switchroom 0.19.32 → 0.19.34

package/dist/vault/approvals/kernel-server.js

@@ -4012,6 +4012,410 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// src/vault/broker/peercred-ffi.ts
+function getPeerCred(fd) {
+  if (process.platform !== "linux")
+    return null;
+  try {
+    const ffi = __require("bun:ffi");
+    const { dlopen, FFIType, ptr } = ffi;
+    const SOL_SOCKET = 1;
+    const SO_PEERCRED = 17;
+    const UCRED_SIZE = 12;
+    const cache = getPeerCred;
+    const lib = cache._lib ?? (() => {
+      const candidates = ["libc.so.6", "libc.so"];
+      const symbolSpec = {
+        getsockopt: {
+          args: [FFIType.i32, FFIType.i32, FFIType.i32, FFIType.ptr, FFIType.ptr],
+          returns: FFIType.i32
+        }
+      };
+      const errors2 = [];
+      for (const name of candidates) {
+        try {
+          const opened = dlopen(name, symbolSpec);
+          cache._lib = opened;
+          return opened;
+        } catch (e) {
+          errors2.push(`${name}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      }
+      process.stderr.write(`[vault-broker] peercred-ffi: dlopen failed for all libc candidates ` + `(${errors2.join("; ")}); falling back to ss-parsing.
+`);
+      throw new Error("no libc candidate could be opened");
+    })();
+    const credBuf = new ArrayBuffer(UCRED_SIZE);
+    const lenBuf = new Uint32Array(1);
+    lenBuf[0] = UCRED_SIZE;
+    const rc = lib.symbols.getsockopt(fd, SOL_SOCKET, SO_PEERCRED, ptr(credBuf), ptr(lenBuf.buffer));
+    if (rc !== 0)
+      return null;
+    if (lenBuf[0] !== UCRED_SIZE)
+      return null;
+    const view = new DataView(credBuf);
+    return {
+      pid: view.getInt32(0, true),
+      uid: view.getInt32(4, true),
+      gid: view.getInt32(8, true)
+    };
+  } catch {
+    return null;
+  }
+}
+// src/vault/broker/peercred.ts
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+var RESERVED_AGENT_NAMES;
+var init_peercred = __esm(() => {
+  RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+});
+
+// src/vault/broker/protocol.ts
+function decodeRequest(line) {
+  if (Buffer.byteLength(line, "utf8") > MAX_FRAME_BYTES) {
+    throw new RangeError(`Request frame too large (${Buffer.byteLength(line, "utf8")} bytes; max ${MAX_FRAME_BYTES})`);
+  }
+  const obj = JSON.parse(line);
+  return RequestSchema.parse(obj);
+}
+function encodeResponse(resp) {
+  const json = JSON.stringify(resp);
+  if (Buffer.byteLength(json, "utf8") > MAX_FRAME_BYTES) {
+    throw new Error(`Response frame too large (${Buffer.byteLength(json, "utf8")} bytes; max ${MAX_FRAME_BYTES})`);
+  }
+  return json + `
+`;
+}
+function errorResponse(code, msg) {
+  return { ok: false, code, msg };
+}
+var MAX_FRAME_BYTES, AgentNameSchema, GetRequestSchema, PutRequestSchema, ListRequestSchema, MintGrantRequestSchema, ListGrantsRequestSchema, RevokeGrantRequestSchema, StatusRequestSchema, LockRequestSchema, PreflightAccessRequestSchema, OkPreflightAccessResponseSchema, ApprovalRequestRequestSchema, ApprovalLookupRequestSchema, ApprovalLookupByRequestRequestSchema, ApprovalConsumeRequestSchema, ApprovalRevokeRequestSchema, ApprovalListRequestSchema, ApprovalDecisionModeSchema, ApprovalRecordRequestSchema, ApprovalConsumeRecordRequestSchema, RequestSchema, VaultEntrySchema, ErrorCode, OkEntryResponseSchema, OkKeysResponseSchema, BrokerStatus, OkStatusResponseSchema, OkLockResponseSchema, OkPutResponseSchema, OkMintGrantResponseSchema, GrantMetaSchema, OkListGrantsResponseSchema, OkRevokeGrantResponseSchema, OkApprovalRequestResponseSchema, ApprovalDecisionMetaSchema, OkApprovalLookupResponseSchema, OkApprovalConsumeResponseSchema, OkApprovalRevokeResponseSchema, OkApprovalListResponseSchema, OkApprovalRecordResponseSchema, OkApprovalConsumeRecordResponseSchema, ErrorResponseSchema, ResponseSchema;
+var init_protocol = __esm(() => {
+  init_zod();
+  init_peercred();
+  MAX_FRAME_BYTES = 64 * 1024;
+  AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
+    message: "agent name is reserved"
+  });
+  GetRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("get"),
+    key: exports_external.string().min(1),
+    filename: exports_external.string().optional(),
+    token: exports_external.string().optional()
+  });
+  PutRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("put"),
+    key: exports_external.string().min(1),
+    entry: exports_external.union([
+      exports_external.object({ kind: exports_external.literal("string"), value: exports_external.string() }),
+      exports_external.object({ kind: exports_external.literal("binary"), value: exports_external.string() })
+    ]),
+    token: exports_external.string().optional(),
+    passphrase: exports_external.string().optional(),
+    attest_via_posture: exports_external.boolean().optional()
+  });
+  ListRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("list"),
+    token: exports_external.string().optional()
+  });
+  MintGrantRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("mint_grant"),
+    agent: AgentNameSchema,
+    keys: exports_external.array(exports_external.string().min(1)),
+    ttl_seconds: exports_external.number().int().positive().nullable(),
+    description: exports_external.string().optional(),
+    write_keys: exports_external.array(exports_external.string().min(1)).optional(),
+    passphrase: exports_external.string().optional(),
+    attest_via_posture: exports_external.boolean().optional(),
+    decision_id: exports_external.string().optional()
+  });
+  ListGrantsRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("list_grants"),
+    agent: AgentNameSchema.optional(),
+    passphrase: exports_external.string().optional(),
+    attest_via_posture: exports_external.boolean().optional()
+  });
+  RevokeGrantRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("revoke_grant"),
+    id: exports_external.string().min(1)
+  });
+  StatusRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("status")
+  });
+  LockRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("lock")
+  });
+  PreflightAccessRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("preflight_access"),
+    agent: AgentNameSchema,
+    keys: exports_external.array(exports_external.string().min(1)).min(1).max(128)
+  });
+  OkPreflightAccessResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    op: exports_external.literal("preflight_access"),
+    results: exports_external.array(exports_external.object({
+      key: exports_external.string(),
+      exists: exports_external.boolean(),
+      acl_ok: exports_external.boolean(),
+      acl_reason: exports_external.string().optional(),
+      scope_ok: exports_external.boolean(),
+      scope_reason: exports_external.string().optional()
+    }))
+  });
+  ApprovalRequestRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_request"),
+    agent_unit: exports_external.string().min(1),
+    scope: exports_external.string().min(1),
+    action: exports_external.string().min(1),
+    approver_set: exports_external.array(exports_external.string()),
+    why: exports_external.string().optional(),
+    ttl_ms: exports_external.number().int().positive().optional()
+  });
+  ApprovalLookupRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_lookup"),
+    agent_unit: exports_external.string().min(1),
+    scope: exports_external.string().min(1),
+    action: exports_external.string().min(1),
+    current_approver_set: exports_external.array(exports_external.string())
+  });
+  ApprovalLookupByRequestRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_lookup_by_request"),
+    agent_unit: exports_external.string().min(1),
+    request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
+    current_approver_set: exports_external.array(exports_external.string())
+  });
+  ApprovalConsumeRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_consume"),
+    request_id: exports_external.string().regex(/^[0-9a-f]{32}$/)
+  });
+  ApprovalRevokeRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_revoke"),
+    decision_id: exports_external.string().min(1),
+    actor: exports_external.string().min(1),
+    reason: exports_external.string().optional()
+  });
+  ApprovalListRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_list"),
+    agent_unit: exports_external.string().optional()
+  });
+  ApprovalDecisionModeSchema = exports_external.enum([
+    "allow_once",
+    "allow_always",
+    "allow_ttl",
+    "deny",
+    "deny_perm"
+  ]);
+  ApprovalRecordRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_record"),
+    request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
+    decision: ApprovalDecisionModeSchema,
+    approver_set: exports_external.array(exports_external.string()),
+    granted_by_user_id: exports_external.number().int(),
+    ttl_ms: exports_external.number().int().positive().nullable().optional()
+  });
+  ApprovalConsumeRecordRequestSchema = exports_external.object({
+    v: exports_external.literal(1),
+    op: exports_external.literal("approval_consume_record"),
+    request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
+    decision: ApprovalDecisionModeSchema,
+    approver_set: exports_external.array(exports_external.string()),
+    granted_by_user_id: exports_external.number().int(),
+    ttl_ms: exports_external.number().int().positive().nullable().optional()
+  });
+  RequestSchema = exports_external.discriminatedUnion("op", [
+    GetRequestSchema,
+    PutRequestSchema,
+    ListRequestSchema,
+    StatusRequestSchema,
+    LockRequestSchema,
+    PreflightAccessRequestSchema,
+    MintGrantRequestSchema,
+    ListGrantsRequestSchema,
+    RevokeGrantRequestSchema,
+    ApprovalRequestRequestSchema,
+    ApprovalLookupRequestSchema,
+    ApprovalLookupByRequestRequestSchema,
+    ApprovalConsumeRequestSchema,
+    ApprovalRevokeRequestSchema,
+    ApprovalListRequestSchema,
+    ApprovalRecordRequestSchema,
+    ApprovalConsumeRecordRequestSchema
+  ]);
+  VaultEntrySchema = exports_external.union([
+    exports_external.object({ kind: exports_external.literal("string"), value: exports_external.string() }),
+    exports_external.object({ kind: exports_external.literal("binary"), value: exports_external.string() }),
+    exports_external.object({
+      kind: exports_external.literal("files"),
+      files: exports_external.record(exports_external.string(), exports_external.object({
+        encoding: exports_external.enum(["utf8", "base64"]),
+        value: exports_external.string()
+      }))
+    })
+  ]);
+  ErrorCode = exports_external.enum([
+    "LOCKED",
+    "DENIED",
+    "UNKNOWN_KEY",
+    "BAD_REQUEST",
+    "INTERNAL",
+    "AUDIT_UNAVAILABLE"
+  ]);
+  OkEntryResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    entry: VaultEntrySchema
+  });
+  OkKeysResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    keys: exports_external.array(exports_external.string())
+  });
+  BrokerStatus = exports_external.object({
+    unlocked: exports_external.boolean(),
+    keyCount: exports_external.number().int().nonnegative(),
+    uptimeSec: exports_external.number().nonnegative()
+  });
+  OkStatusResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    status: BrokerStatus
+  });
+  OkLockResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    locked: exports_external.literal(true)
+  });
+  OkPutResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    put: exports_external.literal(true),
+    key: exports_external.string()
+  });
+  OkMintGrantResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    token: exports_external.string(),
+    id: exports_external.string(),
+    expires_at: exports_external.number().nullable()
+  });
+  GrantMetaSchema = exports_external.object({
+    id: exports_external.string(),
+    agent_slug: exports_external.string(),
+    key_allow: exports_external.array(exports_external.string()),
+    write_allow: exports_external.array(exports_external.string()).default([]),
+    expires_at: exports_external.number().nullable(),
+    created_at: exports_external.number(),
+    description: exports_external.string().nullable()
+  });
+  OkListGrantsResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    grants: exports_external.array(GrantMetaSchema)
+  });
+  OkRevokeGrantResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    revoked: exports_external.boolean()
+  });
+  OkApprovalRequestResponseSchema = exports_external.discriminatedUnion("state", [
+    exports_external.object({
+      ok: exports_external.literal(true),
+      kind: exports_external.literal("approval_request"),
+      state: exports_external.literal("pending"),
+      request_id: exports_external.string(),
+      expires_at: exports_external.number()
+    }),
+    exports_external.object({
+      ok: exports_external.literal(true),
+      kind: exports_external.literal("approval_request"),
+      state: exports_external.literal("rate_limited"),
+      retry_after_ms: exports_external.number()
+    })
+  ]);
+  ApprovalDecisionMetaSchema = exports_external.object({
+    id: exports_external.string(),
+    agent_unit: exports_external.string(),
+    scope: exports_external.string(),
+    action: exports_external.string(),
+    decision: ApprovalDecisionModeSchema,
+    granted_at: exports_external.number(),
+    granted_by_user_id: exports_external.number(),
+    ttl_expires_at: exports_external.number().nullable(),
+    last_used_at: exports_external.number().nullable(),
+    revoked_at: exports_external.number().nullable(),
+    revoke_reason: exports_external.string().nullable(),
+    origin: exports_external.enum(["agent", "operator"]).optional()
+  });
+  OkApprovalLookupResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    state: exports_external.enum(["granted", "denied", "pending", "expired", "drift_revoked", "no_decision"]),
+    decision: ApprovalDecisionMetaSchema.nullable().optional()
+  });
+  OkApprovalConsumeResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    consumed: exports_external.boolean(),
+    agent_unit: exports_external.string().optional(),
+    scope: exports_external.string().optional(),
+    action: exports_external.string().optional(),
+    why: exports_external.string().nullable().optional()
+  });
+  OkApprovalRevokeResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    revoked: exports_external.boolean()
+  });
+  OkApprovalListResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    decisions: exports_external.array(ApprovalDecisionMetaSchema)
+  });
+  OkApprovalRecordResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    decision_id: exports_external.string()
+  });
+  OkApprovalConsumeRecordResponseSchema = exports_external.object({
+    ok: exports_external.literal(true),
+    consumed: exports_external.boolean(),
+    decision_id: exports_external.string().optional(),
+    agent_unit: exports_external.string().optional(),
+    scope: exports_external.string().optional(),
+    action: exports_external.string().optional(),
+    why: exports_external.string().nullable().optional()
+  });
+  ErrorResponseSchema = exports_external.object({
+    ok: exports_external.literal(false),
+    code: ErrorCode,
+    msg: exports_external.string()
+  });
+  ResponseSchema = exports_external.union([
+    OkEntryResponseSchema,
+    OkKeysResponseSchema,
+    OkStatusResponseSchema,
+    OkLockResponseSchema,
+    OkPreflightAccessResponseSchema,
+    OkPutResponseSchema,
+    OkMintGrantResponseSchema,
+    OkListGrantsResponseSchema,
+    OkRevokeGrantResponseSchema,
+    OkApprovalRequestResponseSchema,
+    OkApprovalLookupResponseSchema,
+    OkApprovalConsumeResponseSchema,
+    OkApprovalRevokeResponseSchema,
+    OkApprovalListResponseSchema,
+    OkApprovalRecordResponseSchema,
+    OkApprovalConsumeRecordResponseSchema,
+    ErrorResponseSchema
+  ]);
+});
+
 // src/memory/observation-scopes.ts
 var OBSERVATION_SCOPES;
 var init_observation_scopes = __esm(() => {
@@ -4432,6 +4836,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback — switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) → autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit — switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or — strongly preferred " + "— a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
       model: exports_external.string().min(1).optional().describe("Hindsight LLM model (upstream `HINDSIGHT_API_LLM_MODEL`). Defaults " + "to HINDSIGHT_DEFAULT_MODEL. Any model your LiteLLM proxy can route " + "is valid, e.g. `openrouter/z-ai/glm-5.2` when routing through the " + "fleet proxy. With provider=claude-code this value is ALSO exported " + "as `ANTHROPIC_MODEL` to the claude subprocess. Serves as the GLOBAL " + "default for every op absent a per-op override."),
@@ -18310,412 +18715,49 @@ var require_lib = __commonJS((exports, module) => {
   }
 });
 
+// src/vault/flock.ts
+var init_flock = () => {};
+
+// src/vault/vault.ts
+var KNOWN_VAULT_ARTIFACT_NAMES, SCRYPT_MAXMEM;
+var init_vault = __esm(() => {
+  init_flock();
+  KNOWN_VAULT_ARTIFACT_NAMES = new Set([
+    "vault.enc",
+    "vault.enc.bak",
+    "vault.enc.tmp",
+    "vault.enc.lock",
+    ".vault.enc.symlink-tmp"
+  ]);
+  SCRYPT_MAXMEM = 128 * 1024 * 1024;
+});
+// src/vault/broker/client.ts
+import { homedir as homedir3 } from "node:os";
+import { join as join3 } from "node:path";
+var LEGACY_SOCKET_PATH, OPERATOR_SOCKET_PATH;
+var init_client = __esm(() => {
+  init_protocol();
+  init_peercred();
+  LEGACY_SOCKET_PATH = join3(homedir3(), ".switchroom", "vault-broker.sock");
+  OPERATOR_SOCKET_PATH = join3(homedir3(), ".switchroom", "broker-operator", "sock");
+});
+
+// src/vault/resolver.ts
+var materializedDirs;
+var init_resolver = __esm(() => {
+  init_vault();
+  init_loader();
+  init_client();
+  materializedDirs = new Set;
+});
+
 // src/vault/approvals/kernel-server.ts
+init_protocol();
 import * as net from "node:net";
 import { mkdirSync as mkdirSync2, chmodSync, chownSync, existsSync as existsSync5, unlinkSync, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
 import { dirname as dirname2, resolve as resolve6, basename as basename2 } from "node:path";
 import { Database } from "bun:sqlite";
 
-// src/vault/broker/protocol.ts
-init_zod();
-
-// src/vault/broker/peercred-ffi.ts
-function getPeerCred(fd) {
-  if (process.platform !== "linux")
-    return null;
-  try {
-    const ffi = __require("bun:ffi");
-    const { dlopen, FFIType, ptr } = ffi;
-    const SOL_SOCKET = 1;
-    const SO_PEERCRED = 17;
-    const UCRED_SIZE = 12;
-    const cache = getPeerCred;
-    const lib = cache._lib ?? (() => {
-      const candidates = ["libc.so.6", "libc.so"];
-      const symbolSpec = {
-        getsockopt: {
-          args: [FFIType.i32, FFIType.i32, FFIType.i32, FFIType.ptr, FFIType.ptr],
-          returns: FFIType.i32
-        }
-      };
-      const errors2 = [];
-      for (const name of candidates) {
-        try {
-          const opened = dlopen(name, symbolSpec);
-          cache._lib = opened;
-          return opened;
-        } catch (e) {
-          errors2.push(`${name}: ${e instanceof Error ? e.message : String(e)}`);
-        }
-      }
-      process.stderr.write(`[vault-broker] peercred-ffi: dlopen failed for all libc candidates ` + `(${errors2.join("; ")}); falling back to ss-parsing.
-`);
-      throw new Error("no libc candidate could be opened");
-    })();
-    const credBuf = new ArrayBuffer(UCRED_SIZE);
-    const lenBuf = new Uint32Array(1);
-    lenBuf[0] = UCRED_SIZE;
-    const rc = lib.symbols.getsockopt(fd, SOL_SOCKET, SO_PEERCRED, ptr(credBuf), ptr(lenBuf.buffer));
-    if (rc !== 0)
-      return null;
-    if (lenBuf[0] !== UCRED_SIZE)
-      return null;
-    const view = new DataView(credBuf);
-    return {
-      pid: view.getInt32(0, true),
-      uid: view.getInt32(4, true),
-      gid: view.getInt32(8, true)
-    };
-  } catch {
-    return null;
-  }
-}
-
-// src/vault/broker/peercred.ts
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function isReservedAgentName(name) {
-  return RESERVED_AGENT_NAMES.has(name);
-}
-
-// src/vault/broker/protocol.ts
-var MAX_FRAME_BYTES = 64 * 1024;
-var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
-  message: "agent name is reserved"
-});
-var GetRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("get"),
-  key: exports_external.string().min(1),
-  filename: exports_external.string().optional(),
-  token: exports_external.string().optional()
-});
-var PutRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("put"),
-  key: exports_external.string().min(1),
-  entry: exports_external.union([
-    exports_external.object({ kind: exports_external.literal("string"), value: exports_external.string() }),
-    exports_external.object({ kind: exports_external.literal("binary"), value: exports_external.string() })
-  ]),
-  token: exports_external.string().optional(),
-  passphrase: exports_external.string().optional(),
-  attest_via_posture: exports_external.boolean().optional()
-});
-var ListRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("list"),
-  token: exports_external.string().optional()
-});
-var MintGrantRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("mint_grant"),
-  agent: AgentNameSchema,
-  keys: exports_external.array(exports_external.string().min(1)),
-  ttl_seconds: exports_external.number().int().positive().nullable(),
-  description: exports_external.string().optional(),
-  write_keys: exports_external.array(exports_external.string().min(1)).optional(),
-  passphrase: exports_external.string().optional(),
-  attest_via_posture: exports_external.boolean().optional(),
-  decision_id: exports_external.string().optional()
-});
-var ListGrantsRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("list_grants"),
-  agent: AgentNameSchema.optional(),
-  passphrase: exports_external.string().optional(),
-  attest_via_posture: exports_external.boolean().optional()
-});
-var RevokeGrantRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("revoke_grant"),
-  id: exports_external.string().min(1)
-});
-var StatusRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("status")
-});
-var LockRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("lock")
-});
-var PreflightAccessRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("preflight_access"),
-  agent: AgentNameSchema,
-  keys: exports_external.array(exports_external.string().min(1)).min(1).max(128)
-});
-var OkPreflightAccessResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  op: exports_external.literal("preflight_access"),
-  results: exports_external.array(exports_external.object({
-    key: exports_external.string(),
-    exists: exports_external.boolean(),
-    acl_ok: exports_external.boolean(),
-    acl_reason: exports_external.string().optional(),
-    scope_ok: exports_external.boolean(),
-    scope_reason: exports_external.string().optional()
-  }))
-});
-var ApprovalRequestRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_request"),
-  agent_unit: exports_external.string().min(1),
-  scope: exports_external.string().min(1),
-  action: exports_external.string().min(1),
-  approver_set: exports_external.array(exports_external.string()),
-  why: exports_external.string().optional(),
-  ttl_ms: exports_external.number().int().positive().optional()
-});
-var ApprovalLookupRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_lookup"),
-  agent_unit: exports_external.string().min(1),
-  scope: exports_external.string().min(1),
-  action: exports_external.string().min(1),
-  current_approver_set: exports_external.array(exports_external.string())
-});
-var ApprovalLookupByRequestRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_lookup_by_request"),
-  agent_unit: exports_external.string().min(1),
-  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
-  current_approver_set: exports_external.array(exports_external.string())
-});
-var ApprovalConsumeRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_consume"),
-  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/)
-});
-var ApprovalRevokeRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_revoke"),
-  decision_id: exports_external.string().min(1),
-  actor: exports_external.string().min(1),
-  reason: exports_external.string().optional()
-});
-var ApprovalListRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_list"),
-  agent_unit: exports_external.string().optional()
-});
-var ApprovalDecisionModeSchema = exports_external.enum([
-  "allow_once",
-  "allow_always",
-  "allow_ttl",
-  "deny",
-  "deny_perm"
-]);
-var ApprovalRecordRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_record"),
-  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
-  decision: ApprovalDecisionModeSchema,
-  approver_set: exports_external.array(exports_external.string()),
-  granted_by_user_id: exports_external.number().int(),
-  ttl_ms: exports_external.number().int().positive().nullable().optional()
-});
-var ApprovalConsumeRecordRequestSchema = exports_external.object({
-  v: exports_external.literal(1),
-  op: exports_external.literal("approval_consume_record"),
-  request_id: exports_external.string().regex(/^[0-9a-f]{32}$/),
-  decision: ApprovalDecisionModeSchema,
-  approver_set: exports_external.array(exports_external.string()),
-  granted_by_user_id: exports_external.number().int(),
-  ttl_ms: exports_external.number().int().positive().nullable().optional()
-});
-var RequestSchema = exports_external.discriminatedUnion("op", [
-  GetRequestSchema,
-  PutRequestSchema,
-  ListRequestSchema,
-  StatusRequestSchema,
-  LockRequestSchema,
-  PreflightAccessRequestSchema,
-  MintGrantRequestSchema,
-  ListGrantsRequestSchema,
-  RevokeGrantRequestSchema,
-  ApprovalRequestRequestSchema,
-  ApprovalLookupRequestSchema,
-  ApprovalLookupByRequestRequestSchema,
-  ApprovalConsumeRequestSchema,
-  ApprovalRevokeRequestSchema,
-  ApprovalListRequestSchema,
-  ApprovalRecordRequestSchema,
-  ApprovalConsumeRecordRequestSchema
-]);
-var VaultEntrySchema = exports_external.union([
-  exports_external.object({ kind: exports_external.literal("string"), value: exports_external.string() }),
-  exports_external.object({ kind: exports_external.literal("binary"), value: exports_external.string() }),
-  exports_external.object({
-    kind: exports_external.literal("files"),
-    files: exports_external.record(exports_external.string(), exports_external.object({
-      encoding: exports_external.enum(["utf8", "base64"]),
-      value: exports_external.string()
-    }))
-  })
-]);
-var ErrorCode = exports_external.enum([
-  "LOCKED",
-  "DENIED",
-  "UNKNOWN_KEY",
-  "BAD_REQUEST",
-  "INTERNAL",
-  "AUDIT_UNAVAILABLE"
-]);
-var OkEntryResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  entry: VaultEntrySchema
-});
-var OkKeysResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  keys: exports_external.array(exports_external.string())
-});
-var BrokerStatus = exports_external.object({
-  unlocked: exports_external.boolean(),
-  keyCount: exports_external.number().int().nonnegative(),
-  uptimeSec: exports_external.number().nonnegative()
-});
-var OkStatusResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  status: BrokerStatus
-});
-var OkLockResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  locked: exports_external.literal(true)
-});
-var OkPutResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  put: exports_external.literal(true),
-  key: exports_external.string()
-});
-var OkMintGrantResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  token: exports_external.string(),
-  id: exports_external.string(),
-  expires_at: exports_external.number().nullable()
-});
-var GrantMetaSchema = exports_external.object({
-  id: exports_external.string(),
-  agent_slug: exports_external.string(),
-  key_allow: exports_external.array(exports_external.string()),
-  write_allow: exports_external.array(exports_external.string()).default([]),
-  expires_at: exports_external.number().nullable(),
-  created_at: exports_external.number(),
-  description: exports_external.string().nullable()
-});
-var OkListGrantsResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  grants: exports_external.array(GrantMetaSchema)
-});
-var OkRevokeGrantResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  revoked: exports_external.boolean()
-});
-var OkApprovalRequestResponseSchema = exports_external.discriminatedUnion("state", [
-  exports_external.object({
-    ok: exports_external.literal(true),
-    kind: exports_external.literal("approval_request"),
-    state: exports_external.literal("pending"),
-    request_id: exports_external.string(),
-    expires_at: exports_external.number()
-  }),
-  exports_external.object({
-    ok: exports_external.literal(true),
-    kind: exports_external.literal("approval_request"),
-    state: exports_external.literal("rate_limited"),
-    retry_after_ms: exports_external.number()
-  })
-]);
-var ApprovalDecisionMetaSchema = exports_external.object({
-  id: exports_external.string(),
-  agent_unit: exports_external.string(),
-  scope: exports_external.string(),
-  action: exports_external.string(),
-  decision: ApprovalDecisionModeSchema,
-  granted_at: exports_external.number(),
-  granted_by_user_id: exports_external.number(),
-  ttl_expires_at: exports_external.number().nullable(),
-  last_used_at: exports_external.number().nullable(),
-  revoked_at: exports_external.number().nullable(),
-  revoke_reason: exports_external.string().nullable(),
-  origin: exports_external.enum(["agent", "operator"]).optional()
-});
-var OkApprovalLookupResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  state: exports_external.enum(["granted", "denied", "pending", "expired", "drift_revoked", "no_decision"]),
-  decision: ApprovalDecisionMetaSchema.nullable().optional()
-});
-var OkApprovalConsumeResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  consumed: exports_external.boolean(),
-  agent_unit: exports_external.string().optional(),
-  scope: exports_external.string().optional(),
-  action: exports_external.string().optional(),
-  why: exports_external.string().nullable().optional()
-});
-var OkApprovalRevokeResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  revoked: exports_external.boolean()
-});
-var OkApprovalListResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  decisions: exports_external.array(ApprovalDecisionMetaSchema)
-});
-var OkApprovalRecordResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  decision_id: exports_external.string()
-});
-var OkApprovalConsumeRecordResponseSchema = exports_external.object({
-  ok: exports_external.literal(true),
-  consumed: exports_external.boolean(),
-  decision_id: exports_external.string().optional(),
-  agent_unit: exports_external.string().optional(),
-  scope: exports_external.string().optional(),
-  action: exports_external.string().optional(),
-  why: exports_external.string().nullable().optional()
-});
-var ErrorResponseSchema = exports_external.object({
-  ok: exports_external.literal(false),
-  code: ErrorCode,
-  msg: exports_external.string()
-});
-var ResponseSchema = exports_external.union([
-  OkEntryResponseSchema,
-  OkKeysResponseSchema,
-  OkStatusResponseSchema,
-  OkLockResponseSchema,
-  OkPreflightAccessResponseSchema,
-  OkPutResponseSchema,
-  OkMintGrantResponseSchema,
-  OkListGrantsResponseSchema,
-  OkRevokeGrantResponseSchema,
-  OkApprovalRequestResponseSchema,
-  OkApprovalLookupResponseSchema,
-  OkApprovalConsumeResponseSchema,
-  OkApprovalRevokeResponseSchema,
-  OkApprovalListResponseSchema,
-  OkApprovalRecordResponseSchema,
-  OkApprovalConsumeRecordResponseSchema,
-  ErrorResponseSchema
-]);
-function decodeRequest(line) {
-  if (Buffer.byteLength(line, "utf8") > MAX_FRAME_BYTES) {
-    throw new RangeError(`Request frame too large (${Buffer.byteLength(line, "utf8")} bytes; max ${MAX_FRAME_BYTES})`);
-  }
-  const obj = JSON.parse(line);
-  return RequestSchema.parse(obj);
-}
-function encodeResponse(resp) {
-  const json = JSON.stringify(resp);
-  if (Buffer.byteLength(json, "utf8") > MAX_FRAME_BYTES) {
-    throw new Error(`Response frame too large (${Buffer.byteLength(json, "utf8")} bytes; max ${MAX_FRAME_BYTES})`);
-  }
-  return json + `
-`;
-}
-function errorResponse(code, msg) {
-  return { ok: false, code, msg };
-}
-
 // src/vault/approvals/kernel.ts
 import { randomBytes, randomUUID } from "node:crypto";
 
@@ -19154,6 +19196,7 @@ import { dirname, isAbsolute, join as join4, relative, resolve as resolve5 } fro
 init_atomic();
 
 // src/agents/agent-uid.ts
+init_peercred();
 import { createHash } from "node:crypto";
 var AGENT_UID_MIN = 10001;
 var AGENT_UID_MAX = 10999;
@@ -19287,12 +19330,12 @@ init_paths();
 var _warnedReads = new Set;
 
 // src/setup/hindsight-pg-defaults.ts
-var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 8 * 1024;
+var HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION = 16 * 1024;
 var HINDSIGHT_PG_APP_ANON_MIB = 2560;
 var HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB = 2048;
 var HINDSIGHT_PG_SHARED_BUFFERS_BUDGET_MIB = HINDSIGHT_PG_MEM_LIMIT_MIB_FOR_DERIVATION - HINDSIGHT_PG_APP_ANON_MIB - HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
-var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 1536;
-var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 4096;
+var HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB = 3072;
+var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 7168;
 function pgMib(mib) {
   return `${mib}MB`;
 }
@@ -19465,9 +19508,21 @@ var HINDSIGHT_RETAIN_CLIENT_DEADLINE_S = hindsightRetainClientTimeoutSeconds() +
 var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)';
 var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
+var HINDSIGHT_CP_UNAUTHENTICATED_BIND_ADDR = "127.0.0.1";
+var HINDSIGHT_CP_NO_ACCESS_KEY_WARNING = "hindsight: no `hindsight.cp_access_key` configured — the control-plane " + "dashboard has NO login (the access-key middleware is inert when " + "HINDSIGHT_CP_ACCESS_KEY is unset), so it is pinned to " + `${HINDSIGHT_CP_UNAUTHENTICATED_BIND_ADDR} and will NOT be reachable from ` + "the LAN or tailnet. Set `hindsight.cp_access_key: vault:<key>` in " + "switchroom.yaml to arm the login and open it up.";
 
 // src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
 ` + `
 ` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
 ` + `candidate a file path, a command/process/agent/session id, a temp directory, or
@@ -19484,6 +19539,9 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
 ` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
 ` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
 ` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
 ` + `  running) — retain the outcome only once the task completes or a decision is made.
 ` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
@@ -19506,8 +19564,12 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `  the fact is explicitly dated, in which case record it as a dated observation.
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list.";
+` + `nothing durable remains, return an empty facts list.
+`;
 var SUPERSEDED_RETAIN_MISSIONS = [
   "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
   "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
@@ -19554,7 +19616,96 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `- Greetings, acknowledgements, and routine operational chatter.
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
-` + "nothing durable remains, return an empty facts list."
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now: user preferences and standing rules, ongoing projects and recurring commitments, technical and architectural decisions with their rationale, and people/tool relationships. A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + "nothing durable remains, return an empty facts list.",
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
+`
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
 ` + `
@@ -19637,28 +19788,8 @@ init_paths();
 // src/agents/scaffold.ts
 init_paths();
 init_loader();
-
-// src/vault/vault.ts
-var KNOWN_VAULT_ARTIFACT_NAMES = new Set([
-  "vault.enc",
-  "vault.enc.bak",
-  "vault.enc.tmp",
-  "vault.enc.lock",
-  ".vault.enc.symlink-tmp"
-]);
-var SCRYPT_MAXMEM = 128 * 1024 * 1024;
-
-// src/vault/resolver.ts
-init_loader();
-
-// src/vault/broker/client.ts
-import { homedir as homedir3 } from "node:os";
-import { join as join3 } from "node:path";
-var LEGACY_SOCKET_PATH = join3(homedir3(), ".switchroom", "vault-broker.sock");
-var OPERATOR_SOCKET_PATH = join3(homedir3(), ".switchroom", "broker-operator", "sock");
-
-// src/vault/resolver.ts
-var materializedDirs = new Set;
+init_resolver();
+init_vault();
 
 // src/setup/onboarding.ts
 init_paths();