switchroom 0.19.8 → 0.19.9

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.8", COMMIT_SHA = "c356d3ba";
+var VERSION = "0.19.9", COMMIT_SHA = "9d791e63";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -23939,7 +23939,7 @@ function bindingsForAgent(agentName, mw, microsoftAccounts) {
 // src/agents/reconcile-default-skills.ts
 import { existsSync as existsSync8, lstatSync as lstatSync2, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readlinkSync as readlinkSync3, rmSync as rmSync2, symlinkSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join6, resolve as resolve5 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join6, relative, resolve as resolve5 } from "node:path";
 function warnMissingPoolDir(poolDir) {
   if (warnedMissingPool.has(poolDir))
     return;
@@ -23947,6 +23947,14 @@ function warnMissingPoolDir(poolDir) {
   process.stderr.write(`switchroom: bundled skills pool dir not found at ${poolDir} \u2014 run \`switchroom update\` to install it.
 `);
 }
+function warnMissingBuiltinDefault(poolDir, key) {
+  const marker = `${poolDir} ${key}`;
+  if (warnedMissingDefault.has(marker))
+    return;
+  warnedMissingDefault.add(marker);
+  process.stderr.write(`switchroom: ERROR \u2014 builtin default skill "${key}" is missing from the bundled pool ` + `(${poolDir}). It ships in the CLI package but was not synced. ` + `Re-run \`switchroom update\` to repair the pool; if it persists this is a packaging bug.
+`);
+}
 function getBundledSkillsPoolDir() {
   return resolve5(homedir3(), ".switchroom/skills/_bundled");
 }
@@ -23961,6 +23969,27 @@ function isOwnedStaleLink(target, poolDir) {
     return true;
   return false;
 }
+function absoluteLinkTarget(linkPath, storedTarget) {
+  return isAbsolute(storedTarget) ? storedTarget : resolve5(dirname2(linkPath), storedTarget);
+}
+function linkTargetFor(dest, src) {
+  return relative(dirname2(dest), src);
+}
+function isOwnedBundledLink(dest, poolDir) {
+  let stored = null;
+  try {
+    if (!lstatSync2(dest).isSymbolicLink())
+      return false;
+    stored = readlinkSync3(dest);
+  } catch {
+    return false;
+  }
+  if (!stored)
+    return false;
+  const resolved = isAbsolute(stored) ? stored : resolve5(dirname2(dest), stored);
+  const poolPrefix = poolDir.endsWith("/") ? poolDir : poolDir + "/";
+  return resolved === poolDir || resolved.startsWith(poolPrefix);
+}
 function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuiltinDefaultSkillEntries(), poolDir = getBundledSkillsPoolDir()) {
   const name = agentDir.split("/").pop() ?? agentDir;
   const result = {
@@ -23969,6 +23998,8 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
     alreadyPresent: [],
     optedOut: [],
     conflicts: [],
+    missingFromPool: [],
+    pruned: [],
     changed: false
   };
   const claudeDir = join6(agentDir, ".claude");
@@ -23982,15 +24013,32 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
     return result;
   }
   for (const entry of defaults) {
+    const dest = join6(targetDir, entry.key);
     if (optOuts[entry.optOutKey] === false) {
       result.optedOut.push(entry.key);
+      if (isOwnedBundledLink(dest, poolDir)) {
+        try {
+          rmSync2(dest, { force: true });
+          result.pruned.push(entry.key);
+          result.changed = true;
+        } catch {}
+      }
       continue;
     }
     const src = join6(poolDir, entry.key);
     if (!existsSync8(src)) {
+      result.missingFromPool.push(entry.key);
+      warnMissingBuiltinDefault(poolDir, entry.key);
+      if (isOwnedBundledLink(dest, poolDir)) {
+        try {
+          rmSync2(dest, { force: true });
+          result.pruned.push(entry.key);
+          result.changed = true;
+        } catch {}
+      }
       continue;
     }
-    const dest = join6(targetDir, entry.key);
+    const relTarget = linkTargetFor(dest, src);
     let existing;
     try {
       existing = lstatSync2(dest);
@@ -24003,11 +24051,12 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
         try {
           currentTarget = readlinkSync3(dest);
         } catch {}
-        if (currentTarget === src) {
+        if (currentTarget === relTarget) {
           result.alreadyPresent.push(entry.key);
           continue;
         }
-        if (currentTarget && isOwnedStaleLink(currentTarget, poolDir)) {
+        const resolvedTarget = currentTarget ? absoluteLinkTarget(dest, currentTarget) : null;
+        if (resolvedTarget && isOwnedStaleLink(resolvedTarget, poolDir)) {
           try {
             rmSync2(dest, { force: true });
           } catch {}
@@ -24021,7 +24070,7 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
       }
     }
     try {
-      symlinkSync(src, dest);
+      symlinkSync(relTarget, dest);
       result.added.push(entry.key);
       result.changed = true;
     } catch (err) {
@@ -24030,10 +24079,11 @@ function reconcileAgentDefaultSkills(agentDir, optOuts = {}, defaults = getBuilt
   }
   return result;
 }
-var warnedMissingPool;
+var warnedMissingPool, warnedMissingDefault;
 var init_reconcile_default_skills = __esm(() => {
   init_scaffold_integration();
   warnedMissingPool = new Set;
+  warnedMissingDefault = new Set;
 });
 
 // src/agents/sub-agent-telegram-prompt.ts
@@ -24089,7 +24139,7 @@ import {
   copyFileSync as copyFileSync2,
   unlinkSync
 } from "node:fs";
-import { basename as basename2, dirname as dirname2, resolve as resolve6 } from "node:path";
+import { basename as basename2, dirname as dirname3, resolve as resolve6 } from "node:path";
 function defaultStatePath() {
   return resolveStatePath("topics.json");
 }
@@ -24116,7 +24166,7 @@ function loadTopicState(statePath) {
 }
 function saveTopicState(state, statePath) {
   const path = statePath ?? defaultStatePath();
-  const dir = dirname2(path);
+  const dir = dirname3(path);
   if (!existsSync9(dir)) {
     mkdirSync4(dir, { recursive: true });
   }
@@ -24388,7 +24438,7 @@ import {
   lstatSync as lstatSync3,
   realpathSync as realpathSync2
 } from "node:fs";
-import { dirname as dirname3, basename as basename3, resolve as resolve7 } from "node:path";
+import { dirname as dirname4, basename as basename3, resolve as resolve7 } from "node:path";
 function atomicWriteFileSync2(path, data, mode) {
   let effectivePath = path;
   try {
@@ -24396,7 +24446,7 @@ function atomicWriteFileSync2(path, data, mode) {
       effectivePath = realpathSync2(path);
     }
   } catch {}
-  const dir = dirname3(resolve7(effectivePath));
+  const dir = dirname4(resolve7(effectivePath));
   const tmp = resolve7(dir, `.${basename3(effectivePath)}.${process.pid}.${Date.now()}.tmp`);
   try {
     const fd = openSync4(tmp, "wx", mode);
@@ -24533,7 +24583,7 @@ function createVault(passphrase, vaultPath) {
   if (existsSync11(vaultPath)) {
     throw new VaultError(`Vault file already exists: ${vaultPath}`);
   }
-  const dir = dirname3(vaultPath);
+  const dir = dirname4(vaultPath);
   if (!existsSync11(dir)) {
     mkdirSync5(dir, { recursive: true, mode: 448 });
   }
@@ -26141,7 +26191,7 @@ import {
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { execSync, execFileSync as execFileSync6 } from "node:child_process";
-import { join as join11, resolve as resolve11 } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute2, join as join11, relative as relative2, resolve as resolve11 } from "node:path";
 import { createHash as createHash3 } from "node:crypto";
 function prependReplyDiscipline(rendered, context) {
   const replyDiscipline = renderReplyDisciplineFragment(context);
@@ -26527,7 +26577,8 @@ function migrateLegacySkillsDir(agentDir, skillsPool) {
     } catch {
       continue;
     }
-    if (target && target.startsWith(skillsPool)) {
+    const resolved = target ? isAbsolute2(target) ? target : resolve11(dirname5(entryPath), target) : null;
+    if (resolved && resolved.startsWith(skillsPool)) {
       try {
         rmSync4(entryPath, { force: true });
       } catch {}
@@ -26550,6 +26601,7 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
       console.warn(`  WARNING: skill "${name}" not found in pool (${skillsPool}) \u2014 skipping`);
       continue;
     }
+    const relTarget = relative2(dirname5(dest), src);
     let linkStat;
     try {
       linkStat = lstatSync4(dest);
@@ -26562,7 +26614,11 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
         try {
           target = readlinkSync4(dest);
         } catch {}
-        if (target && target.startsWith(skillsPool)) {
+        if (target === relTarget) {
+          continue;
+        }
+        const resolved = target ? isAbsolute2(target) ? target : resolve11(dirname5(dest), target) : null;
+        if (resolved && resolved.startsWith(skillsPool)) {
           try {
             rmSync4(dest, { force: true });
           } catch {}
@@ -26574,7 +26630,7 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
       }
     }
     try {
-      symlinkSync2(src, dest);
+      symlinkSync2(relTarget, dest);
     } catch (err) {
       console.warn(`  WARNING: failed to symlink skill "${name}": ${err.message}`);
     }
@@ -26590,10 +26646,11 @@ function syncGlobalSkills(agentDir, declared, skillsDirOverride) {
     } catch {
       continue;
     }
-    if (linkTarget && linkTarget.includes("/.switchroom/skills/_bundled/")) {
+    const resolved = linkTarget ? isAbsolute2(linkTarget) ? linkTarget : resolve11(dirname5(entryPath), linkTarget) : null;
+    if (resolved && resolved.includes("/.switchroom/skills/_bundled/")) {
       continue;
     }
-    if (linkTarget && linkTarget.startsWith(skillsPool)) {
+    if (resolved && resolved.startsWith(skillsPool)) {
       rmSync4(entryPath, { force: true });
     }
   }
@@ -26646,7 +26703,10 @@ function installSwitchroomSkills(agentDir, opts = {}) {
       try {
         currentTarget = readlinkSync4(dest);
       } catch {}
-      if (currentTarget !== join11(builtinSkillsDir, name))
+      if (!currentTarget)
+        continue;
+      const resolvedTarget = isAbsolute2(currentTarget) ? currentTarget : resolve11(dirname5(dest), currentTarget);
+      if (resolvedTarget !== join11(builtinSkillsDir, name))
         continue;
       try {
         rmSync4(dest, { force: true });
@@ -26657,6 +26717,7 @@ function installSwitchroomSkills(agentDir, opts = {}) {
   for (const name of switchroomSkillNames) {
     const src = join11(builtinSkillsDir, name);
     const dest = join11(targetDir, name);
+    const relTarget = relative2(dirname5(dest), src);
     let existing;
     try {
       existing = lstatSync4(dest);
@@ -26669,7 +26730,7 @@ function installSwitchroomSkills(agentDir, opts = {}) {
         try {
           currentTarget = readlinkSync4(dest);
         } catch {}
-        if (currentTarget === src)
+        if (currentTarget === relTarget)
           continue;
         try {
           rmSync4(dest, { force: true });
@@ -26679,7 +26740,7 @@ function installSwitchroomSkills(agentDir, opts = {}) {
       }
     }
     try {
-      symlinkSync2(src, dest);
+      symlinkSync2(relTarget, dest);
     } catch (err) {
       console.warn(`  WARNING: failed to symlink switchroom skill "${name}": ${err.message}`);
     }
@@ -27381,6 +27442,24 @@ function resolveWebkiteMcpEntry(_agentName, agentConfig, _switchroomConfig) {
     }
   };
 }
+function computeDesiredPermissionAllow(agentConfig, hindsightEnabled) {
+  const tools = agentConfig.tools ?? { allow: [], deny: [] };
+  const rawAllow = tools.allow ?? [];
+  const hasAllWildcard = rawAllow.includes("all");
+  const baseAllow = hasAllWildcard ? [...ALL_BUILTIN_TOOLS, ...rawAllow.filter((t) => t !== "all")] : rawAllow.filter((t) => t !== "all");
+  const dangerousMode = agentConfig.dangerous_mode === true;
+  const hadExplicitAllow = rawAllow.length > 0;
+  const readOnlyDefaults = !dangerousMode && !hadExplicitAllow ? DEFAULT_READ_ONLY_PREAPPROVED_TOOLS : [];
+  return dedupe2([
+    ...baseAllow,
+    ...readOnlyDefaults,
+    ...usesSwitchroomTelegramPlugin(agentConfig) ? SWITCHROOM_TELEGRAM_MCP_TOOLS : [],
+    ...hindsightEnabled ? HINDSIGHT_MCP_TOOLS : [],
+    ...AGENT_CONFIG_MCP_TOOLS,
+    ...HOSTD_MCP_TOOLS,
+    ...agentConfig.mcp_servers?.["webkite"] === false ? [] : WEBKITE_MCP_TOOLS
+  ]);
+}
 function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchroomConfig, userIdOverride, switchroomConfigPath) {
   const agentConfig = resolveAgentConfig(switchroomConfig?.defaults, switchroomConfig?.profiles, agentConfigRaw);
   const agentDir = resolve11(agentsDir, name);
@@ -27403,20 +27482,8 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
   const tools = agentConfig.tools ?? { allow: [], deny: [] };
   const rawAllow = tools.allow ?? [];
   const hasAllWildcard = rawAllow.includes("all");
-  const baseAllow = hasAllWildcard ? [...ALL_BUILTIN_TOOLS, ...rawAllow.filter((t) => t !== "all")] : rawAllow.filter((t) => t !== "all");
-  const dangerousMode = agentConfig.dangerous_mode === true;
-  const hadExplicitAllow = rawAllow.length > 0;
-  const readOnlyDefaults = !dangerousMode && !hadExplicitAllow ? DEFAULT_READ_ONLY_PREAPPROVED_TOOLS : [];
   const hindsightEnabled = isHindsightEnabled(switchroomConfig);
-  const permissionAllow = dedupe2([
-    ...baseAllow,
-    ...readOnlyDefaults,
-    ...usesSwitchroomTelegramPlugin(agentConfig) ? SWITCHROOM_TELEGRAM_MCP_TOOLS : [],
-    ...hindsightEnabled ? HINDSIGHT_MCP_TOOLS : [],
-    ...AGENT_CONFIG_MCP_TOOLS,
-    ...HOSTD_MCP_TOOLS,
-    ...agentConfig.mcp_servers?.["webkite"] === false ? [] : WEBKITE_MCP_TOOLS
-  ]);
+  const permissionAllow = computeDesiredPermissionAllow(agentConfig, hindsightEnabled);
   const hindsightAutoRecallEnabled = hindsightEnabled && agentConfig.memory?.auto_recall !== false;
   const hindsightBankId = agentConfig.memory?.collection ?? name;
   const hindsightApiBaseUrl = switchroomConfig?.memory?.config?.url ? switchroomConfig.memory.config.url.replace(/\/mcp\/?$/, "").replace(/\/$/, "") : HINDSIGHT_DEFAULT_API_BASE_URL;
@@ -28332,23 +28399,11 @@ function reconcileAgentInner(name, agentConfigRaw, agentsDir, telegramConfig, sw
   const tools = agentConfig.tools ?? { allow: [], deny: [] };
   const rawAllow = tools.allow ?? [];
   const hasAllWildcard = rawAllow.includes("all");
-  const baseAllow = hasAllWildcard ? [...ALL_BUILTIN_TOOLS, ...rawAllow.filter((t) => t !== "all")] : rawAllow.filter((t) => t !== "all");
-  const reconcileDangerousMode = agentConfig.dangerous_mode === true;
-  const reconcileHadExplicitAllow = rawAllow.length > 0;
-  const reconcileReadOnlyDefaults = !reconcileDangerousMode && !reconcileHadExplicitAllow ? DEFAULT_READ_ONLY_PREAPPROVED_TOOLS : [];
   const hindsightEnabled = isHindsightEnabled(switchroomConfig);
+  const desiredAllow = computeDesiredPermissionAllow(agentConfig, hindsightEnabled);
   if (Array.isArray(tools.allow)) {
     tools.allow = tools.allow.filter((p) => !LEGACY_SWITCHROOM_MCP_TOKENS.includes(p) && !LEGACY_HOSTD_BLANKET_TOKENS.includes(p));
   }
-  const desiredAllow = dedupe2([
-    ...baseAllow,
-    ...reconcileReadOnlyDefaults,
-    ...usesSwitchroomTelegramPlugin(agentConfig) ? SWITCHROOM_TELEGRAM_MCP_TOOLS : [],
-    ...hindsightEnabled ? HINDSIGHT_MCP_TOOLS : [],
-    ...AGENT_CONFIG_MCP_TOOLS,
-    ...HOSTD_MCP_TOOLS,
-    ...agentConfig.mcp_servers?.["webkite"] === false ? [] : WEBKITE_MCP_TOOLS
-  ]);
   const desiredDeny = dedupe2([
     ...tools.deny ?? [],
     ...webkiteDenyForAgent(agentConfig),
@@ -29606,7 +29661,7 @@ var init_scaffold = __esm(() => {
 
 // src/setup/host-capabilities.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
+import { dirname as dirname6 } from "node:path";
 function hostCapabilitiesPath() {
   return resolveStatePath("host-capabilities.json");
 }
@@ -29621,7 +29676,7 @@ function saveVoiceCapability(caps, now = () => new Date) {
     }
   };
   const path = hostCapabilitiesPath();
-  mkdirSync11(dirname4(path), { recursive: true });
+  mkdirSync11(dirname6(path), { recursive: true });
   writeFileSync5(path, JSON.stringify(doc, null, 2) + `
 `, {
     encoding: "utf-8",
@@ -29728,11 +29783,11 @@ var init_grants_db_path = __esm(() => {
 
 // src/agents/compose.ts
 import { existsSync as existsSync19, mkdirSync as mkdirSync13, readFileSync as readFileSync15, lstatSync as lstatSync5, readlinkSync as readlinkSync5, chmodSync as chmodSync4 } from "node:fs";
-import { join as join13, isAbsolute, dirname as dirname6, resolve as resolve13 } from "node:path";
+import { join as join13, isAbsolute as isAbsolute3, dirname as dirname8, resolve as resolve13 } from "node:path";
 function assertPlausibleHostHome(homePrefix) {
   if (homePrefix === "${HOME}")
     return;
-  const bad = !isAbsolute(homePrefix) || CONTAINER_ROOT_PREFIXES.some((p) => homePrefix === p || homePrefix.startsWith(p + "/"));
+  const bad = !isAbsolute3(homePrefix) || CONTAINER_ROOT_PREFIXES.some((p) => homePrefix === p || homePrefix.startsWith(p + "/"));
   if (!bad)
     return;
   throw new Error(`compose: refusing to generate \u2014 the host-home prefix resolved to "${homePrefix}", ` + `which is not a real host path (it looks like an in-container root). Emitting it as a ` + `bind-mount source would make docker auto-create empty dirs on the host and crash the ` + `fleet (start.sh missing \u2192 exec 127; broker EISDIR / SQLite "unable to open").
@@ -29976,8 +30031,8 @@ function conditionalMountPresent(probePath, hostHome, probeHome) {
     if (!lstatSync5(probePath).isSymbolicLink())
       return false;
     let target = readlinkSync5(probePath);
-    if (!isAbsolute(target))
-      target = resolve13(dirname6(probePath), target);
+    if (!isAbsolute3(target))
+      target = resolve13(dirname8(probePath), target);
     if (hostHome && probeHome && hostHome !== probeHome) {
       if (target.startsWith(hostHome + "/")) {
         return true;
@@ -30026,7 +30081,7 @@ function generateCompose(opts) {
   const lines = [];
   lines.push("# generated by switchroom \u2014 do not edit by hand.");
   lines.push("# Manual edits will be overwritten on the next `switchroom agent add`");
-  lines.push("# (or future `switchroom reconcile`). To customise an agent, edit");
+  lines.push("# or `switchroom apply`. To customise an agent, edit");
   lines.push("# switchroom.yaml and re-run the regenerating command.");
   lines.push("");
   lines.push(`# image tag: ${imageTag}`);
@@ -30698,7 +30753,7 @@ var init_operator_uid = () => {};
 import { chownSync as chownSync2 } from "node:fs";
 import { mkdir, readFile, writeFile, rename, copyFile } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
-import { basename as basename4, dirname as dirname7, join as join15 } from "node:path";
+import { basename as basename4, dirname as dirname9, join as join15 } from "node:path";
 function agentHadLiteLLMRouting(composeContent, agentName) {
   const lines = composeContent.split(`
 `);
@@ -30839,7 +30894,7 @@ async function computeComposeContent(opts) {
 async function writeComposeFile(opts) {
   const { content, imageTag, previous, previousImageTag } = await computeComposeContent(opts);
   const operatorUid = resolveOperatorUid();
-  await mkdir(dirname7(opts.composePath), { recursive: true });
+  await mkdir(dirname9(opts.composePath), { recursive: true });
   if (previous !== null) {
     try {
       await copyFile(opts.composePath, opts.composePath + ".bak");
@@ -30908,9 +30963,9 @@ var init_tmux = __esm(() => {
 
 // src/agents/compose-env.ts
 import { existsSync as existsSync21 } from "node:fs";
-import { dirname as dirname8 } from "node:path";
+import { dirname as dirname10 } from "node:path";
 function composeEnvPath(composePath) {
-  return dirname8(composePath) + "/.env";
+  return dirname10(composePath) + "/.env";
 }
 function composeEnvFileArgs(composePath) {
   const envPath = composeEnvPath(composePath);
@@ -35578,7 +35633,7 @@ import {
   unlinkSync as unlinkSync7
 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
-import { basename as basename5, dirname as dirname9, join as join31 } from "node:path";
+import { basename as basename5, dirname as dirname11, join as join31 } from "node:path";
 function vaultLayoutPaths(home2) {
   const switchroomRoot = join31(home2, ".switchroom");
   return {
@@ -35731,7 +35786,7 @@ function sha256File(path2) {
   return createHash6("sha256").update(data).digest("hex");
 }
 function atomicReplaceWithSymlink(target, linkTarget) {
-  const tmp = join31(dirname9(target), `.${basename5(target)}.symlink-tmp`);
+  const tmp = join31(dirname11(target), `.${basename5(target)}.symlink-tmp`);
   if (existsSync39(tmp)) {
     try {
       unlinkSync7(tmp);
@@ -35785,7 +35840,7 @@ import {
   unlinkSync as unlinkSync8,
   writeSync as writeSync5
 } from "node:fs";
-import { basename as basename6, dirname as dirname10, resolve as resolve27 } from "node:path";
+import { basename as basename6, dirname as dirname12, resolve as resolve27 } from "node:path";
 function readMachineId() {
   const vitestVal = process.env.VITEST;
   const isTestEnv = vitestVal !== undefined && vitestVal.length > 0;
@@ -35850,7 +35905,7 @@ function decryptAutoUnlock(blob, machineId) {
 }
 function writeAutoUnlockFile(passphrase, filePath) {
   const blob = encryptAutoUnlock(passphrase);
-  const dir = dirname10(filePath);
+  const dir = dirname12(filePath);
   mkdirSync23(dir, { recursive: true, mode: 448 });
   const tmp = resolve27(dir, `.${basename6(filePath)}.${process.pid}.${Date.now()}.tmp`);
   try {
@@ -36957,7 +37012,7 @@ function formatForCli(entries, opts = {}) {
 var init_audit_reader = () => {};
 
 // node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname14, posix, sep as sep2 } from "path";
+import { dirname as dirname16, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -36966,7 +37021,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname14(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname16(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -41582,7 +41637,7 @@ import {
   readFileSync as readFileSync45,
   writeFileSync as writeFileSync15
 } from "node:fs";
-import { dirname as dirname15 } from "node:path";
+import { dirname as dirname17 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 function telemetryDisabled() {
   const v = process.env.SWITCHROOM_TELEMETRY_DISABLED;
@@ -41604,7 +41659,7 @@ function getDistinctId() {
   const id = randomUUID3();
   cachedDistinctId = id;
   try {
-    mkdirSync27(dirname15(path5), { recursive: true });
+    mkdirSync27(dirname17(path5), { recursive: true });
     writeFileSync15(path5, id, "utf-8");
   } catch {}
   return id;
@@ -41851,7 +41906,7 @@ import {
   readFileSync as readFileSync55,
   readdirSync as readdirSync21
 } from "node:fs";
-import { dirname as dirname19, join as join53 } from "node:path";
+import { dirname as dirname21, join as join53 } from "node:path";
 import { execSync as execSync2 } from "node:child_process";
 function locateManifestPath() {
   let dir = import.meta.dirname;
@@ -41859,7 +41914,7 @@ function locateManifestPath() {
     const candidate = join53(dir, "dependencies.json");
     if (existsSync60(candidate))
       return candidate;
-    dir = dirname19(dir);
+    dir = dirname21(dir);
   }
   return null;
 }
@@ -42713,7 +42768,7 @@ function checkAgentSocketMounts(composeYaml) {
     name: "agent socket-volume isolation",
     status: "fail",
     detail: `Cross-mounted socket volumes: ${violations.join("; ")}`,
-    fix: "Re-run `switchroom reconcile` to regenerate the compose from cascade. Hand-edits violating per-agent socket isolation are the load-bearing security invariant."
+    fix: "Re-run `switchroom apply` to regenerate the compose from cascade. Hand-edits violating per-agent socket isolation are the load-bearing security invariant."
   };
 }
 function checkAgentCaps(config) {
@@ -42911,7 +42966,7 @@ function runDockerChecks(args) {
       name: "compose file present",
       status: "warn",
       detail: "Docker mode active but no docker-compose.yml found at ~/.switchroom/compose/docker-compose.yml",
-      fix: "Run `switchroom reconcile` to generate it."
+      fix: "Run `switchroom apply` to generate it."
     });
   }
   out.push(...checkContainerRuntimeHealth(args.config, args.dockerPsDeps));
@@ -45933,7 +45988,7 @@ import {
   readdirSync as readdirSync23,
   statSync as statSync38
 } from "node:fs";
-import { dirname as dirname20, join as join68, resolve as resolve39 } from "node:path";
+import { dirname as dirname22, join as join68, resolve as resolve39 } from "node:path";
 import { createPublicKey, createPrivateKey } from "node:crypto";
 function findInNvm(bin) {
   const nvmRoot = join68(process.env.HOME ?? "", ".nvm", "versions", "node");
@@ -47530,7 +47585,7 @@ async function checkMffAuthFlow(envPath = mffEnvPath(), timeoutMs = 8000) {
       detail: "skipped (MFF_API_URL not set)"
     };
   }
-  const credDir = dirname20(envPath);
+  const credDir = dirname22(envPath);
   const authScript = join68(credDir, "claude-auth.py");
   if (!existsSync66(authScript)) {
     return {
@@ -48590,8 +48645,8 @@ var init_fleet_defaults = __esm(() => {
 });
 
 // src/agents/connection-health.ts
-import { mkdirSync as mkdirSync46, writeFileSync as writeFileSync28 } from "node:fs";
-import { join as join84 } from "node:path";
+import { mkdirSync as mkdirSync47, writeFileSync as writeFileSync29 } from "node:fs";
+import { join as join85 } from "node:path";
 async function computeAgentConnectionIssues(config, agentName, vaultAclReader) {
   const reqs = computeMcpSecretRequirements(config).filter((r) => r.agent === agentName);
   if (reqs.length === 0)
@@ -48648,10 +48703,10 @@ async function computeAgentConnectionIssues(config, agentName, vaultAclReader) {
   return issues;
 }
 function writeConnectionHealthFile(agentDir, health, deps) {
-  const dir = join84(agentDir, ".claude");
-  const path8 = join84(dir, CONNECTION_HEALTH_FILENAME);
-  (deps?.mkdir ?? ((p, o) => mkdirSync46(p, o)))(dir, { recursive: true });
-  (deps?.writeFile ?? ((p, d) => writeFileSync28(p, d)))(path8, JSON.stringify(health, null, 2) + `
+  const dir = join85(agentDir, ".claude");
+  const path8 = join85(dir, CONNECTION_HEALTH_FILENAME);
+  (deps?.mkdir ?? ((p, o) => mkdirSync47(p, o)))(dir, { recursive: true });
+  (deps?.writeFile ?? ((p, d) => writeFileSync29(p, d)))(path8, JSON.stringify(health, null, 2) + `
 `);
 }
 async function refreshAgentConnectionHealth(config, agentName, agentDir, deps) {
@@ -48672,10 +48727,10 @@ var CONNECTION_HEALTH_FILENAME = "connection-health.json";
 var init_connection_health = () => {};
 
 // src/cli/update-prompt-hook.ts
-import { existsSync as existsSync83, readFileSync as readFileSync72, writeFileSync as writeFileSync29, chmodSync as chmodSync12, mkdirSync as mkdirSync47 } from "node:fs";
-import { join as join85 } from "node:path";
+import { existsSync as existsSync84, readFileSync as readFileSync73, writeFileSync as writeFileSync30, chmodSync as chmodSync12, mkdirSync as mkdirSync48 } from "node:fs";
+import { join as join86 } from "node:path";
 function containerHookCommand() {
-  return join85(CONTAINER_AGENT_DIR, ".claude", "hooks", HOOK_FILENAME);
+  return join86(CONTAINER_AGENT_DIR, ".claude", "hooks", HOOK_FILENAME);
 }
 function updatePromptHookScript() {
   return `#!/bin/bash
@@ -48741,14 +48796,14 @@ exit 0
 `;
 }
 function installUpdatePromptHook(agentDir) {
-  const hooksDir = join85(agentDir, ".claude", "hooks");
-  mkdirSync47(hooksDir, { recursive: true });
-  const scriptPath = join85(hooksDir, HOOK_FILENAME);
+  const hooksDir = join86(agentDir, ".claude", "hooks");
+  mkdirSync48(hooksDir, { recursive: true });
+  const scriptPath = join86(hooksDir, HOOK_FILENAME);
   const desired = updatePromptHookScript();
   let installed = false;
-  const existing = existsSync83(scriptPath) ? readFileSync72(scriptPath, "utf-8") : "";
+  const existing = existsSync84(scriptPath) ? readFileSync73(scriptPath, "utf-8") : "";
   if (existing !== desired) {
-    writeFileSync29(scriptPath, desired, { mode: 493 });
+    writeFileSync30(scriptPath, desired, { mode: 493 });
     chmodSync12(scriptPath, 493);
     installed = true;
   } else {
@@ -48756,11 +48811,11 @@ function installUpdatePromptHook(agentDir) {
       chmodSync12(scriptPath, 493);
     } catch {}
   }
-  const settingsPath = join85(agentDir, ".claude", "settings.json");
-  if (!existsSync83(settingsPath)) {
+  const settingsPath = join86(agentDir, ".claude", "settings.json");
+  if (!existsSync84(settingsPath)) {
     return { scriptPath, settingsPath, installed };
   }
-  const raw = readFileSync72(settingsPath, "utf-8");
+  const raw = readFileSync73(settingsPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -48796,7 +48851,7 @@ function installUpdatePromptHook(agentDir) {
   if (mutated) {
     hooks.UserPromptSubmit = list2;
     parsed.hooks = hooks;
-    writeFileSync29(settingsPath, JSON.stringify(parsed, null, 2) + `
+    writeFileSync30(settingsPath, JSON.stringify(parsed, null, 2) + `
 `, { mode: 384 });
     installed = true;
   } else if (!alreadyCorrect) {
@@ -48805,7 +48860,7 @@ function installUpdatePromptHook(agentDir) {
     });
     hooks.UserPromptSubmit = list2;
     parsed.hooks = hooks;
-    writeFileSync29(settingsPath, JSON.stringify(parsed, null, 2) + `
+    writeFileSync30(settingsPath, JSON.stringify(parsed, null, 2) + `
 `, { mode: 384 });
     installed = true;
   }
@@ -49189,8 +49244,8 @@ __export(exports_voice_sidecar_token, {
   VOICE_SIDECAR_TOKEN_ENV: () => VOICE_SIDECAR_TOKEN_ENV
 });
 import { randomBytes as randomBytes14 } from "node:crypto";
-import { chmodSync as chmodSync13, chownSync as chownSync7, existsSync as existsSync85, mkdirSync as mkdirSync48, readFileSync as readFileSync73, rmSync as rmSync17, writeFileSync as writeFileSync30 } from "node:fs";
-import { dirname as dirname29 } from "node:path";
+import { chmodSync as chmodSync13, chownSync as chownSync7, existsSync as existsSync86, mkdirSync as mkdirSync49, readFileSync as readFileSync74, rmSync as rmSync17, writeFileSync as writeFileSync31 } from "node:fs";
+import { dirname as dirname31 } from "node:path";
 async function defaultResolveOrSeedToken(home2, writeErr) {
   const [{ getViaBrokerStructured: getViaBrokerStructured2, putViaBroker: putViaBroker2 }, { resolveOperatorVaultPassphrase }] = await Promise.all([
     Promise.resolve().then(() => (init_client(), exports_client)),
@@ -49224,8 +49279,8 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   const envPath = composeEnvPath(composePath);
   if (engine !== "local") {
     try {
-      if (existsSync85(envPath)) {
-        const body = readFileSync73(envPath, "utf-8");
+      if (existsSync86(envPath)) {
+        const body = readFileSync74(envPath, "utf-8");
         if (body.includes(`${VOICE_SIDECAR_TOKEN_ENV}=`))
           rmSync17(envPath);
       }
@@ -49244,11 +49299,11 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
   if (!token)
     return;
   try {
-    mkdirSync48(dirname29(envPath), { recursive: true });
+    mkdirSync49(dirname31(envPath), { recursive: true });
     let body = "";
     try {
-      if (existsSync85(envPath))
-        body = readFileSync73(envPath, "utf-8");
+      if (existsSync86(envPath))
+        body = readFileSync74(envPath, "utf-8");
     } catch {}
     const line = `${VOICE_SIDECAR_TOKEN_ENV}=${token}`;
     const keyRe = new RegExp(`^${VOICE_SIDECAR_TOKEN_ENV}=.*$`, "m");
@@ -49256,7 +49311,7 @@ async function provisionVoiceSidecarToken(composePath, home2, ctx) {
 `) ? body + `
 ` : body) + line + `
 `;
-    writeFileSync30(envPath, next, {
+    writeFileSync31(envPath, next, {
       encoding: "utf-8",
       mode: 384
     });
@@ -49308,11 +49363,11 @@ __export(exports_apply, {
   DEFAULT_COMPOSE_PATH: () => DEFAULT_COMPOSE_PATH2,
   COMPOSE_PROJECT: () => COMPOSE_PROJECT2
 });
-import { accessSync as accessSync3, chmodSync as chmodSync14, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync12, existsSync as existsSync86, mkdirSync as mkdirSync49, readFileSync as readFileSync74, readdirSync as readdirSync30, renameSync as renameSync20, statSync as statSync47, writeFileSync as writeFileSync31 } from "node:fs";
+import { accessSync as accessSync3, chmodSync as chmodSync14, chownSync as chownSync8, constants as fsConstants6, copyFileSync as copyFileSync12, existsSync as existsSync87, mkdirSync as mkdirSync50, readFileSync as readFileSync75, readdirSync as readdirSync31, renameSync as renameSync21, statSync as statSync47, writeFileSync as writeFileSync32 } from "node:fs";
 import { mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
-import { dirname as dirname30, join as join87, resolve as resolve52 } from "node:path";
+import { dirname as dirname32, join as join88, resolve as resolve52 } from "node:path";
 import { homedir as homedir49 } from "node:os";
 import { execFileSync as execFileSync27 } from "node:child_process";
 function effectiveLiteLLMEnabled(config, agentResolvedLitellm) {
@@ -49324,7 +49379,7 @@ async function resolveOperatorVaultPassphrase(home2) {
     return envPass;
   try {
     const { readAutoUnlockFile: readAutoUnlockFile2 } = await Promise.resolve().then(() => (init_auto_unlock(), exports_auto_unlock));
-    const blobPath = join87(home2, ".switchroom", "vault-auto-unlock");
+    const blobPath = join88(home2, ".switchroom", "vault-auto-unlock");
     const pass = readAutoUnlockFile2(blobPath);
     return pass && pass.length > 0 ? pass : null;
   } catch {
@@ -49333,10 +49388,10 @@ async function resolveOperatorVaultPassphrase(home2) {
 }
 function materializeLitellmMasterKeyForBroker(masterKey, home2 = process.env.HOME ?? "/root") {
   try {
-    const stateDir = join87(home2, ".switchroom", "state", "auth-broker");
-    mkdirSync49(stateDir, { recursive: true, mode: 448 });
-    const path9 = join87(stateDir, LITELLM_MASTER_KEY_STATE_BASENAME);
-    writeFileSync31(path9, masterKey.trim() + `
+    const stateDir = join88(home2, ".switchroom", "state", "auth-broker");
+    mkdirSync50(stateDir, { recursive: true, mode: 448 });
+    const path9 = join88(stateDir, LITELLM_MASTER_KEY_STATE_BASENAME);
+    writeFileSync32(path9, masterKey.trim() + `
 `, { mode: 384 });
     try {
       chmodSync14(path9, 384);
@@ -49428,9 +49483,9 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   const oauthAccount = config.auth?.active;
   let pendingConfigEdits = false;
   let configText = null;
-  if (switchroomConfigPath && existsSync86(switchroomConfigPath)) {
+  if (switchroomConfigPath && existsSync87(switchroomConfigPath)) {
     try {
-      configText = readFileSync74(switchroomConfigPath, "utf-8");
+      configText = readFileSync75(switchroomConfigPath, "utf-8");
     } catch (err) {
       ctx.writeErr(source_default.yellow(`  ! litellm: could not read config for ACL grants (${err.message}); keys will be provisioned but agents may lack read-ACL.
 `));
@@ -49659,14 +49714,14 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
 function resolveVaultBindMountDir(homeDir, ctx) {
   const isCustomPath = ctx.migrationKind === "custom-path-skipped";
   if (isCustomPath && ctx.customVaultPath) {
-    return dirname30(ctx.customVaultPath);
+    return dirname32(ctx.customVaultPath);
   }
-  return join87(homeDir, ".switchroom", "vault");
+  return join88(homeDir, ".switchroom", "vault");
 }
 function inspectVaultBindMountDir(vaultDir) {
-  if (!existsSync86(vaultDir))
+  if (!existsSync87(vaultDir))
     return { kind: "missing" };
-  const entries = readdirSync30(vaultDir);
+  const entries = readdirSync31(vaultDir);
   const unknown = [];
   for (const name of entries) {
     if (KNOWN_VAULT_ARTIFACT_NAMES.has(name))
@@ -49692,60 +49747,60 @@ function hasVaultRefs(value) {
 async function ensureHostMountSources(config) {
   const home2 = resolveHostHomeForCompose();
   const dirs = [
-    join87(home2, ".switchroom", "approvals"),
-    join87(home2, ".switchroom", "scheduler"),
-    join87(home2, ".switchroom", "logs"),
-    join87(home2, ".switchroom", "compose"),
-    join87(home2, ".switchroom", "broker-operator")
+    join88(home2, ".switchroom", "approvals"),
+    join88(home2, ".switchroom", "scheduler"),
+    join88(home2, ".switchroom", "logs"),
+    join88(home2, ".switchroom", "compose"),
+    join88(home2, ".switchroom", "broker-operator")
   ];
   for (const name of Object.keys(config.agents)) {
-    dirs.push(join87(home2, ".switchroom", "agents", name));
-    dirs.push(join87(home2, ".switchroom", "logs", name));
-    dirs.push(join87(home2, ".claude", "projects", name));
-    dirs.push(join87(home2, ".switchroom", "audit", name));
-    if (existsSync86(join87(home2, ".switchroom-config"))) {
-      dirs.push(join87(home2, ".switchroom-config", "agents", name, "personal-skills"));
+    dirs.push(join88(home2, ".switchroom", "agents", name));
+    dirs.push(join88(home2, ".switchroom", "logs", name));
+    dirs.push(join88(home2, ".claude", "projects", name));
+    dirs.push(join88(home2, ".switchroom", "audit", name));
+    if (existsSync87(join88(home2, ".switchroom-config"))) {
+      dirs.push(join88(home2, ".switchroom-config", "agents", name, "personal-skills"));
     }
   }
   for (const dir of dirs) {
     await mkdir2(dir, { recursive: true });
   }
-  const autoUnlockPath = join87(home2, ".switchroom", "vault-auto-unlock");
-  if (!existsSync86(autoUnlockPath)) {
-    writeFileSync31(autoUnlockPath, "", { mode: 384 });
+  const autoUnlockPath = join88(home2, ".switchroom", "vault-auto-unlock");
+  if (!existsSync87(autoUnlockPath)) {
+    writeFileSync32(autoUnlockPath, "", { mode: 384 });
   }
-  const auditLogPath = join87(home2, ".switchroom", "vault-audit.log");
-  if (!existsSync86(auditLogPath)) {
-    writeFileSync31(auditLogPath, "", { mode: 420 });
+  const auditLogPath = join88(home2, ".switchroom", "vault-audit.log");
+  if (!existsSync87(auditLogPath)) {
+    writeFileSync32(auditLogPath, "", { mode: 420 });
   }
   const grantsDbDir = getGrantsDbDir(home2);
-  mkdirSync49(grantsDbDir, { recursive: true, mode: 448 });
+  mkdirSync50(grantsDbDir, { recursive: true, mode: 448 });
   migrateLegacyGrantsDbLocation(getGrantsDbPath(home2));
-  const hostdAuditLogPath = join87(home2, ".switchroom", "host-control-audit.log");
-  if (!existsSync86(hostdAuditLogPath)) {
-    writeFileSync31(hostdAuditLogPath, "", { mode: 420 });
+  const hostdAuditLogPath = join88(home2, ".switchroom", "host-control-audit.log");
+  if (!existsSync87(hostdAuditLogPath)) {
+    writeFileSync32(hostdAuditLogPath, "", { mode: 420 });
   }
   for (const name of Object.keys(config.agents)) {
-    const tokenPath = join87(home2, ".switchroom", "agents", name, ".vault-token");
-    if (!existsSync86(tokenPath)) {
-      writeFileSync31(tokenPath, "", { mode: 384 });
+    const tokenPath = join88(home2, ".switchroom", "agents", name, ".vault-token");
+    if (!existsSync87(tokenPath)) {
+      writeFileSync32(tokenPath, "", { mode: 384 });
     }
     try {
       const uid = allocateAgentUid(name);
       chownSync8(tokenPath, uid, uid);
     } catch {}
   }
-  const fleetDir = join87(home2, ".switchroom", "fleet");
+  const fleetDir = join88(home2, ".switchroom", "fleet");
   await mkdir2(fleetDir, { recursive: true });
-  const invariantsPath = join87(fleetDir, "switchroom-invariants.md");
+  const invariantsPath = join88(fleetDir, "switchroom-invariants.md");
   const invariantsCanonical = renderFleetInvariants();
-  const invariantsCurrent = existsSync86(invariantsPath) ? readFileSync74(invariantsPath, "utf-8") : null;
+  const invariantsCurrent = existsSync87(invariantsPath) ? readFileSync75(invariantsPath, "utf-8") : null;
   if (invariantsCurrent !== invariantsCanonical) {
-    writeFileSync31(invariantsPath, invariantsCanonical, { mode: 420 });
+    writeFileSync32(invariantsPath, invariantsCanonical, { mode: 420 });
   }
-  const fleetClaudePath = join87(fleetDir, "CLAUDE.md");
-  if (!existsSync86(fleetClaudePath)) {
-    writeFileSync31(fleetClaudePath, renderFleetDefaultsClaudeMd(), {
+  const fleetClaudePath = join88(fleetDir, "CLAUDE.md");
+  if (!existsSync87(fleetClaudePath)) {
+    writeFileSync32(fleetClaudePath, renderFleetDefaultsClaudeMd(), {
       mode: 420
     });
   }
@@ -49774,7 +49829,7 @@ function isInAgentContainer(vaultPresent, composeV2Present, env2 = process.env)
 function runApplyPreflight(config, opts = {}) {
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
   const detect = opts.detectComposeV2 ?? detectComposeV2;
-  const vaultMissing = hasVaultRefs(config) && !existsSync86(vaultPath);
+  const vaultMissing = hasVaultRefs(config) && !existsSync87(vaultPath);
   const composeErr = detect();
   if ((vaultMissing || composeErr) && isInAgentContainer(!vaultMissing, composeErr === null)) {
     throw new Error(IN_AGENT_CONTAINER_APPLY_MSG);
@@ -49788,7 +49843,7 @@ function runApplyPreflight(config, opts = {}) {
   detectAndReportLegacyGdriveSlots(vaultPath);
 }
 function detectAndReportLegacyGdriveSlots(vaultPath) {
-  if (!existsSync86(vaultPath))
+  if (!existsSync87(vaultPath))
     return;
   const passphrase = process.env.SWITCHROOM_VAULT_PASSPHRASE;
   if (!passphrase)
@@ -49829,17 +49884,17 @@ function detectAndReportLegacyGdriveSlots(vaultPath) {
 }
 function writeInstallTypeCache(homeDir = homedir49()) {
   const ctx = detectInstallType();
-  const dir = join87(homeDir, ".switchroom");
-  const out = join87(dir, "install-type.json");
+  const dir = join88(homeDir, ".switchroom");
+  const out = join88(dir, "install-type.json");
   const tmp = `${out}.tmp`;
-  mkdirSync49(dir, { recursive: true });
+  mkdirSync50(dir, { recursive: true });
   const payload = {
     install_type: ctx.install_type,
     detected_at: new Date().toISOString(),
     source_paths: ctx.source_paths
   };
-  writeFileSync31(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
-  renameSync20(tmp, out);
+  writeFileSync32(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
+  renameSync21(tmp, out);
   return out;
 }
 async function runApply(config, options, deps = {}, switchroomConfigPath) {
@@ -49897,17 +49952,17 @@ Applying switchroom config...
       writeOut(source_default.green(`  + ${name}`) + source_default.gray(` (${agentConfig.extends ?? "default"}) \u2014 ${detail}
 `));
       try {
-        installUpdatePromptHook(join87(agentsDir, name));
+        installUpdatePromptHook(join88(agentsDir, name));
       } catch (hookErr) {
         writeOut(source_default.gray(`    (update-prompt hook install failed for ${name}: ${hookErr.message})
 `));
       }
-      await refreshAgentConnectionHealth(config, name, join87(agentsDir, name), {
+      await refreshAgentConnectionHealth(config, name, join88(agentsDir, name), {
         vaultAclReader: connHealthVaultAclReader
       });
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join87(agentsDir, name), uid, {
+        alignAgentUid(name, join88(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -49952,7 +50007,7 @@ Applying switchroom config...
     for (const name of agentNames) {
       try {
         const uid = allocateAgentUid(name);
-        alignAgentUid(name, join87(agentsDir, name), uid, {
+        alignAgentUid(name, join88(agentsDir, name), uid, {
           confirm: !options.nonInteractive,
           writeOut
         });
@@ -50290,18 +50345,18 @@ function copyExampleConfig2(name) {
     throw new Error(`Invalid example name: ${name} (must match /^[a-z0-9_-]+$/)`);
   }
   const dest = resolve52(process.cwd(), "switchroom.yaml");
-  if (existsSync86(dest)) {
+  if (existsSync87(dest)) {
     console.error(source_default.yellow("switchroom.yaml already exists \u2014 skipping example copy"));
     return;
   }
   const embedded = EMBEDDED_EXAMPLES[name];
   if (embedded !== undefined) {
-    writeFileSync31(dest, embedded, { encoding: "utf8" });
+    writeFileSync32(dest, embedded, { encoding: "utf8" });
     console.log(source_default.green(`Copied ${name}.yaml -> switchroom.yaml`));
     return;
   }
   const exampleFile = resolve52(import.meta.dirname, `../../examples/${name}.yaml`);
-  if (!existsSync86(exampleFile)) {
+  if (!existsSync87(exampleFile)) {
     throw new Error(`Example config not found: ${name}.yaml (available: ${Object.keys(EMBEDDED_EXAMPLES).join(", ")})`);
   }
   copyFileSync12(exampleFile, dest);
@@ -50312,8 +50367,8 @@ function findUnwritableAgentDirs(config, opts) {
   const targets = opts.only ? [opts.only] : Object.keys(config.agents ?? {});
   const unwritable = [];
   for (const name of targets) {
-    const startSh = join87(agentsDir, name, "start.sh");
-    if (!existsSync86(startSh))
+    const startSh = join88(agentsDir, name, "start.sh");
+    if (!existsSync87(startSh))
       continue;
     try {
       accessSync3(startSh, fsConstants6.W_OK);
@@ -50518,7 +50573,7 @@ var init_apply = __esm(() => {
     switchroom: switchroom_default,
     minimal: minimal_default
   };
-  DEFAULT_COMPOSE_PATH2 = join87(homedir49(), ".switchroom", "compose", "docker-compose.yml");
+  DEFAULT_COMPOSE_PATH2 = join88(homedir49(), ".switchroom", "compose", "docker-compose.yml");
   IN_AGENT_CONTAINER_APPLY_MSG = "`switchroom apply`'s full per-agent scaffold cannot run from inside an " + "agent container \u2014 this is a host/hostd operation by construction " + "(no vault at the container HOME, and no `docker compose` v2 plugin here).\nTo roll the fleet to a new version, drive the hostd rollout (`mcp__hostd__rollout`): it runs a `--compose-only` apply plus a per-agent restart-reconcile, and each agent refreshes its own templates " + `on restart \u2014 the roll completes without any agent running a full apply.
 ` + "A full host-side `sudo switchroom apply` is only needed for structural changes (compose regeneration / new-agent scaffolding), and is run by the operator on the host, never from inside an agent.";
   SELF_ELEVATE_PRESERVED_ENV = [
@@ -59829,49 +59884,49 @@ var require_fast_uri = __commonJS((exports2, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base, relative4, options, skipNormalization) {
+  function resolveComponent(base, relative6, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base = parse6(serialize(base, options), options);
-      relative4 = parse6(serialize(relative4, options), options);
+      relative6 = parse6(serialize(relative6, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative4.scheme) {
-      target.scheme = relative4.scheme;
-      target.userinfo = relative4.userinfo;
-      target.host = relative4.host;
-      target.port = relative4.port;
-      target.path = removeDotSegments(relative4.path || "");
-      target.query = relative4.query;
+    if (!options.tolerant && relative6.scheme) {
+      target.scheme = relative6.scheme;
+      target.userinfo = relative6.userinfo;
+      target.host = relative6.host;
+      target.port = relative6.port;
+      target.path = removeDotSegments(relative6.path || "");
+      target.query = relative6.query;
     } else {
-      if (relative4.userinfo !== undefined || relative4.host !== undefined || relative4.port !== undefined) {
-        target.userinfo = relative4.userinfo;
-        target.host = relative4.host;
-        target.port = relative4.port;
-        target.path = removeDotSegments(relative4.path || "");
-        target.query = relative4.query;
+      if (relative6.userinfo !== undefined || relative6.host !== undefined || relative6.port !== undefined) {
+        target.userinfo = relative6.userinfo;
+        target.host = relative6.host;
+        target.port = relative6.port;
+        target.path = removeDotSegments(relative6.path || "");
+        target.query = relative6.query;
       } else {
-        if (!relative4.path) {
+        if (!relative6.path) {
           target.path = base.path;
-          if (relative4.query !== undefined) {
-            target.query = relative4.query;
+          if (relative6.query !== undefined) {
+            target.query = relative6.query;
           } else {
             target.query = base.query;
           }
         } else {
-          if (relative4.path[0] === "/") {
-            target.path = removeDotSegments(relative4.path);
+          if (relative6.path[0] === "/") {
+            target.path = removeDotSegments(relative6.path);
           } else {
             if ((base.userinfo !== undefined || base.host !== undefined || base.port !== undefined) && !base.path) {
-              target.path = "/" + relative4.path;
+              target.path = "/" + relative6.path;
             } else if (!base.path) {
-              target.path = relative4.path;
+              target.path = relative6.path;
             } else {
-              target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative4.path;
+              target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative6.path;
             }
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative4.query;
+          target.query = relative6.query;
         }
         target.userinfo = base.userinfo;
         target.host = base.host;
@@ -59879,7 +59934,7 @@ var require_fast_uri = __commonJS((exports2, module) => {
       }
       target.scheme = base.scheme;
     }
-    target.fragment = relative4.fragment;
+    target.fragment = relative6.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -63967,7 +64022,7 @@ __export(exports_server2, {
   TOOLS: () => TOOLS2
 });
 import { randomBytes as randomBytes16 } from "node:crypto";
-import { existsSync as existsSync95, readFileSync as readFileSync83 } from "node:fs";
+import { existsSync as existsSync96, readFileSync as readFileSync84 } from "node:fs";
 function selfSocketPath() {
   return `/run/switchroom/hostd/${SELF_AGENT}/sock`;
 }
@@ -63994,7 +64049,7 @@ async function dispatchTool2(name, args) {
     return errorText2("hostd MCP: SWITCHROOM_AGENT_NAME env var is not set \u2014 cannot " + "determine which per-agent socket to talk to.");
   }
   const sockPath = selfSocketPath();
-  if (!existsSync95(sockPath)) {
+  if (!existsSync96(sockPath)) {
     return errorText2(`hostd MCP: socket not bound at ${sockPath}. The host-control ` + `daemon is either not installed (run \`switchroom hostd install\`) ` + `or this agent isn't admin-flagged in switchroom.yaml. RFC C ` + `bind-mounts the per-agent socket only when host_control.enabled ` + `is true AND the agent has admin: true.`);
   }
   let req;
@@ -64245,18 +64300,18 @@ function resolveAuditLogPath() {
   if (process.env.HOSTD_AUDIT_LOG_PATH)
     return process.env.HOSTD_AUDIT_LOG_PATH;
   const bindMounted = "/host-home/.switchroom/host-control-audit.log";
-  if (existsSync95(bindMounted))
+  if (existsSync96(bindMounted))
     return bindMounted;
   return defaultAuditLogPath2();
 }
 function getLastUpdateApplyStatus() {
   const path9 = resolveAuditLogPath();
-  if (!existsSync95(path9)) {
+  if (!existsSync96(path9)) {
     return errorText2(`get_status: audit log not found at ${path9}. No update_apply has run yet?`);
   }
   let raw;
   try {
-    raw = readFileSync83(path9, "utf-8");
+    raw = readFileSync84(path9, "utf-8");
   } catch (err2) {
     return errorText2(`get_status: failed to read audit log at ${path9}: ${err2.message}`);
   }
@@ -65006,14 +65061,14 @@ var init_header_passthrough_guard = __esm(() => {
 });
 
 // src/fleet-health/litellm-config-sensor.ts
-import { readFileSync as readFileSync85, existsSync as existsSync98 } from "node:fs";
+import { readFileSync as readFileSync86, existsSync as existsSync99 } from "node:fs";
 function resolveLitellmConfigPath(explicit) {
   return explicit ?? process.env.LITELLM_CONFIG_PATH ?? DEFAULT_LITELLM_CONFIG_PATH;
 }
 function scanLitellmConfig(opts = {}) {
   const path9 = resolveLitellmConfigPath(opts.path);
-  const exists = opts.existsFn ?? existsSync98;
-  const read = opts.readFn ?? ((p) => readFileSync85(p, "utf-8"));
+  const exists = opts.existsFn ?? existsSync99;
+  const read = opts.readFn ?? ((p) => readFileSync86(p, "utf-8"));
   const log = opts.log ?? (() => {});
   const nowIso = opts.nowIso ?? new Date().toISOString();
   if (!exists(path9)) {
@@ -65068,23 +65123,23 @@ __export(exports_scan, {
   ledgerPathForBase: () => ledgerPathForBase
 });
 import {
-  readFileSync as readFileSync86,
-  readdirSync as readdirSync38,
-  existsSync as existsSync99,
-  mkdirSync as mkdirSync56,
-  writeFileSync as writeFileSync37
+  readFileSync as readFileSync87,
+  readdirSync as readdirSync39,
+  existsSync as existsSync100,
+  mkdirSync as mkdirSync57,
+  writeFileSync as writeFileSync38
 } from "node:fs";
-import { resolve as resolve57, dirname as dirname33 } from "node:path";
+import { resolve as resolve57, dirname as dirname35 } from "node:path";
 import { homedir as homedir58 } from "node:os";
 function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir58()) {
   return resolve57(home2, ".switchroom");
 }
 function listAgents(base) {
   const dir = resolve57(base, "agents");
-  if (!existsSync99(dir))
+  if (!existsSync100(dir))
     return [];
   try {
-    return readdirSync38(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+    return readdirSync39(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -65110,16 +65165,16 @@ function runScan(opts = {}) {
     let gwText = "";
     let sawArtifact = false;
     try {
-      if (existsSync99(turnsPath)) {
-        turnsText = readFileSync86(turnsPath, "utf-8");
+      if (existsSync100(turnsPath)) {
+        turnsText = readFileSync87(turnsPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
       log(`fleet-health: WARN skipping ${agent} turns.jsonl unreadable: ${String(e)}`);
     }
     try {
-      if (existsSync99(gwPath)) {
-        gwText = readFileSync86(gwPath, "utf-8");
+      if (existsSync100(gwPath)) {
+        gwText = readFileSync87(gwPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
@@ -65161,20 +65216,20 @@ function runScan(opts = {}) {
 function readLedgerIfPresent(base) {
   const path9 = ledgerPathForBase(base);
   try {
-    if (!existsSync99(path9))
+    if (!existsSync100(path9))
       return null;
-    return JSON.parse(readFileSync86(path9, "utf-8"));
+    return JSON.parse(readFileSync87(path9, "utf-8"));
   } catch {
     return null;
   }
 }
 function ledgerPathForBase(base) {
-  return fleetHealthLedgerPath(dirname33(base));
+  return fleetHealthLedgerPath(dirname35(base));
 }
 function writeLedger(base, ledger) {
   const path9 = ledgerPathForBase(base);
-  mkdirSync56(dirname33(path9), { recursive: true });
-  writeFileSync37(path9, JSON.stringify(ledger, null, 2) + `
+  mkdirSync57(dirname35(path9), { recursive: true });
+  writeFileSync38(path9, JSON.stringify(ledger, null, 2) + `
 `, "utf-8");
   return path9;
 }
@@ -72180,7 +72235,7 @@ init_audit_log();
 init_test_isolation_guard();
 import * as net3 from "node:net";
 import { mkdirSync as mkdirSync25, chmodSync as chmodSync9, chownSync as chownSync4, existsSync as existsSync43, readFileSync as readFileSync35, readdirSync as readdirSync18, statSync as statSync26, unlinkSync as unlinkSync10, writeFileSync as writeFileSync14, renameSync as renameSync14 } from "node:fs";
-import { dirname as dirname13, resolve as resolve29, basename as basename7 } from "node:path";
+import { dirname as dirname15, resolve as resolve29, basename as basename7 } from "node:path";
 import * as os4 from "node:os";
 import * as path4 from "node:path";
 
@@ -74556,7 +74611,7 @@ class VaultBroker {
       this.passphrase = this.testOpts._testPassphrase;
     }
     process.umask(63);
-    const parentDir = dirname13(this.socketPath);
+    const parentDir = dirname15(this.socketPath);
     mkdirSync25(parentDir, { recursive: true, mode: 448 });
     try {
       chmodSync9(parentDir, 448);
@@ -76101,15 +76156,15 @@ class VaultBroker {
   }
 }
 function detectVaultLayoutDrift(vaultPath) {
-  const dir = dirname13(vaultPath);
+  const dir = dirname15(vaultPath);
   if (basename7(dir) !== "vault")
     return;
   if (basename7(vaultPath) !== "vault.enc")
     return;
-  const switchroomDir = dirname13(dir);
+  const switchroomDir = dirname15(dir);
   if (basename7(switchroomDir) !== ".switchroom")
     return;
-  const home2 = dirname13(switchroomDir);
+  const home2 = dirname15(switchroomDir);
   const result = inspectVaultLayout(home2);
   if (result.kind === "divergent") {
     throw new VaultError(`Vault layout divergence detected at boot: ${result.details.oldPath} and ${result.details.newPath} are both regular files with different content. An older switchroom CLI may have written to the legacy path after migration ran. Run \`switchroom apply\` from the host to surface the recovery recipe (state E refusal with literal \`mv\` commands). See docs/operators/state-e-recovery.md.`);
@@ -79590,7 +79645,7 @@ import {
   writeSync as writeSync8,
   constants as fsConstants3
 } from "node:fs";
-import { resolve as resolve34, extname, join as join51, relative, dirname as dirname16 } from "node:path";
+import { resolve as resolve34, extname, join as join51, relative as relative3, dirname as dirname18 } from "node:path";
 import { homedir as homedir28 } from "node:os";
 import { timingSafeEqual as timingSafeEqual3, randomBytes as randomBytes11 } from "node:crypto";
 
@@ -83051,7 +83106,7 @@ function resolveWebToken() {
       return existing;
   }
   const token = randomBytes11(32).toString("hex");
-  mkdirSync31(dirname16(tokenPath), { recursive: true, mode: 448 });
+  mkdirSync31(dirname18(tokenPath), { recursive: true, mode: 448 });
   try {
     const fd = openSync11(tokenPath, fsConstants3.O_WRONLY | fsConstants3.O_CREAT | fsConstants3.O_EXCL, 384);
     try {
@@ -83638,7 +83693,7 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
       } catch {
         return new Response("Not Found", { status: 404 });
       }
-      const rel = relative(uiDir, realFullPath);
+      const rel = relative3(uiDir, realFullPath);
       if (rel.startsWith("..") || resolve34(uiDir, rel) !== realFullPath) {
         return new Response("Forbidden", { status: 403 });
       }
@@ -83768,7 +83823,7 @@ init_loader();
 
 // src/web/startup-guard.ts
 import { existsSync as existsSync58, readFileSync as readFileSync53, writeFileSync as writeFileSync18, mkdirSync as mkdirSync32, statSync as statSync33, unlinkSync as unlinkSync13 } from "node:fs";
-import { dirname as dirname17 } from "node:path";
+import { dirname as dirname19 } from "node:path";
 function detectConfigMountFault(configPath, deps = {}) {
   const stat = deps.stat ?? ((p) => statSync33(p));
   let st;
@@ -83815,7 +83870,7 @@ function readCrashState(statePath) {
 }
 function writeCrashState(statePath, state) {
   try {
-    mkdirSync32(dirname17(statePath), { recursive: true });
+    mkdirSync32(dirname19(statePath), { recursive: true });
     writeFileSync18(statePath, JSON.stringify(state), { mode: 384 });
   } catch {}
 }
@@ -83911,7 +83966,7 @@ init_atomic();
 init_loader();
 init_scaffold();
 import { existsSync as existsSync59, copyFileSync as copyFileSync9, readFileSync as readFileSync54, mkdirSync as mkdirSync33, statSync as statSync34 } from "node:fs";
-import { resolve as resolve35, dirname as dirname18 } from "node:path";
+import { resolve as resolve35, dirname as dirname20 } from "node:path";
 init_state();
 init_vault();
 init_manager();
@@ -84223,7 +84278,7 @@ async function copyExampleConfig(nonInteractive) {
   if (!existsSync59(srcFile)) {
     throw new ConfigError(`Example config not found: ${choice}.yaml`);
   }
-  mkdirSync33(dirname18(destFile), { recursive: true });
+  mkdirSync33(dirname20(destFile), { recursive: true });
   copyFileSync9(srcFile, destFile);
   console.log(source_default.green(`  Copied ${choice}.yaml -> ${destFile}`));
   console.log(source_default.yellow(`  Edit ${destFile} to customize, then re-run switchroom setup.`));
@@ -85003,9 +85058,9 @@ init_source();
 init_loader();
 init_lifecycle();
 init_compose_env();
-import { cpSync as cpSync2, existsSync as existsSync67, mkdirSync as mkdirSync35, readFileSync as readFileSync60, realpathSync as realpathSync6, rmSync as rmSync12, statSync as statSync40, chownSync as chownSync5 } from "node:fs";
+import { existsSync as existsSync68, mkdirSync as mkdirSync36, readFileSync as readFileSync61, realpathSync as realpathSync6, statSync as statSync40, chownSync as chownSync5 } from "node:fs";
 import { spawnSync as spawnSync12 } from "node:child_process";
-import { join as join69, dirname as dirname21, resolve as resolve40 } from "node:path";
+import { join as join70, dirname as dirname23, resolve as resolve40 } from "node:path";
 import { homedir as homedir40 } from "node:os";
 
 // src/cli/release-yaml.ts
@@ -85096,10 +85151,132 @@ ${lines.join(`
 
 // src/cli/update.ts
 init_hindsight();
+init_scaffold_integration();
+
+// src/cli/sync-bundled-skills.ts
+import {
+  cpSync as cpSync2,
+  existsSync as existsSync67,
+  mkdirSync as mkdirSync35,
+  readFileSync as readFileSync60,
+  readdirSync as readdirSync24,
+  renameSync as renameSync16,
+  rmSync as rmSync12,
+  writeFileSync as writeFileSync19
+} from "node:fs";
+import { join as join69 } from "node:path";
+var BUNDLED_SKILL_MANIFEST_NAME = ".switchroom-manifest.json";
+function listSkillDirs(dir) {
+  if (!existsSync67(dir))
+    return [];
+  return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+}
+function readBundledSkillManifest(poolDir) {
+  const path5 = join69(poolDir, BUNDLED_SKILL_MANIFEST_NAME);
+  if (!existsSync67(path5))
+    return { firstRun: true };
+  try {
+    const parsed = JSON.parse(readFileSync60(path5, "utf8"));
+    if (!parsed || typeof parsed !== "object" || !Array.isArray(parsed.skills) || !parsed.skills.every((s) => typeof s === "string")) {
+      return { corrupt: true };
+    }
+    const m = parsed;
+    return { manifest: { version: String(m.version ?? ""), skills: m.skills, updatedAt: String(m.updatedAt ?? "") } };
+  } catch {
+    return { corrupt: true };
+  }
+}
+function stageAndSwap(srcSkill, destSkill, poolDir, name) {
+  const staging = join69(poolDir, `.tmp-${name}-${process.pid}-${Date.now()}`);
+  try {
+    rmSync12(staging, { recursive: true, force: true });
+    cpSync2(srcSkill, staging, { recursive: true, dereference: false });
+    rmSync12(destSkill, { recursive: true, force: true });
+    renameSync16(staging, destSkill);
+  } finally {
+    rmSync12(staging, { recursive: true, force: true });
+  }
+}
+function syncBundledSkills(opts) {
+  const { source, dest, version: version2 } = opts;
+  const result = {
+    added: [],
+    updated: [],
+    removed: [],
+    preserved: [],
+    ownershipTransferred: [],
+    firstRun: false,
+    manifestCorrupt: false
+  };
+  mkdirSync35(dest, { recursive: true });
+  const prior = readBundledSkillManifest(dest);
+  const priorSkills = new Set("manifest" in prior ? prior.manifest.skills : []);
+  result.firstRun = "firstRun" in prior;
+  result.manifestCorrupt = "corrupt" in prior;
+  const shipped = listSkillDirs(source).sort();
+  const shippedSet = new Set(shipped);
+  for (const name of shipped) {
+    const destSkill = join69(dest, name);
+    const existed = existsSync67(destSkill);
+    let transferred = false;
+    if (existed && !priorSkills.has(name) && !result.firstRun) {
+      const backup = join69(dest, `${name}.operator-backup-${process.pid}-${Date.now()}`);
+      try {
+        renameSync16(destSkill, backup);
+        transferred = true;
+        result.ownershipTransferred.push(name);
+        process.stderr.write(`switchroom: WARNING \u2014 a shipped skill "${name}" collides with an ` + `operator-added pool dir of the same name. Preserved the existing ` + `content as "${backup}" and installed the shipped skill under "${name}". ` + `If you meant to keep your version, rename it to a distinct skill name.
+`);
+      } catch {
+        result.ownershipTransferred.push(name);
+        process.stderr.write(`switchroom: WARNING \u2014 shipped skill "${name}" collides with an ` + `operator-added pool dir and the preservation backup failed; left the ` + `existing dir in place and did NOT install the shipped skill. Resolve ` + `the name collision manually.
+`);
+        continue;
+      }
+    }
+    stageAndSwap(join69(source, name), destSkill, dest, name);
+    if (!transferred && (priorSkills.has(name) || existed))
+      result.updated.push(name);
+    else
+      result.added.push(name);
+  }
+  if (!result.firstRun && !result.manifestCorrupt) {
+    for (const name of priorSkills) {
+      if (shippedSet.has(name))
+        continue;
+      const target = join69(dest, name);
+      if (existsSync67(target)) {
+        rmSync12(target, { recursive: true, force: true });
+        result.removed.push(name);
+      }
+    }
+  }
+  for (const name of listSkillDirs(dest)) {
+    if (!shippedSet.has(name) && !priorSkills.has(name)) {
+      result.preserved.push(name);
+    }
+  }
+  result.removed.sort();
+  result.preserved.sort();
+  const manifest = {
+    version: version2,
+    skills: shipped,
+    updatedAt: new Date().toISOString()
+  };
+  const manifestPath = join69(dest, BUNDLED_SKILL_MANIFEST_NAME);
+  const manifestTmp = join69(dest, `${BUNDLED_SKILL_MANIFEST_NAME}.tmp-${process.pid}-${Date.now()}`);
+  writeFileSync19(manifestTmp, JSON.stringify(manifest, null, 2) + `
+`, "utf8");
+  renameSync16(manifestTmp, manifestPath);
+  return result;
+}
+
+// src/cli/update.ts
+init_resolve_version();
 function defaultPersistPin(configPath) {
   return (pin) => {
     const path5 = configPath ?? findConfigFile();
-    const before = readFileSync60(path5, "utf8");
+    const before = readFileSync61(path5, "utf8");
     const after = setReleasePinInConfig(before, pin);
     if (after === before)
       return;
@@ -85113,18 +85290,18 @@ function defaultPersistPin(configPath) {
     } catch {}
   };
 }
-var DEFAULT_COMPOSE_PATH = join69(homedir40(), ".switchroom", "compose", "docker-compose.yml");
+var DEFAULT_COMPOSE_PATH = join70(homedir40(), ".switchroom", "compose", "docker-compose.yml");
 function runningFromSwitchroomCheckout(scriptPath) {
-  let dir = dirname21(scriptPath);
+  let dir = dirname23(scriptPath);
   for (let i = 0;i < 12; i++) {
-    if (existsSync67(join69(dir, ".git"))) {
+    if (existsSync68(join70(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync60(join69(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync61(join70(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
     }
-    const parent = dirname21(dir);
+    const parent = dirname23(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -85204,7 +85381,7 @@ function planUpdate(opts) {
   steps.push({
     name: "pull-images",
     description: "Pull broker / kernel / agent images from GHCR",
-    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync67(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
+    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync68(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
     run: () => {
       const r = runner("docker", [
         "compose",
@@ -85330,23 +85507,48 @@ function planUpdate(opts) {
         return;
       }
       const source = resolve40(import.meta.dirname, "../../skills");
-      const dest = join69(homedir40(), ".switchroom", "skills", "_bundled");
-      if (!existsSync67(source)) {
+      const dest = join70(homedir40(), ".switchroom", "skills", "_bundled");
+      if (!existsSync68(source)) {
         process.stderr.write(`switchroom update: sync-bundled-skills \u2014 CLI bundle has no adjacent skills/ at ${source}; skipping.
 `);
         return;
       }
       try {
-        if (existsSync67(dest)) {
-          rmSync12(dest, { recursive: true, force: true });
+        mkdirSync36(dirname23(dest), { recursive: true });
+        const r = syncBundledSkills({
+          source,
+          dest,
+          version: SWITCHROOM_VERSION
+        });
+        if (r.manifestCorrupt) {
+          process.stderr.write(`switchroom update: sync-bundled-skills \u2014 pool manifest was unreadable; ` + `deleted nothing (fail-closed) and rewrote a clean manifest.
+`);
+        }
+        if (r.removed.length > 0) {
+          process.stderr.write(`switchroom update: sync-bundled-skills \u2014 removed ${r.removed.length} retired ` + `bundled skill(s): ${r.removed.join(", ")}.
+`);
         }
-        mkdirSync35(dirname21(dest), { recursive: true });
-        cpSync2(source, dest, { recursive: true, dereference: false });
       } catch (err) {
         throw new Error(`sync-bundled-skills failed: ${err.message}`);
       }
     }
   });
+  steps.push({
+    name: "verify-bundled-skills",
+    description: "Assert every builtin default skill is present in ~/.switchroom/skills/_bundled/ after sync.",
+    run: () => {
+      if (opts.syncBundledSkillsFn)
+        return;
+      const dest = join70(homedir40(), ".switchroom", "skills", "_bundled");
+      if (!existsSync68(dest)) {
+        return;
+      }
+      const missing = getBuiltinDefaultSkillEntries().map((e) => e.key).filter((key) => !existsSync68(join70(dest, key)));
+      if (missing.length > 0) {
+        throw new Error(`verify-bundled-skills: builtin default skill(s) missing from the pool after sync: ` + `${missing.join(", ")}. These ship in the CLI package and must exist in ${dest}. ` + `This is a broken sync or a packaging regression \u2014 the pool is not converged.`);
+      }
+    }
+  });
   steps.push({
     name: "stamp-restart-marker",
     description: 'Write a clean-shutdown marker for every agent (reason="operator: switchroom update") so the post-recreate boot card renders as graceful rather than crash',
@@ -85376,7 +85578,7 @@ function planUpdate(opts) {
     description: "docker compose up -d --remove-orphans (recreates services with new images / compose)",
     run: () => {
       try {
-        const composeText = readFileSync60(composePath, "utf8");
+        const composeText = readFileSync61(composePath, "utf8");
         const pf = validateBindSources(composeText);
         if (!pf.ok)
           throw new Error(formatPreflightError(pf));
@@ -85453,12 +85655,12 @@ function defaultStatusProbe(composePath) {
       try {
         cliBuiltAt = new Date(statSync40(scriptPath).mtimeMs).toISOString();
       } catch {}
-      let dir = dirname21(scriptPath);
+      let dir = dirname23(scriptPath);
       for (let i = 0;i < 8; i++) {
-        const pkgPath = join69(dir, "package.json");
-        if (existsSync67(pkgPath)) {
+        const pkgPath = join70(dir, "package.json");
+        if (existsSync68(pkgPath)) {
           try {
-            const pkg = JSON.parse(readFileSync60(pkgPath, "utf-8"));
+            const pkg = JSON.parse(readFileSync61(pkgPath, "utf-8"));
             if (typeof pkg.version === "string")
               cliVersion = pkg.version;
           } catch (err) {
@@ -85466,7 +85668,7 @@ function defaultStatusProbe(composePath) {
           }
           break;
         }
-        const parent = dirname21(dir);
+        const parent = dirname23(dir);
         if (parent === dir)
           break;
         dir = parent;
@@ -85479,7 +85681,7 @@ function defaultStatusProbe(composePath) {
     warnings.push("could not resolve CLI version (no package.json found above the resolved script path)");
   }
   const services = [];
-  if (!existsSync67(composePath)) {
+  if (!existsSync68(composePath)) {
     warnings.push(`compose file not found at ${composePath}; service status unknown`);
     return { cliVersion, cliBuiltAt, services, warnings };
   }
@@ -85675,7 +85877,7 @@ function registerUpdateCommand(program3) {
 // src/cli/rollout.ts
 init_helpers();
 import { spawnSync as spawnSync14 } from "node:child_process";
-import { readFileSync as readFileSync61, chownSync as chownSync6, statSync as statSync41 } from "node:fs";
+import { readFileSync as readFileSync62, chownSync as chownSync6, statSync as statSync41 } from "node:fs";
 import { homedir as homedir41 } from "node:os";
 init_operator_uid();
 init_atomic();
@@ -85961,7 +86163,7 @@ function resolveRollbackTarget(auditLogPath) {
   const logPath = auditLogPath ?? defaultAuditLogPath2(homedir41());
   let raw;
   try {
-    raw = readFileSync61(logPath, "utf8");
+    raw = readFileSync62(logPath, "utf8");
   } catch {
     return null;
   }
@@ -86079,7 +86281,7 @@ function registerRolloutCommand(program3) {
 `),
       webImageTag: () => deployedImageTag("switchroom-web"),
       persistPin: (pin) => {
-        const before = readFileSync61(configPath, "utf8");
+        const before = readFileSync62(configPath, "utf8");
         const after = setReleasePinInConfig(before, pin);
         if (after === before)
           return;
@@ -86157,8 +86359,8 @@ init_helpers();
 init_lifecycle();
 init_resolve_version();
 import { execSync as execSync3 } from "node:child_process";
-import { existsSync as existsSync68, readFileSync as readFileSync62 } from "node:fs";
-import { dirname as dirname22, join as join70 } from "node:path";
+import { existsSync as existsSync69, readFileSync as readFileSync63 } from "node:fs";
+import { dirname as dirname24, join as join71 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync3("claude --version 2>/dev/null", {
@@ -86208,16 +86410,16 @@ function formatUptime3(timestamp) {
 function locateSwitchroomInstallDir() {
   let dir = import.meta.dirname;
   for (let i = 0;i < 10 && dir && dir !== "/"; i++) {
-    const pkgPath = join70(dir, "package.json");
-    if (existsSync68(pkgPath)) {
+    const pkgPath = join71(dir, "package.json");
+    if (existsSync69(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync62(pkgPath, "utf-8"));
-        if (pkg.name === "switchroom" && existsSync68(join70(dir, ".git"))) {
+        const pkg = JSON.parse(readFileSync63(pkgPath, "utf-8"));
+        if (pkg.name === "switchroom" && existsSync69(join71(dir, ".git"))) {
           return dir;
         }
       } catch {}
     }
-    dir = dirname22(dir);
+    dir = dirname24(dir);
   }
   return null;
 }
@@ -86390,29 +86592,29 @@ import { resolve as resolve42 } from "node:path";
 
 // src/agents/session-retention.ts
 import {
-  existsSync as existsSync69,
-  readdirSync as readdirSync24,
+  existsSync as existsSync70,
+  readdirSync as readdirSync25,
   statSync as statSync42,
   unlinkSync as unlinkSync14
 } from "node:fs";
-import { join as join71 } from "node:path";
+import { join as join72 } from "node:path";
 var DEFAULT_SESSION_RETENTION_MAX_COUNT = 20;
 var DEFAULT_SESSION_RETENTION_MAX_AGE_DAYS = 30;
 var MIN_KEEP = 2;
 function collectSessionJsonl(claudeConfigDir) {
-  const projects = join71(claudeConfigDir, "projects");
-  if (!existsSync69(projects))
+  const projects = join72(claudeConfigDir, "projects");
+  if (!existsSync70(projects))
     return [];
   const found = [];
   const walk2 = (dir) => {
     let entries;
     try {
-      entries = readdirSync24(dir);
+      entries = readdirSync25(dir);
     } catch {
       return;
     }
     for (const name of entries) {
-      const full = join71(dir, name);
+      const full = join72(dir, name);
       let st;
       try {
         st = statSync42(full);
@@ -86532,18 +86734,18 @@ function registerHandoffCommand(program3) {
 // src/issues/store.ts
 import {
   closeSync as closeSync12,
-  existsSync as existsSync70,
-  mkdirSync as mkdirSync36,
+  existsSync as existsSync71,
+  mkdirSync as mkdirSync37,
   openSync as openSync12,
-  readdirSync as readdirSync25,
-  readFileSync as readFileSync63,
-  renameSync as renameSync16,
+  readdirSync as readdirSync26,
+  readFileSync as readFileSync64,
+  renameSync as renameSync17,
   statSync as statSync43,
   unlinkSync as unlinkSync15,
-  writeFileSync as writeFileSync19,
+  writeFileSync as writeFileSync20,
   writeSync as writeSync9
 } from "node:fs";
-import { join as join72 } from "node:path";
+import { join as join73 } from "node:path";
 import { randomBytes as randomBytes12 } from "node:crypto";
 import { execSync as execSync4 } from "node:child_process";
 
@@ -86974,12 +87176,12 @@ function redactedMarker(ruleId) {
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path5 = join72(stateDir, ISSUES_FILE);
-  if (!existsSync70(path5))
+  const path5 = join73(stateDir, ISSUES_FILE);
+  if (!existsSync71(path5))
     return [];
   let raw;
   try {
-    raw = readFileSync63(path5, "utf-8");
+    raw = readFileSync64(path5, "utf-8");
   } catch {
     return [];
   }
@@ -87052,7 +87254,7 @@ function record(stateDir, input, nowFn = Date.now) {
   });
 }
 function resolve43(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync70(join72(stateDir, ISSUES_FILE)))
+  if (!existsSync71(join73(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -87070,7 +87272,7 @@ function resolve43(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function resolveAllBySource(stateDir, source, nowFn = Date.now) {
-  if (!existsSync70(join72(stateDir, ISSUES_FILE)))
+  if (!existsSync71(join73(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -87088,7 +87290,7 @@ function resolveAllBySource(stateDir, source, nowFn = Date.now) {
   });
 }
 function prune(stateDir, opts = {}) {
-  if (!existsSync70(join72(stateDir, ISSUES_FILE)))
+  if (!existsSync71(join73(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -87118,24 +87320,24 @@ function prune(stateDir, opts = {}) {
   });
 }
 function ensureDir(stateDir) {
-  mkdirSync36(stateDir, { recursive: true });
+  mkdirSync37(stateDir, { recursive: true });
 }
 function writeAll(stateDir, events) {
-  const path5 = join72(stateDir, ISSUES_FILE);
+  const path5 = join73(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path5}.tmp-${process.pid}-${randomBytes12(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
-  writeFileSync19(tmp, body, "utf-8");
-  renameSync16(tmp, path5);
+  writeFileSync20(tmp, body, "utf-8");
+  renameSync17(tmp, path5);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
 var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
 function sweepOrphanTmpFiles(stateDir) {
   let entries;
   try {
-    entries = readdirSync25(stateDir);
+    entries = readdirSync26(stateDir);
   } catch {
     return;
   }
@@ -87143,7 +87345,7 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath = join72(stateDir, entry);
+    const tmpPath = join73(stateDir, entry);
     try {
       const stat = statSync43(tmpPath);
       if (stat.mtimeMs < cutoff) {
@@ -87155,7 +87357,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join72(stateDir, ISSUES_LOCK);
+  const lockPath = join73(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -87190,7 +87392,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync63(lockPath, "utf-8").trim();
+    pidStr = readFileSync64(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -87438,20 +87640,20 @@ function relTime(deltaMs) {
 
 // src/cli/deps.ts
 init_source();
-import { existsSync as existsSync73 } from "node:fs";
+import { existsSync as existsSync74 } from "node:fs";
 import { homedir as homedir44 } from "node:os";
-import { join as join75, resolve as resolve44 } from "node:path";
+import { join as join76, resolve as resolve44 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash13 } from "node:crypto";
 import {
-  existsSync as existsSync71,
-  mkdirSync as mkdirSync37,
-  readFileSync as readFileSync64,
+  existsSync as existsSync72,
+  mkdirSync as mkdirSync38,
+  readFileSync as readFileSync65,
   rmSync as rmSync13,
-  writeFileSync as writeFileSync20
+  writeFileSync as writeFileSync21
 } from "node:fs";
-import { dirname as dirname23, join as join73 } from "node:path";
+import { dirname as dirname25, join as join74 } from "node:path";
 import { homedir as homedir42 } from "node:os";
 import { execFileSync as execFileSync21 } from "node:child_process";
 
@@ -87464,26 +87666,26 @@ class PythonEnvError extends Error {
   }
 }
 function defaultPythonCacheRoot() {
-  return join73(homedir42(), ".switchroom", "deps", "python");
+  return join74(homedir42(), ".switchroom", "deps", "python");
 }
 function hashFile(path5) {
-  return createHash13("sha256").update(readFileSync64(path5)).digest("hex");
+  return createHash13("sha256").update(readFileSync65(path5)).digest("hex");
 }
 function ensurePythonEnv(opts) {
   const { skillName, requirementsPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultPythonCacheRoot();
   const hostPython = opts.pythonBin ?? "python3";
-  if (!existsSync71(requirementsPath)) {
+  if (!existsSync72(requirementsPath)) {
     throw new PythonEnvError(`requirements file not found: ${requirementsPath}`);
   }
-  const venvDir = join73(cacheRoot, skillName);
-  const stampPath = join73(venvDir, ".requirements.sha256");
-  const binDir = join73(venvDir, "bin");
-  const pythonBin = join73(binDir, "python");
-  const pipBin = join73(binDir, "pip");
+  const venvDir = join74(cacheRoot, skillName);
+  const stampPath = join74(venvDir, ".requirements.sha256");
+  const binDir = join74(venvDir, "bin");
+  const pythonBin = join74(binDir, "python");
+  const pipBin = join74(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
-  if (!force && existsSync71(stampPath) && existsSync71(pythonBin)) {
-    const existingHash = readFileSync64(stampPath, "utf8").trim();
+  if (!force && existsSync72(stampPath) && existsSync72(pythonBin)) {
+    const existingHash = readFileSync65(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -87495,10 +87697,10 @@ function ensurePythonEnv(opts) {
       };
     }
   }
-  if (existsSync71(venvDir)) {
+  if (existsSync72(venvDir)) {
     rmSync13(venvDir, { recursive: true, force: true });
   }
-  mkdirSync37(dirname23(venvDir), { recursive: true });
+  mkdirSync38(dirname25(venvDir), { recursive: true });
   try {
     execFileSync21(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
@@ -87517,7 +87719,7 @@ function ensurePythonEnv(opts) {
     const e = err;
     throw new PythonEnvError(`Failed to install requirements for skill "${skillName}": ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync20(stampPath, targetHash + `
+  writeFileSync21(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -87533,13 +87735,13 @@ function ensurePythonEnv(opts) {
 import { createHash as createHash14 } from "node:crypto";
 import {
   copyFileSync as copyFileSync10,
-  existsSync as existsSync72,
-  mkdirSync as mkdirSync38,
-  readFileSync as readFileSync65,
+  existsSync as existsSync73,
+  mkdirSync as mkdirSync39,
+  readFileSync as readFileSync66,
   rmSync as rmSync14,
-  writeFileSync as writeFileSync21
+  writeFileSync as writeFileSync22
 } from "node:fs";
-import { dirname as dirname24, join as join74 } from "node:path";
+import { dirname as dirname26, join as join75 } from "node:path";
 import { homedir as homedir43 } from "node:os";
 import { execFileSync as execFileSync22 } from "node:child_process";
 
@@ -87563,23 +87765,23 @@ var LOCKFILES_FOR = {
   npm: ["package-lock.json"]
 };
 function defaultNodeCacheRoot() {
-  return join74(homedir43(), ".switchroom", "deps", "node");
+  return join75(homedir43(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
-  const sourceDir = dirname24(packageJsonPath);
+  const sourceDir = dirname26(packageJsonPath);
   const hasher = createHash14("sha256");
   hasher.update(`package.json
 `);
-  hasher.update(readFileSync65(packageJsonPath));
+  hasher.update(readFileSync66(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
-    const lockPath = join74(sourceDir, lockName);
-    if (existsSync72(lockPath)) {
+    const lockPath = join75(sourceDir, lockName);
+    if (existsSync73(lockPath)) {
       hasher.update(`
 `);
       hasher.update(lockName);
       hasher.update(`
 `);
-      hasher.update(readFileSync65(lockPath));
+      hasher.update(readFileSync66(lockPath));
     }
   }
   return hasher.digest("hex");
@@ -87588,17 +87790,17 @@ function ensureNodeEnv(opts) {
   const { skillName, packageJsonPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultNodeCacheRoot();
   const installer = opts.installer ?? "bun";
-  if (!existsSync72(packageJsonPath)) {
+  if (!existsSync73(packageJsonPath)) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
-  const sourceDir = dirname24(packageJsonPath);
-  const envDir = join74(cacheRoot, skillName);
-  const stampPath = join74(envDir, ".package.sha256");
-  const nodeModulesDir = join74(envDir, "node_modules");
-  const binDir = join74(nodeModulesDir, ".bin");
+  const sourceDir = dirname26(packageJsonPath);
+  const envDir = join75(cacheRoot, skillName);
+  const stampPath = join75(envDir, ".package.sha256");
+  const nodeModulesDir = join75(envDir, "node_modules");
+  const binDir = join75(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
-  if (!force && existsSync72(stampPath) && existsSync72(nodeModulesDir)) {
-    const existingHash = readFileSync65(stampPath, "utf8").trim();
+  if (!force && existsSync73(stampPath) && existsSync73(nodeModulesDir)) {
+    const existingHash = readFileSync66(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -87609,16 +87811,16 @@ function ensureNodeEnv(opts) {
       };
     }
   }
-  if (existsSync72(envDir)) {
+  if (existsSync73(envDir)) {
     rmSync14(envDir, { recursive: true, force: true });
   }
-  mkdirSync38(envDir, { recursive: true });
-  copyFileSync10(packageJsonPath, join74(envDir, "package.json"));
+  mkdirSync39(envDir, { recursive: true });
+  copyFileSync10(packageJsonPath, join75(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
-    const lockPath = join74(sourceDir, lockName);
-    if (existsSync72(lockPath)) {
-      copyFileSync10(lockPath, join74(envDir, lockName));
+    const lockPath = join75(sourceDir, lockName);
+    if (existsSync73(lockPath)) {
+      copyFileSync10(lockPath, join75(envDir, lockName));
       copiedLockfile = true;
     }
   }
@@ -87634,7 +87836,7 @@ function ensureNodeEnv(opts) {
     const e = err;
     throw new NodeEnvError(`Failed to install node deps for skill "${skillName}" with ${installer}: ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync21(stampPath, targetHash + `
+  writeFileSync22(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -87653,22 +87855,22 @@ function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
   deps.command("rebuild <skill>").description("Rebuild the Python venv and/or Node node_modules cache for a skill").option("-p, --python", "Rebuild only the Python env").option("-n, --node", "Rebuild only the Node env").action(async (skill, opts) => {
     const skillsRoot = builtinSkillsRoot();
-    if (!existsSync73(skillsRoot)) {
+    if (!existsSync74(skillsRoot)) {
       console.error(source_default.red(`Bundled skills pool dir not found at ${skillsRoot} \u2014 run \`switchroom update\` to install it.`));
       process.exit(1);
     }
-    const skillDir = join75(skillsRoot, skill);
-    if (!existsSync73(skillDir)) {
+    const skillDir = join76(skillsRoot, skill);
+    if (!existsSync74(skillDir)) {
       console.error(source_default.red(`Unknown skill: ${skill} (no dir at ${skillDir})`));
       process.exit(1);
     }
-    const requirementsPath = join75(skillDir, "requirements.txt");
-    const packageJsonPath = join75(skillDir, "package.json");
-    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync73(requirementsPath));
-    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync73(packageJsonPath));
+    const requirementsPath = join76(skillDir, "requirements.txt");
+    const packageJsonPath = join76(skillDir, "package.json");
+    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync74(requirementsPath));
+    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync74(packageJsonPath));
     let did = 0;
     if (wantPython) {
-      if (!existsSync73(requirementsPath)) {
+      if (!existsSync74(requirementsPath)) {
         console.error(source_default.red(`Skill "${skill}" has no requirements.txt at ${requirementsPath}`));
         process.exit(1);
       }
@@ -87692,7 +87894,7 @@ function registerDepsCommand(program3) {
       }
     }
     if (wantNode) {
-      if (!existsSync73(packageJsonPath)) {
+      if (!existsSync74(packageJsonPath)) {
         console.error(source_default.red(`Skill "${skill}" has no package.json at ${packageJsonPath}`));
         process.exit(1);
       }
@@ -87725,7 +87927,7 @@ function registerDepsCommand(program3) {
 // src/cli/workspace.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync74 } from "node:fs";
+import { existsSync as existsSync75 } from "node:fs";
 import { resolve as resolve45, sep as sep3 } from "node:path";
 import { spawnSync as spawnSync15 } from "node:child_process";
 
@@ -88502,7 +88704,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve45(dir, ".git");
-    if (!existsSync74(gitDir)) {
+    if (!existsSync75(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
       return;
@@ -88556,7 +88758,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve45(dir, ".git");
-    if (!existsSync74(gitDir)) {
+    if (!existsSync75(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
       return;
@@ -88581,7 +88783,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve45(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync74(dir)) {
+  if (!existsSync75(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
 `);
     return;
@@ -88617,8 +88819,8 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync11, existsSync as existsSync75, readFileSync as readFileSync66, writeFileSync as writeFileSync22 } from "node:fs";
-import { join as join76, resolve as resolve46 } from "node:path";
+import { copyFileSync as copyFileSync11, existsSync as existsSync76, readFileSync as readFileSync67, writeFileSync as writeFileSync23 } from "node:fs";
+import { join as join77, resolve as resolve46 } from "node:path";
 init_scaffold();
 init_profiles();
 init_schema();
@@ -88635,7 +88837,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve46(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync75(workspaceDir)) {
+  if (!existsSync76(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
     process.exit(1);
   }
@@ -88644,7 +88846,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
     profileName,
     profilePath,
     workspaceDir,
-    soulPath: join76(workspaceDir, "SOUL.md"),
+    soulPath: join77(workspaceDir, "SOUL.md"),
     soul: merged.soul
   };
 }
@@ -88661,11 +88863,11 @@ function registerSoulCommand(program3) {
     const t = resolveSoulTargetOrExit(program3, agentName);
     if (!t)
       return;
-    if (!existsSync75(t.soulPath)) {
+    if (!existsSync76(t.soulPath)) {
       console.error(`soul: ${t.soulPath} does not exist yet \u2014 run ` + `\`switchroom soul reset ${agentName}\` to seed it.`);
       process.exit(1);
     }
-    process.stdout.write(readFileSync66(t.soulPath, "utf-8"));
+    process.stdout.write(readFileSync67(t.soulPath, "utf-8"));
   }));
   cmd.command("reset <agent>").description("Re-seed SOUL.md from the agent's current profile " + "(backs the existing file up to SOUL.md.bak first)").option("-y, --yes", "Skip the confirmation prompt").action(withConfigError(async (agentName, opts) => {
     const t = resolveSoulTargetOrExit(program3, agentName);
@@ -88676,7 +88878,7 @@ function registerSoulCommand(program3) {
       console.error(`soul: profile "${t.profileName}" ships no SOUL.md.hbs \u2014 ` + `nothing to re-seed from.`);
       process.exit(1);
     }
-    const exists = existsSync75(t.soulPath);
+    const exists = existsSync76(t.soulPath);
     if (exists && !opts.yes) {
       if (!isInteractive()) {
         console.error(`soul: ${t.soulPath} already exists. Re-run with --yes to ` + `replace it (the current file is backed up to SOUL.md.bak).`);
@@ -88691,12 +88893,12 @@ function registerSoulCommand(program3) {
     let backupPath;
     if (exists) {
       backupPath = `${t.soulPath}.bak`;
-      if (existsSync75(backupPath)) {
+      if (existsSync76(backupPath)) {
         backupPath = `${t.soulPath}.bak.${Date.now()}`;
       }
       copyFileSync11(t.soulPath, backupPath);
     }
-    writeFileSync22(t.soulPath, content, "utf-8");
+    writeFileSync23(t.soulPath, content, "utf-8");
     if (backupPath) {
       console.log(`soul: re-seeded ${agentName}'s SOUL.md from profile ` + `"${t.profileName}".
 ` + `      Previous version saved to ${backupPath}`);
@@ -88710,8 +88912,8 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync76, readFileSync as readFileSync67, readdirSync as readdirSync26, statSync as statSync44 } from "node:fs";
-import { resolve as resolve47, join as join77 } from "node:path";
+import { existsSync as existsSync77, readFileSync as readFileSync68, readdirSync as readdirSync27, statSync as statSync44 } from "node:fs";
+import { resolve as resolve47, join as join78 } from "node:path";
 import { createHash as createHash15 } from "node:crypto";
 init_merge();
 init_hindsight2();
@@ -88722,11 +88924,11 @@ function estimateTokens(bytes) {
   return Math.round(bytes / 3.7);
 }
 function readMcpServerNames(agentDir) {
-  const mcpPath = join77(agentDir, ".mcp.json");
-  if (!existsSync76(mcpPath))
+  const mcpPath = join78(agentDir, ".mcp.json");
+  if (!existsSync77(mcpPath))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync67(mcpPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync68(mcpPath, "utf-8"));
     return Object.keys(parsed.mcpServers ?? {});
   } catch {
     return null;
@@ -88736,18 +88938,18 @@ function sha256(content) {
   return createHash15("sha256").update(content).digest("hex").slice(0, 16);
 }
 function findLatestTranscriptJsonl(claudeConfigDir) {
-  const projectsDir = join77(claudeConfigDir, "projects");
-  if (!existsSync76(projectsDir))
+  const projectsDir = join78(claudeConfigDir, "projects");
+  if (!existsSync77(projectsDir))
     return;
   try {
-    const entries = readdirSync26(projectsDir, { withFileTypes: true });
+    const entries = readdirSync27(projectsDir, { withFileTypes: true });
     let latest;
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const projectPath = join77(projectsDir, entry.name);
-      const transcriptPath = join77(projectPath, "transcript.jsonl");
-      if (!existsSync76(transcriptPath))
+      const projectPath = join78(projectsDir, entry.name);
+      const transcriptPath = join78(projectPath, "transcript.jsonl");
+      if (!existsSync77(transcriptPath))
         continue;
       const stat3 = statSync44(transcriptPath);
       if (!latest || stat3.mtimeMs > latest.mtime) {
@@ -88761,7 +88963,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
 }
 function extractLatestUserMessage(transcriptPath) {
   try {
-    const content = readFileSync67(transcriptPath, "utf-8");
+    const content = readFileSync68(transcriptPath, "utf-8");
     const lines = content.trim().split(`
 `).filter(Boolean);
     for (let i = lines.length - 1;i >= 0; i--) {
@@ -88810,16 +89012,16 @@ function registerDebugCommand(program3) {
     }
     const agentsDir = resolveAgentsDir(config);
     const agentDir = resolve47(agentsDir, agentName);
-    if (!existsSync76(agentDir)) {
+    if (!existsSync77(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
     }
     const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-    const claudeConfigDir = join77(agentDir, ".claude");
-    const claudeMdPath = join77(agentDir, "CLAUDE.md");
-    const soulMdPath = join77(agentDir, "SOUL.md");
-    const workspaceSoulMdPath = join77(workspaceDir, "SOUL.md");
-    const handoffPath = join77(agentDir, ".handoff.md");
+    const claudeConfigDir = join78(agentDir, ".claude");
+    const claudeMdPath = join78(agentDir, "CLAUDE.md");
+    const soulMdPath = join78(agentDir, "SOUL.md");
+    const workspaceSoulMdPath = join78(workspaceDir, "SOUL.md");
+    const handoffPath = join78(agentDir, ".handoff.md");
     const lastN = parseInt(opts.last, 10);
     if (isNaN(lastN) || lastN < 1) {
       console.error("--last must be a positive integer");
@@ -88865,7 +89067,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Append System Prompt (per-session) ===
 `);
-    const handoffContent = existsSync76(handoffPath) ? readFileSync67(handoffPath, "utf-8") : "";
+    const handoffContent = existsSync77(handoffPath) ? readFileSync68(handoffPath, "utf-8") : "";
     if (handoffContent.trim().length > 0) {
       console.log(`-- Handoff Briefing (${formatBytes(handoffContent.length)}) --`);
       console.log(handoffContent);
@@ -88876,7 +89078,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== CLAUDE.md (auto-loaded by Claude Code) ===
 `);
-    const claudeMdContent = existsSync76(claudeMdPath) ? readFileSync67(claudeMdPath, "utf-8") : "";
+    const claudeMdContent = existsSync77(claudeMdPath) ? readFileSync68(claudeMdPath, "utf-8") : "";
     if (claudeMdContent.trim().length > 0) {
       console.log(`(${formatBytes(claudeMdContent.length)})`);
       console.log(claudeMdContent);
@@ -88887,7 +89089,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Persona (SOUL.md) ===
 `);
-    const soulMdContent = existsSync76(soulMdPath) ? readFileSync67(soulMdPath, "utf-8") : existsSync76(workspaceSoulMdPath) ? readFileSync67(workspaceSoulMdPath, "utf-8") : "";
+    const soulMdContent = existsSync77(soulMdPath) ? readFileSync68(soulMdPath, "utf-8") : existsSync77(workspaceSoulMdPath) ? readFileSync68(workspaceSoulMdPath, "utf-8") : "";
     if (soulMdContent.trim().length > 0) {
       console.log(`(${formatBytes(soulMdContent.length)})`);
       console.log(soulMdContent);
@@ -88948,11 +89150,11 @@ function registerDebugCommand(program3) {
     const soulMdBytes = soulMdContent.length;
     const perTurnBytes = dynamicResult.concatenated.length;
     const userBytes = userMessage?.text.length ?? 0;
-    const fleetDir = join77(agentsDir, "..", "fleet");
-    const fleetInvPath = join77(fleetDir, "switchroom-invariants.md");
-    const fleetClaudePath = join77(fleetDir, "CLAUDE.md");
-    const fleetInvBytes = existsSync76(fleetInvPath) ? readFileSync67(fleetInvPath, "utf-8").length : 0;
-    const fleetClaudeBytes = existsSync76(fleetClaudePath) ? readFileSync67(fleetClaudePath, "utf-8").length : 0;
+    const fleetDir = join78(agentsDir, "..", "fleet");
+    const fleetInvPath = join78(fleetDir, "switchroom-invariants.md");
+    const fleetClaudePath = join78(fleetDir, "CLAUDE.md");
+    const fleetInvBytes = existsSync77(fleetInvPath) ? readFileSync68(fleetInvPath, "utf-8").length : 0;
+    const fleetClaudeBytes = existsSync77(fleetClaudePath) ? readFileSync68(fleetClaudePath, "utf-8").length : 0;
     const fleetBytes = fleetInvBytes + fleetClaudeBytes;
     const totalBytes = stableBytes + perSessionBytes + claudeMdBytes + fleetBytes + perTurnBytes + userBytes;
     console.log(`Stable prefix:     ${formatBytes(stableBytes).padEnd(20)} (cache-hot; includes SOUL.md ${soulMdBytes.toLocaleString()}B)`);
@@ -88985,44 +89187,44 @@ init_source();
 
 // src/worktree/claim.ts
 import { execFileSync as execFileSync23 } from "node:child_process";
-import { closeSync as closeSync13, mkdirSync as mkdirSync40, openSync as openSync13, existsSync as existsSync78, unlinkSync as unlinkSync17 } from "node:fs";
-import { join as join79, resolve as resolve49 } from "node:path";
+import { closeSync as closeSync13, mkdirSync as mkdirSync41, openSync as openSync13, existsSync as existsSync79, unlinkSync as unlinkSync17 } from "node:fs";
+import { join as join80, resolve as resolve49 } from "node:path";
 import { homedir as homedir46 } from "node:os";
 import { randomBytes as randomBytes13 } from "node:crypto";
 
 // src/worktree/registry.ts
 import {
-  mkdirSync as mkdirSync39,
-  writeFileSync as writeFileSync23,
-  readFileSync as readFileSync68,
-  readdirSync as readdirSync27,
+  mkdirSync as mkdirSync40,
+  writeFileSync as writeFileSync24,
+  readFileSync as readFileSync69,
+  readdirSync as readdirSync28,
   unlinkSync as unlinkSync16,
-  existsSync as existsSync77,
-  renameSync as renameSync17
+  existsSync as existsSync78,
+  renameSync as renameSync18
 } from "node:fs";
-import { join as join78, resolve as resolve48 } from "node:path";
+import { join as join79, resolve as resolve48 } from "node:path";
 import { homedir as homedir45 } from "node:os";
 function registryDir() {
-  return resolve48(process.env.SWITCHROOM_WORKTREE_DIR ?? join78(homedir45(), ".switchroom", "worktrees"));
+  return resolve48(process.env.SWITCHROOM_WORKTREE_DIR ?? join79(homedir45(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join78(registryDir(), `${id}.json`);
+  return join79(registryDir(), `${id}.json`);
 }
 function ensureDir2() {
-  mkdirSync39(registryDir(), { recursive: true });
+  mkdirSync40(registryDir(), { recursive: true });
 }
 function writeRecord(record2) {
   ensureDir2();
   const target = recordPath(record2.id);
   const tmp = `${target}.tmp${process.pid}`;
-  writeFileSync23(tmp, JSON.stringify(record2, null, 2) + `
+  writeFileSync24(tmp, JSON.stringify(record2, null, 2) + `
 `, { mode: 384 });
-  renameSync17(tmp, target);
+  renameSync18(tmp, target);
 }
 function readRecord(id) {
   const path8 = recordPath(id);
   try {
-    const raw = readFileSync68(path8, "utf8");
+    const raw = readFileSync69(path8, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -89038,7 +89240,7 @@ function listRecords() {
   ensureDir2();
   const dir = registryDir();
   const records = [];
-  for (const entry of readdirSync27(dir)) {
+  for (const entry of readdirSync28(dir)) {
     if (!entry.endsWith(".json"))
       continue;
     const id = entry.slice(0, -5);
@@ -89055,9 +89257,9 @@ function countByRepo(repoPath) {
 // src/worktree/claim.ts
 function acquireRepoLock(repoPath) {
   const lockDir = registryDir();
-  mkdirSync40(lockDir, { recursive: true });
+  mkdirSync41(lockDir, { recursive: true });
   const lockName = repoPath.replace(/[^A-Za-z0-9]/g, "_");
-  const lockPath = join79(lockDir, `.lock-${lockName}`);
+  const lockPath = join80(lockDir, `.lock-${lockName}`);
   const deadline = Date.now() + 5000;
   let fd = null;
   while (fd === null) {
@@ -89084,7 +89286,7 @@ function acquireRepoLock(repoPath) {
 }
 var DEFAULT_CONCURRENCY = 5;
 function worktreesBaseDir() {
-  return resolve49(process.env.SWITCHROOM_WORKTREE_BASE ?? join79(homedir46(), ".switchroom", "worktree-checkouts"));
+  return resolve49(process.env.SWITCHROOM_WORKTREE_BASE ?? join80(homedir46(), ".switchroom", "worktree-checkouts"));
 }
 function shortId() {
   return randomBytes13(4).toString("hex");
@@ -89106,12 +89308,12 @@ function resolveRepoPath(repo, codeRepos) {
 }
 function expandHome(p) {
   if (p.startsWith("~/"))
-    return join79(homedir46(), p.slice(2));
+    return join80(homedir46(), p.slice(2));
   return p;
 }
 async function claimWorktree(input, codeRepos) {
   const repoPath = resolveRepoPath(input.repo, codeRepos);
-  if (!existsSync78(repoPath)) {
+  if (!existsSync79(repoPath)) {
     throw new Error(`Repository path does not exist: ${repoPath}`);
   }
   let concurrencyCap = DEFAULT_CONCURRENCY;
@@ -89133,8 +89335,8 @@ async function claimWorktree(input, codeRepos) {
     const taskSuffix = input.taskName ? sanitizeTaskName(input.taskName) : "task";
     branch = `task/${taskSuffix}-${id}`;
     const baseDir = worktreesBaseDir();
-    mkdirSync40(baseDir, { recursive: true });
-    worktreePath = join79(baseDir, `${id}-${taskSuffix}`);
+    mkdirSync41(baseDir, { recursive: true });
+    worktreePath = join80(baseDir, `${id}-${taskSuffix}`);
     const ambientOwner = process.env.SWITCHROOM_AGENT_NAME;
     const ownerAgent = input.ownerAgent ?? (ambientOwner != null && ambientOwner !== "" ? ambientOwner : undefined);
     const now = new Date().toISOString();
@@ -89167,7 +89369,7 @@ async function claimWorktree(input, codeRepos) {
 
 // src/worktree/release.ts
 import { execFileSync as execFileSync24 } from "node:child_process";
-import { existsSync as existsSync79 } from "node:fs";
+import { existsSync as existsSync80 } from "node:fs";
 function releaseWorktree(input) {
   const { id } = input;
   const record2 = readRecord(id);
@@ -89175,7 +89377,7 @@ function releaseWorktree(input) {
     return { released: true };
   }
   let gitSuccess = true;
-  if (existsSync79(record2.path)) {
+  if (existsSync80(record2.path)) {
     try {
       execFileSync24("git", ["worktree", "remove", "--force", record2.path], {
         cwd: record2.repo,
@@ -89214,7 +89416,7 @@ function listWorktrees() {
 
 // src/worktree/reaper.ts
 import { execFileSync as execFileSync25 } from "node:child_process";
-import { existsSync as existsSync80 } from "node:fs";
+import { existsSync as existsSync81 } from "node:fs";
 var STALE_THRESHOLD_MS = 10 * 60 * 1000;
 function reapSkipReasonText(action) {
   switch (action) {
@@ -89275,7 +89477,7 @@ function planReaper(nowMs, deps = {}) {
   const plan = [];
   for (const record2 of listRecords()) {
     const heartbeatAge = now - new Date(record2.heartbeatAt).getTime();
-    const worktreeExists = existsSync80(record2.path);
+    const worktreeExists = existsSync81(record2.path);
     if (!worktreeExists) {
       plan.push({
         record: record2,
@@ -89356,16 +89558,16 @@ function runReaper(nowMs, deps = {}) {
 // src/worktree/gc.ts
 import { execFileSync as execFileSync26 } from "node:child_process";
 import {
-  existsSync as existsSync81,
-  readFileSync as readFileSync69,
-  readdirSync as readdirSync28,
+  existsSync as existsSync82,
+  readFileSync as readFileSync70,
+  readdirSync as readdirSync29,
   statSync as statSync45,
-  renameSync as renameSync18,
-  mkdirSync as mkdirSync41,
+  renameSync as renameSync19,
+  mkdirSync as mkdirSync42,
   rmSync as rmSync15
 } from "node:fs";
 import { homedir as homedir47 } from "node:os";
-import { join as join80, resolve as resolve50 } from "node:path";
+import { join as join81, resolve as resolve50 } from "node:path";
 function parseGitdirPointer(dotGitFileContents) {
   const m = /^gitdir:\s*(.+?)\s*$/m.exec(dotGitFileContents);
   return m ? m[1] : null;
@@ -89480,17 +89682,17 @@ function defaultPrSignal(repo, branch, exec) {
   }
 }
 function trashRoot() {
-  return resolve50(process.env.SWITCHROOM_WORKTREE_TRASH ?? join80(homedir47(), ".switchroom", "worktree-gc-trash"));
+  return resolve50(process.env.SWITCHROOM_WORKTREE_TRASH ?? join81(homedir47(), ".switchroom", "worktree-gc-trash"));
 }
 function planGc(roots, deps = {}) {
-  const exists = deps.existsSync ?? existsSync81;
-  const readDir = deps.readDir ?? ((p) => readdirSync28(p));
-  const readFile4 = deps.readFile ?? ((p) => readFileSync69(p, "utf8"));
+  const exists = deps.existsSync ?? existsSync82;
+  const readDir = deps.readDir ?? ((p) => readdirSync29(p));
+  const readFile4 = deps.readFile ?? ((p) => readFileSync70(p, "utf8"));
   const stat3 = deps.stat ?? ((p) => statSync45(p));
   const exec = deps.exec ?? defaultExec;
   const prSignal = deps.prSignal ?? ((repo, branch) => defaultPrSignal(repo, branch, exec));
   const stamp = deps.dateStamp ?? "undated";
-  const trash = join80(trashRoot(), stamp);
+  const trash = join81(trashRoot(), stamp);
   let claimed;
   try {
     claimed = new Set(listRecords().map((r) => resolve50(r.path)));
@@ -89526,10 +89728,10 @@ function planGc(roots, deps = {}) {
       continue;
     }
     for (const name of entries) {
-      const dir = join80(root, name);
+      const dir = join81(root, name);
       if (isEphemeralPath(dir))
         continue;
-      const dotGit = join80(dir, ".git");
+      const dotGit = join81(dir, ".git");
       if (!exists(dotGit))
         continue;
       let st;
@@ -89558,7 +89760,7 @@ function planGc(roots, deps = {}) {
       ownerRepos.add(repoRoot);
       if (exists(ptr))
         continue;
-      orphans.push({ dir, owner: repoRoot, dest: join80(trash, name) });
+      orphans.push({ dir, owner: repoRoot, dest: join81(trash, name) });
     }
   }
   const registered = [];
@@ -89613,10 +89815,10 @@ function planGc(roots, deps = {}) {
 }
 function applyGc(plan, deps = {}) {
   const exec = deps.exec ?? defaultExec;
-  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync41(p, { recursive: true }));
+  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync42(p, { recursive: true }));
   const move = deps.move ?? ((src, dest) => {
     try {
-      renameSync18(src, dest);
+      renameSync19(src, dest);
     } catch {
       exec("mv", [src, dest]);
     }
@@ -89662,14 +89864,14 @@ function selectPurgeTargets(entries, olderThanDays) {
   return entries.filter((e) => e.ageDays >= olderThanDays).map((e) => e.path);
 }
 function listTrashEntries(nowMs, deps = {}) {
-  const exists = deps.existsSync ?? existsSync81;
-  const readDir = deps.readDir ?? ((p) => readdirSync28(p));
+  const exists = deps.existsSync ?? existsSync82;
+  const readDir = deps.readDir ?? ((p) => readdirSync29(p));
   const root = trashRoot();
   if (!exists(root))
     return [];
   const out = [];
   for (const stamp of readDir(root)) {
-    const stampDir = join80(root, stamp);
+    const stampDir = join81(root, stamp);
     let names;
     try {
       names = readDir(stampDir);
@@ -89677,7 +89879,7 @@ function listTrashEntries(nowMs, deps = {}) {
       continue;
     }
     for (const name of names) {
-      const p = join80(stampDir, name);
+      const p = join81(stampDir, name);
       let mtimeMs = nowMs;
       try {
         mtimeMs = statSync45(p).mtimeMs;
@@ -89701,7 +89903,7 @@ function purgeTrash(paths) {
   return { deleted, errors: errors2 };
 }
 function defaultRoots() {
-  return [join80(homedir47(), "code")];
+  return [join81(homedir47(), "code")];
 }
 
 // src/cli/worktree.ts
@@ -89924,12 +90126,12 @@ init_drive();
 init_scaffold_integration();
 import {
   chmodSync as chmodSync11,
-  mkdirSync as mkdirSync42,
-  readdirSync as readdirSync29,
+  mkdirSync as mkdirSync43,
+  readdirSync as readdirSync30,
   rmSync as rmSync16,
-  writeFileSync as writeFileSync24
+  writeFileSync as writeFileSync25
 } from "node:fs";
-import { join as join81 } from "node:path";
+import { join as join82 } from "node:path";
 function encodeCredentialsFilename(email) {
   const SAFE = new Set([
     ..."ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
@@ -90119,17 +90321,17 @@ function resolveCredentialsDir(env2) {
   if (explicit && explicit.length > 0)
     return explicit;
   const stateBase = env2.SWITCHROOM_CONTAINER === "1" ? "/state/agent" : env2.HOME ?? ".";
-  return join81(stateBase, "google-workspace-mcp", "credentials");
+  return join82(stateBase, "google-workspace-mcp", "credentials");
 }
 function writeSeedFile(dir, email, seed) {
-  mkdirSync42(dir, { recursive: true, mode: 448 });
+  mkdirSync43(dir, { recursive: true, mode: 448 });
   chmodSync11(dir, 448);
-  for (const name of readdirSync29(dir)) {
-    rmSync16(join81(dir, name), { force: true, recursive: true });
+  for (const name of readdirSync30(dir)) {
+    rmSync16(join82(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
-  const filePath = join81(dir, filename);
-  writeFileSync24(filePath, JSON.stringify(seed), { mode: 384 });
+  const filePath = join82(dir, filename);
+  writeFileSync25(filePath, JSON.stringify(seed), { mode: 384 });
   chmodSync11(filePath, 384);
   return filePath;
 }
@@ -90287,8 +90489,8 @@ function registerDriveMcpLauncherCommand(program3) {
 // src/cli/m365-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn5 } from "node:child_process";
-import { writeFileSync as writeFileSync25, mkdirSync as mkdirSync43 } from "node:fs";
-import { dirname as dirname25, join as join82 } from "node:path";
+import { writeFileSync as writeFileSync26, mkdirSync as mkdirSync44 } from "node:fs";
+import { dirname as dirname27, join as join83 } from "node:path";
 var SOFTERIA_TOKEN_ENV = "MS365_MCP_OAUTH_TOKEN";
 var DEFAULT_REFRESH_LEAD_MS = 5 * 60 * 1000;
 var MAX_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
@@ -90324,8 +90526,8 @@ function computeRefreshDelayMs(expiresAt, now, leadMs = DEFAULT_REFRESH_LEAD_MS)
 function writeRefreshHeartbeat(agentName, data, account) {
   const path8 = heartbeatPath(agentName, account);
   try {
-    mkdirSync43(dirname25(path8), { recursive: true });
-    writeFileSync25(path8, JSON.stringify(data, null, 2), { mode: 420 });
+    mkdirSync44(dirname27(path8), { recursive: true });
+    writeFileSync26(path8, JSON.stringify(data, null, 2), { mode: 420 });
   } catch {}
 }
 function heartbeatPath(agentName, account) {
@@ -90333,7 +90535,7 @@ function heartbeatPath(agentName, account) {
   const override = process.env.SWITCHROOM_M365_HEARTBEAT_DIR;
   if (override) {
     const base = slug ? `m365-launcher-${agentName}-${slug}` : `m365-launcher-${agentName}`;
-    return join82(override, `${base}.heartbeat.json`);
+    return join83(override, `${base}.heartbeat.json`);
   }
   return slug ? `/state/agent/m365-launcher-${slug}.heartbeat.json` : "/state/agent/m365-launcher.heartbeat.json";
 }
@@ -90565,8 +90767,8 @@ function registerM365McpLauncherCommand(program3) {
 // src/cli/notion-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn6 } from "node:child_process";
-import { existsSync as existsSync82, mkdirSync as mkdirSync44, writeFileSync as writeFileSync26 } from "node:fs";
-import { dirname as dirname26 } from "node:path";
+import { existsSync as existsSync83, mkdirSync as mkdirSync45, writeFileSync as writeFileSync27 } from "node:fs";
+import { dirname as dirname28 } from "node:path";
 var HEARTBEAT_WRITE_INTERVAL_MS = 30 * 1000;
 var DEFAULT_HEARTBEAT_PATH = "/state/agent/notion-launcher.heartbeat.json";
 var DEFAULT_VAULT_KEY = "notion/integration-token";
@@ -90576,10 +90778,10 @@ function buildNotionMcpArgs(opts) {
 }
 function defaultWriteHeartbeat(path8, contents) {
   try {
-    const dir = dirname26(path8);
-    if (!existsSync82(dir))
-      mkdirSync44(dir, { recursive: true });
-    writeFileSync26(path8, contents);
+    const dir = dirname28(path8);
+    if (!existsSync83(dir))
+      mkdirSync45(dir, { recursive: true });
+    writeFileSync27(path8, contents);
   } catch {}
 }
 async function runNotionMcpLauncher(opts, runtime) {
@@ -90689,9 +90891,9 @@ function registerNotionMcpLauncherCommand(program3) {
 
 // src/cli/hindsight-mcp-shim.ts
 init_hindsight();
-import { mkdirSync as mkdirSync45, readFileSync as readFileSync70, renameSync as renameSync19, writeFileSync as writeFileSync27 } from "node:fs";
+import { mkdirSync as mkdirSync46, readFileSync as readFileSync71, renameSync as renameSync20, writeFileSync as writeFileSync28 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
-import { join as join83 } from "node:path";
+import { join as join84 } from "node:path";
 import { createInterface as createInterface6 } from "node:readline";
 var SHIM_SUPPORTED_PROTOCOL_VERSIONS = [
   "2025-06-18",
@@ -90914,22 +91116,22 @@ class HindsightShim {
 `));
   }
   get cachePath() {
-    return join83(this.opts.cacheDir, TOOLS_CACHE_FILENAME);
+    return join84(this.opts.cacheDir, TOOLS_CACHE_FILENAME);
   }
   writeCache(result) {
     try {
-      mkdirSync45(this.opts.cacheDir, { recursive: true });
-      const tmp = join83(this.opts.cacheDir, `.${TOOLS_CACHE_FILENAME}.${process.pid}.tmp`);
-      writeFileSync27(tmp, JSON.stringify(result, null, 2) + `
+      mkdirSync46(this.opts.cacheDir, { recursive: true });
+      const tmp = join84(this.opts.cacheDir, `.${TOOLS_CACHE_FILENAME}.${process.pid}.tmp`);
+      writeFileSync28(tmp, JSON.stringify(result, null, 2) + `
 `);
-      renameSync19(tmp, this.cachePath);
+      renameSync20(tmp, this.cachePath);
     } catch (err) {
       this.log(`[hindsight-shim] cache write failed: ${String(err)}`);
     }
   }
   readCache() {
     try {
-      const parsed = JSON.parse(readFileSync70(this.cachePath, "utf-8"));
+      const parsed = JSON.parse(readFileSync71(this.cachePath, "utf-8"));
       if (Array.isArray(parsed.tools))
         return parsed;
       return null;
@@ -91092,7 +91294,7 @@ function resolveShimOptionsFromEnv(env2) {
   return {
     url: env2.HINDSIGHT_MCP_URL || HINDSIGHT_DEFAULT_MCP_URL,
     bankId: env2.HINDSIGHT_BANK_ID || "",
-    cacheDir: env2.HINDSIGHT_SHIM_CACHE_DIR || join83(home2, ".hindsight-shim")
+    cacheDir: env2.HINDSIGHT_SHIM_CACHE_DIR || join84(home2, ".hindsight-shim")
   };
 }
 function registerHindsightMcpShimCommand(program3) {
@@ -91105,7 +91307,7 @@ function registerHindsightMcpShimCommand(program3) {
 
 // src/cli/deliver-file.ts
 init_client2();
-import { readFileSync as readFileSync71, statSync as statSync46 } from "node:fs";
+import { readFileSync as readFileSync72, statSync as statSync46 } from "node:fs";
 import { basename as basename11 } from "node:path";
 
 // src/delivery/onedrive.ts
@@ -91445,7 +91647,7 @@ async function defaultResolveProvider() {
 async function runDeliverFile(localPath, deps = {}) {
   const agentName = safeAgentName(deps.agentName ?? process.env.SWITCHROOM_AGENT_NAME);
   const sizeOf = deps.fileSize ?? ((p) => statSync46(p).size);
-  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync71(p)));
+  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync72(p)));
   const resolveProvider = deps.resolveProvider ?? defaultResolveProvider;
   let size;
   try {
@@ -91766,8 +91968,8 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync75, existsSync as existsSync87, readdirSync as readdirSync31 } from "node:fs";
-import { join as join88 } from "node:path";
+import { readFileSync as readFileSync76, existsSync as existsSync88, readdirSync as readdirSync32 } from "node:fs";
+import { join as join89 } from "node:path";
 import { homedir as homedir50 } from "node:os";
 
 // src/status-ask/report.ts
@@ -92042,7 +92244,7 @@ function runReport(opts) {
   for (const src of sources) {
     let content;
     try {
-      content = readFileSync75(src.path, "utf-8");
+      content = readFileSync76(src.path, "utf-8");
     } catch (err) {
       process.stderr.write(`status-ask report: cannot read ${src.path}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -92089,7 +92291,7 @@ function runReport(opts) {
 function resolveSources(explicitPath) {
   if (explicitPath != null && explicitPath.trim() !== "") {
     const trimmed = explicitPath.trim();
-    if (!existsSync87(trimmed)) {
+    if (!existsSync88(trimmed)) {
       process.stderr.write(`status-ask report: ${trimmed}: file not found
 `);
       process.exit(1);
@@ -92103,20 +92305,20 @@ function resolveSources(explicitPath) {
     const config = loadConfig();
     agentsDir = resolveAgentsDir(config);
   } catch {
-    agentsDir = join88(homedir50(), ".switchroom", "agents");
+    agentsDir = join89(homedir50(), ".switchroom", "agents");
   }
-  if (!existsSync87(agentsDir))
+  if (!existsSync88(agentsDir))
     return [];
   const sources = [];
   let entries;
   try {
-    entries = readdirSync31(agentsDir);
+    entries = readdirSync32(agentsDir);
   } catch {
     return [];
   }
   for (const name of entries) {
-    const path9 = join88(agentsDir, name, "runtime-metrics.jsonl");
-    if (existsSync87(path9)) {
+    const path9 = join89(agentsDir, name, "runtime-metrics.jsonl");
+    if (existsSync88(path9)) {
       sources.push({ path: path9, agent: name });
     }
   }
@@ -92146,45 +92348,45 @@ var import_yaml21 = __toESM(require_dist(), 1);
 init_paths();
 import {
   closeSync as closeSync14,
-  existsSync as existsSync88,
+  existsSync as existsSync89,
   fsyncSync as fsyncSync8,
-  mkdirSync as mkdirSync50,
+  mkdirSync as mkdirSync51,
   openSync as openSync14,
-  readdirSync as readdirSync32,
-  readFileSync as readFileSync76,
-  renameSync as renameSync21,
+  readdirSync as readdirSync33,
+  readFileSync as readFileSync77,
+  renameSync as renameSync22,
   statSync as statSync48,
   unlinkSync as unlinkSync18,
   writeSync as writeSync10
 } from "node:fs";
-import { join as join89, resolve as resolve53 } from "node:path";
+import { join as join90, resolve as resolve53 } from "node:path";
 var STAGING_SUBDIR = ".staging";
 function overlayPathsFor(agent, opts = {}) {
   const base = opts.root ? resolve53(opts.root, agent) : resolve53(resolveDualPath(`~/.switchroom/agents/${agent}`));
-  const scheduleDir = join89(base, "schedule.d");
-  const scheduleStagingDir = join89(scheduleDir, STAGING_SUBDIR);
-  const skillsDir = join89(base, "skills.d");
-  const skillsStagingDir = join89(skillsDir, STAGING_SUBDIR);
+  const scheduleDir = join90(base, "schedule.d");
+  const scheduleStagingDir = join90(scheduleDir, STAGING_SUBDIR);
+  const skillsDir = join90(base, "skills.d");
+  const skillsStagingDir = join90(skillsDir, STAGING_SUBDIR);
   return {
     agentRoot: base,
     scheduleDir,
     scheduleStagingDir,
     skillsDir,
     skillsStagingDir,
-    lockPath: join89(base, ".lock"),
+    lockPath: join90(base, ".lock"),
     stagingDir: scheduleStagingDir
   };
 }
 function ensureDirs(paths) {
-  mkdirSync50(paths.scheduleDir, { recursive: true });
-  mkdirSync50(paths.scheduleStagingDir, { recursive: true });
+  mkdirSync51(paths.scheduleDir, { recursive: true });
+  mkdirSync51(paths.scheduleStagingDir, { recursive: true });
 }
 function ensureSkillsDirs(paths) {
-  mkdirSync50(paths.skillsDir, { recursive: true });
-  mkdirSync50(paths.skillsStagingDir, { recursive: true });
+  mkdirSync51(paths.skillsDir, { recursive: true });
+  mkdirSync51(paths.skillsStagingDir, { recursive: true });
 }
 function withAgentLock(paths, fn) {
-  mkdirSync50(paths.agentRoot, { recursive: true });
+  mkdirSync51(paths.agentRoot, { recursive: true });
   const start = Date.now();
   const TIMEOUT_MS = 5000;
   let fd = null;
@@ -92225,8 +92427,8 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureDirs(paths);
-    const stagingPath = join89(paths.scheduleStagingDir, `${slug}.yaml`);
-    const finalPath = join89(paths.scheduleDir, `${slug}.yaml`);
+    const stagingPath = join90(paths.scheduleStagingDir, `${slug}.yaml`);
+    const finalPath = join90(paths.scheduleDir, `${slug}.yaml`);
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
@@ -92234,7 +92436,7 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
     } finally {
       closeSync14(fd);
     }
-    renameSync21(stagingPath, finalPath);
+    renameSync22(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -92242,8 +92444,8 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     ensureSkillsDirs(paths);
-    const stagingPath = join89(paths.skillsStagingDir, `${slug}.yaml`);
-    const finalPath = join89(paths.skillsDir, `${slug}.yaml`);
+    const stagingPath = join90(paths.skillsStagingDir, `${slug}.yaml`);
+    const finalPath = join90(paths.skillsDir, `${slug}.yaml`);
     const fd = openSync14(stagingPath, "w", 384);
     try {
       writeSync10(fd, yamlText);
@@ -92251,15 +92453,15 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
     } finally {
       closeSync14(fd);
     }
-    renameSync21(stagingPath, finalPath);
+    renameSync22(stagingPath, finalPath);
     return finalPath;
   });
 }
 function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join89(paths.skillsDir, `${slug}.yaml`);
-    if (!existsSync88(finalPath))
+    const finalPath = join90(paths.skillsDir, `${slug}.yaml`);
+    if (!existsSync89(finalPath))
       return false;
     unlinkSync18(finalPath);
     return true;
@@ -92267,15 +92469,15 @@ function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
 }
 function listSkillsOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync88(paths.skillsDir))
+  if (!existsSync89(paths.skillsDir))
     return [];
   const out = [];
-  for (const name of readdirSync32(paths.skillsDir)) {
+  for (const name of readdirSync33(paths.skillsDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join89(paths.skillsDir, name);
+    const full = join90(paths.skillsDir, name);
     try {
-      const raw = readFileSync76(full, "utf-8");
+      const raw = readFileSync77(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -92285,8 +92487,8 @@ function listSkillsOverlayEntries(agent, opts = {}) {
 function deleteOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
-    const finalPath = join89(paths.scheduleDir, `${slug}.yaml`);
-    if (!existsSync88(finalPath))
+    const finalPath = join90(paths.scheduleDir, `${slug}.yaml`);
+    if (!existsSync89(finalPath))
       return false;
     unlinkSync18(finalPath);
     return true;
@@ -92294,15 +92496,15 @@ function deleteOverlayEntry(agent, slug, opts = {}) {
 }
 function listOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync88(paths.scheduleDir))
+  if (!existsSync89(paths.scheduleDir))
     return [];
   const out = [];
-  for (const name of readdirSync32(paths.scheduleDir)) {
+  for (const name of readdirSync33(paths.scheduleDir)) {
     if (!/\.ya?ml$/i.test(name))
       continue;
-    const full = join89(paths.scheduleDir, name);
+    const full = join90(paths.scheduleDir, name);
     try {
-      const raw = readFileSync76(full, "utf-8");
+      const raw = readFileSync77(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -92522,27 +92724,27 @@ function reconcileAgentCronOnly(agent) {
 // src/cli/agent-config-pending.ts
 import {
   closeSync as closeSync15,
-  existsSync as existsSync89,
+  existsSync as existsSync90,
   fsyncSync as fsyncSync9,
-  mkdirSync as mkdirSync51,
+  mkdirSync as mkdirSync52,
   openSync as openSync15,
-  readdirSync as readdirSync33,
-  readFileSync as readFileSync77,
-  renameSync as renameSync22,
+  readdirSync as readdirSync34,
+  readFileSync as readFileSync78,
+  renameSync as renameSync23,
   unlinkSync as unlinkSync19,
-  writeFileSync as writeFileSync32,
+  writeFileSync as writeFileSync33,
   writeSync as writeSync11
 } from "node:fs";
-import { join as join90 } from "node:path";
+import { join as join91 } from "node:path";
 import { randomBytes as randomBytes15 } from "node:crypto";
 var STAGE_ID_PREFIX = "cap_";
 function pendingDir(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  return join90(paths.scheduleDir, ".pending");
+  return join91(paths.scheduleDir, ".pending");
 }
 function ensurePendingDir(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  mkdirSync51(dir, { recursive: true });
+  mkdirSync52(dir, { recursive: true });
   return dir;
 }
 function newStageId() {
@@ -92551,8 +92753,8 @@ function newStageId() {
 function stagePendingScheduleEntry(opts) {
   const dir = ensurePendingDir(opts.agent, { root: opts.root });
   const stageId = opts.stageId ?? newStageId();
-  const yamlPath = join90(dir, `${stageId}.yaml`);
-  const metaPath = join90(dir, `${stageId}.meta.json`);
+  const yamlPath = join91(dir, `${stageId}.yaml`);
+  const metaPath = join91(dir, `${stageId}.meta.json`);
   const meta = {
     v: 1,
     stage_id: stageId,
@@ -92571,27 +92773,27 @@ function stagePendingScheduleEntry(opts) {
     } finally {
       closeSync15(fd);
     }
-    renameSync22(yamlTmp, yamlPath);
+    renameSync23(yamlTmp, yamlPath);
   }
-  writeFileSync32(metaPath, JSON.stringify(meta, null, 2) + `
+  writeFileSync33(metaPath, JSON.stringify(meta, null, 2) + `
 `, { mode: 384 });
   return { stageId, yamlPath, metaPath };
 }
 function listPendingScheduleEntries(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  if (!existsSync89(dir))
+  if (!existsSync90(dir))
     return [];
   const out = [];
-  for (const name of readdirSync33(dir).sort()) {
+  for (const name of readdirSync34(dir).sort()) {
     if (!name.endsWith(".meta.json"))
       continue;
     const stageId = name.slice(0, -".meta.json".length);
-    const metaPath = join90(dir, name);
-    const yamlPath = join90(dir, `${stageId}.yaml`);
-    if (!existsSync89(yamlPath))
+    const metaPath = join91(dir, name);
+    const yamlPath = join91(dir, `${stageId}.yaml`);
+    if (!existsSync90(yamlPath))
       continue;
     try {
-      const meta = JSON.parse(readFileSync77(metaPath, "utf-8"));
+      const meta = JSON.parse(readFileSync78(metaPath, "utf-8"));
       if (meta?.v !== 1 || typeof meta.stage_id !== "string")
         continue;
       out.push({ stageId: meta.stage_id, agent: meta.agent, yamlPath, metaPath, meta });
@@ -92606,11 +92808,11 @@ function commitPendingScheduleEntry(opts) {
     return { committed: false, reason: "not_found" };
   const slug = match.meta.entry.name ?? match.stageId;
   const paths = overlayPathsFor(opts.agent, { root: opts.root });
-  const finalPath = join90(paths.scheduleDir, `${slug}.yaml`);
-  if (existsSync89(finalPath)) {
+  const finalPath = join91(paths.scheduleDir, `${slug}.yaml`);
+  if (existsSync90(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
-  renameSync22(match.yamlPath, finalPath);
+  renameSync23(match.yamlPath, finalPath);
   unlinkSync19(match.metaPath);
   return { committed: true, path: finalPath, slug };
 }
@@ -92629,7 +92831,7 @@ function denyPendingScheduleEntry(opts) {
 }
 
 // src/cli/agent-config-write.ts
-import { existsSync as existsSync90, readFileSync as readFileSync78 } from "node:fs";
+import { existsSync as existsSync91, readFileSync as readFileSync79 } from "node:fs";
 import { execFileSync as execFileSync28 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
@@ -93019,8 +93221,8 @@ function scheduleRemove(opts) {
   }
   let priorContent = null;
   try {
-    if (existsSync90(match.path))
-      priorContent = readFileSync78(match.path, "utf-8");
+    if (existsSync91(match.path))
+      priorContent = readFileSync79(match.path, "utf-8");
   } catch {}
   deleteOverlayEntry(agent, match.slug, { root: opts.root });
   const reconcileFn = opts.reconcile === undefined ? opts.root ? null : reconcileAgentCronOnly : opts.reconcile;
@@ -93223,7 +93425,7 @@ function registerAgentConfigWriteCommands(program3) {
     }
     let blob;
     if (opts.jsonl) {
-      blob = existsSync90(opts.jsonl) ? readFileSync78(opts.jsonl, "utf-8") : "";
+      blob = existsSync91(opts.jsonl) ? readFileSync79(opts.jsonl, "utf-8") : "";
     } else {
       try {
         blob = execFileSync28("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
@@ -93255,11 +93457,11 @@ function registerAgentConfigWriteCommands(program3) {
 
 // src/cli/agent-config-skill-write.ts
 var import_yaml22 = __toESM(require_dist(), 1);
-import { existsSync as existsSync91 } from "node:fs";
+import { existsSync as existsSync92 } from "node:fs";
 init_reconcile_default_skills();
 init_agent_config();
 var import_yaml23 = __toESM(require_dist(), 1);
-import { join as join91 } from "node:path";
+import { join as join92 } from "node:path";
 var MAX_SKILLS_PER_AGENT = 20;
 var V1_ALLOWED_SOURCE_PREFIX = "bundled:";
 function exitCodeFor2(code) {
@@ -93334,8 +93536,8 @@ function skillInstall(opts) {
     return err("E_SKILL_QUOTA_EXCEEDED", `agent ${agent} already has ${used} overlay-installed skills (cap ${MAX_SKILLS_PER_AGENT})`);
   }
   const poolDir = opts.bundledSkillsPoolDir ?? getBundledSkillsPoolDir();
-  const skillPath = join91(poolDir, skillName);
-  if (!existsSync91(skillPath)) {
+  const skillPath = join92(poolDir, skillName);
+  if (!existsSync92(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
   const yamlText = import_yaml22.stringify({ skills: [skillName] });
@@ -93499,21 +93701,21 @@ function registerAgentConfigSkillWriteCommands(program3) {
 // src/cli/skill.ts
 import {
   closeSync as closeSync16,
-  existsSync as existsSync92,
+  existsSync as existsSync93,
   lstatSync as lstatSync11,
-  mkdirSync as mkdirSync52,
+  mkdirSync as mkdirSync53,
   mkdtempSync as mkdtempSync5,
   openSync as openSync16,
-  readFileSync as readFileSync79,
-  readdirSync as readdirSync34,
+  readFileSync as readFileSync80,
+  readdirSync as readdirSync35,
   realpathSync as realpathSync7,
-  renameSync as renameSync23,
+  renameSync as renameSync24,
   rmSync as rmSync18,
   statSync as statSync49,
-  writeFileSync as writeFileSync33
+  writeFileSync as writeFileSync34
 } from "node:fs";
 import { tmpdir as tmpdir6, homedir as homedir51 } from "node:os";
-import { dirname as dirname31, join as join92, relative as relative2, resolve as resolve54 } from "node:path";
+import { dirname as dirname33, join as join93, relative as relative4, resolve as resolve54 } from "node:path";
 import { spawnSync as spawnSync16 } from "node:child_process";
 
 // src/cli/skill-common.ts
@@ -93747,7 +93949,7 @@ function scanForClaudeP2(content) {
 function resolveSkillsPoolDir2(override) {
   const raw = override ?? "~/.switchroom/skills";
   if (raw.startsWith("~/")) {
-    return join92(homedir51(), raw.slice(2));
+    return join93(homedir51(), raw.slice(2));
   }
   if (raw === "~")
     return homedir51();
@@ -93784,10 +93986,10 @@ function loadFromDir(dir) {
   }
   const files = {};
   const walk2 = (sub) => {
-    const entries = readdirSync34(sub, { withFileTypes: true });
+    const entries = readdirSync35(sub, { withFileTypes: true });
     for (const ent of entries) {
-      const full = join92(sub, ent.name);
-      const rel = relative2(abs, full);
+      const full = join93(sub, ent.name);
+      const rel = relative4(abs, full);
       if (ent.isSymbolicLink()) {
         fail3(`refusing to read symlink inside --from dir: ${rel}`);
       }
@@ -93796,7 +93998,7 @@ function loadFromDir(dir) {
         continue;
       }
       if (ent.isFile()) {
-        const buf = readFileSync79(full);
+        const buf = readFileSync80(full);
         files[rel.replace(/\\/g, "/")] = buf.toString("utf-8");
       }
     }
@@ -93821,7 +94023,7 @@ function loadFromTarball(tarPath) {
       fail3(`tarball contains disallowed path: ${JSON.stringify(entry)} \u2014 ` + `refusing to extract before any file is written`);
     }
   }
-  const staging = mkdtempSync5(join92(tmpdir6(), "skill-apply-extract-"));
+  const staging = mkdtempSync5(join93(tmpdir6(), "skill-apply-extract-"));
   try {
     const flags = isGz ? ["-xzf"] : ["-xf"];
     const r = spawnSync16("tar", [
@@ -93845,7 +94047,7 @@ function loadFromTarball(tarPath) {
   }
 }
 function loadSingleFile(filePath) {
-  const content = readFileSync79(filePath, "utf-8");
+  const content = readFileSync80(filePath, "utf-8");
   return { "SKILL.md": content };
 }
 function loadFromStdin() {
@@ -93907,10 +94109,10 @@ function validatePayload(name, files) {
           errors2.push(`${path9} fails \`bash -n\` syntax check: ${(r.stderr ?? "").trim()}`);
         }
       } else if (PY_SCRIPT_RE2.test(path9)) {
-        const tmp = mkdtempSync5(join92(tmpdir6(), "skill-apply-py-"));
-        const tmpPy = join92(tmp, "check.py");
+        const tmp = mkdtempSync5(join93(tmpdir6(), "skill-apply-py-"));
+        const tmpPy = join93(tmp, "check.py");
         try {
-          writeFileSync33(tmpPy, content);
+          writeFileSync34(tmpPy, content);
           const r = spawnSync16("python3", ["-m", "py_compile", tmpPy], {
             encoding: "utf-8"
           });
@@ -93928,15 +94130,15 @@ function validatePayload(name, files) {
 function diffSummary(currentDir, files) {
   const lines = [];
   const currentFiles = {};
-  if (existsSync92(currentDir)) {
+  if (existsSync93(currentDir)) {
     const walk2 = (sub) => {
-      for (const ent of readdirSync34(sub, { withFileTypes: true })) {
-        const full = join92(sub, ent.name);
-        const rel = relative2(currentDir, full);
+      for (const ent of readdirSync35(sub, { withFileTypes: true })) {
+        const full = join93(sub, ent.name);
+        const rel = relative4(currentDir, full);
         if (ent.isDirectory()) {
           walk2(full);
         } else if (ent.isFile()) {
-          currentFiles[rel.replace(/\\/g, "/")] = readFileSync79(full, "utf-8");
+          currentFiles[rel.replace(/\\/g, "/")] = readFileSync80(full, "utf-8");
         }
       }
     };
@@ -93964,10 +94166,10 @@ function diffSummary(currentDir, files) {
 `);
 }
 function writePayload(poolDir, name, files) {
-  if (!existsSync92(poolDir)) {
-    mkdirSync52(poolDir, { recursive: true, mode: 493 });
+  if (!existsSync93(poolDir)) {
+    mkdirSync53(poolDir, { recursive: true, mode: 493 });
   }
-  const target = join92(poolDir, name);
+  const target = join93(poolDir, name);
   let targetIsSymlink = false;
   try {
     const st = lstatSync11(target);
@@ -93978,15 +94180,15 @@ function writePayload(poolDir, name, files) {
   if (targetIsSymlink) {
     fail3(`refusing to overwrite symlink at ${target}; investigate manually`);
   }
-  const staging = mkdtempSync5(join92(poolDir, `.skill-apply-stage-${name}-`));
+  const staging = mkdtempSync5(join93(poolDir, `.skill-apply-stage-${name}-`));
   let oldRename = null;
   try {
     for (const [path9, content] of Object.entries(files)) {
-      const full = join92(staging, path9);
-      mkdirSync52(dirname31(full), { recursive: true, mode: 493 });
+      const full = join93(staging, path9);
+      mkdirSync53(dirname33(full), { recursive: true, mode: 493 });
       const fd = openSync16(full, "wx");
       try {
-        writeFileSync33(fd, content);
+        writeFileSync34(fd, content);
       } finally {
         closeSync16(fd);
       }
@@ -94002,9 +94204,9 @@ function writePayload(poolDir, name, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${target}.skill-apply-old-${Date.now()}`;
-      renameSync23(target, oldRename);
+      renameSync24(target, oldRename);
     }
-    renameSync23(staging, target);
+    renameSync24(staging, target);
     if (oldRename) {
       rmSync18(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -94013,12 +94215,12 @@ function writePayload(poolDir, name, files) {
     try {
       rmSync18(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync92(oldRename)) {
+    if (oldRename && existsSync93(oldRename)) {
       try {
-        if (existsSync92(target)) {
+        if (existsSync93(target)) {
           rmSync18(target, { recursive: true, force: true });
         }
-        renameSync23(oldRename, target);
+        renameSync24(oldRename, target);
       } catch {}
     }
     throw err2;
@@ -94036,7 +94238,7 @@ function registerSkillCommand(program3) {
       files = loadFromStdin();
     } else {
       const fromPath = resolve54(opts.from);
-      if (!existsSync92(fromPath)) {
+      if (!existsSync93(fromPath)) {
         fail3(`--from path does not exist: ${opts.from}`);
       }
       const st = statSync49(fromPath);
@@ -94060,7 +94262,7 @@ function registerSkillCommand(program3) {
     }
     const config = loadConfig();
     const poolDir = resolveSkillsPoolDir2(config.switchroom?.skills_dir);
-    const currentDir = join92(poolDir, name);
+    const currentDir = join93(poolDir, name);
     console.log(source_default.bold(`Skill: ${name}`) + source_default.gray(` (${Object.keys(files).length} files, ${sumBytes(files)} bytes)`));
     console.log(source_default.bold("Diff vs current pool content:"));
     console.log(diffSummary(currentDir, files));
@@ -94092,20 +94294,20 @@ function sumBytes(files) {
 init_esm();
 import {
   closeSync as closeSync17,
-  existsSync as existsSync93,
+  existsSync as existsSync94,
   lstatSync as lstatSync12,
-  mkdirSync as mkdirSync53,
+  mkdirSync as mkdirSync54,
   mkdtempSync as mkdtempSync6,
   openSync as openSync17,
-  readFileSync as readFileSync80,
-  readdirSync as readdirSync35,
-  renameSync as renameSync24,
+  readFileSync as readFileSync81,
+  readdirSync as readdirSync36,
+  renameSync as renameSync25,
   rmSync as rmSync19,
   statSync as statSync50,
   utimesSync,
-  writeFileSync as writeFileSync34
+  writeFileSync as writeFileSync35
 } from "node:fs";
-import { dirname as dirname32, join as join93, relative as relative3, resolve as resolve55 } from "node:path";
+import { dirname as dirname34, join as join94, relative as relative5, resolve as resolve55 } from "node:path";
 import { homedir as homedir52, tmpdir as tmpdir7 } from "node:os";
 import { spawnSync as spawnSync17 } from "node:child_process";
 init_helpers();
@@ -94117,18 +94319,18 @@ var TRASH_TTL_MS = 24 * 60 * 60 * 1000;
 var PERSONAL_SKILLS_SUBPATH = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
-  const candidate = override ? resolve55(override) : join93(homedir52(), ".switchroom-config");
-  if (!existsSync93(candidate))
+  const candidate = override ? resolve55(override) : join94(homedir52(), ".switchroom-config");
+  if (!existsSync94(candidate))
     return null;
-  return join93(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
+  return join94(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH);
 }
 var MIRROR_PRIOR_TTL_MS = 24 * 60 * 60 * 1000;
 function sweepMirrorPriors(configSkillsRoot) {
   try {
-    if (!existsSync93(configSkillsRoot))
+    if (!existsSync94(configSkillsRoot))
       return;
     const now = Date.now();
-    for (const ent of readdirSync35(configSkillsRoot)) {
+    for (const ent of readdirSync36(configSkillsRoot)) {
       const m = /^\.(?:.+)-(?:prior|trash)-(\d+)$/.exec(ent);
       if (!m)
         continue;
@@ -94138,7 +94340,7 @@ function sweepMirrorPriors(configSkillsRoot) {
       if (now - ts < MIRROR_PRIOR_TTL_MS)
         continue;
       try {
-        rmSync19(join93(configSkillsRoot, ent), { recursive: true, force: true });
+        rmSync19(join94(configSkillsRoot, ent), { recursive: true, force: true });
       } catch {}
     }
   } catch {}
@@ -94147,7 +94349,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
   const configSkillsRoot = resolveConfigSkillsDir(agent);
   if (!configSkillsRoot)
     return;
-  const dest = join93(configSkillsRoot, name);
+  const dest = join94(configSkillsRoot, name);
   try {
     if (liveSkillDir !== null) {
       try {
@@ -94161,35 +94363,35 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     }
     if (liveSkillDir === null) {
       sweepMirrorPriors(configSkillsRoot);
-      if (existsSync93(dest)) {
-        const trash = join93(configSkillsRoot, `.${name}-trash-${Date.now()}`);
-        renameSync24(dest, trash);
+      if (existsSync94(dest)) {
+        const trash = join94(configSkillsRoot, `.${name}-trash-${Date.now()}`);
+        renameSync25(dest, trash);
       }
       return;
     }
-    mkdirSync53(configSkillsRoot, { recursive: true, mode: 493 });
+    mkdirSync54(configSkillsRoot, { recursive: true, mode: 493 });
     sweepMirrorPriors(configSkillsRoot);
-    const staging = mkdtempSync6(join93(configSkillsRoot, `.${name}-staging-`));
+    const staging = mkdtempSync6(join94(configSkillsRoot, `.${name}-staging-`));
     const walk2 = (src, dst) => {
-      mkdirSync53(dst, { recursive: true, mode: 493 });
-      for (const ent of readdirSync35(src, { withFileTypes: true })) {
-        const s = join93(src, ent.name);
-        const d = join93(dst, ent.name);
+      mkdirSync54(dst, { recursive: true, mode: 493 });
+      for (const ent of readdirSync36(src, { withFileTypes: true })) {
+        const s = join94(src, ent.name);
+        const d = join94(dst, ent.name);
         if (ent.isSymbolicLink())
           continue;
         if (ent.isDirectory())
           walk2(s, d);
         else if (ent.isFile()) {
-          writeFileSync34(d, readFileSync80(s));
+          writeFileSync35(d, readFileSync81(s));
         }
       }
     };
     walk2(liveSkillDir, staging);
-    if (existsSync93(dest)) {
-      const prior = join93(configSkillsRoot, `.${name}-prior-${Date.now()}`);
-      renameSync24(dest, prior);
+    if (existsSync94(dest)) {
+      const prior = join94(configSkillsRoot, `.${name}-prior-${Date.now()}`);
+      renameSync25(dest, prior);
     }
-    renameSync24(staging, dest);
+    renameSync25(staging, dest);
   } catch (err2) {
     process.stderr.write(source_default.yellow(`warning: mirror to ${dest} failed (${err2.message ?? err2}); ` + `live copy still works, but this skill is not version-controlled until next successful sync.
 `));
@@ -94216,20 +94418,20 @@ function resolveAgent(opts) {
 function resolveAgentsRoot(opts) {
   if (opts.root)
     return resolve55(opts.root);
-  return join93(homedir52(), ".switchroom", "agents");
+  return join94(homedir52(), ".switchroom", "agents");
 }
 function personalSkillDir(agentsRoot, agent, name) {
-  return join93(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
+  return join94(agentsRoot, agent, ".claude", "skills", PERSONAL_PREFIX + name);
 }
 function trashDir(agentsRoot, agent) {
-  return join93(agentsRoot, agent, ".claude", TRASH_DIRNAME);
+  return join94(agentsRoot, agent, ".claude", TRASH_DIRNAME);
 }
 function countPersonalSkills(agentsRoot, agent) {
-  const skillsDir = join93(agentsRoot, agent, ".claude", "skills");
-  if (!existsSync93(skillsDir))
+  const skillsDir = join94(agentsRoot, agent, ".claude", "skills");
+  if (!existsSync94(skillsDir))
     return 0;
   let n = 0;
-  for (const ent of readdirSync35(skillsDir, { withFileTypes: true })) {
+  for (const ent of readdirSync36(skillsDir, { withFileTypes: true })) {
     if (ent.isDirectory() && ent.name.startsWith(PERSONAL_PREFIX))
       n += 1;
   }
@@ -94262,18 +94464,18 @@ function loadFromDir2(dir) {
   }
   const files = {};
   const walk2 = (sub) => {
-    for (const ent of readdirSync35(sub, { withFileTypes: true })) {
-      const full = join93(sub, ent.name);
+    for (const ent of readdirSync36(sub, { withFileTypes: true })) {
+      const full = join94(sub, ent.name);
       if (ent.isSymbolicLink()) {
-        fail4(`refusing to read symlink in --from dir: ${relative3(abs, full)}`);
+        fail4(`refusing to read symlink in --from dir: ${relative5(abs, full)}`);
       }
       if (ent.isDirectory()) {
         walk2(full);
         continue;
       }
       if (ent.isFile()) {
-        const rel = relative3(abs, full).replace(/\\/g, "/");
-        files[rel] = readFileSync80(full, "utf-8");
+        const rel = relative5(abs, full).replace(/\\/g, "/");
+        files[rel] = readFileSync81(full, "utf-8");
       }
     }
   };
@@ -94316,10 +94518,10 @@ function behavioralValidate(files) {
         errors2.push(`${path9} fails \`bash -n\`: ${(r.stderr ?? "").trim()}`);
       }
     } else if (PY_SCRIPT_RE.test(path9)) {
-      const tmp = mkdtempSync6(join93(tmpdir7(), "skill-personal-py-"));
-      const tmpPy = join93(tmp, "check.py");
+      const tmp = mkdtempSync6(join94(tmpdir7(), "skill-personal-py-"));
+      const tmpPy = join94(tmp, "check.py");
       try {
-        writeFileSync34(tmpPy, content);
+        writeFileSync35(tmpPy, content);
         const r = spawnSync17("python3", ["-m", "py_compile", tmpPy], {
           encoding: "utf-8"
         });
@@ -94335,13 +94537,13 @@ function behavioralValidate(files) {
 }
 function sweepTrash(agentsRoot, agent) {
   const trash = trashDir(agentsRoot, agent);
-  if (!existsSync93(trash))
+  if (!existsSync94(trash))
     return;
   const now = Date.now();
-  for (const ent of readdirSync35(trash, { withFileTypes: true })) {
+  for (const ent of readdirSync36(trash, { withFileTypes: true })) {
     if (!ent.isDirectory())
       continue;
-    const entPath = join93(trash, ent.name);
+    const entPath = join94(trash, ent.name);
     try {
       const st = statSync50(entPath);
       if (now - st.mtimeMs > TRASH_TTL_MS) {
@@ -94361,16 +94563,16 @@ function writePersonalSkill(targetDir, files) {
   if (targetIsSymlink) {
     fail4(`refusing to overwrite symlink at ${targetDir}; investigate manually`);
   }
-  mkdirSync53(dirname32(targetDir), { recursive: true, mode: 493 });
-  const staging = mkdtempSync6(join93(dirname32(targetDir), `.skill-personal-stage-`));
+  mkdirSync54(dirname34(targetDir), { recursive: true, mode: 493 });
+  const staging = mkdtempSync6(join94(dirname34(targetDir), `.skill-personal-stage-`));
   let oldRename = null;
   try {
     for (const [path9, content] of Object.entries(files)) {
-      const full = join93(staging, path9);
-      mkdirSync53(dirname32(full), { recursive: true, mode: 493 });
+      const full = join94(staging, path9);
+      mkdirSync54(dirname34(full), { recursive: true, mode: 493 });
       const fd = openSync17(full, "wx");
       try {
-        writeFileSync34(fd, content);
+        writeFileSync35(fd, content);
       } finally {
         closeSync17(fd);
       }
@@ -94386,9 +94588,9 @@ function writePersonalSkill(targetDir, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${targetDir}.personal-old-${Date.now()}`;
-      renameSync24(targetDir, oldRename);
+      renameSync25(targetDir, oldRename);
     }
-    renameSync24(staging, targetDir);
+    renameSync25(staging, targetDir);
     if (oldRename) {
       rmSync19(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -94397,12 +94599,12 @@ function writePersonalSkill(targetDir, files) {
     try {
       rmSync19(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync93(oldRename)) {
+    if (oldRename && existsSync94(oldRename)) {
       try {
-        if (existsSync93(targetDir)) {
+        if (existsSync94(targetDir)) {
           rmSync19(targetDir, { recursive: true, force: true });
         }
-        renameSync24(oldRename, targetDir);
+        renameSync25(oldRename, targetDir);
       } catch {}
     }
     throw err2;
@@ -94465,7 +94667,7 @@ function loadFiles(opts) {
     return loadFromStdin2();
   }
   const p = resolve55(opts.from);
-  if (!existsSync93(p)) {
+  if (!existsSync94(p)) {
     fail4(`--from path does not exist: ${opts.from}`);
   }
   const st = statSync50(p);
@@ -94473,7 +94675,7 @@ function loadFiles(opts) {
     return loadFromDir2(p);
   }
   if (p.endsWith(".md")) {
-    return { "SKILL.md": readFileSync80(p, "utf-8") };
+    return { "SKILL.md": readFileSync81(p, "utf-8") };
   }
   fail4(`--from must be a directory or a .md file. Got: ${opts.from}`);
 }
@@ -94513,10 +94715,10 @@ function editPersonalAction(name, opts) {
 }
 var CLONE_SOURCE_RE = /^(shared|bundled):([a-z0-9][a-z0-9_-]{0,62})$/;
 function defaultSharedRoot() {
-  return join93(homedir52(), ".switchroom", "skills");
+  return join94(homedir52(), ".switchroom", "skills");
 }
 function defaultBundledRoot() {
-  return join93(homedir52(), ".switchroom", "skills", "_bundled");
+  return join94(homedir52(), ".switchroom", "skills", "_bundled");
 }
 function resolveCloneSource(source, opts) {
   const m = CLONE_SOURCE_RE.exec(source);
@@ -94526,8 +94728,8 @@ function resolveCloneSource(source, opts) {
   const tier = m[1];
   const slug = m[2];
   const root = tier === "bundled" ? opts.bundledRoot ?? defaultBundledRoot() : opts.sharedRoot ?? defaultSharedRoot();
-  const dir = join93(root, slug);
-  if (!existsSync93(dir)) {
+  const dir = join94(root, slug);
+  if (!existsSync94(dir)) {
     fail4(`clone source ${JSON.stringify(source)} not found at ${dir}; ` + `check \`switchroom skill search --tier ${tier}\``, 1);
   }
   const st = lstatSync12(dir);
@@ -94541,8 +94743,8 @@ function readSourceFiles(dir) {
   const files = {};
   const skipped = [];
   const walk2 = (sub) => {
-    for (const ent of readdirSync35(sub, { withFileTypes: true })) {
-      const full = join93(sub, ent.name);
+    for (const ent of readdirSync36(sub, { withFileTypes: true })) {
+      const full = join94(sub, ent.name);
       if (ent.isSymbolicLink()) {
         continue;
       }
@@ -94551,7 +94753,7 @@ function readSourceFiles(dir) {
         continue;
       }
       if (ent.isFile()) {
-        const rel = relative3(dir, full).replace(/\\/g, "/");
+        const rel = relative5(dir, full).replace(/\\/g, "/");
         if (!validateRelPath(rel)) {
           skipped.push(rel);
           continue;
@@ -94562,7 +94764,7 @@ function readSourceFiles(dir) {
             fail4(`clone source has oversized file ${rel} (${st.size} bytes > ${CLONE_MAX_FILE_BYTES}); ` + `refuse to read`, 3);
           }
         } catch {}
-        files[rel] = readFileSync80(full, "utf-8");
+        files[rel] = readFileSync81(full, "utf-8");
       }
     }
   };
@@ -94651,10 +94853,10 @@ function removePersonalAction(name, opts) {
     throw err2;
   }
   const trashRoot2 = trashDir(agentsRoot, agent);
-  mkdirSync53(trashRoot2, { recursive: true, mode: 493 });
+  mkdirSync54(trashRoot2, { recursive: true, mode: 493 });
   const ts = Date.now();
-  const trashTarget = join93(trashRoot2, `${name}-${ts}`);
-  renameSync24(target, trashTarget);
+  const trashTarget = join94(trashRoot2, `${name}-${ts}`);
+  renameSync25(target, trashTarget);
   const now = new Date(ts);
   utimesSync(trashTarget, now, now);
   mirrorToConfigRepo(agent, name, null);
@@ -94672,27 +94874,27 @@ function listPersonalAction(opts) {
   const agent = resolveAgent(opts);
   const agentsRoot = resolveAgentsRoot(opts);
   sweepTrash(agentsRoot, agent);
-  const skillsDir = join93(agentsRoot, agent, ".claude", "skills");
+  const skillsDir = join94(agentsRoot, agent, ".claude", "skills");
   const personal = [];
-  if (existsSync93(skillsDir)) {
-    for (const ent of readdirSync35(skillsDir, { withFileTypes: true })) {
+  if (existsSync94(skillsDir)) {
+    for (const ent of readdirSync36(skillsDir, { withFileTypes: true })) {
       if (!ent.isDirectory())
         continue;
       if (!ent.name.startsWith(PERSONAL_PREFIX))
         continue;
       const skillName = ent.name.slice(PERSONAL_PREFIX.length);
-      const skillPath = join93(skillsDir, ent.name);
+      const skillPath = join94(skillsDir, ent.name);
       let fileCount = 0;
       let totalBytes = 0;
       const walk2 = (sub) => {
-        for (const e of readdirSync35(sub, { withFileTypes: true })) {
+        for (const e of readdirSync36(sub, { withFileTypes: true })) {
           if (e.isFile()) {
             fileCount += 1;
             try {
-              totalBytes += statSync50(join93(sub, e.name)).size;
+              totalBytes += statSync50(join94(sub, e.name)).size;
             } catch {}
           } else if (e.isDirectory()) {
-            walk2(join93(sub, e.name));
+            walk2(join94(sub, e.name));
           }
         }
       };
@@ -94731,11 +94933,11 @@ function registerSkillPersonalCommands(program3) {
 // src/cli/self-improve-propose-skill.ts
 import { createConnection as createConnection4 } from "node:net";
 import { homedir as homedir53 } from "node:os";
-import { join as join94 } from "node:path";
-import { readFileSync as readFileSync81 } from "node:fs";
+import { join as join95 } from "node:path";
+import { readFileSync as readFileSync82 } from "node:fs";
 var IPC_CONNECT_TIMEOUT_MS = 5000;
 function gatewaySocketPath() {
-  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join94(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join94(homedir53(), ".claude", "channels", "telegram", "gateway.sock"));
+  return process.env.SWITCHROOM_GATEWAY_SOCKET ?? (process.env.TELEGRAM_STATE_DIR ? join95(process.env.TELEGRAM_STATE_DIR, "gateway.sock") : join95(homedir53(), ".claude", "channels", "telegram", "gateway.sock"));
 }
 function fail5(msg, code = 1) {
   console.error(msg);
@@ -94770,7 +94972,7 @@ function registerSelfImproveProposeSkillCommand(program3) {
       fail5("agent name required (--agent or $SWITCHROOM_AGENT_NAME)");
     let draft;
     try {
-      draft = JSON.parse(readFileSync81(opts.draft, "utf-8"));
+      draft = JSON.parse(readFileSync82(opts.draft, "utf-8"));
     } catch (e) {
       fail5(`failed to read/parse --draft: ${e.message}`);
     }
@@ -94807,9 +95009,9 @@ function registerSelfImproveProposeSkillCommand(program3) {
 init_esm();
 init_helpers();
 var import_yaml25 = __toESM(require_dist(), 1);
-import { existsSync as existsSync94, readdirSync as readdirSync36, readFileSync as readFileSync82, statSync as statSync51 } from "node:fs";
+import { existsSync as existsSync95, readdirSync as readdirSync37, readFileSync as readFileSync83, statSync as statSync51 } from "node:fs";
 import { homedir as homedir54 } from "node:os";
-import { join as join95, resolve as resolve56 } from "node:path";
+import { join as join96, resolve as resolve56 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
 var BUNDLED_SUBDIR = "_bundled";
 var AGENT_NAME_RE3 = /^[a-z][a-z0-9_-]{0,62}$/;
@@ -94823,12 +95025,12 @@ function defaultBundledRoot2() {
   return resolve56(homedir54(), ".switchroom/skills/_bundled");
 }
 function readSkillFrontmatter(skillDir) {
-  const mdPath = join95(skillDir, "SKILL.md");
-  if (!existsSync94(mdPath))
+  const mdPath = join96(skillDir, "SKILL.md");
+  if (!existsSync95(mdPath))
     return null;
   let content;
   try {
-    content = readFileSync82(mdPath, "utf-8");
+    content = readFileSync83(mdPath, "utf-8");
   } catch {
     return null;
   }
@@ -94856,7 +95058,7 @@ function readSkillFrontmatter(skillDir) {
   return { fm: parsed };
 }
 function statSkillMd(skillDir) {
-  const mdPath = join95(skillDir, "SKILL.md");
+  const mdPath = join96(skillDir, "SKILL.md");
   try {
     const st = statSync51(mdPath);
     return { size: st.size, mtime: st.mtime.toISOString() };
@@ -94867,20 +95069,20 @@ function statSkillMd(skillDir) {
 function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   if (!AGENT_NAME_RE3.test(agent))
     return [];
-  const skillsDir = join95(agentsRoot, agent, ".claude/skills");
-  if (!existsSync94(skillsDir))
+  const skillsDir = join96(agentsRoot, agent, ".claude/skills");
+  if (!existsSync95(skillsDir))
     return [];
   const out = [];
   let entries;
   try {
-    entries = readdirSync36(skillsDir);
+    entries = readdirSync37(skillsDir);
   } catch {
     return [];
   }
   for (const ent of entries) {
     if (!ent.startsWith(PERSONAL_PREFIX2))
       continue;
-    const dirPath = join95(skillsDir, ent);
+    const dirPath = join96(skillsDir, ent);
     try {
       if (!statSync51(dirPath).isDirectory())
         continue;
@@ -94906,12 +95108,12 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   return out;
 }
 function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
-  if (!existsSync94(sharedRoot))
+  if (!existsSync95(sharedRoot))
     return [];
   const out = [];
   let entries;
   try {
-    entries = readdirSync36(sharedRoot);
+    entries = readdirSync37(sharedRoot);
   } catch {
     return [];
   }
@@ -94920,7 +95122,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
       continue;
     if (ent.startsWith("."))
       continue;
-    const dirPath = join95(sharedRoot, ent);
+    const dirPath = join96(sharedRoot, ent);
     try {
       if (!statSync51(dirPath).isDirectory())
         continue;
@@ -94944,19 +95146,19 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
   return out;
 }
 function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
-  if (!existsSync94(bundledRoot))
+  if (!existsSync95(bundledRoot))
     return [];
   const out = [];
   let entries;
   try {
-    entries = readdirSync36(bundledRoot);
+    entries = readdirSync37(bundledRoot);
   } catch {
     return [];
   }
   for (const ent of entries) {
     if (ent.startsWith("."))
       continue;
-    const dirPath = join95(bundledRoot, ent);
+    const dirPath = join96(bundledRoot, ent);
     try {
       if (!statSync51(dirPath).isDirectory())
         continue;
@@ -95102,18 +95304,18 @@ init_source();
 init_helpers();
 init_operator_uid();
 import {
-  existsSync as existsSync96,
-  mkdirSync as mkdirSync54,
-  readdirSync as readdirSync37,
-  readFileSync as readFileSync84,
-  writeFileSync as writeFileSync35,
+  existsSync as existsSync97,
+  mkdirSync as mkdirSync55,
+  readdirSync as readdirSync38,
+  readFileSync as readFileSync85,
+  writeFileSync as writeFileSync36,
   statSync as statSync52,
   lstatSync as lstatSync13,
   realpathSync as realpathSync8,
   copyFileSync as copyFileSync13
 } from "node:fs";
 import { homedir as homedir55 } from "node:os";
-import { join as join96 } from "node:path";
+import { join as join97 } from "node:path";
 import { spawnSync as spawnSync20 } from "node:child_process";
 
 // src/cli/singleton-stale-cleanup.ts
@@ -95462,7 +95664,7 @@ function resolveHostdHostHome(env2 = process.env, home2 = homedir55()) {
   return resolved;
 }
 function resolveHostdSkillsTarget(hostHome) {
-  const skillsPath = join96(hostHome, ".switchroom", "skills");
+  const skillsPath = join97(hostHome, ".switchroom", "skills");
   let st;
   try {
     st = lstatSync13(skillsPath);
@@ -95479,21 +95681,21 @@ function resolveHostdSkillsTarget(hostHome) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills is a symlink whose target ` + `does not resolve (dangling) \u2014 skipping the skills bind mount. Bundled ` + `skills will be unavailable to rollout/update until the symlink is fixed.`);
     return;
   }
-  if (!existsSync96(target)) {
+  if (!existsSync97(target)) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills resolves to "${target}", ` + `which does not exist \u2014 skipping the skills bind mount. Bundled skills ` + `will be unavailable to rollout/update until the symlink target exists.`);
     return;
   }
   return target;
 }
 function hostdDir() {
-  return join96(homedir55(), ".switchroom", "hostd");
+  return join97(homedir55(), ".switchroom", "hostd");
 }
 function hostdComposePath() {
-  return join96(hostdDir(), "docker-compose.yml");
+  return join97(hostdDir(), "docker-compose.yml");
 }
 function backupExistingCompose() {
   const p = hostdComposePath();
-  if (!existsSync96(p))
+  if (!existsSync97(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -95526,7 +95728,7 @@ async function doInstall(opts, program3) {
   }
   const dir = hostdDir();
   const composePath = hostdComposePath();
-  mkdirSync54(dir, { recursive: true });
+  mkdirSync55(dir, { recursive: true });
   const imageTag = resolveHostdImageTag(opts.tag, cfg.release);
   const guard = checkDowngrade({
     container: "switchroom-hostd",
@@ -95559,7 +95761,7 @@ async function doInstall(opts, program3) {
   const bak = backupExistingCompose();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync35(composePath, yaml, "utf8");
+  writeFileSync36(composePath, yaml, "utf8");
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
   const adminAgents = Object.entries(cfg.agents ?? {}).filter(([, a]) => a?.admin === true).map(([name]) => name);
   console.log(source_default.dim(`    agents served (one socket each): ${allAgents.length === 0 ? "(none)" : allAgents.join(", ")}`));
@@ -95591,7 +95793,7 @@ function doStatus() {
   const composeYml = hostdComposePath();
   console.log(source_default.bold("switchroom-hostd"));
   console.log("");
-  if (!existsSync96(composeYml)) {
+  if (!existsSync97(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom hostd install` to set up."));
     return;
@@ -95612,14 +95814,14 @@ function doStatus() {
   } else {
     console.log(source_default.green(`  container:  ${ps.stdout.trim()}`));
   }
-  if (existsSync96(dir)) {
+  if (existsSync97(dir)) {
     const entries = [];
     try {
-      for (const name of readdirSync37(dir)) {
+      for (const name of readdirSync38(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
-        const sockPath = join96(dir, name, "sock");
-        if (existsSync96(sockPath)) {
+        const sockPath = join97(dir, name, "sock");
+        if (existsSync97(sockPath)) {
           const st = statSync52(sockPath);
           if ((st.mode & 61440) === 49152) {
             entries.push(`${name} \u2192 ${sockPath}`);
@@ -95638,7 +95840,7 @@ function doStatus() {
 }
 function doUninstall() {
   const composeYml = hostdComposePath();
-  if (!existsSync96(composeYml)) {
+  if (!existsSync97(composeYml)) {
     console.log(source_default.yellow("  No hostd install detected (no compose file at this path)."));
     return;
   }
@@ -95662,12 +95864,12 @@ function registerHostdCommand(program3) {
   hostd.command("uninstall").description("Stop the hostd container. Leaves the compose file in place for re-install.").action(() => doUninstall());
   hostd.command("audit").description("Tail and filter the hostd audit log (privileged-verb call history)").option("--tail <n>", "Number of matching entries to show (default: 50)", "50").option("--agent <name>", "Filter to a specific caller agent").option("--op <verb>", "Filter to a specific hostd verb (e.g. update_apply, agent_restart)").option("--error", "Show only failed (error/denied) entries").option("--verbose", "Show the captured stderr / error tail under each failed row").option("--path <file>", "Override audit log path (for debugging)").action((opts) => {
     const logPath = opts.path ?? defaultAuditLogPath2();
-    if (!existsSync96(logPath)) {
+    if (!existsSync97(logPath)) {
       console.error(source_default.yellow(`Audit log not found at ${logPath}.`) + source_default.gray(`
 The log is created when hostd handles its first privileged-verb request.`));
       return;
     }
-    const raw = readFileSync84(logPath, "utf-8");
+    const raw = readFileSync85(logPath, "utf-8");
     const limit = Math.max(1, parseInt(opts.tail ?? "50", 10) || 50);
     const filters = {
       agent: opts.agent,
@@ -95710,9 +95912,9 @@ The log is created when hostd handles its first privileged-verb request.`));
 init_source();
 init_helpers();
 init_operator_uid();
-import { chownSync as chownSync9, existsSync as existsSync97, mkdirSync as mkdirSync55, writeFileSync as writeFileSync36, copyFileSync as copyFileSync14 } from "node:fs";
+import { chownSync as chownSync9, existsSync as existsSync98, mkdirSync as mkdirSync56, writeFileSync as writeFileSync37, copyFileSync as copyFileSync14 } from "node:fs";
 import { homedir as homedir56 } from "node:os";
-import { join as join97 } from "node:path";
+import { join as join98 } from "node:path";
 import { spawnSync as spawnSync21 } from "node:child_process";
 function resolveWebImageTag(explicitTag, release) {
   if (explicitTag)
@@ -95812,14 +96014,14 @@ services:
 `;
 }
 function webdDir() {
-  return join97(homedir56(), ".switchroom", "web");
+  return join98(homedir56(), ".switchroom", "web");
 }
 function webdComposePath() {
-  return join97(webdDir(), "docker-compose.yml");
+  return join98(webdDir(), "docker-compose.yml");
 }
 function backupExistingCompose2() {
   const p = webdComposePath();
-  if (!existsSync97(p))
+  if (!existsSync98(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -95844,7 +96046,7 @@ async function doInstall2(opts, program3) {
   }
   const dir = webdDir();
   const composePath = webdComposePath();
-  mkdirSync55(dir, { recursive: true });
+  mkdirSync56(dir, { recursive: true });
   const cfg = getConfig(program3);
   const imageTag = resolveWebImageTag(opts.tag, cfg.release);
   const port = cfg.web_service?.port ?? 8080;
@@ -95879,7 +96081,7 @@ async function doInstall2(opts, program3) {
   const bak = backupExistingCompose2();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync36(composePath, yaml, "utf8");
+  writeFileSync37(composePath, yaml, "utf8");
   try {
     if (typeof process.geteuid === "function" && process.geteuid() === 0) {
       chownSync9(dir, operatorUid, operatorUid);
@@ -95921,7 +96123,7 @@ function doStatus2() {
   const composeYml = webdComposePath();
   console.log(source_default.bold("switchroom-web"));
   console.log("");
-  if (!existsSync97(composeYml)) {
+  if (!existsSync98(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom webd install` to set up."));
     return;
@@ -95945,7 +96147,7 @@ function doStatus2() {
 }
 function doUninstall2() {
   const composeYml = webdComposePath();
-  if (!existsSync97(composeYml)) {
+  if (!existsSync98(composeYml)) {
     console.log(source_default.yellow("  No web-service install detected (no compose file at this path)."));
     return;
   }
@@ -95975,9 +96177,9 @@ function registerWebdCommand(program3) {
 // src/cli/host-repair.ts
 init_source();
 import { homedir as homedir57 } from "node:os";
-import { join as join98 } from "node:path";
+import { join as join99 } from "node:path";
 var ARTIFACT_ALLOWLIST = {
-  dockerComposePluginDir: (home2) => join98(home2, ".docker", "cli-plugins", "docker-compose"),
+  dockerComposePluginDir: (home2) => join99(home2, ".docker", "cli-plugins", "docker-compose"),
   stateSentinel: "/state"
 };
 function isStateBogusAutoDir(probe2) {
@@ -96131,7 +96333,7 @@ function applyMountRepairs(items, deps) {
 function registerHostCommand(program3) {
   const host = program3.command("host").description("Host-level maintenance operations for switchroom");
   host.command("repair-mounts").description("Detect and remove known auto-dir artifacts left by a container-context deploy " + "(2026-06-23 outage class). Default: dry-run. Pass --yes to apply.").option("--yes", "Actually perform the removals (default is dry-run)").action(async (opts) => {
-    const { rmdirSync: rmdirSync2, rmSync: rmSync20, lstatSync: lstatSync14, readdirSync: readdirSync38 } = await import("node:fs");
+    const { rmdirSync: rmdirSync2, rmSync: rmSync20, lstatSync: lstatSync14, readdirSync: readdirSync39 } = await import("node:fs");
     const probe2 = {
       lstat(path9) {
         try {
@@ -96142,7 +96344,7 @@ function registerHostCommand(program3) {
       },
       readdir(path9) {
         try {
-          return readdirSync38(path9);
+          return readdirSync39(path9);
         } catch {
           return null;
         }