switchroom 0.13.33 → 0.13.36

package/dist/vault/approvals/kernel-server.js

@@ -10948,7 +10948,7 @@ var init_dist = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -11294,8 +11294,15 @@ var init_schema = __esm(() => {
     weekly_budget_usd: exports_external.number().positive().optional().describe("Weekly USD spend budget. If unset, the greeting shows raw usage only."),
     monthly_budget_usd: exports_external.number().positive().optional().describe("Monthly USD spend budget. If unset, the greeting shows raw usage only.")
   });
+  AutoReleaseCheckSchema = exports_external.object({
+    enabled: exports_external.boolean().default(false).describe("When true, hostd polls the remote release tag every " + "`interval_minutes` and applies + restarts the fleet when a new " + "release is detected. Default false — opt-in."),
+    interval_minutes: exports_external.number().int().min(5).max(1440).default(5).describe("Poll interval in minutes. Floor of 5m matches the agent-config " + "cron rate limit; ceiling of 1440m (24h) is a sanity cap."),
+    apply_on_detect: exports_external.boolean().default(true).describe("When false, hostd logs `release_detected` but does NOT call " + "update_apply / restart all. Useful for dogfooding the detector " + "without rolling the fleet."),
+    image_ref: exports_external.string().default("ghcr.io/switchroom/switchroom-agent:latest").describe("Image reference whose remote digest is compared to the local " + "image digest. Defaults to the agent image's :latest tag, which " + "is the canonical signal that a release has been promoted.")
+  });
   HostControlConfigSchema = exports_external.object({
-    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
+    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3)."),
+    auto_release_check: AutoReleaseCheckSchema.default({}).describe("Pull-based release-triggered fleet restart (#1743). hostd polls " + "the remote release tag on a fixed interval and applies + " + "restarts the fleet (graceful) when a new release is detected. " + "Opt-in: default enabled=false.")
   });
   HostdConfigSchema = exports_external.object({
     config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),

package/dist/vault/broker/server.js

@@ -10948,7 +10948,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -11294,8 +11294,15 @@ var init_schema = __esm(() => {
     weekly_budget_usd: exports_external.number().positive().optional().describe("Weekly USD spend budget. If unset, the greeting shows raw usage only."),
     monthly_budget_usd: exports_external.number().positive().optional().describe("Monthly USD spend budget. If unset, the greeting shows raw usage only.")
   });
+  AutoReleaseCheckSchema = exports_external.object({
+    enabled: exports_external.boolean().default(false).describe("When true, hostd polls the remote release tag every " + "`interval_minutes` and applies + restarts the fleet when a new " + "release is detected. Default false — opt-in."),
+    interval_minutes: exports_external.number().int().min(5).max(1440).default(5).describe("Poll interval in minutes. Floor of 5m matches the agent-config " + "cron rate limit; ceiling of 1440m (24h) is a sanity cap."),
+    apply_on_detect: exports_external.boolean().default(true).describe("When false, hostd logs `release_detected` but does NOT call " + "update_apply / restart all. Useful for dogfooding the detector " + "without rolling the fleet."),
+    image_ref: exports_external.string().default("ghcr.io/switchroom/switchroom-agent:latest").describe("Image reference whose remote digest is compared to the local " + "image digest. Defaults to the agent image's :latest tag, which " + "is the canonical signal that a release has been promoted.")
+  });
   HostControlConfigSchema = exports_external.object({
-    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
+    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3)."),
+    auto_release_check: AutoReleaseCheckSchema.default({}).describe("Pull-based release-triggered fleet restart (#1743). hostd polls " + "the remote release tag on a fixed interval and applies + " + "restarts the fleet (graceful) when a new release is detected. " + "Opt-in: default enabled=false.")
   });
   HostdConfigSchema = exports_external.object({
     config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.13.33",
+  "version": "0.13.36",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/default/CLAUDE.md.hbs

@@ -108,7 +108,7 @@ If no sub-agents are configured, do the work yourself.
 
 By default, every restart starts a **fresh `claude` session** — the in-flight transcript is NOT carried over (`session_continuity.resume_mode: handoff`, the default since switchroom #362). Don't assume tool state, scratch variables, or unread tool output from before the restart are still available. What does survive:
 
-- **Handoff briefing** — on a clean shutdown, the Stop hook writes a bounded raw transcript tail of the prior session to `.handoff.md`. On boot, start.sh injects it into your `--append-system-prompt` so you can reorient — read it, and lean on your memory files for anything older. If the prior session crashed before the Stop hook fired, a live briefing is assembled from recent Telegram messages, Hindsight recall, and today's daily memory file (`.handoff-briefing.md`).
+- **Handoff briefing** — on a clean shutdown, the Stop hook writes a bounded raw transcript tail of the prior session to `.handoff.md`. On boot, start.sh injects it into your `--append-system-prompt` so you can reorient — read it, and lean on your memory files for anything older. If `.handoff.md` is missing or stale (fresh agent, or pre-Stop-hook crash), `start.sh` runs `handoff-briefing.sh` to assemble `.handoff-briefing.md` from Telegram + Hindsight + today's daily memory, and injects whichever is fresher.
 - **Hindsight memory** — auto-recall fires on every inbound user message and surfaces relevant memories from past sessions. Long-term facts, decisions, and mental models live here, not in the transcript.
 - **Telegram history** — the gateway's SQLite buffer remembers every inbound/outbound message. Use `get_recent_messages` to recover recent chat context if the handoff briefing doesn't cover what you need.
 - **`SWITCHROOM_PENDING_TURN`** — if your previous session was killed mid-turn (watchdog, SIGTERM, timeout), start.sh exports this env var plus the chat/thread/last-user-message context. Acknowledge the interruption and ask for direction rather than silently resuming.

package/telegram-plugin/dist/gateway/gateway.js

@@ -23592,7 +23592,7 @@ var init_dist = __esm(() => {
 });
 
 // ../src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -23938,8 +23938,15 @@ var init_schema = __esm(() => {
     weekly_budget_usd: exports_external.number().positive().optional().describe("Weekly USD spend budget. If unset, the greeting shows raw usage only."),
     monthly_budget_usd: exports_external.number().positive().optional().describe("Monthly USD spend budget. If unset, the greeting shows raw usage only.")
   });
+  AutoReleaseCheckSchema = exports_external.object({
+    enabled: exports_external.boolean().default(false).describe("When true, hostd polls the remote release tag every " + "`interval_minutes` and applies + restarts the fleet when a new " + "release is detected. Default false \u2014 opt-in."),
+    interval_minutes: exports_external.number().int().min(5).max(1440).default(5).describe("Poll interval in minutes. Floor of 5m matches the agent-config " + "cron rate limit; ceiling of 1440m (24h) is a sanity cap."),
+    apply_on_detect: exports_external.boolean().default(true).describe("When false, hostd logs `release_detected` but does NOT call " + "update_apply / restart all. Useful for dogfooding the detector " + "without rolling the fleet."),
+    image_ref: exports_external.string().default("ghcr.io/switchroom/switchroom-agent:latest").describe("Image reference whose remote digest is compared to the local " + "image digest. Defaults to the agent image's :latest tag, which " + "is the canonical signal that a release has been promoted.")
+  });
   HostControlConfigSchema = exports_external.object({
-    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip \u2014 the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` \u2014 " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C \u00a75.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
+    enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip \u2014 the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` \u2014 " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C \u00a75.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3)."),
+    auto_release_check: AutoReleaseCheckSchema.default({}).describe("Pull-based release-triggered fleet restart (#1743). hostd polls " + "the remote release tag on a fixed interval and applies + " + "restarts the fleet (graceful) when a new release is detected. " + "Opt-in: default enabled=false.")
   });
   HostdConfigSchema = exports_external.object({
     config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit \u00a73). Default false \u2014 the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
@@ -25285,6 +25292,39 @@ function parseDriveScope(scope) {
   return { action, target: { kind: "doc", doc_id: rest } };
 }
 
+// gateway/oversize-card-body.ts
+function truncateRawToFit(input) {
+  const { raw, render, cap, sentinel } = input;
+  const hardLimit = input.hardLimit ?? cap + 196;
+  const fullBody = render(raw);
+  if (fullBody.length <= cap) {
+    return { body: fullBody, truncated: false };
+  }
+  let lo = 0;
+  let hi = raw.length;
+  let bestSliceLen = 0;
+  while (lo <= hi) {
+    const mid = lo + hi >>> 1;
+    const candidate = raw.slice(0, mid) + sentinel;
+    if (render(candidate).length <= cap) {
+      bestSliceLen = mid;
+      lo = mid + 1;
+    } else {
+      hi = mid - 1;
+    }
+  }
+  let chosenRaw = raw.slice(0, bestSliceLen);
+  const lastNl = chosenRaw.lastIndexOf(`
+`);
+  if (lastNl > 0)
+    chosenRaw = chosenRaw.slice(0, lastNl);
+  let body = render(chosenRaw + sentinel);
+  if (body.length > hardLimit) {
+    body = body.slice(0, hardLimit - 1);
+  }
+  return { body, truncated: true };
+}
+
 // secret-detect/suppressor.ts
 function isSuppressed(text, start, end) {
   const left = Math.max(0, start - WINDOW);
@@ -29053,49 +29093,90 @@ var init_materialize_bot_token = __esm(() => {
 // gateway/config-approval-handler.ts
 var exports_config_approval_handler = {};
 __export(exports_config_approval_handler, {
+  truncateDiffForCard: () => truncateDiffForCard,
   resolvePendingConfigApproval: () => resolvePendingConfigApproval,
   parseConfigApprovalCallback: () => parseConfigApprovalCallback,
   handleRequestConfigFinalize: () => handleRequestConfigFinalize,
   handleRequestConfigApproval: () => handleRequestConfigApproval,
   buildConfigApprovalCardBody: () => buildConfigApprovalCardBody,
   _resetPendingConfigApprovalsForTest: () => _resetPendingConfigApprovalsForTest,
-  _peekPendingConfigApprovalForTest: () => _peekPendingConfigApprovalForTest
+  _peekPendingConfigApprovalForTest: () => _peekPendingConfigApprovalForTest,
+  DIFF_SENTINEL: () => DIFF_SENTINEL
 });
+function truncateDiffForCard(unifiedDiff, maxLines = 50, maxChars = 3000) {
+  const sentinel = `
+[\u2026 diff continues, see attached file]`;
+  const lines = unifiedDiff.split(`
+`);
+  let out;
+  if (lines.length <= maxLines) {
+    out = unifiedDiff;
+  } else {
+    out = lines.slice(0, maxLines).join(`
+`);
+  }
+  if (out.length > maxChars) {
+    const cap = out.slice(0, maxChars);
+    const lastNl = cap.lastIndexOf(`
+`);
+    out = lastNl > 0 ? cap.slice(0, lastNl) : cap;
+  }
+  return out === unifiedDiff ? out : out + sentinel;
+}
+function escapeHtml11(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function clipReason(reason) {
+  if (reason.length <= REASON_MAX_CHARS)
+    return reason;
+  return reason.slice(0, REASON_MAX_CHARS - REASON_ELLIPSIS.length) + REASON_ELLIPSIS;
+}
 function buildConfigApprovalCardBody(args) {
-  const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-  return `\uD83D\uDEE0 <b>Config edit proposed</b>
-` + `Agent: <code>${esc(args.agentName)}</code>
-` + `Reason: ${esc(args.reason)}
-
-` + `<pre>${esc(args.unifiedDiff)}</pre>`;
+  const safeReason = clipReason(args.reason);
+  const render = (diff) => `\uD83D\uDEE0 <b>Config edit proposed</b>
+` + `Agent: <code>${escapeHtml11(args.agentName)}</code>
+` + `Reason: ${escapeHtml11(safeReason)}
+
+` + `<pre>${escapeHtml11(diff)}</pre>`;
+  return truncateRawToFit({
+    raw: args.unifiedDiff,
+    render,
+    cap: RENDERED_BODY_CAP2,
+    sentinel: DIFF_SENTINEL,
+    hardLimit: TELEGRAM_SENDMESSAGE_LIMIT2
+  });
 }
 async function handleRequestConfigApproval(client3, msg, deps) {
-  const reply = (verdict, reason) => {
+  const reply = (verdict, reason, denySource) => {
     try {
       client3.send({
         type: "config_approval_resolved",
         requestId: msg.requestId,
         verdict,
-        ...reason ? { reason } : {}
+        ...reason ? { reason } : {},
+        ...denySource ? { denySource } : {}
       });
     } catch (err) {
       deps.log?.(`config_approval_resolved send failed (requestId=${msg.requestId}): ${err.message}`);
     }
   };
   if (msg.agentName !== deps.agentName) {
-    reply("deny", `gateway serves '${deps.agentName}', not '${msg.agentName}'`);
+    reply("deny", `gateway serves '${deps.agentName}', not '${msg.agentName}'`, "dispatch_failure");
     return;
   }
   const target = deps.loadTargetChat();
   if (target === null) {
-    reply("deny", "no target chat available \u2014 operator not paired?");
+    reply("deny", "no target chat available \u2014 operator not paired?", "dispatch_failure");
     return;
   }
-  const body = buildConfigApprovalCardBody({
+  const prelim = truncateDiffForCard(msg.unifiedDiff);
+  const built = buildConfigApprovalCardBody({
     agentName: msg.agentName,
     reason: msg.reason,
-    unifiedDiff: msg.unifiedDiff
+    unifiedDiff: prelim
   });
+  const body = built.body;
+  const oversize = prelim !== msg.unifiedDiff || built.truncated;
   const replyMarkup = deps.buildKeyboard(msg.requestId);
   const posted = await deps.postCard({
     chatId: target.chatId,
@@ -29104,9 +29185,12 @@ async function handleRequestConfigApproval(client3, msg, deps) {
     replyMarkup
   });
   if (posted === null) {
-    reply("deny", "Telegram sendMessage failed");
+    reply("deny", "Telegram sendMessage failed", "dispatch_failure");
     return;
   }
+  if (oversize) {
+    await maybePostAttachment(deps, target, msg);
+  }
   const entry = {
     requestId: msg.requestId,
     client: client3,
@@ -29172,8 +29256,21 @@ ${escapeHtml11(msg.detail)}` : ""}`;
     deps.log?.(`config finalize card edit failed (requestId=${msg.requestId}): ${err.message}`);
   }
 }
-function escapeHtml11(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+async function maybePostAttachment(deps, target, msg) {
+  if (deps.postAttachment === undefined) {
+    deps.log?.(`oversize config approval card but no postAttachment dep wired (requestId=${msg.requestId})`);
+    return;
+  }
+  try {
+    await deps.postAttachment({
+      chatId: target.chatId,
+      ...target.threadId !== undefined ? { threadId: target.threadId } : {},
+      filename: `config-edit-${msg.requestId}.patch`,
+      content: msg.unifiedDiff
+    });
+  } catch (err) {
+    deps.log?.(`config approval attachment failed (requestId=${msg.requestId}): ${err.message}`);
+  }
 }
 function _resetPendingConfigApprovalsForTest() {
   for (const entry of pending.values()) {
@@ -29200,7 +29297,8 @@ function parseConfigApprovalCallback(data) {
     return null;
   return { requestId, choice };
 }
-var pending;
+var pending, TELEGRAM_SENDMESSAGE_LIMIT2 = 4096, RENDERED_BODY_CAP2 = 3900, REASON_MAX_CHARS = 500, REASON_ELLIPSIS = "\u2026", DIFF_SENTINEL = `
+[\u2026 diff continues, see attached file]`;
 var init_config_approval_handler = __esm(() => {
   pending = new Map;
 });
@@ -37484,6 +37582,10 @@ function tick2(now) {
       clearPending(key, "timeout");
       continue;
     }
+    if (activeDeps2.isActiveTurnNewerThan != null && activeDeps2.isActiveTurnNewerThan(key, s.activatedAt)) {
+      clearPending(key, "stale_turn");
+      continue;
+    }
     const sinceEdit = s.lastEditAt == null ? 0 : now - s.lastEditAt;
     if (sinceEdit < EDIT_INTERVAL_MS)
       continue;
@@ -43307,6 +43409,45 @@ var RequestSchema3 = exports_external.discriminatedUnion("op", [
   ConfigProposeEditRequestSchema
 ]);
 var ResultSchema = exports_external.enum(["started", "completed", "denied", "error"]);
+var ErrorFixSchema = exports_external.discriminatedUnion("kind", [
+  exports_external.object({
+    kind: exports_external.literal("flip_yaml_flag"),
+    yaml_path: exports_external.string(),
+    to: exports_external.unknown()
+  }),
+  exports_external.object({
+    kind: exports_external.literal("request_vault_grant"),
+    vault_key: exports_external.string()
+  }),
+  exports_external.object({
+    kind: exports_external.literal("operator_action"),
+    subkind: exports_external.enum(["policy_denied", "infra", "out_of_scope"]),
+    operator_steps: exports_external.array(exports_external.string()).min(1).optional()
+  }),
+  exports_external.object({
+    kind: exports_external.literal("retry_after"),
+    retry_at: exports_external.string()
+  }),
+  exports_external.object({
+    kind: exports_external.literal("quota_exceeded"),
+    quota: exports_external.string(),
+    current: exports_external.number(),
+    limit: exports_external.number()
+  }),
+  exports_external.object({
+    kind: exports_external.literal("bad_input"),
+    field: exports_external.string().optional()
+  })
+]);
+var ErrorEnvelopeSchema = exports_external.object({
+  v: exports_external.literal(1),
+  code: exports_external.string().regex(/^(E_[A-Z0-9_]+|VAULT-[A-Z-]+)$/),
+  human: exports_external.string().min(1),
+  why: exports_external.string().optional(),
+  fix: ErrorFixSchema.optional(),
+  docs: exports_external.string().url().optional(),
+  request_id: exports_external.string().min(1)
+});
 var ResponseEnvelope = {
   v: exports_external.literal(1),
   request_id: exports_external.string().min(1).max(128),
@@ -43316,7 +43457,8 @@ var ResponseEnvelope = {
   audit_id: exports_external.string().min(1).optional(),
   stdout_tail: exports_external.string().optional(),
   stderr_tail: exports_external.string().optional(),
-  error: exports_external.string().optional()
+  error: exports_external.string().optional(),
+  error_envelope: ErrorEnvelopeSchema.optional()
 };
 var ResponseSchema3 = exports_external.object(ResponseEnvelope);
 function encodeRequest3(req) {
@@ -44076,6 +44218,10 @@ function validateInput(input) {
 var DEFAULT_TTL_MS = 5 * 60 * 1000;
 var MAX_TTL_MS = 30 * 60 * 1000;
 var MIN_TTL_MS = 30 * 1000;
+var TELEGRAM_SENDMESSAGE_LIMIT = 4096;
+var RENDERED_BODY_CAP = 3900;
+var OVERSIZE_SENTINEL = `
+[\u2026 preview truncated; open in Drive for full context]`;
 async function handleRequestDriveApproval(client3, msg, deps) {
   const reply = (event) => {
     try {
@@ -44151,20 +44297,36 @@ async function handleRequestDriveApproval(client3, msg, deps) {
     });
     return;
   }
+  let cardText = card.text;
+  let truncatedForFit = false;
+  if (cardText.length > RENDERED_BODY_CAP) {
+    const fit = truncateRawToFit({
+      raw: card.text,
+      render: (slice) => slice,
+      cap: RENDERED_BODY_CAP,
+      sentinel: OVERSIZE_SENTINEL,
+      hardLimit: TELEGRAM_SENDMESSAGE_LIMIT
+    });
+    cardText = fit.body;
+    truncatedForFit = fit.truncated;
+  }
   const posted = await deps.postCard({
     chatId: target.chatId,
     ...target.threadId !== undefined ? { threadId: target.threadId } : {},
-    text: card.text,
+    text: cardText,
     replyMarkup: card.reply_markup
   });
   if (posted === null) {
     reply({
       correlationId: msg.correlationId,
       ok: false,
-      reason: "Telegram sendMessage failed"
+      reason: truncatedForFit ? "Telegram sendMessage failed even after oversize-body truncation" : "Telegram sendMessage failed"
     });
     return;
   }
+  if (truncatedForFit) {
+    deps.log?.(`drive_approval_posted oversize-truncated correlation=${msg.correlationId} original_len=${card.text.length} rendered_len=${cardText.length}`);
+  }
   deps.log?.(`drive_approval_posted ok correlation=${msg.correlationId} request_id=${registered.request_id} file=${fileId}`);
   reply({
     correlationId: msg.correlationId,
@@ -44188,10 +44350,10 @@ var REQUEST_ID_RE = /^[0-9a-f]{32}$/;
 var PENDING_FILE_ID_SENTINEL = "pending-create";
 function buildDiffPreviewCard(input) {
   if (!REQUEST_ID_RE.test(input.suggestRequestId)) {
-    throw new Error(`buildDiffPreviewCard: suggestRequestId must be 8 hex chars (got '${input.suggestRequestId}')`);
+    throw new Error(`buildDiffPreviewCard: suggestRequestId must be 32 hex chars (got '${input.suggestRequestId}')`);
   }
   if (input.writeRequestId !== undefined && !REQUEST_ID_RE.test(input.writeRequestId)) {
-    throw new Error(`buildDiffPreviewCard: writeRequestId must be 8 hex chars (got '${input.writeRequestId}')`);
+    throw new Error(`buildDiffPreviewCard: writeRequestId must be 32 hex chars (got '${input.writeRequestId}')`);
   }
   const preview = input.preview;
   const bodyLines = [];
@@ -45787,6 +45949,11 @@ function readCleanShutdownMarker(path) {
     return null;
   }
 }
+function clearCleanShutdownMarker(path) {
+  try {
+    unlinkSync8(path);
+  } catch {}
+}
 function shouldSuppressRecoveryBanner(marker, now, maxAgeMs = DEFAULT_MAX_AGE_MS) {
   if (marker === null)
     return false;
@@ -48504,10 +48671,10 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.13.33";
-var COMMIT_SHA = "a8018071";
-var COMMIT_DATE = "2026-05-24T20:31:16Z";
-var LATEST_PR = 1740;
+var VERSION = "0.13.36";
+var COMMIT_SHA = "73e8bb05";
+var COMMIT_DATE = "2026-05-25T03:53:49Z";
+var LATEST_PR = 1785;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -48555,9 +48722,17 @@ function composeBootVersionString(inputs) {
 var import_grammy6 = __toESM(require_mod2(), 1);
 function classifyRejection(err, opts = {}) {
   const isGrammy = opts.isGrammyError != null ? opts.isGrammyError(err) : err instanceof import_grammy6.GrammyError;
+  const isHttp = opts.isHttpError != null ? opts.isHttpError(err) : err instanceof import_grammy6.HttpError;
+  if (isHttp)
+    return "log_only";
   if (!isGrammy)
     return "shutdown";
   const e = err;
+  if (e.error_code === 429)
+    return "log_only";
+  if (typeof e.error_code === "number" && e.error_code >= 500 && e.error_code < 600) {
+    return "log_only";
+  }
   if (e.error_code !== 400)
     return "shutdown";
   const desc = (e.description ?? "").toLowerCase();
@@ -50405,7 +50580,11 @@ startTimer2({
       ...ctx.threadId != null ? { threadId: ctx.threadId } : {}
     });
   },
-  emitMetric: (event) => emitRuntimeMetric(event)
+  emitMetric: (event) => emitRuntimeMetric(event),
+  isActiveTurnNewerThan: (key, activatedAt) => {
+    const turnStartedAt = activeTurnStartedAt.get(key);
+    return turnStartedAt != null && turnStartedAt > activatedAt;
+  }
 });
 var inboundSpool = STATIC ? undefined : createInboundSpool({
   path: join32(STATE_DIR, "inbound-spool.jsonl"),
@@ -50807,6 +50986,16 @@ ${reminder}
 `);
         }
       },
+      postAttachment: async (args) => {
+        const input = new import_grammy9.InputFile(Buffer.from(args.content, "utf8"), args.filename);
+        await robustApiCall(() => bot.api.sendDocument(args.chatId, input, {
+          ...args.threadId !== undefined ? { message_thread_id: args.threadId } : {}
+        }), {
+          chat_id: String(args.chatId),
+          verb: "config-approval-attachment",
+          ...args.threadId !== undefined ? { threadId: args.threadId } : {}
+        });
+      },
       log: (m) => process.stderr.write(`telegram gateway: config-approval \u2014 ${m}
 `)
     });
@@ -51122,7 +51311,9 @@ ${url}`;
   });
   noteOutbound(statusKey(chat_id, threadId), Date.now());
   noteOutbound2(statusKey(chat_id, threadId), Date.now());
-  clearSilentEndState(statusKey(chat_id, threadId));
+  if (isFinalAnswerReply({ text: rawText, disableNotification })) {
+    clearSilentEndState(statusKey(chat_id, threadId));
+  }
   if (previewMessageId != null && reply_to != null && replyMode !== "off") {
     await deleteStalePreview(previewMessageId);
     previewMessageId = null;
@@ -51160,6 +51351,7 @@ ${url}`;
           logOutbound("edit", chat_id, decision.messageId, decision.mergedText.length, "silent-anchor-merge");
           process.stderr.write(`telegram gateway: silent-reply auto-edit \u2014 ` + `chat=${chat_id} anchor=${decision.messageId} merged_len=${decision.mergedText.length}
 `);
+          clearPending(statusKey(chat_id, threadId), "reply_finalize");
           noteOutbound3(statusKey(chat_id, threadId), {
             messageId: decision.messageId,
             text: decision.mergedText,
@@ -51300,6 +51492,7 @@ ${url}`;
   if (sentIds.length === chunks.length && chunks.length > 0) {
     const anchorMsgId = sentIds[chunks.length - 1];
     if (typeof anchorMsgId === "number") {
+      clearPending(statusKey(chat_id, threadId), "reply_finalize");
       noteOutbound3(statusKey(chat_id, threadId), {
         messageId: anchorMsgId,
         text: chunks[chunks.length - 1],
@@ -51445,7 +51638,13 @@ async function executeStreamReply(args) {
       const sKey = statusKey(streamChatId, streamThreadId);
       noteOutbound(sKey, Date.now());
       noteOutbound2(sKey, Date.now());
-      clearSilentEndState(sKey);
+      if (isFinalAnswerReply({
+        text: args.text ?? "",
+        disableNotification: args.disable_notification === true,
+        done: args.done === true
+      })) {
+        clearSilentEndState(sKey);
+      }
     }
   }
   const result = await handleStreamReply({
@@ -51509,6 +51708,7 @@ async function executeStreamReply(args) {
     outboundDedup.record(sChatId, sThreadId, args.text, Date.now(), currentTurn?.registryKey ?? null);
     const streamFormat = args.format ?? (access.parseMode ?? "html");
     const streamParseMode = streamFormat === "html" ? "HTML" : streamFormat === "markdownv2" ? "MarkdownV2" : undefined;
+    clearPending(statusKey(sChatId, sThreadId), "reply_finalize");
     noteOutbound3(statusKey(sChatId, sThreadId), {
       messageId: result.messageId,
       text: args.text,
@@ -51521,6 +51721,8 @@ async function executeStreamReply(args) {
     done: args.done === true
   })) {
     turn.finalAnswerDelivered = true;
+    const streamThreadIdForClear = args.message_thread_id != null ? Number(args.message_thread_id) : undefined;
+    clearSilentEndState(statusKey(streamChatId, streamThreadIdForClear));
   }
   {
     const sChat = args.chat_id;
@@ -57917,6 +58119,7 @@ var didOneTimeSetup = false;
               process.stderr.write(`telegram gateway: boot.clean_shutdown_marker_stale age=${ageSec}s signal=${cleanMarker.signal}${reasonTag}
 `);
             }
+            clearCleanShutdownMarker(GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH);
           }
           if (marker) {
             const ageMs = nowMs2 - marker.ts;

package/telegram-plugin/docs/waiting-ux-spec.md

@@ -247,3 +247,43 @@ For posterity:
 - **v2 rewrite** (this PR series, also numbered #553): same Phase 3
   harness, plus three v2 helpers; new spec test file pins the
   three-class contract.
+
+
+## Silent-end contract (#1122 / #1161 / #1664 / #1741 / #1744)
+
+The "silent-end" safety net catches turns that end without the agent delivering a final answer via `reply` / `stream_reply`. The hook re-prompts once; on the second consecutive silent end it gives up and sends a fallback message so the turn never just vanishes.
+
+### What it is
+
+A per-agent state file (`$TELEGRAM_STATE_DIR/silent-end-pending.json`, fallback `~/.claude/channels/telegram/silent-end-pending.json`) acts as a one-bit handshake between the gateway and the Stop hook (`telegram-plugin/hooks/silent-end-interrupt-stop.mjs`). When the file exists, the Stop hook blocks the session stop and injects a re-prompt; when absent, the stop is allowed.
+
+### When the file is WRITTEN
+
+The gateway writes the file at `turn_end` if and only if `turn.finalAnswerDelivered === false` — i.e. no `reply` or `stream_reply` call during this turn passed the `isFinalAnswerReply` predicate. See `gateway.ts` around L7267 (`recordUndeliveredTurnEnd`). The write is idempotent across re-prompt rounds: the same turnKey inherits the prior `retryCount`; a different turnKey resets to 0.
+
+### When the file is CLEARED
+
+The gateway calls `clearSilentEndState(turnKey)` on every reply that qualifies as the final answer. Three call sites:
+
+1. `executeReply` (gateway.ts L4599-4611) — fires on every `reply` tool call. Clears iff `isFinalAnswerReply` returns true.
+2. `executeStreamReply` first-emit branch (gateway.ts L5172-5195) — fires only on the FIRST emit per stream (gated by `!activeDraftStreams.has(sKey)`). Clears iff that first emit qualifies as final.
+3. `executeStreamReply` final-answer site (gateway.ts L5335-5358, added in #1744 follow-up) — fires on every emit that qualifies as final, regardless of whether it is the first emit. This is the load-bearing site for streams whose first emit was ack-shaped but whose later emit (typically `done=true`) carries the real answer. Without site 3, such streams leak the state file.
+
+The clear is fail-silent and turnKey-keyed: a clear for turnKey A does NOT unlink a state file written for turnKey B (see `silent-end.ts clearSilentEndState`). This makes calling it unconditionally on every final-answer emit safe.
+
+### The gate predicate
+
+A reply qualifies as the final answer when `isFinalAnswerReply` returns true. The predicate (in `final-answer-detect.ts`) is a logical OR of three signals:
+
+- `done === true` (stream_reply terminal call), OR
+- `disableNotification === false` (pacing-contract final-answer signal), OR
+- `text.length >= 200` (length backstop for substantive replies mis-marked as interim).
+
+A reply with `disable_notification: true`, short text, and no `done` is an interim ack — it never clears the state.
+
+### Send sites and tests
+
+- `executeReply` (gateway.ts:4340) — single send site, single clear (site 1 above).
+- `executeStreamReply` (gateway.ts:5089) — two clear sites (sites 2 and 3 above) to cover both the first-emit and the later-emit final-answer paths.
+- Unit coverage: `tests/silent-end.test.ts` (`#1741` block) — the executeReply gate as a unit.
+- Integration coverage: `tests/silent-end-integration.test.ts` (#1744) — the stream first-emit-vs-later-emit branching, with the ack-then-final regression case pinned.