switchroom 0.19.43 → 0.19.44

package/telegram-plugin/dist/gateway/gateway.js

@@ -21547,7 +21547,7 @@ var init_observation_scopes = __esm(() => {
 });
 
 // ../src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AntiConfabulationDirectiveSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   init_observation_scopes();
@@ -21664,6 +21664,7 @@ var init_schema = __esm(() => {
   }).optional();
   ObservationScopesSchema = exports_external.enum(OBSERVATION_SCOPES).optional().describe("Operator PIN for the per-row observation scope, overriding the " + 'default `curated` strategy (see docs/configuration.md). "shared" ' + "forces Hindsight's consolidation to write EVERY observation into ONE " + "global untagged scope \u2014 what several agents pooling one bank want so " + "their observations merge rather than sitting in parallel silos. " + '"combined" is the pin form of opting out (restores the pre-#4035 ' + "engine default). UNSET does NOT mean 'nothing on the wire': the " + "`curated` strategy still computes a scope per retain. Applies to " + "every retain path (Stop hook, " + "sidechain, boot reconcile, queue drain, backfill, session-handoff " + "mirror) and is carried on the queued payload, so a retain that fails " + "now and drains later still lands in this scope. Accepted values: " + `${OBSERVATION_SCOPES.join(", ")}. ` + "Cascade: override (per-agent wins over default).");
   ObservationScopeStrategySchema = exports_external.enum(OBSERVATION_SCOPE_STRATEGIES).optional().describe("Per-retain strategy that decides how the observation scope is " + 'computed when no `observation_scopes` pin is set. "curated" ' + "(the default since #4035) strips volatile per-session provenance " + "tags from each retain's consolidation scope \u2014 keeping the stable " + "semantic ones on the source fact \u2014 so an agent's observations dedup " + "and merge across sessions instead of pocketing one-per-session. " + '"shared" sends every retain to the one global untagged scope. ' + '"combined" / "off" opt OUT: no per-row scope goes on the wire, ' + "restoring the pre-feature engine default (byte-identical to an " + "unconfigured client). OMITTED BY DEFAULT: unset leaves the plugin's " + "own default (`curated`) in force. A manual `observation_scopes` pin " + "wins over this strategy. Accepted values: " + `${OBSERVATION_SCOPE_STRATEGIES.join(", ")}. ` + "Cascade: override (per-agent wins over default).");
+  AntiConfabulationDirectiveSchema = exports_external.union([exports_external.boolean(), exports_external.string().min(1)]).optional().describe("The seeded anti-confabulation directive: reflect has no relevance " + "floor (`min_scores` is a /recall-only parameter), so a bank holding " + "nothing relevant still yields a confident answer, and a question that " + "presupposes a decision reliably produces one. Directives ARE applied " + "during reflect, so this is the lever. Unset or true (the default) " + "seeds and maintains switchroom's own text; false disables seeding and " + "leaves any existing directive untouched; a string is operator-authored " + "text that wins outright. Switchroom only ever upgrades directive text " + "byte-equal to a default it shipped, so editing the directive in the " + "bank is also a permanent override. " + "Cascade: override (per-agent wins over default).");
   AgentMemorySchema = exports_external.object({
     collection: exports_external.string().describe("Hindsight collection name for this agent"),
     auto_recall: exports_external.boolean().default(true).describe("Auto-search memories before each response"),
@@ -21699,6 +21700,7 @@ var init_schema = __esm(() => {
       empathy: exports_external.number().int().min(1).max(5).optional().describe("How much the bank weights emotional/relational context (1-5; engine default 3).")
     }).optional().describe("Personality traits (1-5 each) steering how this bank frames recall, " + "reflect, and observation synthesis \u2014 a coach leans empathy-high, a " + "lawyer/analyst leans skepticism/literalism-high. Maps to the engine's " + "flat `disposition_skepticism`/`_literalism`/`_empathy` fields. " + "Cascade: per-key merge (an agent overrides individual traits and " + "inherits the rest, matching `recall`)."),
     directive_capture_nudge: exports_external.boolean().optional().describe("Deterministic directive-capture nudge (issue #2848 Stage B). When " + "on (switchroom default true \u2014 Stage A measured a ~55% miss rate on " + "durable corrections), the auto-recall hook regex-detects correction " + '/ standing-rule-shaped inbound ("always/never \u2026", "from now on \u2026", ' + `"stop doing \u2026", a stated preference, "that's wrong, it's \u2026") and ` + "appends a terse advisory to the turn's context telling the model to " + "persist the rule with mcp__hindsight__create_directive if it IS " + "durable. Detection is pure regex \u2014 the model does the judgment " + "in-session and calls create_directive itself (no model callsite, no " + "silent hook-side write). Set false to disable per-agent. " + "Cascade: override (per-agent wins over default)."),
+    anti_confabulation_directive: AntiConfabulationDirectiveSchema,
     observation_scopes: ObservationScopesSchema,
     observation_scope_strategy: ObservationScopeStrategySchema,
     recall: exports_external.object({
@@ -21969,7 +21971,7 @@ var init_schema = __esm(() => {
       reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent \u2192 uses global."),
       consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent \u2192 global.")
     }).optional().describe("LLM knob for the hindsight container. The flat `provider`/`model` set " + "the global default (backward-compatible); optional `retain`/`reflect`/" + "`consolidation` blocks override individual ops. All fields optional; " + "unset fields fall back to the hard-coded defaults."),
-    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_RESERVED_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, GRAPH_SEED_MIN_SIMILARITY, " + "LLM_SUPPORTS_MAX_ITEMS, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS \u2014 switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY \u2014 a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP \u2014 the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS \u2014 only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS \u2014 the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_RESERVED_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS \u2014 the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool; and " + "the pre-0.8.6 name HINDSIGHT_API_WORKER_<TYPE>_MAX_SLOTS is still " + "accepted for every operation type and normalised to " + "..._RESERVED_SLOTS on the way in, because setting both names for " + "one type is a hard boot failure in the engine and switchroom " + "therefore emits only the canonical name; and " + "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY \u2014 the cosine-similarity floor a " + "candidate must reach to be returned by the semantic retrieval arm at " + "all (0..1); unset means upstream's own 0.3, and where it should sit " + "depends on the bank's embedding model and phrasing diversity, so " + "switchroom ships no opinion; and " + "HINDSIGHT_MCP_RECALL_BUDGET_MODE \u2014 the rollback knob for switchroom's " + "mcp-recall-token-budget image patch; `legacy` restores upstream's " + "exact pre-patch recall returns, anything else or unset is the " + "honest-envelope mode; and " + "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT \u2014 upstream's own per-op reflect " + "temperature knob, made live by switchroom's reflect-temperature image " + "patch; a float, or `none` to omit the kwarg (provider default, " + "upstream's accidental pre-patch behaviour); unset means the image's " + "baked default 0.1), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS \u2014 a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED \u2014 a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
+    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_RESERVED_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, GRAPH_SEED_MIN_SIMILARITY, " + "LLM_SUPPORTS_MAX_ITEMS, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS \u2014 switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY \u2014 a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP \u2014 the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS \u2014 only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS \u2014 the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_RESERVED_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS \u2014 the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool; and " + "the pre-0.8.6 name HINDSIGHT_API_WORKER_<TYPE>_MAX_SLOTS is still " + "accepted for every operation type and normalised to " + "..._RESERVED_SLOTS on the way in, because setting both names for " + "one type is a hard boot failure in the engine and switchroom " + "therefore emits only the canonical name; and " + "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY \u2014 the cosine-similarity floor a " + "candidate must reach to be returned by the semantic retrieval arm at " + "all (0..1); unset means upstream's own 0.3, and where it should sit " + "depends on the bank's embedding model and phrasing diversity, so " + "switchroom ships no opinion; and " + "HINDSIGHT_MCP_RECALL_BUDGET_MODE \u2014 the rollback knob for switchroom's " + "mcp-recall-token-budget image patch; `legacy` restores upstream's " + "exact pre-patch recall returns, anything else or unset is the " + "honest-envelope mode; and " + "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT \u2014 upstream's own per-op reflect " + "temperature knob, made live by switchroom's reflect-temperature image " + "patch; a float, or `none` to omit the kwarg (provider default, " + "upstream's accidental pre-patch behaviour); unset means the image's " + "baked default 0.1; and " + "HINDSIGHT_API_CONSOLIDATION_RECALL_MAX_CONCURRENT \u2014 the background " + "half of switchroom's recall-admission split (#3660): of the " + "RECALL_MAX_CONCURRENT admission slots, at most this many may be held " + "by background consolidation recalls at once, so foreground per-turn " + "recall always keeps the remainder; must be >= 1 and strictly less " + "than RECALL_MAX_CONCURRENT or the engine refuses to boot; unset " + "means the image's derived default min(2, RECALL_MAX_CONCURRENT - 1); " + "1 biases hard toward the interactive lane while a consolidation " + "backlog drains), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS \u2014 a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED \u2014 a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
   });
   MicrosoftWorkspaceConfigSchema = exports_external.object({
     microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL \u2014 omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
@@ -22103,6 +22105,7 @@ var init_schema = __esm(() => {
       isolation: exports_external.enum(["default", "strict"]).optional(),
       profile: exports_external.string().optional(),
       directive_capture_nudge: exports_external.boolean().optional(),
+      anti_confabulation_directive: AntiConfabulationDirectiveSchema,
       observation_scopes: ObservationScopesSchema,
       observation_scope_strategy: ObservationScopeStrategySchema,
       recall: exports_external.object({
@@ -30147,7 +30150,7 @@ var init_turn_flush_suppression = () => {};
 
 // ../src/agents/generation-stamp.ts
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync32, readFileSync as readFileSync31, writeFileSync as writeFileSync28 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync32, writeFileSync as writeFileSync28 } from "node:fs";
 import { join as join41 } from "node:path";
 function sha256Text(s) {
   return createHash6("sha256").update(s, "utf-8").digest("hex");
@@ -30159,11 +30162,11 @@ function hashManagedClaudeMd(content3) {
 }
 function hashStampedFileOnDisk(agentDir, rel) {
   const p = join41(agentDir, rel);
-  if (!existsSync32(p))
+  if (!existsSync33(p))
     return null;
   let content3;
   try {
-    content3 = readFileSync31(p, "utf-8");
+    content3 = readFileSync32(p, "utf-8");
   } catch {
     return null;
   }
@@ -30171,10 +30174,10 @@ function hashStampedFileOnDisk(agentDir, rel) {
 }
 function readGenerationStamp(agentDir) {
   const p = join41(agentDir, GENERATION_STAMP_FILE);
-  if (!existsSync32(p))
+  if (!existsSync33(p))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync31(p, "utf-8"));
+    const parsed = JSON.parse(readFileSync32(p, "utf-8"));
     if (parsed?.version !== 1 || typeof parsed.files !== "object" || parsed.files === null || Array.isArray(parsed.files)) {
       return null;
     }
@@ -35984,19 +35987,19 @@ function renderAuthLine(state7, agentName3, now = Date.now()) {
 }
 
 // gateway/quota-cache.ts
-import { existsSync as existsSync44, readFileSync as readFileSync44, writeFileSync as writeFileSync37, mkdirSync as mkdirSync39 } from "fs";
-import { join as join54, dirname as dirname22 } from "path";
+import { existsSync as existsSync45, readFileSync as readFileSync45, writeFileSync as writeFileSync37, mkdirSync as mkdirSync39 } from "fs";
+import { join as join53, dirname as dirname22 } from "path";
 function defaultCachePath() {
-  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join54(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
+  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join53(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
 }
 function readQuotaCache(opts = {}) {
   const path3 = opts.path ?? defaultCachePath();
   const now = opts.now ?? Date.now();
-  if (!existsSync44(path3))
+  if (!existsSync45(path3))
     return null;
   let entry;
   try {
-    entry = JSON.parse(readFileSync44(path3, "utf8"));
+    entry = JSON.parse(readFileSync45(path3, "utf8"));
   } catch {
     return null;
   }
@@ -36033,8 +36036,8 @@ var init_quota_cache = __esm(() => {
 });
 
 // gateway/boot-probes.ts
-import { readFileSync as readFileSync45, readdirSync as readdirSync12, existsSync as existsSync45 } from "fs";
-import { join as join55 } from "path";
+import { readFileSync as readFileSync46, readdirSync as readdirSync12, existsSync as existsSync46 } from "fs";
+import { join as join54 } from "path";
 import { execFile as execFileCb } from "child_process";
 import { promisify } from "util";
 async function withTimeout(label, p, timeoutMs = PROBE_TIMEOUT_MS) {
@@ -36076,11 +36079,11 @@ function mapPlan(billingType, hasExtra) {
 }
 async function probeAccount(agentDir) {
   return withTimeout("Account", (async () => {
-    const claudeDir = join55(agentDir, ".claude");
-    const claudeJsonPath = join55(claudeDir, ".claude.json");
+    const claudeDir = join54(agentDir, ".claude");
+    const claudeJsonPath = join54(claudeDir, ".claude.json");
     let cfg = {};
     try {
-      const raw = readFileSync45(claudeJsonPath, "utf8");
+      const raw = readFileSync46(claudeJsonPath, "utf8");
       cfg = JSON.parse(raw);
     } catch {
       return { status: "fail", label: "Account", detail: "no .claude.json" };
@@ -36098,12 +36101,12 @@ async function probeAccount(agentDir) {
     let tokenStr = "";
     let status = "ok";
     for (const candidate of [
-      join55(claudeDir, ".oauth-token.meta.json"),
-      join55(claudeDir, "accounts", "default", ".oauth-token.meta.json")
+      join54(claudeDir, ".oauth-token.meta.json"),
+      join54(claudeDir, "accounts", "default", ".oauth-token.meta.json")
     ]) {
-      if (existsSync45(candidate)) {
+      if (existsSync46(candidate)) {
         try {
-          const meta = JSON.parse(readFileSync45(candidate, "utf8"));
+          const meta = JSON.parse(readFileSync46(candidate, "utf8"));
           if (meta.expiresAt) {
             tokenStr = " \u00b7 " + formatDaysFromNow(meta.expiresAt);
             const daysLeft = Math.round((meta.expiresAt - Date.now()) / 86400000);
@@ -36278,9 +36281,9 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
     if (!cgroup)
       return null;
     const procsPath = `/sys/fs/cgroup${cgroup}/cgroup.procs`;
-    if (!existsSync45(procsPath))
+    if (!existsSync46(procsPath))
       return null;
-    const pidsRaw = readFileSync45(procsPath, "utf-8");
+    const pidsRaw = readFileSync46(procsPath, "utf-8");
     const pids = pidsRaw.split(`
 `).map((s) => s.trim()).filter(Boolean);
     if (pids.length === 0)
@@ -36293,7 +36296,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
       let rss = 0;
       let comm = "";
       try {
-        const status = readFileSync45(`/proc/${pid}/status`, "utf-8");
+        const status = readFileSync46(`/proc/${pid}/status`, "utf-8");
         const rssLine = status.split(`
 `).find((l) => l.startsWith("VmRSS:"));
         if (rssLine) {
@@ -36305,7 +36308,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
         continue;
       }
       try {
-        comm = readFileSync45(`/proc/${pid}/comm`, "utf-8").trim();
+        comm = readFileSync46(`/proc/${pid}/comm`, "utf-8").trim();
       } catch {}
       candidates.push({ pid, rss, comm });
     }
@@ -36485,9 +36488,9 @@ async function probeQuota(claudeConfigDir, _agentDir, fetchImpl = fetch, opts =
       let claudeDirForProbe = null;
       for (const candidate of [
         claudeConfigDir,
-        join55(claudeConfigDir, "accounts", "default")
+        join54(claudeConfigDir, "accounts", "default")
       ]) {
-        if (existsSync45(join55(candidate, ".oauth-token"))) {
+        if (existsSync46(join54(candidate, ".oauth-token"))) {
           claudeDirForProbe = candidate;
           break;
         }
@@ -36552,7 +36555,7 @@ async function probeHindsight(bankName, fetchImpl = fetch) {
 }
 function readContainerBootTimeMsForProbe() {
   try {
-    const stat1 = readFileSync45("/proc/1/stat", "utf8");
+    const stat1 = readFileSync46("/proc/1/stat", "utf8");
     const lastParen = stat1.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -36560,7 +36563,7 @@ function readContainerBootTimeMsForProbe() {
     const starttimeTicks = Number(after[19]);
     if (!Number.isFinite(starttimeTicks))
       return null;
-    const procStat = readFileSync45("/proc/stat", "utf8");
+    const procStat = readFileSync46("/proc/stat", "utf8");
     const btimeLine = procStat.split(`
 `).find((l) => l.startsWith("btime "));
     if (!btimeLine)
@@ -36658,7 +36661,7 @@ async function probeUds(label, socketPath, opts = {}) {
   }
   return withTimeout(label, (async () => {
     if (!opts.connectImpl) {
-      if (!existsSync45(socketPath)) {
+      if (!existsSync46(socketPath)) {
         return {
           status: "fail",
           label,
@@ -36722,7 +36725,7 @@ async function probeSkills(agentDir, opts = {}) {
   return withTimeout("Skills", (async () => {
     const fs3 = opts.fs ?? realSkillsFs;
     const max = opts.maxNamesShown ?? 3;
-    const skillsDir = join55(agentDir, ".claude", "skills");
+    const skillsDir = join54(agentDir, ".claude", "skills");
     if (!fs3.exists(skillsDir)) {
       return { status: "ok", label: "Skills", detail: "no skills dir" };
     }
@@ -36737,17 +36740,17 @@ async function probeSkills(agentDir, opts = {}) {
     }
     const dangling = [];
     for (const name of entries) {
-      const skillPath = join55(skillsDir, name);
+      const skillPath = join54(skillsDir, name);
       if (!fs3.exists(skillPath)) {
         dangling.push(name);
         continue;
       }
-      const skillMd = join55(skillPath, "SKILL.md");
+      const skillMd = join54(skillPath, "SKILL.md");
       if (!fs3.exists(skillMd) && !fs3.exists(skillPath + ".md")) {
         continue;
       }
     }
-    const overlayDir = opts.overlaySkillsDir ?? join55(agentDir, "skills.d");
+    const overlayDir = opts.overlaySkillsDir ?? join54(agentDir, "skills.d");
     const overlaySlugs = new Set;
     if (fs3.exists(overlayDir)) {
       let overlayEntries = [];
@@ -36789,8 +36792,8 @@ function renderBucketedSkills(switchroom, agent) {
 }
 async function probeConnections(agentDir, opts = {}) {
   return withTimeout("Connections", (async () => {
-    const path3 = join55(agentDir, ".claude", "connection-health.json");
-    const read = opts.readFileImpl ?? ((p) => readFileSync45(p, "utf8"));
+    const path3 = join54(agentDir, ".claude", "connection-health.json");
+    const read = opts.readFileImpl ?? ((p) => readFileSync46(p, "utf8"));
     let issues = [];
     try {
       const parsed = JSON.parse(read(path3));
@@ -36830,7 +36833,7 @@ async function probeDrift(agentDir, opts = {}) {
       }
     } catch {}
     try {
-      const raw = readFileSync45(join55(agentDir, ".switchroom-drift.json"), "utf8");
+      const raw = readFileSync46(join54(agentDir, ".switchroom-drift.json"), "utf8");
       const report = JSON.parse(raw);
       if (report?.version === 1 && Array.isArray(report.findings)) {
         const gen = report.generatedAt ? Date.parse(report.generatedAt) : NaN;
@@ -36877,24 +36880,24 @@ var init_boot_probes = __esm(() => {
   execFile = promisify(execFileCb);
   realProcFs = {
     readdir: (p) => readdirSync12(p),
-    readFile: (p) => readFileSync45(p, "utf-8")
+    readFile: (p) => readFileSync46(p, "utf-8")
   };
   realSchedulerFs = {
-    readFile: (p) => readFileSync45(p, "utf-8"),
+    readFile: (p) => readFileSync46(p, "utf-8"),
     mtimeMs: (p) => {
       const { statSync: statSync17 } = __require("fs");
       return statSync17(p).mtimeMs;
     },
-    exists: (p) => existsSync45(p)
+    exists: (p) => existsSync46(p)
   };
   realSkillsFs = {
     readdir: (p) => readdirSync12(p),
-    exists: (p) => existsSync45(p)
+    exists: (p) => existsSync46(p)
   };
 });
 
 // gateway/boot-issue-cache.ts
-import { existsSync as existsSync46, readFileSync as readFileSync46, writeFileSync as writeFileSync38, mkdirSync as mkdirSync40, renameSync as renameSync22 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync47, writeFileSync as writeFileSync38, mkdirSync as mkdirSync40, renameSync as renameSync22 } from "fs";
 import { dirname as dirname23 } from "path";
 function fingerprintProbe(key, r) {
   if (r.status === "ok")
@@ -36974,11 +36977,11 @@ function diffProbes(probes, cache, opts = {}) {
   return out;
 }
 function loadCache(path3, now = Date.now) {
-  if (!existsSync46(path3))
+  if (!existsSync47(path3))
     return { ...EMPTY_CACHE, probes: {} };
   let raw;
   try {
-    raw = readFileSync46(path3, "utf-8");
+    raw = readFileSync47(path3, "utf-8");
   } catch {
     return { ...EMPTY_CACHE, probes: {} };
   }
@@ -37037,7 +37040,7 @@ var init_boot_issue_cache = __esm(() => {
 
 // gateway/config-snapshot.ts
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync47, readFileSync as readFileSync47, writeFileSync as writeFileSync39, mkdirSync as mkdirSync41, renameSync as renameSync23 } from "fs";
+import { existsSync as existsSync48, readFileSync as readFileSync48, writeFileSync as writeFileSync39, mkdirSync as mkdirSync41, renameSync as renameSync23 } from "fs";
 import { dirname as dirname24 } from "path";
 function hashStringArray(items) {
   if (!items || items.length === 0)
@@ -37102,11 +37105,11 @@ function renderConfigChangeDim(dim) {
   }
 }
 function loadSnapshot(path3, now = Date.now) {
-  if (!existsSync47(path3))
+  if (!existsSync48(path3))
     return null;
   let raw;
   try {
-    raw = readFileSync47(path3, "utf-8");
+    raw = readFileSync48(path3, "utf-8");
   } catch {
     return null;
   }
@@ -37147,13 +37150,13 @@ var init_config_snapshot = __esm(() => {
 });
 
 // gateway/boot-card-msgid.ts
-import { readFileSync as readFileSync48, writeFileSync as writeFileSync40 } from "node:fs";
+import { readFileSync as readFileSync49, writeFileSync as writeFileSync40 } from "node:fs";
 function bootCardChatKey(chatId, threadId) {
   return `${chatId}:${threadId ?? ""}`;
 }
 function readStore(path3) {
   try {
-    const parsed = JSON.parse(readFileSync48(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync49(path3, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -37190,8 +37193,8 @@ __export(exports_boot_card, {
   readRoutingMode: () => readRoutingMode,
   containerBootStartMs: () => containerBootStartMs
 });
-import { join as join56 } from "path";
-import { readFileSync as readFileSync49, statSync as statSync17 } from "fs";
+import { join as join55 } from "path";
+import { readFileSync as readFileSync50, statSync as statSync17 } from "fs";
 function resolvePersonaName(slug, loadConfig3) {
   try {
     const config = loadConfig3 ? loadConfig3() : loadConfig();
@@ -37213,7 +37216,7 @@ function shouldSkipDuplicateBootCard(gate, site) {
   }
   return { skip: false };
 }
-function containerBootStartMs(fsImpl = { readFileSync: readFileSync49 }) {
+function containerBootStartMs(fsImpl = { readFileSync: readFileSync50 }) {
   try {
     const btimeLine = fsImpl.readFileSync("/proc/stat", "utf-8").split(`
 `).find((l) => l.startsWith("btime "));
@@ -37234,8 +37237,8 @@ function containerBootStartMs(fsImpl = { readFileSync: readFileSync49 }) {
     return null;
   }
 }
-function readRoutingMode(agentDir, bootStartMs, fsImpl = { readFileSync: readFileSync49, statSync: statSync17 }) {
-  const path3 = join56(agentDir, ".routing-mode");
+function readRoutingMode(agentDir, bootStartMs, fsImpl = { readFileSync: readFileSync50, statSync: statSync17 }) {
+  const path3 = join55(agentDir, ".routing-mode");
   try {
     const raw = fsImpl.readFileSync(path3, "utf-8");
     const line = raw.split(`
@@ -37342,7 +37345,7 @@ function renderBootCard(opts) {
   return stackCardLines(flatLines);
 }
 async function runAllProbes(opts) {
-  const claudeDir = join56(opts.agentDir, ".claude");
+  const claudeDir = join55(opts.agentDir, ".claude");
   const probes = {};
   const slug = opts.agentSlug ?? opts.agentName;
   await Promise.allSettled([
@@ -39140,7 +39143,7 @@ __export(exports_materialize_bot_token, {
   materializeBotToken: () => materializeBotToken,
   BotTokenMaterializeError: () => BotTokenMaterializeError
 });
-import { existsSync as existsSync56 } from "node:fs";
+import { existsSync as existsSync57 } from "node:fs";
 function pickConfiguredToken(config, agentName3) {
   if (agentName3) {
     const agent = config.agents?.[agentName3];
@@ -39154,7 +39157,7 @@ function tryDirectVaultRead4(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync56(vaultPath))
+  if (!existsSync57(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -39309,18 +39312,18 @@ var import_runner3 = __toESM(require_mod3(), 1);
 import { randomBytes as randomBytes13, createHash as createHash8 } from "crypto";
 import { execFileSync as execFileSync9, execSync as execSync2, spawn as spawn2 } from "child_process";
 import {
-  readFileSync as readFileSync60,
+  readFileSync as readFileSync61,
   writeFileSync as writeFileSync50,
   mkdirSync as mkdirSync51,
   readdirSync as readdirSync16,
   rmSync as rmSync8,
   statSync as statSync23,
   renameSync as renameSync27,
-  realpathSync as realpathSync4,
+  realpathSync as realpathSync5,
   chmodSync as chmodSync14,
   openSync as openSync15,
   closeSync as closeSync15,
-  existsSync as existsSync57,
+  existsSync as existsSync58,
   unlinkSync as unlinkSync31,
   appendFileSync as appendFileSync9
 } from "fs";
@@ -39376,7 +39379,7 @@ function fsyncPathSync(path) {
 
 // gateway/gateway.ts
 import { homedir as homedir20 } from "os";
-import { join as join69, sep as sep4, basename as basename17 } from "path";
+import { join as join68, sep as sep4, basename as basename17 } from "path";
 
 // plugin-logger.ts
 import { appendFileSync, mkdirSync, renameSync as renameSync2, statSync, existsSync } from "fs";
@@ -85592,9 +85595,66 @@ async function discoverModels(agentName3, opts = {}) {
 }
 
 // ../src/agents/scaffold.ts
-import { dirname as dirname18, isAbsolute, join as join44, relative, resolve as resolve8 } from "node:path";
 init_atomic();
 
+// ../src/util/shipped-assets.ts
+import { existsSync as existsSync32, readFileSync as readFileSync31, realpathSync as realpathSync2 } from "node:fs";
+import { dirname as dirname18, resolve as resolve7 } from "node:path";
+var FHS_SHARE_ROOTS = [
+  "/usr/local/share/switchroom",
+  "/usr/share/switchroom"
+];
+var PROFILES_ASSET = {
+  asset: "profiles",
+  envVar: "SWITCHROOM_PROFILES_ROOT"
+};
+function orderedCandidates(spec, probe) {
+  const out = [];
+  const push2 = (path2, source) => {
+    if (!out.some((c) => c.path === path2))
+      out.push({ path: path2, source });
+  };
+  if (probe.bundleDir) {
+    push2(resolve7(probe.bundleDir, "../..", spec.asset), "npm");
+    push2(resolve7(probe.bundleDir, spec.asset), "image");
+  }
+  if (probe.execPath) {
+    push2(resolve7(dirname18(probe.execPath), "../share/switchroom", spec.asset), "sea-sibling");
+  }
+  for (const root of FHS_SHARE_ROOTS) {
+    push2(resolve7(root, spec.asset), "fhs");
+  }
+  return out;
+}
+function resolveShippedAsset(spec, probe) {
+  const env = probe.env ?? process.env;
+  const override = env[spec.envVar]?.trim();
+  if (override) {
+    const path2 = canonicalise(resolve7(override), probe);
+    return { path: path2, candidates: [path2], source: "env" };
+  }
+  const exists = probe.exists ?? existsSync32;
+  const candidates = orderedCandidates(spec, probe);
+  for (const c of candidates) {
+    if (exists(c.path)) {
+      return {
+        path: canonicalise(c.path, probe),
+        candidates: candidates.map((x) => x.path),
+        source: c.source
+      };
+    }
+  }
+  return { path: null, candidates: candidates.map((x) => x.path), source: "none" };
+}
+function canonicalise(path2, probe) {
+  const realpath = probe.realpath ?? realpathSync2;
+  try {
+    return realpath(path2);
+  } catch {
+    return path2;
+  }
+}
+
 // ../src/agents/agent-uid.ts
 init_peercred();
 
@@ -85641,37 +85701,29 @@ var AUDIT_ROOT = join42(homedir11(), ".switchroom", "audit");
 
 // ../src/agents/profiles.ts
 var import_handlebars = __toESM(require_lib(), 1);
-import { readFileSync as readFileSync32, writeFileSync as writeFileSync29, existsSync as existsSync33, readdirSync as readdirSync8, statSync as statSync13, copyFileSync, mkdirSync as mkdirSync32, realpathSync as realpathSync2 } from "node:fs";
-import { resolve as resolve7, join as join43, sep as pathSep } from "node:path";
-function resolveProfilesRoot() {
-  const envOverride = process.env.SWITCHROOM_PROFILES_ROOT?.trim();
-  if (envOverride) {
-    return resolve7(envOverride);
-  }
-  const candidates = [
-    resolve7(import.meta.dirname, "../../profiles"),
-    resolve7(import.meta.dirname, "profiles")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync33(candidate)) {
-      return candidate;
-    }
-  }
-  return candidates[0];
+import { readFileSync as readFileSync33, writeFileSync as writeFileSync29, existsSync as existsSync34, readdirSync as readdirSync8, statSync as statSync13, copyFileSync, mkdirSync as mkdirSync32, realpathSync as realpathSync3 } from "node:fs";
+import { resolve as resolve8, join as join43, sep as pathSep } from "node:path";
+function resolveProfilesRootDetailed() {
+  return resolveShippedAsset(PROFILES_ASSET, {
+    bundleDir: import.meta.dirname,
+    execPath: process.execPath
+  });
 }
-var PROFILES_ROOT = resolveProfilesRoot();
+var PROFILES_RESOLUTION = resolveProfilesRootDetailed();
+var PROFILES_ROOT = PROFILES_RESOLUTION.path ?? PROFILES_RESOLUTION.candidates[0];
+var PROFILES_ROOT_SEARCH = PROFILES_RESOLUTION.candidates;
 import_handlebars.default.registerHelper("json", (value) => {
   return new import_handlebars.default.SafeString(JSON.stringify(value, null, 2));
 });
 import_handlebars.default.registerHelper("isNumber", (value) => {
   return typeof value === "number" && Number.isFinite(value);
 });
-var SHARED_FRAGMENTS_DIR = resolve7(PROFILES_ROOT, "_shared");
+var SHARED_FRAGMENTS_DIR = resolve8(PROFILES_ROOT, "_shared");
 var SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline", "dev-protocol"];
 for (const name of SHARED_FRAGMENTS) {
   const fragPath = join43(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
-  if (existsSync33(fragPath)) {
-    import_handlebars.default.registerPartial(name, readFileSync32(fragPath, "utf-8"));
+  if (existsSync34(fragPath)) {
+    import_handlebars.default.registerPartial(name, readFileSync33(fragPath, "utf-8"));
   }
 }
 
@@ -85874,7 +85926,8 @@ var HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS = new Set([
   "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY",
   "HINDSIGHT_MCP_RECALL_BUDGET_MODE",
   "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT",
-  "HINDSIGHT_API_RETAIN_WALL_TIMEOUT"
+  "HINDSIGHT_API_RETAIN_WALL_TIMEOUT",
+  "HINDSIGHT_API_CONSOLIDATION_RECALL_MAX_CONCURRENT"
 ]);
 var HINDSIGHT_WORKER_SLOT_TYPES = [
   "consolidation",
@@ -85969,6 +86022,15 @@ var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and
 ` + `- Hindsight's own errors, retries, backlogs, or internal state \u2014 the memory
 ` + `  system's self-reports are not memories.
 ` + `- Restatements of the user's current request or the task in progress.
+` + `- The assistant's own answers, summaries, recaps, or reflect output. Before
+` + `  extracting, ask: does anything in this transcript support this claim OTHER
+` + `  than the assistant having asserted it? If not, drop it \u2014 a model's own
+` + `  synthesis re-extracted as a fact is how a guess becomes permanent.
+` + `  Concretely, never produce a fact whose only support is the assistant
+` + `  stating a date, a version, an attribution, a total, or a decision that the
+` + `  user never confirmed and no tool output shows. An unverified claim recalls
+` + `  later as though it had been established, which is worse than not
+` + `  remembering it at all.
 ` + `- Volatile state written as a timeless assertion. A version, count, size,
 ` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
 ` + `  claim is true only at the instant it was said. Concretely, never produce a
@@ -86124,6 +86186,64 @@ var SUPERSEDED_RETAIN_MISSIONS = [
 ` + `
 ` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
 ` + `nothing durable remains, return an empty facts list.
+`,
+  `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
+` + `
+` + `DURABILITY GATE. Emit a candidate ONLY if it is one of these five classes:
+` + `- PREFERENCE \u2014 what the user likes, wants, or always does; a standing rule or correction.
+` + `- DECISION \u2014 a settled choice that changes how future work is done, including a choice NOT to do something. A decision about the mechanics of the CURRENT task (which worker to dispatch, which branch to rebase, which PR to merge now, what to do next) is process narration, not a durable decision \u2014 drop it unless it establishes a standing rule or permanently changes a system.
+` + `- FINDING \u2014 a root cause, a measurement, or verified behaviour of a system. Include the number.
+` + `- OUTCOME \u2014 a completed result that changed the world: what shipped, what a thing turned out to be. Not the act of shipping it.
+` + `- RELATIONSHIP \u2014 who a person is, what a project or tool is, and how they connect.
+` + `If a candidate fits none of the five, it is not a memory. Drop it; do not reword it into one.
+` + `
+` + `A preference revealed by a request is durable \u2014 record the preference (what the user likes, wants, or always does), not the request itself.
+` + `
+` + `A TOOL RESULT IS NOT A FACT. Before extracting, ask: is the subject of this
+` + `candidate a file path, a command/process/agent/session id, a temp directory, or
+` + `the location where some output was written? If yes, drop it \u2014 it is transcript
+` + `exhaust, not memory.
+` + `
+` + `NEVER extract:
+` + `- Tool results verbatim or paraphrased. Concretely, never produce a fact whose
+` + `  text resembles any of these: "File created successfully at /path/to/file",
+` + `  "A background command with ID bctz4yskm is running, and its output will be
+` + `  written to /tmp/...", "Async agent a745598ba84e71df1 was launched successfully
+` + `  and is running in the background", "User executed a Bash command to sleep for
+` + `  200 seconds", "The assistant used grep to locate 'truncateSync' in src/foo.ts".
+` + `- Anything mentioning a path under /tmp, a scratchpad directory, or a .tmp file.
+` + `- Agent tool-use traces or narration of what the assistant did (e.g. "the
+` + `  assistant used X to query Y", "ran a search", "sent the message").
+` + `- The act of delegating, dispatching, spawning, launching, steering or merging
+` + `  work \u2014 including when it succeeded. "X was dispatched and completed" is the
+` + `  session describing itself. Record only what the work LEARNED or CHANGED.
+` + `- In-flight workflow/process narration (a sub-task started, paused, or is still
+` + `  running) \u2014 retain the outcome only once the task completes or a decision is made.
+` + `- Operation, request, batch, agent, command or session IDs, UUIDs, hashes, or error codes.
+` + `- Slash commands the user typed and their effects (e.g. "User issued /clear to
+` + `  reset assistant state").
+` + `- Hindsight's own errors, retries, backlogs, or internal state \u2014 the memory
+` + `  system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + `- Volatile state written as a timeless assertion. A version, count, size,
+` + `  backlog, status, or any "X is running Y" / "X is at Y" / "X is currently Y"
+` + `  claim is true only at the instant it was said. Concretely, never produce a
+` + `  fact whose text resembles any of these: "Switchroom fleet is running image
+` + `  version v0.18.19", "The switchroom repo is at /path/to/fleet, version
+` + `  v0.19.5", "Bank overlord has 43155 pending consolidations", "The build is
+` + `  currently green". If the claim is worth keeping, put the date INSIDE the
+` + `  fact text ("As of 2026-07-19 the fleet was running v0.18.19"); if you
+` + `  cannot date it, drop it. An undated one is recalled forever as though it
+` + `  were still true, which is worse than not remembering it at all.
+` + `- Transient state (unread counts, build status, what is running right now) unless
+` + `  the fact is explicitly dated, in which case record it as a dated observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+` + `
+` + `Write each fact so it stands alone: name the thing, the number, and the date. A
+` + `sentence that only makes sense while reading this transcript is not durable.
+` + `
+` + `If a candidate fact matches an exclusion, drop it rather than rewording it. If
+` + `nothing durable remains, return an empty facts list.
 `
 ];
 var DEFAULT_OBSERVATIONS_MISSION = `Synthesise durable, standing knowledge about the people, projects, and systems this agent works with: preferences and standing rules, roles and relationships, skills and recurring patterns, technical and operational decisions with their rationale, and the state of long-running work once it lands.
@@ -86201,6 +86321,22 @@ var PROFILE_MEMORY_DEFAULTS = {
 var warnedMissingPool = new Set;
 var warnedMissingDefault = new Set;
 
+// ../src/memory/hindsight-retain-provenance.ts
+var RETAIN_PROVENANCE_TAG = "source:transcript";
+var RETAIN_TAGS_DEFAULT = Object.freeze([
+  "{session_id}",
+  RETAIN_PROVENANCE_TAG
+]);
+
+// ../src/memory/hindsight-seed-directives.ts
+var ANTI_CONFABULATION_DIRECTIVE = `When the retrieved memories do not support an answer, say so instead of composing one.
+` + `
+` + `- If nothing retrieved scores meaningfully above zero, or what came back is off-topic, the honest answer is that the bank does not know. Say that plainly, and say what would settle it.
+` + `- Never assert a date, a version, a number, an attribution, a decision, or an outcome that no retrieved memory states. A question that presupposes something is not evidence for it: asked when a decision was made, when the bank records no such decision, answer that none is recorded \u2014 do not supply one.
+` + `- Keep what the bank RECORDED separate from what you INFER. State inferences as inferences, and say which memory a recorded fact came from.
+` + `- Treat a memory that was extracted from a conversation transcript as an unverified claim, not an established fact \u2014 it may be an assistant's own earlier guess. If it is the only support for an answer, say that it is.
+` + "- Partial knowledge with its gaps named is more useful than a fluent answer that fills them in.";
+
 // ../src/telegram/state.ts
 init_paths();
 
@@ -86238,7 +86374,6 @@ var RECALL_PASSTHROUGH_DEFAULTS = Object.freeze({
 init_paths();
 
 // ../src/agents/scaffold.ts
-var REPO_ROOT = resolve8(import.meta.dirname, "../..");
 var SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5";
 var SWITCHROOM_DEFAULT_THINKING_EFFORT = "low";
 function resolveMainModel(model) {
@@ -86798,7 +86933,7 @@ init_overlay_loader();
 init_merge();
 init_timezone();
 var import_yaml4 = __toESM(require_dist(), 1);
-import { readFileSync as readFileSync33, existsSync as existsSync34 } from "node:fs";
+import { readFileSync as readFileSync34, existsSync as existsSync35 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { resolve as resolve9 } from "node:path";
 
@@ -86874,7 +87009,7 @@ function findConfigFile2(startDir) {
     resolve9(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path2 of searchPaths) {
-    if (existsSync34(path2)) {
+    if (existsSync35(path2)) {
       return path2;
     }
   }
@@ -86882,12 +87017,12 @@ function findConfigFile2(startDir) {
 }
 function loadConfig2(configPath) {
   const filePath = configPath ?? findConfigFile2();
-  if (!existsSync34(filePath)) {
+  if (!existsSync35(filePath)) {
     throw new ConfigError2(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync33(filePath, "utf-8");
+    raw = readFileSync34(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError2(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -87417,15 +87552,15 @@ function topicForRecipient(args) {
 }
 
 // ../src/agents/perf.ts
-import { existsSync as existsSync35, readFileSync as readFileSync34 } from "node:fs";
+import { existsSync as existsSync36, readFileSync as readFileSync35 } from "node:fs";
 function readTurnUsages(jsonlPath, lastN) {
-  if (!existsSync35(jsonlPath))
+  if (!existsSync36(jsonlPath))
     return [];
   if (lastN <= 0)
     return [];
   let raw;
   try {
-    raw = readFileSync34(jsonlPath, "utf-8");
+    raw = readFileSync35(jsonlPath, "utf-8");
   } catch {
     return [];
   }
@@ -87517,7 +87652,7 @@ function numField(obj, key) {
 
 // gateway/context-occupancy.ts
 import { mkdirSync as mkdirSync33, writeFileSync as writeFileSync30 } from "node:fs";
-import { join as join45 } from "node:path";
+import { join as join44 } from "node:path";
 var CONTEXT_OCCUPANCY_FILENAME = "context-occupancy.json";
 var TIGHT_FRACTION = 0.8;
 function buildContextOccupancy(occupancy, cap, now) {
@@ -87540,7 +87675,7 @@ function buildContextOccupancy(occupancy, cap, now) {
 }
 function writeContextOccupancySnapshot(stateDir, snapshot, deps) {
   try {
-    const path2 = join45(stateDir, CONTEXT_OCCUPANCY_FILENAME);
+    const path2 = join44(stateDir, CONTEXT_OCCUPANCY_FILENAME);
     (deps?.mkdir ?? ((p, o) => mkdirSync33(p, o)))(stateDir, { recursive: true });
     (deps?.writeFile ?? ((p, d) => writeFileSync30(p, d)))(path2, JSON.stringify(snapshot, null, 2) + `
 `);
@@ -87696,7 +87831,7 @@ function nextCompactNotify(state6, ev) {
 }
 
 // gateway/hostd-dispatch.ts
-import { existsSync as existsSync36 } from "node:fs";
+import { existsSync as existsSync37 } from "node:fs";
 import { randomBytes as randomBytes10 } from "node:crypto";
 init_loader();
 var _hostdEnabled2;
@@ -87720,13 +87855,13 @@ function hostdSocketPath2(agentName3) {
 function hostdWillBeUsed2(agentName3) {
   if (!isHostdEnabled2())
     return false;
-  return existsSync36(hostdSocketPath2(agentName3));
+  return existsSync37(hostdSocketPath2(agentName3));
 }
 async function tryHostdDispatch2(agentName3, req, timeoutMs = 5000) {
   if (!isHostdEnabled2())
     return "not-configured";
   const sockPath = hostdSocketPath2(agentName3);
-  if (!existsSync36(sockPath))
+  if (!existsSync37(sockPath))
     return "not-configured";
   try {
     return await hostdRequest({ socketPath: sockPath, timeoutMs }, req);
@@ -87755,7 +87890,7 @@ async function pollHostdStatus(agentName3, targetRequestId, opts) {
   if (!isHostdEnabled2())
     return "not-configured";
   const sockPath = hostdSocketPath2(agentName3);
-  if (!existsSync36(sockPath))
+  if (!existsSync37(sockPath))
     return "not-configured";
   const now = opts.now ?? Date.now;
   const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -88721,7 +88856,7 @@ function createGatewayStalePinSweeper(w) {
 
 // gateway/webhook-ingest-server.ts
 import net4 from "node:net";
-import { chmodSync as chmodSync10, existsSync as existsSync37, unlinkSync as unlinkSync18 } from "node:fs";
+import { chmodSync as chmodSync10, existsSync as existsSync38, unlinkSync as unlinkSync18 } from "node:fs";
 var MAX_REQUEST_BYTES = 1024 * 1024;
 function fdOf(conn) {
   const handle = conn._handle;
@@ -88733,7 +88868,7 @@ function startWebhookIngestServer(opts) {
   const log = opts.log ?? ((s) => process.stderr.write(s));
   const allowed = new Set(opts.allowedUids);
   try {
-    if (existsSync37(opts.socketPath))
+    if (existsSync38(opts.socketPath))
       unlinkSync18(opts.socketPath);
   } catch (err) {
     log(`webhook-ingest-server: could not unlink stale socket: ${err.message}
@@ -88826,7 +88961,7 @@ function startWebhookIngestServer(opts) {
         server.close();
       } catch {}
       try {
-        if (existsSync37(opts.socketPath))
+        if (existsSync38(opts.socketPath))
           unlinkSync18(opts.socketPath);
       } catch {}
     }
@@ -88835,12 +88970,12 @@ function startWebhookIngestServer(opts) {
 
 // ../src/web/webhook-gateway-record.ts
 import { appendFileSync as appendFileSync8, mkdirSync as mkdirSync36 } from "fs";
-import { join as join49 } from "path";
+import { join as join48 } from "path";
 import { homedir as homedir14 } from "os";
 
 // ../src/web/webhook-handler.ts
-import { appendFileSync as appendFileSync7, existsSync as existsSync39, mkdirSync as mkdirSync34, readFileSync as readFileSync35, writeFileSync as writeFileSync31 } from "fs";
-import { join as join47 } from "path";
+import { appendFileSync as appendFileSync7, existsSync as existsSync40, mkdirSync as mkdirSync34, readFileSync as readFileSync36, writeFileSync as writeFileSync31 } from "fs";
+import { join as join46 } from "path";
 
 // ../src/util/log-rotation.ts
 import * as fs2 from "node:fs";
@@ -89178,9 +89313,9 @@ var DEDUP_MAX = 1000;
 var DEDUP_TTL_MS = 24 * 60 * 60 * 1000;
 function loadDedupFile(path3) {
   try {
-    if (!existsSync39(path3))
+    if (!existsSync40(path3))
       return {};
-    const raw = JSON.parse(readFileSync35(path3, "utf-8"));
+    const raw = JSON.parse(readFileSync36(path3, "utf-8"));
     return typeof raw.deliveries === "object" && raw.deliveries !== null ? raw.deliveries : {};
   } catch {
     return {};
@@ -89202,8 +89337,8 @@ var agentDedupCache = new Map;
 function createFileDedupStore(resolveAgentDir) {
   return {
     check(agent, deliveryId, now) {
-      const telegramDir = join47(resolveAgentDir(agent), "telegram");
-      const filePath = join47(telegramDir, "webhook-dedup.json");
+      const telegramDir = join46(resolveAgentDir(agent), "telegram");
+      const filePath = join46(telegramDir, "webhook-dedup.json");
       if (!agentDedupCache.has(agent)) {
         agentDedupCache.set(agent, loadDedupFile(filePath));
       }
@@ -89224,8 +89359,8 @@ var tokenBuckets = new Map;
 var throttleIssueWindow = new Map;
 
 // ../src/web/webhook-dispatch.ts
-import { existsSync as existsSync40, mkdirSync as mkdirSync35, readFileSync as readFileSync36, writeFileSync as writeFileSync32 } from "fs";
-import { join as join48 } from "path";
+import { existsSync as existsSync41, mkdirSync as mkdirSync35, readFileSync as readFileSync37, writeFileSync as writeFileSync32 } from "fs";
+import { join as join47 } from "path";
 import { homedir as homedir13 } from "os";
 
 // ../src/agent-scheduler/ipc-client.ts
@@ -89524,9 +89659,9 @@ function cooldownKey(source, eventType, repo, number, ruleIndex) {
 }
 function loadCooldownFile(path3) {
   try {
-    if (!existsSync40(path3))
+    if (!existsSync41(path3))
       return {};
-    const raw = JSON.parse(readFileSync36(path3, "utf-8"));
+    const raw = JSON.parse(readFileSync37(path3, "utf-8"));
     return typeof raw.dispatches === "object" && raw.dispatches !== null ? raw.dispatches : {};
   } catch {
     return {};
@@ -89545,8 +89680,8 @@ function createFileCooldownStore(resolveAgentDir) {
     isCoolingDown(agent, key, cooldownMs, now) {
       if (cooldownMs <= 0)
         return false;
-      const telegramDir = join48(resolveAgentDir(agent), "telegram");
-      const filePath = join48(telegramDir, "webhook-cooldown.json");
+      const telegramDir = join47(resolveAgentDir(agent), "telegram");
+      const filePath = join47(telegramDir, "webhook-cooldown.json");
       if (!cache.has(agent)) {
         cache.set(agent, loadCooldownFile(filePath));
       }
@@ -89603,9 +89738,9 @@ async function defaultInject(socketPath, agentName3, inbound) {
 }
 function injectWebhookInbound(agent, prompt, ctx, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join48(homedir13(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join47(homedir13(), ".switchroom", "agents", a));
   const now = (deps.now ?? Date.now)();
-  const socketPath = join48(resolveAgentDir(agent), "telegram", "gateway.sock");
+  const socketPath = join47(resolveAgentDir(agent), "telegram", "gateway.sock");
   const inbound = {
     type: "inbound",
     chatId: ctx.chatId,
@@ -89677,7 +89812,7 @@ function evaluateDispatch(args, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = (deps.now ?? Date.now)();
   const nowDate = deps.nowDate ?? (() => new Date(now));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join48(homedir13(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join47(homedir13(), ".switchroom", "agents", a));
   const cooldownStore = deps.cooldownStore ?? createFileCooldownStore(resolveAgentDir);
   if (!DISPATCH_SOURCES.includes(args.source))
     return 0;
@@ -89755,10 +89890,10 @@ var CONSOLIDATION_COMPLETED_EVENT = "consolidation.completed";
 function recordWebhookEvent(rec, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = rec.ts || (deps.now ?? Date.now)();
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join49(homedir14(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join48(homedir14(), ".switchroom", "agents", a));
   const dedupStore = deps.dedupStore ?? createFileDedupStore(resolveAgentDir);
   const agent = rec.agent;
-  const telegramDir = join49(resolveAgentDir(agent), "telegram");
+  const telegramDir = join48(resolveAgentDir(agent), "telegram");
   if (rec.source === "github" && rec.delivery_id) {
     const originalTs = dedupStore.check(agent, rec.delivery_id, now);
     if (originalTs !== undefined) {
@@ -89767,7 +89902,7 @@ function recordWebhookEvent(rec, deps = {}) {
       return { status: "deduped", ts: originalTs };
     }
   }
-  const logPath = join49(telegramDir, "webhook-events.jsonl");
+  const logPath = join48(telegramDir, "webhook-events.jsonl");
   try {
     mkdirSync36(telegramDir, { recursive: true });
     rotateWebhookLogIfNeeded(logPath);
@@ -94030,14 +94165,14 @@ function purgeStaleTurnsForChat(chatId, keys, purger, isStale = () => true) {
 // gateway/compaction-marker.ts
 import { statSync as statSync15, unlinkSync as unlinkSync21 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join50 } from "node:path";
+import { join as join49 } from "node:path";
 var COMPACTION_MARKER_FILE = "compaction-in-flight.json";
 function resolveTelegramStateDir() {
-  return process.env.TELEGRAM_STATE_DIR ?? join50(homedir15(), ".claude", "channels", "telegram");
+  return process.env.TELEGRAM_STATE_DIR ?? join49(homedir15(), ".claude", "channels", "telegram");
 }
 function readCompactionMarkerAgeMs(stateDir, now) {
   try {
-    const st = statSync15(join50(stateDir, COMPACTION_MARKER_FILE));
+    const st = statSync15(join49(stateDir, COMPACTION_MARKER_FILE));
     return (now ?? Date.now()) - st.mtimeMs;
   } catch {
     return null;
@@ -94045,7 +94180,7 @@ function readCompactionMarkerAgeMs(stateDir, now) {
 }
 function removeCompactionMarker(stateDir) {
   try {
-    unlinkSync21(join50(stateDir, COMPACTION_MARKER_FILE));
+    unlinkSync21(join49(stateDir, COMPACTION_MARKER_FILE));
   } catch {}
 }
 
@@ -94867,26 +95002,26 @@ function skillProposalKeyboard(id) {
 // ../src/self-improve/skill-proposals.ts
 import {
   closeSync as closeSync9,
-  existsSync as existsSync41,
+  existsSync as existsSync42,
   mkdirSync as mkdirSync37,
   openSync as openSync9,
-  readFileSync as readFileSync37,
+  readFileSync as readFileSync38,
   writeSync as writeSync6
 } from "node:fs";
-import { join as join51 } from "node:path";
+import { join as join50 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 var PROPOSALS_FILE2 = "skill-proposals.jsonl";
 var REJECTED_FILE2 = "skill-proposals-rejected.jsonl";
 var REJECTION_TTL_MS2 = 90 * 24 * 60 * 60 * 1000;
 var PROPOSAL_SIM_THRESHOLD = 0.5;
 function proposalsPath2(stateDir) {
-  return join51(stateDir, PROPOSALS_FILE2);
+  return join50(stateDir, PROPOSALS_FILE2);
 }
 function rejectedPath2(stateDir) {
-  return join51(stateDir, REJECTED_FILE2);
+  return join50(stateDir, REJECTED_FILE2);
 }
 function ensureDir3(stateDir) {
-  if (!existsSync41(stateDir)) {
+  if (!existsSync42(stateDir)) {
     mkdirSync37(stateDir, { recursive: true, mode: 493 });
   }
 }
@@ -94900,11 +95035,11 @@ function appendLine2(path3, obj) {
   }
 }
 function readLines2(path3, isValid2) {
-  if (!existsSync41(path3))
+  if (!existsSync42(path3))
     return [];
   let raw;
   try {
-    raw = readFileSync37(path3, "utf-8");
+    raw = readFileSync38(path3, "utf-8");
   } catch {
     return [];
   }
@@ -95501,7 +95636,7 @@ function escapeBody2(s) {
 }
 
 // gateway/pid-file.ts
-import { writeFileSync as writeFileSync33, readFileSync as readFileSync38, unlinkSync as unlinkSync22, renameSync as renameSync18 } from "node:fs";
+import { writeFileSync as writeFileSync33, readFileSync as readFileSync39, unlinkSync as unlinkSync22, renameSync as renameSync18 } from "node:fs";
 function writePidFile(path3, record) {
   const tmp = `${path3}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync33(tmp, JSON.stringify(record), "utf-8");
@@ -95520,10 +95655,10 @@ import {
   writeFile as writeFileAsync,
   readFile as readFileAsync
 } from "node:fs/promises";
-import { readFileSync as readFileSync39 } from "node:fs";
+import { readFileSync as readFileSync40 } from "node:fs";
 function readCurrentBootId() {
   try {
-    const stat = readFileSync39("/proc/1/stat", "utf-8");
+    const stat = readFileSync40("/proc/1/stat", "utf-8");
     const lastParen = stat.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -95726,7 +95861,7 @@ function safeCount(fn) {
 }
 
 // gateway/session-marker.ts
-import { writeFileSync as writeFileSync34, readFileSync as readFileSync40, renameSync as renameSync19, unlinkSync as unlinkSync23 } from "node:fs";
+import { writeFileSync as writeFileSync34, readFileSync as readFileSync41, renameSync as renameSync19, unlinkSync as unlinkSync23 } from "node:fs";
 function writeSessionMarker(path3, marker) {
   const tmp = `${path3}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync34(tmp, JSON.stringify(marker), "utf-8");
@@ -95734,7 +95869,7 @@ function writeSessionMarker(path3, marker) {
 }
 function readSessionMarker(path3) {
   try {
-    const raw = readFileSync40(path3, "utf-8");
+    const raw = readFileSync41(path3, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.pid === "number" && typeof parsed.startedAtMs === "number" && Number.isFinite(parsed.pid) && Number.isFinite(parsed.startedAtMs)) {
       return { pid: parsed.pid, startedAtMs: parsed.startedAtMs };
@@ -95756,7 +95891,7 @@ function shouldFireRestartBanner(input) {
 }
 
 // gateway/clean-shutdown-marker.ts
-import { writeFileSync as writeFileSync35, readFileSync as readFileSync41, renameSync as renameSync20, unlinkSync as unlinkSync24 } from "node:fs";
+import { writeFileSync as writeFileSync35, readFileSync as readFileSync42, renameSync as renameSync20, unlinkSync as unlinkSync24 } from "node:fs";
 var DEFAULT_MAX_AGE_MS = 60000;
 function writeCleanShutdownMarker(path3, marker) {
   const tmp = `${path3}.tmp-${process.pid}-${Date.now()}`;
@@ -95765,7 +95900,7 @@ function writeCleanShutdownMarker(path3, marker) {
 }
 function readCleanShutdownMarker(path3) {
   try {
-    const raw = readFileSync41(path3, "utf-8");
+    const raw = readFileSync42(path3, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.ts === "number" && Number.isFinite(parsed.ts) && typeof parsed.signal === "string" && parsed.signal.length > 0) {
       const out = { ts: parsed.ts, signal: parsed.signal };
@@ -96137,16 +96272,16 @@ function classifyAdminGate(text4, myAgentName) {
 
 // subagent-watcher.ts
 import {
-  existsSync as existsSync42,
+  existsSync as existsSync43,
   openSync as openSync10,
   readSync as readSync2,
   statSync as statSync16,
   closeSync as closeSync10,
   watch,
   readdirSync as readdirSync10,
-  readFileSync as readFileSync42
+  readFileSync as readFileSync43
 } from "fs";
-import { join as join52 } from "path";
+import { join as join51 } from "path";
 
 // session-tail.ts
 function sanitizeCwdToProjectName2(cwd) {
@@ -96496,7 +96631,7 @@ function backfillJsonlAgentId(db3, jsonlPath, agentId, log) {
   const metaPath = jsonlPath.replace(/\.jsonl$/, ".meta.json");
   let meta;
   try {
-    const raw = readFileSync42(metaPath, "utf8");
+    const raw = readFileSync43(metaPath, "utf8");
     meta = JSON.parse(raw);
   } catch {
     log?.(`subagent-watcher: backfill skip ${agentId} \u2014 meta.json not readable at ${metaPath}`);
@@ -96951,7 +97086,7 @@ function startSubagentWatcher(config) {
     clearTimeout(ref.ref);
   });
   const fs3 = config.fs ?? {
-    existsSync: existsSync42,
+    existsSync: existsSync43,
     readdirSync: readdirSync10,
     statSync: statSync16,
     openSync: openSync10,
@@ -97469,8 +97604,8 @@ function startSubagentWatcher(config) {
     if (stopped)
       return;
     pruneVanishedDirWatchers();
-    const claudeHome = join52(agentDir, ".claude");
-    const projectsRoot = join52(claudeHome, "projects");
+    const claudeHome = join51(agentDir, ".claude");
+    const projectsRoot = join51(claudeHome, "projects");
     if (!fs3.existsSync(projectsRoot))
       return;
     let projectDirs;
@@ -97504,7 +97639,7 @@ function startSubagentWatcher(config) {
         continue;
       }
       warnedForeignSlugs.delete(pDir);
-      const projectPath = join52(projectsRoot, pDir);
+      const projectPath = join51(projectsRoot, pDir);
       let sessionDirs;
       try {
         sessionDirs = fs3.readdirSync(projectPath);
@@ -97514,7 +97649,7 @@ function startSubagentWatcher(config) {
       for (const sDir of sessionDirs) {
         if (sDir.endsWith(".jsonl"))
           continue;
-        const subagentsPath = join52(projectPath, sDir, "subagents");
+        const subagentsPath = join51(projectPath, sDir, "subagents");
         if (!fs3.existsSync(subagentsPath))
           continue;
         const watchAndScan = (dirPath) => {
@@ -97523,7 +97658,7 @@ function startSubagentWatcher(config) {
               const w = fs3.watch(dirPath, (_event, filename) => {
                 if (!filename || !filename.toString().startsWith("agent-") || !filename.toString().endsWith(".jsonl"))
                   return;
-                const filePath = join52(dirPath, filename.toString());
+                const filePath = join51(dirPath, filename.toString());
                 if (!knownFiles.has(filePath)) {
                   scanSubagentsDir(dirPath);
                 }
@@ -97537,7 +97672,7 @@ function startSubagentWatcher(config) {
           scanSubagentsDir(dirPath);
         };
         watchAndScan(subagentsPath);
-        const workflowsPath = join52(subagentsPath, "workflows");
+        const workflowsPath = join51(subagentsPath, "workflows");
         if (fs3.existsSync(workflowsPath)) {
           let wfDirs;
           try {
@@ -97547,7 +97682,7 @@ function startSubagentWatcher(config) {
           }
           for (const wfDir of wfDirs) {
             try {
-              const wfPath = join52(workflowsPath, wfDir);
+              const wfPath = join51(workflowsPath, wfDir);
               if (!fs3.statSync(wfPath).isDirectory())
                 continue;
               watchAndScan(wfPath);
@@ -97567,7 +97702,7 @@ function startSubagentWatcher(config) {
     for (const e of entries) {
       if (!e.startsWith("agent-") || !e.endsWith(".jsonl"))
         continue;
-      const filePath = join52(subagentsPath, e);
+      const filePath = join51(subagentsPath, e);
       if (knownFiles.has(filePath))
         continue;
       const agentId = e.slice("agent-".length, -".jsonl".length);
@@ -97697,19 +97832,19 @@ function startSubagentWatcher(config) {
 import {
   mkdirSync as mkdirSync38,
   writeFileSync as writeFileSync36,
-  readFileSync as readFileSync43,
+  readFileSync as readFileSync44,
   readdirSync as readdirSync11,
   unlinkSync as unlinkSync25,
-  existsSync as existsSync43,
+  existsSync as existsSync44,
   renameSync as renameSync21
 } from "node:fs";
-import { join as join53, resolve as resolve10 } from "node:path";
+import { join as join52, resolve as resolve10 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function registryDir() {
-  return resolve10(process.env.SWITCHROOM_WORKTREE_DIR ?? join53(homedir16(), ".switchroom", "worktrees"));
+  return resolve10(process.env.SWITCHROOM_WORKTREE_DIR ?? join52(homedir16(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join53(registryDir(), `${id}.json`);
+  return join52(registryDir(), `${id}.json`);
 }
 function ensureDir4() {
   mkdirSync38(registryDir(), { recursive: true });
@@ -97725,7 +97860,7 @@ function writeRecord(record) {
 function readRecord(id) {
   const path3 = recordPath(id);
   try {
-    const raw = readFileSync43(path3, "utf8");
+    const raw = readFileSync44(path3, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -97755,11 +97890,11 @@ function touchHeartbeat(id, onAfterRead) {
   writeRecord({ ...rec, heartbeatAt: new Date().toISOString() });
 }
 function recordExists(id) {
-  return existsSync43(recordPath(id));
+  return existsSync44(recordPath(id));
 }
 
 // worktree-watch-cwds.ts
-import { realpathSync as realpathSync3 } from "node:fs";
+import { realpathSync as realpathSync4 } from "node:fs";
 import { basename as basename13 } from "node:path";
 var identityEscalated = false;
 function defaultDeriveName(agentDir) {
@@ -97785,7 +97920,7 @@ function ownedWorktreeCwds(opts) {
     }
     return [];
   }
-  const rp = opts.realpath ?? realpathSync3;
+  const rp = opts.realpath ?? realpathSync4;
   try {
     return opts.listRecords().filter((r) => r.ownerAgent === resolved).map((r) => {
       try {
@@ -97884,20 +98019,20 @@ function determineRestartReason(opts) {
 }
 
 // gateway/update-announce.ts
-import { existsSync as existsSync48, mkdirSync as mkdirSync42, openSync as openSync11, closeSync as closeSync11, readFileSync as readFileSync50 } from "node:fs";
-import { join as join58 } from "node:path";
+import { existsSync as existsSync49, mkdirSync as mkdirSync42, openSync as openSync11, closeSync as closeSync11, readFileSync as readFileSync51 } from "node:fs";
+import { join as join57 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 
 // ../src/host-control/audit-reader.ts
 import { homedir as homedir17 } from "node:os";
-import { join as join57 } from "node:path";
+import { join as join56 } from "node:path";
 
 // ../src/host-control/audit-rotation-config.ts
 var DEFAULT_HOSTD_AUDIT_MAX_BYTES = 32 * 1024 * 1024;
 
 // ../src/host-control/audit-reader.ts
 function defaultAuditLogPath(home2 = homedir17()) {
-  return join57(home2, ".switchroom", "host-control-audit.log");
+  return join56(home2, ".switchroom", "host-control-audit.log");
 }
 var AUDIT_READ_WINDOW_BYTES = 4 * 1024 * 1024;
 function parseAuditLine(line) {
@@ -98031,8 +98166,8 @@ init_status_no_truncate();
 var DEFAULT_LOOKBACK_MS = 10 * 60 * 1000;
 function readLastTerminalUpdateAudit(opts = {}) {
   const path3 = opts.auditLogPath ?? defaultAuditLogPath();
-  const exists = opts.exists ?? existsSync48;
-  const readFile = opts.readFile ?? ((p) => readFileSync50(p, "utf-8"));
+  const exists = opts.exists ?? existsSync49;
+  const readFile = opts.readFile ?? ((p) => readFileSync51(p, "utf-8"));
   if (!exists(path3))
     return null;
   let raw;
@@ -98096,15 +98231,15 @@ function renderUpdateOutcomeLine(entry) {
 `);
 }
 function claimUpdateAnnouncement(requestId, opts = {}) {
-  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join58(homedir18(), ".switchroom");
-  const dir = join58(stateDir, "update-announced");
+  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join57(homedir18(), ".switchroom");
+  const dir = join57(stateDir, "update-announced");
   try {
     mkdirSync42(dir, { recursive: true });
   } catch {
     return false;
   }
   const safeId = requestId.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 200);
-  const path3 = join58(dir, safeId);
+  const path3 = join57(dir, safeId);
   try {
     const fd = openSync11(path3, "wx");
     closeSync11(fd);
@@ -98124,7 +98259,7 @@ function maybeRenderUpdateAnnouncement(opts = {}) {
 
 // issues-card.ts
 init_card_format();
-import { readFileSync as readFileSync51, writeFileSync as writeFileSync41 } from "node:fs";
+import { readFileSync as readFileSync52, writeFileSync as writeFileSync41 } from "node:fs";
 var SEVERITY_EMOJI = {
   info: "\u2139\ufe0f",
   warn: "\u26a0\ufe0f",
@@ -98216,7 +98351,7 @@ function extractRetryAfterSecs2(err) {
 var COOLDOWN_JITTER_MS2 = 500;
 function readPersistedMessageId(path3, log) {
   try {
-    const raw = readFileSync51(path3, "utf8");
+    const raw = readFileSync52(path3, "utf8");
     const parsed = JSON.parse(raw);
     const v = parsed.messageId;
     if (typeof v === "number" && Number.isInteger(v) && v > 0)
@@ -98325,24 +98460,24 @@ function createIssuesCardHandle(opts) {
 }
 
 // issues-watcher.ts
-import { existsSync as existsSync50, statSync as statSync19 } from "node:fs";
-import { join as join60 } from "node:path";
+import { existsSync as existsSync51, statSync as statSync19 } from "node:fs";
+import { join as join59 } from "node:path";
 
 // ../src/issues/store.ts
 import {
   closeSync as closeSync12,
-  existsSync as existsSync49,
+  existsSync as existsSync50,
   mkdirSync as mkdirSync43,
   openSync as openSync12,
   readdirSync as readdirSync13,
-  readFileSync as readFileSync52,
+  readFileSync as readFileSync53,
   renameSync as renameSync24,
   statSync as statSync18,
   unlinkSync as unlinkSync26,
   writeFileSync as writeFileSync42,
   writeSync as writeSync7
 } from "node:fs";
-import { join as join59 } from "node:path";
+import { join as join58 } from "node:path";
 import { randomBytes as randomBytes11 } from "node:crypto";
 import { execSync } from "node:child_process";
 
@@ -98361,12 +98496,12 @@ init_redact();
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path3 = join59(stateDir, ISSUES_FILE);
-  if (!existsSync49(path3))
+  const path3 = join58(stateDir, ISSUES_FILE);
+  if (!existsSync50(path3))
     return [];
   let raw;
   try {
-    raw = readFileSync52(path3, "utf-8");
+    raw = readFileSync53(path3, "utf-8");
   } catch {
     return [];
   }
@@ -98398,7 +98533,7 @@ function list2(stateDir, opts = {}) {
   });
 }
 function resolve11(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync49(join59(stateDir, ISSUES_FILE)))
+  if (!existsSync50(join58(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all2 = readAll(stateDir);
@@ -98416,7 +98551,7 @@ function resolve11(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function writeAll(stateDir, events) {
-  const path3 = join59(stateDir, ISSUES_FILE);
+  const path3 = join58(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path3}.tmp-${process.pid}-${randomBytes11(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
@@ -98438,7 +98573,7 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath2 = join59(stateDir, entry);
+    const tmpPath2 = join58(stateDir, entry);
     try {
       const stat = statSync18(tmpPath2);
       if (stat.mtimeMs < cutoff) {
@@ -98450,7 +98585,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join59(stateDir, ISSUES_LOCK);
+  const lockPath = join58(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -98485,7 +98620,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync52(lockPath, "utf-8").trim();
+    pidStr = readFileSync53(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -98535,7 +98670,7 @@ function isIssueEvent(v) {
 // issues-watcher.ts
 var DEFAULT_POLL_INTERVAL_MS2 = 2000;
 function startIssuesWatcher(opts) {
-  const path3 = join60(opts.stateDir, ISSUES_FILE);
+  const path3 = join59(opts.stateDir, ISSUES_FILE);
   const log = opts.log ?? (() => {});
   const intervalMs = opts.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS2;
   const setIntervalFn = opts.setInterval ?? setInterval;
@@ -98583,7 +98718,7 @@ function startIssuesWatcher(opts) {
   };
 }
 function defaultSignatureProvider(path3) {
-  if (!existsSync50(path3))
+  if (!existsSync51(path3))
     return null;
   try {
     const stat = statSync19(path3);
@@ -99295,7 +99430,7 @@ function readBashCommand(inputPreview) {
 
 // gateway/scoped-grant-store.ts
 init_atomic();
-import { join as join61 } from "node:path";
+import { join as join60 } from "node:path";
 
 // scoped-approval.ts
 var SCOPED_APPROVAL_DEFAULT_TTL_MS2 = 30 * 60 * 1000;
@@ -99337,7 +99472,7 @@ function scopedGrantPersistEnabled(env = process.env) {
   return env.SWITCHROOM_SCOPED_GRANT_PERSIST !== "0";
 }
 function createScopedGrantStore(stateDir, env = process.env, log = (l) => process.stderr.write(l)) {
-  const filePath = join61(stateDir, "scoped-grants.json");
+  const filePath = join60(stateDir, "scoped-grants.json");
   const enabled7 = scopedGrantPersistEnabled(env);
   let unreadable = false;
   function read() {
@@ -99715,8 +99850,8 @@ function isDiffPreApproved(agentName3, unifiedDiff, deps) {
 
 // credits-watch.ts
 init_card_format();
-import { readFileSync as readFileSync53, writeFileSync as writeFileSync43, existsSync as existsSync51, mkdirSync as mkdirSync44 } from "fs";
-import { join as join62 } from "path";
+import { readFileSync as readFileSync54, writeFileSync as writeFileSync43, existsSync as existsSync52, mkdirSync as mkdirSync44 } from "fs";
+import { join as join61 } from "path";
 var STATE_FILE = "credits-watch.json";
 var DEFAULT_CREDIT_FATAL_REASONS = new Set;
 var KNOWN_CREDIT_REASONS = [
@@ -99738,12 +99873,12 @@ function emptyCreditState() {
   return { lastNotifiedReason: null, lastNotifiedAt: 0 };
 }
 function readClaudeJsonOverage(claudeConfigDir) {
-  const path3 = join62(claudeConfigDir, ".claude.json");
-  if (!existsSync51(path3))
+  const path3 = join61(claudeConfigDir, ".claude.json");
+  if (!existsSync52(path3))
     return null;
   let raw;
   try {
-    raw = readFileSync53(path3, "utf-8");
+    raw = readFileSync54(path3, "utf-8");
   } catch {
     return null;
   }
@@ -99821,11 +99956,11 @@ function humanizeReason(reason) {
   }
 }
 function loadCreditState(stateDir) {
-  const path3 = join62(stateDir, STATE_FILE);
-  if (!existsSync51(path3))
+  const path3 = join61(stateDir, STATE_FILE);
+  if (!existsSync52(path3))
     return emptyCreditState();
   try {
-    const raw = readFileSync53(path3, "utf-8");
+    const raw = readFileSync54(path3, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && (parsed.lastNotifiedReason === null || typeof parsed.lastNotifiedReason === "string") && typeof parsed.lastNotifiedAt === "number" && Number.isFinite(parsed.lastNotifiedAt)) {
       return {
@@ -99838,7 +99973,7 @@ function loadCreditState(stateDir) {
 }
 function saveCreditState(stateDir, state7) {
   mkdirSync44(stateDir, { recursive: true });
-  const path3 = join62(stateDir, STATE_FILE);
+  const path3 = join61(stateDir, STATE_FILE);
   writeFileSync43(path3, JSON.stringify(state7, null, 2) + `
 `, { mode: 384 });
 }
@@ -99846,8 +99981,8 @@ function saveCreditState(stateDir, state7) {
 // quota-watch.ts
 init_auth_snapshot_format();
 init_card_format();
-import { readFileSync as readFileSync54, writeFileSync as writeFileSync44, existsSync as existsSync52, mkdirSync as mkdirSync45 } from "fs";
-import { join as join63 } from "path";
+import { readFileSync as readFileSync55, writeFileSync as writeFileSync44, existsSync as existsSync53, mkdirSync as mkdirSync45 } from "fs";
+import { join as join62 } from "path";
 var STATE_FILE2 = "quota-watch.json";
 function emptyQuotaWatchState() {
   return {};
@@ -100085,11 +100220,11 @@ function buildRecoveryMessage(agentName3, snap) {
 `);
 }
 function loadQuotaWatchState(stateDir) {
-  const path3 = join63(stateDir, STATE_FILE2);
-  if (!existsSync52(path3))
+  const path3 = join62(stateDir, STATE_FILE2);
+  if (!existsSync53(path3))
     return emptyQuotaWatchState();
   try {
-    const raw = readFileSync54(path3, "utf-8");
+    const raw = readFileSync55(path3, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return emptyQuotaWatchState();
@@ -100107,7 +100242,7 @@ function loadQuotaWatchState(stateDir) {
 }
 function saveQuotaWatchState(stateDir, state7) {
   mkdirSync45(stateDir, { recursive: true });
-  const path3 = join63(stateDir, STATE_FILE2);
+  const path3 = join62(stateDir, STATE_FILE2);
   writeFileSync44(path3, JSON.stringify(state7, null, 2) + `
 `, { mode: 384 });
 }
@@ -100156,27 +100291,27 @@ init_auth_snapshot_format2();
 // gateway/turn-active-marker.ts
 import {
   closeSync as closeSync13,
-  existsSync as existsSync53,
+  existsSync as existsSync54,
   mkdirSync as mkdirSync46,
   openSync as openSync13,
-  readFileSync as readFileSync55,
+  readFileSync as readFileSync56,
   statSync as statSync20,
   unlinkSync as unlinkSync27,
   utimesSync as utimesSync2,
   writeFileSync as writeFileSync45
 } from "node:fs";
-import { join as join64 } from "node:path";
+import { join as join63 } from "node:path";
 var TURN_ACTIVE_MARKER_FILE2 = "turn-active.json";
 var TURN_ACTIVE_HARD_TTL_MS2 = 10 * 60000;
 var TURN_ACTIVE_IDLE_SWEEP_MS = 60000;
 function removeTurnActiveMarker2(stateDir) {
   try {
-    unlinkSync27(join64(stateDir, TURN_ACTIVE_MARKER_FILE2));
+    unlinkSync27(join63(stateDir, TURN_ACTIVE_MARKER_FILE2));
   } catch {}
 }
 function sweepStaleTurnActiveMarker(stateDir, opts) {
-  const path3 = join64(stateDir, TURN_ACTIVE_MARKER_FILE2);
-  if (!existsSync53(path3))
+  const path3 = join63(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  if (!existsSync54(path3))
     return false;
   const now = opts.now ?? Date.now();
   try {
@@ -100188,7 +100323,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
       return false;
     let payload = null;
     try {
-      payload = readFileSync55(path3, "utf8");
+      payload = readFileSync56(path3, "utf8");
     } catch {}
     unlinkSync27(path3);
     if (opts.onRemove) {
@@ -100206,7 +100341,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
   }
 }
 function readTurnActiveMarkerAgeMs2(stateDir, now) {
-  const path3 = join64(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  const path3 = join63(stateDir, TURN_ACTIVE_MARKER_FILE2);
   try {
     const st = statSync20(path3);
     return (now ?? Date.now()) - st.mtimeMs;
@@ -100220,11 +100355,11 @@ function effectiveTurnAgeMs(markerAgeMs, turnStartedAt, now) {
 
 // gateway/gateway-heartbeat.ts
 import { mkdirSync as mkdirSync47, utimesSync as utimesSync3, writeFileSync as writeFileSync46 } from "node:fs";
-import { join as join65 } from "node:path";
+import { join as join64 } from "node:path";
 var GATEWAY_HEARTBEAT_FILE = "gateway-heartbeat";
 var GATEWAY_HEARTBEAT_INTERVAL_MS = 15000;
 function touchGatewayHeartbeat(stateDir) {
-  const path3 = join65(stateDir, GATEWAY_HEARTBEAT_FILE);
+  const path3 = join64(stateDir, GATEWAY_HEARTBEAT_FILE);
   const now = new Date;
   try {
     utimesSync3(path3, now, now);
@@ -100250,12 +100385,12 @@ import {
   fsyncSync as fsyncSync5,
   mkdirSync as mkdirSync48,
   openSync as openSync14,
-  readFileSync as readFileSync56,
+  readFileSync as readFileSync57,
   renameSync as renameSync25,
   unlinkSync as unlinkSync28,
   writeFileSync as writeFileSync47
 } from "node:fs";
-import { join as join66 } from "node:path";
+import { join as join65 } from "node:path";
 var BOOT_BEACON_FILE = "gateway-beacon.json";
 var HOST_BOOT_ID_PATH = "/proc/sys/kernel/random/boot_id";
 var CGROUP_MEMORY_EVENTS_PATH = "/sys/fs/cgroup/memory.events";
@@ -100332,7 +100467,7 @@ function serializeBootBeacon(beacon) {
 }
 function readTextOrNull(path3) {
   try {
-    return readFileSync56(path3, "utf-8");
+    return readFileSync57(path3, "utf-8");
   } catch {
     return null;
   }
@@ -100354,7 +100489,7 @@ function sampleBeaconHost(paths = {}) {
   return sample3;
 }
 function writeBootBeaconFile(stateDir, beacon) {
-  const path3 = join66(stateDir, BOOT_BEACON_FILE);
+  const path3 = join65(stateDir, BOOT_BEACON_FILE);
   const tmp = `${path3}.tmp-${process.pid}`;
   let fd;
   try {
@@ -100731,10 +100866,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.19.43";
-var COMMIT_SHA = "4aaf442f";
-var COMMIT_DATE = "2026-08-01T10:38:38Z";
-var LATEST_PR = 4159;
+var VERSION2 = "0.19.44";
+var COMMIT_SHA = "82d3b0b2";
+var COMMIT_DATE = "2026-08-01T23:02:10Z";
+var LATEST_PR = 4186;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -100812,11 +100947,11 @@ init_peercred();
 import * as net5 from "node:net";
 import * as fs3 from "node:fs";
 import { homedir as homedir19 } from "node:os";
-import { join as join67 } from "node:path";
+import { join as join66 } from "node:path";
 var DEFAULT_TIMEOUT_MS4 = 2000;
 var UNLOCK_TIMEOUT_MS = 30000;
-var LEGACY_SOCKET_PATH2 = join67(homedir19(), ".switchroom", "vault-broker.sock");
-var OPERATOR_SOCKET_PATH2 = join67(homedir19(), ".switchroom", "broker-operator", "sock");
+var LEGACY_SOCKET_PATH2 = join66(homedir19(), ".switchroom", "vault-broker.sock");
+var OPERATOR_SOCKET_PATH2 = join66(homedir19(), ".switchroom", "broker-operator", "sock");
 function defaultBrokerSocketPath2() {
   if (fs3.existsSync(OPERATOR_SOCKET_PATH2))
     return OPERATOR_SOCKET_PATH2;
@@ -101699,7 +101834,7 @@ function resolveVaultApprovalPosture(broker) {
 
 // registry/turns-schema.ts
 import { chmodSync as chmodSync12, mkdirSync as mkdirSync49 } from "fs";
-import { join as join68 } from "path";
+import { join as join67 } from "path";
 var DatabaseClass3 = null;
 function loadDatabaseClass3() {
   if (DatabaseClass3 != null)
@@ -101771,9 +101906,9 @@ function applySchema(db3) {
 }
 function openTurnsDb(agentDir) {
   const Database = loadDatabaseClass3();
-  const dir = join68(agentDir, "telegram");
+  const dir = join67(agentDir, "telegram");
   mkdirSync49(dir, { recursive: true, mode: 448 });
-  const path3 = join68(dir, "registry.db");
+  const path3 = join67(dir, "registry.db");
   const db3 = new Database(path3, { create: true });
   applySchema(db3);
   try {
@@ -102118,7 +102253,7 @@ function selectResumeBuilder(endedVia, opts) {
 }
 
 // gateway/bridge-dead-watchdog.ts
-import { readFileSync as readFileSync58, writeFileSync as writeFileSync48, renameSync as renameSync26, unlinkSync as unlinkSync29 } from "node:fs";
+import { readFileSync as readFileSync59, writeFileSync as writeFileSync48, renameSync as renameSync26, unlinkSync as unlinkSync29 } from "node:fs";
 
 // gateway/cron-session.ts
 var CRON_IDENTITY_SUFFIX2 = "-cron";
@@ -102151,7 +102286,7 @@ function readFreshCrashLogTail(path3, opts = {}) {
   const nowMs3 = opts.nowMs ?? Date.now();
   const freshWindowMs = opts.freshWindowMs ?? CRASH_LOG_FRESH_WINDOW_MS;
   const maxLines = opts.maxLines ?? CRASH_LOG_TAIL_LINES;
-  const readFile = opts.readFile ?? ((p) => readFileSync58(p, "utf8"));
+  const readFile = opts.readFile ?? ((p) => readFileSync59(p, "utf8"));
   let raw;
   try {
     raw = readFile(path3);
@@ -102178,7 +102313,7 @@ function writeBridgeDeadEscalationMarker(path3, marker) {
 function consumeBridgeDeadEscalationMarker(path3, nowMs3 = Date.now(), maxAgeMs = ESCALATION_MARKER_MAX_AGE_MS) {
   let marker = null;
   try {
-    const parsed = JSON.parse(readFileSync58(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync59(path3, "utf8"));
     if (typeof parsed.ts === "number" && Number.isFinite(parsed.ts) && typeof parsed.reason === "string") {
       const age = nowMs3 - parsed.ts;
       if (age >= 0 && age < maxAgeMs) {
@@ -102331,7 +102466,7 @@ function createBridgeDeadWatchdog(opts) {
 }
 
 // gateway/boot-probes.ts
-import { readFileSync as readFileSync59, readdirSync as readdirSync14, existsSync as existsSync55 } from "fs";
+import { readFileSync as readFileSync60, readdirSync as readdirSync14, existsSync as existsSync56 } from "fs";
 init_quota_cache();
 init_generation_stamp();
 init_quota_check();
@@ -102340,7 +102475,7 @@ import { promisify as promisify2 } from "util";
 var execFile2 = promisify2(execFileCb2);
 var realProcFs2 = {
   readdir: (p) => readdirSync14(p),
-  readFile: (p) => readFileSync59(p, "utf-8")
+  readFile: (p) => readFileSync60(p, "utf-8")
 };
 function findAgentProcessInContainer2(fs4 = realProcFs2) {
   let entries;
@@ -102590,7 +102725,7 @@ if (isGatewayMain) {
     shutdownAnalytics();
   });
 }
-var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join69(homedir20(), ".claude", "channels", "telegram");
+var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join68(homedir20(), ".claude", "channels", "telegram");
 var permCardStore = createPermissionCardStore(STATE_DIR);
 var BLOCKED_APPROVALS_DIR = process.env.SWITCHROOM_BLOCKED_APPROVALS_DIR ?? "/state/blocked-approvals";
 var AGENT_NAME = process.env.SWITCHROOM_AGENT_NAME ?? "agent";
@@ -102629,7 +102764,7 @@ function alwaysAllowDrainDeps() {
   return {
     readConfigText: () => {
       const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-      return readFileSync60(cfgPath, "utf8");
+      return readFileSync61(cfgPath, "utf8");
     },
     resolveAllowList: (_configText, agentName3) => {
       const cfg = loadConfig2();
@@ -102690,11 +102825,11 @@ function scheduleAlwaysAllowPersistDrain() {
   }, ALWAYS_ALLOW_DRAIN_INTERVAL_MS);
   timer3.unref?.();
 }
-var ACCESS_FILE = join69(STATE_DIR, "access.json");
-var APPROVED_DIR = join69(STATE_DIR, "approved");
-var ENV_FILE = join69(STATE_DIR, ".env");
-var INBOX_DIR = join69(STATE_DIR, "inbox");
-var PEOPLE_FILE = join69(STATE_DIR, "people.json");
+var ACCESS_FILE = join68(STATE_DIR, "access.json");
+var APPROVED_DIR = join68(STATE_DIR, "approved");
+var ENV_FILE = join68(STATE_DIR, ".env");
+var INBOX_DIR = join68(STATE_DIR, "inbox");
+var PEOPLE_FILE = join68(STATE_DIR, "people.json");
 function triggerSelfRestart(targetAgent, reason, delayMs = 300) {
   const isDocker = process.env.SWITCHROOM_RUNTIME === "docker";
   const selfAgent = process.env.SWITCHROOM_AGENT_NAME;
@@ -102759,7 +102894,7 @@ function formatBootVersion() {
 }
 try {
   chmodSync14(ENV_FILE, 384);
-  for (const line of readFileSync60(ENV_FILE, "utf8").split(`
+  for (const line of readFileSync61(ENV_FILE, "utf8").split(`
 `)) {
     const m = line.match(/^(\w+)=(.*)$/);
     if (m && process.env[m[1]] === undefined)
@@ -102780,7 +102915,7 @@ var bot;
 var lastGetUpdatesHeartbeatMs = Date.now();
 var GRAMMY_VERSION = (() => {
   try {
-    const raw = readFileSync60(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
+    const raw = readFileSync61(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
     return JSON.parse(raw).version ?? "unknown";
   } catch {
     return "unknown";
@@ -102819,12 +102954,12 @@ function assertSendable(f) {
   }
   let real, stateReal;
   try {
-    real = realpathSync4(f);
-    stateReal = realpathSync4(STATE_DIR);
+    real = realpathSync5(f);
+    stateReal = realpathSync5(STATE_DIR);
   } catch {
     throw new Error(`refusing to send file \u2014 cannot resolve real path: ${f}`);
   }
-  const inbox = join69(stateReal, "inbox");
+  const inbox = join68(stateReal, "inbox");
   if (real.startsWith(stateReal + sep4) && !real.startsWith(inbox + sep4)) {
     throw new Error(`refusing to send channel state: ${f}`);
   }
@@ -102843,7 +102978,7 @@ function assertSendable(f) {
 }
 function readAccessFile() {
   try {
-    const raw = readFileSync60(ACCESS_FILE, "utf8");
+    const raw = readFileSync61(ACCESS_FILE, "utf8");
     const parsed = JSON.parse(raw);
     const allowFrom = validateStringArray("allowFrom", parsed.allowFrom ?? []);
     const groups = {};
@@ -102905,7 +103040,7 @@ function loadAccess() {
 }
 function readPeopleFile() {
   try {
-    const raw = readFileSync60(PEOPLE_FILE, "utf8");
+    const raw = readFileSync61(PEOPLE_FILE, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.entries))
       return [];
@@ -102949,7 +103084,7 @@ var HISTORY_ENABLED = HISTORY_ACCESS.historyEnabled !== false;
 if (isGatewayMain && HISTORY_ENABLED) {
   try {
     initHistory(STATE_DIR, HISTORY_ACCESS.historyRetentionDays ?? 30);
-    process.stderr.write(`telegram gateway: history capture enabled at ${join69(STATE_DIR, "history.db")}
+    process.stderr.write(`telegram gateway: history capture enabled at ${join68(STATE_DIR, "history.db")}
 `);
   } catch (err) {
     process.stderr.write(`telegram gateway: history init failed (${err.message}) \u2014 capture disabled
@@ -102968,12 +103103,12 @@ if (isGatewayMain)
     let markerTurnKey = null;
     let markerAgeMs = null;
     try {
-      const markerPath = join69(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
-      if (existsSync57(markerPath)) {
+      const markerPath = join68(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
+      if (existsSync58(markerPath)) {
         const st = statSync23(markerPath);
         markerAgeMs = Date.now() - st.mtimeMs;
         try {
-          const payload = JSON.parse(readFileSync60(markerPath, "utf8"));
+          const payload = JSON.parse(readFileSync61(markerPath, "utf8"));
           if (typeof payload.turnKey === "string" && payload.turnKey.length > 0) {
             markerTurnKey = payload.turnKey;
           }
@@ -102993,10 +103128,10 @@ if (isGatewayMain)
       process.stderr.write(`telegram gateway: turn-registry boot-reaper stamped ${reaped} orphaned turn(s)` + `${timeoutTurnKey ? ` (turnKey=${timeoutTurnKey} as 'timeout', markerAgeMs=${markerAgeMs})` : " as 'restart'"}
 `);
     } else {
-      process.stderr.write(`telegram gateway: turn-registry initialized at ${join69(agentDir, "telegram", "registry.db")}
+      process.stderr.write(`telegram gateway: turn-registry initialized at ${join68(agentDir, "telegram", "registry.db")}
 `);
     }
-    const bridgeDeadMarker = consumeBridgeDeadEscalationMarker(join69(STATE_DIR, "bridge-dead-escalation.json"));
+    const bridgeDeadMarker = consumeBridgeDeadEscalationMarker(join68(STATE_DIR, "bridge-dead-escalation.json"));
     if (bridgeDeadMarker != null) {
       bridgeDeadPriorStreak = bridgeDeadMarker.count ?? 1;
       process.stderr.write(`telegram gateway: boot: prior restart was a bridge-dead escalation (reason=${bridgeDeadMarker.reason}` + `, consecutive=${bridgeDeadPriorStreak}` + `${bridgeDeadMarker.crashTail ? `, crashTail=${bridgeDeadMarker.crashTail}` : ""})
@@ -103009,7 +103144,7 @@ if (isGatewayMain)
     const pending2 = findLatestTurnIfInterrupted(turnsDb);
     const selfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
     if (pending2 != null && selfAgent) {
-      const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join69(STATE_DIR, "clean-shutdown.json");
+      const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join68(STATE_DIR, "clean-shutdown.json");
       const bootResumeCleanMarker = readCleanShutdownMarker(bootResumeMarkerPath);
       const bootResumeForceAlways = process.env.SWITCHROOM_BOOT_RESUME_ALWAYS === "1";
       const bootResumeMode = parseBootResumeMode(process.env.SWITCHROOM_BOOT_RESUME);
@@ -103122,7 +103257,7 @@ if (isGatewayMain)
 `);
       }
     }
-    const pendingEnvPath = join69(agentDir, ".pending-turn.env");
+    const pendingEnvPath = join68(agentDir, ".pending-turn.env");
     try {
       if (pending2 != null) {
         const lines = [
@@ -103142,7 +103277,7 @@ if (isGatewayMain)
         renameSync27(pendingEnvTmp, pendingEnvPath);
         process.stderr.write(`telegram gateway: pending-turn env written to ${pendingEnvPath} turnKey=${pending2.turn_key} endedVia=${pending2.ended_via ?? "open"}
 `);
-      } else if (existsSync57(pendingEnvPath)) {
+      } else if (existsSync58(pendingEnvPath)) {
         rmSync8(pendingEnvPath, { force: true });
         process.stderr.write(`telegram gateway: pending-turn env cleared (clean previous shutdown)
 `);
@@ -103250,7 +103385,7 @@ function checkApprovals() {
     return;
   }
   for (const senderId of files) {
-    const file = join69(APPROVED_DIR, senderId);
+    const file = join68(APPROVED_DIR, senderId);
     bot.api.sendMessage(senderId, "Paired! Say hi to Claude.").then(() => rmSync8(file, { force: true }), (err) => {
       process.stderr.write(`telegram gateway: failed to send approval confirm: ${err}
 `);
@@ -103425,12 +103560,12 @@ function noteAgentOutputAt(key, ts) {
       lastAgentOutputAt.delete(oldest);
   }
 }
-var OBLIGATION_STORE_PATH = join69(STATE_DIR, "obligations.json");
+var OBLIGATION_STORE_PATH = join68(STATE_DIR, "obligations.json");
 var obligationStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
   writeFileSync: (p, d) => writeFileSync50(p, d),
   renameSync: (a, b) => renameSync27(a, b),
-  existsSync: (p) => existsSync57(p),
+  existsSync: (p) => existsSync58(p),
   fsyncFileSync: fsyncPathSync,
   fsyncDirSync: fsyncPathSync,
   unlinkSync: unlinkSync31
@@ -105773,28 +105908,28 @@ var PIN_STATUS_WHILE_WORKING = (() => {
 })();
 var statusPinClaims = new Map;
 var statusPinRightsCache = new PinRightsCache2;
-var STATUS_PIN_STORE_PATH = join69(STATE_DIR, "status-pins.json");
+var STATUS_PIN_STORE_PATH = join68(STATE_DIR, "status-pins.json");
 var statusPinStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
   writeFileSync: (p, d) => writeFileSync50(p, d),
   renameSync: (a, b) => renameSync27(a, b),
-  existsSync: (p) => existsSync57(p)
+  existsSync: (p) => existsSync58(p)
 };
 var statusPinPersistEnabled = !STATIC && PIN_STATUS_WHILE_WORKING;
-var ACTIVITY_CARD_STORE_PATH = join69(STATE_DIR, "activity-cards-pending.json");
+var ACTIVITY_CARD_STORE_PATH = join68(STATE_DIR, "activity-cards-pending.json");
 var activityCardStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
   writeFileSync: (p, d) => writeFileSync50(p, d),
   renameSync: (a, b) => renameSync27(a, b),
-  existsSync: (p) => existsSync57(p)
+  existsSync: (p) => existsSync58(p)
 };
 var activityCardPersistEnabled = !STATIC;
-var QUEUED_CARD_STORE_PATH = join69(STATE_DIR, "queued-cards-pending.json");
+var QUEUED_CARD_STORE_PATH = join68(STATE_DIR, "queued-cards-pending.json");
 var queuedCardStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
   writeFileSync: (p, d) => writeFileSync50(p, d),
   renameSync: (a, b) => renameSync27(a, b),
-  existsSync: (p) => existsSync57(p)
+  existsSync: (p) => existsSync58(p)
 };
 var queuedCardPersistEnabled = !STATIC;
 function persistQueuedCard(key, chatId, threadId, messageId) {
@@ -106081,7 +106216,7 @@ async function unpinAllStatusPins() {
   }
 }
 var stalePinSweepEligible = false;
-var STALE_PIN_SWEEP_STORE_PATH = join69(STATE_DIR, "stale-pin-sweep.json");
+var STALE_PIN_SWEEP_STORE_PATH = join68(STATE_DIR, "stale-pin-sweep.json");
 var stalePinSweeper = createGatewayStalePinSweeper({
   telegram: { handle: () => lockedBot, call: robustApiCall },
   claims: () => statusPinClaims.values(),
@@ -106090,9 +106225,9 @@ var stalePinSweeper = createGatewayStalePinSweeper({
   store: {
     path: STALE_PIN_SWEEP_STORE_PATH,
     fs: {
-      readFileSync: (p) => readFileSync60(p, "utf-8"),
+      readFileSync: (p) => readFileSync61(p, "utf-8"),
       writeFileSync: (p, data) => atomicWriteFileSync(p, data, 384),
-      existsSync: (p) => existsSync57(p)
+      existsSync: (p) => existsSync58(p)
     }
   },
   allowUnpinAllForumTopic: process.env.SWITCHROOM_PIN_SWEEP_UNPIN_ALL_TOPIC == null ? undefined : process.env.SWITCHROOM_PIN_SWEEP_UNPIN_ALL_TOPIC === "1"
@@ -106122,12 +106257,12 @@ var getPinnedProgressCardMessageId = null;
 var completeProgressCardTurn = null;
 var subagentWatcher = null;
 var workerActivityFeed = null;
-var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join69(STATE_DIR, "gateway.sock");
+var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join68(STATE_DIR, "gateway.sock");
 if (isGatewayMain)
   mkdirSync51(STATE_DIR, { recursive: true, mode: 448 });
-var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join69(STATE_DIR, "gateway.pid.json");
-var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join69(STATE_DIR, "gateway-session.json");
-var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join69(STATE_DIR, "clean-shutdown.json");
+var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join68(STATE_DIR, "gateway.pid.json");
+var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join68(STATE_DIR, "gateway-session.json");
+var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join68(STATE_DIR, "clean-shutdown.json");
 var GATEWAY_STARTED_AT_MS = Date.now();
 var BOOT_CARD_ENABLED = process.env.SWITCHROOM_BOOT_CARD !== "false";
 var activeBootCard = null;
@@ -106156,7 +106291,7 @@ function ensureIssuesCard(chatId, threadId) {
     bot: botApi,
     log: (msg) => process.stderr.write(`telegram gateway: ${msg}
 `),
-    persistPath: join69(stateDir, "issues-card.json")
+    persistPath: join68(stateDir, "issues-card.json")
   });
   activeIssuesWatcher = startIssuesWatcher({
     stateDir,
@@ -106361,13 +106496,13 @@ if (isGatewayMain)
 var inboundSpool;
 if (isGatewayMain)
   inboundSpool = STATIC ? undefined : createInboundSpool({
-    path: join69(STATE_DIR, "inbound-spool.jsonl"),
+    path: join68(STATE_DIR, "inbound-spool.jsonl"),
     fs: {
       appendFileSync: (p, d) => appendFileSync9(p, d),
-      readFileSync: (p) => readFileSync60(p, "utf8"),
+      readFileSync: (p) => readFileSync61(p, "utf8"),
       writeFileSync: (p, d) => writeFileSync50(p, d),
       renameSync: (a, b) => renameSync27(a, b),
-      existsSync: (p) => existsSync57(p),
+      existsSync: (p) => existsSync58(p),
       statSizeSync: (p) => statSync23(p).size,
       fsyncFileSync: fsyncPathSync,
       fsyncDirSync: fsyncPathSync
@@ -106431,13 +106566,13 @@ async function maybeRedeliverUndeliveredAnswer() {
   let transcriptText;
   try {
     const projectsDir = getProjectsDirForCwd();
-    const path3 = join69(projectsDir, `${sessionId}.jsonl`);
-    if (!existsSync57(path3)) {
+    const path3 = join68(projectsDir, `${sessionId}.jsonl`);
+    if (!existsSync58(path3)) {
       process.stderr.write(`telegram gateway: crash-redelivery \u2014 transcript not found for turnKey=${turn.turn_key} session=${sessionId} (${path3}); skipping
 `);
       return;
     }
-    transcriptText = readFileSync60(path3, "utf8");
+    transcriptText = readFileSync61(path3, "utf8");
   } catch (err) {
     process.stderr.write(`telegram gateway: crash-redelivery \u2014 transcript read failed turnKey=${turn.turn_key}: ${err.message}
 `);
@@ -106596,8 +106731,8 @@ var bridgeDeadWatchdog = createBridgeDeadWatchdog({
   isSessionAlive: () => findAgentProcessInContainer2()?.comm === "claude",
   isShuttingDown: () => shuttingDown,
   escalate: (reason) => triggerSelfRestart(process.env.SWITCHROOM_AGENT_NAME ?? "", reason, 1500),
-  crashLogPath: join69(STATE_DIR, "bridge-crash.log"),
-  markerPath: join69(STATE_DIR, "bridge-dead-escalation.json"),
+  crashLogPath: join68(STATE_DIR, "bridge-crash.log"),
+  markerPath: join68(STATE_DIR, "bridge-dead-escalation.json"),
   log: (line) => process.stderr.write(`${line}
 `),
   priorStreak: bridgeDeadPriorStreak,
@@ -106703,8 +106838,8 @@ if (isGatewayMain)
               probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
               tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
               dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-              configSnapshotPath: join69(resolvedAgentDirForCard, ".config-snapshot.json"),
-              bootCardStatePath: join69(resolvedAgentDirForCard, ".boot-card-msgid.json"),
+              configSnapshotPath: join68(resolvedAgentDirForCard, ".config-snapshot.json"),
+              bootCardStatePath: join68(resolvedAgentDirForCard, ".boot-card-msgid.json"),
               floodStatePath: FLOOD_STATE_PATH,
               ...updateOutcomeLine ? { updateOutcomeLine } : {}
             }, ackMsgId).then((handle) => {
@@ -107371,7 +107506,7 @@ if (isGatewayMain)
       const receiverUid = receiverUidRaw ? Number(receiverUidRaw) : NaN;
       if (Number.isInteger(receiverUid))
         allowedUids.push(receiverUid);
-      const socketPath = join69(STATE_DIR, "webhook.sock");
+      const socketPath = join68(STATE_DIR, "webhook.sock");
       const webhookInject = (agentName3, inbound) => {
         const msg = inbound;
         const delivered = ipcServer.sendToAgent(agentName3, msg);
@@ -107622,9 +107757,9 @@ function redactOutboundText(text5, site) {
 var VOICE_OUT_DEFAULT_CHUNK_CHARS = 600;
 var VOICE_OUT_HARD_CHUNK_CAP = 4096;
 var voiceOnDemandCache = new VoiceOnDemandCache({
-  persistPath: join69(STATE_DIR, "voice-ondemand.json")
+  persistPath: join68(STATE_DIR, "voice-ondemand.json")
 });
-var VOICE_CACHE_DIR = join69(STATE_DIR, "voice-cache");
+var VOICE_CACHE_DIR = join68(STATE_DIR, "voice-cache");
 var voicePreSynthQueue = new PreSynthQueue({
   runJob: async (job) => {
     const sidecarToken = await materializeSidecarToken2();
@@ -108026,11 +108161,11 @@ async function executeSendGif(rawArgs) {
   };
 }
 async function publishToTelegraph(text5, shortName, authorName) {
-  const accountPath = join69(STATE_DIR, "telegraph-account.json");
+  const accountPath = join68(STATE_DIR, "telegraph-account.json");
   let account = null;
   try {
-    if (existsSync57(accountPath)) {
-      const raw = readFileSync60(accountPath, "utf-8");
+    if (existsSync58(accountPath)) {
+      const raw = readFileSync61(accountPath, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed.shortName && parsed.accessToken) {
         account = parsed;
@@ -108166,7 +108301,7 @@ _The secret was NOT saved. The agent can re-request with \`request_secret\`._`,
 }
 function readLiveSwitchroomConfigText() {
   const cfgPath = process.env.SWITCHROOM_CONFIG ?? findConfigFile2();
-  return readFileSync60(cfgPath, "utf8");
+  return readFileSync61(cfgPath, "utf8");
 }
 async function executeReact(args) {
   if (!args.chat_id)
@@ -109579,7 +109714,7 @@ function restartMarkerPath() {
   const agentDir = resolveAgentDirFromEnv();
   if (!agentDir)
     return null;
-  return join69(agentDir, "restart-pending.json");
+  return join68(agentDir, "restart-pending.json");
 }
 function writeRestartMarker(marker) {
   const p = restartMarkerPath();
@@ -109605,7 +109740,7 @@ function readRestartMarker() {
   if (!p)
     return null;
   try {
-    return JSON.parse(readFileSync60(p, "utf8"));
+    return JSON.parse(readFileSync61(p, "utf8"));
   } catch {
     return null;
   }
@@ -109754,7 +109889,7 @@ var _dockerReachable;
 function isDockerReachable() {
   if (_dockerReachable !== undefined)
     return _dockerReachable;
-  if (!existsSync57("/var/run/docker.sock")) {
+  if (!existsSync58("/var/run/docker.sock")) {
     _dockerReachable = false;
     return _dockerReachable;
   }
@@ -109771,7 +109906,7 @@ function _resetDockerReachableCache() {
 }
 function spawnSwitchroomDetached(args, onFailure) {
   const fullArgs = SWITCHROOM_CONFIG ? ["--config", SWITCHROOM_CONFIG, ...args] : args;
-  const logPath = join69(STATE_DIR, "detached-spawn.log");
+  const logPath = join68(STATE_DIR, "detached-spawn.log");
   let outFd = null;
   try {
     mkdirSync51(STATE_DIR, { recursive: true });
@@ -109802,7 +109937,7 @@ function spawnSwitchroomDetached(args, onFailure) {
         return;
       let tail = "";
       try {
-        const full = readFileSync60(logPath, "utf8");
+        const full = readFileSync61(logPath, "utf8");
         tail = full.split(`
 `).slice(-30).join(`
 `).trim();
@@ -110064,10 +110199,10 @@ ${preBlock(formatSwitchroomOutput(detail))}`, { html: true });
 }
 function readRecentDenialsForAgent(agentName3, windowMs, limit) {
   try {
-    const auditPath = join69(homedir20(), ".switchroom", "vault-audit.log");
-    if (!existsSync57(auditPath))
+    const auditPath = join68(homedir20(), ".switchroom", "vault-audit.log");
+    if (!existsSync58(auditPath))
       return [];
-    const raw = readFileSync60(auditPath, "utf8");
+    const raw = readFileSync61(auditPath, "utf8");
     return recentDenialsFromAuditLog(raw, { agentName: agentName3, windowMs, limit });
   } catch {
     return [];
@@ -110118,7 +110253,7 @@ async function buildAgentMetadata(agentName3) {
   try {
     const agentDir = resolveAgentDirFromEnv();
     if (agentDir) {
-      const raw = readFileSync60(join69(agentDir, ".claude", ".claude.json"), "utf8");
+      const raw = readFileSync61(join68(agentDir, ".claude", ".claude.json"), "utf8");
       claudeJson = JSON.parse(raw);
     }
   } catch {}
@@ -110247,7 +110382,7 @@ function buildModelDeps(restartCtx) {
       try {
         const agentDir = resolveAgentDirFromEnv();
         if (agentDir) {
-          const local = await fetchQuota2({ claudeConfigDir: join69(agentDir, ".claude") });
+          const local = await fetchQuota2({ claudeConfigDir: join68(agentDir, ".claude") });
           if (local.ok)
             return formatQuotaLine2(local.data);
         }
@@ -110494,9 +110629,9 @@ function effortMenuReplyMarkup(reply) {
 function flushAgentHandoff(agentDir) {
   let removed = 0;
   for (const fname of [".handoff.md", ".handoff-topic"]) {
-    const p = join69(agentDir, fname);
+    const p = join68(agentDir, fname);
     try {
-      if (existsSync57(p)) {
+      if (existsSync58(p)) {
         unlinkSync31(p);
         removed++;
       }
@@ -110552,7 +110687,7 @@ async function handleNewCommand(ctx) {
   writeRestartMarker({ chat_id: chatId, thread_id: threadId ?? null, ack_message_id: ackId, ts: Date.now() });
   if (agentDir != null) {
     try {
-      writeFileSync50(join69(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
+      writeFileSync50(join68(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
 `, "utf8");
     } catch (err) {
       process.stderr.write(`telegram gateway: failed to write force-fresh marker: ${err}
@@ -110665,16 +110800,16 @@ function buildFolderPickerDeps() {
   };
 }
 var lockoutOps = {
-  readFileSync: (p, enc) => readFileSync60(p, enc),
+  readFileSync: (p, enc) => readFileSync61(p, enc),
   writeFileSync: (p, data, opts) => writeFileSync50(p, data, opts),
-  existsSync: (p) => existsSync57(p),
+  existsSync: (p) => existsSync58(p),
   mkdirSync: (p, opts) => mkdirSync51(p, opts),
-  joinPath: (...parts) => join69(...parts)
+  joinPath: (...parts) => join68(...parts)
 };
 var FLEET_FALLBACK_DEDUP_MS = 30000;
 function isAuthBrokerSocketReachable() {
   try {
-    return existsSync57(resolveAuthBrokerSocketPath2());
+    return existsSync58(resolveAuthBrokerSocketPath2());
   } catch {
     return false;
   }
@@ -110929,7 +111064,7 @@ async function runCreditWatch() {
   if (!agentDir)
     return;
   const agentName3 = getMyAgentName();
-  const claudeConfigDir = join69(agentDir, ".claude");
+  const claudeConfigDir = join68(agentDir, ".claude");
   const stateDir = STATE_DIR;
   const reason = readClaudeJsonOverage(claudeConfigDir);
   const prev = loadCreditState(stateDir);
@@ -112685,7 +112820,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
       await switchroomReply(ctx, "**/usage:** cannot resolve agent dir.", { html: true });
       return;
     }
-    const result = await fetchQuota2({ claudeConfigDir: join69(agentDir, ".claude") });
+    const result = await fetchQuota2({ claudeConfigDir: join68(agentDir, ".claude") });
     if (!result.ok) {
       await switchroomReply(ctx, `**/usage:** ${escapeHtmlForTg2(result.reason)}`, { html: true });
       return;
@@ -113072,7 +113207,7 @@ ${interimLabel}` : interimLabel
           const unifiedDiff = (() => {
             try {
               const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-              const raw = readFileSync60(cfgPath, "utf8");
+              const raw = readFileSync61(cfgPath, "utf8");
               return synthesizeAllowRuleDiff({ agentName: agentName3, rule: chosen.rule, configText: raw });
             } catch (err) {
               process.stderr.write(`telegram gateway: always-allow diff synth failed: ${err.message}
@@ -113941,7 +114076,7 @@ async function startGateway() {
                         return;
                       }
                     })();
-                    const resolvedAgentDirForBootCard = agentDir ?? join69(homedir20(), ".switchroom", "agents", agentSlug);
+                    const resolvedAgentDirForBootCard = agentDir ?? join68(homedir20(), ".switchroom", "agents", agentSlug);
                     const handle = await startBootCard(chatId, threadId, botApiForCard, {
                       agentName: agentDisplayName,
                       agentSlug,
@@ -113955,8 +114090,8 @@ async function startGateway() {
                       probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
                       tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
                       dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-                      configSnapshotPath: join69(resolvedAgentDirForBootCard, ".config-snapshot.json"),
-                      bootCardStatePath: join69(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
+                      configSnapshotPath: join68(resolvedAgentDirForBootCard, ".config-snapshot.json"),
+                      bootCardStatePath: join68(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
                       floodStatePath: FLOOD_STATE_PATH,
                       ...updateOutcomeLine ? { updateOutcomeLine } : {}
                     }, ackMsgId);
@@ -113989,7 +114124,7 @@ async function startGateway() {
           if (smAgentDir) {
             const resolutionTimeoutMs = resolveSessionModelResolutionTimeoutMs(process.env.SWITCHROOM_SESSION_MODEL_RESOLUTION_TIMEOUT_MS);
             const resolved = await waitForSessionModelResolution({
-              barrierExists: () => existsSync57(join69(smAgentDir, ".session-model-resolved")),
+              barrierExists: () => existsSync58(join68(smAgentDir, ".session-model-resolved")),
               timeoutMs: resolutionTimeoutMs
             });
             if (!resolved) {
@@ -113997,10 +114132,10 @@ async function startGateway() {
               process.stderr.write(`telegram gateway: gw /model relaunch UNRESOLVED agent=${getMyAgentName()} target=${target} (barrier timeout after ${resolutionTimeoutMs}ms)
 `);
             } else {
-              const activePath = join69(smAgentDir, ".active-session-model");
-              if (existsSync57(activePath)) {
+              const activePath = join68(smAgentDir, ".active-session-model");
+              if (existsSync58(activePath)) {
                 try {
-                  const launched = readFileSync60(activePath, "utf8").trim();
+                  const launched = readFileSync61(activePath, "utf8").trim();
                   const configured = (() => {
                     const d = switchroomExecJson(["agent", "list"]);
                     const raw = d?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
@@ -114033,24 +114168,24 @@ async function startGateway() {
                     deliverModelSwitchBootNotice({
                       ...modelBootCardDeps,
                       confirmation,
-                      hasSessionModelAlert: existsSync57(join69(smAgentDir, ".session-model-alert"))
+                      hasSessionModelAlert: existsSync58(join68(smAgentDir, ".session-model-alert"))
                     });
                   }
                 } catch {}
               }
-              const activeEffortPath = join69(smAgentDir, ".active-session-effort");
-              if (existsSync57(activeEffortPath)) {
+              const activeEffortPath = join68(smAgentDir, ".active-session-effort");
+              if (existsSync58(activeEffortPath)) {
                 try {
-                  const launchedEffort = readFileSync60(activeEffortPath, "utf8").trim();
+                  const launchedEffort = readFileSync61(activeEffortPath, "utf8").trim();
                   const configuredEffort = getConfiguredEffortForPersist();
                   sessionEffortOverride = launchedEffort.length > 0 && launchedEffort !== configuredEffort ? launchedEffort : null;
                 } catch {}
               }
-              const alertPath = join69(smAgentDir, ".session-model-alert");
-              if (existsSync57(alertPath)) {
+              const alertPath = join68(smAgentDir, ".session-model-alert");
+              if (existsSync58(alertPath)) {
                 let alertText = null;
                 try {
-                  alertText = readFileSync60(alertPath, "utf8").trim();
+                  alertText = readFileSync61(alertPath, "utf8").trim();
                 } catch {
                   alertText = null;
                 }