ${formatBytes(stableBytes).padEnd(20)} (cache-hot; includes SOUL.md ${soulMdBytes.toLocaleString()}B)`);
@@ -86171,24 +86839,24 @@ init_source();
 // src/worktree/claim.ts
 import { execFileSync as execFileSync21 } from "node:child_process";
 import { closeSync as closeSync12, mkdirSync as mkdirSync38, openSync as openSync12, existsSync as existsSync72, unlinkSync as unlinkSync13 } from "node:fs";
-import { join as join72, resolve as resolve45 } from "node:path";
-import { homedir as homedir43 } from "node:os";
+import { join as join72, resolve as resolve46 } from "node:path";
+import { homedir as homedir44 } from "node:os";
 import { randomBytes as randomBytes13 } from "node:crypto";
 
 // src/worktree/registry.ts
 import {
   mkdirSync as mkdirSync37,
   writeFileSync as writeFileSync33,
-  readFileSync as readFileSync63,
+  readFileSync as readFileSync64,
   readdirSync as readdirSync24,
   unlinkSync as unlinkSync12,
   existsSync as existsSync71,
   renameSync as renameSync13
 } from "node:fs";
-import { join as join71, resolve as resolve44 } from "node:path";
-import { homedir as homedir42 } from "node:os";
+import { join as join71, resolve as resolve45 } from "node:path";
+import { homedir as homedir43 } from "node:os";
 function registryDir() {
-  return resolve44(process.env.SWITCHROOM_WORKTREE_DIR ?? join71(homedir42(), ".switchroom", "worktrees"));
+  return resolve45(process.env.SWITCHROOM_WORKTREE_DIR ?? join71(homedir43(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
   return join71(registryDir(), `${id}.json`);
@@ -86207,7 +86875,7 @@ function writeRecord(record2) {
 function readRecord(id) {
   const path7 = recordPath(id);
   try {
-    const raw = readFileSync63(path7, "utf8");
+    const raw = readFileSync64(path7, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -86269,7 +86937,7 @@ function acquireRepoLock(repoPath) {
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve45(process.env.SWITCHROOM_WORKTREE_BASE ?? join72(homedir43(), ".switchroom", "worktree-checkouts"));
+  return resolve46(process.env.SWITCHROOM_WORKTREE_BASE ?? join72(homedir44(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
   return randomBytes13(4).toString("hex");
@@ -86291,7 +86959,7 @@ function resolveRepoPath(repo, codeRepos) {
 }
 function expandHome(p) {
   if (p.startsWith("~/"))
-    return join72(homedir43(), p.slice(2));
+    return join72(homedir44(), p.slice(2));
   return p;
 }
 async function claimWorktree(input, codeRepos) {
@@ -86466,15 +87134,15 @@ function runReaper(nowMs) {
 import { execFileSync as execFileSync24 } from "node:child_process";
 import {
   existsSync as existsSync75,
-  readFileSync as readFileSync64,
+  readFileSync as readFileSync65,
   readdirSync as readdirSync25,
   statSync as statSync31,
   renameSync as renameSync14,
   mkdirSync as mkdirSync39,
   rmSync as rmSync15
 } from "node:fs";
-import { homedir as homedir44 } from "node:os";
-import { join as join73, resolve as resolve46 } from "node:path";
+import { homedir as homedir45 } from "node:os";
+import { join as join73, resolve as resolve47 } from "node:path";
 function parseGitdirPointer(dotGitFileContents) {
   const m = /^gitdir:\s*(.+?)\s*$/m.exec(dotGitFileContents);
   return m ? m[1] : null;
@@ -86549,7 +87217,7 @@ function looksLikeAgentWorktree(path7, branch) {
   return false;
 }
 function isEphemeralPath(path7) {
-  const p = resolve46(path7);
+  const p = resolve47(path7);
   for (const root of ["/tmp", "/host", "/state"]) {
     if (p === root || p.startsWith(root + "/"))
       return true;
@@ -86589,12 +87257,12 @@ function defaultPrSignal(repo, branch, exec) {
   }
 }
 function trashRoot() {
-  return resolve46(process.env.SWITCHROOM_WORKTREE_TRASH ?? join73(homedir44(), ".switchroom", "worktree-gc-trash"));
+  return resolve47(process.env.SWITCHROOM_WORKTREE_TRASH ?? join73(homedir45(), ".switchroom", "worktree-gc-trash"));
 }
 function planGc(roots, deps = {}) {
   const exists = deps.existsSync ?? existsSync75;
   const readDir = deps.readDir ?? ((p) => readdirSync25(p));
-  const readFile4 = deps.readFile ?? ((p) => readFileSync64(p, "utf8"));
+  const readFile4 = deps.readFile ?? ((p) => readFileSync65(p, "utf8"));
   const stat3 = deps.stat ?? ((p) => statSync31(p));
   const exec = deps.exec ?? defaultExec;
   const prSignal = deps.prSignal ?? ((repo, branch) => defaultPrSignal(repo, branch, exec));
@@ -86602,7 +87270,7 @@ function planGc(roots, deps = {}) {
   const trash = join73(trashRoot(), stamp);
   let claimed;
   try {
-    claimed = new Set(listRecords().map((r) => resolve46(r.path)));
+    claimed = new Set(listRecords().map((r) => resolve47(r.path)));
   } catch {
     claimed = new Set;
   }
@@ -86680,8 +87348,8 @@ function planGc(roots, deps = {}) {
       continue;
     }
     for (const wt of parseWorktreeList(porcelain)) {
-      const wtPath = resolve46(wt.path);
-      const isMain = wtPath === resolve46(repo);
+      const wtPath = resolve47(wt.path);
+      const isMain = wtPath === resolve47(repo);
       const claimedWt = claimed.has(wtPath);
       const agentWt = looksLikeAgentWorktree(wt.path, wt.branch);
       const ephemeral = isEphemeralPath(wt.path);
@@ -86810,7 +87478,7 @@ function purgeTrash(paths) {
   return { deleted, errors: errors2 };
 }
 function defaultRoots() {
-  return [join73(homedir44(), "code")];
+  return [join73(homedir45(), "code")];
 }
 
 // src/cli/worktree.ts
@@ -87419,20 +88087,20 @@ function wireStdio(child) {
 async function killChild(child, gracefulMs = 3000) {
   if (child.exitCode !== null || child.signalCode !== null)
     return;
-  return new Promise((resolve47) => {
+  return new Promise((resolve48) => {
     let killTimer = null;
     const onExit = () => {
       if (killTimer) {
         clearTimeout(killTimer);
         killTimer = null;
       }
-      resolve47();
+      resolve48();
     };
     child.once("exit", onExit);
     try {
       child.kill("SIGTERM");
     } catch {
-      resolve47();
+      resolve48();
       return;
     }
     killTimer = setTimeout(() => {
@@ -87546,8 +88214,8 @@ async function runMs365McpLauncher(opts, rt) {
   };
   process.on("SIGINT", onSignal);
   process.on("SIGTERM", onSignal);
-  return new Promise((resolve47) => {
-    resolveLauncher = resolve47;
+  return new Promise((resolve48) => {
+    resolveLauncher = resolve48;
   });
 }
 function registerM365McpLauncherCommand(program3) {
@@ -87649,23 +88317,23 @@ async function runNotionMcpLauncher(opts, runtime) {
   };
   process.on("SIGTERM", () => forward("SIGTERM"));
   process.on("SIGINT", () => forward("SIGINT"));
-  const exitCode = await new Promise((resolve47) => {
+  const exitCode = await new Promise((resolve48) => {
     child.once("exit", (code, signal) => {
       clearTimer(heartbeatHandle);
       if (typeof code === "number") {
-        resolve47(code);
+        resolve48(code);
       } else if (signal) {
         const sigCode = { SIGTERM: 15, SIGINT: 2, SIGKILL: 9 }[signal] ?? 1;
-        resolve47(128 + sigCode);
+        resolve48(128 + sigCode);
       } else {
-        resolve47(1);
+        resolve48(1);
       }
     });
     child.once("error", (err) => {
       clearTimer(heartbeatHandle);
       process.stderr.write(`notion-mcp-launcher: child spawn error: ${err.message}
 `);
-      resolve47(1);
+      resolve48(1);
     });
   });
   return exitCode;
@@ -87704,7 +88372,7 @@ function registerNotionMcpLauncherCommand(program3) {
 
 // src/cli/deliver-file.ts
 init_client2();
-import { readFileSync as readFileSync65, statSync as statSync32 } from "node:fs";
+import { readFileSync as readFileSync66, statSync as statSync32 } from "node:fs";
 import { basename as basename10 } from "node:path";
 
 // src/delivery/onedrive.ts
@@ -88044,7 +88712,7 @@ async function defaultResolveProvider() {
 async function runDeliverFile(localPath, deps = {}) {
   const agentName = safeAgentName(deps.agentName ?? process.env.SWITCHROOM_AGENT_NAME);
   const sizeOf = deps.fileSize ?? ((p) => statSync32(p).size);
-  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync65(p)));
+  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync66(p)));
   const resolveProvider = deps.resolveProvider ?? defaultResolveProvider;
   let size;
   try {
@@ -88365,9 +89033,9 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync69, existsSync as existsSync81, readdirSync as readdirSync28 } from "node:fs";
+import { readFileSync as readFileSync70, existsSync as existsSync81, readdirSync as readdirSync28 } from "node:fs";
 import { join as join80 } from "node:path";
-import { homedir as homedir47 } from "node:os";
+import { homedir as homedir48 } from "node:os";
 
 // src/status-ask/report.ts
 function parseJsonl(content) {
@@ -88641,7 +89309,7 @@ function runReport(opts) {
   for (const src of sources) {
     let content;
     try {
-      content = readFileSync69(src.path, "utf-8");
+      content = readFileSync70(src.path, "utf-8");
     } catch (err) {
       process.stderr.write(`status-ask report: cannot read ${src.path}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -88702,7 +89370,7 @@ function resolveSources(explicitPath) {
     const config = loadConfig();
     agentsDir = resolveAgentsDir(config);
   } catch {
-    agentsDir = join80(homedir47(), ".switchroom", "agents");
+    agentsDir = join80(homedir48(), ".switchroom", "agents");
   }
   if (!existsSync81(agentsDir))
     return [];
@@ -88750,16 +89418,16 @@ import {
   mkdirSync as mkdirSync47,
   openSync as openSync13,
   readdirSync as readdirSync29,
-  readFileSync as readFileSync70,
+  readFileSync as readFileSync71,
   renameSync as renameSync16,
   statSync as statSync33,
   unlinkSync as unlinkSync14,
   writeSync as writeSync8
 } from "node:fs";
-import { join as join81, resolve as resolve49 } from "node:path";
+import { join as join81, resolve as resolve50 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
-  const base = opts.root ? resolve49(opts.root, agent) : resolve49(resolveDualPath(`~/.switchroom/agents/${agent}`));
+  const base = opts.root ? resolve50(opts.root, agent) : resolve50(resolveDualPath(`~/.switchroom/agents/${agent}`));
   const scheduleDir = join81(base, "schedule.d");
   const scheduleStagingDir = join81(scheduleDir, STAGING_SUBDIR);
   const skillsDir = join81(base, "skills.d");
@@ -88874,7 +89542,7 @@ function listSkillsOverlayEntries(agent, opts = {}) {
       continue;
     const full = join81(paths.skillsDir, name);
     try {
-      const raw = readFileSync70(full, "utf-8");
+      const raw = readFileSync71(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -88901,7 +89569,7 @@ function listOverlayEntries(agent, opts = {}) {
       continue;
     const full = join81(paths.scheduleDir, name);
     try {
-      const raw = readFileSync70(full, "utf-8");
+      const raw = readFileSync71(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -89057,7 +89725,7 @@ import {
   mkdirSync as mkdirSync48,
   openSync as openSync14,
   readdirSync as readdirSync30,
-  readFileSync as readFileSync71,
+  readFileSync as readFileSync72,
   renameSync as renameSync17,
   unlinkSync as unlinkSync15,
   writeFileSync as writeFileSync41,
@@ -89121,7 +89789,7 @@ function listPendingScheduleEntries(agent, opts = {}) {
     if (!existsSync83(yamlPath))
       continue;
     try {
-      const meta = JSON.parse(readFileSync71(metaPath, "utf-8"));
+      const meta = JSON.parse(readFileSync72(metaPath, "utf-8"));
       if (meta?.v !== 1 || typeof meta.stage_id !== "string")
         continue;
       out.push({ stageId: meta.stage_id, agent: meta.agent, yamlPath, metaPath, meta });
@@ -89159,7 +89827,7 @@ function denyPendingScheduleEntry(opts) {
 }
 
 // src/cli/agent-config-write.ts
-import { existsSync as existsSync84, readFileSync as readFileSync72 } from "node:fs";
+import { existsSync as existsSync84, readFileSync as readFileSync73 } from "node:fs";
 import { execFileSync as execFileSync26 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
@@ -89572,7 +90240,7 @@ function scheduleRemove(opts) {
   let priorContent = null;
   try {
     if (existsSync84(match.path))
-      priorContent = readFileSync72(match.path, "utf-8");
+      priorContent = readFileSync73(match.path, "utf-8");
   } catch {}
   deleteOverlayEntry(agent, match.slug, { root: opts.root });
   const reconcileFn = opts.reconcile === undefined ? opts.root ? null : reconcileAgentCronOnly : opts.reconcile;
@@ -89775,7 +90443,7 @@ function registerAgentConfigWriteCommands(program3) {
     }
     let blob;
     if (opts.jsonl) {
-      blob = existsSync84(opts.jsonl) ? readFileSync72(opts.jsonl, "utf-8") : "";
+      blob = existsSync84(opts.jsonl) ? readFileSync73(opts.jsonl, "utf-8") : "";
     } else {
       try {
         blob = execFileSync26("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
@@ -90056,7 +90724,7 @@ import {
   mkdirSync as mkdirSync49,
   mkdtempSync as mkdtempSync5,
   openSync as openSync15,
-  readFileSync as readFileSync73,
+  readFileSync as readFileSync74,
   readdirSync as readdirSync31,
   realpathSync as realpathSync7,
   renameSync as renameSync18,
@@ -90064,8 +90732,8 @@ import {
   statSync as statSync34,
   writeFileSync as writeFileSync42
 } from "node:fs";
-import { tmpdir as tmpdir5, homedir as homedir48 } from "node:os";
-import { dirname as dirname28, join as join84, relative as relative2, resolve as resolve50 } from "node:path";
+import { tmpdir as tmpdir5, homedir as homedir49 } from "node:os";
+import { dirname as dirname28, join as join84, relative as relative2, resolve as resolve51 } from "node:path";
 import { spawnSync as spawnSync15 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -90299,11 +90967,11 @@ function scanForClaudeP2(content) {
 function resolveSkillsPoolDir2(override) {
   const raw = override ?? "~/.switchroom/skills";
   if (raw.startsWith("~/")) {
-    return join84(homedir48(), raw.slice(2));
+    return join84(homedir49(), raw.slice(2));
   }
   if (raw === "~")
-    return homedir48();
-  return resolve50(raw);
+    return homedir49();
+  return resolve51(raw);
 }
 function readStdinSync() {
   const chunks = [];
@@ -90348,7 +91016,7 @@ function loadFromDir(dir) {
         continue;
       }
       if (ent.isFile()) {
-        const buf = readFileSync73(full);
+        const buf = readFileSync74(full);
         files[rel.replace(/\\/g, "/")] = buf.toString("utf-8");
       }
     }
@@ -90397,7 +91065,7 @@ function loadFromTarball(tarPath) {
   }
 }
 function loadSingleFile(filePath) {
-  const content = readFileSync73(filePath, "utf-8");
+  const content = readFileSync74(filePath, "utf-8");
   return { "SKILL.md": content };
 }
 function loadFromStdin() {
@@ -90488,7 +91156,7 @@ function diffSummary(currentDir, files) {
         if (ent.isDirectory()) {
           walk2(full);
         } else if (ent.isFile()) {
-          currentFiles[rel.replace(/\\/g, "/")] = readFileSync73(full, "utf-8");
+          currentFiles[rel.replace(/\\/g, "/")] = readFileSync74(full, "utf-8");
         }
       }
     };
@@ -90587,7 +91255,7 @@ function registerSkillCommand(program3) {
     if (opts.from === undefined) {
       files = loadFromStdin();
     } else {
-      const fromPath = resolve50(opts.from);
+      const fromPath = resolve51(opts.from);
       if (!existsSync86(fromPath)) {
         fail3(`--from path does not exist: ${opts.from}`);
       }
@@ -90649,7 +91317,7 @@ import {
   mkdirSync as mkdirSync50,
   mkdtempSync as mkdtempSync6,
   openSync as openSync16,
-  readFileSync as readFileSync74,
+  readFileSync as readFileSync75,
   readdirSync as readdirSync32,
   renameSync as renameSync19,
   rmSync as rmSync19,
@@ -90657,8 +91325,8 @@ import {
   utimesSync,
   writeFileSync as writeFileSync43
 } from "node:fs";
-import { dirname as dirname29, join as join85, relative as relative3, resolve as resolve51 } from "node:path";
-import { homedir as homedir49, tmpdir as tmpdir6 } from "node:os";
+import { dirname as dirname29, join as join85, relative as relative3, resolve as resolve52 } from "node:path";
+import { homedir as homedir50, tmpdir as tmpdir6 } from "node:os";
 import { spawnSync as spawnSync16 } from "node:child_process";
 init_helpers();
 init_agent_config();
@@ -90669,7 +91337,7 @@ var TRASH_TTL_MS = 24 * 60 * 60 * 1000;
 var PERSONAL_SKILLS_SUBPATH = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
-  const candidate = override ? resolve51(override) : join85(homedir49(), ".switchroom-config");
+  const candidate = override ? resolve52(override) : join85(homedir50(), ".switchroom-config");
   if (!existsSync87(candidate))
     return null;
   return join85(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
@@ -90732,7 +91400,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
         if (ent.isDirectory())
           walk2(s, d);
         else if (ent.isFile()) {
-          writeFileSync43(d, readFileSync74(s));
+          writeFileSync43(d, readFileSync75(s));
         }
       }
     };
@@ -90764,8 +91432,8 @@ function resolveAgent(opts) {
 }
 function resolveAgentsRoot(opts) {
   if (opts.root)
-    return resolve51(opts.root);
-  return join85(homedir49(), ".switchroom", "agents");
+    return resolve52(opts.root);
+  return join85(homedir50(), ".switchroom", "agents");
 }
 function personalSkillDir(agentsRoot, agent, name) {
   return join85(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
@@ -90805,7 +91473,7 @@ function readStdinSync2() {
   return Buffer.concat(chunks).toString("utf-8");
 }
 function loadFromDir2(dir) {
-  const abs = resolve51(dir);
+  const abs = resolve52(dir);
   if (!statSync35(abs).isDirectory()) {
     fail4(`--from path is not a directory: ${dir}`);
   }
@@ -90822,7 +91490,7 @@ function loadFromDir2(dir) {
       }
       if (ent.isFile()) {
         const rel = relative3(abs, full).replace(/\\/g, "/");
-        files[rel] = readFileSync74(full, "utf-8");
+        files[rel] = readFileSync75(full, "utf-8");
       }
     }
   };
@@ -91013,7 +91681,7 @@ function loadFiles(opts) {
   if (opts.from === undefined) {
     return loadFromStdin2();
   }
-  const p = resolve51(opts.from);
+  const p = resolve52(opts.from);
   if (!existsSync87(p)) {
     fail4(`--from path does not exist: ${opts.from}`);
   }
@@ -91022,7 +91690,7 @@ function loadFiles(opts) {
     return loadFromDir2(p);
   }
   if (p.endsWith(".md")) {
-    return { "SKILL.md": readFileSync74(p, "utf-8") };
+    return { "SKILL.md": readFileSync75(p, "utf-8") };
   }
   fail4(`--from must be a directory or a .md file. Got: ${opts.from}`);
 }
@@ -91062,10 +91730,10 @@ function editPersonalAction(name, opts) {
 }
 var CLONE_SOURCE_RE = /^(shared|bundled):([a-z0-9][a-z0-9_-]{0,62})$/;
 function defaultSharedRoot() {
-  return join85(homedir49(), ".switchroom", "skills");
+  return join85(homedir50(), ".switchroom", "skills");
 }
 function defaultBundledRoot() {
-  return join85(homedir49(), ".switchroom", "skills", "_bundled");
+  return join85(homedir50(), ".switchroom", "skills", "_bundled");
 }
 function resolveCloneSource(source, opts) {
   const m = CLONE_SOURCE_RE.exec(source);
@@ -91111,7 +91779,7 @@ function readSourceFiles(dir) {
             fail4(`clone source has oversized file ${rel} (${st.size} bytes > ${CLONE_MAX_FILE_BYTES}); ` + `refuse to read`, 3);
           }
         } catch {}
-        files[rel] = readFileSync74(full, "utf-8");
+        files[rel] = readFileSync75(full, "utf-8");
       }
     }
   };
@@ -91279,19 +91947,19 @@ function registerSkillPersonalCommands(program3) {
 
 // src/cli/self-improve-propose-skill.ts
 import { createConnection as createConnection4 } from "node:net";
-import { homedir as homedir50 } from "node:os";
+import { homedir as homedir51 } from "node:os";
 import { join as join86 } from "node:path";
-import { readFileSync as readFileSync75 } from "node:fs";
+import { readFileSync as readFileSync76 } from "node:fs";
 var IPC_CONNECT_TIMEOUT_MS = 5000;
 function gatewaySocketPath() {
-  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join86(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join86(homedir50(), ".claude", "channels", "telegram", "gateway.sock"));
+  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join86(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join86(homedir51(), ".claude", "channels", "telegram", "gateway.sock"));
 }
 function fail5(msg, code = 1) {
   console.error(msg);
   process.exit(code);
 }
 function sendProposal(payload) {
-  return new Promise((resolve52, reject) => {
+  return new Promise((resolve53, reject) => {
     const sock = createConnection4({ path: gatewaySocketPath() });
     const t = setTimeout(() => {
       sock.destroy();
@@ -91302,7 +91970,7 @@ function sendProposal(payload) {
       sock.write(JSON.stringify(payload) + `
 `, () => {
         sock.end();
-        resolve52();
+        resolve53();
       });
     });
     sock.on("error", (err2) => {
@@ -91319,7 +91987,7 @@ function registerSelfImproveProposeSkillCommand(program3) {
       fail5("agent name required (--agent or $SWITCHROOM_AGENT_NAME)");
     let draft;
     try {
-      draft = JSON.parse(readFileSync75(opts.draft, "utf-8"));
+      draft = JSON.parse(readFileSync76(opts.draft, "utf-8"));
     } catch (e) {
       fail5(`failed to read/parse --draft: ${e.message}`);
     }
@@ -91356,20 +92024,20 @@ function registerSelfImproveProposeSkillCommand(program3) {
 init_esm();
 init_helpers();
 var import_yaml25 = __toESM(require_dist(), 1);
-import { existsSync as existsSync88, readdirSync as readdirSync33, readFileSync as readFileSync76, statSync as statSync36 } from "node:fs";
-import { homedir as homedir51 } from "node:os";
-import { join as join87, resolve as resolve52 } from "node:path";
+import { existsSync as existsSync88, readdirSync as readdirSync33, readFileSync as readFileSync77, statSync as statSync36 } from "node:fs";
+import { homedir as homedir52 } from "node:os";
+import { join as join87, resolve as resolve53 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
 var BUNDLED_SUBDIR = "_bundled";
 var AGENT_NAME_RE3 = /^[a-z][a-z0-9_-]{0,62}$/;
 function defaultAgentsRoot() {
-  return resolve52(homedir51(), ".switchroom/agents");
+  return resolve53(homedir52(), ".switchroom/agents");
 }
 function defaultSharedRoot2() {
-  return resolve52(homedir51(), ".switchroom/skills");
+  return resolve53(homedir52(), ".switchroom/skills");
 }
 function defaultBundledRoot2() {
-  return resolve52(homedir51(), ".switchroom/skills/_bundled");
+  return resolve53(homedir52(), ".switchroom/skills/_bundled");
 }
 function readSkillFrontmatter(skillDir) {
   const mdPath = join87(skillDir, "SKILL.md");
@@ -91377,7 +92045,7 @@ function readSkillFrontmatter(skillDir) {
     return null;
   let content;
   try {
-    content = readFileSync76(mdPath, "utf-8");
+    content = readFileSync77(mdPath, "utf-8");
   } catch {
     return null;
   }
@@ -91654,14 +92322,14 @@ import {
   existsSync as existsSync90,
   mkdirSync as mkdirSync51,
   readdirSync as readdirSync34,
-  readFileSync as readFileSync78,
+  readFileSync as readFileSync79,
   writeFileSync as writeFileSync44,
   statSync as statSync37,
   lstatSync as lstatSync11,
   realpathSync as realpathSync8,
   copyFileSync as copyFileSync12
 } from "node:fs";
-import { homedir as homedir52 } from "node:os";
+import { homedir as homedir53 } from "node:os";
 import { join as join88 } from "node:path";
 import { spawnSync as spawnSync20 } from "node:child_process";
 
@@ -91884,7 +92552,7 @@ networks:
 # operator surface; the daemon's stderr lands in \`docker logs switchroom-hostd\`.
 `;
 }
-function resolveHostdHostHome(env2 = process.env, home2 = homedir52()) {
+function resolveHostdHostHome(env2 = process.env, home2 = homedir53()) {
   const fromEnv = env2.SWITCHROOM_HOST_HOME?.trim();
   const resolved = fromEnv && fromEnv.length > 0 ? fromEnv : home2;
   if (resolved === "/host-home" || resolved.startsWith("/host-home/")) {
@@ -91919,7 +92587,7 @@ function resolveHostdSkillsTarget(hostHome) {
   return target;
 }
 function hostdDir() {
-  return join88(homedir52(), ".switchroom", "hostd");
+  return join88(homedir53(), ".switchroom", "hostd");
 }
 function hostdComposePath() {
   return join88(hostdDir(), "docker-compose.yml");
@@ -92100,7 +92768,7 @@ function registerHostdCommand(program3) {
 The log is created when hostd handles its first privileged-verb request.`));
       return;
     }
-    const raw = readFileSync78(logPath, "utf-8");
+    const raw = readFileSync79(logPath, "utf-8");
     const limit = Math.max(1, parseInt(opts.tail ?? "50", 10) || 50);
     const filters = {
       agent: opts.agent,
@@ -92144,7 +92812,7 @@ init_source();
 init_helpers();
 init_operator_uid();
 import { existsSync as existsSync91, mkdirSync as mkdirSync52, writeFileSync as writeFileSync45, copyFileSync as copyFileSync13 } from "node:fs";
-import { homedir as homedir53 } from "node:os";
+import { homedir as homedir54 } from "node:os";
 import { join as join89 } from "node:path";
 import { spawnSync as spawnSync21 } from "node:child_process";
 function resolveWebImageTag(explicitTag, release) {
@@ -92230,7 +92898,7 @@ services:
 `;
 }
 function webdDir() {
-  return join89(homedir53(), ".switchroom", "web");
+  return join89(homedir54(), ".switchroom", "web");
 }
 function webdComposePath() {
   return join89(webdDir(), "docker-compose.yml");
@@ -92275,7 +92943,7 @@ async function doInstall2(opts, program3) {
     return;
   }
   const yaml = renderWebComposeFile({
-    hostHome: homedir53(),
+    hostHome: homedir54(),
     imageTag,
     operatorUid
   });
@@ -92374,7 +93042,7 @@ function registerWebdCommand(program3) {
 
 // src/cli/host-repair.ts
 init_source();
-import { homedir as homedir54 } from "node:os";
+import { homedir as homedir55 } from "node:os";
 import { join as join90 } from "node:path";
 var ARTIFACT_ALLOWLIST = {
   dockerComposePluginDir: (home2) => join90(home2, ".docker", "cli-plugins", "docker-compose"),
@@ -92426,7 +93094,7 @@ function isStateBogusAutoDir(probe2) {
   return true;
 }
 function planMountRepairs(probe2, opts = {}) {
-  const home2 = opts.hostHome ?? homedir54();
+  const home2 = opts.hostHome ?? homedir55();
   const items = [];
   const dockerComposePath = ARTIFACT_ALLOWLIST.dockerComposePluginDir(home2);
   const dockerComposeSt = probe2.lstat(dockerComposePath);
@@ -92614,6 +93282,221 @@ Some artifacts were skipped (see above). Remediate them manually.`));
   });
 }
 
+// src/cli/fleet-health.ts
+init_source();
+init_helpers();
+init_scan();
+
+// src/fleet-health/gh-sync.ts
+import { spawnSync as spawnSync22 } from "node:child_process";
+var LABEL = "fleet-health";
+function defaultGhDeps(log) {
+  return {
+    log,
+    run: (args) => {
+      const r = spawnSync22("gh", args, { encoding: "utf-8" });
+      return {
+        ok: r.status === 0,
+        stdout: (r.stdout ?? "").trim(),
+        stderr: (r.stderr ?? "").trim()
+      };
+    }
+  };
+}
+function ghAvailable(deps) {
+  const r = deps.run(["auth", "status"]);
+  return r.ok;
+}
+function severityLabel(sev) {
+  const s = Math.max(1, Math.min(3, Math.round(sev)));
+  return `severity:${s}`;
+}
+function issueTitle(iss, job_spec) {
+  return `[fleet-health] ${job_spec}: ${iss.failure_mode} (${iss.dedup_key})`;
+}
+function issueBody(iss, job_spec) {
+  const lines = [];
+  lines.push(`**Job spec:** \`${job_spec}\` (\`reference/jobs/${job_spec}.md\`)`);
+  lines.push(`**Failure mode:** ${iss.failure_mode} \u2014 severity ${iss.severity}`);
+  lines.push(`**Dedup key:** \`${iss.dedup_key}\``);
+  lines.push(`**Frequency (scan window):** ${iss.frequency}`);
+  lines.push(`**Reach:** ${iss.reach.join(", ") || "\u2014"}`);
+  lines.push(`**Newest occurrence:** ${iss.recency ?? "\u2014"}`);
+  lines.push("");
+  lines.push("**Occurrences (hard-artifact evidence):**");
+  for (const o of iss.occurrences.slice(0, 25)) {
+    lines.push(`- \`${o.agent}\` turn \`${o.turn_id}\` \u2014 ${o.log_pointer ?? ""}`);
+  }
+  lines.push("");
+  lines.push("_Opened + maintained by the Fleet Health sensor " + "(`switchroom fleet-health scan --sync-issues`). Closes automatically on " + "a verified count-drop. See `reference/rfcs/fleet-health.md`._");
+  return lines.join(`
+`);
+}
+function syncIssue(deps, repo, job_spec, iss) {
+  const labels = [LABEL, severityLabel(iss.severity), `job:${job_spec}`];
+  const title = issueTitle(iss, job_spec);
+  const body = issueBody(iss, job_spec);
+  const shouldClose = iss.status === "closed" || iss.status === "resolved-pending-verify";
+  if (iss.gh_issue === undefined) {
+    if (shouldClose)
+      return;
+    const r = deps.run([
+      "issue",
+      "create",
+      "-R",
+      repo,
+      "--title",
+      title,
+      "--body",
+      body,
+      "--label",
+      labels.join(",")
+    ]);
+    if (r.ok) {
+      const m = r.stdout.match(/\/issues\/(\d+)/);
+      if (m) {
+        iss.gh_issue = Number(m[1]);
+        deps.log(`fleet-health: opened GH #${iss.gh_issue} for ${iss.dedup_key}`);
+      }
+    } else {
+      deps.log(`fleet-health: gh issue create failed for ${iss.dedup_key}: ${r.stderr}`);
+    }
+    return;
+  }
+  const num = String(iss.gh_issue);
+  const upd = deps.run(["issue", "edit", num, "-R", repo, "--body", body]);
+  if (!upd.ok) {
+    deps.log(`fleet-health: gh issue edit #${num} failed: ${upd.stderr}`);
+  }
+  if (iss.status === "closed") {
+    const c = deps.run([
+      "issue",
+      "close",
+      num,
+      "-R",
+      repo,
+      "--comment",
+      `Verified count-drop (frequency ${iss.frequency} \u2264 resolved threshold). Closed by the Fleet Health sensor.`
+    ]);
+    if (c.ok)
+      deps.log(`fleet-health: closed GH #${num} (count-drop) for ${iss.dedup_key}`);
+    else
+      deps.log(`fleet-health: gh issue close #${num} failed: ${c.stderr}`);
+  }
+}
+function syncLedgerIssues(ledger, repo, deps) {
+  if (!ghAvailable(deps)) {
+    deps.log("fleet-health: gh unavailable or not authenticated \u2014 skipping GitHub issue sync (ledger still written).");
+    return { synced: 0, skipped: true };
+  }
+  let synced = 0;
+  for (const rec of ledger.records) {
+    for (const iss of rec.issues) {
+      syncIssue(deps, repo, rec.job_spec, iss);
+      synced++;
+    }
+    rec.gh_issues = rec.issues.map((i) => i.gh_issue).filter((n) => typeof n === "number");
+  }
+  return { synced, skipped: false };
+}
+
+// src/cli/fleet-health.ts
+init_mapping();
+function registerFleetHealthCommand(program3) {
+  const cmd = program3.command("fleet-health").description("Fleet Health live detection pipeline: model-free sensor, priority " + "ledger, and GitHub-issue lifecycle (RFC fleet-health.md).");
+  cmd.command("scan").description("Nightly model-free sensor: scan every agent's turns.jsonl + gateway " + "log, rank recurring failures by priority, write the ledger.").option("--dry-run", "print the ledger, do not write it", false).option("--json", "emit machine-readable JSON", false).option("--sync-issues", "open/update/close GitHub issues (needs an authed gh; off by default)", false).option("--window-days <n>", "scan window in days", "30").option("--repo <owner/name>", "GitHub repo for issue sync (default switchroom/switchroom)", "switchroom/switchroom").action(withConfigError(async (opts) => {
+    const cfg = getConfig(program3);
+    const ownerAgent = cfg.fleet_health?.owner_agent;
+    const windowDays = Number(opts.windowDays) || 30;
+    const log = (m) => console.error(source_default.gray(m));
+    const result = runScan({ ownerAgent, windowDays, log });
+    const ledger = result.ledger;
+    log(`fleet-health: scanned ${result.agentsScanned} agents` + (result.agentsSkipped.length ? `, skipped ${result.agentsSkipped.length} (${result.agentsSkipped.join(", ")})` : ""));
+    if (opts.syncIssues && !opts.dryRun) {
+      const deps = defaultGhDeps(log);
+      const sync = syncLedgerIssues(ledger, String(opts.repo), deps);
+      if (!sync.skipped) {
+        log(`fleet-health: synced ${sync.synced} issues to ${String(opts.repo)}`);
+      }
+    } else if (opts.syncIssues && opts.dryRun) {
+      log("fleet-health: --dry-run set, skipping GitHub issue sync.");
+    }
+    if (opts.json) {
+      process.stdout.write(JSON.stringify(ledger, null, 2) + `
+`);
+    } else {
+      printLedgerTable(ledger);
+    }
+    if (opts.dryRun) {
+      log("fleet-health: --dry-run \u2014 ledger NOT written.");
+      return;
+    }
+    const base = resolveSwitchroomBase();
+    const path8 = writeLedger(base, ledger);
+    log(source_default.green(`fleet-health: wrote ledger \u2192 ${path8}`));
+  }));
+  cmd.command("deep-dive-targets").description("Print the top-N ledger records (by priority) as a structured brief " + "for the owner agent's weekly Opus deep-dive cron.").option("--top <n>", "number of targets", "2").option("--json", "emit machine-readable JSON", false).action(withConfigError(async (opts) => {
+    const base = resolveSwitchroomBase();
+    const { readLedgerIfPresent: readLedgerIfPresent2 } = await Promise.resolve().then(() => (init_scan(), exports_scan));
+    const ledger = readLedgerIfPresent2(base);
+    const top = Number(opts.top) || 2;
+    if (!ledger) {
+      console.error(source_default.yellow("fleet-health: no ledger yet \u2014 run `fleet-health scan` first."));
+      return;
+    }
+    const targets = [...ledger.records].filter((r) => r.open_issue_count > 0).sort((a, b) => b.priority_score - a.priority_score).slice(0, top);
+    if (opts.json) {
+      process.stdout.write(JSON.stringify({ targets }, null, 2) + `
+`);
+      return;
+    }
+    printDeepDiveBrief(targets);
+  }));
+  cmd.command("mapping").description("Print the signal\u2192job-spec mapping + severity table.").action(() => {
+    console.log(source_default.bold(`Signal \u2192 job-spec mapping (model-free):
+`));
+    for (const [signal, m] of Object.entries(SIGNAL_MAP)) {
+      console.log(`  ${source_default.cyan(signal.padEnd(28))} \u2192 ${m.job_spec.padEnd(30)} ` + `[${m.failure_mode}, sev ${m.severity}]`);
+    }
+  });
+}
+function printLedgerTable(ledger) {
+  const ranked = [...ledger.records].sort((a, b) => b.priority_score - a.priority_score);
+  console.log(source_default.bold(`
+Fleet Health ledger (worst-first):`));
+  console.log(source_default.gray(`owner=${ledger.owner_agent ?? "(unset)"}  generated_at=${ledger.generated_at}`));
+  for (const r of ranked) {
+    if (r.open_issue_count === 0 && r.priority_score === 0)
+      continue;
+    console.log(`  ${source_default.yellow(r.priority_score.toFixed(2).padStart(8))}  ` + `${r.job_spec.padEnd(34)} open=${r.open_issue_count} ` + `issues=${r.issues.length}`);
+    for (const iss of r.issues) {
+      console.log(source_default.gray(`        - ${iss.dedup_key}  freq=${iss.frequency} ` + `reach=[${iss.reach.join(",")}] sev=${iss.severity} ${iss.status}`));
+    }
+  }
+}
+function printDeepDiveBrief(targets) {
+  console.log(source_default.bold(`Fleet Health \u2014 weekly deep-dive targets
+`));
+  if (targets.length === 0) {
+    console.log("  (no open issues \u2014 nothing to deep-dive this week)");
+    return;
+  }
+  for (const r of targets) {
+    console.log(source_default.cyan(`## ${r.job_spec}  (score ${r.priority_score.toFixed(2)})`));
+    console.log(`   spec: reference/jobs/${r.job_spec}.md`);
+    console.log(`   open issues: ${r.open_issue_count}`);
+    for (const iss of r.issues) {
+      console.log(`   - ${iss.dedup_key} [${iss.failure_mode}, sev ${iss.severity}]`);
+      console.log(`     freq=${iss.frequency} reach=[${iss.reach.join(",")}] ` + `newest=${iss.recency ?? "\u2014"} gh=${iss.gh_issue ?? "none"}`);
+      for (const o of iss.occurrences.slice(0, 5)) {
+        console.log(`       \u2022 ${o.agent} ${o.turn_id} \u2014 ${o.log_pointer ?? ""}`);
+      }
+    }
+    console.log("");
+  }
+  console.log(source_default.gray("Deep-dive: read the flagged turns' transcripts (join by turn_id), " + "root-cause, and write the finding into the linked GitHub issue."));
+}
+
 // src/cli/index.ts
 init_posthog();
 installGlobalErrorHandlers();
@@ -92670,6 +93553,7 @@ registerHostdMcpCommand(program3);
 registerHostdCommand(program3);
 registerWebdCommand(program3);
 registerHostCommand(program3);
+registerFleetHealthCommand(program3);
 
 // bin/switchroom.ts
 program3.parse();