switchroom 0.13.24 → 0.13.25

package/dist/host-control/main.js

@@ -13769,7 +13769,6 @@ var SessionSchema = exports_external.object({
 var SessionContinuitySchema = exports_external.object({
   enabled: exports_external.boolean().optional().describe("Master switch for the session-handoff briefing (default true)."),
   show_handoff_line: exports_external.boolean().optional().describe("Whether the telegram plugin prepends a visible '↩️ Picked up…' " + "line to the first assistant reply after a restart (default true)."),
-  summarizer_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only").optional().describe("Anthropic model used to produce the handoff briefing."),
   max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
   resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
   resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale.")
@@ -13816,10 +13815,9 @@ var TelegramChannelSchema = exports_external.object({
         start: exports_external.number().int().min(0).max(23),
         end: exports_external.number().int().min(0).max(23),
         tz: exports_external.string().optional()
-      }).optional(),
-      model: exports_external.string().optional()
+      }).optional()
     })).optional()
-  }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "spawn a one-shot `claude -p` turn for the agent with the rendered " + "prompt. Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
+  }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "inject the rendered prompt into the agent's live session (#1625). " + "Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
   webhook_rate_limit: exports_external.object({
     rpm: exports_external.number().int().positive()
   }).optional().describe("Per-source rate limit for the webhook ingest path (#714). " + "Off by default — when this key is absent the handler skips " + "rate-limit checks entirely. Opt in by setting `rpm` to an " + "integer requests-per-minute (token bucket per (agent, source); " + "burst equal to rpm). When enabled, exceeding the limit returns " + "429 with Retry-After header; first throttle event per " + "(agent, source) per 60s window is written to " + "<agent>/telegram/issues.jsonl. " + "Cascades from defaults.channels.telegram.webhook_rate_limit.")

package/dist/vault/approvals/kernel-server.js

@@ -11026,7 +11026,6 @@ var init_schema = __esm(() => {
   SessionContinuitySchema = exports_external.object({
     enabled: exports_external.boolean().optional().describe("Master switch for the session-handoff briefing (default true)."),
     show_handoff_line: exports_external.boolean().optional().describe("Whether the telegram plugin prepends a visible '↩️ Picked up…' " + "line to the first assistant reply after a restart (default true)."),
-    summarizer_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only").optional().describe("Anthropic model used to produce the handoff briefing."),
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
     resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale.")
@@ -11073,10 +11072,9 @@ var init_schema = __esm(() => {
           start: exports_external.number().int().min(0).max(23),
           end: exports_external.number().int().min(0).max(23),
           tz: exports_external.string().optional()
-        }).optional(),
-        model: exports_external.string().optional()
+        }).optional()
       })).optional()
-    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "spawn a one-shot `claude -p` turn for the agent with the rendered " + "prompt. Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
+    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "inject the rendered prompt into the agent's live session (#1625). " + "Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
     webhook_rate_limit: exports_external.object({
       rpm: exports_external.number().int().positive()
     }).optional().describe("Per-source rate limit for the webhook ingest path (#714). " + "Off by default — when this key is absent the handler skips " + "rate-limit checks entirely. Opt in by setting `rpm` to an " + "integer requests-per-minute (token bucket per (agent, source); " + "burst equal to rpm). When enabled, exceeding the limit returns " + "429 with Retry-After header; first throttle event per " + "(agent, source) per 60s window is written to " + "<agent>/telegram/issues.jsonl. " + "Cascades from defaults.channels.telegram.webhook_rate_limit.")
@@ -11674,7 +11672,70 @@ import { Database } from "bun:sqlite";
 
 // src/vault/broker/protocol.ts
 init_zod();
+
+// src/vault/broker/peercred-ffi.ts
+function getPeerCred(fd) {
+  if (process.platform !== "linux")
+    return null;
+  try {
+    const ffi = __require("bun:ffi");
+    const { dlopen, FFIType, ptr } = ffi;
+    const SOL_SOCKET = 1;
+    const SO_PEERCRED = 17;
+    const UCRED_SIZE = 12;
+    const cache = getPeerCred;
+    const lib = cache._lib ?? (() => {
+      const candidates = ["libc.so.6", "libc.so"];
+      const symbolSpec = {
+        getsockopt: {
+          args: [FFIType.i32, FFIType.i32, FFIType.i32, FFIType.ptr, FFIType.ptr],
+          returns: FFIType.i32
+        }
+      };
+      const errors2 = [];
+      for (const name of candidates) {
+        try {
+          const opened = dlopen(name, symbolSpec);
+          cache._lib = opened;
+          return opened;
+        } catch (e) {
+          errors2.push(`${name}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      }
+      process.stderr.write(`[vault-broker] peercred-ffi: dlopen failed for all libc candidates ` + `(${errors2.join("; ")}); falling back to ss-parsing.
+`);
+      throw new Error("no libc candidate could be opened");
+    })();
+    const credBuf = new ArrayBuffer(UCRED_SIZE);
+    const lenBuf = new Uint32Array(1);
+    lenBuf[0] = UCRED_SIZE;
+    const rc = lib.symbols.getsockopt(fd, SOL_SOCKET, SO_PEERCRED, ptr(credBuf), ptr(lenBuf.buffer));
+    if (rc !== 0)
+      return null;
+    if (lenBuf[0] !== UCRED_SIZE)
+      return null;
+    const view = new DataView(credBuf);
+    return {
+      pid: view.getInt32(0, true),
+      uid: view.getInt32(4, true),
+      gid: view.getInt32(8, true)
+    };
+  } catch {
+    return null;
+  }
+}
+
+// src/vault/broker/peercred.ts
+var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+
+// src/vault/broker/protocol.ts
 var MAX_FRAME_BYTES = 64 * 1024;
+var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
+  message: "agent name is reserved"
+});
 var GetRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("get"),
@@ -11702,7 +11763,7 @@ var ListRequestSchema = exports_external.object({
 var MintGrantRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("mint_grant"),
-  agent: exports_external.string().min(1),
+  agent: AgentNameSchema,
   keys: exports_external.array(exports_external.string().min(1)),
   ttl_seconds: exports_external.number().int().positive().nullable(),
   description: exports_external.string().optional(),
@@ -11713,7 +11774,7 @@ var MintGrantRequestSchema = exports_external.object({
 var ListGrantsRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("list_grants"),
-  agent: exports_external.string().optional(),
+  agent: AgentNameSchema.optional(),
   passphrase: exports_external.string().optional(),
   attest_via_posture: exports_external.boolean().optional()
 });
@@ -11733,7 +11794,7 @@ var LockRequestSchema = exports_external.object({
 var PreflightAccessRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("preflight_access"),
-  agent: exports_external.string().min(1),
+  agent: AgentNameSchema,
   keys: exports_external.array(exports_external.string().min(1)).min(1).max(128)
 });
 var OkPreflightAccessResponseSchema = exports_external.object({
@@ -12654,64 +12715,6 @@ function mergeAgentConfig(defaultsIn, agentIn) {
   mergeAgentConfig.notifiedWorkerIsolationMove = false;
 })(mergeAgentConfig ||= {});
 
-// src/vault/broker/peercred-ffi.ts
-function getPeerCred(fd) {
-  if (process.platform !== "linux")
-    return null;
-  try {
-    const ffi = __require("bun:ffi");
-    const { dlopen, FFIType, ptr } = ffi;
-    const SOL_SOCKET = 1;
-    const SO_PEERCRED = 17;
-    const UCRED_SIZE = 12;
-    const cache = getPeerCred;
-    const lib = cache._lib ?? (() => {
-      const candidates = ["libc.so.6", "libc.so"];
-      const symbolSpec = {
-        getsockopt: {
-          args: [FFIType.i32, FFIType.i32, FFIType.i32, FFIType.ptr, FFIType.ptr],
-          returns: FFIType.i32
-        }
-      };
-      const errors2 = [];
-      for (const name of candidates) {
-        try {
-          const opened = dlopen(name, symbolSpec);
-          cache._lib = opened;
-          return opened;
-        } catch (e) {
-          errors2.push(`${name}: ${e instanceof Error ? e.message : String(e)}`);
-        }
-      }
-      process.stderr.write(`[vault-broker] peercred-ffi: dlopen failed for all libc candidates ` + `(${errors2.join("; ")}); falling back to ss-parsing.
-`);
-      throw new Error("no libc candidate could be opened");
-    })();
-    const credBuf = new ArrayBuffer(UCRED_SIZE);
-    const lenBuf = new Uint32Array(1);
-    lenBuf[0] = UCRED_SIZE;
-    const rc = lib.symbols.getsockopt(fd, SOL_SOCKET, SO_PEERCRED, ptr(credBuf), ptr(lenBuf.buffer));
-    if (rc !== 0)
-      return null;
-    if (lenBuf[0] !== UCRED_SIZE)
-      return null;
-    const view = new DataView(credBuf);
-    return {
-      pid: view.getInt32(0, true),
-      uid: view.getInt32(4, true),
-      gid: view.getInt32(8, true)
-    };
-  } catch {
-    return null;
-  }
-}
-
-// src/vault/broker/peercred.ts
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function isReservedAgentName(name) {
-  return RESERVED_AGENT_NAMES.has(name);
-}
-
 // src/memory/hindsight.ts
 var DEFAULT_RETAIN_MISSION = "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.";
 

package/dist/vault/broker/server.js

@@ -11026,7 +11026,6 @@ var init_schema = __esm(() => {
   SessionContinuitySchema = exports_external.object({
     enabled: exports_external.boolean().optional().describe("Master switch for the session-handoff briefing (default true)."),
     show_handoff_line: exports_external.boolean().optional().describe("Whether the telegram plugin prepends a visible '↩️ Picked up…' " + "line to the first assistant reply after a restart (default true)."),
-    summarizer_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only").optional().describe("Anthropic model used to produce the handoff briefing."),
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
     resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale.")
@@ -11073,10 +11072,9 @@ var init_schema = __esm(() => {
           start: exports_external.number().int().min(0).max(23),
           end: exports_external.number().int().min(0).max(23),
           tz: exports_external.string().optional()
-        }).optional(),
-        model: exports_external.string().optional()
+        }).optional()
       })).optional()
-    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "spawn a one-shot `claude -p` turn for the agent with the rendered " + "prompt. Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
+    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "inject the rendered prompt into the agent's live session (#1625). " + "Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default — opt in per agent. See src/web/webhook-dispatch.ts."),
     webhook_rate_limit: exports_external.object({
       rpm: exports_external.number().int().positive()
     }).optional().describe("Per-source rate limit for the webhook ingest path (#714). " + "Off by default — when this key is absent the handler skips " + "rate-limit checks entirely. Opt in by setting `rpm` to an " + "integer requests-per-minute (token bucket per (agent, source); " + "burst equal to rpm). When enabled, exceeding the limit returns " + "429 with Retry-After header; first throttle event per " + "(agent, source) per 60s window is written to " + "<agent>/telegram/issues.jsonl. " + "Cascades from defaults.channels.telegram.webhook_rate_limit.")
@@ -13103,6 +13101,9 @@ function checkGoogleAccountAcl(config, agentName, account, key) {
 // src/vault/broker/protocol.ts
 init_zod();
 var MAX_FRAME_BYTES = 64 * 1024;
+var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
+  message: "agent name is reserved"
+});
 var GetRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("get"),
@@ -13130,7 +13131,7 @@ var ListRequestSchema = exports_external.object({
 var MintGrantRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("mint_grant"),
-  agent: exports_external.string().min(1),
+  agent: AgentNameSchema,
   keys: exports_external.array(exports_external.string().min(1)),
   ttl_seconds: exports_external.number().int().positive().nullable(),
   description: exports_external.string().optional(),
@@ -13141,7 +13142,7 @@ var MintGrantRequestSchema = exports_external.object({
 var ListGrantsRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("list_grants"),
-  agent: exports_external.string().optional(),
+  agent: AgentNameSchema.optional(),
   passphrase: exports_external.string().optional(),
   attest_via_posture: exports_external.boolean().optional()
 });
@@ -13161,7 +13162,7 @@ var LockRequestSchema = exports_external.object({
 var PreflightAccessRequestSchema = exports_external.object({
   v: exports_external.literal(1),
   op: exports_external.literal("preflight_access"),
-  agent: exports_external.string().min(1),
+  agent: AgentNameSchema,
   keys: exports_external.array(exports_external.string().min(1)).min(1).max(128)
 });
 var OkPreflightAccessResponseSchema = exports_external.object({
@@ -16948,7 +16949,7 @@ class VaultBroker {
       const revoked = revokeGrant(this.grantsDb, id);
       try {
         const row = this.grantsDb.query("SELECT agent_slug FROM vault_grants WHERE id = ?").get(id);
-        if (row) {
+        if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
           const tokenPath = path3.join(os3.homedir(), ".switchroom", "agents", row.agent_slug, ".vault-token");
           if (existsSync8(tokenPath)) {
             try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.13.24",
+  "version": "0.13.25",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/_shared/telegram-style.md.hbs

@@ -5,10 +5,10 @@ Telegram is a chat — replies should feel like one, not a terminal dump or a tr
 **Every turn that responds to a user message MUST end with a `reply` (or `stream_reply` with `done=true`).** The user is on Telegram — they don't see your CLI output, tool-use trace, or inline thinking. The ONLY path for words to reach them is an MCP tool call. If you have a final answer, send it via `reply`. The text in your terminal is not the conversation.
 
 **Conversational pacing — a human is on the other side.** Match the rhythm of a capable colleague messaging you back. Five beats:
-- **1 · Acknowledge first.** Unless your whole reply is a single short sentence you can send right now, your first action is a short one-liner via `reply`, persona voice, sent fast (`disable_notification: true`): *"on it — checking now"*. This holds whether the work ahead is a tool call or a paragraph of pure reasoning — if the answer will run long, ack *before* you compose it. Skip the ack only for an immediate one-sentence answer (*"what's 2+2"*). This is a beat, not filler — it's the line between a colleague and a black box.
+- **1 · Acknowledge first.** Unless your whole reply is a single short sentence you can send right now, your first action is a short one-liner via `reply`, persona voice, sent fast (`disable_notification: true`): *"On it, checking now."*. This holds whether the work ahead is a tool call or a paragraph of pure reasoning — if the answer will run long, ack *before* you compose it. Skip the ack only for an immediate one-sentence answer (*"What's 2+2?"*). This is a beat, not filler — it's the line between a colleague and a black box.
 - **2 · Then go quiet and work.** Heads-down is right — do **not** narrate every tool call. A typing indicator runs for you automatically; you don't keep it alive.
 - **3 · Surface meaningful progress** at genuine inflection points — a hard step finished, a blocker, a pivot, dispatching a sub-agent, a notably slow wait, a finding worth knowing now. One short `reply`, `disable_notification: true` (no mid-turn ping).
-- **4 · Hand back delegations with synthesis.** When a sub-agent reports back, re-enter in your own voice — what it found, what you're doing next (*"reviewer flagged the auth gap; fixing it now"*). Never let its raw report stand as your reply. A *background* worker finishes after your turn has ended — its result is delivered to you as a fresh `<channel source="subagent_handback">` turn. That turn IS your cue: synthesise it for the user right then; don't treat it as noise and don't stay silent.
+- **4 · Hand back delegations with synthesis.** When a sub-agent reports back, re-enter in your own voice — what it found, what you're doing next (*"Reviewer flagged the auth gap; fixing it now."*). Never let its raw report stand as your reply. A *background* worker finishes after your turn has ended — its result is delivered to you as a fresh `<channel source="subagent_handback">` turn. That turn IS your cue: synthesise it for the user right then; don't treat it as noise and don't stay silent.
 - **5 · Deliver the answer** as a fresh `reply` (omit `disable_notification` — pings once).
 
 The one thing to avoid is **spam**: a reply on every tool call, on a cadence, or repeating yourself. Responsive and human, never a flood. A `<system-reminder>` containing `[silence-poke]` means you've gone quiet too long — send one short `reply` and carry on; skip it only if you're within ~5s of finishing.
@@ -29,7 +29,7 @@ The 👀→🤔→🔥→👍 status reaction and the typing indicator are *ambi
 
 If both `queued` and `steering` are somehow present, `steering` wins (explicit opt-in beats default). If `prior_turn_in_progress="true"` is set without either flag (shouldn't happen but defensive), treat the message as a follow-up related to your last reply.
 
-**Self-narrate the classification.** At the top of your reply for any `steering` or `queued` message, include a brief italic one-liner so the user can correct you — e.g. `_↪️ treating as steer on the prior task_` or `_📥 queued as a new task_`.
+**Self-narrate the classification.** At the top of your reply for any `steering` or `queued` message, include a brief italic one-liner so the user can correct you — e.g. `_↪️ Treating as steer on the prior task_` or `_📥 Queued as a new task_`.
 
 **Formatting** (Telegram HTML — `reply` and `stream_reply` default to `format: "html"` and convert markdown for you):
 - Use **bold** sparingly for emphasis on key facts only
@@ -62,7 +62,7 @@ Don't use `accent` on routine conversational replies — it's for status communi
 
 **When stickers / GIFs land badly**: in lieu of an actual answer, decorating routine acknowledgements ("got it 👍 [+sticker]"), peppering a long thread, or any time the user is task-focused. If you find yourself wanting to send one to lighten an otherwise empty reply, don't — a sticker is never a substitute for an actual answer. Two stickers in a row is always wrong.
 
-**Interrupt marker.** If a user asks how to stop you mid-turn, tell them: *"Start your message with `!` — it interrupts whatever I'm doing and treats the rest as a fresh request."* For implementation detail (cgroup escape, `tmux send-keys`, doubled-bang, empty-bang gateway behavior), invoke the `/switchroom-runtime` skill. The `!` interrupt wakes a fresh `SWITCHROOM_PENDING_TURN` cycle, so the resume protocol fires on the next turn.
+**Interrupt marker.** If a user asks how to stop you mid-turn, tell them: *"Start your message with `!` to interrupt whatever I'm doing and treat the rest as a fresh request."* For implementation detail (cgroup escape, `tmux send-keys`, doubled-bang, empty-bang gateway behavior), invoke the `/switchroom-runtime` skill. The `!` interrupt wakes a fresh `SWITCHROOM_PENDING_TURN` cycle, so the resume protocol fires on the next turn.
 
 **Wake audit on fresh boot.** If `$TELEGRAM_STATE_DIR/.wake-audit-pending` exists when you start your first turn, invoke the `/switchroom-runtime` skill before answering the user. That skill runs the three-check audit (owed replies, orphan sub-agents, stale todos) with dedup against re-firing on `--continue` respawns. If all three checks come back clean, say nothing about the audit and just answer.
 

package/telegram-plugin/dist/gateway/gateway.js

@@ -23670,7 +23670,6 @@ var init_schema = __esm(() => {
   SessionContinuitySchema = exports_external.object({
     enabled: exports_external.boolean().optional().describe("Master switch for the session-handoff briefing (default true)."),
     show_handoff_line: exports_external.boolean().optional().describe("Whether the telegram plugin prepends a visible '\u21a9\ufe0f Picked up\u2026' " + "line to the first assistant reply after a restart (default true)."),
-    summarizer_model: exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._\-/\[\]:]*$/, "Model name must be alphanumeric with ._-/[]: only").optional().describe("Anthropic model used to produce the handoff briefing."),
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
     resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale.")
@@ -23717,10 +23716,9 @@ var init_schema = __esm(() => {
           start: exports_external.number().int().min(0).max(23),
           end: exports_external.number().int().min(0).max(23),
           tz: exports_external.string().optional()
-        }).optional(),
-        model: exports_external.string().optional()
+        }).optional()
       })).optional()
-    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "spawn a one-shot `claude -p` turn for the agent with the rendered " + "prompt. Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default \u2014 opt in per agent. See src/web/webhook-dispatch.ts."),
+    }).optional().describe("Auto-dispatch rules: when a verified webhook event matches a rule, " + "inject the rendered prompt into the agent's live session (#1625). " + "Supports cooldowns, quiet hours, and label/action matchers. " + "Off by default \u2014 opt in per agent. See src/web/webhook-dispatch.ts."),
     webhook_rate_limit: exports_external.object({
       rpm: exports_external.number().int().positive()
     }).optional().describe("Per-source rate limit for the webhook ingest path (#714). " + "Off by default \u2014 when this key is absent the handler skips " + "rate-limit checks entirely. Opt in by setting `rpm` to an " + "integer requests-per-minute (token bucket per (agent, source); " + "burst equal to rpm). When enabled, exceeding the limit returns " + "429 with Retry-After header; first throttle event per " + "(agent, source) per 60s window is written to " + "<agent>/telegram/issues.jsonl. " + "Cascades from defaults.channels.telegram.webhook_rate_limit.")
@@ -24658,6 +24656,20 @@ function formatResetRelative(target, now = new Date) {
 }
 var OAUTH_BETA = "oauth-2025-04-20", DEFAULT_USER_AGENT = "claude-cli/1.0.0 (external, cli)", DEFAULT_PROBE_MODEL = "claude-haiku-4-5-20251001";
 var init_quota_check = () => {};
+// ../src/vault/broker/peercred.ts
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+function unlockSocketFor(dataSocketPath) {
+  if (dataSocketPath.endsWith("/sock")) {
+    return dataSocketPath.slice(0, -"/sock".length) + "/unlock";
+  }
+  return dataSocketPath.replace(/\.sock$/, ".unlock.sock");
+}
+var RESERVED_AGENT_NAMES;
+var init_peercred = __esm(() => {
+  RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+});
 
 // ../src/vault/broker/protocol.ts
 function encodeRequest2(req) {
@@ -24675,10 +24687,14 @@ function decodeResponse2(line) {
   const obj = JSON.parse(line);
   return ResponseSchema2.parse(obj);
 }
-var MAX_FRAME_BYTES2, GetRequestSchema, PutRequestSchema, ListRequestSchema, MintGrantRequestSchema, ListGrantsRequestSchema, RevokeGrantRequestSchema, StatusRequestSchema, LockRequestSchema, PreflightAccessRequestSchema, OkPreflightAccessResponseSchema, ApprovalRequestRequestSchema, ApprovalLookupRequestSchema, ApprovalConsumeRequestSchema, ApprovalRevokeRequestSchema, ApprovalListRequestSchema, ApprovalDecisionModeSchema, ApprovalRecordRequestSchema, ApprovalConsumeRecordRequestSchema, RequestSchema2, VaultEntrySchema, ErrorCode, OkEntryResponseSchema, OkKeysResponseSchema, BrokerStatus, OkStatusResponseSchema, OkLockResponseSchema, OkPutResponseSchema, OkMintGrantResponseSchema, GrantMetaSchema, OkListGrantsResponseSchema, OkRevokeGrantResponseSchema, OkApprovalRequestResponseSchema, ApprovalDecisionMetaSchema, OkApprovalLookupResponseSchema, OkApprovalConsumeResponseSchema, OkApprovalRevokeResponseSchema, OkApprovalListResponseSchema, OkApprovalRecordResponseSchema, OkApprovalConsumeRecordResponseSchema, ErrorResponseSchema2, ResponseSchema2;
+var MAX_FRAME_BYTES2, AgentNameSchema, GetRequestSchema, PutRequestSchema, ListRequestSchema, MintGrantRequestSchema, ListGrantsRequestSchema, RevokeGrantRequestSchema, StatusRequestSchema, LockRequestSchema, PreflightAccessRequestSchema, OkPreflightAccessResponseSchema, ApprovalRequestRequestSchema, ApprovalLookupRequestSchema, ApprovalConsumeRequestSchema, ApprovalRevokeRequestSchema, ApprovalListRequestSchema, ApprovalDecisionModeSchema, ApprovalRecordRequestSchema, ApprovalConsumeRecordRequestSchema, RequestSchema2, VaultEntrySchema, ErrorCode, OkEntryResponseSchema, OkKeysResponseSchema, BrokerStatus, OkStatusResponseSchema, OkLockResponseSchema, OkPutResponseSchema, OkMintGrantResponseSchema, GrantMetaSchema, OkListGrantsResponseSchema, OkRevokeGrantResponseSchema, OkApprovalRequestResponseSchema, ApprovalDecisionMetaSchema, OkApprovalLookupResponseSchema, OkApprovalConsumeResponseSchema, OkApprovalRevokeResponseSchema, OkApprovalListResponseSchema, OkApprovalRecordResponseSchema, OkApprovalConsumeRecordResponseSchema, ErrorResponseSchema2, ResponseSchema2;
 var init_protocol2 = __esm(() => {
   init_zod();
+  init_peercred();
   MAX_FRAME_BYTES2 = 64 * 1024;
+  AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
+    message: "agent name is reserved"
+  });
   GetRequestSchema = exports_external.object({
     v: exports_external.literal(1),
     op: exports_external.literal("get"),
@@ -24706,7 +24722,7 @@ var init_protocol2 = __esm(() => {
   MintGrantRequestSchema = exports_external.object({
     v: exports_external.literal(1),
     op: exports_external.literal("mint_grant"),
-    agent: exports_external.string().min(1),
+    agent: AgentNameSchema,
     keys: exports_external.array(exports_external.string().min(1)),
     ttl_seconds: exports_external.number().int().positive().nullable(),
     description: exports_external.string().optional(),
@@ -24717,7 +24733,7 @@ var init_protocol2 = __esm(() => {
   ListGrantsRequestSchema = exports_external.object({
     v: exports_external.literal(1),
     op: exports_external.literal("list_grants"),
-    agent: exports_external.string().optional(),
+    agent: AgentNameSchema.optional(),
     passphrase: exports_external.string().optional(),
     attest_via_posture: exports_external.boolean().optional()
   });
@@ -24737,7 +24753,7 @@ var init_protocol2 = __esm(() => {
   PreflightAccessRequestSchema = exports_external.object({
     v: exports_external.literal(1),
     op: exports_external.literal("preflight_access"),
-    agent: exports_external.string().min(1),
+    agent: AgentNameSchema,
     keys: exports_external.array(exports_external.string().min(1)).min(1).max(128)
   });
   OkPreflightAccessResponseSchema = exports_external.object({
@@ -24984,17 +25000,6 @@ var init_protocol2 = __esm(() => {
     ErrorResponseSchema2
   ]);
 });
-// ../src/vault/broker/peercred.ts
-function unlockSocketFor(dataSocketPath) {
-  if (dataSocketPath.endsWith("/sock")) {
-    return dataSocketPath.slice(0, -"/sock".length) + "/unlock";
-  }
-  return dataSocketPath.replace(/\.sock$/, ".unlock.sock");
-}
-var RESERVED_AGENT_NAMES;
-var init_peercred = __esm(() => {
-  RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-});
 
 // ../src/runtime-mode.ts
 function isDockerRuntime() {
@@ -43194,7 +43199,7 @@ var GetStatusRequestSchema = exports_external.object({
     target_request_id: exports_external.string().min(1).max(128)
   })
 });
-var AgentNameSchema = exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII");
+var AgentNameSchema2 = exports_external.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII");
 var UpdateCheckRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("update_check"),
@@ -43219,21 +43224,21 @@ var AgentStartRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_start"),
   args: exports_external.object({
-    name: AgentNameSchema
+    name: AgentNameSchema2
   })
 });
 var AgentStopRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_stop"),
   args: exports_external.object({
-    name: AgentNameSchema
+    name: AgentNameSchema2
   })
 });
 var AgentLogsRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_logs"),
   args: exports_external.object({
-    name: AgentNameSchema,
+    name: AgentNameSchema2,
     tail: exports_external.number().int().positive().max(2000).optional()
   })
 });
@@ -43241,7 +43246,7 @@ var AgentExecRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_exec"),
   args: exports_external.object({
-    name: AgentNameSchema,
+    name: AgentNameSchema2,
     argv: exports_external.array(exports_external.string().min(1)).min(1).max(32)
   })
 });
@@ -43254,7 +43259,7 @@ var AgentSmokeRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_smoke"),
   args: exports_external.object({
-    name: AgentNameSchema,
+    name: AgentNameSchema2,
     deep: exports_external.boolean().optional()
   })
 });
@@ -48323,10 +48328,10 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.13.24";
-var COMMIT_SHA = "9bfca233";
-var COMMIT_DATE = "2026-05-24T03:50:31Z";
-var LATEST_PR = 1708;
+var VERSION = "0.13.25";
+var COMMIT_SHA = "e927d05d";
+var COMMIT_DATE = "2026-05-24T05:14:52Z";
+var LATEST_PR = 1717;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts

package/telegram-plugin/tests/telegram-format.test.ts

@@ -32,8 +32,8 @@ describe('markdownToHtml', () => {
     expect(markdownToHtml('Hello _world_')).toContain('<i>world</i>')
   })
 
-  test('converts emoji-leading _📥 queued as a new task_', () => {
-    expect(markdownToHtml('_📥 queued as a new task_')).toContain('<i>📥 queued as a new task</i>')
+  test('converts emoji-leading _📥 Queued as a new task_', () => {
+    expect(markdownToHtml('_📥 Queued as a new task_')).toContain('<i>📥 Queued as a new task</i>')
   })
 
   test('converts emoji-trailing _steer on the prior task 🔁_', () => {

package/telegram-plugin/uat/scenarios/jtbd-rapid-followup-dm.test.ts

@@ -45,7 +45,7 @@ describe("uat: rapid follow-ups — steering vs queued classification", () => {
 
         // The agent should reply mentioning md5 AND surface the italic
         // classification line per the prompt
-        // ("_↪️ treating as steer on the prior task_" or similar).
+        // ("_↪️ Treating as steer on the prior task_" or similar).
         // We match either explicit-steer narration OR the steer emoji
         // (`↪️`) to allow for natural-language variation while still
         // failing if no narration appears (the previous version of