switchroom 0.19.41 → 0.19.42

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.41", COMMIT_SHA = "e77ee9c0";
+var VERSION = "0.19.42", COMMIT_SHA = "e288dac2";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -13613,6 +13613,9 @@ var init_observation_scopes = __esm(() => {
 function isValidTimezone(value) {
   return TIMEZONE_REGEX.test(value);
 }
+function resolveMemoryProfile(agentConfig) {
+  return agentConfig?.memory?.profile ?? agentConfig?.extends ?? DEFAULT_PROFILE;
+}
 var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
@@ -13735,6 +13738,7 @@ var init_schema = __esm(() => {
     auto_recall: exports_external.boolean().default(true).describe("Auto-search memories before each response"),
     file: exports_external.boolean().default(true).describe("Maintain a curated workspace MEMORY.md file (seeded once, " + "auto-loaded every turn). Set false for hindsight-only memory: " + "the file is not seeded or re-created, so once migrated into " + "Hindsight and deleted it stays gone. Recall + directives carry " + "the memory instead. Cascade: override (per-agent wins over default)."),
     isolation: exports_external.enum(["default", "strict"]).default("default").describe("strict = never shared cross-agent, default = eligible for reflect"),
+    profile: exports_external.string().optional().describe("Memory profile bank this agent's curated memory defaults key off \u2014 " + "the built-in disposition + observations_mission in PROFILE_MEMORY_DEFAULTS. " + "Decouples the memory profile from `extends` (the filesystem persona " + "profile), so an agent on `extends: default` can opt into the `coding` " + "memory bundle via `memory.profile: coding` without inheriting the coding " + "persona. Resolution: memory.profile \u2192 extends \u2192 DEFAULT_PROFILE (see " + "resolveMemoryProfile). Unset \u21d2 byte-identical to keying off `extends`."),
     bank_mission: exports_external.string().optional().describe("Bank-level mission statement used during recall to contextualize " + "results. NOTE: this is an alias for the Hindsight engine's " + "`reflect_mission` field (verified live: switchroom's bank_mission " + "lands in `config.reflect_mission`). Prefer `reflect_mission` going " + "forward; `bank_mission` is retained for back-compat. If both are " + "set, `reflect_mission` wins. Cascade: override."),
     reflect_mission: exports_external.string().optional().describe("Mission/context steering Hindsight Reflect operations (the bank's " + "'who am I / what matters' framing applied during recall). The " + "engine-accurate name for what `bank_mission` sets. Cascade: override."),
     retain_mission: exports_external.string().optional().describe("Instructions for the fact extraction LLM during retain. Cascade: override."),
@@ -14028,6 +14032,8 @@ var init_schema = __esm(() => {
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
       model: exports_external.string().min(1).optional().describe("Hindsight LLM model (upstream `HINDSIGHT_API_LLM_MODEL`). Defaults " + "to HINDSIGHT_DEFAULT_MODEL. Any model your LiteLLM proxy can route " + "is valid, e.g. `openrouter/z-ai/glm-5.2` when routing through the " + "fleet proxy. With provider=claude-code this value is ALSO exported " + "as `ANTHROPIC_MODEL` to the claude subprocess. Serves as the GLOBAL " + "default for every op absent a per-op override."),
       context_window: exports_external.number().int().positive().optional().describe("GLOBAL context window (tokens) of the backend serving hindsight's " + "LLM ops \u2014 the declared size switchroom derives every token budget " + "from. Set this to the real window of whatever you point " + "`hindsight.llm` at (e.g. 32768 for a llama.cpp slot launched with " + "`-c 65536 -np 2`, 131072 for a large-window OpenRouter model). " + "Absent \u2192 a per-provider default: 200000 for `claude-code`, a " + "conservative 32768 for everything else. Overflowing a local " + "backend's window does NOT error \u2014 llama.cpp context-shift silently " + "drops the system prompt and the model answers conversationally " + "with HTTP 200 \u2014 so this value is what makes the failure " + "detectable at setup time instead of never."),
+      base_url: exports_external.string().min(1).optional().describe("GLOBAL LLM base URL (upstream `HINDSIGHT_API_LLM_BASE_URL`). The " + "default endpoint every op inherits absent a per-op " + "`hindsight.llm.<op>.base_url`. Optional passthrough; unset \u2192 the " + "engine's provider default. When this points at host loopback the " + "hindsight container is forced onto host networking, same as a " + "per-op base URL, so the endpoint stays reachable (#3687)."),
+      api_key: exports_external.string().min(1).optional().describe("GLOBAL LLM API key (upstream `HINDSIGHT_API_LLM_API_KEY`). Literal " + "or `vault:` reference. The default credential every op inherits " + "absent a per-op `hindsight.llm.<op>.api_key`; the engine reads it as " + "a plain env fallback. Optional passthrough (#3687)."),
       retain: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `retain` LLM op (memory ingestion). Emits " + "`HINDSIGHT_API_RETAIN_LLM_*`. Absent \u2192 uses the global model/provider."),
       reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent \u2192 uses global."),
       consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent \u2192 global.")
@@ -14164,6 +14170,7 @@ var init_schema = __esm(() => {
       auto_recall: exports_external.boolean().optional(),
       file: exports_external.boolean().optional(),
       isolation: exports_external.enum(["default", "strict"]).optional(),
+      profile: exports_external.string().optional(),
       directive_capture_nudge: exports_external.boolean().optional(),
       observation_scopes: ObservationScopesSchema,
       observation_scope_strategy: ObservationScopeStrategySchema,
@@ -14205,7 +14212,23 @@ var init_schema = __esm(() => {
         max_query_chars: exports_external.number().int().min(1).optional(),
         parallel: exports_external.boolean().optional(),
         additional_banks: exports_external.array(exports_external.string()).optional(),
-        sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional()
+        sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional(),
+        types: exports_external.array(exports_external.string()).optional(),
+        skip_trivial: exports_external.boolean().optional(),
+        topic_filter_mode: exports_external.enum(["soft-preamble", "hard-filter"]).optional()
+      }).optional(),
+      retain: exports_external.object({
+        every_n_turns: exports_external.number().int().min(1).optional(),
+        overlap_turns: exports_external.number().int().min(0).optional()
+      }).optional(),
+      bank_mission: exports_external.string().optional(),
+      reflect_mission: exports_external.string().optional(),
+      retain_mission: exports_external.string().optional(),
+      observations_mission: exports_external.string().optional(),
+      disposition: exports_external.object({
+        skepticism: exports_external.number().int().min(1).max(5).optional(),
+        literalism: exports_external.number().int().min(1).max(5).optional(),
+        empathy: exports_external.number().int().min(1).max(5).optional()
       }).optional()
     }).optional(),
     schedule: exports_external.array(ScheduleEntrySchema).optional(),
@@ -15594,6 +15617,43 @@ var init_thinking_effort_risk = __esm(() => {
   RISKY_EFFORTS = new Set(["medium", "high", "xhigh", "max"]);
 });
 
+// src/agents/model-aliases.ts
+function expandSrAlias(arg) {
+  return SR_MODEL_ALIASES[arg.toLowerCase()] ?? arg;
+}
+function expandClaudeAlias(arg) {
+  return CLAUDE_MODEL_ALIASES[arg.trim().toLowerCase()] ?? arg;
+}
+function canonicalModelToken(arg) {
+  const trimmed = arg.trim();
+  const lower = trimmed.toLowerCase();
+  return lower.startsWith("claude-") ? lower : trimmed;
+}
+function expandModelAlias(arg) {
+  return canonicalModelToken(expandSrAlias(expandClaudeAlias(arg)));
+}
+var CLAUDE_MODEL_ALIASES, SR_MODEL_ALIASES;
+var init_model_aliases = __esm(() => {
+  CLAUDE_MODEL_ALIASES = {
+    opus48: "claude-opus-4-8",
+    "opus-4-8": "claude-opus-4-8"
+  };
+  SR_MODEL_ALIASES = {
+    flash: "sr-gemini-2.5-flash",
+    gemini: "sr-gemini-2.5-pro",
+    deepseek: "sr-deepseek-v3",
+    r1: "sr-deepseek-r1",
+    glm: "sr-glm-5",
+    codex: "sr-codex-5.5",
+    grok: "sr-grok-4.5",
+    kimi: "sr-kimi-k3",
+    gpt: "sr-gpt-5.6-sol",
+    sol: "sr-gpt-5.6-sol",
+    terra: "sr-gpt-5.6-terra",
+    luna: "sr-gpt-5.6-luna"
+  };
+});
+
 // telegram-plugin/gateway/model-command.ts
 function isClaudeModel(name) {
   const lower = name.toLowerCase();
@@ -15603,14 +15663,11 @@ function isClaudeModel(name) {
     return true;
   return lower.startsWith("claude-");
 }
-var MODEL_ALIASES, CLAUDE_MODEL_ALIASES;
+var MODEL_ALIASES;
 var init_model_command = __esm(() => {
   init_thinking_effort_risk();
+  init_model_aliases();
   MODEL_ALIASES = ["opus", "sonnet", "haiku", "fable", "default"];
-  CLAUDE_MODEL_ALIASES = {
-    opus48: "claude-opus-4-8",
-    "opus-4-8": "claude-opus-4-8"
-  };
 });
 
 // src/litellm/timeout-budget.ts
@@ -17466,11 +17523,11 @@ var init_protocol = __esm(() => {
     OkRevokeGrantResponseSchema,
     OkApprovalRequestResponseSchema,
     OkApprovalLookupResponseSchema,
+    OkApprovalConsumeRecordResponseSchema,
     OkApprovalConsumeResponseSchema,
     OkApprovalRevokeResponseSchema,
     OkApprovalListResponseSchema,
     OkApprovalRecordResponseSchema,
-    OkApprovalConsumeRecordResponseSchema,
     ErrorResponseSchema
   ]);
 });
@@ -18433,6 +18490,18 @@ function resolveHindsightPerOpLlm(llm) {
   }
   return out;
 }
+function resolveHindsightGlobalLlmExtras(llm) {
+  const out = [];
+  if (!llm)
+    return out;
+  const baseUrl = llm.base_url?.trim();
+  const apiKey = llm.api_key?.trim();
+  if (baseUrl)
+    out.push(["HINDSIGHT_API_LLM_BASE_URL", baseUrl]);
+  if (apiKey)
+    out.push(["HINDSIGHT_API_LLM_API_KEY", apiKey]);
+  return out;
+}
 function resolveHindsightLlm(llm, litellm) {
   const provider = llm?.provider?.trim() || "claude-code";
   const model = llm?.model?.trim() || (litellm ? litellm.model ?? HINDSIGHT_DEFAULT_LITELLM_MODEL : HINDSIGHT_DEFAULT_MODEL);
@@ -18449,6 +18518,7 @@ function collectHindsightLlmBaseUrls(llm, litellm) {
     out.push(v);
   };
   push(litellm?.baseUrl);
+  push(llm?.base_url);
   for (const [k, v] of resolveHindsightPerOpLlm(llm)) {
     if (k.endsWith("_BASE_URL"))
       push(v);
@@ -18618,6 +18688,7 @@ function hindsightContainerEnvPairs(opts) {
   const pairs = [
     ["HINDSIGHT_API_LLM_PROVIDER", llmProvider],
     ["HINDSIGHT_API_LLM_MODEL", llmModel],
+    ...resolveHindsightGlobalLlmExtras(llm),
     ...perOpLlm,
     ["HINDSIGHT_API_MCP_STATELESS", String(HINDSIGHT_DEFAULT_MCP_STATELESS)],
     ...hindsightLlmBudgetEnv(llm),
@@ -18845,6 +18916,7 @@ function generateHindsightComposeSnippet(llm, mirrorDir, litellm, gpu, perf, cpA
   const environment = [
     `      - HINDSIGHT_API_LLM_PROVIDER=${llmProvider}`,
     `      - HINDSIGHT_API_LLM_MODEL=${llmModel}`,
+    ...resolveHindsightGlobalLlmExtras(llm).map(([k, v]) => `      - ${k}=${v}`),
     ...perOpLlm.map(([k, v]) => `      - ${k}=${v}`),
     ...llmProvider === "claude-code" ? [`      - ANTHROPIC_MODEL=${llmModel}`] : [],
     ...hostNetwork ? hindsightHostNetworkBindEnvPairs(apiPort).map(([k, v]) => `      - ${k}=${v}`) : [`      - HINDSIGHT_CP_DATAPLANE_API_URL=http://localhost:8888`],
@@ -28256,7 +28328,9 @@ function declaredRoutingMode(resolvedModel) {
   return isClaudeModel(resolvedModel) ? "passthrough" : "router-root";
 }
 function normalizeModelAlias(model) {
-  return model === "claude-fable-5" ? "fable" : model;
+  if (model === "claude-fable-5")
+    return "fable";
+  return expandModelAlias(model);
 }
 function dedupe2(items) {
   const seen = new Set;
@@ -28959,8 +29033,9 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig, resolvedA
   if (!memory)
     return null;
   const agentMemory = switchroomConfig.agents[agentName]?.memory;
-  if (agentMemory?.auto_recall === false)
+  if (resolveHindsightAutoRecall(switchroomConfig, agentName, resolvedAgentConfig) === false) {
     return null;
+  }
   const sourcePath = resolveHindsightVendorPath();
   if (!existsSync17(sourcePath)) {
     process.stderr.write(`installHindsightPlugin: vendor source missing at ${sourcePath} ` + `\u2014 hindsight plugin NOT installed for ${agentName}. ` + `Likely a packaging regression: check the npm tarball's files array.
@@ -28969,13 +29044,14 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig, resolvedA
   }
   const destPath = join12(agentDir, ".claude", "plugins", "hindsight-memory");
   const additionalBanks = resolveUsers(switchroomConfig, agentName).additionalBanks;
-  const retainConfig = resolveHindsightRetainConfig(switchroomConfig, agentName);
+  const retainConfig = resolveHindsightRetainConfig(switchroomConfig, agentName, resolvedAgentConfig);
+  const observationScopeSettings = resolveHindsightObservationScopeSettings(switchroomConfig, agentName, resolvedAgentConfig);
   const recallTunables = resolveHindsightRecallTunables(resolveHindsightRecallConfig(switchroomConfig, agentName, resolvedAgentConfig));
   const contentOverrides = {};
   try {
     const vendorSettingsPath = join12(sourcePath, "settings.json");
     if (existsSync17(vendorSettingsPath)) {
-      const expectedSettings = renderHindsightSettingsOverrides(readFileSync15(vendorSettingsPath, "utf-8"), additionalBanks, retainConfig, recallTunables);
+      const expectedSettings = renderHindsightSettingsOverrides(readFileSync15(vendorSettingsPath, "utf-8"), additionalBanks, retainConfig, recallTunables, observationScopeSettings);
       if (expectedSettings != null)
         contentOverrides["settings.json"] = expectedSettings;
     }
@@ -28993,21 +29069,34 @@ function installHindsightPlugin(agentName, agentDir, switchroomConfig, resolvedA
     }
     copyDirRecursive2(sourcePath, destPath);
   }
-  applyHindsightSettingsOverrides(destPath, additionalBanks, retainConfig, recallTunables);
+  applyHindsightSettingsOverrides(destPath, additionalBanks, retainConfig, recallTunables, observationScopeSettings);
   applyHindsightHooksOverrides(destPath, recallTunables);
   const bankId = agentMemory?.collection ?? agentName;
   const mcpUrl = memory.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
   const apiBaseUrl = mcpUrl.replace(/\/mcp\/?$/, "").replace(/\/$/, "");
   return { pluginDir: destPath, apiBaseUrl, bankId };
 }
-function resolveHindsightRetainConfig(switchroomConfig, agentName) {
-  const resolved = switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {}) : undefined;
-  const retain = resolved?.memory?.retain;
+function resolveHindsightRetainConfig(switchroomConfig, agentName, resolvedAgentConfig) {
+  const retain = resolvedAgentConfig ? resolvedAgentConfig.memory?.retain : switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {})?.memory?.retain : undefined;
   return {
     everyNTurns: retain?.every_n_turns ?? HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS,
     overlapTurns: retain?.overlap_turns ?? HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS
   };
 }
+function resolveHindsightAutoRecall(switchroomConfig, agentName, resolvedAgentConfig) {
+  if (resolvedAgentConfig)
+    return resolvedAgentConfig.memory?.auto_recall;
+  if (!switchroomConfig)
+    return;
+  return resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {})?.memory?.auto_recall;
+}
+function resolveHindsightObservationScopeSettings(switchroomConfig, agentName, resolvedAgentConfig) {
+  const memory = resolvedAgentConfig ? resolvedAgentConfig.memory : switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {})?.memory : undefined;
+  return {
+    observationScopes: memory?.observation_scopes,
+    observationScopeStrategy: memory?.observation_scope_strategy
+  };
+}
 function resolveHindsightRecallConfig(switchroomConfig, agentName, resolvedAgentConfig) {
   if (resolvedAgentConfig) {
     return resolvedAgentConfig.memory?.recall;
@@ -29032,7 +29121,7 @@ function applyHindsightHooksOverrides(pluginDestPath, tunables) {
     return;
   writeFileSyncIfChanged(hooksPath, next);
 }
-function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks, retainConfig, recallTunables) {
+function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks, retainConfig, recallTunables, observationScopeSettings) {
   const settingsPath = join12(pluginDestPath, "settings.json");
   if (!existsSync17(settingsPath))
     return;
@@ -29042,12 +29131,12 @@ function applyHindsightSettingsOverrides(pluginDestPath, additionalBanks, retain
   } catch {
     return;
   }
-  const next = renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, recallTunables);
+  const next = renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, recallTunables, observationScopeSettings);
   if (next == null)
     return;
   writeFileSyncIfChanged(settingsPath, next);
 }
-function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, recallTunables) {
+function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, recallTunables, observationScopeSettings) {
   let settings;
   try {
     settings = JSON.parse(raw);
@@ -29069,6 +29158,14 @@ function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, re
   if (additionalBanks.length > 0) {
     settings.recallAdditionalBanks = [...additionalBanks];
   }
+  const observationScopes = observationScopeSettings.observationScopes;
+  if (typeof observationScopes === "string" && observationScopes.length > 0) {
+    settings.observationScopes = observationScopes;
+  }
+  const observationScopeStrategy = observationScopeSettings.observationScopeStrategy;
+  if (typeof observationScopeStrategy === "string" && observationScopeStrategy.length > 0) {
+    settings.observationScopeStrategy = observationScopeStrategy;
+  }
   return JSON.stringify(settings, null, 2) + `
 `;
 }
@@ -29549,8 +29646,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
         retractStaleIntegrationKeys(integration, new Set(entries.map((e) => e.key)), settings.mcpServers, site1Protected);
       }
       installHindsightPlugin(name, agentDir, switchroomConfig, agentConfig);
-      const hindsightOn = isHindsightEnabled(switchroomConfig) && switchroomConfig.agents[name]?.memory?.auto_recall !== false;
-      if (hindsightOn) {
+      if (hindsightAutoRecallEnabled) {
         settings.autoMemoryEnabled = false;
       }
       settings.hooks = buildSettingsHooksBlock({
@@ -29907,13 +30003,13 @@ ${body}
       const userBankMission = agentConfig.memory?.bank_mission;
       const userRetainMission = agentConfig.memory?.retain_mission;
       const seededRetainMission = await resolveRetainMissionPush(apiUrl, hindsightBankId, userRetainMission, formatAgentBankLabel(name, hindsightBankId));
-      const extras = resolveBankMissionExtras(agentConfig.memory, agentConfig.extends ?? DEFAULT_PROFILE);
+      const extras = resolveBankMissionExtras(agentConfig.memory, resolveMemoryProfile(agentConfig));
       const missions = { ...extras };
       if (seededRetainMission) {
         missions.retain_mission = seededRetainMission;
       }
       delete missions.observations_mission;
-      const seededObservationsMission = await resolveObservationsMissionPush(apiUrl, hindsightBankId, agentConfig.memory?.observations_mission, agentConfig.extends ?? DEFAULT_PROFILE, formatAgentBankLabel(name, hindsightBankId));
+      const seededObservationsMission = await resolveObservationsMissionPush(apiUrl, hindsightBankId, agentConfig.memory?.observations_mission, resolveMemoryProfile(agentConfig), formatAgentBankLabel(name, hindsightBankId));
       if (seededObservationsMission) {
         missions.observations_mission = seededObservationsMission;
       }
@@ -30985,7 +31081,7 @@ ${body}
     trackBankOps(bankOpsChain.then(async (bankReady) => {
       if (!bankReady)
         return;
-      const extras = resolveBankMissionExtras(agentConfig.memory, agentConfig.extends ?? DEFAULT_PROFILE);
+      const extras = resolveBankMissionExtras(agentConfig.memory, resolveMemoryProfile(agentConfig));
       const missions = { ...extras };
       if (agentConfig.memory?.bank_mission) {
         missions.bank_mission = agentConfig.memory.bank_mission;
@@ -30994,7 +31090,7 @@ ${body}
       if (retainMission)
         missions.retain_mission = retainMission;
       delete missions.observations_mission;
-      const observationsMission = await resolveObservationsMissionPush(apiUrl, hindsightBankId, agentConfig.memory?.observations_mission, agentConfig.extends ?? DEFAULT_PROFILE, formatAgentBankLabel(name, hindsightBankId));
+      const observationsMission = await resolveObservationsMissionPush(apiUrl, hindsightBankId, agentConfig.memory?.observations_mission, resolveMemoryProfile(agentConfig), formatAgentBankLabel(name, hindsightBankId));
       if (observationsMission)
         missions.observations_mission = observationsMission;
       if (Object.keys(missions).length > 0) {
@@ -31583,6 +31679,7 @@ never reaches them.`, TELEGRAM_ENV_PLACEHOLDER = `# Set your bot token: TELEGRAM
 var init_scaffold = __esm(() => {
   init_source();
   init_cron_unit_name();
+  init_model_aliases();
   init_atomic();
   init_agent_owned_tree();
   init_generation_stamp();
@@ -39142,15 +39239,15 @@ async function getJson(url, opts) {
   const timeout = setTimeout(() => controller.abort(), timeoutMs);
   try {
     const resp = await fetchImpl(url, { signal: controller.signal });
-    clearTimeout(timeout);
     if (!resp.ok)
       return { ok: false, reason: `HTTP ${resp.status}` };
     return { ok: true, data: await resp.json() };
   } catch (err) {
-    clearTimeout(timeout);
     if (err.name === "AbortError")
       return { ok: false, reason: "Timeout" };
     return { ok: false, reason: String(err.message ?? err) };
+  } finally {
+    clearTimeout(timeout);
   }
 }
 function summarizeBasedOn(reflect) {
@@ -39182,6 +39279,7 @@ async function inspectBankHealth(mcpUrl, bankId, opts) {
     totalDocuments: 0,
     totalFacts: 0,
     pendingOperations: 0,
+    pendingConsolidation: 0,
     newestDocumentAt: null,
     unextractedDocuments: [],
     mentalModels: [],
@@ -39222,6 +39320,7 @@ async function inspectBankHealth(mcpUrl, bankId, opts) {
     totalDocuments: stats.data.total_documents ?? docItems.length,
     totalFacts: stats.data.total_nodes ?? 0,
     pendingOperations: stats.data.pending_operations ?? 0,
+    pendingConsolidation: stats.data.pending_consolidation ?? 0,
     newestDocumentAt,
     unextractedDocuments: unextracted,
     activeDirectiveCount,
@@ -45067,6 +45166,84 @@ var init_manifest = __esm(() => {
   ]);
 });
 
+// src/config/memory-key-drift.ts
+function unwrapObjectNode(schema) {
+  let s = schema;
+  for (let i = 0;s && i < 10; i++) {
+    const node = s;
+    if (node.shape && typeof node.shape === "object") {
+      return node;
+    }
+    if (node._def?.innerType) {
+      s = node._def.innerType;
+      continue;
+    }
+    if (node._def?.schema) {
+      s = node._def.schema;
+      continue;
+    }
+    break;
+  }
+  return;
+}
+function objectShapeKeys(schema) {
+  const node = unwrapObjectNode(schema);
+  return node?.shape ? new Set(Object.keys(node.shape)) : new Set;
+}
+function memoryChildSchema(memorySchema, child) {
+  return unwrapObjectNode(memorySchema)?.shape?.[child];
+}
+function tierKnownKeys(memorySchema) {
+  return {
+    memory: objectShapeKeys(memorySchema),
+    recall: objectShapeKeys(memoryChildSchema(memorySchema, "recall")),
+    retain: objectShapeKeys(memoryChildSchema(memorySchema, "retain"))
+  };
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function diffScope(obj, scope, known, retired, out) {
+  if (!isPlainObject2(obj))
+    return;
+  for (const key of Object.keys(obj)) {
+    if (known.has(key))
+      continue;
+    out.push(key in retired ? { scope, key, replacement: retired[key] } : { scope, key });
+  }
+}
+function findUnknownMemoryKeys(memory, tier = "agent") {
+  if (!isPlainObject2(memory))
+    return [];
+  const known = KNOWN_BY_TIER[tier];
+  const out = [];
+  diffScope(memory, "memory", known.memory, RETIRED_MEMORY_KEYS, out);
+  diffScope(memory.recall, "memory.recall", known.recall, RETIRED_MEMORY_RECALL_KEYS, out);
+  diffScope(memory.retain, "memory.retain", known.retain, RETIRED_MEMORY_RETAIN_KEYS, out);
+  return out.sort((a, b) => a.scope === b.scope ? a.key.localeCompare(b.key) : a.scope.localeCompare(b.scope));
+}
+var AGENT_KNOWN, MIRROR_KNOWN, KNOWN_BY_TIER, KNOWN_MEMORY_KEYS, KNOWN_MEMORY_RECALL_KEYS, KNOWN_MEMORY_RETAIN_KEYS, KNOWN_MIRROR_MEMORY_KEYS, KNOWN_MIRROR_MEMORY_RECALL_KEYS, KNOWN_MIRROR_MEMORY_RETAIN_KEYS, RETIRED_MEMORY_KEYS, RETIRED_MEMORY_RECALL_KEYS, RETIRED_MEMORY_RETAIN_KEYS;
+var init_memory_key_drift = __esm(() => {
+  init_schema();
+  AGENT_KNOWN = tierKnownKeys(AgentMemorySchema);
+  MIRROR_KNOWN = tierKnownKeys(ProfileSchema.shape.memory);
+  KNOWN_BY_TIER = {
+    agent: AGENT_KNOWN,
+    mirror: MIRROR_KNOWN
+  };
+  KNOWN_MEMORY_KEYS = AGENT_KNOWN.memory;
+  KNOWN_MEMORY_RECALL_KEYS = AGENT_KNOWN.recall;
+  KNOWN_MEMORY_RETAIN_KEYS = AGENT_KNOWN.retain;
+  KNOWN_MIRROR_MEMORY_KEYS = MIRROR_KNOWN.memory;
+  KNOWN_MIRROR_MEMORY_RECALL_KEYS = MIRROR_KNOWN.recall;
+  KNOWN_MIRROR_MEMORY_RETAIN_KEYS = MIRROR_KNOWN.retain;
+  RETIRED_MEMORY_KEYS = {};
+  RETIRED_MEMORY_RECALL_KEYS = {
+    min_overlap: "removed in #3761 \u2014 the lexical-overlap recall gate it tuned was deleted " + "outright, with no replacement floor; delete the line"
+  };
+  RETIRED_MEMORY_RETAIN_KEYS = {};
+});
+
 // src/cli/doctor-memory.ts
 import { execFileSync as execFileSync19 } from "node:child_process";
 function classifyDirectiveCount(count, bankLabel) {
@@ -45105,28 +45282,75 @@ function classifyShmSize(bytes) {
   const gib = (bytes / 1024 / 1024 / 1024).toFixed(bytes % 1024 ** 3 === 0 ? 0 : 1);
   return { name: "hindsight shm-size", status: "ok", detail: `${gib}g` };
 }
-function classifyConsolidationBacklog(queueDepth, oldestAgeSecs = null) {
+function classifyAsyncOpQueue(queueDepth, oldestAgeSecs = null) {
   const ageStr = oldestAgeSecs !== null && oldestAgeSecs > 0 ? `, oldest ${Math.round(oldestAgeSecs / 60)}m old` : "";
-  const base = `${queueDepth} pending consolidation op(s)${ageStr}`;
-  if (queueDepth >= CONSOLIDATION_BACKLOG_FAIL) {
+  const base = `${queueDepth} pending async op(s)${ageStr}`;
+  if (queueDepth >= OP_QUEUE_FAIL) {
+    return {
+      name: "hindsight async op queue",
+      status: "fail",
+      detail: `${base} \u2014 the operation queue is deep enough to be wedged; ops are ` + `enqueued but not draining (a stuck reaper / claim stall)`,
+      fix: "Check `docker logs switchroom-hindsight` for claim/reaper errors " + "(quota/429/shm, stuck 'processing' ops); restart with `switchroom " + "memory --restart` if the worker is stuck."
+    };
+  }
+  if (queueDepth >= OP_QUEUE_WARN) {
+    return {
+      name: "hindsight async op queue",
+      status: "warn",
+      detail: `${base} \u2014 non-terminal ops are building faster than they drain; ` + `claims may be lagging (check the reaper before it wedges)`
+    };
+  }
+  return {
+    name: "hindsight async op queue",
+    status: "ok",
+    detail: queueDepth > 0 ? base : "queue drained (0 pending)"
+  };
+}
+function classifyConsolidationBacklog(pendingConsolidation) {
+  const base = `${pendingConsolidation} memory unit(s) pending consolidation`;
+  if (pendingConsolidation >= CONSOLIDATION_BACKLOG_FAIL) {
     return {
       name: "hindsight consolidation backlog",
       status: "fail",
-      detail: `${base} \u2014 queue is deep enough to be wedged; retains are landing but ` + `not consolidating into recall (drains ~7 ops/hr under the #2894 throttle)`,
-      fix: "Check `docker logs switchroom-hindsight` for the queue-lag WARNING and " + "consolidation errors (quota/429/shm); restart with `switchroom memory " + "--restart` if the worker is stuck."
+      detail: `${base} \u2014 consolidation has stalled far behind ingest; retained ` + `memory is landing but not reaching recall (drains ~7 ops/hr under ` + `the #2894 throttle)`,
+      fix: "Check `docker logs switchroom-hindsight` for consolidation errors " + "(quota/429/shm, HNSW index faults) and the consolidation-failure-" + "streak signal; a bank legitimately mid-ingest can read deep, so " + "confirm the number is not draining before restarting."
     };
   }
-  if (queueDepth >= CONSOLIDATION_BACKLOG_WARN) {
+  if (pendingConsolidation >= CONSOLIDATION_BACKLOG_WARN) {
     return {
       name: "hindsight consolidation backlog",
       status: "warn",
-      detail: `${base} \u2014 building faster than it drains (~7 ops/hr under the #2894 ` + `throttle); recall may lag recent turns until it catches up`
+      detail: `${base} \u2014 building faster than it drains (~7 ops/hr under the #2894 ` + `throttle); recall may lag recent turns until it catches up (a bank ` + `mid-ingest can read deep \u2014 confirm it is draining)`
     };
   }
   return {
     name: "hindsight consolidation backlog",
     status: "ok",
-    detail: queueDepth > 0 ? base : "queue drained (0 pending)"
+    detail: pendingConsolidation > 0 ? base : "consolidation drained (0 pending)"
+  };
+}
+function classifyBankConfigReachability(result, bankId) {
+  const name = BANK_CONFIG_API_CHECK_NAME;
+  if (result.ok) {
+    return {
+      name,
+      status: "ok",
+      detail: `retain_mission readable on bank ${bankId} \u2014 the fail-closed seed path (#3529) can read the field`
+    };
+  }
+  if (result.reason === "Unexpected shape") {
+    return {
+      name,
+      status: "fail",
+      detail: `GET /v1/default/banks/${bankId}/config returned no retain_mission key \u2014 ` + `the bank-config API is disabled or the field was renamed/renested. ` + `Retain-mission seeding is fail-closed (#3529): with this read failing, ` + `apply seeds retain_mission for NO agent (including new ones) and still ` + `exits 0, so the fleet silently runs with unset retain missions.`,
+      fix: "Confirm `HINDSIGHT_API_ENABLE_BANK_CONFIG_API` is true on the Hindsight " + "deployment (config.py default True) and that GET .../config still nests " + "`retain_mission` under `config`. If Hindsight renamed/renested the field, " + "update `fetchBankMissionField` in src/memory/hindsight.ts to match."
+    };
+  }
+  return {
+    name,
+    status: "warn",
+    detail: `could not probe the bank-config API on ${bankId}: ${result.reason} \u2014 ` + `retain-mission seeding is fail-closed (#3529) and can't be confirmed. If ` + `this persists it silently skips seeding for every agent.`,
+    fix: "Check the hindsight container is up and `HINDSIGHT_API_ENABLE_BANK_CONFIG_API` " + "is enabled; re-run once it is reachable."
   };
 }
 function classifyExtractionLogs(logs) {
@@ -45533,7 +45757,7 @@ function classifyToolContract(advertised) {
   }
   return results;
 }
-var MIN_HINDSIGHT_SHM_BYTES, MAX_DIRECTIVES = 30, DIRECTIVE_WARN_THRESHOLD = 24, CONSOLIDATION_BACKLOG_WARN = 25, CONSOLIDATION_BACKLOG_FAIL = 200;
+var MIN_HINDSIGHT_SHM_BYTES, MAX_DIRECTIVES = 30, DIRECTIVE_WARN_THRESHOLD = 24, OP_QUEUE_WARN = 25, OP_QUEUE_FAIL = 200, CONSOLIDATION_BACKLOG_WARN = 1000, CONSOLIDATION_BACKLOG_FAIL = 1e4, BANK_CONFIG_API_CHECK_NAME = "hindsight bank-config API";
 var init_doctor_memory = __esm(() => {
   init_hindsight_tools();
   init_hindsight_repair();
@@ -45741,8 +45965,83 @@ var init_doctor_hnsw_index = __esm(() => {
 });
 
 // src/cli/doctor-observation-scopes.ts
-function computeScopeSaturation(scopes, cap, warnRatio = OBSERVATION_SCOPE_WARN_RATIO) {
-  if (cap < 0)
+function fnmatchTranslate(pat) {
+  const ANY = "[\\s\\S]";
+  let res = "";
+  let i = 0;
+  const n = pat.length;
+  while (i < n) {
+    const c = pat[i];
+    i += 1;
+    if (c === "*") {
+      res += ANY + "*";
+    } else if (c === "?") {
+      res += ANY;
+    } else if (c === "[") {
+      let j = i;
+      if (j < n && pat[j] === "!")
+        j += 1;
+      if (j < n && pat[j] === "]")
+        j += 1;
+      while (j < n && pat[j] !== "]")
+        j += 1;
+      if (j >= n) {
+        res += "\\[";
+      } else {
+        let stuff = pat.slice(i, j).replace(/\\/g, "\\\\");
+        i = j + 1;
+        if (stuff.startsWith("!"))
+          stuff = "^" + stuff.slice(1);
+        else if (stuff.startsWith("^") || stuff.startsWith("["))
+          stuff = "\\" + stuff;
+        res += "[" + stuff + "]";
+      }
+    } else {
+      res += c.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    }
+  }
+  return new RegExp("^(?:" + res + ")$");
+}
+function fnmatchcase(name, pat) {
+  return fnmatchTranslate(pat).test(name);
+}
+function parseScopeLimitRules(raw) {
+  if (!Array.isArray(raw))
+    return [];
+  const rules = [];
+  for (const entry of raw) {
+    if (entry == null || typeof entry !== "object")
+      continue;
+    const scope = entry.scope;
+    const limit = entry.limit;
+    if (!Array.isArray(scope) || scope.length === 0)
+      continue;
+    if (!scope.every((g) => typeof g === "string" && g.length > 0))
+      continue;
+    if (typeof limit !== "number" || !Number.isInteger(limit))
+      continue;
+    rules.push({ globs: scope, limit });
+  }
+  return rules;
+}
+function scopeMatchesGlobs(globs, tags) {
+  if (tags.length === 0)
+    return false;
+  if (!tags.every((t) => globs.some((g) => fnmatchcase(t, g))))
+    return false;
+  if (!globs.every((g) => tags.some((t) => fnmatchcase(t, g))))
+    return false;
+  return true;
+}
+function effectiveScopeLimit(rules, tags, bankCap) {
+  for (const rule of rules) {
+    if (scopeMatchesGlobs(rule.globs, tags))
+      return rule.limit;
+  }
+  return bankCap;
+}
+function computeScopeSaturation(scopes, cap, warnRatio = OBSERVATION_SCOPE_WARN_RATIO, scopeLimitRules = []) {
+  if (cap < 0 && scopeLimitRules.length === 0)
     return [];
   const sets = scopes.map((s) => ({ tags: s.tags, set: new Set(s.tags), count: s.count }));
   const postings = new Map;
@@ -45781,8 +46080,11 @@ function computeScopeSaturation(scopes, cap, warnRatio = OBSERVATION_SCOPE_WARN_
       if (contains)
         effective += other.count;
     }
-    const status = cap > 0 && effective >= cap ? "fail" : cap > 0 && effective >= cap * warnRatio ? "warn" : "ok";
-    out.push({ tags: [...entry.tags], exact: entry.count, effective, cap, status });
+    const scopeCap = effectiveScopeLimit(scopeLimitRules, entry.tags, cap);
+    if (scopeCap < 0)
+      continue;
+    const status = scopeCap > 0 && effective >= scopeCap ? "fail" : scopeCap > 0 && effective >= scopeCap * warnRatio ? "warn" : "ok";
+    out.push({ tags: [...entry.tags], exact: entry.count, effective, cap: scopeCap, status });
   }
   out.sort((a, b) => b.effective - a.effective);
   return out;
@@ -45806,17 +46108,17 @@ function classifyObservationScopeSaturation(reports) {
       detail: `could not read observation scopes for ${unreadable.length} bank(s): ` + unreadable.map((r) => `${r.bankId} (${r.reason ?? "unknown"})`).join(", ")
     };
   }
-  const unjudged = readable.filter((r) => r.hasScopeLimitRules || !r.observationsEnabled);
-  const judged = readable.filter((r) => !r.hasScopeLimitRules && r.observationsEnabled);
+  const unjudged = readable.filter((r) => !r.observationsEnabled);
+  const judged = readable.filter((r) => r.observationsEnabled);
   const notes = [];
   if (unreadable.length > 0) {
     notes.push(`${unreadable.length} bank(s) unreadable: ` + unreadable.map((r) => `${r.bankId} (${r.reason ?? "unknown"})`).join(", "));
   }
-  const withRules = unjudged.filter((r) => r.hasScopeLimitRules);
+  const withRules = judged.filter((r) => r.hasScopeLimitRules);
   if (withRules.length > 0) {
-    notes.push(`${withRules.length} bank(s) not judged \u2014 observation_scope_limits sets a ` + `per-scope cap this check does not resolve: ${withRules.map((r) => r.bankId).join(", ")}`);
+    notes.push(`${withRules.length} bank(s) judged with per-scope observation_scope_limits ` + `glob caps: ${withRules.map((r) => r.bankId).join(", ")}`);
   }
-  const disabled = unjudged.filter((r) => !r.hasScopeLimitRules && !r.observationsEnabled);
+  const disabled = unjudged.filter((r) => !r.observationsEnabled);
   if (disabled.length > 0) {
     notes.push(`${disabled.length} bank(s) have observations disabled: ` + disabled.map((r) => r.bankId).join(", "));
   }
@@ -45831,8 +46133,8 @@ function classifyObservationScopeSaturation(reports) {
   const closed = judged.filter((r) => r.cap === 0);
   const unlimited = judged.filter((r) => r.cap < 0);
   const capped = judged.filter((r) => r.cap > 0);
-  const failing = capped.flatMap((r) => r.saturated.filter((s) => s.status === "fail").map((s) => ({ report: r, scope: s })));
-  const warning = capped.flatMap((r) => r.saturated.filter((s) => s.status === "warn").map((s) => ({ report: r, scope: s })));
+  const failing = judged.flatMap((r) => r.saturated.filter((s) => s.status === "fail").map((s) => ({ report: r, scope: s })));
+  const warning = judged.flatMap((r) => r.saturated.filter((s) => s.status === "warn").map((s) => ({ report: r, scope: s })));
   failing.sort((a, b) => b.scope.effective - a.scope.effective);
   warning.sort((a, b) => b.scope.effective - a.scope.effective);
   const backlog = (rows) => {
@@ -45866,7 +46168,7 @@ function classifyObservationScopeSaturation(reports) {
     const detail = warning.length > 0 ? scopeClause + growthSuffix + suffix : `${growthNote}${suffix}`;
     return { name, status: "warn", detail, ...warning.length > 0 ? { fix } : {} };
   }
-  const totalScopes = capped.reduce((n, r) => n + r.scopeCount, 0);
+  const totalScopes = capped.reduce((n, r) => n + r.judgedScopeCount, 0);
   const detailBase = capped.length === 0 ? `no bank has a positive observation cap` : `${totalScopes} scope(s) across ${capped.length} bank(s) below ` + `${Math.round(OBSERVATION_SCOPE_WARN_RATIO * 100)}% of the cap`;
   const extra = [];
   if (unlimited.length > 0) {
@@ -45881,24 +46183,6 @@ function classifyObservationScopeSaturation(reports) {
     detail: detailBase + (extra.length > 0 ? ` \u00b7 ${extra.join(" \u00b7 ")}` : "") + suffix
   };
 }
-async function getJson3(url, opts) {
-  const fetchImpl = opts?.fetchImpl ?? fetch;
-  const timeoutMs = opts?.timeoutMs ?? 15000;
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    const resp = await fetchImpl(url, { signal: controller.signal });
-    clearTimeout(timeout);
-    if (!resp.ok)
-      return { ok: false, reason: `HTTP ${resp.status}` };
-    return { ok: true, data: await resp.json() };
-  } catch (err) {
-    clearTimeout(timeout);
-    if (err.name === "AbortError")
-      return { ok: false, reason: "Timeout" };
-    return { ok: false, reason: String(err.message ?? err) };
-  }
-}
 async function inspectBankScopes(apiUrl, bankId, opts) {
   const base = hindsightRestBase(apiUrl);
   const bank = encodeURIComponent(bankId);
@@ -45910,11 +46194,12 @@ async function inspectBankScopes(apiUrl, bankId, opts) {
     observationsEnabled: false,
     hasScopeLimitRules: false,
     scopeCount: 0,
+    judgedScopeCount: 0,
     untaggedCount: 0,
     saturated: [],
     pendingConsolidation: null
   });
-  const cfg = await getJson3(`${base}/v1/default/banks/${bank}/config`, opts);
+  const cfg = await getJson(`${base}/v1/default/banks/${bank}/config`, opts);
   if (!cfg.ok)
     return fail4(cfg.reason);
   const config = cfg.data?.config;
@@ -45924,10 +46209,10 @@ async function inspectBankScopes(apiUrl, bankId, opts) {
   if (typeof rawCap !== "number" || !Number.isFinite(rawCap)) {
     return fail4("Unexpected shape");
   }
-  const rules = config["observation_scope_limits"];
-  const hasScopeLimitRules = Array.isArray(rules) && rules.length > 0;
+  const scopeLimitRules = parseScopeLimitRules(config["observation_scope_limits"]);
+  const hasScopeLimitRules = scopeLimitRules.length > 0;
   const observationsEnabled = config["enable_observations"] !== false;
-  const scopesResp = await getJson3(`${base}/v1/default/banks/${bank}/observations/scopes`, opts);
+  const scopesResp = await getJson(`${base}/v1/default/banks/${bank}/observations/scopes`, opts);
   if (!scopesResp.ok)
     return fail4(scopesResp.reason);
   const rawScopes = scopesResp.data?.scopes;
@@ -45943,11 +46228,12 @@ async function inspectBankScopes(apiUrl, bankId, opts) {
       continue;
     scopes.push({ tags, count });
   }
-  const saturated = computeScopeSaturation(scopes, rawCap).filter((s) => s.status !== "ok");
+  const allJudged = computeScopeSaturation(scopes, rawCap, OBSERVATION_SCOPE_WARN_RATIO, scopeLimitRules);
+  const saturated = allJudged.filter((s) => s.status !== "ok");
   const untaggedCount = scopes.filter((s) => s.tags.length === 0).reduce((n, s) => n + s.count, 0);
   let pendingConsolidation = null;
-  if (saturated.length > 0 && !hasScopeLimitRules && observationsEnabled) {
-    const stats = await getJson3(`${base}/v1/default/banks/${bank}/stats`, opts);
+  if (saturated.length > 0 && observationsEnabled) {
+    const stats = await getJson(`${base}/v1/default/banks/${bank}/stats`, opts);
     if (stats.ok && typeof stats.data?.pending_consolidation === "number") {
       pendingConsolidation = stats.data.pending_consolidation;
     }
@@ -45959,6 +46245,7 @@ async function inspectBankScopes(apiUrl, bankId, opts) {
     observationsEnabled,
     hasScopeLimitRules,
     scopeCount: scopes.length,
+    judgedScopeCount: allJudged.length,
     untaggedCount,
     saturated,
     pendingConsolidation
@@ -45982,7 +46269,8 @@ var init_doctor_observation_scopes = __esm(() => {
 });
 
 // src/hindsight-watch/install-cron.ts
-import { existsSync as existsSync63, mkdirSync as mkdirSync35, readFileSync as readFileSync60, renameSync as renameSync15, writeFileSync as writeFileSync22 } from "node:fs";
+import { execFileSync as execFileSync20 } from "node:child_process";
+import { chownSync as chownSync6, existsSync as existsSync63, mkdirSync as mkdirSync35, readFileSync as readFileSync60, renameSync as renameSync15, statSync as statSync38, writeFileSync as writeFileSync22 } from "node:fs";
 import { dirname as dirname22 } from "node:path";
 function renderCron(opts) {
   return `# switchroom hindsight-watch \u2014 model-free memory watchdog.
@@ -46009,6 +46297,58 @@ function installCron(opts) {
   renameSync15(tmp, path6);
   return { status: "installed", path: path6, content };
 }
+function ensureLogFile(opts) {
+  const path6 = opts.path ?? CRON_LOG_PATH;
+  if (existsSync63(path6))
+    return { status: "unchanged", path: path6 };
+  const { uid, gid } = (opts.resolveIds ?? defaultIdResolver)(opts.user);
+  mkdirSync35(dirname22(path6), { recursive: true });
+  writeFileSync22(path6, "", { mode: 420, flag: "a" });
+  const isRoot = process.getuid?.() === 0;
+  let alreadyOwned = false;
+  try {
+    const st = statSync38(path6);
+    alreadyOwned = st.uid === uid && st.gid === gid;
+  } catch {}
+  if (isRoot && !alreadyOwned) {
+    try {
+      chownSync6(path6, uid, gid);
+    } catch (e) {
+      if (e.code !== "EPERM")
+        throw e;
+    }
+  }
+  return { status: "created", path: path6 };
+}
+function renderLogrotate(opts) {
+  return `${opts.logPath} {
+` + `  weekly
+` + `  rotate 8
+` + `  compress
+` + `  delaycompress
+` + `  missingok
+` + `  notifempty
+` + `  copytruncate
+` + `  su ${opts.user} ${opts.user}
+` + `}
+`;
+}
+function installLogrotate(opts) {
+  const path6 = opts.path ?? LOGROTATE_PATH;
+  const content = renderLogrotate({ logPath: opts.logPath ?? CRON_LOG_PATH, user: opts.user });
+  if (existsSync63(path6)) {
+    try {
+      if (readFileSync60(path6, "utf8") === content) {
+        return { status: "unchanged", path: path6, content };
+      }
+    } catch {}
+  }
+  mkdirSync35(dirname22(path6), { recursive: true });
+  const tmp = `${path6}.${process.pid}.tmp`;
+  writeFileSync22(tmp, content, { mode: 420 });
+  renameSync15(tmp, path6);
+  return { status: "installed", path: path6, content };
+}
 function parseCronUser(content) {
   for (const line of content.split(`
 `)) {
@@ -46041,7 +46381,14 @@ function reconcileCron(opts) {
     content: r.content
   };
 }
-var CRON_PATH = "/etc/cron.d/hindsight-watch", CRON_SCHEDULE = "*/15 * * * *", CRON_LOG_PATH = "/var/log/hindsight-watch.log", CRON_LOCK_PATH = "/run/lock/hindsight-watch.lock";
+var CRON_PATH = "/etc/cron.d/hindsight-watch", CRON_SCHEDULE = "*/15 * * * *", CRON_LOG_PATH = "/var/log/hindsight-watch.log", LOGROTATE_PATH = "/etc/logrotate.d/hindsight-watch", CRON_LOCK_PATH = "/run/lock/hindsight-watch.lock", defaultIdResolver = (user) => {
+  const uid = Number(execFileSync20("id", ["-u", user], { encoding: "utf8" }).trim());
+  const gid = Number(execFileSync20("id", ["-g", user], { encoding: "utf8" }).trim());
+  if (!Number.isInteger(uid) || !Number.isInteger(gid)) {
+    throw new Error(`could not resolve uid/gid for user ${JSON.stringify(user)}`);
+  }
+  return { uid, gid };
+};
 var init_install_cron = () => {};
 
 // src/hindsight-watch/thresholds.ts
@@ -46190,7 +46537,7 @@ var init_state2 = __esm(() => {
 });
 
 // src/cli/doctor-hindsight-watch.ts
-import { existsSync as existsSync64, statSync as statSync38 } from "node:fs";
+import { existsSync as existsSync64, statSync as statSync39 } from "node:fs";
 function classifyWatchArmed(cronPresent, stateMtimeMs, now) {
   const name = "hindsight-watch armed";
   if (stateMtimeMs === null) {
@@ -46228,7 +46575,7 @@ function classifyWatchArmed(cronPresent, stateMtimeMs, now) {
 function checkHindsightWatchArmed(now = Date.now(), cronPath = CRON_PATH, statePath = defaultStatePath2()) {
   let mtime = null;
   try {
-    mtime = statSync38(statePath).mtimeMs;
+    mtime = statSync39(statePath).mtimeMs;
   } catch {}
   return classifyWatchArmed(existsSync64(cronPath), mtime, now);
 }
@@ -46789,10 +47136,11 @@ function requiredKeyModels(config, proxyModels) {
       apiKeyRef: ref && ref.length > 0 ? ref : null
     });
   };
-  consider(llm.model, llm.provider, undefined, "hindsight.llm.model (global)");
-  consider(llm.retain?.model, llm.retain?.provider, llm.retain?.api_key, "hindsight.llm.retain");
-  consider(llm.reflect?.model, llm.reflect?.provider, llm.reflect?.api_key, "hindsight.llm.reflect");
-  consider(llm.consolidation?.model, llm.consolidation?.provider, llm.consolidation?.api_key, "hindsight.llm.consolidation");
+  const globalKey = llm.api_key;
+  consider(llm.model, llm.provider, globalKey, "hindsight.llm.model (global)");
+  consider(llm.retain?.model, llm.retain?.provider, llm.retain?.api_key ?? globalKey, "hindsight.llm.retain");
+  consider(llm.reflect?.model, llm.reflect?.provider, llm.reflect?.api_key ?? globalKey, "hindsight.llm.reflect");
+  consider(llm.consolidation?.model, llm.consolidation?.provider, llm.consolidation?.api_key ?? globalKey, "hindsight.llm.consolidation");
   return out;
 }
 function classifyAllowlist(models) {
@@ -47467,7 +47815,7 @@ import {
   constants as fsConstants4,
   existsSync as existsSync66,
   realpathSync as realpathSync5,
-  statSync as statSync39
+  statSync as statSync40
 } from "node:fs";
 import { userInfo, homedir as homedir33 } from "node:os";
 import { join as join61 } from "node:path";
@@ -47485,7 +47833,7 @@ function defaultStatVault(path6) {
   let uid = -1;
   let mode = 0;
   try {
-    const s = statSync39(real);
+    const s = statSync40(real);
     uid = s.uid;
     mode = s.mode & 511;
   } catch {
@@ -49648,7 +49996,7 @@ __export(exports_voice_sidecar_token, {
   VOICE_SIDECAR_TOKEN_ENV: () => VOICE_SIDECAR_TOKEN_ENV
 });
 import { randomBytes as randomBytes12 } from "node:crypto";
-import { chmodSync as chmodSync13, chownSync as chownSync6, existsSync as existsSync69, mkdirSync as mkdirSync40, readFileSync as readFileSync67, rmSync as rmSync12, writeFileSync as writeFileSync27 } from "node:fs";
+import { chmodSync as chmodSync13, chownSync as chownSync7, existsSync as existsSync69, mkdirSync as mkdirSync40, readFileSync as readFileSync67, rmSync as rmSync12, writeFileSync as writeFileSync27 } from "node:fs";
 import { dirname as dirname27 } from "node:path";
 async function defaultResolveOrSeedToken(home2, writeErr) {
   const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { resolveOperatorVaultPassphrase }] = await Promise.all([
@@ -49722,7 +50070,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
     chmodSync13(envPath, 384);
     if (ctx.operatorUid !== undefined && process.geteuid?.() === 0) {
       try {
-        chownSync6(envPath, ctx.operatorUid, ctx.operatorUid);
+        chownSync7(envPath, ctx.operatorUid, ctx.operatorUid);
       } catch {}
     }
     ctx.writeOut(source_default.gray(`  Wrote voice-sidecar token to ${envPath} (0600)
@@ -49769,13 +50117,13 @@ __export(exports_apply, {
   DEFAULT_COMPOSE_PATH: () => DEFAULT_COMPOSE_PATH,
   COMPOSE_PROJECT: () => COMPOSE_PROJECT2
 });
-import { accessSync as accessSync2, chmodSync as chmodSync14, chownSync as chownSync7, constants as fsConstants5, copyFileSync as copyFileSync10, existsSync as existsSync70, mkdirSync as mkdirSync41, readFileSync as readFileSync68, readdirSync as readdirSync24, renameSync as renameSync17, statSync as statSync40, writeFileSync as writeFileSync28 } from "node:fs";
+import { accessSync as accessSync2, chmodSync as chmodSync14, chownSync as chownSync8, constants as fsConstants5, copyFileSync as copyFileSync10, existsSync as existsSync70, mkdirSync as mkdirSync41, readFileSync as readFileSync68, readdirSync as readdirSync24, renameSync as renameSync17, statSync as statSync41, writeFileSync as writeFileSync28 } from "node:fs";
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
 import { dirname as dirname28, join as join69, resolve as resolve40 } from "node:path";
 import { homedir as homedir37 } from "node:os";
-import { execFileSync as execFileSync20 } from "node:child_process";
+import { execFileSync as execFileSync21 } from "node:child_process";
 function effectiveLiteLLMEnabled(config, agentResolvedLitellm) {
   return agentResolvedLitellm?.enabled ?? config.litellm?.enabled ?? false;
 }
@@ -50074,7 +50422,7 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
     try {
       let cfgMode = 420;
       try {
-        cfgMode = statSync40(switchroomConfigPath).mode & 511;
+        cfgMode = statSync41(switchroomConfigPath).mode & 511;
       } catch {}
       writeConfigFileSync(switchroomConfigPath, configText, cfgMode);
       writeOut(source_default.gray(`  ~ litellm: granted read-ACL on per-agent keys (updated ${switchroomConfigPath})
@@ -50296,7 +50644,7 @@ async function ensureHostMountSources(config) {
     }
     try {
       const uid = allocateAgentUid(name);
-      chownSync7(tokenPath, uid, uid);
+      chownSync8(tokenPath, uid, uid);
     } catch {}
   }
   const fleetDir = join69(home2, ".switchroom", "fleet");
@@ -50316,7 +50664,7 @@ async function ensureHostMountSources(config) {
 }
 function detectComposeV2() {
   try {
-    const out = execFileSync20("docker", ["compose", "version"], {
+    const out = execFileSync21("docker", ["compose", "version"], {
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8"
     });
@@ -51104,7 +51452,7 @@ var init_apply = __esm(() => {
 });
 
 // src/agents/drift.ts
-import { execFileSync as execFileSync21 } from "node:child_process";
+import { execFileSync as execFileSync22 } from "node:child_process";
 import { createHash as createHash15 } from "node:crypto";
 import {
   existsSync as existsSync71,
@@ -51439,7 +51787,7 @@ function detectAgentDrift(name, agentConfigRaw, agentsDir, config, configPath, o
   }
   return findings;
 }
-var BUNDLED_POOL_SEGMENT = "/.switchroom/skills/_bundled/", defaultExec = (cmd, args) => execFileSync21(cmd, args, {
+var BUNDLED_POOL_SEGMENT = "/.switchroom/skills/_bundled/", defaultExec = (cmd, args) => execFileSync22(cmd, args, {
   encoding: "utf-8",
   stdio: ["ignore", "pipe", "ignore"],
   timeout: 1e4
@@ -52421,7 +52769,7 @@ function runCredentialsMigrationChecks(config, deps = {}) {
 var init_doctor_credentials_migration = () => {};
 
 // src/cli/doctor-agent-dotfile-ownership.ts
-import { existsSync as existsSync73, lstatSync as lstatSync10, statSync as statSync41 } from "node:fs";
+import { existsSync as existsSync73, lstatSync as lstatSync10, statSync as statSync42 } from "node:fs";
 import { join as join75 } from "node:path";
 function agentDotfileCandidates(agentDir) {
   return [
@@ -52438,7 +52786,7 @@ function runAgentDotfileOwnershipChecks(config, deps = {}) {
   if (agents.length === 0)
     return results;
   const exists = deps.existsSync ?? existsSync73;
-  const scanFs = deps.scanFs ?? { lstatSync: lstatSync10, statSync: statSync41 };
+  const scanFs = deps.scanFs ?? { lstatSync: lstatSync10, statSync: statSync42 };
   let agentsDir = deps.agentsDir;
   if (agentsDir === undefined) {
     try {
@@ -52583,7 +52931,7 @@ var init_doctor_inlined_secrets = __esm(() => {
 });
 
 // src/cli/doctor-approval-attribution.ts
-import { execFileSync as execFileSync22 } from "node:child_process";
+import { execFileSync as execFileSync23 } from "node:child_process";
 import { readFileSync as fsReadFileSync2 } from "node:fs";
 import { join as join76 } from "node:path";
 function parseApproverSet(canonical) {
@@ -52685,7 +53033,7 @@ async function defaultLoadDecisions() {
   } catch {}
   try {
     const SEP2 = String.fromCharCode(31);
-    const stdout = execFileSync22("docker", [
+    const stdout = execFileSync23("docker", [
       "exec",
       "switchroom-vault-broker",
       "sqlite3",
@@ -52957,8 +53305,8 @@ var init_doctor_agent_smoke = __esm(() => {
 });
 
 // src/cli/doctor-vault-broker-durability.ts
-import { execFileSync as execFileSync23 } from "node:child_process";
-import { existsSync as existsSync75, statSync as statSync42, readFileSync as readFileSync70 } from "node:fs";
+import { execFileSync as execFileSync24 } from "node:child_process";
+import { existsSync as existsSync75, statSync as statSync43, readFileSync as readFileSync70 } from "node:fs";
 import { homedir as homedir43 } from "node:os";
 import { join as join79 } from "node:path";
 import { createRequire as createRequire2 } from "node:module";
@@ -52986,7 +53334,7 @@ function defaultStatHost(p) {
   if (!existsSync75(p))
     return null;
   try {
-    const s = statSync42(p, { bigint: true });
+    const s = statSync43(p, { bigint: true });
     return { ino: s.ino, size: Number(s.size) };
   } catch {
     return null;
@@ -53020,7 +53368,7 @@ function spawnDockerStat(p) {
 }
 function spawnDockerStatForContainer(containerName2, p) {
   try {
-    const stdout = execFileSync23("docker", ["exec", containerName2, "stat", "-c", "%i %s", p], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
+    const stdout = execFileSync24("docker", ["exec", containerName2, "stat", "-c", "%i %s", p], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
     return { status: 0, stdout, stderr: "", error: null };
   } catch (err) {
     const e = err;
@@ -53094,7 +53442,7 @@ function probeBrokerUnlocked(opts) {
 }
 function defaultBrokerStatusProbe() {
   try {
-    const out = execFileSync23("switchroom", ["vault", "broker", "status"], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
+    const out = execFileSync24("switchroom", ["vault", "broker", "status"], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
     const parsed = JSON.parse(out.trim());
     if (!parsed.running)
       return null;
@@ -53195,7 +53543,7 @@ function defaultKernelStatBroker(p) {
 }
 function defaultWalStatBroker(p) {
   try {
-    const stdout = execFileSync23("docker", ["exec", "switchroom-vault-broker", "stat", "-c", "%Y %s", p], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
+    const stdout = execFileSync24("docker", ["exec", "switchroom-vault-broker", "stat", "-c", "%Y %s", p], { stdio: ["ignore", "pipe", "pipe"], timeout: 3000, encoding: "utf8" });
     const [mStr, sStr] = stdout.trim().split(/\s+/);
     const mtime = Number(mStr);
     const size = Number(sStr);
@@ -53324,7 +53672,7 @@ function probeOrphanVaultTokens(config, opts) {
 }
 function defaultTokenMtimeMs(agent, home2) {
   try {
-    return statSync42(join79(home2, ".switchroom", "agents", agent, ".vault-token")).mtimeMs;
+    return statSync43(join79(home2, ".switchroom", "agents", agent, ".vault-token")).mtimeMs;
   } catch {
     return null;
   }
@@ -53372,7 +53720,7 @@ function probeAutoUnlockBlob(home2) {
       fix: "Run `switchroom vault broker enable-auto-unlock` to seal the blob with the current passphrase + machine-id"
     };
   }
-  const sz = statSync42(blobPath).size;
+  const sz = statSync43(blobPath).size;
   if (sz === 0) {
     return {
       name: "vault-broker: auto-unlock blob",
@@ -53728,6 +54076,7 @@ __export(exports_doctor, {
   checkMffAuthFlow: () => checkMffAuthFlow,
   checkMffApiReachable: () => checkMffApiReachable,
   checkMff: () => checkMff,
+  checkMemoryKeysAreKnown: () => checkMemoryKeysAreKnown,
   checkManifestDrift: () => checkManifestDrift,
   checkLegacyState: () => checkLegacyState,
   checkLeakedHomeSwitchroom: () => checkLeakedHomeSwitchroom,
@@ -53739,6 +54088,7 @@ __export(exports_doctor, {
   checkConfig: () => checkConfig,
   checkBankObservationsMissions: () => checkBankObservationsMissions,
   checkBankIngestHealth: () => checkBankIngestHealth,
+  checkBankConfigApiReachable: () => checkBankConfigApiReachable,
   checkAgents: () => checkAgents,
   buildPendingRetainsProbeScript: () => buildPendingRetainsProbeScript,
   PENDING_RETAINS_EVICTION_WINDOW_DAYS: () => PENDING_RETAINS_EVICTION_WINDOW_DAYS,
@@ -53754,7 +54104,7 @@ import {
   mkdirSync as mkdirSync42,
   readFileSync as readFileSync72,
   readdirSync as readdirSync26,
-  statSync as statSync43
+  statSync as statSync44
 } from "node:fs";
 import { dirname as dirname31, join as join82, resolve as resolve44 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
@@ -53781,7 +54131,7 @@ function findInNvm(bin) {
     for (const v of versions) {
       const candidate = join82(nvmRoot, v, "bin", bin);
       try {
-        const s = statSync43(candidate);
+        const s = statSync44(candidate);
         if (s.isFile() || s.isSymbolicLink()) {
           return candidate;
         }
@@ -54074,8 +54424,68 @@ function checkConfig(config, configPath) {
     detail: effortRisks.length > 0 ? `${effortRisks.length} agent(s) on pinned Opus 4.x with thinking_effort > low: ${effortRisks.join(", ")}` : "no risky model/effort combos",
     fix: effortRisks.length > 0 ? "Pin `thinking_effort: low` for pinned Opus 4.x agents, or move them to a current Opus model. medium+ could 400 on 'thinking blocks cannot be modified' with concurrent sub-agents (issue #1978); the upstream fix shipped in claude-code " + `${CLAUDE_CLI_THINKING_MERGE_FIX_VERSION} but the Opus 4.x reproduction was never re-tested. Removing the field is NOT a fix (Opus defaults effort=high when unset).` : undefined
   });
+  results.push(checkMemoryKeysAreKnown(configPath));
   return results;
 }
+function checkMemoryKeysAreKnown(configPath) {
+  const name = "memory config keys";
+  let rawText;
+  try {
+    rawText = readFileSync72(configPath, "utf-8");
+  } catch {
+    return { name, status: "ok", detail: "config unreadable \u2014 skipped (see load row)" };
+  }
+  let parsed;
+  try {
+    parsed = import_yaml19.parse(rawText);
+  } catch {
+    return { name, status: "ok", detail: "config unparseable \u2014 skipped (see load row)" };
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    return { name, status: "ok", detail: "no memory config to check" };
+  }
+  const root = parsed;
+  const sources = [];
+  const asObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+  const defaults = asObj(root.defaults);
+  if (defaults?.memory !== undefined)
+    sources.push({ label: "defaults", memory: defaults.memory, tier: "mirror" });
+  const profiles = asObj(root.profiles);
+  for (const [pname, pval] of Object.entries(profiles ?? {})) {
+    const p = asObj(pval);
+    if (p?.memory !== undefined)
+      sources.push({ label: `profile ${pname}`, memory: p.memory, tier: "mirror" });
+  }
+  const agents = asObj(root.agents);
+  for (const [aname, aval] of Object.entries(agents ?? {})) {
+    const a = asObj(aval);
+    if (a?.memory !== undefined)
+      sources.push({ label: aname, memory: a.memory, tier: "agent" });
+  }
+  const lines = [];
+  let retiredCount = 0;
+  for (const { label, memory, tier } of sources) {
+    for (const finding of findUnknownMemoryKeys(memory, tier)) {
+      if (finding.replacement) {
+        retiredCount++;
+        lines.push(`${label}: \`${finding.scope}.${finding.key}\` \u2014 ${finding.replacement}`);
+      } else {
+        lines.push(`${label}: \`${finding.scope}.${finding.key}\` is not a recognized key \u2014 silently ignored`);
+      }
+    }
+  }
+  if (lines.length === 0) {
+    return { name, status: "ok", detail: "all `memory` keys are recognized" };
+  }
+  return {
+    name,
+    status: "fail",
+    detail: `${lines.length} unrecognized \`memory\` key(s)` + (retiredCount > 0 ? ` (${retiredCount} removed knob(s))` : "") + ` \u2014 silently stripped at parse time, so the line reads as set but does nothing:
+  ` + lines.join(`
+  `),
+    fix: "Remove or fix the key(s). A removed knob is gone for good \u2014 delete the " + "line; a typo must match a declared key. The recognized keys live on " + "`AgentMemorySchema` (and its `recall`/`retain`) in src/config/schema.ts."
+  };
+}
 function checkUserDeclaredMcps(name, agentConfig, config, renderedMcpServers) {
   const resolved = resolveAgentConfig(config.defaults, config.profiles, agentConfig);
   const declaredMcp = resolved.mcp_servers ?? {};
@@ -54377,7 +54787,7 @@ function checkHostCapabilitiesReadable(config, read = readHostCapabilities()) {
   const proven = voice?.gpuPresent === true && voice?.containerToolkit === true;
   let mode;
   try {
-    mode = statSync43(read.path).mode & 511;
+    mode = statSync44(read.path).mode & 511;
   } catch {
     mode = undefined;
   }
@@ -54467,7 +54877,8 @@ async function checkBankObservationsMissions(config, url, opts) {
         detail: `could not read observations_mission: ${read.reason}`
       };
     }
-    const profileDefault = PROFILE_MEMORY_DEFAULTS[entry.config.extends ?? DEFAULT_PROFILE]?.observations_mission;
+    const memoryProfile = resolveMemoryProfile(entry.config);
+    const profileDefault = PROFILE_MEMORY_DEFAULTS[memoryProfile]?.observations_mission;
     const decision = decideObservationsMissionUpgrade(entry.config.memory?.observations_mission, profileDefault, read.mission);
     if (decision.action === "upgrade") {
       return {
@@ -54489,10 +54900,22 @@ async function checkBankObservationsMissions(config, url, opts) {
     return {
       name: label,
       status: "ok",
-      detail: isSwitchroomDefault ? profileDefault != null ? `switchroom ${entry.config.extends ?? DEFAULT_PROFILE}-profile default` : "switchroom fleet default" : "operator-authored (left untouched by the never-clobber rule)"
+      detail: isSwitchroomDefault ? profileDefault != null ? `switchroom ${memoryProfile}-profile default` : "switchroom fleet default" : "operator-authored (left untouched by the never-clobber rule)"
     };
   });
 }
+async function checkBankConfigApiReachable(config, url, opts) {
+  let bankId;
+  for (const [agentName, agentConfig] of Object.entries(config.agents)) {
+    const resolved = resolveAgentConfig(config.defaults, config.profiles, agentConfig);
+    bankId = resolved.memory?.collection ?? agentName;
+    break;
+  }
+  if (bankId === undefined)
+    return [];
+  const read = await fetchBankRetainMission(url, bankId, { fetchImpl: opts?.fetchImpl });
+  return [classifyBankConfigReachability(read, bankId)];
+}
 async function checkBankIngestHealth(config, url, opts) {
   const results = [];
   const now = opts?.now ?? new Date;
@@ -54507,18 +54930,22 @@ async function checkBankIngestHealth(config, url, opts) {
       banks.set(bank, []);
   }
   const inspected = await Promise.all([...banks].map(async ([bankId, agents]) => [bankId, agents, await inspectBankHealth(url, bankId, { fetchImpl: opts?.fetchImpl })]));
-  let backlogRow;
+  const backlogRows = [];
   if (opts?.includeConsolidationBacklog) {
-    let totalPending = 0;
+    let totalPendingOps = 0;
+    let totalPendingConsolidation = 0;
     let anyBankReachable = false;
     for (const [, , h] of inspected) {
       if (h.ok) {
         anyBankReachable = true;
-        totalPending += h.pendingOperations;
+        totalPendingOps += h.pendingOperations;
+        totalPendingConsolidation += h.pendingConsolidation;
       }
     }
-    if (anyBankReachable)
-      backlogRow = classifyConsolidationBacklog(totalPending);
+    if (anyBankReachable) {
+      backlogRows.push(classifyAsyncOpQueue(totalPendingOps));
+      backlogRows.push(classifyConsolidationBacklog(totalPendingConsolidation));
+    }
   }
   for (const [bankId, agents, h] of inspected) {
     const label = `bank ${bankId}` + (profileBanks.has(bankId) ? " (profile)" : agents[0] !== bankId ? ` (${agents.join(", ")})` : "");
@@ -54584,8 +55011,7 @@ async function checkBankIngestHealth(config, url, opts) {
     }
     results.push({ name: label, status: "ok", detail: summary });
   }
-  if (backlogRow)
-    results.push(backlogRow);
+  results.push(...backlogRows);
   return results;
 }
 function hindsightDocReprocessUrl(mcpUrl, bankId, docId) {
@@ -54653,6 +55079,7 @@ async function checkHindsight(config) {
   results.push(await checkHindsightHealthEndpoint(url));
   results.push(...await checkBankIngestHealth(config, url, { includeConsolidationBacklog: true }));
   results.push(...await checkBankObservationsMissions(config, url));
+  results.push(...await checkBankConfigApiReachable(config, url));
   results.push(await checkObservationScopeSaturation(config, url));
   const memoryAgentsDir = resolveAgentsDir(config);
   for (const agentName of Object.keys(config.agents)) {
@@ -54690,7 +55117,7 @@ function probePendingRetainsQueue(agentName) {
 function buildPendingRetainsProbeScript(base, now = Date.now()) {
   const dir = `${base}/pending-retains`;
   const cutoff = new Date(now - PENDING_RETAINS_EVICTION_WINDOW_DAYS * 86400000).toISOString().replace(/\.\d+Z$/, "Z");
-  return `P=0; D=0; X=0; E=0; C=\${HINDSIGHT_PENDING_MAX_ENTRIES:-${PENDING_RETAINS_DEFAULT_MAX_ENTRIES}}; ` + `if [ -d '${dir}' ]; then ` + `P=$(ls -1 '${dir}' 2>/dev/null | grep -c '\\.json$' || true); ` + `D=$(ls -1 '${dir}' 2>/dev/null | grep -c '\\.json\\.dead$' || true); ` + `fi; ` + `if [ -d '${base}/pending-dead' ]; then ` + `D=$((D + $(ls -1 '${base}/pending-dead' 2>/dev/null | grep -c '\\.dead$' || true))); ` + `fi; ` + `for L in '${base}/pending-drops.json' '${dir}/.drops.json'; do ` + `if [ "$X" = 0 ] && [ -f "$L" ]; then ` + `X=$(grep -o '"count"[^0-9]*[0-9][0-9]*' "$L" 2>/dev/null ` + `| grep -o '[0-9][0-9]*$' | head -n1); ` + `[ -n "$X" ] || X=0; ` + `fi; done; ` + `if [ -f '${base}/pending-evictions.log' ]; then ` + `E=$(awk -v c='${cutoff}' '$1 >= c && /evicted=/ {n++} END {print n+0}' ` + `'${base}/pending-evictions.log' 2>/dev/null || echo 0); ` + `[ -n "$E" ] || E=0; ` + `fi; ` + `echo "P=$P D=$D X=$X E=$E C=$C"`;
+  return `P=0; D=0; X=0; E=0; Q=0; C=\${HINDSIGHT_PENDING_MAX_ENTRIES:-${PENDING_RETAINS_DEFAULT_MAX_ENTRIES}}; ` + `if [ -d '${dir}' ]; then ` + `P=$(ls -1 '${dir}' 2>/dev/null | grep -c '\\.json$' || true); ` + `D=$(ls -1 '${dir}' 2>/dev/null | grep -c '\\.json\\.dead$' || true); ` + `fi; ` + `if [ -d '${base}/pending-dead' ]; then ` + `D=$((D + $(ls -1 '${base}/pending-dead' 2>/dev/null | grep -c '\\.dead$' || true))); ` + `fi; ` + `for L in '${base}/pending-drops.json' '${dir}/.drops.json'; do ` + `if [ "$X" = 0 ] && [ -f "$L" ]; then ` + `X=$(grep -o '"count"[^0-9]*[0-9][0-9]*' "$L" 2>/dev/null ` + `| grep -o '[0-9][0-9]*$' | head -n1); ` + `[ -n "$X" ] || X=0; ` + `fi; done; ` + `if [ -f '${base}/pending-evictions.log' ]; then ` + `E=$(awk -v c='${cutoff}' '$1 >= c && /evicted=/ {n++} END {print n+0}' ` + `'${base}/pending-evictions.log' 2>/dev/null || echo 0); ` + `[ -n "$E" ] || E=0; ` + `fi; ` + `if [ -d '${base}/pending-duplicate' ]; then ` + `Q=$(ls -1 '${base}/pending-duplicate' 2>/dev/null | grep -c '\\.json$' || true); ` + `fi; ` + `echo "P=$P D=$D X=$X E=$E Q=$Q C=$C"`;
 }
 function parsePendingRetainsProbeOutput(r) {
   const unreachable = {
@@ -54699,6 +55126,7 @@ function parsePendingRetainsProbeOutput(r) {
     dead: 0,
     dropped: 0,
     evicted: 0,
+    duplicates: 0,
     cap: PENDING_RETAINS_DEFAULT_MAX_ENTRIES
   };
   if (r.error || r.status !== 0)
@@ -54712,11 +55140,13 @@ function parsePendingRetainsProbeOutput(r) {
   const dead = parseInt(dm[1], 10);
   const xm = out.match(/X=(\d+)/);
   const em = out.match(/E=(\d+)/);
+  const qm = out.match(/Q=(\d+)/);
   const cm = out.match(/C=(\d+)/);
   const dropped = xm ? parseInt(xm[1], 10) : 0;
   const evicted = em ? parseInt(em[1], 10) : 0;
+  const duplicates = qm ? parseInt(qm[1], 10) : 0;
   const cap = cm && parseInt(cm[1], 10) > 0 ? parseInt(cm[1], 10) : PENDING_RETAINS_DEFAULT_MAX_ENTRIES;
-  const common = { pending, dead, dropped, evicted, cap };
+  const common = { pending, dead, dropped, evicted, duplicates, cap };
   if (dead > 0)
     return { state: "dead", ...common };
   if (pending > 0)
@@ -54748,12 +55178,15 @@ function checkPendingRetainsQueues(config, opts) {
   const unreachable = [];
   const dropped = [];
   const evicted = [];
+  const duplicated = [];
   let okCount = 0;
   for (const [a, r] of results) {
     if (r.dropped > 0)
       dropped.push(`${a} (${r.dropped})`);
     if (r.evicted > 0)
       evicted.push(`${a} (${r.evicted})`);
+    if (r.duplicates > 0)
+      duplicated.push(`${a} (${r.duplicates})`);
     if (r.state === "dead") {
       dead.push(`${a} (${r.dead} dead${r.pending > 0 ? `, ${r.pending} queued` : ""})`);
     } else if (r.state === "backlog") {
@@ -54768,6 +55201,7 @@ function checkPendingRetainsQueues(config, opts) {
     }
   }
   const skippedNote = unreachable.length > 0 ? `; skipped (unreachable): ${unreachable.join(", ")}` : "";
+  const dupNote = duplicated.length > 0 ? `; collapsed duplicates (not loss): ${duplicated.join(", ")}` : "";
   const backlogFix = `Clear a backlog explicitly (the SessionStart drain cannot \u2014 its per-entry ` + `timeout is clamped to the hook budget, far below a real retain): ` + `\`docker exec switchroom-<agent> python3 ` + `/state/agent/.claude/plugins/hindsight-memory/scripts/drain_pending.py --backlog\`. ` + `Run \`--phase reconcile\` first \u2014 it costs nothing and typically clears most of ` + `the queue by confirming those documents already exist. PACE THE REST: the retain ` + `model pool is small and shared with live traffic, so drain ONE agent at a time at ` + `the default HINDSIGHT_DRAIN_CONCURRENCY=1, and keep HINDSIGHT_DRAIN_SLEEP_S set. ` + `Point HINDSIGHT_DRAIN_P95_CMD at the same figure the latency watchdog alarms on so ` + `the replay backs off instead of causing the alarm \u2014 on a LiteLLM deployment that is ` + `\`docker exec -i <postgres> psql -U "$POSTGRES_USER" -d "$POSTGRES_DB" -At -c ` + `"select coalesce((select round(percentile_cont(0.95) within group (order by ` + `request_duration_ms)) from \\"LiteLLM_SpendLogs\\" where \\"startTime\\" > now() ` + `- interval '10 minutes' and metadata->>'user_api_key_alias' like 'hindsight-%' and ` + `status='success' and request_duration_ms is not null), -1)"\` (must print a ` + `millisecond integer on stdout; unset = no backoff). ` + `SAFE ALONGSIDE THE \`hindsight-drain\` SIDECAR and a session booting underneath ` + `you: drain_pending.py takes an exclusive lock on ` + `\`$HOME/.hindsight/drain-pending.lock\` for the whole run, so whichever drain ` + `starts second prints "another drain holds ..." and exits without touching the ` + `queue. Do NOT wrap this in \`flock\` on that path yourself \u2014 you would hold the ` + `lock the script then asks for, and it would skip every time. Entries past the ` + `attempt ceiling (HINDSIGHT_DRAIN_ATTEMPT_CEILING, default 20) are PARKED and ` + `reported rather than retried forever; add \`--force\` once the upstream is fixed ` + `to replay them. ` + `Fix the upstream first (bank ` + `health rows above), or every retry just ages entries toward .dead. Entries the ` + `drain retires are MOVED to \`.hindsight/pending-reconciled/\` (bounded, so they ` + `expire), never deleted \u2014 every retire rests on an HTTP 200, which is an ack and ` + `not proof, so the payload stays recoverable. If that archive cannot be written ` + `(disk full, permissions) the entry STAYS QUEUED and the drain says so on stderr; ` + `a failure to archive is never a reason to delete. FIX THE DISK ANYWAY \u2014 "stays ` + `queued" is bounded: entries pile up, the queue hits ` + `HINDSIGHT_PENDING_MAX_ENTRIES/MAX_BYTES, and enqueue then sheds the OLDEST ` + `entries to keep accepting the newest. While the disk is full their archive move ` + `fails too, so those oldest turns are removed outright (the ledger line reads ` + `\`reason=...+archive-failed\`). Under sustained ENOSPC "keep it queued" degrades ` + `to "keep the newest, drop the oldest".`;
   if (dead.length > 0 || dropped.length > 0 || evicted.length > 0) {
     const parts = [];
@@ -54798,7 +55232,7 @@ function checkPendingRetainsQueues(config, opts) {
     return {
       name,
       status: "fail",
-      detail: `${parts.join("; ")}${skippedNote}`,
+      detail: `${parts.join("; ")}${skippedNote}${dupNote}`,
       fix: fixParts.join(" ")
     };
   }
@@ -54812,14 +55246,14 @@ function checkPendingRetainsQueues(config, opts) {
     return {
       name,
       status: "warn",
-      detail: `${parts.join("; ")}${skippedNote}`,
+      detail: `${parts.join("; ")}${skippedNote}${dupNote}`,
       fix: backlogFix
     };
   }
   return {
     name,
     status: "ok",
-    detail: `${okCount}/${agentNames.length} agents: empty (no failed retains)${skippedNote}`
+    detail: `${okCount}/${agentNames.length} agents: empty (no failed retains)${skippedNote}${dupNote}`
   };
 }
 function classifyReadError(err) {
@@ -55949,8 +56383,8 @@ function registerDoctorCommand(program3) {
         results: await runContextChecks(config, {
           readSnapshot: async (agent) => {
             try {
-              const { execFileSync: execFileSync24 } = await import("node:child_process");
-              const out = execFileSync24("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/context-occupancy.json"], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"], timeout: 5000 });
+              const { execFileSync: execFileSync25 } = await import("node:child_process");
+              const out = execFileSync25("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/context-occupancy.json"], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"], timeout: 5000 });
               return { kind: "ok", snapshot: JSON.parse(out) };
             } catch (err) {
               const msg = err.message ?? String(err);
@@ -56051,7 +56485,7 @@ function registerDoctorCommand(program3) {
     }
   }));
 }
-var DEFAULT_DEPLOY_MOUNTS_DEPS, PENDING_RETAINS_DEFAULT_MAX_ENTRIES = 2000, PENDING_RETAINS_EVICTION_WINDOW_DAYS = 7, MFF_VAULT_KEY = "mff/agent-private-key", MANIFEST_WARN_ONLY;
+var import_yaml19, DEFAULT_DEPLOY_MOUNTS_DEPS, PENDING_RETAINS_DEFAULT_MAX_ENTRIES = 2000, PENDING_RETAINS_EVICTION_WINDOW_DAYS = 7, MFF_VAULT_KEY = "mff/agent-private-key", MANIFEST_WARN_ONLY;
 var init_doctor = __esm(() => {
   init_source();
   init_doctor_status();
@@ -56072,6 +56506,7 @@ var init_doctor = __esm(() => {
   init_hindsight();
   init_host_capabilities();
   init_hindsight_perf_defaults();
+  init_memory_key_drift();
   init_doctor_memory();
   init_doctor_recall_health();
   init_doctor_hnsw_index();
@@ -56103,6 +56538,7 @@ var init_doctor = __esm(() => {
   init_doctor_timezone();
   init_doctor_fix_session_model();
   init_doctor_claude_cli();
+  import_yaml19 = __toESM(require_dist(), 1);
   DEFAULT_DEPLOY_MOUNTS_DEPS = { pathKind: defaultPathKind };
   MANIFEST_WARN_ONLY = new Set([
     "@playwright/mcp",
@@ -56197,7 +56633,7 @@ __export(exports_util, {
   jsonStringifyReplacer: () => jsonStringifyReplacer,
   joinValues: () => joinValues,
   issue: () => issue,
-  isPlainObject: () => isPlainObject2,
+  isPlainObject: () => isPlainObject3,
   isObject: () => isObject2,
   getSizableOrigin: () => getSizableOrigin,
   getParsedType: () => getParsedType2,
@@ -56338,7 +56774,7 @@ function esc(str) {
 function isObject2(data) {
   return typeof data === "object" && data !== null && !Array.isArray(data);
 }
-function isPlainObject2(o) {
+function isPlainObject3(o) {
   if (isObject2(o) === false)
     return false;
   const ctor = o.constructor;
@@ -56466,7 +56902,7 @@ function omit(schema, mask) {
   });
 }
 function extend(schema, shape) {
-  if (!isPlainObject2(shape)) {
+  if (!isPlainObject3(shape)) {
     throw new Error("Invalid input to extend: expected a plain object");
   }
   const def = {
@@ -57408,7 +57844,7 @@ function mergeValues2(a, b) {
   if (a instanceof Date && b instanceof Date && +a === +b) {
     return { valid: true, data: a };
   }
-  if (isPlainObject2(a) && isPlainObject2(b)) {
+  if (isPlainObject3(a) && isPlainObject3(b)) {
     const bKeys = Object.keys(b);
     const sharedKeys = Object.keys(a).filter((key) => bKeys.indexOf(key) !== -1);
     const newObj = { ...a, ...b };
@@ -58253,7 +58689,7 @@ var init_schemas = __esm(() => {
     $ZodType.init(inst, def);
     inst._zod.parse = (payload, ctx) => {
       const input = payload.value;
-      if (!isPlainObject2(input)) {
+      if (!isPlainObject3(input)) {
         payload.issues.push({
           expected: "record",
           code: "invalid_type",
@@ -61936,7 +62372,7 @@ class Protocol {
     };
   }
 }
-function isPlainObject3(value) {
+function isPlainObject4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function mergeCapabilities(base, additional) {
@@ -61947,7 +62383,7 @@ function mergeCapabilities(base, additional) {
     if (addValue === undefined)
       continue;
     const baseValue = result[k];
-    if (isPlainObject3(baseValue) && isPlainObject3(addValue)) {
+    if (isPlainObject4(baseValue) && isPlainObject4(addValue)) {
       result[k] = { ...baseValue, ...addValue };
     } else {
       result[k] = addValue;
@@ -70661,14 +71097,14 @@ function detectHeaderMisconfig(parsed) {
 }
 function parseLitellmConfig(text) {
   try {
-    return import_yaml26.parse(text);
+    return import_yaml27.parse(text);
   } catch {
     return null;
   }
 }
-var import_yaml26, FORWARD_HEADERS_FLAG = "forward_client_headers_to_llm_api", COOLIFY_SERVICES_DIR = "/data/coolify/services", LIVE_LITELLM_CONFIG_BASENAME = "litellm-config.yaml", BARE_ANTHROPIC_FAMILY_ALIASES;
+var import_yaml27, FORWARD_HEADERS_FLAG = "forward_client_headers_to_llm_api", COOLIFY_SERVICES_DIR = "/data/coolify/services", LIVE_LITELLM_CONFIG_BASENAME = "litellm-config.yaml", BARE_ANTHROPIC_FAMILY_ALIASES;
 var init_header_passthrough_guard = __esm(() => {
-  import_yaml26 = __toESM(require_dist(), 1);
+  import_yaml27 = __toESM(require_dist(), 1);
   BARE_ANTHROPIC_FAMILY_ALIASES = new Set([
     "opus",
     "sonnet",
@@ -73897,6 +74333,9 @@ function summarizeReconcileBatch(totalCount, failures) {
     lines: failures.map((f) => `${f.name}: ${f.error}`)
   };
 }
+function shouldAutoRestartAfterReconcile(opts, restartRequiredCount) {
+  return opts.restart !== false && restartRequiredCount > 0;
+}
 function resolveLogsTail(lines) {
   const DEFAULT_TAIL = 50;
   const MAX_TAIL = 1000;
@@ -74745,7 +75184,7 @@ Scaffolding agent: ${name}
               }
             }
             const needsRestart = restartRequired.length > 0 || staleTillRestart.length > 0;
-            const autoRestart = restartRequired.length > 0 && !opts.noRestart;
+            const autoRestart = shouldAutoRestartAfterReconcile(opts, restartRequired.length);
             if (!needsRestart && hot.length > 0) {
               console.log(source_default.green(`
   (no restart needed, changes active next turn)`));
@@ -74765,7 +75204,7 @@ Restart: switchroom agent restart ${n}`));
           }
         }
         const changesBySemantics = result.changesBySemantics;
-        const autoRestartNeeded = !opts.noRestart && changesBySemantics !== undefined && changesBySemantics.restartRequired.length > 0;
+        const autoRestartNeeded = changesBySemantics !== undefined && shouldAutoRestartAfterReconcile(opts, changesBySemantics.restartRequired.length);
         const shouldRestart = (opts.restart || opts.gracefulRestart || autoRestartNeeded) && allChanges.length > 0;
         if (shouldRestart) {
           try {
@@ -85897,14 +86336,21 @@ ${name}:`)];
   const max = memCounts.length > 0 ? Math.max(...memCounts) : null;
   const medians = entries.map((e) => e.injected_score_median).filter((n) => typeof n === "number");
   const avgScore = medians.length > 0 ? Math.round(medians.reduce((s, n) => s + n, 0) / medians.length * 100) / 100 : null;
-  lines.push(source_default.gray(`  last ${total} turn${total === 1 ? "" : "s"}: ` + `avg=${avg ?? "\u2014"} max=${max ?? "\u2014"} ` + `avg_score=${avgScore ?? "\u2014"} ` + `cache_hits=${hits} capped=${cappedTurns}` + (omittedTurns > 0 ? ` directives_omitted_turns=${omittedTurns}` : "")));
+  const collapseTurns = entries.filter((e) => typeof e.injected_own_bank_count === "number" && e.injected_own_bank_count === 0 && typeof e.injected_additional_bank_count === "number" && e.injected_additional_bank_count > 0).length;
+  lines.push(source_default.gray(`  last ${total} turn${total === 1 ? "" : "s"}: ` + `avg=${avg ?? "\u2014"} max=${max ?? "\u2014"} ` + `avg_score=${avgScore ?? "\u2014"} ` + `cache_hits=${hits} capped=${cappedTurns}` + (omittedTurns > 0 ? ` directives_omitted_turns=${omittedTurns}` : "") + (collapseTurns > 0 ? source_default.red(` own_bank_collapse_turns=${collapseTurns}`) : "")));
   for (const e of entries) {
     const flag = e.cache_hit ? source_default.cyan("CACHE") : e.capped ? source_default.yellow("CAP") : source_default.green("OK");
     const dem = e.demoted_count && e.demoted_count > 0 ? source_default.dim(` -${e.demoted_count}d`) : "";
     const omitted = typeof e.directives_omitted === "number" && e.directives_omitted > 0 ? source_default.yellow(` +${e.directives_omitted}omitted`) : "";
     const ids = e.memory_ids && e.memory_ids.length > 0 ? source_default.dim(` ids=${e.memory_ids.slice(0, 3).join(",")}${e.memory_ids.length > 3 ? `\u2026+${e.memory_ids.length - 3}` : ""}`) : "";
+    const own = e.injected_own_bank_count;
+    const additional = e.injected_additional_bank_count;
+    const composition = typeof own === "number" || typeof additional === "number" ? (() => {
+      const text = ` own/add=${own ?? "\u2014"}/${additional ?? "\u2014"}`;
+      return own === 0 && typeof additional === "number" && additional > 0 ? source_default.red(text) : source_default.dim(text);
+    })() : "";
     const score = typeof e.injected_score_min === "number" && typeof e.injected_score_median === "number" && typeof e.injected_score_max === "number" ? source_default.dim(` score=${e.injected_score_min.toFixed(2)}/` + `${e.injected_score_median.toFixed(2)}/` + `${e.injected_score_max.toFixed(2)}`) : "";
-    lines.push(`  ${source_default.gray(e.ts)} ${flag} ` + `n=${e.result_count ?? "\u2014"}${e.pre_cap_count != null && e.pre_cap_count !== e.result_count ? `/${e.pre_cap_count}` : ""}` + `${dem}${omitted}${score}${ids}`);
+    lines.push(`  ${source_default.gray(e.ts)} ${flag} ` + `n=${e.result_count ?? "\u2014"}${e.pre_cap_count != null && e.pre_cap_count !== e.result_count ? `/${e.pre_cap_count}` : ""}` + `${dem}${omitted}${score}${composition}${ids}`);
   }
   return lines;
 }
@@ -92414,24 +92860,24 @@ init_source();
 init_loader();
 init_lifecycle();
 init_compose_env();
-import { existsSync as existsSync81, mkdirSync as mkdirSync46, readFileSync as readFileSync75, realpathSync as realpathSync6, statSync as statSync45, chownSync as chownSync8 } from "node:fs";
+import { existsSync as existsSync81, mkdirSync as mkdirSync46, readFileSync as readFileSync75, realpathSync as realpathSync6, statSync as statSync46, chownSync as chownSync9 } from "node:fs";
 import { spawnSync as spawnSync17 } from "node:child_process";
 import { join as join84, dirname as dirname34, resolve as resolve45 } from "node:path";
 import { homedir as homedir44 } from "node:os";
 
 // src/cli/release-yaml.ts
-var import_yaml19 = __toESM(require_dist(), 1);
+var import_yaml20 = __toESM(require_dist(), 1);
 function getReleasePinFromConfig(yamlText) {
   let v;
   try {
-    v = import_yaml19.parseDocument(yamlText).getIn(["release", "pin"]);
+    v = import_yaml20.parseDocument(yamlText).getIn(["release", "pin"]);
   } catch {
     return;
   }
   return typeof v === "string" ? v : undefined;
 }
 function setReleasePinInConfig(yamlText, pin, now = new Date().toISOString().slice(0, 10)) {
-  const doc = import_yaml19.parseDocument(yamlText);
+  const doc = import_yaml20.parseDocument(yamlText);
   const currentPin = doc.getIn(["release", "pin"]);
   const hasChannel = doc.hasIn(["release", "channel"]);
   if (currentPin === pin && !hasChannel)
@@ -92440,31 +92886,31 @@ function setReleasePinInConfig(yamlText, pin, now = new Date().toISOString().sli
     doc.deleteIn(["release", "channel"]);
   doc.setIn(["release", "pin"], pin);
   const node = doc.getIn(["release", "pin"], true);
-  if (import_yaml19.isScalar(node)) {
+  if (import_yaml20.isScalar(node)) {
     node.comment = ` ${now}: rolled by switchroom rollout`;
   }
   return String(doc);
 }
 function deleteReleasePinInConfig(yamlText) {
-  const doc = import_yaml19.parseDocument(yamlText);
+  const doc = import_yaml20.parseDocument(yamlText);
   if (!doc.hasIn(["release", "pin"]))
     return yamlText;
   doc.deleteIn(["release", "pin"]);
   const rel = doc.getIn(["release"]);
-  if (import_yaml19.isMap(rel) && rel.items.length === 0 && !releaseBlockIsCommented(doc)) {
+  if (import_yaml20.isMap(rel) && rel.items.length === 0 && !releaseBlockIsCommented(doc)) {
     doc.delete("release");
   }
   return String(doc);
 }
 function releaseBlockIsCommented(doc) {
   const contents = doc.contents;
-  if (!import_yaml19.isMap(contents))
+  if (!import_yaml20.isMap(contents))
     return false;
   for (const item of contents.items) {
-    if (!import_yaml19.isPair(item))
+    if (!import_yaml20.isPair(item))
       continue;
     const key = item.key;
-    if (!import_yaml19.isScalar(key) || key.value !== "release")
+    if (!import_yaml20.isScalar(key) || key.value !== "release")
       continue;
     const nodes = [key, item.value];
     return nodes.some((n) => !!n && typeof n === "object" && (("commentBefore" in n) && !!n.commentBefore || ("comment" in n) && !!n.comment));
@@ -92477,7 +92923,7 @@ init_operator_uid();
 init_atomic();
 
 // src/cli/preflight-mounts.ts
-import { statSync as statSync44 } from "node:fs";
+import { statSync as statSync45 } from "node:fs";
 function parseHostBindSources(composeText) {
   const out = [];
   const FILE_HINT = /\.(ya?ml|db|log|toml|json|token|id)$|\/\.vault-token$|machine-id$|localtime$|vault-auto-unlock$|\/webkite$/;
@@ -92504,7 +92950,7 @@ function parseHostBindSources(composeText) {
   return out;
 }
 function validateBindSources(composeText, deps = {}) {
-  const stat = deps.stat ?? ((p) => statSync44(p));
+  const stat = deps.stat ?? ((p) => statSync45(p));
   const sources = parseHostBindSources(composeText);
   const issues = [];
   const seen = new Set;
@@ -93093,12 +93539,12 @@ function defaultPersistPin(configPath) {
     const after = setReleasePinInConfig(before, pin);
     if (after === before)
       return;
-    writeConfigFileSync(path7, after, statSync45(path7).mode & 511);
+    writeConfigFileSync(path7, after, statSync46(path7).mode & 511);
     try {
       if (typeof process.geteuid === "function" && process.geteuid() === 0) {
         const uid = resolveOperatorUid();
         if (uid !== undefined)
-          chownSync8(path7, uid, uid);
+          chownSync9(path7, uid, uid);
       }
     } catch {}
   };
@@ -93577,7 +94023,7 @@ function defaultStatusProbe(composePath) {
     } catch {}
     if (scriptPath) {
       try {
-        cliBuiltAt = new Date(statSync45(scriptPath).mtimeMs).toISOString();
+        cliBuiltAt = new Date(statSync46(scriptPath).mtimeMs).toISOString();
       } catch {}
       let dir = dirname34(scriptPath);
       for (let i = 0;i < 8; i++) {
@@ -93853,7 +94299,7 @@ function registerUpdateCommand(program3) {
 // src/cli/rollout.ts
 init_helpers();
 import { spawnSync as spawnSync19 } from "node:child_process";
-import { readFileSync as readFileSync77, chownSync as chownSync9, statSync as statSync47 } from "node:fs";
+import { readFileSync as readFileSync77, chownSync as chownSync10, statSync as statSync48 } from "node:fs";
 import { homedir as homedir46 } from "node:os";
 
 // src/cli/rollout-pin-journal.ts
@@ -93863,7 +94309,7 @@ import {
   writeFileSync as writeFileSync32,
   renameSync as renameSync21,
   unlinkSync as unlinkSync15,
-  statSync as statSync46,
+  statSync as statSync47,
   mkdirSync as mkdirSync47
 } from "node:fs";
 import { homedir as homedir45 } from "node:os";
@@ -94020,7 +94466,7 @@ function rollbackPinPersist(configPath, opts = {}) {
     const next = journal.priorPin ? setReleasePinInConfig(current, journal.priorPin) : deleteReleasePinInConfig(current);
     let mode = 384;
     try {
-      mode = statSync46(configPath).mode & 511;
+      mode = statSync47(configPath).mode & 511;
     } catch {}
     if (opts.writeConfig) {
       opts.writeConfig(configPath, next, mode);
@@ -94599,7 +95045,7 @@ function createRolloutDeps(params) {
       if (typeof process.geteuid === "function" && process.geteuid() === 0) {
         const uid = resolveOperatorUid();
         if (uid !== undefined) {
-          chownSync9(path7, uid, uid);
+          chownSync10(path7, uid, uid);
         } else if (hostdCtx) {
           warn("\u26a0\ufe0f  rollout (hostd path): could not resolve operator uid; " + "skipping config chown-back to avoid leaving switchroom.yaml " + "root-owned. Verify ownership host-side if other yaml verbs " + `EACCES.
 `);
@@ -94659,7 +95105,7 @@ function createRolloutDeps(params) {
       if (after === before)
         return false;
       beginPinPersist(configPath, pin);
-      writeConfigPreservingOwnership(configPath, after, statSync47(configPath).mode & 511);
+      writeConfigPreservingOwnership(configPath, after, statSync48(configPath).mode & 511);
       return true;
     },
     commitPin: () => {
@@ -95105,7 +95551,7 @@ init_merge();
 import {
   existsSync as existsSync84,
   readdirSync as readdirSync28,
-  statSync as statSync48,
+  statSync as statSync49,
   unlinkSync as unlinkSync16
 } from "node:fs";
 import { join as join87 } from "node:path";
@@ -95128,7 +95574,7 @@ function collectSessionJsonl(claudeConfigDir) {
       const full = join87(dir, name);
       let st;
       try {
-        st = statSync48(full);
+        st = statSync49(full);
       } catch {
         continue;
       }
@@ -95256,7 +95702,7 @@ import {
   readdirSync as readdirSync29,
   readFileSync as readFileSync79,
   renameSync as renameSync22,
-  statSync as statSync49,
+  statSync as statSync50,
   unlinkSync as unlinkSync17,
   writeFileSync as writeFileSync33,
   writeSync as writeSync9
@@ -95459,7 +95905,7 @@ function sweepOrphanTmpFiles(stateDir) {
       continue;
     const tmpPath = join88(stateDir, entry);
     try {
-      const stat = statSync49(tmpPath);
+      const stat = statSync50(tmpPath);
       if (stat.mtimeMs < cutoff) {
         unlinkSync17(tmpPath);
       }
@@ -95767,7 +96213,7 @@ import {
 } from "node:fs";
 import { dirname as dirname37, join as join89 } from "node:path";
 import { homedir as homedir47 } from "node:os";
-import { execFileSync as execFileSync24 } from "node:child_process";
+import { execFileSync as execFileSync25 } from "node:child_process";
 
 class PythonEnvError extends Error {
   stderr;
@@ -95814,7 +96260,7 @@ function ensurePythonEnv(opts) {
   }
   mkdirSync49(dirname37(venvDir), { recursive: true });
   try {
-    execFileSync24(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
+    execFileSync25(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
     const e = err;
     throw new PythonEnvError(`Failed to create venv for skill "${skillName}" with ${hostPython}: ${e.message}`, e.stderr?.toString());
@@ -95826,7 +96272,7 @@ function ensurePythonEnv(opts) {
     delete childEnv.PIP_TARGET;
     delete childEnv.PIP_PREFIX;
     delete childEnv.PYTHONUSERBASE;
-    execFileSync24(pipBin, ["install", "--disable-pip-version-check", "-r", requirementsPath], { stdio: "pipe", env: childEnv });
+    execFileSync25(pipBin, ["install", "--disable-pip-version-check", "-r", requirementsPath], { stdio: "pipe", env: childEnv });
   } catch (err) {
     const e = err;
     throw new PythonEnvError(`Failed to install requirements for skill "${skillName}": ${e.message}`, e.stderr?.toString());
@@ -95855,7 +96301,7 @@ import {
 } from "node:fs";
 import { dirname as dirname38, join as join90 } from "node:path";
 import { homedir as homedir48 } from "node:os";
-import { execFileSync as execFileSync25 } from "node:child_process";
+import { execFileSync as execFileSync26 } from "node:child_process";
 
 class NodeEnvError extends Error {
   stderr;
@@ -95939,10 +96385,10 @@ function ensureNodeEnv(opts) {
   try {
     if (installer === "bun") {
       const args = copiedLockfile ? ["install", "--frozen-lockfile"] : ["install"];
-      execFileSync25("bun", args, { cwd: envDir, stdio: "pipe" });
+      execFileSync26("bun", args, { cwd: envDir, stdio: "pipe" });
     } else {
       const args = copiedLockfile ? ["ci"] : ["install"];
-      execFileSync25("npm", args, { cwd: envDir, stdio: "pipe" });
+      execFileSync26("npm", args, { cwd: envDir, stdio: "pipe" });
     }
   } catch (err) {
     const e = err;
@@ -97024,7 +97470,7 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync91, readFileSync as readFileSync83, readdirSync as readdirSync30, statSync as statSync50 } from "node:fs";
+import { existsSync as existsSync91, readFileSync as readFileSync83, readdirSync as readdirSync30, statSync as statSync51 } from "node:fs";
 import { resolve as resolve53, join as join93 } from "node:path";
 import { createHash as createHash20 } from "node:crypto";
 init_merge();
@@ -97063,7 +97509,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
       const transcriptPath = join93(projectPath, "transcript.jsonl");
       if (!existsSync91(transcriptPath))
         continue;
-      const stat3 = statSync50(transcriptPath);
+      const stat3 = statSync51(transcriptPath);
       if (!latest || stat3.mtimeMs > latest.mtime) {
         latest = { path: transcriptPath, mtime: stat3.mtimeMs };
       }
@@ -97298,7 +97744,7 @@ function registerDebugCommand(program3) {
 init_source();
 
 // src/worktree/claim.ts
-import { execFileSync as execFileSync26 } from "node:child_process";
+import { execFileSync as execFileSync27 } from "node:child_process";
 import { closeSync as closeSync17, mkdirSync as mkdirSync52, openSync as openSync17, existsSync as existsSync93, unlinkSync as unlinkSync19 } from "node:fs";
 import { join as join95, resolve as resolve55 } from "node:path";
 import { homedir as homedir51 } from "node:os";
@@ -97467,7 +97913,7 @@ async function claimWorktree(input, codeRepos) {
     releaseLock();
   }
   try {
-    execFileSync26("git", ["worktree", "add", "-b", branch, worktreePath], {
+    execFileSync27("git", ["worktree", "add", "-b", branch, worktreePath], {
       cwd: repoPath,
       stdio: "pipe"
     });
@@ -97480,7 +97926,7 @@ async function claimWorktree(input, codeRepos) {
 }
 
 // src/worktree/release.ts
-import { execFileSync as execFileSync27 } from "node:child_process";
+import { execFileSync as execFileSync28 } from "node:child_process";
 import { existsSync as existsSync94 } from "node:fs";
 function releaseWorktree(input) {
   const { id } = input;
@@ -97491,7 +97937,7 @@ function releaseWorktree(input) {
   let gitSuccess = true;
   if (existsSync94(record2.path)) {
     try {
-      execFileSync27("git", ["worktree", "remove", "--force", record2.path], {
+      execFileSync28("git", ["worktree", "remove", "--force", record2.path], {
         cwd: record2.repo,
         stdio: "pipe"
       });
@@ -97527,7 +97973,7 @@ function listWorktrees() {
 }
 
 // src/worktree/reaper.ts
-import { execFileSync as execFileSync28 } from "node:child_process";
+import { execFileSync as execFileSync29 } from "node:child_process";
 import { existsSync as existsSync95 } from "node:fs";
 var STALE_THRESHOLD_MS = 10 * 60 * 1000;
 function reapSkipReasonText(action) {
@@ -97545,7 +97991,7 @@ function reapSkipReasonText(action) {
 function probePathInUse(path10) {
   let probeRan = false;
   try {
-    execFileSync28("fuser", [path10], { stdio: "pipe" });
+    execFileSync29("fuser", [path10], { stdio: "pipe" });
     return "in-use";
   } catch (err) {
     if (err.code !== "ENOENT") {
@@ -97553,7 +97999,7 @@ function probePathInUse(path10) {
     }
   }
   try {
-    const out = execFileSync28("lsof", ["-t", path10], {
+    const out = execFileSync29("lsof", ["-t", path10], {
       stdio: ["ignore", "pipe", "ignore"]
     }).toString().trim();
     probeRan = true;
@@ -97568,7 +98014,7 @@ function probePathInUse(path10) {
 }
 function hasUncommittedChanges(_repoPath, worktreePath) {
   try {
-    const out = execFileSync28("git", ["-C", worktreePath, "status", "--porcelain"], { stdio: "pipe" }).toString();
+    const out = execFileSync29("git", ["-C", worktreePath, "status", "--porcelain"], { stdio: "pipe" }).toString();
     return out.trim().length > 0;
   } catch {
     return true;
@@ -97576,7 +98022,7 @@ function hasUncommittedChanges(_repoPath, worktreePath) {
 }
 function defaultRemoveWorktree(repoPath, worktreePath) {
   try {
-    execFileSync28("git", ["worktree", "remove", "--force", worktreePath], {
+    execFileSync29("git", ["worktree", "remove", "--force", worktreePath], {
       cwd: repoPath,
       stdio: "pipe"
     });
@@ -97668,12 +98114,12 @@ function runReaper(nowMs, deps = {}) {
 }
 
 // src/worktree/gc.ts
-import { execFileSync as execFileSync29 } from "node:child_process";
+import { execFileSync as execFileSync30 } from "node:child_process";
 import {
   existsSync as existsSync96,
   readFileSync as readFileSync85,
   readdirSync as readdirSync32,
-  statSync as statSync51,
+  statSync as statSync52,
   renameSync as renameSync24,
   mkdirSync as mkdirSync53,
   rmSync as rmSync17
@@ -97761,7 +98207,7 @@ function isEphemeralPath(path10) {
   }
   return false;
 }
-var defaultExec3 = (file, args, cwd) => execFileSync29(file, args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).toString();
+var defaultExec3 = (file, args, cwd) => execFileSync30(file, args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).toString();
 function defaultPrSignal(repo, branch, exec) {
   try {
     const out = exec("gh", [
@@ -97800,7 +98246,7 @@ function planGc(roots, deps = {}) {
   const exists = deps.existsSync ?? existsSync96;
   const readDir = deps.readDir ?? ((p) => readdirSync32(p));
   const readFile4 = deps.readFile ?? ((p) => readFileSync85(p, "utf8"));
-  const stat3 = deps.stat ?? ((p) => statSync51(p));
+  const stat3 = deps.stat ?? ((p) => statSync52(p));
   const exec = deps.exec ?? defaultExec3;
   const prSignal = deps.prSignal ?? ((repo, branch) => defaultPrSignal(repo, branch, exec));
   const stamp = deps.dateStamp ?? "undated";
@@ -97994,7 +98440,7 @@ function listTrashEntries(nowMs, deps = {}) {
       const p = join96(stampDir, name);
       let mtimeMs = nowMs;
       try {
-        mtimeMs = statSync51(p).mtimeMs;
+        mtimeMs = statSync52(p).mtimeMs;
       } catch {}
       out.push({ path: p, ageDays: (nowMs - mtimeMs) / 86400000 });
     }
@@ -99269,6 +99715,54 @@ function redactToolCallParams(params) {
   }
   return { ...called, arguments: redactToolArguments(called.arguments) };
 }
+var DEFAULT_RECALL_MAX_TOKENS = 1024;
+var DEFAULT_REFLECT_MAX_TOKENS = 1024;
+function resolveClampMaxTokens(envVal, fallback) {
+  if (envVal === undefined || envVal === "")
+    return fallback;
+  const n = Number.parseInt(envVal, 10);
+  return Number.isFinite(n) && n > 0 ? n : fallback;
+}
+function acceptedArgs(name) {
+  const spec = FALLBACK_TOOL_TABLE[name];
+  if (!spec)
+    return;
+  return new Set([...spec[0], ...spec[1]]);
+}
+function unknownArgMessage(name, unknownKeys, allowed) {
+  const keys = unknownKeys.map((k) => `'${k}'`).join(", ");
+  const plural = unknownKeys.length > 1 ? "parameters" : "parameter";
+  const base = `${name} has no ${keys} ${plural}. ` + `Accepted arguments: ${[...allowed].sort().join(", ")}.`;
+  if (name === "recall" || name === "reflect") {
+    return `${base} There is no 'limit'/'top_k' \u2014 cap results with max_tokens ` + `(a token budget over each fact's text, in relevance order) or ` + `budget: low|mid|high.`;
+  }
+  return base;
+}
+function guardAndClampToolCall(params, env2) {
+  const called = params;
+  const name = called?.name;
+  if (typeof name !== "string")
+    return { ok: true, params };
+  const allowed = acceptedArgs(name);
+  if (!allowed)
+    return { ok: true, params };
+  const rawArgs = called?.arguments;
+  const args = rawArgs && typeof rawArgs === "object" && !Array.isArray(rawArgs) ? rawArgs : {};
+  const unknownKeys = Object.keys(args).filter((k) => !allowed.has(k));
+  if (unknownKeys.length > 0) {
+    return { ok: false, text: unknownArgMessage(name, unknownKeys, allowed) };
+  }
+  if (name === "recall" || name === "reflect") {
+    const injected = { ...args };
+    if (injected.max_tokens === undefined) {
+      injected.max_tokens = name === "recall" ? resolveClampMaxTokens(env2.HINDSIGHT_SHIM_RECALL_MAX_TOKENS, DEFAULT_RECALL_MAX_TOKENS) : resolveClampMaxTokens(env2.HINDSIGHT_SHIM_REFLECT_MAX_TOKENS, DEFAULT_REFLECT_MAX_TOKENS);
+    }
+    if (injected.budget === undefined)
+      injected.budget = "low";
+    return { ok: true, params: { ...called, arguments: injected } };
+  }
+  return { ok: true, params };
+}
 function buildFallbackToolsList() {
   const tools = Object.entries(FALLBACK_TOOL_TABLE).map(([name, [required, props]]) => ({
     name,
@@ -99595,7 +100089,11 @@ class HindsightShim {
     if (called?.name && SYNTHESIZED_TOOL_NAMES.includes(called.name)) {
       return this.synthesizedCall(called.name, called.arguments);
     }
-    const forwarded = redactToolCallParams(params);
+    const guarded = guardAndClampToolCall(params, process.env);
+    if (!guarded.ok) {
+      return { content: [{ type: "text", text: guarded.text }], isError: true };
+    }
+    const forwarded = redactToolCallParams(guarded.params);
     try {
       const res = await this.upstream.request("tools/call", forwarded, this.opts.toolsCallTimeoutMs ?? TOOLS_CALL_TIMEOUT_MS);
       this.notifyIfRecovered();
@@ -99698,7 +100196,7 @@ function registerHindsightMcpShimCommand(program3) {
 
 // src/cli/deliver-file.ts
 init_client2();
-import { readFileSync as readFileSync87, statSync as statSync52 } from "node:fs";
+import { readFileSync as readFileSync87, statSync as statSync53 } from "node:fs";
 import { basename as basename13 } from "node:path";
 
 // src/delivery/onedrive.ts
@@ -100037,7 +100535,7 @@ async function defaultResolveProvider() {
 }
 async function runDeliverFile(localPath, deps = {}) {
   const agentName = safeAgentName(deps.agentName ?? process.env.SWITCHROOM_AGENT_NAME);
-  const sizeOf = deps.fileSize ?? ((p) => statSync52(p).size);
+  const sizeOf = deps.fileSize ?? ((p) => statSync53(p).size);
   const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync87(p)));
   const resolveProvider = deps.resolveProvider ?? defaultResolveProvider;
   let size;
@@ -100733,7 +101231,7 @@ init_agent_config();
 
 // src/cli/agent-config-write.ts
 init_agent_config();
-var import_yaml21 = __toESM(require_dist(), 1);
+var import_yaml22 = __toESM(require_dist(), 1);
 
 // src/config/overlay-writer.ts
 init_paths();
@@ -100746,7 +101244,7 @@ import {
   readdirSync as readdirSync35,
   readFileSync as readFileSync89,
   renameSync as renameSync26,
-  statSync as statSync53,
+  statSync as statSync54,
   unlinkSync as unlinkSync20,
   writeSync as writeSync10
 } from "node:fs";
@@ -100790,7 +101288,7 @@ function withAgentLock(paths, fn) {
       if (e.code !== "EEXIST")
         throw err;
       try {
-        const age = Date.now() - statSync53(paths.lockPath).mtimeMs;
+        const age = Date.now() - statSync54(paths.lockPath).mtimeMs;
         if (age > 30000) {
           unlinkSync20(paths.lockPath);
           continue;
@@ -100934,7 +101432,7 @@ init_overlay_schema();
 init_schema();
 init_cron_unit_name();
 init_lifecycle();
-var import_yaml20 = __toESM(require_dist(), 1);
+var import_yaml21 = __toESM(require_dist(), 1);
 
 // src/scheduler/cron-gap.ts
 function expandMinuteTerm(term) {
@@ -101024,7 +101522,7 @@ function violatesMinInterval(cron) {
 function dryRunReconcile(input) {
   let parsed;
   try {
-    parsed = import_yaml20.parse(input.yamlText);
+    parsed = import_yaml21.parse(input.yamlText);
   } catch (err) {
     return {
       ok: false,
@@ -101223,7 +101721,7 @@ function denyPendingScheduleEntry(opts) {
 
 // src/cli/agent-config-write.ts
 import { existsSync as existsSync101, readFileSync as readFileSync91 } from "node:fs";
-import { execFileSync as execFileSync30 } from "node:child_process";
+import { execFileSync as execFileSync31 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
 var TIER_WEIGHT = { poll: 0, action: 0, cheap: 1, main: 5 };
@@ -101372,7 +101870,7 @@ function parseOverlayCronAndName(e) {
   if (headerMatch)
     name = headerMatch[1];
   try {
-    const doc = import_yaml21.parse(e.raw);
+    const doc = import_yaml22.parse(e.raw);
     const first = doc?.schedule?.[0];
     if (first) {
       if (typeof first.cron === "string")
@@ -101408,7 +101906,7 @@ function scheduleAdd(opts) {
     ]
   };
   const yamlText = (() => {
-    const body = import_yaml21.stringify(doc);
+    const body = import_yaml22.stringify(doc);
     const header = opts.name ? `# name: ${opts.name}
 ` : "";
     return header + body;
@@ -101544,7 +102042,7 @@ function scheduleAddOrStage(opts) {
     ]
   };
   const yamlText = (opts.name ? `# name: ${opts.name}
-` : "") + import_yaml21.stringify(doc);
+` : "") + import_yaml22.stringify(doc);
   const summary = (() => {
     const parts = [`cron=${opts.cronExpr}`];
     if (opts.secrets?.length)
@@ -101594,7 +102092,7 @@ function scheduleRemove(opts) {
         break;
       }
       try {
-        const parsed = import_yaml21.parse(e.raw);
+        const parsed = import_yaml22.parse(e.raw);
         if (parsed && parsed.name === opts.name) {
           match = e;
           break;
@@ -101819,7 +102317,7 @@ function registerAgentConfigWriteCommands(program3) {
       blob = existsSync101(opts.jsonl) ? readFileSync91(opts.jsonl, "utf-8") : "";
     } else {
       try {
-        blob = execFileSync30("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
+        blob = execFileSync31("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
           encoding: "utf-8",
           stdio: ["ignore", "pipe", "ignore"]
         });
@@ -101847,11 +102345,11 @@ function registerAgentConfigWriteCommands(program3) {
 }
 
 // src/cli/agent-config-skill-write.ts
-var import_yaml22 = __toESM(require_dist(), 1);
+var import_yaml23 = __toESM(require_dist(), 1);
 import { existsSync as existsSync102 } from "node:fs";
 init_reconcile_default_skills();
 init_agent_config();
-var import_yaml23 = __toESM(require_dist(), 1);
+var import_yaml24 = __toESM(require_dist(), 1);
 import { join as join103 } from "node:path";
 var MAX_SKILLS_PER_AGENT = 20;
 var V1_ALLOWED_SOURCE_PREFIX = "bundled:";
@@ -101901,7 +102399,7 @@ function countCurrentSkills(agent, opts) {
   let total = 0;
   for (const e of entries) {
     try {
-      const doc = import_yaml23.parse(e.raw);
+      const doc = import_yaml24.parse(e.raw);
       total += (doc?.skills ?? []).length;
     } catch {}
   }
@@ -101931,7 +102429,7 @@ function skillInstall(opts) {
   if (!existsSync102(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
-  const yamlText = import_yaml22.stringify({ skills: [skillName] });
+  const yamlText = import_yaml23.stringify({ skills: [skillName] });
   let path10;
   try {
     path10 = writeSkillsOverlayEntry(agent, slug, yamlText, { root: opts.root });
@@ -102091,6 +102589,7 @@ function registerAgentConfigSkillWriteCommands(program3) {
 
 // src/cli/skill.ts
 import {
+  chmodSync as chmodSync17,
   closeSync as closeSync20,
   existsSync as existsSync103,
   lstatSync as lstatSync12,
@@ -102102,7 +102601,7 @@ import {
   realpathSync as realpathSync7,
   renameSync as renameSync28,
   rmSync as rmSync19,
-  statSync as statSync54,
+  statSync as statSync55,
   writeFileSync as writeFileSync43
 } from "node:fs";
 import { tmpdir as tmpdir6, homedir as homedir54 } from "node:os";
@@ -102110,7 +102609,7 @@ import { dirname as dirname41, join as join104, relative as relative4, resolve a
 import { spawnSync as spawnSync21 } from "node:child_process";
 
 // src/cli/skill-common.ts
-var import_yaml24 = __toESM(require_dist(), 1);
+var import_yaml25 = __toESM(require_dist(), 1);
 var MAX_SKILLS_PER_AGENT2 = 20;
 var MAX_FILE_BYTES = 256 * 1024;
 var MAX_SKILL_BYTES = 2 * 1024 * 1024;
@@ -102215,7 +102714,7 @@ function validateSkillMd(content, expectedName) {
   }
   let parsed;
   try {
-    parsed = import_yaml24.parse(fmText);
+    parsed = import_yaml25.parse(fmText);
   } catch (e) {
     return authorErr("E_SKILL_INVALID_FRONTMATTER", `frontmatter is not valid YAML: ${e.message}`);
   }
@@ -102373,7 +102872,7 @@ function isTarballPath(p) {
 }
 function loadFromDir(dir) {
   const abs = realpathSync7(dir);
-  if (!statSync54(abs).isDirectory()) {
+  if (!statSync55(abs).isDirectory()) {
     fail4(`--from path is not a directory: ${dir}`);
   }
   const files = {};
@@ -102573,6 +103072,7 @@ function writePayload(poolDir, name, files) {
     fail4(`refusing to overwrite symlink at ${target}; investigate manually`);
   }
   const staging = mkdtempSync5(join104(poolDir, `.skill-apply-stage-${name}-`));
+  chmodSync17(staging, 493);
   let oldRename = null;
   try {
     for (const [path10, content] of Object.entries(files)) {
@@ -102633,7 +103133,7 @@ function registerSkillCommand(program3) {
       if (!existsSync103(fromPath)) {
         fail4(`--from path does not exist: ${opts.from}`);
       }
-      const st = statSync54(fromPath);
+      const st = statSync55(fromPath);
       if (st.isDirectory()) {
         files = loadFromDir(fromPath);
       } else if (isTarballPath(fromPath)) {
@@ -102685,6 +103185,7 @@ function sumBytes(files) {
 // src/cli/skill-personal.ts
 init_esm();
 import {
+  chmodSync as chmodSync18,
   closeSync as closeSync21,
   existsSync as existsSync104,
   lstatSync as lstatSync13,
@@ -102695,7 +103196,7 @@ import {
   readdirSync as readdirSync38,
   renameSync as renameSync29,
   rmSync as rmSync20,
-  statSync as statSync55,
+  statSync as statSync56,
   utimesSync,
   writeFileSync as writeFileSync44
 } from "node:fs";
@@ -102779,6 +103280,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
       }
     };
     walk2(liveSkillDir, staging);
+    chmodSync18(staging, 493);
     if (existsSync104(dest)) {
       const prior = join105(configSkillsRoot, `.${name}-prior-${Date.now()}`);
       renameSync29(dest, prior);
@@ -102851,7 +103353,7 @@ function readStdinSync2() {
 }
 function loadFromDir2(dir) {
   const abs = resolve59(dir);
-  if (!statSync55(abs).isDirectory()) {
+  if (!statSync56(abs).isDirectory()) {
     fail5(`--from path is not a directory: ${dir}`);
   }
   const files = {};
@@ -102937,7 +103439,7 @@ function sweepTrash(agentsRoot, agent) {
       continue;
     const entPath = join105(trash, ent.name);
     try {
-      const st = statSync55(entPath);
+      const st = statSync56(entPath);
       if (now - st.mtimeMs > TRASH_TTL_MS) {
         rmSync20(entPath, { recursive: true, force: true });
       }
@@ -102957,6 +103459,7 @@ function writePersonalSkill(targetDir, files) {
   }
   mkdirSync61(dirname42(targetDir), { recursive: true, mode: 493 });
   const staging = mkdtempSync6(join105(dirname42(targetDir), `.skill-personal-stage-`));
+  chmodSync18(staging, 493);
   let oldRename = null;
   try {
     for (const [path10, content] of Object.entries(files)) {
@@ -103062,7 +103565,7 @@ function loadFiles(opts) {
   if (!existsSync104(p)) {
     fail5(`--from path does not exist: ${opts.from}`);
   }
-  const st = statSync55(p);
+  const st = statSync56(p);
   if (st.isDirectory()) {
     return loadFromDir2(p);
   }
@@ -103283,7 +103786,7 @@ function listPersonalAction(opts) {
           if (e.isFile()) {
             fileCount += 1;
             try {
-              totalBytes += statSync55(join105(sub, e.name)).size;
+              totalBytes += statSync56(join105(sub, e.name)).size;
             } catch {}
           } else if (e.isDirectory()) {
             walk2(join105(sub, e.name));
@@ -103400,8 +103903,8 @@ function registerSelfImproveProposeSkillCommand(program3) {
 // src/cli/skill-search.ts
 init_esm();
 init_helpers();
-var import_yaml25 = __toESM(require_dist(), 1);
-import { existsSync as existsSync105, readdirSync as readdirSync39, readFileSync as readFileSync95, statSync as statSync56 } from "node:fs";
+var import_yaml26 = __toESM(require_dist(), 1);
+import { existsSync as existsSync105, readdirSync as readdirSync39, readFileSync as readFileSync95, statSync as statSync57 } from "node:fs";
 import { homedir as homedir57 } from "node:os";
 import { join as join107, resolve as resolve60 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
@@ -103440,7 +103943,7 @@ function readSkillFrontmatter(skillDir) {
   const fmText = rest.slice(0, endIdx);
   let parsed;
   try {
-    parsed = import_yaml25.parse(fmText);
+    parsed = import_yaml26.parse(fmText);
   } catch (e) {
     return { error: `yaml parse: ${e.message}` };
   }
@@ -103452,7 +103955,7 @@ function readSkillFrontmatter(skillDir) {
 function statSkillMd(skillDir) {
   const mdPath = join107(skillDir, "SKILL.md");
   try {
-    const st = statSync56(mdPath);
+    const st = statSync57(mdPath);
     return { size: st.size, mtime: st.mtime.toISOString() };
   } catch {
     return null;
@@ -103476,7 +103979,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
       continue;
     const dirPath = join107(skillsDir, ent);
     try {
-      if (!statSync56(dirPath).isDirectory())
+      if (!statSync57(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -103516,7 +104019,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
       continue;
     const dirPath = join107(sharedRoot, ent);
     try {
-      if (!statSync56(dirPath).isDirectory())
+      if (!statSync57(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -103552,7 +104055,7 @@ function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
       continue;
     const dirPath = join107(bundledRoot, ent);
     try {
-      if (!statSync56(dirPath).isDirectory())
+      if (!statSync57(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -103700,7 +104203,7 @@ import {
   mkdirSync as mkdirSync62,
   readdirSync as readdirSync40,
   writeFileSync as writeFileSync45,
-  statSync as statSync57,
+  statSync as statSync58,
   lstatSync as lstatSync14,
   realpathSync as realpathSync8,
   copyFileSync as copyFileSync14
@@ -103812,6 +104315,10 @@ services:
       # HAProxy writes its runtime state/pidfile under /run; read_only rootfs
       # otherwise makes it crash-loop on boot.
       - /run
+      # The tecnativa/docker-socket-proxy entrypoint renders /tmp/haproxy.cfg
+      # on boot; with a read_only rootfs and no /tmp tmpfs it can't write the
+      # generated config and crash-loops before HAProxy ever starts.
+      - /tmp
     cap_drop:
       - ALL
     cap_add:
@@ -104213,7 +104720,7 @@ function doStatus() {
           continue;
         const sockPath = join108(dir, name, "sock");
         if (existsSync107(sockPath)) {
-          const st = statSync57(sockPath);
+          const st = statSync58(sockPath);
           if ((st.mode & 61440) === 49152) {
             entries.push(`${name} \u2192 ${sockPath}`);
           }
@@ -104304,7 +104811,7 @@ init_source();
 init_helpers();
 init_operator_uid();
 init_compose();
-import { chownSync as chownSync10, existsSync as existsSync108, mkdirSync as mkdirSync63, writeFileSync as writeFileSync46, copyFileSync as copyFileSync15 } from "node:fs";
+import { chownSync as chownSync11, existsSync as existsSync108, mkdirSync as mkdirSync63, writeFileSync as writeFileSync46, copyFileSync as copyFileSync15 } from "node:fs";
 import { homedir as homedir59 } from "node:os";
 import { join as join109 } from "node:path";
 import { spawnSync as spawnSync26 } from "node:child_process";
@@ -104484,10 +104991,10 @@ async function doInstall2(opts, program3) {
   writeFileSync46(composePath, yaml, "utf8");
   try {
     if (typeof process.geteuid === "function" && process.geteuid() === 0) {
-      chownSync10(dir, operatorUid, operatorUid);
-      chownSync10(composePath, operatorUid, operatorUid);
+      chownSync11(dir, operatorUid, operatorUid);
+      chownSync11(composePath, operatorUid, operatorUid);
       if (bak)
-        chownSync10(bak, operatorUid, operatorUid);
+        chownSync11(bak, operatorUid, operatorUid);
     }
   } catch {}
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
@@ -105104,7 +105611,7 @@ init_install_cron();
 
 // src/hindsight-watch/probe.ts
 import { spawnSync as spawnSync28 } from "node:child_process";
-import { readFileSync as readFileSync100, readdirSync as readdirSync44, statSync as statSync59 } from "node:fs";
+import { readFileSync as readFileSync100, readdirSync as readdirSync44, statSync as statSync60 } from "node:fs";
 import { homedir as homedir62 } from "node:os";
 import { resolve as resolve62 } from "node:path";
 
@@ -105232,7 +105739,7 @@ function readLlmSignals(series) {
 }
 
 // src/hindsight-watch/recall-log.ts
-import { closeSync as closeSync22, existsSync as existsSync112, openSync as openSync22, readdirSync as readdirSync43, readSync as readSync6, statSync as statSync58 } from "node:fs";
+import { closeSync as closeSync22, existsSync as existsSync112, openSync as openSync22, readdirSync as readdirSync43, readSync as readSync6, statSync as statSync59 } from "node:fs";
 import { join as join111 } from "node:path";
 var RECALL_WINDOW_ROWS = 200;
 var RECALL_MAX_TAIL_BYTES = 1024 * 1024;
@@ -105247,7 +105754,7 @@ function readRecallLogTail2(path10, windowRows = RECALL_WINDOW_ROWS) {
   let truncatedHead = false;
   let fd;
   try {
-    const size = statSync58(path10).size;
+    const size = statSync59(path10).size;
     const start = Math.max(0, size - RECALL_MAX_TAIL_BYTES);
     truncatedHead = start > 0;
     const length = size - start;
@@ -105479,7 +105986,7 @@ function readDropCount(hindsightDir) {
   const path10 = resolve62(hindsightDir, "pending-drops.json");
   let parsed;
   try {
-    if (statSync59(path10).size > DROPS_LEDGER_MAX_BYTES)
+    if (statSync60(path10).size > DROPS_LEDGER_MAX_BYTES)
       return 0;
     parsed = JSON.parse(readFileSync100(path10, "utf8"));
   } catch {
@@ -105504,6 +106011,7 @@ function probeSpool(agentsDir = resolveAgentsDir2()) {
   let dead = 0;
   let evicted = 0;
   let drops = 0;
+  let duplicates = 0;
   let agents = 0;
   for (const name of names) {
     const hindsightDir = resolve62(agentsDir, name, "home", ".hindsight");
@@ -105532,9 +106040,15 @@ function probeSpool(agentsDir = resolveAgentsDir2()) {
           dead++;
       }
     } catch {}
+    try {
+      for (const f of readdirSync44(resolve62(hindsightDir, "pending-duplicate"))) {
+        if (f.endsWith(".json"))
+          duplicates++;
+      }
+    } catch {}
     drops += readDropCount(hindsightDir);
   }
-  return { pending, dead, evicted, drops, agents };
+  return { pending, dead, evicted, drops, duplicates, agents };
 }
 var PSQL_BOOTSTRAP_SH = `
 set -e
@@ -105711,6 +106225,7 @@ async function probeOnce(opts = {}) {
       dead: spool.dead,
       evicted: spool.evicted,
       drops: spool.drops,
+      duplicates: spool.duplicates,
       restartCount: container.restartCount,
       startedAt: container.startedAt,
       health: container.health,
@@ -105817,7 +106332,9 @@ function evaluateRetainLoss(ring) {
     ["dropped retain", last.drops - prev.drops]
   ];
   const risen = channels.filter(([, added]) => added > 0);
-  const totals = `totals: ${last.dead} dead, ${last.evicted} evicted, ${last.drops} dropped`;
+  const dup = last.duplicates;
+  const dupNote = typeof dup === "number" && dup > 0 ? `, ${dup} collapsed-duplicate (not loss)` : "";
+  const totals = `totals: ${last.dead} dead, ${last.evicted} evicted, ${last.drops} dropped${dupNote}`;
   if (risen.length > 0) {
     return {
       signal,
@@ -105829,7 +106346,8 @@ function evaluateRetainLoss(ring) {
         dropsAdded: last.drops - prev.drops,
         dead: last.dead,
         evicted: last.evicted,
-        drops: last.drops
+        drops: last.drops,
+        duplicates: dup ?? 0
       }
     };
   }
@@ -105843,7 +106361,8 @@ function evaluateRetainLoss(ring) {
       dropsAdded: 0,
       dead: last.dead,
       evicted: last.evicted,
-      drops: last.drops
+      drops: last.drops,
+      duplicates: dup ?? 0
     }
   };
 }
@@ -106033,7 +106552,7 @@ function evaluateConsolidationQueueAge(ring) {
     return {
       signal,
       state: "ok",
-      detail: "consolidation queue empty",
+      detail: "no pending/processing operations (failures are not counted here \u2014 " + "see consolidation-failure-streak)",
       measured: { pending: 0, oldestAgeS: 0 }
     };
   }
@@ -106513,8 +107032,27 @@ function runInstallCron(cronUser) {
 `) + "  This path needs root; re-run under sudo with `--cron-user <operator>`.\n");
     return 1;
   }
+  let logStatus;
+  try {
+    const logRes = ensureLogFile({ user });
+    logStatus = logRes.status === "created" ? `created ${logRes.path} (owned by ${user})` : `${logRes.path} already present`;
+  } catch (e) {
+    process.stderr.write(source_default.red(`hindsight-watch: could not provision the log file: ${e.message}
+`) + `  The cron redirects into ${CRON_LOG_PATH} and would die at ` + `the redirection every tick.
+  This path needs root; re-run under sudo with ` + "`--cron-user <operator>`.\n");
+    return 1;
+  }
+  let rotateStatus;
+  try {
+    const rotateRes = installLogrotate({ user });
+    rotateStatus = rotateRes.status === "installed" ? `installed ${rotateRes.path}` : `${rotateRes.path} already up to date`;
+  } catch (e) {
+    rotateStatus = source_default.yellow(`logrotate drop-in NOT written (${e.message}) \u2014 log growth is unbounded`);
+  }
   const verb = res.status === "installed" ? "installed" : "already up to date";
   process.stdout.write(`${source_default.green("\u2713")} hindsight-watch cron ${verb} at ${res.path} ` + `(${CRON_SCHEDULE}, as ${user})
+` + `  log: ${logStatus}
+` + `  logrotate: ${rotateStatus}
 ` + `  Verify with: switchroom doctor  |  switchroom hindsight-watch --dry-run
 `);
   return 0;