switchroom 0.18.28 → 0.18.30

package/dist/vault/broker/server.js

@@ -4013,7 +4013,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -4411,11 +4411,52 @@ var init_schema = __esm(() => {
     approvers: exports_external.array(ApproverIdSchema).min(1).optional().describe("Per-agent approver override. When set, replaces (does not extend) " + "the top-level drive.approvers list for this agent's onboarding card."),
     tier: GoogleWorkspaceTierSchema.optional().describe("Per-agent tier override (RFC G Phase 1). When set, replaces the " + "top-level google_workspace.tier for this agent. Common case: most " + "agents on `core`, one specialist on `extended` for Slides access.")
   }).optional();
+  MicrosoftAccountEmailSchema = exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
+    message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
+  }).transform((v) => v.trim().toLowerCase());
+  MicrosoftToolTokenSchema = exports_external.string().min(1).regex(/^[a-z0-9-]+$/, {
+    message: "microsoft_workspace tools[] tokens are forwarded to softeria's " + "--enabled-tools regex; each must be lowercase kebab-case " + "([a-z0-9-]+, e.g. 'mail', 'calendar', 'send-mail') so an unescaped " + "regex metacharacter can't crash the launcher"
+  });
+  MicrosoftAccountBindingSchema = exports_external.object({
+    account: MicrosoftAccountEmailSchema.describe("The Microsoft account this binding uses. Must be a key in top-level " + "`microsoft_accounts:` with this agent in its `enabled_for[]`."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist → softeria `--enabled-tools <regex>` " + "(tokens joined with `|`). Omitted = all tools exposed for this account."),
+    org_mode: exports_external.boolean().optional().describe("Per-binding org_mode override (RFC #1873 §6.4).")
+  });
   AgentMicrosoftWorkspaceConfigSchema = exports_external.object({
-    account: exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
-      message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
-    }).transform((v) => v.trim().toLowerCase()).optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized)."),
-    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false).")
+    account: MicrosoftAccountEmailSchema.optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized). Mutually exclusive with `accounts` (plural)."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist for the SINGULAR `account` form → " + "softeria `--enabled-tools <regex>`. Omitted = all tools. Only " + "valid with the singular `account`; using it together with the " + "plural `accounts` (which carries per-binding `tools`) is an error."),
+    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 §6.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false)."),
+    accounts: exports_external.array(MicrosoftAccountBindingSchema).min(1).optional().describe("Plural multi-account form: bind MULTIPLE Microsoft accounts to " + "this agent, each with its own tool scope. Mutually exclusive with " + "the singular `account`. Each account gets its own `ms-365-<slug>` " + "MCP server.")
+  }).superRefine((v, ctx) => {
+    const hasSingular = v.account !== undefined;
+    const hasPlural = v.accounts !== undefined;
+    if (hasSingular && hasPlural) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: use EITHER `account` (singular) OR " + "`accounts` (plural array), not both",
+        path: ["accounts"]
+      });
+    }
+    if (hasPlural && v.tools !== undefined) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: block-level `tools` applies to the singular " + "`account` only; with `accounts` put `tools` inside each binding",
+        path: ["tools"]
+      });
+    }
+    if (hasPlural) {
+      const seen = new Set;
+      for (const b of v.accounts) {
+        if (seen.has(b.account)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `microsoft_workspace: duplicate account '${b.account}' in accounts[]`,
+            path: ["accounts"]
+          });
+        }
+        seen.add(b.account);
+      }
+    }
   }).optional();
   AgentNotionWorkspaceConfigSchema = exports_external.object({
     databases: exports_external.array(exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/, {
@@ -4790,6 +4831,26 @@ var init_schema = __esm(() => {
     for (const [name, a] of Object.entries(cfg.agents ?? {})) {
       checkServes(a.serves, ["agents", name, "serves"]);
     }
+    const microsoftAccounts = cfg.microsoft_accounts;
+    for (const [name, a] of Object.entries(cfg.agents ?? {})) {
+      const mw = a.microsoft_workspace;
+      const accounts = mw?.accounts;
+      if (!accounts)
+        continue;
+      accounts.forEach((b, i) => {
+        const acct = b?.account?.trim().toLowerCase();
+        if (!acct)
+          return;
+        const enabledFor = microsoftAccounts?.[acct]?.enabled_for ?? [];
+        if (!enabledFor.includes(name)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `agent '${name}' binds Microsoft account '${acct}' but is not in ` + `microsoft_accounts['${acct}'].enabled_for[] — operator must run ` + `\`switchroom auth microsoft enable ${acct} ${name}\``,
+            path: ["agents", name, "microsoft_workspace", "accounts", i, "account"]
+          });
+        }
+      });
+    }
   });
 });
 
@@ -5184,6 +5245,25 @@ var init_merge = __esm(() => {
   })(mergeAgentConfig ||= {});
 });
 
+// src/config/timezone.ts
+function isResolvableTimezone(zone) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: zone });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CONTAINER_DEFAULT_UTC_ZONES;
+var init_timezone = __esm(() => {
+  CONTAINER_DEFAULT_UTC_ZONES = new Set([
+    "UTC",
+    "Etc/UTC",
+    "Etc/Universal",
+    "Universal"
+  ]);
+});
+
 // node_modules/.bun/yaml@2.8.3/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -12492,8 +12572,30 @@ function loadConfig(configPath) {
   if (notionIssues.length > 0) {
     throw new ConfigError(`Invalid notion_workspace configuration in ${filePath}`, notionIssues);
   }
+  validateAllTimezones(config, filePath);
   return config;
 }
+function validateAllTimezones(config, filePath) {
+  const issues = [];
+  const check = (zone, where) => {
+    if (zone == null)
+      return;
+    if (!isResolvableTimezone(zone)) {
+      issues.push(`  ${where}: "${zone}" is not a resolvable IANA timezone ` + `(shape is valid but no such zone exists — check for a typo, ` + `e.g. "Australia/Melbourne", "America/New_York", "UTC").`);
+    }
+  };
+  check(config.switchroom?.timezone, "switchroom.timezone");
+  check(config.defaults?.timezone, "defaults.timezone");
+  for (const [profileName, profile] of Object.entries(config.profiles ?? {})) {
+    check(profile?.timezone, `profiles.${profileName}.timezone`);
+  }
+  for (const [agentName, agentRaw] of Object.entries(config.agents)) {
+    check(agentRaw?.timezone, `agents.${agentName}.timezone`);
+  }
+  if (issues.length > 0) {
+    throw new ConfigError(`Invalid timezone configuration in ${filePath}`, issues);
+  }
+}
 function validateAllCronTopicAliases(config, filePath) {
   const issues = [];
   for (const [agentName, agentRaw] of Object.entries(config.agents)) {
@@ -12536,6 +12638,7 @@ var init_loader = __esm(() => {
   init_paths();
   init_overlay_loader();
   init_merge();
+  init_timezone();
   import_yaml2 = __toESM(require_dist(), 1);
   ConfigError = class ConfigError extends Error {
     details;
@@ -18109,7 +18212,7 @@ var require_lib = __commonJS((exports, module) => {
 
 // src/vault/broker/server.ts
 import * as net from "node:net";
-import { mkdirSync as mkdirSync6, chmodSync as chmodSync4, chownSync, existsSync as existsSync11, readFileSync as readFileSync10, readdirSync as readdirSync4, statSync as statSync6, unlinkSync as unlinkSync6, writeFileSync as writeFileSync3, renameSync as renameSync7 } from "node:fs";
+import { mkdirSync as mkdirSync7, chmodSync as chmodSync5, chownSync, existsSync as existsSync12, readFileSync as readFileSync10, readdirSync as readdirSync4, statSync as statSync6, unlinkSync as unlinkSync6, writeFileSync as writeFileSync3, renameSync as renameSync8 } from "node:fs";
 
 // src/agents/compose.ts
 init_schema();
@@ -18473,14 +18576,7 @@ init_merge();
 
 // src/agents/scaffold.ts
 init_merge();
-
-// src/config/timezone.ts
-var CONTAINER_DEFAULT_UTC_ZONES = new Set([
-  "UTC",
-  "Etc/UTC",
-  "Etc/Universal",
-  "Universal"
-]);
+init_timezone();
 
 // src/cli/agent-config.ts
 import { join } from "node:path";
@@ -18698,63 +18794,6 @@ for (const name of SHARED_FRAGMENTS) {
   }
 }
 
-// src/agents/pane-lock.ts
-var tails = new Map;
-
-// src/agents/inject.ts
-var INJECT_COMMANDS = new Map([
-  ["/cost", { description: "Show session cost", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/status", { description: "Show session status", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/usage", { description: "Show plan quota", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/hooks", { description: "List configured hooks", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/memory", { description: "Open memory picker", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/help", { description: "Show help / command discovery", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/context", { description: "Show context window usage", expectsOutput: true, argsAllowed: false }],
-  ["/release-notes", { description: "Show release-notes version list", expectsOutput: true, dialog: true, argsAllowed: false }],
-  ["/model", { description: "Open model picker", expectsOutput: true, argsAllowed: true }],
-  [
-    "/clear",
-    {
-      description: "Clear session screen",
-      expectsOutput: false,
-      silentNote: "context cleared — fresh slate",
-      argsAllowed: false
-    }
-  ],
-  [
-    "/compact",
-    {
-      description: "Compact conversation history",
-      expectsOutput: false,
-      silentNote: "compaction runs silently",
-      argsAllowed: false
-    }
-  ]
-]);
-var INJECT_ALLOWLIST = new Set(INJECT_COMMANDS.keys());
-var INJECT_BLOCKED = new Map([
-  ["/login", { reason: "would mutate auth state" }],
-  ["/logout", { reason: "would terminate the agent's auth session" }],
-  ["/exit", { reason: "would kill the agent process" }],
-  ["/quit", { reason: "would kill the agent process" }],
-  ["/upgrade", { reason: "mutates the Claude Code installation" }],
-  ["/init", { reason: "generates/overwrites CLAUDE.md and runs a model turn" }],
-  ["/mcp", { reason: "opens an interactive MCP server management dialog" }],
-  ["/permissions", { reason: "opens an interactive permissions editor that mutates tool policy" }],
-  ["/install-github-app", { reason: "runs a network/OAuth install flow" }],
-  ["/add-dir", { reason: "mutates the session's working-directory set" }],
-  ["/terminal-setup", { reason: "mutates terminal keybinding configuration" }],
-  ["/privacy-settings", { reason: "opens an interactive privacy-settings dialog" }],
-  ["/bug", { reason: "submits a bug report over the network" }],
-  [
-    "/effort",
-    {
-      reason: "leaves a blocking confirmation modal open and wedges the pane; use the /effort command (it drives the modal), not raw inject"
-    }
-  ]
-]);
-var INJECT_BLOCKLIST = new Set(INJECT_BLOCKED.keys());
-
 // src/setup/hindsight.ts
 var HINDSIGHT_DEFAULT_API_PORT = 18888;
 var HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
@@ -19588,42 +19627,108 @@ var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
 // src/agents/compose.ts
 init_merge();
+init_timezone();
 
 // src/setup/host-capabilities.ts
 init_paths();
 
+// src/vault/grants-db-path.ts
+import * as os from "node:os";
+import * as path from "node:path";
+import * as fs from "node:fs";
+var GRANTS_DB_DIRNAME = "vault-broker";
+var GRANTS_DB_FILENAME = "vault-grants.db";
+var GRANTS_DB_CONTAINER_DIR = `/root/.switchroom/${GRANTS_DB_DIRNAME}`;
+var GRANTS_DB_CONTAINER_PATH = `${GRANTS_DB_CONTAINER_DIR}/${GRANTS_DB_FILENAME}`;
+function getGrantsDbDir(home2 = os.homedir()) {
+  return path.join(home2, ".switchroom", GRANTS_DB_DIRNAME);
+}
+function getGrantsDbPath(home2 = os.homedir()) {
+  return path.join(getGrantsDbDir(home2), GRANTS_DB_FILENAME);
+}
+function getLegacyGrantsDbPath(newDbPath = getGrantsDbPath()) {
+  return path.join(path.dirname(path.dirname(newDbPath)), GRANTS_DB_FILENAME);
+}
+var WAL_SIDECAR_SUFFIXES = ["-wal", "-shm"];
+function migrateLegacyGrantsDbLocation(newDbPath = getGrantsDbPath(), deps) {
+  const rename = deps?.rename ?? fs.renameSync;
+  const legacyPath = getLegacyGrantsDbPath(newDbPath);
+  if (path.resolve(legacyPath) === path.resolve(newDbPath)) {
+    return { migrated: false };
+  }
+  if (!fs.existsSync(legacyPath))
+    return { migrated: false };
+  if (fs.existsSync(newDbPath))
+    return { migrated: false };
+  fs.mkdirSync(path.dirname(newDbPath), { recursive: true, mode: 448 });
+  const movedSidecars = [];
+  const rollbackSidecars = () => {
+    for (const m of [...movedSidecars].reverse()) {
+      try {
+        rename(m.to, m.from);
+      } catch {}
+    }
+  };
+  for (const suffix of WAL_SIDECAR_SUFFIXES) {
+    const from = `${legacyPath}${suffix}`;
+    const to = `${newDbPath}${suffix}`;
+    if (!fs.existsSync(from))
+      continue;
+    try {
+      rename(from, to);
+      movedSidecars.push({ from, to });
+    } catch (err) {
+      rollbackSidecars();
+      throw new Error(`grants-db migration: failed to move WAL sidecar ${from} -> ${to} ` + `(${err.message}); aborted with the legacy DB intact — ` + `will retry on the next apply/boot`);
+    }
+  }
+  try {
+    rename(legacyPath, newDbPath);
+  } catch (err) {
+    if (fs.existsSync(newDbPath) && !fs.existsSync(legacyPath)) {
+      return { migrated: false };
+    }
+    rollbackSidecars();
+    throw err;
+  }
+  try {
+    fs.chmodSync(newDbPath, 384);
+  } catch {}
+  return { migrated: true, from: legacyPath, to: newDbPath };
+}
+
 // src/agents/compose.ts
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/vault/broker/server.ts
-import { dirname as dirname5, resolve as resolve8, basename as basename4 } from "node:path";
+import { dirname as dirname6, resolve as resolve9, basename as basename4 } from "node:path";
 import * as os3 from "node:os";
-import * as path3 from "node:path";
+import * as path4 from "node:path";
 
 // src/vault/migrate-layout.ts
 import {
   copyFileSync as copyFileSync2,
-  chmodSync,
-  existsSync as existsSync7,
+  chmodSync as chmodSync2,
+  existsSync as existsSync8,
   fsyncSync as fsyncSync4,
   lstatSync as lstatSync2,
-  mkdirSync as mkdirSync3,
+  mkdirSync as mkdirSync4,
   openSync as openSync4,
   closeSync as closeSync4,
   readFileSync as readFileSync7,
-  renameSync as renameSync3,
+  renameSync as renameSync4,
   statSync as statSync4,
   symlinkSync,
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { basename as basename3, dirname as dirname2, join as join5 } from "node:path";
+import { basename as basename3, dirname as dirname3, join as join6 } from "node:path";
 function vaultLayoutPaths(home2) {
-  const switchroomRoot = join5(home2, ".switchroom");
+  const switchroomRoot = join6(home2, ".switchroom");
   return {
-    oldPath: join5(switchroomRoot, "vault.enc"),
-    newPath: join5(switchroomRoot, "vault", "vault.enc"),
-    parent: join5(switchroomRoot, "vault"),
+    oldPath: join6(switchroomRoot, "vault.enc"),
+    newPath: join6(switchroomRoot, "vault", "vault.enc"),
+    parent: join6(switchroomRoot, "vault"),
     switchroomRoot
   };
 }
@@ -19632,11 +19737,11 @@ function inspectVaultLayout(home2) {
 }
 function runMigration(home2, opts) {
   const { oldPath, newPath, parent, switchroomRoot } = vaultLayoutPaths(home2);
-  const lockTarget = existsSync7(newPath) ? newPath : existsSync7(oldPath) ? oldPath : null;
+  const lockTarget = existsSync8(newPath) ? newPath : existsSync8(oldPath) ? oldPath : null;
   const release = !opts.dryRun && lockTarget !== null ? acquireVaultLock(lockTarget) : null;
   try {
     const oldStat = lstatSyncOrNull(oldPath);
-    const newExists = existsSync7(newPath);
+    const newExists = existsSync8(newPath);
     if (oldStat === null && !newExists) {
       return { kind: "no-vault" };
     }
@@ -19672,12 +19777,12 @@ function runMigration(home2, opts) {
     if (oldStat?.isFile() && !newExists) {
       if (opts.dryRun)
         return { kind: "migrated" };
-      mkdirSync3(parent, { recursive: true, mode: 448 });
+      mkdirSync4(parent, { recursive: true, mode: 448 });
       const tempNew = `${newPath}.tmp`;
       copyFileSync2(oldPath, tempNew);
-      chmodSync(tempNew, 384);
+      chmodSync2(tempNew, 384);
       fsyncFile(tempNew);
-      renameSync3(tempNew, newPath);
+      renameSync4(tempNew, newPath);
       fsyncDir(parent);
       atomicReplaceWithSymlink(oldPath, "vault/vault.enc");
       fsyncDir(switchroomRoot);
@@ -19692,37 +19797,37 @@ function runMigration(home2, opts) {
     }
   }
 }
-function lstatSyncOrNull(path) {
+function lstatSyncOrNull(path2) {
   try {
-    return lstatSync2(path);
+    return lstatSync2(path2);
   } catch {
     return null;
   }
 }
-function sha256File(path) {
-  const data = readFileSync7(path);
+function sha256File(path2) {
+  const data = readFileSync7(path2);
   return createHash2("sha256").update(data).digest("hex");
 }
 function atomicReplaceWithSymlink(target, linkTarget) {
-  const tmp = join5(dirname2(target), `.${basename3(target)}.symlink-tmp`);
-  if (existsSync7(tmp)) {
+  const tmp = join6(dirname3(target), `.${basename3(target)}.symlink-tmp`);
+  if (existsSync8(tmp)) {
     try {
       unlinkSync3(tmp);
     } catch {}
   }
   symlinkSync(linkTarget, tmp);
-  renameSync3(tmp, target);
+  renameSync4(tmp, target);
 }
-function fsyncFile(path) {
-  const fd = openSync4(path, "r+");
+function fsyncFile(path2) {
+  const fd = openSync4(path2, "r+");
   try {
     fsyncSync4(fd);
   } finally {
     closeSync4(fd);
   }
 }
-function fsyncDir(path) {
-  const fd = openSync4(path, "r");
+function fsyncDir(path2) {
+  const fd = openSync4(path2, "r");
   try {
     fsyncSync4(fd);
   } finally {
@@ -19736,14 +19841,14 @@ init_loader();
 // src/vault/auto-unlock.ts
 import { createHmac, randomBytes as randomBytes2, createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2 } from "node:crypto";
 import {
-  chmodSync as chmodSync2,
+  chmodSync as chmodSync3,
   closeSync as closeSync5,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   fsyncSync as fsyncSync5,
-  mkdirSync as mkdirSync4,
+  mkdirSync as mkdirSync5,
   openSync as openSync5,
   readFileSync as readFileSync8,
-  renameSync as renameSync4,
+  renameSync as renameSync5,
   unlinkSync as unlinkSync4,
   writeSync as writeSync4
 } from "node:fs";
@@ -19779,9 +19884,9 @@ function readMachineId() {
     if (override && override.length > 0)
       return override;
   }
-  for (const path of [MACHINE_ID_PRIMARY, MACHINE_ID_FALLBACK]) {
+  for (const path2 of [MACHINE_ID_PRIMARY, MACHINE_ID_FALLBACK]) {
     try {
-      const id = readFileSync8(path, "utf8").trim();
+      const id = readFileSync8(path2, "utf8").trim();
       if (id.length > 0)
         return id;
     } catch {}
@@ -19818,7 +19923,7 @@ function decryptAutoUnlock(blob, machineId) {
   }
 }
 function readAutoUnlockFile(filePath) {
-  if (!existsSync8(filePath)) {
+  if (!existsSync9(filePath)) {
     throw new AutoUnlockDecryptError("io");
   }
   let blob;
@@ -19832,9 +19937,9 @@ function readAutoUnlockFile(filePath) {
 var DEFAULT_AUTO_UNLOCK_PATH = "~/.switchroom/vault-auto-unlock";
 
 // src/vault/broker/audit-log.ts
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
+import * as fs2 from "node:fs";
+import * as os2 from "node:os";
+import * as path2 from "node:path";
 
 // src/util/audit-hashchain.ts
 import { createHash as createHash4 } from "node:crypto";
@@ -19856,10 +19961,10 @@ function chainRow(state, entry) {
     next: { seq, lastHash: hash }
   };
 }
-function readTail(path, tailBytes = 64 * 1024) {
+function readTail(path2, tailBytes = 64 * 1024) {
   let fd;
   try {
-    fd = openSync6(path, "r");
+    fd = openSync6(path2, "r");
   } catch {
     return null;
   }
@@ -19879,8 +19984,8 @@ function readTail(path, tailBytes = 64 * 1024) {
     } catch {}
   }
 }
-function seedChain(path) {
-  const tail = readTail(path);
+function seedChain(path2) {
+  const tail = readTail(path2);
   if (tail === null || tail === "") {
     return { seq: 0, lastHash: CHAIN_GENESIS };
   }
@@ -19903,8 +20008,8 @@ function seedChain(path) {
 
 // src/vault/broker/test-isolation-guard.ts
 import { mkdtempSync } from "node:fs";
-import { homedir as homedir4, tmpdir } from "node:os";
-import { join as join6, resolve as resolve7, sep } from "node:path";
+import { homedir as homedir5, tmpdir } from "node:os";
+import { join as join7, resolve as resolve8, sep } from "node:path";
 function isTestRuntime() {
   return process.env.VITEST !== undefined;
 }
@@ -19912,11 +20017,11 @@ function escapeHatchSet() {
   return process.env.SWITCHROOM_ALLOW_PROD_VAULT_IN_TEST === "1";
 }
 function realSwitchroomHome() {
-  return resolve7(homedir4(), ".switchroom");
+  return resolve8(homedir5(), ".switchroom");
 }
 function isUnderRealSwitchroomHome(p) {
   const home2 = realSwitchroomHome();
-  const r = resolve7(p);
+  const r = resolve8(p);
   return r === home2 || r.startsWith(home2 + sep);
 }
 var warnedVault = false;
@@ -19925,7 +20030,7 @@ function safeVaultPath(requestedPath) {
     return requestedPath;
   if (!isUnderRealSwitchroomHome(requestedPath))
     return requestedPath;
-  const redirected = join6(mkdtempSync(join6(tmpdir(), "sw-test-vault-")), "vault.enc");
+  const redirected = join7(mkdtempSync(join7(tmpdir(), "sw-test-vault-")), "vault.enc");
   if (!warnedVault) {
     warnedVault = true;
     process.stderr.write(`[test-isolation guard] vault path redirected away from the ` + `production tree to an isolated tmpdir — a vault/broker test ` + `resolved its vault path inside ~/.switchroom. See CLAUDE.md ` + `"Vault & shared-state test discipline".
@@ -19941,7 +20046,7 @@ function safeAuditLogPath(requestedPath) {
   if (!isUnderRealSwitchroomHome(requestedPath))
     return requestedPath;
   if (!cachedTmpAuditLog) {
-    cachedTmpAuditLog = join6(mkdtempSync(join6(tmpdir(), "sw-test-audit-")), "vault-audit.log");
+    cachedTmpAuditLog = join7(mkdtempSync(join7(tmpdir(), "sw-test-audit-")), "vault-audit.log");
   }
   if (!warnedAudit) {
     warnedAudit = true;
@@ -19957,7 +20062,7 @@ function failOpenStatePath(logPath) {
 }
 function readFailOpenState(statePath) {
   try {
-    const raw = fs.readFileSync(statePath, "utf8");
+    const raw = fs2.readFileSync(statePath, "utf8");
     const parsed = JSON.parse(raw);
     const count = Number(parsed.failOpenCount);
     return {
@@ -19980,9 +20085,9 @@ function resolveRotation(opts) {
 }
 function rotateAuditLog(logPath, maxFiles) {
   const oldest = `${logPath}.${maxFiles}`;
-  if (fs.existsSync(oldest)) {
+  if (fs2.existsSync(oldest)) {
     try {
-      fs.unlinkSync(oldest);
+      fs2.unlinkSync(oldest);
     } catch (err) {
       process.stderr.write(`[vault-audit] ERROR: could not drop oldest rotation ${oldest}: ${err.message}
 `);
@@ -19991,10 +20096,10 @@ function rotateAuditLog(logPath, maxFiles) {
   for (let n = maxFiles - 1;n >= 1; n--) {
     const from = `${logPath}.${n}`;
     const to = `${logPath}.${n + 1}`;
-    if (!fs.existsSync(from))
+    if (!fs2.existsSync(from))
       continue;
     try {
-      fs.renameSync(from, to);
+      fs2.renameSync(from, to);
     } catch (err) {
       process.stderr.write(`[vault-audit] ERROR: could not rotate ${from} → ${to}: ${err.message}
 `);
@@ -20003,18 +20108,18 @@ function rotateAuditLog(logPath, maxFiles) {
   }
   const snapshotPath = `${logPath}.1`;
   try {
-    fs.copyFileSync(logPath, snapshotPath);
+    fs2.copyFileSync(logPath, snapshotPath);
   } catch (err) {
     process.stderr.write(`[vault-audit] ERROR: could not snapshot active audit log ${logPath} → ${snapshotPath}: ${err.message}
 `);
     return;
   }
   try {
-    const fd = fs.openSync(snapshotPath, "r");
+    const fd = fs2.openSync(snapshotPath, "r");
     try {
-      fs.fsyncSync(fd);
+      fs2.fsyncSync(fd);
     } finally {
-      fs.closeSync(fd);
+      fs2.closeSync(fd);
     }
   } catch (err) {
     process.stderr.write(`[vault-audit] ERROR: could not fsync audit snapshot ${snapshotPath}; leaving active log intact to avoid data loss: ${err.message}
@@ -20022,22 +20127,22 @@ function rotateAuditLog(logPath, maxFiles) {
     return;
   }
   try {
-    const dirFd = fs.openSync(path.dirname(snapshotPath), "r");
+    const dirFd = fs2.openSync(path2.dirname(snapshotPath), "r");
     try {
-      fs.fsyncSync(dirFd);
+      fs2.fsyncSync(dirFd);
     } finally {
-      fs.closeSync(dirFd);
+      fs2.closeSync(dirFd);
     }
   } catch {}
   try {
-    fs.truncateSync(logPath, 0);
+    fs2.truncateSync(logPath, 0);
   } catch (err) {
     process.stderr.write(`[vault-audit] ERROR: could not truncate active audit log ${logPath}: ${err.message}
 `);
   }
 }
 function defaultAuditLogPath() {
-  return path.join(os.homedir(), ".switchroom", "vault-audit.log");
+  return path2.join(os2.homedir(), ".switchroom", "vault-audit.log");
 }
 function callerFromPeer(peer) {
   if (peer.systemdUnit !== null && peer.systemdUnit.length > 0) {
@@ -20059,7 +20164,7 @@ function createAuditLogger(opts = {}) {
       lastError: String(err.message).slice(0, 300)
     };
     try {
-      fs.writeFileSync(statePath, `${JSON.stringify(state)}
+      fs2.writeFileSync(statePath, `${JSON.stringify(state)}
 `, { mode: 384 });
     } catch (persistErr) {
       process.stderr.write(`[vault-audit] ERROR: could not persist fail-open counter ${statePath}: ${persistErr.message}
@@ -20073,7 +20178,7 @@ function createAuditLogger(opts = {}) {
     write(entry) {
       if (rotation.maxBytes > 0) {
         try {
-          const size = fs.statSync(logPath).size;
+          const size = fs2.statSync(logPath).size;
           if (size >= rotation.maxBytes) {
             rotateAuditLog(logPath, rotation.maxFiles);
           }
@@ -20082,7 +20187,7 @@ function createAuditLogger(opts = {}) {
       const { line, next } = chainRow(chain, entry);
       let fd;
       try {
-        fd = fs.openSync(logPath, "a", 384);
+        fd = fs2.openSync(logPath, "a", 384);
       } catch (err) {
         process.stderr.write(`[vault-audit] ERROR: could not open audit log ${logPath}: ${err.message}
 `);
@@ -20091,7 +20196,7 @@ function createAuditLogger(opts = {}) {
       }
       let durable = false;
       try {
-        fs.writeSync(fd, line);
+        fs2.writeSync(fd, line);
         chain = next;
         durable = true;
       } catch (err) {
@@ -20100,7 +20205,7 @@ function createAuditLogger(opts = {}) {
         recordFailOpen(err);
       } finally {
         try {
-          fs.closeSync(fd);
+          fs2.closeSync(fd);
         } catch (closeErr) {
           process.stderr.write(`[vault-audit] ERROR: could not close audit log fd: ${closeErr.message}
 `);
@@ -20169,13 +20274,13 @@ function genSalt(rounds, seed_length, callback) {
       throw Error("Illegal callback: " + typeof callback);
     _async(callback);
   } else
-    return new Promise(function(resolve8, reject) {
+    return new Promise(function(resolve9, reject) {
       _async(function(err, res) {
         if (err) {
           reject(err);
           return;
         }
-        resolve8(res);
+        resolve9(res);
       });
     });
 }
@@ -20195,13 +20300,13 @@ function hash(password, salt, callback, progressCallback) {
       throw Error("Illegal callback: " + typeof callback);
     _async(callback);
   } else
-    return new Promise(function(resolve8, reject) {
+    return new Promise(function(resolve9, reject) {
       _async(function(err, res) {
         if (err) {
           reject(err);
           return;
         }
-        resolve8(res);
+        resolve9(res);
       });
     });
 }
@@ -20234,13 +20339,13 @@ function compare(password, hashValue, callback, progressCallback) {
       throw Error("Illegal callback: " + typeof callback);
     _async(callback);
   } else
-    return new Promise(function(resolve8, reject) {
+    return new Promise(function(resolve9, reject) {
       _async(function(err, res) {
         if (err) {
           reject(err);
           return;
         }
-        resolve8(res);
+        resolve9(res);
       });
     });
 }
@@ -21834,6 +21939,11 @@ function rowToGrant(row) {
     description: row.description ?? null
   };
 }
+function checkpointGrantsWal(db) {
+  try {
+    db.run("PRAGMA wal_checkpoint(TRUNCATE)");
+  } catch {}
+}
 function keyMatchesPatterns(patterns, key) {
   for (const pat of patterns) {
     if (pat.endsWith("*")) {
@@ -21864,6 +21974,7 @@ async function mintGrant(db, agent_slug, key_allow, ttl_seconds, description, wr
     now,
     description ?? null
   ]);
+  checkpointGrantsWal(db);
   return { token, id, expires_at };
 }
 async function validateGrant(db, token, key) {
@@ -21942,6 +22053,7 @@ async function validateGrantForWrite(db, token, key) {
 function revokeGrant(db, id) {
   const now = Math.floor(Date.now() / 1000);
   const result = db.run(`UPDATE vault_grants SET revoked_at = ? WHERE id = ? AND revoked_at IS NULL`, [now, id]);
+  checkpointGrantsWal(db);
   return (result.changes ?? 0) > 0;
 }
 function listGrants(db, agent_slug) {
@@ -21984,9 +22096,8 @@ function adminOnlyKeysBeingAdded(requestedKeys, existingKeys, patterns) {
 }
 
 // src/vault/grants-db.ts
-import * as os2 from "node:os";
-import * as path2 from "node:path";
-import * as fs2 from "node:fs";
+import * as path3 from "node:path";
+import * as fs3 from "node:fs";
 import { Database } from "bun:sqlite";
 
 // src/vault/approvals/schema.ts
@@ -22064,8 +22175,8 @@ function migrateApprovalSchema(db) {
 var DEFAULT_MAX_TTL_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000;
 
 // src/vault/grants-db.ts
-var DEFAULT_GRANTS_DB_PATH = path2.join(os2.homedir(), ".switchroom", "vault-grants.db");
-var WAL_SIDECAR_SUFFIXES = ["-wal", "-shm"];
+var DEFAULT_GRANTS_DB_PATH = getGrantsDbPath();
+var WAL_SIDECAR_SUFFIXES2 = ["-wal", "-shm"];
 function isGrantsDbCorruption(err) {
   if (!err || typeof err !== "object")
     return false;
@@ -22079,12 +22190,12 @@ function isGrantsDbCorruption(err) {
 function quarantineGrantsDb(dbPath) {
   const stamp = new Date().toISOString().replace(/[:.]/g, "-");
   const quarantinePath = `${dbPath}.corrupt-${stamp}`;
-  fs2.renameSync(dbPath, quarantinePath);
-  for (const suffix of WAL_SIDECAR_SUFFIXES) {
+  fs3.renameSync(dbPath, quarantinePath);
+  for (const suffix of WAL_SIDECAR_SUFFIXES2) {
     const sidecar = `${dbPath}${suffix}`;
-    if (fs2.existsSync(sidecar)) {
+    if (fs3.existsSync(sidecar)) {
       try {
-        fs2.renameSync(sidecar, `${quarantinePath}${suffix}`);
+        fs3.renameSync(sidecar, `${quarantinePath}${suffix}`);
       } catch {}
     }
   }
@@ -22094,7 +22205,7 @@ function openAndMigrate(dbPath) {
   const db = new Database(dbPath, { create: true });
   try {
     try {
-      fs2.chmodSync(dbPath, 384);
+      fs3.chmodSync(dbPath, 384);
     } catch {}
     db.run("PRAGMA journal_mode=WAL");
     db.run("PRAGMA busy_timeout=5000");
@@ -22110,8 +22221,9 @@ function openAndMigrate(dbPath) {
   return db;
 }
 function openGrantsDb(dbPath = DEFAULT_GRANTS_DB_PATH, opener = openAndMigrate) {
-  const dir = path2.dirname(dbPath);
-  fs2.mkdirSync(dir, { recursive: true });
+  const dir = path3.dirname(dbPath);
+  fs3.mkdirSync(dir, { recursive: true });
+  migrateLegacyGrantsDbLocation(dbPath);
   try {
     return opener(dbPath);
   } catch (err) {
@@ -22462,7 +22574,7 @@ class VaultBroker {
     if (process.platform !== "linux" && process.env.SWITCHROOM_BROKER_ALLOW_NON_LINUX !== "1") {
       throw new Error(`vault-broker is Linux-only (running on ${process.platform}). ` + `The broker's ACL relies on cgroup-based systemd unit identification, ` + `which is not available on this platform. ` + `Use 'switchroom vault get --no-broker' for direct vault access. ` + `If you need to run the broker for development on this platform, ` + `set SWITCHROOM_BROKER_ALLOW_NON_LINUX=1 — but understand that the ` + `broker will accept any same-user caller without per-cron ACL enforcement.`);
     }
-    this.socketPath = resolve8(socketPath);
+    this.socketPath = resolve9(socketPath);
     this.unlockSocketPath = unlockSocketFor(this.socketPath);
     this.startedAt = Date.now();
     if (this.testOpts._testConfig) {
@@ -22472,7 +22584,7 @@ class VaultBroker {
       this.config = loadConfig2(configPath);
     }
     if (vaultPath) {
-      this.vaultPath = resolve8(vaultPath);
+      this.vaultPath = resolve9(vaultPath);
     } else {
       this.vaultPath = resolvePath(this.config.vault?.path ?? "~/.switchroom/vault.enc");
     }
@@ -22484,13 +22596,13 @@ class VaultBroker {
       this.passphrase = this.testOpts._testPassphrase;
     }
     process.umask(63);
-    const parentDir = dirname5(this.socketPath);
-    mkdirSync6(parentDir, { recursive: true, mode: 448 });
+    const parentDir = dirname6(this.socketPath);
+    mkdirSync7(parentDir, { recursive: true, mode: 448 });
     try {
-      chmodSync4(parentDir, 448);
+      chmodSync5(parentDir, 448);
     } catch {}
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (existsSync11(p)) {
+      if (existsSync12(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -22526,7 +22638,7 @@ class VaultBroker {
     try {
       if (ready) {
         writeFileSync3(p, "", { mode: 384 });
-      } else if (existsSync11(p)) {
+      } else if (existsSync12(p)) {
         unlinkSync6(p);
       }
     } catch {}
@@ -22559,7 +22671,7 @@ class VaultBroker {
       try {
         entry.server.close();
       } catch {}
-      if (existsSync11(sockPath)) {
+      if (existsSync12(sockPath)) {
         try {
           unlinkSync6(sockPath);
         } catch {}
@@ -22567,7 +22679,7 @@ class VaultBroker {
     }
     this.agentServers.clear();
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (p && existsSync11(p)) {
+      if (p && existsSync12(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -22575,7 +22687,7 @@ class VaultBroker {
     }
     try {
       const pidPath = resolvePath(PID_FILE_DEFAULT);
-      if (existsSync11(pidPath))
+      if (existsSync12(pidPath))
         unlinkSync6(pidPath);
     } catch {}
   }
@@ -22593,7 +22705,7 @@ class VaultBroker {
     return this.config;
   }
   bindAgentSocket(socketPath) {
-    const abs = resolve8(socketPath);
+    const abs = resolve9(socketPath);
     const agentName = socketPathToAgent(abs);
     if (agentName === null) {
       return Promise.reject(new Error(`bindAgentSocket: socket path '${abs}' does not match the canonical ` + `/run/switchroom/broker/<agent>.sock shape — refusing to bind without ` + `a verifiable agent identity`));
@@ -22601,16 +22713,16 @@ class VaultBroker {
     return new Promise((resolveP, rejectP) => {
       if (abs.endsWith("/sock")) {
         const dir = abs.slice(0, -"/sock".length);
-        if (existsSync11(dir)) {
+        if (existsSync12(dir)) {
           try {
             chownSync(dir, 0, 0);
           } catch {}
           try {
-            chmodSync4(dir, 448);
+            chmodSync5(dir, 448);
           } catch {}
         }
       }
-      if (existsSync11(abs)) {
+      if (existsSync12(abs)) {
         try {
           unlinkSync6(abs);
         } catch (err) {
@@ -22625,7 +22737,7 @@ class VaultBroker {
       server.on("error", (err) => rejectP(err));
       server.listen(abs, () => {
         try {
-          chmodSync4(abs, 432);
+          chmodSync5(abs, 432);
         } catch {}
         let agentUid = null;
         try {
@@ -22642,7 +22754,7 @@ class VaultBroker {
         } catch {}
         this.agentServers.set(abs, { server, agentName });
         const unlockAbs = unlockSocketFor(abs);
-        if (existsSync11(unlockAbs)) {
+        if (existsSync12(unlockAbs)) {
           try {
             unlinkSync6(unlockAbs);
           } catch {}
@@ -22659,7 +22771,7 @@ class VaultBroker {
         });
         unlockServer.listen(unlockAbs, () => {
           try {
-            chmodSync4(unlockAbs, 432);
+            chmodSync5(unlockAbs, 432);
           } catch {}
           if (agentUid !== null) {
             try {
@@ -22673,7 +22785,7 @@ class VaultBroker {
     });
   }
   _bindDataSocket() {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const server = net.createServer((socket) => {
         this._handleDataConnection(socket);
       });
@@ -22682,10 +22794,10 @@ class VaultBroker {
       });
       server.listen(this.socketPath, () => {
         try {
-          chmodSync4(this.socketPath, 384);
+          chmodSync5(this.socketPath, 384);
         } catch {}
         this.server = server;
-        resolve9();
+        resolve10();
       });
     });
   }
@@ -22697,12 +22809,12 @@ class VaultBroker {
     if (!Number.isFinite(uid) || uid <= 0)
       return;
     try {
-      if (existsSync11(this.vaultPath))
+      if (existsSync12(this.vaultPath))
         chownSync(this.vaultPath, uid, uid);
     } catch {}
   }
   bindOperatorListener(socketPath, operatorUid) {
-    const abs = resolve8(socketPath);
+    const abs = resolve9(socketPath);
     const identity = socketPathToIdentity(abs);
     if (identity?.kind !== "operator") {
       return Promise.reject(new Error(`bindOperatorListener: socket path '${abs}' does not match the canonical ` + `/run/switchroom/broker/operator/sock shape — refusing to bind`));
@@ -22710,17 +22822,17 @@ class VaultBroker {
     const unlockAbs = unlockSocketFor(abs);
     if (abs.endsWith("/sock")) {
       const dir = abs.slice(0, -"/sock".length);
-      if (existsSync11(dir)) {
+      if (existsSync12(dir)) {
         try {
           chownSync(dir, 0, 0);
         } catch {}
         try {
-          chmodSync4(dir, 448);
+          chmodSync5(dir, 448);
         } catch {}
       }
     }
     for (const p of [abs, unlockAbs]) {
-      if (existsSync11(p)) {
+      if (existsSync12(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -22733,7 +22845,7 @@ class VaultBroker {
       dataServer.on("error", (err) => rejectP(err));
       dataServer.listen(abs, () => {
         try {
-          chmodSync4(abs, 384);
+          chmodSync5(abs, 384);
         } catch {}
         try {
           chownSync(abs, operatorUid, operatorUid);
@@ -22744,7 +22856,7 @@ class VaultBroker {
         unlockServer.on("error", (err) => rejectP(err));
         unlockServer.listen(unlockAbs, () => {
           try {
-            chmodSync4(unlockAbs, 384);
+            chmodSync5(unlockAbs, 384);
           } catch {}
           try {
             chownSync(unlockAbs, operatorUid, operatorUid);
@@ -22755,7 +22867,7 @@ class VaultBroker {
               chownSync(dir, operatorUid, operatorUid);
             } catch {}
             try {
-              chmodSync4(dir, 448);
+              chmodSync5(dir, 448);
             } catch {}
           }
           this.agentServers.set(abs, { server: dataServer, agentName: "__operator__" });
@@ -22766,7 +22878,7 @@ class VaultBroker {
     });
   }
   _bindUnlockSocket() {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const server = net.createServer((socket) => {
         this._handleUnlockConnection(socket);
       });
@@ -22775,10 +22887,10 @@ class VaultBroker {
       });
       server.listen(this.unlockSocketPath, () => {
         try {
-          chmodSync4(this.unlockSocketPath, 384);
+          chmodSync5(this.unlockSocketPath, 384);
         } catch {}
         this.unlockServer = server;
-        resolve9();
+        resolve10();
       });
     });
   }
@@ -23617,13 +23729,13 @@ class VaultBroker {
         return;
       }
       try {
-        const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os3.homedir(), ".switchroom", "agents");
-        const tokenDir = path3.join(agentsDir, agent);
-        mkdirSync6(tokenDir, { recursive: true });
-        const tokenPath = path3.join(tokenDir, ".vault-token");
+        const agentsDir = this.config ? resolveAgentsDir(this.config) : path4.join(os3.homedir(), ".switchroom", "agents");
+        const tokenDir = path4.join(agentsDir, agent);
+        mkdirSync7(tokenDir, { recursive: true });
+        const tokenPath = path4.join(tokenDir, ".vault-token");
         const tmpPath = `${tokenPath}.tmp.${process.pid}`;
         writeFileSync3(tmpPath, mintResult.token, { mode: 384 });
-        renameSync7(tmpPath, tokenPath);
+        renameSync8(tmpPath, tokenPath);
         try {
           const uid = allocateAgentUid(agent);
           chownSync(tokenPath, uid, uid);
@@ -23682,9 +23794,9 @@ class VaultBroker {
       try {
         const row = this.grantsDb.query("SELECT agent_slug FROM vault_grants WHERE id = ?").get(id);
         if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
-          const agentsDir = this.config ? resolveAgentsDir(this.config) : path3.join(os3.homedir(), ".switchroom", "agents");
-          const tokenPath = path3.join(agentsDir, row.agent_slug, ".vault-token");
-          if (existsSync11(tokenPath)) {
+          const agentsDir = this.config ? resolveAgentsDir(this.config) : path4.join(os3.homedir(), ".switchroom", "agents");
+          const tokenPath = path4.join(agentsDir, row.agent_slug, ".vault-token");
+          if (existsSync12(tokenPath)) {
             try {
               unlinkSync6(tokenPath);
             } catch {}
@@ -23922,7 +24034,7 @@ class VaultBroker {
     const envPath = process.env.SWITCHROOM_VAULT_BROKER_AUTO_UNLOCK_PATH;
     const configuredPath = (envPath && envPath.length > 0 ? envPath : undefined) ?? this.config?.vault?.broker?.autoUnlockCredentialPath ?? DEFAULT_AUTO_UNLOCK_PATH;
     const filePath = resolvePath(configuredPath);
-    if (!existsSync11(filePath))
+    if (!existsSync12(filePath))
       return false;
     try {
       if (statSync6(filePath).size === 0)
@@ -24003,15 +24115,15 @@ class VaultBroker {
   }
 }
 function detectVaultLayoutDrift(vaultPath) {
-  const dir = dirname5(vaultPath);
+  const dir = dirname6(vaultPath);
   if (basename4(dir) !== "vault")
     return;
   if (basename4(vaultPath) !== "vault.enc")
     return;
-  const switchroomDir = dirname5(dir);
+  const switchroomDir = dirname6(dir);
   if (basename4(switchroomDir) !== ".switchroom")
     return;
-  const home2 = dirname5(switchroomDir);
+  const home2 = dirname6(switchroomDir);
   const result = inspectVaultLayout(home2);
   if (result.kind === "divergent") {
     throw new VaultError(`Vault layout divergence detected at boot: ${result.details.oldPath} and ${result.details.newPath} are both regular files with different content. An older switchroom CLI may have written to the legacy path after migration ran. Run \`switchroom apply\` from the host to surface the recovery recipe (state E refusal with literal \`mv\` commands). See docs/operators/state-e-recovery.md.`);
@@ -24037,7 +24149,7 @@ async function main() {
   const vaultPath = process.env.SWITCHROOM_VAULT_PATH;
   let perAgentTargets = [];
   try {
-    if (existsSync11(perAgentDir)) {
+    if (existsSync12(perAgentDir)) {
       const entries = readdirSync4(perAgentDir, { withFileTypes: true });
       const flat = [];
       const subdirs = [];
@@ -24045,11 +24157,11 @@ async function main() {
         if (e.name.startsWith("."))
           continue;
         if ((e.isFile() || e.isSocket()) && e.name.endsWith(".sock")) {
-          flat.push(resolve8(perAgentDir, e.name));
+          flat.push(resolve9(perAgentDir, e.name));
           continue;
         }
         if (e.isDirectory()) {
-          const candidate = resolve8(perAgentDir, e.name, "sock");
+          const candidate = resolve9(perAgentDir, e.name, "sock");
           if (socketPathToAgent(candidate) !== null) {
             subdirs.push(candidate);
           }
@@ -24092,7 +24204,7 @@ async function main() {
     }
     const operatorUidStr = process.env.SWITCHROOM_BROKER_OPERATOR_UID;
     const operatorDir = "/run/switchroom/broker/operator";
-    if (operatorUidStr !== undefined && existsSync11(operatorDir)) {
+    if (operatorUidStr !== undefined && existsSync12(operatorDir)) {
       const operatorUid = parseInt(operatorUidStr, 10);
       if (!Number.isFinite(operatorUid) || operatorUid <= 0) {
         process.stderr.write(`[vault-broker] SWITCHROOM_BROKER_OPERATOR_UID='${operatorUidStr}' is not a positive integer; skipping operator listener