switchroom 0.18.28 → 0.18.30

package/dist/host-control/main.js

@@ -18991,11 +18991,52 @@ var AgentGoogleWorkspaceConfigSchema = exports_external.object({
   approvers: exports_external.array(ApproverIdSchema).min(1).optional().describe("Per-agent approver override. When set, replaces (does not extend) " + "the top-level drive.approvers list for this agent's onboarding card."),
   tier: GoogleWorkspaceTierSchema.optional().describe("Per-agent tier override (RFC G Phase 1). When set, replaces the " + "top-level google_workspace.tier for this agent. Common case: most " + "agents on `core`, one specialist on `extended` for Slides access.")
 }).optional();
+var MicrosoftAccountEmailSchema = exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
+  message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
+}).transform((v) => v.trim().toLowerCase());
+var MicrosoftToolTokenSchema = exports_external.string().min(1).regex(/^[a-z0-9-]+$/, {
+  message: "microsoft_workspace tools[] tokens are forwarded to softeria's " + "--enabled-tools regex; each must be lowercase kebab-case " + "([a-z0-9-]+, e.g. 'mail', 'calendar', 'send-mail') so an unescaped " + "regex metacharacter can't crash the launcher"
+});
+var MicrosoftAccountBindingSchema = exports_external.object({
+  account: MicrosoftAccountEmailSchema.describe("The Microsoft account this binding uses. Must be a key in top-level " + "`microsoft_accounts:` with this agent in its `enabled_for[]`."),
+  tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist → softeria `--enabled-tools <regex>` " + "(tokens joined with `|`). Omitted = all tools exposed for this account."),
+  org_mode: exports_external.boolean().optional().describe("Per-binding org_mode override (RFC #1873 §6.4).")
+});
 var AgentMicrosoftWorkspaceConfigSchema = exports_external.object({
-  account: exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
-    message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
-  }).transform((v) => v.trim().toLowerCase()).optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized)."),
-  org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false).")
+  account: MicrosoftAccountEmailSchema.optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized). Mutually exclusive with `accounts` (plural)."),
+  tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist for the SINGULAR `account` form → " + "softeria `--enabled-tools <regex>`. Omitted = all tools. Only " + "valid with the singular `account`; using it together with the " + "plural `accounts` (which carries per-binding `tools`) is an error."),
+  org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false)."),
+  accounts: exports_external.array(MicrosoftAccountBindingSchema).min(1).optional().describe("Plural multi-account form: bind MULTIPLE Microsoft accounts to " + "this agent, each with its own tool scope. Mutually exclusive with " + "the singular `account`. Each account gets its own `ms-365-<slug>` " + "MCP server.")
+}).superRefine((v, ctx) => {
+  const hasSingular = v.account !== undefined;
+  const hasPlural = v.accounts !== undefined;
+  if (hasSingular && hasPlural) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      message: "microsoft_workspace: use EITHER `account` (singular) OR " + "`accounts` (plural array), not both",
+      path: ["accounts"]
+    });
+  }
+  if (hasPlural && v.tools !== undefined) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      message: "microsoft_workspace: block-level `tools` applies to the singular " + "`account` only; with `accounts` put `tools` inside each binding",
+      path: ["tools"]
+    });
+  }
+  if (hasPlural) {
+    const seen = new Set;
+    for (const b of v.accounts) {
+      if (seen.has(b.account)) {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          message: `microsoft_workspace: duplicate account '${b.account}' in accounts[]`,
+          path: ["accounts"]
+        });
+      }
+      seen.add(b.account);
+    }
+  }
 }).optional();
 var AgentNotionWorkspaceConfigSchema = exports_external.object({
   databases: exports_external.array(exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/, {
@@ -19370,6 +19411,26 @@ var SwitchroomConfigSchema = exports_external.object({
   for (const [name, a] of Object.entries(cfg.agents ?? {})) {
     checkServes(a.serves, ["agents", name, "serves"]);
   }
+  const microsoftAccounts = cfg.microsoft_accounts;
+  for (const [name, a] of Object.entries(cfg.agents ?? {})) {
+    const mw = a.microsoft_workspace;
+    const accounts = mw?.accounts;
+    if (!accounts)
+      continue;
+    accounts.forEach((b, i) => {
+      const acct = b?.account?.trim().toLowerCase();
+      if (!acct)
+        return;
+      const enabledFor = microsoftAccounts?.[acct]?.enabled_for ?? [];
+      if (!enabledFor.includes(name)) {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          message: `agent '${name}' binds Microsoft account '${acct}' but is not in ` + `microsoft_accounts['${acct}'].enabled_for[] — operator must run ` + `\`switchroom auth microsoft enable ${acct} ${name}\``,
+          path: ["agents", name, "microsoft_workspace", "accounts", i, "account"]
+        });
+      }
+    });
+  }
 });
 
 // src/config/paths.ts
@@ -19974,6 +20035,22 @@ function validateNotionWorkspaceConfig(config) {
   return issues;
 }
 
+// src/config/timezone.ts
+function isResolvableTimezone(zone) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: zone });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CONTAINER_DEFAULT_UTC_ZONES = new Set([
+  "UTC",
+  "Etc/UTC",
+  "Etc/Universal",
+  "Universal"
+]);
+
 // src/config/loader.ts
 class ConfigError extends Error {
   details;
@@ -20097,8 +20174,30 @@ function loadConfig(configPath) {
   if (notionIssues.length > 0) {
     throw new ConfigError(`Invalid notion_workspace configuration in ${filePath}`, notionIssues);
   }
+  validateAllTimezones(config, filePath);
   return config;
 }
+function validateAllTimezones(config, filePath) {
+  const issues = [];
+  const check = (zone, where) => {
+    if (zone == null)
+      return;
+    if (!isResolvableTimezone(zone)) {
+      issues.push(`  ${where}: "${zone}" is not a resolvable IANA timezone ` + `(shape is valid but no such zone exists — check for a typo, ` + `e.g. "Australia/Melbourne", "America/New_York", "UTC").`);
+    }
+  };
+  check(config.switchroom?.timezone, "switchroom.timezone");
+  check(config.defaults?.timezone, "defaults.timezone");
+  for (const [profileName, profile] of Object.entries(config.profiles ?? {})) {
+    check(profile?.timezone, `profiles.${profileName}.timezone`);
+  }
+  for (const [agentName, agentRaw] of Object.entries(config.agents)) {
+    check(agentRaw?.timezone, `agents.${agentName}.timezone`);
+  }
+  if (issues.length > 0) {
+    throw new ConfigError(`Invalid timezone configuration in ${filePath}`, issues);
+  }
+}
 function validateAllCronTopicAliases(config, filePath) {
   const issues = [];
   for (const [agentName, agentRaw] of Object.entries(config.agents)) {
@@ -20568,14 +20667,6 @@ function allocateAgentUid(name) {
   return AGENT_UID_MIN + u32 % range;
 }
 
-// src/config/timezone.ts
-var CONTAINER_DEFAULT_UTC_ZONES = new Set([
-  "UTC",
-  "Etc/UTC",
-  "Etc/Universal",
-  "Universal"
-]);
-
 // src/cli/agent-config.ts
 import { join as join2 } from "node:path";
 import { homedir as homedir2 } from "node:os";
@@ -20610,63 +20701,6 @@ for (const name of SHARED_FRAGMENTS) {
   }
 }
 
-// src/agents/pane-lock.ts
-var tails = new Map;
-
-// src/agents/inject.ts
-var INJECT_COMMANDS = new Map([
-  ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/status", { description: "Show session status", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/help", { description: "Show help / command discovery", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/context", { description: "Show context window usage", expectsOutput: true, argsAllowed: false }],
-  ["/release-notes", { description: "Show release-notes version list", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/model", { description: "Open model picker", expectsOutput: true, argsAllowed: true }],
-  [
-    "/clear",
-    {
-      description: "Clear session screen",
-      expectsOutput: false,
-      silentNote: "context cleared — fresh slate",
-      argsAllowed: false
-    }
-  ],
-  [
-    "/compact",
-    {
-      description: "Compact conversation history",
-      expectsOutput: false,
-      silentNote: "compaction runs silently",
-      argsAllowed: false
-    }
-  ]
-]);
-var INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-var INJECT_BLOCKED = new Map([
-  ["/login", { reason: "would mutate auth state" }],
-  ["/logout", { reason: "would terminate the agent's auth session" }],
-  ["/exit", { reason: "would kill the agent process" }],
-  ["/quit", { reason: "would kill the agent process" }],
-  ["/upgrade", { reason: "mutates the Claude Code installation" }],
-  ["/init", { reason: "generates/overwrites CLAUDE.md and runs a model turn" }],
-  ["/mcp", { reason: "opens an interactive MCP server management dialog" }],
-  ["/permissions", { reason: "opens an interactive permissions editor that mutates tool policy" }],
-  ["/install-github-app", { reason: "runs a network/OAuth install flow" }],
-  ["/add-dir", { reason: "mutates the session's working-directory set" }],
-  ["/terminal-setup", { reason: "mutates terminal keybinding configuration" }],
-  ["/privacy-settings", { reason: "opens an interactive privacy-settings dialog" }],
-  ["/bug", { reason: "submits a bug report over the network" }],
-  [
-    "/effort",
-    {
-      reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-    }
-  ]
-]);
-var INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-
 // src/setup/hindsight.ts
 var HINDSIGHT_DEFAULT_API_PORT = 18888;
 var HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
@@ -21159,6 +21193,12 @@ var SWITCHROOM_OWNED_SETTINGS_KEYS = new Set([
 var DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin";
 var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
+// src/vault/grants-db-path.ts
+var GRANTS_DB_DIRNAME = "vault-broker";
+var GRANTS_DB_FILENAME = "vault-grants.db";
+var GRANTS_DB_CONTAINER_DIR = `/root/.switchroom/${GRANTS_DB_DIRNAME}`;
+var GRANTS_DB_CONTAINER_PATH = `${GRANTS_DB_CONTAINER_DIR}/${GRANTS_DB_FILENAME}`;
+
 // src/agents/compose.ts
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
@@ -26605,7 +26645,7 @@ import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:f
 import { dirname as dirname4, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.18.28";
+var VERSION = "0.18.30";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/dist/vault/approvals/kernel-server.js

@@ -4013,7 +4013,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -4411,11 +4411,52 @@ var init_schema = __esm(() => {
     approvers: exports_external.array(ApproverIdSchema).min(1).optional().describe("Per-agent approver override. When set, replaces (does not extend) " + "the top-level drive.approvers list for this agent's onboarding card."),
     tier: GoogleWorkspaceTierSchema.optional().describe("Per-agent tier override (RFC G Phase 1). When set, replaces the " + "top-level google_workspace.tier for this agent. Common case: most " + "agents on `core`, one specialist on `extended` for Slides access.")
   }).optional();
+  MicrosoftAccountEmailSchema = exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
+    message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
+  }).transform((v) => v.trim().toLowerCase());
+  MicrosoftToolTokenSchema = exports_external.string().min(1).regex(/^[a-z0-9-]+$/, {
+    message: "microsoft_workspace tools[] tokens are forwarded to softeria's " + "--enabled-tools regex; each must be lowercase kebab-case " + "([a-z0-9-]+, e.g. 'mail', 'calendar', 'send-mail') so an unescaped " + "regex metacharacter can't crash the launcher"
+  });
+  MicrosoftAccountBindingSchema = exports_external.object({
+    account: MicrosoftAccountEmailSchema.describe("The Microsoft account this binding uses. Must be a key in top-level " + "`microsoft_accounts:` with this agent in its `enabled_for[]`."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist → softeria `--enabled-tools <regex>` " + "(tokens joined with `|`). Omitted = all tools exposed for this account."),
+    org_mode: exports_external.boolean().optional().describe("Per-binding org_mode override (RFC #1873 §6.4).")
+  });
   AgentMicrosoftWorkspaceConfigSchema = exports_external.object({
-    account: exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
-      message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
-    }).transform((v) => v.trim().toLowerCase()).optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized)."),
-    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false).")
+    account: MicrosoftAccountEmailSchema.optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized). Mutually exclusive with `accounts` (plural)."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist for the SINGULAR `account` form → " + "softeria `--enabled-tools <regex>`. Omitted = all tools. Only " + "valid with the singular `account`; using it together with the " + "plural `accounts` (which carries per-binding `tools`) is an error."),
+    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false)."),
+    accounts: exports_external.array(MicrosoftAccountBindingSchema).min(1).optional().describe("Plural multi-account form: bind MULTIPLE Microsoft accounts to " + "this agent, each with its own tool scope. Mutually exclusive with " + "the singular `account`. Each account gets its own `ms-365-<slug>` " + "MCP server.")
+  }).superRefine((v, ctx) => {
+    const hasSingular = v.account !== undefined;
+    const hasPlural = v.accounts !== undefined;
+    if (hasSingular && hasPlural) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: use EITHER `account` (singular) OR " + "`accounts` (plural array), not both",
+        path: ["accounts"]
+      });
+    }
+    if (hasPlural && v.tools !== undefined) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: block-level `tools` applies to the singular " + "`account` only; with `accounts` put `tools` inside each binding",
+        path: ["tools"]
+      });
+    }
+    if (hasPlural) {
+      const seen = new Set;
+      for (const b of v.accounts) {
+        if (seen.has(b.account)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `microsoft_workspace: duplicate account '${b.account}' in accounts[]`,
+            path: ["accounts"]
+          });
+        }
+        seen.add(b.account);
+      }
+    }
   }).optional();
   AgentNotionWorkspaceConfigSchema = exports_external.object({
     databases: exports_external.array(exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/, {
@@ -4790,6 +4831,26 @@ var init_schema = __esm(() => {
     for (const [name, a] of Object.entries(cfg.agents ?? {})) {
       checkServes(a.serves, ["agents", name, "serves"]);
     }
+    const microsoftAccounts = cfg.microsoft_accounts;
+    for (const [name, a] of Object.entries(cfg.agents ?? {})) {
+      const mw = a.microsoft_workspace;
+      const accounts = mw?.accounts;
+      if (!accounts)
+        continue;
+      accounts.forEach((b, i) => {
+        const acct = b?.account?.trim().toLowerCase();
+        if (!acct)
+          return;
+        const enabledFor = microsoftAccounts?.[acct]?.enabled_for ?? [];
+        if (!enabledFor.includes(name)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `agent '${name}' binds Microsoft account '${acct}' but is not in ` + `microsoft_accounts['${acct}'].enabled_for[] — operator must run ` + `\`switchroom auth microsoft enable ${acct} ${name}\``,
+            path: ["agents", name, "microsoft_workspace", "accounts", i, "account"]
+          });
+        }
+      });
+    }
   });
 });
 
@@ -5184,6 +5245,25 @@ var init_merge = __esm(() => {
   })(mergeAgentConfig ||= {});
 });
 
+// src/config/timezone.ts
+function isResolvableTimezone(zone) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: zone });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CONTAINER_DEFAULT_UTC_ZONES;
+var init_timezone = __esm(() => {
+  CONTAINER_DEFAULT_UTC_ZONES = new Set([
+    "UTC",
+    "Etc/UTC",
+    "Etc/Universal",
+    "Universal"
+  ]);
+});
+
 // node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -12492,8 +12572,30 @@ function loadConfig(configPath) {
   if (notionIssues.length > 0) {
     throw new ConfigError(`Invalid notion_workspace configuration in ${filePath}`, notionIssues);
   }
+  validateAllTimezones(config, filePath);
   return config;
 }
+function validateAllTimezones(config, filePath) {
+  const issues = [];
+  const check = (zone, where) => {
+    if (zone == null)
+      return;
+    if (!isResolvableTimezone(zone)) {
+      issues.push(`  ${where}: "${zone}" is not a resolvable IANA timezone ` + `(shape is valid but no such zone exists — check for a typo, ` + `e.g. "Australia/Melbourne", "America/New_York", "UTC").`);
+    }
+  };
+  check(config.switchroom?.timezone, "switchroom.timezone");
+  check(config.defaults?.timezone, "defaults.timezone");
+  for (const [profileName, profile] of Object.entries(config.profiles ?? {})) {
+    check(profile?.timezone, `profiles.${profileName}.timezone`);
+  }
+  for (const [agentName, agentRaw] of Object.entries(config.agents)) {
+    check(agentRaw?.timezone, `agents.${agentName}.timezone`);
+  }
+  if (issues.length > 0) {
+    throw new ConfigError(`Invalid timezone configuration in ${filePath}`, issues);
+  }
+}
 function validateAllCronTopicAliases(config, filePath) {
   const issues = [];
   for (const [agentName, agentRaw] of Object.entries(config.agents)) {
@@ -12536,6 +12638,7 @@ var init_loader = __esm(() => {
   init_paths();
   init_overlay_loader();
   init_merge();
+  init_timezone();
   import_yaml2 = __toESM(require_dist(), 1);
   ConfigError = class ConfigError extends Error {
     details;
@@ -18937,14 +19040,7 @@ init_merge();
 
 // src/agents/scaffold.ts
 init_merge();
-
-// src/config/timezone.ts
-var CONTAINER_DEFAULT_UTC_ZONES = new Set([
-  "UTC",
-  "Etc/UTC",
-  "Etc/Universal",
-  "Universal"
-]);
+init_timezone();
 
 // src/cli/agent-config.ts
 import { join } from "node:path";
@@ -18990,63 +19086,6 @@ for (const name of SHARED_FRAGMENTS) {
   }
 }
 
-// src/agents/pane-lock.ts
-var tails = new Map;
-
-// src/agents/inject.ts
-var INJECT_COMMANDS = new Map([
-  ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/status", { description: "Show session status", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/help", { description: "Show help / command discovery", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/context", { description: "Show context window usage", expectsOutput: true, argsAllowed: false }],
-  ["/release-notes", { description: "Show release-notes version list", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/model", { description: "Open model picker", expectsOutput: true, argsAllowed: true }],
-  [
-    "/clear",
-    {
-      description: "Clear session screen",
-      expectsOutput: false,
-      silentNote: "context cleared — fresh slate",
-      argsAllowed: false
-    }
-  ],
-  [
-    "/compact",
-    {
-      description: "Compact conversation history",
-      expectsOutput: false,
-      silentNote: "compaction runs silently",
-      argsAllowed: false
-    }
-  ]
-]);
-var INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-var INJECT_BLOCKED = new Map([
-  ["/login", { reason: "would mutate auth state" }],
-  ["/logout", { reason: "would terminate the agent's auth session" }],
-  ["/exit", { reason: "would kill the agent process" }],
-  ["/quit", { reason: "would kill the agent process" }],
-  ["/upgrade", { reason: "mutates the Claude Code installation" }],
-  ["/init", { reason: "generates/overwrites CLAUDE.md and runs a model turn" }],
-  ["/mcp", { reason: "opens an interactive MCP server management dialog" }],
-  ["/permissions", { reason: "opens an interactive permissions editor that mutates tool policy" }],
-  ["/install-github-app", { reason: "runs a network/OAuth install flow" }],
-  ["/add-dir", { reason: "mutates the session's working-directory set" }],
-  ["/terminal-setup", { reason: "mutates terminal keybinding configuration" }],
-  ["/privacy-settings", { reason: "opens an interactive privacy-settings dialog" }],
-  ["/bug", { reason: "submits a bug report over the network" }],
-  [
-    "/effort",
-    {
-      reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-    }
-  ]
-]);
-var INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-
 // src/setup/hindsight.ts
 var HINDSIGHT_DEFAULT_API_PORT = 18888;
 var HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
@@ -19126,10 +19165,17 @@ var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
 // src/agents/compose.ts
 init_merge();
+init_timezone();
 
 // src/setup/host-capabilities.ts
 init_paths();
 
+// src/vault/grants-db-path.ts
+var GRANTS_DB_DIRNAME = "vault-broker";
+var GRANTS_DB_FILENAME = "vault-grants.db";
+var GRANTS_DB_CONTAINER_DIR = `/root/.switchroom/${GRANTS_DB_DIRNAME}`;
+var GRANTS_DB_CONTAINER_PATH = `${GRANTS_DB_CONTAINER_DIR}/${GRANTS_DB_FILENAME}`;
+
 // src/agents/compose.ts
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);