switchroom 0.17.10 → 0.18.6

package/dist/cli/switchroom.js

@@ -13542,7 +13542,7 @@ var init_zod = __esm(() => {
 function isValidTimezone(value) {
   return TIMEZONE_REGEX.test(value);
 }
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -13694,7 +13694,11 @@ var init_schema = __esm(() => {
       sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Per-speaker recall routing: a map of Telegram sender \u2192 extra " + "recall bank. When a message arrives, the agent also recalls the " + "speaker's bank (matched by Telegram username \u2014 a leading @ is " + "optional \u2014 or numeric user_id), merged " + "into its own results \u2014 so each trusted user gets their own " + "profile context. Additive recall scoping within the single " + "tenant: never an access boundary (who may drive an agent stays " + "the per-agent user assignment in `access.allowFrom`). Author the " + "banks via `switchroom memory profile`."),
       skip_trivial: exports_external.boolean().optional().describe("Skip recall on plausibly-stateless trivial turns (time/date/" + "greeting). Switchroom default true \u2014 saves the recall arm + " + "injected tokens on turns that never need memory, guarded so it " + "never skips a turn that references user/project/session state. " + "Set false to always run recall."),
       topic_filter_mode: exports_external.enum(["soft-preamble", "hard-filter"]).optional().describe("Supergroup-mode cross-topic memory behaviour. Default " + "(unset) \u2192 soft-preamble: recall returns memories from all " + "topics, and a 'Current topic: \u2026' preamble tells the model " + "to self-scope. hard-filter: drop any recalled memory whose " + "metadata.thread_id differs from the active inbound's topic. " + "Flip to hard-filter when the recall_log shows binding " + "failures (model surfacing the right memory but applying " + "it to the wrong topic).")
-    }).optional().describe("Auto-recall tuning knobs")
+    }).optional().describe("Auto-recall tuning knobs"),
+    retain: exports_external.object({
+      every_n_turns: exports_external.number().int().min(1).optional().describe("How often the Stop hook fires auto-retention, in turns. The " + "vendor plugin default is 10 (a short session can end before " + "retention ever fires); switchroom's scaffold default is 3. " + "Lower = more frequent, smaller retains + tighter crash " + "durability (at 1, every turn is retained before a restart can " + "lose it); higher = fewer, larger retains + less LLM churn. " + "Raised from the historical 1 to 3 because the local reasoning " + "consolidation model (Ollama gpt-oss-20b) ran away on the large " + "overlapping every-turn payloads. Set to 1 for the old " + "every-turn crash-durability guarantee. Min 1. Cascade: " + "per-field merge (agent wins over default)."),
+      overlap_turns: exports_external.number().int().min(0).optional().describe("Extra recent turns included in each chunked retain window on " + "top of `every_n_turns`, so window = overlap_turns + " + "every_n_turns recent turns. Vendor default is 2; switchroom's " + "scaffold default is 1 (smaller payloads for the local " + "reasoning consolidation model). Higher = more redundant " + "context re-sent per fire. Min 0. Cascade: per-field merge.")
+    }).optional().describe("Auto-retain (Stop-hook consolidation) cadence knobs")
   }).optional();
   HookEntrySchema = exports_external.object({
     command: exports_external.string().describe("Shell command to run. Supports ${CLAUDE_CONFIG_DIR} and ${CLAUDE_PLUGIN_ROOT} substitution."),
@@ -13872,6 +13876,21 @@ var init_schema = __esm(() => {
     small_fast_model: exports_external.string().optional().describe("Model id exported as ANTHROPIC_SMALL_FAST_MODEL for the claude CLI's " + "background/fast lane, e.g. 'claude-haiku-4-5-20251001'."),
     tags: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Extra key/value metadata tags attached to the provisioned LiteLLM " + "virtual key. Merged per-key across cascade layers (agent wins).")
   }).optional().describe("LiteLLM routing config \u2014 opt-in per-agent virtual-key auto-provisioning " + "+ routing env. Default OFF. See LiteLLMConfigSchema doc for the full flow.");
+  HindsightPerOpLlmSchema = exports_external.object({
+    model: exports_external.string().min(1).optional().describe("Per-op model (upstream `HINDSIGHT_API_<OP>_LLM_MODEL`). Absent \u2192 " + "inherit the global `hindsight.llm.model`."),
+    provider: exports_external.string().min(1).optional().describe("Per-op provider (upstream `HINDSIGHT_API_<OP>_LLM_PROVIDER`). " + "Absent \u2192 inherit the global `hindsight.llm.provider`."),
+    base_url: exports_external.string().min(1).optional().describe("Per-op base URL (upstream `HINDSIGHT_API_<OP>_LLM_BASE_URL`). " + "Optional passthrough; absent \u2192 inherit the global."),
+    api_key: exports_external.string().min(1).optional().describe("Per-op API key (upstream `HINDSIGHT_API_<OP>_LLM_API_KEY`). Literal " + "or `vault:` reference. Optional passthrough; absent \u2192 inherit global.")
+  }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback \u2014 switchroom emits only the vars set.");
+  HindsightConfigSchema = exports_external.object({
+    llm: exports_external.object({
+      provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
+      model: exports_external.string().min(1).optional().describe("Hindsight LLM model (upstream `HINDSIGHT_API_LLM_MODEL`). Defaults " + "to HINDSIGHT_DEFAULT_MODEL. Any model your LiteLLM proxy can route " + "is valid, e.g. `openrouter/z-ai/glm-5.2` when routing through the " + "fleet proxy. With provider=claude-code this value is ALSO exported " + "as `ANTHROPIC_MODEL` to the claude subprocess. Serves as the GLOBAL " + "default for every op absent a per-op override."),
+      retain: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `retain` LLM op (memory ingestion). Emits " + "`HINDSIGHT_API_RETAIN_LLM_*`. Absent \u2192 uses the global model/provider."),
+      reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent \u2192 uses global."),
+      consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent \u2192 global.")
+    }).optional().describe("LLM knob for the hindsight container. The flat `provider`/`model` set " + "the global default (backward-compatible); optional `retain`/`reflect`/" + "`consolidation` blocks override individual ops. All fields optional; " + "unset fields fall back to the hard-coded defaults.")
+  });
   MicrosoftWorkspaceConfigSchema = exports_external.object({
     microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL \u2014 omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
     microsoft_client_secret: exports_external.string().min(1).optional().describe("Microsoft OAuth client secret. Optional \u2014 public-client apps " + "(Mobile + Desktop platform with 'Allow public client flows' " + "enabled) work without a secret; confidential clients pass " + "one. Either literal or vault reference e.g. " + "'vault:microsoft-oauth-client-secret'."),
@@ -14120,6 +14139,7 @@ var init_schema = __esm(() => {
     config: exports_external.object({
       provider: exports_external.string().default("ollama").describe("Embedding provider (ollama, openai, anthropic)"),
       model: exports_external.string().optional().describe("Embedding model (e.g., 'nomic-embed-text')"),
+      llm_model: exports_external.string().optional().describe("LiteLLM model name for Hindsight's LLM ops (retain/reflect/" + "consolidation) when the top-level `litellm.enabled` carve-out is " + "on. Defaults to a cheap OpenRouter model (routed via LiteLLM's " + "model-mapped path, not the Anthropic OAuth pass-through) to keep " + "background memory-op cost off the Claude subscription quota. Set " + "to a `claude-*` model name to route it back through the OAuth " + "pass-through instead. Has no effect when litellm is disabled."),
       api_key: exports_external.string().optional().describe("API key or vault reference for embedding provider"),
       docker_service: exports_external.boolean().default(true).describe("Whether to include Hindsight in docker-compose"),
       url: exports_external.string().url("Hindsight URL must be a valid URL (no shell-special characters)").optional().describe("Hindsight MCP endpoint URL (e.g., http://localhost:18888/mcp/). Defaults to http://localhost:8888/mcp/.")
@@ -14185,7 +14205,8 @@ var init_schema = __esm(() => {
   UserSchema = exports_external.object({
     name: exports_external.string().optional().describe("Display name for the user."),
     telegram_ids: exports_external.array(exports_external.string()).min(1).describe("Telegram username(s) and/or numeric user id(s) identifying this user " + "(a leading @ is optional). Matched against the message sender for " + "per-speaker memory routing."),
-    profile_bank: exports_external.string().describe("Hindsight bank holding this user's memory profile (author via " + "`switchroom memory profile add <bank> ...`).")
+    profile_bank: exports_external.string().describe("Hindsight bank holding this user's memory profile (author via " + "`switchroom memory profile add <bank> ...`)."),
+    person_id: exports_external.string().optional().describe("Free-text display name projected into the inbound `<channel>` " + 'tag\'s `user` attribute (e.g. "Lisa") so an agent can greet by ' + "name instead of only seeing the raw Telegram id/username. NOT a " + "stable identity system \u2014 just a label. Resolution is boot-time-only " + "(no hot-reload; a config change needs an agent restart) and " + "chat-scoped (a resolved name is only shown in a chat/group the " + "person is actually a member of, per that chat's access.json " + "membership \u2014 never broadcast into every chat the agent operates " + "in). Keep this broadly safe to show, the same discipline as " + "picking a `profile_bank` name: there is no automated enforcement " + "that a `person_id` stays safe if a group's membership changes " + "later \u2014 see docs/configuration.md.")
   });
   SwitchroomConfigSchema = exports_external.object({
     switchroom: exports_external.object({
@@ -14197,6 +14218,7 @@ var init_schema = __esm(() => {
     telegram: TelegramConfigSchema,
     release: ReleaseBlock.optional().describe("Fleet-wide default release-channel pin / pointer for the update " + "flow. Either `channel` (dev|rc|latest) or `pin` (sha-<hex>|v<semver>) " + "\u2014 mutually exclusive. Per-agent `release` REPLACES this entirely."),
     memory: MemoryBackendConfigSchema.optional(),
+    hindsight: HindsightConfigSchema.optional().describe("Fleet-singleton Hindsight (memory backend) configuration. Currently " + "just the LLM knob (provider + model) used for retain/reflect/" + "consolidation. Both fields optional; when unset the container falls " + "back to provider=claude-code + the hard-coded HINDSIGHT_DEFAULT_MODEL " + "so nothing changes for operators who don't set it. Read at container " + "launch by startHindsight() (src/setup/hindsight.ts) \u2014 takes effect on " + "the next `switchroom apply` / `memory setup --recreate`."),
     vault: VaultConfigSchema.optional(),
     auth: exports_external.object({
       active: exports_external.string().min(1).optional().describe("Fleet-wide active Anthropic account label. Every agent without " + "an explicit `agent.auth.override` uses this account. See " + "docs/auth.md for the full model. Set by `switchroom auth use <label>`."),
@@ -14645,6 +14667,11 @@ function mergeAgentConfig(defaultsIn, agentIn) {
         continue;
       if (k === "recall" && base.recall && typeof v === "object" && v !== null && !Array.isArray(v)) {
         combined[k] = { ...base.recall, ...v };
+      } else if (k === "retain" && base.retain && typeof v === "object" && v !== null && !Array.isArray(v)) {
+        combined[k] = {
+          ...base.retain,
+          ...v
+        };
       } else if (k === "disposition" && base.disposition && typeof v === "object" && v !== null && !Array.isArray(v)) {
         combined[k] = {
           ...base.disposition,
@@ -15098,7 +15125,7 @@ function resolveAgentsDir(config) {
   if (override && override.length > 0 && override.startsWith("/")) {
     return override;
   }
-  return resolveDualPath(config.switchroom.agents_dir);
+  return resolveDualPath(config.switchroom.agents_dir || "~/.switchroom/agents");
 }
 function resolvePath(pathStr) {
   return resolveDualPath(pathStr);
@@ -15151,10 +15178,388 @@ function resolveUsers(config, agentName) {
   ]);
   return { senderBanks, additionalBanks };
 }
+function resolvePersonEntries(config) {
+  const users = config.users ?? {};
+  const entries = [];
+  for (const [key, u] of Object.entries(users)) {
+    if (!u.person_id)
+      continue;
+    entries.push({ key, person_id: u.person_id, telegram_ids: u.telegram_ids });
+  }
+  return entries;
+}
 var init_users = __esm(() => {
   init_merge();
 });
 
+// src/agents/pane-lock.ts
+function withPaneLock(key, fn) {
+  const tail = tails.get(key) ?? Promise.resolve();
+  const run = tail.then(() => fn());
+  const next = run.then(() => {}, () => {});
+  tails.set(key, next);
+  next.then(() => {
+    if (tails.get(key) === next)
+      tails.delete(key);
+  });
+  return run;
+}
+var tails;
+var init_pane_lock = __esm(() => {
+  tails = new Map;
+});
+
+// src/agents/inject.ts
+var exports_inject = {};
+__export(exports_inject, {
+  validateInjectCommand: () => validateInjectCommand,
+  normalizeInjectCommand: () => normalizeInjectCommand,
+  makeTmuxRunner: () => makeTmuxRunner,
+  isTuiChromeLine: () => isTuiChromeLine,
+  injectSlashCommandWith: () => injectSlashCommandWith,
+  injectSlashCommand: () => injectSlashCommand,
+  diffPane: () => diffPane,
+  dedupeInjectQueue: () => dedupeInjectQueue,
+  InjectError: () => InjectError,
+  INJECT_COMMANDS: () => INJECT_COMMANDS,
+  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
+  INJECT_BLOCKED: () => INJECT_BLOCKED,
+  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
+});
+import { execFileSync } from "node:child_process";
+function validateInjectCommand(command) {
+  if (typeof command !== "string" || command.trim().length === 0) {
+    throw new InjectError("invalid", "command is empty");
+  }
+  const trimmed = command.trim();
+  if (!trimmed.startsWith("/")) {
+    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
+  }
+  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
+  const blockedMeta = INJECT_BLOCKED.get(bare);
+  if (blockedMeta) {
+    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
+  }
+  if (!INJECT_COMMANDS.has(bare)) {
+    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
+    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
+  }
+  return bare;
+}
+function normalizeInjectCommand(command) {
+  return command.trim().replace(/\s+/g, " ").toLowerCase();
+}
+function dedupeInjectQueue(commands) {
+  const seen = new Set;
+  const out = [];
+  for (const raw of commands) {
+    if (typeof raw !== "string")
+      continue;
+    const key = normalizeInjectCommand(raw);
+    if (key.length === 0)
+      continue;
+    if (seen.has(key))
+      continue;
+    seen.add(key);
+    out.push(raw.trim());
+  }
+  return out;
+}
+function defaultSocketName(agentName) {
+  return `switchroom-${agentName}`;
+}
+function makeTmuxRunner(tmuxBin) {
+  return {
+    capture(socket, session) {
+      try {
+        return execFileSync(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+      } catch {
+        return null;
+      }
+    },
+    send(socket, session, args) {
+      const [subcmd, ...rest] = args;
+      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
+      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
+      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
+      execFileSync(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
+    },
+    hasSession(socket, session) {
+      try {
+        execFileSync(tmuxBin, ["-L", socket, "has-session", "-t", session], {
+          stdio: ["pipe", "pipe", "pipe"]
+        });
+        return true;
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+function sleep(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
+function isTuiChromeLine(line) {
+  const t = line.trim();
+  if (t.length === 0)
+    return false;
+  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
+    return true;
+  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
+    return true;
+  if (/accept edits on/i.test(t))
+    return true;
+  if (/shift\+tab to cycle/i.test(t))
+    return true;
+  if (/for agents/i.test(t))
+    return true;
+  if (/\? for shortcuts/i.test(t))
+    return true;
+  if (/bypassing permissions/i.test(t))
+    return true;
+  if (t === "copy")
+    return true;
+  return false;
+}
+function diffPane(before, after, command) {
+  if (command) {
+    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const lines = after.split(`
+`);
+    let anchorIdx = -1;
+    for (let i = lines.length - 1;i >= 0; i--) {
+      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
+        anchorIdx = i;
+        break;
+      }
+    }
+    if (anchorIdx >= 0) {
+      const tail = lines.slice(anchorIdx + 1);
+      const trimmed = [];
+      for (const raw of tail) {
+        const line = raw.trimEnd();
+        if (line.length === 0 && trimmed.length === 0)
+          continue;
+        if (isTuiChromeLine(line))
+          continue;
+        trimmed.push(line);
+      }
+      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
+        trimmed.pop();
+      }
+      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
+      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
+        trimmed.pop();
+      }
+      if (trimmed.length > 0) {
+        return { output: trimmed.join(`
+`), anchored: true };
+      }
+    }
+  }
+  const beforeSet = new Set(before.split(`
+`).map((l) => l.trimEnd()));
+  const newLines = [];
+  for (const raw of after.split(`
+`)) {
+    const line = raw.trimEnd();
+    if (line.length === 0)
+      continue;
+    if (beforeSet.has(line))
+      continue;
+    if (isTuiChromeLine(line))
+      continue;
+    newLines.push(line);
+  }
+  return { output: newLines.join(`
+`), anchored: false };
+}
+async function injectSlashCommand(agentName, command, opts = {}) {
+  validateInjectCommand(command);
+  const tmuxBin = opts.tmuxBin ?? "tmux";
+  const socket = opts.socketName ?? defaultSocketName(agentName);
+  const session = opts.sessionName ?? agentName;
+  const settleMs = opts.settleMs ?? 2000;
+  const timeoutMs = opts.timeoutMs ?? 5000;
+  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
+    socket,
+    session,
+    command: command.trim(),
+    settleMs,
+    timeoutMs
+  }));
+}
+async function injectSlashCommandWith(runner, args) {
+  const { socket, session, command, settleMs, timeoutMs } = args;
+  let bareVerb;
+  try {
+    bareVerb = validateInjectCommand(command);
+  } catch (err) {
+    if (err instanceof InjectError) {
+      return {
+        outcome: "failed",
+        output: "",
+        truncated: false,
+        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
+        meta: null,
+        errorCode: err.code,
+        errorMessage: err.message
+      };
+    }
+    throw err;
+  }
+  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
+  if (!runner.hasSession(socket, session)) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "session_missing",
+      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
+    };
+  }
+  const before = runner.capture(socket, session) ?? "";
+  try {
+    runner.send(socket, session, ["send-keys", "-l", command]);
+    runner.send(socket, session, ["send-keys", "Enter"]);
+  } catch (err) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "tmux_failed",
+      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const start = Date.now();
+  let last = before;
+  let stableSince = null;
+  while (Date.now() - start < timeoutMs) {
+    await sleep(POLL_INTERVAL_MS);
+    const cur = runner.capture(socket, session) ?? "";
+    if (cur === last && cur !== before) {
+      if (stableSince === null) {
+        stableSince = Date.now();
+      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
+        last = cur;
+        break;
+      }
+    } else {
+      stableSince = null;
+    }
+    last = cur;
+    if (Date.now() - start >= settleMs && cur !== before) {
+      break;
+    }
+  }
+  const { output: rawOutput, anchored } = diffPane(before, last, command);
+  let output = rawOutput;
+  let truncated = false;
+  const bytes = Buffer.byteLength(output, "utf-8");
+  if (bytes > OUTPUT_BYTE_CAP) {
+    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
+      output = output.slice(Math.floor(output.length * 0.1) + 1);
+    }
+    truncated = true;
+  }
+  if (meta?.dialog) {
+    try {
+      runner.send(socket, session, ["send-keys", "Escape"]);
+    } catch {}
+  }
+  if (output.trim().length === 0) {
+    return {
+      outcome: "ok_no_output",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      ...anchored ? {} : { diagnostic: "anchor_missing" }
+    };
+  }
+  return {
+    outcome: "ok",
+    output,
+    truncated,
+    command: bareVerb,
+    meta,
+    ...truncated ? { diagnostic: "truncated_output" } : {}
+  };
+}
+var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
+var init_inject = __esm(() => {
+  init_pane_lock();
+  INJECT_COMMANDS = new Map([
+    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true }],
+    ["/status", { description: "Show session status", expectsOutput: true, dialog: true }],
+    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true }],
+    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true }],
+    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true }],
+    ["/model", { description: "Open model picker", expectsOutput: true }],
+    [
+      "/clear",
+      {
+        description: "Clear session screen",
+        expectsOutput: false,
+        silentNote: "context cleared \u2014 fresh slate"
+      }
+    ],
+    [
+      "/compact",
+      {
+        description: "Compact conversation history",
+        expectsOutput: false,
+        silentNote: "compaction runs silently"
+      }
+    ]
+  ]);
+  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
+  INJECT_BLOCKED = new Map([
+    ["/login", { reason: "would mutate auth state" }],
+    ["/logout", { reason: "would terminate the agent's auth session" }],
+    ["/exit", { reason: "would kill the agent process" }],
+    ["/quit", { reason: "would kill the agent process" }],
+    [
+      "/effort",
+      {
+        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
+      }
+    ]
+  ]);
+  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
+  InjectError = class InjectError extends Error {
+    code;
+    constructor(code, message) {
+      super(message);
+      this.name = "InjectError";
+      this.code = code;
+    }
+  };
+});
+
+// src/agents/model-picker.ts
+var init_model_picker = __esm(() => {
+  init_inject();
+  init_pane_lock();
+});
+
+// telegram-plugin/gateway/model-command.ts
+function isClaudeModel(name) {
+  const lower = name.toLowerCase();
+  if (MODEL_ALIASES.includes(lower))
+    return true;
+  return lower.startsWith("claude-");
+}
+var MODEL_ALIASES;
+var init_model_command = __esm(() => {
+  init_model_picker();
+  MODEL_ALIASES = ["opus", "sonnet", "haiku", "fable", "default"];
+});
+
 // src/util/atomic.ts
 var exports_atomic = {};
 __export(exports_atomic, {
@@ -15223,7 +15628,7 @@ var init_atomic = __esm(() => {
 });
 
 // src/setup/hindsight.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { createServer } from "node:net";
 function hindsightImageRef(tag) {
   const t = tag?.trim();
@@ -15249,7 +15654,7 @@ function describePortHolder(port) {
   ];
   for (const [cmd, args] of probes) {
     try {
-      const out = execFileSync(cmd, args, {
+      const out = execFileSync2(cmd, args, {
         stdio: "pipe",
         encoding: "utf-8"
       }).trim();
@@ -15306,7 +15711,7 @@ async function pickHindsightPorts() {
 }
 function isDockerAvailable() {
   try {
-    execFileSync("docker", ["--version"], { stdio: "pipe" });
+    execFileSync2("docker", ["--version"], { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -15314,7 +15719,7 @@ function isDockerAvailable() {
 }
 function isHindsightRunning() {
   try {
-    const output = execFileSync("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
@@ -15322,24 +15727,54 @@ function isHindsightRunning() {
 }
 function isHindsightContainerExists() {
   try {
-    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
   }
 }
-function startHindsight(ports, litellm, imageTag) {
+function resolveHindsightPerOpLlm(llm) {
+  const out = [];
+  if (!llm)
+    return out;
+  for (const op of HINDSIGHT_LLM_OPS) {
+    const cfg = llm[op];
+    if (!cfg)
+      continue;
+    const prefix = `HINDSIGHT_API_${op.toUpperCase()}_LLM`;
+    const model = cfg.model?.trim();
+    const provider = cfg.provider?.trim();
+    const baseUrl = cfg.base_url?.trim();
+    const apiKey = cfg.api_key?.trim();
+    if (model)
+      out.push([`${prefix}_MODEL`, model]);
+    if (provider)
+      out.push([`${prefix}_PROVIDER`, provider]);
+    if (baseUrl)
+      out.push([`${prefix}_BASE_URL`, baseUrl]);
+    if (apiKey)
+      out.push([`${prefix}_API_KEY`, apiKey]);
+  }
+  return out;
+}
+function resolveHindsightLlm(llm, litellm) {
+  const provider = llm?.provider?.trim() || "claude-code";
+  const model = llm?.model?.trim() || (litellm ? litellm.model ?? HINDSIGHT_DEFAULT_LITELLM_MODEL : HINDSIGHT_DEFAULT_MODEL);
+  return { provider, model };
+}
+function startHindsight(ports, litellm, imageTag, llm) {
   const apiPort = ports?.apiPort ?? HINDSIGHT_DEFAULT_API_PORT;
   const uiPort = ports?.uiPort ?? HINDSIGHT_DEFAULT_UI_PORT;
+  const { provider: llmProvider, model: llmModel } = resolveHindsightLlm(llm, litellm);
+  const perOpLlm = resolveHindsightPerOpLlm(llm);
   const envArgs = [
     "-e",
     `HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
     "-e",
-    "HINDSIGHT_API_LLM_PROVIDER=claude-code",
+    `HINDSIGHT_API_LLM_PROVIDER=${llmProvider}`,
     "-e",
-    `HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
-    "-e",
-    `ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    `HINDSIGHT_API_LLM_MODEL=${llmModel}`,
+    ...perOpLlm.flatMap(([k, v]) => ["-e", `${k}=${v}`]),
     "-e",
     `HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
     "-e",
@@ -15361,8 +15796,13 @@ function startHindsight(ports, litellm, imageTag) {
     "-e",
     `HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`
   ];
+  if (llmProvider === "claude-code") {
+    envArgs.push("-e", `ANTHROPIC_MODEL=${llmModel}`);
+  }
   if (litellm) {
-    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${litellm.baseUrl.replace(/\/+$/, "")}/anthropic`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
+    const litellmRoot = litellm.baseUrl.replace(/\/+$/, "");
+    const anthropicBaseUrl = isClaudeModel(llmModel) ? `${litellmRoot}/anthropic` : litellmRoot;
+    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `HINDSIGHT_CP_DATAPLANE_API_URL=http://localhost:${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${anthropicBaseUrl}`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
 x-litellm-customer-id: hindsight
 x-litellm-tags: service:hindsight`);
   }
@@ -15394,25 +15834,25 @@ x-litellm-tags: service:hindsight`);
     args.push("-p", `127.0.0.1:${apiPort}:8888`, "-p", `127.0.0.1:${uiPort}:9999`);
   }
   args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, hindsightImageRef(imageTag));
-  execFileSync("docker", args, { stdio: "pipe" });
+  execFileSync2("docker", args, { stdio: "pipe" });
 }
 function stopHindsight() {
   try {
-    execFileSync("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync2("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
   try {
-    execFileSync("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync2("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
 }
 function pullHindsightImage(imageTag) {
-  execFileSync("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
+  execFileSync2("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
 }
 function getRunningHindsightPorts() {
   const CONTAINER_API_PORT = 8888;
   const CONTAINER_UI_PORT = 9999;
   const readPort = (containerPort) => {
     try {
-      const out = execFileSync("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
+      const out = execFileSync2("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
       const m = out.split(`
 `).map((l) => l.trim()).find((l) => l.length > 0);
       if (!m)
@@ -15433,7 +15873,7 @@ function getRunningHindsightPorts() {
 function getHindsightPortsFromEnv() {
   let env2;
   try {
-    env2 = execFileSync("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
+    env2 = execFileSync2("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
   } catch {
     return null;
   }
@@ -15453,14 +15893,24 @@ function getHindsightPortsFromEnv() {
 }
 function getHindsightStatus() {
   try {
-    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     const status = output.trim();
     return status.length > 0 ? status : null;
   } catch {
     return null;
   }
 }
-function generateHindsightComposeSnippet() {
+function generateHindsightComposeSnippet(llm) {
+  const { provider: llmProvider, model: llmModel } = resolveHindsightLlm(llm);
+  const perOpLlm = resolveHindsightPerOpLlm(llm);
+  const environment = [
+    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
+    `      - HINDSIGHT_API_LLM_PROVIDER=${llmProvider}`,
+    `      - HINDSIGHT_API_LLM_MODEL=${llmModel}`,
+    ...perOpLlm.map(([k, v]) => `      - ${k}=${v}`),
+    ...llmProvider === "claude-code" ? [`      - ANTHROPIC_MODEL=${llmModel}`] : [],
+    `      - HINDSIGHT_CP_DATAPLANE_API_URL=http://localhost:8888`
+  ];
   return [
     "services:",
     "  switchroom-hindsight:",
@@ -15470,10 +15920,7 @@ function generateHindsightComposeSnippet() {
     `      - "127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}:8888"`,
     '      - "127.0.0.1:19999:9999"',
     "    environment:",
-    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
-    "      - HINDSIGHT_API_LLM_PROVIDER=claude-code",
-    `      - HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
-    `      - ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    ...environment,
     `      - HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
     `      - HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
     `      - HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
@@ -15564,13 +16011,15 @@ async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFA
   atomicWriteFileSync2(configPath, tail, mode);
   return { added: true, reason: "added" };
 }
-var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true", HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150, HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4, HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8, HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 2, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 100, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD;
+var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_LITELLM_MODEL = "openrouter/google/gemini-3.1-flash-lite", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true", HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150, HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4, HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8, HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 2, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 100, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD, HINDSIGHT_LLM_OPS;
 var init_hindsight = __esm(() => {
+  init_model_command();
   HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
   HINDSIGHT_DEFAULT_API_BASE_URL = HINDSIGHT_DEFAULT_MCP_URL.replace(/\/mcp\/?$/, "");
   HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
   HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
   HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
+  HINDSIGHT_LLM_OPS = ["retain", "reflect", "consolidation"];
 });
 
 // src/memory/hindsight.ts
@@ -23797,7 +24246,7 @@ function parseSocketIdentity(socketPath, spec) {
 }
 
 // src/vault/broker/peercred.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { readFileSync as readFileSync10, readlinkSync as readlinkSync3, fstatSync } from "node:fs";
 function socketPathToIdentity(socketPath) {
   return parseSocketIdentity(socketPath, {
@@ -23970,7 +24419,7 @@ function identify(socketPath, socket, execFileSyncOverride) {
   if (process.platform !== "linux") {
     return null;
   }
-  const runner = execFileSyncOverride ?? execFileSync2;
+  const runner = execFileSyncOverride ?? execFileSync3;
   let pid = null;
   if (socket !== undefined) {
     const fd = fdFromSocket(socket);
@@ -24454,7 +24903,8 @@ function brokerIsComposeManaged() {
   return fs.existsSync(OPERATOR_SOCKET_PATH);
 }
 function vaultTokenFilePath(agentSlug) {
-  return join6(homedir4(), ".switchroom", "agents", agentSlug, ".vault-token");
+  const base = process.env.SWITCHROOM_AGENTS_DIR || join6(homedir4(), ".switchroom", "agents");
+  return join6(base, agentSlug, ".vault-token");
 }
 function readVaultTokenFile(agentSlug) {
   const filePath = vaultTokenFilePath(agentSlug);
@@ -25263,7 +25713,7 @@ var init_onboarding = __esm(() => {
 });
 
 // src/repos/bare-clone.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync13, mkdirSync as mkdirSync8 } from "node:fs";
 import { resolve as resolve9 } from "node:path";
 function bareClonePath(slug) {
@@ -25276,7 +25726,7 @@ function ensureBareClone(slug, url) {
   if (!existsSync13(clonePath)) {
     process.stderr.write(`[switchroom] repo "${slug}": cloning ${url} \u2026
 `);
-    execFileSync3("git", ["clone", "--bare", url, clonePath], {
+    execFileSync4("git", ["clone", "--bare", url, clonePath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     process.stderr.write(`[switchroom] repo "${slug}": bare clone ready at ${clonePath}
@@ -25285,7 +25735,7 @@ function ensureBareClone(slug, url) {
     process.stderr.write(`[switchroom] repo "${slug}": fetching ${clonePath} \u2026
 `);
     try {
-      execFileSync3("git", ["fetch", "--all"], {
+      execFileSync4("git", ["fetch", "--all"], {
         cwd: clonePath,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25302,7 +25752,7 @@ var init_bare_clone = __esm(() => {
 });
 
 // src/repos/agent-worktree.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync5 } from "node:fs";
 import { join as join9, resolve as resolve10 } from "node:path";
 function agentBranchName(agentName) {
@@ -25313,7 +25763,7 @@ function agentWorktreePath(agentDir, slug) {
 }
 function isWorktreeDirty(worktreePath) {
   try {
-    const out = execFileSync4("git", ["status", "--porcelain"], {
+    const out = execFileSync5("git", ["status", "--porcelain"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25325,7 +25775,7 @@ function isWorktreeDirty(worktreePath) {
 }
 function headShortSha(worktreePath) {
   try {
-    return execFileSync4("git", ["rev-parse", "--short", "HEAD"], {
+    return execFileSync5("git", ["rev-parse", "--short", "HEAD"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25336,7 +25786,7 @@ function headShortSha(worktreePath) {
 }
 function branchExistsInBare(bareClonePath2, branchName) {
   try {
-    execFileSync4("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
+    execFileSync5("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25347,7 +25797,7 @@ function branchExistsInBare(bareClonePath2, branchName) {
 }
 function resolveDefaultBranch(bareClonePath2) {
   try {
-    const out = execFileSync4("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+    const out = execFileSync5("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -25365,12 +25815,12 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   if (!existsSync14(worktreePath)) {
     mkdirSync9(join9(agentDir, "work"), { recursive: true });
     if (branchExistsInBare(bareClonePath2, branch)) {
-      execFileSync4("git", ["worktree", "add", worktreePath, branch], {
+      execFileSync5("git", ["worktree", "add", worktreePath, branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
     } else {
-      execFileSync4("git", [
+      execFileSync5("git", [
         "worktree",
         "add",
         worktreePath,
@@ -25398,11 +25848,11 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     };
   }
   try {
-    execFileSync4("git", ["fetch", "origin"], {
+    execFileSync5("git", ["fetch", "origin"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
-    execFileSync4("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
+    execFileSync5("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25420,7 +25870,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   const branch = agentBranchName(agentName);
   if (existsSync14(worktreePath)) {
     try {
-      execFileSync4("git", ["worktree", "remove", "--force", worktreePath], {
+      execFileSync5("git", ["worktree", "remove", "--force", worktreePath], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25432,7 +25882,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   }
   if (branchExistsInBare(bareClonePath2, branch)) {
     try {
-      execFileSync4("git", ["branch", "-D", branch], {
+      execFileSync5("git", ["branch", "-D", branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -25443,7 +25893,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     }
   }
   try {
-    execFileSync4("git", ["worktree", "prune"], {
+    execFileSync5("git", ["worktree", "prune"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -25472,7 +25922,7 @@ import {
   unlinkSync as unlinkSync4
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { execSync, execFileSync as execFileSync5 } from "node:child_process";
+import { execSync, execFileSync as execFileSync6 } from "node:child_process";
 import { join as join10, resolve as resolve11 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 function prependReplyDiscipline(rendered, context) {
@@ -25606,13 +26056,13 @@ function alignAgentUid(name, agentDir, uid, opts = {}) {
 `));
   }
   try {
-    execFileSync5("chown", ["-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("chown", ["-R", `${uid}:${uid}`, ...paths], {
       stdio: ["ignore", "ignore", "pipe"]
     });
     return { chowned: true, paths };
   } catch {}
   try {
-    execFileSync5("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
       stdio: "inherit"
     });
     return { chowned: true, paths };
@@ -26260,7 +26710,7 @@ Thumbs.db
     execSync("git add -A", { cwd: workspaceDir, stdio: "pipe" });
     const userEmail = process.env.GIT_AUTHOR_EMAIL || "switchroom@localhost";
     const userName = process.env.GIT_AUTHOR_NAME || "Switchroom Agent";
-    execFileSync5("git", [
+    execFileSync6("git", [
       "-c",
       `user.email=${userEmail}`,
       "-c",
@@ -26298,11 +26748,12 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
   }
   const destPath = join10(agentDir, ".claude", "plugins", "hindsight-memory");
   const additionalBanks = resolveUsers(switchroomConfig, agentName).additionalBanks;
+  const retainConfig = resolveHindsightRetainConfig(switchroomConfig, agentName);
   let expectedSettings = null;
   try {
     const vendorSettingsPath = join10(sourcePath, "settings.json");
     if (existsSync15(vendorSettingsPath)) {
-      expectedSettings = renderHindsightSettingsOverrides(readFileSync13(vendorSettingsPath, "utf-8"), additionalBanks);
+      expectedSettings = renderHindsightSettingsOverrides(readFileSync13(vendorSettingsPath, "utf-8"), additionalBanks, retainConfig);
     }
   } catch {}
   const upToDate = dirContentEquals(sourcePath, destPath, expectedSettings != null ? { "settings.json": expectedSettings } : undefined);
@@ -26312,13 +26763,21 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
     }
     copyDirRecursive2(sourcePath, destPath);
   }
-  applyHindsightSettingsOverrides(destPath, additionalBanks);
+  applyHindsightSettingsOverrides(destPath, additionalBanks, retainConfig);
   const bankId = agentMemory?.collection ?? agentName;
   const mcpUrl = memory.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   const apiBaseUrl = mcpUrl.replace(/\/mcp\/?$/, "").replace(/\/$/, "");
   return { pluginDir: destPath, apiBaseUrl, bankId };
 }
-function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
+function resolveHindsightRetainConfig(switchroomConfig, agentName) {
+  const resolved = switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {}) : undefined;
+  const retain = resolved?.memory?.retain;
+  return {
+    everyNTurns: retain?.every_n_turns ?? HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS,
+    overlapTurns: retain?.overlap_turns ?? HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS
+  };
+}
+function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks, retainConfig) {
   const settingsPath = join10(pluginDestPath, "settings.json");
   if (!existsSync15(settingsPath))
     return;
@@ -26328,20 +26787,21 @@ function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks) {
   } catch {
     return;
   }
-  const next = renderHindsightSettingsOverrides(raw, additionalBanks);
+  const next = renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig);
   if (next == null)
     return;
   writeFileSyncIfChanged(settingsPath, next);
 }
-function renderHindsightSettingsOverrides(raw, additionalBanks) {
+function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig) {
   let settings;
   try {
     settings = JSON.parse(raw);
   } catch {
     return null;
   }
-  settings.retainEveryNTurns = 1;
+  settings.retainEveryNTurns = retainConfig.everyNTurns;
   settings.retainMode = "chunked";
+  settings.retainOverlapTurns = retainConfig.overlapTurns;
   settings.recallMaxMemories = 8;
   settings.recallMinOverlap = 0.1;
   settings.recallTypes = ["world", "experience", "observation"];
@@ -26353,17 +26813,25 @@ function renderHindsightSettingsOverrides(raw, additionalBanks) {
   return JSON.stringify(settings, null, 2) + `
 `;
 }
+function resolvePermissionDefaultMode(agentConfig, switchroomConfig) {
+  const raw = agentConfig.permission_mode ?? switchroomConfig?.defaults?.permission_mode ?? SWITCHROOM_DEFAULT_PERMISSION_MODE;
+  if (VALID_SETTINGS_DEFAULT_MODES.includes(raw)) {
+    return raw;
+  }
+  console.warn(source_default.yellow(`[switchroom] permission_mode "${raw}" has no settings.json defaultMode ` + `equivalent \u2014 using "${SWITCHROOM_DEFAULT_PERMISSION_MODE}" for ` + `permissions.defaultMode (the --permission-mode CLI flag still carries "${raw}").`));
+  return SWITCHROOM_DEFAULT_PERMISSION_MODE;
+}
 function buildWorkspaceContext(args) {
   const {
     name,
     agentDir,
     agentConfig,
     telegramConfig,
+    switchroomConfig,
     switchroomConfigPath,
     topicId,
     tools,
     permissionAllow,
-    hasAllWildcard,
     resolvedBotToken,
     rawBotToken,
     hindsightAutoRecallEnabled,
@@ -26396,7 +26864,7 @@ function buildWorkspaceContext(args) {
       ...INTERACTIVE_TUI_FLEET_DENY_TOOLS
     ]),
     permissionAllow,
-    defaultModeAcceptEdits: hasAllWildcard,
+    defaultMode: resolvePermissionDefaultMode(agentConfig, switchroomConfig),
     memory: agentConfig.memory,
     model: agentConfig.model,
     mcpServers: agentConfig.mcp_servers ? filterMcpServers(agentConfig.mcp_servers) : agentConfig.mcp_servers,
@@ -26903,6 +27371,7 @@ This file is auto-maintained. Do not edit manually.
   }, created, skipped, 384);
   writeIfMissing(join10(agentDir, "telegram", "access.json"), () => buildAccessJson2(agentConfig, telegramConfig, topicId, userId), created, skipped, 384);
   reconcileConfiguredGroup(join10(agentDir, "telegram", "access.json"), agentConfig, telegramConfig);
+  writeFileSyncIfChanged(join10(agentDir, "telegram", "people.json"), buildPeopleJson(switchroomConfig), 384);
   if (agentConfig.subagents) {
     const agentsDir2 = join10(agentDir, ".claude", "agents");
     mkdirSync10(agentsDir2, { recursive: true });
@@ -27312,7 +27781,7 @@ function buildSettingsHooksBlock(p) {
       hooks: [
         {
           type: "command",
-          command: wrap("hook:workspace-dynamic", `${useInjectOnChange ? `env SWITCHROOM_INJECT_ON_CHANGE=1 ` : ""}bash "${join10(DOCKER_BIN_PATH, "workspace-dynamic-hook.sh")}"`),
+          command: wrap("hook:workspace-dynamic", `${useInjectOnChange ? "" : `env SWITCHROOM_INJECT_ON_CHANGE=0 `}bash "${join10(DOCKER_BIN_PATH, "workspace-dynamic-hook.sh")}"`),
           timeout: 5
         }
       ]
@@ -27662,11 +28131,7 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
     settings.permissions = settings.permissions ?? {};
     settings.permissions.allow = desiredAllow;
     settings.permissions.deny = desiredDeny;
-    if (hasAllWildcard) {
-      settings.permissions.defaultMode = "acceptEdits";
-    } else {
-      delete settings.permissions.defaultMode;
-    }
+    settings.permissions.defaultMode = resolvePermissionDefaultMode(agentConfig, switchroomConfig);
     const mcpServers = {};
     const hindsightEntry = getHindsightSettingsEntry(name, switchroomConfig);
     if (hindsightEntry) {
@@ -28129,6 +28594,11 @@ function reconcileConfiguredGroup(accessPath, agentConfig, telegramConfig) {
   renameSync4(tmp, accessPath);
   console.log(source_default.green(`  registered supergroup ${forumChatId} in access.json ` + `(responds to all topics; requireMention=false)`));
 }
+function buildPeopleJson(switchroomConfig) {
+  const entries = switchroomConfig ? resolvePersonEntries(switchroomConfig) : [];
+  return JSON.stringify({ entries }, null, 2) + `
+`;
+}
 function buildAccessJson2(agentConfig, telegramConfig, resolvedTopicId, userId) {
   const allowFrom = userId ? [String(userId)] : [];
   if (allowFrom.length === 0) {
@@ -28470,7 +28940,7 @@ in doubt, shorter and plainer wins.
 
 Every turn that answers a user message ends with a user-visible \`reply\`
 \u2014 Telegram is all the user sees; your terminal output
-never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
+never reaches them.`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS = 3, HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS = 1, VALID_SETTINGS_DEFAULT_MODES, SWITCHROOM_DEFAULT_PERMISSION_MODE = "acceptEdits", DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", INTEGRATION_MCP_RESOLVERS;
 var init_scaffold = __esm(() => {
   init_source();
   init_cron_unit_name();
@@ -28585,6 +29055,12 @@ var init_scaffold = __esm(() => {
     "Agent",
     "ExitPlanMode"
   ];
+  VALID_SETTINGS_DEFAULT_MODES = [
+    "default",
+    "acceptEdits",
+    "plan",
+    "bypassPermissions"
+  ];
   DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
   INTEGRATION_MCP_RESOLVERS = [
     {
@@ -28829,6 +29305,7 @@ function describeAgents(config, litellmConfirmedAgents) {
         baseUrl: resolved.litellm?.base_url ?? config.litellm?.base_url,
         smallFastModel: resolved.litellm?.small_fast_model ?? config.litellm?.small_fast_model ?? "claude-haiku-4-5-20251001"
       },
+      model: resolveMainModel(resolved.model),
       timezone: resolveTimezone(config, resolved, {
         onUtcFallback: () => {
           console.warn(`  \u26a0 timezone: no explicit timezone set and server detection resolved to UTC ` + `for agent "${name}" \u2014 cron schedules and the per-turn time hint will ` + `run in UTC. Add \`switchroom.timezone: "Region/City"\` (e.g. ` + `"Australia/Melbourne") to switchroom.yaml to silence this warning.`);
@@ -29261,7 +29738,7 @@ function emitAgentService(lines, a, imageTag, buildMode, buildContext, homePrefi
     const root = a.litellm.baseUrl.replace(/\/+$/, "");
     env2.SWITCHROOM_LITELLM = "1";
     env2.SWITCHROOM_LITELLM_BASE = root;
-    env2.ANTHROPIC_BASE_URL = `${root}/anthropic`;
+    env2.ANTHROPIC_BASE_URL = isClaudeModel(a.model) ? `${root}/anthropic` : root;
     env2.ANTHROPIC_SMALL_FAST_MODEL = a.litellm.smallFastModel;
   }
   env2.SWITCHROOM_VOICE_ENGINE = voiceEngine;
@@ -29359,6 +29836,8 @@ var init_compose = __esm(() => {
   init_schema();
   init_cron_routing();
   init_tier_selector();
+  init_scaffold();
+  init_model_command();
   init_merge();
   init_timezone();
   init_peercred();
@@ -29686,7 +30165,7 @@ var init_write_compose = __esm(() => {
 });
 
 // src/agents/tmux.ts
-import { execFileSync as execFileSync6 } from "node:child_process";
+import { execFileSync as execFileSync7 } from "node:child_process";
 function sendAgentInterrupt(opts) {
   const { agentName } = opts;
   const attempts = typeof opts.attempts === "number" && opts.attempts > 0 ? opts.attempts : 1;
@@ -29696,7 +30175,7 @@ function sendAgentInterrupt(opts) {
   let lastError = null;
   for (let i = 0;i < attempts; i++) {
     try {
-      execFileSync6("tmux", args, {
+      execFileSync7("tmux", args, {
         timeout: 3000,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -29737,7 +30216,7 @@ var init_compose_env = () => {};
 import { resolve as resolve13 } from "node:path";
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { execFileSync as execFileSync7 } from "node:child_process";
+import { execFileSync as execFileSync8 } from "node:child_process";
 function resolveSwitchroomHome(explicit) {
   if (explicit && explicit.length > 0)
     return explicit;
@@ -29768,7 +30247,7 @@ function bringUpAgentService(opts) {
   const dockerBin = opts.dockerBin ?? "docker";
   const stdio = opts.stdio ?? "inherit";
   for (const svc of ["vault-broker", "approval-kernel", "switchroom-auth-broker"]) {
-    execFileSync7(dockerBin, [
+    execFileSync8(dockerBin, [
       "compose",
       "-f",
       composePath,
@@ -29780,7 +30259,7 @@ function bringUpAgentService(opts) {
       svc
     ], { stdio });
   }
-  execFileSync7(dockerBin, [
+  execFileSync8(dockerBin, [
     "compose",
     "-f",
     composePath,
@@ -29799,7 +30278,7 @@ var init_docker_fleet = __esm(() => {
 });
 
 // src/agents/singleton-reconcile.ts
-import { execFileSync as execFileSync8 } from "node:child_process";
+import { execFileSync as execFileSync9 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
 function resolveSingletonServices(voiceEngine) {
   const engine = voiceEngine ?? loadHostCapabilities()?.voice.engine ?? "cloud";
@@ -29825,7 +30304,7 @@ function readPinnedSingletonImages(composeText, services = SINGLETON_SERVICES) {
 }
 function defaultInspectImage(dockerBin, container) {
   try {
-    const out = execFileSync8(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
+    const out = execFileSync9(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
     return out.length > 0 ? out : null;
   } catch {
     return null;
@@ -29851,7 +30330,7 @@ function detectSingletonDrift(deps) {
   });
 }
 function defaultRecreate(dockerBin, project, composeFile, service) {
-  execFileSync8(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
+  execFileSync9(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
 }
 function reconcileSingletons(deps) {
   const dockerBin = deps.dockerBin ?? "docker";
@@ -29894,7 +30373,7 @@ var init_singleton_reconcile = __esm(() => {
 });
 
 // src/agents/lifecycle.ts
-import { execFileSync as execFileSync9, spawn, spawnSync } from "node:child_process";
+import { execFileSync as execFileSync10, spawn, spawnSync } from "node:child_process";
 import { existsSync as existsSync20, mkdirSync as mkdirSync14, writeFileSync as writeFileSync7, renameSync as renameSync5, readFileSync as readFileSync17 } from "node:fs";
 import { resolve as resolve14, join as join14 } from "node:path";
 import { connect } from "node:net";
@@ -29925,7 +30404,7 @@ function buildCliRestartReason(opts) {
   if (!buildCommit)
     return "cli: restart";
   try {
-    const head = execFileSync9("git", ["rev-parse", "HEAD"], {
+    const head = execFileSync10("git", ["rev-parse", "HEAD"], {
       cwd: cwd ?? process.cwd(),
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -29936,7 +30415,7 @@ function buildCliRestartReason(opts) {
       return "cli: restart";
     let subject = "";
     try {
-      subject = execFileSync9("git", ["log", "-1", "--pretty=%s", head], {
+      subject = execFileSync10("git", ["log", "-1", "--pretty=%s", head], {
         cwd: cwd ?? process.cwd(),
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -29966,7 +30445,7 @@ function reconcileSingletonImages(log) {
 }
 function dockerSync(args) {
   try {
-    return execFileSync9("docker", args, {
+    return execFileSync10("docker", args, {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -30355,12 +30834,12 @@ var init_lifecycle = __esm(() => {
 });
 
 // src/auth/pane-ready-probe.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 function defaultPaneReadyDeps() {
   return {
     capturePane(sessionName) {
       try {
-        return execFileSync11("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
+        return execFileSync12("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
           encoding: "utf-8",
           stdio: ["pipe", "pipe", "pipe"]
         }).trim();
@@ -30641,7 +31120,7 @@ var init_accounts = __esm(() => {
 });
 
 // src/auth/manager.ts
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync13 } from "node:child_process";
 import {
   readFileSync as readFileSync22,
   readdirSync as readdirSync11,
@@ -30692,14 +31171,14 @@ function authSessionName(name, slot) {
   return `${base}-${slot.replace(/[^a-zA-Z0-9_.-]/g, "-")}`;
 }
 function tmux(args) {
-  return execFileSync12("tmux", args, {
+  return execFileSync13("tmux", args, {
     encoding: "utf-8",
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function tmuxSessionExists(sessionName) {
   try {
-    execFileSync12("tmux", ["has-session", "-t", sessionName], {
+    execFileSync13("tmux", ["has-session", "-t", sessionName], {
       stdio: ["pipe", "pipe", "pipe"]
     });
     return true;
@@ -31215,355 +31694,6 @@ function readQuarantineMarkerForAgent(agentsDir, name) {
 var QUARANTINE_FILENAME = "quarantine.json";
 var init_quarantine = () => {};
 
-// src/agents/pane-lock.ts
-function withPaneLock(key, fn) {
-  const tail = tails.get(key) ?? Promise.resolve();
-  const run = tail.then(() => fn());
-  const next = run.then(() => {}, () => {});
-  tails.set(key, next);
-  next.then(() => {
-    if (tails.get(key) === next)
-      tails.delete(key);
-  });
-  return run;
-}
-var tails;
-var init_pane_lock = __esm(() => {
-  tails = new Map;
-});
-
-// src/agents/inject.ts
-var exports_inject = {};
-__export(exports_inject, {
-  validateInjectCommand: () => validateInjectCommand,
-  normalizeInjectCommand: () => normalizeInjectCommand,
-  makeTmuxRunner: () => makeTmuxRunner,
-  isTuiChromeLine: () => isTuiChromeLine,
-  injectSlashCommandWith: () => injectSlashCommandWith,
-  injectSlashCommand: () => injectSlashCommand,
-  diffPane: () => diffPane,
-  dedupeInjectQueue: () => dedupeInjectQueue,
-  InjectError: () => InjectError,
-  INJECT_COMMANDS: () => INJECT_COMMANDS,
-  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
-  INJECT_BLOCKED: () => INJECT_BLOCKED,
-  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
-});
-import { execFileSync as execFileSync14 } from "node:child_process";
-function validateInjectCommand(command) {
-  if (typeof command !== "string" || command.trim().length === 0) {
-    throw new InjectError("invalid", "command is empty");
-  }
-  const trimmed = command.trim();
-  if (!trimmed.startsWith("/")) {
-    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
-  }
-  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
-  const blockedMeta = INJECT_BLOCKED.get(bare);
-  if (blockedMeta) {
-    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
-  }
-  if (!INJECT_COMMANDS.has(bare)) {
-    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
-    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
-  }
-  return bare;
-}
-function normalizeInjectCommand(command) {
-  return command.trim().replace(/\s+/g, " ").toLowerCase();
-}
-function dedupeInjectQueue(commands) {
-  const seen = new Set;
-  const out = [];
-  for (const raw of commands) {
-    if (typeof raw !== "string")
-      continue;
-    const key = normalizeInjectCommand(raw);
-    if (key.length === 0)
-      continue;
-    if (seen.has(key))
-      continue;
-    seen.add(key);
-    out.push(raw.trim());
-  }
-  return out;
-}
-function defaultSocketName(agentName) {
-  return `switchroom-${agentName}`;
-}
-function makeTmuxRunner(tmuxBin) {
-  return {
-    capture(socket, session) {
-      try {
-        return execFileSync14(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
-      } catch {
-        return null;
-      }
-    },
-    send(socket, session, args) {
-      const [subcmd, ...rest] = args;
-      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
-      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
-      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
-      execFileSync14(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
-    },
-    hasSession(socket, session) {
-      try {
-        execFileSync14(tmuxBin, ["-L", socket, "has-session", "-t", session], {
-          stdio: ["pipe", "pipe", "pipe"]
-        });
-        return true;
-      } catch {
-        return false;
-      }
-    }
-  };
-}
-function sleep2(ms) {
-  return new Promise((res) => setTimeout(res, ms));
-}
-function isTuiChromeLine(line) {
-  const t = line.trim();
-  if (t.length === 0)
-    return false;
-  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
-    return true;
-  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
-    return true;
-  if (/accept edits on/i.test(t))
-    return true;
-  if (/shift\+tab to cycle/i.test(t))
-    return true;
-  if (/for agents/i.test(t))
-    return true;
-  if (/\? for shortcuts/i.test(t))
-    return true;
-  if (/bypassing permissions/i.test(t))
-    return true;
-  if (t === "copy")
-    return true;
-  return false;
-}
-function diffPane(before, after, command) {
-  if (command) {
-    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    const lines = after.split(`
-`);
-    let anchorIdx = -1;
-    for (let i = lines.length - 1;i >= 0; i--) {
-      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
-        anchorIdx = i;
-        break;
-      }
-    }
-    if (anchorIdx >= 0) {
-      const tail = lines.slice(anchorIdx + 1);
-      const trimmed = [];
-      for (const raw of tail) {
-        const line = raw.trimEnd();
-        if (line.length === 0 && trimmed.length === 0)
-          continue;
-        if (isTuiChromeLine(line))
-          continue;
-        trimmed.push(line);
-      }
-      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
-        trimmed.pop();
-      }
-      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
-      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
-        trimmed.pop();
-      }
-      if (trimmed.length > 0) {
-        return { output: trimmed.join(`
-`), anchored: true };
-      }
-    }
-  }
-  const beforeSet = new Set(before.split(`
-`).map((l) => l.trimEnd()));
-  const newLines = [];
-  for (const raw of after.split(`
-`)) {
-    const line = raw.trimEnd();
-    if (line.length === 0)
-      continue;
-    if (beforeSet.has(line))
-      continue;
-    if (isTuiChromeLine(line))
-      continue;
-    newLines.push(line);
-  }
-  return { output: newLines.join(`
-`), anchored: false };
-}
-async function injectSlashCommand(agentName, command, opts = {}) {
-  validateInjectCommand(command);
-  const tmuxBin = opts.tmuxBin ?? "tmux";
-  const socket = opts.socketName ?? defaultSocketName(agentName);
-  const session = opts.sessionName ?? agentName;
-  const settleMs = opts.settleMs ?? 2000;
-  const timeoutMs = opts.timeoutMs ?? 5000;
-  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
-    socket,
-    session,
-    command: command.trim(),
-    settleMs,
-    timeoutMs
-  }));
-}
-async function injectSlashCommandWith(runner, args) {
-  const { socket, session, command, settleMs, timeoutMs } = args;
-  let bareVerb;
-  try {
-    bareVerb = validateInjectCommand(command);
-  } catch (err) {
-    if (err instanceof InjectError) {
-      return {
-        outcome: "failed",
-        output: "",
-        truncated: false,
-        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
-        meta: null,
-        errorCode: err.code,
-        errorMessage: err.message
-      };
-    }
-    throw err;
-  }
-  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
-  if (!runner.hasSession(socket, session)) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "session_missing",
-      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
-    };
-  }
-  const before = runner.capture(socket, session) ?? "";
-  try {
-    runner.send(socket, session, ["send-keys", "-l", command]);
-    runner.send(socket, session, ["send-keys", "Enter"]);
-  } catch (err) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "tmux_failed",
-      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
-    };
-  }
-  const start = Date.now();
-  let last = before;
-  let stableSince = null;
-  while (Date.now() - start < timeoutMs) {
-    await sleep2(POLL_INTERVAL_MS);
-    const cur = runner.capture(socket, session) ?? "";
-    if (cur === last && cur !== before) {
-      if (stableSince === null) {
-        stableSince = Date.now();
-      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
-        last = cur;
-        break;
-      }
-    } else {
-      stableSince = null;
-    }
-    last = cur;
-    if (Date.now() - start >= settleMs && cur !== before) {
-      break;
-    }
-  }
-  const { output: rawOutput, anchored } = diffPane(before, last, command);
-  let output = rawOutput;
-  let truncated = false;
-  const bytes = Buffer.byteLength(output, "utf-8");
-  if (bytes > OUTPUT_BYTE_CAP) {
-    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
-      output = output.slice(Math.floor(output.length * 0.1) + 1);
-    }
-    truncated = true;
-  }
-  if (meta?.dialog) {
-    try {
-      runner.send(socket, session, ["send-keys", "Escape"]);
-    } catch {}
-  }
-  if (output.trim().length === 0) {
-    return {
-      outcome: "ok_no_output",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      ...anchored ? {} : { diagnostic: "anchor_missing" }
-    };
-  }
-  return {
-    outcome: "ok",
-    output,
-    truncated,
-    command: bareVerb,
-    meta,
-    ...truncated ? { diagnostic: "truncated_output" } : {}
-  };
-}
-var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
-var init_inject = __esm(() => {
-  init_pane_lock();
-  INJECT_COMMANDS = new Map([
-    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true }],
-    ["/status", { description: "Show session status", expectsOutput: true, dialog: true }],
-    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true }],
-    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true }],
-    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true }],
-    ["/model", { description: "Open model picker", expectsOutput: true }],
-    [
-      "/clear",
-      {
-        description: "Clear session screen",
-        expectsOutput: false,
-        silentNote: "context cleared \u2014 fresh slate"
-      }
-    ],
-    [
-      "/compact",
-      {
-        description: "Compact conversation history",
-        expectsOutput: false,
-        silentNote: "compaction runs silently"
-      }
-    ]
-  ]);
-  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-  INJECT_BLOCKED = new Map([
-    ["/login", { reason: "would mutate auth state" }],
-    ["/logout", { reason: "would terminate the agent's auth session" }],
-    ["/exit", { reason: "would kill the agent process" }],
-    ["/quit", { reason: "would kill the agent process" }],
-    [
-      "/effort",
-      {
-        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-      }
-    ]
-  ]);
-  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-  InjectError = class InjectError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.name = "InjectError";
-      this.code = code;
-    }
-  };
-});
-
 // src/auth/broker/protocol.ts
 function encodeRequest2(req) {
   const line = JSON.stringify(RequestSchema2.parse(req)) + `
@@ -35392,7 +35522,7 @@ function formatForCli(entries, opts = {}) {
 var init_audit_reader = () => {};
 
 // node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname12, posix, sep as sep2 } from "path";
+import { dirname as dirname13, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -35401,7 +35531,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname12(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname13(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -40017,7 +40147,7 @@ import {
   readFileSync as readFileSync43,
   writeFileSync as writeFileSync23
 } from "node:fs";
-import { dirname as dirname13 } from "node:path";
+import { dirname as dirname14 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 function telemetryDisabled() {
   const v = process.env.SWITCHROOM_TELEMETRY_DISABLED;
@@ -40039,7 +40169,7 @@ function getDistinctId() {
   const id = randomUUID3();
   cachedDistinctId = id;
   try {
-    mkdirSync26(dirname13(path4), { recursive: true });
+    mkdirSync26(dirname14(path4), { recursive: true });
     writeFileSync23(path4, id, "utf-8");
   } catch {}
   return id;
@@ -40286,7 +40416,7 @@ import {
   readFileSync as readFileSync52,
   readdirSync as readdirSync19
 } from "node:fs";
-import { dirname as dirname16, join as join50 } from "node:path";
+import { dirname as dirname17, join as join50 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
 function locateManifestPath() {
   let dir = import.meta.dirname;
@@ -40294,7 +40424,7 @@ function locateManifestPath() {
     const candidate = join50(dir, "dependencies.json");
     if (existsSync57(candidate))
       return candidate;
-    dir = dirname16(dir);
+    dir = dirname17(dir);
   }
   return null;
 }
@@ -43465,7 +43595,7 @@ import {
   readdirSync as readdirSync21,
   statSync as statSync26
 } from "node:fs";
-import { dirname as dirname17, join as join62, resolve as resolve37 } from "node:path";
+import { dirname as dirname18, join as join62, resolve as resolve37 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
   const nvmRoot = join62(process.env.HOME ?? "", ".nvm", "versions", "node");
@@ -44947,7 +45077,7 @@ async function checkMffAuthFlow(envPath = mffEnvPath(), timeoutMs = 8000) {
       detail: "skipped (MFF_API_URL not set)"
     };
   }
-  const credDir = dirname17(envPath);
+  const credDir = dirname18(envPath);
   const authScript = join62(credDir, "claude-auth.py");
   if (!existsSync62(authScript)) {
     return {
@@ -48870,7 +49000,7 @@ __export(exports_voice_sidecar_token, {
 });
 import { randomBytes as randomBytes14 } from "node:crypto";
 import { chmodSync as chmodSync11, chownSync as chownSync7, existsSync as existsSync81, mkdirSync as mkdirSync45, readFileSync as readFileSync68, rmSync as rmSync17, writeFileSync as writeFileSync37 } from "node:fs";
-import { dirname as dirname26 } from "node:path";
+import { dirname as dirname27 } from "node:path";
 async function defaultResolveOrSeedToken(home2, writeErr) {
   const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { resolveOperatorVaultPassphrase }] = await Promise.all([
     Promise.resolve().then(() => (init_client(), exports_client)),
@@ -48924,7 +49054,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   if (!token)
     return;
   try {
-    mkdirSync45(dirname26(envPath), { recursive: true });
+    mkdirSync45(dirname27(envPath), { recursive: true });
     let body = "";
     try {
       if (existsSync81(envPath))
@@ -48986,11 +49116,11 @@ __export(exports_apply, {
   DEFAULT_COMPOSE_PATH: () => DEFAULT_COMPOSE_PATH2,
   COMPOSE_PROJECT: () => COMPOSE_PROJECT2
 });
-import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync82, mkdirSync as mkdirSync46, readFileSync as readFileSync69, readdirSync as readdirSync28, renameSync as renameSync18, writeFileSync as writeFileSync38 } from "node:fs";
+import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync12, existsSync as existsSync82, mkdirSync as mkdirSync46, readFileSync as readFileSync69, readdirSync as readdirSync28, renameSync as renameSync18, writeFileSync as writeFileSync38 } from "node:fs";
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
-import { dirname as dirname27, join as join80, resolve as resolve50 } from "node:path";
+import { dirname as dirname28, join as join80, resolve as resolve50 } from "node:path";
 import { homedir as homedir47 } from "node:os";
 import { execFileSync as execFileSync25 } from "node:child_process";
 function effectiveLiteLLMEnabled(config, agentResolvedLitellm) {
@@ -49235,7 +49365,7 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
 function resolveVaultBindMountDir(homeDir, ctx) {
   const isCustomPath = ctx.migrationKind === "custom-path-skipped";
   if (isCustomPath && ctx.customVaultPath) {
-    return dirname27(ctx.customVaultPath);
+    return dirname28(ctx.customVaultPath);
   }
   return join80(homeDir, ".switchroom", "vault");
 }
@@ -49890,7 +50020,7 @@ function copyExampleConfig2(name) {
   if (!existsSync82(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
-  copyFileSync11(exampleFile, dest);
+  copyFileSync12(exampleFile, dest);
   console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
 }
 function findUnwritableAgentDirs(config, opts) {
@@ -64437,7 +64567,7 @@ import {
   mkdirSync as mkdirSync53,
   writeFileSync as writeFileSync44
 } from "node:fs";
-import { resolve as resolve55, dirname as dirname30 } from "node:path";
+import { resolve as resolve55, dirname as dirname31 } from "node:path";
 import { homedir as homedir56 } from "node:os";
 function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir56()) {
   return resolve55(home2, ".switchroom");
@@ -64528,11 +64658,11 @@ function readLedgerIfPresent(base) {
   }
 }
 function ledgerPathForBase(base) {
-  return fleetHealthLedgerPath(dirname30(base));
+  return fleetHealthLedgerPath(dirname31(base));
 }
 function writeLedger(base, ledger) {
   const path8 = ledgerPathForBase(base);
-  mkdirSync53(dirname30(path8), { recursive: true });
+  mkdirSync53(dirname31(path8), { recursive: true });
   writeFileSync44(path8, JSON.stringify(ledger, null, 2) + `
 `, "utf-8");
   return path8;
@@ -64552,8 +64682,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.17.10";
-var COMMIT_SHA = "d38372bf";
+var VERSION = "0.18.6";
+var COMMIT_SHA = "b62d558a";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -64767,11 +64897,11 @@ function detectInFlight(opts) {
 async function waitUntilIdle(opts) {
   const pollMs = opts.pollMs ?? 2000;
   const clock = opts.now ?? Date.now;
-  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const deadline = clock() + opts.timeoutMs;
   let last = detectInFlight(opts);
   while (last.busy && clock() < deadline) {
-    await sleep(pollMs);
+    await sleep2(pollMs);
     last = detectInFlight(opts);
   }
   return last;
@@ -64883,7 +65013,7 @@ function spinner(message) {
 // src/agents/status.ts
 import { existsSync as existsSync23, readFileSync as readFileSync20, statSync as statSync11 } from "node:fs";
 import { join as join16 } from "node:path";
-import { execFileSync as execFileSync10 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
 import { readFileSync as readFileSync18, writeFileSync as writeFileSync8, renameSync as renameSync6, mkdirSync as mkdirSync15, existsSync as existsSync21, statSync as statSync10, readdirSync as readdirSync9 } from "node:fs";
@@ -65468,7 +65598,7 @@ async function buildAgentStatusReport(inputs) {
 async function waitForAgentReady(inputs, options = {}) {
   const timeoutMs = options.timeoutMs ?? 30000;
   const pollIntervalMs = options.pollIntervalMs ?? 750;
-  const sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep2 = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const now = options.now ?? Date.now;
   const startedAt = now();
   const deadline = startedAt + timeoutMs;
@@ -65483,7 +65613,7 @@ async function waitForAgentReady(inputs, options = {}) {
         notReady
       };
     }
-    await sleep(pollIntervalMs);
+    await sleep2(pollIntervalMs);
     report = await buildAgentStatusReport(inputs);
     notReady = readinessGaps(report);
   }
@@ -65560,14 +65690,14 @@ function readLastMessages(historyDbPath) {
     };
   }
   try {
-    const out = execFileSync10("bun", [
+    const out = execFileSync11("bun", [
       "-e",
       `const { Database } = require("bun:sqlite"); ` + `const db = new Database(${JSON.stringify(historyDbPath)}, { readonly: true }); ` + `const rows = db.prepare("SELECT role, MAX(ts) as ts FROM messages GROUP BY role").all(); ` + `for (const r of rows) console.log(r.role + "|" + r.ts); ` + `db.close();`
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
     return parseSqliteRoleTsOutput(out);
   } catch {}
   try {
-    const out = execFileSync10("sqlite3", [
+    const out = execFileSync11("sqlite3", [
       historyDbPath,
       "SELECT role, MAX(ts) FROM messages GROUP BY role;"
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
@@ -65679,7 +65809,7 @@ function escapeRegex(s) {
 }
 function readDockerContainer(containerName2) {
   try {
-    const out = execFileSync10("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
+    const out = execFileSync11("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
     const state = JSON.parse(out.trim());
     const active = state.Status === "running" ? "active" : state.Status === "restarting" ? "restarting" : "inactive";
     const pid = typeof state.Pid === "number" && state.Pid > 0 ? state.Pid : null;
@@ -65794,7 +65924,7 @@ async function pollForDmStart(token, timeoutMs = 120000) {
       const response = await fetch(url);
       data = await response.json();
     } catch {
-      await sleep(2000);
+      await sleep2(2000);
       continue;
     }
     if (data.ok && Array.isArray(data.result)) {
@@ -65810,11 +65940,11 @@ async function pollForDmStart(token, timeoutMs = 120000) {
         }
       }
     }
-    await sleep(2000);
+    await sleep2(2000);
   }
   throw new Error("Timed out waiting for /start DM");
 }
-function sleep(ms) {
+function sleep2(ms) {
   return new Promise((resolve17) => setTimeout(resolve17, ms));
 }
 
@@ -65958,7 +66088,7 @@ async function completeCreation(name, code, opts = {}) {
 // src/agents/add-orchestrator.ts
 import { resolve as resolve19, join as join19 } from "node:path";
 import { existsSync as existsSync28, rmSync as rmSync8, statSync as statSync15 } from "node:fs";
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync14 } from "node:child_process";
 init_onboarding();
 
 // src/setup/botfather-walkthrough.ts
@@ -66532,7 +66662,7 @@ function pruneBundledSkills(agentDir, keep, scope) {
 }
 function defaultIsUnitActive(unitName) {
   try {
-    const out = execFileSync13("systemctl", ["--user", "is-active", unitName], {
+    const out = execFileSync14("systemctl", ["--user", "is-active", unitName], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -71386,7 +71516,7 @@ init_acl();
 init_protocol();
 import * as net3 from "node:net";
 import { mkdirSync as mkdirSync24, chmodSync as chmodSync7, chownSync as chownSync4, existsSync as existsSync41, readFileSync as readFileSync34, readdirSync as readdirSync17, statSync as statSync21, unlinkSync as unlinkSync10, writeFileSync as writeFileSync18, renameSync as renameSync13 } from "node:fs";
-import { dirname as dirname11, resolve as resolve28, basename as basename7 } from "node:path";
+import { dirname as dirname12, resolve as resolve28, basename as basename7 } from "node:path";
 import * as os4 from "node:os";
 import * as path3 from "node:path";
 
@@ -71479,10 +71609,38 @@ function rotateAuditLog(logPath, maxFiles) {
       return;
     }
   }
+  const snapshotPath = `${logPath}.1`;
   try {
-    fs2.renameSync(logPath, `${logPath}.1`);
+    fs2.copyFileSync(logPath, snapshotPath);
   } catch (err) {
-    process.stderr.write(`[vault-audit] ERROR: could not rotate active audit log ${logPath}: ${err.message}
+    process.stderr.write(`[vault-audit] ERROR: could not snapshot active audit log ${logPath} \u2192 ${snapshotPath}: ${err.message}
+`);
+    return;
+  }
+  try {
+    const fd = fs2.openSync(snapshotPath, "r");
+    try {
+      fs2.fsyncSync(fd);
+    } finally {
+      fs2.closeSync(fd);
+    }
+  } catch (err) {
+    process.stderr.write(`[vault-audit] ERROR: could not fsync audit snapshot ${snapshotPath}; leaving active log intact to avoid data loss: ${err.message}
+`);
+    return;
+  }
+  try {
+    const dirFd = fs2.openSync(path.dirname(snapshotPath), "r");
+    try {
+      fs2.fsyncSync(dirFd);
+    } finally {
+      fs2.closeSync(dirFd);
+    }
+  } catch {}
+  try {
+    fs2.truncateSync(logPath, 0);
+  } catch (err) {
+    process.stderr.write(`[vault-audit] ERROR: could not truncate active audit log ${logPath}: ${err.message}
 `);
   }
 }
@@ -73891,7 +74049,7 @@ class VaultBroker {
       this.passphrase = this.testOpts._testPassphrase;
     }
     process.umask(63);
-    const parentDir = dirname11(this.socketPath);
+    const parentDir = dirname12(this.socketPath);
     mkdirSync24(parentDir, { recursive: true, mode: 448 });
     try {
       chmodSync7(parentDir, 448);
@@ -74986,7 +75144,8 @@ class VaultBroker {
         return;
       }
       try {
-        const tokenDir = path3.join(os4.homedir(), ".switchroom", "agents", agent);
+        const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os4.homedir(), ".switchroom", "agents");
+        const tokenDir = path3.join(agentsDir, agent);
         mkdirSync24(tokenDir, { recursive: true });
         const tokenPath = path3.join(tokenDir, ".vault-token");
         const tmpPath = `${tokenPath}.tmp.${process.pid}`;
@@ -75050,7 +75209,8 @@ class VaultBroker {
       try {
         const row = this.grantsDb.query("SELECT agent_slug FROM vault_grants WHERE id = ?").get(id);
         if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
-          const tokenPath = path3.join(os4.homedir(), ".switchroom", "agents", row.agent_slug, ".vault-token");
+          const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os4.homedir(), ".switchroom", "agents");
+          const tokenPath = path3.join(agentsDir, row.agent_slug, ".vault-token");
           if (existsSync41(tokenPath)) {
             try {
               unlinkSync10(tokenPath);
@@ -75370,15 +75530,15 @@ class VaultBroker {
   }
 }
 function detectVaultLayoutDrift(vaultPath) {
-  const dir = dirname11(vaultPath);
+  const dir = dirname12(vaultPath);
   if (basename7(dir) !== "vault")
     return;
   if (basename7(vaultPath) !== "vault.enc")
     return;
-  const switchroomDir = dirname11(dir);
+  const switchroomDir = dirname12(dir);
   if (basename7(switchroomDir) !== ".switchroom")
     return;
-  const home2 = dirname11(switchroomDir);
+  const home2 = dirname12(switchroomDir);
   const result = inspectVaultLayout(home2);
   if (result.kind === "divergent") {
     throw new VaultError(`Vault layout divergence detected at boot: ${result.details.oldPath} and ${result.details.newPath} are both regular files with different content. An older switchroom CLI may have written to the legacy path after migration ran. Run \`switchroom apply\` from the host to surface the recovery recipe (state E refusal with literal \`mv\` commands). See docs/operators/state-e-recovery.md.`);
@@ -76410,7 +76570,7 @@ import {
   appendFileSync as appendFileSync3,
   closeSync as closeSync10,
   existsSync as existsSync45,
-  fsyncSync as fsyncSync6,
+  fsyncSync as fsyncSync7,
   mkdirSync as mkdirSync25,
   openSync as openSync10,
   readdirSync as readdirSync18,
@@ -76557,7 +76717,7 @@ function backupVault(opts) {
   const fd = openSync10(tmpPath, "wx", 384);
   try {
     writeSync7(fd, src);
-    fsyncSync6(fd);
+    fsyncSync7(fd);
   } finally {
     closeSync10(fd);
   }
@@ -76588,7 +76748,7 @@ function backupVault(opts) {
   try {
     const dirFd = openSync10(opts.destDir, "r");
     try {
-      fsyncSync6(dirFd);
+      fsyncSync7(dirFd);
     } finally {
       closeSync10(dirFd);
     }
@@ -76604,7 +76764,7 @@ function backupVault(opts) {
     try {
       const dirFd = openSync10(opts.destDir, "r");
       try {
-        fsyncSync6(dirFd);
+        fsyncSync7(dirFd);
       } finally {
         closeSync10(dirFd);
       }
@@ -78288,7 +78448,11 @@ async function resolveLiteLLMForHindsight(config) {
   const result = await getViaBrokerStructured("litellm/hindsight/api-key").catch(() => null);
   if (!result || result.kind !== "ok" || result.entry.kind !== "string")
     return;
-  return { baseUrl: topLiteLLM.base_url, apiKey: result.entry.value };
+  return {
+    baseUrl: topLiteLLM.base_url,
+    apiKey: result.entry.value,
+    model: config.memory?.config?.llm_model
+  };
 }
 function readRecallLog(agentDir, limit) {
   const path4 = join40(agentDir, ".claude", "plugins", "data", "hindsight-memory-inline", "state", "recall_log.jsonl");
@@ -78552,8 +78716,9 @@ Cross-agent reflection plan
     const provider = "claude-code";
     console.log(source_default.gray("  Starting Hindsight Docker container..."));
     try {
-      const litellmCfg = await resolveLiteLLMForHindsight(getConfig(program3));
-      startHindsight(ports, litellmCfg, opts.tag);
+      const hindsightConfig = getConfig(program3);
+      const litellmCfg = await resolveLiteLLMForHindsight(hindsightConfig);
+      startHindsight(ports, litellmCfg, opts.tag, hindsightConfig.hindsight?.llm);
       if (litellmCfg) {
         console.log(source_default.gray("  LiteLLM routing enabled for hindsight (--network host)."));
       }
@@ -78599,7 +78764,7 @@ Cross-agent reflection plan
     console.log(source_default.bold(`
 # Add this to your docker-compose.yml:
 `));
-    console.log(generateHindsightComposeSnippet());
+    console.log(generateHindsightComposeSnippet(getConfig(program3).hindsight?.llm));
     console.log();
   });
   memory.command("recall-log [agent]").description("Show recent auto-recall events (per-turn JSONL log) \u2014 see what was injected, when the cap fired, hit rate hints").option("-n, --limit <n>", "Tail the last N events per agent (default 20)", "20").option("--json", "Emit raw JSONL (one entry per line)").action(withConfigError(async (agent, opts) => {
@@ -78769,7 +78934,7 @@ import {
   writeSync as writeSync8,
   constants as fsConstants3
 } from "node:fs";
-import { resolve as resolve32, extname, join as join49, relative, dirname as dirname14 } from "node:path";
+import { resolve as resolve32, extname, join as join49, relative, dirname as dirname15 } from "node:path";
 import { homedir as homedir27 } from "node:os";
 import { timingSafeEqual as timingSafeEqual3, randomBytes as randomBytes11 } from "node:crypto";
 
@@ -82045,7 +82210,7 @@ function resolveWebToken() {
       return existing;
   }
   const token = randomBytes11(32).toString("hex");
-  mkdirSync30(dirname14(tokenPath), { recursive: true, mode: 448 });
+  mkdirSync30(dirname15(tokenPath), { recursive: true, mode: 448 });
   try {
     const fd = openSync11(tokenPath, fsConstants3.O_WRONLY | fsConstants3.O_CREAT | fsConstants3.O_EXCL, 384);
     try {
@@ -82803,8 +82968,8 @@ Starting Switchroom dashboard...
 init_source();
 init_loader();
 init_scaffold();
-import { existsSync as existsSync56, copyFileSync as copyFileSync8, readFileSync as readFileSync51, writeFileSync as writeFileSync26, mkdirSync as mkdirSync31 } from "node:fs";
-import { resolve as resolve33, dirname as dirname15 } from "node:path";
+import { existsSync as existsSync56, copyFileSync as copyFileSync9, readFileSync as readFileSync51, writeFileSync as writeFileSync26, mkdirSync as mkdirSync31 } from "node:fs";
+import { resolve as resolve33, dirname as dirname16 } from "node:path";
 init_state();
 init_vault();
 init_manager();
@@ -83109,8 +83274,8 @@ async function copyExampleConfig(nonInteractive) {
   if (!existsSync56(srcFile)) {
     throw new ConfigError(`Example config not found: ${choice}.yaml`);
   }
-  mkdirSync31(dirname15(destFile), { recursive: true });
-  copyFileSync8(srcFile, destFile);
+  mkdirSync31(dirname16(destFile), { recursive: true });
+  copyFileSync9(srcFile, destFile);
   console.log(source_default.green(`  Copied ${choice}.yaml -> ${destFile}`));
   console.log(source_default.yellow(`  Edit ${destFile} to customize, then re-run switchroom setup.`));
   await writeDetectedTimezone(destFile, nonInteractive);
@@ -83403,7 +83568,11 @@ async function resolveLiteLLMForHindsight2(config) {
   const result = await getViaBrokerStructured("litellm/hindsight/api-key").catch(() => null);
   if (!result || result.kind !== "ok" || result.entry.kind !== "string")
     return;
-  return { baseUrl: topLiteLLM.base_url, apiKey: result.entry.value };
+  return {
+    baseUrl: topLiteLLM.base_url,
+    apiKey: result.entry.value,
+    model: config.memory?.config?.llm_model
+  };
 }
 async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   stepHeader(6, "Memory backend", STEP_ACTIVE);
@@ -83495,7 +83664,7 @@ async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   const spin = spinner("Starting Hindsight Docker container...");
   try {
     const litellmCfg = await resolveLiteLLMForHindsight2(config);
-    startHindsight(ports, litellmCfg);
+    startHindsight(ports, litellmCfg, undefined, config.hindsight?.llm);
     if (litellmCfg) {
       console.log(source_default.gray("  LiteLLM routing enabled (--network host, ANTHROPIC_BASE_URL set)."));
     }
@@ -83888,7 +84057,7 @@ init_lifecycle();
 init_compose_env();
 import { cpSync as cpSync2, existsSync as existsSync63, mkdirSync as mkdirSync33, readFileSync as readFileSync56, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync28, chownSync as chownSync5 } from "node:fs";
 import { spawnSync as spawnSync12 } from "node:child_process";
-import { join as join63, dirname as dirname18, resolve as resolve38 } from "node:path";
+import { join as join63, dirname as dirname19, resolve as resolve38 } from "node:path";
 import { homedir as homedir38 } from "node:os";
 
 // src/cli/release-yaml.ts
@@ -83997,7 +84166,7 @@ function defaultPersistPin(configPath) {
 }
 var DEFAULT_COMPOSE_PATH = join63(homedir38(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
-  let dir = dirname18(scriptPath);
+  let dir = dirname19(scriptPath);
   for (let i = 0;i < 12; i++) {
     if (existsSync63(join63(dir, ".git"))) {
       try {
@@ -84006,7 +84175,7 @@ function runningFromSwitchroomCheckout(scriptPath) {
           return true;
       } catch {}
     }
-    const parent = dirname18(dir);
+    const parent = dirname19(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -84222,7 +84391,7 @@ function planUpdate(opts) {
         if (existsSync63(dest)) {
           rmSync12(dest, { recursive: true, force: true });
         }
-        mkdirSync33(dirname18(dest), { recursive: true });
+        mkdirSync33(dirname19(dest), { recursive: true });
         cpSync2(source, dest, { recursive: true, dereference: false });
       } catch (err) {
         throw new Error(`sync-bundled-skills failed: ${err.message}`);
@@ -84335,7 +84504,7 @@ function defaultStatusProbe(composePath) {
       try {
         cliBuiltAt = new Date(statSync28(scriptPath).mtimeMs).toISOString();
       } catch {}
-      let dir = dirname18(scriptPath);
+      let dir = dirname19(scriptPath);
       for (let i = 0;i < 8; i++) {
         const pkgPath = join63(dir, "package.json");
         if (existsSync63(pkgPath)) {
@@ -84348,7 +84517,7 @@ function defaultStatusProbe(composePath) {
           }
           break;
         }
-        const parent = dirname18(dir);
+        const parent = dirname19(dir);
         if (parent === dir)
           break;
         dir = parent;
@@ -84979,7 +85148,7 @@ init_helpers();
 init_lifecycle();
 import { execSync as execSync4 } from "node:child_process";
 import { existsSync as existsSync64, readFileSync as readFileSync58 } from "node:fs";
-import { dirname as dirname19, join as join64 } from "node:path";
+import { dirname as dirname20, join as join64 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync4("claude --version 2>/dev/null", {
@@ -85038,7 +85207,7 @@ function locateSwitchroomInstallDir() {
         }
       } catch {}
     }
-    dir = dirname19(dir);
+    dir = dirname20(dir);
   }
   return null;
 }
@@ -86239,7 +86408,7 @@ import {
   rmSync as rmSync13,
   writeFileSync as writeFileSync28
 } from "node:fs";
-import { dirname as dirname20, join as join67 } from "node:path";
+import { dirname as dirname21, join as join67 } from "node:path";
 import { homedir as homedir40 } from "node:os";
 import { execFileSync as execFileSync19 } from "node:child_process";
 
@@ -86286,7 +86455,7 @@ function ensurePythonEnv(opts) {
   if (existsSync67(venvDir)) {
     rmSync13(venvDir, { recursive: true, force: true });
   }
-  mkdirSync35(dirname20(venvDir), { recursive: true });
+  mkdirSync35(dirname21(venvDir), { recursive: true });
   try {
     execFileSync19(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
@@ -86320,14 +86489,14 @@ function ensurePythonEnv(opts) {
 // src/deps/node.ts
 import { createHash as createHash13 } from "node:crypto";
 import {
-  copyFileSync as copyFileSync9,
+  copyFileSync as copyFileSync10,
   existsSync as existsSync68,
   mkdirSync as mkdirSync36,
   readFileSync as readFileSync61,
   rmSync as rmSync14,
   writeFileSync as writeFileSync29
 } from "node:fs";
-import { dirname as dirname21, join as join68 } from "node:path";
+import { dirname as dirname22, join as join68 } from "node:path";
 import { homedir as homedir41 } from "node:os";
 import { execFileSync as execFileSync20 } from "node:child_process";
 
@@ -86354,7 +86523,7 @@ function defaultNodeCacheRoot() {
   return join68(homedir41(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
-  const sourceDir = dirname21(packageJsonPath);
+  const sourceDir = dirname22(packageJsonPath);
   const hasher = createHash13("sha256");
   hasher.update(`package.json
 `);
@@ -86379,7 +86548,7 @@ function ensureNodeEnv(opts) {
   if (!existsSync68(packageJsonPath)) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
-  const sourceDir = dirname21(packageJsonPath);
+  const sourceDir = dirname22(packageJsonPath);
   const envDir = join68(cacheRoot, skillName);
   const stampPath = join68(envDir, ".package.sha256");
   const nodeModulesDir = join68(envDir, "node_modules");
@@ -86401,12 +86570,12 @@ function ensureNodeEnv(opts) {
     rmSync14(envDir, { recursive: true, force: true });
   }
   mkdirSync36(envDir, { recursive: true });
-  copyFileSync9(packageJsonPath, join68(envDir, "package.json"));
+  copyFileSync10(packageJsonPath, join68(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
     const lockPath = join68(sourceDir, lockName);
     if (existsSync68(lockPath)) {
-      copyFileSync9(lockPath, join68(envDir, lockName));
+      copyFileSync10(lockPath, join68(envDir, lockName));
       copiedLockfile = true;
     }
   }
@@ -87405,7 +87574,7 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync10, existsSync as existsSync71, readFileSync as readFileSync62, writeFileSync as writeFileSync30 } from "node:fs";
+import { copyFileSync as copyFileSync11, existsSync as existsSync71, readFileSync as readFileSync62, writeFileSync as writeFileSync30 } from "node:fs";
 import { join as join70, resolve as resolve44 } from "node:path";
 init_scaffold();
 init_profiles();
@@ -87482,7 +87651,7 @@ function registerSoulCommand(program3) {
       if (existsSync71(backupPath)) {
         backupPath = `${t.soulPath}.bak.${Date.now()}`;
       }
-      copyFileSync10(t.soulPath, backupPath);
+      copyFileSync11(t.soulPath, backupPath);
     }
     writeFileSync30(t.soulPath, content, "utf-8");
     if (backupPath) {
@@ -88968,7 +89137,7 @@ function registerDriveMcpLauncherCommand(program3) {
 init_scaffold_integration();
 import { spawn as spawn5 } from "node:child_process";
 import { writeFileSync as writeFileSync33, mkdirSync as mkdirSync41 } from "node:fs";
-import { dirname as dirname22, join as join76 } from "node:path";
+import { dirname as dirname23, join as join76 } from "node:path";
 var SOFTERIA_TOKEN_ENV = "MS365_MCP_OAUTH_TOKEN";
 var DEFAULT_REFRESH_LEAD_MS = 5 * 60 * 1000;
 var MAX_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
@@ -88993,7 +89162,7 @@ function computeRefreshDelayMs(expiresAt, now, leadMs = DEFAULT_REFRESH_LEAD_MS)
 function writeRefreshHeartbeat(agentName, data) {
   const path7 = heartbeatPath(agentName);
   try {
-    mkdirSync41(dirname22(path7), { recursive: true });
+    mkdirSync41(dirname23(path7), { recursive: true });
     writeFileSync33(path7, JSON.stringify(data, null, 2), { mode: 420 });
   } catch {}
 }
@@ -89186,7 +89355,7 @@ function registerM365McpLauncherCommand(program3) {
 init_scaffold_integration();
 import { spawn as spawn6 } from "node:child_process";
 import { existsSync as existsSync78, mkdirSync as mkdirSync42, writeFileSync as writeFileSync34 } from "node:fs";
-import { dirname as dirname23 } from "node:path";
+import { dirname as dirname24 } from "node:path";
 var HEARTBEAT_WRITE_INTERVAL_MS = 30 * 1000;
 var DEFAULT_HEARTBEAT_PATH = "/state/agent/notion-launcher.heartbeat.json";
 var DEFAULT_VAULT_KEY = "notion/integration-token";
@@ -89196,7 +89365,7 @@ function buildNotionMcpArgs(opts) {
 }
 function defaultWriteHeartbeat(path7, contents) {
   try {
-    const dir = dirname23(path7);
+    const dir = dirname24(path7);
     if (!existsSync78(dir))
       mkdirSync42(dir, { recursive: true });
     writeFileSync34(path7, contents);
@@ -90351,7 +90520,7 @@ init_paths();
 import {
   closeSync as closeSync14,
   existsSync as existsSync84,
-  fsyncSync as fsyncSync7,
+  fsyncSync as fsyncSync8,
   mkdirSync as mkdirSync47,
   openSync as openSync14,
   readdirSync as readdirSync30,
@@ -90434,7 +90603,7 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
-      fsyncSync7(fd);
+      fsyncSync8(fd);
     } finally {
       closeSync14(fd);
     }
@@ -90451,7 +90620,7 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
-      fsyncSync7(fd);
+      fsyncSync8(fd);
     } finally {
       closeSync14(fd);
     }
@@ -90658,7 +90827,7 @@ function reconcileAgentCronOnly(agent) {
 import {
   closeSync as closeSync15,
   existsSync as existsSync85,
-  fsyncSync as fsyncSync8,
+  fsyncSync as fsyncSync9,
   mkdirSync as mkdirSync48,
   openSync as openSync15,
   readdirSync as readdirSync31,
@@ -90702,7 +90871,7 @@ function stagePendingScheduleEntry(opts) {
     const fd = openSync15(yamlTmp, "w", 384);
     try {
       writeSync11(fd, opts.yamlText);
-      fsyncSync8(fd);
+      fsyncSync9(fd);
     } finally {
       closeSync15(fd);
     }
@@ -91670,7 +91839,7 @@ import {
   writeFileSync as writeFileSync40
 } from "node:fs";
 import { tmpdir as tmpdir5, homedir as homedir49 } from "node:os";
-import { dirname as dirname28, join as join85, relative as relative2, resolve as resolve52 } from "node:path";
+import { dirname as dirname29, join as join85, relative as relative2, resolve as resolve52 } from "node:path";
 import { spawnSync as spawnSync15 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -92140,7 +92309,7 @@ function writePayload(poolDir, name, files) {
   try {
     for (const [path8, content] of Object.entries(files)) {
       const full = join85(staging, path8);
-      mkdirSync49(dirname28(full), { recursive: true, mode: 493 });
+      mkdirSync49(dirname29(full), { recursive: true, mode: 493 });
       const fd = openSync16(full, "wx");
       try {
         writeFileSync40(fd, content);
@@ -92262,7 +92431,7 @@ import {
   utimesSync,
   writeFileSync as writeFileSync41
 } from "node:fs";
-import { dirname as dirname29, join as join86, relative as relative3, resolve as resolve53 } from "node:path";
+import { dirname as dirname30, join as join86, relative as relative3, resolve as resolve53 } from "node:path";
 import { homedir as homedir50, tmpdir as tmpdir6 } from "node:os";
 import { spawnSync as spawnSync16 } from "node:child_process";
 init_helpers();
@@ -92515,13 +92684,13 @@ function writePersonalSkill(targetDir, files) {
   if (targetIsSymlink) {
     fail4(`refusing to overwrite symlink at ${targetDir}; investigate manually`);
   }
-  mkdirSync50(dirname29(targetDir), { recursive: true, mode: 493 });
-  const staging = mkdtempSync6(join86(dirname29(targetDir), `.skill-personal-stage-`));
+  mkdirSync50(dirname30(targetDir), { recursive: true, mode: 493 });
+  const staging = mkdtempSync6(join86(dirname30(targetDir), `.skill-personal-stage-`));
   let oldRename = null;
   try {
     for (const [path8, content] of Object.entries(files)) {
       const full = join86(staging, path8);
-      mkdirSync50(dirname29(full), { recursive: true, mode: 493 });
+      mkdirSync50(dirname30(full), { recursive: true, mode: 493 });
       const fd = openSync17(full, "wx");
       try {
         writeFileSync41(fd, content);
@@ -93264,7 +93433,7 @@ import {
   statSync as statSync39,
   lstatSync as lstatSync11,
   realpathSync as realpathSync8,
-  copyFileSync as copyFileSync12
+  copyFileSync as copyFileSync13
 } from "node:fs";
 import { homedir as homedir53 } from "node:os";
 import { join as join89 } from "node:path";
@@ -93535,7 +93704,7 @@ function backupExistingCompose() {
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
-  copyFileSync12(p, bak);
+  copyFileSync13(p, bak);
   return bak;
 }
 function runDocker(args) {
@@ -93748,7 +93917,7 @@ The log is created when hostd handles its first privileged-verb request.`));
 init_source();
 init_helpers();
 init_operator_uid();
-import { existsSync as existsSync93, mkdirSync as mkdirSync52, writeFileSync as writeFileSync43, copyFileSync as copyFileSync13 } from "node:fs";
+import { existsSync as existsSync93, mkdirSync as mkdirSync52, writeFileSync as writeFileSync43, copyFileSync as copyFileSync14 } from "node:fs";
 import { homedir as homedir54 } from "node:os";
 import { join as join90 } from "node:path";
 import { spawnSync as spawnSync21 } from "node:child_process";
@@ -93846,7 +94015,7 @@ function backupExistingCompose2() {
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
-  copyFileSync13(p, bak);
+  copyFileSync14(p, bak);
   return bak;
 }
 function runDocker2(args) {