switchroom 0.18.6 → 0.18.8

package/dist/cli/switchroom.js

@@ -13741,6 +13741,7 @@ var init_schema = __esm(() => {
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
     resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale."),
+    boot_resume: exports_external.enum(["always", "in-flight", "never"]).optional().describe("How the gateway auto-resumes a turn that was IN FLIGHT when the " + "agent restarted. 'in-flight' (default) resumes genuinely " + "interrupted work even after a deliberate/operator restart \u2014 a " + "sanctioned restart landing mid-turn no longer silently drops the " + "work. 'always' forces resume unconditionally (same as the " + "SWITCHROOM_BOOT_RESUME_ALWAYS=1 escape hatch). 'never' is the " + "quota-saving posture: don't auto-replay work across a clean " + "restart \u2014 but the user is STILL sent a passive notice of what was " + "in flight (silence is never used). Independent of the at-most-once " + "resume ledger and the bounded resume-chain loop-guard, which always " + "apply. Threaded to the gateway as SWITCHROOM_BOOT_RESUME."),
     session_retention_max_count: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): keep at most this many " + "newest session transcripts under .claude/projects; older ones " + "past both this count and the age bound are pruned by the Stop " + "hook. The newest sessions (and the handoff source) are always " + "kept. Default 20; set 0 to disable the count bound."),
     session_retention_max_age_days: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): prune session transcripts " + "older than this many days (a file is deleted only when it is BOTH " + "over the count bound and older than this). Default 30; set 0 to " + "disable the age bound.")
   }).optional();
@@ -26944,6 +26945,7 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
     handoffEnabled: agentConfig.session_continuity?.enabled !== false,
     resumeMode: agentConfig.session_continuity?.resume_mode ?? "handoff",
     resumeMaxBytes: agentConfig.session_continuity?.resume_max_bytes ?? 2000000,
+    bootResumeMode: agentConfig.session_continuity?.boot_resume ?? "in-flight",
     resumeModeHasContinuePath: (() => {
       const mode = agentConfig.session_continuity?.resume_mode ?? "handoff";
       return mode === "auto" || mode === "continue";
@@ -28046,7 +28048,8 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
       sessionMaxTurns: agentConfig.session?.max_turns,
       handoffEnabled: agentConfig.session_continuity?.enabled !== false,
       resumeMode: agentConfig.session_continuity?.resume_mode ?? "handoff",
-      resumeMaxBytes: agentConfig.session_continuity?.resume_max_bytes ?? 2000000
+      resumeMaxBytes: agentConfig.session_continuity?.resume_max_bytes ?? 2000000,
+      bootResumeMode: agentConfig.session_continuity?.boot_resume ?? "in-flight"
     };
     const beforeStartSh = existsSync15(startShPath) ? readFileSync13(startShPath, "utf-8") : "";
     const afterStartSh = renderTemplate(join10(basePath, "start.sh.hbs"), startShContext);
@@ -30047,7 +30050,25 @@ import { chownSync as chownSync2 } from "node:fs";
 import { mkdir, readFile, writeFile, rename, copyFile } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
 import { basename as basename4, dirname as dirname6, join as join13 } from "node:path";
-async function resolveLiteLLMConfirmedAgents(config) {
+function agentHadLiteLLMRouting(composeContent, agentName) {
+  const lines = composeContent.split(`
+`);
+  const header = `  agent-${agentName}:`;
+  let i = lines.indexOf(header);
+  if (i < 0)
+    return false;
+  for (i = i + 1;i < lines.length; i++) {
+    const line = lines[i];
+    if (/^ {2}\S/.test(line))
+      break;
+    if (/^\S/.test(line))
+      break;
+    if (/^\s+SWITCHROOM_LITELLM:\s*"1"\s*$/.test(line))
+      return true;
+  }
+  return false;
+}
+async function resolveLiteLLMConfirmedAgents(config, previousCompose, deps) {
   const confirmed = new Set;
   const topEnabled = config.litellm?.enabled ?? false;
   const optedIn = [];
@@ -30062,16 +30083,52 @@ async function resolveLiteLLMConfirmedAgents(config) {
   }
   if (optedIn.length === 0)
     return confirmed;
-  try {
-    const { getViaBrokerStructured: getViaBrokerStructured2 } = await Promise.resolve().then(() => (init_client(), exports_client));
-    for (const name of optedIn) {
-      try {
-        const r = await getViaBrokerStructured2(`litellm/${name}/api-key`);
-        if (r.kind === "ok")
-          confirmed.add(name);
-      } catch {}
+  let getKey = deps?.getKey ?? null;
+  if (!getKey) {
+    try {
+      ({ getViaBrokerStructured: getKey } = await Promise.resolve().then(() => (init_client(), exports_client)));
+    } catch {
+      getKey = null;
     }
-  } catch {}
+  }
+  const unreachableAgents = [];
+  for (const name of optedIn) {
+    if (!getKey) {
+      unreachableAgents.push(name);
+      continue;
+    }
+    try {
+      const r = await getKey(`litellm/${name}/api-key`);
+      if (r.kind === "ok") {
+        confirmed.add(name);
+      } else if (r.kind === "unreachable") {
+        unreachableAgents.push(name);
+      } else if (r.kind === "denied" && r.code !== "DENIED") {
+        unreachableAgents.push(name);
+      }
+    } catch {
+      unreachableAgents.push(name);
+    }
+  }
+  if (unreachableAgents.length > 0) {
+    const preserved = [];
+    const couldNotPreserve = [];
+    for (const name of unreachableAgents) {
+      if (previousCompose && agentHadLiteLLMRouting(previousCompose, name)) {
+        confirmed.add(name);
+        preserved.push(name);
+      } else {
+        couldNotPreserve.push(name);
+      }
+    }
+    console.warn(`switchroom: vault-broker unreachable or unable to answer (locked/internal) while resolving LiteLLM key status for ${unreachableAgents.length} opted-in agent(s): ${unreachableAgents.join(", ")}. Refusing to silently strip proxy routing (that would boot them on untracked direct OAuth). Re-run \`switchroom apply\` once the broker is back to reconcile.`);
+    if (preserved.length > 0) {
+      console.warn(`switchroom: PRESERVED existing proxy routing from the on-disk compose for: ${preserved.join(", ")}.`);
+    }
+    if (couldNotPreserve.length > 0) {
+      console.warn(`switchroom: no prior routing verdict on disk for: ${couldNotPreserve.join(", ")} ` + `\u2014 leaving them unrouted (they were not previously routed).`);
+    }
+  }
   return confirmed;
 }
 function resolveHostSwitchroomConfigPath(rawPath) {
@@ -30109,7 +30166,13 @@ async function computeComposeContent(opts) {
   const imageTag = resolveImageTag(release);
   const operatorUid = resolveOperatorUid();
   const resolvedConfigPath = opts.switchroomConfigPath !== undefined ? resolveHostSwitchroomConfigPath(opts.switchroomConfigPath) : undefined;
-  const litellmConfirmedAgents = await resolveLiteLLMConfirmedAgents(opts.config);
+  let previous = null;
+  try {
+    previous = await readFile(opts.composePath, "utf8");
+  } catch {
+    previous = null;
+  }
+  const litellmConfirmedAgents = await resolveLiteLLMConfirmedAgents(opts.config, previous);
   const content = generateCompose({
     config: opts.config,
     imageTag,
@@ -30121,12 +30184,6 @@ async function computeComposeContent(opts) {
     switchroomConfigPath: resolvedConfigPath,
     operatorUid
   });
-  let previous = null;
-  try {
-    previous = await readFile(opts.composePath, "utf8");
-  } catch {
-    previous = null;
-  }
   const previousImageTag = previous ? AGENT_IMAGE_TAG_RE.exec(previous)?.[1] ?? null : null;
   return { content, imageTag, previous, previousImageTag };
 }
@@ -40412,19 +40469,19 @@ var init_thinking_effort_risk = __esm(() => {
 
 // src/manifest.ts
 import {
-  existsSync as existsSync57,
-  readFileSync as readFileSync52,
+  existsSync as existsSync58,
+  readFileSync as readFileSync53,
   readdirSync as readdirSync19
 } from "node:fs";
-import { dirname as dirname17, join as join50 } from "node:path";
+import { dirname as dirname18, join as join51 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
 function locateManifestPath() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const candidate = join50(dir, "dependencies.json");
-    if (existsSync57(candidate))
+    const candidate = join51(dir, "dependencies.json");
+    if (existsSync58(candidate))
       return candidate;
-    dir = dirname17(dir);
+    dir = dirname18(dir);
   }
   return null;
 }
@@ -40435,7 +40492,7 @@ function loadManifest(manifestPath) {
   }
   let raw;
   try {
-    raw = readFileSync52(path4, "utf-8");
+    raw = readFileSync53(path4, "utf-8");
   } catch (err) {
     throw new Error(`Failed to read manifest at ${path4}: ${err.message}`);
   }
@@ -40491,16 +40548,16 @@ function probeClaudeVersion() {
 }
 function probePlaywrightMcpVersion() {
   const home2 = process.env.HOME ?? "";
-  const npxCache = join50(home2, ".npm/_npx");
-  if (!existsSync57(npxCache))
+  const npxCache = join51(home2, ".npm/_npx");
+  if (!existsSync58(npxCache))
     return null;
   try {
     const entries = readdirSync19(npxCache);
     for (const entry of entries) {
-      const pkgPath = join50(npxCache, entry, "node_modules/@playwright/mcp/package.json");
-      if (existsSync57(pkgPath)) {
+      const pkgPath = join51(npxCache, entry, "node_modules/@playwright/mcp/package.json");
+      if (existsSync58(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync52(pkgPath, "utf-8"));
+          const pkg = JSON.parse(readFileSync53(pkgPath, "utf-8"));
           if (pkg.version)
             return pkg.version;
         } catch {}
@@ -40802,7 +40859,7 @@ var init_doctor_memory = __esm(() => {
 });
 
 // src/cli/doctor-docker.ts
-import { readFileSync as readFileSync53 } from "node:fs";
+import { readFileSync as readFileSync54 } from "node:fs";
 import { spawnSync as spawnSync8 } from "node:child_process";
 function imageTagOf(ref) {
   if (!ref)
@@ -40818,7 +40875,7 @@ function isDockerMode(opts) {
     return true;
   if (opts?.composePath) {
     try {
-      readFileSync53(opts.composePath, "utf8");
+      readFileSync54(opts.composePath, "utf8");
       return true;
     } catch {}
   }
@@ -41100,11 +41157,11 @@ var init_doctor_docker = __esm(() => {
 });
 
 // src/cli/doctor-auth-broker.ts
-import { existsSync as existsSync58, readFileSync as readFileSync54 } from "node:fs";
+import { existsSync as existsSync59, readFileSync as readFileSync55 } from "node:fs";
 import { createHash as createHash11 } from "node:crypto";
 import { spawnSync as spawnSync9 } from "node:child_process";
-import { homedir as homedir28 } from "node:os";
-import { join as join51 } from "node:path";
+import { homedir as homedir29 } from "node:os";
+import { join as join52 } from "node:path";
 function defaultDockerInspect(container, format) {
   try {
     const r = spawnSync9("docker", ["inspect", "-f", format, container], { encoding: "utf-8", timeout: 5000 });
@@ -41204,8 +41261,8 @@ function checkAuthBrokerPerAgentSockets(config, deps = {}) {
 }
 function checkAuthBrokerDrift(deps = {}) {
   const stateDir = resolveStateDir(deps);
-  const indexPath = join51(stateDir, "sha-index.json");
-  if (!existsSync58(indexPath)) {
+  const indexPath = join52(stateDir, "sha-index.json");
+  if (!existsSync59(indexPath)) {
     return {
       name: "auth-broker: drift",
       status: "ok",
@@ -41214,7 +41271,7 @@ function checkAuthBrokerDrift(deps = {}) {
   }
   let index;
   try {
-    index = JSON.parse(readFileSync54(indexPath, "utf-8"));
+    index = JSON.parse(readFileSync55(indexPath, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: drift",
@@ -41223,18 +41280,18 @@ function checkAuthBrokerDrift(deps = {}) {
       fix: "Inspect `~/.switchroom/state/auth-broker/sha-index.json` for corruption."
     };
   }
-  const home2 = deps.home ?? homedir28();
+  const home2 = deps.home ?? homedir29();
   const divergent = [];
   const missingOnDisk = [];
   for (const [label, expected] of Object.entries(index)) {
     const credsPath = accountCredentialsPath(label, home2);
-    if (!existsSync58(credsPath)) {
+    if (!existsSync59(credsPath)) {
       missingOnDisk.push(label);
       continue;
     }
     let got;
     try {
-      got = sha256Hex(readFileSync54(credsPath, "utf-8"));
+      got = sha256Hex(readFileSync55(credsPath, "utf-8"));
     } catch (err) {
       divergent.push(`${label} (read failed: ${err.message})`);
       continue;
@@ -41265,8 +41322,8 @@ function checkAuthBrokerDrift(deps = {}) {
 }
 function checkAuthBrokerThresholdViolations(deps = {}) {
   const stateDir = resolveStateDir(deps);
-  const path4 = join51(stateDir, "threshold-violations.json");
-  if (!existsSync58(path4)) {
+  const path4 = join52(stateDir, "threshold-violations.json");
+  if (!existsSync59(path4)) {
     return {
       name: "auth-broker: threshold violations",
       status: "ok",
@@ -41275,7 +41332,7 @@ function checkAuthBrokerThresholdViolations(deps = {}) {
   }
   let violations;
   try {
-    violations = JSON.parse(readFileSync54(path4, "utf-8"));
+    violations = JSON.parse(readFileSync55(path4, "utf-8"));
   } catch (err) {
     return {
       name: "auth-broker: threshold violations",
@@ -41309,9 +41366,9 @@ function checkAuthBrokerActiveAccount(config, deps = {}) {
       fix: "Run `switchroom auth use <label>` to pin a fleet-wide account, then `switchroom apply`. Without an active account every agent boot fails."
     };
   }
-  const home2 = deps.home ?? homedir28();
+  const home2 = deps.home ?? homedir29();
   const dir = accountDir(active, home2);
-  if (!existsSync58(dir)) {
+  if (!existsSync59(dir)) {
     return {
       name: "auth-broker: fleet active account",
       status: "fail",
@@ -41320,7 +41377,7 @@ function checkAuthBrokerActiveAccount(config, deps = {}) {
     };
   }
   const creds = accountCredentialsPath(active, home2);
-  if (!existsSync58(creds)) {
+  if (!existsSync59(creds)) {
     return {
       name: "auth-broker: fleet active account",
       status: "fail",
@@ -41457,17 +41514,17 @@ var init_doctor_hostd = () => {};
 import {
   accessSync,
   constants as fsConstants4,
-  existsSync as existsSync59,
+  existsSync as existsSync60,
   realpathSync as realpathSync5,
-  statSync as statSync24
+  statSync as statSync25
 } from "node:fs";
-import { userInfo, homedir as homedir29 } from "node:os";
-import { join as join52 } from "node:path";
+import { userInfo, homedir as homedir30 } from "node:os";
+import { join as join53 } from "node:path";
 function resolveVaultPath2(config) {
   return config.vault?.path ? config.vault.path.replace(/^~/, process.env.HOME ?? "") : resolveStatePath("vault.enc");
 }
 function defaultStatVault(path4) {
-  if (!existsSync59(path4)) {
+  if (!existsSync60(path4)) {
     return { exists: false, readable: false, uid: -1, mode: 0, realPath: path4 };
   }
   let real = path4;
@@ -41477,7 +41534,7 @@ function defaultStatVault(path4) {
   let uid = -1;
   let mode = 0;
   try {
-    const s = statSync24(real);
+    const s = statSync25(real);
     uid = s.uid;
     mode = s.mode & 511;
   } catch {
@@ -41600,7 +41657,7 @@ async function runSecretAccessChecks(config, deps = {}) {
   };
   const passphrase = deps.passphrase ?? process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase) {
-    const sock = deps.brokerOperatorSocket ?? join52(homedir29(), ".switchroom", "broker-operator", "sock");
+    const sock = deps.brokerOperatorSocket ?? join53(homedir30(), ".switchroom", "broker-operator", "sock");
     const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
     for (const name of Object.keys(config.agents ?? {})) {
       const resolved = resolveAgentConfig(config.defaults, config.profiles, config.agents[name]);
@@ -41685,8 +41742,8 @@ import {
   existsSync as realExistsSync,
   readFileSync as realReadFileSync
 } from "node:fs";
-import { join as join53, resolve as resolve34 } from "node:path";
-import { homedir as homedir30 } from "node:os";
+import { join as join54, resolve as resolve34 } from "node:path";
+import { homedir as homedir31 } from "node:os";
 function resolveDeps(config, deps) {
   let agentsDir = deps.agentsDir;
   if (agentsDir === undefined) {
@@ -41809,8 +41866,8 @@ function checkScaffoldWiring(config, driveAgents, d) {
       });
       continue;
     }
-    const mcpPath = join53(agentDir, ".mcp.json");
-    const claudeJsonPath = join53(agentDir, ".claude", ".claude.json");
+    const mcpPath = join54(agentDir, ".mcp.json");
+    const claudeJsonPath = join54(agentDir, ".claude", ".claude.json");
     const mcpRead = readJson(d, mcpPath);
     const trustRead = readJson(d, claudeJsonPath);
     if (mcpRead.kind === "unreadable" || trustRead.kind === "unreadable") {
@@ -41923,7 +41980,7 @@ async function runDriveBrokerReachabilityChecks(config, deps = {}) {
       }
     ];
   }
-  const sock = deps.brokerOperatorSocket ?? join53(homedir30(), ".switchroom", "broker-operator", "sock");
+  const sock = deps.brokerOperatorSocket ?? join54(homedir31(), ".switchroom", "broker-operator", "sock");
   const preflight = deps.preflight ?? ((a, k) => defaultPreflight(sock, a, k));
   const results = [];
   for (const agent of driveAgents) {
@@ -41977,8 +42034,8 @@ import {
   readSync as realReadSync,
   closeSync as realCloseSync
 } from "node:fs";
-import { join as join54 } from "node:path";
-import { homedir as homedir31 } from "node:os";
+import { join as join55 } from "node:path";
+import { homedir as homedir32 } from "node:os";
 function defaultReadHead(p, n) {
   let fd;
   try {
@@ -42006,7 +42063,7 @@ function resolveDeps2(config, deps) {
     }
   }
   return {
-    homeDir: deps.homeDir ?? homedir31(),
+    homeDir: deps.homeDir ?? homedir32(),
     agentsDir,
     existsSync: deps.existsSync ?? ((p) => realExistsSync2(p)),
     readFileSync: deps.readFileSync ?? ((p) => realReadFileSync2(p, "utf-8")),
@@ -42035,7 +42092,7 @@ function runWebkiteChecks(config, deps = {}) {
     return [];
   const d = resolveDeps2(config, deps);
   const results = [];
-  const binPath = join54(d.homeDir, ".switchroom", "bin", "webkite");
+  const binPath = join55(d.homeDir, ".switchroom", "bin", "webkite");
   if (!d.existsSync(binPath)) {
     results.push({
       name: "webkite: binary",
@@ -42065,12 +42122,12 @@ function runWebkiteChecks(config, deps = {}) {
       });
     }
   }
-  const cloakDir = join54(d.homeDir, ".cloakbrowser");
+  const cloakDir = join55(d.homeDir, ".cloakbrowser");
   let chromeFound = false;
   if (d.existsSync(cloakDir)) {
     try {
       for (const entry of d.readdirSync(cloakDir)) {
-        if (entry.startsWith("chromium-") && d.existsSync(join54(cloakDir, entry, "chrome"))) {
+        if (entry.startsWith("chromium-") && d.existsSync(join55(cloakDir, entry, "chrome"))) {
           chromeFound = true;
           break;
         }
@@ -42096,9 +42153,9 @@ function runWebkiteChecks(config, deps = {}) {
     return results;
   }
   for (const agent of enabledAgents) {
-    const agentDir = join54(d.agentsDir, agent);
-    const settingsPath = join54(agentDir, ".claude", "settings.json");
-    const mcpPath = join54(agentDir, ".mcp.json");
+    const agentDir = join55(d.agentsDir, agent);
+    const settingsPath = join55(agentDir, ".claude", "settings.json");
+    const mcpPath = join55(agentDir, ".mcp.json");
     if (!d.existsSync(settingsPath) && !d.existsSync(mcpPath)) {
       continue;
     }
@@ -42228,7 +42285,7 @@ var init_doctor_cron_session = __esm(() => {
 });
 
 // src/cli/doctor-scaffold-wiring.ts
-import { join as join55, resolve as resolve36 } from "node:path";
+import { join as join56, resolve as resolve36 } from "node:path";
 function readJson2(d, path4) {
   if (!d.existsSync(path4))
     return { kind: "absent" };
@@ -42271,8 +42328,8 @@ function checkIntegrationScaffoldWiring(args) {
       });
       continue;
     }
-    const mcpPath = join55(agentDir, ".mcp.json");
-    const claudeJsonPath = join55(agentDir, ".claude", ".claude.json");
+    const mcpPath = join56(agentDir, ".mcp.json");
+    const claudeJsonPath = join56(agentDir, ".claude", ".claude.json");
     const mcpRead = readJson2(deps, mcpPath);
     const trustRead = readJson2(deps, claudeJsonPath);
     if (mcpRead.kind === "unreadable" || trustRead.kind === "unreadable") {
@@ -42336,14 +42393,14 @@ import {
   existsSync as realExistsSync3,
   readFileSync as realReadFileSync3
 } from "node:fs";
-import { join as join56 } from "node:path";
-import { homedir as homedir32 } from "node:os";
+import { join as join57 } from "node:path";
+import { homedir as homedir33 } from "node:os";
 function resolveDeps3(deps) {
-  const home2 = deps.homeDir?.() ?? homedir32();
+  const home2 = deps.homeDir?.() ?? homedir33();
   return {
     existsSync: deps.existsSync ?? realExistsSync3,
     readFileSync: deps.readFileSync ?? realReadFileSync3,
-    agentsDir: join56(home2, ".switchroom", "agents"),
+    agentsDir: join57(home2, ".switchroom", "agents"),
     now: deps.now ?? Date.now
   };
 }
@@ -42426,7 +42483,7 @@ function checkOAuthClient2(config, anyAgentEnabled) {
   ];
 }
 function readHeartbeat(d, agentName) {
-  const path4 = join56(d.agentsDir, agentName, "m365-launcher.heartbeat.json");
+  const path4 = join57(d.agentsDir, agentName, "m365-launcher.heartbeat.json");
   if (!d.existsSync(path4)) {
     return { error: "heartbeat file missing \u2014 launcher has not yet started" };
   }
@@ -42523,15 +42580,15 @@ import {
   readFileSync as realReadFileSync4,
   statSync as realStatSync2
 } from "node:fs";
-import { join as join57 } from "node:path";
-import { homedir as homedir33 } from "node:os";
+import { join as join58 } from "node:path";
+import { homedir as homedir34 } from "node:os";
 function resolveDeps4(deps) {
-  const home2 = deps.homeDir?.() ?? homedir33();
+  const home2 = deps.homeDir?.() ?? homedir34();
   return {
     existsSync: deps.existsSync ?? realExistsSync4,
     readFileSync: deps.readFileSync ?? realReadFileSync4,
     statSync: deps.statSync ?? realStatSync2,
-    agentsDir: join57(home2, ".switchroom", "agents"),
+    agentsDir: join58(home2, ".switchroom", "agents"),
     now: deps.now ?? Date.now,
     vaultAclReader: deps.vaultAclReader ?? (async () => ({ kind: "unreachable", msg: "no default reader wired" }))
   };
@@ -42656,7 +42713,7 @@ function checkLauncherHeartbeat2(notionAgents, d) {
     return [];
   const results = [];
   for (const name of notionAgents) {
-    const heartbeatPath = join57(d.agentsDir, name, "notion-launcher.heartbeat.json");
+    const heartbeatPath = join58(d.agentsDir, name, "notion-launcher.heartbeat.json");
     if (!d.existsSync(heartbeatPath)) {
       results.push({
         name: `notion:launcher-heartbeat:${name}`,
@@ -42877,11 +42934,11 @@ import {
   readdirSync as realReaddirSync2,
   statSync as realStatSync3
 } from "node:fs";
-import { homedir as homedir34 } from "node:os";
-import { join as join58 } from "node:path";
+import { homedir as homedir35 } from "node:os";
+import { join as join59 } from "node:path";
 function runCredentialsMigrationChecks(config, deps = {}) {
-  const credDir = deps.credentialsDir ?? join58(homedir34(), ".switchroom", "credentials");
-  const existsSync60 = deps.existsSync ?? ((p) => realExistsSync5(p));
+  const credDir = deps.credentialsDir ?? join59(homedir35(), ".switchroom", "credentials");
+  const existsSync61 = deps.existsSync ?? ((p) => realExistsSync5(p));
   const readdirSync21 = deps.readdirSync ?? ((p) => realReaddirSync2(p));
   const isDirectory = deps.isDirectory ?? ((p) => {
     try {
@@ -42890,7 +42947,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
       return false;
     }
   });
-  if (!existsSync60(credDir))
+  if (!existsSync61(credDir))
     return [];
   const agentNames = new Set(Object.keys(config.agents ?? {}));
   let entries;
@@ -42908,7 +42965,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
   const flat = [];
   const perAgentDirs = [];
   for (const e of entries) {
-    const full = join58(credDir, e);
+    const full = join59(credDir, e);
     if (isDirectory(full) && agentNames.has(e)) {
       perAgentDirs.push(e);
     } else {
@@ -43031,19 +43088,19 @@ var init_doctor_inlined_secrets = __esm(() => {
 
 // src/cli/doctor-audit-integrity.ts
 import { readFileSync as fsReadFileSync2 } from "node:fs";
-import { homedir as homedir35 } from "node:os";
-import { join as join59 } from "node:path";
+import { homedir as homedir36 } from "node:os";
+import { join as join60 } from "node:path";
 function rootWrittenLogs(home2) {
   return [
-    { label: "vault-broker", path: join59(home2, ".switchroom", "vault-audit.log") },
+    { label: "vault-broker", path: join60(home2, ".switchroom", "vault-audit.log") },
     {
       label: "hostd",
-      path: join59(home2, ".switchroom", "host-control-audit.log")
+      path: join60(home2, ".switchroom", "host-control-audit.log")
     }
   ];
 }
 function runAuditIntegrityChecks(deps = {}) {
-  const home2 = deps.homeDir ?? homedir35();
+  const home2 = deps.homeDir ?? homedir36();
   const read = deps.readFileSync ?? ((p) => fsReadFileSync2(p, "utf8"));
   const results = [];
   for (const { label, path: path4 } of rootWrittenLogs(home2)) {
@@ -43100,16 +43157,16 @@ var init_doctor_audit_integrity = __esm(() => {
 });
 
 // src/cli/doctor-agent-smoke.ts
-import { existsSync as existsSync60 } from "node:fs";
-import { homedir as homedir36 } from "node:os";
-import { join as join60 } from "node:path";
+import { existsSync as existsSync61 } from "node:fs";
+import { homedir as homedir37 } from "node:os";
+import { join as join61 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 async function runAgentSmokeChecks(config, deps = {}) {
   if (deps.fast)
     return [];
-  const home2 = deps.homeDir ?? homedir36();
-  const sock = deps.operatorSockPath ?? join60(home2, ".switchroom", "hostd", "operator", "sock");
-  if (!deps.hostdRequestImpl && !existsSync60(sock)) {
+  const home2 = deps.homeDir ?? homedir37();
+  const sock = deps.operatorSockPath ?? join61(home2, ".switchroom", "hostd", "operator", "sock");
+  if (!deps.hostdRequestImpl && !existsSync61(sock)) {
     return [
       {
         name: "agent liveness",
@@ -43187,9 +43244,9 @@ var init_doctor_agent_smoke = __esm(() => {
 
 // src/cli/doctor-vault-broker-durability.ts
 import { execFileSync as execFileSync18 } from "node:child_process";
-import { existsSync as existsSync61, statSync as statSync25 } from "node:fs";
-import { homedir as homedir37 } from "node:os";
-import { join as join61 } from "node:path";
+import { existsSync as existsSync62, statSync as statSync26 } from "node:fs";
+import { homedir as homedir38 } from "node:os";
+import { join as join62 } from "node:path";
 function probeBindMountInode(hostPath, brokerContainerPath, opts) {
   const statHost = opts?.statHost ?? defaultStatHost;
   const statBroker = opts?.statBroker ?? defaultStatBroker;
@@ -43211,10 +43268,10 @@ function probeBindMountInode(hostPath, brokerContainerPath, opts) {
   };
 }
 function defaultStatHost(p) {
-  if (!existsSync61(p))
+  if (!existsSync62(p))
     return null;
   try {
-    const s = statSync25(p, { bigint: true });
+    const s = statSync26(p, { bigint: true });
     return { ino: s.ino, size: Number(s.size) };
   } catch {
     return null;
@@ -43332,22 +43389,22 @@ function defaultBrokerStatusProbe() {
   }
 }
 function runVaultBrokerDurabilityChecks(_config, opts) {
-  const home2 = homedir37();
+  const home2 = homedir38();
   const probe2 = opts?.inodeProbe ?? probeBindMountInode;
   return [
     probeBrokerUnlocked(opts?.statusProbe),
     probeAutoUnlockBlob(home2),
     probeMachineIdMount(),
-    formatBindMountResult("vault-broker: vault.enc bind mount", join61(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc", probe2(join61(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc")),
-    formatBindMountResult("vault-broker: vault-grants.db bind mount (#1737)", join61(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db", probe2(join61(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db")),
-    formatBindMountResult("vault-broker: vault-audit.log bind mount (#1025)", join61(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log", probe2(join61(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log")),
+    formatBindMountResult("vault-broker: vault.enc bind mount", join62(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc", probe2(join62(home2, ".switchroom", "vault", "vault.enc"), "/state/vault/vault.enc")),
+    formatBindMountResult("vault-broker: vault-grants.db bind mount (#1737)", join62(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db", probe2(join62(home2, ".switchroom", "vault-grants.db"), "/root/.switchroom/vault-grants.db")),
+    formatBindMountResult("vault-broker: vault-audit.log bind mount (#1025)", join62(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log", probe2(join62(home2, ".switchroom", "vault-audit.log"), "/root/.switchroom/vault-audit.log")),
     probeKernelDbDurability(home2, {
       statBroker: opts?.kernelStatBroker
     })
   ];
 }
 function probeKernelDbDurability(home2, opts) {
-  const hostDir = join61(home2, ".switchroom", "approvals");
+  const hostDir = join62(home2, ".switchroom", "approvals");
   const containerDir = "/state/approvals";
   const name = "approval-kernel: approvals bind mount (allow_always durability)";
   const kernelStat = opts?.statBroker ?? defaultKernelStatBroker;
@@ -43415,8 +43472,8 @@ function defaultKernelStatBroker(p) {
   return { kind: "ok-with-stat", ino: inoStr, size };
 }
 function probeAutoUnlockBlob(home2) {
-  const blobPath = join61(home2, ".switchroom", "vault-auto-unlock");
-  if (!existsSync61(blobPath)) {
+  const blobPath = join62(home2, ".switchroom", "vault-auto-unlock");
+  if (!existsSync62(blobPath)) {
     return {
       name: "vault-broker: auto-unlock blob",
       status: "warn",
@@ -43424,7 +43481,7 @@ function probeAutoUnlockBlob(home2) {
       fix: "Run `switchroom vault broker enable-auto-unlock` to seal the blob with the current passphrase + machine-id"
     };
   }
-  const sz = statSync25(blobPath).size;
+  const sz = statSync26(blobPath).size;
   if (sz === 0) {
     return {
       name: "vault-broker: auto-unlock blob",
@@ -43440,7 +43497,7 @@ function probeAutoUnlockBlob(home2) {
   };
 }
 function probeMachineIdMount() {
-  const hostExists = existsSync61("/etc/machine-id");
+  const hostExists = existsSync62("/etc/machine-id");
   if (!hostExists) {
     return {
       name: "vault-broker: machine-id passthrough",
@@ -43588,25 +43645,25 @@ import { execSync as execSync3, spawnSync as spawnSync11 } from "node:child_proc
 import {
   accessSync as accessSync2,
   constants as fsConstants5,
-  existsSync as existsSync62,
+  existsSync as existsSync63,
   lstatSync as lstatSync7,
-  mkdirSync as mkdirSync32,
-  readFileSync as readFileSync55,
+  mkdirSync as mkdirSync33,
+  readFileSync as readFileSync56,
   readdirSync as readdirSync21,
-  statSync as statSync26
+  statSync as statSync27
 } from "node:fs";
-import { dirname as dirname18, join as join62, resolve as resolve37 } from "node:path";
+import { dirname as dirname19, join as join63, resolve as resolve37 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
-  const nvmRoot = join62(process.env.HOME ?? "", ".nvm", "versions", "node");
-  if (!existsSync62(nvmRoot))
+  const nvmRoot = join63(process.env.HOME ?? "", ".nvm", "versions", "node");
+  if (!existsSync63(nvmRoot))
     return null;
   try {
     const versions = readdirSync21(nvmRoot).sort().reverse();
     for (const v of versions) {
-      const candidate = join62(nvmRoot, v, "bin", bin);
+      const candidate = join63(nvmRoot, v, "bin", bin);
       try {
-        const s = statSync26(candidate);
+        const s = statSync27(candidate);
         if (s.isFile() || s.isSymbolicLink()) {
           return candidate;
         }
@@ -43769,21 +43826,21 @@ function findChromium(homeDir = process.env.HOME ?? "", envBrowsersPath = proces
   if (envBrowsersPath && envBrowsersPath.length > 0) {
     cacheLocations.push(envBrowsersPath);
   }
-  cacheLocations.push(join62(homeDir, ".cache", "ms-playwright"));
+  cacheLocations.push(join63(homeDir, ".cache", "ms-playwright"));
   for (const cacheDir of cacheLocations) {
-    if (!existsSync62(cacheDir))
+    if (!existsSync63(cacheDir))
       continue;
     try {
       const entries = readdirSync21(cacheDir).filter((e) => e.startsWith("chromium"));
       for (const entry of entries) {
         const candidates2 = [
-          join62(cacheDir, entry, "chrome-linux64", "chrome"),
-          join62(cacheDir, entry, "chrome-linux", "chrome"),
-          join62(cacheDir, entry, "chrome-linux64", "headless_shell"),
-          join62(cacheDir, entry, "chrome-linux", "headless_shell")
+          join63(cacheDir, entry, "chrome-linux64", "chrome"),
+          join63(cacheDir, entry, "chrome-linux", "chrome"),
+          join63(cacheDir, entry, "chrome-linux64", "headless_shell"),
+          join63(cacheDir, entry, "chrome-linux", "headless_shell")
         ];
         for (const path4 of candidates2) {
-          if (existsSync62(path4))
+          if (existsSync63(path4))
             return path4;
         }
       }
@@ -43805,7 +43862,7 @@ function checkChromium() {
 }
 function checkDepsCacheWritable(depsRoot = resolvePath("~/.switchroom/deps")) {
   try {
-    mkdirSync32(depsRoot, { recursive: true });
+    mkdirSync33(depsRoot, { recursive: true });
     accessSync2(depsRoot, fsConstants5.W_OK);
     return {
       name: "~/.switchroom/deps writable",
@@ -43912,7 +43969,7 @@ function checkDeployMounts(opts) {
   const home2 = opts?.home ?? process.env.HOME ?? "/root";
   const { pathKind } = opts?.deps ?? DEFAULT_DEPLOY_MOUNTS_DEPS;
   const results = [];
-  const dockerComposePlugin = join62(home2, ".docker", "cli-plugins", "docker-compose");
+  const dockerComposePlugin = join63(home2, ".docker", "cli-plugins", "docker-compose");
   const pluginKind = pathKind(dockerComposePlugin);
   if (pluginKind === "dir") {
     results.push({
@@ -43950,8 +44007,8 @@ function checkDeployMounts(opts) {
 function checkLegacyState() {
   const results = [];
   const h = process.env.HOME ?? "/root";
-  const clerkDir = join62(h, LEGACY_STATE_DIR);
-  const clerkPresent = existsSync62(clerkDir);
+  const clerkDir = join63(h, LEGACY_STATE_DIR);
+  const clerkPresent = existsSync63(clerkDir);
   results.push({
     name: "legacy ~/.clerk state",
     status: clerkPresent ? "warn" : "ok",
@@ -43960,7 +44017,7 @@ function checkLegacyState() {
       fix: "Legacy state detected. Run `mv ~/.clerk ~/.switchroom` and rename " + "any top-level `clerk:` key in switchroom.yaml to `switchroom:`. " + "This back-compat shim is REMOVED in v0.13.0 \u2014 no automatic " + "migration exists."
     } : {}
   });
-  const legacySock = join62(h, ".switchroom", "vault-broker.sock");
+  const legacySock = join63(h, ".switchroom", "vault-broker.sock");
   let sockStat = null;
   try {
     sockStat = lstatSync7(legacySock);
@@ -44081,7 +44138,7 @@ function checkVault(config) {
     detail: "Approval auth: passphrase (two-factor)"
   };
   const pairsResult = checkVaultBrokerSocketPairs(config);
-  if (!existsSync62(vaultPath)) {
+  if (!existsSync63(vaultPath)) {
     return [
       postureResult,
       {
@@ -44359,8 +44416,8 @@ async function checkHindsight(config) {
 }
 function checkPendingRetainsQueue(dir) {
   const home2 = process.env.HOME ?? "";
-  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join62(home2, ".hindsight", "pending-retains");
-  if (!existsSync62(pendingDir)) {
+  const pendingDir = dir ?? process.env.HINDSIGHT_PENDING_DIR ?? join63(home2, ".hindsight", "pending-retains");
+  if (!existsSync63(pendingDir)) {
     return {
       name: "pending-retains queue",
       status: "ok",
@@ -44419,7 +44476,7 @@ function classifyReadError(err) {
 }
 function tryReadHostFile(path4) {
   try {
-    return { kind: "ok", content: readFileSync55(path4, "utf-8") };
+    return { kind: "ok", content: readFileSync56(path4, "utf-8") };
   } catch (err) {
     const kind = classifyReadError(err);
     const error = err?.message ?? String(err);
@@ -44431,11 +44488,11 @@ function tryReadHostFile(path4) {
   }
 }
 function parseEnvFile(path4) {
-  if (!existsSync62(path4))
+  if (!existsSync63(path4))
     return {};
   let content;
   try {
-    content = readFileSync55(path4, "utf-8");
+    content = readFileSync56(path4, "utf-8");
   } catch {
     return {};
   }
@@ -44490,7 +44547,7 @@ async function checkTelegram(config) {
     const plugin = agentConfig.channels?.telegram?.plugin ?? "switchroom";
     if (plugin !== "switchroom")
       continue;
-    const envPath = join62(agentsDir, name, "telegram", ".env");
+    const envPath = join63(agentsDir, name, "telegram", ".env");
     const read = tryReadHostFile(envPath);
     if (read.kind === "eacces") {
       results.push({
@@ -44542,7 +44599,7 @@ async function checkTelegram(config) {
 }
 function checkStartShStale(agentName, startShPath) {
   const label = `${agentName}: start.sh scheduler block`;
-  if (!existsSync62(startShPath)) {
+  if (!existsSync63(startShPath)) {
     return {
       name: label,
       status: "warn",
@@ -44552,7 +44609,7 @@ function checkStartShStale(agentName, startShPath) {
   }
   let content;
   try {
-    content = readFileSync55(startShPath, "utf-8");
+    content = readFileSync56(startShPath, "utf-8");
   } catch (err) {
     return {
       name: label,
@@ -44573,7 +44630,7 @@ function checkStartShStale(agentName, startShPath) {
 }
 function checkLeakedHomeSwitchroom(agentName, agentDir) {
   const label = `${agentName}: $HOME/.switchroom symlink (#910)`;
-  const path4 = join62(agentDir, "home", ".switchroom");
+  const path4 = join63(agentDir, "home", ".switchroom");
   let stats;
   try {
     stats = lstatSync7(path4);
@@ -44610,8 +44667,8 @@ function checkLeakedHomeSwitchroom(agentName, agentDir) {
 }
 function checkRepoHygiene(repoRoot) {
   const results = [];
-  const exportDir = join62(repoRoot, "clerk-export");
-  if (existsSync62(exportDir)) {
+  const exportDir = join63(repoRoot, "clerk-export");
+  if (existsSync63(exportDir)) {
     results.push({
       name: "repo hygiene: clerk-export/ on disk (#1072)",
       status: "warn",
@@ -44619,8 +44676,8 @@ function checkRepoHygiene(repoRoot) {
       fix: `Run scripts/migrate-clerk-export-to-vault.sh to move the bundle ` + `into the vault, then delete the on-disk copy.`
     });
   }
-  const knownTarball = join62(repoRoot, "clerk-export-with-secrets.tar.gz");
-  if (existsSync62(knownTarball)) {
+  const knownTarball = join63(repoRoot, "clerk-export-with-secrets.tar.gz");
+  if (existsSync63(knownTarball)) {
     results.push({
       name: "repo hygiene: clerk-export-with-secrets.tar.gz on disk (#1072)",
       status: "warn",
@@ -44637,7 +44694,7 @@ function checkRepoHygiene(repoRoot) {
         results.push({
           name: `repo hygiene: ${name} on disk (#1072)`,
           status: "warn",
-          detail: `${join62(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
+          detail: `${join63(repoRoot, name)} matches the *-with-secrets*.tar.gz ` + `pattern. Likely contains real credentials.`,
           fix: `Inspect, migrate any secrets into the vault, then delete the ` + `archive.`
         });
       }
@@ -44660,12 +44717,12 @@ function checkRepoHygiene(repoRoot) {
 }
 function isSwitchroomCheckout(dir) {
   try {
-    if (!existsSync62(join62(dir, ".git")))
+    if (!existsSync63(join63(dir, ".git")))
       return false;
-    const pkgPath = join62(dir, "package.json");
-    if (!existsSync62(pkgPath))
+    const pkgPath = join63(dir, "package.json");
+    if (!existsSync63(pkgPath))
       return false;
-    const pkg = JSON.parse(readFileSync55(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync56(pkgPath, "utf-8"));
     return pkg.name === "switchroom";
   } catch {
     return false;
@@ -44678,7 +44735,7 @@ function checkAgents(config, configPath) {
   const authStatuses = getAllAuthStatuses(config);
   for (const [name, agentConfig] of Object.entries(config.agents)) {
     const agentDir = resolve37(agentsDir, name);
-    if (!existsSync62(agentDir)) {
+    if (!existsSync63(agentDir)) {
       results.push({
         name: `${name}: scaffold`,
         status: "fail",
@@ -44699,7 +44756,7 @@ function checkAgents(config, configPath) {
         fix: `Rotate the bot token (e.g. via \`switchroom vault\`), then run ` + `\`switchroom agent unquarantine ${name}\` and \`switchroom agent restart ${name}\``
       });
     }
-    results.push(checkStartShStale(name, join62(agentDir, "start.sh")));
+    results.push(checkStartShStale(name, join63(agentDir, "start.sh")));
     results.push(checkLeakedHomeSwitchroom(name, agentDir));
     const status = statuses[name];
     const active = status?.active ?? "unknown";
@@ -44776,8 +44833,8 @@ function checkAgents(config, configPath) {
       }
     }
     if (agentConfig.channels?.telegram?.plugin === "switchroom") {
-      const mcpJsonPath = join62(agentDir, ".mcp.json");
-      if (!existsSync62(mcpJsonPath)) {
+      const mcpJsonPath = join63(agentDir, ".mcp.json");
+      if (!existsSync63(mcpJsonPath)) {
         results.push({
           name: `${name}: .mcp.json`,
           status: "fail",
@@ -44786,7 +44843,7 @@ function checkAgents(config, configPath) {
         });
       } else {
         try {
-          const mcp = JSON.parse(readFileSync55(mcpJsonPath, "utf-8"));
+          const mcp = JSON.parse(readFileSync56(mcpJsonPath, "utf-8"));
           const hasSwitchroomTelegram = !!mcp.mcpServers?.["switchroom-telegram"];
           const memoryEnabled = isHindsightEnabled(config);
           const hasHindsight = !!mcp.mcpServers?.hindsight;
@@ -44863,7 +44920,7 @@ function mffEnvPath(config) {
   return agent ? resolve37(home2, ".switchroom/credentials", agent, "my-family-finance/.env") : resolve37(home2, ".switchroom/credentials/my-family-finance/.env");
 }
 function mffEnvState(envPath) {
-  if (!existsSync62(envPath))
+  if (!existsSync63(envPath))
     return "absent";
   try {
     accessSync2(envPath, fsConstants5.R_OK);
@@ -44881,7 +44938,7 @@ function checkMffVaultKeyPresent(passphrase, vaultPath) {
       fix: "Export SWITCHROOM_VAULT_PASSPHRASE to enable MFF vault probes"
     };
   }
-  if (!existsSync62(vaultPath)) {
+  if (!existsSync63(vaultPath)) {
     return {
       name: "mff: vault key present",
       status: "fail",
@@ -44934,7 +44991,7 @@ function deriveEd25519PublicKeyBytes(keyMaterial) {
   }
 }
 function checkMffVaultKeyFormat(passphrase, vaultPath) {
-  if (!passphrase || !existsSync62(vaultPath)) {
+  if (!passphrase || !existsSync63(vaultPath)) {
     return {
       name: "mff: vault key format",
       status: "warn",
@@ -45077,9 +45134,9 @@ async function checkMffAuthFlow(envPath = mffEnvPath(), timeoutMs = 8000) {
       detail: "skipped (MFF_API_URL not set)"
     };
   }
-  const credDir = dirname18(envPath);
-  const authScript = join62(credDir, "claude-auth.py");
-  if (!existsSync62(authScript)) {
+  const credDir = dirname19(envPath);
+  const authScript = join63(credDir, "claude-auth.py");
+  if (!existsSync63(authScript)) {
     return {
       name: "mff: auth flow",
       status: "warn",
@@ -45281,11 +45338,11 @@ function runDockerSection(config) {
   let composeYaml;
   let dockerfileAgent;
   try {
-    composeYaml = readFileSync55(composePath, "utf8");
+    composeYaml = readFileSync56(composePath, "utf8");
   } catch {}
   const dockerfilePath = resolve37(process.env.HOME ?? "", ".switchroom", "docker", "Dockerfile.agent");
   try {
-    dockerfileAgent = readFileSync55(dockerfilePath, "utf8");
+    dockerfileAgent = readFileSync56(dockerfilePath, "utf8");
   } catch {}
   return runDockerChecks({
     config,
@@ -48605,8 +48662,8 @@ agents:
 var init_minimal = () => {};
 
 // src/agents/connection-health.ts
-import { mkdirSync as mkdirSync43, writeFileSync as writeFileSync35 } from "node:fs";
-import { join as join77 } from "node:path";
+import { mkdirSync as mkdirSync44, writeFileSync as writeFileSync36 } from "node:fs";
+import { join as join78 } from "node:path";
 async function computeAgentConnectionIssues(config, agentName, vaultAclReader) {
   const reqs = computeMcpSecretRequirements(config).filter((r) => r.agent === agentName);
   if (reqs.length === 0)
@@ -48663,10 +48720,10 @@ async function computeAgentConnectionIssues(config, agentName, vaultAclReader) {
   return issues;
 }
 function writeConnectionHealthFile(agentDir, health, deps) {
-  const dir = join77(agentDir, ".claude");
-  const path7 = join77(dir, CONNECTION_HEALTH_FILENAME);
-  (deps?.mkdir ?? ((p, o) => mkdirSync43(p, o)))(dir, { recursive: true });
-  (deps?.writeFile ?? ((p, d) => writeFileSync35(p, d)))(path7, JSON.stringify(health, null, 2) + `
+  const dir = join78(agentDir, ".claude");
+  const path7 = join78(dir, CONNECTION_HEALTH_FILENAME);
+  (deps?.mkdir ?? ((p, o) => mkdirSync44(p, o)))(dir, { recursive: true });
+  (deps?.writeFile ?? ((p, d) => writeFileSync36(p, d)))(path7, JSON.stringify(health, null, 2) + `
 `);
 }
 async function refreshAgentConnectionHealth(config, agentName, agentDir, deps) {
@@ -48687,10 +48744,10 @@ var CONNECTION_HEALTH_FILENAME = "connection-health.json";
 var init_connection_health = () => {};
 
 // src/cli/update-prompt-hook.ts
-import { existsSync as existsSync79, readFileSync as readFileSync67, writeFileSync as writeFileSync36, chmodSync as chmodSync10, mkdirSync as mkdirSync44 } from "node:fs";
-import { join as join78 } from "node:path";
+import { existsSync as existsSync80, readFileSync as readFileSync68, writeFileSync as writeFileSync37, chmodSync as chmodSync10, mkdirSync as mkdirSync45 } from "node:fs";
+import { join as join79 } from "node:path";
 function containerHookCommand() {
-  return join78(CONTAINER_AGENT_DIR, ".claude", "hooks", HOOK_FILENAME);
+  return join79(CONTAINER_AGENT_DIR, ".claude", "hooks", HOOK_FILENAME);
 }
 function updatePromptHookScript() {
   return `#!/bin/bash
@@ -48756,14 +48813,14 @@ exit 0
 `;
 }
 function installUpdatePromptHook(agentDir) {
-  const hooksDir = join78(agentDir, ".claude", "hooks");
-  mkdirSync44(hooksDir, { recursive: true });
-  const scriptPath = join78(hooksDir, HOOK_FILENAME);
+  const hooksDir = join79(agentDir, ".claude", "hooks");
+  mkdirSync45(hooksDir, { recursive: true });
+  const scriptPath = join79(hooksDir, HOOK_FILENAME);
   const desired = updatePromptHookScript();
   let installed = false;
-  const existing = existsSync79(scriptPath) ? readFileSync67(scriptPath, "utf-8") : "";
+  const existing = existsSync80(scriptPath) ? readFileSync68(scriptPath, "utf-8") : "";
   if (existing !== desired) {
-    writeFileSync36(scriptPath, desired, { mode: 493 });
+    writeFileSync37(scriptPath, desired, { mode: 493 });
     chmodSync10(scriptPath, 493);
     installed = true;
   } else {
@@ -48771,11 +48828,11 @@ function installUpdatePromptHook(agentDir) {
       chmodSync10(scriptPath, 493);
     } catch {}
   }
-  const settingsPath = join78(agentDir, ".claude", "settings.json");
-  if (!existsSync79(settingsPath)) {
+  const settingsPath = join79(agentDir, ".claude", "settings.json");
+  if (!existsSync80(settingsPath)) {
     return { scriptPath, settingsPath, installed };
   }
-  const raw = readFileSync67(settingsPath, "utf-8");
+  const raw = readFileSync68(settingsPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -48811,7 +48868,7 @@ function installUpdatePromptHook(agentDir) {
   if (mutated) {
     hooks.UserPromptSubmit = list2;
     parsed.hooks = hooks;
-    writeFileSync36(settingsPath, JSON.stringify(parsed, null, 2) + `
+    writeFileSync37(settingsPath, JSON.stringify(parsed, null, 2) + `
 `, { mode: 384 });
     installed = true;
   } else if (!alreadyCorrect) {
@@ -48820,7 +48877,7 @@ function installUpdatePromptHook(agentDir) {
     });
     hooks.UserPromptSubmit = list2;
     parsed.hooks = hooks;
-    writeFileSync36(settingsPath, JSON.stringify(parsed, null, 2) + `
+    writeFileSync37(settingsPath, JSON.stringify(parsed, null, 2) + `
 `, { mode: 384 });
     installed = true;
   }
@@ -48883,6 +48940,7 @@ var init_install_detect = () => {};
 // src/litellm/provision.ts
 var exports_provision = {};
 __export(exports_provision, {
+  validateKey: () => validateKey,
   ensureTeam: () => ensureTeam,
   ensureKey: () => ensureKey,
   LiteLLMProvisionError: () => LiteLLMProvisionError
@@ -48904,6 +48962,12 @@ function looksLikeAlreadyExists(status, body) {
     return true;
   return false;
 }
+function looksLikeUnknownKey(status, body) {
+  if (status !== 400 && status !== 401 && status !== 403 && status !== 404)
+    return false;
+  const t = body.toLowerCase();
+  return t.includes("not found") || t.includes("does not exist") || t.includes("no such key") || t.includes("no key found");
+}
 async function ensureTeam(baseUrl, masterKey, teamName, fetchFn = fetch) {
   const url = `${normalizeBase(baseUrl)}/team/new`;
   let resp;
@@ -48923,7 +48987,7 @@ async function ensureTeam(baseUrl, masterKey, teamName, fetchFn = fetch) {
     return;
   throw new LiteLLMProvisionError(`LiteLLM /team/new returned ${resp.status}`, resp.status, body);
 }
-async function ensureKey(opts, fetchFn = fetch) {
+async function generateKeyOnce(opts, fetchFn) {
   const url = `${normalizeBase(opts.baseUrl)}/key/generate`;
   const payload = {
     key_alias: opts.alias
@@ -48943,23 +49007,129 @@ async function ensureKey(opts, fetchFn = fetch) {
       body: JSON.stringify(payload)
     });
   } catch (err) {
-    throw new LiteLLMProvisionError(`LiteLLM /key/generate request failed: ${err.message}`);
+    return {
+      kind: "error",
+      error: new LiteLLMProvisionError(`LiteLLM /key/generate request failed: ${err.message}`)
+    };
   }
   if (!resp.ok) {
     const body = await safeText(resp);
-    throw new LiteLLMProvisionError(`LiteLLM /key/generate returned ${resp.status}`, resp.status, body);
+    if (looksLikeAlreadyExists(resp.status, body)) {
+      return { kind: "duplicate-alias", status: resp.status, body };
+    }
+    return {
+      kind: "error",
+      error: new LiteLLMProvisionError(`LiteLLM /key/generate returned ${resp.status}`, resp.status, body)
+    };
   }
   let json;
   try {
     json = await resp.json();
   } catch (err) {
-    throw new LiteLLMProvisionError(`LiteLLM /key/generate returned non-JSON body: ${err.message}`, resp.status);
+    return {
+      kind: "error",
+      error: new LiteLLMProvisionError(`LiteLLM /key/generate returned non-JSON body: ${err.message}`, resp.status)
+    };
   }
   const key = json?.key;
   if (typeof key !== "string" || key.length === 0) {
-    throw new LiteLLMProvisionError(`LiteLLM /key/generate response missing a "key" field`, resp.status, JSON.stringify(json));
+    return {
+      kind: "error",
+      error: new LiteLLMProvisionError(`LiteLLM /key/generate response missing a "key" field`, resp.status, JSON.stringify(json))
+    };
+  }
+  return { kind: "ok", key };
+}
+async function resolveTokensForAlias(baseUrl, masterKey, alias, fetchFn) {
+  const url = `${normalizeBase(baseUrl)}/key/list?key_alias=${encodeURIComponent(alias)}` + `&return_full_object=true&include_team_keys=true`;
+  let resp;
+  try {
+    resp = await fetchFn(url, { method: "GET", headers: authHeaders3(masterKey) });
+  } catch {
+    return [];
+  }
+  if (!resp.ok)
+    return [];
+  let json;
+  try {
+    json = await resp.json();
+  } catch {
+    return [];
+  }
+  const keys = json?.keys;
+  if (!Array.isArray(keys))
+    return [];
+  const tokens = [];
+  for (const k of keys) {
+    if (typeof k === "string" && k.length > 0)
+      tokens.push(k);
+    else if (k && typeof k === "object") {
+      const tok = k.token;
+      const raw = k.key;
+      if (typeof tok === "string" && tok.length > 0)
+        tokens.push(tok);
+      else if (typeof raw === "string" && raw.length > 0)
+        tokens.push(raw);
+    }
+  }
+  return tokens;
+}
+async function deleteOrphanedAlias(opts, fetchFn, log) {
+  const tokens = await resolveTokensForAlias(opts.baseUrl, opts.masterKey, opts.alias, fetchFn);
+  const body = { key_aliases: [opts.alias] };
+  if (tokens.length > 0)
+    body.keys = tokens;
+  const manual = `Manual remediation: delete the key with alias '${opts.alias}' in the LiteLLM ` + `admin UI, or run ` + `\`curl -X POST "${normalizeBase(opts.baseUrl)}/key/delete" -H "Authorization: Bearer <master-key>" ` + `-H "content-type: application/json" -d '{"key_aliases":["${opts.alias}"]}'\`, ` + `then re-run \`switchroom apply\`.`;
+  const url = `${normalizeBase(opts.baseUrl)}/key/delete`;
+  let resp;
+  try {
+    resp = await fetchFn(url, {
+      method: "POST",
+      headers: authHeaders3(opts.masterKey),
+      body: JSON.stringify(body)
+    });
+  } catch (err) {
+    throw new LiteLLMProvisionError(`LiteLLM /key/delete request failed while recovering orphaned alias ` + `'${opts.alias}': ${err.message}. ${manual}`);
+  }
+  if (!resp.ok) {
+    const errBody = await safeText(resp);
+    throw new LiteLLMProvisionError(`LiteLLM /key/delete returned ${resp.status} while recovering orphaned ` + `alias '${opts.alias}'. ${manual}`, resp.status, errBody);
+  }
+  log(`litellm: deleted orphaned key(s) for alias '${opts.alias}'` + (tokens.length > 0 ? ` (${tokens.length} token(s) resolved)` : "") + ` \u2014 regenerating`);
+}
+async function ensureKey(opts, fetchFn = fetch) {
+  const log = opts.log ?? (() => {});
+  const first = await generateKeyOnce(opts, fetchFn);
+  if (first.kind === "ok")
+    return { key: first.key };
+  if (first.kind === "error")
+    throw first.error;
+  log(`litellm: key_alias '${opts.alias}' already exists in LiteLLM but the vault ` + `has no recoverable key (orphaned by a prior failed provision) \u2014 ` + `self-healing: deleting the orphan and regenerating`);
+  await deleteOrphanedAlias(opts, fetchFn, log);
+  const second = await generateKeyOnce(opts, fetchFn);
+  if (second.kind === "ok") {
+    log(`litellm: regenerated key for alias '${opts.alias}' after orphan recovery`);
+    return { key: second.key };
+  }
+  if (second.kind === "duplicate-alias") {
+    throw new LiteLLMProvisionError(`LiteLLM /key/generate still reports alias '${opts.alias}' already exists ` + `after deleting the orphan \u2014 the delete did not take effect. Manual ` + `remediation: remove the key with alias '${opts.alias}' via the LiteLLM ` + `admin UI (or POST /key/delete {"key_aliases":["${opts.alias}"]}) then ` + `re-run \`switchroom apply\`.`, second.status, second.body);
+  }
+  throw second.error;
+}
+async function validateKey(opts, fetchFn = fetch) {
+  const url = `${normalizeBase(opts.baseUrl)}/key/info?key=${encodeURIComponent(opts.key)}`;
+  let resp;
+  try {
+    resp = await fetchFn(url, { method: "GET", headers: authHeaders3(opts.masterKey) });
+  } catch (err) {
+    return { kind: "unreachable", detail: err.message };
   }
-  return { key };
+  if (resp.ok)
+    return { kind: "valid" };
+  const body = await safeText(resp);
+  if (looksLikeUnknownKey(resp.status, body))
+    return { kind: "unknown" };
+  return { kind: "unreachable", detail: `HTTP ${resp.status}: ${body.slice(0, 200)}` };
 }
 async function safeText(resp) {
   try {
@@ -48999,8 +49169,8 @@ __export(exports_voice_sidecar_token, {
   VOICE_SIDECAR_TOKEN_ENV: () => VOICE_SIDECAR_TOKEN_ENV
 });
 import { randomBytes as randomBytes14 } from "node:crypto";
-import { chmodSync as chmodSync11, chownSync as chownSync7, existsSync as existsSync81, mkdirSync as mkdirSync45, readFileSync as readFileSync68, rmSync as rmSync17, writeFileSync as writeFileSync37 } from "node:fs";
-import { dirname as dirname27 } from "node:path";
+import { chmodSync as chmodSync11, chownSync as chownSync7, existsSync as existsSync82, mkdirSync as mkdirSync46, readFileSync as readFileSync69, rmSync as rmSync17, writeFileSync as writeFileSync38 } from "node:fs";
+import { dirname as dirname28 } from "node:path";
 async function defaultResolveOrSeedToken(home2, writeErr) {
   const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { resolveOperatorVaultPassphrase }] = await Promise.all([
     Promise.resolve().then(() => (init_client(), exports_client)),
@@ -49034,8 +49204,8 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   const envPath = composeEnvPath(composePath);
   if (engine !== "local") {
     try {
-      if (existsSync81(envPath)) {
-        const body = readFileSync68(envPath, "utf-8");
+      if (existsSync82(envPath)) {
+        const body = readFileSync69(envPath, "utf-8");
         if (body.includes(`${VOICE_SIDECAR_TOKEN_ENV}=`))
           rmSync17(envPath);
       }
@@ -49054,11 +49224,11 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   if (!token)
     return;
   try {
-    mkdirSync45(dirname27(envPath), { recursive: true });
+    mkdirSync46(dirname28(envPath), { recursive: true });
     let body = "";
     try {
-      if (existsSync81(envPath))
-        body = readFileSync68(envPath, "utf-8");
+      if (existsSync82(envPath))
+        body = readFileSync69(envPath, "utf-8");
     } catch {}
     const line = `${VOICE_SIDECAR_TOKEN_ENV}=${token}`;
     const keyRe = new RegExp(`^${VOICE_SIDECAR_TOKEN_ENV}=.*$`, "m");
@@ -49066,7 +49236,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
 `) ? body + `
 ` : body) + line + `
 `;
-    writeFileSync37(envPath, next, {
+    writeFileSync38(envPath, next, {
       encoding: "utf-8",
       mode: 384
     });
@@ -49116,12 +49286,12 @@ __export(exports_apply, {
   DEFAULT_COMPOSE_PATH: () => DEFAULT_COMPOSE_PATH2,
   COMPOSE_PROJECT: () => COMPOSE_PROJECT2
 });
-import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync12, existsSync as existsSync82, mkdirSync as mkdirSync46, readFileSync as readFileSync69, readdirSync as readdirSync28, renameSync as renameSync18, writeFileSync as writeFileSync38 } from "node:fs";
+import { accessSync as accessSync3, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync12, existsSync as existsSync83, mkdirSync as mkdirSync47, readFileSync as readFileSync70, readdirSync as readdirSync28, renameSync as renameSync18, writeFileSync as writeFileSync39 } from "node:fs";
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
-import { dirname as dirname28, join as join80, resolve as resolve50 } from "node:path";
-import { homedir as homedir47 } from "node:os";
+import { dirname as dirname29, join as join81, resolve as resolve50 } from "node:path";
+import { homedir as homedir48 } from "node:os";
 import { execFileSync as execFileSync25 } from "node:child_process";
 function effectiveLiteLLMEnabled(config, agentResolvedLitellm) {
   return agentResolvedLitellm?.enabled ?? config.litellm?.enabled ?? false;
@@ -49132,7 +49302,7 @@ async function resolveOperatorVaultPassphrase(home2) {
     return envPass;
   try {
     const { readAutoUnlockFile: readAutoUnlockFile2 } = await Promise.resolve().then(() => (init_auto_unlock(), exports_auto_unlock));
-    const blobPath = join80(home2, ".switchroom", "vault-auto-unlock");
+    const blobPath = join81(home2, ".switchroom", "vault-auto-unlock");
     const pass = readAutoUnlockFile2(blobPath);
     return pass && pass.length > 0 ? pass : null;
   } catch {
@@ -49154,12 +49324,12 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   const needsHindsight = config.litellm?.enabled === true && config.memory?.backend === "hindsight";
   if (optedIn.length === 0 && !needsHindsight)
     return;
-  const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { ensureTeam: ensureTeam2, ensureKey: ensureKey2 }, { addAgentSecret: addAgentSecret2 }] = await Promise.all([
+  const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { ensureTeam: ensureTeam2, ensureKey: ensureKey2, validateKey: validateKey2 }, { addAgentSecret: addAgentSecret2 }] = await Promise.all([
     Promise.resolve().then(() => (init_client(), exports_client)),
     Promise.resolve().then(() => (init_provision(), exports_provision)),
     Promise.resolve().then(() => (init_telegram_yaml(), exports_telegram_yaml))
   ]);
-  const passphrase = await resolveOperatorVaultPassphrase(ctx.home ?? homedir47());
+  const passphrase = await resolveOperatorVaultPassphrase(ctx.home ?? homedir48());
   if (passphrase === null) {
     const { getViaBrokerStructured: getViaBrokerStructured3 } = await Promise.resolve().then(() => (init_client(), exports_client));
     const alreadyProvisioned = [];
@@ -49176,7 +49346,21 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
         unprovisionedNew.push(name);
       }
     }
-    const hindsightPending = needsHindsight;
+    let hindsightPending = false;
+    if (needsHindsight) {
+      const h = await getViaBrokerStructured3("litellm/hindsight/api-key");
+      if (h.kind === "ok") {
+        hindsightPending = false;
+        writeOut(source_default.gray(`  ~ litellm/hindsight: key already provisioned (skipped) \u2014 unaffected by missing passphrase.
+`));
+      } else if (h.kind === "unreachable") {
+        hindsightPending = false;
+        ctx.writeErr(source_default.yellow(`  ! litellm/hindsight: vault-broker unreachable \u2014 could not verify the ` + `service key; it keeps its previous state.
+`));
+      } else {
+        hindsightPending = true;
+      }
+    }
     if (alreadyProvisioned.length > 0) {
       writeOut(source_default.gray(`  ~ litellm: ${alreadyProvisioned.length} agent(s) already provisioned (${alreadyProvisioned.join(", ")}) \u2014 unaffected by missing passphrase.
 `));
@@ -49206,9 +49390,9 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   const oauthAccount = config.auth?.active;
   let pendingConfigEdits = false;
   let configText = null;
-  if (switchroomConfigPath && existsSync82(switchroomConfigPath)) {
+  if (switchroomConfigPath && existsSync83(switchroomConfigPath)) {
     try {
-      configText = readFileSync69(switchroomConfigPath, "utf-8");
+      configText = readFileSync70(switchroomConfigPath, "utf-8");
     } catch (err) {
       ctx.writeErr(source_default.yellow(`  ! litellm: could not read config for ACL grants (${err.message}); keys will be provisioned but agents may lack read-ACL.
 `));
@@ -49227,43 +49411,62 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
         continue;
       }
       const vaultKey = `litellm/${name}/api-key`;
+      const alias = `agent:${name}`;
       const existing = await getViaBrokerStructured2(vaultKey);
-      if (existing.kind === "ok") {
-        writeOut(source_default.gray(`  ~ litellm/${name}: key already provisioned (skipped)
-`));
-        if (configText !== null) {
-          const after = addAgentSecret2(configText, name, vaultKey);
-          if (after !== configText) {
-            configText = after;
-            pendingConfigEdits = true;
-          }
-        }
-        continue;
-      }
       if (existing.kind === "unreachable") {
         ctx.writeErr(source_default.yellow(`  ! litellm/${name}: vault-broker unreachable (${existing.msg ?? "no detail"}) \u2014 ` + `skipping key provisioning; agent keeps its previous routing env.
 `));
         continue;
       }
       let masterKey = adminKeyRef;
+      let masterKeyErr = null;
       if (isVaultReference(adminKeyRef)) {
         const refKey = parseVaultReference(adminKeyRef);
         const resolved = await getViaBrokerStructured2(refKey);
         if (resolved.kind !== "ok") {
-          failures.push({
-            agent: name,
-            message: `litellm: admin_key vault ref '${adminKeyRef}' did not resolve (${resolved.kind}${"msg" in resolved && resolved.msg ? `: ${resolved.msg}` : ""}).`
-          });
-          continue;
+          masterKey = null;
+          masterKeyErr = `litellm: admin_key vault ref '${adminKeyRef}' did not resolve (${resolved.kind}${"msg" in resolved && resolved.msg ? `: ${resolved.msg}` : ""}).`;
+        } else if (resolved.entry.kind !== "string") {
+          masterKey = null;
+          masterKeyErr = `litellm: admin_key vault ref '${adminKeyRef}' is not a string secret.`;
+        } else {
+          masterKey = resolved.entry.value;
         }
-        if (resolved.entry.kind !== "string") {
-          failures.push({
-            agent: name,
-            message: `litellm: admin_key vault ref '${adminKeyRef}' is not a string secret.`
-          });
+      }
+      if (existing.kind === "ok") {
+        const storedKey = existing.entry.kind === "string" ? existing.entry.value : null;
+        let driftReprovision = false;
+        if (storedKey && masterKey) {
+          const validation = await validateKey2({ baseUrl, masterKey, key: storedKey });
+          if (validation.kind === "unknown") {
+            driftReprovision = true;
+            ctx.writeErr(source_default.yellow(`  ! litellm/${name}: stored virtual key not recognized by the proxy ` + `(DB drift) \u2014 re-provisioning a fresh key.
+`));
+          } else if (validation.kind === "unreachable") {
+            ctx.writeErr(source_default.yellow(`  ! litellm/${name}: proxy unreachable during key validation (${validation.detail}) \u2014 keeping the stored key unverified.
+`));
+          } else {
+            writeOut(source_default.gray(`  ~ litellm/${name}: key already provisioned + validated (skipped)
+`));
+          }
+        } else {
+          writeOut(source_default.gray(`  ~ litellm/${name}: key already provisioned (skipped)
+`));
+        }
+        if (!driftReprovision) {
+          if (configText !== null) {
+            const after = addAgentSecret2(configText, name, vaultKey);
+            if (after !== configText) {
+              configText = after;
+              pendingConfigEdits = true;
+            }
+          }
           continue;
         }
-        masterKey = resolved.entry.value;
+      }
+      if (!masterKey) {
+        failures.push({ agent: name, message: masterKeyErr ?? `litellm: admin_key unresolved` });
+        continue;
       }
       await ensureTeam2(baseUrl, masterKey, team);
       const metadata = {
@@ -49281,9 +49484,11 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
       const { key } = await ensureKey2({
         baseUrl,
         masterKey,
-        alias: `agent:${name}`,
+        alias,
         team,
-        metadata
+        metadata,
+        log: (m) => ctx.writeErr(source_default.gray(`  ~ litellm/${name}: ${m}
+`))
       });
       const put = await putViaBroker2(vaultKey, { kind: "string", value: key }, { passphrase });
       if (put.kind !== "ok") {
@@ -49310,7 +49515,7 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   }
   if (pendingConfigEdits && configText !== null && switchroomConfigPath) {
     try {
-      writeFileSync38(switchroomConfigPath, configText, "utf-8");
+      writeFileSync39(switchroomConfigPath, configText, "utf-8");
       writeOut(source_default.gray(`  ~ litellm: granted read-ACL on per-agent keys (updated ${switchroomConfigPath})
 `));
     } catch (err) {
@@ -49345,7 +49550,9 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
             masterKey,
             alias: "service:hindsight",
             team,
-            metadata: { service: "hindsight", env: "fleet", ...oauthAccount ? { oauth_account: oauthAccount } : {} }
+            metadata: { service: "hindsight", env: "fleet", ...oauthAccount ? { oauth_account: oauthAccount } : {} },
+            log: (m) => ctx.writeErr(source_default.gray(`  ~ litellm/hindsight: ${m}
+`))
           });
           const put = await putViaBroker2(hindsightVaultKey, { kind: "string", value: key }, { passphrase });
           if (put.kind === "ok") {
@@ -49365,12 +49572,12 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
 function resolveVaultBindMountDir(homeDir, ctx) {
   const isCustomPath = ctx.migrationKind === "custom-path-skipped";
   if (isCustomPath && ctx.customVaultPath) {
-    return dirname28(ctx.customVaultPath);
+    return dirname29(ctx.customVaultPath);
   }
-  return join80(homeDir, ".switchroom", "vault");
+  return join81(homeDir, ".switchroom", "vault");
 }
 function inspectVaultBindMountDir(vaultDir) {
-  if (!existsSync82(vaultDir))
+  if (!existsSync83(vaultDir))
     return { kind: "missing" };
   const entries = readdirSync28(vaultDir);
   const unknown = [];
@@ -49398,61 +49605,61 @@ function hasVaultRefs(value) {
 async function ensureHostMountSources(config) {
   const home2 = resolveHostHomeForCompose();
   const dirs = [
-    join80(home2, ".switchroom", "approvals"),
-    join80(home2, ".switchroom", "scheduler"),
-    join80(home2, ".switchroom", "logs"),
-    join80(home2, ".switchroom", "compose"),
-    join80(home2, ".switchroom", "broker-operator")
+    join81(home2, ".switchroom", "approvals"),
+    join81(home2, ".switchroom", "scheduler"),
+    join81(home2, ".switchroom", "logs"),
+    join81(home2, ".switchroom", "compose"),
+    join81(home2, ".switchroom", "broker-operator")
   ];
   for (const name of Object.keys(config.agents)) {
-    dirs.push(join80(home2, ".switchroom", "agents", name));
-    dirs.push(join80(home2, ".switchroom", "logs", name));
-    dirs.push(join80(home2, ".claude", "projects", name));
-    dirs.push(join80(home2, ".switchroom", "audit", name));
-    if (existsSync82(join80(home2, ".switchroom-config"))) {
-      dirs.push(join80(home2, ".switchroom-config", "agents", name, "personal-skills"));
+    dirs.push(join81(home2, ".switchroom", "agents", name));
+    dirs.push(join81(home2, ".switchroom", "logs", name));
+    dirs.push(join81(home2, ".claude", "projects", name));
+    dirs.push(join81(home2, ".switchroom", "audit", name));
+    if (existsSync83(join81(home2, ".switchroom-config"))) {
+      dirs.push(join81(home2, ".switchroom-config", "agents", name, "personal-skills"));
     }
   }
   for (const dir of dirs) {
     await mkdir2(dir, { recursive: true });
   }
-  const autoUnlockPath = join80(home2, ".switchroom", "vault-auto-unlock");
-  if (!existsSync82(autoUnlockPath)) {
-    writeFileSync38(autoUnlockPath, "", { mode: 384 });
+  const autoUnlockPath = join81(home2, ".switchroom", "vault-auto-unlock");
+  if (!existsSync83(autoUnlockPath)) {
+    writeFileSync39(autoUnlockPath, "", { mode: 384 });
   }
-  const auditLogPath = join80(home2, ".switchroom", "vault-audit.log");
-  if (!existsSync82(auditLogPath)) {
-    writeFileSync38(auditLogPath, "", { mode: 420 });
+  const auditLogPath = join81(home2, ".switchroom", "vault-audit.log");
+  if (!existsSync83(auditLogPath)) {
+    writeFileSync39(auditLogPath, "", { mode: 420 });
   }
-  const grantsDbPath = join80(home2, ".switchroom", "vault-grants.db");
-  if (!existsSync82(grantsDbPath)) {
-    writeFileSync38(grantsDbPath, "", { mode: 384 });
+  const grantsDbPath = join81(home2, ".switchroom", "vault-grants.db");
+  if (!existsSync83(grantsDbPath)) {
+    writeFileSync39(grantsDbPath, "", { mode: 384 });
   }
-  const hostdAuditLogPath = join80(home2, ".switchroom", "host-control-audit.log");
-  if (!existsSync82(hostdAuditLogPath)) {
-    writeFileSync38(hostdAuditLogPath, "", { mode: 420 });
+  const hostdAuditLogPath = join81(home2, ".switchroom", "host-control-audit.log");
+  if (!existsSync83(hostdAuditLogPath)) {
+    writeFileSync39(hostdAuditLogPath, "", { mode: 420 });
   }
   for (const name of Object.keys(config.agents)) {
-    const tokenPath = join80(home2, ".switchroom", "agents", name, ".vault-token");
-    if (!existsSync82(tokenPath)) {
-      writeFileSync38(tokenPath, "", { mode: 384 });
+    const tokenPath = join81(home2, ".switchroom", "agents", name, ".vault-token");
+    if (!existsSync83(tokenPath)) {
+      writeFileSync39(tokenPath, "", { mode: 384 });
     }
     try {
       const uid = allocateAgentUid(name);
       chownSync8(tokenPath, uid, uid);
     } catch {}
   }
-  const fleetDir = join80(home2, ".switchroom", "fleet");
+  const fleetDir = join81(home2, ".switchroom", "fleet");
   await mkdir2(fleetDir, { recursive: true });
-  const invariantsPath = join80(fleetDir, "switchroom-invariants.md");
+  const invariantsPath = join81(fleetDir, "switchroom-invariants.md");
   const invariantsCanonical = renderFleetInvariants();
-  const invariantsCurrent = existsSync82(invariantsPath) ? readFileSync69(invariantsPath, "utf-8") : null;
+  const invariantsCurrent = existsSync83(invariantsPath) ? readFileSync70(invariantsPath, "utf-8") : null;
   if (invariantsCurrent !== invariantsCanonical) {
-    writeFileSync38(invariantsPath, invariantsCanonical, { mode: 420 });
+    writeFileSync39(invariantsPath, invariantsCanonical, { mode: 420 });
   }
-  const fleetClaudePath = join80(fleetDir, "CLAUDE.md");
-  if (!existsSync82(fleetClaudePath)) {
-    writeFileSync38(fleetClaudePath, [
+  const fleetClaudePath = join81(fleetDir, "CLAUDE.md");
+  if (!existsSync83(fleetClaudePath)) {
+    writeFileSync39(fleetClaudePath, [
       "# Switchroom fleet defaults",
       "",
       "Operator-owned fleet brain. Every agent reads this via",
@@ -49490,7 +49697,7 @@ function isInAgentContainer(vaultPresent, composeV2Present, env2 = process.env)
 function runApplyPreflight(config, opts = {}) {
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
   const detect = opts.detectComposeV2 ?? detectComposeV2;
-  const vaultMissing = hasVaultRefs(config) && !existsSync82(vaultPath);
+  const vaultMissing = hasVaultRefs(config) && !existsSync83(vaultPath);
   const composeErr = detect();
   if ((vaultMissing || composeErr) && isInAgentContainer(!vaultMissing, composeErr === null)) {
     throw new Error(IN_AGENT_CONTAINER_APPLY_MSG);
@@ -49504,7 +49711,7 @@ function runApplyPreflight(config, opts = {}) {
   detectAndReportLegacyGdriveSlots(vaultPath);
 }
 function detectAndReportLegacyGdriveSlots(vaultPath) {
-  if (!existsSync82(vaultPath))
+  if (!existsSync83(vaultPath))
     return;
   const passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase)
@@ -49543,18 +49750,18 @@ function detectAndReportLegacyGdriveSlots(vaultPath) {
 `));
   }
 }
-function writeInstallTypeCache(homeDir = homedir47()) {
+function writeInstallTypeCache(homeDir = homedir48()) {
   const ctx = detectInstallType();
-  const dir = join80(homeDir, ".switchroom");
-  const out = join80(dir, "install-type.json");
+  const dir = join81(homeDir, ".switchroom");
+  const out = join81(dir, "install-type.json");
   const tmp = `${out}.tmp`;
-  mkdirSync46(dir, { recursive: true });
+  mkdirSync47(dir, { recursive: true });
   const payload = {
     install_type: ctx.install_type,
     detected_at: new Date().toISOString(),
     source_paths: ctx.source_paths
   };
-  writeFileSync38(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
+  writeFileSync39(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
   renameSync18(tmp, out);
   return out;
 }
@@ -49613,17 +49820,17 @@ Applying switchroom config...
       writeOut(source_default.green(`  + ${name}`) + source_default.gray(` (${agentConfig.extends ?? "default"}) \u2014 ${detail}
 `));
       try {
-        installUpdatePromptHook(join80(agentsDir, name));
+        installUpdatePromptHook(join81(agentsDir, name));
       } catch (hookErr) {
         writeOut(source_default.gray(`    (update-prompt hook install failed for ${name}: ${hookErr.message})
 `));
       }
-      await refreshAgentConnectionHealth(config, name, join80(agentsDir, name), {
+      await refreshAgentConnectionHealth(config, name, join81(agentsDir, name), {
         vaultAclReader: connHealthVaultAclReader
       });
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join80(agentsDir, name), uid, {
+        alignAgentUid(name, join81(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -49660,7 +49867,7 @@ Applying switchroom config...
       writeOut,
       writeErr,
       failures,
-      home: homedir47()
+      home: homedir48()
     });
   }
   await ensureHostMountSources(config);
@@ -49668,7 +49875,7 @@ Applying switchroom config...
     for (const name of agentNames) {
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join80(agentsDir, name), uid, {
+        alignAgentUid(name, join81(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -49682,7 +49889,7 @@ Applying switchroom config...
   }
   const vaultPathConfigured = config.vault?.path;
   const customVaultPath = vaultPathConfigured ? resolvePath(vaultPathConfigured) : undefined;
-  const migrationResult = migrateVaultLayout(homedir47(), {
+  const migrationResult = migrateVaultLayout(homedir48(), {
     customVaultPath
   });
   switch (migrationResult.kind) {
@@ -49708,7 +49915,7 @@ Applying switchroom config...
       writeErr(formatDivergentRecoveryMessage(migrationResult.details));
       process.exit(4);
   }
-  const postMigrationInspect = inspectVaultLayout(homedir47());
+  const postMigrationInspect = inspectVaultLayout(homedir48());
   const acceptable = [
     "no-vault",
     "already-migrated",
@@ -49723,7 +49930,7 @@ Expected one of: ${acceptable.join(", ")}
 `));
     process.exit(5);
   }
-  const vaultDir = resolveVaultBindMountDir(homedir47(), {
+  const vaultDir = resolveVaultBindMountDir(homedir48(), {
     migrationKind: migrationResult.kind,
     customVaultPath
   });
@@ -49754,7 +49961,7 @@ vault.enc.lock (PID-file flock from saveVault), and
   });
   if (!skipScaffold) {
     const { provisionVoiceSidecarToken: provisionVoiceSidecarToken2 } = await Promise.resolve().then(() => (init_voice_sidecar_token(), exports_voice_sidecar_token));
-    await provisionVoiceSidecarToken2(composePath, homedir47(), {
+    await provisionVoiceSidecarToken2(composePath, homedir48(), {
       writeOut,
       writeErr,
       operatorUid
@@ -49770,7 +49977,7 @@ Wrote `) + displayComposePath + source_default.gray(` (${composeBytes} bytes)
   writeOut(source_default.gray(`  (If pull returns 401, login to ghcr.io first: see docs/operators/install.md#ghcr-auth)
 `));
   if (process.geteuid?.() === 0 && operatorUid !== undefined) {
-    const restored = restoreOperatorOwnership(homedir47(), operatorUid);
+    const restored = restoreOperatorOwnership(homedir48(), operatorUid);
     if (restored.length > 0) {
       writeOut(source_default.gray(`  Restored operator ownership of ${restored.length} ~/.switchroom path(s)
 `));
@@ -49875,7 +50082,7 @@ Dry-run: validating switchroom config (no changes will be written)...
     }
   }
   try {
-    const probe2 = await probeVaultProvisioning(config, agentNames, homedir47());
+    const probe2 = await probeVaultProvisioning(config, agentNames, homedir48());
     if (probe2.alreadyProvisioned.length > 0) {
       info.push(`litellm: ${probe2.alreadyProvisioned.length} agent(s) already provisioned (${probe2.alreadyProvisioned.join(", ")}).`);
     }
@@ -50006,18 +50213,18 @@ function copyExampleConfig2(name) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
   const dest = resolve50(process.cwd(), "switchroom.yaml");
-  if (existsSync82(dest)) {
+  if (existsSync83(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
   }
   const embedded = EMBEDDED_EXAMPLES[name];
   if (embedded !== undefined) {
-    writeFileSync38(dest, embedded, { encoding: "utf8" });
+    writeFileSync39(dest, embedded, { encoding: "utf8" });
     console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
     return;
   }
   const exampleFile = resolve50(import.meta.dirname, `../../examples/${name}.yaml`);
-  if (!existsSync82(exampleFile)) {
+  if (!existsSync83(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
   copyFileSync12(exampleFile, dest);
@@ -50028,8 +50235,8 @@ function findUnwritableAgentDirs(config, opts) {
   const targets = opts.only ? [opts.only] : Object.keys(config.agents ?? {});
   const unwritable = [];
   for (const name of targets) {
-    const startSh = join80(agentsDir, name, "start.sh");
-    if (!existsSync82(startSh))
+    const startSh = join81(agentsDir, name, "start.sh");
+    if (!existsSync83(startSh))
       continue;
     try {
       accessSync3(startSh, fsConstants6.W_OK);
@@ -50230,7 +50437,7 @@ var init_apply = __esm(() => {
     switchroom: switchroom_default,
     minimal: minimal_default
   };
-  DEFAULT_COMPOSE_PATH2 = join80(homedir47(), ".switchroom", "compose", "docker-compose.yml");
+  DEFAULT_COMPOSE_PATH2 = join81(homedir48(), ".switchroom", "compose", "docker-compose.yml");
   IN_AGENT_CONTAINER_APPLY_MSG = "`switchroom apply`'s full per-agent scaffold cannot run from inside an " + "agent container \u2014 this is a host/hostd operation by construction " + "(no vault at the container HOME, and no `docker compose` v2 plugin here).\nTo roll the fleet to a new version, drive the hostd rollout (`mcp__hostd__rollout`): it runs a `--compose-only` apply plus a per-agent restart-reconcile, and each agent refreshes its own templates " + `on restart \u2014 the roll completes without any agent running a full apply.
 ` + "A full host-side `sudo switchroom apply` is only needed for structural changes (compose regeneration / new-agent scaffolding), and is run by the operator on the host, never from inside an agent.";
   SELF_ELEVATE_PRESERVED_ENV = [
@@ -63677,7 +63884,7 @@ __export(exports_server2, {
   TOOLS: () => TOOLS2
 });
 import { randomBytes as randomBytes16 } from "node:crypto";
-import { existsSync as existsSync91, readFileSync as readFileSync78 } from "node:fs";
+import { existsSync as existsSync92, readFileSync as readFileSync79 } from "node:fs";
 function selfSocketPath() {
   return `/run/switchroom/hostd/${SELF_AGENT}/sock`;
 }
@@ -63695,7 +63902,7 @@ async function dispatchTool2(name, args) {
     return errorText2("hostd MCP: SWITCHROOM_AGENT_NAME env var is not set \u2014 cannot " + "determine which per-agent socket to talk to.");
   }
   const sockPath = selfSocketPath();
-  if (!existsSync91(sockPath)) {
+  if (!existsSync92(sockPath)) {
     return errorText2(`hostd MCP: socket not bound at ${sockPath}. The host-control ` + `daemon is either not installed (run \`switchroom hostd install\`) ` + `or this agent isn't admin-flagged in switchroom.yaml. RFC C ` + `bind-mounts the per-agent socket only when host_control.enabled ` + `is true AND the agent has admin: true.`);
   }
   let req;
@@ -63883,18 +64090,18 @@ function resolveAuditLogPath() {
   if (process.env.HOSTD_AUDIT_LOG_PATH)
     return process.env.HOSTD_AUDIT_LOG_PATH;
   const bindMounted = "/host-home/.switchroom/host-control-audit.log";
-  if (existsSync91(bindMounted))
+  if (existsSync92(bindMounted))
     return bindMounted;
   return defaultAuditLogPath2();
 }
 function getLastUpdateApplyStatus() {
   const path8 = resolveAuditLogPath();
-  if (!existsSync91(path8)) {
+  if (!existsSync92(path8)) {
     return errorText2(`get_status: audit log not found at ${path8}. No update_apply has run yet?`);
   }
   let raw;
   try {
-    raw = readFileSync78(path8, "utf-8");
+    raw = readFileSync79(path8, "utf-8");
   } catch (err2) {
     return errorText2(`get_status: failed to read audit log at ${path8}: ${err2.message}`);
   }
@@ -64561,20 +64768,20 @@ __export(exports_scan, {
   ledgerPathForBase: () => ledgerPathForBase
 });
 import {
-  readFileSync as readFileSync80,
+  readFileSync as readFileSync81,
   readdirSync as readdirSync36,
-  existsSync as existsSync94,
-  mkdirSync as mkdirSync53,
-  writeFileSync as writeFileSync44
+  existsSync as existsSync95,
+  mkdirSync as mkdirSync54,
+  writeFileSync as writeFileSync45
 } from "node:fs";
-import { resolve as resolve55, dirname as dirname31 } from "node:path";
-import { homedir as homedir56 } from "node:os";
-function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir56()) {
+import { resolve as resolve55, dirname as dirname32 } from "node:path";
+import { homedir as homedir57 } from "node:os";
+function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir57()) {
   return resolve55(home2, ".switchroom");
 }
 function listAgents(base) {
   const dir = resolve55(base, "agents");
-  if (!existsSync94(dir))
+  if (!existsSync95(dir))
     return [];
   try {
     return readdirSync36(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
@@ -64603,16 +64810,16 @@ function runScan(opts = {}) {
     let gwText = "";
     let sawArtifact = false;
     try {
-      if (existsSync94(turnsPath)) {
-        turnsText = readFileSync80(turnsPath, "utf-8");
+      if (existsSync95(turnsPath)) {
+        turnsText = readFileSync81(turnsPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
       log(`fleet-health: WARN skipping ${agent} turns.jsonl unreadable: ${String(e)}`);
     }
     try {
-      if (existsSync94(gwPath)) {
-        gwText = readFileSync80(gwPath, "utf-8");
+      if (existsSync95(gwPath)) {
+        gwText = readFileSync81(gwPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
@@ -64650,20 +64857,20 @@ function runScan(opts = {}) {
 function readLedgerIfPresent(base) {
   const path8 = ledgerPathForBase(base);
   try {
-    if (!existsSync94(path8))
+    if (!existsSync95(path8))
       return null;
-    return JSON.parse(readFileSync80(path8, "utf-8"));
+    return JSON.parse(readFileSync81(path8, "utf-8"));
   } catch {
     return null;
   }
 }
 function ledgerPathForBase(base) {
-  return fleetHealthLedgerPath(dirname31(base));
+  return fleetHealthLedgerPath(dirname32(base));
 }
 function writeLedger(base, ledger) {
   const path8 = ledgerPathForBase(base);
-  mkdirSync53(dirname31(path8), { recursive: true });
-  writeFileSync44(path8, JSON.stringify(ledger, null, 2) + `
+  mkdirSync54(dirname32(path8), { recursive: true });
+  writeFileSync45(path8, JSON.stringify(ledger, null, 2) + `
 `, "utf-8");
   return path8;
 }
@@ -64682,8 +64889,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.18.6";
-var COMMIT_SHA = "b62d558a";
+var VERSION = "0.18.8";
+var COMMIT_SHA = "9255fe22";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -78919,6 +79126,8 @@ Demoting memory ${source_default.cyan(memoryId)}`));
 
 // src/cli/web.ts
 init_source();
+import { join as join50 } from "node:path";
+import { homedir as homedir28 } from "node:os";
 
 // src/web/server.ts
 init_merge();
@@ -79554,7 +79763,8 @@ var SUBAGENTS_SCHEMA_SQL = `
     status            TEXT    NOT NULL,
     result_summary    TEXT,
     jsonl_agent_id    TEXT,
-    parent_agent_id   TEXT
+    parent_agent_id   TEXT,
+    model             TEXT
   );
   CREATE INDEX IF NOT EXISTS subagents_turn      ON subagents(parent_turn_key);
   CREATE INDEX IF NOT EXISTS subagents_status    ON subagents(status);
@@ -79570,6 +79780,10 @@ function applySubagentsSchema(db) {
   if (!hasParentAgentId) {
     db.exec("ALTER TABLE subagents ADD COLUMN parent_agent_id TEXT");
   }
+  const hasModel = cols.some((c) => c.name === "model");
+  if (!hasModel) {
+    db.exec("ALTER TABLE subagents ADD COLUMN model TEXT");
+  }
   db.exec("CREATE INDEX IF NOT EXISTS subagents_jsonl_id ON subagents(jsonl_agent_id)");
 }
 function mapSubagentRow(row) {
@@ -79586,7 +79800,8 @@ function mapSubagentRow(row) {
     status: row.status,
     result_summary: row.result_summary,
     jsonl_agent_id: row.jsonl_agent_id,
-    parent_agent_id: row.parent_agent_id ?? null
+    parent_agent_id: row.parent_agent_id ?? null,
+    model: row.model ?? null
   };
 }
 function listSubagents(db, opts = {}) {
@@ -82913,10 +83128,100 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
 
 // src/cli/web.ts
 init_helpers();
+init_loader();
+
+// src/web/startup-guard.ts
+import { existsSync as existsSync56, readFileSync as readFileSync51, writeFileSync as writeFileSync26, mkdirSync as mkdirSync31, statSync as statSync24, unlinkSync as unlinkSync13 } from "node:fs";
+import { dirname as dirname16 } from "node:path";
+function detectConfigMountFault(configPath, deps = {}) {
+  const stat = deps.stat ?? ((p) => statSync24(p));
+  let st;
+  try {
+    st = stat(configPath);
+  } catch {
+    return null;
+  }
+  if (!st.isDirectory())
+    return null;
+  return {
+    kind: "directory-inode",
+    path: configPath,
+    message: `switchroom-web: the config bind source ${configPath} resolved to a DIRECTORY, ` + `not a file \u2014 reads fail with EISDIR and the server cannot start.
+
+` + `Cause: the single-file bind mount was (re)created while the host source was ` + `momentarily absent, so Docker auto-created an empty directory, OR a stale ` + `directory inode survived a plain \`docker restart\` inside the container's mount ` + `namespace (a restart does NOT re-resolve a single-file bind).
+
+` + `Remedy: RECREATE the container (not restart) so the bind re-resolves to the file:
+` + `    docker compose -p switchroom-web -f ~/.switchroom/web/docker-compose.yml up -d --force-recreate
+` + `and if the host source itself is a directory, remove it and restore the file first.`
+  };
+}
+function nextCrashBackoff(prior, now, options = {}) {
+  const baseMs = options.baseMs ?? 1000;
+  const maxMs = options.maxMs ?? 60000;
+  const resetAfterMs = options.resetAfterMs ?? 300000;
+  const withinWindow = prior !== null && now - prior.lastTs <= resetAfterMs && now >= prior.lastTs;
+  const count = withinWindow ? prior.count + 1 : 1;
+  const exp = Math.min(count - 1, 30);
+  const delayMs = count <= 1 ? 0 : Math.min(baseMs * 2 ** (exp - 1), maxMs);
+  return { state: { count, lastTs: now }, delayMs };
+}
+function readCrashState(statePath) {
+  try {
+    if (!existsSync56(statePath))
+      return null;
+    const raw = JSON.parse(readFileSync51(statePath, "utf-8"));
+    if (typeof raw.count !== "number" || typeof raw.lastTs !== "number")
+      return null;
+    return { count: raw.count, lastTs: raw.lastTs };
+  } catch {
+    return null;
+  }
+}
+function writeCrashState(statePath, state) {
+  try {
+    mkdirSync31(dirname16(statePath), { recursive: true });
+    writeFileSync26(statePath, JSON.stringify(state), { mode: 384 });
+  } catch {}
+}
+function clearCrashState(statePath) {
+  try {
+    if (existsSync56(statePath))
+      unlinkSync13(statePath);
+  } catch {}
+}
+
+// src/cli/web.ts
 init_posthog();
+async function handleWebStartupFailure(err, configPath, stateFile) {
+  if (err instanceof ConfigError && configPath) {
+    const fault = detectConfigMountFault(configPath);
+    if (fault) {
+      console.error(source_default.red(fault.message));
+    }
+  }
+  const { state, delayMs } = nextCrashBackoff(readCrashState(stateFile), Date.now());
+  writeCrashState(stateFile, state);
+  if (delayMs > 0) {
+    console.error(source_default.yellow(`switchroom-web: startup has failed ${state.count}\u00d7 in a row \u2014 backing off ` + `${Math.round(delayMs / 1000)}s before exit so \`restart: always\` doesn't ` + `crash-loop the host (issue #2915).`));
+    await new Promise((r) => setTimeout(r, delayMs));
+  }
+  throw err;
+}
+function webCrashStatePath() {
+  return join50(homedir28(), ".switchroom", "web", ".crashloop-state.json");
+}
 function registerWebCommand(program3) {
   program3.command("web").description("Start the web dashboard for monitoring agents").option("-p, --port <port>", "Port to listen on", "8080").option("-b, --bind <host>", "Host/IP to bind to (default: 127.0.0.1, localhost-only)", "127.0.0.1").action(withConfigError(async (opts) => {
-    const config = getConfig(program3);
+    const configPath = getConfigPath(program3);
+    const stateFile = webCrashStatePath();
+    let config;
+    try {
+      config = getConfig(program3);
+    } catch (err) {
+      await handleWebStartupFailure(err, configPath, stateFile);
+      throw err;
+    }
+    clearCrashState(stateFile);
     const port = parseInt(opts.port, 10);
     const hostname = opts.bind;
     if (isNaN(port) || port < 1 || port > 65535) {
@@ -82968,8 +83273,8 @@ Starting Switchroom dashboard...
 init_source();
 init_loader();
 init_scaffold();
-import { existsSync as existsSync56, copyFileSync as copyFileSync9, readFileSync as readFileSync51, writeFileSync as writeFileSync26, mkdirSync as mkdirSync31 } from "node:fs";
-import { resolve as resolve33, dirname as dirname16 } from "node:path";
+import { existsSync as existsSync57, copyFileSync as copyFileSync9, readFileSync as readFileSync52, writeFileSync as writeFileSync27, mkdirSync as mkdirSync32 } from "node:fs";
+import { resolve as resolve33, dirname as dirname17 } from "node:path";
 init_state();
 init_vault();
 init_manager();
@@ -83239,7 +83544,7 @@ async function stepConfigFile(configPath, nonInteractive) {
       existingConfig = null;
     }
   }
-  if (existingConfig && existsSync56(existingConfig)) {
+  if (existingConfig && existsSync57(existingConfig)) {
     if (!nonInteractive) {
       const useExisting = await askYesNo(`  Found ${source_default.cyan(existingConfig)}. Use it?`, true);
       if (!useExisting) {
@@ -83271,10 +83576,10 @@ async function copyExampleConfig(nonInteractive) {
   }
   const srcFile = resolve33(examplesDir, `${choice}.yaml`);
   const destFile = resolvePath("~/.switchroom/switchroom.yaml");
-  if (!existsSync56(srcFile)) {
+  if (!existsSync57(srcFile)) {
     throw new ConfigError(`Example config not found: ${choice}.yaml`);
   }
-  mkdirSync31(dirname16(destFile), { recursive: true });
+  mkdirSync32(dirname17(destFile), { recursive: true });
   copyFileSync9(srcFile, destFile);
   console.log(source_default.green(`  Copied ${choice}.yaml -> ${destFile}`));
   console.log(source_default.yellow(`  Edit ${destFile} to customize, then re-run switchroom setup.`));
@@ -83286,10 +83591,10 @@ async function copyExampleConfig(nonInteractive) {
 async function writeDetectedTimezone(destFile, nonInteractive, detect = detectServerTimezone, prompt = ask) {
   const detected = detect();
   if (detected !== undefined && detected !== "UTC" && isValidTimezone(detected)) {
-    const before2 = readFileSync51(destFile, "utf-8");
+    const before2 = readFileSync52(destFile, "utf-8");
     const after2 = setSwitchroomTimezone(before2, detected);
     if (after2 !== before2)
-      writeFileSync26(destFile, after2);
+      writeFileSync27(destFile, after2);
     console.log(source_default.green(`  Detected timezone ${detected} \u2014 wrote switchroom.timezone.`));
     return;
   }
@@ -83307,10 +83612,10 @@ async function writeDetectedTimezone(destFile, nonInteractive, detect = detectSe
     console.error(source_default.yellow(`  \u26a0 "${zone}" is not a valid IANA zone (expected Region/City like ` + '"Australia/Melbourne"). Skipping \u2014 agents will use UTC. ' + "Edit switchroom.timezone in switchroom.yaml by hand."));
     return;
   }
-  const before = readFileSync51(destFile, "utf-8");
+  const before = readFileSync52(destFile, "utf-8");
   const after = setSwitchroomTimezone(before, zone);
   if (after !== before)
-    writeFileSync26(destFile, after);
+    writeFileSync27(destFile, after);
   console.log(source_default.green(`  Wrote switchroom.timezone: ${zone}.`));
 }
 async function stepBotToken(config, nonInteractive) {
@@ -83386,7 +83691,7 @@ async function resolveOrPromptToken(rawToken, label, config, nonInteractive) {
       try {
         const { openVault: openVault2 } = await Promise.resolve().then(() => (init_vault(), exports_vault));
         const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-        if (existsSync56(vaultPath)) {
+        if (existsSync57(vaultPath)) {
           const secrets = openVault2(passphrase, vaultPath);
           const key = rawToken.replace("vault:", "");
           const entry = secrets[key];
@@ -83414,7 +83719,7 @@ async function resolveOrPromptToken(rawToken, label, config, nonInteractive) {
 async function storeTokenInVault(config, vaultRef, token) {
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
   const key = vaultRef.replace("vault:", "");
-  if (!existsSync56(vaultPath)) {
+  if (!existsSync57(vaultPath)) {
     console.log(source_default.gray("  Creating encrypted vault..."));
     let passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
     if (!passphrase) {
@@ -83600,7 +83905,7 @@ async function stepMemoryBackend(config, nonInteractive, switchroomConfigPath) {
   try {
     const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
     const passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
-    if (passphrase && existsSync56(vaultPath)) {
+    if (passphrase && existsSync57(vaultPath)) {
       const existing = getStringSecret(passphrase, vaultPath, "hindsight-api-key");
       if (existing) {
         console.log(source_default.gray("  Note: legacy 'hindsight-api-key' is in your vault but is no longer used. You can remove it with `switchroom vault rm hindsight-api-key`."));
@@ -83816,13 +84121,13 @@ async function stepAutoUnlock(config, switchroomConfigPath, nonInteractive) {
     return;
   }
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync56(vaultPath)) {
+  if (!existsSync57(vaultPath)) {
     console.log(source_default.gray("  Skipping (vault not created yet)."));
     return;
   }
   const credPathRaw = config.vault?.broker?.autoUnlockCredentialPath ?? "~/.switchroom/vault-auto-unlock";
   const credPath = resolvePath(credPathRaw);
-  if (config.vault?.broker?.autoUnlock === true && existsSync56(credPath)) {
+  if (config.vault?.broker?.autoUnlock === true && existsSync57(credPath)) {
     console.log(source_default.green(`  ${STEP_DONE} Already configured (${credPath})`));
     return;
   }
@@ -83888,12 +84193,12 @@ async function stepAutoUnlock(config, switchroomConfigPath, nonInteractive) {
   const choice = await askChoice("  Approval posture", [PASSPHRASE_CHOICE, TELEGRAM_ID_CHOICE]);
   if (choice === TELEGRAM_ID_CHOICE) {
     try {
-      const yamlPath = existsSync56(resolve33(process.cwd(), "switchroom.yaml")) ? resolve33(process.cwd(), "switchroom.yaml") : resolve33(process.cwd(), "switchroom.yml");
-      if (existsSync56(yamlPath)) {
-        const content = readFileSync51(yamlPath, "utf-8");
+      const yamlPath = existsSync57(resolve33(process.cwd(), "switchroom.yaml")) ? resolve33(process.cwd(), "switchroom.yaml") : resolve33(process.cwd(), "switchroom.yml");
+      if (existsSync57(yamlPath)) {
+        const content = readFileSync52(yamlPath, "utf-8");
         const result = insertVaultBrokerApprovalAuth(content, "telegram-id");
         if (result.kind === "rewritten") {
-          writeFileSync26(yamlPath, result.content, "utf-8");
+          writeFileSync27(yamlPath, result.content, "utf-8");
           console.log(source_default.green(`  ${STEP_DONE} Set vault.broker.approvalAuth: telegram-id in ${yamlPath}`));
         } else if (result.kind === "already-set") {
           console.log(source_default.gray("  approvalAuth already set \u2014 leaving it alone."));
@@ -83924,8 +84229,8 @@ async function stepDangerousMode(config, nonInteractive) {
       resolve33(process.cwd(), "switchroom.yml")
     ];
     for (const configPath of configPaths) {
-      if (existsSync56(configPath)) {
-        let content = readFileSync51(configPath, "utf-8");
+      if (existsSync57(configPath)) {
+        let content = readFileSync52(configPath, "utf-8");
         const agentNames = Object.keys(config.agents);
         for (const name of agentNames) {
           const agentPattern = new RegExp(`(^  ${name}:\\s*\\n)`, "m");
@@ -83939,7 +84244,7 @@ async function stepDangerousMode(config, nonInteractive) {
           }
           config.agents[name].dangerous_mode = true;
         }
-        writeFileSync26(configPath, content, "utf-8");
+        writeFileSync27(configPath, content, "utf-8");
         console.log(source_default.green(`  ${STEP_DONE} Enabled dangerous_mode for all agents in ${configPath}`));
         break;
       }
@@ -84055,10 +84360,10 @@ init_source();
 init_loader();
 init_lifecycle();
 init_compose_env();
-import { cpSync as cpSync2, existsSync as existsSync63, mkdirSync as mkdirSync33, readFileSync as readFileSync56, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync28, chownSync as chownSync5 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync64, mkdirSync as mkdirSync34, readFileSync as readFileSync57, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync29, chownSync as chownSync5 } from "node:fs";
 import { spawnSync as spawnSync12 } from "node:child_process";
-import { join as join63, dirname as dirname19, resolve as resolve38 } from "node:path";
-import { homedir as homedir38 } from "node:os";
+import { join as join64, dirname as dirname20, resolve as resolve38 } from "node:path";
+import { homedir as homedir39 } from "node:os";
 
 // src/cli/release-yaml.ts
 var import_yaml19 = __toESM(require_dist(), 1);
@@ -84083,7 +84388,7 @@ init_operator_uid();
 init_atomic();
 
 // src/cli/preflight-mounts.ts
-import { statSync as statSync27 } from "node:fs";
+import { statSync as statSync28 } from "node:fs";
 function parseHostBindSources(composeText) {
   const out = [];
   const FILE_HINT = /\.(ya?ml|db|log|toml|json|token|id)$|\/\.vault-token$|machine-id$|localtime$|vault-auto-unlock$|\/webkite$/;
@@ -84110,7 +84415,7 @@ function parseHostBindSources(composeText) {
   return out;
 }
 function validateBindSources(composeText, deps = {}) {
-  const stat = deps.stat ?? ((p) => statSync27(p));
+  const stat = deps.stat ?? ((p) => statSync28(p));
   const sources = parseHostBindSources(composeText);
   const issues = [];
   const seen = new Set;
@@ -84150,11 +84455,11 @@ ${lines.join(`
 function defaultPersistPin(configPath) {
   return (pin) => {
     const path4 = configPath ?? findConfigFile();
-    const before = readFileSync56(path4, "utf8");
+    const before = readFileSync57(path4, "utf8");
     const after = setReleasePinInConfig(before, pin);
     if (after === before)
       return;
-    writeConfigFileSync(path4, after, statSync28(path4).mode & 511);
+    writeConfigFileSync(path4, after, statSync29(path4).mode & 511);
     try {
       if (typeof process.geteuid === "function" && process.geteuid() === 0) {
         const uid = resolveOperatorUid();
@@ -84164,18 +84469,18 @@ function defaultPersistPin(configPath) {
     } catch {}
   };
 }
-var DEFAULT_COMPOSE_PATH = join63(homedir38(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH = join64(homedir39(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
-  let dir = dirname19(scriptPath);
+  let dir = dirname20(scriptPath);
   for (let i = 0;i < 12; i++) {
-    if (existsSync63(join63(dir, ".git"))) {
+    if (existsSync64(join64(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync56(join63(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync57(join64(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
     }
-    const parent = dirname19(dir);
+    const parent = dirname20(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -84255,7 +84560,7 @@ function planUpdate(opts) {
   steps.push({
     name: "pull-images",
     description: "Pull broker / kernel / agent images from GHCR",
-    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync63(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
+    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync64(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
     run: () => {
       const r = runner("docker", [
         "compose",
@@ -84381,17 +84686,17 @@ function planUpdate(opts) {
         return;
       }
       const source = resolve38(import.meta.dirname, "../../skills");
-      const dest = join63(homedir38(), ".switchroom", "skills", "_bundled");
-      if (!existsSync63(source)) {
+      const dest = join64(homedir39(), ".switchroom", "skills", "_bundled");
+      if (!existsSync64(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
 `);
         return;
       }
       try {
-        if (existsSync63(dest)) {
+        if (existsSync64(dest)) {
           rmSync12(dest, { recursive: true, force: true });
         }
-        mkdirSync33(dirname19(dest), { recursive: true });
+        mkdirSync34(dirname20(dest), { recursive: true });
         cpSync2(source, dest, { recursive: true, dereference: false });
       } catch (err) {
         throw new Error(`sync-bundled-skills failed: ${err.message}`);
@@ -84427,7 +84732,7 @@ function planUpdate(opts) {
     description: "docker compose up -d --remove-orphans (recreates services with new images / compose)",
     run: () => {
       try {
-        const composeText = readFileSync56(composePath, "utf8");
+        const composeText = readFileSync57(composePath, "utf8");
         const pf = validateBindSources(composeText);
         if (!pf.ok)
           throw new Error(formatPreflightError(pf));
@@ -84502,14 +84807,14 @@ function defaultStatusProbe(composePath) {
     } catch {}
     if (scriptPath) {
       try {
-        cliBuiltAt = new Date(statSync28(scriptPath).mtimeMs).toISOString();
+        cliBuiltAt = new Date(statSync29(scriptPath).mtimeMs).toISOString();
       } catch {}
-      let dir = dirname19(scriptPath);
+      let dir = dirname20(scriptPath);
       for (let i = 0;i < 8; i++) {
-        const pkgPath = join63(dir, "package.json");
-        if (existsSync63(pkgPath)) {
+        const pkgPath = join64(dir, "package.json");
+        if (existsSync64(pkgPath)) {
           try {
-            const pkg = JSON.parse(readFileSync56(pkgPath, "utf-8"));
+            const pkg = JSON.parse(readFileSync57(pkgPath, "utf-8"));
             if (typeof pkg.version === "string")
               cliVersion = pkg.version;
           } catch (err) {
@@ -84517,7 +84822,7 @@ function defaultStatusProbe(composePath) {
           }
           break;
         }
-        const parent = dirname19(dir);
+        const parent = dirname20(dir);
         if (parent === dir)
           break;
         dir = parent;
@@ -84530,7 +84835,7 @@ function defaultStatusProbe(composePath) {
     warnings.push("could not resolve CLI version (no package.json found above the resolved script path)");
   }
   const services = [];
-  if (!existsSync63(composePath)) {
+  if (!existsSync64(composePath)) {
     warnings.push(`compose file not found at ${composePath}; service status unknown`);
     return { cliVersion, cliBuiltAt, services, warnings };
   }
@@ -84726,8 +85031,8 @@ function registerUpdateCommand(program3) {
 // src/cli/rollout.ts
 init_helpers();
 import { spawnSync as spawnSync13 } from "node:child_process";
-import { readFileSync as readFileSync57, chownSync as chownSync6, statSync as statSync29 } from "node:fs";
-import { homedir as homedir39 } from "node:os";
+import { readFileSync as readFileSync58, chownSync as chownSync6, statSync as statSync30 } from "node:fs";
+import { homedir as homedir40 } from "node:os";
 init_operator_uid();
 init_atomic();
 init_audit_reader();
@@ -84956,10 +85261,10 @@ function executeRollout(steps, target, deps, execOpts = {}) {
   return { ok: true, rolled, warnings };
 }
 function resolveRollbackTarget(auditLogPath) {
-  const logPath = auditLogPath ?? defaultAuditLogPath2(homedir39());
+  const logPath = auditLogPath ?? defaultAuditLogPath2(homedir40());
   let raw;
   try {
-    raw = readFileSync57(logPath, "utf8");
+    raw = readFileSync58(logPath, "utf8");
   } catch {
     return null;
   }
@@ -85073,11 +85378,11 @@ function registerRolloutCommand(program3) {
       emitPhase: (phase) => process.stdout.write(encodeRolloutPhaseLine(phase) + `
 `),
       persistPin: (pin) => {
-        const before = readFileSync57(configPath, "utf8");
+        const before = readFileSync58(configPath, "utf8");
         const after = setReleasePinInConfig(before, pin);
         if (after === before)
           return;
-        writeConfigFileSync(configPath, after, statSync29(configPath).mode & 511);
+        writeConfigFileSync(configPath, after, statSync30(configPath).mode & 511);
         try {
           if (typeof process.geteuid === "function" && process.geteuid() === 0) {
             const uid = resolveOperatorUid();
@@ -85147,8 +85452,8 @@ init_source();
 init_helpers();
 init_lifecycle();
 import { execSync as execSync4 } from "node:child_process";
-import { existsSync as existsSync64, readFileSync as readFileSync58 } from "node:fs";
-import { dirname as dirname20, join as join64 } from "node:path";
+import { existsSync as existsSync65, readFileSync as readFileSync59 } from "node:fs";
+import { dirname as dirname21, join as join65 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync4("claude --version 2>/dev/null", {
@@ -85198,16 +85503,16 @@ function formatUptime3(timestamp) {
 function locateSwitchroomInstallDir() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const pkgPath = join64(dir, "package.json");
-    if (existsSync64(pkgPath)) {
+    const pkgPath = join65(dir, "package.json");
+    if (existsSync65(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync58(pkgPath, "utf-8"));
-        if (pkg.name === "switchroom" && existsSync64(join64(dir, ".git"))) {
+        const pkg = JSON.parse(readFileSync59(pkgPath, "utf-8"));
+        if (pkg.name === "switchroom" && existsSync65(join65(dir, ".git"))) {
           return dir;
         }
       } catch {}
     }
-    dir = dirname20(dir);
+    dir = dirname21(dir);
   }
   return null;
 }
@@ -85380,18 +85685,18 @@ import { resolve as resolve40 } from "node:path";
 
 // src/agents/session-retention.ts
 import {
-  existsSync as existsSync65,
+  existsSync as existsSync66,
   readdirSync as readdirSync22,
-  statSync as statSync30,
-  unlinkSync as unlinkSync13
+  statSync as statSync31,
+  unlinkSync as unlinkSync14
 } from "node:fs";
-import { join as join65 } from "node:path";
+import { join as join66 } from "node:path";
 var DEFAULT_SESSION_RETENTION_MAX_COUNT = 20;
 var DEFAULT_SESSION_RETENTION_MAX_AGE_DAYS = 30;
 var MIN_KEEP = 2;
 function collectSessionJsonl(claudeConfigDir) {
-  const projects = join65(claudeConfigDir, "projects");
-  if (!existsSync65(projects))
+  const projects = join66(claudeConfigDir, "projects");
+  if (!existsSync66(projects))
     return [];
   const found = [];
   const walk2 = (dir) => {
@@ -85402,10 +85707,10 @@ function collectSessionJsonl(claudeConfigDir) {
       return;
     }
     for (const name of entries) {
-      const full = join65(dir, name);
+      const full = join66(dir, name);
       let st;
       try {
-        st = statSync30(full);
+        st = statSync31(full);
       } catch {
         continue;
       }
@@ -85452,7 +85757,7 @@ function pruneSessionJsonl(claudeConfigDir, opts = {}) {
     if (!eligible)
       continue;
     try {
-      unlinkSync13(f.path);
+      unlinkSync14(f.path);
       deleted++;
     } catch (err) {
       onWarn(`session-retention: could not delete ${f.path}: ${err.message}`);
@@ -85522,18 +85827,18 @@ function registerHandoffCommand(program3) {
 // src/issues/store.ts
 import {
   closeSync as closeSync12,
-  existsSync as existsSync66,
-  mkdirSync as mkdirSync34,
+  existsSync as existsSync67,
+  mkdirSync as mkdirSync35,
   openSync as openSync12,
   readdirSync as readdirSync23,
-  readFileSync as readFileSync59,
+  readFileSync as readFileSync60,
   renameSync as renameSync15,
-  statSync as statSync31,
-  unlinkSync as unlinkSync14,
-  writeFileSync as writeFileSync27,
+  statSync as statSync32,
+  unlinkSync as unlinkSync15,
+  writeFileSync as writeFileSync28,
   writeSync as writeSync9
 } from "node:fs";
-import { join as join66 } from "node:path";
+import { join as join67 } from "node:path";
 import { randomBytes as randomBytes12 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
 
@@ -85931,12 +86236,12 @@ function redactedMarker(ruleId) {
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path4 = join66(stateDir, ISSUES_FILE);
-  if (!existsSync66(path4))
+  const path4 = join67(stateDir, ISSUES_FILE);
+  if (!existsSync67(path4))
     return [];
   let raw;
   try {
-    raw = readFileSync59(path4, "utf-8");
+    raw = readFileSync60(path4, "utf-8");
   } catch {
     return [];
   }
@@ -86009,7 +86314,7 @@ function record(stateDir, input, nowFn = Date.now) {
   });
 }
 function resolve41(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync66(join66(stateDir, ISSUES_FILE)))
+  if (!existsSync67(join67(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -86027,7 +86332,7 @@ function resolve41(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function resolveAllBySource(stateDir, source, nowFn = Date.now) {
-  if (!existsSync66(join66(stateDir, ISSUES_FILE)))
+  if (!existsSync67(join67(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -86045,7 +86350,7 @@ function resolveAllBySource(stateDir, source, nowFn = Date.now) {
   });
 }
 function prune(stateDir, opts = {}) {
-  if (!existsSync66(join66(stateDir, ISSUES_FILE)))
+  if (!existsSync67(join67(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -86075,16 +86380,16 @@ function prune(stateDir, opts = {}) {
   });
 }
 function ensureDir(stateDir) {
-  mkdirSync34(stateDir, { recursive: true });
+  mkdirSync35(stateDir, { recursive: true });
 }
 function writeAll(stateDir, events) {
-  const path4 = join66(stateDir, ISSUES_FILE);
+  const path4 = join67(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path4}.tmp-${process.pid}-${randomBytes12(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
-  writeFileSync27(tmp, body, "utf-8");
+  writeFileSync28(tmp, body, "utf-8");
   renameSync15(tmp, path4);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
@@ -86100,11 +86405,11 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath = join66(stateDir, entry);
+    const tmpPath = join67(stateDir, entry);
     try {
-      const stat = statSync31(tmpPath);
+      const stat = statSync32(tmpPath);
       if (stat.mtimeMs < cutoff) {
-        unlinkSync14(tmpPath);
+        unlinkSync15(tmpPath);
       }
     } catch {}
   }
@@ -86112,7 +86417,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join66(stateDir, ISSUES_LOCK);
+  const lockPath = join67(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -86140,27 +86445,27 @@ function withLock(stateDir, fn) {
       closeSync12(fd);
     } catch {}
     try {
-      unlinkSync14(lockPath);
+      unlinkSync15(lockPath);
     } catch {}
   }
 }
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync59(lockPath, "utf-8").trim();
+    pidStr = readFileSync60(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
   const pid = Number(pidStr);
   if (!Number.isFinite(pid) || pid <= 0) {
     try {
-      unlinkSync14(lockPath);
+      unlinkSync15(lockPath);
     } catch {}
     return true;
   }
   if (pid === process.pid) {
     try {
-      unlinkSync14(lockPath);
+      unlinkSync15(lockPath);
     } catch {}
     return true;
   }
@@ -86175,7 +86480,7 @@ function tryStealStaleLock(lockPath) {
       return false;
   }
   try {
-    unlinkSync14(lockPath);
+    unlinkSync15(lockPath);
   } catch {}
   return true;
 }
@@ -86395,21 +86700,21 @@ function relTime(deltaMs) {
 
 // src/cli/deps.ts
 init_source();
-import { existsSync as existsSync69 } from "node:fs";
-import { homedir as homedir42 } from "node:os";
-import { join as join69, resolve as resolve42 } from "node:path";
+import { existsSync as existsSync70 } from "node:fs";
+import { homedir as homedir43 } from "node:os";
+import { join as join70, resolve as resolve42 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash12 } from "node:crypto";
 import {
-  existsSync as existsSync67,
-  mkdirSync as mkdirSync35,
-  readFileSync as readFileSync60,
+  existsSync as existsSync68,
+  mkdirSync as mkdirSync36,
+  readFileSync as readFileSync61,
   rmSync as rmSync13,
-  writeFileSync as writeFileSync28
+  writeFileSync as writeFileSync29
 } from "node:fs";
-import { dirname as dirname21, join as join67 } from "node:path";
-import { homedir as homedir40 } from "node:os";
+import { dirname as dirname22, join as join68 } from "node:path";
+import { homedir as homedir41 } from "node:os";
 import { execFileSync as execFileSync19 } from "node:child_process";
 
 class PythonEnvError extends Error {
@@ -86421,26 +86726,26 @@ class PythonEnvError extends Error {
   }
 }
 function defaultPythonCacheRoot() {
-  return join67(homedir40(), ".switchroom", "deps", "python");
+  return join68(homedir41(), ".switchroom", "deps", "python");
 }
 function hashFile(path4) {
-  return createHash12("sha256").update(readFileSync60(path4)).digest("hex");
+  return createHash12("sha256").update(readFileSync61(path4)).digest("hex");
 }
 function ensurePythonEnv(opts) {
   const { skillName, requirementsPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultPythonCacheRoot();
   const hostPython = opts.pythonBin ?? "python3";
-  if (!existsSync67(requirementsPath)) {
+  if (!existsSync68(requirementsPath)) {
     throw new PythonEnvError(`requirements file not found: ${requirementsPath}`);
   }
-  const venvDir = join67(cacheRoot, skillName);
-  const stampPath = join67(venvDir, ".requirements.sha256");
-  const binDir = join67(venvDir, "bin");
-  const pythonBin = join67(binDir, "python");
-  const pipBin = join67(binDir, "pip");
+  const venvDir = join68(cacheRoot, skillName);
+  const stampPath = join68(venvDir, ".requirements.sha256");
+  const binDir = join68(venvDir, "bin");
+  const pythonBin = join68(binDir, "python");
+  const pipBin = join68(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
-  if (!force && existsSync67(stampPath) && existsSync67(pythonBin)) {
-    const existingHash = readFileSync60(stampPath, "utf8").trim();
+  if (!force && existsSync68(stampPath) && existsSync68(pythonBin)) {
+    const existingHash = readFileSync61(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -86452,10 +86757,10 @@ function ensurePythonEnv(opts) {
       };
     }
   }
-  if (existsSync67(venvDir)) {
+  if (existsSync68(venvDir)) {
     rmSync13(venvDir, { recursive: true, force: true });
   }
-  mkdirSync35(dirname21(venvDir), { recursive: true });
+  mkdirSync36(dirname22(venvDir), { recursive: true });
   try {
     execFileSync19(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
@@ -86474,7 +86779,7 @@ function ensurePythonEnv(opts) {
     const e = err;
     throw new PythonEnvError(`Failed to install requirements for skill "${skillName}": ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync28(stampPath, targetHash + `
+  writeFileSync29(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -86490,14 +86795,14 @@ function ensurePythonEnv(opts) {
 import { createHash as createHash13 } from "node:crypto";
 import {
   copyFileSync as copyFileSync10,
-  existsSync as existsSync68,
-  mkdirSync as mkdirSync36,
-  readFileSync as readFileSync61,
+  existsSync as existsSync69,
+  mkdirSync as mkdirSync37,
+  readFileSync as readFileSync62,
   rmSync as rmSync14,
-  writeFileSync as writeFileSync29
+  writeFileSync as writeFileSync30
 } from "node:fs";
-import { dirname as dirname22, join as join68 } from "node:path";
-import { homedir as homedir41 } from "node:os";
+import { dirname as dirname23, join as join69 } from "node:path";
+import { homedir as homedir42 } from "node:os";
 import { execFileSync as execFileSync20 } from "node:child_process";
 
 class NodeEnvError extends Error {
@@ -86520,23 +86825,23 @@ var LOCKFILES_FOR = {
   npm: ["package-lock.json"]
 };
 function defaultNodeCacheRoot() {
-  return join68(homedir41(), ".switchroom", "deps", "node");
+  return join69(homedir42(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
-  const sourceDir = dirname22(packageJsonPath);
+  const sourceDir = dirname23(packageJsonPath);
   const hasher = createHash13("sha256");
   hasher.update(`package.json
 `);
-  hasher.update(readFileSync61(packageJsonPath));
+  hasher.update(readFileSync62(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
-    const lockPath = join68(sourceDir, lockName);
-    if (existsSync68(lockPath)) {
+    const lockPath = join69(sourceDir, lockName);
+    if (existsSync69(lockPath)) {
       hasher.update(`
 `);
       hasher.update(lockName);
       hasher.update(`
 `);
-      hasher.update(readFileSync61(lockPath));
+      hasher.update(readFileSync62(lockPath));
     }
   }
   return hasher.digest("hex");
@@ -86545,17 +86850,17 @@ function ensureNodeEnv(opts) {
   const { skillName, packageJsonPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultNodeCacheRoot();
   const installer = opts.installer ?? "bun";
-  if (!existsSync68(packageJsonPath)) {
+  if (!existsSync69(packageJsonPath)) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
-  const sourceDir = dirname22(packageJsonPath);
-  const envDir = join68(cacheRoot, skillName);
-  const stampPath = join68(envDir, ".package.sha256");
-  const nodeModulesDir = join68(envDir, "node_modules");
-  const binDir = join68(nodeModulesDir, ".bin");
+  const sourceDir = dirname23(packageJsonPath);
+  const envDir = join69(cacheRoot, skillName);
+  const stampPath = join69(envDir, ".package.sha256");
+  const nodeModulesDir = join69(envDir, "node_modules");
+  const binDir = join69(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
-  if (!force && existsSync68(stampPath) && existsSync68(nodeModulesDir)) {
-    const existingHash = readFileSync61(stampPath, "utf8").trim();
+  if (!force && existsSync69(stampPath) && existsSync69(nodeModulesDir)) {
+    const existingHash = readFileSync62(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -86566,16 +86871,16 @@ function ensureNodeEnv(opts) {
       };
     }
   }
-  if (existsSync68(envDir)) {
+  if (existsSync69(envDir)) {
     rmSync14(envDir, { recursive: true, force: true });
   }
-  mkdirSync36(envDir, { recursive: true });
-  copyFileSync10(packageJsonPath, join68(envDir, "package.json"));
+  mkdirSync37(envDir, { recursive: true });
+  copyFileSync10(packageJsonPath, join69(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
-    const lockPath = join68(sourceDir, lockName);
-    if (existsSync68(lockPath)) {
-      copyFileSync10(lockPath, join68(envDir, lockName));
+    const lockPath = join69(sourceDir, lockName);
+    if (existsSync69(lockPath)) {
+      copyFileSync10(lockPath, join69(envDir, lockName));
       copiedLockfile = true;
     }
   }
@@ -86591,7 +86896,7 @@ function ensureNodeEnv(opts) {
     const e = err;
     throw new NodeEnvError(`Failed to install node deps for skill "${skillName}" with ${installer}: ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync29(stampPath, targetHash + `
+  writeFileSync30(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -86604,28 +86909,28 @@ function ensureNodeEnv(opts) {
 
 // src/cli/deps.ts
 function builtinSkillsRoot() {
-  return resolve42(homedir42(), ".switchroom/skills/_bundled");
+  return resolve42(homedir43(), ".switchroom/skills/_bundled");
 }
 function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
   deps.command("rebuild <skill>").description("Rebuild the Python venv and/or Node node_modules cache for a skill").option("-p, --python", "Rebuild only the Python env").option("-n, --node", "Rebuild only the Node env").action(async (skill, opts) => {
     const skillsRoot = builtinSkillsRoot();
-    if (!existsSync69(skillsRoot)) {
+    if (!existsSync70(skillsRoot)) {
       console.error(source_default.red(`Bundled skills pool dir not found at ${skillsRoot} \u2014 run \`switchroom update\` to install it.`));
       process.exit(1);
     }
-    const skillDir = join69(skillsRoot, skill);
-    if (!existsSync69(skillDir)) {
+    const skillDir = join70(skillsRoot, skill);
+    if (!existsSync70(skillDir)) {
       console.error(source_default.red(`Unknown skill: ${skill} (no dir at ${skillDir})`));
       process.exit(1);
     }
-    const requirementsPath = join69(skillDir, "requirements.txt");
-    const packageJsonPath = join69(skillDir, "package.json");
-    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync69(requirementsPath));
-    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync69(packageJsonPath));
+    const requirementsPath = join70(skillDir, "requirements.txt");
+    const packageJsonPath = join70(skillDir, "package.json");
+    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync70(requirementsPath));
+    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync70(packageJsonPath));
     let did = 0;
     if (wantPython) {
-      if (!existsSync69(requirementsPath)) {
+      if (!existsSync70(requirementsPath)) {
         console.error(source_default.red(`Skill "${skill}" has no requirements.txt at ${requirementsPath}`));
         process.exit(1);
       }
@@ -86649,7 +86954,7 @@ function registerDepsCommand(program3) {
       }
     }
     if (wantNode) {
-      if (!existsSync69(packageJsonPath)) {
+      if (!existsSync70(packageJsonPath)) {
         console.error(source_default.red(`Skill "${skill}" has no package.json at ${packageJsonPath}`));
         process.exit(1);
       }
@@ -86682,7 +86987,7 @@ function registerDepsCommand(program3) {
 // src/cli/workspace.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync70 } from "node:fs";
+import { existsSync as existsSync71 } from "node:fs";
 import { resolve as resolve43, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync14 } from "node:child_process";
 
@@ -87459,7 +87764,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve43(dir, ".git");
-    if (!existsSync70(gitDir)) {
+    if (!existsSync71(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
       return;
@@ -87513,7 +87818,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve43(dir, ".git");
-    if (!existsSync70(gitDir)) {
+    if (!existsSync71(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
       return;
@@ -87538,7 +87843,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve43(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync70(dir)) {
+  if (!existsSync71(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
 `);
     return;
@@ -87574,8 +87879,8 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync11, existsSync as existsSync71, readFileSync as readFileSync62, writeFileSync as writeFileSync30 } from "node:fs";
-import { join as join70, resolve as resolve44 } from "node:path";
+import { copyFileSync as copyFileSync11, existsSync as existsSync72, readFileSync as readFileSync63, writeFileSync as writeFileSync31 } from "node:fs";
+import { join as join71, resolve as resolve44 } from "node:path";
 init_scaffold();
 init_profiles();
 init_schema();
@@ -87592,7 +87897,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve44(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync71(workspaceDir)) {
+  if (!existsSync72(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
     process.exit(1);
   }
@@ -87601,7 +87906,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
     profileName,
     profilePath,
     workspaceDir,
-    soulPath: join70(workspaceDir, "SOUL.md"),
+    soulPath: join71(workspaceDir, "SOUL.md"),
     soul: merged.soul
   };
 }
@@ -87618,11 +87923,11 @@ function registerSoulCommand(program3) {
     const t = resolveSoulTargetOrExit(program3, agentName);
     if (!t)
       return;
-    if (!existsSync71(t.soulPath)) {
+    if (!existsSync72(t.soulPath)) {
       console.error(`soul: ${t.soulPath} does not exist yet \u2014 run ` + `\`switchroom soul reset ${agentName}\` to seed it.`);
       process.exit(1);
     }
-    process.stdout.write(readFileSync62(t.soulPath, "utf-8"));
+    process.stdout.write(readFileSync63(t.soulPath, "utf-8"));
   }));
   cmd.command("reset <agent>").description("Re-seed SOUL.md from the agent's current profile " + "(backs the existing file up to SOUL.md.bak first)").option("-y, --yes", "Skip the confirmation prompt").action(withConfigError(async (agentName, opts) => {
     const t = resolveSoulTargetOrExit(program3, agentName);
@@ -87633,7 +87938,7 @@ function registerSoulCommand(program3) {
       console.error(`soul: profile "${t.profileName}" ships no SOUL.md.hbs \u2014 ` + `nothing to re-seed from.`);
       process.exit(1);
     }
-    const exists = existsSync71(t.soulPath);
+    const exists = existsSync72(t.soulPath);
     if (exists && !opts.yes) {
       if (!isInteractive()) {
         console.error(`soul: ${t.soulPath} already exists. Re-run with --yes to ` + `replace it (the current file is backed up to SOUL.md.bak).`);
@@ -87648,12 +87953,12 @@ function registerSoulCommand(program3) {
     let backupPath;
     if (exists) {
       backupPath = `${t.soulPath}.bak`;
-      if (existsSync71(backupPath)) {
+      if (existsSync72(backupPath)) {
         backupPath = `${t.soulPath}.bak.${Date.now()}`;
       }
       copyFileSync11(t.soulPath, backupPath);
     }
-    writeFileSync30(t.soulPath, content, "utf-8");
+    writeFileSync31(t.soulPath, content, "utf-8");
     if (backupPath) {
       console.log(`soul: re-seeded ${agentName}'s SOUL.md from profile ` + `"${t.profileName}".
 ` + `      Previous version saved to ${backupPath}`);
@@ -87667,8 +87972,8 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync72, readFileSync as readFileSync63, readdirSync as readdirSync24, statSync as statSync32 } from "node:fs";
-import { resolve as resolve45, join as join71 } from "node:path";
+import { existsSync as existsSync73, readFileSync as readFileSync64, readdirSync as readdirSync24, statSync as statSync33 } from "node:fs";
+import { resolve as resolve45, join as join72 } from "node:path";
 import { createHash as createHash14 } from "node:crypto";
 init_merge();
 init_hindsight2();
@@ -87679,11 +87984,11 @@ function estimateTokens(bytes) {
   return Math.round(bytes / 3.7);
 }
 function readMcpServerNames(agentDir) {
-  const mcpPath = join71(agentDir, ".mcp.json");
-  if (!existsSync72(mcpPath))
+  const mcpPath = join72(agentDir, ".mcp.json");
+  if (!existsSync73(mcpPath))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync63(mcpPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync64(mcpPath, "utf-8"));
     return Object.keys(parsed.mcpServers ?? {});
   } catch {
     return null;
@@ -87693,8 +87998,8 @@ function sha256(content) {
   return createHash14("sha256").update(content).digest("hex").slice(0, 16);
 }
 function findLatestTranscriptJsonl(claudeConfigDir) {
-  const projectsDir = join71(claudeConfigDir, "projects");
-  if (!existsSync72(projectsDir))
+  const projectsDir = join72(claudeConfigDir, "projects");
+  if (!existsSync73(projectsDir))
     return;
   try {
     const entries = readdirSync24(projectsDir, { withFileTypes: true });
@@ -87702,11 +88007,11 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const projectPath = join71(projectsDir, entry.name);
-      const transcriptPath = join71(projectPath, "transcript.jsonl");
-      if (!existsSync72(transcriptPath))
+      const projectPath = join72(projectsDir, entry.name);
+      const transcriptPath = join72(projectPath, "transcript.jsonl");
+      if (!existsSync73(transcriptPath))
         continue;
-      const stat3 = statSync32(transcriptPath);
+      const stat3 = statSync33(transcriptPath);
       if (!latest || stat3.mtimeMs > latest.mtime) {
         latest = { path: transcriptPath, mtime: stat3.mtimeMs };
       }
@@ -87718,7 +88023,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
 }
 function extractLatestUserMessage(transcriptPath) {
   try {
-    const content = readFileSync63(transcriptPath, "utf-8");
+    const content = readFileSync64(transcriptPath, "utf-8");
     const lines = content.trim().split(`
 `).filter(Boolean);
     for (let i = lines.length - 1;i >= 0; i--) {
@@ -87767,16 +88072,16 @@ function registerDebugCommand(program3) {
     }
     const agentsDir = resolveAgentsDir(config);
     const agentDir = resolve45(agentsDir, agentName);
-    if (!existsSync72(agentDir)) {
+    if (!existsSync73(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
     }
     const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-    const claudeConfigDir = join71(agentDir, ".claude");
-    const claudeMdPath = join71(agentDir, "CLAUDE.md");
-    const soulMdPath = join71(agentDir, "SOUL.md");
-    const workspaceSoulMdPath = join71(workspaceDir, "SOUL.md");
-    const handoffPath = join71(agentDir, ".handoff.md");
+    const claudeConfigDir = join72(agentDir, ".claude");
+    const claudeMdPath = join72(agentDir, "CLAUDE.md");
+    const soulMdPath = join72(agentDir, "SOUL.md");
+    const workspaceSoulMdPath = join72(workspaceDir, "SOUL.md");
+    const handoffPath = join72(agentDir, ".handoff.md");
     const lastN = parseInt(opts.last, 10);
     if (isNaN(lastN) || lastN < 1) {
       console.error("--last must be a positive integer");
@@ -87822,7 +88127,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Append System Prompt (per-session) ===
 `);
-    const handoffContent = existsSync72(handoffPath) ? readFileSync63(handoffPath, "utf-8") : "";
+    const handoffContent = existsSync73(handoffPath) ? readFileSync64(handoffPath, "utf-8") : "";
     if (handoffContent.trim().length > 0) {
       console.log(`-- Handoff Briefing (${formatBytes(handoffContent.length)}) --`);
       console.log(handoffContent);
@@ -87833,7 +88138,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== CLAUDE.md (auto-loaded by Claude Code) ===
 `);
-    const claudeMdContent = existsSync72(claudeMdPath) ? readFileSync63(claudeMdPath, "utf-8") : "";
+    const claudeMdContent = existsSync73(claudeMdPath) ? readFileSync64(claudeMdPath, "utf-8") : "";
     if (claudeMdContent.trim().length > 0) {
       console.log(`(${formatBytes(claudeMdContent.length)})`);
       console.log(claudeMdContent);
@@ -87844,7 +88149,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Persona (SOUL.md) ===
 `);
-    const soulMdContent = existsSync72(soulMdPath) ? readFileSync63(soulMdPath, "utf-8") : existsSync72(workspaceSoulMdPath) ? readFileSync63(workspaceSoulMdPath, "utf-8") : "";
+    const soulMdContent = existsSync73(soulMdPath) ? readFileSync64(soulMdPath, "utf-8") : existsSync73(workspaceSoulMdPath) ? readFileSync64(workspaceSoulMdPath, "utf-8") : "";
     if (soulMdContent.trim().length > 0) {
       console.log(`(${formatBytes(soulMdContent.length)})`);
       console.log(soulMdContent);
@@ -87905,11 +88210,11 @@ function registerDebugCommand(program3) {
     const soulMdBytes = soulMdContent.length;
     const perTurnBytes = dynamicResult.concatenated.length;
     const userBytes = userMessage?.text.length ?? 0;
-    const fleetDir = join71(agentsDir, "..", "fleet");
-    const fleetInvPath = join71(fleetDir, "switchroom-invariants.md");
-    const fleetClaudePath = join71(fleetDir, "CLAUDE.md");
-    const fleetInvBytes = existsSync72(fleetInvPath) ? readFileSync63(fleetInvPath, "utf-8").length : 0;
-    const fleetClaudeBytes = existsSync72(fleetClaudePath) ? readFileSync63(fleetClaudePath, "utf-8").length : 0;
+    const fleetDir = join72(agentsDir, "..", "fleet");
+    const fleetInvPath = join72(fleetDir, "switchroom-invariants.md");
+    const fleetClaudePath = join72(fleetDir, "CLAUDE.md");
+    const fleetInvBytes = existsSync73(fleetInvPath) ? readFileSync64(fleetInvPath, "utf-8").length : 0;
+    const fleetClaudeBytes = existsSync73(fleetClaudePath) ? readFileSync64(fleetClaudePath, "utf-8").length : 0;
     const fleetBytes = fleetInvBytes + fleetClaudeBytes;
     const totalBytes = stableBytes + perSessionBytes + claudeMdBytes + fleetBytes + perTurnBytes + userBytes;
     console.log(`Stable prefix:     ${formatBytes(stableBytes).padEnd(20)} (cache-hot; includes SOUL.md ${soulMdBytes.toLocaleString()}B)`);
@@ -87942,44 +88247,44 @@ init_source();
 
 // src/worktree/claim.ts
 import { execFileSync as execFileSync21 } from "node:child_process";
-import { closeSync as closeSync13, mkdirSync as mkdirSync38, openSync as openSync13, existsSync as existsSync74, unlinkSync as unlinkSync16 } from "node:fs";
-import { join as join73, resolve as resolve47 } from "node:path";
-import { homedir as homedir44 } from "node:os";
+import { closeSync as closeSync13, mkdirSync as mkdirSync39, openSync as openSync13, existsSync as existsSync75, unlinkSync as unlinkSync17 } from "node:fs";
+import { join as join74, resolve as resolve47 } from "node:path";
+import { homedir as homedir45 } from "node:os";
 import { randomBytes as randomBytes13 } from "node:crypto";
 
 // src/worktree/registry.ts
 import {
-  mkdirSync as mkdirSync37,
-  writeFileSync as writeFileSync31,
-  readFileSync as readFileSync64,
+  mkdirSync as mkdirSync38,
+  writeFileSync as writeFileSync32,
+  readFileSync as readFileSync65,
   readdirSync as readdirSync25,
-  unlinkSync as unlinkSync15,
-  existsSync as existsSync73,
+  unlinkSync as unlinkSync16,
+  existsSync as existsSync74,
   renameSync as renameSync16
 } from "node:fs";
-import { join as join72, resolve as resolve46 } from "node:path";
-import { homedir as homedir43 } from "node:os";
+import { join as join73, resolve as resolve46 } from "node:path";
+import { homedir as homedir44 } from "node:os";
 function registryDir() {
-  return resolve46(process.env.SWITCHROOM_WORKTREE_DIR ?? join72(homedir43(), ".switchroom", "worktrees"));
+  return resolve46(process.env.SWITCHROOM_WORKTREE_DIR ?? join73(homedir44(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join72(registryDir(), `${id}.json`);
+  return join73(registryDir(), `${id}.json`);
 }
 function ensureDir2() {
-  mkdirSync37(registryDir(), { recursive: true });
+  mkdirSync38(registryDir(), { recursive: true });
 }
 function writeRecord(record2) {
   ensureDir2();
   const target = recordPath(record2.id);
   const tmp = `${target}.tmp${process.pid}`;
-  writeFileSync31(tmp, JSON.stringify(record2, null, 2) + `
+  writeFileSync32(tmp, JSON.stringify(record2, null, 2) + `
 `, { mode: 384 });
   renameSync16(tmp, target);
 }
 function readRecord(id) {
   const path7 = recordPath(id);
   try {
-    const raw = readFileSync64(path7, "utf8");
+    const raw = readFileSync65(path7, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -87988,7 +88293,7 @@ function readRecord(id) {
 function deleteRecord(id) {
   const path7 = recordPath(id);
   try {
-    unlinkSync15(path7);
+    unlinkSync16(path7);
   } catch {}
 }
 function listRecords() {
@@ -88012,9 +88317,9 @@ function countByRepo(repoPath) {
 // src/worktree/claim.ts
 function acquireRepoLock(repoPath) {
   const lockDir = registryDir();
-  mkdirSync38(lockDir, { recursive: true });
+  mkdirSync39(lockDir, { recursive: true });
   const lockName = repoPath.replace(/[^A-Za-z0-9]/g, "_");
-  const lockPath = join73(lockDir, `.lock-${lockName}`);
+  const lockPath = join74(lockDir, `.lock-${lockName}`);
   const deadline = Date.now() + 5000;
   let fd = null;
   while (fd === null) {
@@ -88035,13 +88340,13 @@ function acquireRepoLock(repoPath) {
       closeSync13(fd);
     } catch {}
     try {
-      unlinkSync16(lockPath);
+      unlinkSync17(lockPath);
     } catch {}
   };
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve47(process.env.SWITCHROOM_WORKTREE_BASE ?? join73(homedir44(), ".switchroom", "worktree-checkouts"));
+  return resolve47(process.env.SWITCHROOM_WORKTREE_BASE ?? join74(homedir45(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
   return randomBytes13(4).toString("hex");
@@ -88063,12 +88368,12 @@ function resolveRepoPath(repo, codeRepos) {
 }
 function expandHome(p) {
   if (p.startsWith("~/"))
-    return join73(homedir44(), p.slice(2));
+    return join74(homedir45(), p.slice(2));
   return p;
 }
 async function claimWorktree(input, codeRepos) {
   const repoPath = resolveRepoPath(input.repo, codeRepos);
-  if (!existsSync74(repoPath)) {
+  if (!existsSync75(repoPath)) {
     throw new Error(`Repository path does not exist: ${repoPath}`);
   }
   let concurrencyCap = DEFAULT_CONCURRENCY;
@@ -88090,8 +88395,8 @@ async function claimWorktree(input, codeRepos) {
     const taskSuffix = input.taskName ? sanitizeTaskName(input.taskName) : "task";
     branch = `task/${taskSuffix}-${id}`;
     const baseDir = worktreesBaseDir();
-    mkdirSync38(baseDir, { recursive: true });
-    worktreePath = join73(baseDir, `${id}-${taskSuffix}`);
+    mkdirSync39(baseDir, { recursive: true });
+    worktreePath = join74(baseDir, `${id}-${taskSuffix}`);
     const ambientOwner = process.env.SWITCHROOM_AGENT_NAME;
     const ownerAgent = input.ownerAgent ?? (ambientOwner != null && ambientOwner !== "" ? ambientOwner : undefined);
     const now = new Date().toISOString();
@@ -88124,7 +88429,7 @@ async function claimWorktree(input, codeRepos) {
 
 // src/worktree/release.ts
 import { execFileSync as execFileSync22 } from "node:child_process";
-import { existsSync as existsSync75 } from "node:fs";
+import { existsSync as existsSync76 } from "node:fs";
 function releaseWorktree(input) {
   const { id } = input;
   const record2 = readRecord(id);
@@ -88132,7 +88437,7 @@ function releaseWorktree(input) {
     return { released: true };
   }
   let gitSuccess = true;
-  if (existsSync75(record2.path)) {
+  if (existsSync76(record2.path)) {
     try {
       execFileSync22("git", ["worktree", "remove", "--force", record2.path], {
         cwd: record2.repo,
@@ -88171,7 +88476,7 @@ function listWorktrees() {
 
 // src/worktree/reaper.ts
 import { execFileSync as execFileSync23 } from "node:child_process";
-import { existsSync as existsSync76 } from "node:fs";
+import { existsSync as existsSync77 } from "node:fs";
 var STALE_THRESHOLD_MS = 10 * 60 * 1000;
 function isPathInUse(path7) {
   try {
@@ -88198,7 +88503,7 @@ function hasUncommittedChanges(repoPath, worktreePath) {
 function reapRecord(record2) {
   const { id, path: path7, repo, branch, ownerAgent } = record2;
   let warning = null;
-  if (existsSync76(path7)) {
+  if (existsSync77(path7)) {
     if (hasUncommittedChanges(repo, path7)) {
       warning = `[worktree-reaper] Reaped worktree with uncommitted changes: ` + `id=${id} branch=${branch} agent=${ownerAgent ?? "unknown"} path=${path7}`;
     }
@@ -88219,7 +88524,7 @@ function runReaper(nowMs) {
   const warnings = [];
   for (const record2 of records) {
     const heartbeatAge = now - new Date(record2.heartbeatAt).getTime();
-    const worktreeExists = existsSync76(record2.path);
+    const worktreeExists = existsSync77(record2.path);
     if (!worktreeExists) {
       deleteRecord(record2.id);
       reaped.push(record2.id);
@@ -88239,16 +88544,16 @@ function runReaper(nowMs) {
 // src/worktree/gc.ts
 import { execFileSync as execFileSync24 } from "node:child_process";
 import {
-  existsSync as existsSync77,
-  readFileSync as readFileSync65,
+  existsSync as existsSync78,
+  readFileSync as readFileSync66,
   readdirSync as readdirSync26,
-  statSync as statSync33,
+  statSync as statSync34,
   renameSync as renameSync17,
-  mkdirSync as mkdirSync39,
+  mkdirSync as mkdirSync40,
   rmSync as rmSync15
 } from "node:fs";
-import { homedir as homedir45 } from "node:os";
-import { join as join74, resolve as resolve48 } from "node:path";
+import { homedir as homedir46 } from "node:os";
+import { join as join75, resolve as resolve48 } from "node:path";
 function parseGitdirPointer(dotGitFileContents) {
   const m = /^gitdir:\s*(.+?)\s*$/m.exec(dotGitFileContents);
   return m ? m[1] : null;
@@ -88363,17 +88668,17 @@ function defaultPrSignal(repo, branch, exec) {
   }
 }
 function trashRoot() {
-  return resolve48(process.env.SWITCHROOM_WORKTREE_TRASH ?? join74(homedir45(), ".switchroom", "worktree-gc-trash"));
+  return resolve48(process.env.SWITCHROOM_WORKTREE_TRASH ?? join75(homedir46(), ".switchroom", "worktree-gc-trash"));
 }
 function planGc(roots, deps = {}) {
-  const exists = deps.existsSync ?? existsSync77;
+  const exists = deps.existsSync ?? existsSync78;
   const readDir = deps.readDir ?? ((p) => readdirSync26(p));
-  const readFile4 = deps.readFile ?? ((p) => readFileSync65(p, "utf8"));
-  const stat3 = deps.stat ?? ((p) => statSync33(p));
+  const readFile4 = deps.readFile ?? ((p) => readFileSync66(p, "utf8"));
+  const stat3 = deps.stat ?? ((p) => statSync34(p));
   const exec = deps.exec ?? defaultExec;
   const prSignal = deps.prSignal ?? ((repo, branch) => defaultPrSignal(repo, branch, exec));
   const stamp = deps.dateStamp ?? "undated";
-  const trash = join74(trashRoot(), stamp);
+  const trash = join75(trashRoot(), stamp);
   let claimed;
   try {
     claimed = new Set(listRecords().map((r) => resolve48(r.path)));
@@ -88409,10 +88714,10 @@ function planGc(roots, deps = {}) {
       continue;
     }
     for (const name of entries) {
-      const dir = join74(root, name);
+      const dir = join75(root, name);
       if (isEphemeralPath(dir))
         continue;
-      const dotGit = join74(dir, ".git");
+      const dotGit = join75(dir, ".git");
       if (!exists(dotGit))
         continue;
       let st;
@@ -88441,7 +88746,7 @@ function planGc(roots, deps = {}) {
       ownerRepos.add(repoRoot);
       if (exists(ptr))
         continue;
-      orphans.push({ dir, owner: repoRoot, dest: join74(trash, name) });
+      orphans.push({ dir, owner: repoRoot, dest: join75(trash, name) });
     }
   }
   const registered = [];
@@ -88496,7 +88801,7 @@ function planGc(roots, deps = {}) {
 }
 function applyGc(plan, deps = {}) {
   const exec = deps.exec ?? defaultExec;
-  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync39(p, { recursive: true }));
+  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync40(p, { recursive: true }));
   const move = deps.move ?? ((src, dest) => {
     try {
       renameSync17(src, dest);
@@ -88545,14 +88850,14 @@ function selectPurgeTargets(entries, olderThanDays) {
   return entries.filter((e) => e.ageDays >= olderThanDays).map((e) => e.path);
 }
 function listTrashEntries(nowMs, deps = {}) {
-  const exists = deps.existsSync ?? existsSync77;
+  const exists = deps.existsSync ?? existsSync78;
   const readDir = deps.readDir ?? ((p) => readdirSync26(p));
   const root = trashRoot();
   if (!exists(root))
     return [];
   const out = [];
   for (const stamp of readDir(root)) {
-    const stampDir = join74(root, stamp);
+    const stampDir = join75(root, stamp);
     let names;
     try {
       names = readDir(stampDir);
@@ -88560,10 +88865,10 @@ function listTrashEntries(nowMs, deps = {}) {
       continue;
     }
     for (const name of names) {
-      const p = join74(stampDir, name);
+      const p = join75(stampDir, name);
       let mtimeMs = nowMs;
       try {
-        mtimeMs = statSync33(p).mtimeMs;
+        mtimeMs = statSync34(p).mtimeMs;
       } catch {}
       out.push({ path: p, ageDays: (nowMs - mtimeMs) / 86400000 });
     }
@@ -88584,7 +88889,7 @@ function purgeTrash(paths) {
   return { deleted, errors: errors2 };
 }
 function defaultRoots() {
-  return [join74(homedir45(), "code")];
+  return [join75(homedir46(), "code")];
 }
 
 // src/cli/worktree.ts
@@ -88773,12 +89078,12 @@ init_drive();
 init_scaffold_integration();
 import {
   chmodSync as chmodSync9,
-  mkdirSync as mkdirSync40,
+  mkdirSync as mkdirSync41,
   readdirSync as readdirSync27,
   rmSync as rmSync16,
-  writeFileSync as writeFileSync32
+  writeFileSync as writeFileSync33
 } from "node:fs";
-import { join as join75 } from "node:path";
+import { join as join76 } from "node:path";
 function encodeCredentialsFilename(email) {
   const SAFE = new Set([
     ..."ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
@@ -88968,17 +89273,17 @@ function resolveCredentialsDir(env2) {
   if (explicit && explicit.length > 0)
     return explicit;
   const stateBase = env2.SWITCHROOM_CONTAINER === "1" ? "/state/agent" : env2.HOME ?? ".";
-  return join75(stateBase, "google-workspace-mcp", "credentials");
+  return join76(stateBase, "google-workspace-mcp", "credentials");
 }
 function writeSeedFile(dir, email, seed) {
-  mkdirSync40(dir, { recursive: true, mode: 448 });
+  mkdirSync41(dir, { recursive: true, mode: 448 });
   chmodSync9(dir, 448);
   for (const name of readdirSync27(dir)) {
-    rmSync16(join75(dir, name), { force: true, recursive: true });
+    rmSync16(join76(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
-  const filePath = join75(dir, filename);
-  writeFileSync32(filePath, JSON.stringify(seed), { mode: 384 });
+  const filePath = join76(dir, filename);
+  writeFileSync33(filePath, JSON.stringify(seed), { mode: 384 });
   chmodSync9(filePath, 384);
   return filePath;
 }
@@ -89136,11 +89441,19 @@ function registerDriveMcpLauncherCommand(program3) {
 // src/cli/m365-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn5 } from "node:child_process";
-import { writeFileSync as writeFileSync33, mkdirSync as mkdirSync41 } from "node:fs";
-import { dirname as dirname23, join as join76 } from "node:path";
+import { writeFileSync as writeFileSync34, mkdirSync as mkdirSync42 } from "node:fs";
+import { dirname as dirname24, join as join77 } from "node:path";
 var SOFTERIA_TOKEN_ENV = "MS365_MCP_OAUTH_TOKEN";
 var DEFAULT_REFRESH_LEAD_MS = 5 * 60 * 1000;
 var MAX_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
+var SOFTERIA_RESTART_BASE_MS = 1000;
+var SOFTERIA_RESTART_MAX_MS = 30 * 1000;
+var SOFTERIA_STABLE_MS = 60 * 1000;
+var SOFTERIA_MAX_RESTARTS = 6;
+function computeRestartBackoffMs(attempt) {
+  const raw = SOFTERIA_RESTART_BASE_MS * 2 ** Math.max(0, attempt);
+  return Math.min(raw, SOFTERIA_RESTART_MAX_MS);
+}
 function buildSofteriaArgs(opts = {}) {
   const pkg = `${MICROSOFT_WORKSPACE_MCP_PACKAGE}@${MICROSOFT_WORKSPACE_MCP_PINNED_VERSION}`;
   const args = ["-y", pkg];
@@ -89162,14 +89475,14 @@ function computeRefreshDelayMs(expiresAt, now, leadMs = DEFAULT_REFRESH_LEAD_MS)
 function writeRefreshHeartbeat(agentName, data) {
   const path7 = heartbeatPath(agentName);
   try {
-    mkdirSync41(dirname23(path7), { recursive: true });
-    writeFileSync33(path7, JSON.stringify(data, null, 2), { mode: 420 });
+    mkdirSync42(dirname24(path7), { recursive: true });
+    writeFileSync34(path7, JSON.stringify(data, null, 2), { mode: 420 });
   } catch {}
 }
 function heartbeatPath(agentName) {
   const override = process.env.SWITCHROOM_M365_HEARTBEAT_DIR;
   if (override) {
-    return join76(override, `m365-launcher-${agentName}.heartbeat.json`);
+    return join77(override, `m365-launcher-${agentName}.heartbeat.json`);
   }
   return "/state/agent/m365-launcher.heartbeat.json";
 }
@@ -89228,13 +89541,23 @@ async function runMs365McpLauncher(opts, rt) {
   let currentChild = null;
   let teardownStdio = null;
   let refreshTimer = null;
+  let restartTimer = null;
   let restartingForRefresh = false;
+  let shuttingDown = false;
   let resolveLauncher = null;
+  let currentCreds = null;
+  let restartAttempts = 0;
+  let lastSpawnMs = 0;
   const exitLauncher = (code) => {
+    shuttingDown = true;
     if (refreshTimer) {
       clearTimer(refreshTimer);
       refreshTimer = null;
     }
+    if (restartTimer) {
+      clearTimer(restartTimer);
+      restartTimer = null;
+    }
     if (resolveLauncher) {
       const r = resolveLauncher;
       resolveLauncher = null;
@@ -89244,6 +89567,7 @@ async function runMs365McpLauncher(opts, rt) {
   const launchChild = (accessToken) => {
     const env2 = buildSofteriaEnv(accessToken);
     const child = rt.spawnSofteria(env2);
+    lastSpawnMs = now();
     teardownStdio = wireStdio(child);
     child.once("exit", (code, signal) => {
       if (teardownStdio) {
@@ -89254,6 +89578,35 @@ async function runMs365McpLauncher(opts, rt) {
         return;
       }
       const resolved = code ?? (signal ? 128 : 0);
+      if (shuttingDown)
+        return;
+      const crashed = resolved !== 0;
+      const tokenValid = currentCreds != null && currentCreds.expiresAt > now();
+      if (crashed && tokenValid) {
+        if (now() - lastSpawnMs >= SOFTERIA_STABLE_MS)
+          restartAttempts = 0;
+        if (restartAttempts < SOFTERIA_MAX_RESTARTS) {
+          const delayMs = computeRestartBackoffMs(restartAttempts);
+          restartAttempts += 1;
+          currentChild = null;
+          log(`m365-launcher: softeria exited (code=${resolved} signal=${signal}); re-spawning with cached token in ${Math.round(delayMs / 1000)}s (attempt ${restartAttempts}/${SOFTERIA_MAX_RESTARTS}, no broker call)`);
+          restartTimer = setTimer(() => {
+            restartTimer = null;
+            if (shuttingDown)
+              return;
+            if (currentCreds != null && currentCreds.expiresAt > now()) {
+              currentChild = launchChild(currentCreds.accessToken);
+            } else {
+              log("m365-launcher: cached token expired during backoff \u2014 exiting for fresh creds");
+              exitLauncher(resolved);
+            }
+          }, delayMs);
+          return;
+        }
+        log(`m365-launcher: softeria crash-looped ${restartAttempts}x within ${Math.round(SOFTERIA_STABLE_MS / 1000)}s \u2014 giving up, exiting`);
+        exitLauncher(resolved);
+        return;
+      }
       log(`m365-launcher: softeria exited unexpectedly code=${resolved} signal=${signal}`);
       exitLauncher(resolved);
     });
@@ -89271,6 +89624,10 @@ async function runMs365McpLauncher(opts, rt) {
     refreshTimer = setTimer(async () => {
       try {
         log("m365-launcher: refreshing token + restarting softeria");
+        if (restartTimer) {
+          clearTimer(restartTimer);
+          restartTimer = null;
+        }
         restartingForRefresh = true;
         try {
           process.stdin.pause();
@@ -89280,6 +89637,8 @@ async function runMs365McpLauncher(opts, rt) {
           await killChild(currentChild);
         }
         restartingForRefresh = false;
+        currentCreds = fresh;
+        restartAttempts = 0;
         currentChild = launchChild(fresh.accessToken);
         try {
           process.stdin.resume();
@@ -89306,6 +89665,7 @@ async function runMs365McpLauncher(opts, rt) {
     log(`m365-launcher: initial broker call failed \u2014 ${msg}`);
     return 1;
   }
+  currentCreds = initial;
   currentChild = launchChild(initial.accessToken);
   scheduleRefresh(initial.expiresAt);
   const onSignal = (signal) => {
@@ -89354,8 +89714,8 @@ function registerM365McpLauncherCommand(program3) {
 // src/cli/notion-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn6 } from "node:child_process";
-import { existsSync as existsSync78, mkdirSync as mkdirSync42, writeFileSync as writeFileSync34 } from "node:fs";
-import { dirname as dirname24 } from "node:path";
+import { existsSync as existsSync79, mkdirSync as mkdirSync43, writeFileSync as writeFileSync35 } from "node:fs";
+import { dirname as dirname25 } from "node:path";
 var HEARTBEAT_WRITE_INTERVAL_MS = 30 * 1000;
 var DEFAULT_HEARTBEAT_PATH = "/state/agent/notion-launcher.heartbeat.json";
 var DEFAULT_VAULT_KEY = "notion/integration-token";
@@ -89365,10 +89725,10 @@ function buildNotionMcpArgs(opts) {
 }
 function defaultWriteHeartbeat(path7, contents) {
   try {
-    const dir = dirname24(path7);
-    if (!existsSync78(dir))
-      mkdirSync42(dir, { recursive: true });
-    writeFileSync34(path7, contents);
+    const dir = dirname25(path7);
+    if (!existsSync79(dir))
+      mkdirSync43(dir, { recursive: true });
+    writeFileSync35(path7, contents);
   } catch {}
 }
 async function runNotionMcpLauncher(opts, runtime) {
@@ -89478,7 +89838,7 @@ function registerNotionMcpLauncherCommand(program3) {
 
 // src/cli/deliver-file.ts
 init_client2();
-import { readFileSync as readFileSync66, statSync as statSync34 } from "node:fs";
+import { readFileSync as readFileSync67, statSync as statSync35 } from "node:fs";
 import { basename as basename11 } from "node:path";
 
 // src/delivery/onedrive.ts
@@ -89817,8 +90177,8 @@ async function defaultResolveProvider() {
 }
 async function runDeliverFile(localPath, deps = {}) {
   const agentName = safeAgentName(deps.agentName ?? process.env.SWITCHROOM_AGENT_NAME);
-  const sizeOf = deps.fileSize ?? ((p) => statSync34(p).size);
-  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync66(p)));
+  const sizeOf = deps.fileSize ?? ((p) => statSync35(p).size);
+  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync67(p)));
   const resolveProvider = deps.resolveProvider ?? defaultResolveProvider;
   let size;
   try {
@@ -90139,9 +90499,9 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync70, existsSync as existsSync83, readdirSync as readdirSync29 } from "node:fs";
-import { join as join81 } from "node:path";
-import { homedir as homedir48 } from "node:os";
+import { readFileSync as readFileSync71, existsSync as existsSync84, readdirSync as readdirSync29 } from "node:fs";
+import { join as join82 } from "node:path";
+import { homedir as homedir49 } from "node:os";
 
 // src/status-ask/report.ts
 function parseJsonl(content) {
@@ -90415,7 +90775,7 @@ function runReport(opts) {
   for (const src of sources) {
     let content;
     try {
-      content = readFileSync70(src.path, "utf-8");
+      content = readFileSync71(src.path, "utf-8");
     } catch (err) {
       process.stderr.write(`status-ask report: cannot read ${src.path}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -90462,7 +90822,7 @@ function runReport(opts) {
 function resolveSources(explicitPath) {
   if (explicitPath != null && explicitPath.trim() !== "") {
     const trimmed = explicitPath.trim();
-    if (!existsSync83(trimmed)) {
+    if (!existsSync84(trimmed)) {
       process.stderr.write(`status-ask report: ${trimmed}: file not found
 `);
       process.exit(1);
@@ -90476,9 +90836,9 @@ function resolveSources(explicitPath) {
     const config = loadConfig();
     agentsDir = resolveAgentsDir(config);
   } catch {
-    agentsDir = join81(homedir48(), ".switchroom", "agents");
+    agentsDir = join82(homedir49(), ".switchroom", "agents");
   }
-  if (!existsSync83(agentsDir))
+  if (!existsSync84(agentsDir))
     return [];
   const sources = [];
   let entries;
@@ -90488,8 +90848,8 @@ function resolveSources(explicitPath) {
     return [];
   }
   for (const name of entries) {
-    const path8 = join81(agentsDir, name, "runtime-metrics.jsonl");
-    if (existsSync83(path8)) {
+    const path8 = join82(agentsDir, name, "runtime-metrics.jsonl");
+    if (existsSync84(path8)) {
       sources.push({ path: path8, agent: name });
     }
   }
@@ -90519,45 +90879,45 @@ var import_yaml21 = __toESM(require_dist(), 1);
 init_paths();
 import {
   closeSync as closeSync14,
-  existsSync as existsSync84,
+  existsSync as existsSync85,
   fsyncSync as fsyncSync8,
-  mkdirSync as mkdirSync47,
+  mkdirSync as mkdirSync48,
   openSync as openSync14,
   readdirSync as readdirSync30,
-  readFileSync as readFileSync71,
+  readFileSync as readFileSync72,
   renameSync as renameSync19,
-  statSync as statSync35,
-  unlinkSync as unlinkSync17,
+  statSync as statSync36,
+  unlinkSync as unlinkSync18,
   writeSync as writeSync10
 } from "node:fs";
-import { join as join82, resolve as resolve51 } from "node:path";
+import { join as join83, resolve as resolve51 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
   const base = opts.root ? resolve51(opts.root, agent) : resolve51(resolveDualPath(`~/.switchroom/agents/${agent}`));
-  const scheduleDir = join82(base, "schedule.d");
-  const scheduleStagingDir = join82(scheduleDir, STAGING_SUBDIR);
-  const skillsDir = join82(base, "skills.d");
-  const skillsStagingDir = join82(skillsDir, STAGING_SUBDIR);
+  const scheduleDir = join83(base, "schedule.d");
+  const scheduleStagingDir = join83(scheduleDir, STAGING_SUBDIR);
+  const skillsDir = join83(base, "skills.d");
+  const skillsStagingDir = join83(skillsDir, STAGING_SUBDIR);
   return {
     agentRoot: base,
     scheduleDir,
     scheduleStagingDir,
     skillsDir,
     skillsStagingDir,
-    lockPath: join82(base, ".lock"),
+    lockPath: join83(base, ".lock"),
     stagingDir: scheduleStagingDir
   };
 }
 function ensureDirs(paths) {
-  mkdirSync47(paths.scheduleDir, { recursive: true });
-  mkdirSync47(paths.scheduleStagingDir, { recursive: true });
+  mkdirSync48(paths.scheduleDir, { recursive: true });
+  mkdirSync48(paths.scheduleStagingDir, { recursive: true });
 }
 function ensureSkillsDirs(paths) {
-  mkdirSync47(paths.skillsDir, { recursive: true });
-  mkdirSync47(paths.skillsStagingDir, { recursive: true });
+  mkdirSync48(paths.skillsDir, { recursive: true });
+  mkdirSync48(paths.skillsStagingDir, { recursive: true });
 }
 function withAgentLock(paths, fn) {
-  mkdirSync47(paths.agentRoot, { recursive: true });
+  mkdirSync48(paths.agentRoot, { recursive: true });
   const start = Date.now();
   const TIMEOUT_MS = 5000;
   let fd = null;
@@ -90570,9 +90930,9 @@ function withAgentLock(paths, fn) {
       if (e.code !== "EEXIST")
         throw err;
       try {
-        const age = Date.now() - statSync35(paths.lockPath).mtimeMs;
+        const age = Date.now() - statSync36(paths.lockPath).mtimeMs;
         if (age > 30000) {
-          unlinkSync17(paths.lockPath);
+          unlinkSync18(paths.lockPath);
           continue;
         }
       } catch {}
@@ -90590,7 +90950,7 @@ function withAgentLock(paths, fn) {
       closeSync14(fd);
     } catch {}
     try {
-      unlinkSync17(paths.lockPath);
+      unlinkSync18(paths.lockPath);
     } catch {}
   }
 }
@@ -90598,8 +90958,8 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureDirs(paths);
-    const stagingPath = join82(paths.scheduleStagingDir, `${slug}.yaml`);
-    const finalPath = join82(paths.scheduleDir, `${slug}.yaml`);
+    const stagingPath = join83(paths.scheduleStagingDir, `${slug}.yaml`);
+    const finalPath = join83(paths.scheduleDir, `${slug}.yaml`);
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
@@ -90615,8 +90975,8 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureSkillsDirs(paths);
-    const stagingPath = join82(paths.skillsStagingDir, `${slug}.yaml`);
-    const finalPath = join82(paths.skillsDir, `${slug}.yaml`);
+    const stagingPath = join83(paths.skillsStagingDir, `${slug}.yaml`);
+    const finalPath = join83(paths.skillsDir, `${slug}.yaml`);
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
@@ -90631,24 +90991,24 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
 function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join82(paths.skillsDir, `${slug}.yaml`);
-    if (!existsSync84(finalPath))
+    const finalPath = join83(paths.skillsDir, `${slug}.yaml`);
+    if (!existsSync85(finalPath))
       return false;
-    unlinkSync17(finalPath);
+    unlinkSync18(finalPath);
     return true;
   });
 }
 function listSkillsOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync84(paths.skillsDir))
+  if (!existsSync85(paths.skillsDir))
     return [];
   const out = [];
   for (const name of readdirSync30(paths.skillsDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join82(paths.skillsDir, name);
+    const full = join83(paths.skillsDir, name);
     try {
-      const raw = readFileSync71(full, "utf-8");
+      const raw = readFileSync72(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -90658,24 +91018,24 @@ function listSkillsOverlayEntries(agent, opts = {}) {
 function deleteOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join82(paths.scheduleDir, `${slug}.yaml`);
-    if (!existsSync84(finalPath))
+    const finalPath = join83(paths.scheduleDir, `${slug}.yaml`);
+    if (!existsSync85(finalPath))
       return false;
-    unlinkSync17(finalPath);
+    unlinkSync18(finalPath);
     return true;
   });
 }
 function listOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync84(paths.scheduleDir))
+  if (!existsSync85(paths.scheduleDir))
     return [];
   const out = [];
   for (const name of readdirSync30(paths.scheduleDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join82(paths.scheduleDir, name);
+    const full = join83(paths.scheduleDir, name);
     try {
-      const raw = readFileSync71(full, "utf-8");
+      const raw = readFileSync72(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -90826,27 +91186,27 @@ function reconcileAgentCronOnly(agent) {
 // src/cli/agent-config-pending.ts
 import {
   closeSync as closeSync15,
-  existsSync as existsSync85,
+  existsSync as existsSync86,
   fsyncSync as fsyncSync9,
-  mkdirSync as mkdirSync48,
+  mkdirSync as mkdirSync49,
   openSync as openSync15,
   readdirSync as readdirSync31,
-  readFileSync as readFileSync72,
+  readFileSync as readFileSync73,
   renameSync as renameSync20,
-  unlinkSync as unlinkSync18,
-  writeFileSync as writeFileSync39,
+  unlinkSync as unlinkSync19,
+  writeFileSync as writeFileSync40,
   writeSync as writeSync11
 } from "node:fs";
-import { join as join83 } from "node:path";
+import { join as join84 } from "node:path";
 import { randomBytes as randomBytes15 } from "node:crypto";
 var STAGE_ID_PREFIX = "cap_";
 function pendingDir(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  return join83(paths.scheduleDir, ".pending");
+  return join84(paths.scheduleDir, ".pending");
 }
 function ensurePendingDir(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  mkdirSync48(dir, { recursive: true });
+  mkdirSync49(dir, { recursive: true });
   return dir;
 }
 function newStageId() {
@@ -90855,8 +91215,8 @@ function newStageId() {
 function stagePendingScheduleEntry(opts) {
   const dir = ensurePendingDir(opts.agent, { root: opts.root });
   const stageId = opts.stageId ?? newStageId();
-  const yamlPath = join83(dir, `${stageId}.yaml`);
-  const metaPath = join83(dir, `${stageId}.meta.json`);
+  const yamlPath = join84(dir, `${stageId}.yaml`);
+  const metaPath = join84(dir, `${stageId}.meta.json`);
   const meta = {
     v: 1,
     stage_id: stageId,
@@ -90877,25 +91237,25 @@ function stagePendingScheduleEntry(opts) {
     }
     renameSync20(yamlTmp, yamlPath);
   }
-  writeFileSync39(metaPath, JSON.stringify(meta, null, 2) + `
+  writeFileSync40(metaPath, JSON.stringify(meta, null, 2) + `
 `, { mode: 384 });
   return { stageId, yamlPath, metaPath };
 }
 function listPendingScheduleEntries(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  if (!existsSync85(dir))
+  if (!existsSync86(dir))
     return [];
   const out = [];
   for (const name of readdirSync31(dir).sort()) {
     if (!name.endsWith(".meta.json"))
       continue;
     const stageId = name.slice(0, -".meta.json".length);
-    const metaPath = join83(dir, name);
-    const yamlPath = join83(dir, `${stageId}.yaml`);
-    if (!existsSync85(yamlPath))
+    const metaPath = join84(dir, name);
+    const yamlPath = join84(dir, `${stageId}.yaml`);
+    if (!existsSync86(yamlPath))
       continue;
     try {
-      const meta = JSON.parse(readFileSync72(metaPath, "utf-8"));
+      const meta = JSON.parse(readFileSync73(metaPath, "utf-8"));
       if (meta?.v !== 1 || typeof meta.stage_id !== "string")
         continue;
       out.push({ stageId: meta.stage_id, agent: meta.agent, yamlPath, metaPath, meta });
@@ -90910,12 +91270,12 @@ function commitPendingScheduleEntry(opts) {
     return { committed: false, reason: "not_found" };
   const slug = match.meta.entry.name ?? match.stageId;
   const paths = overlayPathsFor(opts.agent, { root: opts.root });
-  const finalPath = join83(paths.scheduleDir, `${slug}.yaml`);
-  if (existsSync85(finalPath)) {
+  const finalPath = join84(paths.scheduleDir, `${slug}.yaml`);
+  if (existsSync86(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
   renameSync20(match.yamlPath, finalPath);
-  unlinkSync18(match.metaPath);
+  unlinkSync19(match.metaPath);
   return { committed: true, path: finalPath, slug };
 }
 function denyPendingScheduleEntry(opts) {
@@ -90924,16 +91284,16 @@ function denyPendingScheduleEntry(opts) {
   if (!match)
     return { denied: false, reason: "not_found" };
   try {
-    unlinkSync18(match.yamlPath);
+    unlinkSync19(match.yamlPath);
   } catch {}
   try {
-    unlinkSync18(match.metaPath);
+    unlinkSync19(match.metaPath);
   } catch {}
   return { denied: true };
 }
 
 // src/cli/agent-config-write.ts
-import { existsSync as existsSync86, readFileSync as readFileSync73 } from "node:fs";
+import { existsSync as existsSync87, readFileSync as readFileSync74 } from "node:fs";
 import { execFileSync as execFileSync26 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
@@ -91345,8 +91705,8 @@ function scheduleRemove(opts) {
   }
   let priorContent = null;
   try {
-    if (existsSync86(match.path))
-      priorContent = readFileSync73(match.path, "utf-8");
+    if (existsSync87(match.path))
+      priorContent = readFileSync74(match.path, "utf-8");
   } catch {}
   deleteOverlayEntry(agent, match.slug, { root: opts.root });
   const reconcileFn = opts.reconcile === undefined ? opts.root ? null : reconcileAgentCronOnly : opts.reconcile;
@@ -91549,7 +91909,7 @@ function registerAgentConfigWriteCommands(program3) {
     }
     let blob;
     if (opts.jsonl) {
-      blob = existsSync86(opts.jsonl) ? readFileSync73(opts.jsonl, "utf-8") : "";
+      blob = existsSync87(opts.jsonl) ? readFileSync74(opts.jsonl, "utf-8") : "";
     } else {
       try {
         blob = execFileSync26("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
@@ -91581,11 +91941,11 @@ function registerAgentConfigWriteCommands(program3) {
 
 // src/cli/agent-config-skill-write.ts
 var import_yaml22 = __toESM(require_dist(), 1);
-import { existsSync as existsSync87 } from "node:fs";
+import { existsSync as existsSync88 } from "node:fs";
 init_reconcile_default_skills();
 init_agent_config();
 var import_yaml23 = __toESM(require_dist(), 1);
-import { join as join84 } from "node:path";
+import { join as join85 } from "node:path";
 var MAX_SKILLS_PER_AGENT = 20;
 var V1_ALLOWED_SOURCE_PREFIX = "bundled:";
 function exitCodeFor2(code) {
@@ -91660,8 +92020,8 @@ function skillInstall(opts) {
     return err("E_SKILL_QUOTA_EXCEEDED", `agent ${agent} already has ${used} overlay-installed skills (cap ${MAX_SKILLS_PER_AGENT})`);
   }
   const poolDir = opts.bundledSkillsPoolDir ?? getBundledSkillsPoolDir();
-  const skillPath = join84(poolDir, skillName);
-  if (!existsSync87(skillPath)) {
+  const skillPath = join85(poolDir, skillName);
+  if (!existsSync88(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
   const yamlText = import_yaml22.stringify({ skills: [skillName] });
@@ -91825,21 +92185,21 @@ function registerAgentConfigSkillWriteCommands(program3) {
 // src/cli/skill.ts
 import {
   closeSync as closeSync16,
-  existsSync as existsSync88,
+  existsSync as existsSync89,
   lstatSync as lstatSync9,
-  mkdirSync as mkdirSync49,
+  mkdirSync as mkdirSync50,
   mkdtempSync as mkdtempSync5,
   openSync as openSync16,
-  readFileSync as readFileSync74,
+  readFileSync as readFileSync75,
   readdirSync as readdirSync32,
   realpathSync as realpathSync7,
   renameSync as renameSync21,
   rmSync as rmSync18,
-  statSync as statSync36,
-  writeFileSync as writeFileSync40
+  statSync as statSync37,
+  writeFileSync as writeFileSync41
 } from "node:fs";
-import { tmpdir as tmpdir5, homedir as homedir49 } from "node:os";
-import { dirname as dirname29, join as join85, relative as relative2, resolve as resolve52 } from "node:path";
+import { tmpdir as tmpdir5, homedir as homedir50 } from "node:os";
+import { dirname as dirname30, join as join86, relative as relative2, resolve as resolve52 } from "node:path";
 import { spawnSync as spawnSync15 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -92073,10 +92433,10 @@ function scanForClaudeP2(content) {
 function resolveSkillsPoolDir2(override) {
   const raw = override ?? "~/.switchroom/skills";
   if (raw.startsWith("~/")) {
-    return join85(homedir49(), raw.slice(2));
+    return join86(homedir50(), raw.slice(2));
   }
   if (raw === "~")
-    return homedir49();
+    return homedir50();
   return resolve52(raw);
 }
 function readStdinSync() {
@@ -92105,14 +92465,14 @@ function isTarballPath(p) {
 }
 function loadFromDir(dir) {
   const abs = realpathSync7(dir);
-  if (!statSync36(abs).isDirectory()) {
+  if (!statSync37(abs).isDirectory()) {
     fail3(`--from path is not a directory: ${dir}`);
   }
   const files = {};
   const walk2 = (sub) => {
     const entries = readdirSync32(sub, { withFileTypes: true });
     for (const ent of entries) {
-      const full = join85(sub, ent.name);
+      const full = join86(sub, ent.name);
       const rel = relative2(abs, full);
       if (ent.isSymbolicLink()) {
         fail3(`refusing to read symlink inside --from dir: ${rel}`);
@@ -92122,7 +92482,7 @@ function loadFromDir(dir) {
         continue;
       }
       if (ent.isFile()) {
-        const buf = readFileSync74(full);
+        const buf = readFileSync75(full);
         files[rel.replace(/\\/g, "/")] = buf.toString("utf-8");
       }
     }
@@ -92147,7 +92507,7 @@ function loadFromTarball(tarPath) {
       fail3(`tarball contains disallowed path: ${JSON.stringify(entry)} \u2014 ` + `refusing to extract before any file is written`);
     }
   }
-  const staging = mkdtempSync5(join85(tmpdir5(), "skill-apply-extract-"));
+  const staging = mkdtempSync5(join86(tmpdir5(), "skill-apply-extract-"));
   try {
     const flags = isGz ? ["-xzf"] : ["-xf"];
     const r = spawnSync15("tar", [
@@ -92171,7 +92531,7 @@ function loadFromTarball(tarPath) {
   }
 }
 function loadSingleFile(filePath) {
-  const content = readFileSync74(filePath, "utf-8");
+  const content = readFileSync75(filePath, "utf-8");
   return { "SKILL.md": content };
 }
 function loadFromStdin() {
@@ -92233,10 +92593,10 @@ function validatePayload(name, files) {
           errors2.push(`${path8} fails \`bash -n\` syntax check: ${(r.stderr ?? "").trim()}`);
         }
       } else if (PY_SCRIPT_RE2.test(path8)) {
-        const tmp = mkdtempSync5(join85(tmpdir5(), "skill-apply-py-"));
-        const tmpPy = join85(tmp, "check.py");
+        const tmp = mkdtempSync5(join86(tmpdir5(), "skill-apply-py-"));
+        const tmpPy = join86(tmp, "check.py");
         try {
-          writeFileSync40(tmpPy, content);
+          writeFileSync41(tmpPy, content);
           const r = spawnSync15("python3", ["-m", "py_compile", tmpPy], {
             encoding: "utf-8"
           });
@@ -92254,15 +92614,15 @@ function validatePayload(name, files) {
 function diffSummary(currentDir, files) {
   const lines = [];
   const currentFiles = {};
-  if (existsSync88(currentDir)) {
+  if (existsSync89(currentDir)) {
     const walk2 = (sub) => {
       for (const ent of readdirSync32(sub, { withFileTypes: true })) {
-        const full = join85(sub, ent.name);
+        const full = join86(sub, ent.name);
         const rel = relative2(currentDir, full);
         if (ent.isDirectory()) {
           walk2(full);
         } else if (ent.isFile()) {
-          currentFiles[rel.replace(/\\/g, "/")] = readFileSync74(full, "utf-8");
+          currentFiles[rel.replace(/\\/g, "/")] = readFileSync75(full, "utf-8");
         }
       }
     };
@@ -92290,10 +92650,10 @@ function diffSummary(currentDir, files) {
 `);
 }
 function writePayload(poolDir, name, files) {
-  if (!existsSync88(poolDir)) {
-    mkdirSync49(poolDir, { recursive: true, mode: 493 });
+  if (!existsSync89(poolDir)) {
+    mkdirSync50(poolDir, { recursive: true, mode: 493 });
   }
-  const target = join85(poolDir, name);
+  const target = join86(poolDir, name);
   let targetIsSymlink = false;
   try {
     const st = lstatSync9(target);
@@ -92304,15 +92664,15 @@ function writePayload(poolDir, name, files) {
   if (targetIsSymlink) {
     fail3(`refusing to overwrite symlink at ${target}; investigate manually`);
   }
-  const staging = mkdtempSync5(join85(poolDir, `.skill-apply-stage-${name}-`));
+  const staging = mkdtempSync5(join86(poolDir, `.skill-apply-stage-${name}-`));
   let oldRename = null;
   try {
     for (const [path8, content] of Object.entries(files)) {
-      const full = join85(staging, path8);
-      mkdirSync49(dirname29(full), { recursive: true, mode: 493 });
+      const full = join86(staging, path8);
+      mkdirSync50(dirname30(full), { recursive: true, mode: 493 });
       const fd = openSync16(full, "wx");
       try {
-        writeFileSync40(fd, content);
+        writeFileSync41(fd, content);
       } finally {
         closeSync16(fd);
       }
@@ -92339,9 +92699,9 @@ function writePayload(poolDir, name, files) {
     try {
       rmSync18(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync88(oldRename)) {
+    if (oldRename && existsSync89(oldRename)) {
       try {
-        if (existsSync88(target)) {
+        if (existsSync89(target)) {
           rmSync18(target, { recursive: true, force: true });
         }
         renameSync21(oldRename, target);
@@ -92362,10 +92722,10 @@ function registerSkillCommand(program3) {
       files = loadFromStdin();
     } else {
       const fromPath = resolve52(opts.from);
-      if (!existsSync88(fromPath)) {
+      if (!existsSync89(fromPath)) {
         fail3(`--from path does not exist: ${opts.from}`);
       }
-      const st = statSync36(fromPath);
+      const st = statSync37(fromPath);
       if (st.isDirectory()) {
         files = loadFromDir(fromPath);
       } else if (isTarballPath(fromPath)) {
@@ -92386,7 +92746,7 @@ function registerSkillCommand(program3) {
     }
     const config = loadConfig();
     const poolDir = resolveSkillsPoolDir2(config.switchroom?.skills_dir);
-    const currentDir = join85(poolDir, name);
+    const currentDir = join86(poolDir, name);
     console.log(source_default.bold(`Skill: ${name}`) + source_default.gray(` (${Object.keys(files).length} files, ${sumBytes(files)} bytes)`));
     console.log(source_default.bold("Diff vs current pool content:"));
     console.log(diffSummary(currentDir, files));
@@ -92418,21 +92778,21 @@ function sumBytes(files) {
 init_esm();
 import {
   closeSync as closeSync17,
-  existsSync as existsSync89,
+  existsSync as existsSync90,
   lstatSync as lstatSync10,
-  mkdirSync as mkdirSync50,
+  mkdirSync as mkdirSync51,
   mkdtempSync as mkdtempSync6,
   openSync as openSync17,
-  readFileSync as readFileSync75,
+  readFileSync as readFileSync76,
   readdirSync as readdirSync33,
   renameSync as renameSync22,
   rmSync as rmSync19,
-  statSync as statSync37,
+  statSync as statSync38,
   utimesSync,
-  writeFileSync as writeFileSync41
+  writeFileSync as writeFileSync42
 } from "node:fs";
-import { dirname as dirname30, join as join86, relative as relative3, resolve as resolve53 } from "node:path";
-import { homedir as homedir50, tmpdir as tmpdir6 } from "node:os";
+import { dirname as dirname31, join as join87, relative as relative3, resolve as resolve53 } from "node:path";
+import { homedir as homedir51, tmpdir as tmpdir6 } from "node:os";
 import { spawnSync as spawnSync16 } from "node:child_process";
 init_helpers();
 init_agent_config();
@@ -92443,15 +92803,15 @@ var TRASH_TTL_MS = 24 * 60 * 60 * 1000;
 var PERSONAL_SKILLS_SUBPATH = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
-  const candidate = override ? resolve53(override) : join86(homedir50(), ".switchroom-config");
-  if (!existsSync89(candidate))
+  const candidate = override ? resolve53(override) : join87(homedir51(), ".switchroom-config");
+  if (!existsSync90(candidate))
     return null;
-  return join86(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
+  return join87(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
 }
 var MIRROR_PRIOR_TTL_MS = 24 * 60 * 60 * 1000;
 function sweepMirrorPriors(configSkillsRoot) {
   try {
-    if (!existsSync89(configSkillsRoot))
+    if (!existsSync90(configSkillsRoot))
       return;
     const now = Date.now();
     for (const ent of readdirSync33(configSkillsRoot)) {
@@ -92464,7 +92824,7 @@ function sweepMirrorPriors(configSkillsRoot) {
       if (now - ts < MIRROR_PRIOR_TTL_MS)
         continue;
       try {
-        rmSync19(join86(configSkillsRoot, ent), { recursive: true, force: true });
+        rmSync19(join87(configSkillsRoot, ent), { recursive: true, force: true });
       } catch {}
     }
   } catch {}
@@ -92473,7 +92833,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
   const configSkillsRoot = resolveConfigSkillsDir(agent);
   if (!configSkillsRoot)
     return;
-  const dest = join86(configSkillsRoot, name);
+  const dest = join87(configSkillsRoot, name);
   try {
     if (liveSkillDir !== null) {
       try {
@@ -92487,32 +92847,32 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     }
     if (liveSkillDir === null) {
       sweepMirrorPriors(configSkillsRoot);
-      if (existsSync89(dest)) {
-        const trash = join86(configSkillsRoot, `.${name}-trash-${Date.now()}`);
+      if (existsSync90(dest)) {
+        const trash = join87(configSkillsRoot, `.${name}-trash-${Date.now()}`);
         renameSync22(dest, trash);
       }
       return;
     }
-    mkdirSync50(configSkillsRoot, { recursive: true, mode: 493 });
+    mkdirSync51(configSkillsRoot, { recursive: true, mode: 493 });
     sweepMirrorPriors(configSkillsRoot);
-    const staging = mkdtempSync6(join86(configSkillsRoot, `.${name}-staging-`));
+    const staging = mkdtempSync6(join87(configSkillsRoot, `.${name}-staging-`));
     const walk2 = (src, dst) => {
-      mkdirSync50(dst, { recursive: true, mode: 493 });
+      mkdirSync51(dst, { recursive: true, mode: 493 });
       for (const ent of readdirSync33(src, { withFileTypes: true })) {
-        const s = join86(src, ent.name);
-        const d = join86(dst, ent.name);
+        const s = join87(src, ent.name);
+        const d = join87(dst, ent.name);
         if (ent.isSymbolicLink())
           continue;
         if (ent.isDirectory())
           walk2(s, d);
         else if (ent.isFile()) {
-          writeFileSync41(d, readFileSync75(s));
+          writeFileSync42(d, readFileSync76(s));
         }
       }
     };
     walk2(liveSkillDir, staging);
-    if (existsSync89(dest)) {
-      const prior = join86(configSkillsRoot, `.${name}-prior-${Date.now()}`);
+    if (existsSync90(dest)) {
+      const prior = join87(configSkillsRoot, `.${name}-prior-${Date.now()}`);
       renameSync22(dest, prior);
     }
     renameSync22(staging, dest);
@@ -92539,17 +92899,17 @@ function resolveAgent(opts) {
 function resolveAgentsRoot(opts) {
   if (opts.root)
     return resolve53(opts.root);
-  return join86(homedir50(), ".switchroom", "agents");
+  return join87(homedir51(), ".switchroom", "agents");
 }
 function personalSkillDir(agentsRoot, agent, name) {
-  return join86(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
+  return join87(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
 }
 function trashDir(agentsRoot, agent) {
-  return join86(agentsRoot, agent, ".claude", TRASH_DIRNAME);
+  return join87(agentsRoot, agent, ".claude", TRASH_DIRNAME);
 }
 function countPersonalSkills(agentsRoot, agent) {
-  const skillsDir = join86(agentsRoot, agent, ".claude", "skills");
-  if (!existsSync89(skillsDir))
+  const skillsDir = join87(agentsRoot, agent, ".claude", "skills");
+  if (!existsSync90(skillsDir))
     return 0;
   let n = 0;
   for (const ent of readdirSync33(skillsDir, { withFileTypes: true })) {
@@ -92580,13 +92940,13 @@ function readStdinSync2() {
 }
 function loadFromDir2(dir) {
   const abs = resolve53(dir);
-  if (!statSync37(abs).isDirectory()) {
+  if (!statSync38(abs).isDirectory()) {
     fail4(`--from path is not a directory: ${dir}`);
   }
   const files = {};
   const walk2 = (sub) => {
     for (const ent of readdirSync33(sub, { withFileTypes: true })) {
-      const full = join86(sub, ent.name);
+      const full = join87(sub, ent.name);
       if (ent.isSymbolicLink()) {
         fail4(`refusing to read symlink in --from dir: ${relative3(abs, full)}`);
       }
@@ -92596,7 +92956,7 @@ function loadFromDir2(dir) {
       }
       if (ent.isFile()) {
         const rel = relative3(abs, full).replace(/\\/g, "/");
-        files[rel] = readFileSync75(full, "utf-8");
+        files[rel] = readFileSync76(full, "utf-8");
       }
     }
   };
@@ -92639,10 +92999,10 @@ function behavioralValidate(files) {
         errors2.push(`${path8} fails \`bash -n\`: ${(r.stderr ?? "").trim()}`);
       }
     } else if (PY_SCRIPT_RE.test(path8)) {
-      const tmp = mkdtempSync6(join86(tmpdir6(), "skill-personal-py-"));
-      const tmpPy = join86(tmp, "check.py");
+      const tmp = mkdtempSync6(join87(tmpdir6(), "skill-personal-py-"));
+      const tmpPy = join87(tmp, "check.py");
       try {
-        writeFileSync41(tmpPy, content);
+        writeFileSync42(tmpPy, content);
         const r = spawnSync16("python3", ["-m", "py_compile", tmpPy], {
           encoding: "utf-8"
         });
@@ -92658,15 +93018,15 @@ function behavioralValidate(files) {
 }
 function sweepTrash(agentsRoot, agent) {
   const trash = trashDir(agentsRoot, agent);
-  if (!existsSync89(trash))
+  if (!existsSync90(trash))
     return;
   const now = Date.now();
   for (const ent of readdirSync33(trash, { withFileTypes: true })) {
     if (!ent.isDirectory())
       continue;
-    const entPath = join86(trash, ent.name);
+    const entPath = join87(trash, ent.name);
     try {
-      const st = statSync37(entPath);
+      const st = statSync38(entPath);
       if (now - st.mtimeMs > TRASH_TTL_MS) {
         rmSync19(entPath, { recursive: true, force: true });
       }
@@ -92684,16 +93044,16 @@ function writePersonalSkill(targetDir, files) {
   if (targetIsSymlink) {
     fail4(`refusing to overwrite symlink at ${targetDir}; investigate manually`);
   }
-  mkdirSync50(dirname30(targetDir), { recursive: true, mode: 493 });
-  const staging = mkdtempSync6(join86(dirname30(targetDir), `.skill-personal-stage-`));
+  mkdirSync51(dirname31(targetDir), { recursive: true, mode: 493 });
+  const staging = mkdtempSync6(join87(dirname31(targetDir), `.skill-personal-stage-`));
   let oldRename = null;
   try {
     for (const [path8, content] of Object.entries(files)) {
-      const full = join86(staging, path8);
-      mkdirSync50(dirname30(full), { recursive: true, mode: 493 });
+      const full = join87(staging, path8);
+      mkdirSync51(dirname31(full), { recursive: true, mode: 493 });
       const fd = openSync17(full, "wx");
       try {
-        writeFileSync41(fd, content);
+        writeFileSync42(fd, content);
       } finally {
         closeSync17(fd);
       }
@@ -92720,9 +93080,9 @@ function writePersonalSkill(targetDir, files) {
     try {
       rmSync19(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync89(oldRename)) {
+    if (oldRename && existsSync90(oldRename)) {
       try {
-        if (existsSync89(targetDir)) {
+        if (existsSync90(targetDir)) {
           rmSync19(targetDir, { recursive: true, force: true });
         }
         renameSync22(oldRename, targetDir);
@@ -92788,15 +93148,15 @@ function loadFiles(opts) {
     return loadFromStdin2();
   }
   const p = resolve53(opts.from);
-  if (!existsSync89(p)) {
+  if (!existsSync90(p)) {
     fail4(`--from path does not exist: ${opts.from}`);
   }
-  const st = statSync37(p);
+  const st = statSync38(p);
   if (st.isDirectory()) {
     return loadFromDir2(p);
   }
   if (p.endsWith(".md")) {
-    return { "SKILL.md": readFileSync75(p, "utf-8") };
+    return { "SKILL.md": readFileSync76(p, "utf-8") };
   }
   fail4(`--from must be a directory or a .md file. Got: ${opts.from}`);
 }
@@ -92836,10 +93196,10 @@ function editPersonalAction(name, opts) {
 }
 var CLONE_SOURCE_RE = /^(shared|bundled):([a-z0-9][a-z0-9_-]{0,62})$/;
 function defaultSharedRoot() {
-  return join86(homedir50(), ".switchroom", "skills");
+  return join87(homedir51(), ".switchroom", "skills");
 }
 function defaultBundledRoot() {
-  return join86(homedir50(), ".switchroom", "skills", "_bundled");
+  return join87(homedir51(), ".switchroom", "skills", "_bundled");
 }
 function resolveCloneSource(source, opts) {
   const m = CLONE_SOURCE_RE.exec(source);
@@ -92849,8 +93209,8 @@ function resolveCloneSource(source, opts) {
   const tier = m[1];
   const slug = m[2];
   const root = tier === "bundled" ? opts.bundledRoot ?? defaultBundledRoot() : opts.sharedRoot ?? defaultSharedRoot();
-  const dir = join86(root, slug);
-  if (!existsSync89(dir)) {
+  const dir = join87(root, slug);
+  if (!existsSync90(dir)) {
     fail4(`clone source ${JSON.stringify(source)} not found at ${dir}; ` + `check \`switchroom skill search --tier ${tier}\``, 1);
   }
   const st = lstatSync10(dir);
@@ -92865,7 +93225,7 @@ function readSourceFiles(dir) {
   const skipped = [];
   const walk2 = (sub) => {
     for (const ent of readdirSync33(sub, { withFileTypes: true })) {
-      const full = join86(sub, ent.name);
+      const full = join87(sub, ent.name);
       if (ent.isSymbolicLink()) {
         continue;
       }
@@ -92885,7 +93245,7 @@ function readSourceFiles(dir) {
             fail4(`clone source has oversized file ${rel} (${st.size} bytes > ${CLONE_MAX_FILE_BYTES}); ` + `refuse to read`, 3);
           }
         } catch {}
-        files[rel] = readFileSync75(full, "utf-8");
+        files[rel] = readFileSync76(full, "utf-8");
       }
     }
   };
@@ -92974,9 +93334,9 @@ function removePersonalAction(name, opts) {
     throw err2;
   }
   const trashRoot2 = trashDir(agentsRoot, agent);
-  mkdirSync50(trashRoot2, { recursive: true, mode: 493 });
+  mkdirSync51(trashRoot2, { recursive: true, mode: 493 });
   const ts = Date.now();
-  const trashTarget = join86(trashRoot2, `${name}-${ts}`);
+  const trashTarget = join87(trashRoot2, `${name}-${ts}`);
   renameSync22(target, trashTarget);
   const now = new Date(ts);
   utimesSync(trashTarget, now, now);
@@ -92995,16 +93355,16 @@ function listPersonalAction(opts) {
   const agent = resolveAgent(opts);
   const agentsRoot = resolveAgentsRoot(opts);
   sweepTrash(agentsRoot, agent);
-  const skillsDir = join86(agentsRoot, agent, ".claude", "skills");
+  const skillsDir = join87(agentsRoot, agent, ".claude", "skills");
   const personal = [];
-  if (existsSync89(skillsDir)) {
+  if (existsSync90(skillsDir)) {
     for (const ent of readdirSync33(skillsDir, { withFileTypes: true })) {
       if (!ent.isDirectory())
         continue;
       if (!ent.name.startsWith(PERSONAL_PREFIX))
         continue;
       const skillName = ent.name.slice(PERSONAL_PREFIX.length);
-      const skillPath = join86(skillsDir, ent.name);
+      const skillPath = join87(skillsDir, ent.name);
       let fileCount = 0;
       let totalBytes = 0;
       const walk2 = (sub) => {
@@ -93012,10 +93372,10 @@ function listPersonalAction(opts) {
           if (e.isFile()) {
             fileCount += 1;
             try {
-              totalBytes += statSync37(join86(sub, e.name)).size;
+              totalBytes += statSync38(join87(sub, e.name)).size;
             } catch {}
           } else if (e.isDirectory()) {
-            walk2(join86(sub, e.name));
+            walk2(join87(sub, e.name));
           }
         }
       };
@@ -93053,12 +93413,12 @@ function registerSkillPersonalCommands(program3) {
 
 // src/cli/self-improve-propose-skill.ts
 import { createConnection as createConnection4 } from "node:net";
-import { homedir as homedir51 } from "node:os";
-import { join as join87 } from "node:path";
-import { readFileSync as readFileSync76 } from "node:fs";
+import { homedir as homedir52 } from "node:os";
+import { join as join88 } from "node:path";
+import { readFileSync as readFileSync77 } from "node:fs";
 var IPC_CONNECT_TIMEOUT_MS = 5000;
 function gatewaySocketPath() {
-  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join87(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join87(homedir51(), ".claude", "channels", "telegram", "gateway.sock"));
+  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join88(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join88(homedir52(), ".claude", "channels", "telegram", "gateway.sock"));
 }
 function fail5(msg, code = 1) {
   console.error(msg);
@@ -93093,7 +93453,7 @@ function registerSelfImproveProposeSkillCommand(program3) {
       fail5("agent name required (--agent or $SWITCHROOM_AGENT_NAME)");
     let draft;
     try {
-      draft = JSON.parse(readFileSync76(opts.draft, "utf-8"));
+      draft = JSON.parse(readFileSync77(opts.draft, "utf-8"));
     } catch (e) {
       fail5(`failed to read/parse --draft: ${e.message}`);
     }
@@ -93130,28 +93490,28 @@ function registerSelfImproveProposeSkillCommand(program3) {
 init_esm();
 init_helpers();
 var import_yaml25 = __toESM(require_dist(), 1);
-import { existsSync as existsSync90, readdirSync as readdirSync34, readFileSync as readFileSync77, statSync as statSync38 } from "node:fs";
-import { homedir as homedir52 } from "node:os";
-import { join as join88, resolve as resolve54 } from "node:path";
+import { existsSync as existsSync91, readdirSync as readdirSync34, readFileSync as readFileSync78, statSync as statSync39 } from "node:fs";
+import { homedir as homedir53 } from "node:os";
+import { join as join89, resolve as resolve54 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
 var BUNDLED_SUBDIR = "_bundled";
 var AGENT_NAME_RE3 = /^[a-z][a-z0-9_-]{0,62}$/;
 function defaultAgentsRoot() {
-  return resolve54(homedir52(), ".switchroom/agents");
+  return resolve54(homedir53(), ".switchroom/agents");
 }
 function defaultSharedRoot2() {
-  return resolve54(homedir52(), ".switchroom/skills");
+  return resolve54(homedir53(), ".switchroom/skills");
 }
 function defaultBundledRoot2() {
-  return resolve54(homedir52(), ".switchroom/skills/_bundled");
+  return resolve54(homedir53(), ".switchroom/skills/_bundled");
 }
 function readSkillFrontmatter(skillDir) {
-  const mdPath = join88(skillDir, "SKILL.md");
-  if (!existsSync90(mdPath))
+  const mdPath = join89(skillDir, "SKILL.md");
+  if (!existsSync91(mdPath))
     return null;
   let content;
   try {
-    content = readFileSync77(mdPath, "utf-8");
+    content = readFileSync78(mdPath, "utf-8");
   } catch {
     return null;
   }
@@ -93179,9 +93539,9 @@ function readSkillFrontmatter(skillDir) {
   return { fm: parsed };
 }
 function statSkillMd(skillDir) {
-  const mdPath = join88(skillDir, "SKILL.md");
+  const mdPath = join89(skillDir, "SKILL.md");
   try {
-    const st = statSync38(mdPath);
+    const st = statSync39(mdPath);
     return { size: st.size, mtime: st.mtime.toISOString() };
   } catch {
     return null;
@@ -93190,8 +93550,8 @@ function statSkillMd(skillDir) {
 function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   if (!AGENT_NAME_RE3.test(agent))
     return [];
-  const skillsDir = join88(agentsRoot, agent, ".claude/skills");
-  if (!existsSync90(skillsDir))
+  const skillsDir = join89(agentsRoot, agent, ".claude/skills");
+  if (!existsSync91(skillsDir))
     return [];
   const out = [];
   let entries;
@@ -93203,9 +93563,9 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   for (const ent of entries) {
     if (!ent.startsWith(PERSONAL_PREFIX2))
       continue;
-    const dirPath = join88(skillsDir, ent);
+    const dirPath = join89(skillsDir, ent);
     try {
-      if (!statSync38(dirPath).isDirectory())
+      if (!statSync39(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -93229,7 +93589,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   return out;
 }
 function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
-  if (!existsSync90(sharedRoot))
+  if (!existsSync91(sharedRoot))
     return [];
   const out = [];
   let entries;
@@ -93243,9 +93603,9 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
       continue;
     if (ent.startsWith("."))
       continue;
-    const dirPath = join88(sharedRoot, ent);
+    const dirPath = join89(sharedRoot, ent);
     try {
-      if (!statSync38(dirPath).isDirectory())
+      if (!statSync39(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -93267,7 +93627,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
   return out;
 }
 function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
-  if (!existsSync90(bundledRoot))
+  if (!existsSync91(bundledRoot))
     return [];
   const out = [];
   let entries;
@@ -93279,9 +93639,9 @@ function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
   for (const ent of entries) {
     if (ent.startsWith("."))
       continue;
-    const dirPath = join88(bundledRoot, ent);
+    const dirPath = join89(bundledRoot, ent);
     try {
-      if (!statSync38(dirPath).isDirectory())
+      if (!statSync39(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -93425,18 +93785,18 @@ init_source();
 init_helpers();
 init_operator_uid();
 import {
-  existsSync as existsSync92,
-  mkdirSync as mkdirSync51,
+  existsSync as existsSync93,
+  mkdirSync as mkdirSync52,
   readdirSync as readdirSync35,
-  readFileSync as readFileSync79,
-  writeFileSync as writeFileSync42,
-  statSync as statSync39,
+  readFileSync as readFileSync80,
+  writeFileSync as writeFileSync43,
+  statSync as statSync40,
   lstatSync as lstatSync11,
   realpathSync as realpathSync8,
   copyFileSync as copyFileSync13
 } from "node:fs";
-import { homedir as homedir53 } from "node:os";
-import { join as join89 } from "node:path";
+import { homedir as homedir54 } from "node:os";
+import { join as join90 } from "node:path";
 import { spawnSync as spawnSync20 } from "node:child_process";
 
 // src/cli/deploy-version-guard.ts
@@ -93658,7 +94018,7 @@ networks:
 # operator surface; the daemon's stderr lands in \`docker logs switchroom-hostd\`.
 `;
 }
-function resolveHostdHostHome(env2 = process.env, home2 = homedir53()) {
+function resolveHostdHostHome(env2 = process.env, home2 = homedir54()) {
   const fromEnv = env2.SWITCHROOM_HOST_HOME?.trim();
   const resolved = fromEnv && fromEnv.length > 0 ? fromEnv : home2;
   if (resolved === "/host-home" || resolved.startsWith("/host-home/")) {
@@ -93669,7 +94029,7 @@ function resolveHostdHostHome(env2 = process.env, home2 = homedir53()) {
   return resolved;
 }
 function resolveHostdSkillsTarget(hostHome) {
-  const skillsPath = join89(hostHome, ".switchroom", "skills");
+  const skillsPath = join90(hostHome, ".switchroom", "skills");
   let st;
   try {
     st = lstatSync11(skillsPath);
@@ -93686,21 +94046,21 @@ function resolveHostdSkillsTarget(hostHome) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills is a symlink whose target ` + `does not resolve (dangling) \u2014 skipping the skills bind mount. Bundled ` + `skills will be unavailable to rollout/update until the symlink is fixed.`);
     return;
   }
-  if (!existsSync92(target)) {
+  if (!existsSync93(target)) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills resolves to "${target}", ` + `which does not exist \u2014 skipping the skills bind mount. Bundled skills ` + `will be unavailable to rollout/update until the symlink target exists.`);
     return;
   }
   return target;
 }
 function hostdDir() {
-  return join89(homedir53(), ".switchroom", "hostd");
+  return join90(homedir54(), ".switchroom", "hostd");
 }
 function hostdComposePath() {
-  return join89(hostdDir(), "docker-compose.yml");
+  return join90(hostdDir(), "docker-compose.yml");
 }
 function backupExistingCompose() {
   const p = hostdComposePath();
-  if (!existsSync92(p))
+  if (!existsSync93(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -93733,7 +94093,7 @@ async function doInstall(opts, program3) {
   }
   const dir = hostdDir();
   const composePath = hostdComposePath();
-  mkdirSync51(dir, { recursive: true });
+  mkdirSync52(dir, { recursive: true });
   const imageTag = resolveHostdImageTag(opts.tag, cfg.release);
   const guard = checkDowngrade({
     container: "switchroom-hostd",
@@ -93766,7 +94126,7 @@ async function doInstall(opts, program3) {
   const bak = backupExistingCompose();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync42(composePath, yaml, "utf8");
+  writeFileSync43(composePath, yaml, "utf8");
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
   const adminAgents = Object.entries(cfg.agents ?? {}).filter(([, a]) => a?.admin === true).map(([name]) => name);
   console.log(source_default.dim(`    agents served (one socket each): ${allAgents.length === 0 ? "(none)" : allAgents.join(", ")}`));
@@ -93798,7 +94158,7 @@ function doStatus() {
   const composeYml = hostdComposePath();
   console.log(source_default.bold("switchroom-hostd"));
   console.log("");
-  if (!existsSync92(composeYml)) {
+  if (!existsSync93(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom hostd install` to set up."));
     return;
@@ -93819,15 +94179,15 @@ function doStatus() {
   } else {
     console.log(source_default.green(`  container:  ${ps.stdout.trim()}`));
   }
-  if (existsSync92(dir)) {
+  if (existsSync93(dir)) {
     const entries = [];
     try {
       for (const name of readdirSync35(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
-        const sockPath = join89(dir, name, "sock");
-        if (existsSync92(sockPath)) {
-          const st = statSync39(sockPath);
+        const sockPath = join90(dir, name, "sock");
+        if (existsSync93(sockPath)) {
+          const st = statSync40(sockPath);
           if ((st.mode & 61440) === 49152) {
             entries.push(`${name} \u2192 ${sockPath}`);
           }
@@ -93845,7 +94205,7 @@ function doStatus() {
 }
 function doUninstall() {
   const composeYml = hostdComposePath();
-  if (!existsSync92(composeYml)) {
+  if (!existsSync93(composeYml)) {
     console.log(source_default.yellow("  No hostd install detected (no compose file at this path)."));
     return;
   }
@@ -93869,12 +94229,12 @@ function registerHostdCommand(program3) {
   hostd.command("uninstall").description("Stop the hostd container. Leaves the compose file in place for re-install.").action(() => doUninstall());
   hostd.command("audit").description("Tail and filter the hostd audit log (privileged-verb call history)").option("--tail <n>", "Number of matching entries to show (default: 50)", "50").option("--agent <name>", "Filter to a specific caller agent").option("--op <verb>", "Filter to a specific hostd verb (e.g. update_apply, agent_restart)").option("--error", "Show only failed (error/denied) entries").option("--verbose", "Show the captured stderr / error tail under each failed row").option("--path <file>", "Override audit log path (for debugging)").action((opts) => {
     const logPath = opts.path ?? defaultAuditLogPath2();
-    if (!existsSync92(logPath)) {
+    if (!existsSync93(logPath)) {
       console.error(source_default.yellow(`Audit log not found at ${logPath}.`) + source_default.gray(`
 The log is created when hostd handles its first privileged-verb request.`));
       return;
     }
-    const raw = readFileSync79(logPath, "utf-8");
+    const raw = readFileSync80(logPath, "utf-8");
     const limit = Math.max(1, parseInt(opts.tail ?? "50", 10) || 50);
     const filters = {
       agent: opts.agent,
@@ -93917,9 +94277,9 @@ The log is created when hostd handles its first privileged-verb request.`));
 init_source();
 init_helpers();
 init_operator_uid();
-import { existsSync as existsSync93, mkdirSync as mkdirSync52, writeFileSync as writeFileSync43, copyFileSync as copyFileSync14 } from "node:fs";
-import { homedir as homedir54 } from "node:os";
-import { join as join90 } from "node:path";
+import { existsSync as existsSync94, mkdirSync as mkdirSync53, writeFileSync as writeFileSync44, copyFileSync as copyFileSync14 } from "node:fs";
+import { homedir as homedir55 } from "node:os";
+import { join as join91 } from "node:path";
 import { spawnSync as spawnSync21 } from "node:child_process";
 function resolveWebImageTag(explicitTag, release) {
   if (explicitTag)
@@ -94004,14 +94364,14 @@ services:
 `;
 }
 function webdDir() {
-  return join90(homedir54(), ".switchroom", "web");
+  return join91(homedir55(), ".switchroom", "web");
 }
 function webdComposePath() {
-  return join90(webdDir(), "docker-compose.yml");
+  return join91(webdDir(), "docker-compose.yml");
 }
 function backupExistingCompose2() {
   const p = webdComposePath();
-  if (!existsSync93(p))
+  if (!existsSync94(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -94036,7 +94396,7 @@ async function doInstall2(opts, program3) {
   }
   const dir = webdDir();
   const composePath = webdComposePath();
-  mkdirSync52(dir, { recursive: true });
+  mkdirSync53(dir, { recursive: true });
   const cfg = getConfig(program3);
   const imageTag = resolveWebImageTag(opts.tag, cfg.release);
   const guard = checkDowngrade({
@@ -94049,7 +94409,7 @@ async function doInstall2(opts, program3) {
     return;
   }
   const yaml = renderWebComposeFile({
-    hostHome: homedir54(),
+    hostHome: homedir55(),
     imageTag,
     operatorUid
   });
@@ -94062,7 +94422,7 @@ async function doInstall2(opts, program3) {
   const bak = backupExistingCompose2();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync43(composePath, yaml, "utf8");
+  writeFileSync44(composePath, yaml, "utf8");
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
   console.log(source_default.dim(`    running as uid ${operatorUid} (operator), network_mode: host`));
   console.log(source_default.dim(`    Pulling ghcr.io/switchroom/switchroom-web:${imageTag}\u2026`));
@@ -94095,7 +94455,7 @@ function doStatus2() {
   const composeYml = webdComposePath();
   console.log(source_default.bold("switchroom-web"));
   console.log("");
-  if (!existsSync93(composeYml)) {
+  if (!existsSync94(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom webd install` to set up."));
     return;
@@ -94119,7 +94479,7 @@ function doStatus2() {
 }
 function doUninstall2() {
   const composeYml = webdComposePath();
-  if (!existsSync93(composeYml)) {
+  if (!existsSync94(composeYml)) {
     console.log(source_default.yellow("  No web-service install detected (no compose file at this path)."));
     return;
   }
@@ -94148,10 +94508,10 @@ function registerWebdCommand(program3) {
 
 // src/cli/host-repair.ts
 init_source();
-import { homedir as homedir55 } from "node:os";
-import { join as join91 } from "node:path";
+import { homedir as homedir56 } from "node:os";
+import { join as join92 } from "node:path";
 var ARTIFACT_ALLOWLIST = {
-  dockerComposePluginDir: (home2) => join91(home2, ".docker", "cli-plugins", "docker-compose"),
+  dockerComposePluginDir: (home2) => join92(home2, ".docker", "cli-plugins", "docker-compose"),
   stateSentinel: "/state"
 };
 function isStateBogusAutoDir(probe2) {
@@ -94200,7 +94560,7 @@ function isStateBogusAutoDir(probe2) {
   return true;
 }
 function planMountRepairs(probe2, opts = {}) {
-  const home2 = opts.hostHome ?? homedir55();
+  const home2 = opts.hostHome ?? homedir56();
   const items = [];
   const dockerComposePath = ARTIFACT_ALLOWLIST.dockerComposePluginDir(home2);
   const dockerComposeSt = probe2.lstat(dockerComposePath);