switchroom 0.13.2 → 0.13.4

package/dist/host-control/main.js

@@ -13863,7 +13863,7 @@ var profileFields = {
   extends: exports_external.string().optional(),
   bot_token: exports_external.string().optional(),
   release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
   soul: exports_external.object({
     name: exports_external.string().optional(),
     style: exports_external.string().optional(),
@@ -13924,7 +13924,7 @@ var AgentSchema = exports_external.object({
   bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
   release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
   bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+  timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
   auth: exports_external.object({
     override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
   }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/vault/approvals/kernel-server.js

@@ -11122,7 +11122,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -11183,7 +11183,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/dist/vault/broker/server.js

@@ -11122,7 +11122,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) — mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -11183,7 +11183,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) — a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only — " + "this agent talks to the named account regardless of fleet active. See RFC H §4.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.13.2",
+  "version": "0.13.4",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/_base/start.sh.hbs

@@ -422,13 +422,13 @@ mkdir -p "$TELEGRAM_STATE_DIR" 2>/dev/null || true
 
 {{#if handoffEnabled}}
 # --- Session handoff briefing ---
-# On a normal shutdown the Stop hook writes .handoff.md (compact
-# summary of the prior session) into the agent dir. Here we merge that
-# briefing into --append-system-prompt so the fresh session wakes up
-# already knowing what was going on. If the prior session crashed
-# without firing the Stop hook, we fall back to a synchronous
-# summarization capped at 2s — if that doesn't finish, skip gracefully
-# and rely on Hindsight's per-turn auto-recall.
+# On a normal shutdown the Stop hook writes .handoff.md (a bounded
+# raw transcript tail of the prior session — see RFC #1620) into the
+# agent dir. Here we merge that into --append-system-prompt so the
+# fresh session wakes up able to reorient. If the prior session
+# crashed without firing the Stop hook, we fall back to building the
+# tail synchronously, capped at 2s — if that doesn't finish, skip
+# gracefully and rely on Hindsight's per-turn auto-recall.
 #
 # In 'handoff' mode (the default as of #362), when no .handoff.md is
 # available from the Stop hook, we also run handoff-briefing.sh which
@@ -461,7 +461,7 @@ fi
 export SWITCHROOM_HANDOFF_SHOW_LINE={{#if handoffShowLine}}true{{else}}false{{/if}}
 APPEND_PROMPT={{#if systemPromptAppendShellQuoted}}{{{systemPromptAppendShellQuoted}}}{{else}}""{{/if}}
 # Inject .handoff-briefing.md first (assembled from live sources), then
-# .handoff.md (LLM-generated session summary from Stop hook). If both
+# .handoff.md (raw transcript tail from the Stop hook). If both
 # exist, separate them with a divider so the agent sees both.
 if [ -s "$HANDOFF_BRIEFING_FILE" ]; then
   _BRIEFING_CONTENT=$(cat "$HANDOFF_BRIEFING_FILE")

package/profiles/default/CLAUDE.md.hbs

@@ -108,7 +108,7 @@ If no sub-agents are configured, do the work yourself.
 
 By default, every restart starts a **fresh `claude` session** — the in-flight transcript is NOT carried over (`session_continuity.resume_mode: handoff`, the default since switchroom #362). Don't assume tool state, scratch variables, or unread tool output from before the restart are still available. What does survive:
 
-- **Handoff briefing** — on a clean shutdown, the Stop hook writes a compact summary of the prior session to `.handoff.md`. On boot, start.sh injects it into your `--append-system-prompt` so you wake up already knowing what was going on. If the prior session crashed before the Stop hook fired, a live briefing is assembled from recent Telegram messages, Hindsight recall, and today's daily memory file (`.handoff-briefing.md`).
+- **Handoff briefing** — on a clean shutdown, the Stop hook writes a bounded raw transcript tail of the prior session to `.handoff.md`. On boot, start.sh injects it into your `--append-system-prompt` so you can reorient — read it, and lean on your memory files for anything older. If the prior session crashed before the Stop hook fired, a live briefing is assembled from recent Telegram messages, Hindsight recall, and today's daily memory file (`.handoff-briefing.md`).
 - **Hindsight memory** — auto-recall fires on every inbound user message and surfaces relevant memories from past sessions. Long-term facts, decisions, and mental models live here, not in the transcript.
 - **Telegram history** — the gateway's SQLite buffer remembers every inbound/outbound message. Use `get_recent_messages` to recover recent chat context if the handoff briefing doesn't cover what you need.
 - **`SWITCHROOM_PENDING_TURN`** — if your previous session was killed mid-turn (watchdog, SIGTERM, timeout), start.sh exports this env var plus the chat/thread/last-user-message context. Acknowledge the interruption and ask for direction rather than silently resuming.

package/telegram-plugin/dist/gateway/gateway.js

@@ -23766,7 +23766,7 @@ var init_schema = __esm(() => {
     extends: exports_external.string().optional(),
     bot_token: exports_external.string().optional(),
     release: ReleaseBlock.optional().describe("Release-channel pin / pointer. Either `channel` (dev|rc|latest) or " + "`pin` (sha-<hex>|v<semver>) \u2014 mutually exclusive. Per-agent value " + "REPLACES the root entirely (no field merge)."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the systemd " + "unit as TZ= so subprocess `date`/`Date.now()` are correct. If unset " + "at every cascade layer, switchroom auto-detects from /etc/timezone " + "and warns on `reconcile` when the detected zone is UTC."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("IANA timezone name (e.g. 'Australia/Melbourne', 'America/New_York', " + "'UTC'). Used to generate the per-turn local-time hint the agent's " + "UserPromptSubmit timezone hook emits, and baked into the agent " + "container's `environment.TZ` in compose so subprocess `date`/" + "`Date.now()` are correct. If unset at every cascade layer, switchroom " + "auto-detects from /etc/timezone and warns on `reconcile` when the " + "detected zone is UTC."),
     soul: exports_external.object({
       name: exports_external.string().optional(),
       style: exports_external.string().optional(),
@@ -23827,7 +23827,7 @@ var init_schema = __esm(() => {
     bot_token: exports_external.string().optional().describe("Per-agent Telegram bot token or vault reference (overrides global telegram.bot_token)"),
     release: ReleaseBlock.optional().describe("Per-agent release-channel pin / pointer. REPLACES the root " + "`release` block entirely (no field merge) \u2014 a pinned agent does " + "not inherit the fleet channel, and vice versa."),
     bot_username: exports_external.string().optional().describe("Per-agent Telegram bot username (without leading @) when it doesn't " + "contain the agent slug. Replaces the default 'username includes slug' " + "preflight check with an exact (case-insensitive) match. Use when an " + "agent and its bot have intentionally divergent names (e.g. agent " + "'lawgpt' paired with bot '@meken_law_bot')."),
-    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "systemd unit's TZ= env."),
+    timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC' " + "(three-letter aliases like EST/PST and bare offsets like UTC+10 are not accepted)").optional().describe("Per-agent IANA timezone override. Wins over any profile/defaults " + "value and over the top-level switchroom.timezone global. Controls " + "the UserPromptSubmit timezone hook's emitted local time and the " + "agent container's `environment.TZ` in compose."),
     auth: exports_external.object({
       override: exports_external.string().min(1).optional().describe("Per-agent override of the fleet-wide `auth.active`. Edge-case use only \u2014 " + "this agent talks to the named account regardless of fleet active. See RFC H \u00a74.5.")
     }).optional().describe("Account routing for switchroom-auth-broker. RFC H schema uses " + "fleet-wide `auth.active` plus per-agent `override:` for edge cases. " + "Pre-RFC-H `auth.accounts: [..]` and `auth_label:` are migrated in-place " + "on first apply (see src/auth/migrate-schema.ts)."),
@@ -27542,16 +27542,17 @@ function uptimeMsForStarttime(starttimeTicks, fs2 = realProcFs) {
   }
 }
 function nextStepForAgentState(agentName3, state4) {
+  const tailCmd = process.env.SWITCHROOM_RUNTIME === "docker" ? `docker logs --tail 100 switchroom-${agentName3}` : `journalctl --user -u switchroom-${agentName3} -n 100`;
   if (state4 === "failed") {
-    return `Service failed \u2014 inspect with \`journalctl --user -u switchroom-${agentName3} -n 100\` then \`switchroom agent restart ${agentName3}\``;
+    return `Service failed \u2014 inspect with \`${tailCmd}\` then \`switchroom agent restart ${agentName3}\``;
   }
   if (state4 === "inactive") {
-    return `Service inactive \u2014 start with \`switchroom agent start ${agentName3}\` (or \`systemctl --user start switchroom-${agentName3}\`)`;
+    return `Service inactive \u2014 start with \`switchroom agent start ${agentName3}\``;
   }
   if (state4 === "deactivating" || state4 === "activating" || state4 === "auto-restart") {
     return `Service is in a transient \`${state4}\` state \u2014 re-check with \`switchroom agent status ${agentName3}\` in a few seconds`;
   }
-  return `Inspect with \`journalctl --user -u switchroom-${agentName3} -n 100\``;
+  return `Inspect with \`${tailCmd}\``;
 }
 function probeAgentProcessDocker() {
   const found = findAgentProcessInContainer();
@@ -37121,6 +37122,7 @@ function startTimer(deps) {
 import { existsSync as existsSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync, mkdirSync as mkdirSync5 } from "node:fs";
 import { dirname as dirname6, join as join6 } from "node:path";
 import { homedir as homedir2 } from "node:os";
+var SILENT_END_MAX_RETRIES = 1;
 function resolveStateDir(deps) {
   if (deps?.stateDir != null)
     return deps.stateDir;
@@ -37182,6 +37184,27 @@ function clearSilentEndState(turnKey, deps) {
 `);
   } catch {}
 }
+function readSilentEndState(deps) {
+  const statePath = resolveStatePath(deps);
+  if (!existsSync5(statePath))
+    return null;
+  try {
+    return JSON.parse(readFileSync3(statePath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function recordSilentTurnEnd(args, deps) {
+  const prev = readSilentEndState(deps);
+  if (prev != null && prev.turnKey === args.turnKey && prev.retryCount >= SILENT_END_MAX_RETRIES) {
+    clearSilentEndState(args.turnKey, deps);
+    emitLog(deps, `silent-end: re-prompt exhausted for turnKey=${args.turnKey} ` + `(retryCount=${prev.retryCount} >= ${SILENT_END_MAX_RETRIES}) \u2014 ` + `caller should deliver a fallback
+`);
+    return { exhausted: true };
+  }
+  writeSilentEndState(args, deps);
+  return { exhausted: false };
+}
 
 // turn-flush-safety.ts
 var SILENT_MARKERS = new Set(["NO_REPLY", "HEARTBEAT_OK"]);
@@ -47679,10 +47702,10 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.13.2";
-var COMMIT_SHA = "afa0fbea";
-var COMMIT_DATE = "2026-05-21T00:58:22Z";
-var LATEST_PR = 1610;
+var VERSION = "0.13.4";
+var COMMIT_SHA = "b4fd0264";
+var COMMIT_DATE = "2026-05-21T09:34:13Z";
+var LATEST_PR = 1628;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -48170,6 +48193,7 @@ function resolveCallingSubagent(opts) {
 
 // gateway/gateway.ts
 var REPLY_TO_TEXT_MAX = 200;
+var SILENT_END_FALLBACK_TEXT = "\u26A0\uFE0F The agent finished working but didn\u2019t send a reply \u2014 your last " + "message may not have been answered. Please try asking again.";
 installStderrTimestamps();
 installPluginLogger();
 installGlobalErrorHandlers();
@@ -51610,11 +51634,19 @@ function handleSessionEvent(ev) {
           ended_via: outboundMetrics.outboundCount > 0 ? "reply" : "silent"
         });
         if (outboundMetrics.outboundCount === 0) {
-          writeSilentEndState({
+          const silentEnd = recordSilentTurnEnd({
             chatId,
             threadId: threadId ?? null,
             turnKey: tKey
           });
+          if (silentEnd.exhausted) {
+            process.stderr.write(`telegram gateway: WARN silent-end fallback \u2014 agent stayed ` + `silent after the Stop-hook re-prompt; delivering fallback message chat=${chatId} turnKey=${tKey} (#1161)
+`);
+            retryWithThreadFallback(robustApiCall, (tid) => bot.api.sendMessage(chatId, SILENT_END_FALLBACK_TEXT, tid != null ? { message_thread_id: tid } : {}), { threadId, chat_id: chatId, verb: "silent-end-fallback.sendMessage" }).catch((err) => {
+              process.stderr.write(`telegram gateway: silent-end fallback send failed: ${err instanceof Error ? err.message : String(err)}
+`);
+            });
+          }
         }
         clear(tKey);
         endTurn(tKey);

package/telegram-plugin/gateway/boot-probes.ts

@@ -422,24 +422,31 @@ export function uptimeMsForStarttime(
 }
 
 /**
- * Compute a remediation hint for a non-active agent systemd state. Returns
+ * Compute a remediation hint for a non-active agent state. Returns
  * `undefined` when no actionable hint applies. Per `reference/principles.md`
  * principle 1, every degraded/fail row should tell the user what to do next.
- * Hints share a common journalctl shape so they're greppable across
- * agents.
+ *
+ * Runtime-aware: v0.7+ agents run in Docker — there is no systemd unit or
+ * `journalctl` in-container, so the log-tail command is gated on
+ * `SWITCHROOM_RUNTIME` exactly like the boot-card crash row (see
+ * `boot-card.ts` and #1376/#1382). All hints share a common log-tail shape
+ * so they stay greppable across agents.
  */
 function nextStepForAgentState(agentName: string, state: string): string | undefined {
+  const tailCmd = process.env.SWITCHROOM_RUNTIME === 'docker'
+    ? `docker logs --tail 100 switchroom-${agentName}`
+    : `journalctl --user -u switchroom-${agentName} -n 100`
   if (state === 'failed') {
-    return `Service failed — inspect with \`journalctl --user -u switchroom-${agentName} -n 100\` then \`switchroom agent restart ${agentName}\``
+    return `Service failed — inspect with \`${tailCmd}\` then \`switchroom agent restart ${agentName}\``
   }
   if (state === 'inactive') {
-    return `Service inactive — start with \`switchroom agent start ${agentName}\` (or \`systemctl --user start switchroom-${agentName}\`)`
+    return `Service inactive — start with \`switchroom agent start ${agentName}\``
   }
   if (state === 'deactivating' || state === 'activating' || state === 'auto-restart') {
     return `Service is in a transient \`${state}\` state — re-check with \`switchroom agent status ${agentName}\` in a few seconds`
   }
   // Unknown state — keep the door open with a generic hint.
-  return `Inspect with \`journalctl --user -u switchroom-${agentName} -n 100\``
+  return `Inspect with \`${tailCmd}\``
 }
 
 function probeAgentProcessDocker(): ProbeResult {

package/telegram-plugin/gateway/gateway.ts

@@ -76,7 +76,7 @@ import {
 import { emitRuntimeMetric } from '../runtime-metrics.js'
 import { classifyInbound } from '../inbound-classifier.js'
 import * as silencePoke from '../silence-poke.js'
-import { writeSilentEndState, clearSilentEndState } from '../silent-end.js'
+import { writeSilentEndState, clearSilentEndState, recordSilentTurnEnd } from '../silent-end.js'
 import { createAnswerStream, type AnswerStreamHandle } from '../answer-stream.js'
 import { type SessionEvent } from '../session-tail.js'
 import {
@@ -139,6 +139,16 @@ import { validateStringArray } from './access-validator.js'
  * identical envelope shapes.
  */
 const REPLY_TO_TEXT_MAX = 200
+
+/**
+ * #1161 — user-facing fallback delivered when a user-message turn ends
+ * with zero outbound messages AND the deterministic Stop-hook re-prompt
+ * has already been exhausted. Without this the user only sees the
+ * progress card vanish; silence must never be the failure mode.
+ */
+const SILENT_END_FALLBACK_TEXT =
+  '⚠️ The agent finished working but didn’t send a reply — your last ' +
+  'message may not have been answered. Please try asking again.'
 import { markdownToHtml, splitHtmlChunks, repairEscapedWhitespace, telegramHtmlToPlainText } from '../format.js'
 import {
   validateInlineKeyboard,
@@ -6290,16 +6300,44 @@ function handleSessionEvent(ev: SessionEvent): void {
           longest_silent_gap_ms: outboundMetrics.longestOutboundGapMs,
           ended_via: outboundMetrics.outboundCount > 0 ? 'reply' : 'silent',
         })
-        // #1122 PR4 fix: deterministic silent-end detection (see the
-        // silent-marker path above for the rationale). The Stop hook
-        // reads the file we write here and blocks the session-end so
-        // the agent can be re-prompted to call reply.
+        // #1122 PR4 / #1161: deterministic silent-end handling (see the
+        // silent-marker path above for the rationale).
+        //   - first silent-end → recordSilentTurnEnd writes the state
+        //     file so the Stop hook (silent-end-interrupt-stop.mjs)
+        //     blocks the session-end and re-prompts the agent to reply.
+        //   - the Stop-hook re-prompt is already spent and the agent is
+        //     STILL silent → recordSilentTurnEnd returns exhausted:true;
+        //     deliver a user-facing fallback so the turn never just
+        //     vanishes (the user otherwise only sees the card disappear).
         if (outboundMetrics.outboundCount === 0) {
-          writeSilentEndState({
+          const silentEnd = recordSilentTurnEnd({
             chatId,
             threadId: threadId ?? null,
             turnKey: tKey,
           })
+          if (silentEnd.exhausted) {
+            process.stderr.write(
+              `telegram gateway: WARN silent-end fallback — agent stayed ` +
+              `silent after the Stop-hook re-prompt; delivering fallback ` +
+              `message chat=${chatId} turnKey=${tKey} (#1161)\n`,
+            )
+            void retryWithThreadFallback(
+              robustApiCall,
+              (tid) =>
+                bot.api.sendMessage(
+                  chatId,
+                  SILENT_END_FALLBACK_TEXT,
+                  tid != null ? { message_thread_id: tid } : {},
+                ),
+              { threadId, chat_id: chatId, verb: 'silent-end-fallback.sendMessage' },
+            ).catch((err) => {
+              process.stderr.write(
+                `telegram gateway: silent-end fallback send failed: ${
+                  err instanceof Error ? err.message : String(err)
+                }\n`,
+              )
+            })
+          }
         }
         signalTracker.clear(tKey)
         silencePoke.endTurn(tKey)

package/telegram-plugin/hooks/silent-end-interrupt-stop.mjs

@@ -9,7 +9,9 @@
  * decision:block to re-prompt the agent instead of letting the session close.
  *
  * On the second silent-end (retryCount >= MAX_RETRIES), the hook allows the
- * stop so the gateway can render the "🙊 Ended without reply" warning card.
+ * stop. The gateway's turn-end path (recordSilentTurnEnd in silent-end.ts)
+ * detects the exhausted re-prompt and delivers a user-facing fallback
+ * message so the turn never silently vanishes (#1161).
  *
  * Carve-outs preserved:
  *   - wasAutonomous=true turns: the gateway never writes a state file for
@@ -30,6 +32,8 @@ import { readFileSync, writeFileSync, existsSync } from 'node:fs'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
 
+// MUST stay in sync with SILENT_END_MAX_RETRIES in telegram-plugin/silent-end.ts
+// (this hook is a standalone .mjs and can't import the TS module).
 const MAX_RETRIES = 1
 
 function readStdin() {

package/telegram-plugin/silent-end.ts

@@ -51,6 +51,14 @@ export interface SilentEndDeps {
   log?: (line: string) => void
 }
 
+/**
+ * How many times the Stop hook re-prompts a silent-end turn before it
+ * gives up. MUST stay in sync with `MAX_RETRIES` in the Stop hook
+ * (`telegram-plugin/hooks/silent-end-interrupt-stop.mjs`) — the hook is a
+ * standalone `.mjs` and can't import this module.
+ */
+export const SILENT_END_MAX_RETRIES = 1
+
 function resolveStateDir(deps?: SilentEndDeps): string {
   if (deps?.stateDir != null) return deps.stateDir
   const env = process.env.TELEGRAM_STATE_DIR
@@ -172,3 +180,51 @@ export function readSilentEndState(deps?: SilentEndDeps): SilentEndState | null
     return null
   }
 }
+
+/**
+ * Record a user-message turn that ended with zero outbound messages and
+ * report whether the deterministic re-prompt has been exhausted. This is
+ * the gateway's single entry point for the main turn-end path.
+ *
+ *   - First silent-end of a turn (no prior state, or prior `retryCount`
+ *     still below `SILENT_END_MAX_RETRIES`) → writes the state file via
+ *     `writeSilentEndState`, so `silent-end-interrupt-stop.mjs` blocks
+ *     the stop and re-prompts the agent. Returns `{ exhausted: false }`.
+ *
+ *   - A silent-end where the prior state for the SAME turn already shows
+ *     `retryCount >= SILENT_END_MAX_RETRIES` → the Stop hook already
+ *     spent its re-prompt and the agent is STILL silent. Recovery has
+ *     failed. Clears the state file (so the Stop hook on this final turn
+ *     finds nothing pending and allows the stop cleanly) and returns
+ *     `{ exhausted: true }` — the caller MUST then deliver a user-facing
+ *     fallback so the turn never just vanishes (#1161).
+ *
+ * Chat-less autonomous wakeup turns never reach here: the gateway only
+ * creates a `currentTurn` (and therefore only runs a turn-end handler)
+ * when the inbound event carries a chat id. Cron-fired turns DO carry a
+ * topic chat and reach this path — a cron task that means to stay silent
+ * must emit a NO_REPLY sentinel, which routes to the gateway's
+ * silent-marker branch and never gets a fallback.
+ */
+export function recordSilentTurnEnd(
+  args: { chatId: string; threadId: number | null; turnKey: string },
+  deps?: SilentEndDeps,
+): { exhausted: boolean } {
+  const prev = readSilentEndState(deps)
+  if (
+    prev != null &&
+    prev.turnKey === args.turnKey &&
+    prev.retryCount >= SILENT_END_MAX_RETRIES
+  ) {
+    clearSilentEndState(args.turnKey, deps)
+    emitLog(
+      deps,
+      `silent-end: re-prompt exhausted for turnKey=${args.turnKey} ` +
+        `(retryCount=${prev.retryCount} >= ${SILENT_END_MAX_RETRIES}) — ` +
+        `caller should deliver a fallback\n`,
+    )
+    return { exhausted: true }
+  }
+  writeSilentEndState(args, deps)
+  return { exhausted: false }
+}

package/telegram-plugin/tests/boot-probes.test.ts

@@ -1185,8 +1185,15 @@ describe('uptimeMsForStarttime', () => {
 // the probes covered by the boot-card-dedup-and-next-steps PR so we don't
 // silently lose the hint on a future refactor.
 
-describe('nextStep — agent systemd states', () => {
-  it('attaches a journalctl hint when the unit is failed', async () => {
+describe('nextStep — agent states', () => {
+  const savedRuntime = process.env.SWITCHROOM_RUNTIME
+  afterEach(() => {
+    if (savedRuntime === undefined) delete process.env.SWITCHROOM_RUNTIME
+    else process.env.SWITCHROOM_RUNTIME = savedRuntime
+  })
+
+  it('attaches a journalctl hint when the unit is failed (non-docker runtime)', async () => {
+    delete process.env.SWITCHROOM_RUNTIME
     const exec = makeSequence([makeSystemctlOutput('failed')])
     const r = await probeAgentProcess('klanker', {
       execFileImpl: exec as unknown as (cmd: string, args: string[]) => Promise<{ stdout: string; stderr: string }>,
@@ -1199,6 +1206,23 @@ describe('nextStep — agent systemd states', () => {
     expect(r.nextStep).toMatch(/switchroom-klanker/)
   })
 
+  // #1382: the failed/unknown-state hints must follow SWITCHROOM_RUNTIME the
+  // same way the boot-card crash row does (#1376) — no journalctl in-container.
+  it('attaches a docker-logs hint when the unit is failed under SWITCHROOM_RUNTIME=docker', async () => {
+    process.env.SWITCHROOM_RUNTIME = 'docker'
+    const exec = makeSequence([makeSystemctlOutput('failed')])
+    const r = await probeAgentProcess('klanker', {
+      execFileImpl: exec as unknown as (cmd: string, args: string[]) => Promise<{ stdout: string; stderr: string }>,
+      sleepImpl: async () => {},
+      retryIntervalMs: 1,
+      retryMaxMs: 0,
+    })
+    expect(r.status).toBe('fail')
+    expect(r.nextStep).toMatch(/docker logs/)
+    expect(r.nextStep).toMatch(/switchroom-klanker/)
+    expect(r.nextStep).not.toMatch(/journalctl/)
+  })
+
   it('attaches a transient-state hint when the unit is activating after retry budget', async () => {
     const exec = makeSequence([makeSystemctlOutput('activating')])
     const r = await probeAgentProcess('klanker', {

package/telegram-plugin/tests/silent-end.test.ts

@@ -7,6 +7,8 @@ import {
   writeSilentEndState,
   clearSilentEndState,
   readSilentEndState,
+  recordSilentTurnEnd,
+  SILENT_END_MAX_RETRIES,
 } from '../silent-end.js'
 
 let stateDir: string
@@ -118,6 +120,73 @@ describe('silent-end.ts — gateway state writer', () => {
   })
 })
 
+describe('recordSilentTurnEnd — #1161 exhaustion detection', () => {
+  it('first silent-end of a turn writes state and reports exhausted:false', () => {
+    const r = recordSilentTurnEnd({ chatId: 'c', threadId: null, turnKey: 'c:_' })
+    expect(r.exhausted).toBe(false)
+    expect(readSilentEndState()).toMatchObject({ turnKey: 'c:_', retryCount: 0 })
+  })
+
+  it('reports exhausted:false while prior retryCount is still below the cap', () => {
+    // The Stop hook has not yet been able to push retryCount to the cap.
+    const path = join(stateDir, 'silent-end-pending.json')
+    writeFileSync(path, JSON.stringify({
+      chatId: 'c', threadId: null, turnKey: 'c:_',
+      retryCount: SILENT_END_MAX_RETRIES - 1, timestamp: 0,
+    }))
+    const r = recordSilentTurnEnd({ chatId: 'c', threadId: null, turnKey: 'c:_' })
+    expect(r.exhausted).toBe(false)
+    // State is (re)written, inheriting the prior counter for the same turn.
+    expect(readSilentEndState()!.retryCount).toBe(SILENT_END_MAX_RETRIES - 1)
+  })
+
+  it('reports exhausted:true and clears state once the re-prompt cap is reached', () => {
+    // The Stop hook already blocked once and pushed retryCount to the cap;
+    // the agent is STILL silent on this re-prompted turn.
+    const path = join(stateDir, 'silent-end-pending.json')
+    writeFileSync(path, JSON.stringify({
+      chatId: 'c', threadId: null, turnKey: 'c:_',
+      retryCount: SILENT_END_MAX_RETRIES, timestamp: 0,
+    }))
+    const r = recordSilentTurnEnd({ chatId: 'c', threadId: null, turnKey: 'c:_' })
+    expect(r.exhausted).toBe(true)
+    // State cleared so the Stop hook on this final turn allows the stop.
+    expect(readSilentEndState()).toBeNull()
+  })
+
+  it('treats a capped prior state for a DIFFERENT turn as a fresh silent-end', () => {
+    const path = join(stateDir, 'silent-end-pending.json')
+    writeFileSync(path, JSON.stringify({
+      chatId: 'old', threadId: null, turnKey: 'old:_',
+      retryCount: SILENT_END_MAX_RETRIES, timestamp: 0,
+    }))
+    const r = recordSilentTurnEnd({ chatId: 'new', threadId: 9, turnKey: 'new:9' })
+    expect(r.exhausted).toBe(false)
+    expect(readSilentEndState()).toMatchObject({ turnKey: 'new:9', retryCount: 0 })
+  })
+
+  it('full lifecycle: silent → re-prompt → still silent → exhausted', () => {
+    // 1. Turn ends silent — first record.
+    expect(recordSilentTurnEnd({ chatId: 'c', threadId: null, turnKey: 'c:_' }).exhausted).toBe(false)
+    // 2. Stop hook blocks and increments retryCount (simulated).
+    const path = join(stateDir, 'silent-end-pending.json')
+    const s = readSilentEndState()!
+    writeFileSync(path, JSON.stringify({ ...s, retryCount: s.retryCount + 1 }))
+    // 3. Re-prompted turn ends silent again — recovery exhausted.
+    expect(recordSilentTurnEnd({ chatId: 'c', threadId: null, turnKey: 'c:_' }).exhausted).toBe(true)
+    expect(readSilentEndState()).toBeNull()
+  })
+
+  it('SILENT_END_MAX_RETRIES matches MAX_RETRIES in the Stop hook', () => {
+    // The hook is a standalone .mjs and hardcodes its own copy — this
+    // guards the two from drifting apart.
+    const hookSrc = readFileSync(join(__dirname, '..', 'hooks', 'silent-end-interrupt-stop.mjs'), 'utf8')
+    const m = hookSrc.match(/const MAX_RETRIES = (\d+)/)
+    expect(m).not.toBeNull()
+    expect(Number(m![1])).toBe(SILENT_END_MAX_RETRIES)
+  })
+})
+
 describe('silent-end-interrupt-stop hook — integration', () => {
   const hookPath = join(__dirname, '..', 'hooks', 'silent-end-interrupt-stop.mjs')