switchroom 0.18.28 → 0.18.29

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.18.28", COMMIT_SHA = "ef0be9a2";
+var VERSION = "0.18.29", COMMIT_SHA = "8f9b38b3";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -15265,431 +15265,6 @@ var init_users = __esm(() => {
   init_merge();
 });
 
-// src/agents/pane-lock.ts
-function withPaneLock(key, fn) {
-  const tail = tails.get(key) ?? Promise.resolve();
-  const run = tail.then(() => fn());
-  const next = run.then(() => {}, () => {});
-  tails.set(key, next);
-  next.then(() => {
-    if (tails.get(key) === next)
-      tails.delete(key);
-  });
-  return run;
-}
-var tails;
-var init_pane_lock = __esm(() => {
-  tails = new Map;
-});
-
-// src/agents/inject.ts
-var exports_inject = {};
-__export(exports_inject, {
-  validateInjectCommand: () => validateInjectCommand,
-  normalizeInjectCommand: () => normalizeInjectCommand,
-  makeTmuxRunner: () => makeTmuxRunner,
-  isTuiChromeLine: () => isTuiChromeLine,
-  injectSlashCommandWith: () => injectSlashCommandWith,
-  injectSlashCommand: () => injectSlashCommand,
-  diffPane: () => diffPane,
-  dedupeInjectQueue: () => dedupeInjectQueue,
-  InjectError: () => InjectError,
-  INJECT_COMMANDS: () => INJECT_COMMANDS,
-  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
-  INJECT_BLOCKED: () => INJECT_BLOCKED,
-  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
-});
-import { execFileSync } from "node:child_process";
-function validateInjectCommand(command) {
-  if (typeof command !== "string" || command.trim().length === 0) {
-    throw new InjectError("invalid", "command is empty");
-  }
-  const trimmed = command.trim();
-  if (!trimmed.startsWith("/")) {
-    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
-  }
-  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
-  const blockedMeta = INJECT_BLOCKED.get(bare);
-  if (blockedMeta) {
-    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
-  }
-  const meta = INJECT_COMMANDS.get(bare);
-  if (!meta) {
-    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
-    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
-  }
-  const hasArgs = trimmed.split(/\s+/).length > 1;
-  if (hasArgs && !meta.argsAllowed) {
-    throw new InjectError("args_not_allowed", `args not permitted for ${bare} \u2014 inject the bare verb only`);
-  }
-  return bare;
-}
-function normalizeInjectCommand(command) {
-  return command.trim().replace(/\s+/g, " ").toLowerCase();
-}
-function dedupeInjectQueue(commands) {
-  const seen = new Set;
-  const out = [];
-  for (const raw of commands) {
-    if (typeof raw !== "string")
-      continue;
-    const key = normalizeInjectCommand(raw);
-    if (key.length === 0)
-      continue;
-    if (seen.has(key))
-      continue;
-    seen.add(key);
-    out.push(raw.trim());
-  }
-  return out;
-}
-function defaultSocketName(agentName) {
-  return `switchroom-${agentName}`;
-}
-function makeTmuxRunner(tmuxBin) {
-  return {
-    capture(socket, session) {
-      try {
-        return execFileSync(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
-      } catch {
-        return null;
-      }
-    },
-    send(socket, session, args) {
-      const [subcmd, ...rest] = args;
-      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
-      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
-      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
-      execFileSync(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
-    },
-    hasSession(socket, session) {
-      try {
-        execFileSync(tmuxBin, ["-L", socket, "has-session", "-t", session], {
-          stdio: ["pipe", "pipe", "pipe"]
-        });
-        return true;
-      } catch {
-        return false;
-      }
-    }
-  };
-}
-function sleep(ms) {
-  return new Promise((res) => setTimeout(res, ms));
-}
-function isTuiChromeLine(line) {
-  const t = line.trim();
-  if (t.length === 0)
-    return false;
-  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
-    return true;
-  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
-    return true;
-  if (/accept edits on/i.test(t))
-    return true;
-  if (/shift\+tab to cycle/i.test(t))
-    return true;
-  if (/for agents/i.test(t))
-    return true;
-  if (/\? for shortcuts/i.test(t))
-    return true;
-  if (/bypassing permissions/i.test(t))
-    return true;
-  if (t === "copy")
-    return true;
-  return false;
-}
-function diffPane(before, after, command) {
-  if (command) {
-    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    const lines = after.split(`
-`);
-    let anchorIdx = -1;
-    for (let i = lines.length - 1;i >= 0; i--) {
-      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
-        anchorIdx = i;
-        break;
-      }
-    }
-    if (anchorIdx >= 0) {
-      const tail = lines.slice(anchorIdx + 1);
-      const trimmed = [];
-      for (const raw of tail) {
-        const line = raw.trimEnd();
-        if (line.length === 0 && trimmed.length === 0)
-          continue;
-        if (isTuiChromeLine(line))
-          continue;
-        trimmed.push(line);
-      }
-      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
-        trimmed.pop();
-      }
-      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
-      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
-        trimmed.pop();
-      }
-      if (trimmed.length > 0) {
-        return { output: trimmed.join(`
-`), anchored: true };
-      }
-    }
-  }
-  const beforeSet = new Set(before.split(`
-`).map((l) => l.trimEnd()));
-  const newLines = [];
-  for (const raw of after.split(`
-`)) {
-    const line = raw.trimEnd();
-    if (line.length === 0)
-      continue;
-    if (beforeSet.has(line))
-      continue;
-    if (isTuiChromeLine(line))
-      continue;
-    newLines.push(line);
-  }
-  return { output: newLines.join(`
-`), anchored: false };
-}
-async function injectSlashCommand(agentName, command, opts = {}) {
-  validateInjectCommand(command);
-  const tmuxBin = opts.tmuxBin ?? "tmux";
-  const socket = opts.socketName ?? defaultSocketName(agentName);
-  const session = opts.sessionName ?? agentName;
-  const settleMs = opts.settleMs ?? 2000;
-  const signalMode = !!(opts.successPattern || opts.errorPattern);
-  const timeoutMs = opts.timeoutMs ?? (signalMode ? 8000 : 5000);
-  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
-    socket,
-    session,
-    command: command.trim(),
-    settleMs,
-    timeoutMs,
-    precondition: opts.precondition,
-    successPattern: opts.successPattern,
-    errorPattern: opts.errorPattern,
-    settleBeforeSendMs: opts.settleBeforeSendMs
-  }));
-}
-async function injectSlashCommandWith(runner, args) {
-  const {
-    socket,
-    session,
-    command,
-    settleMs,
-    timeoutMs,
-    precondition,
-    successPattern,
-    errorPattern,
-    settleBeforeSendMs
-  } = args;
-  let bareVerb;
-  try {
-    bareVerb = validateInjectCommand(command);
-  } catch (err) {
-    if (err instanceof InjectError) {
-      return {
-        outcome: "failed",
-        output: "",
-        truncated: false,
-        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
-        meta: null,
-        errorCode: err.code,
-        errorMessage: err.message
-      };
-    }
-    throw err;
-  }
-  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
-  if (!runner.hasSession(socket, session)) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "session_missing",
-      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
-    };
-  }
-  if (precondition && !precondition()) {
-    return {
-      outcome: "skipped",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "precondition_failed",
-      errorMessage: "inject precondition returned false at write time; send aborted " + "(no keys sent)."
-    };
-  }
-  if (settleBeforeSendMs && settleBeforeSendMs > 0) {
-    const settleStart = Date.now();
-    let prevSettle = runner.capture(socket, session) ?? "";
-    while (Date.now() - settleStart < settleBeforeSendMs) {
-      await sleep(POLL_INTERVAL_MS);
-      const cur = runner.capture(socket, session) ?? "";
-      if (cur === prevSettle)
-        break;
-      prevSettle = cur;
-    }
-  }
-  const before = runner.capture(socket, session) ?? "";
-  try {
-    runner.send(socket, session, ["send-keys", "-l", command]);
-    runner.send(socket, session, ["send-keys", "Enter"]);
-  } catch (err) {
-    return {
-      outcome: "failed",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      errorCode: "tmux_failed",
-      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
-    };
-  }
-  const start = Date.now();
-  let last = before;
-  let stableSince = null;
-  const signalMode = !!(successPattern || errorPattern);
-  while (Date.now() - start < timeoutMs) {
-    await sleep(POLL_INTERVAL_MS);
-    const cur = runner.capture(socket, session) ?? "";
-    if (signalMode) {
-      last = cur;
-      if (cur !== before) {
-        const { output: region } = diffPane(before, cur, command);
-        const regionLines = region.split(`
-`).map((l) => l.trim());
-        if (errorPattern && regionLines.some((l) => errorPattern.test(l)))
-          break;
-        if (successPattern && regionLines.some((l) => successPattern.test(l)))
-          break;
-      }
-      continue;
-    }
-    if (cur === last && cur !== before) {
-      if (stableSince === null) {
-        stableSince = Date.now();
-      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
-        last = cur;
-        break;
-      }
-    } else {
-      stableSince = null;
-    }
-    last = cur;
-    if (Date.now() - start >= settleMs && cur !== before) {
-      break;
-    }
-  }
-  const { output: rawOutput, anchored } = diffPane(before, last, command);
-  let output = rawOutput;
-  let truncated = false;
-  const bytes = Buffer.byteLength(output, "utf-8");
-  if (bytes > OUTPUT_BYTE_CAP) {
-    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
-      output = output.slice(Math.floor(output.length * 0.1) + 1);
-    }
-    truncated = true;
-  }
-  if (meta?.dialog) {
-    try {
-      runner.send(socket, session, ["send-keys", "Escape"]);
-    } catch {}
-  }
-  if (output.trim().length === 0) {
-    return {
-      outcome: "ok_no_output",
-      output: "",
-      truncated: false,
-      command: bareVerb,
-      meta,
-      ...anchored ? {} : { diagnostic: "anchor_missing" }
-    };
-  }
-  return {
-    outcome: "ok",
-    output,
-    truncated,
-    command: bareVerb,
-    meta,
-    ...truncated ? { diagnostic: "truncated_output" } : {}
-  };
-}
-var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
-var init_inject = __esm(() => {
-  init_pane_lock();
-  INJECT_COMMANDS = new Map([
-    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/status", { description: "Show session status", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/help", { description: "Show help / command discovery", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/context", { description: "Show context window usage", expectsOutput: true, argsAllowed: false }],
-    ["/release-notes", { description: "Show release-notes version list", expectsOutput: true, dialog: true, argsAllowed: false }],
-    ["/model", { description: "Open model picker", expectsOutput: true, argsAllowed: true }],
-    [
-      "/clear",
-      {
-        description: "Clear session screen",
-        expectsOutput: false,
-        silentNote: "context cleared \u2014 fresh slate",
-        argsAllowed: false
-      }
-    ],
-    [
-      "/compact",
-      {
-        description: "Compact conversation history",
-        expectsOutput: false,
-        silentNote: "compaction runs silently",
-        argsAllowed: false
-      }
-    ]
-  ]);
-  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-  INJECT_BLOCKED = new Map([
-    ["/login", { reason: "would mutate auth state" }],
-    ["/logout", { reason: "would terminate the agent's auth session" }],
-    ["/exit", { reason: "would kill the agent process" }],
-    ["/quit", { reason: "would kill the agent process" }],
-    ["/upgrade", { reason: "mutates the Claude Code installation" }],
-    ["/init", { reason: "generates/overwrites CLAUDE.md and runs a model turn" }],
-    ["/mcp", { reason: "opens an interactive MCP server management dialog" }],
-    ["/permissions", { reason: "opens an interactive permissions editor that mutates tool policy" }],
-    ["/install-github-app", { reason: "runs a network/OAuth install flow" }],
-    ["/add-dir", { reason: "mutates the session's working-directory set" }],
-    ["/terminal-setup", { reason: "mutates terminal keybinding configuration" }],
-    ["/privacy-settings", { reason: "opens an interactive privacy-settings dialog" }],
-    ["/bug", { reason: "submits a bug report over the network" }],
-    [
-      "/effort",
-      {
-        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-      }
-    ]
-  ]);
-  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-  InjectError = class InjectError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.name = "InjectError";
-      this.code = code;
-    }
-  };
-});
-
-// src/agents/model-picker.ts
-var init_model_picker = __esm(() => {
-  init_inject();
-  init_pane_lock();
-});
-
 // telegram-plugin/gateway/model-command.ts
 function isClaudeModel(name) {
   const lower = name.toLowerCase();
@@ -15699,7 +15274,6 @@ function isClaudeModel(name) {
 }
 var MODEL_ALIASES;
 var init_model_command = __esm(() => {
-  init_model_picker();
   MODEL_ALIASES = ["opus", "sonnet", "haiku", "fable", "default"];
 });
 
@@ -15771,7 +15345,7 @@ var init_atomic = __esm(() => {
 });
 
 // src/setup/hindsight.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync } from "node:child_process";
 import { createServer } from "node:net";
 function hindsightImageRef(tag) {
   const normalized = normalizeHindsightVersionTag(tag);
@@ -15806,7 +15380,7 @@ function describePortHolder(port) {
   ];
   for (const [cmd, args] of probes) {
     try {
-      const out = execFileSync2(cmd, args, {
+      const out = execFileSync(cmd, args, {
         stdio: "pipe",
         encoding: "utf-8"
       }).trim();
@@ -15863,7 +15437,7 @@ async function pickHindsightPorts() {
 }
 function isDockerAvailable() {
   try {
-    execFileSync2("docker", ["--version"], { stdio: "pipe" });
+    execFileSync("docker", ["--version"], { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -15871,7 +15445,7 @@ function isDockerAvailable() {
 }
 function isHindsightRunning() {
   try {
-    const output = execFileSync2("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync("docker", ["ps", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
@@ -15879,7 +15453,7 @@ function isHindsightRunning() {
 }
 function isHindsightContainerExists() {
   try {
-    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Names}}"], { stdio: "pipe", encoding: "utf-8" });
     return output.trim().length > 0;
   } catch {
     return false;
@@ -15987,7 +15561,7 @@ x-litellm-tags: service:hindsight`);
   }
   args.push("-v", "switchroom-hindsight-data:/home/hindsight/.pg0", "-v", "switchroom-hindsight-backups:/backups", "-v", `${HINDSIGHT_BROKER_SOCK_VOLUME}:/run/switchroom/auth-broker`, ...mirrorDir ? ["-v", `${HINDSIGHT_CREDS_MIRROR_VOLUME}:${HINDSIGHT_CRED_DIR}`] : ["--tmpfs", `${HINDSIGHT_CRED_DIR}:rw,mode=0700,uid=${HINDSIGHT_DEFAULT_UID},gid=${HINDSIGHT_DEFAULT_UID}`], ...envArgs, hindsightImageRef(imageTag));
   if (mirrorDir) {
-    execFileSync2("docker", [
+    execFileSync("docker", [
       "run",
       "--rm",
       "--user",
@@ -16001,25 +15575,25 @@ x-litellm-tags: service:hindsight`);
       `chown ${HINDSIGHT_DEFAULT_UID}:${HINDSIGHT_DEFAULT_UID} ${HINDSIGHT_CRED_DIR} && chmod 0700 ${HINDSIGHT_CRED_DIR}`
     ], { stdio: "pipe" });
   }
-  execFileSync2("docker", args, { stdio: "pipe" });
+  execFileSync("docker", args, { stdio: "pipe" });
 }
 function stopHindsight() {
   try {
-    execFileSync2("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync("docker", ["stop", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
   try {
-    execFileSync2("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
+    execFileSync("docker", ["rm", "switchroom-hindsight"], { stdio: "pipe" });
   } catch {}
 }
 function pullHindsightImage(imageTag) {
-  execFileSync2("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
+  execFileSync("docker", ["pull", hindsightImageRef(imageTag)], { stdio: "inherit" });
 }
 function getRunningHindsightPorts() {
   const CONTAINER_API_PORT = 8888;
   const CONTAINER_UI_PORT = 9999;
   const readPort = (containerPort) => {
     try {
-      const out = execFileSync2("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
+      const out = execFileSync("docker", ["port", "switchroom-hindsight", `${containerPort}/tcp`], { stdio: "pipe", encoding: "utf-8" });
       const m = out.split(`
 `).map((l) => l.trim()).find((l) => l.length > 0);
       if (!m)
@@ -16040,7 +15614,7 @@ function getRunningHindsightPorts() {
 function getHindsightPortsFromEnv() {
   let env2;
   try {
-    env2 = execFileSync2("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
+    env2 = execFileSync("docker", ["inspect", "--format", "{{.Config.Env}}", "switchroom-hindsight"], { stdio: "pipe", encoding: "utf-8" });
   } catch {
     return null;
   }
@@ -16060,7 +15634,7 @@ function getHindsightPortsFromEnv() {
 }
 function getHindsightStatus() {
   try {
-    const output = execFileSync2("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
+    const output = execFileSync("docker", ["ps", "-a", "--filter", "name=switchroom-hindsight", "--format", "{{.Status}}"], { stdio: "pipe", encoding: "utf-8" });
     const status = output.trim();
     return status.length > 0 ? status : null;
   } catch {
@@ -16899,7 +16473,7 @@ function parseSocketIdentity(socketPath, spec) {
 }
 
 // src/vault/broker/peercred.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { readFileSync as readFileSync4, readlinkSync, fstatSync } from "node:fs";
 function socketPathToIdentity(socketPath) {
   return parseSocketIdentity(socketPath, {
@@ -17072,7 +16646,7 @@ function identify(socketPath, socket, execFileSyncOverride) {
   if (process.platform !== "linux") {
     return null;
   }
-  const runner = execFileSyncOverride ?? execFileSync3;
+  const runner = execFileSyncOverride ?? execFileSync2;
   let pid = null;
   if (socket !== undefined) {
     const fd = fdFromSocket(socket);
@@ -17165,7 +16739,7 @@ var init_agent_uid = __esm(() => {
 });
 
 // src/agents/agent-owned-tree.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync5, lstatSync, statSync as statSync3 } from "node:fs";
 function alignAgentTreeOwnershipIfRoot(name, agentDir) {
   if (ownershipRuntime.geteuid() !== 0)
@@ -17206,7 +16780,7 @@ var init_agent_owned_tree = __esm(() => {
   ownershipRuntime = {
     geteuid: () => process.geteuid?.(),
     chownTree: (uid, gid, rootDir) => {
-      execFileSync4("chown", ["-h", "-R", `${uid}:${gid}`, rootDir], {
+      execFileSync3("chown", ["-h", "-R", `${uid}:${gid}`, rootDir], {
         stdio: ["ignore", "ignore", "pipe"]
       });
     }
@@ -24101,6 +23675,17 @@ var init_reconcile_default_skills = __esm(() => {
 });
 
 // src/agents/sub-agent-telegram-prompt.ts
+function buildSubAgentLocalTimeLine(tz) {
+  return `
+
+## Local time
+
+This agent's configured timezone is **${tz}**, and the container clock is ALREADY set to it (the \`TZ\` env is wired at apply time). So the system clock is local time, not UTC: \`date\` in a shell and \`Date.now()\` in code both yield correct **local** time in \`${tz}\`. When you report or reason about the current time, "how long ago" something was, or scheduling, treat the local wall clock as "now" \u2014 never assume or emit UTC. If you need a fresh timestamp, read it live (e.g. run \`date '+%A %Y-%m-%d %I:%M %p %Z'\`) rather than guessing.
+`;
+}
+function applySubAgentLocalTimeGuidance(body, tz) {
+  return body + buildSubAgentLocalTimeLine(tz);
+}
 function shouldAppendTelegramProgressGuidance(args) {
   return args.telegramEnabled && args.defaultChatId != null && args.defaultChatId.length > 0;
 }
@@ -25984,7 +25569,7 @@ var init_onboarding = __esm(() => {
 });
 
 // src/repos/bare-clone.ts
-import { execFileSync as execFileSync5 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync14, mkdirSync as mkdirSync8 } from "node:fs";
 import { resolve as resolve9 } from "node:path";
 function bareClonePath(slug) {
@@ -25997,7 +25582,7 @@ function ensureBareClone(slug, url) {
   if (!existsSync14(clonePath)) {
     process.stderr.write(`[switchroom] repo "${slug}": cloning ${url} \u2026
 `);
-    execFileSync5("git", ["clone", "--bare", url, clonePath], {
+    execFileSync4("git", ["clone", "--bare", url, clonePath], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     process.stderr.write(`[switchroom] repo "${slug}": bare clone ready at ${clonePath}
@@ -26006,7 +25591,7 @@ function ensureBareClone(slug, url) {
     process.stderr.write(`[switchroom] repo "${slug}": fetching ${clonePath} \u2026
 `);
     try {
-      execFileSync5("git", ["fetch", "--all"], {
+      execFileSync4("git", ["fetch", "--all"], {
         cwd: clonePath,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -26023,7 +25608,7 @@ var init_bare_clone = __esm(() => {
 });
 
 // src/repos/agent-worktree.ts
-import { execFileSync as execFileSync6 } from "node:child_process";
+import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync15, mkdirSync as mkdirSync9, readdirSync as readdirSync5 } from "node:fs";
 import { join as join9, resolve as resolve10 } from "node:path";
 function agentBranchName(agentName) {
@@ -26034,7 +25619,7 @@ function agentWorktreePath(agentDir, slug) {
 }
 function isWorktreeDirty(worktreePath) {
   try {
-    const out = execFileSync6("git", ["status", "--porcelain"], {
+    const out = execFileSync5("git", ["status", "--porcelain"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -26046,7 +25631,7 @@ function isWorktreeDirty(worktreePath) {
 }
 function headShortSha(worktreePath) {
   try {
-    return execFileSync6("git", ["rev-parse", "--short", "HEAD"], {
+    return execFileSync5("git", ["rev-parse", "--short", "HEAD"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -26057,7 +25642,7 @@ function headShortSha(worktreePath) {
 }
 function branchExistsInBare(bareClonePath2, branchName) {
   try {
-    execFileSync6("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
+    execFileSync5("git", ["rev-parse", "--verify", `refs/heads/${branchName}`], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -26068,7 +25653,7 @@ function branchExistsInBare(bareClonePath2, branchName) {
 }
 function resolveDefaultBranch(bareClonePath2) {
   try {
-    const out = execFileSync6("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+    const out = execFileSync5("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf-8"
@@ -26086,12 +25671,12 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   if (!existsSync15(worktreePath)) {
     mkdirSync9(join9(agentDir, "work"), { recursive: true });
     if (branchExistsInBare(bareClonePath2, branch)) {
-      execFileSync6("git", ["worktree", "add", worktreePath, branch], {
+      execFileSync5("git", ["worktree", "add", worktreePath, branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
     } else {
-      execFileSync6("git", [
+      execFileSync5("git", [
         "worktree",
         "add",
         worktreePath,
@@ -26119,11 +25704,11 @@ function ensureAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     };
   }
   try {
-    execFileSync6("git", ["fetch", "origin"], {
+    execFileSync5("git", ["fetch", "origin"], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
-    execFileSync6("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
+    execFileSync5("git", ["merge", "--ff-only", `origin/${defaultBranch}`], {
       cwd: worktreePath,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -26141,7 +25726,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   const branch = agentBranchName(agentName);
   if (existsSync15(worktreePath)) {
     try {
-      execFileSync6("git", ["worktree", "remove", "--force", worktreePath], {
+      execFileSync5("git", ["worktree", "remove", "--force", worktreePath], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -26153,7 +25738,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
   }
   if (branchExistsInBare(bareClonePath2, branch)) {
     try {
-      execFileSync6("git", ["branch", "-D", branch], {
+      execFileSync5("git", ["branch", "-D", branch], {
         cwd: bareClonePath2,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -26164,7 +25749,7 @@ function removeAgentWorktree(agentName, slug, bareClonePath2, agentDir) {
     }
   }
   try {
-    execFileSync6("git", ["worktree", "prune"], {
+    execFileSync5("git", ["worktree", "prune"], {
       cwd: bareClonePath2,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -26193,7 +25778,7 @@ import {
   unlinkSync as unlinkSync4
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { execSync, execFileSync as execFileSync7 } from "node:child_process";
+import { execSync, execFileSync as execFileSync6 } from "node:child_process";
 import { join as join10, resolve as resolve11 } from "node:path";
 import { createHash as createHash3 } from "node:crypto";
 function prependReplyDiscipline(rendered, context) {
@@ -26327,13 +25912,13 @@ function alignAgentUid(name, agentDir, uid, opts = {}) {
 `));
   }
   try {
-    execFileSync7("chown", ["-h", "-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("chown", ["-h", "-R", `${uid}:${uid}`, ...paths], {
       stdio: ["ignore", "ignore", "pipe"]
     });
     return { chowned: true, paths };
   } catch {}
   try {
-    execFileSync7("sudo", ["chown", "-h", "-R", `${uid}:${uid}`, ...paths], {
+    execFileSync6("sudo", ["chown", "-h", "-R", `${uid}:${uid}`, ...paths], {
       stdio: "inherit"
     });
     return { chowned: true, paths };
@@ -27055,7 +26640,7 @@ Thumbs.db
     execSync("git add -A", { cwd: workspaceDir, stdio: "pipe" });
     const userEmail = process.env.GIT_AUTHOR_EMAIL || "switchroom@localhost";
     const userName = process.env.GIT_AUTHOR_NAME || "Switchroom Agent";
-    execFileSync7("git", [
+    execFileSync6("git", [
       "-c",
       `user.email=${userEmail}`,
       "-c",
@@ -27780,10 +27365,10 @@ ${v.map((i) => `  - ${i}`).join(`
       }).join(`
 `);
       const rawBody = saDef.prompt ?? `You are the ${saName} sub-agent.`;
-      const body = applyTelegramProgressGuidance(rawBody, {
+      const body = applySubAgentLocalTimeGuidance(applyTelegramProgressGuidance(rawBody, {
         telegramEnabled: true,
         defaultChatId: userId
-      });
+      }), resolveTimezone(switchroomConfig ?? {}, agentConfig));
       const content = `---
 ${fmLines}
 ---
@@ -28655,10 +28240,10 @@ ${v.map((i) => `  - ${i}`).join(`
         }).join(`
 `);
         const rawBody = saDef.prompt ?? `You are the ${saName} sub-agent.`;
-        const body = applyTelegramProgressGuidance(rawBody, {
+        const body = applySubAgentLocalTimeGuidance(applyTelegramProgressGuidance(rawBody, {
           telegramEnabled: true,
           defaultChatId: greetingUserId
-        });
+        }), resolveTimezone(switchroomConfig, agentConfig));
         const content = `---
 ${fmLines}
 ---
@@ -30735,7 +30320,7 @@ var init_write_compose = __esm(() => {
 });
 
 // src/agents/tmux.ts
-import { execFileSync as execFileSync8 } from "node:child_process";
+import { execFileSync as execFileSync7 } from "node:child_process";
 function sendAgentInterrupt(opts) {
   const { agentName } = opts;
   const attempts = typeof opts.attempts === "number" && opts.attempts > 0 ? opts.attempts : 1;
@@ -30745,7 +30330,7 @@ function sendAgentInterrupt(opts) {
   let lastError = null;
   for (let i = 0;i < attempts; i++) {
     try {
-      execFileSync8("tmux", args, {
+      execFileSync7("tmux", args, {
         timeout: 3000,
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -30786,7 +30371,7 @@ var init_compose_env = () => {};
 import { resolve as resolve13 } from "node:path";
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { execFileSync as execFileSync9 } from "node:child_process";
+import { execFileSync as execFileSync8 } from "node:child_process";
 function resolveSwitchroomHome(explicit) {
   if (explicit && explicit.length > 0)
     return explicit;
@@ -30817,7 +30402,7 @@ function bringUpAgentService(opts) {
   const dockerBin = opts.dockerBin ?? "docker";
   const stdio = opts.stdio ?? "inherit";
   for (const svc of ["vault-broker", "approval-kernel", "switchroom-auth-broker"]) {
-    execFileSync9(dockerBin, [
+    execFileSync8(dockerBin, [
       "compose",
       "-f",
       composePath,
@@ -30829,7 +30414,7 @@ function bringUpAgentService(opts) {
       svc
     ], { stdio });
   }
-  execFileSync9(dockerBin, [
+  execFileSync8(dockerBin, [
     "compose",
     "-f",
     composePath,
@@ -30848,7 +30433,7 @@ var init_docker_fleet = __esm(() => {
 });
 
 // src/agents/singleton-reconcile.ts
-import { execFileSync as execFileSync10 } from "node:child_process";
+import { execFileSync as execFileSync9 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
 function resolveSingletonServices(voiceEngine) {
   const engine = voiceEngine ?? loadHostCapabilities()?.voice.engine ?? "cloud";
@@ -30874,7 +30459,7 @@ function readPinnedSingletonImages(composeText, services = SINGLETON_SERVICES) {
 }
 function defaultInspectImage(dockerBin, container) {
   try {
-    const out = execFileSync10(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
+    const out = execFileSync9(dockerBin, ["inspect", "-f", "{{.Config.Image}}", container], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], timeout: 5000 }).trim();
     return out.length > 0 ? out : null;
   } catch {
     return null;
@@ -30900,7 +30485,7 @@ function detectSingletonDrift(deps) {
   });
 }
 function defaultRecreate(dockerBin, project, composeFile, service) {
-  execFileSync10(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
+  execFileSync9(dockerBin, ["compose", "-p", project, "-f", composeFile, ...composeEnvFileArgs(composeFile), "up", "-d", "--no-deps", service], { stdio: ["ignore", "pipe", "pipe"], timeout: 120000 });
 }
 function reconcileSingletons(deps) {
   const dockerBin = deps.dockerBin ?? "docker";
@@ -30943,7 +30528,7 @@ var init_singleton_reconcile = __esm(() => {
 });
 
 // src/agents/lifecycle.ts
-import { execFileSync as execFileSync11, spawn, spawnSync } from "node:child_process";
+import { execFileSync as execFileSync10, spawn, spawnSync } from "node:child_process";
 import { existsSync as existsSync21, mkdirSync as mkdirSync14, writeFileSync as writeFileSync7, renameSync as renameSync5, readFileSync as readFileSync17 } from "node:fs";
 import { resolve as resolve14, join as join14 } from "node:path";
 import { connect } from "node:net";
@@ -30974,7 +30559,7 @@ function buildCliRestartReason(opts) {
   if (!buildCommit)
     return "cli: restart";
   try {
-    const head = execFileSync11("git", ["rev-parse", "HEAD"], {
+    const head = execFileSync10("git", ["rev-parse", "HEAD"], {
       cwd: cwd ?? process.cwd(),
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -30985,7 +30570,7 @@ function buildCliRestartReason(opts) {
       return "cli: restart";
     let subject = "";
     try {
-      subject = execFileSync11("git", ["log", "-1", "--pretty=%s", head], {
+      subject = execFileSync10("git", ["log", "-1", "--pretty=%s", head], {
         cwd: cwd ?? process.cwd(),
         encoding: "utf-8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -31015,7 +30600,7 @@ function reconcileSingletonImages(log) {
 }
 function dockerSync(args) {
   try {
-    return execFileSync11("docker", args, {
+    return execFileSync10("docker", args, {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -31404,12 +30989,12 @@ var init_lifecycle = __esm(() => {
 });
 
 // src/auth/pane-ready-probe.ts
-import { execFileSync as execFileSync13 } from "node:child_process";
+import { execFileSync as execFileSync12 } from "node:child_process";
 function defaultPaneReadyDeps() {
   return {
     capturePane(sessionName) {
       try {
-        return execFileSync13("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
+        return execFileSync12("tmux", ["capture-pane", "-p", "-t", sessionName, "-S", "-200"], {
           encoding: "utf-8",
           stdio: ["pipe", "pipe", "pipe"]
         }).trim();
@@ -31690,7 +31275,7 @@ var init_accounts = __esm(() => {
 });
 
 // src/auth/manager.ts
-import { execFileSync as execFileSync14 } from "node:child_process";
+import { execFileSync as execFileSync13 } from "node:child_process";
 import {
   readFileSync as readFileSync22,
   readdirSync as readdirSync11,
@@ -31741,14 +31326,14 @@ function authSessionName(name, slot) {
   return `${base}-${slot.replace(/[^a-zA-Z0-9_.-]/g, "-")}`;
 }
 function tmux(args) {
-  return execFileSync14("tmux", args, {
+  return execFileSync13("tmux", args, {
     encoding: "utf-8",
     stdio: ["pipe", "pipe", "pipe"]
   }).trim();
 }
 function tmuxSessionExists(sessionName) {
   try {
-    execFileSync14("tmux", ["has-session", "-t", sessionName], {
+    execFileSync13("tmux", ["has-session", "-t", sessionName], {
       stdio: ["pipe", "pipe", "pipe"]
     });
     return true;
@@ -32264,6 +31849,425 @@ function readQuarantineMarkerForAgent(agentsDir, name) {
 var QUARANTINE_FILENAME = "quarantine.json";
 var init_quarantine = () => {};
 
+// src/agents/pane-lock.ts
+function withPaneLock(key, fn) {
+  const tail = tails.get(key) ?? Promise.resolve();
+  const run = tail.then(() => fn());
+  const next = run.then(() => {}, () => {});
+  tails.set(key, next);
+  next.then(() => {
+    if (tails.get(key) === next)
+      tails.delete(key);
+  });
+  return run;
+}
+var tails;
+var init_pane_lock = __esm(() => {
+  tails = new Map;
+});
+
+// src/agents/inject.ts
+var exports_inject = {};
+__export(exports_inject, {
+  validateInjectCommand: () => validateInjectCommand,
+  normalizeInjectCommand: () => normalizeInjectCommand,
+  makeTmuxRunner: () => makeTmuxRunner,
+  isTuiChromeLine: () => isTuiChromeLine,
+  injectSlashCommandWith: () => injectSlashCommandWith,
+  injectSlashCommand: () => injectSlashCommand,
+  diffPane: () => diffPane,
+  dedupeInjectQueue: () => dedupeInjectQueue,
+  InjectError: () => InjectError,
+  INJECT_COMMANDS: () => INJECT_COMMANDS,
+  INJECT_BLOCKLIST: () => INJECT_BLOCKLIST,
+  INJECT_BLOCKED: () => INJECT_BLOCKED,
+  INJECT_ALLOWLIST: () => INJECT_ALLOWLIST
+});
+import { execFileSync as execFileSync15 } from "node:child_process";
+function validateInjectCommand(command) {
+  if (typeof command !== "string" || command.trim().length === 0) {
+    throw new InjectError("invalid", "command is empty");
+  }
+  const trimmed = command.trim();
+  if (!trimmed.startsWith("/")) {
+    throw new InjectError("invalid", `command must start with "/": got ${trimmed}`);
+  }
+  const bare = trimmed.split(/\s+/, 1)[0].toLowerCase();
+  const blockedMeta = INJECT_BLOCKED.get(bare);
+  if (blockedMeta) {
+    throw new InjectError("blocked", `${bare} is explicitly blocked from inject (${blockedMeta.reason}).`);
+  }
+  const meta = INJECT_COMMANDS.get(bare);
+  if (!meta) {
+    const allowed = [...INJECT_COMMANDS.keys()].sort().join(", ");
+    throw new InjectError("not_allowed", `${bare} is not in the inject allowlist. Allowed: ${allowed}`);
+  }
+  const hasArgs = trimmed.split(/\s+/).length > 1;
+  if (hasArgs && !meta.argsAllowed) {
+    throw new InjectError("args_not_allowed", `args not permitted for ${bare} \u2014 inject the bare verb only`);
+  }
+  return bare;
+}
+function normalizeInjectCommand(command) {
+  return command.trim().replace(/\s+/g, " ").toLowerCase();
+}
+function dedupeInjectQueue(commands) {
+  const seen = new Set;
+  const out = [];
+  for (const raw of commands) {
+    if (typeof raw !== "string")
+      continue;
+    const key = normalizeInjectCommand(raw);
+    if (key.length === 0)
+      continue;
+    if (seen.has(key))
+      continue;
+    seen.add(key);
+    out.push(raw.trim());
+  }
+  return out;
+}
+function defaultSocketName(agentName) {
+  return `switchroom-${agentName}`;
+}
+function makeTmuxRunner(tmuxBin) {
+  return {
+    capture(socket, session) {
+      try {
+        return execFileSync15(tmuxBin, ["-L", socket, "capture-pane", "-p", "-t", session, "-S", "-200"], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+      } catch {
+        return null;
+      }
+    },
+    send(socket, session, args) {
+      const [subcmd, ...rest] = args;
+      const flagEnd = rest.findIndex((a) => !a.startsWith("-"));
+      const flagsBeforeKeys = flagEnd === -1 ? rest : rest.slice(0, flagEnd);
+      const keys = flagEnd === -1 ? [] : rest.slice(flagEnd);
+      execFileSync15(tmuxBin, ["-L", socket, subcmd, ...flagsBeforeKeys, "-t", session, ...keys], { stdio: ["pipe", "pipe", "pipe"] });
+    },
+    hasSession(socket, session) {
+      try {
+        execFileSync15(tmuxBin, ["-L", socket, "has-session", "-t", session], {
+          stdio: ["pipe", "pipe", "pipe"]
+        });
+        return true;
+      } catch {
+        return false;
+      }
+    }
+  };
+}
+function sleep2(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
+function isTuiChromeLine(line) {
+  const t = line.trim();
+  if (t.length === 0)
+    return false;
+  if (/^[\s\-_\u2502\u2500\u256d\u256e\u2570\u256f\u250c\u2510\u2514\u2518|]+$/.test(t))
+    return true;
+  if (/^[\u256d\u256e\u2570\u256f\u2502\s]*[>)\u276f][\u256d\u256e\u2570\u256f\u2502\s]*$/.test(t))
+    return true;
+  if (/accept edits on/i.test(t))
+    return true;
+  if (/shift\+tab to cycle/i.test(t))
+    return true;
+  if (/for agents/i.test(t))
+    return true;
+  if (/\? for shortcuts/i.test(t))
+    return true;
+  if (/bypassing permissions/i.test(t))
+    return true;
+  if (t === "copy")
+    return true;
+  return false;
+}
+function diffPane(before, after, command) {
+  if (command) {
+    const escaped = command.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const lines = after.split(`
+`);
+    let anchorIdx = -1;
+    for (let i = lines.length - 1;i >= 0; i--) {
+      if (/[\u276f>]\s+/.test(lines[i]) && lines[i].includes(escaped)) {
+        anchorIdx = i;
+        break;
+      }
+    }
+    if (anchorIdx >= 0) {
+      const tail = lines.slice(anchorIdx + 1);
+      const trimmed = [];
+      for (const raw of tail) {
+        const line = raw.trimEnd();
+        if (line.length === 0 && trimmed.length === 0)
+          continue;
+        if (isTuiChromeLine(line))
+          continue;
+        trimmed.push(line);
+      }
+      while (trimmed.length > 0 && trimmed[trimmed.length - 1].length === 0) {
+        trimmed.pop();
+      }
+      const affordances = /^(esc to cancel|press any key|\u21b5 select)/i;
+      while (trimmed.length > 0 && affordances.test(trimmed[trimmed.length - 1].trim())) {
+        trimmed.pop();
+      }
+      if (trimmed.length > 0) {
+        return { output: trimmed.join(`
+`), anchored: true };
+      }
+    }
+  }
+  const beforeSet = new Set(before.split(`
+`).map((l) => l.trimEnd()));
+  const newLines = [];
+  for (const raw of after.split(`
+`)) {
+    const line = raw.trimEnd();
+    if (line.length === 0)
+      continue;
+    if (beforeSet.has(line))
+      continue;
+    if (isTuiChromeLine(line))
+      continue;
+    newLines.push(line);
+  }
+  return { output: newLines.join(`
+`), anchored: false };
+}
+async function injectSlashCommand(agentName, command, opts = {}) {
+  validateInjectCommand(command);
+  const tmuxBin = opts.tmuxBin ?? "tmux";
+  const socket = opts.socketName ?? defaultSocketName(agentName);
+  const session = opts.sessionName ?? agentName;
+  const settleMs = opts.settleMs ?? 2000;
+  const signalMode = !!(opts.successPattern || opts.errorPattern);
+  const timeoutMs = opts.timeoutMs ?? (signalMode ? 8000 : 5000);
+  return withPaneLock(`${socket}:${session}`, () => injectSlashCommandWith(makeTmuxRunner(tmuxBin), {
+    socket,
+    session,
+    command: command.trim(),
+    settleMs,
+    timeoutMs,
+    precondition: opts.precondition,
+    successPattern: opts.successPattern,
+    errorPattern: opts.errorPattern,
+    settleBeforeSendMs: opts.settleBeforeSendMs
+  }));
+}
+async function injectSlashCommandWith(runner, args) {
+  const {
+    socket,
+    session,
+    command,
+    settleMs,
+    timeoutMs,
+    precondition,
+    successPattern,
+    errorPattern,
+    settleBeforeSendMs
+  } = args;
+  let bareVerb;
+  try {
+    bareVerb = validateInjectCommand(command);
+  } catch (err) {
+    if (err instanceof InjectError) {
+      return {
+        outcome: "failed",
+        output: "",
+        truncated: false,
+        command: command.trim().split(/\s+/, 1)[0]?.toLowerCase() ?? "",
+        meta: null,
+        errorCode: err.code,
+        errorMessage: err.message
+      };
+    }
+    throw err;
+  }
+  const meta = INJECT_COMMANDS.get(bareVerb) ?? null;
+  if (!runner.hasSession(socket, session)) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "session_missing",
+      errorMessage: `tmux session "${session}" on socket "${socket}" not found. ` + `Is the agent running under the tmux supervisor (the default)? ` + `If experimental.legacy_pty=true is set, inject is unsupported.`
+    };
+  }
+  if (precondition && !precondition()) {
+    return {
+      outcome: "skipped",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "precondition_failed",
+      errorMessage: "inject precondition returned false at write time; send aborted " + "(no keys sent)."
+    };
+  }
+  if (settleBeforeSendMs && settleBeforeSendMs > 0) {
+    const settleStart = Date.now();
+    let prevSettle = runner.capture(socket, session) ?? "";
+    while (Date.now() - settleStart < settleBeforeSendMs) {
+      await sleep2(POLL_INTERVAL_MS);
+      const cur = runner.capture(socket, session) ?? "";
+      if (cur === prevSettle)
+        break;
+      prevSettle = cur;
+    }
+  }
+  const before = runner.capture(socket, session) ?? "";
+  try {
+    runner.send(socket, session, ["send-keys", "-l", command]);
+    runner.send(socket, session, ["send-keys", "Enter"]);
+  } catch (err) {
+    return {
+      outcome: "failed",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      errorCode: "tmux_failed",
+      errorMessage: `tmux send-keys failed: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const start = Date.now();
+  let last = before;
+  let stableSince = null;
+  const signalMode = !!(successPattern || errorPattern);
+  while (Date.now() - start < timeoutMs) {
+    await sleep2(POLL_INTERVAL_MS);
+    const cur = runner.capture(socket, session) ?? "";
+    if (signalMode) {
+      last = cur;
+      if (cur !== before) {
+        const { output: region } = diffPane(before, cur, command);
+        const regionLines = region.split(`
+`).map((l) => l.trim());
+        if (errorPattern && regionLines.some((l) => errorPattern.test(l)))
+          break;
+        if (successPattern && regionLines.some((l) => successPattern.test(l)))
+          break;
+      }
+      continue;
+    }
+    if (cur === last && cur !== before) {
+      if (stableSince === null) {
+        stableSince = Date.now();
+      } else if (Date.now() - stableSince >= POLL_INTERVAL_MS) {
+        last = cur;
+        break;
+      }
+    } else {
+      stableSince = null;
+    }
+    last = cur;
+    if (Date.now() - start >= settleMs && cur !== before) {
+      break;
+    }
+  }
+  const { output: rawOutput, anchored } = diffPane(before, last, command);
+  let output = rawOutput;
+  let truncated = false;
+  const bytes = Buffer.byteLength(output, "utf-8");
+  if (bytes > OUTPUT_BYTE_CAP) {
+    while (Buffer.byteLength(output, "utf-8") > OUTPUT_BYTE_CAP) {
+      output = output.slice(Math.floor(output.length * 0.1) + 1);
+    }
+    truncated = true;
+  }
+  if (meta?.dialog) {
+    try {
+      runner.send(socket, session, ["send-keys", "Escape"]);
+    } catch {}
+  }
+  if (output.trim().length === 0) {
+    return {
+      outcome: "ok_no_output",
+      output: "",
+      truncated: false,
+      command: bareVerb,
+      meta,
+      ...anchored ? {} : { diagnostic: "anchor_missing" }
+    };
+  }
+  return {
+    outcome: "ok",
+    output,
+    truncated,
+    command: bareVerb,
+    meta,
+    ...truncated ? { diagnostic: "truncated_output" } : {}
+  };
+}
+var INJECT_COMMANDS, INJECT_ALLOWLIST, INJECT_BLOCKED, INJECT_BLOCKLIST, InjectError, POLL_INTERVAL_MS = 150, OUTPUT_BYTE_CAP = 3000;
+var init_inject = __esm(() => {
+  init_pane_lock();
+  INJECT_COMMANDS = new Map([
+    ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/status", { description: "Show session status", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/help", { description: "Show help / command discovery", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/context", { description: "Show context window usage", expectsOutput: true, argsAllowed: false }],
+    ["/release-notes", { description: "Show release-notes version list", expectsOutput: true, dialog: true, argsAllowed: false }],
+    ["/model", { description: "Open model picker", expectsOutput: true, argsAllowed: true }],
+    [
+      "/clear",
+      {
+        description: "Clear session screen",
+        expectsOutput: false,
+        silentNote: "context cleared \u2014 fresh slate",
+        argsAllowed: false
+      }
+    ],
+    [
+      "/compact",
+      {
+        description: "Compact conversation history",
+        expectsOutput: false,
+        silentNote: "compaction runs silently",
+        argsAllowed: false
+      }
+    ]
+  ]);
+  INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
+  INJECT_BLOCKED = new Map([
+    ["/login", { reason: "would mutate auth state" }],
+    ["/logout", { reason: "would terminate the agent's auth session" }],
+    ["/exit", { reason: "would kill the agent process" }],
+    ["/quit", { reason: "would kill the agent process" }],
+    ["/upgrade", { reason: "mutates the Claude Code installation" }],
+    ["/init", { reason: "generates/overwrites CLAUDE.md and runs a model turn" }],
+    ["/mcp", { reason: "opens an interactive MCP server management dialog" }],
+    ["/permissions", { reason: "opens an interactive permissions editor that mutates tool policy" }],
+    ["/install-github-app", { reason: "runs a network/OAuth install flow" }],
+    ["/add-dir", { reason: "mutates the session's working-directory set" }],
+    ["/terminal-setup", { reason: "mutates terminal keybinding configuration" }],
+    ["/privacy-settings", { reason: "opens an interactive privacy-settings dialog" }],
+    ["/bug", { reason: "submits a bug report over the network" }],
+    [
+      "/effort",
+      {
+        reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
+      }
+    ]
+  ]);
+  INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
+  InjectError = class InjectError extends Error {
+    code;
+    constructor(code, message) {
+      super(message);
+      this.name = "InjectError";
+      this.code = code;
+    }
+  };
+});
+
 // src/auth/broker/protocol.ts
 function encodeRequest2(req) {
   const line = JSON.stringify(RequestSchema2.parse(req)) + `
@@ -63948,11 +63952,11 @@ function detectInFlight(opts) {
 async function waitUntilIdle(opts) {
   const pollMs = opts.pollMs ?? 2000;
   const clock = opts.now ?? Date.now;
-  const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const deadline = clock() + opts.timeoutMs;
   let last = detectInFlight(opts);
   while (last.busy && clock() < deadline) {
-    await sleep2(pollMs);
+    await sleep(pollMs);
     last = detectInFlight(opts);
   }
   return last;
@@ -64108,7 +64112,7 @@ function spinner(message) {
 // src/agents/status.ts
 import { existsSync as existsSync24, readFileSync as readFileSync20, statSync as statSync12 } from "node:fs";
 import { join as join16 } from "node:path";
-import { execFileSync as execFileSync12 } from "node:child_process";
+import { execFileSync as execFileSync11 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
 import { readFileSync as readFileSync18, writeFileSync as writeFileSync8, renameSync as renameSync6, mkdirSync as mkdirSync15, existsSync as existsSync22, statSync as statSync11, readdirSync as readdirSync9 } from "node:fs";
@@ -64693,7 +64697,7 @@ async function buildAgentStatusReport(inputs) {
 async function waitForAgentReady(inputs, options = {}) {
   const timeoutMs = options.timeoutMs ?? 30000;
   const pollIntervalMs = options.pollIntervalMs ?? 750;
-  const sleep2 = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const now = options.now ?? Date.now;
   const startedAt = now();
   const deadline = startedAt + timeoutMs;
@@ -64708,7 +64712,7 @@ async function waitForAgentReady(inputs, options = {}) {
         notReady
       };
     }
-    await sleep2(pollIntervalMs);
+    await sleep(pollIntervalMs);
     report = await buildAgentStatusReport(inputs);
     notReady = readinessGaps(report);
   }
@@ -64785,14 +64789,14 @@ function readLastMessages(historyDbPath) {
     };
   }
   try {
-    const out = execFileSync12("bun", [
+    const out = execFileSync11("bun", [
       "-e",
       `const { Database } = require("bun:sqlite"); ` + `const db = new Database(${JSON.stringify(historyDbPath)}, { readonly: true }); ` + `const rows = db.prepare("SELECT role, MAX(ts) as ts FROM messages GROUP BY role").all(); ` + `for (const r of rows) console.log(r.role + "|" + r.ts); ` + `db.close();`
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
     return parseSqliteRoleTsOutput(out);
   } catch {}
   try {
-    const out = execFileSync12("sqlite3", [
+    const out = execFileSync11("sqlite3", [
       historyDbPath,
       "SELECT role, MAX(ts) FROM messages GROUP BY role;"
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
@@ -64904,7 +64908,7 @@ function escapeRegex(s) {
 }
 function readDockerContainer(containerName2) {
   try {
-    const out = execFileSync12("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
+    const out = execFileSync11("docker", ["inspect", "--format", "{{json .State}}", containerName2], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] });
     const state = JSON.parse(out.trim());
     const active = state.Status === "running" ? "active" : state.Status === "restarting" ? "restarting" : "inactive";
     const pid = typeof state.Pid === "number" && state.Pid > 0 ? state.Pid : null;
@@ -65019,7 +65023,7 @@ async function pollForDmStart(token, timeoutMs = 120000) {
       const response = await fetch(url);
       data = await response.json();
     } catch {
-      await sleep2(2000);
+      await sleep(2000);
       continue;
     }
     if (data.ok && Array.isArray(data.result)) {
@@ -65035,11 +65039,11 @@ async function pollForDmStart(token, timeoutMs = 120000) {
         }
       }
     }
-    await sleep2(2000);
+    await sleep(2000);
   }
   throw new Error("Timed out waiting for /start DM");
 }
-function sleep2(ms) {
+function sleep(ms) {
   return new Promise((resolve17) => setTimeout(resolve17, ms));
 }
 
@@ -65183,7 +65187,7 @@ async function completeCreation(name, code, opts = {}) {
 // src/agents/add-orchestrator.ts
 import { resolve as resolve19, join as join19 } from "node:path";
 import { existsSync as existsSync29, rmSync as rmSync8, statSync as statSync16 } from "node:fs";
-import { execFileSync as execFileSync15 } from "node:child_process";
+import { execFileSync as execFileSync14 } from "node:child_process";
 init_onboarding();
 
 // src/setup/botfather-walkthrough.ts
@@ -65757,7 +65761,7 @@ function pruneBundledSkills(agentDir, keep, scope) {
 }
 function defaultIsUnitActive(unitName) {
   try {
-    const out = execFileSync15("systemctl", ["--user", "is-active", unitName], {
+    const out = execFileSync14("systemctl", ["--user", "is-active", unitName], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();