switchroom 0.17.10 → 0.18.3

package/dist/cli/switchroom.js

@@ -13542,7 +13542,7 @@ var init_zod = __esm(() => {
 function isValidTimezone(value) {
   return TIMEZONE_REGEX.test(value);
 }
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -13694,7 +13694,11 @@ var init_schema = __esm(() => {
       sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Per-speaker recall routing: a map of Telegram sender \u2192 extra " + "recall bank. When a message arrives, the agent also recalls the " + "speaker's bank (matched by Telegram username \u2014 a leading @ is " + "optional \u2014 or numeric user_id), merged " + "into its own results \u2014 so each trusted user gets their own " + "profile context. Additive recall scoping within the single " + "tenant: never an access boundary (who may drive an agent stays " + "the per-agent user assignment in `access.allowFrom`). Author the " + "banks via `switchroom memory profile`."),
       skip_trivial: exports_external.boolean().optional().describe("Skip recall on plausibly-stateless trivial turns (time/date/" + "greeting). Switchroom default true \u2014 saves the recall arm + " + "injected tokens on turns that never need memory, guarded so it " + "never skips a turn that references user/project/session state. " + "Set false to always run recall."),
       topic_filter_mode: exports_external.enum(["soft-preamble", "hard-filter"]).optional().describe("Supergroup-mode cross-topic memory behaviour. Default " + "(unset) \u2192 soft-preamble: recall returns memories from all " + "topics, and a 'Current topic: \u2026' preamble tells the model " + "to self-scope. hard-filter: drop any recalled memory whose " + "metadata.thread_id differs from the active inbound's topic. " + "Flip to hard-filter when the recall_log shows binding " + "failures (model surfacing the right memory but applying " + "it to the wrong topic).")
-    }).optional().describe("Auto-recall tuning knobs")
+    }).optional().describe("Auto-recall tuning knobs"),
+    retain: exports_external.object({
+      every_n_turns: exports_external.number().int().min(1).optional().describe("How often the Stop hook fires auto-retention, in turns. The " + "vendor plugin default is 10 (a short session can end before " + "retention ever fires); switchroom's scaffold default is 3. " + "Lower = more frequent, smaller retains + tighter crash " + "durability (at 1, every turn is retained before a restart can " + "lose it); higher = fewer, larger retains + less LLM churn. " + "Raised from the historical 1 to 3 because the local reasoning " + "consolidation model (Ollama gpt-oss-20b) ran away on the large " + "overlapping every-turn payloads. Set to 1 for the old " + "every-turn crash-durability guarantee. Min 1. Cascade: " + "per-field merge (agent wins over default)."),
+      overlap_turns: exports_external.number().int().min(0).optional().describe("Extra recent turns included in each chunked retain window on " + "top of `every_n_turns`, so window = overlap_turns + " + "every_n_turns recent turns. Vendor default is 2; switchroom's " + "scaffold default is 1 (smaller payloads for the local " + "reasoning consolidation model). Higher = more redundant " + "context re-sent per fire. Min 0. Cascade: per-field merge.")
+    }).optional().describe("Auto-retain (Stop-hook consolidation) cadence knobs")
   }).optional();
   HookEntrySchema = exports_external.object({
     command: exports_external.string().describe("Shell command to run. Supports ${CLAUDE_CONFIG_DIR} and ${CLAUDE_PLUGIN_ROOT} substitution."),
@@ -13872,6 +13876,21 @@ var init_schema = __esm(() => {
     small_fast_model: exports_external.string().optional().describe("Model id exported as ANTHROPIC_SMALL_FAST_MODEL for the claude CLI's " + "background/fast lane, e.g. 'claude-haiku-4-5-20251001'."),
     tags: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Extra key/value metadata tags attached to the provisioned LiteLLM " + "virtual key. Merged per-key across cascade layers (agent wins).")
   }).optional().describe("LiteLLM routing config \u2014 opt-in per-agent virtual-key auto-provisioning " + "+ routing env. Default OFF. See LiteLLMConfigSchema doc for the full flow.");
+  HindsightPerOpLlmSchema = exports_external.object({
+    model: exports_external.string().min(1).optional().describe("Per-op model (upstream `HINDSIGHT_API_<OP>_LLM_MODEL`). Absent \u2192 " + "inherit the global `hindsight.llm.model`."),
+    provider: exports_external.string().min(1).optional().describe("Per-op provider (upstream `HINDSIGHT_API_<OP>_LLM_PROVIDER`). " + "Absent \u2192 inherit the global `hindsight.llm.provider`."),
+    base_url: exports_external.string().min(1).optional().describe("Per-op base URL (upstream `HINDSIGHT_API_<OP>_LLM_BASE_URL`). " + "Optional passthrough; absent \u2192 inherit the global."),
+    api_key: exports_external.string().min(1).optional().describe("Per-op API key (upstream `HINDSIGHT_API_<OP>_LLM_API_KEY`). Literal " + "or `vault:` reference. Optional passthrough; absent \u2192 inherit global.")
+  }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback \u2014 switchroom emits only the vars set.");
+  HindsightConfigSchema = exports_external.object({
+    llm: exports_external.object({
+      provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
+      model: exports_external.string().min(1).optional().describe("Hindsight LLM model (upstream `HINDSIGHT_API_LLM_MODEL`). Defaults " + "to HINDSIGHT_DEFAULT_MODEL. Any model your LiteLLM proxy can route " + "is valid, e.g. `openrouter/z-ai/glm-5.2` when routing through the " + "fleet proxy. With provider=claude-code this value is ALSO exported " + "as `ANTHROPIC_MODEL` to the claude subprocess. Serves as the GLOBAL " + "default for every op absent a per-op override."),
+      retain: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `retain` LLM op (memory ingestion). Emits " + "`HINDSIGHT_API_RETAIN_LLM_*`. Absent \u2192 uses the global model/provider."),
+      reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent \u2192 uses global."),
+      consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent \u2192 global.")
+    }).optional().describe("LLM knob for the hindsight container. The flat `provider`/`model` set " + "the global default (backward-compatible); optional `retain`/`reflect`/" + "`consolidation` blocks override individual ops. All fields optional; " + "unset fields fall back to the hard-coded defaults.")
+  });
   MicrosoftWorkspaceConfigSchema = exports_external.object({
     microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL \u2014 omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
     microsoft_client_secret: exports_external.string().min(1).optional().describe("Microsoft OAuth client secret. Optional \u2014 public-client apps " + "(Mobile + Desktop platform with 'Allow public client flows' " + "enabled) work without a secret; confidential clients pass " + "one. Either literal or vault reference e.g. " + "'vault:microsoft-oauth-client-secret'."),
@@ -14120,6 +14139,7 @@ var init_schema = __esm(() => {
     config: exports_external.object({
       provider: exports_external.string().default("ollama").describe("Embedding provider (ollama, openai, anthropic)"),
       model: exports_external.string().optional().describe("Embedding model (e.g., 'nomic-embed-text')"),
+      llm_model: exports_external.string().optional().describe("LiteLLM model name for Hindsight's LLM ops (retain/reflect/" + "consolidation) when the top-level `litellm.enabled` carve-out is " + "on. Defaults to a cheap OpenRouter model (routed via LiteLLM's " + "model-mapped path, not the Anthropic OAuth pass-through) to keep " + "background memory-op cost off the Claude subscription quota. Set " + "to a `claude-*` model name to route it back through the OAuth " + "pass-through instead. Has no effect when litellm is disabled."),
       api_key: exports_external.string().optional().describe("API key or vault reference for embedding provider"),
       docker_service: exports_external.boolean().default(true).describe("Whether to include Hindsight in docker-compose"),
       url: exports_external.string().url("Hindsight URL must be a valid URL (no shell-special characters)").optional().describe("Hindsight MCP endpoint URL (e.g., http://localhost:18888/mcp/). Defaults to http://localhost:8888/mcp/.")
@@ -14197,6 +14217,7 @@ var init_schema = __esm(() => {
     telegram: TelegramConfigSchema,
     release: ReleaseBlock.optional().describe("Fleet-wide default release-channel pin / pointer for the update " + "flow. Either `channel` (dev|rc|latest) or `pin` (sha-<hex>|v<semver>) " + "\u2014 mutually exclusive. Per-agent `release` REPLACES this entirely."),
     memory: MemoryBackendConfigSchema.optional(),
+    hindsight: HindsightConfigSchema.optional().describe("Fleet-singleton Hindsight (memory backend) configuration. Currently " + "just the LLM knob (provider + model) used for retain/reflect/" + "consolidation. Both fields optional; when unset the container falls " + "back to provider=claude-code + the hard-coded HINDSIGHT_DEFAULT_MODEL " + "so nothing changes for operators who don't set it. Read at container " + "launch by startHindsight() (src/setup/hindsight.ts) \u2014 takes effect on " + "the next `switchroom apply` / `memory setup --recreate`."),
     vault: VaultConfigSchema.optional(),
     auth: exports_external.object({
       active: exports_external.string().min(1).optional().describe("Fleet-wide active Anthropic account label. Every agent without " + "an explicit `agent.auth.override` uses this account. See " + "docs/auth.md for the full model. Set by `switchroom auth use <label>`."),
@@ -14645,6 +14666,11 @@ function mergeAgentConfig(defaultsIn, agentIn) {
         continue;
       if (k === "recall" && base.recall && typeof v === "object" && v !== null && !Array.isArray(v)) {
         combined[k] = { ...base.recall, ...v };
+      } else if (k === "retain" && base.retain && typeof v === "object" && v !== null && !Array.isArray(v)) {
+        combined[k] = {
+          ...base.retain,
+          ...v
+        };
       } else if (k === "disposition" && base.disposition && typeof v === "object" && v !== null && !Array.isArray(v)) {
         combined[k] = {
           ...base.disposition,
@@ -15098,7 +15124,7 @@ function resolveAgentsDir(config) {
   if (override && override.length > 0 && override.startsWith("/")) {
     return override;
   }
-  return resolveDualPath(config.switchroom.agents_dir);
+  return resolveDualPath(config.switchroom.agents_dir || "~/.switchroom/agents");
 }
 function resolvePath(pathStr) {
   return resolveDualPath(pathStr);
@@ -15155,6 +15181,374 @@ var init_users = __esm(() => {
   init_merge();
 });
 
+// src/agents/pane-lock.ts
+function withPaneLock(key, fn) {
+  const tail = tails.get(key) ?? Promise.resolve();
+  const run = tail.then(() => fn());
+  const next = run.then(() => {}, () => {});
+  tails.set(key, next);
+  next.then(() => {
+    if (tails.get(key) === next)
+      tails.delete(key);
+  });
+  return run;
+}
+var tails;
+var init_pane_lock = __esm(() => {
+  tails = new Map;
+});
+
+// src/agents/inject.ts
+var exports_inject = {};
+__export(exports_inject, {
+  validateInjectCommand: () => validateInjectCommand,
+  normalizeInjectCommand: () => normalizeInjectCommand,
+  makeTmuxRunner: () => makeTmuxRunner,
+  isTuiChromeLine: () => isTuiChromeLine,
+  injectSlashCommandWith: () => injectSlashCommandWith,
+  injectSlashCommand: () => injectSlashCommand,
+  diffPane: () => diffPane,
+  dedupeInjectQueue: () => dedupeInjectQueue,
+  InjectError: () => InjectError,
+  INJECT_COMMANDS: () => INJECT_COMMANDS,
+  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
+  INJECT_BLOCKED: () => INJECT_BLOCKED,
+  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
+});
+import { execFileSync } from "node:child_process";
+function validateInjectCommand(command) {
+  if (typeof command !== "string" || command.trim().length === 0) {
+    throw new InjectError("invalid", "command is empty");
+  }
+  const trimmed = command.trim();
+  if (!trimmed.startsWith("/")) {
+    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
+  }
+  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
+  const blockedMeta = INJECT_BLOCKED.get(bare);
+  if (blockedMeta) {
+    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
+  }
+  if (!INJECT_COMMANDS.has(bare)) {
+    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
+    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
+  }
+  return bare;
+}
+function normalizeInjectCommand(command) {
+  return command.trim().replace(/\s+/g, " ").toLowerCase();
+}
+function dedupeInjectQueue(commands) {
+  const seen = new Set;
+  const out = [];
+  for (const raw of commands) {
+    if (typeof raw !== "string")
+      continue;
+    const key = normalizeInjectCommand(raw);
+    if (key.length === 0)
+      continue;
+    if (seen.has(key))
+      continue;
+    seen.add(key);
+    out.push(raw.trim());
+  }
+  return out;
+}
+function defaultSocketName(agentName) {
+  return `switchroom-${agentName}`;
+}
+function makeTmuxRunner(tmuxBin) {
+  return {
+    capture(socket, session) {
+      try {
+        return execFileSync(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+      } catch {
+        return null;
+      }
+    },
+    send(socket, session, args) {
+      const [subcmd, ...rest] = args;
+      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
+      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
+      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
+      execFileSync(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
+    },
+    hasSession(socket, session) {
+      try {
+        execFileSync(tmuxBin, ["-L", socket, "has-session", "-t", session], {
+          stdio: ["pipe", "pipe", "pipe"]
+        });
+        return true;
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+function sleep(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
+function isTuiChromeLine(line) {
+  const t = line.trim();
+  if (t.length === 0)
+    return false;
+  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
+    return true;
+  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
+    return true;
+  if (/accept edits on/i.test(t))
+    return true;
+  if (/shift\+tab to cycle/i.test(t))
+    return true;
+  if (/for agents/i.test(t))
+    return true;
+  if (/\? for shortcuts/i.test(t))
+    return true;
+  if (/bypassing permissions/i.test(t))
+    return true;
+  if (t === "copy")
+    return true;
+  return false;
+}
+function diffPane(before, after, command) {
+  if (command) {
+    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const lines = after.split(`
+`);
+    let anchorIdx = -1;
+    for (let i = lines.length - 1;i >= 0; i--) {
+      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
+        anchorIdx = i;
+        break;
+      }
+    }
+    if (anchorIdx >= 0) {
+      const tail = lines.slice(anchorIdx + 1);
+      const trimmed = [];
+      for (const raw of tail) {
+        const line = raw.trimEnd();
+        if (line.length === 0 && trimmed.length === 0)
+          continue;
+        if (isTuiChromeLine(line))
+          continue;
+        trimmed.push(line);
+      }
+      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
+        trimmed.pop();
+      }
+      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
+      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
+        trimmed.pop();
+      }
+      if (trimmed.length > 0) {
+        return { output: trimmed.join(`
+`), anchored: true };
+      }
+    }
+  }
+  const beforeSet = new Set(before.split(`
+`).map((l) => l.trimEnd()));
+  const newLines = [];
+  for (const raw of after.split(`
+`)) {
+    const line = raw.trimEnd();
+    if (line.length === 0)
+      continue;
+    if (beforeSet.has(line))
+      continue;
+    if (isTuiChromeLine(line))
+      continue;
+    newLines.push(line);
+  }
+  return { output: newLines.join(`
+`), anchored: false };
+}
+async function injectSlashCommand(agentName, command, opts = {}) {
+  validateInjectCommand(command);
+  const tmuxBin = opts.tmuxBin ?? "tmux";
+  const socket = opts.socketName ?? defaultSocketName(agentName);
+  const session = opts.sessionName ?? agentName;
+  const settleMs = opts.settleMs ?? 2000;
+  const timeoutMs = opts.timeoutMs ?? 5000;
+  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
+    socket,
+    session,
+    command: command.trim(),
+    settleMs,
+    timeoutMs
+  }));
+}
+async function injectSlashCommandWith(runner, args) {
+  const { socket, session, command, settleMs, timeoutMs } = args;
+  let bareVerb;
+  try {
+    bareVerb = validateInjectCommand(command);
+  } catch (err) {
+    if (err instanceof InjectError) {
+      return {
+        outcome: "failed",
+        output: "",
+        truncated: false,
+        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
+        meta: null,
+        errorCode: err.code,
+        errorMessage: err.message
+      };
+    }
+    throw err;
+  }
+  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
+  if (!runner.hasSession(socket, session)) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "session_missing",
+      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
+    };
+  }
+  const before = runner.capture(socket, session) ?? "";
+  try {
+    runner.send(socket, session, ["send-keys", "-l", command]);
+    runner.send(socket, session, ["send-keys", "Enter"]);
+  } catch (err) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "tmux_failed",
+      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const start = Date.now();
+  let last = before;
+  let stableSince = null;
+  while (Date.now() - start < timeoutMs) {
+    await sleep(POLL_INTERVAL_MS);
+    const cur = runner.capture(socket, session) ?? "";
+    if (cur === last && cur !== before) {
+      if (stableSince === null) {
+        stableSince = Date.now();
+      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
+        last = cur;
+        break;
+      }
+    } else {
+      stableSince = null;
+    }
+    last = cur;
+    if (Date.now() - start >= settleMs && cur !== before) {
+      break;
+    }
+  }
+  const { output: rawOutput, anchored } = diffPane(before, last, command);
+  let output = rawOutput;
+  let truncated = false;
+  const bytes = Buffer.byteLength(output, "utf-8");
+  if (bytes > OUTPUT_BYTE_CAP) {
+    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
+      output = output.slice(Math.floor(output.length * 0.1) + 1);
+    }
+    truncated = true;
+  }
+  if (meta?.dialog) {
+    try {
+      runner.send(socket, session, ["send-keys", "Escape"]);
+    } catch {}
+  }
+  if (output.trim().length === 0) {
+    return {
+      outcome: "ok_no_output",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      ...anchored ? {} : { diagnostic: "anchor_missing" }
+    };
+  }
+  return {
+    outcome: "ok",
+    output,
+    truncated,
+    command: bareVerb,
+    meta,
+    ...truncated ? { diagnostic: "truncated_output" } : {}
+  };
+}
+var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
+var init_inject = __esm(() => {
+  init_pane_lock();
+  INJECT_COMMANDS = new Map([
+    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true }],
+    ["/status", { description: "Show session status", expectsOutput: true, dialog: true }],
+    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true }],
+    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true }],
+    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true }],
+    ["/model", { description: "Open model picker", expectsOutput: true }],
+    [
+      "/clear",
+      {
+        description: "Clear session screen",
+        expectsOutput: false,
+        silentNote: "context cleared \u2014 fresh slate"
+      }
+    ],
+    [
+      "/compact",
+      {
+        description: "Compact conversation history",
+        expectsOutput: false,
+        silentNote: "compaction runs silently"
+      }
+    ]
+  ]);
+  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
+  INJECT_BLOCKED = new Map([
+    ["/login", { reason: "would mutate auth state" }],
+    ["/logout", { reason: "would terminate the agent's auth session" }],
+    ["/exit", { reason: "would kill the agent process" }],
+    ["/quit", { reason: "would kill the agent process" }],
+    [
+      "/effort",
+      {
+        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
+      }
+    ]
+  ]);
+  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
+  InjectError = class InjectError extends Error {
+    code;
+    constructor(code, message) {
+      super(message);
+      this.name = "InjectError";
+      this.code = code;
+    }
+  };
+});
+
+// src/agents/model-picker.ts
+var init_model_picker = __esm(() => {
+  init_inject();
+  init_pane_lock();
+});
+
+// telegram-plugin/gateway/model-command.ts
+function isClaudeModel(name) {
+  const lower = name.toLowerCase();
+  if (MODEL_ALIASES.includes(lower))
+    return true;
+  return lower.startsWith("claude-");
+}
+var MODEL_ALIASES;
+var init_model_command = __esm(() => {
+  init_model_picker();
+  MODEL_ALIASES = ["opus", "sonnet", "haiku", "fable", "default"];
+});
+
 // src/util/atomic.ts
 var exports_atomic = {};
 __export(exports_atomic, {
@@ -15223,7 +15617,7 @@ var init_atomic = __esm(() => {
 });
 
 // src/setup/hindsight.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { createServer } from "node:net";
 function hindsightImageRef(tag) {
   const t = tag?.trim();
@@ -15249,7 +15643,7 @@ function describePortHolder(port) {
   ];
   for (const [cmd, args] of probes) {
     try {
-      const out = execFileSync(cmd, args, {
+      const out = execFileSync2(cmd, args, {
         stdio: "pipe",
         encoding: "utf-8"
       }).trim();
@@ -15306,7 +15700,7 @@ async function pickHindsightPorts() {
 }
 function isDockerAvailable() {
   try {
-    execFileSync("docker", ["--version"], { stdio: "pipe" });
+    execFileSync2("docker", ["--version"], { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -15314,7 +15708,7 @@ function isDockerAvailable() {
 }
 function isHindsightRunning() {
   try {
-    const output = execFileSync("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
@@ -15322,24 +15716,54 @@ function isHindsightRunning() {
 }
 function isHindsightContainerExists() {
   try {
-    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
   }
 }
-function startHindsight(ports, litellm, imageTag) {
+function resolveHindsightPerOpLlm(llm) {
+  const out = [];
+  if (!llm)
+    return out;
+  for (const op of HINDSIGHT_LLM_OPS) {
+    const cfg = llm[op];
+    if (!cfg)
+      continue;
+    const prefix = `HINDSIGHT_API_${op.toUpperCase()}_LLM`;
+    const model = cfg.model?.trim();
+    const provider = cfg.provider?.trim();
+    const baseUrl = cfg.base_url?.trim();
+    const apiKey = cfg.api_key?.trim();
+    if (model)
+      out.push([`${prefix}_MODEL`, model]);
+    if (provider)
+      out.push([`${prefix}_PROVIDER`, provider]);
+    if (baseUrl)
+      out.push([`${prefix}_BASE_URL`, baseUrl]);
+    if (apiKey)
+      out.push([`${prefix}_API_KEY`, apiKey]);
+  }
+  return out;
+}
+function resolveHindsightLlm(llm, litellm) {
+  const provider = llm?.provider?.trim() || "claude-code";
+  const model = llm?.model?.trim() || (litellm ? litellm.model ?? HINDSIGHT_DEFAULT_LITELLM_MODEL : HINDSIGHT_DEFAULT_MODEL);
+  return { provider, model };
+}
+function startHindsight(ports, litellm, imageTag, llm) {
   const apiPort = ports?.apiPort ?? HINDSIGHT_DEFAULT_API_PORT;
   const uiPort = ports?.uiPort ?? HINDSIGHT_DEFAULT_UI_PORT;
+  const { provider: llmProvider, model: llmModel } = resolveHindsightLlm(llm, litellm);
+  const perOpLlm = resolveHindsightPerOpLlm(llm);
   const envArgs = [
     "-e",
     `HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
     "-e",
-    "HINDSIGHT_API_LLM_PROVIDER=claude-code",
-    "-e",
-    `HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    `HINDSIGHT_API_LLM_PROVIDER=${llmProvider}`,
     "-e",
-    `ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    `HINDSIGHT_API_LLM_MODEL=${llmModel}`,
+    ...perOpLlm.flatMap(([k, v]) => ["-e", `${k}=${v}`]),
     "-e",
     `HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
     "-e",
@@ -15361,8 +15785,13 @@ function startHindsight(ports, litellm, imageTag) {
     "-e",
     `HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`
   ];
+  if (llmProvider === "claude-code") {
+    envArgs.push("-e", `ANTHROPIC_MODEL=${llmModel}`);
+  }
   if (litellm) {
-    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${litellm.baseUrl.replace(/\/+$/, "")}/anthropic`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
+    const litellmRoot = litellm.baseUrl.replace(/\/+$/, "");
+    const anthropicBaseUrl = isClaudeModel(llmModel) ? `${litellmRoot}/anthropic` : litellmRoot;
+    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `HINDSIGHT_CP_DATAPLANE_API_URL=http://localhost:${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${anthropicBaseUrl}`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
 x-litellm-customer-id: hindsight
 x-litellm-tags: service:hindsight`);
   }
@@ -15394,25 +15823,25 @@ x-litellm-tags: service:hindsight`);
     args.push("-p", `127.0.0.1:${apiPort}:8888`, "-p", `127.0.0.1:${uiPort}:9999`);
   }
   args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, hindsightImageRef(imageTag));
-  execFileSync("docker", args, { stdio: "pipe" });
+  execFileSync2("docker", args, { stdio: "pipe" });
 }
 function stopHindsight() {
   try {
-    execFileSync("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync2("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
   try {
-    execFileSync("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync2("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
 }
 function pullHindsightImage(imageTag) {
-  execFileSync("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
+  execFileSync2("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
 }
 function getRunningHindsightPorts() {
   const CONTAINER_API_PORT = 8888;
   const CONTAINER_UI_PORT = 9999;
   const readPort = (containerPort) => {
     try {
-      const out = execFileSync("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
+      const out = execFileSync2("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
       const m = out.split(`
 `).map((l) => l.trim()).find((l) => l.length > 0);
       if (!m)
@@ -15433,7 +15862,7 @@ function getRunningHindsightPorts() {
 function getHindsightPortsFromEnv() {
   let env2;
   try {
-    env2 = execFileSync("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
+    env2 = execFileSync2("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
   } catch {
     return null;
   }
@@ -15453,14 +15882,24 @@ function getHindsightPortsFromEnv() {
 }
 function getHindsightStatus() {
   try {
-    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     const status = output.trim();
     return status.length > 0 ? status : null;
   } catch {
     return null;
   }
 }
-function generateHindsightComposeSnippet() {
+function generateHindsightComposeSnippet(llm) {
+  const { provider: llmProvider, model: llmModel } = resolveHindsightLlm(llm);
+  const perOpLlm = resolveHindsightPerOpLlm(llm);
+  const environment = [
+    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
+    `      - HINDSIGHT_API_LLM_PROVIDER=${llmProvider}`,
+    `      - HINDSIGHT_API_LLM_MODEL=${llmModel}`,
+    ...perOpLlm.map(([k, v]) => `      - ${k}=${v}`),
+    ...llmProvider === "claude-code" ? [`      - ANTHROPIC_MODEL=${llmModel}`] : [],
+    `      - HINDSIGHT_CP_DATAPLANE_API_URL=http://localhost:8888`
+  ];
   return [
     "services:",
     "  switchroom-hindsight:",
@@ -15470,10 +15909,7 @@ function generateHindsightComposeSnippet() {
     `      - "127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}:8888"`,
     '      - "127.0.0.1:19999:9999"',
     "    environment:",
-    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
-    "      - HINDSIGHT_API_LLM_PROVIDER=claude-code",
-    `      - HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
-    `      - ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    ...environment,
     `      - HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
     `      - HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
     `      - HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
@@ -15564,13 +16000,15 @@ async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFA
   atomicWriteFileSync2(configPath, tail, mode);
   return { added: true, reason: "added" };
 }
-var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true", HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150, HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4, HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8, HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 2, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 100, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD;
+var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_LITELLM_MODEL = "openrouter/google/gemini-3.1-flash-lite", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true", HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150, HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4, HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8, HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 2, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 100, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD, HINDSIGHT_LLM_OPS;
 var init_hindsight = __esm(() => {
+  init_model_command();
   HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
   HINDSIGHT_DEFAULT_API_BASE_URL = HINDSIGHT_DEFAULT_MCP_URL.replace(/\/mcp\/?$/, "");
   HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
   HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
   HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
+  HINDSIGHT_LLM_OPS = ["retain", "reflect", "consolidation"];
 });
 
 // src/memory/hindsight.ts
@@ -23797,7 +24235,7 @@ function parseSocketIdentity(socketPath, spec) {
 }
 
 // src/vault/broker/peercred.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { readFileSync as readFileSync10, readlinkSync as readlinkSync3, fstatSync } from "node:fs";
 function socketPathToIdentity(socketPath) {
   return parseSocketIdentity(socketPath, {
@@ -23970,7 +24408,7 @@ function identify(socketPath, socket, execFileSyncOverride) {
   if (process.platform !== "linux") {
     return null;
   }
-  const runner = execFileSyncOverride ?? execFileSync2;
+  const runner = execFileSyncOverride ?? execFileSync3;
   let pid = null;
   if (socket !== undefined) {
     const fd = fdFromSocket(socket);
@@ -24454,7 +24892,8 @@ function brokerIsComposeManaged() {
   return fs.existsSync(OPERATOR_SOCKET_PATH);
 }
 function vaultTokenFilePath(agentSlug) {
-  return join6(homedir4(), ".switchroom", "agents", agentSlug, ".vault-token");
+  const base = process.env.SWITCHROOM_AGENTS_DIR || join6(homedir4(), ".switchroom", "agents");
+  return join6(base, agentSlug, ".vault-token");
 }
 function readVaultTokenFile(agentSlug) {
   const filePath = vaultTokenFilePath(agentSlug);
@@ -25263,7 +25702,7 @@ var init_onboarding = __esm(() => {
 });
 
 // src/repos/bare-clone.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync13, mkdirSync as mkdirSync8 } from "node:fs";
 import { resolve as resolve9 } from "node:path";
 function bareClonePath(slug) {
@@ -25276,7 +25715,7 @@ function ensureBareClone(slug, url) {
   if (!existsSync13(clonePath)) {
     process.stderr.write(`[switchroom] repo "${slug}": cloning ${url} \u2026
 `);
-    execFileSync3("git", ["clone", "--bare", url, clonePath], {
+    execFileSync4("git", ["clone", "--bare", url, clonePath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     process.stderr.write(`[switchroom] repo "${slug}": bare clone ready at ${clonePath}
@@ -25285,7 +25724,7 @@ function ensureBareClone(slug, url) {
     process.stderr.write(`[switchroom] repo "${slug}": fetching ${clonePath} \u2026
 `);
     try {
-      execFileSync3("git", ["fetch", "--all"], {
+      execFileSync4("git", ["fetch", "--all"], {
         cwd: clonePath,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25302,7 +25741,7 @@ var init_bare_clone = __esm(() => {
 });
 
 // src/repos/agent-worktree.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync5 } from "node:fs";
 import { join as join9, resolve as resolve10 } from "node:path";
 function agentBranchName(agentName) {
@@ -25313,7 +25752,7 @@ function agentWorktreePath(agentDir, slug) {
 }
 function isWorktreeDirty(worktreePath) {
   try {
-    const out = execFileSync4("git", ["status", "--porcelain"], {
+    const out = execFileSync5("git", ["status", "--porcelain"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25325,7 +25764,7 @@ function isWorktreeDirty(worktreePath) {
 }
 function headShortSha(worktreePath) {
   try {
-    return execFileSync4("git", ["rev-parse", "--short", "HEAD"], {
+    return execFileSync5("git", ["rev-parse", "--short", "HEAD"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25336,7 +25775,7 @@ function headShortSha(worktreePath) {
 }
 function branchExistsInBare(bareClonePath2, branchName) {
   try {
-    execFileSync4("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
+    execFileSync5("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25347,7 +25786,7 @@ function branchExistsInBare(bareClonePath2, branchName) {
 }
 function resolveDefaultBranch(bareClonePath2) {
   try {
-    const out = execFileSync4("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+    const out = execFileSync5("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25365,12 +25804,12 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   if (!existsSync14(worktreePath)) {
     mkdirSync9(join9(agentDir, "work"), { recursive: true });
     if (branchExistsInBare(bareClonePath2, branch)) {
-      execFileSync4("git", ["worktree", "add", worktreePath, branch], {
+      execFileSync5("git", ["worktree", "add", worktreePath, branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
     } else {
-      execFileSync4("git", [
+      execFileSync5("git", [
         "worktree",
         "add",
         worktreePath,
@@ -25398,11 +25837,11 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     };
   }
   try {
-    execFileSync4("git", ["fetch", "origin"], {
+    execFileSync5("git", ["fetch", "origin"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
-    execFileSync4("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
+    execFileSync5("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25420,7 +25859,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   const branch = agentBranchName(agentName);
   if (existsSync14(worktreePath)) {
     try {
-      execFileSync4("git", ["worktree", "remove", "--force", worktreePath], {
+      execFileSync5("git", ["worktree", "remove", "--force", worktreePath], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25432,7 +25871,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   }
   if (branchExistsInBare(bareClonePath2, branch)) {
     try {
-      execFileSync4("git", ["branch", "-D", branch], {
+      execFileSync5("git", ["branch", "-D", branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25443,7 +25882,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     }
   }
   try {
-    execFileSync4("git", ["worktree", "prune"], {
+    execFileSync5("git", ["worktree", "prune"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25472,7 +25911,7 @@ import {
   unlinkSync as unlinkSync4
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { execSync, execFileSync as execFileSync5 } from "node:child_process";
+import { execSync, execFileSync as execFileSync6 } from "node:child_process";
 import { join as join10, resolve as resolve11 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 function prependReplyDiscipline(rendered, context) {
@@ -25606,13 +26045,13 @@ function alignAgentUid(name, agentDir, uid, opts = {}) {
 `));
   }
   try {
-    execFileSync5("chown", ["-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("chown", ["-R", `${uid}:${uid}`, ...paths], {
       stdio: ["ignore", "ignore", "pipe"]
     });
     return { chowned: true, paths };
   } catch {}
   try {
-    execFileSync5("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
       stdio: "inherit"
     });
     return { chowned: true, paths };
@@ -26260,7 +26699,7 @@ Thumbs.db
     execSync("git add -A", { cwd: workspaceDir, stdio: "pipe" });
     const userEmail = process.env.GIT_AUTHOR_EMAIL || "switchroom@localhost";
     const userName = process.env.GIT_AUTHOR_NAME || "Switchroom Agent";
-    execFileSync5("git", [
+    execFileSync6("git", [
       "-c",
       `user.email=${userEmail}`,
       "-c",
@@ -26298,11 +26737,12 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
   }
   const destPath = join10(agentDir, ".claude", "plugins", "hindsight-memory");
   const additionalBanks = resolveUsers(switchroomConfig, agentName).additionalBanks;
+  const retainConfig = resolveHindsightRetainConfig(switchroomConfig, agentName);
   let expectedSettings = null;
   try {
     const vendorSettingsPath = join10(sourcePath, "settings.json");
     if (existsSync15(vendorSettingsPath)) {
-      expectedSettings = renderHindsightSettingsOverrides(readFileSync13(vendorSettingsPath, "utf-8"), additionalBanks);
+      expectedSettings = renderHindsightSettingsOverrides(readFileSync13(vendorSettingsPath, "utf-8"), additionalBanks, retainConfig);
     }
   } catch {}
   const upToDate = dirContentEquals(sourcePath, destPath, expectedSettings != null ? { "settings.json": expectedSettings } : undefined);
@@ -26312,13 +26752,21 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
     }
     copyDirRecursive2(sourcePath, destPath);
   }
-  applyHindsightSettingsOverrides(destPath, additionalBanks);
+  applyHindsightSettingsOverrides(destPath, additionalBanks, retainConfig);
   const bankId = agentMemory?.collection ?? agentName;
   const mcpUrl = memory.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   const apiBaseUrl = mcpUrl.replace(/\/mcp\/?$/, "").replace(/\/$/, "");
   return { pluginDir: destPath, apiBaseUrl, bankId };
 }
-function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
+function resolveHindsightRetainConfig(switchroomConfig, agentName) {
+  const resolved = switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {}) : undefined;
+  const retain = resolved?.memory?.retain;
+  return {
+    everyNTurns: retain?.every_n_turns ?? HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS,
+    overlapTurns: retain?.overlap_turns ?? HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS
+  };
+}
+function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks, retainConfig) {
   const settingsPath = join10(pluginDestPath, "settings.json");
   if (!existsSync15(settingsPath))
     return;
@@ -26328,20 +26776,21 @@ function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
   } catch {
     return;
   }
-  const next = renderHindsightSettingsOverrides(raw, additionalBanks);
+  const next = renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig);
   if (next == null)
     return;
   writeFileSyncIfChanged(settingsPath, next);
 }
-function renderHindsightSettingsOverrides(raw, additionalBanks) {
+function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig) {
   let settings;
   try {
     settings = JSON.parse(raw);
   } catch {
     return null;
   }
-  settings.retainEveryNTurns = 1;
+  settings.retainEveryNTurns = retainConfig.everyNTurns;
   settings.retainMode = "chunked";
+  settings.retainOverlapTurns = retainConfig.overlapTurns;
   settings.recallMaxMemories = 8;
   settings.recallMinOverlap = 0.1;
   settings.recallTypes = ["world", "experience", "observation"];
@@ -26353,17 +26802,25 @@ function renderHindsightSettingsOverrides(raw, additionalBanks) {
   return JSON.stringify(settings, null, 2) + `
 `;
 }
+function resolvePermissionDefaultMode(agentConfig, switchroomConfig) {
+  const raw = agentConfig.permission_mode ?? switchroomConfig?.defaults?.permission_mode ?? SWITCHROOM_DEFAULT_PERMISSION_MODE;
+  if (VALID_SETTINGS_DEFAULT_MODES.includes(raw)) {
+    return raw;
+  }
+  console.warn(source_default.yellow(`[switchroom] permission_mode "${raw}" has no settings.json defaultMode ` + `equivalent \u2014 using "${SWITCHROOM_DEFAULT_PERMISSION_MODE}" for ` + `permissions.defaultMode (the --permission-mode CLI flag still carries "${raw}").`));
+  return SWITCHROOM_DEFAULT_PERMISSION_MODE;
+}
 function buildWorkspaceContext(args) {
   const {
     name,
     agentDir,
     agentConfig,
     telegramConfig,
+    switchroomConfig,
     switchroomConfigPath,
     topicId,
     tools,
     permissionAllow,
-    hasAllWildcard,
     resolvedBotToken,
     rawBotToken,
     hindsightAutoRecallEnabled,
@@ -26396,7 +26853,7 @@ function buildWorkspaceContext(args) {
       ...INTERACTIVE_TUI_FLEET_DENY_TOOLS
     ]),
     permissionAllow,
-    defaultModeAcceptEdits: hasAllWildcard,
+    defaultMode: resolvePermissionDefaultMode(agentConfig, switchroomConfig),
     memory: agentConfig.memory,
     model: agentConfig.model,
     mcpServers: agentConfig.mcp_servers ? filterMcpServers(agentConfig.mcp_servers) : agentConfig.mcp_servers,
@@ -27312,7 +27769,7 @@ function buildSettingsHooksBlock(p) {
       hooks: [
         {
           type: "command",
-          command: wrap("hook:workspace-dynamic", `${useInjectOnChange ? `env SWITCHROOM_INJECT_ON_CHANGE=1 ` : ""}bash "${join10(DOCKER_BIN_PATH, "workspace-dynamic-hook.sh")}"`),
+          command: wrap("hook:workspace-dynamic", `${useInjectOnChange ? "" : `env SWITCHROOM_INJECT_ON_CHANGE=0 `}bash "${join10(DOCKER_BIN_PATH, "workspace-dynamic-hook.sh")}"`),
           timeout: 5
         }
       ]
@@ -27662,11 +28119,7 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
     settings.permissions = settings.permissions ?? {};
     settings.permissions.allow = desiredAllow;
     settings.permissions.deny = desiredDeny;
-    if (hasAllWildcard) {
-      settings.permissions.defaultMode = "acceptEdits";
-    } else {
-      delete settings.permissions.defaultMode;
-    }
+    settings.permissions.defaultMode = resolvePermissionDefaultMode(agentConfig, switchroomConfig);
     const mcpServers = {};
     const hindsightEntry = getHindsightSettingsEntry(name, switchroomConfig);
     if (hindsightEntry) {
@@ -28470,7 +28923,7 @@ in doubt, shorter and plainer wins.
 
 Every turn that answers a user message ends with a user-visible \`reply\`
 \u2014 Telegram is all the user sees; your terminal output
-never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
+never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS = 3, HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS = 1, VALID_SETTINGS_DEFAULT_MODES, SWITCHROOM_DEFAULT_PERMISSION_MODE = "acceptEdits", DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
 var init_scaffold = __esm(() => {
   init_source();
   init_cron_unit_name();
@@ -28585,6 +29038,12 @@ var init_scaffold = __esm(() => {
     "Agent",
     "ExitPlanMode"
   ];
+  VALID_SETTINGS_DEFAULT_MODES = [
+    "default",
+    "acceptEdits",
+    "plan",
+    "bypassPermissions"
+  ];
   DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
   INTEGRATION_MCP_RESOLVERS = [
     {
@@ -28829,6 +29288,7 @@ function describeAgents(config, litellmConfirmedAgents) {
         baseUrl: resolved.litellm?.base_url ?? config.litellm?.base_url,
         smallFastModel: resolved.litellm?.small_fast_model ?? config.litellm?.small_fast_model ?? "claude-haiku-4-5-20251001"
       },
+      model: resolveMainModel(resolved.model),
       timezone: resolveTimezone(config, resolved, {
         onUtcFallback: () => {
           console.warn(`  \u26a0 timezone: no explicit timezone set and server detection resolved to UTC ` + `for agent "${name}" \u2014 cron schedules and the per-turn time hint will ` + `run in UTC. Add \`switchroom.timezone: "Region/City"\` (e.g. ` + `"Australia/Melbourne") to switchroom.yaml to silence this warning.`);
@@ -29261,7 +29721,7 @@ function emitAgentService(lines, a, imageTag, buildMode, buildContext, homePrefi
     const root = a.litellm.baseUrl.replace(/\/+$/, "");
     env2.SWITCHROOM_LITELLM = "1";
     env2.SWITCHROOM_LITELLM_BASE = root;
-    env2.ANTHROPIC_BASE_URL = `${root}/anthropic`;
+    env2.ANTHROPIC_BASE_URL = isClaudeModel(a.model) ? `${root}/anthropic` : root;
     env2.ANTHROPIC_SMALL_FAST_MODEL = a.litellm.smallFastModel;
   }
   env2.SWITCHROOM_VOICE_ENGINE = voiceEngine;
@@ -29359,6 +29819,8 @@ var init_compose = __esm(() => {
   init_schema();
   init_cron_routing();
   init_tier_selector();
+  init_scaffold();
+  init_model_command();
   init_merge();
   init_timezone();
   init_peercred();
@@ -29686,7 +30148,7 @@ var init_write_compose = __esm(() => {
 });
 
 // src/agents/tmux.ts
-import { execFileSync as execFileSync6 } from "node:child_process";
+import { execFileSync as execFileSync7 } from "node:child_process";
 function sendAgentInterrupt(opts) {
   const { agentName } = opts;
   const attempts = typeof opts.attempts === "number" && opts.attempts > 0 ? opts.attempts : 1;
@@ -29696,7 +30158,7 @@ function sendAgentInterrupt(opts) {
   let lastError = null;
   for (let i = 0;i < attempts; i++) {
     try {
-      execFileSync6("tmux", args, {
+      execFileSync7("tmux", args, {
         timeout: 3000,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -29737,7 +30199,7 @@ var init_compose_env = () => {};
 import { resolve as resolve13 } from "node:path";
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { execFileSync as execFileSync7 } from "node:child_process";
+import { execFileSync as execFileSync8 } from "node:child_process";
 function resolveSwitchroomHome(explicit) {
   if (explicit && explicit.length > 0)
     return explicit;
@@ -29768,7 +30230,7 @@ function bringUpAgentService(opts) {
   const dockerBin = opts.dockerBin ?? "docker";
   const stdio = opts.stdio ?? "inherit";
   for (const svc of ["vault-broker", "approval-kernel", "switchroom-auth-broker"]) {
-    execFileSync7(dockerBin, [
+    execFileSync8(dockerBin, [
       "compose",
       "-f",
       composePath,
@@ -29780,7 +30242,7 @@ function bringUpAgentService(opts) {
       svc
     ], { stdio });
   }
-  execFileSync7(dockerBin, [
+  execFileSync8(dockerBin, [
     "compose",
     "-f",
     composePath,
@@ -29799,7 +30261,7 @@ var init_docker_fleet = __esm(() => {
 });
 
 // src/agents/singleton-reconcile.ts
-import { execFileSync as execFileSync8 } from "node:child_process";
+import { execFileSync as execFileSync9 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
 function resolveSingletonServices(voiceEngine) {
   const engine = voiceEngine ?? loadHostCapabilities()?.voice.engine ?? "cloud";
@@ -29825,7 +30287,7 @@ function readPinnedSingletonImages(composeText, services = SINGLETON_SERVICES) {
 }
 function defaultInspectImage(dockerBin, container) {
   try {
-    const out = execFileSync8(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
+    const out = execFileSync9(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
     return out.length > 0 ? out : null;
   } catch {
     return null;
@@ -29851,7 +30313,7 @@ function detectSingletonDrift(deps) {
   });
 }
 function defaultRecreate(dockerBin, project, composeFile, service) {
-  execFileSync8(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
+  execFileSync9(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
 }
 function reconcileSingletons(deps) {
   const dockerBin = deps.dockerBin ?? "docker";
@@ -29894,7 +30356,7 @@ var init_singleton_reconcile = __esm(() => {
 });
 
 // src/agents/lifecycle.ts
-import { execFileSync as execFileSync9, spawn, spawnSync } from "node:child_process";
+import { execFileSync as execFileSync10, spawn, spawnSync } from "node:child_process";
 import { existsSync as existsSync20, mkdirSync as mkdirSync14, writeFileSync as writeFileSync7, renameSync as renameSync5, readFileSync as readFileSync17 } from "node:fs";
 import { resolve as resolve14, join as join14 } from "node:path";
 import { connect } from "node:net";
@@ -29925,7 +30387,7 @@ function buildCliRestartReason(opts) {
   if (!buildCommit)
     return "cli: restart";
   try {
-    const head = execFileSync9("git", ["rev-parse", "HEAD"], {
+    const head = execFileSync10("git", ["rev-parse", "HEAD"], {
       cwd: cwd ?? process.cwd(),
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -29936,7 +30398,7 @@ function buildCliRestartReason(opts) {
       return "cli: restart";
     let subject = "";
     try {
-      subject = execFileSync9("git", ["log", "-1", "--pretty=%s", head], {
+      subject = execFileSync10("git", ["log", "-1", "--pretty=%s", head], {
         cwd: cwd ?? process.cwd(),
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -29966,7 +30428,7 @@ function reconcileSingletonImages(log) {
 }
 function dockerSync(args) {
   try {
-    return execFileSync9("docker", args, {
+    return execFileSync10("docker", args, {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -30355,12 +30817,12 @@ var init_lifecycle = __esm(() => {
 });
 
 // src/auth/pane-ready-probe.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 function defaultPaneReadyDeps() {
   return {
     capturePane(sessionName) {
       try {
-        return execFileSync11("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
+        return execFileSync12("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
           encoding: "utf-8",
           stdio: ["pipe", "pipe", "pipe"]
         }).trim();
@@ -30641,7 +31103,7 @@ var init_accounts = __esm(() => {
 });
 
 // src/auth/manager.ts
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync13 } from "node:child_process";
 import {
   readFileSync as readFileSync22,
   readdirSync as readdirSync11,
@@ -30692,14 +31154,14 @@ function authSessionName(name, slot) {
   return `${base}-${slot.replace(/[^a-zA-Z0-9_.-]/g, "-")}`;
 }
 function tmux(args) {
-  return execFileSync12("tmux", args, {
+  return execFileSync13("tmux", args, {
     encoding: "utf-8",
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function tmuxSessionExists(sessionName) {
   try {
-    execFileSync12("tmux", ["has-session", "-t", sessionName], {
+    execFileSync13("tmux", ["has-session", "-t", sessionName], {
       stdio: ["pipe", "pipe", "pipe"]
     });
     return true;
@@ -31215,355 +31677,6 @@ function readQuarantineMarkerForAgent(agentsDir, name) {
 var QUARANTINE_FILENAME = "quarantine.json";
 var init_quarantine = () => {};
 
-// src/agents/pane-lock.ts
-function withPaneLock(key, fn) {
-  const tail = tails.get(key) ?? Promise.resolve();
-  const run = tail.then(() => fn());
-  const next = run.then(() => {}, () => {});
-  tails.set(key, next);
-  next.then(() => {
-    if (tails.get(key) === next)
-      tails.delete(key);
-  });
-  return run;
-}
-var tails;
-var init_pane_lock = __esm(() => {
-  tails = new Map;
-});
-
-// src/agents/inject.ts
-var exports_inject = {};
-__export(exports_inject, {
-  validateInjectCommand: () => validateInjectCommand,
-  normalizeInjectCommand: () => normalizeInjectCommand,
-  makeTmuxRunner: () => makeTmuxRunner,
-  isTuiChromeLine: () => isTuiChromeLine,
-  injectSlashCommandWith: () => injectSlashCommandWith,
-  injectSlashCommand: () => injectSlashCommand,
-  diffPane: () => diffPane,
-  dedupeInjectQueue: () => dedupeInjectQueue,
-  InjectError: () => InjectError,
-  INJECT_COMMANDS: () => INJECT_COMMANDS,
-  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
-  INJECT_BLOCKED: () => INJECT_BLOCKED,
-  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
-});
-import { execFileSync as execFileSync14 } from "node:child_process";
-function validateInjectCommand(command) {
-  if (typeof command !== "string" || command.trim().length === 0) {
-    throw new InjectError("invalid", "command is empty");
-  }
-  const trimmed = command.trim();
-  if (!trimmed.startsWith("/")) {
-    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
-  }
-  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
-  const blockedMeta = INJECT_BLOCKED.get(bare);
-  if (blockedMeta) {
-    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
-  }
-  if (!INJECT_COMMANDS.has(bare)) {
-    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
-    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
-  }
-  return bare;
-}
-function normalizeInjectCommand(command) {
-  return command.trim().replace(/\s+/g, " ").toLowerCase();
-}
-function dedupeInjectQueue(commands) {
-  const seen = new Set;
-  const out = [];
-  for (const raw of commands) {
-    if (typeof raw !== "string")
-      continue;
-    const key = normalizeInjectCommand(raw);
-    if (key.length === 0)
-      continue;
-    if (seen.has(key))
-      continue;
-    seen.add(key);
-    out.push(raw.trim());
-  }
-  return out;
-}
-function defaultSocketName(agentName) {
-  return `switchroom-${agentName}`;
-}
-function makeTmuxRunner(tmuxBin) {
-  return {
-    capture(socket, session) {
-      try {
-        return execFileSync14(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
-      } catch {
-        return null;
-      }
-    },
-    send(socket, session, args) {
-      const [subcmd, ...rest] = args;
-      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
-      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
-      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
-      execFileSync14(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
-    },
-    hasSession(socket, session) {
-      try {
-        execFileSync14(tmuxBin, ["-L", socket, "has-session", "-t", session], {
-          stdio: ["pipe", "pipe", "pipe"]
-        });
-        return true;
-      } catch {
-        return false;
-      }
-    }
-  };
-}
-function sleep2(ms) {
-  return new Promise((res) => setTimeout(res, ms));
-}
-function isTuiChromeLine(line) {
-  const t = line.trim();
-  if (t.length === 0)
-    return false;
-  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
-    return true;
-  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
-    return true;
-  if (/accept edits on/i.test(t))
-    return true;
-  if (/shift\+tab to cycle/i.test(t))
-    return true;
-  if (/for agents/i.test(t))
-    return true;
-  if (/\? for shortcuts/i.test(t))
-    return true;
-  if (/bypassing permissions/i.test(t))
-    return true;
-  if (t === "copy")
-    return true;
-  return false;
-}
-function diffPane(before, after, command) {
-  if (command) {
-    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    const lines = after.split(`
-`);
-    let anchorIdx = -1;
-    for (let i = lines.length - 1;i >= 0; i--) {
-      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
-        anchorIdx = i;
-        break;
-      }
-    }
-    if (anchorIdx >= 0) {
-      const tail = lines.slice(anchorIdx + 1);
-      const trimmed = [];
-      for (const raw of tail) {
-        const line = raw.trimEnd();
-        if (line.length === 0 && trimmed.length === 0)
-          continue;
-        if (isTuiChromeLine(line))
-          continue;
-        trimmed.push(line);
-      }
-      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
-        trimmed.pop();
-      }
-      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
-      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
-        trimmed.pop();
-      }
-      if (trimmed.length > 0) {
-        return { output: trimmed.join(`
-`), anchored: true };
-      }
-    }
-  }
-  const beforeSet = new Set(before.split(`
-`).map((l) => l.trimEnd()));
-  const newLines = [];
-  for (const raw of after.split(`
-`)) {
-    const line = raw.trimEnd();
-    if (line.length === 0)
-      continue;
-    if (beforeSet.has(line))
-      continue;
-    if (isTuiChromeLine(line))
-      continue;
-    newLines.push(line);
-  }
-  return { output: newLines.join(`
-`), anchored: false };
-}
-async function injectSlashCommand(agentName, command, opts = {}) {
-  validateInjectCommand(command);
-  const tmuxBin = opts.tmuxBin ?? "tmux";
-  const socket = opts.socketName ?? defaultSocketName(agentName);
-  const session = opts.sessionName ?? agentName;
-  const settleMs = opts.settleMs ?? 2000;
-  const timeoutMs = opts.timeoutMs ?? 5000;
-  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
-    socket,
-    session,
-    command: command.trim(),
-    settleMs,
-    timeoutMs
-  }));
-}
-async function injectSlashCommandWith(runner, args) {
-  const { socket, session, command, settleMs, timeoutMs } = args;
-  let bareVerb;
-  try {
-    bareVerb = validateInjectCommand(command);
-  } catch (err) {
-    if (err instanceof InjectError) {
-      return {
-        outcome: "failed",
-        output: "",
-        truncated: false,
-        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
-        meta: null,
-        errorCode: err.code,
-        errorMessage: err.message
-      };
-    }
-    throw err;
-  }
-  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
-  if (!runner.hasSession(socket, session)) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "session_missing",
-      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
-    };
-  }
-  const before = runner.capture(socket, session) ?? "";
-  try {
-    runner.send(socket, session, ["send-keys", "-l", command]);
-    runner.send(socket, session, ["send-keys", "Enter"]);
-  } catch (err) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "tmux_failed",
-      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
-    };
-  }
-  const start = Date.now();
-  let last = before;
-  let stableSince = null;
-  while (Date.now() - start < timeoutMs) {
-    await sleep2(POLL_INTERVAL_MS);
-    const cur = runner.capture(socket, session) ?? "";
-    if (cur === last && cur !== before) {
-      if (stableSince === null) {
-        stableSince = Date.now();
-      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
-        last = cur;
-        break;
-      }
-    } else {
-      stableSince = null;
-    }
-    last = cur;
-    if (Date.now() - start >= settleMs && cur !== before) {
-      break;
-    }
-  }
-  const { output: rawOutput, anchored } = diffPane(before, last, command);
-  let output = rawOutput;
-  let truncated = false;
-  const bytes = Buffer.byteLength(output, "utf-8");
-  if (bytes > OUTPUT_BYTE_CAP) {
-    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
-      output = output.slice(Math.floor(output.length * 0.1) + 1);
-    }
-    truncated = true;
-  }
-  if (meta?.dialog) {
-    try {
-      runner.send(socket, session, ["send-keys", "Escape"]);
-    } catch {}
-  }
-  if (output.trim().length === 0) {
-    return {
-      outcome: "ok_no_output",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      ...anchored ? {} : { diagnostic: "anchor_missing" }
-    };
-  }
-  return {
-    outcome: "ok",
-    output,
-    truncated,
-    command: bareVerb,
-    meta,
-    ...truncated ? { diagnostic: "truncated_output" } : {}
-  };
-}
-var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
-var init_inject = __esm(() => {
-  init_pane_lock();
-  INJECT_COMMANDS = new Map([
-    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true }],
-    ["/status", { description: "Show session status", expectsOutput: true, dialog: true }],
-    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true }],
-    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true }],
-    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true }],
-    ["/model", { description: "Open model picker", expectsOutput: true }],
-    [
-      "/clear",
-      {
-        description: "Clear session screen",
-        expectsOutput: false,
-        silentNote: "context cleared \u2014 fresh slate"
-      }
-    ],
-    [
-      "/compact",
-      {
-        description: "Compact conversation history",
-        expectsOutput: false,
-        silentNote: "compaction runs silently"
-      }
-    ]
-  ]);
-  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-  INJECT_BLOCKED = new Map([
-    ["/login", { reason: "would mutate auth state" }],
-    ["/logout", { reason: "would terminate the agent's auth session" }],
-    ["/exit", { reason: "would kill the agent process" }],
-    ["/quit", { reason: "would kill the agent process" }],
-    [
-      "/effort",
-      {
-        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-      }
-    ]
-  ]);
-  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-  InjectError = class InjectError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.name = "InjectError";
-      this.code = code;
-    }
-  };
-});
-
 // src/auth/broker/protocol.ts
 function encodeRequest2(req) {
   const line = JSON.stringify(RequestSchema2.parse(req)) + `
@@ -64552,8 +64665,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.17.10";
-var COMMIT_SHA = "d38372bf";
+var VERSION = "0.18.3";
+var COMMIT_SHA = "dbd8b112";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -64767,11 +64880,11 @@ function detectInFlight(opts) {
 async function waitUntilIdle(opts) {
   const pollMs = opts.pollMs ?? 2000;
   const clock = opts.now ?? Date.now;
-  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const deadline = clock() + opts.timeoutMs;
   let last = detectInFlight(opts);
   while (last.busy && clock() < deadline) {
-    await sleep(pollMs);
+    await sleep2(pollMs);
     last = detectInFlight(opts);
   }
   return last;
@@ -64883,7 +64996,7 @@ function spinner(message) {
 // src/agents/status.ts
 import { existsSync as existsSync23, readFileSync as readFileSync20, statSync as statSync11 } from "node:fs";
 import { join as join16 } from "node:path";
-import { execFileSync as execFileSync10 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
 import { readFileSync as readFileSync18, writeFileSync as writeFileSync8, renameSync as renameSync6, mkdirSync as mkdirSync15, existsSync as existsSync21, statSync as statSync10, readdirSync as readdirSync9 } from "node:fs";
@@ -65468,7 +65581,7 @@ async function buildAgentStatusReport(inputs) {
 async function waitForAgentReady(inputs, options = {}) {
   const timeoutMs = options.timeoutMs ?? 30000;
   const pollIntervalMs = options.pollIntervalMs ?? 750;
-  const sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep2 = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const now = options.now ?? Date.now;
   const startedAt = now();
   const deadline = startedAt + timeoutMs;
@@ -65483,7 +65596,7 @@ async function waitForAgentReady(inputs, options = {}) {
         notReady
       };
     }
-    await sleep(pollIntervalMs);
+    await sleep2(pollIntervalMs);
     report = await buildAgentStatusReport(inputs);
     notReady = readinessGaps(report);
   }
@@ -65560,14 +65673,14 @@ function readLastMessages(historyDbPath) {
     };
   }
   try {
-    const out = execFileSync10("bun", [
+    const out = execFileSync11("bun", [
       "-e",
       `const { Database } = require("bun:sqlite"); ` + `const db = new Database(${JSON.stringify(historyDbPath)}, { readonly: true }); ` + `const rows = db.prepare("SELECT role, MAX(ts) as ts FROM messages GROUP BY role").all(); ` + `for (const r of rows) console.log(r.role + "|" + r.ts); ` + `db.close();`
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
     return parseSqliteRoleTsOutput(out);
   } catch {}
   try {
-    const out = execFileSync10("sqlite3", [
+    const out = execFileSync11("sqlite3", [
       historyDbPath,
       "SELECT role, MAX(ts) FROM messages GROUP BY role;"
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
@@ -65679,7 +65792,7 @@ function escapeRegex(s) {
 }
 function readDockerContainer(containerName2) {
   try {
-    const out = execFileSync10("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
+    const out = execFileSync11("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
     const state = JSON.parse(out.trim());
     const active = state.Status === "running" ? "active" : state.Status === "restarting" ? "restarting" : "inactive";
     const pid = typeof state.Pid === "number" && state.Pid > 0 ? state.Pid : null;
@@ -65794,7 +65907,7 @@ async function pollForDmStart(token, timeoutMs = 120000) {
       const response = await fetch(url);
       data = await response.json();
     } catch {
-      await sleep(2000);
+      await sleep2(2000);
       continue;
     }
     if (data.ok && Array.isArray(data.result)) {
@@ -65810,11 +65923,11 @@ async function pollForDmStart(token, timeoutMs = 120000) {
         }
       }
     }
-    await sleep(2000);
+    await sleep2(2000);
   }
   throw new Error("Timed out waiting for /start DM");
 }
-function sleep(ms) {
+function sleep2(ms) {
   return new Promise((resolve17) => setTimeout(resolve17, ms));
 }
 
@@ -65958,7 +66071,7 @@ async function completeCreation(name, code, opts = {}) {
 // src/agents/add-orchestrator.ts
 import { resolve as resolve19, join as join19 } from "node:path";
 import { existsSync as existsSync28, rmSync as rmSync8, statSync as statSync15 } from "node:fs";
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync14 } from "node:child_process";
 init_onboarding();
 
 // src/setup/botfather-walkthrough.ts
@@ -66532,7 +66645,7 @@ function pruneBundledSkills(agentDir, keep, scope) {
 }
 function defaultIsUnitActive(unitName) {
   try {
-    const out = execFileSync13("systemctl", ["--user", "is-active", unitName], {
+    const out = execFileSync14("systemctl", ["--user", "is-active", unitName], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -74986,7 +75099,8 @@ class VaultBroker {
         return;
       }
       try {
-        const tokenDir = path3.join(os4.homedir(), ".switchroom", "agents", agent);
+        const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os4.homedir(), ".switchroom", "agents");
+        const tokenDir = path3.join(agentsDir, agent);
         mkdirSync24(tokenDir, { recursive: true });
         const tokenPath = path3.join(tokenDir, ".vault-token");
         const tmpPath = `${tokenPath}.tmp.${process.pid}`;
@@ -75050,7 +75164,8 @@ class VaultBroker {
       try {
         const row = this.grantsDb.query("SELECT agent_slug FROM vault_grants WHERE id = ?").get(id);
         if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
-          const tokenPath = path3.join(os4.homedir(), ".switchroom", "agents", row.agent_slug, ".vault-token");
+          const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os4.homedir(), ".switchroom", "agents");
+          const tokenPath = path3.join(agentsDir, row.agent_slug, ".vault-token");
           if (existsSync41(tokenPath)) {
             try {
               unlinkSync10(tokenPath);
@@ -78288,7 +78403,11 @@ async function resolveLiteLLMForHindsight(config) {
   const result = await getViaBrokerStructured("litellm/hindsight/api-key").catch(() => null);
   if (!result || result.kind !== "ok" || result.entry.kind !== "string")
     return;
-  return { baseUrl: topLiteLLM.base_url, apiKey: result.entry.value };
+  return {
+    baseUrl: topLiteLLM.base_url,
+    apiKey: result.entry.value,
+    model: config.memory?.config?.llm_model
+  };
 }
 function readRecallLog(agentDir, limit) {
   const path4 = join40(agentDir, ".claude", "plugins", "data", "hindsight-memory-inline", "state", "recall_log.jsonl");
@@ -78552,8 +78671,9 @@ Cross-agent reflection plan
     const provider = "claude-code";
     console.log(source_default.gray("  Starting Hindsight Docker container..."));
     try {
-      const litellmCfg = await resolveLiteLLMForHindsight(getConfig(program3));
-      startHindsight(ports, litellmCfg, opts.tag);
+      const hindsightConfig = getConfig(program3);
+      const litellmCfg = await resolveLiteLLMForHindsight(hindsightConfig);
+      startHindsight(ports, litellmCfg, opts.tag, hindsightConfig.hindsight?.llm);
       if (litellmCfg) {
         console.log(source_default.gray("  LiteLLM routing enabled for hindsight (--network host)."));
       }
@@ -78599,7 +78719,7 @@ Cross-agent reflection plan
     console.log(source_default.bold(`
 # Add this to your docker-compose.yml:
 `));
-    console.log(generateHindsightComposeSnippet());
+    console.log(generateHindsightComposeSnippet(getConfig(program3).hindsight?.llm));
     console.log();
   });
   memory.command("recall-log [agent]").description("Show recent auto-recall events (per-turn JSONL log) \u2014 see what was injected, when the cap fired, hit rate hints").option("-n, --limit <n>", "Tail the last N events per agent (default 20)", "20").option("--json", "Emit raw JSONL (one entry per line)").action(withConfigError(async (agent, opts) => {
@@ -83403,7 +83523,11 @@ async function resolveLiteLLMForHindsight2(config) {
   const result = await getViaBrokerStructured("litellm/hindsight/api-key").catch(() => null);
   if (!result || result.kind !== "ok" || result.entry.kind !== "string")
     return;
-  return { baseUrl: topLiteLLM.base_url, apiKey: result.entry.value };
+  return {
+    baseUrl: topLiteLLM.base_url,
+    apiKey: result.entry.value,
+    model: config.memory?.config?.llm_model
+  };
 }
 async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   stepHeader(6, "Memory backend", STEP_ACTIVE);
@@ -83495,7 +83619,7 @@ async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   const spin = spinner("Starting Hindsight Docker container...");
   try {
     const litellmCfg = await resolveLiteLLMForHindsight2(config);
-    startHindsight(ports, litellmCfg);
+    startHindsight(ports, litellmCfg, undefined, config.hindsight?.llm);
     if (litellmCfg) {
       console.log(source_default.gray("  LiteLLM routing enabled (--network host, ANTHROPIC_BASE_URL set)."));
     }