switchroom 0.17.6 → 0.17.10

package/dist/cli/switchroom.js

@@ -13656,8 +13656,35 @@ var init_schema = __esm(() => {
     auto_recall: exports_external.boolean().default(true).describe("Auto-search memories before each response"),
     file: exports_external.boolean().default(true).describe("Maintain a curated workspace MEMORY.md file (seeded once, " + "auto-loaded every turn). Set false for hindsight-only memory: " + "the file is not seeded or re-created, so once migrated into " + "Hindsight and deleted it stays gone. Recall + directives carry " + "the memory instead. Cascade: override (per-agent wins over default)."),
     isolation: exports_external.enum(["default", "strict"]).default("default").describe("strict = never shared cross-agent, default = eligible for reflect"),
-    bank_mission: exports_external.string().optional().describe("Bank-level mission statement used during recall to contextualize results"),
-    retain_mission: exports_external.string().optional().describe("Instructions for the fact extraction LLM during retain"),
+    bank_mission: exports_external.string().optional().describe("Bank-level mission statement used during recall to contextualize " + "results. NOTE: this is an alias for the Hindsight engine's " + "`reflect_mission` field (verified live: switchroom's bank_mission " + "lands in `config.reflect_mission`). Prefer `reflect_mission` going " + "forward; `bank_mission` is retained for back-compat. If both are " + "set, `reflect_mission` wins. Cascade: override."),
+    reflect_mission: exports_external.string().optional().describe("Mission/context steering Hindsight Reflect operations (the bank's " + "'who am I / what matters' framing applied during recall). The " + "engine-accurate name for what `bank_mission` sets. Cascade: override."),
+    retain_mission: exports_external.string().optional().describe("Instructions for the fact extraction LLM during retain. Cascade: override."),
+    mental_models: exports_external.array(exports_external.object({
+      name: exports_external.string().min(1).describe("Stable model name (identity key for idempotent ensure). Two " + "declarations with the same name in one agent are rejected."),
+      source_query: exports_external.string().min(1).max(2000).describe("The reflection query the model answers, semantically " + "refreshed from the bank's content. Capped at 2000 chars \u2014 a " + "standing reflection query, not a document; the ceiling also " + "bounds what an agent-proposed model can smuggle past the " + "operator approval card."),
+      refresh_after_consolidation: exports_external.boolean().optional().describe("Refresh this model after each consolidation. Defaults OFF \u2014 " + "refresh adds bounded background model-spend + timeout risk " + "(RFC Phase 5), so it is opt-in per model."),
+      max_tokens: exports_external.number().int().positive().max(8192).optional().describe("Cap on the synthesized model's token size. Upper-bounded at " + "8192 \u2014 a mental model is a standing summary, not a corpus; the " + "ceiling also caps what an agent-proposed model can request.")
+    })).superRefine((models, ctx) => {
+      const seen = new Set;
+      for (let i = 0;i < models.length; i++) {
+        const key = models[i].name;
+        if (seen.has(key)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            path: [i, "name"],
+            message: `duplicate mental_models name "${key}" \u2014 model names must be ` + `unique within an agent (they are the idempotent-ensure key)`
+          });
+        }
+        seen.add(key);
+      }
+    }).optional().describe("Operator-declared, per-specialist Hindsight mental models (RFC " + "Phase 5). Named, opt-in curated reflections this agent's bank should " + "carry \u2014 e.g. a coach's 'training-plan-state' or a lawyer's " + "'open-matters'. Ensured idempotently at scaffold/reconcile: NOTHING " + "is created unless declared here (zero declarations = zero models, " + "matching post-#2447 behaviour), and no fixed identity model is " + "reintroduced \u2014 'who the user is' stays owned by dedicated profile " + "banks (users.*.profile_bank), never a per-agent model. Per-agent " + "ONLY: intentionally not accepted at the defaults/profile tier, so a " + "model can never be fleet-seeded \u2014 each specialist opts in on its own " + "(the invariant-clean inverse of the retired blind auto-seeding)."),
+    observations_mission: exports_external.string().optional().describe("Steers what the observation-consolidation LLM synthesises from raw " + "facts (the higher-order 'what patterns matter' lens). Cascade: override."),
+    disposition: exports_external.object({
+      skepticism: exports_external.number().int().min(1).max(5).optional().describe("How much the bank doubts unverified claims (1-5; engine default 3)."),
+      literalism: exports_external.number().int().min(1).max(5).optional().describe("How literally the bank reads statements vs inferring intent (1-5; engine default 3)."),
+      empathy: exports_external.number().int().min(1).max(5).optional().describe("How much the bank weights emotional/relational context (1-5; engine default 3).")
+    }).optional().describe("Personality traits (1-5 each) steering how this bank frames recall, " + "reflect, and observation synthesis \u2014 a coach leans empathy-high, a " + "lawyer/analyst leans skepticism/literalism-high. Maps to the engine's " + "flat `disposition_skepticism`/`_literalism`/`_empathy` fields. " + "Cascade: per-key merge (an agent overrides individual traits and " + "inherits the rest, matching `recall`)."),
+    directive_capture_nudge: exports_external.boolean().optional().describe("Deterministic directive-capture nudge (issue #2848 Stage B). When " + "on (switchroom default true \u2014 Stage A measured a ~55% miss rate on " + "durable corrections), the auto-recall hook regex-detects correction " + '/ standing-rule-shaped inbound ("always/never \u2026", "from now on \u2026", ' + `"stop doing \u2026", a stated preference, "that's wrong, it's \u2026") and ` + "appends a terse advisory to the turn's context telling the model to " + "persist the rule with mcp__hindsight__create_directive if it IS " + "durable. Detection is pure regex \u2014 the model does the judgment " + "in-session and calls create_directive itself (no model callsite, no " + "silent hook-side write). Set false to disable per-agent. " + "Cascade: override (per-agent wins over default)."),
     recall: exports_external.object({
       max_memories: exports_external.number().int().min(0).optional().describe("Cap on the number of memories injected into the prompt by " + "auto-recall, regardless of token budget. Plugin default is 12. " + "0 disables the cap (all memories Hindsight returns are injected)."),
       cache_ttl_secs: exports_external.number().int().min(0).optional().describe("Per-session recall cache TTL in seconds. When > 0, identical " + "(prompt, bank) within the same session reuse the cached recall " + "result instead of round-tripping to Hindsight. 0 disables. " + "Default is 600 (10 min) for switchroom-managed agents."),
@@ -13922,6 +13949,7 @@ var init_schema = __esm(() => {
       auto_recall: exports_external.boolean().optional(),
       file: exports_external.boolean().optional(),
       isolation: exports_external.enum(["default", "strict"]).optional(),
+      directive_capture_nudge: exports_external.boolean().optional(),
       recall: exports_external.object({
         max_memories: exports_external.number().int().min(0).optional(),
         cache_ttl_secs: exports_external.number().int().min(0).optional(),
@@ -14617,6 +14645,11 @@ function mergeAgentConfig(defaultsIn, agentIn) {
         continue;
       if (k === "recall" && base.recall && typeof v === "object" && v !== null && !Array.isArray(v)) {
         combined[k] = { ...base.recall, ...v };
+      } else if (k === "disposition" && base.disposition && typeof v === "object" && v !== null && !Array.isArray(v)) {
+        combined[k] = {
+          ...base.disposition,
+          ...v
+        };
       } else {
         combined[k] = v;
       }
@@ -15122,9 +15155,427 @@ var init_users = __esm(() => {
   init_merge();
 });
 
+// src/util/atomic.ts
+var exports_atomic = {};
+__export(exports_atomic, {
+  writeConfigFileSync: () => writeConfigFileSync,
+  atomicWriteJsonSync: () => atomicWriteJsonSync,
+  atomicWriteFileSync: () => atomicWriteFileSync
+});
+import { randomBytes } from "node:crypto";
+import { closeSync as closeSync2, constants, fsyncSync, openSync as openSync2, renameSync, rmSync, writeSync } from "node:fs";
+function atomicWriteFileSync(destPath, contents, mode = 384) {
+  const tmp = `${destPath}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
+  const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
+  let fd = null;
+  try {
+    fd = openSync2(tmp, TMP_OPEN_FLAGS, mode);
+    writeSync(fd, buf, 0, buf.length, 0);
+    fsyncSync(fd);
+    closeSync2(fd);
+    fd = null;
+    renameSync(tmp, destPath);
+  } catch (err) {
+    if (fd !== null) {
+      try {
+        closeSync2(fd);
+      } catch {}
+    }
+    try {
+      rmSync(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+function atomicWriteJsonSync(destPath, value, mode = 384) {
+  atomicWriteFileSync(destPath, JSON.stringify(value, null, 2) + `
+`, mode);
+}
+function writeConfigFileSync(destPath, contents, mode = 420) {
+  try {
+    atomicWriteFileSync(destPath, contents, mode);
+  } catch (err) {
+    const code = err.code;
+    if (code !== "EBUSY" && code !== "EXDEV" && code !== "EINVAL") {
+      throw err;
+    }
+    const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
+    let fd = null;
+    try {
+      fd = openSync2(destPath, constants.O_WRONLY | constants.O_TRUNC, mode);
+      writeSync(fd, buf, 0, buf.length, 0);
+      fsyncSync(fd);
+      closeSync2(fd);
+      fd = null;
+    } catch (fallbackErr) {
+      if (fd !== null) {
+        try {
+          closeSync2(fd);
+        } catch {}
+      }
+      throw fallbackErr;
+    }
+  }
+}
+var TMP_OPEN_FLAGS;
+var init_atomic = __esm(() => {
+  TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
+});
+
+// src/setup/hindsight.ts
+import { execFileSync } from "node:child_process";
+import { createServer } from "node:net";
+function hindsightImageRef(tag) {
+  const t = tag?.trim();
+  if (!t)
+    return HINDSIGHT_IMAGE;
+  const v = t.replace(/^v/, "");
+  return `${HINDSIGHT_IMAGE_REPO}:v${v}`;
+}
+function isPortFree(port) {
+  return new Promise((resolve4) => {
+    const server = createServer();
+    server.once("error", () => resolve4(false));
+    server.once("listening", () => {
+      server.close(() => resolve4(true));
+    });
+    server.listen(port, "127.0.0.1");
+  });
+}
+function describePortHolder(port) {
+  const probes = [
+    ["ss", ["-ltnpH", `sport = :${port}`]],
+    ["lsof", ["-nP", `-iTCP:${port}`, "-sTCP:LISTEN"]]
+  ];
+  for (const [cmd, args] of probes) {
+    try {
+      const out = execFileSync(cmd, args, {
+        stdio: "pipe",
+        encoding: "utf-8"
+      }).trim();
+      if (!out)
+        continue;
+      const ssMatch = out.match(/users:\(\("([^"]+)",pid=(\d+)/);
+      if (ssMatch)
+        return `pid ${ssMatch[2]} (${ssMatch[1]})`;
+      const firstDataLine = out.split(`
+`).map((l) => l.trim()).find((l) => l && !/^COMMAND\b/.test(l));
+      if (firstDataLine) {
+        const parts = firstDataLine.split(/\s+/);
+        if (cmd === "lsof" && parts.length >= 2) {
+          return `pid ${parts[1]} (${parts[0]})`;
+        }
+        return firstDataLine.slice(0, 80);
+      }
+    } catch {}
+  }
+  return null;
+}
+async function preflightHindsightPorts(ports) {
+  for (const port of [ports.apiPort, ports.uiPort]) {
+    if (!await isPortFree(port)) {
+      return { port, holder: describePortHolder(port) };
+    }
+  }
+  return null;
+}
+async function findFreePort(start, maxAttempts = 50) {
+  for (let i = 0;i < maxAttempts; i++) {
+    const port = start + i;
+    if (port < 1024)
+      continue;
+    if (await isPortFree(port)) {
+      return port;
+    }
+  }
+  return null;
+}
+async function pickHindsightPorts() {
+  if (await isPortFree(HINDSIGHT_DEFAULT_API_PORT) && await isPortFree(HINDSIGHT_DEFAULT_UI_PORT)) {
+    return {
+      apiPort: HINDSIGHT_DEFAULT_API_PORT,
+      uiPort: HINDSIGHT_DEFAULT_UI_PORT
+    };
+  }
+  const apiPort = await findFreePort(18888);
+  const uiPort = await findFreePort(19999);
+  if (apiPort === null || uiPort === null) {
+    throw new Error("Could not find a free port for Hindsight. " + "Stop whatever is using 18888 / 19999 and retry.");
+  }
+  return { apiPort, uiPort };
+}
+function isDockerAvailable() {
+  try {
+    execFileSync("docker", ["--version"], { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isHindsightRunning() {
+  try {
+    const output = execFileSync("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    return output.trim().length > 0;
+  } catch {
+    return false;
+  }
+}
+function isHindsightContainerExists() {
+  try {
+    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
+    return output.trim().length > 0;
+  } catch {
+    return false;
+  }
+}
+function startHindsight(ports, litellm, imageTag) {
+  const apiPort = ports?.apiPort ?? HINDSIGHT_DEFAULT_API_PORT;
+  const uiPort = ports?.uiPort ?? HINDSIGHT_DEFAULT_UI_PORT;
+  const envArgs = [
+    "-e",
+    `HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
+    "-e",
+    "HINDSIGHT_API_LLM_PROVIDER=claude-code",
+    "-e",
+    `HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    "-e",
+    `ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    "-e",
+    `HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
+    "-e",
+    `HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
+    "-e",
+    `HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
+    "-e",
+    `HINDSIGHT_API_RERANKER_LOCAL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT}`,
+    "-e",
+    `HINDSIGHT_API_RECALL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT}`,
+    "-e",
+    `HINDSIGHT_API_REFLECT_WALL_TIMEOUT=${HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S}`,
+    "-e",
+    `HINDSIGHT_API_CONSOLIDATION_LLM_BATCH_SIZE=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE}`,
+    "-e",
+    `HINDSIGHT_API_WORKER_CONSOLIDATION_MAX_SLOTS=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS}`,
+    "-e",
+    `HINDSIGHT_API_CONSOLIDATION_LLM_PARALLELISM=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM}`,
+    "-e",
+    `HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`
+  ];
+  if (litellm) {
+    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${litellm.baseUrl.replace(/\/+$/, "")}/anthropic`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
+x-litellm-customer-id: hindsight
+x-litellm-tags: service:hindsight`);
+  }
+  const args = [
+    "run",
+    "-d",
+    "--name",
+    "switchroom-hindsight",
+    "--restart",
+    "always",
+    `--memory=${HINDSIGHT_DEFAULT_MEM_LIMIT}`,
+    `--memory-reservation=${HINDSIGHT_DEFAULT_MEM_RESERVATION}`,
+    `--pids-limit=${HINDSIGHT_DEFAULT_PIDS_LIMIT}`,
+    `--shm-size=${HINDSIGHT_DEFAULT_SHM_SIZE}`,
+    "--health-cmd",
+    litellm ? `python3 -c 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:${apiPort}/health",timeout=4).getcode()==200 else 1)'` : HINDSIGHT_HEALTHCHECK_CMD,
+    "--health-interval",
+    "30s",
+    "--health-timeout",
+    "5s",
+    "--health-retries",
+    "3",
+    "--health-start-period",
+    "60s"
+  ];
+  if (litellm) {
+    args.push("--network", "host");
+  } else {
+    args.push("-p", `127.0.0.1:${apiPort}:8888`, "-p", `127.0.0.1:${uiPort}:9999`);
+  }
+  args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, hindsightImageRef(imageTag));
+  execFileSync("docker", args, { stdio: "pipe" });
+}
+function stopHindsight() {
+  try {
+    execFileSync("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
+  } catch {}
+  try {
+    execFileSync("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
+  } catch {}
+}
+function pullHindsightImage(imageTag) {
+  execFileSync("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
+}
+function getRunningHindsightPorts() {
+  const CONTAINER_API_PORT = 8888;
+  const CONTAINER_UI_PORT = 9999;
+  const readPort = (containerPort) => {
+    try {
+      const out = execFileSync("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
+      const m = out.split(`
+`).map((l) => l.trim()).find((l) => l.length > 0);
+      if (!m)
+        return null;
+      const port = Number(m.slice(m.lastIndexOf(":") + 1));
+      return Number.isInteger(port) && port > 0 ? port : null;
+    } catch {
+      return null;
+    }
+  };
+  const apiPort = readPort(CONTAINER_API_PORT);
+  if (apiPort !== null) {
+    const uiPort = readPort(CONTAINER_UI_PORT) ?? (apiPort === HINDSIGHT_DEFAULT_API_PORT ? HINDSIGHT_DEFAULT_UI_PORT : 19999);
+    return { apiPort, uiPort };
+  }
+  return getHindsightPortsFromEnv();
+}
+function getHindsightPortsFromEnv() {
+  let env2;
+  try {
+    env2 = execFileSync("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
+  } catch {
+    return null;
+  }
+  const readVar = (name) => {
+    const re = new RegExp(`(?:^|[\\s\\[])${name}=([^\\s\\]]+)`);
+    const m = env2.match(re);
+    if (!m)
+      return null;
+    const n = Number(m[1]);
+    return Number.isInteger(n) && n > 0 ? n : null;
+  };
+  const apiPort = readVar("HINDSIGHT_API_PORT");
+  if (apiPort === null)
+    return null;
+  const uiPort = readVar("HINDSIGHT_UI_PORT") ?? (apiPort === HINDSIGHT_DEFAULT_API_PORT ? HINDSIGHT_DEFAULT_UI_PORT : 19999);
+  return { apiPort, uiPort };
+}
+function getHindsightStatus() {
+  try {
+    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const status = output.trim();
+    return status.length > 0 ? status : null;
+  } catch {
+    return null;
+  }
+}
+function generateHindsightComposeSnippet() {
+  return [
+    "services:",
+    "  switchroom-hindsight:",
+    `    image: ${HINDSIGHT_IMAGE}`,
+    "    container_name: switchroom-hindsight",
+    "    ports:",
+    `      - "127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}:8888"`,
+    '      - "127.0.0.1:19999:9999"',
+    "    environment:",
+    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
+    "      - HINDSIGHT_API_LLM_PROVIDER=claude-code",
+    `      - HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    `      - ANTHROPIC_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
+    `      - HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
+    `      - HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
+    `      - HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
+    `      - HINDSIGHT_API_RERANKER_LOCAL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT}`,
+    `      - HINDSIGHT_API_RECALL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT}`,
+    `      - HINDSIGHT_API_REFLECT_WALL_TIMEOUT=${HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S}`,
+    `      - HINDSIGHT_API_CONSOLIDATION_LLM_BATCH_SIZE=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE}`,
+    `      - HINDSIGHT_API_WORKER_CONSOLIDATION_MAX_SLOTS=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS}`,
+    `      - HINDSIGHT_API_CONSOLIDATION_LLM_PARALLELISM=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM}`,
+    `      - HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`,
+    `    mem_limit: ${HINDSIGHT_DEFAULT_MEM_LIMIT}`,
+    `    mem_reservation: ${HINDSIGHT_DEFAULT_MEM_RESERVATION}`,
+    `    pids_limit: ${HINDSIGHT_DEFAULT_PIDS_LIMIT}`,
+    `    shm_size: ${HINDSIGHT_DEFAULT_SHM_SIZE}`,
+    "    healthcheck:",
+    `      test: ${JSON.stringify(["CMD", "python3", "-c", HINDSIGHT_HEALTHCHECK_PY])}`,
+    "      interval: 30s",
+    "      timeout: 5s",
+    "      retries: 3",
+    "      start_period: 60s",
+    "    volumes:",
+    "      - switchroom-hindsight-data:/home/hindsight/.pg0",
+    "      - switchroom-hindsight-backups:/backups",
+    `      - ${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`,
+    "    tmpfs:",
+    `      - /run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`,
+    "    restart: always",
+    "",
+    "volumes:",
+    "  switchroom-hindsight-data:",
+    "  switchroom-hindsight-backups:",
+    `  ${HINDSIGHT_BROKER_SOCK_VOLUME}:`,
+    "    external: true",
+    "    # Bound by the switchroom-auth-broker singleton in the main",
+    "    # switchroom compose project. Declare an `auth.consumers[]`",
+    `    # entry named "${HINDSIGHT_CONSUMER_NAME}" in switchroom.yaml.`
+  ].join(`
+`);
+}
+async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFAULT_UID) {
+  const fs = await import("node:fs");
+  const { parseDocument, isMap, isSeq, YAMLMap, YAMLSeq } = await Promise.resolve().then(() => __toESM(require_dist(), 1));
+  const { atomicWriteFileSync: atomicWriteFileSync2 } = await Promise.resolve().then(() => (init_atomic(), exports_atomic));
+  const raw = fs.readFileSync(configPath, "utf-8");
+  const doc = parseDocument(raw);
+  const root = doc.contents;
+  if (!isMap(root)) {
+    return { added: false, reason: "switchroom.yaml root is not a map" };
+  }
+  const authRaw = root.get("auth", true);
+  let authNode;
+  if (isMap(authRaw)) {
+    authNode = authRaw;
+  } else {
+    authNode = new YAMLMap;
+    doc.setIn(["auth"], authNode);
+  }
+  const consumersRaw = authNode.get("consumers", true);
+  let consumersNode;
+  if (isSeq(consumersRaw)) {
+    consumersNode = consumersRaw;
+  } else {
+    consumersNode = new YAMLSeq;
+    doc.setIn(["auth", "consumers"], consumersNode);
+  }
+  for (const item of consumersNode.items) {
+    if (isMap(item)) {
+      const name = item.get("name");
+      if (name === HINDSIGHT_CONSUMER_NAME) {
+        return { added: false, reason: "already present" };
+      }
+    }
+  }
+  const entry = new YAMLMap;
+  entry.set("name", HINDSIGHT_CONSUMER_NAME);
+  if (account !== undefined)
+    entry.set("account", account);
+  entry.set("uid", uid);
+  consumersNode.add(entry);
+  const out = String(doc);
+  const tail = out.endsWith(`
+`) ? out : out + `
+`;
+  let mode = 420;
+  try {
+    mode = fs.statSync(configPath).mode & 511;
+  } catch {}
+  atomicWriteFileSync2(configPath, tail, mode);
+  return { added: true, reason: "added" };
+}
+var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true", HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150, HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4, HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8, HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1, HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 2, HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 100, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD;
+var init_hindsight = __esm(() => {
+  HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
+  HINDSIGHT_DEFAULT_API_BASE_URL = HINDSIGHT_DEFAULT_MCP_URL.replace(/\/mcp\/?$/, "");
+  HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
+  HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
+  HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
+});
+
 // src/memory/hindsight.ts
 function generateHindsightMcpConfig(collection, memoryConfig) {
-  const url = memoryConfig.config?.url ?? "http://localhost:8888/mcp/";
+  const url = memoryConfig.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   return {
     type: "http",
     url,
@@ -15167,6 +15618,26 @@ function isHindsightEnabled(config) {
     return false;
   return config?.memory?.backend === "hindsight";
 }
+function mergeDisposition(base, over) {
+  if (!base && !over)
+    return;
+  const merged = { ...base ?? {}, ...over ?? {} };
+  return Object.keys(merged).length > 0 ? merged : undefined;
+}
+function resolveBankMissionExtras(memory, profileName) {
+  const pd = PROFILE_MEMORY_DEFAULTS[profileName] ?? {};
+  const out = {};
+  const reflect = memory?.reflect_mission ?? pd.reflect_mission;
+  if (reflect != null)
+    out.reflect_mission = reflect;
+  const observations = memory?.observations_mission ?? pd.observations_mission;
+  if (observations != null)
+    out.observations_mission = observations;
+  const disposition = mergeDisposition(pd.disposition, memory?.disposition);
+  if (disposition)
+    out.disposition = disposition;
+  return out;
+}
 async function parseSseOrJson(resp) {
   const text = await resp.text();
   const dataLine = text.split(`
@@ -15253,9 +15724,19 @@ async function probeHindsight(apiUrl, opts) {
     clearTimeout(timeout);
   }
 }
-async function ensureUserProfileMentalModel(apiUrl, bankId, opts) {
+async function ensureMentalModel(apiUrl, bankId, spec, opts) {
   const fetchImpl = opts?.fetchImpl ?? fetch;
   const timeoutMs = opts?.timeoutMs ?? 5000;
+  const createArguments = {
+    name: spec.name,
+    source_query: spec.sourceQuery
+  };
+  if (spec.refreshAfterConsolidation !== undefined) {
+    createArguments.trigger_refresh_after_consolidation = spec.refreshAfterConsolidation;
+  }
+  if (spec.maxTokens !== undefined) {
+    createArguments.max_tokens = spec.maxTokens;
+  }
   try {
     const controller = new AbortController;
     const timeout = setTimeout(() => controller.abort(), timeoutMs);
@@ -15312,7 +15793,7 @@ async function ensureUserProfileMentalModel(apiUrl, bankId, opts) {
         if (models && typeof models === "string") {
           const parsed = JSON.parse(models);
           const items = Array.isArray(parsed?.items) ? parsed.items : [];
-          if (items.some((m) => m?.name === "user-profile")) {
+          if (items.some((m) => m?.name === spec.name)) {
             return { ok: true };
           }
         }
@@ -15333,10 +15814,7 @@ async function ensureUserProfileMentalModel(apiUrl, bankId, opts) {
         method: "tools/call",
         params: {
           name: "create_mental_model",
-          arguments: {
-            name: "user-profile",
-            source_query: "What are the key facts, preferences, context, and communication style about the user I talk to? Summarize what matters for making the agent feel like it knows them."
-          }
+          arguments: createArguments
         }
       }),
       signal: controller.signal
@@ -15360,6 +15838,33 @@ async function ensureUserProfileMentalModel(apiUrl, bankId, opts) {
     return { ok: false, reason: String(err) };
   }
 }
+async function ensureUserProfileMentalModel(apiUrl, bankId, opts) {
+  return ensureMentalModel(apiUrl, bankId, { name: "user-profile", sourceQuery: USER_PROFILE_SOURCE_QUERY }, opts);
+}
+async function ensureDeclaredMentalModels(apiUrl, bankId, models, opts) {
+  if (!models || models.length === 0)
+    return [];
+  const outcomes = [];
+  const seen = new Set;
+  for (const m of models) {
+    if (seen.has(m.name))
+      continue;
+    seen.add(m.name);
+    const spec = {
+      name: m.name,
+      sourceQuery: m.source_query,
+      refreshAfterConsolidation: m.refresh_after_consolidation,
+      maxTokens: m.max_tokens
+    };
+    try {
+      const result = await ensureMentalModel(apiUrl, bankId, spec, opts);
+      outcomes.push(result.ok ? { name: m.name, ok: true } : { name: m.name, ok: false, reason: result.reason });
+    } catch (err) {
+      outcomes.push({ name: m.name, ok: false, reason: String(err) });
+    }
+  }
+  return outcomes;
+}
 async function createBank(apiUrl, bankId, opts) {
   const fetchImpl = opts?.fetchImpl ?? fetch;
   const timeoutMs = opts?.timeoutMs ?? 5000;
@@ -15487,8 +15992,24 @@ async function updateBankMissions(apiUrl, bankId, missions, opts) {
           name: "update_bank",
           arguments: {
             bank_id: bankId,
-            ...missions.bank_mission != null ? { mission: missions.bank_mission } : {},
-            ...missions.retain_mission != null ? { config_updates: { retain_mission: missions.retain_mission } } : {}
+            ...missions.reflect_mission == null && missions.bank_mission != null ? { mission: missions.bank_mission } : {},
+            ...(() => {
+              const configUpdates = {};
+              if (missions.retain_mission != null)
+                configUpdates.retain_mission = missions.retain_mission;
+              if (missions.reflect_mission != null)
+                configUpdates.reflect_mission = missions.reflect_mission;
+              if (missions.observations_mission != null)
+                configUpdates.observations_mission = missions.observations_mission;
+              const d = missions.disposition;
+              if (d?.skepticism != null)
+                configUpdates.disposition_skepticism = d.skepticism;
+              if (d?.literalism != null)
+                configUpdates.disposition_literalism = d.literalism;
+              if (d?.empathy != null)
+                configUpdates.disposition_empathy = d.empathy;
+              return Object.keys(configUpdates).length > 0 ? { config_updates: configUpdates } : {};
+            })()
           }
         }
       }),
@@ -15586,10 +16107,23 @@ async function addMemoryTag(apiUrl, bankId, memoryId, tag, opts) {
     return { ok: false, reason: String(err) };
   }
 }
-var DEFAULT_RETAIN_MISSION, DEMOTE_FROM_RECALL_TAG = "[demote-from-recall]";
-var init_hindsight = __esm(() => {
+var DEFAULT_RETAIN_MISSION, PROFILE_MEMORY_DEFAULTS, USER_PROFILE_SOURCE_QUERY = "What are the key facts, preferences, context, and communication style about the user I talk to? Summarize what matters for making the agent feel like it knows them.", DEMOTE_FROM_RECALL_TAG = "[demote-from-recall]";
+var init_hindsight2 = __esm(() => {
   init_users();
+  init_hindsight();
   DEFAULT_RETAIN_MISSION = "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.";
+  PROFILE_MEMORY_DEFAULTS = {
+    "health-coach": {
+      disposition: { skepticism: 2, literalism: 2, empathy: 5 },
+      observations_mission: "Synthesise the person's wellbeing patterns, motivations, and emotional " + "context \u2014 how habits, setbacks, and encouragement connect over time."
+    },
+    "executive-assistant": {
+      disposition: { skepticism: 4, literalism: 4, empathy: 3 }
+    },
+    coding: {
+      disposition: { skepticism: 4, literalism: 5, empathy: 2 }
+    }
+  };
 });
 
 // src/cli/helpers.ts
@@ -22398,7 +22932,8 @@ function getBuiltinDefaultSkillEntries() {
     "switchroom-cli",
     "switchroom-status",
     "switchroom-health",
-    "switchroom-runtime"
+    "switchroom-runtime",
+    "mental-model-curator"
   ];
   return [
     ...anthropic.map((key) => ({ key, optOutKey: key, source: "anthropic" })),
@@ -22407,7 +22942,7 @@ function getBuiltinDefaultSkillEntries() {
 }
 var GOOGLE_WORKSPACE_MCP_PINNED_SHA = "9d69115b63e6bc2ef0d4b5d7a3b962396382b44c", MICROSOFT_WORKSPACE_MCP_PINNED_VERSION = "0.113.0", MICROSOFT_WORKSPACE_MCP_PACKAGE = "@softeria/ms-365-mcp-server", NOTION_MCP_PINNED_VERSION = "1.8.1", NOTION_MCP_PACKAGE = "@notionhq/notion-mcp-server", NOTION_TOKEN_ENV = "NOTION_TOKEN";
 var init_scaffold_integration = __esm(() => {
-  init_hindsight();
+  init_hindsight2();
 });
 
 // src/config/microsoft-workspace-acl.ts
@@ -22425,7 +22960,7 @@ function shouldEmitMs365Mcp(agentName, agentMicrosoftAccount, microsoftAccounts)
 }
 
 // src/agents/reconcile-default-skills.ts
-import { existsSync as existsSync7, lstatSync, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readlinkSync as readlinkSync2, rmSync, symlinkSync } from "node:fs";
+import { existsSync as existsSync7, lstatSync, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readlinkSync as readlinkSync2, rmSync as rmSync2, symlinkSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join5, resolve as resolve5 } from "node:path";
 function warnMissingPoolDir(poolDir) {
@@ -22495,7 +23030,7 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
         }
         if (currentTarget && isOwnedStaleLink(currentTarget, poolDir)) {
           try {
-            rmSync(dest, { force: true });
+            rmSync2(dest, { force: true });
           } catch {}
         } else {
           result.conflicts.push(entry.key);
@@ -22560,7 +23095,7 @@ import {
   writeFileSync as writeFileSync2,
   mkdirSync as mkdirSync4,
   existsSync as existsSync8,
-  renameSync,
+  renameSync as renameSync2,
   copyFileSync as copyFileSync2,
   unlinkSync
 } from "node:fs";
@@ -22600,7 +23135,7 @@ function saveTopicState(state, statePath) {
   try {
     writeFileSync2(tmp, JSON.stringify(state, null, 2) + `
 `, "utf-8");
-    renameSync(tmp, path);
+    renameSync2(tmp, path);
   } catch (err) {
     try {
       if (existsSync8(tmp))
@@ -22616,10 +23151,10 @@ var init_state = __esm(() => {
 // src/vault/flock.ts
 import {
   existsSync as existsSync9,
-  openSync as openSync2,
-  closeSync as closeSync2,
-  writeSync,
-  fsyncSync,
+  openSync as openSync3,
+  closeSync as closeSync3,
+  writeSync as writeSync2,
+  fsyncSync as fsyncSync2,
   unlinkSync as unlinkSync2,
   readFileSync as readFileSync8,
   readdirSync as readdirSync4,
@@ -22741,7 +23276,7 @@ function acquireLock(vaultPath, options = {}) {
   while (true) {
     let fd = null;
     try {
-      fd = openSync2(lockPath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, 384);
+      fd = openSync3(lockPath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, 384);
     } catch (err) {
       const code = err?.code ?? "";
       if (code === "EEXIST") {
@@ -22777,11 +23312,11 @@ function acquireLock(vaultPath, options = {}) {
 ${Date.now()}
 ${process.argv[1] ?? ""}
 `;
-      writeSync(fd, meta);
-      fsyncSync(fd);
+      writeSync2(fd, meta);
+      fsyncSync2(fd);
     } catch {
       try {
-        closeSync2(fd);
+        closeSync3(fd);
       } catch {}
       try {
         unlinkSync2(lockPath);
@@ -22792,7 +23327,7 @@ ${process.argv[1] ?? ""}
     return {
       release: () => {
         try {
-          closeSync2(ownedFd);
+          closeSync3(ownedFd);
         } catch {}
         try {
           unlinkSync2(lockPath);
@@ -22849,22 +23384,22 @@ __export(exports_vault, {
   KNOWN_VAULT_ARTIFACT_PATTERNS: () => KNOWN_VAULT_ARTIFACT_PATTERNS,
   KNOWN_VAULT_ARTIFACT_NAMES: () => KNOWN_VAULT_ARTIFACT_NAMES
 });
-import { randomBytes, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
+import { randomBytes as randomBytes2, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
 import {
   readFileSync as readFileSync9,
-  writeSync as writeSync2,
+  writeSync as writeSync3,
   existsSync as existsSync10,
-  renameSync as renameSync2,
+  renameSync as renameSync3,
   mkdirSync as mkdirSync5,
   unlinkSync as unlinkSync3,
-  fsyncSync as fsyncSync2,
-  openSync as openSync3,
-  closeSync as closeSync3,
+  fsyncSync as fsyncSync3,
+  openSync as openSync4,
+  closeSync as closeSync4,
   lstatSync as lstatSync2,
   realpathSync as realpathSync2
 } from "node:fs";
 import { dirname as dirname3, basename as basename3, resolve as resolve7 } from "node:path";
-function atomicWriteFileSync(path, data, mode) {
+function atomicWriteFileSync2(path, data, mode) {
   let effectivePath = path;
   try {
     if (existsSync10(path) && lstatSync2(path).isSymbolicLink()) {
@@ -22874,20 +23409,20 @@ function atomicWriteFileSync(path, data, mode) {
   const dir = dirname3(resolve7(effectivePath));
   const tmp = resolve7(dir, `.${basename3(effectivePath)}.${process.pid}.${Date.now()}.tmp`);
   try {
-    const fd = openSync3(tmp, "wx", mode);
+    const fd = openSync4(tmp, "wx", mode);
     try {
-      writeSync2(fd, data);
-      fsyncSync2(fd);
+      writeSync3(fd, data);
+      fsyncSync3(fd);
     } finally {
-      closeSync3(fd);
+      closeSync4(fd);
     }
-    renameSync2(tmp, effectivePath);
+    renameSync3(tmp, effectivePath);
     try {
-      const dirFd = openSync3(dir, "r");
+      const dirFd = openSync4(dir, "r");
       try {
-        fsyncSync2(dirFd);
+        fsyncSync3(dirFd);
       } finally {
-        closeSync3(dirFd);
+        closeSync4(dirFd);
       }
     } catch {}
   } catch (err) {
@@ -22907,7 +23442,7 @@ function deriveKey(passphrase, salt, params = { N: SCRYPT_N, r: SCRYPT_R, p: SCR
   });
 }
 function encrypt(key, plaintext) {
-  const iv = randomBytes(12);
+  const iv = randomBytes2(12);
   const cipher = createCipheriv("aes-256-gcm", key, iv);
   const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
   const tag = cipher.getAuthTag();
@@ -23012,7 +23547,7 @@ function createVault(passphrase, vaultPath) {
   if (!existsSync10(dir)) {
     mkdirSync5(dir, { recursive: true, mode: 448 });
   }
-  const salt = randomBytes(16);
+  const salt = randomBytes2(16);
   const key = deriveKey(passphrase, salt);
   const vaultData = { secrets: {} };
   const { iv, data, tag } = encrypt(key, JSON.stringify(vaultData));
@@ -23023,7 +23558,7 @@ function createVault(passphrase, vaultPath) {
     tag,
     kdf: { N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P }
   };
-  atomicWriteFileSync(vaultPath, JSON.stringify(vaultFile, null, 2), 384);
+  atomicWriteFileSync2(vaultPath, JSON.stringify(vaultFile, null, 2), 384);
 }
 function openVault(passphrase, vaultPath) {
   if (!existsSync10(vaultPath)) {
@@ -23080,7 +23615,7 @@ function saveVault(passphrase, vaultPath, secrets) {
     vaultFile.iv = iv;
     vaultFile.data = data;
     vaultFile.tag = tag;
-    atomicWriteFileSync(vaultPath, JSON.stringify(vaultFile, null, 2), 384);
+    atomicWriteFileSync2(vaultPath, JSON.stringify(vaultFile, null, 2), 384);
   } finally {
     if (releaseLock !== null) {
       try {
@@ -23262,7 +23797,7 @@ function parseSocketIdentity(socketPath, spec) {
 }
 
 // src/vault/broker/peercred.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { readFileSync as readFileSync10, readlinkSync as readlinkSync3, fstatSync } from "node:fs";
 function socketPathToIdentity(socketPath) {
   return parseSocketIdentity(socketPath, {
@@ -23435,7 +23970,7 @@ function identify(socketPath, socket, execFileSyncOverride) {
   if (process.platform !== "linux") {
     return null;
   }
-  const runner = execFileSyncOverride ?? execFileSync;
+  const runner = execFileSyncOverride ?? execFileSync2;
   let pid = null;
   if (socket !== undefined) {
     const fd = fdFromSocket(socket);
@@ -24295,13 +24830,13 @@ __export(exports_resolver, {
 });
 import {
   chmodSync,
-  closeSync as closeSync4,
+  closeSync as closeSync5,
   mkdirSync as mkdirSync6,
   mkdtempSync,
-  openSync as openSync4,
-  rmSync as rmSync2,
+  openSync as openSync5,
+  rmSync as rmSync3,
   statSync as statSync6,
-  writeSync as writeSync3
+  writeSync as writeSync4
 } from "node:fs";
 import { join as join7 } from "node:path";
 import { tmpdir } from "node:os";
@@ -24329,13 +24864,13 @@ function registerCleanupHook() {
   const cleanup = () => {
     for (const dir of materializedDirs) {
       try {
-        rmSync2(dir, { recursive: true, force: true });
+        rmSync3(dir, { recursive: true, force: true });
       } catch {}
     }
     materializedDirs.clear();
     if (cachedRoot) {
       try {
-        rmSync2(cachedRoot, { recursive: true, force: true });
+        rmSync3(cachedRoot, { recursive: true, force: true });
       } catch {}
       cachedRoot = null;
     }
@@ -24366,18 +24901,18 @@ function materializationRoot() {
 }
 function writeFileExclusive(filePath, content) {
   const buf = typeof content === "string" ? Buffer.from(content, "utf8") : content;
-  const fd = openSync4(filePath, fsConstants2.O_WRONLY | fsConstants2.O_CREAT | fsConstants2.O_EXCL, 384);
+  const fd = openSync5(filePath, fsConstants2.O_WRONLY | fsConstants2.O_CREAT | fsConstants2.O_EXCL, 384);
   try {
-    writeSync3(fd, buf);
+    writeSync4(fd, buf);
   } finally {
-    closeSync4(fd);
+    closeSync5(fd);
   }
 }
 function materializeFilesEntry(key, files) {
   const dir = join7(materializationRoot(), key);
   if (materializedDirs.has(dir)) {
     try {
-      rmSync2(dir, { recursive: true, force: true });
+      rmSync3(dir, { recursive: true, force: true });
     } catch {}
   }
   mkdirSync6(dir, { recursive: true, mode: 448 });
@@ -24401,13 +24936,13 @@ function materializeFilesEntry(key, files) {
 function cleanupMaterializedSecrets() {
   for (const dir of materializedDirs) {
     try {
-      rmSync2(dir, { recursive: true, force: true });
+      rmSync3(dir, { recursive: true, force: true });
     } catch {}
   }
   materializedDirs.clear();
   if (cachedRoot) {
     try {
-      rmSync2(cachedRoot, { recursive: true, force: true });
+      rmSync3(cachedRoot, { recursive: true, force: true });
     } catch {}
     cachedRoot = null;
   }
@@ -24728,7 +25263,7 @@ var init_onboarding = __esm(() => {
 });
 
 // src/repos/bare-clone.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync13, mkdirSync as mkdirSync8 } from "node:fs";
 import { resolve as resolve9 } from "node:path";
 function bareClonePath(slug) {
@@ -24741,7 +25276,7 @@ function ensureBareClone(slug, url) {
   if (!existsSync13(clonePath)) {
     process.stderr.write(`[switchroom] repo "${slug}": cloning ${url} \u2026
 `);
-    execFileSync2("git", ["clone", "--bare", url, clonePath], {
+    execFileSync3("git", ["clone", "--bare", url, clonePath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     process.stderr.write(`[switchroom] repo "${slug}": bare clone ready at ${clonePath}
@@ -24750,7 +25285,7 @@ function ensureBareClone(slug, url) {
     process.stderr.write(`[switchroom] repo "${slug}": fetching ${clonePath} \u2026
 `);
     try {
-      execFileSync2("git", ["fetch", "--all"], {
+      execFileSync3("git", ["fetch", "--all"], {
         cwd: clonePath,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -24767,7 +25302,7 @@ var init_bare_clone = __esm(() => {
 });
 
 // src/repos/agent-worktree.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync14, mkdirSync as mkdirSync9, readdirSync as readdirSync5 } from "node:fs";
 import { join as join9, resolve as resolve10 } from "node:path";
 function agentBranchName(agentName) {
@@ -24778,7 +25313,7 @@ function agentWorktreePath(agentDir, slug) {
 }
 function isWorktreeDirty(worktreePath) {
   try {
-    const out = execFileSync3("git", ["status", "--porcelain"], {
+    const out = execFileSync4("git", ["status", "--porcelain"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -24790,7 +25325,7 @@ function isWorktreeDirty(worktreePath) {
 }
 function headShortSha(worktreePath) {
   try {
-    return execFileSync3("git", ["rev-parse", "--short", "HEAD"], {
+    return execFileSync4("git", ["rev-parse", "--short", "HEAD"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -24801,7 +25336,7 @@ function headShortSha(worktreePath) {
 }
 function branchExistsInBare(bareClonePath2, branchName) {
   try {
-    execFileSync3("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
+    execFileSync4("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -24812,7 +25347,7 @@ function branchExistsInBare(bareClonePath2, branchName) {
 }
 function resolveDefaultBranch(bareClonePath2) {
   try {
-    const out = execFileSync3("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+    const out = execFileSync4("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -24830,12 +25365,12 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   if (!existsSync14(worktreePath)) {
     mkdirSync9(join9(agentDir, "work"), { recursive: true });
     if (branchExistsInBare(bareClonePath2, branch)) {
-      execFileSync3("git", ["worktree", "add", worktreePath, branch], {
+      execFileSync4("git", ["worktree", "add", worktreePath, branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
     } else {
-      execFileSync3("git", [
+      execFileSync4("git", [
         "worktree",
         "add",
         worktreePath,
@@ -24863,11 +25398,11 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     };
   }
   try {
-    execFileSync3("git", ["fetch", "origin"], {
+    execFileSync4("git", ["fetch", "origin"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
-    execFileSync3("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
+    execFileSync4("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -24885,7 +25420,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   const branch = agentBranchName(agentName);
   if (existsSync14(worktreePath)) {
     try {
-      execFileSync3("git", ["worktree", "remove", "--force", worktreePath], {
+      execFileSync4("git", ["worktree", "remove", "--force", worktreePath], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -24897,7 +25432,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   }
   if (branchExistsInBare(bareClonePath2, branch)) {
     try {
-      execFileSync3("git", ["branch", "-D", branch], {
+      execFileSync4("git", ["branch", "-D", branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -24908,7 +25443,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     }
   }
   try {
-    execFileSync3("git", ["worktree", "prune"], {
+    execFileSync4("git", ["worktree", "prune"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -24925,19 +25460,19 @@ import {
   writeFileSync as writeFileSync4,
   appendFileSync as appendFileSync2,
   readFileSync as readFileSync13,
-  renameSync as renameSync3,
+  renameSync as renameSync4,
   chmodSync as chmodSync2,
   symlinkSync as symlinkSync2,
   copyFileSync as copyFileSync4,
   readdirSync as readdirSync6,
-  rmSync as rmSync3,
+  rmSync as rmSync4,
   statSync as statSync7,
   lstatSync as lstatSync3,
   readlinkSync as readlinkSync4,
   unlinkSync as unlinkSync4
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { execSync, execFileSync as execFileSync4 } from "node:child_process";
+import { execSync, execFileSync as execFileSync5 } from "node:child_process";
 import { join as join10, resolve as resolve11 } from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 function prependReplyDiscipline(rendered, context) {
@@ -25071,13 +25606,13 @@ function alignAgentUid(name, agentDir, uid, opts = {}) {
 `));
   }
   try {
-    execFileSync4("chown", ["-R", `${uid}:${uid}`, ...paths], {
+    execFileSync5("chown", ["-R", `${uid}:${uid}`, ...paths], {
       stdio: ["ignore", "ignore", "pipe"]
     });
     return { chowned: true, paths };
   } catch {}
   try {
-    execFileSync4("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
+    execFileSync5("sudo", ["chown", "-R", `${uid}:${uid}`, ...paths], {
       stdio: "inherit"
     });
     return { chowned: true, paths };
@@ -25271,7 +25806,7 @@ function migrateLegacySkillsDir(agentDir, skillsPool) {
     }
     if (target && target.startsWith(skillsPool)) {
       try {
-        rmSync3(entryPath, { force: true });
+        rmSync4(entryPath, { force: true });
       } catch {}
     }
   }
@@ -25306,7 +25841,7 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
         } catch {}
         if (target && target.startsWith(skillsPool)) {
           try {
-            rmSync3(dest, { force: true });
+            rmSync4(dest, { force: true });
           } catch {}
         } else {
           continue;
@@ -25336,7 +25871,7 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
       continue;
     }
     if (linkTarget && linkTarget.startsWith(skillsPool)) {
-      rmSync3(entryPath, { force: true });
+      rmSync4(entryPath, { force: true });
     }
   }
 }
@@ -25391,7 +25926,7 @@ function installSwitchroomSkills(agentDir, opts = {}) {
       if (currentTarget !== join10(builtinSkillsDir, name))
         continue;
       try {
-        rmSync3(dest, { force: true });
+        rmSync4(dest, { force: true });
       } catch {}
     }
     return;
@@ -25414,7 +25949,7 @@ function installSwitchroomSkills(agentDir, opts = {}) {
         if (currentTarget === src)
           continue;
         try {
-          rmSync3(dest, { force: true });
+          rmSync4(dest, { force: true });
         } catch {}
       } else {
         continue;
@@ -25666,7 +26201,7 @@ function migrateLegacyAgentsMdIfPresent(agentWorkspaceDir, created) {
   }
   const content = readFileSync13(agentsMd, "utf-8");
   writeFileSync4(claudeMd, content, "utf-8");
-  rmSync3(agentsMd);
+  rmSync4(agentsMd);
   created.push(claudeMd);
   console.log(source_default.dim(`  migrated legacy workspace/AGENTS.md \u2192 workspace/CLAUDE.md (content preserved)`));
 }
@@ -25682,9 +26217,9 @@ function ensureClaudeMdSymlinks(agentWorkspaceDir, changes) {
         const target = readlinkSync4(linkPath);
         if (target === "CLAUDE.md")
           continue;
-        rmSync3(linkPath);
+        rmSync4(linkPath);
       } else {
-        rmSync3(linkPath);
+        rmSync4(linkPath);
       }
     }
     symlinkSync2("CLAUDE.md", linkPath);
@@ -25725,7 +26260,7 @@ Thumbs.db
     execSync("git add -A", { cwd: workspaceDir, stdio: "pipe" });
     const userEmail = process.env.GIT_AUTHOR_EMAIL || "switchroom@localhost";
     const userName = process.env.GIT_AUTHOR_NAME || "Switchroom Agent";
-    execFileSync4("git", [
+    execFileSync5("git", [
       "-c",
       `user.email=${userEmail}`,
       "-c",
@@ -25773,13 +26308,13 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig) {
   const upToDate = dirContentEquals(sourcePath, destPath, expectedSettings != null ? { "settings.json": expectedSettings } : undefined);
   if (!upToDate) {
     if (existsSync15(destPath)) {
-      rmSync3(destPath, { recursive: true, force: true });
+      rmSync4(destPath, { recursive: true, force: true });
     }
     copyDirRecursive2(sourcePath, destPath);
   }
   applyHindsightSettingsOverrides(destPath, additionalBanks);
   const bankId = agentMemory?.collection ?? agentName;
-  const mcpUrl = memory.config?.url ?? "http://127.0.0.1:8888/mcp/";
+  const mcpUrl = memory.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   const apiBaseUrl = mcpUrl.replace(/\/mcp\/?$/, "").replace(/\/$/, "");
   return { pluginDir: destPath, apiBaseUrl, bankId };
 }
@@ -25811,6 +26346,7 @@ function renderHindsightSettingsOverrides(raw, additionalBanks) {
   settings.recallMinOverlap = 0.1;
   settings.recallTypes = ["world", "experience", "observation"];
   settings.recallSkipTrivial = true;
+  settings.directiveCaptureNudge = true;
   if (additionalBanks.length > 0) {
     settings.recallAdditionalBanks = [...additionalBanks];
   }
@@ -25838,6 +26374,7 @@ function buildWorkspaceContext(args) {
     hindsightRecallMinOverlap,
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
+    hindsightDirectiveCaptureNudge,
     hindsightTopicAliasesJson,
     hindsightSenderBanksJson,
     hindsightTopicFilterMode
@@ -25882,6 +26419,7 @@ function buildWorkspaceContext(args) {
     hindsightRecallMinOverlap,
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
+    hindsightDirectiveCaptureNudge,
     hindsightTopicAliasesJsonQ: hindsightTopicAliasesJson ? shellSingleQuote(hindsightTopicAliasesJson) : undefined,
     hindsightSenderBanksJsonQ: hindsightSenderBanksJson ? shellSingleQuote(hindsightSenderBanksJson) : undefined,
     hindsightTopicFilterMode,
@@ -26052,12 +26590,13 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
   ]);
   const hindsightAutoRecallEnabled = hindsightEnabled && agentConfig.memory?.auto_recall !== false;
   const hindsightBankId = agentConfig.memory?.collection ?? name;
-  const hindsightApiBaseUrl = switchroomConfig?.memory?.config?.url ? switchroomConfig.memory.config.url.replace(/\/mcp\/?$/, "").replace(/\/$/, "") : "http://127.0.0.1:8888";
+  const hindsightApiBaseUrl = switchroomConfig?.memory?.config?.url ? switchroomConfig.memory.config.url.replace(/\/mcp\/?$/, "").replace(/\/$/, "") : HINDSIGHT_DEFAULT_API_BASE_URL;
   const hindsightRecallMaxMemories = agentConfig.memory?.recall?.max_memories;
   const hindsightRecallCacheTtlSecs = agentConfig.memory?.recall?.cache_ttl_secs;
   const hindsightRecallMinOverlap = agentConfig.memory?.recall?.min_overlap;
   const hindsightRecallTypes = agentConfig.memory?.recall?.types?.length ? agentConfig.memory.recall.types.join(",") : undefined;
   const hindsightRecallSkipTrivial = agentConfig.memory?.recall?.skip_trivial === undefined ? undefined : String(agentConfig.memory.recall.skip_trivial);
+  const hindsightDirectiveCaptureNudge = agentConfig.memory?.directive_capture_nudge === undefined ? undefined : String(agentConfig.memory.directive_capture_nudge);
   const topicAliases = agentConfig.channels?.telegram?.topic_aliases;
   const hindsightTopicAliasesJson = topicAliases && Object.keys(topicAliases).length > 0 ? JSON.stringify(topicAliases) : undefined;
   const senderBanks = switchroomConfig ? resolveUsers(switchroomConfig, name).senderBanks : agentConfig.memory?.recall?.sender_banks ?? {};
@@ -26084,6 +26623,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
     hindsightRecallMinOverlap,
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
+    hindsightDirectiveCaptureNudge,
     hindsightTopicAliasesJson,
     hindsightSenderBanksJson,
     hindsightTopicFilterMode
@@ -26452,12 +26992,12 @@ ${body}
         if (target === "workspace/SOUL.md") {
           skipped.push(agentSoulPath);
         } else {
-          rmSync3(agentSoulPath);
+          rmSync4(agentSoulPath);
           symlinkSync2("workspace/SOUL.md", agentSoulPath);
           created.push(agentSoulPath);
         }
       } else {
-        rmSync3(agentSoulPath);
+        rmSync4(agentSoulPath);
         symlinkSync2("workspace/SOUL.md", agentSoulPath);
         created.push(agentSoulPath);
       }
@@ -26490,8 +27030,10 @@ ${body}
       const userBankMission = agentConfig.memory?.bank_mission;
       const userRetainMission = agentConfig.memory?.retain_mission;
       const seededRetainMission = userRetainMission ?? DEFAULT_RETAIN_MISSION;
+      const extras = resolveBankMissionExtras(agentConfig.memory, agentConfig.extends ?? DEFAULT_PROFILE);
       const missions = {
-        retain_mission: seededRetainMission
+        retain_mission: seededRetainMission,
+        ...extras
       };
       if (userBankMission) {
         missions.bank_mission = userBankMission;
@@ -26506,6 +27048,17 @@ ${body}
       }).catch((err) => {
         console.warn(`  ${source_default.yellow("\u26a0")} Bank mission update error for ${formatAgentBankLabel(name, hindsightBankId)}: ${err}`);
       });
+      ensureDeclaredMentalModels(apiUrl, hindsightBankId, agentConfig.memory?.mental_models, { timeoutMs: 5000 }).then((outcomes) => {
+        for (const o of outcomes) {
+          if (o.ok) {
+            console.log(`  ${source_default.green("\u2713")} Mental model "${o.name}" ready for ${formatAgentBankLabel(name, hindsightBankId)}`);
+          } else {
+            console.warn(`  ${source_default.yellow("\u26a0")} Failed to ensure mental model "${o.name}" for ${formatAgentBankLabel(name, hindsightBankId)}: ${o.reason}`);
+          }
+        }
+      }).catch((err) => {
+        console.warn(`  ${source_default.yellow("\u26a0")} Mental model ensure error for ${formatAgentBankLabel(name, hindsightBankId)}: ${err}`);
+      });
     });
   }
   for (const f of rewrittenWithBackup) {
@@ -26884,7 +27437,7 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
     mkdirSync10(workspaceDir, { recursive: true });
     const legacyContent = readFileSync13(legacyCustomPath, "utf-8");
     writeFileSync4(newCustomPath, legacyContent, "utf-8");
-    rmSync3(legacyCustomPath);
+    rmSync4(legacyCustomPath);
     console.log(source_default.green(`  moved CLAUDE.custom.md \u2192 workspace/CLAUDE.custom.md`));
   }
   const tools = agentConfig.tools ?? { allow: [], deny: [] };
@@ -26923,12 +27476,13 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
   const resolvedBotToken = resolveBotToken(rawBotToken);
   const hindsightAutoRecallEnabled = hindsightEnabled && agentConfig.memory?.auto_recall !== false;
   const hindsightBankId = agentConfig.memory?.collection ?? name;
-  const hindsightApiBaseUrl = switchroomConfig.memory?.config?.url ? switchroomConfig.memory.config.url.replace(/\/mcp\/?$/, "").replace(/\/$/, "") : "http://127.0.0.1:8888";
+  const hindsightApiBaseUrl = switchroomConfig.memory?.config?.url ? switchroomConfig.memory.config.url.replace(/\/mcp\/?$/, "").replace(/\/$/, "") : HINDSIGHT_DEFAULT_API_BASE_URL;
   const hindsightRecallMaxMemories = agentConfig.memory?.recall?.max_memories;
   const hindsightRecallCacheTtlSecs = agentConfig.memory?.recall?.cache_ttl_secs;
   const hindsightRecallMinOverlap = agentConfig.memory?.recall?.min_overlap;
   const hindsightRecallTypes = agentConfig.memory?.recall?.types?.length ? agentConfig.memory.recall.types.join(",") : undefined;
   const hindsightRecallSkipTrivial = agentConfig.memory?.recall?.skip_trivial === undefined ? undefined : String(agentConfig.memory.recall.skip_trivial);
+  const hindsightDirectiveCaptureNudge = agentConfig.memory?.directive_capture_nudge === undefined ? undefined : String(agentConfig.memory.directive_capture_nudge);
   const topicAliases = agentConfig.channels?.telegram?.topic_aliases;
   const hindsightTopicAliasesJson = topicAliases && Object.keys(topicAliases).length > 0 ? JSON.stringify(topicAliases) : undefined;
   const senderBanks = switchroomConfig ? resolveUsers(switchroomConfig, name).senderBanks : agentConfig.memory?.recall?.sender_banks ?? {};
@@ -26968,6 +27522,7 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
       hindsightRecallMinOverlap,
       hindsightRecallTypes,
       hindsightRecallSkipTrivial,
+      hindsightDirectiveCaptureNudge,
       hindsightTopicAliasesJsonQ: hindsightTopicAliasesJson ? shellSingleQuote(hindsightTopicAliasesJson) : undefined,
       hindsightSenderBanksJsonQ: hindsightSenderBanksJson ? shellSingleQuote(hindsightSenderBanksJson) : undefined,
       hindsightTopicFilterMode,
@@ -27369,6 +27924,7 @@ ${body}
       hindsightRecallMinOverlap,
       hindsightRecallTypes,
       hindsightRecallSkipTrivial,
+      hindsightDirectiveCaptureNudge,
       hindsightTopicAliasesJson,
       hindsightSenderBanksJson,
       hindsightTopicFilterMode
@@ -27397,12 +27953,12 @@ ${body}
       if (stat.isSymbolicLink()) {
         const target = readlinkSync4(agentSoulPath);
         if (target !== "workspace/SOUL.md") {
-          rmSync3(agentSoulPath);
+          rmSync4(agentSoulPath);
           symlinkSync2("workspace/SOUL.md", agentSoulPath);
           changes.push(agentSoulPath);
         }
       } else {
-        rmSync3(agentSoulPath);
+        rmSync4(agentSoulPath);
         symlinkSync2("workspace/SOUL.md", agentSoulPath);
         changes.push(agentSoulPath);
       }
@@ -27446,14 +28002,15 @@ ${body}
     bankOpsChain.then((bankReady) => {
       if (!bankReady)
         return;
-      if (agentConfig.memory?.bank_mission || agentConfig.memory?.retain_mission) {
-        const missions = {};
-        if (agentConfig.memory?.bank_mission) {
-          missions.bank_mission = agentConfig.memory.bank_mission;
-        }
-        if (agentConfig.memory?.retain_mission) {
-          missions.retain_mission = agentConfig.memory.retain_mission;
-        }
+      const extras = resolveBankMissionExtras(agentConfig.memory, agentConfig.extends ?? DEFAULT_PROFILE);
+      const missions = { ...extras };
+      if (agentConfig.memory?.bank_mission) {
+        missions.bank_mission = agentConfig.memory.bank_mission;
+      }
+      if (agentConfig.memory?.retain_mission) {
+        missions.retain_mission = agentConfig.memory.retain_mission;
+      }
+      if (Object.keys(missions).length > 0) {
         updateBankMissions(apiUrl, hindsightBankId, missions, { timeoutMs: 5000 }).then((result) => {
           if (result.ok) {
             console.log(`  ${source_default.green("\u2713")} Bank missions updated for ${formatAgentBankLabel(name, hindsightBankId)}`);
@@ -27464,6 +28021,17 @@ ${body}
           console.warn(`  ${source_default.yellow("\u26a0")} Bank mission update error for ${formatAgentBankLabel(name, hindsightBankId)}: ${err}`);
         });
       }
+      ensureDeclaredMentalModels(apiUrl, hindsightBankId, agentConfig.memory?.mental_models, { timeoutMs: 5000 }).then((outcomes) => {
+        for (const o of outcomes) {
+          if (o.ok) {
+            console.log(`  ${source_default.green("\u2713")} Mental model "${o.name}" ready for ${formatAgentBankLabel(name, hindsightBankId)}`);
+          } else {
+            console.warn(`  ${source_default.yellow("\u26a0")} Failed to ensure mental model "${o.name}" for ${formatAgentBankLabel(name, hindsightBankId)}: ${o.reason}`);
+          }
+        }
+      }).catch((err) => {
+        console.warn(`  ${source_default.yellow("\u26a0")} Mental model ensure error for ${formatAgentBankLabel(name, hindsightBankId)}: ${err}`);
+      });
     });
   }
   return {
@@ -27558,7 +28126,7 @@ function reconcileConfiguredGroup(accessPath, agentConfig, telegramConfig) {
   const tmp = accessPath + ".tmp";
   writeFileSync4(tmp, JSON.stringify(access, null, 2) + `
 `, { mode: 384 });
-  renameSync3(tmp, accessPath);
+  renameSync4(tmp, accessPath);
   console.log(source_default.green(`  registered supergroup ${forumChatId} in access.json ` + `(responds to all topics; requireMention=false)`));
 }
 function buildAccessJson2(agentConfig, telegramConfig, resolvedTopicId, userId) {
@@ -27916,13 +28484,14 @@ var init_scaffold = __esm(() => {
   init_profiles();
   init_scaffold_integration();
   init_reconcile_default_skills();
-  init_hindsight();
+  init_hindsight2();
   init_state();
   init_paths();
   init_loader();
   init_resolver();
   init_vault();
   init_onboarding();
+  init_hindsight();
   init_bare_clone();
   init_agent_worktree();
   REPO_ROOT = resolve11(import.meta.dirname, "../..");
@@ -27940,8 +28509,31 @@ var init_scaffold = __esm(() => {
     "mcp__switchroom-telegram__progress_update"
   ];
   HINDSIGHT_MCP_TOOLS = [
-    "mcp__hindsight",
-    "mcp__hindsight__*"
+    "mcp__hindsight__recall",
+    "mcp__hindsight__retain",
+    "mcp__hindsight__sync_retain",
+    "mcp__hindsight__reflect",
+    "mcp__hindsight__create_directive",
+    "mcp__hindsight__update_bank",
+    "mcp__hindsight__delete_directive",
+    "mcp__hindsight__list_directives",
+    "mcp__hindsight__create_bank",
+    "mcp__hindsight__get_bank",
+    "mcp__hindsight__get_bank_stats",
+    "mcp__hindsight__list_banks",
+    "mcp__hindsight__delete_bank",
+    "mcp__hindsight__get_memory",
+    "mcp__hindsight__list_memories",
+    "mcp__hindsight__clear_memories",
+    "mcp__hindsight__get_document",
+    "mcp__hindsight__list_documents",
+    "mcp__hindsight__delete_document",
+    "mcp__hindsight__get_mental_model",
+    "mcp__hindsight__list_mental_models",
+    "mcp__hindsight__list_tags",
+    "mcp__hindsight__get_operation",
+    "mcp__hindsight__list_operations",
+    "mcp__hindsight__cancel_operation"
   ];
   AGENT_CONFIG_MCP_TOOLS = [
     "mcp__agent-config",
@@ -29033,7 +29625,7 @@ function resolveHostHomeForCompose() {
   }
   return homedir6();
 }
-async function writeComposeFile(opts) {
+async function computeComposeContent(opts) {
   const release = resolveRelease({ override: opts.releaseOverride, root: opts.config.release });
   const imageTag = resolveImageTag(release);
   const operatorUid = resolveOperatorUid();
@@ -29057,6 +29649,11 @@ async function writeComposeFile(opts) {
     previous = null;
   }
   const previousImageTag = previous ? AGENT_IMAGE_TAG_RE.exec(previous)?.[1] ?? null : null;
+  return { content, imageTag, previous, previousImageTag };
+}
+async function writeComposeFile(opts) {
+  const { content, imageTag, previous, previousImageTag } = await computeComposeContent(opts);
+  const operatorUid = resolveOperatorUid();
   await mkdir(dirname6(opts.composePath), { recursive: true });
   if (previous !== null) {
     try {
@@ -29089,7 +29686,7 @@ var init_write_compose = __esm(() => {
 });
 
 // src/agents/tmux.ts
-import { execFileSync as execFileSync5 } from "node:child_process";
+import { execFileSync as execFileSync6 } from "node:child_process";
 function sendAgentInterrupt(opts) {
   const { agentName } = opts;
   const attempts = typeof opts.attempts === "number" && opts.attempts > 0 ? opts.attempts : 1;
@@ -29099,7 +29696,7 @@ function sendAgentInterrupt(opts) {
   let lastError = null;
   for (let i = 0;i < attempts; i++) {
     try {
-      execFileSync5("tmux", args, {
+      execFileSync6("tmux", args, {
         timeout: 3000,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -29140,7 +29737,7 @@ var init_compose_env = () => {};
 import { resolve as resolve13 } from "node:path";
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { execFileSync as execFileSync6 } from "node:child_process";
+import { execFileSync as execFileSync7 } from "node:child_process";
 function resolveSwitchroomHome(explicit) {
   if (explicit && explicit.length > 0)
     return explicit;
@@ -29171,7 +29768,7 @@ function bringUpAgentService(opts) {
   const dockerBin = opts.dockerBin ?? "docker";
   const stdio = opts.stdio ?? "inherit";
   for (const svc of ["vault-broker", "approval-kernel", "switchroom-auth-broker"]) {
-    execFileSync6(dockerBin, [
+    execFileSync7(dockerBin, [
       "compose",
       "-f",
       composePath,
@@ -29183,7 +29780,7 @@ function bringUpAgentService(opts) {
       svc
     ], { stdio });
   }
-  execFileSync6(dockerBin, [
+  execFileSync7(dockerBin, [
     "compose",
     "-f",
     composePath,
@@ -29202,7 +29799,7 @@ var init_docker_fleet = __esm(() => {
 });
 
 // src/agents/singleton-reconcile.ts
-import { execFileSync as execFileSync7 } from "node:child_process";
+import { execFileSync as execFileSync8 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
 function resolveSingletonServices(voiceEngine) {
   const engine = voiceEngine ?? loadHostCapabilities()?.voice.engine ?? "cloud";
@@ -29228,7 +29825,7 @@ function readPinnedSingletonImages(composeText, services = SINGLETON_SERVICES) {
 }
 function defaultInspectImage(dockerBin, container) {
   try {
-    const out = execFileSync7(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
+    const out = execFileSync8(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
     return out.length > 0 ? out : null;
   } catch {
     return null;
@@ -29254,7 +29851,7 @@ function detectSingletonDrift(deps) {
   });
 }
 function defaultRecreate(dockerBin, project, composeFile, service) {
-  execFileSync7(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
+  execFileSync8(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
 }
 function reconcileSingletons(deps) {
   const dockerBin = deps.dockerBin ?? "docker";
@@ -29297,8 +29894,8 @@ var init_singleton_reconcile = __esm(() => {
 });
 
 // src/agents/lifecycle.ts
-import { execFileSync as execFileSync8, spawn, spawnSync } from "node:child_process";
-import { existsSync as existsSync20, mkdirSync as mkdirSync14, writeFileSync as writeFileSync7, renameSync as renameSync4, readFileSync as readFileSync17 } from "node:fs";
+import { execFileSync as execFileSync9, spawn, spawnSync } from "node:child_process";
+import { existsSync as existsSync20, mkdirSync as mkdirSync14, writeFileSync as writeFileSync7, renameSync as renameSync5, readFileSync as readFileSync17 } from "node:fs";
 import { resolve as resolve14, join as join14 } from "node:path";
 import { connect } from "node:net";
 function cleanShutdownMarkerPathForAgent(name) {
@@ -29320,7 +29917,7 @@ function writeRestartReasonMarker(name, reason, opts = {}) {
     const marker = { ts: Date.now(), signal: "SIGTERM", reason };
     const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
     writeFileSync7(tmp, JSON.stringify(marker), "utf-8");
-    renameSync4(tmp, path);
+    renameSync5(tmp, path);
   } catch {}
 }
 function buildCliRestartReason(opts) {
@@ -29328,7 +29925,7 @@ function buildCliRestartReason(opts) {
   if (!buildCommit)
     return "cli: restart";
   try {
-    const head = execFileSync8("git", ["rev-parse", "HEAD"], {
+    const head = execFileSync9("git", ["rev-parse", "HEAD"], {
       cwd: cwd ?? process.cwd(),
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -29339,7 +29936,7 @@ function buildCliRestartReason(opts) {
       return "cli: restart";
     let subject = "";
     try {
-      subject = execFileSync8("git", ["log", "-1", "--pretty=%s", head], {
+      subject = execFileSync9("git", ["log", "-1", "--pretty=%s", head], {
         cwd: cwd ?? process.cwd(),
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -29369,7 +29966,7 @@ function reconcileSingletonImages(log) {
 }
 function dockerSync(args) {
   try {
-    return execFileSync8("docker", args, {
+    return execFileSync9("docker", args, {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -29758,12 +30355,12 @@ var init_lifecycle = __esm(() => {
 });
 
 // src/auth/pane-ready-probe.ts
-import { execFileSync as execFileSync10 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 function defaultPaneReadyDeps() {
   return {
     capturePane(sessionName) {
       try {
-        return execFileSync10("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
+        return execFileSync11("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
           encoding: "utf-8",
           stdio: ["pipe", "pipe", "pipe"]
         }).trim();
@@ -29805,12 +30402,12 @@ import {
   mkdirSync as mkdirSync16,
   readFileSync as readFileSync21,
   readdirSync as readdirSync10,
-  renameSync as renameSync6,
-  rmSync as rmSync4,
+  renameSync as renameSync7,
+  rmSync as rmSync5,
   statSync as statSync12,
   writeFileSync as writeFileSync9
 } from "node:fs";
-import { randomBytes as randomBytes2 } from "node:crypto";
+import { randomBytes as randomBytes3 } from "node:crypto";
 import { join as join17 } from "node:path";
 function claudeDir(agentDir) {
   return join17(agentDir, ".claude");
@@ -29944,13 +30541,13 @@ function syncLegacyFromActive(agentDir) {
 }
 function atomicCopy(src, dest, mode) {
   const contents = readFileSync21(src);
-  const tmp = `${dest}.tmp-${process.pid}-${randomBytes2(4).toString("hex")}`;
+  const tmp = `${dest}.tmp-${process.pid}-${randomBytes3(4).toString("hex")}`;
   try {
     writeFileSync9(tmp, contents, { mode });
-    renameSync6(tmp, dest);
+    renameSync7(tmp, dest);
   } catch (err) {
     try {
-      rmSync4(tmp);
+      rmSync5(tmp);
     } catch {}
     throw err;
   }
@@ -30044,7 +30641,7 @@ var init_accounts = __esm(() => {
 });
 
 // src/auth/manager.ts
-import { execFileSync as execFileSync11 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 import {
   readFileSync as readFileSync22,
   readdirSync as readdirSync11,
@@ -30052,7 +30649,7 @@ import {
   writeFileSync as writeFileSync10,
   mkdirSync as mkdirSync17,
   mkdtempSync as mkdtempSync2,
-  rmSync as rmSync5,
+  rmSync as rmSync6,
   chmodSync as chmodSync3,
   statSync as statSync13
 } from "node:fs";
@@ -30095,14 +30692,14 @@ function authSessionName(name, slot) {
   return `${base}-${slot.replace(/[^a-zA-Z0-9_.-]/g, "-")}`;
 }
 function tmux(args) {
-  return execFileSync11("tmux", args, {
+  return execFileSync12("tmux", args, {
     encoding: "utf-8",
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function tmuxSessionExists(sessionName) {
   try {
-    execFileSync11("tmux", ["has-session", "-t", sessionName], {
+    execFileSync12("tmux", ["has-session", "-t", sessionName], {
       stdio: ["pipe", "pipe", "pipe"]
     });
     return true;
@@ -30180,7 +30777,7 @@ function writeAuthSessionMeta(agentDir, meta) {
   });
 }
 function clearAuthSessionMeta(agentDir) {
-  rmSync5(authSessionMetaPath(agentDir), { force: true });
+  rmSync6(authSessionMetaPath(agentDir), { force: true });
 }
 function isSessionStale(agentDir, sessionName) {
   const meta = readJsonFile(authSessionMetaPath(agentDir));
@@ -30206,7 +30803,7 @@ function cleanupAuthTempDirs(agentDir) {
   try {
     for (const entry of readdirSync11(dir)) {
       if (entry.startsWith(".setup-token-tmp-")) {
-        rmSync5(join18(dir, entry), { recursive: true, force: true });
+        rmSync6(join18(dir, entry), { recursive: true, force: true });
       }
     }
   } catch {}
@@ -30364,7 +30961,7 @@ function startAuthSession(name, agentDir, opts = {}) {
   mkdirSync17(claudeDir2(agentDir), { recursive: true });
   cleanupAuthTempDirs(agentDir);
   const logPath = authLogPath(agentDir);
-  rmSync5(logPath, { force: true });
+  rmSync6(logPath, { force: true });
   let configDir;
   if (opts.force) {
     configDir = mkdtempSync2(join18(claudeDir2(agentDir), ".setup-token-tmp-"));
@@ -30520,8 +31117,8 @@ function submitAuthCode(name, agentDir, code, slot, _opts = {}) {
   } catch {}
   clearAuthSessionMeta(agentDir);
   cleanupAuthTempDirs(agentDir);
-  rmSync5(authLogPath(agentDir), { force: true });
-  rmSync5(credentialsPath(agentDir), { force: true });
+  rmSync6(authLogPath(agentDir), { force: true });
+  rmSync6(credentialsPath(agentDir), { force: true });
   const outcome = { kind: "success" };
   return {
     completed: true,
@@ -30652,7 +31249,7 @@ __export(exports_inject, {
   INJECT_BLOCKED: () => INJECT_BLOCKED,
   INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
 });
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync14 } from "node:child_process";
 function validateInjectCommand(command) {
   if (typeof command !== "string" || command.trim().length === 0) {
     throw new InjectError("invalid", "command is empty");
@@ -30698,7 +31295,7 @@ function makeTmuxRunner(tmuxBin) {
   return {
     capture(socket, session) {
       try {
-        return execFileSync13(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+        return execFileSync14(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
       } catch {
         return null;
       }
@@ -30708,11 +31305,11 @@ function makeTmuxRunner(tmuxBin) {
       const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
       const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
       const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
-      execFileSync13(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
+      execFileSync14(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
     },
     hasSession(socket, session) {
       try {
-        execFileSync13(tmuxBin, ["-L", socket, "has-session", "-t", session], {
+        execFileSync14(tmuxBin, ["-L", socket, "has-session", "-t", session], {
           stdio: ["pipe", "pipe", "pipe"]
         });
         return true;
@@ -31607,8 +32204,8 @@ import {
   mkdirSync as mkdirSync19,
   readFileSync as readFileSync26,
   readdirSync as readdirSync15,
-  renameSync as renameSync7,
-  rmSync as rmSync10,
+  renameSync as renameSync8,
+  rmSync as rmSync11,
   statSync as statSync16,
   writeFileSync as writeFileSync14
 } from "node:fs";
@@ -31737,73 +32334,6 @@ var init_google_workspace_yaml = __esm(() => {
   import_yaml7 = __toESM(require_dist(), 1);
 });
 
-// src/util/atomic.ts
-var exports_atomic = {};
-__export(exports_atomic, {
-  writeConfigFileSync: () => writeConfigFileSync,
-  atomicWriteJsonSync: () => atomicWriteJsonSync,
-  atomicWriteFileSync: () => atomicWriteFileSync2
-});
-import { randomBytes as randomBytes3 } from "node:crypto";
-import { closeSync as closeSync5, constants, fsyncSync as fsyncSync3, openSync as openSync5, renameSync as renameSync8, rmSync as rmSync11, writeSync as writeSync4 } from "node:fs";
-function atomicWriteFileSync2(destPath, contents, mode = 384) {
-  const tmp = `${destPath}.tmp-${process.pid}-${randomBytes3(4).toString("hex")}`;
-  const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
-  let fd = null;
-  try {
-    fd = openSync5(tmp, TMP_OPEN_FLAGS, mode);
-    writeSync4(fd, buf, 0, buf.length, 0);
-    fsyncSync3(fd);
-    closeSync5(fd);
-    fd = null;
-    renameSync8(tmp, destPath);
-  } catch (err) {
-    if (fd !== null) {
-      try {
-        closeSync5(fd);
-      } catch {}
-    }
-    try {
-      rmSync11(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-function atomicWriteJsonSync(destPath, value, mode = 384) {
-  atomicWriteFileSync2(destPath, JSON.stringify(value, null, 2) + `
-`, mode);
-}
-function writeConfigFileSync(destPath, contents, mode = 420) {
-  try {
-    atomicWriteFileSync2(destPath, contents, mode);
-  } catch (err) {
-    const code = err.code;
-    if (code !== "EBUSY" && code !== "EXDEV" && code !== "EINVAL") {
-      throw err;
-    }
-    const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
-    let fd = null;
-    try {
-      fd = openSync5(destPath, constants.O_WRONLY | constants.O_TRUNC, mode);
-      writeSync4(fd, buf, 0, buf.length, 0);
-      fsyncSync3(fd);
-      closeSync5(fd);
-      fd = null;
-    } catch (fallbackErr) {
-      if (fd !== null) {
-        try {
-          closeSync5(fd);
-        } catch {}
-      }
-      throw fallbackErr;
-    }
-  }
-}
-var TMP_OPEN_FLAGS;
-var init_atomic = __esm(() => {
-  TMP_OPEN_FLAGS = constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0);
-});
-
 // src/drive/oauth.ts
 var exports_oauth = {};
 __export(exports_oauth, {
@@ -33536,7 +34066,7 @@ __export(exports_via_claude, {
   PRE_PASTE_RULES: () => PRE_PASTE_RULES,
   POST_PASTE_RULES: () => POST_PASTE_RULES
 });
-import { execFileSync as execFileSync14, spawnSync as spawnSync3 } from "node:child_process";
+import { execFileSync as execFileSync15, spawnSync as spawnSync3 } from "node:child_process";
 import { existsSync as existsSync34, mkdirSync as mkdirSync20, readFileSync as readFileSync29 } from "node:fs";
 import { join as join26, resolve as resolve24 } from "node:path";
 function tmuxHasSession(session) {
@@ -33547,7 +34077,7 @@ function tmuxHasSession(session) {
 }
 function tmuxKillSession(session) {
   try {
-    execFileSync14("tmux", ["kill-session", "-t", session], {
+    execFileSync15("tmux", ["kill-session", "-t", session], {
       stdio: "ignore",
       timeout: 3000
     });
@@ -33555,7 +34085,7 @@ function tmuxKillSession(session) {
 }
 function tmuxCapturePane(session) {
   try {
-    const out = execFileSync14("tmux", ["capture-pane", "-p", "-t", session, "-S", "-200"], { timeout: 3000, stdio: ["ignore", "pipe", "pipe"], maxBuffer: 4 * 1024 * 1024 });
+    const out = execFileSync15("tmux", ["capture-pane", "-p", "-t", session, "-S", "-200"], { timeout: 3000, stdio: ["ignore", "pipe", "pipe"], maxBuffer: 4 * 1024 * 1024 });
     return out.toString("utf8");
   } catch {
     return "";
@@ -33563,7 +34093,7 @@ function tmuxCapturePane(session) {
 }
 function tmuxSendKeys(session, keys, literal = false) {
   try {
-    execFileSync14("tmux", ["send-keys", "-t", session, ...literal ? ["-l"] : [], ...keys], { timeout: 3000, stdio: ["ignore", "pipe", "pipe"] });
+    execFileSync15("tmux", ["send-keys", "-t", session, ...literal ? ["-l"] : [], ...keys], { timeout: 3000, stdio: ["ignore", "pipe", "pipe"] });
   } catch {}
 }
 function extractAuthorizeUrl(pane) {
@@ -33592,7 +34122,7 @@ async function runViaClaude(opts) {
       tmuxKillSession(SESSION);
   }
   const spawn4 = opts.spawnClaude ?? (() => {
-    execFileSync14("tmux", [
+    execFileSync15("tmux", [
       "new-session",
       "-d",
       "-s",
@@ -39970,6 +40500,30 @@ function classifyShmSize(bytes) {
   const gib = (bytes / 1024 / 1024 / 1024).toFixed(bytes % 1024 ** 3 === 0 ? 0 : 1);
   return { name: "hindsight shm-size", status: "ok", detail: `${gib}g` };
 }
+function classifyConsolidationBacklog(queueDepth, oldestAgeSecs = null) {
+  const ageStr = oldestAgeSecs !== null && oldestAgeSecs > 0 ? `, oldest ${Math.round(oldestAgeSecs / 60)}m old` : "";
+  const base = `${queueDepth} pending consolidation op(s)${ageStr}`;
+  if (queueDepth >= CONSOLIDATION_BACKLOG_FAIL) {
+    return {
+      name: "hindsight consolidation backlog",
+      status: "fail",
+      detail: `${base} \u2014 queue is deep enough to be wedged; retains are landing but ` + `not consolidating into recall (drains ~7 ops/hr under the #2894 throttle)`,
+      fix: "Check `docker logs switchroom-hindsight` for the queue-lag WARNING and " + "consolidation errors (quota/429/shm); restart with `switchroom memory " + "--restart` if the worker is stuck."
+    };
+  }
+  if (queueDepth >= CONSOLIDATION_BACKLOG_WARN) {
+    return {
+      name: "hindsight consolidation backlog",
+      status: "warn",
+      detail: `${base} \u2014 building faster than it drains (~7 ops/hr under the #2894 ` + `throttle); recall may lag recent turns until it catches up`
+    };
+  }
+  return {
+    name: "hindsight consolidation backlog",
+    status: "ok",
+    detail: queueDepth > 0 ? base : "queue drained (0 pending)"
+  };
+}
 function classifyExtractionLogs(logs) {
   const noSpace = /No space left on device|could not resize shared memory/i.test(logs);
   const llmError = /Claude Code returned an error result|claude_code_llm[\s\S]{0,80}error|Fact extraction failed|Content extraction failed/i.test(logs);
@@ -40026,6 +40580,49 @@ function checkHindsightContainerHealth(opts) {
   } catch {}
   return results;
 }
+function classifyHindsightHealthProbe(status, port) {
+  if (status === 200) {
+    return {
+      name: "hindsight /health",
+      status: "ok",
+      detail: `200 at :${port} \u2014 memory backend live`
+    };
+  }
+  if (status === null) {
+    return {
+      name: "hindsight /health",
+      status: "fail",
+      detail: `no response on :${port} \u2014 the container is down or crash-looping ` + `(fleet memory is silently OFF: auto-recall/retain fail with no user error)`,
+      fix: "Check `docker logs switchroom-hindsight` for `[Errno 98] address " + "already in use` (a foreign process on the port) and run " + "`switchroom memory --start` \u2014 the launcher now preflights the port " + "and reassigns instead of crash-looping."
+    };
+  }
+  return {
+    name: "hindsight /health",
+    status: "fail",
+    detail: `HTTP ${status} at :${port} \u2014 memory backend unhealthy`,
+    fix: "Inspect `docker logs switchroom-hindsight`; restart with `switchroom memory --restart`."
+  };
+}
+async function checkHindsightHealthEndpoint(mcpUrl, opts = {}) {
+  const doFetch = opts.fetchImpl ?? fetch;
+  const timeoutMs = opts.timeoutMs ?? 4000;
+  const origin = mcpUrl.replace(/\/mcp\/?$/, "").replace(/\/$/, "");
+  const healthUrl = `${origin}/health`;
+  const port = (() => {
+    const m = origin.match(/:(\d+)(?:$|\/)/);
+    return m ? parseInt(m[1], 10) : 80;
+  })();
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await doFetch(healthUrl, { signal: controller.signal });
+    return classifyHindsightHealthProbe(res.status, port);
+  } catch {
+    return classifyHindsightHealthProbe(null, port);
+  } finally {
+    clearTimeout(timer);
+  }
+}
 function classifyToolContract(advertised) {
   const byName = new Map(advertised.map((t) => [t.name, t]));
   const results = [];
@@ -40068,7 +40665,7 @@ function classifyToolContract(advertised) {
   }
   return results;
 }
-var MIN_HINDSIGHT_SHM_BYTES;
+var MIN_HINDSIGHT_SHM_BYTES, CONSOLIDATION_BACKLOG_WARN = 25, CONSOLIDATION_BACKLOG_FAIL = 200;
 var init_doctor_memory = __esm(() => {
   init_hindsight_tools();
   MIN_HINDSIGHT_SHM_BYTES = 1024 * 1024 * 1024;
@@ -43474,6 +44071,19 @@ async function checkBankIngestHealth(config, url, opts) {
       banks.set(bank, []);
   }
   const inspected = await Promise.all([...banks].map(async ([bankId, agents]) => [bankId, agents, await inspectBankHealth(url, bankId, { fetchImpl: opts?.fetchImpl })]));
+  let backlogRow;
+  if (opts?.includeConsolidationBacklog) {
+    let totalPending = 0;
+    let anyBankReachable = false;
+    for (const [, , h] of inspected) {
+      if (h.ok) {
+        anyBankReachable = true;
+        totalPending += h.pendingOperations;
+      }
+    }
+    if (anyBankReachable)
+      backlogRow = classifyConsolidationBacklog(totalPending);
+  }
   for (const [bankId, agents, h] of inspected) {
     const label = `bank ${bankId}` + (profileBanks.has(bankId) ? " (profile)" : agents[0] !== bankId ? ` (${agents.join(", ")})` : "");
     if (!h.ok) {
@@ -43535,6 +44145,8 @@ async function checkBankIngestHealth(config, url, opts) {
     }
     results.push({ name: label, status: "ok", detail: summary });
   }
+  if (backlogRow)
+    results.push(backlogRow);
   return results;
 }
 function hindsightDocReprocessUrl(mcpUrl, bankId, docId) {
@@ -43545,7 +44157,7 @@ async function checkHindsight(config) {
   if (!isHindsightEnabled(config)) {
     return [];
   }
-  const url = config.memory?.config?.url ?? "http://localhost:8888/mcp/";
+  const url = config.memory?.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   const results = [];
   const match = url.match(/^https?:\/\/([^:/]+):?(\d+)?/);
   if (!match) {
@@ -43591,7 +44203,8 @@ async function checkHindsight(config) {
   }
   results.push(checkHindsightConsumer(config));
   results.push(...checkHindsightContainerHealth());
-  results.push(...await checkBankIngestHealth(config, url));
+  results.push(await checkHindsightHealthEndpoint(url));
+  results.push(...await checkBankIngestHealth(config, url, { includeConsolidationBacklog: true }));
   for (const [agentName, agentConfig] of Object.entries(config.agents)) {
     const bankId = agentConfig.memory?.collection ?? agentName;
     const hasBankMission = !!agentConfig.memory?.bank_mission;
@@ -44745,6 +45358,7 @@ var init_doctor = __esm(() => {
   init_manager();
   init_accounts();
   init_manifest();
+  init_hindsight2();
   init_hindsight();
   init_doctor_memory();
   init_doctor_docker();
@@ -48352,12 +48966,15 @@ var exports_apply = {};
 __export(exports_apply, {
   writeInstallTypeCache: () => writeInstallTypeCache,
   runApplyPreflight: () => runApplyPreflight,
+  runApplyDryRun: () => runApplyDryRun,
   runApply: () => runApply,
   resolveVaultBindMountDir: () => resolveVaultBindMountDir,
   resolveOperatorVaultPassphrase: () => resolveOperatorVaultPassphrase,
   registerApplyCommand: () => registerApplyCommand,
   reexecUnderSudo: () => reexecUnderSudo,
   provisionLiteLLMKeys: () => provisionLiteLLMKeys,
+  probeVaultProvisioning: () => probeVaultProvisioning,
+  parseComposeServiceNames: () => parseComposeServiceNames,
   isInAgentContainer: () => isInAgentContainer,
   inspectVaultBindMountDir: () => inspectVaultBindMountDir,
   formatScaffoldFailureResolution: () => formatScaffoldFailureResolution,
@@ -49040,6 +49657,186 @@ Done. Scaffolded ${scaffolded}/${allAgentNames.length} agents.
     failures
   };
 }
+async function probeVaultProvisioning(config, agentNames, home2) {
+  const optedIn = [];
+  for (const name of agentNames) {
+    const agentConfig = config.agents[name];
+    if (!agentConfig)
+      continue;
+    const resolved = resolveAgentConfig(config.defaults, config.profiles, agentConfig);
+    if (effectiveLiteLLMEnabled(config, resolved.litellm))
+      optedIn.push(name);
+  }
+  const needsHindsight = config.litellm?.enabled === true && config.memory?.backend === "hindsight";
+  const passphraseAvailable = await resolveOperatorVaultPassphrase(home2) !== null;
+  const alreadyProvisioned = [];
+  const unprovisionedNew = [];
+  const brokerUnreachable = [];
+  if (optedIn.length > 0) {
+    const { getViaBrokerStructured: getViaBrokerStructured2 } = await Promise.resolve().then(() => (init_client(), exports_client));
+    for (const name of optedIn) {
+      const existing = await getViaBrokerStructured2(`litellm/${name}/api-key`);
+      if (existing.kind === "ok")
+        alreadyProvisioned.push(name);
+      else if (existing.kind === "unreachable")
+        brokerUnreachable.push(name);
+      else
+        unprovisionedNew.push(name);
+    }
+  }
+  return {
+    optedInCount: optedIn.length,
+    passphraseAvailable,
+    alreadyProvisioned,
+    unprovisionedNew,
+    brokerUnreachable,
+    needsHindsight
+  };
+}
+function parseComposeServiceNames(compose) {
+  const lines = compose.split(`
+`);
+  const names = [];
+  let inServices = false;
+  for (const line of lines) {
+    if (/^services:\s*$/.test(line)) {
+      inServices = true;
+      continue;
+    }
+    if (inServices && /^\S/.test(line))
+      break;
+    if (!inServices)
+      continue;
+    const m = /^ {2}([A-Za-z0-9_.-]+):\s*$/.exec(line);
+    if (m)
+      names.push(m[1]);
+  }
+  return names;
+}
+async function runApplyDryRun(config, options, deps = {}, switchroomConfigPath) {
+  const writeOut = deps.writeOut ?? ((s) => process.stdout.write(s));
+  const writeErr = deps.writeErr ?? ((s) => process.stderr.write(s));
+  const blocking = [];
+  const warnings = [];
+  const info = [];
+  writeOut(source_default.bold(`
+Dry-run: validating switchroom config (no changes will be written)...
+`));
+  try {
+    runApplyPreflight(config, { detectComposeV2: deps.detectComposeV2 });
+  } catch (err) {
+    blocking.push(`preflight: ${err.message}`);
+  }
+  const allAgentNames = Object.keys(config.agents ?? {});
+  const agentNames = options.only !== undefined ? [options.only] : allAgentNames;
+  if (options.only !== undefined && !allAgentNames.includes(options.only)) {
+    blocking.push(`apply --only=${options.only}: no such agent in switchroom.yaml (defined: ${allAgentNames.join(", ") || "none"}).`);
+  }
+  for (const name of agentNames) {
+    const agentConfig = config.agents[name];
+    if (!agentConfig)
+      continue;
+    const profileName = agentConfig.extends ?? "default";
+    try {
+      getProfilePath(profileName);
+      resolveAgentConfig(config.defaults, config.profiles, agentConfig);
+    } catch (err) {
+      blocking.push(`profile '${profileName}' for agent '${name}': ${err.message}`);
+    }
+  }
+  try {
+    const probe2 = await probeVaultProvisioning(config, agentNames, homedir47());
+    if (probe2.alreadyProvisioned.length > 0) {
+      info.push(`litellm: ${probe2.alreadyProvisioned.length} agent(s) already provisioned (${probe2.alreadyProvisioned.join(", ")}).`);
+    }
+    if (probe2.brokerUnreachable.length > 0) {
+      warnings.push(`litellm: vault-broker unreachable \u2014 could not verify/provision ` + `${probe2.brokerUnreachable.length} agent(s) (${probe2.brokerUnreachable.join(", ")}); they keep their previous routing env.`);
+    }
+    const pending = [
+      ...probe2.unprovisionedNew,
+      ...probe2.needsHindsight ? ["hindsight (service)"] : []
+    ];
+    if (pending.length > 0) {
+      if (probe2.passphraseAvailable) {
+        info.push(`litellm: would provision ${pending.length} new virtual key(s) (${pending.join(", ")}) \u2014 vault passphrase is available.`);
+      } else {
+        blocking.push(`litellm: ${pending.length} agent(s)/service(s) need a NEW vault key (${pending.join(", ")}) but the vault passphrase is unavailable (no SWITCHROOM_VAULT_PASSPHRASE env and machine-id auto-unlock blob ` + `missing/undecryptable) \u2014 a real apply could not provision them.`);
+      }
+    }
+  } catch (err) {
+    warnings.push(`litellm: provisioning probe failed \u2014 ${err.message}`);
+  }
+  let imageTag = null;
+  let previousImageTag = null;
+  let composeChanged = false;
+  let addedServices = [];
+  let removedServices = [];
+  try {
+    const computed = await computeComposeContent({
+      config,
+      composePath: options.outPath ?? DEFAULT_COMPOSE_PATH2,
+      switchroomConfigPath,
+      releaseOverride: options.releaseOverride,
+      buildMode: options.buildLocal ? "local" : "pull",
+      buildContext: options.buildContext
+    });
+    imageTag = computed.imageTag;
+    previousImageTag = computed.previousImageTag;
+    composeChanged = computed.previous !== computed.content;
+    const newServices = parseComposeServiceNames(computed.content);
+    const oldServices = computed.previous ? parseComposeServiceNames(computed.previous) : [];
+    addedServices = newServices.filter((s) => !oldServices.includes(s));
+    removedServices = oldServices.filter((s) => !newServices.includes(s));
+    if (previousImageTag === null) {
+      info.push(`compose: no existing compose on disk \u2014 a real apply would create it.`);
+    } else if (previousImageTag !== imageTag) {
+      info.push(`compose: agent image would change ${previousImageTag} \u2192 ${imageTag}.`);
+    } else {
+      info.push(`compose: agent image unchanged (${imageTag}).`);
+    }
+    if (addedServices.length > 0) {
+      info.push(`compose: services added: ${addedServices.join(", ")}.`);
+    }
+    if (removedServices.length > 0) {
+      info.push(`compose: services removed: ${removedServices.join(", ")}.`);
+    }
+    if (previousImageTag !== null && !composeChanged) {
+      info.push(`compose: no change (would be byte-identical to the current file).`);
+    }
+  } catch (err) {
+    blocking.push(`compose generation: ${err.message}`);
+  }
+  for (const line of info)
+    writeOut(source_default.gray(`  ~ ${line}
+`));
+  for (const line of warnings)
+    writeErr(source_default.yellow(`  ! ${line}
+`));
+  for (const line of blocking)
+    writeErr(source_default.red(`  x ${line}
+`));
+  const wouldSucceed = blocking.length === 0;
+  writeOut(`
+`);
+  if (wouldSucceed) {
+    writeOut(source_default.green.bold(`Dry-run: a real apply would SUCCEED. ${allAgentNames.length} agent(s) validated; nothing was written.
+`));
+  } else {
+    writeErr(source_default.red.bold(`Dry-run: a real apply would FAIL \u2014 ${blocking.length} blocking condition(s) above. Nothing was written.
+`));
+  }
+  return {
+    blocking,
+    warnings,
+    info,
+    imageTag,
+    previousImageTag,
+    composeChanged,
+    addedServices,
+    removedServices,
+    wouldSucceed
+  };
+}
 function formatScaffoldFailureResolution(failures, scaffolded, agentsTotal) {
   const fail3 = failures.length;
   const lines = [];
@@ -49157,7 +49954,7 @@ ERROR: failed to spawn sudo: ${result.error.message}
   process.exit(result.status ?? 1);
 }
 function registerApplyCommand(program3) {
-  program3.command("apply").description("Apply switchroom.yaml: scaffold every agent and (re)generate the compose file. Run `docker compose -f <path> up -d` afterwards to bring the fleet up.").option("--build-local [context]", "Dev-only: emit `build:` blocks instead of GHCR `image:` refs so `docker compose up --build` rebuilds from in-tree Dockerfiles. Optional context path (defaults to cwd).").option("-o, --out <path>", `Override compose output path (default: ${DEFAULT_COMPOSE_PATH2}).`).option("--example <name>", "Copy an example config into cwd before applying (e.g., 'switchroom' or 'minimal').").option("--non-interactive", "Skip prompts (e.g. sudo-chown explainer for UID alignment). Use in CI / scripts.").option("--allow-unaligned", "Treat UID-alignment chown failures as warnings instead of hard errors. Unsafe: an unaligned state dir will break the agent on first write. Use only if you know you'll fix ownership out-of-band.").option("--only <agent>", "Restrict scaffold + UID-alignment to a single agent (compose still covers the full fleet). Use during a v0.6 \u2192 v0.7 cutover to migrate agents one at a time without breaking the systemd-managed siblings.").option("--compose-only", "Skip the per-agent scaffold loop entirely; only (re)generate the compose file. Use in CI / scripts that can't chown into per-agent state dirs (mode 0700, owned by per-agent UIDs in v0.7+ docker mode). The full apply still runs preflight + emits compose; only the start.sh / .mcp.json / settings.json refresh is skipped.").option("--no-doctor", "Skip the post-apply doctor sweep that surfaces stale start.sh / unhealthy agents (#929). Default: doctor runs after a successful scaffold so the operator sees whether the v0.7+ post-Phase-4 supervisor block is now in place. `switchroom update` passes this internally to avoid running doctor twice (it has its own doctor step).").addOption(new Option("--channel <c>", "Override the resolved `release` block for this apply run: follow the named channel pointer (dev|rc|latest). Mutually exclusive with --pin.").choices(["dev", "rc", "latest"]).conflicts("pin")).addOption(new Option("--pin <p>", "Override the resolved `release` block for this apply run: pin to a specific build (sha-<7-40 hex> or v<semver>). Mutually exclusive with --channel.").conflicts("channel")).option("--print-sudo-cmd", "Print the sudo invocation that `apply` would re-exec itself with when escalation is needed, then exit. Operators who want to script the escalation themselves (CI, custom orchestration) can capture this. Note: tokens are space-separated and not shell-quoted; re-quote arguments if pasting into a shell.").addOption(new Option("--skip-self-elevate").default(false).hideHelp()).action(async (opts) => {
+  program3.command("apply").description("Apply switchroom.yaml: scaffold every agent and (re)generate the compose file. Run `docker compose -f <path> up -d` afterwards to bring the fleet up.").option("--build-local [context]", "Dev-only: emit `build:` blocks instead of GHCR `image:` refs so `docker compose up --build` rebuilds from in-tree Dockerfiles. Optional context path (defaults to cwd).").option("-o, --out <path>", `Override compose output path (default: ${DEFAULT_COMPOSE_PATH2}).`).option("--example <name>", "Copy an example config into cwd before applying (e.g., 'switchroom' or 'minimal').").option("--non-interactive", "Skip prompts (e.g. sudo-chown explainer for UID alignment). Use in CI / scripts.").option("--allow-unaligned", "Treat UID-alignment chown failures as warnings instead of hard errors. Unsafe: an unaligned state dir will break the agent on first write. Use only if you know you'll fix ownership out-of-band.").option("--only <agent>", "Restrict scaffold + UID-alignment to a single agent (compose still covers the full fleet). Use during a v0.6 \u2192 v0.7 cutover to migrate agents one at a time without breaking the systemd-managed siblings.").option("--compose-only", "Skip the per-agent scaffold loop entirely; only (re)generate the compose file. Use in CI / scripts that can't chown into per-agent state dirs (mode 0700, owned by per-agent UIDs in v0.7+ docker mode). The full apply still runs preflight + emits compose; only the start.sh / .mcp.json / settings.json refresh is skipped.").option("--dry-run", "Validate only: run the full compose-regeneration + validation pipeline IN MEMORY (resolve every agent's profile, probe the vault-broker for key-provisioning gaps, compute the would-be compose) and print a report \u2014 without writing the compose file, persisting anything, or touching a container. Exits non-zero if a real apply would fail (e.g. a profile can't resolve). Use as a pre-flight before a `rollout`/`update` (which only print the step plan, not the config-regeneration that actually fails).").option("--no-doctor", "Skip the post-apply doctor sweep that surfaces stale start.sh / unhealthy agents (#929). Default: doctor runs after a successful scaffold so the operator sees whether the v0.7+ post-Phase-4 supervisor block is now in place. `switchroom update` passes this internally to avoid running doctor twice (it has its own doctor step).").addOption(new Option("--channel <c>", "Override the resolved `release` block for this apply run: follow the named channel pointer (dev|rc|latest). Mutually exclusive with --pin.").choices(["dev", "rc", "latest"]).conflicts("pin")).addOption(new Option("--pin <p>", "Override the resolved `release` block for this apply run: pin to a specific build (sha-<7-40 hex> or v<semver>). Mutually exclusive with --channel.").conflicts("channel")).option("--print-sudo-cmd", "Print the sudo invocation that `apply` would re-exec itself with when escalation is needed, then exit. Operators who want to script the escalation themselves (CI, custom orchestration) can capture this. Note: tokens are space-separated and not shell-quoted; re-quote arguments if pasting into a shell.").addOption(new Option("--skip-self-elevate").default(false).hideHelp()).action(async (opts) => {
     try {
       if (opts.example) {
         copyExampleConfig2(opts.example);
@@ -49171,6 +49968,23 @@ function registerApplyCommand(program3) {
 `);
         process.exit(0);
       }
+      if (opts.dryRun) {
+        const dry = await runApplyDryRun(config, {
+          buildLocal: !!opts.buildLocal,
+          buildContext: typeof opts.buildLocal === "string" ? opts.buildLocal : process.cwd(),
+          outPath: opts.out,
+          only: opts.only,
+          releaseOverride: opts.channel ? { channel: opts.channel } : opts.pin ? { pin: opts.pin } : undefined,
+          dryRun: true
+        }, {}, switchroomConfigPath);
+        await captureEvent("apply_dry_run", {
+          agents_total: Object.keys(config.agents ?? {}).length,
+          would_succeed: dry.wouldSucceed,
+          blocking: dry.blocking.length,
+          warnings: dry.warnings.length
+        });
+        process.exit(dry.wouldSucceed ? 0 : 1);
+      }
       if (!opts.skipSelfElevate && !opts.composeOnly && process.geteuid?.() !== 0) {
         const unwritable = findUnwritableAgentDirs(config, {
           only: opts.only
@@ -49278,6 +50092,7 @@ var init_apply = __esm(() => {
   init_update_prompt_hook();
   init_compose();
   init_write_compose();
+  init_profiles();
   init_install_detect();
   init_operator_uid();
   init_posthog();
@@ -63737,8 +64552,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.17.6";
-var COMMIT_SHA = "0cc74c23";
+var VERSION = "0.17.10";
+var COMMIT_SHA = "d38372bf";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -63769,7 +64584,7 @@ var SWITCHROOM_VERSION = (() => {
 init_esm();
 init_source();
 import { join as join21, resolve as resolve22 } from "node:path";
-import { rmSync as rmSync9, existsSync as existsSync31, readFileSync as readFileSync25, writeFileSync as writeFileSync13 } from "node:fs";
+import { rmSync as rmSync10, existsSync as existsSync31, readFileSync as readFileSync25, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 
 // src/agents/scheduler-state.ts
@@ -63833,6 +64648,7 @@ function formatSchedulerState(state) {
 
 // src/cli/agent.ts
 init_loader();
+init_hindsight2();
 init_hindsight();
 init_helpers();
 init_scaffold();
@@ -64067,10 +64883,10 @@ function spinner(message) {
 // src/agents/status.ts
 import { existsSync as existsSync23, readFileSync as readFileSync20, statSync as statSync11 } from "node:fs";
 import { join as join16 } from "node:path";
-import { execFileSync as execFileSync9 } from "node:child_process";
+import { execFileSync as execFileSync10 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
-import { readFileSync as readFileSync18, writeFileSync as writeFileSync8, renameSync as renameSync5, mkdirSync as mkdirSync15, existsSync as existsSync21, statSync as statSync10, readdirSync as readdirSync9 } from "node:fs";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync8, renameSync as renameSync6, mkdirSync as mkdirSync15, existsSync as existsSync21, statSync as statSync10, readdirSync as readdirSync9 } from "node:fs";
 import { join as join15 } from "node:path";
 var DEFAULT_MAX_TURNS = 50;
 var TOPIC_MAX_CHARS = 117;
@@ -64212,8 +65028,8 @@ function writeSidecarsAtomic(agentDir, briefing, topic) {
   const topicTmp = topicPath + ".tmp";
   writeFileSync8(handoffTmp, briefing, "utf-8");
   writeFileSync8(topicTmp, topic, "utf-8");
-  renameSync5(handoffTmp, handoffPath);
-  renameSync5(topicTmp, topicPath);
+  renameSync6(handoffTmp, handoffPath);
+  renameSync6(topicTmp, topicPath);
 }
 async function buildHandoff(opts) {
   const maxTurns = opts.maxTurns ?? DEFAULT_MAX_TURNS;
@@ -64744,14 +65560,14 @@ function readLastMessages(historyDbPath) {
     };
   }
   try {
-    const out = execFileSync9("bun", [
+    const out = execFileSync10("bun", [
       "-e",
       `const { Database } = require("bun:sqlite"); ` + `const db = new Database(${JSON.stringify(historyDbPath)}, { readonly: true }); ` + `const rows = db.prepare("SELECT role, MAX(ts) as ts FROM messages GROUP BY role").all(); ` + `for (const r of rows) console.log(r.role + "|" + r.ts); ` + `db.close();`
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
     return parseSqliteRoleTsOutput(out);
   } catch {}
   try {
-    const out = execFileSync9("sqlite3", [
+    const out = execFileSync10("sqlite3", [
       historyDbPath,
       "SELECT role, MAX(ts) FROM messages GROUP BY role;"
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
@@ -64863,7 +65679,7 @@ function escapeRegex(s) {
 }
 function readDockerContainer(containerName2) {
   try {
-    const out = execFileSync9("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
+    const out = execFileSync10("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
     const state = JSON.parse(out.trim());
     const active = state.Status === "running" ? "active" : state.Status === "restarting" ? "restarting" : "inactive";
     const pid = typeof state.Pid === "number" && state.Pid > 0 ? state.Pid : null;
@@ -64925,7 +65741,7 @@ init_profiles();
 init_lifecycle();
 init_manager();
 import { resolve as resolve17 } from "node:path";
-import { existsSync as existsSync26, rmSync as rmSync6 } from "node:fs";
+import { existsSync as existsSync26, rmSync as rmSync7 } from "node:fs";
 
 // src/telegram/redact-token.ts
 var REDACTED_PLACEHOLDER = "<redacted-bot-token>";
@@ -65074,7 +65890,7 @@ async function createAgent(opts) {
   const agentDir = resolve17(agentsDir, name);
   await withRollback(() => {
     scaffoldAgent(name, agentConfig, agentsDir, config.telegram, config, undefined, configPath);
-    rollbackStack.push(() => rmSync6(agentDir, { recursive: true, force: true }));
+    rollbackStack.push(() => rmSync7(agentDir, { recursive: true, force: true }));
   });
   await withRollback(() => {
     writeAgentEnv(agentDir, telegramBotToken);
@@ -65141,8 +65957,8 @@ async function completeCreation(name, code, opts = {}) {
 
 // src/agents/add-orchestrator.ts
 import { resolve as resolve19, join as join19 } from "node:path";
-import { existsSync as existsSync28, rmSync as rmSync7, statSync as statSync15 } from "node:fs";
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { existsSync as existsSync28, rmSync as rmSync8, statSync as statSync15 } from "node:fs";
+import { execFileSync as execFileSync13 } from "node:child_process";
 init_onboarding();
 
 // src/setup/botfather-walkthrough.ts
@@ -65708,7 +66524,7 @@ function pruneBundledSkills(agentDir, keep, scope) {
     if (!isDir)
       continue;
     try {
-      rmSync7(entryPath, { recursive: true, force: true });
+      rmSync8(entryPath, { recursive: true, force: true });
       removed.push(entry);
     } catch {}
   }
@@ -65716,7 +66532,7 @@ function pruneBundledSkills(agentDir, keep, scope) {
 }
 function defaultIsUnitActive(unitName) {
   try {
-    const out = execFileSync12("systemctl", ["--user", "is-active", unitName], {
+    const out = execFileSync13("systemctl", ["--user", "is-active", unitName], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -65743,7 +66559,7 @@ import { resolve as resolve20 } from "node:path";
 import {
   existsSync as existsSync29,
   mkdtempSync as mkdtempSync3,
-  rmSync as rmSync8,
+  rmSync as rmSync9,
   cpSync
 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
@@ -65768,7 +66584,7 @@ function defaultDeps() {
       return tmp;
     },
     copyDir: (src, dst) => cpSync(src, dst, { recursive: true }),
-    removeDir: (p) => rmSync8(p, { recursive: true, force: true }),
+    removeDir: (p) => rmSync9(p, { recursive: true, force: true }),
     existsSync: existsSync29,
     readFileSync: (p, enc) => readFileSync23(p, enc)
   };
@@ -66137,16 +66953,16 @@ function parsePorcelainDirty(porcelain) {
 }
 function checkSwitchroomBranch() {
   try {
-    const { execFileSync: execFileSync14 } = __require("node:child_process");
+    const { execFileSync: execFileSync15 } = __require("node:child_process");
     const cwd = process.cwd();
-    const branch = execFileSync14("git", ["-C", cwd, "rev-parse", "--abbrev-ref", "HEAD"], {
+    const branch = execFileSync15("git", ["-C", cwd, "rev-parse", "--abbrev-ref", "HEAD"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
     if (branch === "" || branch === "HEAD")
       return null;
     if (branch === "main" || branch === "master") {
-      const porcelain = execFileSync14("git", ["-C", cwd, "status", "--porcelain"], {
+      const porcelain = execFileSync15("git", ["-C", cwd, "status", "--porcelain"], {
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
       });
@@ -66209,7 +67025,7 @@ function buildStatusInputs(name, config, agentsDir) {
   let hindsightApiUrl = null;
   let hindsightBankId = name;
   if (isHindsightEnabled(config)) {
-    const baseUrl = config.memory?.config?.url ?? "http://localhost:8888/mcp/";
+    const baseUrl = config.memory?.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
     hindsightApiUrl = baseUrl.endsWith("/mcp/") ? baseUrl : baseUrl.replace(/\/$/, "") + "/mcp/";
     hindsightBankId = agentConfig?.memory?.collection ?? name;
   }
@@ -66477,7 +67293,7 @@ function registerAgentCommand(program3) {
     let hindsightApiUrl = null;
     let hindsightBankId = name;
     if (isHindsightEnabled(config)) {
-      const baseUrl = config.memory?.config?.url ?? "http://localhost:8888/mcp/";
+      const baseUrl = config.memory?.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
       hindsightApiUrl = baseUrl.endsWith("/mcp/") ? baseUrl : baseUrl.replace(/\/$/, "") + "/mcp/";
       hindsightBankId = agentConfig.memory?.collection ?? name;
     }
@@ -67161,7 +67977,7 @@ Permissions for ${name}
       }
     }
     if (existsSync31(agentDir)) {
-      rmSync9(agentDir, { recursive: true, force: true });
+      rmSync10(agentDir, { recursive: true, force: true });
       console.log(source_default.green(`  Removed directory: ${agentDir}`));
     } else {
       console.log(source_default.gray(`  Directory not found: ${agentDir}`));
@@ -67365,7 +68181,7 @@ switchroom agent add: ${name}
           const agentsDirRollback = resolveAgentsDir(cfg);
           const agentDirRollback = resolve22(agentsDirRollback, name);
           if (existsSync31(agentDirRollback)) {
-            rmSync9(agentDirRollback, { recursive: true, force: true });
+            rmSync10(agentDirRollback, { recursive: true, force: true });
             console.log(source_default.gray(`  Rolled back: removed ${agentDirRollback}`));
           }
           process.exit(1);
@@ -69996,7 +70812,7 @@ function registerAuthCommand(program3) {
         try {
           mode = statSync17(yamlPath).mode & 511;
         } catch {}
-        atomicWriteFileSync2(yamlPath, after, mode);
+        atomicWriteFileSync(yamlPath, after, mode);
         if (!quiet) {
           console.log(source_default.gray(`  Pinned auth.active: ${label} in ${yamlPath}`));
         }
@@ -70143,9 +70959,9 @@ import { readFileSync as readFileSync39 } from "node:fs";
 init_source();
 init_loader();
 init_vault();
-init_hindsight();
+init_hindsight2();
 import { readFileSync as readFileSync31, writeFileSync as writeFileSync17, copyFileSync as copyFileSync6, existsSync as existsSync36, readdirSync as readdirSync16, statSync as statSync18 } from "node:fs";
-import { execFileSync as execFileSync15 } from "node:child_process";
+import { execFileSync as execFileSync16 } from "node:child_process";
 import { join as join28 } from "node:path";
 import { homedir as homedir13 } from "node:os";
 function getVaultPath2(configPath) {
@@ -70492,7 +71308,7 @@ function registerVaultSweep(vault, program3) {
 function scrubSqlite(path, values, dryRun) {
   let hasSqlite = true;
   try {
-    execFileSync15("sqlite3", ["-version"], { timeout: 2000, stdio: "ignore" });
+    execFileSync16("sqlite3", ["-version"], { timeout: 2000, stdio: "ignore" });
   } catch {
     hasSqlite = false;
   }
@@ -70504,7 +71320,7 @@ function scrubSqlite(path, values, dryRun) {
   for (const { value } of values) {
     const esc = value.replace(/'/g, "''");
     try {
-      const out = execFileSync15("sqlite3", [path, `SELECT COUNT(*) FROM messages WHERE text LIKE '%${esc}%'`], { encoding: "utf8", timeout: 1e4 });
+      const out = execFileSync16("sqlite3", [path, `SELECT COUNT(*) FROM messages WHERE text LIKE '%${esc}%'`], { encoding: "utf8", timeout: 1e4 });
       const n = parseInt(out.trim(), 10);
       if (!Number.isNaN(n))
         matches += n;
@@ -70518,7 +71334,7 @@ function scrubSqlite(path, values, dryRun) {
       for (const { key, value } of values) {
         const esc = value.replace(/'/g, "''");
         const replacement = `vault:${key}`.replace(/'/g, "''");
-        execFileSync15("sqlite3", [path, `UPDATE messages SET text = replace(text, '${esc}', '${replacement}')`], { timeout: 15000 });
+        execFileSync16("sqlite3", [path, `UPDATE messages SET text = replace(text, '${esc}', '${replacement}')`], { timeout: 15000 });
       }
       return { target: path, matches, modified: true };
     } catch (err) {
@@ -77429,10 +78245,10 @@ function fail2(msg) {
 
 // src/cli/memory.ts
 init_source();
-init_hindsight();
+init_hindsight2();
 
 // src/memory/search.ts
-init_hindsight();
+init_hindsight2();
 function shellQuote2(s) {
   return "'" + s.replace(/'/g, `'"'"'`) + "'";
 }
@@ -77459,312 +78275,7 @@ function reflectAcrossAgents(config) {
 
 // src/cli/memory.ts
 init_helpers();
-
-// src/setup/hindsight.ts
-import { execFileSync as execFileSync16 } from "node:child_process";
-import { createServer as createServer4 } from "node:net";
-var HINDSIGHT_DEFAULT_API_PORT = 8888;
-var HINDSIGHT_DEFAULT_UI_PORT = 9999;
-var HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE = 1000;
-var HINDSIGHT_CONSUMER_NAME = "hindsight";
-var HINDSIGHT_DEFAULT_UID = 11000;
-var HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight";
-var HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
-function hindsightImageRef(tag) {
-  const t = tag?.trim();
-  if (!t)
-    return HINDSIGHT_IMAGE;
-  const v = t.replace(/^v/, "");
-  return `${HINDSIGHT_IMAGE_REPO}:v${v}`;
-}
-var HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5";
-var HINDSIGHT_DEFAULT_MCP_STATELESS = true;
-var HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
-var HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING = "true";
-var HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES = 150;
-var HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT = 4;
-var HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8;
-var HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600;
-var HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE = 12;
-var HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 3;
-var HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM = 6;
-var HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 300;
-var HINDSIGHT_DEFAULT_MEM_LIMIT = "8g";
-var HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g";
-var HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000;
-var HINDSIGHT_DEFAULT_SHM_SIZE = "2g";
-var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)';
-var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
-function isPortFree(port) {
-  return new Promise((resolve29) => {
-    const server = createServer4();
-    server.once("error", () => resolve29(false));
-    server.once("listening", () => {
-      server.close(() => resolve29(true));
-    });
-    server.listen(port, "127.0.0.1");
-  });
-}
-async function findFreePort(start, maxAttempts = 50) {
-  for (let i = 0;i < maxAttempts; i++) {
-    const port = start + i;
-    if (port < 1024)
-      continue;
-    if (await isPortFree(port)) {
-      return port;
-    }
-  }
-  return null;
-}
-async function pickHindsightPorts() {
-  if (await isPortFree(HINDSIGHT_DEFAULT_API_PORT) && await isPortFree(HINDSIGHT_DEFAULT_UI_PORT)) {
-    return {
-      apiPort: HINDSIGHT_DEFAULT_API_PORT,
-      uiPort: HINDSIGHT_DEFAULT_UI_PORT
-    };
-  }
-  const apiPort = await findFreePort(18888);
-  const uiPort = await findFreePort(19999);
-  if (apiPort === null || uiPort === null) {
-    throw new Error("Could not find a free port for Hindsight. " + "Stop whatever is using 8888 / 9999 / 18888 / 19999 and retry.");
-  }
-  return { apiPort, uiPort };
-}
-function isDockerAvailable() {
-  try {
-    execFileSync16("docker", ["--version"], { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function isHindsightRunning() {
-  try {
-    const output = execFileSync16("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
-    return output.trim().length > 0;
-  } catch {
-    return false;
-  }
-}
-function isHindsightContainerExists() {
-  try {
-    const output = execFileSync16("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
-    return output.trim().length > 0;
-  } catch {
-    return false;
-  }
-}
-function startHindsight(ports, litellm, imageTag) {
-  const apiPort = ports?.apiPort ?? HINDSIGHT_DEFAULT_API_PORT;
-  const uiPort = ports?.uiPort ?? HINDSIGHT_DEFAULT_UI_PORT;
-  const envArgs = [
-    "-e",
-    `HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
-    "-e",
-    "HINDSIGHT_API_LLM_PROVIDER=claude-code",
-    "-e",
-    `HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
-    "-e",
-    `HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
-    "-e",
-    `HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
-    "-e",
-    `HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
-    "-e",
-    `HINDSIGHT_API_RERANKER_LOCAL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT}`,
-    "-e",
-    `HINDSIGHT_API_RECALL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT}`,
-    "-e",
-    `HINDSIGHT_API_REFLECT_WALL_TIMEOUT=${HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S}`,
-    "-e",
-    `HINDSIGHT_API_CONSOLIDATION_LLM_BATCH_SIZE=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE}`,
-    "-e",
-    `HINDSIGHT_API_WORKER_CONSOLIDATION_MAX_SLOTS=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS}`,
-    "-e",
-    `HINDSIGHT_API_CONSOLIDATION_LLM_PARALLELISM=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM}`,
-    "-e",
-    `HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`
-  ];
-  if (litellm) {
-    envArgs.push("-e", `HINDSIGHT_API_PORT=${apiPort}`, "-e", `ANTHROPIC_BASE_URL=${litellm.baseUrl.replace(/\/+$/, "")}/anthropic`, "-e", `ANTHROPIC_CUSTOM_HEADERS=x-litellm-api-key: Bearer ${litellm.apiKey}
-x-litellm-customer-id: hindsight
-x-litellm-tags: service:hindsight`);
-  }
-  const args = [
-    "run",
-    "-d",
-    "--name",
-    "switchroom-hindsight",
-    "--restart",
-    "always",
-    `--memory=${HINDSIGHT_DEFAULT_MEM_LIMIT}`,
-    `--memory-reservation=${HINDSIGHT_DEFAULT_MEM_RESERVATION}`,
-    `--pids-limit=${HINDSIGHT_DEFAULT_PIDS_LIMIT}`,
-    `--shm-size=${HINDSIGHT_DEFAULT_SHM_SIZE}`,
-    "--health-cmd",
-    litellm ? `python3 -c 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:${apiPort}/health",timeout=4).getcode()==200 else 1)'` : HINDSIGHT_HEALTHCHECK_CMD,
-    "--health-interval",
-    "30s",
-    "--health-timeout",
-    "5s",
-    "--health-retries",
-    "3",
-    "--health-start-period",
-    "60s"
-  ];
-  if (litellm) {
-    args.push("--network", "host");
-  } else {
-    args.push("-p", `127.0.0.1:${apiPort}:8888`, "-p", `127.0.0.1:${uiPort}:9999`);
-  }
-  args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, "--tmpfs", `/run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`, ...envArgs, hindsightImageRef(imageTag));
-  execFileSync16("docker", args, { stdio: "pipe" });
-}
-function stopHindsight() {
-  try {
-    execFileSync16("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
-  } catch {}
-  try {
-    execFileSync16("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
-  } catch {}
-}
-function pullHindsightImage(imageTag) {
-  execFileSync16("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
-}
-function getRunningHindsightPorts() {
-  const readPort = (containerPort) => {
-    try {
-      const out = execFileSync16("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
-      const m = out.split(`
-`).map((l) => l.trim()).find((l) => l.length > 0);
-      if (!m)
-        return null;
-      const port = Number(m.slice(m.lastIndexOf(":") + 1));
-      return Number.isInteger(port) && port > 0 ? port : null;
-    } catch {
-      return null;
-    }
-  };
-  const apiPort = readPort(HINDSIGHT_DEFAULT_API_PORT);
-  if (apiPort === null)
-    return null;
-  const uiPort = readPort(HINDSIGHT_DEFAULT_UI_PORT) ?? (apiPort === HINDSIGHT_DEFAULT_API_PORT ? HINDSIGHT_DEFAULT_UI_PORT : 19999);
-  return { apiPort, uiPort };
-}
-function getHindsightStatus() {
-  try {
-    const output = execFileSync16("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
-    const status = output.trim();
-    return status.length > 0 ? status : null;
-  } catch {
-    return null;
-  }
-}
-function generateHindsightComposeSnippet() {
-  return [
-    "services:",
-    "  switchroom-hindsight:",
-    `    image: ${HINDSIGHT_IMAGE}`,
-    "    container_name: switchroom-hindsight",
-    "    ports:",
-    '      - "8888:8888"',
-    '      - "9999:9999"',
-    "    environment:",
-    `      - HINDSIGHT_API_MAX_OBSERVATIONS_PER_SCOPE=${HINDSIGHT_DEFAULT_MAX_OBSERVATIONS_PER_SCOPE}`,
-    "      - HINDSIGHT_API_LLM_PROVIDER=claude-code",
-    `      - HINDSIGHT_API_LLM_MODEL=${HINDSIGHT_DEFAULT_MODEL}`,
-    `      - HINDSIGHT_API_MCP_STATELESS=${HINDSIGHT_DEFAULT_MCP_STATELESS}`,
-    `      - HINDSIGHT_API_RERANKER_LOCAL_BUCKET_BATCHING=${HINDSIGHT_DEFAULT_RERANKER_BUCKET_BATCHING}`,
-    `      - HINDSIGHT_API_RERANKER_MAX_CANDIDATES=${HINDSIGHT_DEFAULT_RERANKER_MAX_CANDIDATES}`,
-    `      - HINDSIGHT_API_RERANKER_LOCAL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RERANKER_LOCAL_MAX_CONCURRENT}`,
-    `      - HINDSIGHT_API_RECALL_MAX_CONCURRENT=${HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT}`,
-    `      - HINDSIGHT_API_REFLECT_WALL_TIMEOUT=${HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S}`,
-    `      - HINDSIGHT_API_CONSOLIDATION_LLM_BATCH_SIZE=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_BATCH_SIZE}`,
-    `      - HINDSIGHT_API_WORKER_CONSOLIDATION_MAX_SLOTS=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS}`,
-    `      - HINDSIGHT_API_CONSOLIDATION_LLM_PARALLELISM=${HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_PARALLELISM}`,
-    `      - HINDSIGHT_API_CONSOLIDATION_MAX_MEMORIES_PER_ROUND=${HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND}`,
-    `    mem_limit: ${HINDSIGHT_DEFAULT_MEM_LIMIT}`,
-    `    mem_reservation: ${HINDSIGHT_DEFAULT_MEM_RESERVATION}`,
-    `    pids_limit: ${HINDSIGHT_DEFAULT_PIDS_LIMIT}`,
-    `    shm_size: ${HINDSIGHT_DEFAULT_SHM_SIZE}`,
-    "    healthcheck:",
-    `      test: ${JSON.stringify(["CMD", "python3", "-c", HINDSIGHT_HEALTHCHECK_PY])}`,
-    "      interval: 30s",
-    "      timeout: 5s",
-    "      retries: 3",
-    "      start_period: 60s",
-    "    volumes:",
-    "      - switchroom-hindsight-data:/home/hindsight/.pg0",
-    "      - switchroom-hindsight-backups:/backups",
-    `      - ${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`,
-    "    tmpfs:",
-    `      - /run/claude-creds:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`,
-    "    restart: always",
-    "",
-    "volumes:",
-    "  switchroom-hindsight-data:",
-    "  switchroom-hindsight-backups:",
-    `  ${HINDSIGHT_BROKER_SOCK_VOLUME}:`,
-    "    external: true",
-    "    # Bound by the switchroom-auth-broker singleton in the main",
-    "    # switchroom compose project. Declare an `auth.consumers[]`",
-    `    # entry named "${HINDSIGHT_CONSUMER_NAME}" in switchroom.yaml.`
-  ].join(`
-`);
-}
-async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFAULT_UID) {
-  const fs4 = await import("node:fs");
-  const { parseDocument: parseDocument7, isMap: isMap7, isSeq: isSeq4, YAMLMap, YAMLSeq } = await Promise.resolve().then(() => __toESM(require_dist(), 1));
-  const { atomicWriteFileSync: atomicWriteFileSync3 } = await Promise.resolve().then(() => (init_atomic(), exports_atomic));
-  const raw = fs4.readFileSync(configPath, "utf-8");
-  const doc = parseDocument7(raw);
-  const root = doc.contents;
-  if (!isMap7(root)) {
-    return { added: false, reason: "switchroom.yaml root is not a map" };
-  }
-  const authRaw = root.get("auth", true);
-  let authNode;
-  if (isMap7(authRaw)) {
-    authNode = authRaw;
-  } else {
-    authNode = new YAMLMap;
-    doc.setIn(["auth"], authNode);
-  }
-  const consumersRaw = authNode.get("consumers", true);
-  let consumersNode;
-  if (isSeq4(consumersRaw)) {
-    consumersNode = consumersRaw;
-  } else {
-    consumersNode = new YAMLSeq;
-    doc.setIn(["auth", "consumers"], consumersNode);
-  }
-  for (const item of consumersNode.items) {
-    if (isMap7(item)) {
-      const name = item.get("name");
-      if (name === HINDSIGHT_CONSUMER_NAME) {
-        return { added: false, reason: "already present" };
-      }
-    }
-  }
-  const entry = new YAMLMap;
-  entry.set("name", HINDSIGHT_CONSUMER_NAME);
-  if (account !== undefined)
-    entry.set("account", account);
-  entry.set("uid", uid);
-  consumersNode.add(entry);
-  const out = String(doc);
-  const tail = out.endsWith(`
-`) ? out : out + `
-`;
-  let mode = 420;
-  try {
-    mode = fs4.statSync(configPath).mode & 511;
-  } catch {}
-  atomicWriteFileSync3(configPath, tail, mode);
-  return { added: true, reason: "added" };
-}
-
-// src/cli/memory.ts
+init_hindsight();
 init_client();
 init_loader();
 var import_yaml13 = __toESM(require_dist(), 1);
@@ -77984,6 +78495,21 @@ Cross-agent reflection plan
     let ports;
     if (reusePorts) {
       ports = reusePorts;
+      if (reusePorts.apiPort !== HINDSIGHT_DEFAULT_API_PORT) {
+        let explicitUrl;
+        try {
+          explicitUrl = getConfig(program3).memory?.config?.url;
+        } catch {
+          explicitUrl = undefined;
+        }
+        if (!explicitUrl) {
+          console.log(source_default.yellow(`
+  \u26a0  MIGRATION HAZARD: reusing stale host port ${reusePorts.apiPort} ` + `for switchroom-hindsight, but scaffolding now defaults to ` + `${HINDSIGHT_DEFAULT_API_PORT} and no explicit memory.config.url is set.`));
+          console.log(source_default.yellow(`  Agents may be repointed to a dead URL (http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/) ` + `while the container listens on ${reusePorts.apiPort}.`));
+          console.log(source_default.yellow(`  Fix: set memory.config.url: http://127.0.0.1:${reusePorts.apiPort}/mcp/ explicitly, ` + `or migrate the container to port ${HINDSIGHT_DEFAULT_API_PORT}.
+`));
+        }
+      }
     } else {
       try {
         ports = await pickHindsightPorts();
@@ -77997,6 +78523,29 @@ Cross-agent reflection plan
     if (ports.apiPort !== HINDSIGHT_DEFAULT_API_PORT) {
       console.log(source_default.yellow(`  Port ${HINDSIGHT_DEFAULT_API_PORT} is already in use; ` + `using ${ports.apiPort}/${ports.uiPort} instead.`));
     }
+    let conflict = await preflightHindsightPorts(ports);
+    if (conflict) {
+      const heldBy = conflict.holder ? ` (held by ${conflict.holder})` : "";
+      console.log(source_default.yellow(`
+  Chosen Hindsight port ${conflict.port} is occupied${heldBy}; ` + `selecting a free port instead of crash-looping.`));
+      try {
+        ports = await pickHindsightPorts();
+      } catch (err) {
+        console.error(source_default.red(`
+  ${err.message}
+`));
+        process.exit(1);
+      }
+      conflict = await preflightHindsightPorts(ports);
+      if (conflict) {
+        const stillHeldBy = conflict.holder ? ` (held by ${conflict.holder})` : "";
+        console.error(source_default.red(`
+  Refusing to start Hindsight: port ${conflict.port} is still ` + `occupied${stillHeldBy} after reassignment. Free it and retry ` + `\`switchroom memory --start\`.
+`));
+        process.exit(1);
+      }
+      console.log(source_default.green(`  Reassigned Hindsight to port ${ports.apiPort}/${ports.uiPort}.`));
+    }
     if (opts.provider && opts.provider !== "claude-code") {
       console.log(source_default.gray(`  Note: --provider=${opts.provider} ignored. switchroom-hindsight is pinned to the ` + "`claude-code` provider (subscription-honest). The flag is kept for back-compat."));
     }
@@ -78103,7 +78652,7 @@ ${name}:`));
       process.exit(1);
     }
     const collection = getCollectionForAgent(agent, config);
-    const apiUrl = config.memory?.config?.url ?? "http://localhost:8888/mcp/";
+    const apiUrl = config.memory?.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
     const timeoutMs = Math.max(500, parseInt(opts.timeout, 10) || 5000);
     console.log(source_default.bold(`
 Demoting memory ${source_default.cyan(memoryId)}`));
@@ -78119,7 +78668,7 @@ Demoting memory ${source_default.cyan(memoryId)}`));
     console.error(source_default.gray("  The Hindsight MCP `update_memory` tool may not be exposed by your deployment, or the memory ID may be wrong. Try `switchroom memory recall-log " + agent + " --json` to confirm the ID surfaced recently."));
     process.exit(1);
   }));
-  const restBase = (url) => (url ?? "http://127.0.0.1:8888/mcp/").replace(/\/mcp\/?$/, "").replace(/\/$/, "");
+  const restBase = (url) => (url ?? HINDSIGHT_DEFAULT_MCP_URL).replace(/\/mcp\/?$/, "").replace(/\/$/, "");
   const VALID_BANK = /^[a-zA-Z0-9_.-]+$/;
   const profile = memory.command("profile").description("Author + inspect operator profile banks (shared/per-user memory; wire via memory.recall.additional_banks)");
   profile.command("add <bank> <fact...>").description("Add an operator-authored fact to a profile bank (creates the bank on first write)").option("--timeout <ms>", "HTTP timeout in milliseconds (retain runs synchronously; default: 60000)", "60000").action(withConfigError(async (bank, factWords, opts) => {
@@ -78227,13 +78776,13 @@ import { timingSafeEqual as timingSafeEqual3, randomBytes as randomBytes11 } fro
 // src/web/api.ts
 init_lifecycle();
 init_manager();
-init_hindsight();
+init_hindsight2();
 import { spawnSync as spawnSync6 } from "node:child_process";
 import { existsSync as existsSync51, readFileSync as readFileSync45, statSync as statSync23 } from "node:fs";
 import { resolve as resolve29, join as join45 } from "node:path";
 
 // src/web/memory-remediation.ts
-init_hindsight();
+init_hindsight2();
 function restBaseFromMcpUrl(mcpUrl) {
   return hindsightRestBase(mcpUrl);
 }
@@ -78295,6 +78844,7 @@ async function buildUserProfile(mcpUrl, bank, opts) {
 }
 
 // src/web/api.ts
+init_hindsight();
 init_audit_reader();
 
 // src/scheduler/dispatch.ts
@@ -82307,6 +82857,7 @@ var NVIDIA_TOOLKIT_INSTALL_HINT = "https://docs.nvidia.com/datacenter/cloud-nati
 
 // src/cli/setup.ts
 init_host_capabilities();
+init_hindsight();
 init_client();
 init_posthog();
 
@@ -82913,17 +83464,45 @@ async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
     console.log(source_default.gray("  Found stopped switchroom-hindsight container, removing..."));
     stopHindsight();
   }
+  let ports;
+  try {
+    ports = await pickHindsightPorts();
+  } catch (err) {
+    console.log(source_default.red(`  ${err.message}`));
+    return;
+  }
+  if (ports.apiPort !== HINDSIGHT_DEFAULT_API_PORT) {
+    console.log(source_default.yellow(`  Port ${HINDSIGHT_DEFAULT_API_PORT} is already in use; using ${ports.apiPort}/${ports.uiPort} instead.`));
+  }
+  let conflict = await preflightHindsightPorts(ports);
+  if (conflict) {
+    const heldBy = conflict.holder ? ` (held by ${conflict.holder})` : "";
+    console.log(source_default.yellow(`  Chosen Hindsight port ${conflict.port} is occupied${heldBy}; selecting a free port instead of crash-looping.`));
+    try {
+      ports = await pickHindsightPorts();
+    } catch (err) {
+      console.log(source_default.red(`  ${err.message}`));
+      return;
+    }
+    conflict = await preflightHindsightPorts(ports);
+    if (conflict) {
+      const stillHeldBy = conflict.holder ? ` (held by ${conflict.holder})` : "";
+      console.log(source_default.red(`  Refusing to start Hindsight: port ${conflict.port} is still occupied${stillHeldBy} after reassignment. Free it and re-run \`switchroom setup\`.`));
+      return;
+    }
+    console.log(source_default.green(`  Reassigned Hindsight to port ${ports.apiPort}/${ports.uiPort}.`));
+  }
   const spin = spinner("Starting Hindsight Docker container...");
   try {
     const litellmCfg = await resolveLiteLLMForHindsight2(config);
-    startHindsight(undefined, litellmCfg);
+    startHindsight(ports, litellmCfg);
     if (litellmCfg) {
       console.log(source_default.gray("  LiteLLM routing enabled (--network host, ANTHROPIC_BASE_URL set)."));
     }
     if (isHindsightRunning()) {
       spin.stop(source_default.green(`${STEP_DONE} Hindsight container started (switchroom-hindsight)`));
-      console.log(source_default.gray("  API: http://localhost:8888/mcp"));
-      console.log(source_default.gray("  UI:  http://localhost:9999"));
+      console.log(source_default.gray(`  API: http://localhost:${ports.apiPort}/mcp`));
+      console.log(source_default.gray(`  UI:  http://localhost:${ports.uiPort}`));
     } else {
       spin.stop(source_default.yellow("Container started but may still be initializing"));
     }
@@ -83450,6 +84029,22 @@ var UPDATE_RESULT_SENTINEL = "SWITCHROOM_UPDATE_RESULT:";
 function encodeUpdateResultLine(payload) {
   return `${UPDATE_RESULT_SENTINEL}${JSON.stringify(payload)}`;
 }
+function resolveHindsightPinTag(opts) {
+  if (typeof opts.hindsightPinTag === "string") {
+    return opts.hindsightPinTag || undefined;
+  }
+  if (opts.channel)
+    return;
+  let candidate = opts.pin;
+  if (!candidate) {
+    try {
+      candidate = loadConfig().release?.pin ?? undefined;
+    } catch {
+      candidate = undefined;
+    }
+  }
+  return candidate && /^v\d+\.\d+\.\d+$/.test(candidate) ? candidate : undefined;
+}
 function planUpdate(opts) {
   const composePath = opts.composePath ?? DEFAULT_COMPOSE_PATH;
   const runner = opts.runner ?? defaultRunner2;
@@ -83596,10 +84191,14 @@ function planUpdate(opts) {
   }
   steps.push({
     name: "refresh-hindsight",
-    description: "switchroom memory setup --recreate \u2014 pull latest hindsight image + recreate the memory singleton (standalone container, reusing its current port)",
+    description: "switchroom memory setup --recreate \u2014 pull the hindsight image (pinned to the release target when set, else :latest) + recreate the memory singleton (reusing its current port)",
     skipReason: !memoryBackendHindsight ? "memory.backend is not hindsight \u2014 no hindsight singleton to refresh" : opts.skipImages ? "--skip-images flag set" : undefined,
     run: () => {
-      const r = runner(process.execPath, [scriptPath, "memory", "setup", "--recreate"]);
+      const pinTag = resolveHindsightPinTag(opts);
+      const setupArgs = ["memory", "setup", "--recreate"];
+      if (pinTag)
+        setupArgs.push("--tag", pinTag);
+      const r = runner(process.execPath, [scriptPath, ...setupArgs]);
       if (r.status !== 0)
         throw new Error("switchroom memory setup --recreate failed");
     }
@@ -83963,6 +84562,7 @@ import { homedir as homedir39 } from "node:os";
 init_operator_uid();
 init_atomic();
 init_audit_reader();
+init_hindsight();
 function normalizeVersion(v) {
   return v.trim().replace(/^v/, "");
 }
@@ -86902,7 +87502,7 @@ import { existsSync as existsSync72, readFileSync as readFileSync63, readdirSync
 import { resolve as resolve45, join as join71 } from "node:path";
 import { createHash as createHash14 } from "node:crypto";
 init_merge();
-init_hindsight();
+init_hindsight2();
 function formatBytes(bytes) {
   return `${bytes.toLocaleString()} bytes`;
 }
@@ -87323,6 +87923,8 @@ async function claimWorktree(input, codeRepos) {
     const baseDir = worktreesBaseDir();
     mkdirSync38(baseDir, { recursive: true });
     worktreePath = join73(baseDir, `${id}-${taskSuffix}`);
+    const ambientOwner = process.env.SWITCHROOM_AGENT_NAME;
+    const ownerAgent = input.ownerAgent ?? (ambientOwner != null && ambientOwner !== "" ? ambientOwner : undefined);
     const now = new Date().toISOString();
     const record2 = {
       id,
@@ -87332,7 +87934,7 @@ async function claimWorktree(input, codeRepos) {
       path: worktreePath,
       createdAt: now,
       heartbeatAt: now,
-      ownerAgent: input.ownerAgent
+      ownerAgent
     };
     writeRecord(record2);
   } finally {