switchroom 0.19.43 → 0.19.44

package/dist/vault/broker/server.js

@@ -4030,7 +4030,7 @@ var init_observation_scopes = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AntiConfabulationDirectiveSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   init_observation_scopes();
@@ -4147,6 +4147,7 @@ var init_schema = __esm(() => {
   }).optional();
   ObservationScopesSchema = exports_external.enum(OBSERVATION_SCOPES).optional().describe("Operator PIN for the per-row observation scope, overriding the " + 'default `curated` strategy (see docs/configuration.md). "shared" ' + "forces Hindsight's consolidation to write EVERY observation into ONE " + "global untagged scope — what several agents pooling one bank want so " + "their observations merge rather than sitting in parallel silos. " + '"combined" is the pin form of opting out (restores the pre-#4035 ' + "engine default). UNSET does NOT mean 'nothing on the wire': the " + "`curated` strategy still computes a scope per retain. Applies to " + "every retain path (Stop hook, " + "sidechain, boot reconcile, queue drain, backfill, session-handoff " + "mirror) and is carried on the queued payload, so a retain that fails " + "now and drains later still lands in this scope. Accepted values: " + `${OBSERVATION_SCOPES.join(", ")}. ` + "Cascade: override (per-agent wins over default).");
   ObservationScopeStrategySchema = exports_external.enum(OBSERVATION_SCOPE_STRATEGIES).optional().describe("Per-retain strategy that decides how the observation scope is " + 'computed when no `observation_scopes` pin is set. "curated" ' + "(the default since #4035) strips volatile per-session provenance " + "tags from each retain's consolidation scope — keeping the stable " + "semantic ones on the source fact — so an agent's observations dedup " + "and merge across sessions instead of pocketing one-per-session. " + '"shared" sends every retain to the one global untagged scope. ' + '"combined" / "off" opt OUT: no per-row scope goes on the wire, ' + "restoring the pre-feature engine default (byte-identical to an " + "unconfigured client). OMITTED BY DEFAULT: unset leaves the plugin's " + "own default (`curated`) in force. A manual `observation_scopes` pin " + "wins over this strategy. Accepted values: " + `${OBSERVATION_SCOPE_STRATEGIES.join(", ")}. ` + "Cascade: override (per-agent wins over default).");
+  AntiConfabulationDirectiveSchema = exports_external.union([exports_external.boolean(), exports_external.string().min(1)]).optional().describe("The seeded anti-confabulation directive: reflect has no relevance " + "floor (`min_scores` is a /recall-only parameter), so a bank holding " + "nothing relevant still yields a confident answer, and a question that " + "presupposes a decision reliably produces one. Directives ARE applied " + "during reflect, so this is the lever. Unset or true (the default) " + "seeds and maintains switchroom's own text; false disables seeding and " + "leaves any existing directive untouched; a string is operator-authored " + "text that wins outright. Switchroom only ever upgrades directive text " + "byte-equal to a default it shipped, so editing the directive in the " + "bank is also a permanent override. " + "Cascade: override (per-agent wins over default).");
   AgentMemorySchema = exports_external.object({
     collection: exports_external.string().describe("Hindsight collection name for this agent"),
     auto_recall: exports_external.boolean().default(true).describe("Auto-search memories before each response"),
@@ -4182,6 +4183,7 @@ var init_schema = __esm(() => {
       empathy: exports_external.number().int().min(1).max(5).optional().describe("How much the bank weights emotional/relational context (1-5; engine default 3).")
     }).optional().describe("Personality traits (1-5 each) steering how this bank frames recall, " + "reflect, and observation synthesis — a coach leans empathy-high, a " + "lawyer/analyst leans skepticism/literalism-high. Maps to the engine's " + "flat `disposition_skepticism`/`_literalism`/`_empathy` fields. " + "Cascade: per-key merge (an agent overrides individual traits and " + "inherits the rest, matching `recall`)."),
     directive_capture_nudge: exports_external.boolean().optional().describe("Deterministic directive-capture nudge (issue #2848 Stage B). When " + "on (switchroom default true — Stage A measured a ~55% miss rate on " + "durable corrections), the auto-recall hook regex-detects correction " + '/ standing-rule-shaped inbound ("always/never …", "from now on …", ' + `"stop doing …", a stated preference, "that's wrong, it's …") and ` + "appends a terse advisory to the turn's context telling the model to " + "persist the rule with mcp__hindsight__create_directive if it IS " + "durable. Detection is pure regex — the model does the judgment " + "in-session and calls create_directive itself (no model callsite, no " + "silent hook-side write). Set false to disable per-agent. " + "Cascade: override (per-agent wins over default)."),
+    anti_confabulation_directive: AntiConfabulationDirectiveSchema,
     observation_scopes: ObservationScopesSchema,
     observation_scope_strategy: ObservationScopeStrategySchema,
     recall: exports_external.object({
@@ -4452,7 +4454,7 @@ var init_schema = __esm(() => {
       reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent → uses global."),
       consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent → global.")
     }).optional().describe("LLM knob for the hindsight container. The flat `provider`/`model` set " + "the global default (backward-compatible); optional `retain`/`reflect`/" + "`consolidation` blocks override individual ops. All fields optional; " + "unset fields fall back to the hard-coded defaults."),
-    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_RESERVED_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, GRAPH_SEED_MIN_SIMILARITY, " + "LLM_SUPPORTS_MAX_ITEMS, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS — switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY — a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP — the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS — only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS — the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_RESERVED_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS — the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool; and " + "the pre-0.8.6 name HINDSIGHT_API_WORKER_<TYPE>_MAX_SLOTS is still " + "accepted for every operation type and normalised to " + "..._RESERVED_SLOTS on the way in, because setting both names for " + "one type is a hard boot failure in the engine and switchroom " + "therefore emits only the canonical name; and " + "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY — the cosine-similarity floor a " + "candidate must reach to be returned by the semantic retrieval arm at " + "all (0..1); unset means upstream's own 0.3, and where it should sit " + "depends on the bank's embedding model and phrasing diversity, so " + "switchroom ships no opinion; and " + "HINDSIGHT_MCP_RECALL_BUDGET_MODE — the rollback knob for switchroom's " + "mcp-recall-token-budget image patch; `legacy` restores upstream's " + "exact pre-patch recall returns, anything else or unset is the " + "honest-envelope mode; and " + "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT — upstream's own per-op reflect " + "temperature knob, made live by switchroom's reflect-temperature image " + "patch; a float, or `none` to omit the kwarg (provider default, " + "upstream's accidental pre-patch behaviour); unset means the image's " + "baked default 0.1), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS — a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED — a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
+    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_RESERVED_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, GRAPH_SEED_MIN_SIMILARITY, " + "LLM_SUPPORTS_MAX_ITEMS, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS — switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY — a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP — the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS — only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS — the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_RESERVED_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS — the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool; and " + "the pre-0.8.6 name HINDSIGHT_API_WORKER_<TYPE>_MAX_SLOTS is still " + "accepted for every operation type and normalised to " + "..._RESERVED_SLOTS on the way in, because setting both names for " + "one type is a hard boot failure in the engine and switchroom " + "therefore emits only the canonical name; and " + "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY — the cosine-similarity floor a " + "candidate must reach to be returned by the semantic retrieval arm at " + "all (0..1); unset means upstream's own 0.3, and where it should sit " + "depends on the bank's embedding model and phrasing diversity, so " + "switchroom ships no opinion; and " + "HINDSIGHT_MCP_RECALL_BUDGET_MODE — the rollback knob for switchroom's " + "mcp-recall-token-budget image patch; `legacy` restores upstream's " + "exact pre-patch recall returns, anything else or unset is the " + "honest-envelope mode; and " + "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT — upstream's own per-op reflect " + "temperature knob, made live by switchroom's reflect-temperature image " + "patch; a float, or `none` to omit the kwarg (provider default, " + "upstream's accidental pre-patch behaviour); unset means the image's " + "baked default 0.1; and " + "HINDSIGHT_API_CONSOLIDATION_RECALL_MAX_CONCURRENT — the background " + "half of switchroom's recall-admission split (#3660): of the " + "RECALL_MAX_CONCURRENT admission slots, at most this many may be held " + "by background consolidation recalls at once, so foreground per-turn " + "recall always keeps the remainder; must be >= 1 and strictly less " + "than RECALL_MAX_CONCURRENT or the engine refuses to boot; unset " + "means the image's derived default min(2, RECALL_MAX_CONCURRENT - 1); " + "1 biases hard toward the interactive lane while a consolidation " + "backlog drains), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS — a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED — a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
   });
   MicrosoftWorkspaceConfigSchema = exports_external.object({
     microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL — omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
@@ -4586,6 +4588,7 @@ var init_schema = __esm(() => {
       isolation: exports_external.enum(["default", "strict"]).optional(),
       profile: exports_external.string().optional(),
       directive_capture_nudge: exports_external.boolean().optional(),
+      anti_confabulation_directive: AntiConfabulationDirectiveSchema,
       observation_scopes: ObservationScopesSchema,
       observation_scope_strategy: ObservationScopeStrategySchema,
       recall: exports_external.object({
@@ -5075,7 +5078,7 @@ function parseSocketIdentity(socketPath, spec) {
 
 // src/vault/broker/peercred.ts
 import { execFileSync } from "node:child_process";
-import { readFileSync, readlinkSync, fstatSync } from "node:fs";
+import { readFileSync as readFileSync2, readlinkSync, fstatSync } from "node:fs";
 function socketPathToIdentity(socketPath) {
   return parseSocketIdentity(socketPath, {
     patterns: [SOCKET_PATH_AGENT_RE, SOCKET_PATH_AGENT_SUBDIR_RE],
@@ -5156,7 +5159,7 @@ function findClientPidByServerInode(rows, socketPath, serverInode) {
 }
 function readUid(pid) {
   try {
-    const status = readFileSync(`/proc/${pid}/status`, "utf8");
+    const status = readFileSync2(`/proc/${pid}/status`, "utf8");
     const m = status.match(/^Uid:\s+(\d+)/m);
     if (!m)
       return null;
@@ -5174,7 +5177,7 @@ function readExe(pid) {
 }
 function readSystemdUnit(pid) {
   try {
-    const content = readFileSync(`/proc/${pid}/cgroup`, "utf8");
+    const content = readFileSync2(`/proc/${pid}/cgroup`, "utf8");
     const lines = content.split(`
 `);
     for (const line of lines) {
@@ -12691,8 +12694,8 @@ var require_dist = __commonJS((exports) => {
 });
 
 // src/config/paths.ts
-import { existsSync } from "node:fs";
-import { resolve } from "node:path";
+import { existsSync as existsSync2 } from "node:fs";
+import { resolve as resolve2 } from "node:path";
 function home() {
   return process.env.HOME ?? "/root";
 }
@@ -12707,12 +12710,12 @@ function resolveDualPath(pathStr) {
   const h = home();
   if (pathStr.startsWith("~/")) {
     const rest = pathStr.slice(2);
-    const absolute = resolve(h, rest);
+    const absolute = resolve2(h, rest);
     if (rest.startsWith(`${DEFAULT_STATE_DIR}/`)) {
       const frag = rest.slice(DEFAULT_STATE_DIR.length + 1);
-      if (!existsSync(absolute)) {
-        const legacy = resolve(h, LEGACY_STATE_DIR, frag);
-        if (existsSync(legacy)) {
+      if (!existsSync2(absolute)) {
+        const legacy = resolve2(h, LEGACY_STATE_DIR, frag);
+        if (existsSync2(legacy)) {
           warnLegacyStateOnce(legacy);
           return legacy;
         }
@@ -12720,7 +12723,7 @@ function resolveDualPath(pathStr) {
     }
     return absolute;
   }
-  return resolve(pathStr);
+  return resolve2(pathStr);
 }
 var DEFAULT_STATE_DIR = ".switchroom", LEGACY_STATE_DIR = ".clerk", _legacyStateWarned = false;
 var init_paths = () => {};
@@ -12737,8 +12740,8 @@ var init_overlay_schema = __esm(() => {
 });
 
 // src/config/overlay-loader.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync, statSync } from "node:fs";
-import { basename, resolve as resolve2 } from "node:path";
+import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync, statSync } from "node:fs";
+import { basename, resolve as resolve3 } from "node:path";
 function deriveOverlayTitle(raw, fileName) {
   const titleFromComment = raw.match(/^#[^\S\n]*name:[^\S\n]*(\S.*?)[^\S\n]*$/m)?.[1];
   if (titleFromComment)
@@ -12750,10 +12753,10 @@ function deriveOverlayTitle(raw, fileName) {
 }
 function overlayDirFor(agentName, subdir) {
   const base = resolveDualPath(`~/.switchroom/agents/${agentName}/${subdir}`);
-  return resolve2(base);
+  return resolve3(base);
 }
 function listYamlFiles(dir) {
-  if (!existsSync2(dir))
+  if (!existsSync3(dir))
     return [];
   let entries;
   try {
@@ -12765,7 +12768,7 @@ function listYamlFiles(dir) {
   for (const name of entries) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = resolve2(dir, name);
+    const full = resolve3(dir, name);
     try {
       if (statSync(full).isFile())
         out.push(full);
@@ -12801,7 +12804,7 @@ function applyAgentOverlays(config) {
         const merged = [...agentCfg.schedule ?? []];
         for (const file of files) {
           try {
-            const raw = readFileSync2(file, "utf-8");
+            const raw = readFileSync3(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             const title = deriveOverlayTitle(raw, basename(file));
@@ -12842,7 +12845,7 @@ function applyAgentOverlays(config) {
         const seen = new Set(merged);
         for (const file of skillFiles) {
           try {
-            const raw = readFileSync2(file, "utf-8");
+            const raw = readFileSync3(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             for (const skillName of doc.skills ?? []) {
@@ -12917,9 +12920,9 @@ __export(exports_loader, {
   findConfigFile: () => findConfigFile,
   ConfigError: () => ConfigError
 });
-import { readFileSync as readFileSync3, existsSync as existsSync3 } from "node:fs";
+import { readFileSync as readFileSync4, existsSync as existsSync4 } from "node:fs";
 import { homedir } from "node:os";
-import { resolve as resolve3 } from "node:path";
+import { resolve as resolve4 } from "node:path";
 function formatZodErrors(error) {
   return error.errors.map((e) => {
     const path = e.path.join(".");
@@ -12967,24 +12970,24 @@ function coerceLegacyGoogleWorkspaceKeys(parsed, filePath) {
 function findConfigFile(startDir) {
   const envPath = process.env.SWITCHROOM_CONFIG;
   const home2 = homedir();
-  const userDir = resolve3(home2, ".switchroom");
+  const userDir = resolve4(home2, ".switchroom");
   const searchPaths = [
-    envPath ? resolve3(envPath) : null,
-    startDir ? resolve3(startDir, "switchroom.yaml") : null,
-    startDir ? resolve3(startDir, "switchroom.yml") : null,
-    startDir ? resolve3(startDir, "clerk.yaml") : null,
-    startDir ? resolve3(startDir, "clerk.yml") : null,
-    resolve3(process.cwd(), "switchroom.yaml"),
-    resolve3(process.cwd(), "switchroom.yml"),
-    resolve3(process.cwd(), "clerk.yaml"),
-    resolve3(process.cwd(), "clerk.yml"),
-    resolve3(userDir, "switchroom.yaml"),
-    resolve3(userDir, "switchroom.yml"),
-    resolve3(userDir, "clerk.yaml"),
-    resolve3(userDir, "clerk.yml")
+    envPath ? resolve4(envPath) : null,
+    startDir ? resolve4(startDir, "switchroom.yaml") : null,
+    startDir ? resolve4(startDir, "switchroom.yml") : null,
+    startDir ? resolve4(startDir, "clerk.yaml") : null,
+    startDir ? resolve4(startDir, "clerk.yml") : null,
+    resolve4(process.cwd(), "switchroom.yaml"),
+    resolve4(process.cwd(), "switchroom.yml"),
+    resolve4(process.cwd(), "clerk.yaml"),
+    resolve4(process.cwd(), "clerk.yml"),
+    resolve4(userDir, "switchroom.yaml"),
+    resolve4(userDir, "switchroom.yml"),
+    resolve4(userDir, "clerk.yaml"),
+    resolve4(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path of searchPaths) {
-    if (existsSync3(path)) {
+    if (existsSync4(path)) {
       return path;
     }
   }
@@ -12992,12 +12995,12 @@ function findConfigFile(startDir) {
 }
 function loadConfig(configPath) {
   const filePath = configPath ?? findConfigFile();
-  if (!existsSync3(filePath)) {
+  if (!existsSync4(filePath)) {
     throw new ConfigError(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync3(filePath, "utf-8");
+    raw = readFileSync4(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -18674,13 +18677,13 @@ var require_lib = __commonJS((exports, module) => {
 
 // src/vault/flock.ts
 import {
-  existsSync as existsSync5,
+  existsSync as existsSync6,
   openSync as openSync2,
   closeSync as closeSync2,
   writeSync as writeSync2,
   fsyncSync as fsyncSync2,
   unlinkSync,
-  readFileSync as readFileSync5,
+  readFileSync as readFileSync6,
   readdirSync as readdirSync3,
   rmdirSync,
   statSync as statSync3,
@@ -18691,7 +18694,7 @@ function lockPathFor(vaultPath) {
 }
 function readLockHolder(lockPath) {
   try {
-    const raw = readFileSync5(lockPath, "utf8");
+    const raw = readFileSync6(lockPath, "utf8");
     const lines = raw.split(`
 `);
     const pid = Number.parseInt(lines[0] ?? "", 10);
@@ -18707,7 +18710,7 @@ function readLockHolder(lockPath) {
 }
 function pidIsLive(pid) {
   if (process.platform === "linux") {
-    return existsSync5(`/proc/${pid}`);
+    return existsSync6(`/proc/${pid}`);
   }
   try {
     process.kill(pid, 0);
@@ -18743,8 +18746,8 @@ function pidStartTimeMs(pid) {
   if (process.platform !== "linux")
     return null;
   try {
-    const statLine = readFileSync5(`/proc/${pid}/stat`, "utf8");
-    const procStat = readFileSync5("/proc/stat", "utf8");
+    const statLine = readFileSync6(`/proc/${pid}/stat`, "utf8");
+    const procStat = readFileSync6("/proc/stat", "utf8");
     return parseProcStartTimeMs(statLine, procStat, Date.now());
   } catch {
     return null;
@@ -18767,7 +18770,7 @@ function lockFileMtimeIsOlderThan(lockPath, budgetMs) {
 }
 function clearStaleSentinelDir(lockPath) {
   try {
-    if (!existsSync5(lockPath))
+    if (!existsSync6(lockPath))
       return true;
     const s = statSync3(lockPath);
     if (!s.isDirectory())
@@ -18889,9 +18892,9 @@ var init_flock = __esm(() => {
 // src/vault/vault.ts
 import { randomBytes, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
 import {
-  readFileSync as readFileSync6,
+  readFileSync as readFileSync7,
   writeSync as writeSync3,
-  existsSync as existsSync6,
+  existsSync as existsSync7,
   renameSync as renameSync2,
   mkdirSync as mkdirSync2,
   unlinkSync as unlinkSync2,
@@ -18899,18 +18902,18 @@ import {
   openSync as openSync3,
   closeSync as closeSync3,
   lstatSync,
-  realpathSync as realpathSync2
+  realpathSync as realpathSync3
 } from "node:fs";
-import { dirname, basename as basename2, resolve as resolve5 } from "node:path";
+import { dirname as dirname2, basename as basename2, resolve as resolve6 } from "node:path";
 function atomicWriteFileSync(path, data, mode) {
   let effectivePath = path;
   try {
-    if (existsSync6(path) && lstatSync(path).isSymbolicLink()) {
-      effectivePath = realpathSync2(path);
+    if (existsSync7(path) && lstatSync(path).isSymbolicLink()) {
+      effectivePath = realpathSync3(path);
     }
   } catch {}
-  const dir = dirname(resolve5(effectivePath));
-  const tmp = resolve5(dir, `.${basename2(effectivePath)}.${process.pid}.${Date.now()}.tmp`);
+  const dir = dirname2(resolve6(effectivePath));
+  const tmp = resolve6(dir, `.${basename2(effectivePath)}.${process.pid}.${Date.now()}.tmp`);
   try {
     const fd = openSync3(tmp, "wx", mode);
     try {
@@ -18930,7 +18933,7 @@ function atomicWriteFileSync(path, data, mode) {
     } catch {}
   } catch (err) {
     try {
-      if (existsSync6(tmp))
+      if (existsSync7(tmp))
         unlinkSync2(tmp);
     } catch {}
     throw err;
@@ -18978,12 +18981,12 @@ function normalizeSecrets(raw) {
   return out;
 }
 function openVault(passphrase, vaultPath) {
-  if (!existsSync6(vaultPath)) {
+  if (!existsSync7(vaultPath)) {
     throw new VaultError(`Vault file not found: ${vaultPath}`);
   }
   let vaultFile;
   try {
-    vaultFile = JSON.parse(readFileSync6(vaultPath, "utf8"));
+    vaultFile = JSON.parse(readFileSync7(vaultPath, "utf8"));
   } catch {
     throw new VaultError(`Failed to read vault file: ${vaultPath}`);
   }
@@ -19005,7 +19008,7 @@ function openVault(passphrase, vaultPath) {
   return normalizeSecrets(vaultData.secrets ?? {});
 }
 function saveVault(passphrase, vaultPath, secrets) {
-  if (!existsSync6(vaultPath)) {
+  if (!existsSync7(vaultPath)) {
     throw new VaultError(`Vault file not found: ${vaultPath}`);
   }
   let releaseLock = null;
@@ -19020,7 +19023,7 @@ function saveVault(passphrase, vaultPath, secrets) {
   try {
     let vaultFile;
     try {
-      vaultFile = JSON.parse(readFileSync6(vaultPath, "utf8"));
+      vaultFile = JSON.parse(readFileSync7(vaultPath, "utf8"));
     } catch {
       throw new VaultError(`Failed to read vault file: ${vaultPath}`);
     }
@@ -19456,15 +19459,72 @@ var init_resolver = __esm(() => {
 
 // src/vault/broker/server.ts
 import * as net from "node:net";
-import { mkdirSync as mkdirSync8, chmodSync as chmodSync5, chownSync as chownSync2, existsSync as existsSync12, readFileSync as readFileSync12, readdirSync as readdirSync5, statSync as statSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync8, chmodSync as chmodSync5, chownSync as chownSync2, existsSync as existsSync13, readFileSync as readFileSync13, readdirSync as readdirSync5, statSync as statSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync5 } from "node:fs";
 
 // src/agents/compose.ts
 init_schema();
 
 // src/agents/scaffold.ts
-import { dirname as dirname2, isAbsolute, join as join4, relative, resolve as resolve6 } from "node:path";
 init_atomic();
 
+// src/util/shipped-assets.ts
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+var FHS_SHARE_ROOTS = [
+  "/usr/local/share/switchroom",
+  "/usr/share/switchroom"
+];
+var PROFILES_ASSET = {
+  asset: "profiles",
+  envVar: "SWITCHROOM_PROFILES_ROOT"
+};
+function orderedCandidates(spec, probe) {
+  const out = [];
+  const push = (path, source) => {
+    if (!out.some((c) => c.path === path))
+      out.push({ path, source });
+  };
+  if (probe.bundleDir) {
+    push(resolve(probe.bundleDir, "../..", spec.asset), "npm");
+    push(resolve(probe.bundleDir, spec.asset), "image");
+  }
+  if (probe.execPath) {
+    push(resolve(dirname(probe.execPath), "../share/switchroom", spec.asset), "sea-sibling");
+  }
+  for (const root of FHS_SHARE_ROOTS) {
+    push(resolve(root, spec.asset), "fhs");
+  }
+  return out;
+}
+function resolveShippedAsset(spec, probe) {
+  const env = probe.env ?? process.env;
+  const override = env[spec.envVar]?.trim();
+  if (override) {
+    const path = canonicalise(resolve(override), probe);
+    return { path, candidates: [path], source: "env" };
+  }
+  const exists = probe.exists ?? existsSync;
+  const candidates = orderedCandidates(spec, probe);
+  for (const c of candidates) {
+    if (exists(c.path)) {
+      return {
+        path: canonicalise(c.path, probe),
+        candidates: candidates.map((x) => x.path),
+        source: c.source
+      };
+    }
+  }
+  return { path: null, candidates: candidates.map((x) => x.path), source: "none" };
+}
+function canonicalise(path, probe) {
+  const realpath = probe.realpath ?? realpathSync;
+  try {
+    return realpath(path);
+  } catch {
+    return path;
+  }
+}
+
 // src/agents/agent-uid.ts
 init_peercred();
 import { createHash } from "node:crypto";
@@ -19695,37 +19755,29 @@ var AUDIT_ROOT = join(homedir2(), ".switchroom", "audit");
 
 // src/agents/profiles.ts
 var import_handlebars = __toESM(require_lib(), 1);
-import { readFileSync as readFileSync4, writeFileSync, existsSync as existsSync4, readdirSync as readdirSync2, statSync as statSync2, copyFileSync, mkdirSync, realpathSync } from "node:fs";
-import { resolve as resolve4, join as join2, sep as pathSep } from "node:path";
-function resolveProfilesRoot() {
-  const envOverride = process.env.SWITCHROOM_PROFILES_ROOT?.trim();
-  if (envOverride) {
-    return resolve4(envOverride);
-  }
-  const candidates = [
-    resolve4(import.meta.dirname, "../../profiles"),
-    resolve4(import.meta.dirname, "profiles")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync4(candidate)) {
-      return candidate;
-    }
-  }
-  return candidates[0];
+import { readFileSync as readFileSync5, writeFileSync, existsSync as existsSync5, readdirSync as readdirSync2, statSync as statSync2, copyFileSync, mkdirSync, realpathSync as realpathSync2 } from "node:fs";
+import { resolve as resolve5, join as join2, sep as pathSep } from "node:path";
+function resolveProfilesRootDetailed() {
+  return resolveShippedAsset(PROFILES_ASSET, {
+    bundleDir: import.meta.dirname,
+    execPath: process.execPath
+  });
 }
-var PROFILES_ROOT = resolveProfilesRoot();
+var PROFILES_RESOLUTION = resolveProfilesRootDetailed();
+var PROFILES_ROOT = PROFILES_RESOLUTION.path ?? PROFILES_RESOLUTION.candidates[0];
+var PROFILES_ROOT_SEARCH = PROFILES_RESOLUTION.candidates;
 import_handlebars.default.registerHelper("json", (value) => {
   return new import_handlebars.default.SafeString(JSON.stringify(value, null, 2));
 });
 import_handlebars.default.registerHelper("isNumber", (value) => {
   return typeof value === "number" && Number.isFinite(value);
 });
-var SHARED_FRAGMENTS_DIR = resolve4(PROFILES_ROOT, "_shared");
+var SHARED_FRAGMENTS_DIR = resolve5(PROFILES_ROOT, "_shared");
 var SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline", "dev-protocol"];
 for (const name of SHARED_FRAGMENTS) {
   const fragPath = join2(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
-  if (existsSync4(fragPath)) {
-    import_handlebars.default.registerPartial(name, readFileSync4(fragPath, "utf-8"));
+  if (existsSync5(fragPath)) {
+    import_handlebars.default.registerPartial(name, readFileSync5(fragPath, "utf-8"));
   }
 }
 
@@ -19928,7 +19980,8 @@ var HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS = new Set([
   "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY",
   "HINDSIGHT_MCP_RECALL_BUDGET_MODE",
   "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT",
-  "HINDSIGHT_API_RETAIN_WALL_TIMEOUT"
+  "HINDSIGHT_API_RETAIN_WALL_TIMEOUT",
+  "HINDSIGHT_API_CONSOLIDATION_RECALL_MAX_CONCURRENT"
 ]);
 var HINDSIGHT_WORKER_SLOT_TYPES = [
   "consolidation",
@@ -20023,6 +20076,15 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
 ` + `  system's self-reports are not memories.
 ` + `- Restatements of the user's current request or the task in progress.
+` + `- The assistant's own answers, summaries, recaps, or reflect output. Before
+` + `  extracting, ask: does anything in this transcript support this claim OTHER
+` + `  than the assistant having asserted it? If not, drop it — a model's own
+` + `  synthesis re-extracted as a fact is how a guess becomes permanent.
+` + `  Concretely, never produce a fact whose only support is the assistant
+` + `  stating a date, a version, an attribution, a total, or a decision that the
+` + `  user never confirmed and no tool output shows. An unverified claim recalls
+` + `  later as though it had been established, which is worse than not
+` + `  remembering it at all.
 ` + `- Volatile state written as a timeless assertion. A version, count, size,
 ` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
 ` + `  claim is true only at the instant it was said. Concretely, never produce a
@@ -20178,6 +20240,64 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
 ` + `nothing durable remains, return an empty facts list.
+`,
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE — what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION — a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision — drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING — a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME — a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP — who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable — record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it — it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work — including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) — retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state — the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
 `
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
@@ -20255,6 +20375,22 @@ var PROFILE_MEMORY_DEFAULTS = {
 var warnedMissingPool = new Set;
 var warnedMissingDefault = new Set;
 
+// src/memory/hindsight-retain-provenance.ts
+var RETAIN_PROVENANCE_TAG = "source:transcript";
+var RETAIN_TAGS_DEFAULT = Object.freeze([
+  "{session_id}",
+  RETAIN_PROVENANCE_TAG
+]);
+
+// src/memory/hindsight-seed-directives.ts
+var ANTI_CONFABULATION_DIRECTIVE = `When the retrieved memories do not support an answer, say so instead of composing one.
+` + `
+` + `- If nothing retrieved scores meaningfully above zero, or what came back is off-topic, the honest answer is that the bank does not know. Say that plainly, and say what would settle it.
+` + `- Never assert a date, a version, a number, an attribution, a decision, or an outcome that no retrieved memory states. A question that presupposes something is not evidence for it: asked when a decision was made, when the bank records no such decision, answer that none is recorded — do not supply one.
+` + `- Keep what the bank RECORDED separate from what you INFER. State inferences as inferences, and say which memory a recorded fact came from.
+` + `- Treat a memory that was extracted from a conversation transcript as an unverified claim, not an established fact — it may be an assistant's own earlier guess. If it is the only support for an answer, say that it is.
+` + "- Partial knowledge with its gaps named is more useful than a fluent answer that fills them in.";
+
 // src/telegram/state.ts
 init_paths();
 
@@ -20292,7 +20428,6 @@ var RECALL_PASSTHROUGH_DEFAULTS = Object.freeze({
 init_paths();
 
 // src/agents/scaffold.ts
-var REPO_ROOT = resolve6(import.meta.dirname, "../..");
 var CLAUDE_MD_YOURS_PLACEHOLDER = "This space is yours. Add per-agent rules, exceptions, or context the " + "Switchroom template doesn't capture. Everything above the marker line is " + "regenerated on every apply; this section is preserved.";
 var pendingBankOps = new Set;
 var SWITCHROOM_OWNED_SETTINGS_KEYS = new Set([
@@ -20378,8 +20513,8 @@ function migrateLegacyGrantsDbLocation(newDbPath = getGrantsDbPath(), deps) {
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/vault/broker/write-token-file.ts
-import { chownSync, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join6 } from "node:path";
+import { chownSync, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join5 } from "node:path";
 class TokenFileWriteError extends Error {
   tokenPath;
   constructor(tokenPath, message, options) {
@@ -20396,13 +20531,13 @@ function writeAgentTokenFile(args, deps = {}) {
   const writeFile = deps.writeFile ?? ((p, d) => {
     writeFileSync2(p, d, { mode: 384 });
   });
-  const readFile = deps.readFile ?? ((p) => readFileSync7(p, "utf8"));
+  const readFile = deps.readFile ?? ((p) => readFileSync8(p, "utf8"));
   const chown = deps.chown ?? ((p, uid, gid) => {
     chownSync(p, uid, gid);
   });
   const agentUid = deps.agentUid ?? allocateAgentUid;
-  const tokenDir = join6(agentsDir, agent);
-  const tokenPath = join6(tokenDir, ".vault-token");
+  const tokenDir = join5(agentsDir, agent);
+  const tokenPath = join5(tokenDir, ".vault-token");
   try {
     mkdir(tokenDir);
   } catch (err) {
@@ -20455,26 +20590,26 @@ init_vault();
 import {
   copyFileSync as copyFileSync2,
   chmodSync as chmodSync2,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   fsyncSync as fsyncSync4,
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync5,
   openSync as openSync4,
   closeSync as closeSync4,
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync9,
   renameSync as renameSync4,
   statSync as statSync4,
   symlinkSync,
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { basename as basename3, dirname as dirname4, join as join7 } from "node:path";
+import { basename as basename3, dirname as dirname4, join as join6 } from "node:path";
 function vaultLayoutPaths(home2) {
-  const switchroomRoot = join7(home2, ".switchroom");
+  const switchroomRoot = join6(home2, ".switchroom");
   return {
-    oldPath: join7(switchroomRoot, "vault.enc"),
-    newPath: join7(switchroomRoot, "vault", "vault.enc"),
-    parent: join7(switchroomRoot, "vault"),
+    oldPath: join6(switchroomRoot, "vault.enc"),
+    newPath: join6(switchroomRoot, "vault", "vault.enc"),
+    parent: join6(switchroomRoot, "vault"),
     switchroomRoot
   };
 }
@@ -20483,11 +20618,11 @@ function inspectVaultLayout(home2) {
 }
 function runMigration(home2, opts) {
   const { oldPath, newPath, parent, switchroomRoot } = vaultLayoutPaths(home2);
-  const lockTarget = existsSync8(newPath) ? newPath : existsSync8(oldPath) ? oldPath : null;
+  const lockTarget = existsSync9(newPath) ? newPath : existsSync9(oldPath) ? oldPath : null;
   const release = !opts.dryRun && lockTarget !== null ? acquireVaultLock(lockTarget) : null;
   try {
     const oldStat = lstatSyncOrNull(oldPath);
-    const newExists = existsSync8(newPath);
+    const newExists = existsSync9(newPath);
     if (oldStat === null && !newExists) {
       return { kind: "no-vault" };
     }
@@ -20551,12 +20686,12 @@ function lstatSyncOrNull(path2) {
   }
 }
 function sha256File(path2) {
-  const data = readFileSync8(path2);
+  const data = readFileSync9(path2);
   return createHash2("sha256").update(data).digest("hex");
 }
 function atomicReplaceWithSymlink(target, linkTarget) {
-  const tmp = join7(dirname4(target), `.${basename3(target)}.symlink-tmp`);
-  if (existsSync8(tmp)) {
+  const tmp = join6(dirname4(target), `.${basename3(target)}.symlink-tmp`);
+  if (existsSync9(tmp)) {
     try {
       unlinkSync3(tmp);
     } catch {}
@@ -20589,11 +20724,11 @@ import { createHmac, randomBytes as randomBytes2, createCipheriv as createCipher
 import {
   chmodSync as chmodSync3,
   closeSync as closeSync5,
-  existsSync as existsSync9,
+  existsSync as existsSync10,
   fsyncSync as fsyncSync5,
   mkdirSync as mkdirSync6,
   openSync as openSync5,
-  readFileSync as readFileSync9,
+  readFileSync as readFileSync10,
   renameSync as renameSync5,
   unlinkSync as unlinkSync4,
   writeSync as writeSync4
@@ -20632,7 +20767,7 @@ function readMachineId() {
   }
   for (const path2 of [MACHINE_ID_PRIMARY, MACHINE_ID_FALLBACK]) {
     try {
-      const id = readFileSync9(path2, "utf8").trim();
+      const id = readFileSync10(path2, "utf8").trim();
       if (id.length > 0)
         return id;
     } catch {}
@@ -20669,12 +20804,12 @@ function decryptAutoUnlock(blob, machineId) {
   }
 }
 function readAutoUnlockFile(filePath) {
-  if (!existsSync9(filePath)) {
+  if (!existsSync10(filePath)) {
     throw new AutoUnlockDecryptError("io");
   }
   let blob;
   try {
-    blob = readFileSync9(filePath);
+    blob = readFileSync10(filePath);
   } catch {
     throw new AutoUnlockDecryptError("io");
   }
@@ -20759,7 +20894,7 @@ function seedChain(path2) {
 // src/vault/broker/test-isolation-guard.ts
 import { mkdtempSync } from "node:fs";
 import { homedir as homedir5, tmpdir } from "node:os";
-import { join as join8, resolve as resolve8, sep } from "node:path";
+import { join as join7, resolve as resolve8, sep } from "node:path";
 function isTestRuntime() {
   return process.env.VITEST !== undefined;
 }
@@ -20780,7 +20915,7 @@ function safeVaultPath(requestedPath) {
     return requestedPath;
   if (!isUnderRealSwitchroomHome(requestedPath))
     return requestedPath;
-  const redirected = join8(mkdtempSync(join8(tmpdir(), "sw-test-vault-")), "vault.enc");
+  const redirected = join7(mkdtempSync(join7(tmpdir(), "sw-test-vault-")), "vault.enc");
   if (!warnedVault) {
     warnedVault = true;
     process.stderr.write(`[test-isolation guard] vault path redirected away from the ` + `production tree to an isolated tmpdir — a vault/broker test ` + `resolved its vault path inside ~/.switchroom. See CLAUDE.md ` + `"Vault & shared-state test discipline".
@@ -20796,7 +20931,7 @@ function safeAuditLogPath(requestedPath) {
   if (!isUnderRealSwitchroomHome(requestedPath))
     return requestedPath;
   if (!cachedTmpAuditLog) {
-    cachedTmpAuditLog = join8(mkdtempSync(join8(tmpdir(), "sw-test-audit-")), "vault-audit.log");
+    cachedTmpAuditLog = join7(mkdtempSync(join7(tmpdir(), "sw-test-audit-")), "vault-audit.log");
   }
   if (!warnedAudit) {
     warnedAudit = true;
@@ -22943,8 +23078,8 @@ function listGrants(db, agent_slug) {
 }
 
 // src/vault/broker/reap-token-file.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join11 } from "node:path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join10 } from "node:path";
 var REAPABLE_REASONS = new Set(["grant-invalid", "grant-expired"]);
 function reapUnusableGrantToken(args, deps = {}) {
   const { agentsDir, agent, presentedToken, reason } = args;
@@ -22952,9 +23087,9 @@ function reapUnusableGrantToken(args, deps = {}) {
     return "kept:reason-not-reapable";
   if (!agent)
     return "kept:no-agent-identity";
-  const readFile = deps.readFile ?? ((p) => readFileSync11(p, "utf8"));
+  const readFile = deps.readFile ?? ((p) => readFileSync12(p, "utf8"));
   const writeFile = deps.writeFile ?? ((p, d) => writeFileSync4(p, d, { mode: 384 }));
-  const tokenPath = join11(agentsDir, agent, ".vault-token");
+  const tokenPath = join10(agentsDir, agent, ".vault-token");
   let onDisk;
   try {
     onDisk = readFile(tokenPath);
@@ -23539,7 +23674,7 @@ class VaultBroker {
       chmodSync5(parentDir, 448);
     } catch {}
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (existsSync12(p)) {
+      if (existsSync13(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -23575,7 +23710,7 @@ class VaultBroker {
     try {
       if (ready) {
         writeFileSync5(p, "", { mode: 384 });
-      } else if (existsSync12(p)) {
+      } else if (existsSync13(p)) {
         unlinkSync6(p);
       }
     } catch {}
@@ -23608,7 +23743,7 @@ class VaultBroker {
       try {
         entry.server.close();
       } catch {}
-      if (existsSync12(sockPath)) {
+      if (existsSync13(sockPath)) {
         try {
           unlinkSync6(sockPath);
         } catch {}
@@ -23616,7 +23751,7 @@ class VaultBroker {
     }
     this.agentServers.clear();
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (p && existsSync12(p)) {
+      if (p && existsSync13(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -23624,7 +23759,7 @@ class VaultBroker {
     }
     try {
       const pidPath = resolvePath(PID_FILE_DEFAULT);
-      if (existsSync12(pidPath))
+      if (existsSync13(pidPath))
         unlinkSync6(pidPath);
     } catch {}
   }
@@ -23650,7 +23785,7 @@ class VaultBroker {
     return new Promise((resolveP, rejectP) => {
       if (abs.endsWith("/sock")) {
         const dir = abs.slice(0, -"/sock".length);
-        if (existsSync12(dir)) {
+        if (existsSync13(dir)) {
           try {
             chownSync2(dir, 0, 0);
           } catch {}
@@ -23659,7 +23794,7 @@ class VaultBroker {
           } catch {}
         }
       }
-      if (existsSync12(abs)) {
+      if (existsSync13(abs)) {
         try {
           unlinkSync6(abs);
         } catch (err) {
@@ -23691,7 +23826,7 @@ class VaultBroker {
         } catch {}
         this.agentServers.set(abs, { server, agentName });
         const unlockAbs = unlockSocketFor(abs);
-        if (existsSync12(unlockAbs)) {
+        if (existsSync13(unlockAbs)) {
           try {
             unlinkSync6(unlockAbs);
           } catch {}
@@ -23746,7 +23881,7 @@ class VaultBroker {
     if (!Number.isFinite(uid) || uid <= 0)
       return;
     try {
-      if (existsSync12(this.vaultPath))
+      if (existsSync13(this.vaultPath))
         chownSync2(this.vaultPath, uid, uid);
     } catch {}
   }
@@ -23759,7 +23894,7 @@ class VaultBroker {
     const unlockAbs = unlockSocketFor(abs);
     if (abs.endsWith("/sock")) {
       const dir = abs.slice(0, -"/sock".length);
-      if (existsSync12(dir)) {
+      if (existsSync13(dir)) {
         try {
           chownSync2(dir, 0, 0);
         } catch {}
@@ -23769,7 +23904,7 @@ class VaultBroker {
       }
     }
     for (const p of [abs, unlockAbs]) {
-      if (existsSync12(p)) {
+      if (existsSync13(p)) {
         try {
           unlinkSync6(p);
         } catch {}
@@ -24784,7 +24919,7 @@ class VaultBroker {
         if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
           const agentsDir = this.config ? resolveAgentsDir(this.config) : path5.join(os3.homedir(), ".switchroom", "agents");
           const tokenPath = path5.join(agentsDir, row.agent_slug, ".vault-token");
-          if (existsSync12(tokenPath)) {
+          if (existsSync13(tokenPath)) {
             try {
               unlinkSync6(tokenPath);
             } catch {}
@@ -25022,7 +25157,7 @@ class VaultBroker {
     const envPath = process.env.SWITCHROOM_VAULT_BROKER_AUTO_UNLOCK_PATH;
     const configuredPath = (envPath && envPath.length > 0 ? envPath : undefined) ?? this.config?.vault?.broker?.autoUnlockCredentialPath ?? DEFAULT_AUTO_UNLOCK_PATH;
     const filePath = resolvePath(configuredPath);
-    if (!existsSync12(filePath))
+    if (!existsSync13(filePath))
       return false;
     try {
       if (statSync7(filePath).size === 0)
@@ -25065,7 +25200,7 @@ class VaultBroker {
     const credPath = `${dir}/vault-passphrase`;
     let passphrase;
     try {
-      passphrase = readFileSync12(credPath, "utf8").replace(/\n+$/, "");
+      passphrase = readFileSync13(credPath, "utf8").replace(/\n+$/, "");
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") {
@@ -25137,7 +25272,7 @@ async function main() {
   const vaultPath = process.env.SWITCHROOM_VAULT_PATH;
   let perAgentTargets = [];
   try {
-    if (existsSync12(perAgentDir)) {
+    if (existsSync13(perAgentDir)) {
       const entries = readdirSync5(perAgentDir, { withFileTypes: true });
       const flat = [];
       const subdirs = [];
@@ -25192,7 +25327,7 @@ async function main() {
     }
     const operatorUidStr = process.env.SWITCHROOM_BROKER_OPERATOR_UID;
     const operatorDir = "/run/switchroom/broker/operator";
-    if (operatorUidStr !== undefined && existsSync12(operatorDir)) {
+    if (operatorUidStr !== undefined && existsSync13(operatorDir)) {
       const operatorUid = parseInt(operatorUidStr, 10);
       if (!Number.isFinite(operatorUid) || operatorUid <= 0) {
         process.stderr.write(`[vault-broker] SWITCHROOM_BROKER_OPERATOR_UID='${operatorUidStr}' is not a positive integer; skipping operator listener