switchroom 0.19.32 → 0.19.33

package/dist/host-control/main.js

@@ -21210,7 +21210,7 @@ function allocateAgentUid(name) {
 }
 
 // src/build-info.ts
-var VERSION = "0.19.32";
+var VERSION = "0.19.33";
 
 // src/setup/hindsight-recall-tunables.ts
 var RECALL_DEADLINE_HEADROOM_SECONDS = 2;
@@ -21310,12 +21310,12 @@ function assertPositive(value, label) {
 var _warnedReads = new Set;
 
 // src/setup/hindsight-pg-defaults.ts
-var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 8 * 1024;
+var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 16 * 1024;
 var HINDSIGHT_PG_APP_ANON_MIB = 2560;
 var HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048;
 var HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB = HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION - HINDSIGHT_PG_APP_ANON_MIB - HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
-var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 1536;
-var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 4096;
+var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 3072;
+var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 7168;
 function pgMib(mib) {
   return `${mib}MB`;
 }
@@ -21490,7 +21490,17 @@ var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
 
 // src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
 ` + `
 ` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
 ` + `candidate a file path, a command/process/agent/session id, a temp directory, or
@@ -21507,6 +21517,9 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
 ` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
 ` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
 ` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
 ` + `  running) — retain the outcome only once the task completes or a decision is made.
 ` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
@@ -21529,8 +21542,12 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `  the fact is explicitly dated, in which case record it as a dated observation.
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list.";
+` + `nothing durable remains, return an empty facts list.
+`;
 var SUPERSEDED_RETAIN_MISSIONS = [
   "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
   "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
@@ -21577,7 +21594,96 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list."
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
+`
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
 ` + `
@@ -21764,7 +21870,7 @@ var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/host-control/server.ts
 import { createServer } from "node:net";
-import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process";
+import { spawn as spawn2, spawnSync as spawnSync4 } from "node:child_process";
 import { mkdir as mkdir2, chmod, chown, unlink, appendFile } from "node:fs/promises";
 import {
   readdirSync as readdirSync6,
@@ -27924,6 +28030,12 @@ function parseAuditLine(line) {
     entry.m = o.m;
   if (typeof o.prior_pin === "string")
     entry.prior_pin = o.prior_pin;
+  if (Array.isArray(o.prior_pin_observed) && o.prior_pin_observed.every((v) => typeof v === "string")) {
+    entry.prior_pin_observed = o.prior_pin_observed;
+  }
+  if (typeof o.prior_pin_source === "string") {
+    entry.prior_pin_source = o.prior_pin_source;
+  }
   return entry;
 }
 function latestRolloutRowForRequest(raw, requestId) {
@@ -27946,11 +28058,96 @@ function latestRolloutRowForRequest(raw, requestId) {
 // src/cli/deploy-version-guard.ts
 var DOCKER_INSPECT_TIMEOUT_MS = 60 * 1000;
 
+// src/cli/component-versions.ts
+var SEMVER_TAG_RE = /^v\d+\.\d+\.\d+$/;
+function versionFromImageRef(ref) {
+  const at = ref.indexOf("@");
+  const withoutDigest = at >= 0 ? ref.slice(0, at) : ref;
+  const slash = withoutDigest.lastIndexOf("/");
+  const colon = withoutDigest.indexOf(":", slash + 1);
+  if (colon < 0) {
+    return { version: null, detail: `image ref has no tag (${ref})` };
+  }
+  const tag = withoutDigest.slice(colon + 1);
+  if (SEMVER_TAG_RE.test(tag))
+    return { version: tag };
+  return { version: null, detail: `non-semver tag "${tag}"` };
+}
+function isSwitchroomReleaseImage(_name, imageRef) {
+  return /\/switchroom-[a-z0-9-]+(:|@|$)/.test(imageRef);
+}
+function collectContainerComponents(exec) {
+  const r = exec("docker", [
+    "ps",
+    "--filter",
+    "name=switchroom-",
+    "--format",
+    "{{.Names}}\t{{.Image}}"
+  ]);
+  if (r.status !== 0)
+    return [];
+  const out = [];
+  for (const line of r.stdout.split(`
+`)) {
+    const [name, imageRef] = line.trim().split("\t");
+    if (!name || !imageRef)
+      continue;
+    if (!isSwitchroomReleaseImage(name, imageRef))
+      continue;
+    const { version: version2, detail } = versionFromImageRef(imageRef);
+    out.push({
+      name,
+      kind: "container",
+      version: version2,
+      imageRef,
+      ...detail ? { detail } : {}
+    });
+  }
+  return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+function normalizeSemverTag(v) {
+  if (!v)
+    return null;
+  const tag = `v${v.trim().replace(/^v/, "")}`;
+  return SEMVER_TAG_RE.test(tag) ? tag : null;
+}
+
+// src/cli/component-scope.ts
+function imageRepoName(imageRef) {
+  if (!imageRef)
+    return null;
+  const at = imageRef.indexOf("@");
+  const withoutDigest = at >= 0 ? imageRef.slice(0, at) : imageRef;
+  const slash = withoutDigest.lastIndexOf("/");
+  if (slash < 0)
+    return null;
+  const afterSlash = withoutDigest.slice(slash + 1);
+  const colon = afterSlash.indexOf(":");
+  const repo = colon >= 0 ? afterSlash.slice(0, colon) : afterSlash;
+  return /^switchroom-[a-z0-9-]+$/.test(repo) ? repo : null;
+}
+function classifyComponent(c) {
+  if (c.kind === "cli")
+    return { kind: "cli" };
+  const repo = imageRepoName(c.imageRef);
+  switch (repo) {
+    case "switchroom-web":
+      return { kind: "web" };
+    case "switchroom-hostd":
+      return { kind: "hostd" };
+    case "switchroom-hindsight":
+      return { kind: "hindsight" };
+    case "switchroom-agent": {
+      const agent = c.name.startsWith("switchroom-") ? c.name.slice("switchroom-".length) : c.name;
+      return agent ? { kind: "fleet", agent } : { kind: "fleet" };
+    }
+    default:
+      return { kind: "fleet" };
+  }
+}
+
 // src/cli/rollout.ts
 var VERIFY_COMPONENTS_STEP = "verify-components";
-function isVersionAssertable(target) {
-  return /^v?\d+\.\d+\.\d+$/.test(target.trim());
-}
 var ROLLOUT_PHASE_SENTINEL = "SWITCHROOM_ROLLOUT_PHASE:";
 function parseRolloutPhaseLine(line) {
   const trimmed = line.trim();
@@ -28238,12 +28435,74 @@ function parseUpdateResultLine(stdout) {
   }
 }
 
+// src/host-control/prior-pin.ts
+import { spawnSync as spawnSync2 } from "node:child_process";
+function dockerFleetComponents(dockerBin) {
+  const bin = dockerBin ?? "docker";
+  try {
+    return collectContainerComponents((cmd, args) => {
+      const r = spawnSync2(cmd === "docker" ? bin : cmd, args, {
+        encoding: "utf-8",
+        timeout: 5000
+      });
+      return { status: r.status ?? 1, stdout: r.stdout ?? "" };
+    });
+  } catch {
+    return [];
+  }
+}
+function byVersionDesc(a, b) {
+  const cmp = compareReleaseTags(a, b);
+  if (cmp !== null && cmp !== 0)
+    return -cmp;
+  return b.localeCompare(a);
+}
+function resolvePriorPinFromFleet(components, target, scope) {
+  const normalizedTarget = normalizeSemverTag(target);
+  const scoped = new Set(scope ?? []);
+  const seen = new Set;
+  for (const c of components) {
+    if (c.kind !== "container")
+      continue;
+    const owner = classifyComponent(c);
+    if (owner.kind !== "fleet" || !owner.agent)
+      continue;
+    if (scoped.size > 0 && !scoped.has(owner.agent))
+      continue;
+    const v = normalizeSemverTag(c.version ?? undefined);
+    if (v)
+      seen.add(v);
+  }
+  const observed = [...seen].sort(byVersionDesc);
+  if (observed.length === 0)
+    return { prior_pin_source: "unobserved" };
+  const candidates = normalizedTarget ? observed.filter((v) => v !== normalizedTarget) : [...observed];
+  if (candidates.length === 0) {
+    return { prior_pin_source: "all-on-target", prior_pin_observed: observed };
+  }
+  if (candidates.length === 1 && observed.length === 1) {
+    return { prior_pin: candidates[0], prior_pin_source: "running-fleet" };
+  }
+  if (candidates.length === 1) {
+    return {
+      prior_pin: candidates[0],
+      prior_pin_source: "running-fleet",
+      prior_pin_observed: observed
+    };
+  }
+  return {
+    prior_pin: candidates[candidates.length - 1],
+    prior_pin_source: "running-fleet-mixed",
+    prior_pin_observed: observed
+  };
+}
+
 // src/host-control/config-edit-validator.ts
 var import_yaml5 = __toESM(require_dist(), 1);
 import { mkdtempSync, writeFileSync as writeFileSync5, rmSync as rmSync2, existsSync as existsSync14, readFileSync as readFileSync10 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join12, isAbsolute as isAbsolute3, normalize, basename as basename4 } from "node:path";
-import { spawnSync as spawnSync2 } from "node:child_process";
+import { spawnSync as spawnSync3 } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
 var MAX_PATCH_BYTES = 1024 * 1024;
 var UNLOCK_CARD_YAML_ALLOWLIST = new Set([
@@ -28404,10 +28663,10 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
       "--whitespace=nowarn",
       "--recount"
     ];
-    const checkP1 = spawnSync2(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p1", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+    const checkP1 = spawnSync3(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p1", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
     let pStrip = "-p1";
     if (checkP1.status !== 0) {
-      const checkP0 = spawnSync2(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p0", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+      const checkP0 = spawnSync3(bin, [...baseArgs.slice(0, 1), "--check", ...baseArgs.slice(1), "-p0", patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
       if (checkP0.status !== 0) {
         const stderr = (checkP1.stderr || "") + (checkP0.stderr || "");
         return {
@@ -28418,7 +28677,7 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
       }
       pStrip = "-p0";
     }
-    const real = spawnSync2(bin, [...baseArgs, pStrip, patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
+    const real = spawnSync3(bin, [...baseArgs, pStrip, patchFile], { cwd: scratchDir, encoding: "utf8", timeout: 1e4 });
     if (real.status !== 0) {
       return {
         ok: false,
@@ -29123,7 +29382,7 @@ function resolveDigests(imageRefs) {
   const out = new Map;
   for (const ref of imageRefs) {
     try {
-      const r = spawnSync3("docker", ["inspect", "--format={{index .RepoDigests 0}}", ref], { encoding: "utf-8", timeout: 5000 });
+      const r = spawnSync4("docker", ["inspect", "--format={{index .RepoDigests 0}}", ref], { encoding: "utf-8", timeout: 5000 });
       if (r.status !== 0)
         continue;
       const trimmed = (r.stdout ?? "").trim();
@@ -30049,14 +30308,7 @@ class HostdServer {
     if (args.allow_downgrade)
       argv.push("--allow-downgrade");
     const installCtx = readCachedInstallType(this.opts.bindRoot ?? this.opts.homeDir);
-    let priorPin;
-    try {
-      const cfg = loadConfig(this.opts.configPath);
-      const cfgPin = cfg.release?.pin;
-      if (cfgPin && isVersionAssertable(cfgPin)) {
-        priorPin = cfgPin.startsWith("v") ? cfgPin : `v${cfgPin}`;
-      }
-    } catch {}
+    const priorPin = resolvePriorPinFromFleet(this.fleetComponents(), args.pin, args.agents);
     const entry = {
       request_id,
       caller,
@@ -30072,7 +30324,9 @@ class HostdServer {
         install_type: installCtx.install_type,
         detected_at: installCtx.detected_at
       },
-      ...priorPin ? { prior_pin: priorPin } : {}
+      ...priorPin.prior_pin ? { prior_pin: priorPin.prior_pin } : {},
+      ...priorPin.prior_pin_observed ? { prior_pin_observed: priorPin.prior_pin_observed } : {},
+      prior_pin_source: priorPin.prior_pin_source
     };
     this.recordStatus(entry);
     this.fleetMutationInFlight = {
@@ -30800,6 +31054,9 @@ ${output.recovery.stderr}` : "";
       child.on("close", (code) => resolve10({ exit_code: code ?? -1, stdout, stderr }));
     });
   }
+  fleetComponents() {
+    return this.opts.fleetComponents ? this.opts.fleetComponents() : [];
+  }
   imageRefsForDigestCapture() {
     if (this.opts.imageRefsForDigests)
       return this.opts.imageRefsForDigests();
@@ -30807,7 +31064,7 @@ ${output.recovery.stderr}` : "";
       const composePath = join13(this.opts.bindRoot ?? this.opts.homeDir, ".switchroom", "compose", "docker-compose.yml");
       if (!existsSync15(composePath))
         return [];
-      const r = spawnSync3("docker", [
+      const r = spawnSync4("docker", [
         "compose",
         "-p",
         "switchroom",
@@ -30890,6 +31147,8 @@ ${output.recovery.stderr}` : "";
       }
       if (entry.result !== "completed") {
         delete entry.prior_pin;
+        delete entry.prior_pin_observed;
+        delete entry.prior_pin_source;
       }
     }).catch((err2) => {
       entry.result = "error";
@@ -30897,6 +31156,8 @@ ${output.recovery.stderr}` : "";
       entry.finished_at = Date.now();
       entry.error = err2.message;
       delete entry.prior_pin;
+      delete entry.prior_pin_observed;
+      delete entry.prior_pin_source;
     }).finally(() => {
       const pinNote = sentinelProvenOk ? this.clearProvenRolloutPinJournal(`rollout terminal ${entry.request_id}`, entry.started_at) : this.recoverRolloutPinJournal(`rollout terminal ${entry.request_id}`);
       if (pinNote)
@@ -30970,7 +31231,7 @@ ${pinNote}`.trim();
       return notes;
     }
     if (!priorPin) {
-      notes.push(`No automatic rollback: no prior version-assertable release.pin was ` + `recorded before this roll. Verify compose host-side ` + `(\`switchroom apply\`).`);
+      notes.push(`No automatic rollback: no prior version could be read off the running ` + `fleet when this roll started (every agent was already on the target, ` + `or no agent container reported a semver tag), so there is no restore ` + `target to name. Verify compose host-side (\`switchroom apply\`).`);
       return notes;
     }
     const applyRes = await this.runSwitchroom(["apply", "--pin", priorPin, "--compose-only", "--non-interactive"], { SWITCHROOM_HOSTD_CONTEXT: "1" });
@@ -32662,6 +32923,7 @@ async function main() {
   const server = new HostdServer({
     homeDir: homedir8(),
     agentUids,
+    fleetComponents: () => dockerFleetComponents(),
     config: {
       agents: Object.fromEntries(Object.entries(config.agents).map(([n, a]) => [
         n,

package/dist/vault/approvals/kernel-server.js

@@ -19287,12 +19287,12 @@ init_paths();
 var _warnedReads = new Set;
 
 // src/setup/hindsight-pg-defaults.ts
-var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 8 * 1024;
+var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 16 * 1024;
 var HINDSIGHT_PG_APP_ANON_MIB = 2560;
 var HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048;
 var HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB = HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION - HINDSIGHT_PG_APP_ANON_MIB - HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
-var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 1536;
-var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 4096;
+var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 3072;
+var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 7168;
 function pgMib(mib) {
   return `${mib}MB`;
 }
@@ -19467,7 +19467,17 @@ var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
 
 // src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
 ` + `
 ` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
 ` + `candidate a file path, a command/process/agent/session id, a temp directory, or
@@ -19484,6 +19494,9 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
 ` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
 ` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
 ` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
 ` + `  running) — retain the outcome only once the task completes or a decision is made.
 ` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
@@ -19506,8 +19519,12 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `  the fact is explicitly dated, in which case record it as a dated observation.
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list.";
+` + `nothing durable remains, return an empty facts list.
+`;
 var SUPERSEDED_RETAIN_MISSIONS = [
   "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
   "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
@@ -19554,7 +19571,96 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list."
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
+`
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
 ` + `