switchroom 0.20.12 → 0.20.13

package/dist/host-control/main.js

@@ -11433,6 +11433,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback — switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) → autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit — switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    mem_limit: exports_external.string().regex(/^\d+(\.\d+)?\s*[bkmgt]?b?$/i, "hindsight.mem_limit must be a docker memory size, e.g. `24g` or `16384m`").optional().describe("Hard memory cap for the hindsight container — docker `--memory` on the " + "`memory setup` path and `mem_limit:` in the emitted compose snippet. A " + "docker size string (`24g`, `16384m`). Absent → switchroom's default " + "(`HINDSIGHT_DEFAULT_MEM_LIMIT`, 16g). This is a docker HostConfig flag, " + "not a container env var, which is why it is a first-class field here " + "rather than an `env:` key. **Move it together with " + "`env.SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS`**: Postgres pins the " + "buffer pool as unreclaimable shared memory inside this cap, so a cap " + "that does not clear `shared_buffers` by the container's app working " + "set plus its page-cache floor puts Postgres in a near-OOM " + "configuration. switchroom warns, naming both numbers, when it does " + "not. A value below the container's memory RESERVATION (4g) is " + "rejected outright — docker will not create such a container."),
     cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or — strongly preferred " + "— a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
@@ -21558,7 +21559,7 @@ function allocateAgentUid(name) {
 }
 
 // src/build-info.ts
-var VERSION = "0.20.12";
+var VERSION = "0.20.13";
 
 // src/setup/hindsight-recall-passthrough.ts
 var HINDSIGHT_RECALL_TAG_WEIGHT_SEED = Object.freeze({ sidechain: 0.8 });
@@ -21708,6 +21709,7 @@ var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 12288;
 function pgMib(mib) {
   return `${mib}MB`;
 }
+var HINDSIGHT_PG_MIN_NON_BUFFER_MIB = HINDSIGHT_PG_APP_ANON_MIB + HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
 var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
 var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
 var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
@@ -21755,6 +21757,7 @@ var HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY = 0.3;
 var HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS = "false";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_FUNCTION = "exponential";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS = 30;
+var HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION = "pg_search";
 var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_RECALL_MAX_CANDIDATES_PER_SOURCE",
@@ -21820,7 +21823,8 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_GRAPH_SEED_MIN_SIMILARITY",
     String(HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY)
-  ]
+  ],
+  ["HINDSIGHT_API_TEXT_SEARCH_EXTENSION", HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION]
 ];
 var HINDSIGHT_PERF_DEFAULTS_GPU = [
   ["HINDSIGHT_API_RERANKER_LOCAL_FP16", HINDSIGHT_DEFAULT_RERANKER_LOCAL_FP16],

package/dist/vault/approvals/kernel-server.js

@@ -4873,6 +4873,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback — switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) → autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit — switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    mem_limit: exports_external.string().regex(/^\d+(\.\d+)?\s*[bkmgt]?b?$/i, "hindsight.mem_limit must be a docker memory size, e.g. `24g` or `16384m`").optional().describe("Hard memory cap for the hindsight container — docker `--memory` on the " + "`memory setup` path and `mem_limit:` in the emitted compose snippet. A " + "docker size string (`24g`, `16384m`). Absent → switchroom's default " + "(`HINDSIGHT_DEFAULT_MEM_LIMIT`, 16g). This is a docker HostConfig flag, " + "not a container env var, which is why it is a first-class field here " + "rather than an `env:` key. **Move it together with " + "`env.SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS`**: Postgres pins the " + "buffer pool as unreclaimable shared memory inside this cap, so a cap " + "that does not clear `shared_buffers` by the container's app working " + "set plus its page-cache floor puts Postgres in a near-OOM " + "configuration. switchroom warns, naming both numbers, when it does " + "not. A value below the container's memory RESERVATION (4g) is " + "rejected outright — docker will not create such a container."),
     cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or — strongly preferred " + "— a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
@@ -19603,6 +19604,7 @@ var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 12288;
 function pgMib(mib) {
   return `${mib}MB`;
 }
+var HINDSIGHT_PG_MIN_NON_BUFFER_MIB = HINDSIGHT_PG_APP_ANON_MIB + HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
 var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
 var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
 var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
@@ -19650,6 +19652,7 @@ var HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY = 0.3;
 var HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS = "false";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_FUNCTION = "exponential";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS = 30;
+var HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION = "pg_search";
 var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_RECALL_MAX_CANDIDATES_PER_SOURCE",
@@ -19715,7 +19718,8 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_GRAPH_SEED_MIN_SIMILARITY",
     String(HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY)
-  ]
+  ],
+  ["HINDSIGHT_API_TEXT_SEARCH_EXTENSION", HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION]
 ];
 var HINDSIGHT_PERF_DEFAULTS_GPU = [
   ["HINDSIGHT_API_RERANKER_LOCAL_FP16", HINDSIGHT_DEFAULT_RERANKER_LOCAL_FP16],

package/dist/vault/broker/server.js

@@ -4469,6 +4469,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback — switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) → autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit — switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    mem_limit: exports_external.string().regex(/^\d+(\.\d+)?\s*[bkmgt]?b?$/i, "hindsight.mem_limit must be a docker memory size, e.g. `24g` or `16384m`").optional().describe("Hard memory cap for the hindsight container — docker `--memory` on the " + "`memory setup` path and `mem_limit:` in the emitted compose snippet. A " + "docker size string (`24g`, `16384m`). Absent → switchroom's default " + "(`HINDSIGHT_DEFAULT_MEM_LIMIT`, 16g). This is a docker HostConfig flag, " + "not a container env var, which is why it is a first-class field here " + "rather than an `env:` key. **Move it together with " + "`env.SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS`**: Postgres pins the " + "buffer pool as unreclaimable shared memory inside this cap, so a cap " + "that does not clear `shared_buffers` by the container's app working " + "set plus its page-cache floor puts Postgres in a near-OOM " + "configuration. switchroom warns, naming both numbers, when it does " + "not. A value below the container's memory RESERVATION (4g) is " + "rejected outright — docker will not create such a container."),
     cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or — strongly preferred " + "— a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
@@ -20016,6 +20017,7 @@ var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 12288;
 function pgMib(mib) {
   return `${mib}MB`;
 }
+var HINDSIGHT_PG_MIN_NON_BUFFER_MIB = HINDSIGHT_PG_APP_ANON_MIB + HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
 var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
 var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
 var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
@@ -20063,6 +20065,7 @@ var HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY = 0.3;
 var HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS = "false";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_FUNCTION = "exponential";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS = 30;
+var HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION = "pg_search";
 var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_RECALL_MAX_CANDIDATES_PER_SOURCE",
@@ -20128,7 +20131,8 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_GRAPH_SEED_MIN_SIMILARITY",
     String(HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY)
-  ]
+  ],
+  ["HINDSIGHT_API_TEXT_SEARCH_EXTENSION", HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION]
 ];
 var HINDSIGHT_PERF_DEFAULTS_GPU = [
   ["HINDSIGHT_API_RERANKER_LOCAL_FP16", HINDSIGHT_DEFAULT_RERANKER_LOCAL_FP16],

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.20.12",
+  "version": "0.20.13",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
@@ -24,11 +24,11 @@
     "build": "node scripts/build.mjs",
     "build:cli": "node scripts/build.mjs && bun build --compile --target=bun-linux-x64 --minify bin/switchroom.ts --outfile switchroom-linux-amd64",
     "pretest": "npm run build",
-    "test": "vitest run && bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test": "vitest run && bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/hindsight-bank-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:vitest": "vitest run",
-    "test:bun": "bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-scope-persist.test.ts src/vault/broker/server-tokenless-scope.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/self-approval-bypass.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test:bun": "bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/hindsight-bank-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-scope-persist.test.ts src/vault/broker/server-tokenless-scope.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/self-approval-bypass.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:watch": "vitest",
-    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
+    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-bench-baseline-anonymised.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-hindsight-bank-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-changelog-entry.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
     "lint:tsc": "tsc --noEmit",
     "lint:hindsight-write-redaction": "node scripts/check-hindsight-write-redaction.mjs",
     "lint:secret-pattern-parity": "bun scripts/check-secret-pattern-parity.ts",
@@ -40,6 +40,7 @@
     "lint:no-pii": "node scripts/check-no-pii-secrets.mjs",
     "lint:auth-test-hermeticity": "node scripts/check-auth-test-hermeticity.mjs",
     "lint:agent-state-dir-hermeticity": "node scripts/check-agent-state-dir-hermeticity.mjs",
+    "lint:hindsight-bank-hermeticity": "node scripts/check-hindsight-bank-hermeticity.mjs",
     "lint:web-subscription-honest": "node scripts/check-web-subscription-honest.mjs",
     "lint:no-broadcast-delivery": "node scripts/check-no-broadcast-delivery.mjs",
     "lint:gateway-line-ratchet": "node scripts/check-gateway-line-ratchet.mjs",
@@ -49,8 +50,10 @@
     "lint:mcp-instructions-budget": "node scripts/check-mcp-instructions-budget.mjs",
     "lint:litellm-config-guard": "node scripts/check-litellm-config-guard.mjs",
     "lint:release-asset-contract": "node scripts/check-release-asset-names.mjs",
+    "lint:changelog-entry": "node scripts/check-changelog-entry.mjs",
     "lint:agent-attribution-trailers": "node scripts/check-agent-attribution-trailers.mjs",
     "lint:hostd-template-guard": "bun scripts/check-hostd-template-guard.ts",
+    "lint:bench-baseline-anonymised": "node scripts/check-bench-baseline-anonymised.mjs",
     "prepublishOnly": "npm run build && npm run lint && npm test"
   },
   "dependencies": {

package/skills/switchroom-release/SKILL.md

@@ -22,12 +22,13 @@ Cut a release of `switchroom/switchroom` and get it live on the fleet. This is a
 1. `git fetch origin`, confirm `main` is at the commit you want released.
 2. `gh pr list --state open` — confirm no PR meant for this release is still open. Ask the operator if unsure.
 3. Confirm CI on `main` is green (`gh run list --branch main --limit 3`).
-4. Read `CHANGELOG.md` — the `## Unreleased` section is the staging area for this release's notes. If it's empty, there's nothing to release.
+4. Read `CHANGELOG.md` — the `## Unreleased` section is the **continuously-maintained** staging area for this release's notes. Every PR since the last release stages its own entry there as it merges, enforced by `scripts/check-changelog-entry.mjs` (part of `npm run lint`), so by release time this section should already read as a near-complete draft — you tidy and summarise, you do NOT author it from scratch. **An empty (or missing) `## Unreleased` at release time is now an ANOMALY, not the normal state:** it means either there genuinely is nothing to release, OR the enforcement was bypassed (`no-changelog` labels / `[skip changelog]` tokens on their own line on PRs that should have staged entries). Before assuming the former, cross-check against `git log <last-tag>..origin/main` — if real shippable work landed but Unreleased is bare, investigate and reconstruct rather than shipping a hollow release (this is exactly the v0.20.12 failure mode the enforcement exists to prevent).
 5. Pick the next version: read the latest tag (`git tag --list 'v*' --sort=-v:refname | head -1`) and bump the patch (or minor if the operator asks). Confirm with the operator which.
 
 ## Step 1 — Consolidate the changelog (the release commit is CHANGELOG-only)
 
-- Move the `## Unreleased` entries under a new `## vX.Y.Z — <one-line summary>` heading.
+- The section is maintained continuously (see pre-flight 4), so this step is now a **rename + tidy**, not authorship: change the `## Unreleased` header to `## vX.Y.Z — <one-line summary>`, then read through the staged entries and lightly edit for grouping/summary. If Unreleased was empty or thin, STOP and resolve the anomaly (pre-flight 4) before proceeding — do not invent a release note.
+- **Re-seed a fresh empty `## Unreleased` block at the top** (header + the convention HTML comment) immediately below `# Changelog`, so the staging area exists for the next cycle and `scripts/check-changelog-entry.mjs` keeps enforcing it. (Copy the comment block from the section you just renamed.)
 - The release commit touches **CHANGELOG.md only**. Do NOT bump `package.json` (placeholder discipline).
 - Branch protection blocks direct push to `main`, so: create a `release/vX.Y.Z` branch, push it, open a `chore: release vX.Y.Z` PR (base `main`), arm auto-merge (squash, delete-branch) on green CI.
 

package/telegram-plugin/bunfig.toml

@@ -2,9 +2,13 @@
 # `bun-test-run` job (scripts/bun-test-ci.sh) and `bun run --cwd telegram-plugin`.
 #
 # bun reads the bunfig.toml in its CWD only, so this file exists purely to load
-# the same state-dir hermeticity preload as the repo-root bunfig.toml. Keep the
-# two in sync; `npm run lint:agent-state-dir-hermeticity` fails if either stops
-# loading the guard. Rationale for the guard itself lives in
-# tests/vitest-setup/agent-state-dir-guard.mjs.
+# the same shared-state hermeticity preloads as the repo-root bunfig.toml. Keep
+# the two in sync; `npm run lint:agent-state-dir-hermeticity` and
+# `npm run lint:hindsight-bank-hermeticity` fail if either bunfig stops loading
+# either guard. Rationale lives in tests/vitest-setup/agent-state-dir-guard.mjs
+# and tests/vitest-setup/hindsight-bank-guard.mjs.
 [test]
-preload = ["../tests/vitest-setup/agent-state-dir-guard.mjs"]
+preload = [
+  "../tests/vitest-setup/agent-state-dir-guard.mjs",
+  "../tests/vitest-setup/hindsight-bank-guard.mjs",
+]

package/telegram-plugin/dist/gateway/gateway.js

@@ -22025,6 +22025,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback \u2014 switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) \u2192 autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit \u2014 switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    mem_limit: exports_external.string().regex(/^\d+(\.\d+)?\s*[bkmgt]?b?$/i, "hindsight.mem_limit must be a docker memory size, e.g. `24g` or `16384m`").optional().describe("Hard memory cap for the hindsight container \u2014 docker `--memory` on the " + "`memory setup` path and `mem_limit:` in the emitted compose snippet. A " + "docker size string (`24g`, `16384m`). Absent \u2192 switchroom's default " + "(`HINDSIGHT_DEFAULT_MEM_LIMIT`, 16g). This is a docker HostConfig flag, " + "not a container env var, which is why it is a first-class field here " + "rather than an `env:` key. **Move it together with " + "`env.SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS`**: Postgres pins the " + "buffer pool as unreclaimable shared memory inside this cap, so a cap " + "that does not clear `shared_buffers` by the container's app working " + "set plus its page-cache floor puts Postgres in a near-OOM " + "configuration. switchroom warns, naming both numbers, when it does " + "not. A value below the container's memory RESERVATION (4g) is " + "rejected outright \u2014 docker will not create such a container."),
     cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or \u2014 strongly preferred " + "\u2014 a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
@@ -79042,6 +79043,17 @@ import { homedir as homedir9 } from "node:os";
 // hooks/audience-classify.mjs
 var AUDIENCE_USER = "user";
 var AUDIENCE_INTERNAL = "internal";
+function decideCaptureAudience(signals) {
+  if (signals?.reviewOriginated === true) {
+    return signals?.reviewTextIsCard === true ? AUDIENCE_USER : AUDIENCE_INTERNAL;
+  }
+  const threw = signals?.replyToolThrewThisTurn === true;
+  if (!threw)
+    return AUDIENCE_USER;
+  if (signals?.openInboundObligation !== false)
+    return AUDIENCE_USER;
+  return AUDIENCE_INTERNAL;
+}
 function resolveRecordAudience(value) {
   return value === AUDIENCE_INTERNAL ? AUDIENCE_INTERNAL : AUDIENCE_USER;
 }
@@ -79068,6 +79080,31 @@ function formatReplyThrowFraming(s) {
   return `telegram gateway: outbox provenance framing nonce=${s.turnNonce} ` + `turnId=${s.turnId ?? "unknown"} chatId=${s.chatId ?? "unresolved"} ` + `sha=${(s.textSha256 ?? "").slice(0, 12)} source=${s.source ?? "unknown"} ` + `audience=user replyToolThrew=true \u2014 captured prose delivered with its ` + `provenance stated, not suppressed
 `;
 }
+var SELF_IMPROVEMENT_TITLE = "\uD83D\uDD27 **Self-improvement**";
+function isSelfImprovementCard(text4) {
+  if (typeof text4 !== "string")
+    return false;
+  return text4.trimStart().startsWith(SELF_IMPROVEMENT_TITLE);
+}
+function shouldFrameSelfImprovement(record, opts) {
+  if (opts?.frameEnabled === false)
+    return false;
+  return record?.reviewOriginated === true;
+}
+function applySelfImprovementFraming(text4) {
+  const body = typeof text4 === "string" ? text4 : "";
+  if (body.trim().length === 0)
+    return body;
+  if (isSelfImprovementCard(body))
+    return body;
+  return `${SELF_IMPROVEMENT_TITLE}
+
+${body}`;
+}
+function formatSelfImprovementFraming(s) {
+  return `telegram gateway: outbox self-improvement framing nonce=${s.turnNonce} ` + `turnId=${s.turnId ?? "unknown"} chatId=${s.chatId ?? "unresolved"} ` + `sha=${(s.textSha256 ?? "").slice(0, 12)} source=${s.source ?? "unknown"} ` + `reviewOriginated=true \u2014 review-turn prose delivered with its self-improvement ` + `title, never as raw unlabelled reasoning
+`;
+}
 function formatInternalSuppression(s) {
   return `telegram gateway: outbox audience suppression nonce=${s.turnNonce} ` + `turnId=${s.turnId ?? "unknown"} chatId=${s.chatId ?? "unresolved"} ` + `sha=${(s.textSha256 ?? "").slice(0, 12)} ageMs=${s.ageMs ?? 0} ` + `source=${s.source ?? "unknown"} pastWindow=${s.pastWindow === true} ` + `audience=internal \u2014 internal prose withheld from chat, journaled terminally
 `;
@@ -79254,7 +79291,8 @@ function decideOutboxSweep(input) {
     quietMs = OUTBOX_QUIET_MS,
     maxAgeMs = OUTBOX_MAX_AGE_MS,
     shownLedgerHit = false,
-    provenanceFraming = true
+    provenanceFraming = true,
+    selfImprovementFraming = true
   } = input;
   if (deliveredNonces.has(record.turnNonce))
     return { action: "skip-journaled" };
@@ -79270,11 +79308,14 @@ function decideOutboxSweep(input) {
   const delayed = age > maxAgeMs;
   const prefix = (delayed ? "(delayed) " : "") + routePrefix;
   const framed = shouldFrameReplyThrow(record, { frameEnabled: provenanceFraming });
-  const body = framed ? applyReplyThrowFraming(record.text) : record.text;
+  const provenanceBody = framed ? applyReplyThrowFraming(record.text) : record.text;
+  const selfImproveFramed = shouldFrameSelfImprovement(record, { frameEnabled: selfImprovementFraming }) && !isSelfImprovementCard(record.text);
+  const body = selfImproveFramed ? applySelfImprovementFraming(provenanceBody) : provenanceBody;
   return {
     action: delayed ? "send-delayed" : "send",
     text: prefix + body,
-    ...framed && body !== record.text ? { framedProvenance: "reply-throw" } : {}
+    ...framed && provenanceBody !== record.text ? { framedProvenance: "reply-throw" } : {},
+    ...selfImproveFramed && body !== provenanceBody ? { framedSelfImprovement: "self-improve" } : {}
   };
 }
 function resolveOutboxChat(record, deps) {
@@ -79605,7 +79646,10 @@ function journalExternalDelivery(args, stateDir, now = Date.now()) {
     ts: now,
     deliverySource: args.deliverySource ?? "reply-tool",
     ...args.replyAlreadyDeliveredThisTurn == null ? {} : { replyAlreadyDeliveredThisTurn: args.replyAlreadyDeliveredThisTurn },
-    ...args.framedProvenance == null ? {} : { framedProvenance: args.framedProvenance }
+    ...args.framedProvenance == null ? {} : { framedProvenance: args.framedProvenance },
+    ...args.audience == null ? {} : { audience: args.audience },
+    ...args.suppressedAudience == null ? {} : { suppressedAudience: args.suppressedAudience },
+    ...args.framedSelfImprovement == null ? {} : { framedSelfImprovement: args.framedSelfImprovement }
   }, stateDir);
   clearOutboxRecord(nonce, stateDir);
 }
@@ -80285,7 +80329,8 @@ function decideCapturedProseDelivery(args, deps) {
     deliver: true,
     text: text4,
     reason: "captured-prose",
-    ...state3.replyToolThrewThisTurn === true ? { replyToolThrewThisTurn: true } : {}
+    ...state3.replyToolThrewThisTurn === true ? { replyToolThrewThisTurn: true } : {},
+    ...state3.reviewOriginated === true ? { reviewOriginated: true } : {}
   };
 }
 function settleCapturedProseDelivery(outcome, effects) {
@@ -81366,67 +81411,104 @@ async function deliverCapturedProse(deps, args) {
   const { chatId, threadId, statusKeyStr, registryKey, originTurnId, text: text4, turnDurationMs } = args;
   const now = Date.now();
   const framed = shouldFrameReplyThrow({ replyToolThrewThisTurn: args.replyToolThrewThisTurn }, { frameEnabled: process.env.SWITCHROOM_TG_OUTBOX_PROVENANCE_FRAMING !== "0" });
+  const audienceGateEnabled = process.env.SWITCHROOM_TG_OUTBOX_AUDIENCE_GATE !== "0";
+  const audience = decideCaptureAudience({
+    reviewOriginated: args.reviewOriginated === true,
+    reviewTextIsCard: isSelfImprovementCard(text4)
+  });
+  const suppressed = audienceGateEnabled && audience === AUDIENCE_INTERNAL;
+  const selfImproveFramed = !suppressed && shouldFrameSelfImprovement({ reviewOriginated: args.reviewOriginated }, { frameEnabled: process.env.SWITCHROOM_TG_OUTBOX_SELF_IMPROVE_FRAMING !== "0" }) && !isSelfImprovementCard(text4);
   let outcome;
-  const already = outboundDedup.check(chatId, threadId, text4, now, registryKey);
-  if (already == null) {
-    let out = normalizeParagraphBreaks(repairEscapedWhitespace(framed ? applyReplyThrowFraming(text4) : text4));
-    out = redactOutboundText(out, "captured_prose");
-    const chunks = splitMarkdownChunks(out, RICH_MESSAGE_MAX_CHARS);
-    const sentIds = [];
-    try {
-      let liveThreadId = threadId;
-      for (const c of chunks) {
-        const sent = await retryWithThreadFallback(robustApiCall, (tid) => {
-          const opts = {
-            link_preview_options: { is_disabled: true },
-            ...tid != null ? { message_thread_id: tid } : {}
-          };
-          return bot.api.sendRichMessage(chatId, richMessage(c), opts);
-        }, { threadId: liveThreadId, chat_id: chatId, verb: "captured-prose.sendMessage" });
-        if (liveThreadId != null && sent.message_thread_id == null) {
-          liveThreadId = undefined;
+  if (suppressed) {
+    journalExternalDelivery({
+      turnNonce: originTurnId,
+      text: text4,
+      replyAlreadyDeliveredThisTurn: false,
+      audience,
+      suppressedAudience: AUDIENCE_INTERNAL
+    });
+    process.stderr.write(formatInternalSuppression({
+      turnNonce: originTurnId,
+      turnId: originTurnId,
+      chatId,
+      textSha256: sha256Hex(text4),
+      source: "captured-prose-bridge"
+    }));
+    outcome = "suppressed-internal";
+  } else {
+    const already = outboundDedup.check(chatId, threadId, text4, now, registryKey);
+    if (already == null) {
+      let out = normalizeParagraphBreaks(repairEscapedWhitespace(framed ? applyReplyThrowFraming(text4) : text4));
+      out = selfImproveFramed ? applySelfImprovementFraming(out) : out;
+      out = redactOutboundText(out, "captured_prose");
+      const chunks = splitMarkdownChunks(out, RICH_MESSAGE_MAX_CHARS);
+      const sentIds = [];
+      try {
+        let liveThreadId = threadId;
+        for (const c of chunks) {
+          const sent = await retryWithThreadFallback(robustApiCall, (tid) => {
+            const opts = {
+              link_preview_options: { is_disabled: true },
+              ...tid != null ? { message_thread_id: tid } : {}
+            };
+            return bot.api.sendRichMessage(chatId, richMessage(c), opts);
+          }, { threadId: liveThreadId, chat_id: chatId, verb: "captured-prose.sendMessage" });
+          if (liveThreadId != null && sent.message_thread_id == null) {
+            liveThreadId = undefined;
+          }
+          sentIds.push(sent.message_id);
         }
-        sentIds.push(sent.message_id);
-      }
-      if (HISTORY_ENABLED && sentIds.length > 0) {
-        try {
-          recordOutbound2({
-            chat_id: chatId,
-            thread_id: threadId ?? null,
-            message_ids: sentIds,
-            texts: chunks
-          });
-        } catch {}
-      }
-      outboundDedup.record(chatId, threadId, text4, now, registryKey);
-      journalExternalDelivery({
-        turnNonce: originTurnId,
-        text: text4,
-        tgMessageId: sentIds[sentIds.length - 1],
-        replyAlreadyDeliveredThisTurn: false,
-        ...framed ? { framedProvenance: "reply-throw" } : {}
-      });
-      process.stderr.write(`telegram gateway: captured-prose delivery \u2014 sent ${out.length} chars recovered from ` + `transcript scan (chat=${chatId} origin=${originTurnId})
-`);
-      if (framed) {
-        process.stderr.write(formatReplyThrowFraming({
+        if (HISTORY_ENABLED && sentIds.length > 0) {
+          try {
+            recordOutbound2({
+              chat_id: chatId,
+              thread_id: threadId ?? null,
+              message_ids: sentIds,
+              texts: chunks
+            });
+          } catch {}
+        }
+        outboundDedup.record(chatId, threadId, text4, now, registryKey);
+        journalExternalDelivery({
           turnNonce: originTurnId,
-          turnId: originTurnId,
-          chatId,
-          textSha256: sha256Hex(text4),
-          source: "captured-prose-bridge"
-        }));
+          text: text4,
+          tgMessageId: sentIds[sentIds.length - 1],
+          replyAlreadyDeliveredThisTurn: false,
+          ...framed ? { framedProvenance: "reply-throw" } : {},
+          ...selfImproveFramed ? { framedSelfImprovement: "self-improve" } : {},
+          audience
+        });
+        process.stderr.write(`telegram gateway: captured-prose delivery \u2014 sent ${out.length} chars recovered from ` + `transcript scan (chat=${chatId} origin=${originTurnId})
+`);
+        if (framed) {
+          process.stderr.write(formatReplyThrowFraming({
+            turnNonce: originTurnId,
+            turnId: originTurnId,
+            chatId,
+            textSha256: sha256Hex(text4),
+            source: "captured-prose-bridge"
+          }));
+        }
+        if (selfImproveFramed) {
+          process.stderr.write(formatSelfImprovementFraming({
+            turnNonce: originTurnId,
+            turnId: originTurnId,
+            chatId,
+            textSha256: sha256Hex(text4),
+            source: "captured-prose-bridge"
+          }));
+        }
+        outcome = "sent";
+      } catch (err) {
+        process.stderr.write(`telegram gateway: captured-prose delivery failed: ${err.message} \u2014 ` + `arming the silent-end re-prompt net (recordUndeliveredTurnEnd) so the ` + `answer is recoverable (chat=${chatId} origin=${originTurnId})
+`);
+        outcome = "failed";
       }
-      outcome = "sent";
-    } catch (err) {
-      process.stderr.write(`telegram gateway: captured-prose delivery failed: ${err.message} \u2014 ` + `arming the silent-end re-prompt net (recordUndeliveredTurnEnd) so the ` + `answer is recoverable (chat=${chatId} origin=${originTurnId})
+    } else {
+      process.stderr.write(`telegram gateway: captured-prose delivery skipped \u2014 this answer already went out ` + `(dedup age=${already.ageMs}ms chat=${chatId} origin=${originTurnId}); settling bookkeeping
 `);
-      outcome = "failed";
+      outcome = "skipped-dedup";
     }
-  } else {
-    process.stderr.write(`telegram gateway: captured-prose delivery skipped \u2014 this answer already went out ` + `(dedup age=${already.ageMs}ms chat=${chatId} origin=${originTurnId}); settling bookkeeping
-`);
-    outcome = "skipped-dedup";
   }
   const settlement = settleCapturedProseDelivery(outcome, {
     closeObligation: () => {
@@ -83909,6 +83991,7 @@ function handleSessionEvent(deps, ev) {
                 originTurnId: turn.turnId,
                 text: proseDecision.text,
                 replyToolThrewThisTurn: proseDecision.replyToolThrewThisTurn === true,
+                reviewOriginated: proseDecision.reviewOriginated === true,
                 turnDurationMs
               });
             } else {
@@ -87898,6 +87981,7 @@ var HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB = 12288;
 function pgMib(mib) {
   return `${mib}MB`;
 }
+var HINDSIGHT_PG_MIN_NON_BUFFER_MIB = HINDSIGHT_PG_APP_ANON_MIB + HINDSIGHT_PG_PAGE_CACHE_FLOOR_MIB;
 var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
 var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
 var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
@@ -87945,6 +88029,7 @@ var HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY = 0.3;
 var HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS = "false";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_FUNCTION = "exponential";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS = 30;
+var HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION = "pg_search";
 var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_RECALL_MAX_CANDIDATES_PER_SOURCE",
@@ -88010,7 +88095,8 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_GRAPH_SEED_MIN_SIMILARITY",
     String(HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY)
-  ]
+  ],
+  ["HINDSIGHT_API_TEXT_SEARCH_EXTENSION", HINDSIGHT_DEFAULT_TEXT_SEARCH_EXTENSION]
 ];
 var HINDSIGHT_PERF_DEFAULTS_GPU = [
   ["HINDSIGHT_API_RERANKER_LOCAL_FP16", HINDSIGHT_DEFAULT_RERANKER_LOCAL_FP16],
@@ -94212,6 +94298,7 @@ function hydrateResumeLedger(ledger, turnId, snapshot, hasLanded) {
 }
 function createCapturedResumeDispatcher(ports) {
   const stderr = ports.stderr ?? (() => {});
+  const hasOutboundWithText3 = ports.hasOutboundWithText ?? hasOutboundWithText2;
   const inFlight = new Set;
   function deliver(o, snapshot) {
     return ports.deliverAnswer({
@@ -94223,7 +94310,7 @@ function createCapturedResumeDispatcher(ports) {
       replyToMessageId: o.messageId,
       resume: {
         snapshot,
-        hydrate: (ledger, turnId) => hydrateResumeLedger(ledger, turnId, snapshot, (txt) => ports.historyEnabled && hasOutboundWithText2(o.chatId, txt, o.threadId ?? null, o.openedAt))
+        hydrate: (ledger, turnId) => hydrateResumeLedger(ledger, turnId, snapshot, (txt) => ports.historyEnabled && hasOutboundWithText3(o.chatId, txt, o.threadId ?? null, o.openedAt))
       }
     });
   }
@@ -103030,6 +103117,8 @@ async function sweepOutbox(deps) {
   const escalateInternalSuppression = deps.escalateInternalSuppression ?? log;
   const provenanceFramingEnabled = deps.provenanceFramingEnabled?.() ?? process.env.SWITCHROOM_TG_OUTBOX_PROVENANCE_FRAMING !== "0";
   const logProvenanceFraming = deps.logProvenanceFraming ?? log;
+  const selfImprovementFramingEnabled = deps.selfImprovementFramingEnabled?.() ?? process.env.SWITCHROOM_TG_OUTBOX_SELF_IMPROVE_FRAMING !== "0";
+  const logSelfImprovementFraming = deps.logSelfImprovementFraming ?? log;
   for (const record2 of records) {
     summary.scanned++;
     if (shouldSuppressForAudience(record2, { gateEnabled: audienceGateEnabled })) {
@@ -103075,7 +103164,8 @@ async function sweepOutbox(deps) {
       routePrefix,
       quietMs: deps.quietMs ?? OUTBOX_QUIET_MS,
       shownLedgerHit: isShownBlock(record2.turnNonce, record2.text, deps.stateDir),
-      provenanceFraming: provenanceFramingEnabled
+      provenanceFraming: provenanceFramingEnabled,
+      selfImprovementFraming: selfImprovementFramingEnabled
     });
     if (decision.action !== "send" && decision.action !== "send-delayed") {
       summary.skipped++;
@@ -103119,7 +103209,8 @@ async function sweepOutbox(deps) {
         ts: now,
         deliverySource: "sweep",
         replyAlreadyDeliveredThisTurn: record2.replyAlreadyDeliveredThisTurn === true,
-        ...decision.framedProvenance != null ? { framedProvenance: decision.framedProvenance } : {}
+        ...decision.framedProvenance != null ? { framedProvenance: decision.framedProvenance } : {},
+        ...decision.framedSelfImprovement != null ? { framedSelfImprovement: decision.framedSelfImprovement } : {}
       }, deps.stateDir);
       if (decision.framedProvenance != null) {
         summary.provenanceFramed = (summary.provenanceFramed ?? 0) + 1;
@@ -103131,6 +103222,16 @@ async function sweepOutbox(deps) {
           source: record2.source
         }));
       }
+      if (decision.framedSelfImprovement != null) {
+        summary.selfImprovementFramed = (summary.selfImprovementFramed ?? 0) + 1;
+        logSelfImprovementFraming(formatSelfImprovementFraming({
+          turnNonce: record2.turnNonce,
+          turnId: turnIdFromNonce(record2.turnNonce),
+          chatId: resolvedChat.chatId,
+          textSha256: record2.textSha256,
+          source: record2.source
+        }));
+      }
       if (deps.recordOutbound != null && sendResult.chunks.length > 0) {
         try {
           deps.recordOutbound(resolvedChat.chatId, resolvedChat.threadId, sendResult.chunks.map((c) => c.messageId), sendResult.chunks.map((c) => c.text));
@@ -103337,10 +103438,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.20.12";
-var COMMIT_SHA = "298e1e15";
-var COMMIT_DATE = "2026-08-06T12:14:41Z";
-var LATEST_PR = 4468;
+var VERSION2 = "0.20.13";
+var COMMIT_SHA = "a73b0fd2";
+var COMMIT_DATE = "2026-08-07T03:01:37Z";
+var LATEST_PR = 4502;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts