switchroom 0.19.32 → 0.19.33

package/dist/auth-broker/index.js

@@ -18486,12 +18486,12 @@ function assertPositive(value, label) {
 var _warnedReads = new Set;
 
 // src/setup/hindsight-pg-defaults.ts
-var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 8 * 1024;
+var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 16 * 1024;
 var HINDSIGHT_PG_APP_ANON_MIB = 2560;
 var HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048;
 var HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB = HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION - HINDSIGHT_PG_APP_ANON_MIB - HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
-var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 1536;
-var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 4096;
+var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 3072;
+var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 7168;
 function pgMib(mib) {
   return `${mib}MB`;
 }
@@ -18666,7 +18666,17 @@ var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
 
 // src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
 ` + `
 ` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
 ` + `candidate a file path, a command/process/agent/session id, a temp directory, or
@@ -18683,6 +18693,9 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
 ` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
 ` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
 ` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
 ` + `  running) — retain the outcome only once the task completes or a decision is made.
 ` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
@@ -18705,8 +18718,12 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `  the fact is explicitly dated, in which case record it as a dated observation.
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list.";
+` + `nothing durable remains, return an empty facts list.
+`;
 var SUPERSEDED_RETAIN_MISSIONS = [
   "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
   "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
@@ -18753,7 +18770,96 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list."
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
+`
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
 ` + `

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.32", COMMIT_SHA = "5ccce0a7";
+var VERSION = "0.19.33", COMMIT_SHA = "4ccbde6b";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -15789,9 +15789,9 @@ function hindsightPgEnv(overrides = new Map) {
   }
   return out;
 }
-var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION, HINDSIGHT_PG_APP_ANON_MIB = 2560, HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048, HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB, HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 1536, HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 4096, HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE", HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS", HINDSIGHT_PG_DEFAULTS, HINDSIGHT_PG_ENV_KEYS;
+var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION, HINDSIGHT_PG_APP_ANON_MIB = 2560, HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048, HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB, HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 3072, HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 7168, HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE", HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS", HINDSIGHT_PG_DEFAULTS, HINDSIGHT_PG_ENV_KEYS;
 var init_hindsight_pg_defaults = __esm(() => {
-  HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 8 * 1024;
+  HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 16 * 1024;
   HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB = HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION - HINDSIGHT_PG_APP_ANON_MIB - HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
   HINDSIGHT_PG_DEFAULTS = [
     [
@@ -16967,7 +16967,7 @@ async function ensureHindsightConsumer(configPath, account, uid = HINDSIGHT_DEFA
   atomicWriteFileSync2(configPath, tail, mode);
   return { added: true, reason: "added" };
 }
-var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_WORKER_ID = "switchroom-hindsight", HINDSIGHT_DATA_VOLUME = "switchroom-hindsight-data", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_LITELLM_MODEL = "openrouter/google/gemini-3.1-flash-lite", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_CREDS_MIRROR_VOLUME, HINDSIGHT_CRED_DIR = "/run/claude-creds", HINDSIGHT_RETAIN_CHUNK_SIZE = 3000, HINDSIGHT_DEFAULT_RETAIN_MAX_COMPLETION_TOKENS = 16384, HINDSIGHT_RETAIN_MIN_TOKENS_PER_SECOND = 80.6, HINDSIGHT_RETAIN_CLIENT_DEADLINE_S, HINDSIGHT_DEFAULT_MEM_LIMIT = "8g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD, DOCKER_PROBE_TIMEOUT_MS, defaultDockerProbe = (args) => {
+var HINDSIGHT_DEFAULT_API_PORT = 18888, HINDSIGHT_DEFAULT_UI_PORT = 9999, HINDSIGHT_DEFAULT_MCP_URL, HINDSIGHT_DEFAULT_API_BASE_URL, HINDSIGHT_CONSUMER_NAME = "hindsight", HINDSIGHT_DEFAULT_WORKER_ID = "switchroom-hindsight", HINDSIGHT_DATA_VOLUME = "switchroom-hindsight-data", HINDSIGHT_DEFAULT_UID = 11000, HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight", HINDSIGHT_IMAGE, HINDSIGHT_DEFAULT_MODEL = "claude-sonnet-5", HINDSIGHT_DEFAULT_LITELLM_MODEL = "openrouter/google/gemini-3.1-flash-lite", HINDSIGHT_DEFAULT_MCP_STATELESS = true, HINDSIGHT_BROKER_SOCK_VOLUME, HINDSIGHT_CREDS_MIRROR_VOLUME, HINDSIGHT_CRED_DIR = "/run/claude-creds", HINDSIGHT_RETAIN_CHUNK_SIZE = 3000, HINDSIGHT_DEFAULT_RETAIN_MAX_COMPLETION_TOKENS = 16384, HINDSIGHT_RETAIN_MIN_TOKENS_PER_SECOND = 80.6, HINDSIGHT_RETAIN_CLIENT_DEADLINE_S, HINDSIGHT_DEFAULT_MEM_LIMIT = "16g", HINDSIGHT_DEFAULT_MEM_RESERVATION = "4g", HINDSIGHT_DEFAULT_PIDS_LIMIT = 1000, HINDSIGHT_DEFAULT_SHM_SIZE = "2g", HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)', HINDSIGHT_HEALTHCHECK_CMD, DOCKER_PROBE_TIMEOUT_MS, defaultDockerProbe = (args) => {
   try {
     return execFileSync("docker", args, {
       stdio: "pipe",
@@ -17662,7 +17662,17 @@ var HINDSIGHT_SHIM_CLI_PATH = "/usr/local/bin/switchroom", HINDSIGHT_SHIM_AGENT_
 var init_hindsight2 = __esm(() => {
   init_users();
   init_hindsight();
-  DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable \u2014 record the preference (what the user likes, wants, or always does), not the request itself.
+  DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE \u2014 what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION \u2014 a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision \u2014 drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING \u2014 a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME \u2014 a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP \u2014 who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable \u2014 record the preference (what the user likes, wants, or always does), not the request itself.
 ` + `
 ` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
 ` + `candidate a file path, a command/process/agent/session id, a temp directory, or
@@ -17679,6 +17689,9 @@ var init_hindsight2 = __esm(() => {
 ` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
 ` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
 ` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work \u2014 including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
 ` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
 ` + `  running) \u2014 retain the outcome only once the task completes or a decision is made.
 ` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
@@ -17701,8 +17714,12 @@ var init_hindsight2 = __esm(() => {
 ` + `  the fact is explicitly dated, in which case record it as a dated observation.
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list.";
+` + `nothing durable remains, return an empty facts list.
+`;
   SUPERSEDED_RETAIN_MISSIONS = [
     "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
     "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
@@ -17749,7 +17766,96 @@ var init_hindsight2 = __esm(() => {
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list."
+` + "nothing durable remains, return an empty facts list.",
+    `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable \u2014 record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it \u2014 it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) \u2014 retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state \u2014 the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + "nothing durable remains, return an empty facts list.",
+    `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE \u2014 what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION \u2014 a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision \u2014 drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING \u2014 a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME \u2014 a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP \u2014 who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable \u2014 record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it \u2014 it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work \u2014 including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) \u2014 retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state \u2014 the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
+`
   ];
   DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
 ` + `
@@ -37563,6 +37669,34 @@ var init_via_claude = __esm(() => {
   ];
 });
 
+// src/cli/self-invoke.ts
+function isCompiledBinaryPath(scriptPath) {
+  if (!scriptPath)
+    return false;
+  return scriptPath.startsWith(BUNFS_POSIX_PREFIX) || BUNFS_WINDOWS_RE.test(scriptPath);
+}
+function resolveSelfInvocation(probe = {}) {
+  const execPath = probe.execPath ?? process.execPath;
+  const scriptPath = probe.scriptPath ?? process.argv[1] ?? "";
+  if (isCompiledBinaryPath(scriptPath)) {
+    if (execPath)
+      return { command: execPath, prefixArgs: [], compiled: true };
+    return { command: "switchroom", prefixArgs: [], compiled: true };
+  }
+  if (!execPath || !scriptPath) {
+    return { command: "switchroom", prefixArgs: [], compiled: false };
+  }
+  return { command: execPath, prefixArgs: [scriptPath], compiled: false };
+}
+function selfInvokeArgv(args, probe = {}) {
+  const inv = resolveSelfInvocation(probe);
+  return { command: inv.command, argv: [...inv.prefixArgs, ...args] };
+}
+var BUNFS_POSIX_PREFIX = "/$bunfs", BUNFS_WINDOWS_RE;
+var init_self_invoke = __esm(() => {
+  BUNFS_WINDOWS_RE = /^[a-z]:[/\\]~BUN[/\\]/i;
+});
+
 // src/vault/migrate-layout.ts
 import {
   copyFileSync as copyFileSync7,
@@ -39405,6 +39539,12 @@ function parseAuditLine2(line) {
     entry.m = o.m;
   if (typeof o.prior_pin === "string")
     entry.prior_pin = o.prior_pin;
+  if (Array.isArray(o.prior_pin_observed) && o.prior_pin_observed.every((v) => typeof v === "string")) {
+    entry.prior_pin_observed = o.prior_pin_observed;
+  }
+  if (typeof o.prior_pin_source === "string") {
+    entry.prior_pin_source = o.prior_pin_source;
+  }
   return entry;
 }
 function filterEntries(entries, filters) {
@@ -50611,12 +50751,13 @@ function findUnwritableAgentDirs(config, opts) {
   }
   return unwritable;
 }
-function buildSelfElevateArgv() {
+function buildSelfElevateArgv(probe2 = {}) {
   const passthrough = process.argv.slice(2);
+  const self = resolveSelfInvocation(probe2);
   return [
     `--preserve-env=${SELF_ELEVATE_PRESERVED_ENV.join(",")}`,
-    process.execPath,
-    process.argv[1] ?? "",
+    self.command,
+    ...self.prefixArgs,
     ...passthrough,
     "--skip-self-elevate"
   ];
@@ -50795,6 +50936,7 @@ var init_apply = __esm(() => {
   init_fleet_defaults();
   init_connection_health();
   init_update_prompt_hook();
+  init_self_invoke();
   init_compose();
   init_external_spend();
   init_write_compose();
@@ -77566,6 +77708,7 @@ function suggestVaultKeys(requested, available, max = 3) {
 // src/cli/vault-broker.ts
 init_loader();
 init_loader();
+init_self_invoke();
 init_client();
 import { readFileSync as readFileSync40, existsSync as existsSync44, unlinkSync as unlinkSync11 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
@@ -82024,11 +82167,11 @@ function registerVaultBrokerCommand(vaultCmd, program3) {
       console.log("  To unlock it: `switchroom vault broker unlock`.");
       process.exit(0);
     } else {
-      const self = process.argv[1];
       const args = ["vault", "broker", "start", "--foreground"];
       if (parentOpts.config)
         args.unshift("--config", parentOpts.config);
-      const child = spawn4(process.execPath, [self, ...args], {
+      const self = resolveSelfInvocation();
+      const child = spawn4(self.command, [...self.prefixArgs, ...args], {
         detached: true,
         stdio: "ignore"
       });
@@ -91795,6 +91938,7 @@ function defaultSelfUpdateIO() {
 }
 
 // src/cli/update.ts
+init_self_invoke();
 init_component_versions();
 function defaultPersistPin(configPath) {
   return (pin) => {
@@ -91867,6 +92011,11 @@ function planUpdate(opts) {
   const composePath = opts.composePath ?? DEFAULT_COMPOSE_PATH2;
   const runner = opts.runner ?? defaultRunner2;
   const scriptPath = opts.scriptPath ?? process.argv[1] ?? "";
+  const self = resolveSelfInvocation({
+    execPath: opts.execPath ?? process.execPath,
+    scriptPath
+  });
+  const selfArgv = (...args) => [...self.prefixArgs, ...args];
   const steps = [];
   const hostdContext = typeof opts.hostdContext === "boolean" ? opts.hostdContext : isHostdContext();
   steps.push({
@@ -91943,13 +92092,7 @@ function planUpdate(opts) {
       name: "regen-compose-for-release-override",
       description: "Regenerate compose with the --channel/--pin override so pull-images grabs the right tag",
       run: () => {
-        const r = runner(process.execPath, [
-          scriptPath,
-          "apply",
-          "--compose-only",
-          "--non-interactive",
-          ...releaseOverrideArgs
-        ]);
+        const r = runner(self.command, selfArgv("apply", "--compose-only", "--non-interactive", ...releaseOverrideArgs));
         if (r.status !== 0) {
           throw new Error("regen-compose-for-release-override failed");
         }
@@ -91999,13 +92142,7 @@ function planUpdate(opts) {
     name: "apply-config",
     description: "switchroom apply \u2014 refresh per-agent scaffolds + compose",
     run: () => {
-      const r = runner(process.execPath, [
-        scriptPath,
-        "apply",
-        "--non-interactive",
-        "--no-doctor",
-        ...releaseOverrideArgs
-      ]);
+      const r = runner(self.command, selfArgv("apply", "--non-interactive", "--no-doctor", ...releaseOverrideArgs));
       if (r.status !== 0)
         throw new Error("switchroom apply failed");
     }
@@ -92026,7 +92163,7 @@ function planUpdate(opts) {
     skipReason: !hostControlEnabled ? "host_control.enabled is not true \u2014 daemon not in use" : opts.skipImages ? "--skip-images flag set" : hostdContext ? "deferred (hostd-context): finish host-side via `switchroom hostd install` \u2014 update_apply cannot recreate its own hostd container without SIGKILLing itself (#2458)" : undefined,
     isHostdDeferred: hostControlEnabled && !opts.skipImages && hostdContext,
     run: () => {
-      const r = runner(process.execPath, [scriptPath, "hostd", "install"]);
+      const r = runner(self.command, selfArgv("hostd", "install"));
       if (r.status !== 0)
         throw new Error("switchroom hostd install failed");
     }
@@ -92047,7 +92184,7 @@ function planUpdate(opts) {
     skipReason: !webServiceManaged ? "web_service.managed is not true \u2014 web container not in use (legacy systemd unit)" : opts.skipImages ? "--skip-images flag set" : hostdContext ? "deferred (hostd-context): finish host-side via `switchroom webd install` \u2014 update_apply cannot recreate the web container without SIGKILLing the hostd container it shares a compose project with (#2458)" : undefined,
     isHostdDeferred: webServiceManaged && !opts.skipImages && hostdContext,
     run: () => {
-      const r = runner(process.execPath, [scriptPath, "webd", "install"]);
+      const r = runner(self.command, selfArgv("webd", "install"));
       if (r.status !== 0)
         throw new Error("switchroom webd install failed");
     }
@@ -92071,7 +92208,7 @@ function planUpdate(opts) {
       const setupArgs = ["memory", "setup", "--recreate"];
       if (pinTag)
         setupArgs.push("--tag", pinTag);
-      const r = runner(process.execPath, [scriptPath, ...setupArgs]);
+      const r = runner(self.command, selfArgv(...setupArgs));
       if (r.status !== 0)
         throw new Error("switchroom memory setup --recreate failed");
     }
@@ -92184,7 +92321,7 @@ function planUpdate(opts) {
     name: "doctor",
     description: "switchroom doctor \u2014 surface post-bounce diagnostics",
     run: () => {
-      runner(process.execPath, [scriptPath, "doctor"]);
+      runner(self.command, selfArgv("doctor"));
     }
   });
   return steps;
@@ -92720,6 +92857,7 @@ function recoverPinJournal(configPath, opts = {}) {
 
 // src/cli/rollout.ts
 init_operator_uid();
+init_self_invoke();
 init_atomic();
 init_resolve_version();
 init_audit_reader();
@@ -93155,6 +93293,10 @@ function createRolloutDeps(params) {
   const { configPath, scriptPath, hostdCtx } = params;
   const spawn6 = params.spawn ?? spawnSync18;
   const warn = params.warn ?? ((line) => process.stderr.write(line));
+  const self = resolveSelfInvocation({
+    execPath: params.execPath ?? process.execPath,
+    scriptPath
+  });
   const dockerRun = (args) => {
     let r;
     try {
@@ -93189,7 +93331,7 @@ function createRolloutDeps(params) {
   };
   return {
     run: (args, opts) => {
-      const r = spawn6(process.execPath, [scriptPath, ...args], {
+      const r = spawn6(self.command, [...self.prefixArgs, ...args], {
         stdio: "inherit",
         env: opts?.env ? { ...process.env, ...opts.env } : process.env,
         timeout: ROLLOUT_RUN_TIMEOUT_MS,
@@ -93351,7 +93493,7 @@ function registerRolloutCommand(program3) {
       return;
     }
     const configPath = getConfigPath(program3);
-    const scriptPath = process.argv[1] ?? "switchroom";
+    const scriptPath = process.argv[1] ?? "";
     const deps = createRolloutDeps({ configPath, scriptPath, hostdCtx });
     process.stdout.write(`${opts.allowDowngrade ? "Rolling back" : "Rolling"} ${requested.length} agent(s) to ${target}\u2026
 `);
@@ -101008,6 +101150,7 @@ function scanBundleForSecrets(files) {
 // src/cli/skill.ts
 init_loader();
 init_helpers();
+init_self_invoke();
 init_source();
 var SKILL_NAME_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/;
 var SH_SCRIPT_RE2 = /^scripts\/[A-Za-z0-9_.-]+\.sh$/;
@@ -101346,9 +101489,9 @@ function registerSkillCommand(program3) {
     writePayload(poolDir, name, files);
     console.log(source_default.green(`
 \u2713 Wrote ${name} to ${currentDir}`));
-    const applyBin = process.argv[1] ?? "switchroom";
+    const self = selfInvokeArgv(["apply", "--non-interactive"]);
     console.log(source_default.gray(`Running \`switchroom apply --non-interactive\`...`));
-    const r = spawnSync20(process.argv0, [applyBin, "apply", "--non-interactive"], { stdio: "inherit" });
+    const r = spawnSync20(self.command, self.argv, { stdio: "inherit" });
     if (r.status !== 0) {
       console.error(source_default.yellow(`(warning: \`switchroom apply\` exited ${r.status} \u2014 skill is ` + `in the pool but symlinks may not be refreshed. Re-run manually.)`));
     }