switchroom 0.13.5 → 0.13.8

package/dist/agent-scheduler/index.js

@@ -11307,6 +11307,10 @@ var QuotaConfigSchema = exports_external.object({
 var HostControlConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
 });
+var HostdConfigSchema = exports_external.object({
+  config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
+  config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit §5). Default 3 cards/hour; min 1, " + "max 20. Implemented as a sqlite token bucket in PR 1c; the " + "field is wired here in PR 1a so operators can pin it before the " + "limiter is live. Above the cap, the verb returns " + "`E_RATE_LIMITED` without raising a card.")
+});
 var SwitchroomConfigSchema = exports_external.object({
   switchroom: exports_external.object({
     version: exports_external.literal(1).describe("Config schema version"),
@@ -11333,6 +11337,7 @@ var SwitchroomConfigSchema = exports_external.object({
   google_workspace: GoogleWorkspaceConfigSchema.describe("RFC G canonical key. Top-level Google Workspace configuration — " + "OAuth client credentials, approver allowlist, and tier knob (`core` " + "| `extended` | `complete`, default `core`). Mutually exclusive with " + "`drive:` at the top level (loader fails fast if both are set)."),
   quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
   host_control: HostControlConfigSchema.default({}).describe("Host-control daemon configuration. Defaults to enabled=true since " + "RFC C Phase 2 (docs/rfcs/host-control-daemon.md). Omit the block " + "to accept defaults; set `enabled: false` only on legacy systemd-" + "mode installs (removal tracked as RFC C Phase 3)."),
+  hostd: HostdConfigSchema.default({}).describe("hostd verb-level knobs (RFC admin-agent-config-edit). Distinct " + "from `host_control:` which governs whether the daemon runs at " + "all. Currently scopes the opt-in flag and rate cap for the new " + "`config_propose_edit` verb (PR 1a — disabled by default)."),
   google_accounts: exports_external.record(exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
     message: "Account key must be a Google account email like 'alice@example.com' (colons not allowed)"
   }).transform((v) => v.trim().toLowerCase()), exports_external.object({

package/dist/auth-broker/index.js

@@ -11307,6 +11307,10 @@ var QuotaConfigSchema = exports_external.object({
 var HostControlConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip — the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` — " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C §5.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
 });
+var HostdConfigSchema = exports_external.object({
+  config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit §3). Default false — the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
+  config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit §5). Default 3 cards/hour; min 1, " + "max 20. Implemented as a sqlite token bucket in PR 1c; the " + "field is wired here in PR 1a so operators can pin it before the " + "limiter is live. Above the cap, the verb returns " + "`E_RATE_LIMITED` without raising a card.")
+});
 var SwitchroomConfigSchema = exports_external.object({
   switchroom: exports_external.object({
     version: exports_external.literal(1).describe("Config schema version"),
@@ -11333,6 +11337,7 @@ var SwitchroomConfigSchema = exports_external.object({
   google_workspace: GoogleWorkspaceConfigSchema.describe("RFC G canonical key. Top-level Google Workspace configuration — " + "OAuth client credentials, approver allowlist, and tier knob (`core` " + "| `extended` | `complete`, default `core`). Mutually exclusive with " + "`drive:` at the top level (loader fails fast if both are set)."),
   quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
   host_control: HostControlConfigSchema.default({}).describe("Host-control daemon configuration. Defaults to enabled=true since " + "RFC C Phase 2 (docs/rfcs/host-control-daemon.md). Omit the block " + "to accept defaults; set `enabled: false` only on legacy systemd-" + "mode installs (removal tracked as RFC C Phase 3)."),
+  hostd: HostdConfigSchema.default({}).describe("hostd verb-level knobs (RFC admin-agent-config-edit). Distinct " + "from `host_control:` which governs whether the daemon runs at " + "all. Currently scopes the opt-in flag and rate cap for the new " + "`config_propose_edit` verb (PR 1a — disabled by default)."),
   google_accounts: exports_external.record(exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
     message: "Account key must be a Google account email like 'alice@example.com' (colons not allowed)"
   }).transform((v) => v.trim().toLowerCase()), exports_external.object({

package/dist/cli/switchroom.js

@@ -13520,7 +13520,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, HostControlConfigSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, ReactionsSchema, ReleaseBlock, NetworkIsolationSchema, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, DEFAULT_PROFILE = "default", AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, HostControlConfigSchema, HostdConfigSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -13871,6 +13871,10 @@ var init_schema = __esm(() => {
   HostControlConfigSchema = exports_external.object({
     enabled: exports_external.boolean().default(true).describe("Whether the host-control daemon is in use. Default: true (since " + "RFC C Phase 2 default-flip \u2014 the gateway's /restart, /new, /reset, " + "and /update apply slash-commands all dispatch through hostd, and " + "without it those verbs fail on docker-mode installs because the " + "agent container has no docker binary/socket). " + "When true, the compose generator emits per-agent bind mounts " + "at `~/.switchroom/hostd/<name>/sock` for every admin-flagged " + "agent. Install the daemon with `switchroom hostd install` \u2014 " + "it runs as a docker container in its own compose project " + "(`switchroom-hostd`), separate from the agent fleet's compose " + "project so `up -d --remove-orphans` cycles of the fleet " + "can't recreate the daemon mid-RPC. See RFC C \u00a75.1. " + "Set enabled: false only on legacy systemd-mode installs that " + "still rely on the in-container `spawnSwitchroomDetached` " + "shellout (removal is tracked as RFC C Phase 3).")
   });
+  HostdConfigSchema = exports_external.object({
+    config_edit_enabled: exports_external.boolean().default(false).describe("Opt-in toggle for the `config_propose_edit` hostd verb (RFC " + "admin-agent-config-edit \u00a73). Default false \u2014 the verb returns " + "`E_CONFIG_EDIT_DISABLED` until the operator explicitly flips " + "this to true. When true (and once PR 1c lands the apply path), " + "admin agents can propose unified-diff patches against " + "`/state/config/switchroom.yaml`, gated by an operator approval " + "card in the primary chat. Same trust posture as `update_apply` " + "and `agent_restart`: the human-in-the-loop tap is the security " + "boundary, not the agent's judgement."),
+    config_edit_rate_per_hour: exports_external.number().int().min(1).max(20).default(3).describe("Per-requesting-agent rate cap for `config_propose_edit` cards " + "(RFC admin-agent-config-edit \u00a75). Default 3 cards/hour; min 1, " + "max 20. Implemented as a sqlite token bucket in PR 1c; the " + "field is wired here in PR 1a so operators can pin it before the " + "limiter is live. Above the cap, the verb returns " + "`E_RATE_LIMITED` without raising a card.")
+  });
   SwitchroomConfigSchema = exports_external.object({
     switchroom: exports_external.object({
       version: exports_external.literal(1).describe("Config schema version"),
@@ -13897,6 +13901,7 @@ var init_schema = __esm(() => {
     google_workspace: GoogleWorkspaceConfigSchema.describe("RFC G canonical key. Top-level Google Workspace configuration \u2014 " + "OAuth client credentials, approver allowlist, and tier knob (`core` " + "| `extended` | `complete`, default `core`). Mutually exclusive with " + "`drive:` at the top level (loader fails fast if both are set)."),
     quota: QuotaConfigSchema.optional().describe("Optional weekly/monthly USD spend budgets rendered in the session " + "greeting. Usage is read from ccusage at runtime; no network calls."),
     host_control: HostControlConfigSchema.default({}).describe("Host-control daemon configuration. Defaults to enabled=true since " + "RFC C Phase 2 (docs/rfcs/host-control-daemon.md). Omit the block " + "to accept defaults; set `enabled: false` only on legacy systemd-" + "mode installs (removal tracked as RFC C Phase 3)."),
+    hostd: HostdConfigSchema.default({}).describe("hostd verb-level knobs (RFC admin-agent-config-edit). Distinct " + "from `host_control:` which governs whether the daemon runs at " + "all. Currently scopes the opt-in flag and rate cap for the new " + "`config_propose_edit` verb (PR 1a \u2014 disabled by default)."),
     google_accounts: exports_external.record(exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
       message: "Account key must be a Google account email like 'alice@example.com' (colons not allowed)"
     }).transform((v) => v.trim().toLowerCase()), exports_external.object({
@@ -23140,7 +23145,7 @@ function emitAgentService(lines, a, imageTag, buildMode, buildContext, homePrefi
   lines.push(`      - "ALL"`);
   lines.push(`    read_only: true`);
   lines.push(`    tmpfs:`);
-  lines.push(`      - /tmp:size=256m,mode=1777`);
+  lines.push(`      - /tmp:size=1g,mode=1777`);
   lines.push(`    depends_on:`);
   lines.push(`      vault-broker:`);
   lines.push(`        condition: service_started`);
@@ -29067,7 +29072,7 @@ function decodeResponse3(line) {
   const obj = JSON.parse(line);
   return ResponseSchema3.parse(obj);
 }
-var MAX_FRAME_BYTES3, RequestEnvelope, AgentRestartRequestSchema, UpgradeStatusRequestSchema, GetStatusRequestSchema, AgentNameSchema, UpdateCheckRequestSchema, UpdateApplyRequestSchema, ApplyRequestSchema, AgentStartRequestSchema, AgentStopRequestSchema, AgentLogsRequestSchema, AgentExecRequestSchema, DoctorRequestSchema, AgentSmokeRequestSchema, RequestSchema3, ResultSchema, ResponseEnvelope, ResponseSchema3;
+var MAX_FRAME_BYTES3, RequestEnvelope, AgentRestartRequestSchema, UpgradeStatusRequestSchema, GetStatusRequestSchema, AgentNameSchema, UpdateCheckRequestSchema, UpdateApplyRequestSchema, ApplyRequestSchema, AgentStartRequestSchema, AgentStopRequestSchema, AgentLogsRequestSchema, AgentExecRequestSchema, DoctorRequestSchema, AgentSmokeRequestSchema, ConfigProposeEditRequestSchema, RequestSchema3, ResultSchema, ResponseEnvelope, ResponseSchema3;
 var init_protocol3 = __esm(() => {
   init_zod();
   MAX_FRAME_BYTES3 = 64 * 1024;
@@ -29161,6 +29166,15 @@ var init_protocol3 = __esm(() => {
       deep: exports_external.boolean().optional()
     })
   });
+  ConfigProposeEditRequestSchema = exports_external.object({
+    ...RequestEnvelope,
+    op: exports_external.literal("config_propose_edit"),
+    args: exports_external.object({
+      unified_diff: exports_external.string().min(1).max(MAX_FRAME_BYTES3 - 1024),
+      reason: exports_external.string().min(1).max(500),
+      target_path: exports_external.literal("/state/config/switchroom.yaml")
+    })
+  });
   RequestSchema3 = exports_external.discriminatedUnion("op", [
     AgentRestartRequestSchema,
     UpgradeStatusRequestSchema,
@@ -29173,7 +29187,8 @@ var init_protocol3 = __esm(() => {
     AgentLogsRequestSchema,
     AgentExecRequestSchema,
     DoctorRequestSchema,
-    AgentSmokeRequestSchema
+    AgentSmokeRequestSchema,
+    ConfigProposeEditRequestSchema
   ]);
   ResultSchema = exports_external.enum(["started", "completed", "denied", "error"]);
   ResponseEnvelope = {
@@ -47009,6 +47024,31 @@ async function dispatchTool2(name, args) {
       };
       break;
     }
+    case "config_propose_edit": {
+      if (!args.unified_diff || typeof args.unified_diff !== "string") {
+        return errorText2("config_propose_edit: unified_diff is required (non-empty string).");
+      }
+      if (!args.reason || typeof args.reason !== "string") {
+        return errorText2("config_propose_edit: reason is required (non-empty string, \u2264500 chars).");
+      }
+      if (args.reason.length > 500) {
+        return errorText2("config_propose_edit: reason is capped at 500 chars (RFC \u00a73.3).");
+      }
+      if (args.target_path !== "/state/config/switchroom.yaml") {
+        return errorText2("config_propose_edit: target_path must be '/state/config/switchroom.yaml'.");
+      }
+      req = {
+        v: 1,
+        op: "config_propose_edit",
+        request_id: makeRequestId("mcp-config-propose-edit"),
+        args: {
+          unified_diff: args.unified_diff,
+          reason: args.reason,
+          target_path: "/state/config/switchroom.yaml"
+        }
+      };
+      break;
+    }
     default:
       return errorText2(`unknown tool: ${name}`);
   }
@@ -47219,6 +47259,32 @@ var init_server4 = __esm(() => {
         }
       }
     },
+    {
+      name: "config_propose_edit",
+      description: "Propose a unified-diff patch against /state/config/switchroom.yaml " + "(RFC admin-agent-config-edit). When fully shipped the host validates " + "the patch (applies cleanly + post-patch yaml parses against the " + "config schema) and raises a Telegram approval card in the OPERATOR's " + "primary chat \u2014 NOT yours; the requesting agent's chat is not the " + "approval surface. Admin-only at the wire layer. " + "Current status (PR 1a \u2014 skeleton): the tool is registered but the " + "feature is OFF by default; calling it returns " + "E_CONFIG_EDIT_DISABLED until the operator sets " + "hostd.config_edit_enabled=true in switchroom.yaml. Even when enabled " + "in this PR, the call returns E_NOT_IMPLEMENTED \u2014 the validation " + "pipeline (PR 1b) and apply path (PR 1c) ship in follow-up PRs.",
+      inputSchema: {
+        type: "object",
+        required: ["unified_diff", "reason", "target_path"],
+        properties: {
+          unified_diff: {
+            type: "string",
+            minLength: 1,
+            description: "Unified diff against switchroom.yaml. Must have \u22653 lines " + "context (enforced in PR 1b); no path-traversal or multi-file " + "diffs. LF-only, \u22641 MB."
+          },
+          reason: {
+            type: "string",
+            minLength: 1,
+            maxLength: 500,
+            description: "Human-readable rationale shown to the operator on the " + "approval card. Capped at 500 chars (RFC \u00a73.3)."
+          },
+          target_path: {
+            type: "string",
+            enum: ["/state/config/switchroom.yaml"],
+            description: "Must be the literal string '/state/config/switchroom.yaml'. " + "Future-proofs against multi-file diffs and gives the validator " + "a single canonical path to anchor on."
+          }
+        }
+      }
+    },
     {
       name: "get_status",
       description: "Read the most recent terminal `update_apply` audit row " + "(channel, pin, resolved_sha, install_context, result, " + "exit_code, stderr_tail). Use this after issuing an " + "`update_apply` to confirm what actually rolled out, or to " + "report the last update on demand. Returns the parsed audit " + "entry as JSON.",
@@ -47248,8 +47314,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.13.5";
-var COMMIT_SHA = "cb688641";
+var VERSION = "0.13.8";
+var COMMIT_SHA = "bb713414";
 
 // src/cli/agent.ts
 init_source();
@@ -48695,35 +48761,37 @@ function buildWorkspaceContext(args) {
     systemPromptAppendShellQuoted: (() => {
       const useSwitchroomPlugin = usesSwitchroomTelegramPlugin(agentConfig);
       const baseAppend = agentConfig.system_prompt_append ?? "";
-      const telegramGuidance = `## Progress updates (human-style check-ins)
-
-You're talking to a human colleague on Telegram. Alongside the emoji status
-ladder, send a short \`progress_update\` at inflection points, the moments a
-senior colleague would ping the person who asked them to do something:
-
-- **Plan formed:** "Got it. Going to do X first, then Y, then Z."
-- **Pivot or blocker:** "First approach didn't work because <reason>. Trying
-  <alternative> instead."
-- **Chunk finished:** "Done with X. Starting Y now."
-
-Keep them short (one or two sentences). Don't narrate every step, the pinned
-progress card shows that for free. Don't send an update on a trivial one-shot
-task. Send them when a colleague would genuinely want to know what's happening.
-
-Final answers still go through \`stream_reply\` with done=true as usual,
-\`progress_update\` is only for mid-turn check-ins.
-
-## Think out loud before tool calls
-
-When you're about to call a tool \u2014 especially on the second and later
-tool calls in a turn \u2014 lead the assistant message with one short
-sentence naming what you're doing: "Reading the config.", "Running the
-migration.", "Searching for X." The progress card pairs that sentence
-with the tool as a natural-language step, so the user can tell what's
-happening without decoding raw tool names. Without a preamble the card
-goes quiet during long tool chains and feels stuck. Keep it to one
-line; don't repeat the preamble before every call in a fast sequence,
-but do refresh it when you switch to a genuinely different step.`;
+      const telegramGuidance = `## Talking to a human on Telegram
+
+There is a real person on the other end. Every turn should feel like
+messaging a capable colleague \u2014 not a tool emitting output. Five beats:
+
+1. **Acknowledge first.** On any turn that needs real work \u2014 a file
+   read, a search, a command \u2014 your FIRST action is a short \`reply\`
+   in your own voice ("on it \u2014 checking now"), before you start. Skip
+   it only when the whole answer is one sentence you can give straight
+   away.
+2. **Then go quiet and work.** Heads-down is correct \u2014 do NOT narrate
+   every tool call. A typing indicator runs automatically while you
+   work; you do not maintain it.
+3. **Surface meaningful progress** at genuine inflection points \u2014 a
+   hard step finished, a blocker, a pivot, dispatching a sub-agent, a
+   notably slow wait, a finding worth knowing now. One short \`reply\`,
+   \`disable_notification: true\`.
+4. **Hand back delegations with synthesis.** When a sub-agent / worker
+   returns, re-enter in YOUR voice \u2014 what it found, and what you are
+   doing next. Never let its raw report stand as your reply.
+5. **Deliver the answer** as a final \`reply\`.
+
+The one thing to avoid is *spam*: a reply on every tool call, on a
+timer, or repeating what you already said. Responsive and human, never
+a flood. Going quiet mid-work is fine \u2014 going quiet *instead* of
+acknowledging, or *instead* of an update at a real milestone, is the
+black box this exists to prevent.
+
+Every turn that answers a user message ends with a user-visible
+\`reply\` (or \`stream_reply\` done=true) \u2014 Telegram is all the user
+sees; your terminal output never reaches them.`;
       const memoryGuidance = `## Memory \u2014 proactive, conversational
 
 You have Hindsight tools: \`mcp__hindsight__sync_retain\`, \`mcp__hindsight__delete_memory\`, \`mcp__hindsight__recall\`, \`mcp__hindsight__reflect\`. Use them without being asked.
@@ -49417,6 +49485,7 @@ function buildSettingsHooksBlock(p) {
     }
   ] : [];
   const useHotReloadStable = agentConfig.channels?.telegram?.hotReloadStable === true;
+  const turnPacingDirective = "<turn-pacing>You are messaging a human. First action this turn: if " + "answering needs any tool call (a file read, a search, a command), " + "send a SHORT acknowledgement via the reply tool with " + "disable_notification true BEFORE the first tool call. Then work; " + "surface meaningful progress in human prose at real milestones; hand " + "back any sub-agent findings in your own voice; deliver the answer. " + "Skip the opening ack only for a one-sentence answer you can give " + "immediately.</turn-pacing>";
   const switchroomUserPromptSubmit = [
     ...useHotReloadStable ? [
       {
@@ -49446,6 +49515,15 @@ function buildSettingsHooksBlock(p) {
           timeout: 3
         }
       ]
+    },
+    {
+      hooks: [
+        {
+          type: "command",
+          command: wrap("hook:turn-pacing", `printf '%s\\n' ${shellSingleQuote(turnPacingDirective)}`),
+          timeout: 3
+        }
+      ]
     }
   ];
   if (userHooks) {
@@ -49627,35 +49705,37 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
       systemPromptAppendShellQuoted: (() => {
         const useSwitchroomPlugin = usesSwitchroomTelegramPlugin(agentConfig);
         const baseAppend = agentConfig.system_prompt_append ?? "";
-        const telegramGuidance = `## Progress updates (human-style check-ins)
-
-You're talking to a human colleague on Telegram. Alongside the emoji status
-ladder, send a short \`progress_update\` at inflection points, the moments a
-senior colleague would ping the person who asked them to do something:
-
-- **Plan formed:** "Got it. Going to do X first, then Y, then Z."
-- **Pivot or blocker:** "First approach didn't work because <reason>. Trying
-  <alternative> instead."
-- **Chunk finished:** "Done with X. Starting Y now."
-
-Keep them short (one or two sentences). Don't narrate every step, the pinned
-progress card shows that for free. Don't send an update on a trivial one-shot
-task. Send them when a colleague would genuinely want to know what's happening.
-
-Final answers still go through \`stream_reply\` with done=true as usual,
-\`progress_update\` is only for mid-turn check-ins.
-
-## Think out loud before tool calls
-
-When you're about to call a tool \u2014 especially on the second and later
-tool calls in a turn \u2014 lead the assistant message with one short
-sentence naming what you're doing: "Reading the config.", "Running the
-migration.", "Searching for X." The progress card pairs that sentence
-with the tool as a natural-language step, so the user can tell what's
-happening without decoding raw tool names. Without a preamble the card
-goes quiet during long tool chains and feels stuck. Keep it to one
-line; don't repeat the preamble before every call in a fast sequence,
-but do refresh it when you switch to a genuinely different step.`;
+        const telegramGuidance = `## Talking to a human on Telegram
+
+There is a real person on the other end. Every turn should feel like
+messaging a capable colleague \u2014 not a tool emitting output. Five beats:
+
+1. **Acknowledge first.** On any turn that needs real work \u2014 a file
+   read, a search, a command \u2014 your FIRST action is a short \`reply\`
+   in your own voice ("on it \u2014 checking now"), before you start. Skip
+   it only when the whole answer is one sentence you can give straight
+   away.
+2. **Then go quiet and work.** Heads-down is correct \u2014 do NOT narrate
+   every tool call. A typing indicator runs automatically while you
+   work; you do not maintain it.
+3. **Surface meaningful progress** at genuine inflection points \u2014 a
+   hard step finished, a blocker, a pivot, dispatching a sub-agent, a
+   notably slow wait, a finding worth knowing now. One short \`reply\`,
+   \`disable_notification: true\`.
+4. **Hand back delegations with synthesis.** When a sub-agent / worker
+   returns, re-enter in YOUR voice \u2014 what it found, and what you are
+   doing next. Never let its raw report stand as your reply.
+5. **Deliver the answer** as a final \`reply\`.
+
+The one thing to avoid is *spam*: a reply on every tool call, on a
+timer, or repeating what you already said. Responsive and human, never
+a flood. Going quiet mid-work is fine \u2014 going quiet *instead* of
+acknowledging, or *instead* of an update at a real milestone, is the
+black box this exists to prevent.
+
+Every turn that answers a user message ends with a user-visible
+\`reply\` (or \`stream_reply\` done=true) \u2014 Telegram is all the user
+sees; your terminal output never reaches them.`;
         const memoryGuidance = `## Memory \u2014 proactive, conversational
 
 You have Hindsight tools: \`mcp__hindsight__sync_retain\`, \`mcp__hindsight__delete_memory\`, \`mcp__hindsight__recall\`, \`mcp__hindsight__reflect\`. Use them without being asked.