switchroom 0.21.14 → 0.21.15

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.21.14", COMMIT_SHA = "2d43063c", COMMIT_DATE = "2026-08-16T08:34:12Z";
+var VERSION = "0.21.15", COMMIT_SHA = "efa77e51", COMMIT_DATE = "2026-08-17T00:42:23Z";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -13750,6 +13750,7 @@ var init_schema = __esm(() => {
       empathy: exports_external.number().int().min(1).max(5).optional().describe("How much the bank weights emotional/relational context (1-5; engine default 3).")
     }).optional().describe("Personality traits (1-5 each) steering how this bank frames recall, " + "reflect, and observation synthesis \u2014 a coach leans empathy-high, a " + "lawyer/analyst leans skepticism/literalism-high. Maps to the engine's " + "flat `disposition_skepticism`/`_literalism`/`_empathy` fields. " + "Cascade: per-key merge (an agent overrides individual traits and " + "inherits the rest, matching `recall`)."),
     directive_capture_nudge: exports_external.boolean().optional().describe("Deterministic directive-capture nudge (issue #2848 Stage B). When " + "on (switchroom default true \u2014 Stage A measured a ~55% miss rate on " + "durable corrections), the auto-recall hook regex-detects correction " + '/ standing-rule-shaped inbound ("always/never \u2026", "from now on \u2026", ' + `"stop doing \u2026", a stated preference, "that's wrong, it's \u2026") and ` + "appends a terse advisory to the turn's context telling the model to " + "persist the rule with mcp__hindsight__create_directive if it IS " + "durable. Detection is pure regex \u2014 the model does the judgment " + "in-session and calls create_directive itself (no model callsite, no " + "silent hook-side write). Set false to disable per-agent. " + "Cascade: override (per-agent wins over default)."),
+    profile_capture_nudge: exports_external.boolean().optional().describe("Deterministic operator-profile capture nudge (RFC phase4 P3, serves " + 'the "save memories about him" want). When on (switchroom default ' + "true), the auto-recall hook regex-detects a first-person durable " + 'self-statement by the operator ("I prefer \u2026", "my \u2026 is \u2026", "I ' + 'always \u2026", "remind me that I \u2026") and appends a terse advisory to ' + "the turn's context telling the model to persist it with an explicit " + "mcp__hindsight__retain tagged `profile:ken` into the agent's OWN bank " + "(not a shared/cross-agent person bank). Detection is pure regex \u2014 the " + "model does the judgment in-session and calls retain itself (no model " + "callsite, no silent hook-side write). Set false to disable per-agent. " + "Cascade: override (per-agent wins over default)."),
     anti_confabulation_directive: AntiConfabulationDirectiveSchema,
     observation_scopes: ObservationScopesSchema,
     observation_scope_strategy: ObservationScopeStrategySchema,
@@ -13798,7 +13799,8 @@ var init_schema = __esm(() => {
     }).optional().describe("Auto-recall tuning knobs"),
     retain: exports_external.object({
       every_n_turns: exports_external.number().int().min(1).optional().describe("How often the Stop hook fires auto-retention, in turns. The " + "vendor plugin default is 10 (a short session can end before " + "retention ever fires); switchroom's scaffold default is 3. " + "Lower = more frequent, smaller retains + tighter crash " + "durability (at 1, every turn is retained before a restart can " + "lose it); higher = fewer, larger retains + less LLM churn. " + "Raised from the historical 1 to 3 because the local reasoning " + "consolidation model (Ollama gpt-oss-20b) ran away on the large " + "overlapping every-turn payloads. Set to 1 for the old " + "every-turn crash-durability guarantee. Min 1. Cascade: " + "per-field merge (agent wins over default)."),
-      overlap_turns: exports_external.number().int().min(0).optional().describe("Extra recent turns included in each chunked retain window on " + "top of `every_n_turns`, so window = overlap_turns + " + "every_n_turns recent turns. Vendor default is 2; switchroom's " + "scaffold default is 1 (smaller payloads for the local " + "reasoning consolidation model). Higher = more redundant " + "context re-sent per fire. Min 0. Cascade: per-field merge.")
+      overlap_turns: exports_external.number().int().min(0).optional().describe("Extra recent turns included in each chunked retain window on " + "top of `every_n_turns`, so window = overlap_turns + " + "every_n_turns recent turns. Vendor default is 2; switchroom's " + "scaffold default is 1 (smaller payloads for the local " + "reasoning consolidation model). Higher = more redundant " + "context re-sent per fire. Min 0. Cascade: per-field merge."),
+      tool_calls: exports_external.boolean().optional().describe("Whether auto-retain stores assistant tool_use blocks (with their " + "entire input dict) and tool_result content (up to 2000 chars) " + "alongside the human/assistant turns. Vendor + switchroom default " + "is true \u2014 the fleet behaves byte-identically until an operator " + "sets this false. Tool inputs/results are a large fraction of " + "retained volume (RFC memory-redesign P4) but also where evidence " + "lives (a commit SHA, a failing test's output, the diff that " + "fixed something), so the tradeoff is real and per-agent. false is " + "not a new mode: sidechains already force it off " + "(subagent_retain.py). Set false to drop tool exhaust from an " + "agent's retains. Cascade: per-field merge (agent wins over " + "default).")
     }).optional().describe("Auto-retain (Stop-hook consolidation) cadence knobs")
   }).optional();
   HookEntrySchema = exports_external.object({
@@ -14186,6 +14188,7 @@ var init_schema = __esm(() => {
       isolation: exports_external.enum(["default", "strict"]).optional(),
       profile: exports_external.string().optional(),
       directive_capture_nudge: exports_external.boolean().optional(),
+      profile_capture_nudge: exports_external.boolean().optional(),
       anti_confabulation_directive: AntiConfabulationDirectiveSchema,
       observation_scopes: ObservationScopesSchema,
       observation_scope_strategy: ObservationScopeStrategySchema,
@@ -14234,7 +14237,8 @@ var init_schema = __esm(() => {
       }).optional(),
       retain: exports_external.object({
         every_n_turns: exports_external.number().int().min(1).optional(),
-        overlap_turns: exports_external.number().int().min(0).optional()
+        overlap_turns: exports_external.number().int().min(0).optional(),
+        tool_calls: exports_external.boolean().optional()
       }).optional(),
       bank_mission: exports_external.string().optional(),
       reflect_mission: exports_external.string().optional(),
@@ -30444,7 +30448,8 @@ function resolveHindsightRetainConfig(switchroomConfig, agentName, resolvedAgent
   const retain = resolvedAgentConfig ? resolvedAgentConfig.memory?.retain : switchroomConfig ? resolveAgentConfig(switchroomConfig.defaults, switchroomConfig.profiles, switchroomConfig.agents[agentName] ?? {})?.memory?.retain : undefined;
   return {
     everyNTurns: retain?.every_n_turns ?? HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS,
-    overlapTurns: retain?.overlap_turns ?? HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS
+    overlapTurns: retain?.overlap_turns ?? HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS,
+    toolCalls: retain?.tool_calls ?? HINDSIGHT_DEFAULT_RETAIN_TOOL_CALLS
   };
 }
 function resolveHindsightAutoRecall(switchroomConfig, agentName, resolvedAgentConfig) {
@@ -30520,6 +30525,7 @@ function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, re
   settings.retainEveryNTurns = retainConfig.everyNTurns;
   settings.retainMode = "chunked";
   settings.retainOverlapTurns = retainConfig.overlapTurns;
+  settings.retainToolCalls = retainConfig.toolCalls;
   settings.retainTags = [...RETAIN_TAGS_DEFAULT];
   settings.recallMaxMemories = recallCaps.maxMemories;
   settings.recallMaxTokens = recallCaps.maxTokens;
@@ -30530,6 +30536,7 @@ function renderHindsightSettingsOverrides(raw, additionalBanks, retainConfig, re
   settings.recallAdditionalBankMinSlots = defaultRecallAdditionalBankMinSlots(recallCaps.maxMemories);
   settings.recallSkipTrivial = true;
   settings.directiveCaptureNudge = true;
+  settings.profileCaptureNudge = true;
   settings.recallTagWeights = { ...HINDSIGHT_RECALL_TAG_WEIGHT_SEED };
   if (additionalBanks.length > 0) {
     settings.recallAdditionalBanks = [...additionalBanks];
@@ -30583,6 +30590,7 @@ function buildWorkspaceContext(args) {
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
     hindsightDirectiveCaptureNudge,
+    hindsightProfileCaptureNudge,
     hindsightObservationScopes,
     hindsightObservationScopeStrategy,
     hindsightTopicAliasesJson,
@@ -30637,6 +30645,7 @@ function buildWorkspaceContext(args) {
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
     hindsightDirectiveCaptureNudge,
+    hindsightProfileCaptureNudge,
     hindsightObservationScopesQ: hindsightObservationScopes ? shellSingleQuote(hindsightObservationScopes) : undefined,
     hindsightObservationScopeStrategyQ: hindsightObservationScopeStrategy ? shellSingleQuote(hindsightObservationScopeStrategy) : undefined,
     hindsightTopicAliasesJsonQ: hindsightTopicAliasesJson ? shellSingleQuote(hindsightTopicAliasesJson) : undefined,
@@ -30912,6 +30921,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
   const hindsightRecallTypes = agentConfig.memory?.recall?.types?.length ? agentConfig.memory.recall.types.join(",") : undefined;
   const hindsightRecallSkipTrivial = agentConfig.memory?.recall?.skip_trivial === undefined ? undefined : String(agentConfig.memory.recall.skip_trivial);
   const hindsightDirectiveCaptureNudge = agentConfig.memory?.directive_capture_nudge === undefined ? undefined : String(agentConfig.memory.directive_capture_nudge);
+  const hindsightProfileCaptureNudge = agentConfig.memory?.profile_capture_nudge === undefined ? undefined : String(agentConfig.memory.profile_capture_nudge);
   const hindsightObservationScopes = agentConfig.memory?.observation_scopes;
   const hindsightObservationScopeStrategy = agentConfig.memory?.observation_scope_strategy;
   const topicAliases = agentConfig.channels?.telegram?.topic_aliases;
@@ -30949,6 +30959,7 @@ function scaffoldAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchro
     hindsightRecallTypes,
     hindsightRecallSkipTrivial,
     hindsightDirectiveCaptureNudge,
+    hindsightProfileCaptureNudge,
     hindsightObservationScopes,
     hindsightObservationScopeStrategy,
     hindsightTopicAliasesJson,
@@ -31925,6 +31936,7 @@ function reconcileAgentInner(name, agentConfigRaw, agentsDir, telegramConfig, sw
   const hindsightRecallTypes = agentConfig.memory?.recall?.types?.length ? agentConfig.memory.recall.types.join(",") : undefined;
   const hindsightRecallSkipTrivial = agentConfig.memory?.recall?.skip_trivial === undefined ? undefined : String(agentConfig.memory.recall.skip_trivial);
   const hindsightDirectiveCaptureNudge = agentConfig.memory?.directive_capture_nudge === undefined ? undefined : String(agentConfig.memory.directive_capture_nudge);
+  const hindsightProfileCaptureNudge = agentConfig.memory?.profile_capture_nudge === undefined ? undefined : String(agentConfig.memory.profile_capture_nudge);
   const hindsightObservationScopes = agentConfig.memory?.observation_scopes;
   const hindsightObservationScopeStrategy = agentConfig.memory?.observation_scope_strategy;
   const topicAliases = agentConfig.channels?.telegram?.topic_aliases;
@@ -31974,6 +31986,7 @@ function reconcileAgentInner(name, agentConfigRaw, agentsDir, telegramConfig, sw
       hindsightRecallTypes,
       hindsightRecallSkipTrivial,
       hindsightDirectiveCaptureNudge,
+      hindsightProfileCaptureNudge,
       hindsightObservationScopesQ: hindsightObservationScopes ? shellSingleQuote(hindsightObservationScopes) : undefined,
       hindsightObservationScopeStrategyQ: hindsightObservationScopeStrategy ? shellSingleQuote(hindsightObservationScopeStrategy) : undefined,
       hindsightTopicAliasesJsonQ: hindsightTopicAliasesJson ? shellSingleQuote(hindsightTopicAliasesJson) : undefined,
@@ -32411,6 +32424,7 @@ ${body}
       hindsightRecallTypes,
       hindsightRecallSkipTrivial,
       hindsightDirectiveCaptureNudge,
+      hindsightProfileCaptureNudge,
       hindsightObservationScopes,
       hindsightObservationScopeStrategy,
       hindsightTopicAliasesJson,
@@ -32955,6 +32969,13 @@ When the user asks you to forget something ("forget that", "delete X", "drop wha
 ### Inspect proactively
 When the user asks "what do you know about X / me", "what do you remember about Y", or any memory audit, use \`reflect\` to synthesize an answer across the bank. Return it as honest prose, not a raw dump. If the bank has little on the topic, say so.
 
+### Route repo knowledge to the shared repo bank
+Auto-retain always writes your OWN bank, and that stays true for everything above \u2014 don't fight it. The one place you reach past it, by hand, is durable knowledge about a REPOSITORY: a build invariant, a migration gotcha, a house-style rule, a "this suite only passes single-threaded" trap. That kind of fact is worth having for every agent that touches the repo, not just you \u2014 so persist it to the shared repo bank with an explicit \`retain\` that names the bank, in the same turn you learn it:
+
+\`mcp__hindsight__retain(content="switchroom's vitest config must set assetsInclude to ['**/*.yaml'], or a .yaml imported with { type: 'text' } fails to resolve under vitest", bank_id="switchroom-dev", tags=["repo:switchroom", "build"])\`
+
+Passing \`bank_id\` is what makes this the exception: auto-retain can't reach a shared bank (it always resolves your own), so if you don't make the call by hand the knowledge stays trapped in your bank. Two rules keep the shared bank clean: route only durable, repo-scoped facts there \u2014 never conversation, user preferences, or anything about a person (those stay in your own bank via ordinary retain) \u2014 and tag every one \`repo:<name>\` so it is findable. Writes are always durable and readable by the configured agents; on the read side, ordinary \`recall\` / \`reflect\` reach the shared repo bank only for agents that list it in \`memory.recall.additional_banks\` (a handful of dev agents) \u2014 for everyone else the shared write is write-only from their own recall.
+
 Don't wait for a slash command. Don't ask permission. Memory work is table stakes, like a colleague who takes notes and remembers.`, WEB_FETCH_GUIDANCE = `## Fetching from the web
 
 The native \`WebFetch\` tool is disabled in this fleet \u2014 fetch pages
@@ -33121,7 +33142,7 @@ plainer wins.
 Every turn that answers a user message ends with a user-visible \`reply\`
 \u2014 Telegram is all the user sees; your terminal output
 never reaches them.`, TELEGRAM_ENV_PLACEHOLDER = `# Set your bot token: TELEGRAM_BOT_TOKEN=your-token-here
-`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, CONTEXT7_MCP_TOOLS, CONTEXT7_BLANKET_TOKENS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, NATIVE_WEBSEARCH_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", CLAUDE_MD_YOURS_PLACEHOLDER, pendingBankOps, SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS = 3, HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS = 1, RECALL_OWN_BANK_SLOT_DIVISOR = 3, RECALL_ADDITIONAL_BANK_SLOT_DIVISOR = 6, HINDSIGHT_RECALL_MIN_SCORE_DEFAULT = 0, HINDSIGHT_RECALL_MIN_SCORE_SCOPE_DEFAULT = "degraded", VALID_SETTINGS_DEFAULT_MODES, SWITCHROOM_DEFAULT_PERMISSION_MODE = "acceptEdits", DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", CONTEXT7_MCP_URL = "https://mcp.context7.com/mcp", INTEGRATION_MCP_RESOLVERS;
+`, SWITCHROOM_TELEGRAM_MCP_TOOLS, HINDSIGHT_MCP_TOOLS, AGENT_CONFIG_MCP_TOOLS, HOSTD_MCP_TOOLS, WEBKITE_MCP_TOOLS, CONTEXT7_MCP_TOOLS, CONTEXT7_BLANKET_TOKENS, LEGACY_SWITCHROOM_MCP_TOKENS, LEGACY_HOSTD_BLANKET_TOKENS, DEFAULT_READ_ONLY_PREAPPROVED_TOOLS, NATIVE_WEBSEARCH_PREAPPROVED_TOOLS, WEBKITE_FLEET_DENY_TOOLS, INTERACTIVE_TUI_FLEET_DENY_TOOLS, WEBKITE_BINARY_CONTAINER_PATH = "/usr/local/bin/webkite", SWITCHROOM_DEFAULT_MAIN_MODEL = "claude-sonnet-5", SWITCHROOM_DEFAULT_THINKING_EFFORT = "low", CLAUDE_MD_YOURS_PLACEHOLDER, pendingBankOps, SWITCHROOM_OWNED_SETTINGS_KEYS, ALL_BUILTIN_TOOLS, HINDSIGHT_DEFAULT_RETAIN_EVERY_N_TURNS = 3, HINDSIGHT_DEFAULT_RETAIN_OVERLAP_TURNS = 1, HINDSIGHT_DEFAULT_RETAIN_TOOL_CALLS = true, RECALL_OWN_BANK_SLOT_DIVISOR = 3, RECALL_ADDITIONAL_BANK_SLOT_DIVISOR = 6, HINDSIGHT_RECALL_MIN_SCORE_DEFAULT = 0, HINDSIGHT_RECALL_MIN_SCORE_SCOPE_DEFAULT = "degraded", VALID_SETTINGS_DEFAULT_MODES, SWITCHROOM_DEFAULT_PERMISSION_MODE = "acceptEdits", DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin", DOCKER_HOOKS_PATH, DOCKER_BUNDLED_HOOKS_PATH = "/opt/switchroom/hooks", DOCKER_BIN_PATH = "/opt/switchroom/bin", DOCKER_SECURITY_PLUGIN_PATH = "/opt/switchroom/security-plugin", DOCKER_CONFIG_PATH = "/state/config/switchroom.yaml", DOCKER_SWITCHROOM_CLI_PATH = "/usr/local/bin/switchroom", DOCKER_AUTH_BROKER_SOCKET = "/run/switchroom/auth-broker/sock", DOCKER_VAULT_BROKER_SOCKET = "/run/switchroom/broker/sock", DOCKER_AGENT_HOME = "/state/agent/home", CONTEXT7_MCP_URL = "https://mcp.context7.com/mcp", INTEGRATION_MCP_RESOLVERS;
 var init_scaffold = __esm(() => {
   init_source();
   init_cron_unit_name();
@@ -84741,7 +84762,7 @@ __export(exports_server2, {
   TOOLS: () => TOOLS2
 });
 import { randomBytes as randomBytes18 } from "node:crypto";
-import { existsSync as existsSync123 } from "node:fs";
+import { existsSync as existsSync124 } from "node:fs";
 function selfSocketPath() {
   return `/run/switchroom/hostd/${SELF_AGENT}/sock`;
 }
@@ -84768,7 +84789,7 @@ async function dispatchTool2(name, args) {
     return errorText2("hostd MCP: SWITCHROOM_AGENT_NAME env var is not set \u2014 cannot " + "determine which per-agent socket to talk to.");
   }
   const sockPath = selfSocketPath();
-  if (!existsSync123(sockPath)) {
+  if (!existsSync124(sockPath)) {
     return errorText2(`hostd MCP: socket not bound at ${sockPath}. The host-control ` + `daemon is either not installed (run \`switchroom hostd install\`) ` + `or this agent isn't admin-flagged in switchroom.yaml. RFC C ` + `bind-mounts the per-agent socket only when host_control.enabled ` + `is true AND the agent has admin: true.`);
   }
   let req;
@@ -85019,13 +85040,13 @@ function resolveAuditLogPath() {
   if (process.env.HOSTD_AUDIT_LOG_PATH)
     return process.env.HOSTD_AUDIT_LOG_PATH;
   const bindMounted = "/host-home/.switchroom/host-control-audit.log";
-  if (existsSync123(bindMounted))
+  if (existsSync124(bindMounted))
     return bindMounted;
   return defaultAuditLogPath2();
 }
 function getLastUpdateApplyStatus() {
   const path10 = resolveAuditLogPath();
-  if (!existsSync123(path10)) {
+  if (!existsSync124(path10)) {
     return errorText2(`get_status: audit log not found at ${path10}. No update_apply has run yet?`);
   }
   let raw;
@@ -85993,11 +86014,11 @@ var init_test_agents = __esm(() => {
 });
 
 // src/litellm/header-passthrough-guard.ts
-import { existsSync as existsSync126, readdirSync as readdirSync49 } from "node:fs";
+import { existsSync as existsSync127, readdirSync as readdirSync49 } from "node:fs";
 function discoverLiveLitellmConfigPath(opts) {
   const servicesDir = opts?.servicesDir ?? COOLIFY_SERVICES_DIR;
   const readdir2 = opts?.readdirFn ?? ((p) => readdirSync49(p));
-  const exists = opts?.existsFn ?? existsSync126;
+  const exists = opts?.existsFn ?? existsSync127;
   let entries;
   try {
     entries = readdir2(servicesDir);
@@ -86215,12 +86236,12 @@ var init_passthrough_mount_guard = __esm(() => {
 });
 
 // src/fleet-health/litellm-config-sensor.ts
-import { execFileSync as execFileSync37 } from "node:child_process";
-import { readFileSync as readFileSync113, existsSync as existsSync127 } from "node:fs";
-import { dirname as dirname54, join as join131 } from "node:path";
+import { execFileSync as execFileSync38 } from "node:child_process";
+import { readFileSync as readFileSync114, existsSync as existsSync128 } from "node:fs";
+import { dirname as dirname55, join as join131 } from "node:path";
 function resolveLiveLitellmPythonVersion() {
   try {
-    const ps = execFileSync37("docker", ["ps", "--format", "{{.Names}}\t{{.Image}}"], {
+    const ps = execFileSync38("docker", ["ps", "--format", "{{.Names}}\t{{.Image}}"], {
       encoding: "utf-8",
       timeout: 5000,
       stdio: ["ignore", "pipe", "ignore"]
@@ -86232,7 +86253,7 @@ function resolveLiveLitellmPythonVersion() {
     const name = line.split("\t")[0]?.trim();
     if (!name)
       return null;
-    const lsOut = execFileSync37("docker", ["exec", name, "sh", "-c", "ls -d /app/.venv/lib/python*/ 2>/dev/null"], { encoding: "utf-8", timeout: 5000, stdio: ["ignore", "pipe", "ignore"] });
+    const lsOut = execFileSync38("docker", ["exec", name, "sh", "-c", "ls -d /app/.venv/lib/python*/ 2>/dev/null"], { encoding: "utf-8", timeout: 5000, stdio: ["ignore", "pipe", "ignore"] });
     const m = lsOut.match(/python(\d+\.\d+)/);
     return m ? m[1] : null;
   } catch {
@@ -86249,8 +86270,8 @@ function resolveLitellmConfigPath(explicit, discoverFn = () => discoverLiveLitel
 }
 function scanLitellmConfig(opts = {}) {
   const path10 = resolveLitellmConfigPath(opts.path, opts.discoverFn);
-  const exists = opts.existsFn ?? existsSync127;
-  const read = opts.readFn ?? ((p) => readFileSync113(p, "utf-8"));
+  const exists = opts.existsFn ?? existsSync128;
+  const read = opts.readFn ?? ((p) => readFileSync114(p, "utf-8"));
   const log = opts.log ?? (() => {});
   const nowIso = opts.nowIso ?? new Date().toISOString();
   if (path10 === null) {
@@ -86301,7 +86322,7 @@ function scanLitellmConfig(opts = {}) {
       ts: nowIso
     });
   }
-  const composePath = join131(dirname54(path10), LIVE_COMPOSE_BASENAME);
+  const composePath = join131(dirname55(path10), LIVE_COMPOSE_BASENAME);
   let composeText = null;
   if (exists(composePath)) {
     try {
@@ -86404,20 +86425,20 @@ __export(exports_scan, {
   ledgerPathForBase: () => ledgerPathForBase
 });
 import {
-  readFileSync as readFileSync114,
+  readFileSync as readFileSync115,
   readdirSync as readdirSync50,
-  existsSync as existsSync128,
-  mkdirSync as mkdirSync73,
-  writeFileSync as writeFileSync55
+  existsSync as existsSync129,
+  mkdirSync as mkdirSync74,
+  writeFileSync as writeFileSync56
 } from "node:fs";
-import { resolve as resolve65, dirname as dirname55 } from "node:path";
+import { resolve as resolve65, dirname as dirname56 } from "node:path";
 import { homedir as homedir69 } from "node:os";
 function resolveSwitchroomBase(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir69()) {
   return resolve65(home2, ".switchroom");
 }
 function listAgents(base) {
   const dir = resolve65(base, "agents");
-  if (!existsSync128(dir))
+  if (!existsSync129(dir))
     return [];
   try {
     return readdirSync50(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
@@ -86446,16 +86467,16 @@ function runScan(opts = {}) {
     let gwText = "";
     let sawArtifact = false;
     try {
-      if (existsSync128(turnsPath)) {
-        turnsText = readFileSync114(turnsPath, "utf-8");
+      if (existsSync129(turnsPath)) {
+        turnsText = readFileSync115(turnsPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
       log(`fleet-health: WARN skipping ${agent} turns.jsonl unreadable: ${String(e)}`);
     }
     try {
-      if (existsSync128(gwPath)) {
-        gwText = readFileSync114(gwPath, "utf-8");
+      if (existsSync129(gwPath)) {
+        gwText = readFileSync115(gwPath, "utf-8");
         sawArtifact = true;
       }
     } catch (e) {
@@ -86499,20 +86520,20 @@ function runScan(opts = {}) {
 function readLedgerIfPresent(base) {
   const path10 = ledgerPathForBase(base);
   try {
-    if (!existsSync128(path10))
+    if (!existsSync129(path10))
       return null;
-    return JSON.parse(readFileSync114(path10, "utf-8"));
+    return JSON.parse(readFileSync115(path10, "utf-8"));
   } catch {
     return null;
   }
 }
 function ledgerPathForBase(base) {
-  return fleetHealthLedgerPath(dirname55(base));
+  return fleetHealthLedgerPath(dirname56(base));
 }
 function writeLedger(base, ledger) {
   const path10 = ledgerPathForBase(base);
-  mkdirSync73(dirname55(path10), { recursive: true });
-  writeFileSync55(path10, JSON.stringify(ledger, null, 2) + `
+  mkdirSync74(dirname56(path10), { recursive: true });
+  writeFileSync56(path10, JSON.stringify(ledger, null, 2) + `
 `, "utf-8");
   return path10;
 }
@@ -116745,9 +116766,9 @@ init_source();
 init_loader();
 init_lifecycle();
 init_compose_env();
-import { existsSync as existsSync94, mkdirSync as mkdirSync54, readFileSync as readFileSync85, realpathSync as realpathSync8, statSync as statSync55, chownSync as chownSync12 } from "node:fs";
+import { existsSync as existsSync95, mkdirSync as mkdirSync55, readFileSync as readFileSync86, realpathSync as realpathSync8, statSync as statSync56, chownSync as chownSync13 } from "node:fs";
 import { spawnSync as spawnSync20 } from "node:child_process";
-import { join as join98, dirname as dirname41 } from "node:path";
+import { join as join98, dirname as dirname42 } from "node:path";
 import { homedir as homedir51 } from "node:os";
 
 // src/cli/release-yaml.ts
@@ -117049,12 +117070,141 @@ function defaultSelfUpdateIO() {
 init_self_invoke();
 init_component_versions();
 init_install_cron();
+
+// src/memory/mm-refresh-cron.ts
+import { execFileSync as execFileSync30 } from "node:child_process";
+import { chownSync as chownSync12, existsSync as existsSync93, mkdirSync as mkdirSync53, readFileSync as readFileSync84, renameSync as renameSync24, statSync as statSync55, writeFileSync as writeFileSync37 } from "node:fs";
+import { dirname as dirname40 } from "node:path";
+var CRON_PATH3 = "/etc/cron.d/mental-model-refresh";
+var CRON_SCHEDULE2 = "27 4 * * *";
+var CRON_LOG_PATH3 = "/var/log/mental-model-refresh.log";
+var LOGROTATE_PATH3 = "/etc/logrotate.d/mental-model-refresh";
+var CRON_LOCK_PATH3 = "/run/lock/mental-model-refresh.lock";
+function renderCron3(opts) {
+  return `# switchroom mental-model-refresh \u2014 model-free stale-model refresh sweep (RFC P10).
+` + `# Managed by \`switchroom mental-model-refresh --install-cron\`; edits are overwritten.
+` + `# Exit 0 = swept (some refreshes may have failed; see log), 1 = the sweep could not complete.
+` + `SHELL=/bin/sh
+` + `PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+` + `${CRON_SCHEDULE2} ${opts.user} /usr/bin/flock -n ${CRON_LOCK_PATH3} ` + `${opts.binary} mental-model-refresh >> ${CRON_LOG_PATH3} 2>&1
+`;
+}
+function installCron3(opts) {
+  const path7 = opts.path ?? CRON_PATH3;
+  const content = renderCron3(opts);
+  if (existsSync93(path7)) {
+    try {
+      if (readFileSync84(path7, "utf8") === content) {
+        return { status: "unchanged", path: path7, content };
+      }
+    } catch {}
+  }
+  mkdirSync53(dirname40(path7), { recursive: true });
+  const tmp = `${path7}.${process.pid}.tmp`;
+  writeFileSync37(tmp, content, { mode: 420 });
+  renameSync24(tmp, path7);
+  return { status: "installed", path: path7, content };
+}
+var defaultIdResolver3 = (user) => {
+  const uid = Number(execFileSync30("id", ["-u", user], { encoding: "utf8" }).trim());
+  const gid = Number(execFileSync30("id", ["-g", user], { encoding: "utf8" }).trim());
+  if (!Number.isInteger(uid) || !Number.isInteger(gid)) {
+    throw new Error(`could not resolve uid/gid for user ${JSON.stringify(user)}`);
+  }
+  return { uid, gid };
+};
+function ensureLogFile3(opts) {
+  const path7 = opts.path ?? CRON_LOG_PATH3;
+  if (existsSync93(path7))
+    return { status: "unchanged", path: path7 };
+  const { uid, gid } = (opts.resolveIds ?? defaultIdResolver3)(opts.user);
+  mkdirSync53(dirname40(path7), { recursive: true });
+  writeFileSync37(path7, "", { mode: 420, flag: "a" });
+  const isRoot = process.getuid?.() === 0;
+  let alreadyOwned = false;
+  try {
+    const st = statSync55(path7);
+    alreadyOwned = st.uid === uid && st.gid === gid;
+  } catch {}
+  if (isRoot && !alreadyOwned) {
+    try {
+      chownSync12(path7, uid, gid);
+    } catch (e) {
+      if (e.code !== "EPERM")
+        throw e;
+    }
+  }
+  return { status: "created", path: path7 };
+}
+function renderLogrotate3(opts) {
+  return `${opts.logPath} {
+` + `  weekly
+` + `  rotate 8
+` + `  compress
+` + `  delaycompress
+` + `  missingok
+` + `  notifempty
+` + `  copytruncate
+` + `  su ${opts.user} ${opts.user}
+` + `}
+`;
+}
+function installLogrotate3(opts) {
+  const path7 = opts.path ?? LOGROTATE_PATH3;
+  const content = renderLogrotate3({ logPath: opts.logPath ?? CRON_LOG_PATH3, user: opts.user });
+  if (existsSync93(path7)) {
+    try {
+      if (readFileSync84(path7, "utf8") === content) {
+        return { status: "unchanged", path: path7, content };
+      }
+    } catch {}
+  }
+  mkdirSync53(dirname40(path7), { recursive: true });
+  const tmp = `${path7}.${process.pid}.tmp`;
+  writeFileSync37(tmp, content, { mode: 420 });
+  renameSync24(tmp, path7);
+  return { status: "installed", path: path7, content };
+}
+function parseCronUser3(content) {
+  for (const line of content.split(`
+`)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#"))
+      continue;
+    if (!trimmed.includes("mental-model-refresh"))
+      continue;
+    const fields = trimmed.split(/\s+/);
+    if (fields.length >= 7)
+      return fields[5];
+  }
+  return null;
+}
+function reconcileCron3(opts) {
+  const path7 = opts.path ?? CRON_PATH3;
+  if (!existsSync93(path7))
+    return { status: "absent", path: path7 };
+  let user = opts.fallbackUser;
+  try {
+    user = parseCronUser3(readFileSync84(path7, "utf8")) ?? opts.fallbackUser;
+  } catch {}
+  if (!user) {
+    throw new Error(`cannot reconcile ${path7}: no cron-user parseable from the existing fragment and no fallback user available`);
+  }
+  const r = installCron3({ user, binary: opts.binary, path: path7 });
+  return {
+    status: r.status === "installed" ? "reconciled" : "unchanged",
+    path: path7,
+    content: r.content
+  };
+}
+
+// src/cli/update.ts
 init_install_cron2();
 
 // src/host-cli-self-heal/install-timer.ts
 import { spawnSync as spawnSync19 } from "node:child_process";
-import { existsSync as existsSync93, mkdirSync as mkdirSync53, readFileSync as readFileSync84, renameSync as renameSync24, writeFileSync as writeFileSync37 } from "node:fs";
-import { dirname as dirname40 } from "node:path";
+import { existsSync as existsSync94, mkdirSync as mkdirSync54, readFileSync as readFileSync85, renameSync as renameSync25, writeFileSync as writeFileSync38 } from "node:fs";
+import { dirname as dirname41 } from "node:path";
 var SERVICE_PATH = "/etc/systemd/system/switchroom-self-heal.service";
 var TIMER_PATH = "/etc/systemd/system/switchroom-self-heal.timer";
 var TIMER_UNIT = "switchroom-self-heal.timer";
@@ -117100,21 +117250,21 @@ function renderTimer() {
 `;
 }
 function writeUnitIdempotent(path7, content) {
-  if (existsSync93(path7)) {
+  if (existsSync94(path7)) {
     try {
-      if (readFileSync84(path7, "utf8") === content)
+      if (readFileSync85(path7, "utf8") === content)
         return "unchanged";
     } catch {}
   }
-  mkdirSync53(dirname40(path7), { recursive: true });
+  mkdirSync54(dirname41(path7), { recursive: true });
   const tmp = `${path7}.${process.pid}.tmp`;
-  writeFileSync37(tmp, content, { mode: 420 });
-  renameSync24(tmp, path7);
+  writeFileSync38(tmp, content, { mode: 420 });
+  renameSync25(tmp, path7);
   return "written";
 }
 function homeFromPasswd2(user) {
   try {
-    for (const line of readFileSync84("/etc/passwd", "utf8").split(`
+    for (const line of readFileSync85("/etc/passwd", "utf8").split(`
 `)) {
       const f = line.split(":");
       if (f[0] === user && f[5])
@@ -117131,7 +117281,7 @@ function resolveOperatorUser(env2) {
 }
 function installSelfHealTimer(deps = {}) {
   const env2 = deps.env ?? process.env;
-  const systemdBooted = deps.systemdBooted ?? (() => existsSync93(SYSTEMD_MARKER));
+  const systemdBooted = deps.systemdBooted ?? (() => existsSync94(SYSTEMD_MARKER));
   const geteuid = deps.geteuid ?? (() => typeof process.geteuid === "function" ? process.geteuid() : undefined);
   const homeForUser = deps.homeForUser ?? homeFromPasswd2;
   const servicePath = deps.servicePath ?? SERVICE_PATH;
@@ -117193,16 +117343,16 @@ function installSelfHealTimer(deps = {}) {
 function defaultPersistPin(configPath) {
   return (pin) => {
     const path7 = configPath ?? findConfigFile();
-    const before = readFileSync85(path7, "utf8");
+    const before = readFileSync86(path7, "utf8");
     const after = setReleasePinInConfig(before, pin);
     if (after === before)
       return;
-    writeConfigFileSync(path7, after, statSync55(path7).mode & 511);
+    writeConfigFileSync(path7, after, statSync56(path7).mode & 511);
     try {
       if (typeof process.geteuid === "function" && process.geteuid() === 0) {
         const uid = resolveOperatorUid();
         if (uid !== undefined)
-          chownSync12(path7, uid, uid);
+          chownSync13(path7, uid, uid);
       }
     } catch {}
   };
@@ -117214,16 +117364,16 @@ var PACKAGED_INSTALL_KINDS = new Set([
   "container"
 ]);
 function runningFromSwitchroomCheckout(scriptPath) {
-  let dir = dirname41(scriptPath);
+  let dir = dirname42(scriptPath);
   for (let i2 = 0;i2 < 12; i2++) {
-    if (existsSync94(join98(dir, ".git"))) {
+    if (existsSync95(join98(dir, ".git"))) {
       try {
-        const pkg = JSON.parse(readFileSync85(join98(dir, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync86(join98(dir, "package.json"), "utf-8"));
         if (pkg.name === "switchroom")
           return true;
       } catch {}
     }
-    const parent = dirname41(dir);
+    const parent = dirname42(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -117285,7 +117435,7 @@ function planUpdate(opts) {
         bundleDir: import.meta.dirname,
         execPath: process.execPath,
         scriptPath,
-        inContainer: process.env.SWITCHROOM_HOSTD_CONTEXT === "1" || existsSync94("/.dockerenv")
+        inContainer: process.env.SWITCHROOM_HOSTD_CONTEXT === "1" || existsSync95("/.dockerenv")
       });
       if (detection.kind !== "static-binary") {
         say(source_default.gray(`  host CLI not self-updated: ${detection.reason}
@@ -117368,7 +117518,7 @@ function planUpdate(opts) {
   steps.push({
     name: "pull-images",
     description: "Pull broker / kernel / agent images from GHCR",
-    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync94(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
+    skipReason: opts.skipImages ? "--skip-images flag set" : !existsSync95(composePath) ? `compose file not found at ${composePath} (run \`switchroom apply --compose-only\` first)` : undefined,
     run: () => {
       const r = runner("docker", [
         "compose",
@@ -117441,6 +117591,34 @@ function planUpdate(opts) {
 `));
       } else {
         say(source_default.gray(`  hindsight-watch cron already current at ${res.path}
+`));
+      }
+    }
+  });
+  steps.push({
+    name: "reconcile-mental-model-refresh-cron",
+    description: "Reconcile /etc/cron.d/mental-model-refresh (binary path / schedule / flags) on already-armed hosts \u2014 idempotent; no-op when unarmed or already current",
+    skipReason: hostdContext ? "deferred (hostd-context): /etc/cron.d is on the host, not in the hostd container \u2014 finish host-side with `switchroom mental-model-refresh --install-cron`" : undefined,
+    isHostdDeferred: hostdContext,
+    run: () => {
+      const say = opts.stdout ?? ((t) => process.stdout.write(t));
+      const binary = process.env.SWITCHROOM_BINARY ?? "/usr/local/bin/switchroom";
+      const fallbackUser = process.env.SUDO_USER ?? process.env.USER ?? process.env.LOGNAME;
+      let res;
+      try {
+        res = reconcileCron3({ binary, fallbackUser });
+      } catch (e) {
+        say(source_default.yellow(`  mental-model-refresh cron not reconciled: ${e.message}
+`));
+        return;
+      }
+      if (res.status === "absent") {
+        say(source_default.gray("  mental-model-refresh cron not armed \u2014 skipping reconcile " + "(arm with `switchroom mental-model-refresh --install-cron`)\n"));
+      } else if (res.status === "reconciled") {
+        say(source_default.green(`  mental-model-refresh cron reconciled at ${res.path}
+`));
+      } else {
+        say(source_default.gray(`  mental-model-refresh cron already current at ${res.path}
 `));
       }
     }
@@ -117603,7 +117781,7 @@ function planUpdate(opts) {
           bundleDir: import.meta.dirname,
           execPath: process.execPath,
           scriptPath,
-          inContainer: process.env.SWITCHROOM_HOSTD_CONTEXT === "1" || existsSync94("/.dockerenv")
+          inContainer: process.env.SWITCHROOM_HOSTD_CONTEXT === "1" || existsSync95("/.dockerenv")
         });
         const detail = `no shipped skills/ payload found for this install ` + `(${detection.kind}; ${describeShippedAssetSearch(resolution)})`;
         if (PACKAGED_INSTALL_KINDS.has(detection.kind)) {
@@ -117617,7 +117795,7 @@ function planUpdate(opts) {
       }
       const source = resolution.path;
       try {
-        mkdirSync54(dirname41(dest), { recursive: true });
+        mkdirSync55(dirname42(dest), { recursive: true });
         const r = syncBundledSkills({
           source,
           dest,
@@ -117643,10 +117821,10 @@ function planUpdate(opts) {
       if (opts.syncBundledSkillsFn)
         return;
       const dest = join98(homedir51(), ".switchroom", "skills", "_bundled");
-      if (!existsSync94(dest)) {
+      if (!existsSync95(dest)) {
         return;
       }
-      const missing = getBuiltinDefaultSkillEntries().map((e) => e.key).filter((key) => !existsSync94(join98(dest, key)));
+      const missing = getBuiltinDefaultSkillEntries().map((e) => e.key).filter((key) => !existsSync95(join98(dest, key)));
       if (missing.length > 0) {
         throw new Error(`verify-bundled-skills: builtin default skill(s) missing from the pool after sync: ` + `${missing.join(", ")}. These ship in the CLI package and must exist in ${dest}. ` + `This is a broken sync or a packaging regression \u2014 the pool is not converged.`);
       }
@@ -117681,7 +117859,7 @@ function planUpdate(opts) {
     description: "docker compose up -d --remove-orphans (recreates services with new images / compose)",
     run: () => {
       try {
-        const composeText = readFileSync85(composePath, "utf8");
+        const composeText = readFileSync86(composePath, "utf8");
         const pf = validateBindSources(composeText);
         if (!pf.ok)
           throw new Error(formatPreflightError(pf));
@@ -117756,14 +117934,14 @@ function defaultStatusProbe(composePath) {
     } catch {}
     if (scriptPath) {
       try {
-        cliBuiltAt = new Date(statSync55(scriptPath).mtimeMs).toISOString();
+        cliBuiltAt = new Date(statSync56(scriptPath).mtimeMs).toISOString();
       } catch {}
-      let dir = dirname41(scriptPath);
+      let dir = dirname42(scriptPath);
       for (let i2 = 0;i2 < 8; i2++) {
         const pkgPath = join98(dir, "package.json");
-        if (existsSync94(pkgPath)) {
+        if (existsSync95(pkgPath)) {
           try {
-            const pkg = JSON.parse(readFileSync85(pkgPath, "utf-8"));
+            const pkg = JSON.parse(readFileSync86(pkgPath, "utf-8"));
             if (typeof pkg.version === "string")
               cliVersion = pkg.version;
           } catch (err) {
@@ -117771,7 +117949,7 @@ function defaultStatusProbe(composePath) {
           }
           break;
         }
-        const parent = dirname41(dir);
+        const parent = dirname42(dir);
         if (parent === dir)
           break;
         dir = parent;
@@ -117784,7 +117962,7 @@ function defaultStatusProbe(composePath) {
     warnings.push("could not resolve CLI version (no package.json found above the resolved script path)");
   }
   const services = [];
-  if (!existsSync94(composePath)) {
+  if (!existsSync95(composePath)) {
     warnings.push(`compose file not found at ${composePath}; service status unknown`);
     return { cliVersion, cliBuiltAt, services, warnings };
   }
@@ -118047,22 +118225,22 @@ function registerUpdateCommand(program3) {
 // src/cli/rollout.ts
 init_helpers();
 import { spawnSync as spawnSync22 } from "node:child_process";
-import { readFileSync as readFileSync87, chownSync as chownSync13, statSync as statSync58 } from "node:fs";
+import { readFileSync as readFileSync88, chownSync as chownSync14, statSync as statSync59 } from "node:fs";
 import { homedir as homedir53 } from "node:os";
 
 // src/cli/rollout-pin-journal.ts
 import {
-  existsSync as existsSync95,
-  readFileSync as readFileSync86,
-  writeFileSync as writeFileSync38,
-  renameSync as renameSync25,
+  existsSync as existsSync96,
+  readFileSync as readFileSync87,
+  writeFileSync as writeFileSync39,
+  renameSync as renameSync26,
   unlinkSync as unlinkSync19,
-  statSync as statSync56,
-  mkdirSync as mkdirSync55
+  statSync as statSync57,
+  mkdirSync as mkdirSync56
 } from "node:fs";
 import { homedir as homedir52 } from "node:os";
 import { createHash as createHash17 } from "node:crypto";
-import { join as join99, basename as basename9, resolve as resolve50, dirname as dirname42 } from "node:path";
+import { join as join99, basename as basename9, resolve as resolve50, dirname as dirname43 } from "node:path";
 init_flock();
 var PIN_JOURNAL_MAX_AGE_MS = 15 * 60 * 1000;
 var STATE_DIR_NAME = ".switchroom";
@@ -118071,7 +118249,7 @@ function pinJournalDir(configPath) {
   if (override && override.trim().length > 0)
     return override.trim();
   if (configPath) {
-    const dir = dirname42(resolve50(configPath));
+    const dir = dirname43(resolve50(configPath));
     if (basename9(dir) === STATE_DIR_NAME)
       return dir;
   }
@@ -118114,9 +118292,9 @@ function readPinJournal(configPath, warn = (m) => process.stderr.write(m)) {
   const p = pinJournalPath(configPath);
   let raw;
   try {
-    raw = readFileSync86(p, "utf8");
+    raw = readFileSync87(p, "utf8");
   } catch (e) {
-    if (existsSync95(p)) {
+    if (existsSync96(p)) {
       warn(`\u26a0\ufe0f  rollout pin journal: ${p} exists but could not be read ` + `(${e.message}). A provisional \`release.pin\` may be ` + `uncommitted \u2014 verify it host-side before the next reconcile.
 `);
     }
@@ -118167,7 +118345,7 @@ function beginPinPersist(configPath, pin, opts = {}) {
     warn(`\u26a0\ufe0f  rollout pin journal: overwriting an ABANDONED journal at ${p} ` + `(pid ${existing.pid} recorded ${existing.at}, provisional pin ` + `${existing.pin}). Its roll never committed or reverted; \`release.pin\` ` + `in ${configPath} may still name that unproven build \u2014 verify it.
 `);
   }
-  const priorPin = getReleasePinFromConfig(readFileSync86(configPath, "utf8"));
+  const priorPin = getReleasePinFromConfig(readFileSync87(configPath, "utf8"));
   const journal = {
     v: 1,
     configPath,
@@ -118176,10 +118354,10 @@ function beginPinPersist(configPath, pin, opts = {}) {
     pid: process.pid,
     at: new Date().toISOString()
   };
-  mkdirSync55(dirname42(p), { recursive: true });
+  mkdirSync56(dirname43(p), { recursive: true });
   const tmp = `${p}.${process.pid}.tmp`;
-  writeFileSync38(tmp, JSON.stringify(journal), { encoding: "utf8", mode: 384 });
-  renameSync25(tmp, p);
+  writeFileSync39(tmp, JSON.stringify(journal), { encoding: "utf8", mode: 384 });
+  renameSync26(tmp, p);
   return journal;
 }
 function commitPinPersist(configPath) {
@@ -118188,7 +118366,7 @@ function commitPinPersist(configPath) {
     unlinkSync19(p);
     return null;
   } catch (e) {
-    if (!existsSync95(p))
+    if (!existsSync96(p))
       return null;
     return `rollout pin journal: FAILED to clear ${p} after a SUCCESSFUL roll ` + `(${e.message}). Delete it host-side \u2014 while it exists, ` + `recovery may revert a proven \`release.pin\`.`;
   }
@@ -118210,16 +118388,16 @@ function rollbackPinPersist(configPath, opts = {}) {
     }
   }
   try {
-    const current = readFileSync86(configPath, "utf8");
+    const current = readFileSync87(configPath, "utf8");
     const next = journal.priorPin ? setReleasePinInConfig(current, journal.priorPin) : deleteReleasePinInConfig(current);
     let mode = 384;
     try {
-      mode = statSync56(configPath).mode & 511;
+      mode = statSync57(configPath).mode & 511;
     } catch {}
     if (opts.writeConfig) {
       opts.writeConfig(configPath, next, mode);
     } else {
-      writeFileSync38(configPath, next, { encoding: "utf8", mode });
+      writeFileSync39(configPath, next, { encoding: "utf8", mode });
     }
   } catch (e) {
     return {
@@ -118264,8 +118442,8 @@ init_host_cli_stamp();
 
 // src/cli/host-cli-upgrade.ts
 init_self_update();
-import { lchownSync, lstatSync as lstatSync14, readdirSync as readdirSync33, statSync as statSync57 } from "node:fs";
-import { basename as basename10, dirname as dirname43, join as join100 } from "node:path";
+import { lchownSync, lstatSync as lstatSync14, readdirSync as readdirSync33, statSync as statSync58 } from "node:fs";
+import { basename as basename10, dirname as dirname44, join as join100 } from "node:path";
 init_shipped_assets();
 var HOST_CLI_UPGRADE_SENTINEL = "SWITCHROOM_HOST_CLI_UPGRADE:";
 function encodeHostCliUpgradeResult(r) {
@@ -118301,7 +118479,7 @@ function defaultIo() {
   return {
     isFile: (p) => {
       try {
-        return statSync57(p).isFile();
+        return statSync58(p).isFile();
       } catch {
         return false;
       }
@@ -118401,8 +118579,8 @@ async function runHostCliUpgrade(opts, io = defaultIo(), log = () => {}) {
       const installRoot = payloadInstallRoot(binary);
       const failures = handBackOwnership([
         binary,
-        join100(dirname43(binary), ".switchroom-versions"),
-        dirname43(installRoot),
+        join100(dirname44(binary), ".switchroom-versions"),
+        dirname44(installRoot),
         installRoot,
         payloadVersionDir(installRoot, pin)
       ], priorOwner, io);
@@ -119202,7 +119380,7 @@ function createRolloutDeps(params) {
       if (typeof process.geteuid === "function" && process.geteuid() === 0) {
         const uid = resolveOperatorUid();
         if (uid !== undefined) {
-          chownSync13(path7, uid, uid);
+          chownSync14(path7, uid, uid);
         } else if (hostdCtx) {
           warn("\u26a0\ufe0f  rollout (hostd path): could not resolve operator uid; " + "skipping config chown-back to avoid leaving switchroom.yaml " + "root-owned. Verify ownership host-side if other yaml verbs " + `EACCES.
 `);
@@ -119261,12 +119439,12 @@ function createRolloutDeps(params) {
       return stamp ? { hostCli: stamp } : {};
     })(),
     persistPin: (pin) => {
-      const before = readFileSync87(configPath, "utf8");
+      const before = readFileSync88(configPath, "utf8");
       const after = setReleasePinInConfig(before, pin);
       if (after === before)
         return false;
       beginPinPersist(configPath, pin);
-      writeConfigPreservingOwnership(configPath, after, statSync58(configPath).mode & 511);
+      writeConfigPreservingOwnership(configPath, after, statSync59(configPath).mode & 511);
       return true;
     },
     commitPin: () => {
@@ -119550,8 +119728,8 @@ init_helpers();
 init_lifecycle();
 init_resolve_version();
 import { execSync as execSync3 } from "node:child_process";
-import { existsSync as existsSync96, readFileSync as readFileSync88 } from "node:fs";
-import { dirname as dirname44, join as join101 } from "node:path";
+import { existsSync as existsSync97, readFileSync as readFileSync89 } from "node:fs";
+import { dirname as dirname45, join as join101 } from "node:path";
 function getClaudeCodeVersion() {
   try {
     const out = execSync3("claude --version 2>/dev/null", {
@@ -119602,15 +119780,15 @@ function locateSwitchroomInstallDir() {
   let dir = import.meta.dirname;
   for (let i2 = 0;i2 < 10 && dir && dir !== "/"; i2++) {
     const pkgPath = join101(dir, "package.json");
-    if (existsSync96(pkgPath)) {
+    if (existsSync97(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync88(pkgPath, "utf-8"));
-        if (pkg.name === "switchroom" && existsSync96(join101(dir, ".git"))) {
+        const pkg = JSON.parse(readFileSync89(pkgPath, "utf-8"));
+        if (pkg.name === "switchroom" && existsSync97(join101(dir, ".git"))) {
           return dir;
         }
       } catch {}
     }
-    dir = dirname44(dir);
+    dir = dirname45(dir);
   }
   return null;
 }
@@ -119786,9 +119964,9 @@ init_merge();
 
 // src/agents/session-retention.ts
 import {
-  existsSync as existsSync97,
+  existsSync as existsSync98,
   readdirSync as readdirSync34,
-  statSync as statSync59,
+  statSync as statSync60,
   unlinkSync as unlinkSync20
 } from "node:fs";
 import { join as join102 } from "node:path";
@@ -119797,7 +119975,7 @@ var DEFAULT_SESSION_RETENTION_MAX_AGE_DAYS = 30;
 var MIN_KEEP = 2;
 function collectSessionJsonl(claudeConfigDir) {
   const projects = join102(claudeConfigDir, "projects");
-  if (!existsSync97(projects))
+  if (!existsSync98(projects))
     return [];
   const found = [];
   const walk2 = (dir) => {
@@ -119811,7 +119989,7 @@ function collectSessionJsonl(claudeConfigDir) {
       const full = join102(dir, name);
       let st;
       try {
-        st = statSync59(full);
+        st = statSync60(full);
       } catch {
         continue;
       }
@@ -119929,15 +120107,15 @@ function registerHandoffCommand(program3) {
 // src/issues/store.ts
 import {
   closeSync as closeSync19,
-  existsSync as existsSync98,
-  mkdirSync as mkdirSync56,
+  existsSync as existsSync99,
+  mkdirSync as mkdirSync57,
   openSync as openSync19,
   readdirSync as readdirSync35,
-  readFileSync as readFileSync89,
-  renameSync as renameSync26,
-  statSync as statSync60,
+  readFileSync as readFileSync90,
+  renameSync as renameSync27,
+  statSync as statSync61,
   unlinkSync as unlinkSync21,
-  writeFileSync as writeFileSync39,
+  writeFileSync as writeFileSync40,
   writeSync as writeSync9
 } from "node:fs";
 import { join as join103 } from "node:path";
@@ -119968,11 +120146,11 @@ var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
   const path7 = join103(stateDir, ISSUES_FILE);
-  if (!existsSync98(path7))
+  if (!existsSync99(path7))
     return [];
   let raw;
   try {
-    raw = readFileSync89(path7, "utf-8");
+    raw = readFileSync90(path7, "utf-8");
   } catch {
     return [];
   }
@@ -120045,7 +120223,7 @@ function record(stateDir, input, nowFn = Date.now) {
   });
 }
 function resolve53(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync98(join103(stateDir, ISSUES_FILE)))
+  if (!existsSync99(join103(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -120063,7 +120241,7 @@ function resolve53(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function resolveAllBySource(stateDir, source, nowFn = Date.now) {
-  if (!existsSync98(join103(stateDir, ISSUES_FILE)))
+  if (!existsSync99(join103(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -120081,7 +120259,7 @@ function resolveAllBySource(stateDir, source, nowFn = Date.now) {
   });
 }
 function prune(stateDir, opts = {}) {
-  if (!existsSync98(join103(stateDir, ISSUES_FILE)))
+  if (!existsSync99(join103(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all = readAll(stateDir);
@@ -120111,7 +120289,7 @@ function prune(stateDir, opts = {}) {
   });
 }
 function ensureDir2(stateDir) {
-  mkdirSync56(stateDir, { recursive: true });
+  mkdirSync57(stateDir, { recursive: true });
 }
 function writeAll(stateDir, events) {
   const path7 = join103(stateDir, ISSUES_FILE);
@@ -120120,8 +120298,8 @@ function writeAll(stateDir, events) {
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
-  writeFileSync39(tmp, body, "utf-8");
-  renameSync26(tmp, path7);
+  writeFileSync40(tmp, body, "utf-8");
+  renameSync27(tmp, path7);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
 var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
@@ -120138,7 +120316,7 @@ function sweepOrphanTmpFiles(stateDir) {
       continue;
     const tmpPath = join103(stateDir, entry);
     try {
-      const stat = statSync60(tmpPath);
+      const stat = statSync61(tmpPath);
       if (stat.mtimeMs < cutoff) {
         unlinkSync21(tmpPath);
       }
@@ -120183,7 +120361,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync89(lockPath, "utf-8").trim();
+    pidStr = readFileSync90(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -120431,22 +120609,22 @@ function relTime(deltaMs) {
 
 // src/cli/deps.ts
 init_source();
-import { existsSync as existsSync101 } from "node:fs";
+import { existsSync as existsSync102 } from "node:fs";
 import { homedir as homedir56 } from "node:os";
 import { join as join106, resolve as resolve54 } from "node:path";
 
 // src/deps/python.ts
 import { createHash as createHash18 } from "node:crypto";
 import {
-  existsSync as existsSync99,
-  mkdirSync as mkdirSync57,
-  readFileSync as readFileSync90,
+  existsSync as existsSync100,
+  mkdirSync as mkdirSync58,
+  readFileSync as readFileSync91,
   rmSync as rmSync19,
-  writeFileSync as writeFileSync40
+  writeFileSync as writeFileSync41
 } from "node:fs";
-import { dirname as dirname45, join as join104 } from "node:path";
+import { dirname as dirname46, join as join104 } from "node:path";
 import { homedir as homedir54 } from "node:os";
-import { execFileSync as execFileSync30 } from "node:child_process";
+import { execFileSync as execFileSync31 } from "node:child_process";
 
 class PythonEnvError extends Error {
   stderr;
@@ -120460,13 +120638,13 @@ function defaultPythonCacheRoot() {
   return join104(homedir54(), ".switchroom", "deps", "python");
 }
 function hashFile(path7) {
-  return createHash18("sha256").update(readFileSync90(path7)).digest("hex");
+  return createHash18("sha256").update(readFileSync91(path7)).digest("hex");
 }
 function ensurePythonEnv(opts) {
   const { skillName, requirementsPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultPythonCacheRoot();
   const hostPython = opts.pythonBin ?? "python3";
-  if (!existsSync99(requirementsPath)) {
+  if (!existsSync100(requirementsPath)) {
     throw new PythonEnvError(`requirements file not found: ${requirementsPath}`);
   }
   const venvDir = join104(cacheRoot, skillName);
@@ -120475,8 +120653,8 @@ function ensurePythonEnv(opts) {
   const pythonBin = join104(binDir, "python");
   const pipBin = join104(binDir, "pip");
   const targetHash = hashFile(requirementsPath);
-  if (!force && existsSync99(stampPath) && existsSync99(pythonBin)) {
-    const existingHash = readFileSync90(stampPath, "utf8").trim();
+  if (!force && existsSync100(stampPath) && existsSync100(pythonBin)) {
+    const existingHash = readFileSync91(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -120488,12 +120666,12 @@ function ensurePythonEnv(opts) {
       };
     }
   }
-  if (existsSync99(venvDir)) {
+  if (existsSync100(venvDir)) {
     rmSync19(venvDir, { recursive: true, force: true });
   }
-  mkdirSync57(dirname45(venvDir), { recursive: true });
+  mkdirSync58(dirname46(venvDir), { recursive: true });
   try {
-    execFileSync30(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
+    execFileSync31(hostPython, ["-m", "venv", venvDir], { stdio: "pipe" });
   } catch (err) {
     const e = err;
     throw new PythonEnvError(`Failed to create venv for skill "${skillName}" with ${hostPython}: ${e.message}`, e.stderr?.toString());
@@ -120505,12 +120683,12 @@ function ensurePythonEnv(opts) {
     delete childEnv.PIP_TARGET;
     delete childEnv.PIP_PREFIX;
     delete childEnv.PYTHONUSERBASE;
-    execFileSync30(pipBin, ["install", "--disable-pip-version-check", "-r", requirementsPath], { stdio: "pipe", env: childEnv });
+    execFileSync31(pipBin, ["install", "--disable-pip-version-check", "-r", requirementsPath], { stdio: "pipe", env: childEnv });
   } catch (err) {
     const e = err;
     throw new PythonEnvError(`Failed to install requirements for skill "${skillName}": ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync40(stampPath, targetHash + `
+  writeFileSync41(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -120526,15 +120704,15 @@ function ensurePythonEnv(opts) {
 import { createHash as createHash19 } from "node:crypto";
 import {
   copyFileSync as copyFileSync13,
-  existsSync as existsSync100,
-  mkdirSync as mkdirSync58,
-  readFileSync as readFileSync91,
+  existsSync as existsSync101,
+  mkdirSync as mkdirSync59,
+  readFileSync as readFileSync92,
   rmSync as rmSync20,
-  writeFileSync as writeFileSync41
+  writeFileSync as writeFileSync42
 } from "node:fs";
-import { dirname as dirname46, join as join105 } from "node:path";
+import { dirname as dirname47, join as join105 } from "node:path";
 import { homedir as homedir55 } from "node:os";
-import { execFileSync as execFileSync31 } from "node:child_process";
+import { execFileSync as execFileSync32 } from "node:child_process";
 
 class NodeEnvError extends Error {
   stderr;
@@ -120559,20 +120737,20 @@ function defaultNodeCacheRoot() {
   return join105(homedir55(), ".switchroom", "deps", "node");
 }
 function hashDepInputs(packageJsonPath) {
-  const sourceDir = dirname46(packageJsonPath);
+  const sourceDir = dirname47(packageJsonPath);
   const hasher = createHash19("sha256");
   hasher.update(`package.json
 `);
-  hasher.update(readFileSync91(packageJsonPath));
+  hasher.update(readFileSync92(packageJsonPath));
   for (const lockName of ALL_LOCKFILES) {
     const lockPath = join105(sourceDir, lockName);
-    if (existsSync100(lockPath)) {
+    if (existsSync101(lockPath)) {
       hasher.update(`
 `);
       hasher.update(lockName);
       hasher.update(`
 `);
-      hasher.update(readFileSync91(lockPath));
+      hasher.update(readFileSync92(lockPath));
     }
   }
   return hasher.digest("hex");
@@ -120581,17 +120759,17 @@ function ensureNodeEnv(opts) {
   const { skillName, packageJsonPath, force = false } = opts;
   const cacheRoot = opts.cacheRoot ?? defaultNodeCacheRoot();
   const installer = opts.installer ?? "bun";
-  if (!existsSync100(packageJsonPath)) {
+  if (!existsSync101(packageJsonPath)) {
     throw new NodeEnvError(`package.json not found: ${packageJsonPath}`);
   }
-  const sourceDir = dirname46(packageJsonPath);
+  const sourceDir = dirname47(packageJsonPath);
   const envDir = join105(cacheRoot, skillName);
   const stampPath = join105(envDir, ".package.sha256");
   const nodeModulesDir = join105(envDir, "node_modules");
   const binDir = join105(nodeModulesDir, ".bin");
   const targetHash = hashDepInputs(packageJsonPath);
-  if (!force && existsSync100(stampPath) && existsSync100(nodeModulesDir)) {
-    const existingHash = readFileSync91(stampPath, "utf8").trim();
+  if (!force && existsSync101(stampPath) && existsSync101(nodeModulesDir)) {
+    const existingHash = readFileSync92(stampPath, "utf8").trim();
     if (existingHash === targetHash) {
       return {
         skillName,
@@ -120602,15 +120780,15 @@ function ensureNodeEnv(opts) {
       };
     }
   }
-  if (existsSync100(envDir)) {
+  if (existsSync101(envDir)) {
     rmSync20(envDir, { recursive: true, force: true });
   }
-  mkdirSync58(envDir, { recursive: true });
+  mkdirSync59(envDir, { recursive: true });
   copyFileSync13(packageJsonPath, join105(envDir, "package.json"));
   let copiedLockfile = false;
   for (const lockName of LOCKFILES_FOR[installer]) {
     const lockPath = join105(sourceDir, lockName);
-    if (existsSync100(lockPath)) {
+    if (existsSync101(lockPath)) {
       copyFileSync13(lockPath, join105(envDir, lockName));
       copiedLockfile = true;
     }
@@ -120618,16 +120796,16 @@ function ensureNodeEnv(opts) {
   try {
     if (installer === "bun") {
       const args = copiedLockfile ? ["install", "--frozen-lockfile"] : ["install"];
-      execFileSync31("bun", args, { cwd: envDir, stdio: "pipe" });
+      execFileSync32("bun", args, { cwd: envDir, stdio: "pipe" });
     } else {
       const args = copiedLockfile ? ["ci"] : ["install"];
-      execFileSync31("npm", args, { cwd: envDir, stdio: "pipe" });
+      execFileSync32("npm", args, { cwd: envDir, stdio: "pipe" });
     }
   } catch (err) {
     const e = err;
     throw new NodeEnvError(`Failed to install node deps for skill "${skillName}" with ${installer}: ${e.message}`, e.stderr?.toString());
   }
-  writeFileSync41(stampPath, targetHash + `
+  writeFileSync42(stampPath, targetHash + `
 `);
   return {
     skillName,
@@ -120646,22 +120824,22 @@ function registerDepsCommand(program3) {
   const deps = program3.command("deps").description("Manage cached per-skill dependency environments");
   deps.command("rebuild <skill>").description("Rebuild the Python venv and/or Node node_modules cache for a skill").option("-p, --python", "Rebuild only the Python env").option("-n, --node", "Rebuild only the Node env").action(async (skill, opts) => {
     const skillsRoot = builtinSkillsRoot();
-    if (!existsSync101(skillsRoot)) {
+    if (!existsSync102(skillsRoot)) {
       console.error(source_default.red(`Bundled skills pool dir not found at ${skillsRoot} \u2014 run \`switchroom update\` to install it.`));
       process.exit(1);
     }
     const skillDir = join106(skillsRoot, skill);
-    if (!existsSync101(skillDir)) {
+    if (!existsSync102(skillDir)) {
       console.error(source_default.red(`Unknown skill: ${skill} (no dir at ${skillDir})`));
       process.exit(1);
     }
     const requirementsPath = join106(skillDir, "requirements.txt");
     const packageJsonPath = join106(skillDir, "package.json");
-    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync101(requirementsPath));
-    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync101(packageJsonPath));
+    const wantPython = opts.python ?? (!opts.python && !opts.node && existsSync102(requirementsPath));
+    const wantNode = opts.node ?? (!opts.python && !opts.node && existsSync102(packageJsonPath));
     let did = 0;
     if (wantPython) {
-      if (!existsSync101(requirementsPath)) {
+      if (!existsSync102(requirementsPath)) {
         console.error(source_default.red(`Skill "${skill}" has no requirements.txt at ${requirementsPath}`));
         process.exit(1);
       }
@@ -120685,7 +120863,7 @@ function registerDepsCommand(program3) {
       }
     }
     if (wantNode) {
-      if (!existsSync101(packageJsonPath)) {
+      if (!existsSync102(packageJsonPath)) {
         console.error(source_default.red(`Skill "${skill}" has no package.json at ${packageJsonPath}`));
         process.exit(1);
       }
@@ -120718,7 +120896,7 @@ function registerDepsCommand(program3) {
 // src/cli/workspace.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync102 } from "node:fs";
+import { existsSync as existsSync103 } from "node:fs";
 import { resolve as resolve55, sep as sep7 } from "node:path";
 import { spawnSync as spawnSync23 } from "node:child_process";
 
@@ -121495,7 +121673,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve55(dir, ".git");
-    if (!existsSync102(gitDir)) {
+    if (!existsSync103(gitDir)) {
       process.stdout.write(`Workspace is not a git repository. Re-run \`switchroom agent create ${agentName}\` ` + `or manually \`git init\` in ${dir} to enable versioning.
 `);
       return;
@@ -121549,7 +121727,7 @@ function registerWorkspaceCommand(program3) {
     if (!dir)
       return;
     const gitDir = resolve55(dir, ".git");
-    if (!existsSync102(gitDir)) {
+    if (!existsSync103(gitDir)) {
       process.stdout.write(`Workspace is not a git repository.
 `);
       return;
@@ -121574,7 +121752,7 @@ function resolveAgentWorkspaceDirOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve55(agentsDir, agentName);
   const dir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync102(dir)) {
+  if (!existsSync103(dir)) {
     process.stderr.write(`workspace: ${dir} does not exist yet. Run \`switchroom setup\` or \`switchroom agent scaffold ${agentName}\` to seed it.
 `);
     return;
@@ -121610,7 +121788,7 @@ function safeParseInt(value, fallback) {
 init_helpers();
 init_loader();
 init_merge();
-import { copyFileSync as copyFileSync14, existsSync as existsSync103, readFileSync as readFileSync92, writeFileSync as writeFileSync42 } from "node:fs";
+import { copyFileSync as copyFileSync14, existsSync as existsSync104, readFileSync as readFileSync93, writeFileSync as writeFileSync43 } from "node:fs";
 import { join as join107, resolve as resolve56 } from "node:path";
 init_scaffold();
 init_profiles();
@@ -121628,7 +121806,7 @@ function resolveSoulTargetOrExit(program3, agentName) {
   const agentsDir = resolveAgentsDir(config);
   const agentDir = resolve56(agentsDir, agentName);
   const workspaceDir = resolveAgentWorkspaceDir(agentDir);
-  if (!existsSync103(workspaceDir)) {
+  if (!existsSync104(workspaceDir)) {
     console.error(`soul: ${workspaceDir} does not exist yet. Run \`switchroom setup\` ` + `or \`switchroom agent scaffold ${agentName}\` to seed it.`);
     process.exit(1);
   }
@@ -121654,11 +121832,11 @@ function registerSoulCommand(program3) {
     const t = resolveSoulTargetOrExit(program3, agentName);
     if (!t)
       return;
-    if (!existsSync103(t.soulPath)) {
+    if (!existsSync104(t.soulPath)) {
       console.error(`soul: ${t.soulPath} does not exist yet \u2014 run ` + `\`switchroom soul reset ${agentName}\` to seed it.`);
       process.exit(1);
     }
-    process.stdout.write(readFileSync92(t.soulPath, "utf-8"));
+    process.stdout.write(readFileSync93(t.soulPath, "utf-8"));
   }));
   cmd.command("reset <agent>").description("Re-seed SOUL.md from the agent's current profile " + "(backs the existing file up to SOUL.md.bak first)").option("-y, --yes", "Skip the confirmation prompt").action(withConfigError(async (agentName, opts) => {
     const t = resolveSoulTargetOrExit(program3, agentName);
@@ -121669,7 +121847,7 @@ function registerSoulCommand(program3) {
       console.error(`soul: profile "${t.profileName}" ships no SOUL.md.hbs \u2014 ` + `nothing to re-seed from.`);
       process.exit(1);
     }
-    const exists = existsSync103(t.soulPath);
+    const exists = existsSync104(t.soulPath);
     if (exists && !opts.yes) {
       if (!isInteractive()) {
         console.error(`soul: ${t.soulPath} already exists. Re-run with --yes to ` + `replace it (the current file is backed up to SOUL.md.bak).`);
@@ -121684,12 +121862,12 @@ function registerSoulCommand(program3) {
     let backupPath;
     if (exists) {
       backupPath = `${t.soulPath}.bak`;
-      if (existsSync103(backupPath)) {
+      if (existsSync104(backupPath)) {
         backupPath = `${t.soulPath}.bak.${Date.now()}`;
       }
       copyFileSync14(t.soulPath, backupPath);
     }
-    writeFileSync42(t.soulPath, content, "utf-8");
+    writeFileSync43(t.soulPath, content, "utf-8");
     if (backupPath) {
       console.log(`soul: re-seeded ${agentName}'s SOUL.md from profile ` + `"${t.profileName}".
 ` + `      Previous version saved to ${backupPath}`);
@@ -121703,7 +121881,7 @@ function registerSoulCommand(program3) {
 // src/cli/debug.ts
 init_helpers();
 init_loader();
-import { existsSync as existsSync104, readFileSync as readFileSync93, readdirSync as readdirSync36, statSync as statSync61 } from "node:fs";
+import { existsSync as existsSync105, readFileSync as readFileSync94, readdirSync as readdirSync36, statSync as statSync62 } from "node:fs";
 import { resolve as resolve57, join as join108 } from "node:path";
 import { createHash as createHash20 } from "node:crypto";
 init_merge();
@@ -121716,10 +121894,10 @@ function estimateTokens(bytes) {
 }
 function readMcpServerNames(agentDir) {
   const mcpPath = join108(agentDir, ".mcp.json");
-  if (!existsSync104(mcpPath))
+  if (!existsSync105(mcpPath))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync93(mcpPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync94(mcpPath, "utf-8"));
     return Object.keys(parsed.mcpServers ?? {});
   } catch {
     return null;
@@ -121730,7 +121908,7 @@ function sha2562(content) {
 }
 function findLatestTranscriptJsonl(claudeConfigDir) {
   const projectsDir = join108(claudeConfigDir, "projects");
-  if (!existsSync104(projectsDir))
+  if (!existsSync105(projectsDir))
     return;
   try {
     const entries = readdirSync36(projectsDir, { withFileTypes: true });
@@ -121740,9 +121918,9 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
         continue;
       const projectPath = join108(projectsDir, entry.name);
       const transcriptPath = join108(projectPath, "transcript.jsonl");
-      if (!existsSync104(transcriptPath))
+      if (!existsSync105(transcriptPath))
         continue;
-      const stat3 = statSync61(transcriptPath);
+      const stat3 = statSync62(transcriptPath);
       if (!latest || stat3.mtimeMs > latest.mtime) {
         latest = { path: transcriptPath, mtime: stat3.mtimeMs };
       }
@@ -121754,7 +121932,7 @@ function findLatestTranscriptJsonl(claudeConfigDir) {
 }
 function extractLatestUserMessage(transcriptPath) {
   try {
-    const content = readFileSync93(transcriptPath, "utf-8");
+    const content = readFileSync94(transcriptPath, "utf-8");
     const lines = content.trim().split(`
 `).filter(Boolean);
     for (let i2 = lines.length - 1;i2 >= 0; i2--) {
@@ -121803,7 +121981,7 @@ function registerDebugCommand(program3) {
     }
     const agentsDir = resolveAgentsDir(config);
     const agentDir = resolve57(agentsDir, agentName);
-    if (!existsSync104(agentDir)) {
+    if (!existsSync105(agentDir)) {
       console.error(`Agent directory not found: ${agentDir}`);
       process.exit(1);
     }
@@ -121858,7 +122036,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Append System Prompt (per-session) ===
 `);
-    const handoffContent = existsSync104(handoffPath) ? readFileSync93(handoffPath, "utf-8") : "";
+    const handoffContent = existsSync105(handoffPath) ? readFileSync94(handoffPath, "utf-8") : "";
     if (handoffContent.trim().length > 0) {
       console.log(`-- Handoff Briefing (${formatBytes(handoffContent.length)}) --`);
       console.log(handoffContent);
@@ -121869,7 +122047,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== CLAUDE.md (auto-loaded by Claude Code) ===
 `);
-    const claudeMdContent = existsSync104(claudeMdPath) ? readFileSync93(claudeMdPath, "utf-8") : "";
+    const claudeMdContent = existsSync105(claudeMdPath) ? readFileSync94(claudeMdPath, "utf-8") : "";
     if (claudeMdContent.trim().length > 0) {
       console.log(`(${formatBytes(claudeMdContent.length)})`);
       console.log(claudeMdContent);
@@ -121880,7 +122058,7 @@ function registerDebugCommand(program3) {
     }
     console.log(`=== Persona (SOUL.md) ===
 `);
-    const soulMdContent = existsSync104(soulMdPath) ? readFileSync93(soulMdPath, "utf-8") : existsSync104(workspaceSoulMdPath) ? readFileSync93(workspaceSoulMdPath, "utf-8") : "";
+    const soulMdContent = existsSync105(soulMdPath) ? readFileSync94(soulMdPath, "utf-8") : existsSync105(workspaceSoulMdPath) ? readFileSync94(workspaceSoulMdPath, "utf-8") : "";
     if (soulMdContent.trim().length > 0) {
       console.log(`(${formatBytes(soulMdContent.length)})`);
       console.log(soulMdContent);
@@ -121944,8 +122122,8 @@ function registerDebugCommand(program3) {
     const fleetDir = join108(agentsDir, "..", "fleet");
     const fleetInvPath = join108(fleetDir, "switchroom-invariants.md");
     const fleetClaudePath = join108(fleetDir, "CLAUDE.md");
-    const fleetInvBytes = existsSync104(fleetInvPath) ? readFileSync93(fleetInvPath, "utf-8").length : 0;
-    const fleetClaudeBytes = existsSync104(fleetClaudePath) ? readFileSync93(fleetClaudePath, "utf-8").length : 0;
+    const fleetInvBytes = existsSync105(fleetInvPath) ? readFileSync94(fleetInvPath, "utf-8").length : 0;
+    const fleetClaudeBytes = existsSync105(fleetClaudePath) ? readFileSync94(fleetClaudePath, "utf-8").length : 0;
     const fleetBytes = fleetInvBytes + fleetClaudeBytes;
     const totalBytes = stableBytes + perSessionBytes + claudeMdBytes + fleetBytes + perTurnBytes + userBytes;
     console.log(`Stable prefix:     ${formatBytes(stableBytes).padEnd(20)} (cache-hot; includes SOUL.md ${soulMdBytes.toLocaleString()}B)`);
@@ -121981,7 +122159,7 @@ import { appendFileSync as appendFileSync6 } from "node:fs";
 // src/worktree/release.ts
 init_registry();
 init_remove_checkout();
-import { existsSync as existsSync105 } from "node:fs";
+import { existsSync as existsSync106 } from "node:fs";
 function releaseWorktree(input) {
   const { id } = input;
   const record2 = readRecord(id);
@@ -121989,7 +122167,7 @@ function releaseWorktree(input) {
     return { released: true };
   }
   let gitSuccess = true;
-  if (existsSync105(record2.path)) {
+  if (existsSync106(record2.path)) {
     try {
       removeCheckout(record2.repo, record2.path);
     } catch {
@@ -122025,11 +122203,11 @@ function listWorktrees() {
 }
 
 // src/worktree/reaper.ts
-import { execFileSync as execFileSync32 } from "node:child_process";
-import { existsSync as existsSync106 } from "node:fs";
+import { execFileSync as execFileSync33 } from "node:child_process";
+import { existsSync as existsSync107 } from "node:fs";
 
 // src/worktree/proc-liveness.ts
-import { readdirSync as readdirSync37, readlinkSync as readlinkSync8, realpathSync as realpathSync9, statSync as statSync62, readFileSync as readFileSync94 } from "node:fs";
+import { readdirSync as readdirSync37, readlinkSync as readlinkSync8, realpathSync as realpathSync9, statSync as statSync63, readFileSync as readFileSync95 } from "node:fs";
 import { join as join109, sep as sep8 } from "node:path";
 function isPidDir(name) {
   return /^\d+$/.test(name);
@@ -122045,7 +122223,7 @@ function errno(e) {
 }
 function isKernelThread(procRoot, pid) {
   try {
-    return readFileSync94(join109(procRoot, pid, "cmdline")).length === 0;
+    return readFileSync95(join109(procRoot, pid, "cmdline")).length === 0;
   } catch {
     return false;
   }
@@ -122057,7 +122235,7 @@ function cwdIsUnderRootByInode(linkPath, rootId, maxDepth) {
   for (let hop = 0;hop <= maxDepth; hop++) {
     let st;
     try {
-      st = statSync62(linkPath + suffix);
+      st = statSync63(linkPath + suffix);
     } catch {
       return false;
     }
@@ -122078,7 +122256,7 @@ function scanProcForHolders(path10, opts = {}) {
   let rootId;
   try {
     root = realpathSync9(path10);
-    const st = statSync62(root);
+    const st = statSync63(root);
     rootId = { dev: st.dev, ino: st.ino };
   } catch {
     return { state: "unavailable", inaccessible: 0 };
@@ -122163,11 +122341,11 @@ function reapSkipReasonText(action) {
 function probePathInUseWithTools(path10) {
   let probeRan = false;
   try {
-    execFileSync32("fuser", [path10], { stdio: "pipe" });
+    execFileSync33("fuser", [path10], { stdio: "pipe" });
     return "in-use";
   } catch {}
   try {
-    const out = execFileSync32("lsof", ["-t", "+D", path10], {
+    const out = execFileSync33("lsof", ["-t", "+D", path10], {
       stdio: ["ignore", "pipe", "ignore"]
     }).toString().trim();
     probeRan = true;
@@ -122197,7 +122375,7 @@ function probePathInUse(path10, deps = {}) {
 }
 function hasUncommittedChanges(_repoPath, worktreePath) {
   try {
-    const out = execFileSync32("git", ["-C", worktreePath, "status", "--porcelain"], { stdio: "pipe" }).toString();
+    const out = execFileSync33("git", ["-C", worktreePath, "status", "--porcelain"], { stdio: "pipe" }).toString();
     return out.trim().length > 0;
   } catch {
     return true;
@@ -122215,7 +122393,7 @@ function planReaper(nowMs, deps = {}) {
   const plan = [];
   for (const record2 of listRecords()) {
     const heartbeatAge = now2 - new Date(record2.heartbeatAt).getTime();
-    const worktreeExists = existsSync106(record2.path);
+    const worktreeExists = existsSync107(record2.path);
     if (!worktreeExists) {
       plan.push({
         record: record2,
@@ -122295,15 +122473,15 @@ function runReaper(nowMs, deps = {}) {
 
 // src/worktree/gc.ts
 init_registry();
-import { execFileSync as execFileSync33 } from "node:child_process";
+import { execFileSync as execFileSync34 } from "node:child_process";
 import { createHash as createHash21 } from "node:crypto";
 import {
-  existsSync as existsSync107,
-  readFileSync as readFileSync95,
+  existsSync as existsSync108,
+  readFileSync as readFileSync96,
   readdirSync as readdirSync38,
-  statSync as statSync63,
-  renameSync as renameSync27,
-  mkdirSync as mkdirSync59,
+  statSync as statSync64,
+  renameSync as renameSync28,
+  mkdirSync as mkdirSync60,
   rmSync as rmSync21
 } from "node:fs";
 import { homedir as homedir57 } from "node:os";
@@ -122453,7 +122631,7 @@ function describeExecFailure(e) {
 }
 var execCapture = (file, args, cwd) => {
   try {
-    return execFileSync33(file, args, {
+    return execFileSync34(file, args, {
       cwd,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],
@@ -122509,7 +122687,7 @@ function defaultNewestTrackedMtimeMs(dir, exec) {
   let newest = 0;
   for (const f of files) {
     try {
-      const m = statSync63(join110(dir, f)).mtimeMs;
+      const m = statSync64(join110(dir, f)).mtimeMs;
       if (m > newest)
         newest = m;
     } catch {}
@@ -122531,10 +122709,10 @@ function trashRoot() {
   return resolve58(process.env.SWITCHROOM_WORKTREE_TRASH ?? join110(homedir57(), ".switchroom", "worktree-gc-trash"));
 }
 function planGc(roots, deps = {}, taskTreeRoots = [], taskTreeDirs = []) {
-  const exists = deps.existsSync ?? existsSync107;
+  const exists = deps.existsSync ?? existsSync108;
   const readDir = deps.readDir ?? ((p) => readdirSync38(p));
-  const readFile4 = deps.readFile ?? ((p) => readFileSync95(p, "utf8"));
-  const stat3 = deps.stat ?? ((p) => statSync63(p));
+  const readFile4 = deps.readFile ?? ((p) => readFileSync96(p, "utf8"));
+  const stat3 = deps.stat ?? ((p) => statSync64(p));
   const exec = deps.exec ?? execCapture;
   const prSignal = deps.prSignal ?? ((repo, branch) => defaultPrSignal(repo, branch, exec));
   const stamp = deps.dateStamp ?? "undated";
@@ -122830,10 +123008,10 @@ function planGc(roots, deps = {}, taskTreeRoots = [], taskTreeDirs = []) {
 }
 function applyGc(plan, deps = {}) {
   const exec = deps.exec ?? execCapture;
-  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync59(p, { recursive: true }));
+  const mkdirp = deps.mkdirp ?? ((p) => void mkdirSync60(p, { recursive: true }));
   const move = deps.move ?? ((src, dest) => {
     try {
-      renameSync27(src, dest);
+      renameSync28(src, dest);
     } catch {
       exec("mv", [src, dest]);
     }
@@ -122893,7 +123071,7 @@ function selectPurgeTargets(entries, olderThanDays) {
   return entries.filter((e) => e.ageDays >= olderThanDays).map((e) => e.path);
 }
 function listTrashEntries(nowMs, deps = {}) {
-  const exists = deps.existsSync ?? existsSync107;
+  const exists = deps.existsSync ?? existsSync108;
   const readDir = deps.readDir ?? ((p) => readdirSync38(p));
   const root = trashRoot();
   if (!exists(root))
@@ -122911,7 +123089,7 @@ function listTrashEntries(nowMs, deps = {}) {
       const p = join110(stampDir, name);
       let mtimeMs = nowMs;
       try {
-        mtimeMs = statSync63(p).mtimeMs;
+        mtimeMs = statSync64(p).mtimeMs;
       } catch {}
       out.push({ path: p, ageDays: (nowMs - mtimeMs) / 86400000 });
     }
@@ -122946,7 +123124,7 @@ function defaultTaskTreeRoots() {
   for (const name of names.sort()) {
     for (const sub of ["home/work", "home/workspace"]) {
       const r = join110(agentsDir, name, sub);
-      if (existsSync107(r))
+      if (existsSync108(r))
         roots.push(r);
     }
   }
@@ -122994,7 +123172,7 @@ function reservedAgentPath(relParts) {
 }
 function discoverAgentCheckouts(agentsDir, deps = {}) {
   const readDir = deps.readDir ?? ((p) => readdirSync38(p, { withFileTypes: true }));
-  const exists = deps.existsSync ?? existsSync107;
+  const exists = deps.existsSync ?? existsSync108;
   const maxDepth = deps.maxDepth ?? 4;
   const maxVisits = deps.maxVisits ?? 50000;
   let agents;
@@ -123046,7 +123224,7 @@ function defaultTaskTreeDirs(deps = {}) {
 }
 
 // src/worktree/reap-report.ts
-import { execFileSync as execFileSync34 } from "node:child_process";
+import { execFileSync as execFileSync35 } from "node:child_process";
 import { sep as sep9 } from "node:path";
 var DEFAULT_AGENT_TREE_BUDGET_BYTES = 5 * 1024 * 1024 * 1024;
 var UNATTRIBUTED_AGENT = "(unattributed)";
@@ -123068,7 +123246,7 @@ function agentFromPath(path10) {
   return name && name !== "" ? name : null;
 }
 function defaultDirSizeBytes(path10) {
-  const out = execFileSync34("du", ["-sk", path10], {
+  const out = execFileSync35("du", ["-sk", path10], {
     stdio: ["ignore", "pipe", "pipe"],
     maxBuffer: 8 * 1024 * 1024
   }).toString();
@@ -123258,17 +123436,17 @@ function formatReapReport(report) {
 }
 
 // src/worktree/capture.ts
-import { execFileSync as execFileSync35 } from "node:child_process";
+import { execFileSync as execFileSync36 } from "node:child_process";
 import {
-  existsSync as existsSync108,
-  mkdirSync as mkdirSync60,
+  existsSync as existsSync109,
+  mkdirSync as mkdirSync61,
   mkdtempSync as mkdtempSync5,
   rmSync as rmSync22,
-  statSync as statSync64,
-  writeFileSync as writeFileSync43
+  statSync as statSync65,
+  writeFileSync as writeFileSync44
 } from "node:fs";
 import { homedir as homedir58 } from "node:os";
-import { basename as basename12, dirname as dirname47, join as join111, resolve as resolve59 } from "node:path";
+import { basename as basename12, dirname as dirname48, join as join111, resolve as resolve59 } from "node:path";
 init_remove_checkout();
 init_scratch();
 init_loader();
@@ -123354,7 +123532,7 @@ function rescueRootIsFallback(destRoot) {
 }
 function run(args, input, cwd, env2) {
   try {
-    const stdout = execFileSync35("git", args, {
+    const stdout = execFileSync36("git", args, {
       encoding: "utf-8",
       stdio: input === undefined ? ["ignore", "pipe", "pipe"] : ["pipe", "pipe", "pipe"],
       maxBuffer: MAX_BUFFER,
@@ -123421,7 +123599,7 @@ function captureCheckout(opts) {
   };
   let st;
   try {
-    st = statSync64(source);
+    st = statSync65(source);
   } catch {
     return { ...base, failure: "missing", error: `No such directory: ${source}` };
   }
@@ -123435,7 +123613,7 @@ function captureCheckout(opts) {
       failure: "not-a-git-repo",
       error: `${source} is not a usable git repository (${commonDirProbe.stderr}).
 ` + `A bundle cannot represent it. Capture it as a tarball instead:
-` + `  tar -C ${dirname47(source)} -czf <dest>/${basename12(source)}.tar.gz ${basename12(source)}
+` + `  tar -C ${dirname48(source)} -czf <dest>/${basename12(source)}.tar.gz ${basename12(source)}
 ` + "then verify with `tar -tzf <file> >/dev/null` before deleting anything."
     };
   }
@@ -123444,7 +123622,7 @@ function captureCheckout(opts) {
   const headSha = run(gitArgs(source, "rev-parse", "--verify", "--quiet", "HEAD")).stdout.trim();
   const headBranch = run(gitArgs(source, "symbolic-ref", "--quiet", "HEAD")).stdout.trim();
   const head = headBranch ? headBranch.replace(/^refs\/heads\//, "") : headSha ? `detached@${headSha.slice(0, 12)}` : null;
-  const destRoot = opts.out ? dirname47(resolve59(opts.out)) : opts.dest ? resolve59(opts.dest) : rescueDestRoot();
+  const destRoot = opts.out ? dirname48(resolve59(opts.out)) : opts.dest ? resolve59(opts.dest) : rescueDestRoot();
   const bundlePath = opts.out ? resolve59(opts.out) : join111(destRoot, bundleFileName(source, now2));
   if (bundlePath === source || bundlePath.startsWith(source + "/")) {
     return {
@@ -123455,7 +123633,7 @@ function captureCheckout(opts) {
     };
   }
   try {
-    mkdirSync60(destRoot, { recursive: true });
+    mkdirSync61(destRoot, { recursive: true });
   } catch (e) {
     return {
       ...base,
@@ -123478,8 +123656,8 @@ function captureCheckout(opts) {
     if (!init.ok) {
       return { ...base, failure: "bundle-failed", error: `staging init failed: ${init.stderr}` };
     }
-    mkdirSync60(join111(stageDir, "objects", "info"), { recursive: true });
-    writeFileSync43(join111(stageDir, "objects", "info", "alternates"), objectsDir + `
+    mkdirSync61(join111(stageDir, "objects", "info"), { recursive: true });
+    writeFileSync44(join111(stageDir, "objects", "info", "alternates"), objectsDir + `
 `);
     const sourceRefs = parseForEachRef(run(gitArgs(source, "for-each-ref", "--format=%(objectname) %(refname)")).stdout);
     const sourceRefNames = new Set(sourceRefs.map((r) => r.ref));
@@ -123502,7 +123680,7 @@ function captureCheckout(opts) {
     const nStash = createRefs(stageDir, stashRefs, warnings);
     let wip = false;
     let wipCommit = null;
-    if (!bare && existsSync108(source)) {
+    if (!bare && existsSync109(source)) {
       const add2 = run(stageArgs(stageDir, "--work-tree", source, "add", "-A"), undefined, source);
       if (!add2.ok) {
         return {
@@ -123537,7 +123715,7 @@ function captureCheckout(opts) {
       } else {
         warnings.push("could not write a tree for the working-tree snapshot");
       }
-      if (existsSync108(join111(source, ".gitmodules"))) {
+      if (existsSync109(join111(source, ".gitmodules"))) {
         warnings.push("this checkout has submodules: they are captured as gitlinks only, " + "so submodule CONTENT is not in this bundle \u2014 capture each submodule " + "separately if it holds unpushed work");
       }
     }
@@ -123569,7 +123747,7 @@ function captureCheckout(opts) {
       };
     }
     const created = run(stageArgs(stageDir, "bundle", "create", bundlePath, "--all"));
-    if (!created.ok || !existsSync108(bundlePath)) {
+    if (!created.ok || !existsSync109(bundlePath)) {
       return {
         ...base,
         head,
@@ -123579,7 +123757,7 @@ function captureCheckout(opts) {
       };
     }
     opts.onBundleWritten?.(bundlePath);
-    const bytes = statSync64(bundlePath).size;
+    const bytes = statSync65(bundlePath).size;
     if (bytes === 0) {
       return {
         ...base,
@@ -123658,7 +123836,7 @@ function captureCheckout(opts) {
     };
     const writeManifest = (r) => {
       try {
-        writeFileSync43(`${bundlePath}.json`, JSON.stringify(r, null, 2) + `
+        writeFileSync44(`${bundlePath}.json`, JSON.stringify(r, null, 2) + `
 `);
       } catch (e) {
         warnings.push(`could not write the manifest sidecar: ${e.message}`);
@@ -123676,7 +123854,7 @@ function captureCheckout(opts) {
         return failed;
       }
       if (kind === "worktree") {
-        const repoRoot = dirname47(resolve59(source, commonDirProbe.stdout.trim()));
+        const repoRoot = dirname48(resolve59(source, commonDirProbe.stdout.trim()));
         const pruned = run(gitArgs(repoRoot, "worktree", "prune"));
         if (!pruned.ok)
           warnings.push(`git worktree prune failed in ${repoRoot}: ${pruned.stderr}`);
@@ -124042,10 +124220,10 @@ init_drive();
 init_scaffold_integration();
 import {
   chmodSync as chmodSync17,
-  mkdirSync as mkdirSync61,
+  mkdirSync as mkdirSync62,
   readdirSync as readdirSync39,
   rmSync as rmSync23,
-  writeFileSync as writeFileSync44
+  writeFileSync as writeFileSync45
 } from "node:fs";
 import { join as join112 } from "node:path";
 function encodeCredentialsFilename(email) {
@@ -124314,14 +124492,14 @@ function resolveCredentialsDir(env2) {
   return join112(stateBase, "google-workspace-mcp", "credentials");
 }
 function writeSeedFile(dir, email, seed) {
-  mkdirSync61(dir, { recursive: true, mode: 448 });
+  mkdirSync62(dir, { recursive: true, mode: 448 });
   chmodSync17(dir, 448);
   for (const name of readdirSync39(dir)) {
     rmSync23(join112(dir, name), { force: true, recursive: true });
   }
   const filename = encodeCredentialsFilename(email);
   const filePath = join112(dir, filename);
-  writeFileSync44(filePath, JSON.stringify(seed), { mode: 384 });
+  writeFileSync45(filePath, JSON.stringify(seed), { mode: 384 });
   chmodSync17(filePath, 384);
   return filePath;
 }
@@ -124516,8 +124694,8 @@ function registerDriveMcpLauncherCommand(program3) {
 // src/cli/m365-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn6 } from "node:child_process";
-import { writeFileSync as writeFileSync45, mkdirSync as mkdirSync62 } from "node:fs";
-import { dirname as dirname48, join as join113 } from "node:path";
+import { writeFileSync as writeFileSync46, mkdirSync as mkdirSync63 } from "node:fs";
+import { dirname as dirname49, join as join113 } from "node:path";
 var SOFTERIA_TOKEN_ENV = "MS365_MCP_OAUTH_TOKEN";
 var DEFAULT_REFRESH_LEAD_MS = 5 * 60 * 1000;
 var MAX_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
@@ -124553,8 +124731,8 @@ function computeRefreshDelayMs(expiresAt, now2, leadMs = DEFAULT_REFRESH_LEAD_MS
 function writeRefreshHeartbeat(agentName, data, account) {
   const path10 = heartbeatPath(agentName, account);
   try {
-    mkdirSync62(dirname48(path10), { recursive: true });
-    writeFileSync45(path10, JSON.stringify(data, null, 2), { mode: 420 });
+    mkdirSync63(dirname49(path10), { recursive: true });
+    writeFileSync46(path10, JSON.stringify(data, null, 2), { mode: 420 });
   } catch {}
 }
 function heartbeatPath(agentName, account) {
@@ -124794,8 +124972,8 @@ function registerM365McpLauncherCommand(program3) {
 // src/cli/notion-mcp-launcher.ts
 init_scaffold_integration();
 import { spawn as spawn7 } from "node:child_process";
-import { existsSync as existsSync109, mkdirSync as mkdirSync63, writeFileSync as writeFileSync46 } from "node:fs";
-import { dirname as dirname49 } from "node:path";
+import { existsSync as existsSync110, mkdirSync as mkdirSync64, writeFileSync as writeFileSync47 } from "node:fs";
+import { dirname as dirname50 } from "node:path";
 var HEARTBEAT_WRITE_INTERVAL_MS = 30 * 1000;
 var DEFAULT_HEARTBEAT_PATH = "/state/agent/notion-launcher.heartbeat.json";
 var DEFAULT_VAULT_KEY = "notion/integration-token";
@@ -124805,10 +124983,10 @@ function buildNotionMcpArgs(opts) {
 }
 function defaultWriteHeartbeat(path10, contents) {
   try {
-    const dir = dirname49(path10);
-    if (!existsSync109(dir))
-      mkdirSync63(dir, { recursive: true });
-    writeFileSync46(path10, contents);
+    const dir = dirname50(path10);
+    if (!existsSync110(dir))
+      mkdirSync64(dir, { recursive: true });
+    writeFileSync47(path10, contents);
   } catch {}
 }
 async function runNotionMcpLauncher(opts, runtime) {
@@ -124918,7 +125096,7 @@ function registerNotionMcpLauncherCommand(program3) {
 
 // src/cli/hindsight-mcp-shim.ts
 init_hindsight_directive_admin();
-import { mkdirSync as mkdirSync64, readFileSync as readFileSync96, renameSync as renameSync28, writeFileSync as writeFileSync47 } from "node:fs";
+import { mkdirSync as mkdirSync65, readFileSync as readFileSync97, renameSync as renameSync29, writeFileSync as writeFileSync48 } from "node:fs";
 import { tmpdir as tmpdir6 } from "node:os";
 import { join as join114 } from "node:path";
 import { createInterface as createInterface7 } from "node:readline";
@@ -125200,6 +125378,63 @@ function isReflectToolCallFailure(toolName, res) {
   }
   return texts.some((t) => t.includes(REFLECT_NO_TOOL_CALL_SIGNATURE));
 }
+var REFLECT_EMPTY_EVIDENCE_TEXT = "No relevant memories: reflect retrieved ZERO evidence from your memory " + "bank for this query \u2014 no memories, mental models, or directives matched. " + "This is not an error and not a synthesized answer: the bank has nothing " + "recorded on this topic. Treat it as an explicit absence, not a fact, and " + "do not present the (suppressed) synthesized prose as if it were recalled.";
+function reflectEvidenceCardinality(basedOn) {
+  if (!basedOn || typeof basedOn !== "object" || Array.isArray(basedOn)) {
+    return null;
+  }
+  let total = 0;
+  for (const v of Object.values(basedOn)) {
+    if (!Array.isArray(v))
+      return null;
+    total += v.length;
+  }
+  return total;
+}
+function applyReflectCardinalityGuard(result, callerWantedBasedOn) {
+  const abstain = {
+    content: [{ type: "text", text: REFLECT_EMPTY_EVIDENCE_TEXT }],
+    isError: false
+  };
+  if (!result || typeof result !== "object")
+    return result;
+  const res = result;
+  if (res.isError)
+    return result;
+  const content = res.content;
+  if (!Array.isArray(content) || content.length === 0)
+    return result;
+  const first = content[0];
+  if (!first || typeof first.text !== "string")
+    return result;
+  let payload;
+  try {
+    payload = JSON.parse(first.text);
+  } catch {
+    return result;
+  }
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    return result;
+  }
+  const obj = payload;
+  if (!("based_on" in obj))
+    return result;
+  const cardinality = reflectEvidenceCardinality(obj.based_on);
+  if (cardinality === null)
+    return result;
+  if (cardinality === 0)
+    return abstain;
+  if (callerWantedBasedOn)
+    return result;
+  delete obj.based_on;
+  return {
+    ...res,
+    content: [
+      { ...first, text: JSON.stringify(obj, null, 2) },
+      ...content.slice(1)
+    ]
+  };
+}
 function redactToolArguments(value) {
   if (typeof value === "string")
     return redact(value);
@@ -125324,6 +125559,9 @@ function guardAndClampToolCall(params, env2) {
     if (injected.budget === undefined) {
       injected.budget = name === "recall" ? resolveClampBudget(env2.HINDSIGHT_SHIM_RECALL_BUDGET, DEFAULT_RECALL_BUDGET) : resolveClampBudget(env2.HINDSIGHT_SHIM_REFLECT_BUDGET, DEFAULT_REFLECT_BUDGET);
     }
+    if (name === "reflect" && injected.include_based_on === undefined) {
+      injected.include_based_on = true;
+    }
     return { ok: true, params: { ...called, arguments: injected } };
   }
   return { ok: true, params };
@@ -125513,18 +125751,18 @@ class HindsightShim {
   }
   writeCache(result) {
     try {
-      mkdirSync64(this.opts.cacheDir, { recursive: true });
+      mkdirSync65(this.opts.cacheDir, { recursive: true });
       const tmp = join114(this.opts.cacheDir, `.${TOOLS_CACHE_FILENAME}.${process.pid}.tmp`);
-      writeFileSync47(tmp, JSON.stringify(result, null, 2) + `
+      writeFileSync48(tmp, JSON.stringify(result, null, 2) + `
 `);
-      renameSync28(tmp, this.cachePath);
+      renameSync29(tmp, this.cachePath);
     } catch (err) {
       this.log(`[hindsight-shim] cache write failed: ${String(err)}`);
     }
   }
   readCache() {
     try {
-      const parsed = JSON.parse(readFileSync96(this.cachePath, "utf-8"));
+      const parsed = JSON.parse(readFileSync97(this.cachePath, "utf-8"));
       if (Array.isArray(parsed.tools))
         return parsed;
       return null;
@@ -125718,6 +125956,7 @@ class HindsightShim {
     }
     const forwarded = redactToolCallParams(guarded.params);
     const toolName = guarded.params?.name;
+    const callerWantedBasedOn = toolName === "reflect" && Boolean(called?.arguments?.include_based_on);
     const timeoutMs = this.opts.toolsCallTimeoutMs ?? TOOLS_CALL_TIMEOUT_MS;
     try {
       let res = await this.upstream.request("tools/call", forwarded, timeoutMs);
@@ -125734,6 +125973,9 @@ class HindsightShim {
           isError: true
         };
       }
+      if (toolName === "reflect") {
+        return applyReflectCardinalityGuard(res.result, callerWantedBasedOn);
+      }
       return res.result;
     } catch (err) {
       const name = params?.name ?? "unknown";
@@ -125825,7 +126067,7 @@ function registerHindsightMcpShimCommand(program3) {
 
 // src/cli/deliver-file.ts
 init_client2();
-import { readFileSync as readFileSync97, statSync as statSync65 } from "node:fs";
+import { readFileSync as readFileSync98, statSync as statSync66 } from "node:fs";
 import { basename as basename15 } from "node:path";
 
 // src/delivery/onedrive.ts
@@ -126164,8 +126406,8 @@ async function defaultResolveProvider() {
 }
 async function runDeliverFile(localPath, deps = {}) {
   const agentName = safeAgentName(deps.agentName ?? process.env.SWITCHROOM_AGENT_NAME);
-  const sizeOf = deps.fileSize ?? ((p) => statSync65(p).size);
-  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync97(p)));
+  const sizeOf = deps.fileSize ?? ((p) => statSync66(p).size);
+  const read = deps.readFile ?? ((p) => new Uint8Array(readFileSync98(p)));
   const resolveProvider = deps.resolveProvider ?? defaultResolveProvider;
   let size;
   try {
@@ -126486,7 +126728,7 @@ function runRedactStdin() {
 }
 
 // src/cli/status-ask.ts
-import { readFileSync as readFileSync98, existsSync as existsSync110, readdirSync as readdirSync40 } from "node:fs";
+import { readFileSync as readFileSync99, existsSync as existsSync111, readdirSync as readdirSync40 } from "node:fs";
 import { join as join115 } from "node:path";
 import { homedir as homedir59 } from "node:os";
 
@@ -126762,7 +127004,7 @@ function runReport(opts) {
   for (const src of sources) {
     let content;
     try {
-      content = readFileSync98(src.path, "utf-8");
+      content = readFileSync99(src.path, "utf-8");
     } catch (err) {
       process.stderr.write(`status-ask report: cannot read ${src.path}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -126809,7 +127051,7 @@ function runReport(opts) {
 function resolveSources(explicitPath) {
   if (explicitPath != null && explicitPath.trim() !== "") {
     const trimmed = explicitPath.trim();
-    if (!existsSync110(trimmed)) {
+    if (!existsSync111(trimmed)) {
       process.stderr.write(`status-ask report: ${trimmed}: file not found
 `);
       process.exit(1);
@@ -126825,7 +127067,7 @@ function resolveSources(explicitPath) {
   } catch {
     agentsDir = join115(homedir59(), ".switchroom", "agents");
   }
-  if (!existsSync110(agentsDir))
+  if (!existsSync111(agentsDir))
     return [];
   const sources = [];
   let entries;
@@ -126836,7 +127078,7 @@ function resolveSources(explicitPath) {
   }
   for (const name of entries) {
     const path10 = join115(agentsDir, name, "runtime-metrics.jsonl");
-    if (existsSync110(path10)) {
+    if (existsSync111(path10)) {
       sources.push({ path: path10, agent: name });
     }
   }
@@ -126865,16 +127107,16 @@ var import_yaml23 = __toESM(require_dist(), 1);
 // src/config/overlay-writer.ts
 init_paths();
 import {
-  chownSync as chownSync14,
+  chownSync as chownSync15,
   closeSync as closeSync20,
-  existsSync as existsSync111,
+  existsSync as existsSync112,
   fsyncSync as fsyncSync8,
-  mkdirSync as mkdirSync65,
+  mkdirSync as mkdirSync66,
   openSync as openSync20,
   readdirSync as readdirSync41,
-  readFileSync as readFileSync99,
-  renameSync as renameSync29,
-  statSync as statSync66,
+  readFileSync as readFileSync100,
+  renameSync as renameSync30,
+  statSync as statSync67,
   unlinkSync as unlinkSync22,
   writeSync as writeSync10
 } from "node:fs";
@@ -126897,15 +127139,15 @@ function overlayPathsFor(agent, opts = {}) {
   };
 }
 function ensureDirs(paths) {
-  mkdirSync65(paths.scheduleDir, { recursive: true });
-  mkdirSync65(paths.scheduleStagingDir, { recursive: true });
+  mkdirSync66(paths.scheduleDir, { recursive: true });
+  mkdirSync66(paths.scheduleStagingDir, { recursive: true });
 }
 function ensureSkillsDirs(paths) {
-  mkdirSync65(paths.skillsDir, { recursive: true });
-  mkdirSync65(paths.skillsStagingDir, { recursive: true });
+  mkdirSync66(paths.skillsDir, { recursive: true });
+  mkdirSync66(paths.skillsStagingDir, { recursive: true });
 }
 function withAgentLock(paths, fn) {
-  mkdirSync65(paths.agentRoot, { recursive: true });
+  mkdirSync66(paths.agentRoot, { recursive: true });
   const start = Date.now();
   const TIMEOUT_MS = 5000;
   let fd = null;
@@ -126918,7 +127160,7 @@ function withAgentLock(paths, fn) {
       if (e.code !== "EEXIST")
         throw err;
       try {
-        const age = Date.now() - statSync66(paths.lockPath).mtimeMs;
+        const age = Date.now() - statSync67(paths.lockPath).mtimeMs;
         if (age > 30000) {
           unlinkSync22(paths.lockPath);
           continue;
@@ -126944,14 +127186,14 @@ function withAgentLock(paths, fn) {
 }
 var overlayWriterRuntime = {
   geteuid: () => process.geteuid?.(),
-  chown: (path10, uid, gid) => chownSync14(path10, uid, gid)
+  chown: (path10, uid, gid) => chownSync15(path10, uid, gid)
 };
 function alignStagedOwnerToDir(stagingPath, targetDir) {
   try {
     const euid = overlayWriterRuntime.geteuid();
     if (euid === undefined)
       return;
-    const dirStat = statSync66(targetDir);
+    const dirStat = statSync67(targetDir);
     if (dirStat.uid === euid)
       return;
     overlayWriterRuntime.chown(stagingPath, dirStat.uid, dirStat.gid);
@@ -126971,7 +127213,7 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
       closeSync20(fd);
     }
     alignStagedOwnerToDir(stagingPath, paths.scheduleDir);
-    renameSync29(stagingPath, finalPath);
+    renameSync30(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -126989,7 +127231,7 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
       closeSync20(fd);
     }
     alignStagedOwnerToDir(stagingPath, paths.skillsDir);
-    renameSync29(stagingPath, finalPath);
+    renameSync30(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -126997,7 +127239,7 @@ function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     const finalPath = join116(paths.skillsDir, `${slug}.yaml`);
-    if (!existsSync111(finalPath))
+    if (!existsSync112(finalPath))
       return false;
     unlinkSync22(finalPath);
     return true;
@@ -127005,7 +127247,7 @@ function deleteSkillsOverlayEntry(agent, slug, opts = {}) {
 }
 function listSkillsOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync111(paths.skillsDir))
+  if (!existsSync112(paths.skillsDir))
     return [];
   const out = [];
   for (const name of readdirSync41(paths.skillsDir)) {
@@ -127013,7 +127255,7 @@ function listSkillsOverlayEntries(agent, opts = {}) {
       continue;
     const full = join116(paths.skillsDir, name);
     try {
-      const raw = readFileSync99(full, "utf-8");
+      const raw = readFileSync100(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -127024,7 +127266,7 @@ function deleteOverlayEntry(agent, slug, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
   return withAgentLock(paths, () => {
     const finalPath = join116(paths.scheduleDir, `${slug}.yaml`);
-    if (!existsSync111(finalPath))
+    if (!existsSync112(finalPath))
       return false;
     unlinkSync22(finalPath);
     return true;
@@ -127032,7 +127274,7 @@ function deleteOverlayEntry(agent, slug, opts = {}) {
 }
 function listOverlayEntries(agent, opts = {}) {
   const paths = overlayPathsFor(agent, opts);
-  if (!existsSync111(paths.scheduleDir))
+  if (!existsSync112(paths.scheduleDir))
     return [];
   const out = [];
   for (const name of readdirSync41(paths.scheduleDir)) {
@@ -127040,7 +127282,7 @@ function listOverlayEntries(agent, opts = {}) {
       continue;
     const full = join116(paths.scheduleDir, name);
     try {
-      const raw = readFileSync99(full, "utf-8");
+      const raw = readFileSync100(full, "utf-8");
       const slug = name.replace(/\.ya?ml$/i, "");
       out.push({ slug, path: full, raw });
     } catch {}
@@ -127260,15 +127502,15 @@ function reconcileAgentCronOnly(agent) {
 // src/cli/agent-config-pending.ts
 import {
   closeSync as closeSync21,
-  existsSync as existsSync112,
+  existsSync as existsSync113,
   fsyncSync as fsyncSync9,
-  mkdirSync as mkdirSync66,
+  mkdirSync as mkdirSync67,
   openSync as openSync21,
   readdirSync as readdirSync42,
-  readFileSync as readFileSync100,
-  renameSync as renameSync30,
+  readFileSync as readFileSync101,
+  renameSync as renameSync31,
   unlinkSync as unlinkSync23,
-  writeFileSync as writeFileSync48,
+  writeFileSync as writeFileSync49,
   writeSync as writeSync11
 } from "node:fs";
 import { join as join117 } from "node:path";
@@ -127280,7 +127522,7 @@ function pendingDir(agent, opts = {}) {
 }
 function ensurePendingDir(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  mkdirSync66(dir, { recursive: true });
+  mkdirSync67(dir, { recursive: true });
   return dir;
 }
 function newStageId() {
@@ -127309,15 +127551,15 @@ function stagePendingScheduleEntry(opts) {
     } finally {
       closeSync21(fd);
     }
-    renameSync30(yamlTmp, yamlPath);
+    renameSync31(yamlTmp, yamlPath);
   }
-  writeFileSync48(metaPath, JSON.stringify(meta, null, 2) + `
+  writeFileSync49(metaPath, JSON.stringify(meta, null, 2) + `
 `, { mode: 384 });
   return { stageId, yamlPath, metaPath };
 }
 function listPendingScheduleEntries(agent, opts = {}) {
   const dir = pendingDir(agent, opts);
-  if (!existsSync112(dir))
+  if (!existsSync113(dir))
     return [];
   const out = [];
   for (const name of readdirSync42(dir).sort()) {
@@ -127326,10 +127568,10 @@ function listPendingScheduleEntries(agent, opts = {}) {
     const stageId = name.slice(0, -".meta.json".length);
     const metaPath = join117(dir, name);
     const yamlPath = join117(dir, `${stageId}.yaml`);
-    if (!existsSync112(yamlPath))
+    if (!existsSync113(yamlPath))
       continue;
     try {
-      const meta = JSON.parse(readFileSync100(metaPath, "utf-8"));
+      const meta = JSON.parse(readFileSync101(metaPath, "utf-8"));
       if (meta?.v !== 1 || typeof meta.stage_id !== "string")
         continue;
       out.push({ stageId: meta.stage_id, agent: meta.agent, yamlPath, metaPath, meta });
@@ -127345,10 +127587,10 @@ function commitPendingScheduleEntry(opts) {
   const slug = match.meta.entry.name ?? match.stageId;
   const paths = overlayPathsFor(opts.agent, { root: opts.root });
   const finalPath = join117(paths.scheduleDir, `${slug}.yaml`);
-  if (existsSync112(finalPath)) {
+  if (existsSync113(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
-  renameSync30(match.yamlPath, finalPath);
+  renameSync31(match.yamlPath, finalPath);
   unlinkSync23(match.metaPath);
   return { committed: true, path: finalPath, slug };
 }
@@ -127367,8 +127609,8 @@ function denyPendingScheduleEntry(opts) {
 }
 
 // src/cli/agent-config-write.ts
-import { existsSync as existsSync113, readFileSync as readFileSync101 } from "node:fs";
-import { execFileSync as execFileSync36 } from "node:child_process";
+import { existsSync as existsSync114, readFileSync as readFileSync102 } from "node:fs";
+import { execFileSync as execFileSync37 } from "node:child_process";
 
 // src/scheduler/schedule-report.ts
 var TIER_WEIGHT = { poll: 0, action: 0, cheap: 1, main: 5 };
@@ -127757,8 +127999,8 @@ function scheduleRemove(opts) {
   }
   let priorContent = null;
   try {
-    if (existsSync113(match.path))
-      priorContent = readFileSync101(match.path, "utf-8");
+    if (existsSync114(match.path))
+      priorContent = readFileSync102(match.path, "utf-8");
   } catch {}
   deleteOverlayEntry(agent, match.slug, { root: opts.root });
   const reconcileFn = opts.reconcile === undefined ? opts.root ? null : reconcileAgentCronOnly : opts.reconcile;
@@ -127961,10 +128203,10 @@ function registerAgentConfigWriteCommands(program3) {
     }
     let blob;
     if (opts.jsonl) {
-      blob = existsSync113(opts.jsonl) ? readFileSync101(opts.jsonl, "utf-8") : "";
+      blob = existsSync114(opts.jsonl) ? readFileSync102(opts.jsonl, "utf-8") : "";
     } else {
       try {
-        blob = execFileSync36("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
+        blob = execFileSync37("docker", ["exec", `switchroom-${agent}`, "cat", "/state/agent/scheduler.jsonl"], {
           encoding: "utf-8",
           stdio: ["ignore", "pipe", "ignore"]
         });
@@ -127993,7 +128235,7 @@ function registerAgentConfigWriteCommands(program3) {
 
 // src/cli/agent-config-skill-write.ts
 var import_yaml24 = __toESM(require_dist(), 1);
-import { existsSync as existsSync114 } from "node:fs";
+import { existsSync as existsSync115 } from "node:fs";
 init_reconcile_default_skills();
 init_agent_config();
 var import_yaml25 = __toESM(require_dist(), 1);
@@ -128073,7 +128315,7 @@ function skillInstall(opts) {
   }
   const poolDir = opts.bundledSkillsPoolDir ?? getBundledSkillsPoolDir();
   const skillPath = join118(poolDir, skillName);
-  if (!existsSync114(skillPath)) {
+  if (!existsSync115(skillPath)) {
     return err("E_SKILL_NOT_FOUND", `bundled skill not found at ${skillPath}. The operator needs to ` + `place the skill at this path before the agent can opt in.`);
   }
   const yamlText = import_yaml24.stringify({ skills: [skillName] });
@@ -128243,21 +128485,21 @@ init_source();
 import {
   chmodSync as chmodSync18,
   closeSync as closeSync22,
-  existsSync as existsSync115,
+  existsSync as existsSync116,
   lstatSync as lstatSync15,
-  mkdirSync as mkdirSync67,
+  mkdirSync as mkdirSync68,
   mkdtempSync as mkdtempSync6,
   openSync as openSync22,
-  readFileSync as readFileSync102,
+  readFileSync as readFileSync103,
   readdirSync as readdirSync43,
   realpathSync as realpathSync10,
-  renameSync as renameSync31,
+  renameSync as renameSync32,
   rmSync as rmSync24,
-  statSync as statSync67,
-  writeFileSync as writeFileSync49
+  statSync as statSync68,
+  writeFileSync as writeFileSync50
 } from "node:fs";
 import { tmpdir as tmpdir7, homedir as homedir60 } from "node:os";
-import { dirname as dirname50, join as join119, relative as relative6, resolve as resolve61 } from "node:path";
+import { dirname as dirname51, join as join119, relative as relative6, resolve as resolve61 } from "node:path";
 import { spawnSync as spawnSync24 } from "node:child_process";
 var SKILL_NAME_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/;
 var SH_SCRIPT_RE2 = /^scripts\/[A-Za-z0-9_.-]+\.sh$/;
@@ -128303,7 +128545,7 @@ function isTarballPath(p) {
 }
 function loadFromDir(dir) {
   const abs = realpathSync10(dir);
-  if (!statSync67(abs).isDirectory()) {
+  if (!statSync68(abs).isDirectory()) {
     fail4(`--from path is not a directory: ${dir}`);
   }
   const files = {};
@@ -128320,7 +128562,7 @@ function loadFromDir(dir) {
         continue;
       }
       if (ent.isFile()) {
-        const buf = readFileSync102(full);
+        const buf = readFileSync103(full);
         files[rel.replace(/\\/g, "/")] = buf.toString("utf-8");
       }
     }
@@ -128369,7 +128611,7 @@ function loadFromTarball(tarPath) {
   }
 }
 function loadSingleFile(filePath) {
-  const content = readFileSync102(filePath, "utf-8");
+  const content = readFileSync103(filePath, "utf-8");
   return { "SKILL.md": content };
 }
 function loadFromStdin() {
@@ -128434,7 +128676,7 @@ function validatePayload(name, files) {
         const tmp = mkdtempSync6(join119(tmpdir7(), "skill-apply-py-"));
         const tmpPy = join119(tmp, "check.py");
         try {
-          writeFileSync49(tmpPy, content);
+          writeFileSync50(tmpPy, content);
           const r = spawnSync24("python3", ["-m", "py_compile", tmpPy], {
             encoding: "utf-8"
           });
@@ -128452,7 +128694,7 @@ function validatePayload(name, files) {
 function diffSummary(currentDir, files) {
   const lines = [];
   const currentFiles = {};
-  if (existsSync115(currentDir)) {
+  if (existsSync116(currentDir)) {
     const walk2 = (sub) => {
       for (const ent of readdirSync43(sub, { withFileTypes: true })) {
         const full = join119(sub, ent.name);
@@ -128460,7 +128702,7 @@ function diffSummary(currentDir, files) {
         if (ent.isDirectory()) {
           walk2(full);
         } else if (ent.isFile()) {
-          currentFiles[rel.replace(/\\/g, "/")] = readFileSync102(full, "utf-8");
+          currentFiles[rel.replace(/\\/g, "/")] = readFileSync103(full, "utf-8");
         }
       }
     };
@@ -128488,8 +128730,8 @@ function diffSummary(currentDir, files) {
 `);
 }
 function writePayload(poolDir, name, files) {
-  if (!existsSync115(poolDir)) {
-    mkdirSync67(poolDir, { recursive: true, mode: 493 });
+  if (!existsSync116(poolDir)) {
+    mkdirSync68(poolDir, { recursive: true, mode: 493 });
   }
   const target = join119(poolDir, name);
   let targetIsSymlink = false;
@@ -128508,10 +128750,10 @@ function writePayload(poolDir, name, files) {
   try {
     for (const [path10, content] of Object.entries(files)) {
       const full = join119(staging, path10);
-      mkdirSync67(dirname50(full), { recursive: true, mode: 493 });
+      mkdirSync68(dirname51(full), { recursive: true, mode: 493 });
       const fd = openSync22(full, "wx");
       try {
-        writeFileSync49(fd, content);
+        writeFileSync50(fd, content);
       } finally {
         closeSync22(fd);
       }
@@ -128527,9 +128769,9 @@ function writePayload(poolDir, name, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${target}.skill-apply-old-${Date.now()}`;
-      renameSync31(target, oldRename);
+      renameSync32(target, oldRename);
     }
-    renameSync31(staging, target);
+    renameSync32(staging, target);
     if (oldRename) {
       rmSync24(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -128538,12 +128780,12 @@ function writePayload(poolDir, name, files) {
     try {
       rmSync24(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync115(oldRename)) {
+    if (oldRename && existsSync116(oldRename)) {
       try {
-        if (existsSync115(target)) {
+        if (existsSync116(target)) {
           rmSync24(target, { recursive: true, force: true });
         }
-        renameSync31(oldRename, target);
+        renameSync32(oldRename, target);
       } catch {}
     }
     throw err2;
@@ -128561,10 +128803,10 @@ function registerSkillCommand(program3) {
       files = loadFromStdin();
     } else {
       const fromPath = resolve61(opts.from);
-      if (!existsSync115(fromPath)) {
+      if (!existsSync116(fromPath)) {
         fail4(`--from path does not exist: ${opts.from}`);
       }
-      const st = statSync67(fromPath);
+      const st = statSync68(fromPath);
       if (st.isDirectory()) {
         files = loadFromDir(fromPath);
       } else if (isTarballPath(fromPath)) {
@@ -128622,20 +128864,20 @@ init_source();
 import {
   chmodSync as chmodSync19,
   closeSync as closeSync23,
-  existsSync as existsSync116,
+  existsSync as existsSync117,
   lstatSync as lstatSync16,
-  mkdirSync as mkdirSync68,
+  mkdirSync as mkdirSync69,
   mkdtempSync as mkdtempSync7,
   openSync as openSync23,
-  readFileSync as readFileSync103,
+  readFileSync as readFileSync104,
   readdirSync as readdirSync44,
-  renameSync as renameSync32,
+  renameSync as renameSync33,
   rmSync as rmSync25,
-  statSync as statSync68,
+  statSync as statSync69,
   utimesSync,
-  writeFileSync as writeFileSync50
+  writeFileSync as writeFileSync51
 } from "node:fs";
-import { dirname as dirname51, join as join120, relative as relative7, resolve as resolve62 } from "node:path";
+import { dirname as dirname52, join as join120, relative as relative7, resolve as resolve62 } from "node:path";
 import { homedir as homedir61, tmpdir as tmpdir8 } from "node:os";
 import { spawnSync as spawnSync25 } from "node:child_process";
 var PERSONAL_PREFIX = "personal-";
@@ -128645,14 +128887,14 @@ var PERSONAL_SKILLS_SUBPATH2 = "personal-skills";
 function resolveConfigSkillsDir(agent) {
   const override = process.env.SWITCHROOM_CONFIG_DIR;
   const candidate = override ? resolve62(override) : join120(homedir61(), ".switchroom-config");
-  if (!existsSync116(candidate))
+  if (!existsSync117(candidate))
     return null;
   return join120(candidate, "agents", agent, PERSONAL_SKILLS_SUBPATH2);
 }
 var MIRROR_PRIOR_TTL_MS = 24 * 60 * 60 * 1000;
 function sweepMirrorPriors(configSkillsRoot) {
   try {
-    if (!existsSync116(configSkillsRoot))
+    if (!existsSync117(configSkillsRoot))
       return;
     const now2 = Date.now();
     for (const ent of readdirSync44(configSkillsRoot)) {
@@ -128688,17 +128930,17 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     }
     if (liveSkillDir === null) {
       sweepMirrorPriors(configSkillsRoot);
-      if (existsSync116(dest)) {
+      if (existsSync117(dest)) {
         const trash = join120(configSkillsRoot, `.${name}-trash-${Date.now()}`);
-        renameSync32(dest, trash);
+        renameSync33(dest, trash);
       }
       return;
     }
-    mkdirSync68(configSkillsRoot, { recursive: true, mode: 493 });
+    mkdirSync69(configSkillsRoot, { recursive: true, mode: 493 });
     sweepMirrorPriors(configSkillsRoot);
     const staging = mkdtempSync7(join120(configSkillsRoot, `.${name}-staging-`));
     const walk2 = (src, dst) => {
-      mkdirSync68(dst, { recursive: true, mode: 493 });
+      mkdirSync69(dst, { recursive: true, mode: 493 });
       for (const ent of readdirSync44(src, { withFileTypes: true })) {
         const s = join120(src, ent.name);
         const d = join120(dst, ent.name);
@@ -128707,17 +128949,17 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
         if (ent.isDirectory())
           walk2(s, d);
         else if (ent.isFile()) {
-          writeFileSync50(d, readFileSync103(s));
+          writeFileSync51(d, readFileSync104(s));
         }
       }
     };
     walk2(liveSkillDir, staging);
     chmodSync19(staging, 493);
-    if (existsSync116(dest)) {
+    if (existsSync117(dest)) {
       const prior = join120(configSkillsRoot, `.${name}-prior-${Date.now()}`);
-      renameSync32(dest, prior);
+      renameSync33(dest, prior);
     }
-    renameSync32(staging, dest);
+    renameSync33(staging, dest);
   } catch (err2) {
     process.stderr.write(source_default.yellow(`warning: mirror to ${dest} failed (${err2.message ?? err2}); ` + `live copy still works, but this skill is not version-controlled until next successful sync.
 `));
@@ -128754,7 +128996,7 @@ function trashDir(agentsRoot, agent) {
 }
 function countPersonalSkills(agentsRoot, agent) {
   const skillsDir = join120(agentsRoot, agent, ".claude", "skills");
-  if (!existsSync116(skillsDir))
+  if (!existsSync117(skillsDir))
     return 0;
   let n = 0;
   for (const ent of readdirSync44(skillsDir, { withFileTypes: true })) {
@@ -128785,7 +129027,7 @@ function readStdinSync2() {
 }
 function loadFromDir2(dir) {
   const abs = resolve62(dir);
-  if (!statSync68(abs).isDirectory()) {
+  if (!statSync69(abs).isDirectory()) {
     fail5(`--from path is not a directory: ${dir}`);
   }
   const files = {};
@@ -128801,7 +129043,7 @@ function loadFromDir2(dir) {
       }
       if (ent.isFile()) {
         const rel = relative7(abs, full).replace(/\\/g, "/");
-        files[rel] = readFileSync103(full, "utf-8");
+        files[rel] = readFileSync104(full, "utf-8");
       }
     }
   };
@@ -128847,7 +129089,7 @@ function behavioralValidate(files) {
       const tmp = mkdtempSync7(join120(tmpdir8(), "skill-personal-py-"));
       const tmpPy = join120(tmp, "check.py");
       try {
-        writeFileSync50(tmpPy, content);
+        writeFileSync51(tmpPy, content);
         const r = spawnSync25("python3", ["-m", "py_compile", tmpPy], {
           encoding: "utf-8"
         });
@@ -128863,7 +129105,7 @@ function behavioralValidate(files) {
 }
 function sweepTrash(agentsRoot, agent) {
   const trash = trashDir(agentsRoot, agent);
-  if (!existsSync116(trash))
+  if (!existsSync117(trash))
     return;
   const now2 = Date.now();
   for (const ent of readdirSync44(trash, { withFileTypes: true })) {
@@ -128871,7 +129113,7 @@ function sweepTrash(agentsRoot, agent) {
       continue;
     const entPath = join120(trash, ent.name);
     try {
-      const st = statSync68(entPath);
+      const st = statSync69(entPath);
       if (now2 - st.mtimeMs > TRASH_TTL_MS) {
         rmSync25(entPath, { recursive: true, force: true });
       }
@@ -128889,17 +129131,17 @@ function writePersonalSkill(targetDir, files) {
   if (targetIsSymlink) {
     fail5(`refusing to overwrite symlink at ${targetDir}; investigate manually`);
   }
-  mkdirSync68(dirname51(targetDir), { recursive: true, mode: 493 });
-  const staging = mkdtempSync7(join120(dirname51(targetDir), `.skill-personal-stage-`));
+  mkdirSync69(dirname52(targetDir), { recursive: true, mode: 493 });
+  const staging = mkdtempSync7(join120(dirname52(targetDir), `.skill-personal-stage-`));
   chmodSync19(staging, 493);
   let oldRename = null;
   try {
     for (const [path10, content] of Object.entries(files)) {
       const full = join120(staging, path10);
-      mkdirSync68(dirname51(full), { recursive: true, mode: 493 });
+      mkdirSync69(dirname52(full), { recursive: true, mode: 493 });
       const fd = openSync23(full, "wx");
       try {
-        writeFileSync50(fd, content);
+        writeFileSync51(fd, content);
       } finally {
         closeSync23(fd);
       }
@@ -128915,9 +129157,9 @@ function writePersonalSkill(targetDir, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${targetDir}.personal-old-${Date.now()}`;
-      renameSync32(targetDir, oldRename);
+      renameSync33(targetDir, oldRename);
     }
-    renameSync32(staging, targetDir);
+    renameSync33(staging, targetDir);
     if (oldRename) {
       rmSync25(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -128926,12 +129168,12 @@ function writePersonalSkill(targetDir, files) {
     try {
       rmSync25(staging, { recursive: true, force: true });
     } catch {}
-    if (oldRename && existsSync116(oldRename)) {
+    if (oldRename && existsSync117(oldRename)) {
       try {
-        if (existsSync116(targetDir)) {
+        if (existsSync117(targetDir)) {
           rmSync25(targetDir, { recursive: true, force: true });
         }
-        renameSync32(oldRename, targetDir);
+        renameSync33(oldRename, targetDir);
       } catch {}
     }
     throw err2;
@@ -128994,15 +129236,15 @@ function loadFiles(opts) {
     return loadFromStdin2();
   }
   const p = resolve62(opts.from);
-  if (!existsSync116(p)) {
+  if (!existsSync117(p)) {
     fail5(`--from path does not exist: ${opts.from}`);
   }
-  const st = statSync68(p);
+  const st = statSync69(p);
   if (st.isDirectory()) {
     return loadFromDir2(p);
   }
   if (p.endsWith(".md")) {
-    return { "SKILL.md": readFileSync103(p, "utf-8") };
+    return { "SKILL.md": readFileSync104(p, "utf-8") };
   }
   fail5(`--from must be a directory or a .md file. Got: ${opts.from}`);
 }
@@ -129056,7 +129298,7 @@ function resolveCloneSource(source, opts) {
   const slug = m[2];
   const root = tier === "bundled" ? opts.bundledRoot ?? defaultBundledRoot() : opts.sharedRoot ?? defaultSharedRoot();
   const dir = join120(root, slug);
-  if (!existsSync116(dir)) {
+  if (!existsSync117(dir)) {
     fail5(`clone source ${JSON.stringify(source)} not found at ${dir}; ` + `check \`switchroom skill search --tier ${tier}\``, 1);
   }
   const st = lstatSync16(dir);
@@ -129091,7 +129333,7 @@ function readSourceFiles(dir) {
             fail5(`clone source has oversized file ${rel} (${st.size} bytes > ${CLONE_MAX_FILE_BYTES}); ` + `refuse to read`, 3);
           }
         } catch {}
-        files[rel] = readFileSync103(full, "utf-8");
+        files[rel] = readFileSync104(full, "utf-8");
       }
     }
   };
@@ -129180,10 +129422,10 @@ function removePersonalAction(name, opts) {
     throw err2;
   }
   const trashRoot2 = trashDir(agentsRoot, agent);
-  mkdirSync68(trashRoot2, { recursive: true, mode: 493 });
+  mkdirSync69(trashRoot2, { recursive: true, mode: 493 });
   const ts = Date.now();
   const trashTarget = join120(trashRoot2, `${name}-${ts}`);
-  renameSync32(target, trashTarget);
+  renameSync33(target, trashTarget);
   const now2 = new Date(ts);
   utimesSync(trashTarget, now2, now2);
   mirrorToConfigRepo(agent, name, null);
@@ -129203,7 +129445,7 @@ function listPersonalAction(opts) {
   sweepTrash(agentsRoot, agent);
   const skillsDir = join120(agentsRoot, agent, ".claude", "skills");
   const personal = [];
-  if (existsSync116(skillsDir)) {
+  if (existsSync117(skillsDir)) {
     for (const ent of readdirSync44(skillsDir, { withFileTypes: true })) {
       if (!ent.isDirectory())
         continue;
@@ -129218,7 +129460,7 @@ function listPersonalAction(opts) {
           if (e.isFile()) {
             fileCount += 1;
             try {
-              totalBytes += statSync68(join120(sub, e.name)).size;
+              totalBytes += statSync69(join120(sub, e.name)).size;
             } catch {}
           } else if (e.isDirectory()) {
             walk2(join120(sub, e.name));
@@ -129261,7 +129503,7 @@ function registerSkillPersonalCommands(program3) {
 import { createConnection as createConnection4 } from "node:net";
 import { homedir as homedir62 } from "node:os";
 import { join as join121 } from "node:path";
-import { readFileSync as readFileSync104 } from "node:fs";
+import { readFileSync as readFileSync105 } from "node:fs";
 
 // src/self-improve/skill-proposals.ts
 var REJECTION_TTL_MS = 90 * 24 * 60 * 60 * 1000;
@@ -129350,7 +129592,7 @@ function registerSelfImproveProposeSkillCommand(program3) {
     }
     let draft;
     try {
-      draft = JSON.parse(readFileSync104(opts.draft, "utf-8"));
+      draft = JSON.parse(readFileSync105(opts.draft, "utf-8"));
     } catch (e) {
       fail6(`failed to read/parse --draft: ${e.message}`);
     }
@@ -129389,10 +129631,10 @@ function registerSelfImproveProposeSkillCommand(program3) {
 import { createConnection as createConnection5 } from "node:net";
 import { homedir as homedir63 } from "node:os";
 import { join as join125, resolve as resolve63, sep as sep10 } from "node:path";
-import { existsSync as existsSync121, readFileSync as readFileSync109, realpathSync as realpathSync11 } from "node:fs";
+import { existsSync as existsSync122, readFileSync as readFileSync110, realpathSync as realpathSync11 } from "node:fs";
 
 // src/self-improve/apply-guard.ts
-import { existsSync as existsSync119, lstatSync as lstatSync17, readFileSync as readFileSync107, statSync as statSync70 } from "node:fs";
+import { existsSync as existsSync120, lstatSync as lstatSync17, readFileSync as readFileSync108, statSync as statSync71 } from "node:fs";
 
 // src/self-improve/config.ts
 function intEnv(name, def) {
@@ -129413,7 +129655,7 @@ function resolveSelfImproveConfig() {
 }
 
 // src/self-improve/eval-gate.ts
-import { existsSync as existsSync117, readFileSync as readFileSync105, readdirSync as readdirSync45, statSync as statSync69 } from "node:fs";
+import { existsSync as existsSync118, readFileSync as readFileSync106, readdirSync as readdirSync45, statSync as statSync70 } from "node:fs";
 import { join as join122 } from "node:path";
 import { spawnSync as spawnSync26 } from "node:child_process";
 function evalsJsonPath(skillDir) {
@@ -129421,10 +129663,10 @@ function evalsJsonPath(skillDir) {
 }
 function skillHasEvals(skillDir) {
   const p = evalsJsonPath(skillDir);
-  if (!existsSync117(p))
+  if (!existsSync118(p))
     return false;
   try {
-    const parsed = JSON.parse(readFileSync105(p, "utf-8"));
+    const parsed = JSON.parse(readFileSync106(p, "utf-8"));
     return Array.isArray(parsed.evals) && parsed.evals.length > 0;
   } catch {
     return false;
@@ -129432,7 +129674,7 @@ function skillHasEvals(skillDir) {
 }
 function aggregateBenchmark(benchmarkDir, repoRoot, pythonBin = process.env.SWITCHROOM_PYTHON ?? "python3") {
   const script = join122(repoRoot, "skills", "skill-creator", "scripts", "aggregate_benchmark.py");
-  if (!existsSync117(script)) {
+  if (!existsSync118(script)) {
     return { ok: false, error: `aggregate_benchmark.py not found at ${script}` };
   }
   const r = spawnSync26(pythonBin, [script, benchmarkDir], {
@@ -129449,7 +129691,7 @@ function aggregateBenchmark(benchmarkDir, repoRoot, pythonBin = process.env.SWIT
 }
 function isBenchmarkDir(dir) {
   try {
-    if (!statSync69(dir).isDirectory())
+    if (!statSync70(dir).isDirectory())
       return false;
   } catch {
     return false;
@@ -129464,7 +129706,7 @@ function isBenchmarkDir(dir) {
   if (hasEvalDirs(dir))
     return true;
   const runs = join122(dir, "runs");
-  return existsSync117(runs) && hasEvalDirs(runs);
+  return existsSync118(runs) && hasEvalDirs(runs);
 }
 function resolveBenchmarkDir(baseDir, explicit) {
   if (explicit != null && explicit.length > 0) {
@@ -129480,7 +129722,7 @@ function resolveBenchmarkDir(baseDir, explicit) {
   }
   if (entries.length === 0)
     return null;
-  entries.sort((a, b) => statSync69(b).mtimeMs - statSync69(a).mtimeMs);
+  entries.sort((a, b) => statSync70(b).mtimeMs - statSync70(a).mtimeMs);
   return entries[0];
 }
 var CANDIDATE_CONFIGS = ["with_skill", "candidate", "new_skill", "after"];
@@ -129497,7 +129739,7 @@ function pickPassRate(summary, names) {
 function evalVerdict(benchmarkJson, _cfg = resolveSelfImproveConfig()) {
   let bench;
   try {
-    bench = JSON.parse(readFileSync105(benchmarkJson, "utf-8"));
+    bench = JSON.parse(readFileSync106(benchmarkJson, "utf-8"));
   } catch (err2) {
     return { pass: false, reason: `unreadable benchmark.json: ${err2.message}` };
   }
@@ -129543,16 +129785,16 @@ function floatEnv(name, def) {
 import {
   closeSync as closeSync24,
   copyFileSync as copyFileSync15,
-  existsSync as existsSync118,
-  mkdirSync as mkdirSync69,
+  existsSync as existsSync119,
+  mkdirSync as mkdirSync70,
   openSync as openSync24,
-  readFileSync as readFileSync106,
+  readFileSync as readFileSync107,
   readdirSync as readdirSync46,
-  renameSync as renameSync33,
-  writeFileSync as writeFileSync51,
+  renameSync as renameSync34,
+  writeFileSync as writeFileSync52,
   writeSync as writeSync12
 } from "node:fs";
-import { dirname as dirname52, join as join123 } from "node:path";
+import { dirname as dirname53, join as join123 } from "node:path";
 import { createHash as createHash22 } from "node:crypto";
 
 // src/self-improve/pii-scan.ts
@@ -129690,10 +129932,10 @@ function caseFingerprint(prompt) {
 }
 function readEvalsDoc(skillDir) {
   const p = evalsJsonPath(skillDir);
-  if (!existsSync118(p))
+  if (!existsSync119(p))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync106(p, "utf-8"));
+    const parsed = JSON.parse(readFileSync107(p, "utf-8"));
     if (!parsed || typeof parsed !== "object" || !Array.isArray(parsed.evals)) {
       return null;
     }
@@ -129703,10 +129945,10 @@ function readEvalsDoc(skillDir) {
   }
 }
 function writeAtomic(path10, content) {
-  mkdirSync69(dirname52(path10), { recursive: true });
+  mkdirSync70(dirname53(path10), { recursive: true });
   const tmp = `${path10}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync51(tmp, content, { encoding: "utf-8", mode: 420 });
-  renameSync33(tmp, path10);
+  writeFileSync52(tmp, content, { encoding: "utf-8", mode: 420 });
+  renameSync34(tmp, path10);
 }
 function appendEvalCase(skillDir, slug, input) {
   const parsed = parseEvalCase(input);
@@ -129714,7 +129956,7 @@ function appendEvalCase(skillDir, slug, input) {
     return { ok: false, reason: parsed.error };
   const ec = parsed.case;
   const existingDoc = readEvalsDoc(skillDir);
-  if (existingDoc === null && existsSync118(evalsJsonPath(skillDir))) {
+  if (existingDoc === null && existsSync119(evalsJsonPath(skillDir))) {
     return {
       ok: false,
       reason: "evals.json exists but is unparseable or malformed \u2014 refusing to " + "overwrite it (fix or remove the file first)"
@@ -129746,11 +129988,11 @@ function heldOutPath(stateDir) {
 }
 function heldOutHasFingerprint(stateDir, slug, fp) {
   const path10 = heldOutPath(stateDir);
-  if (!existsSync118(path10))
+  if (!existsSync119(path10))
     return false;
   let text;
   try {
-    text = readFileSync106(path10, "utf-8");
+    text = readFileSync107(path10, "utf-8");
   } catch {
     return false;
   }
@@ -129778,7 +130020,7 @@ function appendHeldOutCase(stateDir, slug, ec, opts = {}) {
     };
   }
   const now2 = opts.now ?? Date.now;
-  mkdirSync69(stateDir, { recursive: true });
+  mkdirSync70(stateDir, { recursive: true });
   const fd = openSync24(heldOutPath(stateDir), "a");
   try {
     writeSync12(fd, JSON.stringify({ at: new Date(now2()).toISOString(), slug, case: ec }) + `
@@ -129798,20 +130040,20 @@ function baselineEvalsPath(stateDir, slug) {
 }
 function evalsSha256(skillDir) {
   const p = evalsJsonPath(skillDir);
-  if (!existsSync118(p))
+  if (!existsSync119(p))
     return null;
   try {
-    return createHash22("sha256").update(readFileSync106(p)).digest("hex");
+    return createHash22("sha256").update(readFileSync107(p)).digest("hex");
   } catch {
     return null;
   }
 }
 function readManifest(stateDir) {
   const p = manifestPath(stateDir);
-  if (!existsSync118(p))
+  if (!existsSync119(p))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync106(p, "utf-8"));
+    const parsed = JSON.parse(readFileSync107(p, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -129830,7 +130072,7 @@ function recordEvalBaseline(stateDir, slug, skillDir, opts = {}) {
   m[slug] = { sha256: sha, updated_at: new Date(now2()).toISOString(), skill_dir: skillDir };
   writeManifest(stateDir, m);
   const snap = baselineEvalsPath(stateDir, slug);
-  mkdirSync69(dirname52(snap), { recursive: true });
+  mkdirSync70(dirname53(snap), { recursive: true });
   copyFileSync15(evalsJsonPath(skillDir), snap);
 }
 
@@ -129850,13 +130092,13 @@ function ownsSkill(skillDir) {
 // src/self-improve/eval-case-proposals.ts
 import {
   closeSync as closeSync25,
-  existsSync as existsSync120,
-  mkdirSync as mkdirSync70,
+  existsSync as existsSync121,
+  mkdirSync as mkdirSync71,
   openSync as openSync25,
-  readFileSync as readFileSync108,
-  renameSync as renameSync34,
+  readFileSync as readFileSync109,
+  renameSync as renameSync35,
   unlinkSync as unlinkSync24,
-  writeFileSync as writeFileSync52,
+  writeFileSync as writeFileSync53,
   writeSync as writeSync13
 } from "node:fs";
 import { join as join124 } from "node:path";
@@ -129869,11 +130111,11 @@ function isRecord2(v) {
 }
 function readEvalCaseProposals(stateDir) {
   const p = proposalsPath(stateDir);
-  if (!existsSync120(p))
+  if (!existsSync121(p))
     return [];
   let raw;
   try {
-    raw = readFileSync108(p, "utf-8");
+    raw = readFileSync109(p, "utf-8");
   } catch {
     return [];
   }
@@ -129972,7 +130214,7 @@ function buildCaseFromOpts(opts) {
   let raw;
   if (opts.case) {
     try {
-      raw = JSON.parse(readFileSync109(opts.case, "utf-8"));
+      raw = JSON.parse(readFileSync110(opts.case, "utf-8"));
     } catch (e) {
       fail7(`failed to read/parse --case: ${e.message}`);
     }
@@ -130066,7 +130308,7 @@ function registerApply(parent) {
       }));
       process.exit(0);
     }
-    if (!existsSync121(proposal.skill_dir)) {
+    if (!existsSync122(proposal.skill_dir)) {
       fail7(`skill dir gone: ${proposal.skill_dir}`);
     }
     const { dir, resolvedDir } = authorizeApplyTarget(proposal.skill_dir, proposal.skill_slug);
@@ -130104,7 +130346,7 @@ function registerSelfImproveEvalCaseCommands(program3) {
 
 // src/cli/self-improve-bench.ts
 import { homedir as homedir64 } from "node:os";
-import { dirname as dirname53, join as join126 } from "node:path";
+import { dirname as dirname54, join as join126 } from "node:path";
 init_shipped_assets();
 function fail8(msg, code = 1) {
   console.error(msg);
@@ -130129,7 +130371,7 @@ function resolveAggregatorRepoRoot() {
 `);
     return null;
   }
-  return dirname53(res.path);
+  return dirname54(res.path);
 }
 function registerSelfImproveBenchCommand(program3) {
   const parent = program3.commands.find((c) => c.name() === "self-improve") ?? program3.command("self-improve").description("Agent self-improvement ops");
@@ -130179,7 +130421,7 @@ function registerSelfImproveBenchCommand(program3) {
 init_esm();
 init_helpers();
 var import_yaml26 = __toESM(require_dist(), 1);
-import { existsSync as existsSync122, readdirSync as readdirSync47, readFileSync as readFileSync110, statSync as statSync71 } from "node:fs";
+import { existsSync as existsSync123, readdirSync as readdirSync47, readFileSync as readFileSync111, statSync as statSync72 } from "node:fs";
 import { homedir as homedir65 } from "node:os";
 import { join as join127, resolve as resolve64 } from "node:path";
 var PERSONAL_PREFIX2 = "personal-";
@@ -130196,11 +130438,11 @@ function defaultBundledRoot2() {
 }
 function readSkillFrontmatter(skillDir) {
   const mdPath = join127(skillDir, "SKILL.md");
-  if (!existsSync122(mdPath))
+  if (!existsSync123(mdPath))
     return null;
   let content;
   try {
-    content = readFileSync110(mdPath, "utf-8");
+    content = readFileSync111(mdPath, "utf-8");
   } catch {
     return null;
   }
@@ -130230,7 +130472,7 @@ function readSkillFrontmatter(skillDir) {
 function statSkillMd(skillDir) {
   const mdPath = join127(skillDir, "SKILL.md");
   try {
-    const st = statSync71(mdPath);
+    const st = statSync72(mdPath);
     return { size: st.size, mtime: st.mtime.toISOString() };
   } catch {
     return null;
@@ -130240,7 +130482,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   if (!AGENT_NAME_RE3.test(agent))
     return [];
   const skillsDir = join127(agentsRoot, agent, ".claude/skills");
-  if (!existsSync122(skillsDir))
+  if (!existsSync123(skillsDir))
     return [];
   const out = [];
   let entries;
@@ -130254,7 +130496,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
       continue;
     const dirPath = join127(skillsDir, ent);
     try {
-      if (!statSync71(dirPath).isDirectory())
+      if (!statSync72(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -130278,7 +130520,7 @@ function listPersonalSkills(agent, agentsRoot = defaultAgentsRoot()) {
   return out;
 }
 function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
-  if (!existsSync122(sharedRoot))
+  if (!existsSync123(sharedRoot))
     return [];
   const out = [];
   let entries;
@@ -130294,7 +130536,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
       continue;
     const dirPath = join127(sharedRoot, ent);
     try {
-      if (!statSync71(dirPath).isDirectory())
+      if (!statSync72(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -130316,7 +130558,7 @@ function listSharedSkills(sharedRoot = defaultSharedRoot2()) {
   return out;
 }
 function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
-  if (!existsSync122(bundledRoot))
+  if (!existsSync123(bundledRoot))
     return [];
   const out = [];
   let entries;
@@ -130330,7 +130572,7 @@ function listBundledSkills(bundledRoot = defaultBundledRoot2()) {
       continue;
     const dirPath = join127(bundledRoot, ent);
     try {
-      if (!statSync71(dirPath).isDirectory())
+      if (!statSync72(dirPath).isDirectory())
         continue;
     } catch {
       continue;
@@ -130475,11 +130717,11 @@ init_helpers();
 init_docker_socket();
 init_operator_uid();
 import {
-  existsSync as existsSync124,
-  mkdirSync as mkdirSync71,
+  existsSync as existsSync125,
+  mkdirSync as mkdirSync72,
   readdirSync as readdirSync48,
-  writeFileSync as writeFileSync53,
-  statSync as statSync72,
+  writeFileSync as writeFileSync54,
+  statSync as statSync73,
   lstatSync as lstatSync18,
   realpathSync as realpathSync12,
   copyFileSync as copyFileSync16
@@ -130858,7 +131100,7 @@ function resolveHostdSkillsTarget(hostHome) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills is a symlink whose target ` + `does not resolve (dangling) \u2014 skipping the skills bind mount. Bundled ` + `skills will be unavailable to rollout/update until the symlink is fixed.`);
     return;
   }
-  if (!existsSync124(target)) {
+  if (!existsSync125(target)) {
     console.warn(`switchroom hostd install: ~/.switchroom/skills resolves to "${target}", ` + `which does not exist \u2014 skipping the skills bind mount. Bundled skills ` + `will be unavailable to rollout/update until the symlink target exists.`);
     return;
   }
@@ -130872,7 +131114,7 @@ function hostdComposePath() {
 }
 function backupExistingCompose() {
   const p = hostdComposePath();
-  if (!existsSync124(p))
+  if (!existsSync125(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -130905,7 +131147,7 @@ async function doInstall(opts, program3) {
   }
   const dir = hostdDir();
   const composePath = hostdComposePath();
-  mkdirSync71(dir, { recursive: true });
+  mkdirSync72(dir, { recursive: true });
   const imageTag = resolveHostdImageTag(opts.tag, cfg.release);
   const guard = checkDowngrade({
     container: "switchroom-hostd",
@@ -130939,7 +131181,7 @@ async function doInstall(opts, program3) {
   const bak = backupExistingCompose();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync53(composePath, yaml, "utf8");
+  writeFileSync54(composePath, yaml, "utf8");
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
   const adminAgents = Object.entries(cfg.agents ?? {}).filter(([, a]) => a?.admin === true).map(([name]) => name);
   console.log(source_default.dim(`    agents served (one socket each): ${allAgents.length === 0 ? "(none)" : allAgents.join(", ")}`));
@@ -130971,7 +131213,7 @@ function doStatus() {
   const composeYml = hostdComposePath();
   console.log(source_default.bold("switchroom-hostd"));
   console.log("");
-  if (!existsSync124(composeYml)) {
+  if (!existsSync125(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom hostd install` to set up."));
     return;
@@ -130992,15 +131234,15 @@ function doStatus() {
   } else {
     console.log(source_default.green(`  container:  ${ps.stdout.trim()}`));
   }
-  if (existsSync124(dir)) {
+  if (existsSync125(dir)) {
     const entries = [];
     try {
       for (const name of readdirSync48(dir)) {
         if (name === "docker-compose.yml" || name.startsWith("docker-compose.yml."))
           continue;
         const sockPath = join128(dir, name, "sock");
-        if (existsSync124(sockPath)) {
-          const st = statSync72(sockPath);
+        if (existsSync125(sockPath)) {
+          const st = statSync73(sockPath);
           if ((st.mode & 61440) === 49152) {
             entries.push(`${name} \u2192 ${sockPath}`);
           }
@@ -131018,7 +131260,7 @@ function doStatus() {
 }
 function doUninstall() {
   const composeYml = hostdComposePath();
-  if (!existsSync124(composeYml)) {
+  if (!existsSync125(composeYml)) {
     console.log(source_default.yellow("  No hostd install detected (no compose file at this path)."));
     return;
   }
@@ -131042,7 +131284,7 @@ function registerHostdCommand(program3) {
   hostd.command("uninstall").description("Stop the hostd container. Leaves the compose file in place for re-install.").action(() => doUninstall());
   hostd.command("audit").description("Tail and filter the hostd audit log (privileged-verb call history)").option("--tail <n>", "Number of matching entries to show (default: 50)", "50").option("--agent <name>", "Filter to a specific caller agent").option("--op <verb>", "Filter to a specific hostd verb (e.g. update_apply, agent_restart)").option("--error", "Show only failed (error/denied) entries").option("--verbose", "Show the captured stderr / error tail under each failed row").option("--path <file>", "Override audit log path (for debugging)").action((opts) => {
     const logPath = opts.path ?? defaultAuditLogPath2();
-    if (!existsSync124(logPath)) {
+    if (!existsSync125(logPath)) {
       console.error(source_default.yellow(`Audit log not found at ${logPath}.`) + source_default.gray(`
 The log is created when hostd handles its first privileged-verb request.`));
       return;
@@ -131091,7 +131333,7 @@ init_source();
 init_helpers();
 init_operator_uid();
 init_compose();
-import { chownSync as chownSync15, existsSync as existsSync125, mkdirSync as mkdirSync72, writeFileSync as writeFileSync54, copyFileSync as copyFileSync17 } from "node:fs";
+import { chownSync as chownSync16, existsSync as existsSync126, mkdirSync as mkdirSync73, writeFileSync as writeFileSync55, copyFileSync as copyFileSync17 } from "node:fs";
 import { homedir as homedir67 } from "node:os";
 import { join as join129 } from "node:path";
 import { spawnSync as spawnSync30 } from "node:child_process";
@@ -131202,7 +131444,7 @@ function webdComposePath() {
 }
 function backupExistingCompose2() {
   const p = webdComposePath();
-  if (!existsSync125(p))
+  if (!existsSync126(p))
     return null;
   const ts = new Date().toISOString().replace(/[:.]/g, "-");
   const bak = `${p}.bak-${ts}`;
@@ -131233,7 +131475,7 @@ async function doInstall2(opts, program3) {
   }
   const dir = webdDir();
   const composePath = webdComposePath();
-  mkdirSync72(dir, { recursive: true });
+  mkdirSync73(dir, { recursive: true });
   const cfg = getConfig(program3);
   const imageTag = resolveWebImageTag(opts.tag, cfg.release);
   const port = cfg.web_service?.port ?? 8080;
@@ -131268,13 +131510,13 @@ async function doInstall2(opts, program3) {
   const bak = backupExistingCompose2();
   if (bak)
     console.log(source_default.dim(`  Backed up existing compose to ${bak}`));
-  writeFileSync54(composePath, yaml, "utf8");
+  writeFileSync55(composePath, yaml, "utf8");
   try {
     if (typeof process.geteuid === "function" && process.geteuid() === 0) {
-      chownSync15(dir, operatorUid, operatorUid);
-      chownSync15(composePath, operatorUid, operatorUid);
+      chownSync16(dir, operatorUid, operatorUid);
+      chownSync16(composePath, operatorUid, operatorUid);
       if (bak)
-        chownSync15(bak, operatorUid, operatorUid);
+        chownSync16(bak, operatorUid, operatorUid);
     }
   } catch {}
   console.log(source_default.green(`  \u2713 Wrote ${composePath}`));
@@ -131310,7 +131552,7 @@ function doStatus2() {
   const composeYml = webdComposePath();
   console.log(source_default.bold("switchroom-web"));
   console.log("");
-  if (!existsSync125(composeYml)) {
+  if (!existsSync126(composeYml)) {
     console.log(source_default.yellow("  compose:    not installed"));
     console.log(source_default.dim("              run `switchroom webd install` to set up."));
     return;
@@ -131334,7 +131576,7 @@ function doStatus2() {
 }
 function doUninstall2() {
   const composeYml = webdComposePath();
-  if (!existsSync125(composeYml)) {
+  if (!existsSync126(composeYml)) {
     console.log(source_default.yellow("  No web-service install detected (no compose file at this path)."));
     return;
   }
@@ -131830,7 +132072,7 @@ function printDeepDiveBrief(targets) {
 
 // src/cli/hindsight-watch.ts
 init_source();
-import { existsSync as existsSync130, readdirSync as readdirSync53 } from "node:fs";
+import { existsSync as existsSync131, readdirSync as readdirSync53 } from "node:fs";
 import { homedir as homedir71 } from "node:os";
 import { join as join133, resolve as resolve67 } from "node:path";
 
@@ -131901,7 +132143,7 @@ init_install_cron();
 
 // src/hindsight-watch/probe.ts
 import { spawnSync as spawnSync32 } from "node:child_process";
-import { readFileSync as readFileSync115, readdirSync as readdirSync52, statSync as statSync74 } from "node:fs";
+import { readFileSync as readFileSync116, readdirSync as readdirSync52, statSync as statSync75 } from "node:fs";
 import { homedir as homedir70 } from "node:os";
 import { resolve as resolve66 } from "node:path";
 
@@ -132029,7 +132271,7 @@ function readLlmSignals(series) {
 }
 
 // src/hindsight-watch/recall-log.ts
-import { closeSync as closeSync26, existsSync as existsSync129, openSync as openSync26, readdirSync as readdirSync51, readSync as readSync7, statSync as statSync73 } from "node:fs";
+import { closeSync as closeSync26, existsSync as existsSync130, openSync as openSync26, readdirSync as readdirSync51, readSync as readSync7, statSync as statSync74 } from "node:fs";
 import { join as join132 } from "node:path";
 var RECALL_WINDOW_ROWS = 200;
 var RECALL_MAX_TAIL_BYTES = 1024 * 1024;
@@ -132038,13 +132280,13 @@ function recallLogPath2(agentDir) {
   return join132(agentDir, ".claude", "plugins", "data", "hindsight-memory-inline", "state", "recall_log.jsonl");
 }
 function readRecallLogTail2(path10, windowRows = RECALL_WINDOW_ROWS) {
-  if (!existsSync129(path10))
+  if (!existsSync130(path10))
     return [];
   let text;
   let truncatedHead = false;
   let fd;
   try {
-    const size = statSync73(path10).size;
+    const size = statSync74(path10).size;
     const start = Math.max(0, size - RECALL_MAX_TAIL_BYTES);
     truncatedHead = start > 0;
     const length = size - start;
@@ -132292,9 +132534,9 @@ function readDropCount(hindsightDir) {
   const path10 = resolve66(hindsightDir, "pending-drops.json");
   let parsed;
   try {
-    if (statSync74(path10).size > DROPS_LEDGER_MAX_BYTES)
+    if (statSync75(path10).size > DROPS_LEDGER_MAX_BYTES)
       return 0;
-    parsed = JSON.parse(readFileSync115(path10, "utf8"));
+    parsed = JSON.parse(readFileSync116(path10, "utf8"));
   } catch {
     return 0;
   }
@@ -133598,7 +133840,7 @@ function collectRelayCandidates(agentsDir) {
   const candidates = [];
   for (const name of readdirSync53(agentsDir).sort()) {
     const sock = resolve67(agentsDir, name, "telegram", "gateway.sock");
-    if (existsSync130(sock))
+    if (existsSync131(sock))
       candidates.push({ agent: name, sock });
   }
   return orderRelayCandidates(candidates);
@@ -133618,10 +133860,276 @@ async function notifyOperator(agentsDir, text, log) {
   return agent !== null;
 }
 
+// src/cli/mental-model-refresh.ts
+init_source();
+init_helpers();
+init_hindsight2();
+init_hindsight();
+
+// src/memory/mental-model-refresh.ts
+init_hindsight2();
+var DEFAULT_STALE_DAYS = 7;
+var DEFAULT_REFRESH_TIMEOUT_MS = 30000;
+var INIT_TIMEOUT_MS = 3000;
+function parseMcpBody(text) {
+  const dataLine = text.split(`
+`).find((line) => line.startsWith("data: "));
+  const payload = dataLine ? dataLine.slice("data: ".length) : text;
+  return JSON.parse(payload);
+}
+async function refreshMentalModel2(mcpUrl, bankId, modelId, opts) {
+  const fetchImpl = opts?.fetchImpl ?? fetch;
+  const timeoutMs = opts?.timeoutMs ?? DEFAULT_REFRESH_TIMEOUT_MS;
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json, text/event-stream",
+    "X-Bank-Id": bankId
+  };
+  try {
+    await fetchImpl(mcpUrl, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+          protocolVersion: "2024-11-05",
+          capabilities: {},
+          clientInfo: { name: "mm-refresh", version: "0.1" }
+        }
+      }),
+      signal: AbortSignal.timeout(INIT_TIMEOUT_MS)
+    });
+  } catch {}
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const resp = await fetchImpl(mcpUrl, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 2,
+        method: "tools/call",
+        params: {
+          name: "refresh_mental_model",
+          arguments: { mental_model_id: modelId }
+        }
+      }),
+      signal: controller.signal
+    });
+    if (!resp.ok)
+      return { ok: false, reason: `HTTP ${resp.status}` };
+    const parsed = parseMcpBody(await resp.text());
+    if (parsed.result?.isError === true) {
+      return {
+        ok: false,
+        reason: parsed.result.content?.[0]?.text ?? "refresh returned isError"
+      };
+    }
+    return { ok: true };
+  } catch (err2) {
+    if (err2.name === "AbortError")
+      return { ok: false, reason: "Timeout" };
+    return { ok: false, reason: String(err2.message ?? err2) };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function refreshStaleModelsInBank(mcpUrl, bankId, opts) {
+  const staleDays = opts?.staleDays ?? DEFAULT_STALE_DAYS;
+  const now2 = opts?.now ?? new Date;
+  const dryRun = opts?.dryRun ?? false;
+  const health = await inspectBankHealth(mcpUrl, bankId, {
+    fetchImpl: opts?.fetchImpl,
+    timeoutMs: opts?.timeoutMs
+  });
+  if (!health.ok) {
+    return {
+      bankId,
+      ok: false,
+      reason: health.reason,
+      totalModels: 0,
+      staleModels: 0,
+      refreshed: 0,
+      failed: 0,
+      dryRun,
+      models: []
+    };
+  }
+  const stale = staleMentalModels(health.mentalModels, staleDays, now2);
+  const models = [];
+  let refreshed = 0;
+  let failed = 0;
+  for (const m of stale) {
+    const age = ageDays(m.lastRefreshedAt ?? m.createdAt, now2);
+    if (dryRun) {
+      models.push({ id: m.id, name: m.name, ageDays: age, refreshed: false });
+      continue;
+    }
+    const res = await refreshMentalModel2(mcpUrl, bankId, m.id, {
+      fetchImpl: opts?.fetchImpl,
+      timeoutMs: opts?.timeoutMs
+    });
+    if (res.ok) {
+      refreshed++;
+      models.push({ id: m.id, name: m.name, ageDays: age, refreshed: true });
+    } else {
+      failed++;
+      models.push({ id: m.id, name: m.name, ageDays: age, refreshed: false, reason: res.reason });
+    }
+  }
+  return {
+    bankId,
+    ok: true,
+    totalModels: health.mentalModels.length,
+    staleModels: stale.length,
+    refreshed,
+    failed,
+    dryRun,
+    models
+  };
+}
+function collectRefreshBanks(config2) {
+  const banks = new Set;
+  for (const [agentName, agentConfig] of Object.entries(config2.agents)) {
+    banks.add(agentConfig.memory?.collection ?? agentName);
+  }
+  for (const bank of collectProfileBanks(config2))
+    banks.add(bank);
+  return [...banks].sort();
+}
+async function runMentalModelRefresh(opts) {
+  const banks = [];
+  let totalRefreshed = 0;
+  let totalFailed = 0;
+  for (const bankId of opts.bankIds) {
+    const r = await refreshStaleModelsInBank(opts.mcpUrl, bankId, {
+      staleDays: opts.staleDays,
+      now: opts.now,
+      dryRun: opts.dryRun,
+      fetchImpl: opts.fetchImpl,
+      timeoutMs: opts.timeoutMs
+    });
+    banks.push(r);
+    totalRefreshed += r.refreshed;
+    totalFailed += r.failed;
+    if (opts.log) {
+      opts.log(r.ok ? `${r.bankId}: ${r.staleModels}/${r.totalModels} stale, ` + `${r.dryRun ? "would refresh" : "refreshed"} ${r.dryRun ? r.staleModels : r.refreshed}` + (r.failed > 0 ? `, ${r.failed} failed` : "") : `${r.bankId}: could not inspect (${r.reason})`);
+    }
+  }
+  const couldNotComplete = banks.length > 0 && banks.every((b) => !b.ok);
+  return { banks, totalRefreshed, totalFailed, couldNotComplete };
+}
+
+// src/cli/mental-model-refresh.ts
+function registerMentalModelRefreshCommand(program3) {
+  program3.command("mental-model-refresh").description("Model-free refresh of stale mental models: list each bank's models, " + "select those past the staleness interval, refresh via the hindsight MCP tool.").option("--install-cron", `arm the sweep: write ${CRON_PATH3} (${CRON_SCHEDULE2}, flock-guarded) and exit`, false).option("--cron-user <user>", "unix user the cron sweep runs as (default: current user)").option("--stale-days <n>", `refresh models whose last refresh is older than N days (default: ${DEFAULT_STALE_DAYS})`, String(DEFAULT_STALE_DAYS)).option("--bank <id>", "restrict the sweep to a single bank (default: every fleet bank)").option("--mcp-url <url>", "hindsight MCP endpoint (default: config or built-in)").option("--dry-run", "select and print stale models but issue no refreshes", false).option("--json", "emit machine-readable JSON", false).action(async (opts) => {
+    if (opts.installCron) {
+      process.exitCode = runInstallCron2(opts.cronUser);
+      return;
+    }
+    const staleDays = Number(opts.staleDays);
+    if (!Number.isFinite(staleDays) || staleDays < 0) {
+      process.stderr.write(source_default.red(`mental-model-refresh: --stale-days must be a non-negative number (got ${opts.staleDays})
+`));
+      process.exitCode = 1;
+      return;
+    }
+    const config2 = getConfig(program3);
+    if (!isHindsightEnabled(config2)) {
+      process.stderr.write(source_default.red(`mental-model-refresh: hindsight memory backend is not enabled \u2014 nothing to refresh.
+`));
+      process.exitCode = 1;
+      return;
+    }
+    const mcpUrl = opts.mcpUrl ?? config2.memory?.config?.url ?? HINDSIGHT_DEFAULT_MCP_URL;
+    const bankIds = opts.bank ? [String(opts.bank)] : collectRefreshBanks(config2);
+    if (bankIds.length === 0) {
+      process.stderr.write(source_default.yellow(`mental-model-refresh: no banks to sweep.
+`));
+      process.exitCode = 0;
+      return;
+    }
+    const log = opts.json ? undefined : (m) => {
+      process.stderr.write(`${m}
+`);
+    };
+    const result = await runMentalModelRefresh({
+      mcpUrl,
+      bankIds,
+      staleDays,
+      dryRun: Boolean(opts.dryRun),
+      log
+    });
+    if (opts.json) {
+      process.stdout.write(JSON.stringify({ staleDays, dryRun: Boolean(opts.dryRun), ...result }, null, 2) + `
+`);
+    } else {
+      const verb = opts.dryRun ? "would refresh" : "refreshed";
+      process.stdout.write(`
+${source_default.bold(`${verb} ${result.totalRefreshed} model(s)`)}` + (result.totalFailed > 0 ? source_default.yellow(` \u2014 ${result.totalFailed} refresh failure(s)`) : "") + ` across ${result.banks.length} bank(s).
+`);
+      if (result.couldNotComplete) {
+        process.stdout.write(source_default.red(`  every bank failed inspection \u2014 hindsight unreachable?
+`));
+      }
+    }
+    process.exitCode = result.couldNotComplete ? 1 : 0;
+  });
+}
+function runInstallCron2(cronUser) {
+  const user = cronUser ?? process.env.SUDO_USER ?? process.env.USER ?? process.env.LOGNAME;
+  if (!user || user === "root") {
+    process.stderr.write(source_default.red("mental-model-refresh: refusing to install a cron for `root`.\n") + "  The config the sweep reads lives under the OPERATOR's ~/.switchroom, " + `so a root tick would read the wrong config.
+` + "  Re-run with `--cron-user <operator>`.\n");
+    return 1;
+  }
+  const binary = process.env.SWITCHROOM_BINARY ?? "/usr/local/bin/switchroom";
+  if (!binary.startsWith("/")) {
+    process.stderr.write(source_default.red(`mental-model-refresh: SWITCHROOM_BINARY must be an absolute path (got ${binary})
+`));
+    return 1;
+  }
+  let res;
+  try {
+    res = installCron3({ user, binary });
+  } catch (e) {
+    process.stderr.write(source_default.red(`mental-model-refresh: could not write ${CRON_PATH3}: ${e.message}
+`) + "  This path needs root; re-run under sudo with `--cron-user <operator>`.\n");
+    return 1;
+  }
+  let logStatus;
+  try {
+    const logRes = ensureLogFile3({ user });
+    logStatus = logRes.status === "created" ? `created ${logRes.path} (owned by ${user})` : `${logRes.path} already present`;
+  } catch (e) {
+    process.stderr.write(source_default.red(`mental-model-refresh: could not provision the log file: ${e.message}
+`) + `  The cron redirects into ${CRON_LOG_PATH3} and would die at the redirection every tick.
+` + "  This path needs root; re-run under sudo with `--cron-user <operator>`.\n");
+    return 1;
+  }
+  let rotateStatus;
+  try {
+    const rotateRes = installLogrotate3({ user });
+    rotateStatus = rotateRes.status === "installed" ? `installed ${rotateRes.path}` : `${rotateRes.path} already up to date`;
+  } catch (e) {
+    rotateStatus = source_default.yellow(`logrotate drop-in NOT written (${e.message}) \u2014 log growth is unbounded`);
+  }
+  const verb = res.status === "installed" ? "installed" : "already up to date";
+  process.stdout.write(`${source_default.green("\u2713")} mental-model-refresh cron ${verb} at ${res.path} ` + `(${CRON_SCHEDULE2}, as ${user})
+` + `  log: ${logStatus}
+` + `  logrotate: ${rotateStatus}
+` + `  Verify with: switchroom mental-model-refresh --dry-run
+`);
+  return 0;
+}
+
 // src/cli/hindsight-bench.ts
 init_source();
-import { mkdirSync as mkdirSync74, readFileSync as readFileSync116, writeFileSync as writeFileSync56 } from "node:fs";
-import { dirname as dirname56, resolve as resolve68 } from "node:path";
+import { mkdirSync as mkdirSync75, readFileSync as readFileSync117, writeFileSync as writeFileSync57 } from "node:fs";
+import { dirname as dirname57, resolve as resolve68 } from "node:path";
 
 // src/hindsight-bench/anonymise.ts
 function pseudonym(n, width) {
@@ -134731,7 +135239,7 @@ function fail9(msg) {
 function readResult(path10) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync116(path10, "utf8"));
+    parsed = JSON.parse(readFileSync117(path10, "utf8"));
   } catch (e) {
     fail9(`cannot read ${path10}: ${e.message}`);
   }
@@ -134749,8 +135257,8 @@ function readResult(path10) {
 }
 function writeOut(path10, body) {
   const abs = resolve68(path10);
-  mkdirSync74(dirname56(abs), { recursive: true });
-  writeFileSync56(abs, body);
+  mkdirSync75(dirname57(abs), { recursive: true });
+  writeFileSync57(abs, body);
   process.stderr.write(`${source_default.green("\u2713")} wrote ${abs}
 `);
 }
@@ -134954,53 +135462,53 @@ async function runMeasureMode(opts) {
 
 // src/cli/openrouter-watch.ts
 init_source();
-import { existsSync as existsSync132, readdirSync as readdirSync54 } from "node:fs";
+import { existsSync as existsSync133, readdirSync as readdirSync54 } from "node:fs";
 import { homedir as homedir73 } from "node:os";
 import { join as join134, resolve as resolve70 } from "node:path";
 
 // src/openrouter/install-cron.ts
-import { existsSync as existsSync131, mkdirSync as mkdirSync75, readFileSync as readFileSync117, renameSync as renameSync35, writeFileSync as writeFileSync57 } from "node:fs";
-import { dirname as dirname57 } from "node:path";
-var CRON_PATH3 = "/etc/cron.d/openrouter-watch";
-var CRON_SCHEDULE2 = "17 * * * *";
-var CRON_LOG_PATH3 = "/var/log/openrouter-watch.log";
-var CRON_LOCK_PATH3 = "/run/lock/openrouter-watch.lock";
-function renderCron3(opts) {
+import { existsSync as existsSync132, mkdirSync as mkdirSync76, readFileSync as readFileSync118, renameSync as renameSync36, writeFileSync as writeFileSync58 } from "node:fs";
+import { dirname as dirname58 } from "node:path";
+var CRON_PATH4 = "/etc/cron.d/openrouter-watch";
+var CRON_SCHEDULE3 = "17 * * * *";
+var CRON_LOG_PATH4 = "/var/log/openrouter-watch.log";
+var CRON_LOCK_PATH4 = "/run/lock/openrouter-watch.lock";
+function renderCron4(opts) {
   return `# switchroom openrouter-watch \u2014 model-free OpenRouter credit watchdog.
 ` + `# Managed by \`switchroom openrouter-watch --install-cron\`; edits are overwritten.
 ` + `# Exit 0 = clean, 10 = credit signal firing (DM sent), 1 = the check could not complete.
 ` + `SHELL=/bin/sh
 ` + `PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-` + `${CRON_SCHEDULE2} ${opts.user} /usr/bin/flock -n ${CRON_LOCK_PATH3} ` + `${opts.binary} openrouter-watch >> ${CRON_LOG_PATH3} 2>&1
+` + `${CRON_SCHEDULE3} ${opts.user} /usr/bin/flock -n ${CRON_LOCK_PATH4} ` + `${opts.binary} openrouter-watch >> ${CRON_LOG_PATH4} 2>&1
 `;
 }
-function installCron3(opts) {
-  const path10 = opts.path ?? CRON_PATH3;
-  const content = renderCron3(opts);
-  if (existsSync131(path10)) {
+function installCron4(opts) {
+  const path10 = opts.path ?? CRON_PATH4;
+  const content = renderCron4(opts);
+  if (existsSync132(path10)) {
     try {
-      if (readFileSync117(path10, "utf8") === content) {
+      if (readFileSync118(path10, "utf8") === content) {
         return { status: "unchanged", path: path10, content };
       }
     } catch {}
   }
-  mkdirSync75(dirname57(path10), { recursive: true });
+  mkdirSync76(dirname58(path10), { recursive: true });
   const tmp = `${path10}.${process.pid}.tmp`;
-  writeFileSync57(tmp, content, { mode: 420 });
-  renameSync35(tmp, path10);
+  writeFileSync58(tmp, content, { mode: 420 });
+  renameSync36(tmp, path10);
   return { status: "installed", path: path10, content };
 }
 // src/openrouter/state.ts
-import { mkdirSync as mkdirSync76, readFileSync as readFileSync118, renameSync as renameSync36, writeFileSync as writeFileSync58 } from "node:fs";
+import { mkdirSync as mkdirSync77, readFileSync as readFileSync119, renameSync as renameSync37, writeFileSync as writeFileSync59 } from "node:fs";
 import { homedir as homedir72 } from "node:os";
-import { dirname as dirname58, resolve as resolve69 } from "node:path";
+import { dirname as dirname59, resolve as resolve69 } from "node:path";
 function defaultStatePath3(home2 = process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir72()) {
   return resolve69(home2, ".switchroom", "openrouter-watch", "state.json");
 }
 function loadState2(path10) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync118(path10, "utf8"));
+    parsed = JSON.parse(readFileSync119(path10, "utf8"));
   } catch {
     return {};
   }
@@ -135020,12 +135528,12 @@ function loadState2(path10) {
   return out;
 }
 function saveState2(path10, state) {
-  mkdirSync76(dirname58(path10), { recursive: true, mode: 448 });
+  mkdirSync77(dirname59(path10), { recursive: true, mode: 448 });
   const tmp = `${path10}.${process.pid}.tmp`;
   const payload = { v: 1, ...state };
-  writeFileSync58(tmp, JSON.stringify(payload, null, 2) + `
+  writeFileSync59(tmp, JSON.stringify(payload, null, 2) + `
 `, { mode: 384 });
-  renameSync36(tmp, path10);
+  renameSync37(tmp, path10);
 }
 
 // src/openrouter/watch.ts
@@ -135106,9 +135614,9 @@ async function tick2(deps) {
 }
 // src/cli/openrouter-watch.ts
 function registerOpenRouterWatchCommand(program3) {
-  program3.command("openrouter-watch").description("Model-free OpenRouter credit watchdog: warns before the key's credit runs out. " + "Alerts at most once per 6h, and escalates immediately.").option("--install-cron", `arm the watchdog: write ${CRON_PATH3} (${CRON_SCHEDULE2}, flock-guarded) and exit`, false).option("--cron-user <user>", "unix user the cron tick runs as (default: current user)").option("--dry-run", "evaluate and print; send no DM and write no state", false).option("--json", "emit machine-readable JSON", false).option("--state <path>", "state file path (default ~/.switchroom/openrouter-watch/state.json)").option("--agents-dir <path>", "agents scaffold dir (default ~/.switchroom/agents)").action(async (opts) => {
+  program3.command("openrouter-watch").description("Model-free OpenRouter credit watchdog: warns before the key's credit runs out. " + "Alerts at most once per 6h, and escalates immediately.").option("--install-cron", `arm the watchdog: write ${CRON_PATH4} (${CRON_SCHEDULE3}, flock-guarded) and exit`, false).option("--cron-user <user>", "unix user the cron tick runs as (default: current user)").option("--dry-run", "evaluate and print; send no DM and write no state", false).option("--json", "emit machine-readable JSON", false).option("--state <path>", "state file path (default ~/.switchroom/openrouter-watch/state.json)").option("--agents-dir <path>", "agents scaffold dir (default ~/.switchroom/agents)").action(async (opts) => {
     if (opts.installCron) {
-      process.exitCode = runInstallCron2(opts.cronUser);
+      process.exitCode = runInstallCron3(opts.cronUser);
       return;
     }
     const agentsDir = opts.agentsDir ?? process.env.SWITCHROOM_AGENTS_DIR ?? join134(process.env.SWITCHROOM_HOME ?? process.env.HOME ?? homedir73(), ".switchroom", "agents");
@@ -135178,7 +135686,7 @@ ${source_default.bold(`operator DM ${header}:`)}
     process.exitCode = result.exitCode;
   });
 }
-function runInstallCron2(cronUser) {
+function runInstallCron3(cronUser) {
   const user = cronUser ?? process.env.SUDO_USER ?? process.env.USER ?? process.env.LOGNAME;
   if (!user || user === "root") {
     process.stderr.write(source_default.red("openrouter-watch: refusing to install a cron for `root`.\n") + "  The state file and the agents scaffold live under the OPERATOR's " + "~/.switchroom, so a root tick would keep its re-notify ledger somewhere " + `nothing else reads.
@@ -135193,14 +135701,14 @@ function runInstallCron2(cronUser) {
   }
   let res;
   try {
-    res = installCron3({ user, binary });
+    res = installCron4({ user, binary });
   } catch (e) {
-    process.stderr.write(source_default.red(`openrouter-watch: could not write ${CRON_PATH3}: ${e.message}
+    process.stderr.write(source_default.red(`openrouter-watch: could not write ${CRON_PATH4}: ${e.message}
 `) + "  This path needs root; re-run under sudo with `--cron-user <operator>`.\n");
     return 1;
   }
   const verb = res.status === "installed" ? "installed" : "already up to date";
-  process.stdout.write(`${source_default.green("\u2713")} openrouter-watch cron ${verb} at ${res.path} ` + `(${CRON_SCHEDULE2}, as ${user})
+  process.stdout.write(`${source_default.green("\u2713")} openrouter-watch cron ${verb} at ${res.path} ` + `(${CRON_SCHEDULE3}, as ${user})
 ` + `  Verify with: switchroom openrouter-watch --dry-run
 `);
   return 0;
@@ -135210,7 +135718,7 @@ async function notifyOperator2(agentsDir, text, log) {
   try {
     for (const name of readdirSync54(agentsDir).sort()) {
       const sock = resolve70(agentsDir, name, "telegram", "gateway.sock");
-      if (existsSync132(sock))
+      if (existsSync133(sock))
         candidates.push({ agent: name, sock });
     }
   } catch (e) {
@@ -135311,13 +135819,13 @@ function registerConfigRepoCommand(program3) {
   });
   configRepo.command("install-cron").description("Arm the scheduled auto-backup: write /etc/cron.d/switchroom-config-sync " + "(30-min `config-repo sync` tick + a daily `vault backup && sync` leg), " + "provision its log, and install a logrotate drop-in. Gated on " + "config_repo.enabled; refuses to run as root.").option("--cron-user <user>", "unix user the cron tick runs as (default: current user)").action((opts) => {
     const parentOpts = program3.opts();
-    process.exitCode = runInstallCron3(parentOpts.config, opts.cronUser);
+    process.exitCode = runInstallCron4(parentOpts.config, opts.cronUser);
   });
   configRepo.command("uninstall-cron").description("Disarm the scheduled auto-backup: remove /etc/cron.d/switchroom-config-sync " + "and its logrotate drop-in (the sync verb still works on demand). Idempotent.").action(() => {
     process.exitCode = runUninstallCron();
   });
 }
-function runInstallCron3(configPath, cronUser) {
+function runInstallCron4(configPath, cronUser) {
   let intervalMinutes = DEFAULT_INTERVAL_MINUTES;
   let includeVaultBackup = "daily";
   let enabled = false;
@@ -135476,6 +135984,7 @@ registerWebdCommand(program3);
 registerHostCommand(program3);
 registerFleetHealthCommand(program3);
 registerHindsightWatchCommand(program3);
+registerMentalModelRefreshCommand(program3);
 registerHindsightBenchCommand(program3);
 registerOpenRouterWatchCommand(program3);
 registerConfigRepoCommand(program3);