switchroom 0.13.2 → 0.13.3

package/dist/agent-scheduler/index.js

@@ -11130,7 +11130,7 @@ var profileFields = {
   extends: exports_external.string().optional(),
   bot_token: exports_external.string().optional(),
   release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
   soul: exports_external.object({
     name: exports_external.string().optional(),
     style: exports_external.string().optional(),
@@ -11191,7 +11191,7 @@ var AgentSchema = exports_external.object({
   bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
   release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
   bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
   auth: exports_external.object({
     override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
   }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/auth-broker/index.js

@@ -11130,7 +11130,7 @@ var profileFields = {
   extends: exports_external.string().optional(),
   bot_token: exports_external.string().optional(),
   release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
   soul: exports_external.object({
     name: exports_external.string().optional(),
     style: exports_external.string().optional(),
@@ -11191,7 +11191,7 @@ var AgentSchema = exports_external.object({
   bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
   release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
   bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
   auth: exports_external.object({
     override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
   }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/cli/switchroom.js

@@ -13694,7 +13694,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) \u2014 mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -13755,7 +13755,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) \u2014 a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only \u2014 " + "this agent talks to the named account regardless of fleet active. See RFC H \u00a74.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),
@@ -47248,8 +47248,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.13.2";
-var COMMIT_SHA = "afa0fbea";
+var VERSION = "0.13.3";
+var COMMIT_SHA = "e357d33b";
 
 // src/cli/agent.ts
 init_source();
@@ -50658,18 +50658,22 @@ async function summarize(opts) {
   await mirrorToHindsight(parsed.briefing, opts).catch(() => {});
   return "ok";
 }
+function buildHandoffClaudeArgs(opts) {
+  return [
+    "-p",
+    opts.user,
+    "--model",
+    opts.model,
+    "--append-system-prompt",
+    opts.system,
+    "--no-session-persistence",
+    "--strict-mcp-config"
+  ];
+}
 var defaultClaudeCliRunner = {
   async run({ model, system, user, timeoutMs }) {
     return await new Promise((resolve14, reject) => {
-      const args = [
-        "-p",
-        user,
-        "--model",
-        model,
-        "--append-system-prompt",
-        system,
-        "--no-session-persistence"
-      ];
+      const args = buildHandoffClaudeArgs({ model, system, user });
       const env2 = {
         ...process.env,
         FORCE_COLOR: "0",
@@ -53330,7 +53334,6 @@ Scaffolding agent: ${name}
       }
       try {
         const result = reconcileAgent(n, agentConfig, agentsDir, config.telegram, config, configPath, { preserveClaudeMd: opts.preserveClaudeMd });
-        const unitChanges = [];
         const allChanges = [...result.changes];
         if (allChanges.length === 0) {
           console.log(source_default.gray(`  ${n}: already in sync`));
@@ -53341,7 +53344,7 @@ Scaffolding agent: ${name}
           const semantics = result.changesBySemantics;
           if (semantics) {
             const { hot, staleTillRestart } = semantics;
-            const restartRequired = [...semantics.restartRequired, ...unitChanges];
+            const restartRequired = [...semantics.restartRequired];
             if (restartRequired.length > 0) {
               console.log(source_default.yellow(`
   Changed (restart required \u2014 soul/MCP/settings/start.sh):`));
@@ -53384,7 +53387,7 @@ Restart: switchroom agent restart ${n}`));
           }
         }
         const changesBySemantics = result.changesBySemantics;
-        const autoRestartNeeded = !opts.noRestart && (changesBySemantics !== undefined && changesBySemantics.restartRequired.length > 0 || unitChanges.length > 0);
+        const autoRestartNeeded = !opts.noRestart && changesBySemantics !== undefined && changesBySemantics.restartRequired.length > 0;
         const shouldRestart = (opts.restart || opts.gracefulRestart || autoRestartNeeded) && allChanges.length > 0;
         if (shouldRestart) {
           try {
@@ -53815,7 +53818,7 @@ switchroom agent add: ${name}
       process.exit(1);
     }
   }));
-  agent.command("rename <old> <new>").description("Rename an agent slug: stop, snapshot, rename dir + systemd units + vault key, " + "update switchroom.yaml, reconcile, start. Rolls back on any failure.").option("--hindsight <mode>", 'Hindsight bank handling: "preserve" (default, keep old bank) or "fresh" (drop, recreate on first run). "migrate" is deferred.', "preserve").option("-y, --yes", "Skip confirmation prompt").action(withConfigError(async (oldName, newName, opts) => {
+  agent.command("rename <old> <new>").description("Rename an agent slug: stop, snapshot, rename dir + vault key, " + "update switchroom.yaml, reconcile, start. Rolls back on any failure.").option("--hindsight <mode>", 'Hindsight bank handling: "preserve" (default, keep old bank) or "fresh" (drop, recreate on first run). "migrate" is deferred.', "preserve").option("-y, --yes", "Skip confirmation prompt").action(withConfigError(async (oldName, newName, opts) => {
     const configPath = getConfigPath(program3);
     const config = getConfig(program3);
     if (!config.agents[oldName]) {
@@ -53834,7 +53837,7 @@ switchroom agent add: ${name}
     if (!opts.yes) {
       process.stdout.write(source_default.yellow(`
 Rename agent "${oldName}" \u2192 "${newName}"?
-` + `  This will: stop ${oldName}, copy dir, rename systemd units,
+` + `  This will: stop ${oldName}, copy dir,
 ` + `  rename vault keys (if passphrase available), update switchroom.yaml,
 ` + `  reconcile, and start ${newName}.
 ` + `  Hindsight mode: ${hindsightMode}

package/dist/host-control/main.js

@@ -13863,7 +13863,7 @@ var profileFields = {
   extends: exports_external.string().optional(),
   bot_token: exports_external.string().optional(),
   release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
   soul: exports_external.object({
     name: exports_external.string().optional(),
     style: exports_external.string().optional(),
@@ -13924,7 +13924,7 @@ var AgentSchema = exports_external.object({
   bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
   release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
   bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
   auth: exports_external.object({
     override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
   }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/vault/approvals/kernel-server.js

@@ -11122,7 +11122,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -11183,7 +11183,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/vault/broker/server.js

@@ -11122,7 +11122,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -11183,7 +11183,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.13.2",
+  "version": "0.13.3",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -23766,7 +23766,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) \u2014 mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -23827,7 +23827,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) \u2014 a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only \u2014 " + "this agent talks to the named account regardless of fleet active. See RFC H \u00a74.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),
@@ -27542,16 +27542,17 @@ function uptimeMsForStarttime(starttimeTicks, fs2 = realProcFs) {
   }
 }
 function nextStepForAgentState(agentName3, state4) {
+  const tailCmd = process.env.SWITCHROOM_RUNTIME === "docker" ? `docker logs --tail 100 switchroom-${agentName3}` : `journalctl --user -u switchroom-${agentName3} -n 100`;
   if (state4 === "failed") {
-    return `Service failed \u2014 inspect with \`journalctl --user -u switchroom-${agentName3} -n 100\` then \`switchroom agent restart ${agentName3}\``;
+    return `Service failed \u2014 inspect with \`${tailCmd}\` then \`switchroom agent restart ${agentName3}\``;
   }
   if (state4 === "inactive") {
-    return `Service inactive \u2014 start with \`switchroom agent start ${agentName3}\` (or \`systemctl --user start switchroom-${agentName3}\`)`;
+    return `Service inactive \u2014 start with \`switchroom agent start ${agentName3}\``;
   }
   if (state4 === "deactivating" || state4 === "activating" || state4 === "auto-restart") {
     return `Service is in a transient \`${state4}\` state \u2014 re-check with \`switchroom agent status ${agentName3}\` in a few seconds`;
   }
-  return `Inspect with \`journalctl --user -u switchroom-${agentName3} -n 100\``;
+  return `Inspect with \`${tailCmd}\``;
 }
 function probeAgentProcessDocker() {
   const found = findAgentProcessInContainer();
@@ -37121,6 +37122,7 @@ function startTimer(deps) {
 import { existsSync as existsSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync, mkdirSync as mkdirSync5 } from "node:fs";
 import { dirname as dirname6, join as join6 } from "node:path";
 import { homedir as homedir2 } from "node:os";
+var SILENT_END_MAX_RETRIES = 1;
 function resolveStateDir(deps) {
   if (deps?.stateDir != null)
     return deps.stateDir;
@@ -37182,6 +37184,27 @@ function clearSilentEndState(turnKey, deps) {
 `);
   } catch {}
 }
+function readSilentEndState(deps) {
+  const statePath = resolveStatePath(deps);
+  if (!existsSync5(statePath))
+    return null;
+  try {
+    return JSON.parse(readFileSync3(statePath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function recordSilentTurnEnd(args, deps) {
+  const prev = readSilentEndState(deps);
+  if (prev != null && prev.turnKey === args.turnKey && prev.retryCount >= SILENT_END_MAX_RETRIES) {
+    clearSilentEndState(args.turnKey, deps);
+    emitLog(deps, `silent-end: re-prompt exhausted for turnKey=${args.turnKey} ` + `(retryCount=${prev.retryCount} >= ${SILENT_END_MAX_RETRIES}) \u2014 ` + `caller should deliver a fallback
+`);
+    return { exhausted: true };
+  }
+  writeSilentEndState(args, deps);
+  return { exhausted: false };
+}
 
 // turn-flush-safety.ts
 var SILENT_MARKERS = new Set(["NO_REPLY", "HEARTBEAT_OK"]);
@@ -47679,10 +47702,10 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.13.2";
-var COMMIT_SHA = "afa0fbea";
-var COMMIT_DATE = "2026-05-21T00:58:22Z";
-var LATEST_PR = 1610;
+var VERSION = "0.13.3";
+var COMMIT_SHA = "e357d33b";
+var COMMIT_DATE = "2026-05-21T07:05:47Z";
+var LATEST_PR = 1621;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -48170,6 +48193,7 @@ function resolveCallingSubagent(opts) {
 
 // gateway/gateway.ts
 var REPLY_TO_TEXT_MAX = 200;
+var SILENT_END_FALLBACK_TEXT = "\u26A0\uFE0F The agent finished working but didn\u2019t send a reply \u2014 your last " + "message may not have been answered. Please try asking again.";
 installStderrTimestamps();
 installPluginLogger();
 installGlobalErrorHandlers();
@@ -51610,11 +51634,19 @@ function handleSessionEvent(ev) {
           ended_via: outboundMetrics.outboundCount > 0 ? "reply" : "silent"
         });
         if (outboundMetrics.outboundCount === 0) {
-          writeSilentEndState({
+          const silentEnd = recordSilentTurnEnd({
             chatId,
             threadId: threadId ?? null,
             turnKey: tKey
           });
+          if (silentEnd.exhausted) {
+            process.stderr.write(`telegram gateway: WARN silent-end fallback \u2014 agent stayed ` + `silent after the Stop-hook re-prompt; delivering fallback message chat=${chatId} turnKey=${tKey} (#1161)
+`);
+            retryWithThreadFallback(robustApiCall, (tid) => bot.api.sendMessage(chatId, SILENT_END_FALLBACK_TEXT, tid != null ? { message_thread_id: tid } : {}), { threadId, chat_id: chatId, verb: "silent-end-fallback.sendMessage" }).catch((err) => {
+              process.stderr.write(`telegram gateway: silent-end fallback send failed: ${err instanceof Error ? err.message : String(err)}
+`);
+            });
+          }
         }
         clear(tKey);
         endTurn(tKey);

package/telegram-plugin/gateway/boot-probes.ts

@@ -422,24 +422,31 @@ export function uptimeMsForStarttime(
 }
 
 /**
- * Compute a remediation hint for a non-active agent systemd state. Returns
+ * Compute a remediation hint for a non-active agent state. Returns
  * `undefined` when no actionable hint applies. Per `reference/principles.md`
  * principle 1, every degraded/fail row should tell the user what to do next.
- * Hints share a common journalctl shape so they're greppable across
- * agents.
+ *
+ * Runtime-aware: v0.7+ agents run in Docker — there is no systemd unit or
+ * `journalctl` in-container, so the log-tail command is gated on
+ * `SWITCHROOM_RUNTIME` exactly like the boot-card crash row (see
+ * `boot-card.ts` and #1376/#1382). All hints share a common log-tail shape
+ * so they stay greppable across agents.
  */
 function nextStepForAgentState(agentName: string, state: string): string | undefined {
+  const tailCmd = process.env.SWITCHROOM_RUNTIME === 'docker'
+    ? `docker logs --tail 100 switchroom-${agentName}`
+    : `journalctl --user -u switchroom-${agentName} -n 100`
   if (state === 'failed') {
-    return `Service failed — inspect with \`journalctl --user -u switchroom-${agentName} -n 100\` then \`switchroom agent restart ${agentName}\``
+    return `Service failed — inspect with \`${tailCmd}\` then \`switchroom agent restart ${agentName}\``
   }
   if (state === 'inactive') {
-    return `Service inactive — start with \`switchroom agent start ${agentName}\` (or \`systemctl --user start switchroom-${agentName}\`)`
+    return `Service inactive — start with \`switchroom agent start ${agentName}\``
   }
   if (state === 'deactivating' || state === 'activating' || state === 'auto-restart') {
     return `Service is in a transient \`${state}\` state — re-check with \`switchroom agent status ${agentName}\` in a few seconds`
   }
   // Unknown state — keep the door open with a generic hint.
-  return `Inspect with \`journalctl --user -u switchroom-${agentName} -n 100\``
+  return `Inspect with \`${tailCmd}\``
 }
 
 function probeAgentProcessDocker(): ProbeResult {

package/telegram-plugin/gateway/gateway.ts

@@ -76,7 +76,7 @@ import {
 import { emitRuntimeMetric } from '../runtime-metrics.js'
 import { classifyInbound } from '../inbound-classifier.js'
 import * as silencePoke from '../silence-poke.js'
-import { writeSilentEndState, clearSilentEndState } from '../silent-end.js'
+import { writeSilentEndState, clearSilentEndState, recordSilentTurnEnd } from '../silent-end.js'
 import { createAnswerStream, type AnswerStreamHandle } from '../answer-stream.js'
 import { type SessionEvent } from '../session-tail.js'
 import {
@@ -139,6 +139,16 @@ import { validateStringArray } from './access-validator.js'
  * identical envelope shapes.
  */
 const REPLY_TO_TEXT_MAX = 200
+
+/**
+ * #1161 — user-facing fallback delivered when a user-message turn ends
+ * with zero outbound messages AND the deterministic Stop-hook re-prompt
+ * has already been exhausted. Without this the user only sees the
+ * progress card vanish; silence must never be the failure mode.
+ */
+const SILENT_END_FALLBACK_TEXT =
+  '⚠️ The agent finished working but didn’t send a reply — your last ' +
+  'message may not have been answered. Please try asking again.'
 import { markdownToHtml, splitHtmlChunks, repairEscapedWhitespace, telegramHtmlToPlainText } from '../format.js'
 import {
   validateInlineKeyboard,
@@ -6290,16 +6300,44 @@ function handleSessionEvent(ev: SessionEvent): void {
           longest_silent_gap_ms: outboundMetrics.longestOutboundGapMs,
           ended_via: outboundMetrics.outboundCount > 0 ? 'reply' : 'silent',
         })
-        // #1122 PR4 fix: deterministic silent-end detection (see the
-        // silent-marker path above for the rationale). The Stop hook
-        // reads the file we write here and blocks the session-end so
-        // the agent can be re-prompted to call reply.
+        // #1122 PR4 / #1161: deterministic silent-end handling (see the
+        // silent-marker path above for the rationale).
+        //   - first silent-end → recordSilentTurnEnd writes the state
+        //     file so the Stop hook (silent-end-interrupt-stop.mjs)
+        //     blocks the session-end and re-prompts the agent to reply.
+        //   - the Stop-hook re-prompt is already spent and the agent is
+        //     STILL silent → recordSilentTurnEnd returns exhausted:true;
+        //     deliver a user-facing fallback so the turn never just
+        //     vanishes (the user otherwise only sees the card disappear).
         if (outboundMetrics.outboundCount === 0) {
-          writeSilentEndState({
+          const silentEnd = recordSilentTurnEnd({
             chatId,
             threadId: threadId ?? null,
             turnKey: tKey,
           })
+          if (silentEnd.exhausted) {
+            process.stderr.write(
+              `telegram gateway: WARN silent-end fallback — agent stayed ` +
+              `silent after the Stop-hook re-prompt; delivering fallback ` +
+              `message chat=${chatId} turnKey=${tKey} (#1161)\n`,
+            )
+            void retryWithThreadFallback(
+              robustApiCall,
+              (tid) =>
+                bot.api.sendMessage(
+                  chatId,
+                  SILENT_END_FALLBACK_TEXT,
+                  tid != null ? { message_thread_id: tid } : {},
+                ),
+              { threadId, chat_id: chatId, verb: 'silent-end-fallback.sendMessage' },
+            ).catch((err) => {
+              process.stderr.write(
+                `telegram gateway: silent-end fallback send failed: ${
+                  err instanceof Error ? err.message : String(err)
+                }\n`,
+              )
+            })
+          }
         }
         signalTracker.clear(tKey)
         silencePoke.endTurn(tKey)

package/telegram-plugin/hooks/silent-end-interrupt-stop.mjs

@@ -9,7 +9,9 @@
  * decision:block to re-prompt the agent instead of letting the session close.
  *
  * On the second silent-end (retryCount >= MAX_RETRIES), the hook allows the
- * stop so the gateway can render the "🙊 Ended without reply" warning card.
+ * stop. The gateway's turn-end path (recordSilentTurnEnd in silent-end.ts)
+ * detects the exhausted re-prompt and delivers a user-facing fallback
+ * message so the turn never silently vanishes (#1161).
  *
  * Carve-outs preserved:
  *   - wasAutonomous=true turns: the gateway never writes a state file for
@@ -30,6 +32,8 @@ import { readFileSync, writeFileSync, existsSync } from 'node:fs'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
 
+// MUST stay in sync with SILENT_END_MAX_RETRIES in telegram-plugin/silent-end.ts
+// (this hook is a standalone .mjs and can't import the TS module).
 const MAX_RETRIES = 1
 
 function readStdin() {

package/telegram-plugin/silent-end.ts

@@ -51,6 +51,14 @@ export interface SilentEndDeps {
   log?: (line: string) => void
 }
 
+/**
+ * How many times the Stop hook re-prompts a silent-end turn before it
+ * gives up. MUST stay in sync with `MAX_RETRIES` in the Stop hook
+ * (`telegram-plugin/hooks/silent-end-interrupt-stop.mjs`) — the hook is a
+ * standalone `.mjs` and can't import this module.
+ */
+export const SILENT_END_MAX_RETRIES = 1
+
 function resolveStateDir(deps?: SilentEndDeps): string {
   if (deps?.stateDir != null) return deps.stateDir
   const env = process.env.TELEGRAM_STATE_DIR
@@ -172,3 +180,51 @@ export function readSilentEndState(deps?: SilentEndDeps): SilentEndState | null
     return null
   }
 }
+
+/**
+ * Record a user-message turn that ended with zero outbound messages and
+ * report whether the deterministic re-prompt has been exhausted. This is
+ * the gateway's single entry point for the main turn-end path.
+ *
+ *   - First silent-end of a turn (no prior state, or prior `retryCount`
+ *     still below `SILENT_END_MAX_RETRIES`) → writes the state file via
+ *     `writeSilentEndState`, so `silent-end-interrupt-stop.mjs` blocks
+ *     the stop and re-prompts the agent. Returns `{ exhausted: false }`.
+ *
+ *   - A silent-end where the prior state for the SAME turn already shows
+ *     `retryCount >= SILENT_END_MAX_RETRIES` → the Stop hook already
+ *     spent its re-prompt and the agent is STILL silent. Recovery has
+ *     failed. Clears the state file (so the Stop hook on this final turn
+ *     finds nothing pending and allows the stop cleanly) and returns
+ *     `{ exhausted: true }` — the caller MUST then deliver a user-facing
+ *     fallback so the turn never just vanishes (#1161).
+ *
+ * Chat-less autonomous wakeup turns never reach here: the gateway only
+ * creates a `currentTurn` (and therefore only runs a turn-end handler)
+ * when the inbound event carries a chat id. Cron-fired turns DO carry a
+ * topic chat and reach this path — a cron task that means to stay silent
+ * must emit a NO_REPLY sentinel, which routes to the gateway's
+ * silent-marker branch and never gets a fallback.
+ */
+export function recordSilentTurnEnd(
+  args: { chatId: string; threadId: number | null; turnKey: string },
+  deps?: SilentEndDeps,
+): { exhausted: boolean } {
+  const prev = readSilentEndState(deps)
+  if (
+    prev != null &&
+    prev.turnKey === args.turnKey &&
+    prev.retryCount >= SILENT_END_MAX_RETRIES
+  ) {
+    clearSilentEndState(args.turnKey, deps)
+    emitLog(
+      deps,
+      `silent-end: re-prompt exhausted for turnKey=${args.turnKey} ` +
+        `(retryCount=${prev.retryCount} >= ${SILENT_END_MAX_RETRIES}) — ` +
+        `caller should deliver a fallback\n`,
+    )
+    return { exhausted: true }
+  }
+  writeSilentEndState(args, deps)
+  return { exhausted: false }
+}

package/telegram-plugin/tests/boot-probes.test.ts

@@ -1185,8 +1185,15 @@ describe('uptimeMsForStarttime', () => {
 // the probes covered by the boot-card-dedup-and-next-steps PR so we don't
 // silently lose the hint on a future refactor.
 
-describe('nextStep — agent systemd states', () => {
-  it('attaches a journalctl hint when the unit is failed', async () => {
+describe('nextStep — agent states', () => {
+  const savedRuntime = process.env.SWITCHROOM_RUNTIME
+  afterEach(() => {
+    if (savedRuntime === undefined) delete process.env.SWITCHROOM_RUNTIME
+    else process.env.SWITCHROOM_RUNTIME = savedRuntime
+  })
+
+  it('attaches a journalctl hint when the unit is failed (non-docker runtime)', async () => {
+    delete process.env.SWITCHROOM_RUNTIME
     const exec = makeSequence([makeSystemctlOutput('failed')])
     const r = await probeAgentProcess('klanker', {
       execFileImpl: exec as unknown as (cmd: string, args: string[]) => Promise<{ stdout: string; stderr: string }>,
@@ -1199,6 +1206,23 @@ describe('nextStep — agent systemd states', () => {
     expect(r.nextStep).toMatch(/switchroom-klanker/)
   })
 
+  // #1382: the failed/unknown-state hints must follow SWITCHROOM_RUNTIME the
+  // same way the boot-card crash row does (#1376) — no journalctl in-container.
+  it('attaches a docker-logs hint when the unit is failed under SWITCHROOM_RUNTIME=docker', async () => {
+    process.env.SWITCHROOM_RUNTIME = 'docker'
+    const exec = makeSequence([makeSystemctlOutput('failed')])
+    const r = await probeAgentProcess('klanker', {
+      execFileImpl: exec as unknown as (cmd: string, args: string[]) => Promise<{ stdout: string; stderr: string }>,
+      sleepImpl: async () => {},
+      retryIntervalMs: 1,
+      retryMaxMs: 0,
+    })
+    expect(r.status).toBe('fail')
+    expect(r.nextStep).toMatch(/docker logs/)
+    expect(r.nextStep).toMatch(/switchroom-klanker/)
+    expect(r.nextStep).not.toMatch(/journalctl/)
+  })
+
   it('attaches a transient-state hint when the unit is activating after retry budget', async () => {
     const exec = makeSequence([makeSystemctlOutput('activating')])
     const r = await probeAgentProcess('klanker', {