switchroom 0.13.55 → 0.13.57

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.13.55",
+  "version": "0.13.57",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/skills/notion/SKILL.md

@@ -47,10 +47,12 @@ disallowed database, you'll get a clean block reason naming the DB.
 The Notion MCP exposes the standard set:
 
 - **Search.** `search` finds pages or databases by title/content
-  across what the integration can see. switchroom's PreToolUse hook
-  post-filters results to your allowlist — pages outside it are
-  dropped before they reach you. The response's metadata field
-  indicates how many were filtered.
+  across what the integration can see. **In switchroom v1, `search`
+  is BLOCKED for any agent with a non-empty
+  `notion_workspace.databases:` allowlist** — the post-filter that
+  would strip out-of-allowlist results isn't wired yet. Use
+  `query_database` against your allowed DBs instead. Admin-shaped
+  agents (no per-DB filter) can search normally.
 - **Database queries.** `query_database` runs a filter+sort against
   a database. You need the database's UUID (operator gives these
   via friendly names in `notion_workspace.databases` — ask the
@@ -98,11 +100,13 @@ The Notion MCP exposes the standard set:
 
 ### "Find that thing about X"
 
-1. `search` with the query. Take only the top result unless ambiguous.
-2. The post-filter has already redacted out-of-allowlist results;
-   don't worry about leakage.
-3. If 0 results: try a `query_database` against the most likely DB
-   with a property filter (matches the value).
+1. If you have full search access (no `databases:` filter): `search`
+   with the query, take the top result unless ambiguous.
+2. If `search` is blocked for you (the hook will return a clear
+   message naming the v1 limitation): `query_database` against
+   each of your allowed DBs in turn, with a title-contains or
+   property filter. List your allowed DBs by checking
+   `notion_workspace.databases:` in your config via `config_get`.
 
 ### "Update the page about X"
 

package/telegram-plugin/ack-flag.ts

@@ -0,0 +1,66 @@
+/**
+ * Ack-first state flag — load-bearing for the ack-first-pretool hook
+ * (see `src/cli/ack-first-pretool.ts` and
+ * `reference/conversational-pacing.md` beat 1).
+ *
+ * The gateway is the source of truth for "has the model called reply
+ * yet this turn?". The PreToolUse hook runs as a short-lived child
+ * process so it can't read gateway in-memory state; the hand-off is
+ * a single file inside `$TELEGRAM_STATE_DIR`:
+ *
+ *   - `markAckSent()` touches the file on the first reply per turn.
+ *   - `clearAckSent()` removes it at turn_started.
+ *   - The hook checks `existsSync(path)` → allow / block.
+ *
+ * Per-agent isolation is built-in: `$TELEGRAM_STATE_DIR` is the
+ * agent's per-container state dir (~/.switchroom/agents/<name>/telegram,
+ * bind-mounted into /state/agent/home/.switchroom/agents/<name>/telegram
+ * inside the container).
+ *
+ * All operations are best-effort: a write or unlink failure logs to
+ * stderr and returns; the gate is informational UX, not a safety
+ * primitive, so a broken state-dir must never wedge reply itself.
+ */
+
+import { closeSync, existsSync, openSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+
+export const ACK_SENT_MARKER = "ack-sent.flag";
+
+function markerPath(): string | null {
+  const dir = process.env.TELEGRAM_STATE_DIR;
+  if (!dir) return null;
+  return join(dir, ACK_SENT_MARKER);
+}
+
+/** Create the ack-sent marker. Idempotent (no-op if it exists). */
+export function markAckSent(): void {
+  const path = markerPath();
+  if (path == null) return;
+  if (existsSync(path)) return;
+  try {
+    const fd = openSync(path, "w");
+    closeSync(fd);
+  } catch (err) {
+    process.stderr.write(
+      `ack-flag: markAckSent failed path=${path}: ${err}\n`,
+    );
+  }
+}
+
+/** Remove the ack-sent marker. Idempotent. */
+export function clearAckSent(): void {
+  const path = markerPath();
+  if (path == null) return;
+  try {
+    unlinkSync(path);
+  } catch (err: unknown) {
+    // ENOENT is the common case (turn started before any prior turn
+    // ran a reply); silently swallow.
+    const code = (err as { code?: string } | undefined)?.code;
+    if (code === "ENOENT") return;
+    process.stderr.write(
+      `ack-flag: clearAckSent failed path=${path}: ${err}\n`,
+    );
+  }
+}