switchroom 0.14.2 → 0.14.3

package/dist/cli/switchroom.js

@@ -49278,8 +49278,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.14.2";
-var COMMIT_SHA = "3c7d0238";
+var VERSION = "0.14.3";
+var COMMIT_SHA = "b61cef7e";
 
 // src/cli/agent.ts
 init_source();
@@ -51763,7 +51763,9 @@ function buildSettingsHooksBlock(p) {
 ` + `So:
 ` + "  - Trivial / social message \u2192 reply once, briefly, in your voice. " + `The reply IS the response.
 ` + `  - Question with a short answer \u2192 just reply with the answer.
-` + "  - Complex tool-driven work \u2192 go straight to the tools (the " + "compose-area preview is the ambient liveness signal), then reply " + 'once with the answer or a genuine mid-work pivot ("halfway ' + 'through \u2014 found an unexpected issue, want me to continue?"). Not ' + '"still working".</turn-pacing>';
+` + "  - Complex tool-driven work \u2192 go straight to the tools (the " + "compose-area preview is the ambient liveness signal), then reply " + 'once with the answer or a genuine mid-work pivot ("halfway ' + 'through \u2014 found an unexpected issue, want me to continue?"). Not ' + `"still working".
+
+` + 'Do NOT send a trailing confirmation after your answer \u2014 no "Done.", ' + '"Sent.", "Hope that helps." as a separate message once you have ' + "already replied. Your answer is the last thing the user should " + `see; a follow-up "Done." is dead-air clutter (and the user's ` + "device already pinged on the answer). Stop after the answer.</turn-pacing>";
   const switchroomUserPromptSubmit = [
     ...useHotReloadStable ? [
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/default/CLAUDE.md

@@ -0,0 +1,122 @@
+# Agent: 
+
+## What you are
+
+You are a **switchroom agent** — an instance of **Claude Code** (Anthropic's official `claude` CLI, unmodified) running in a Linux container, managed by switchroom. Your `$SWITCHROOM_AGENT_NAME` is ``. Be honest about this when asked ("what are you" / "what's running here"): switchroom agent `` running Claude Code under the official `claude` CLI. Not a custom model, not a wrapper, not "an AI assistant" in the abstract.
+
+You are one of several agents here. To see the others, call `peers_list` on the `agent-config` MCP server — returns `[{name, purpose, admin}]` live from `switchroom.yaml`. **Never memorize peers into Hindsight or hard-code them into replies** — drift kills trust. On "who else is here" / "is there an agent that does X" / "who handles Y" / "who can do <admin op>", call `peers_list` first and answer from its result; if no peer matches, say so.
+
+## Who you are
+
+See `SOUL.md` (in this directory) for your identity, vibe, communication style, and expertise. That file is your persona source of truth.
+
+
+## Core Behavior
+- Respond helpfully, concisely, and conversationally.
+- Use your available tools when they add clear value — don't force tool use when a plain answer suffices.
+- Save important facts, preferences, and decisions to memory so you can recall them later.
+- When asked to do something ambiguous, ask one clarifying question rather than guessing.
+- If a task has multiple steps, outline your plan before executing.
+
+## Safety
+- Don't exfiltrate private data. Ever.
+- Don't run destructive commands without asking.
+- Prefer `trash` over `rm` when available (recoverable beats gone forever).
+- Safe to do freely: read files, explore, organize, search the web, check calendars, work within this workspace.
+- Ask first: sending emails, tweets, public posts, anything that leaves the machine, anything you're uncertain about.
+
+## Execution Bias
+
+How you should decide what to do next. These are procedural rules, not vibe.
+
+- **Act in-turn.** If the request is actionable, do it this turn. Don't finish with a plan or promise when tools can move it forward.
+- **Verify mutable facts before claiming them.** Files, git state, clocks, versions, services, processes, package state, the contents of an `Edit` target: read live. Memory and prior context are not verification sources. "I think the function is at line 200" is not an answer; `Grep`/`Read` is.
+- **Final answer needs evidence.** Test/build/lint output, screenshot, inspection, tool output, or a named blocker. "It should work" is not a finalization.
+- **Weak or empty tool result is not a conclusion.** Vary the query, path, command, or source before deciding the thing isn't there.
+- **Non-final turn:** use tools to advance, or ask the one clarifying question that unblocks safe progress. One question, not five.
+
+
+## Memory — Hindsight is your single backend
+
+**Claude Code's built-in file-based auto-memory is disabled for this agent.** Don't try to write `.md` files under `.claude/projects/.../memory/` or maintain a `MEMORY.md` index — that whole system is off. There's exactly one memory backend: **Hindsight**.
+
+Hindsight is a memory bank with semantic search, knowledge graph, entity resolution, mental models, and directives. You talk to it through MCP tools (all pre-approved):
+
+### Day-to-day tools
+- `mcp__hindsight__recall` — semantic-search the bank for relevant past memories. Auto-fires on every inbound user message via the plugin's UserPromptSubmit hook (you'll see "Relevant memories from past conversations" in your context). Call manually when you need a more specific query than the auto-fired one.
+- `mcp__hindsight__retain` — store a new memory. The plugin automatically retains the conversation transcript every ~10 turns via the Stop hook, so you usually don't need this. Call manually for significant decisions, corrections, or facts you want immediately searchable.
+- `mcp__hindsight__reflect` — Hindsight's LLM-powered "answer this query using the bank's content + directives". Use when the user asks a question that requires synthesis across multiple past memories.
+
+### Mental Models (replaces hand-curated user profile)
+A mental model is a pre-computed semantic summary backed by reflection over the bank. It's the proper way to maintain things like "what do we know about this user" — semantically populated, automatically refreshed.
+
+- `mcp__hindsight__create_mental_model(name, source_query)` — create one. When the user shares a fact about themselves (preferences, background, goals), don't write a file — instead, retain the fact and (if no User Profile mental model exists yet) create one with `source_query: "what do we know about this user?"`. Hindsight will populate it from the retained memories.
+
+### Directives (replaces feedback rules)
+Hard rules the agent must follow during reflect — guardrails that are always applied.
+
+- `mcp__hindsight__create_directive(text)` — e.g., `create_directive("Always prefer TypeScript over JavaScript for this user's projects")`. When the user gives you a correction or "always do X" rule, create a directive instead of writing a feedback `.md` file.
+
+(Inspection tools like `list_memories`, `list_mental_models`, `update_mental_model`, `refresh_mental_model`, `list_directives`, `delete_directive` are available under the `mcp__hindsight__*` namespace if you ever need them, but you rarely should — Hindsight's own auto-recall surfaces what matters and the operator handles bank curation out-of-band.)
+
+### What to retain — and what NOT to retain
+
+Retain proactively when:
+- The user shares a preference or fact about themselves
+- The user gives you a correction or rule (these go to directives, not retain)
+- A significant decision was made and the rationale matters for next time
+- You did real work and the result + the path you took would be useful next session
+
+Don't retain:
+- Routine pleasantries, "thanks", "got it"
+- Conversation chatter that doesn't carry forward
+- Sensitive content the user explicitly asked you to not remember
+- Things already in a mental model — they'll be re-derived from underlying memories
+
+The plugin's auto-retain (Stop hook) handles transcript-level storage on a 10-turn cadence, so you don't need to manually retain everything. Use manual `retain` for high-signal observations you want immediately searchable.
+
+## Sub-Agent Delegation
+
+The main session is for conversation. Execution belongs in sub-agents. Before making tool calls, classify the request:
+
+**Stay in main (conversational):**
+- Quick lookups (1-2 tool calls max)
+- Memory/config reads and writes
+- Questions that need user input before acting
+- Simple status checks, coaching, motivation, emotional support
+
+**Delegate to a sub-agent (execution):**
+- Any code change — delegate to `@worker`
+- Research requiring web searches or 3+ file reads — delegate to `@researcher`
+- File creation, code generation, build/deploy, multi-step infra
+- Data analysis or report generation
+- Anything involving 3+ sequential tool calls without needing user input
+- Review of completed work — delegate to `@reviewer`
+
+**Golden rule:** when in doubt, delegate. Unnecessary delegation costs slightly more tokens. A blocked session costs the user's attention. Keep your own turns short — dispatch and acknowledge. The user should never wait more than 10 seconds for a response from you.
+
+**Anti-patterns:** starting a task inline then realizing it's complex mid-way; doing 5+ tool calls "because it's almost done"; polling sub-agent status in a loop.
+
+If no sub-agents are configured, do the work yourself.
+
+## Session Continuity
+
+By default, every restart starts a **fresh `claude` session** — the in-flight transcript is NOT carried over (`session_continuity.resume_mode: handoff`, the default since switchroom #362). Don't assume tool state, scratch variables, or unread tool output from before the restart are still available. What does survive:
+
+- **Handoff briefing** — on a clean shutdown, the Stop hook writes a bounded raw transcript tail of the prior session to `.handoff.md`. On boot, start.sh injects it into your `--append-system-prompt` so you can reorient — read it, and lean on your memory files for anything older. If `.handoff.md` is missing or stale (fresh agent, or pre-Stop-hook crash), `start.sh` runs `handoff-briefing.sh` to assemble `.handoff-briefing.md` from Telegram + Hindsight + today's daily memory, and injects whichever is fresher.
+- **Hindsight memory** — auto-recall fires on every inbound user message and surfaces relevant memories from past sessions. Long-term facts, decisions, and mental models live here, not in the transcript.
+- **Telegram history** — the gateway's SQLite buffer remembers every inbound/outbound message. Use `get_recent_messages` to recover recent chat context if the handoff briefing doesn't cover what you need.
+- **`SWITCHROOM_PENDING_TURN`** — if your previous session was killed mid-turn (watchdog, SIGTERM, timeout), start.sh exports this env var plus the chat/thread/last-user-message context. Acknowledge the interruption and ask for direction rather than silently resuming.
+- **`.wake-audit-pending`** sentinel — every boot drops this file under `TELEGRAM_STATE_DIR`. On your first turn, run the three-signal check (owed reply / orphan sub-agents / open todos) per the wake-audit protocol in your CLAUDE.md, then `rm -f` the sentinel.
+
+A config-summary greeting card is sent automatically by the SessionStart hook — you don't need to announce yourself. If your context feels thin (after compaction or any fresh session), proactively recall from Hindsight before proceeding.
+
+(Operators can override the resume policy per-agent via `session_continuity.resume_mode` in switchroom.yaml — `auto`, `continue`, `handoff`, or `none`. The default is `handoff`.)
+
+## Admin operations
+
+You're NOT `admin: true`. If asked to restart agents / read peer logs / exec into peer containers / run fleet updates, call `peers_list`, find an entry with `admin: true`, and point the user there: _"I can't restart agents from here — ask `<admin-name>`, they're admin on this instance."_ No long apology; just hand off.
+
+## Tools
+Use your available tools when appropriate. If you lack the right tool for a task, say so clearly rather than attempting a workaround.
+

package/telegram-plugin/dist/bridge/bridge.js

@@ -23063,14 +23063,14 @@ function createToolLabelSidecar(opts) {
       } catch {
         continue;
       }
-      if (!row || typeof row.tool_use_id !== "string" || typeof row.label !== "string")
+      if (!row || typeof row.tool_use_id !== "string" || typeof row.label !== "string" || typeof row.tool_name !== "string")
         continue;
       if (labels.has(row.tool_use_id))
         continue;
       labels.set(row.tool_use_id, row.label);
       for (const cb of subscribers) {
         try {
-          cb(row.tool_use_id, row.label);
+          cb(row.tool_use_id, row.label, row.tool_name);
         } catch {}
       }
     }
@@ -23441,6 +23441,9 @@ function startSessionTail(config2) {
     try {
       const s = createToolLabelSidecar({ stateDir: stateDirForSidecar, sessionId });
       sidecars.set(sessionId, s);
+      s.onLabel((toolUseId, label, toolName) => {
+        rawOnEvent({ kind: "tool_label", toolUseId, label, toolName });
+      });
       return s;
     } catch (err) {
       log?.(`session-tail: sidecar create failed: ${err.message}`);
@@ -23554,6 +23557,9 @@ function startSessionTail(config2) {
       }
       log?.(`session-tail: attached to ${file} (cursor=${cursor})`);
     }
+    const attachSid = sessionIdForFile(file);
+    if (attachSid)
+      ensureSidecar(attachSid);
     try {
       watcher = watch(file, () => readNew());
     } catch (err) {

package/telegram-plugin/dist/gateway/gateway.js

@@ -31866,121 +31866,7 @@ function registerAndRender(state, toolName) {
     return null;
   return formatSummary(state);
 }
-function baseName(p) {
-  if (typeof p !== "string" || p.length === 0)
-    return null;
-  const parts = p.split("/").filter(Boolean);
-  return parts.length > 0 ? parts[parts.length - 1] : p;
-}
-function hostName(u) {
-  if (typeof u !== "string" || u.length === 0)
-    return null;
-  try {
-    return new URL(u).hostname.replace(/^www\./, "");
-  } catch {
-    return u.replace(/^https?:\/\//, "").split("/")[0] || null;
-  }
-}
-function clip(s, n) {
-  if (typeof s !== "string")
-    return null;
-  const t = s.trim();
-  if (t.length === 0)
-    return null;
-  return t.length > n ? t.slice(0, n - 1) + "\u2026" : t;
-}
-function describeToolUse(toolName, input) {
-  if (!toolName)
-    return null;
-  const inp = input ?? {};
-  const mcpMatch = /^mcp__(.+?)__(.+)$/.exec(toolName);
-  if (mcpMatch) {
-    const server = mcpMatch[1].toLowerCase();
-    const tool = mcpMatch[2].toLowerCase();
-    if (server === "switchroom-telegram")
-      return null;
-    if (server === "hindsight") {
-      if (tool === "recall" || tool === "reflect")
-        return "Searching memory";
-      if (tool === "retain" || tool === "update_memory" || tool === "sync_retain")
-        return "Saving to memory";
-      return "Working with memory";
-    }
-    if (server === "google-workspace" || server === "claude_ai_google_calendar") {
-      return "Checking your calendar";
-    }
-    if (server === "claude_ai_gmail")
-      return "Checking your email";
-    if (server === "claude_ai_google_drive")
-      return "Looking through your files";
-    if (server === "notion" || server === "claude_ai_notion") {
-      return "Checking your notes";
-    }
-    const desc = clip(inp.description, 60) ?? clip(inp.query, 50) ?? clip(inp.title, 50);
-    if (desc)
-      return desc;
-    return "Using " + tool.replace(/[-_]+/g, " ");
-  }
-  switch (toolName) {
-    case "Bash": {
-      return clip(inp.description, 70) ?? "Running a command";
-    }
-    case "BashOutput":
-    case "KillShell":
-      return "Managing a background command";
-    case "Read": {
-      const f = baseName(inp.file_path);
-      return f ? `Reading ${f}` : "Reading a file";
-    }
-    case "Edit":
-    case "MultiEdit":
-    case "NotebookEdit": {
-      const f = baseName(inp.file_path) ?? baseName(inp.notebook_path);
-      return f ? `Editing ${f}` : "Editing a file";
-    }
-    case "Write": {
-      const f = baseName(inp.file_path);
-      return f ? `Writing ${f}` : "Writing a file";
-    }
-    case "Grep":
-    case "Glob": {
-      const p = clip(inp.pattern, 40);
-      return p ? `Searching for ${p}` : "Searching files";
-    }
-    case "WebFetch": {
-      const h = hostName(inp.url);
-      return h ? `Reading ${h}` : "Reading a web page";
-    }
-    case "WebSearch": {
-      const q = clip(inp.query, 50);
-      return q ? `Searching the web for ${q}` : "Searching the web";
-    }
-    case "Task":
-    case "Agent": {
-      const d = clip(inp.description, 60);
-      return d ? `Delegating: ${d}` : "Delegating to a sub-agent";
-    }
-    case "TodoWrite":
-    case "TaskCreate":
-    case "TaskUpdate":
-    case "TaskList":
-      return "Updating the plan";
-    case "ToolSearch":
-      return "Finding the right tool";
-    default:
-      return "Working\u2026";
-  }
-}
 var MIRROR_MAX_LINES = 6;
-function appendActivityLine(lines, toolName, input) {
-  const line = describeToolUse(toolName, input);
-  if (line == null)
-    return null;
-  if (lines.length === 0 || lines[lines.length - 1] !== line) {
-    lines.push(line);
-  }
-  return renderActivityFeed(lines);
-}
 function renderActivityFeed(lines) {
   if (lines.length === 0)
     return null;
@@ -31991,6 +31877,15 @@ function renderActivityFeed(lines) {
   return hidden > 0 ? `\u00b7 +${hidden} earlier\u2026
 ${body}` : body;
 }
+function appendActivityLabel(lines, label) {
+  const l = (label ?? "").trim();
+  if (l.length === 0)
+    return null;
+  if (lines.length === 0 || lines[lines.length - 1] !== l) {
+    lines.push(l);
+  }
+  return renderActivityFeed(lines);
+}
 
 // tool-labels.ts
 var MAX_LABEL_CHARS = 60;
@@ -46282,6 +46177,13 @@ function transition(state3, event) {
 // gateway/inbound-delivery-machine-shadow.ts
 var state3 = initialState();
 var enabled5 = process.env.SWITCHROOM_DELIVERY_MACHINE_SHADOW !== "0";
+var cutoverEnabled = enabled5 && process.env.SWITCHROOM_DELIVERY_MACHINE_CUTOVER !== "0";
+function isDeliveryCutoverEnabled() {
+  return cutoverEnabled;
+}
+function isMachineInTurn() {
+  return state3.global.kind === "bridge_alive_in_turn";
+}
 function shadowEmit(event) {
   if (!enabled5)
     return [];
@@ -50163,10 +50065,10 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.14.2";
-var COMMIT_SHA = "3c7d0238";
-var COMMIT_DATE = "2026-05-28T07:47:55Z";
-var LATEST_PR = 1958;
+var VERSION = "0.14.3";
+var COMMIT_SHA = "b61cef7e";
+var COMMIT_DATE = "2026-05-28T09:56:51Z";
+var LATEST_PR = 1964;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -51091,6 +50993,9 @@ function markClaudeBusyForInbound(m) {
   }
   claudeBusyKeys.add(chatKey2(m.chatId, tid));
 }
+function turnInFlightForGate() {
+  return isDeliveryCutoverEnabled() ? isMachineInTurn() : claudeBusyKeys.size > 0;
+}
 var pendingRestarts = new Map;
 var lastSessionActiveFile = null;
 var compactState = initialCompactState();
@@ -51156,7 +51061,7 @@ function purgeReactionTracking(key, endingTurn) {
     if (agentDir != null)
       removeActiveReaction(agentDir, msgInfo.chatId, msgInfo.messageId);
   }
-  if (claudeBusyKeys.size === 0) {
+  if (!turnInFlightForGate()) {
     const selfAgentForFlush = process.env.SWITCHROOM_AGENT_NAME ?? "";
     if (pendingInboundBuffer.depth(selfAgentForFlush) > 0) {
       const fr = redeliverBufferedInbound(pendingInboundBuffer, selfAgentForFlush, (m) => {
@@ -51186,7 +51091,7 @@ function releaseTurnBufferGate(key) {
   activeTurnStartedAt.delete(key);
   claudeBusyKeys.delete(key);
   shadowEmit({ kind: "turnEnd", key, at: Date.now(), outboundEmitted: true });
-  if (claudeBusyKeys.size === 0) {
+  if (!turnInFlightForGate()) {
     const selfAgentForFlush = process.env.SWITCHROOM_AGENT_NAME ?? "";
     if (pendingInboundBuffer.depth(selfAgentForFlush) > 0) {
       const fr = redeliverBufferedInbound(pendingInboundBuffer, selfAgentForFlush, (m) => {
@@ -52134,6 +52039,11 @@ startTimer({
 `);
   }
 });
+var DELIVERY_MACHINE_TICK_MS = 30000;
+var _deliveryMachineTick = setInterval(() => {
+  shadowEmit({ kind: "tick", now: Date.now() });
+}, DELIVERY_MACHINE_TICK_MS);
+_deliveryMachineTick.unref?.();
 startTimer2({
   editMessage: async (ctx) => {
     const editOpts = ctx.parseMode != null ? { parse_mode: ctx.parseMode } : undefined;
@@ -52435,7 +52345,7 @@ ${reminder}
   onHeartbeat(_client, _msg) {},
   onScheduleRestart(client3, msg) {
     const { agentName: agentName3 } = msg;
-    const turnInFlight = claudeBusyKeys.size > 0;
+    const turnInFlight = turnInFlightForGate();
     if (!turnInFlight) {
       try {
         client3.send({
@@ -52690,7 +52600,7 @@ if (!STATIC) {
   setInterval(() => {
     const selfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
     const r = idleDrainTick(pendingInboundBuffer, selfAgent, () => {
-      if (claudeBusyKeys.size > 0)
+      if (turnInFlightForGate())
         return false;
       const c = ipcServer.getClient(selfAgent);
       return c != null && c.isAlive();
@@ -52971,6 +52881,7 @@ ${url}`;
   });
   noteOutbound(statusKey(chat_id, threadId), Date.now());
   noteOutbound2(statusKey(chat_id, threadId), Date.now());
+  shadowEmit({ kind: "modelOutbound", key: statusKey(chat_id, threadId), at: Date.now() });
   if (isFinalAnswerReply({ text: rawText, disableNotification })) {
     clearSilentEndState(statusKey(chat_id, threadId));
   }
@@ -53298,6 +53209,7 @@ async function executeStreamReply(args) {
       const sKey = statusKey(streamChatId, streamThreadId);
       noteOutbound(sKey, Date.now());
       noteOutbound2(sKey, Date.now());
+      shadowEmit({ kind: "modelOutbound", key: sKey, at: Date.now() });
       if (isFinalAnswerReply({
         text: args.text ?? "",
         disableNotification: args.disable_notification === true,
@@ -54248,6 +54160,11 @@ function handleSessionEvent(ev) {
           isDm: isDmChatId(ev.chatId)
         };
         currentTurn = next;
+        shadowEmit({
+          kind: "turnStart",
+          key: statusKey(ev.chatId, ev.threadId != null ? Number(ev.threadId) : undefined),
+          at: startedAt
+        });
         preambleSuppressor.reset();
         clearSilentEndState(statusKey(ev.chatId, ev.threadId != null ? Number(ev.threadId) : null));
         if (turnsDb != null) {
@@ -54309,12 +54226,12 @@ function handleSessionEvent(ev) {
           clearTimeout(turn.orphanedReplyTimeoutId);
           turn.orphanedReplyTimeoutId = null;
         }
-        if (wasFirstReply) {
+        if (wasFirstReply && !DRAFT_MIRROR_ENABLED) {
           clearActivitySummary(turn);
         }
       }
-      if (!turn.replyCalled && !isTelegramSurfaceTool(name)) {
-        const rendered = DRAFT_MIRROR_ENABLED ? appendActivityLine(turn.mirrorLines, name, ev.input) : registerAndRender(turn.toolActivity, name);
+      if (!DRAFT_MIRROR_ENABLED && !turn.replyCalled && !isTelegramSurfaceTool(name)) {
+        const rendered = registerAndRender(turn.toolActivity, name);
         if (rendered != null) {
           turn.activityPendingRender = rendered;
           if (turn.activityInFlight == null) {
@@ -54332,6 +54249,23 @@ function handleSessionEvent(ev) {
       }
       return;
     }
+    case "tool_label": {
+      if (!DRAFT_MIRROR_ENABLED)
+        return;
+      const turn = currentTurn;
+      if (turn == null)
+        return;
+      if (isTelegramSurfaceTool(ev.toolName))
+        return;
+      const rendered = appendActivityLabel(turn.mirrorLines, ev.label);
+      if (rendered != null) {
+        turn.activityPendingRender = rendered;
+        if (turn.activityInFlight == null) {
+          turn.activityInFlight = drainActivitySummary(turn);
+        }
+      }
+      return;
+    }
     case "text": {
       const turn = currentTurn;
       if (turn != null) {
@@ -54461,6 +54395,9 @@ function handleSessionEvent(ev) {
         clearTimeout(turn.orphanedReplyTimeoutId);
         turn.orphanedReplyTimeoutId = null;
       }
+      if (DRAFT_MIRROR_ENABLED && turn != null) {
+        clearActivitySummary(turn);
+      }
       preambleSuppressor.flushNow();
       let streamFinalizedAsAnswer = false;
       if (turn?.answerStream != null) {
@@ -55001,6 +54938,7 @@ async function handleInbound(ctx, text, downloadImage, attachment) {
   }
   const inboundReceivedAt = Date.now();
   const _shadowKey = statusKey(ctx.chat?.id != null ? String(ctx.chat.id) : "0", ctx.message?.message_thread_id);
+  const machineInTurnAtReceipt = isDeliveryCutoverEnabled() ? isMachineInTurn() : null;
   shadowEmit({
     kind: "inbound",
     key: _shadowKey,
@@ -55011,7 +54949,7 @@ async function handleInbound(ctx, text, downloadImage, attachment) {
     },
     at: Date.now()
   });
-  const turnInFlightAtReceipt = claudeBusyKeys.size > 0;
+  const turnInFlightAtReceipt = machineInTurnAtReceipt ?? claudeBusyKeys.size > 0;
   const access = result.access;
   const from = ctx.from;
   const chat_id = String(ctx.chat.id);

package/telegram-plugin/dist/server.js

@@ -17091,14 +17091,14 @@ function createToolLabelSidecar(opts) {
       } catch {
         continue;
       }
-      if (!row || typeof row.tool_use_id !== "string" || typeof row.label !== "string")
+      if (!row || typeof row.tool_use_id !== "string" || typeof row.label !== "string" || typeof row.tool_name !== "string")
         continue;
       if (labels.has(row.tool_use_id))
         continue;
       labels.set(row.tool_use_id, row.label);
       for (const cb of subscribers) {
         try {
-          cb(row.tool_use_id, row.label);
+          cb(row.tool_use_id, row.label, row.tool_name);
         } catch {}
       }
     }
@@ -17479,6 +17479,9 @@ function startSessionTail(config2) {
     try {
       const s = createToolLabelSidecar({ stateDir: stateDirForSidecar, sessionId });
       sidecars.set(sessionId, s);
+      s.onLabel((toolUseId, label, toolName) => {
+        rawOnEvent({ kind: "tool_label", toolUseId, label, toolName });
+      });
       return s;
     } catch (err) {
       log?.(`session-tail: sidecar create failed: ${err.message}`);
@@ -17592,6 +17595,9 @@ function startSessionTail(config2) {
       }
       log?.(`session-tail: attached to ${file} (cursor=${cursor})`);
     }
+    const attachSid = sessionIdForFile(file);
+    if (attachSid)
+      ensureSidecar(attachSid);
     try {
       watcher = watch(file, () => readNew());
     } catch (err) {

package/telegram-plugin/gateway/gateway.ts

@@ -59,6 +59,7 @@ import {
   registerAndRender,
   describeToolUse,
   appendActivityLine,
+  appendActivityLabel,
   type ActivityState,
 } from '../tool-activity-summary.js'
 import { toolLabel } from '../tool-labels.js'
@@ -286,7 +287,7 @@ import { chatKey, chatKeyWithSuffix, chatIdOfChatKey } from './chat-key.js'
 // should do. Behavior unchanged in this PR — the imperative code below
 // still runs everything. PR 3 will cut over to executing the machine's
 // effects.
-import { shadowEmit } from './inbound-delivery-machine-shadow.js'
+import { shadowEmit, isMachineInTurn, isDeliveryCutoverEnabled } from './inbound-delivery-machine-shadow.js'
 import type { ChatKey as _ChatKey } from './inbound-delivery-machine.js'
 import { dispatchEffects, isDispatchEnabled } from './inbound-delivery-machine-dispatch.js'
 import { maybeFireWarmup } from './prefix-warmup.js'
@@ -1161,6 +1162,24 @@ function markClaudeBusyForInbound(m: {
   }
   claudeBusyKeys.add(chatKey(m.chatId, tid))
 }
+
+/**
+ * Authoritative "is a turn in flight?" for every gate that previously
+ * read `claudeBusyKeys.size`. PR 3b cutover (extends PR 3a's bridgeUp
+ * dispatch): when the delivery state machine is authoritative
+ * (`SWITCHROOM_DELIVERY_MACHINE_CUTOVER` on + shadow on) the answer is
+ * its single-`activeTurn` global state, which — unlike the
+ * per-delivery `claudeBusyKeys` set — cannot accumulate orphan keys and
+ * wedge the gate "in-flight forever" (the gymbro/clerk 5-min dangle,
+ * 2026-05-28). Kill-switch off → exact legacy claudeBusyKeys behaviour.
+ *
+ * NOT for the inbound-receipt gate (line ~8551): that must snapshot the
+ * machine state BEFORE the inbound event advances it, or a fresh-turn
+ * message self-blocks. See the snapshot at the inbound handler.
+ */
+function turnInFlightForGate(): boolean {
+  return isDeliveryCutoverEnabled() ? isMachineInTurn() : claudeBusyKeys.size > 0
+}
 const pendingRestarts = new Map<string, number>()  // agentName -> timestamp when restart was requested
 
 // ─── Proactive context compaction (session.max_context_tokens) ──────────
@@ -1490,7 +1509,11 @@ function purgeReactionTracking(key: string, endingTurn?: CurrentTurn): void {
   // activeTurnStartedAt entry in the fresh-turn branch) doesn't pin this
   // gate forever while claude is genuinely idle. See the claudeBusyKeys
   // declaration for the supergroup deadlock this fixes.
-  if (claudeBusyKeys.size === 0) {
+  // PR3b-cutover: `turnInFlightForGate()` reads the delivery machine
+  // when the cutover kill-switch is on; the turnEnd event was emitted
+  // just above (purgeReactionTracking head), so the machine is already
+  // idle here.
+  if (!turnInFlightForGate()) {
     // #1556: the deterministic delivery point. claude has just gone
     // idle — flush any inbound held mid-turn so the channel
     // notification lands at the idle prompt and submits as a fresh
@@ -1590,7 +1613,9 @@ function releaseTurnBufferGate(key: string): void {
   // test-harness's 13:02 UAT now opens after the reply.
   //
   // PR3b: gated on claudeBusyKeys (see purgeReactionTracking comment).
-  if (claudeBusyKeys.size === 0) {
+  // PR3b-cutover: turnEnd was emitted just above (releaseTurnBufferGate
+  // head), so the machine is already idle when the cutover gate reads.
+  if (!turnInFlightForGate()) {
     const selfAgentForFlush = process.env.SWITCHROOM_AGENT_NAME ?? ''
     if (pendingInboundBuffer.depth(selfAgentForFlush) > 0) {
       const fr = redeliverBufferedInbound(
@@ -3656,6 +3681,23 @@ silencePoke.startTimer({
   },
 })
 
+// PR3b-cutover: drive the delivery machine's TTL `tick`. The machine
+// expires any turn whose `turnStartedAt` is older than TURN_TTL_MS
+// (5 min) and drops global state back to idle — its structural
+// equivalent of the imperative silence-poke framework-fallback. This
+// is the load-bearing safety net for the cutover gate: even if a
+// `turnEnd` event is somehow missed (the dangle class), the machine
+// self-heals at TTL instead of pinning the gate "in-flight forever".
+// shadowEmit only advances state + logs the predicted effects; we
+// deliberately do NOT execute the machine's firePoke here (the
+// imperative silence-poke still owns the user-facing ping), so there
+// is no double-poke. unref so the interval never holds the process.
+const DELIVERY_MACHINE_TICK_MS = 30_000
+const _deliveryMachineTick = setInterval(() => {
+  shadowEmit({ kind: 'tick', now: Date.now() })
+}, DELIVERY_MACHINE_TICK_MS)
+_deliveryMachineTick.unref?.()
+
 // #1445 cross-turn pending-async ambient. When a turn ends after the
 // model dispatched background async work (Agent / Task / Bash run-in-
 // background) and the model has stopped speaking, keep editing the
@@ -4195,7 +4237,8 @@ const ipcServer: IpcServer = createIpcServer({
     // PR3b: gated on claudeBusyKeys (actually-handed-to-claude turns)
     // not activeTurnStartedAt (receipt-eager), so a buffered topic-B
     // inbound doesn't pin this as turnInFlight=true forever.
-    const turnInFlight = claudeBusyKeys.size > 0;
+    // PR3b-cutover: reads the delivery machine when the kill-switch is on.
+    const turnInFlight = turnInFlightForGate();
 
     if (!turnInFlight) {
       // No active turn, restart immediately. Cycle both the agent and
@@ -4615,7 +4658,8 @@ if (!STATIC) {
         // #1556: never drain mid-turn — that re-creates the composer
         // wedge this buffer exists to prevent.
         // PR3b: gated on claudeBusyKeys (see purgeReactionTracking).
-        if (claudeBusyKeys.size > 0) return false
+        // PR3b-cutover: reads the delivery machine when the kill-switch is on.
+        if (turnInFlightForGate()) return false
         const c = ipcServer.getClient(selfAgent)
         return c != null && c.isAlive()
       },
@@ -5020,6 +5064,11 @@ async function executeReply(args: Record<string, unknown>): Promise<{ content: A
   // silence-poke clock so the next poke is measured from this send.
   signalTracker.noteOutbound(statusKey(chat_id, threadId), Date.now())
   silencePoke.noteOutbound(statusKey(chat_id, threadId), Date.now())
+  // PR3b-cutover: feed lastOutboundAt to the delivery machine so its
+  // TTL `tick` suppresses the fallback for a long-but-active turn
+  // (model streaming past 5 min) — parity with silencePoke's own
+  // suppression, so the cutover gate doesn't clear a live turn.
+  shadowEmit({ kind: 'modelOutbound', key: statusKey(chat_id, threadId) as _ChatKey, at: Date.now() })
   // #1741 — only clear silent-end state on a plausibly-final reply.
   // An interim ack (disable_notification:true, short text, no done)
   // must NOT clear the state file; otherwise a turn that ends with
@@ -5615,6 +5664,9 @@ async function executeStreamReply(args: Record<string, unknown>): Promise<unknow
       const sKey = statusKey(streamChatId, streamThreadId)
       signalTracker.noteOutbound(sKey, Date.now())
       silencePoke.noteOutbound(sKey, Date.now())
+      // PR3b-cutover: feed lastOutboundAt to the delivery machine (see
+      // executeReply) so its TTL tick suppresses an active-turn fallback.
+      shadowEmit({ kind: 'modelOutbound', key: sKey as _ChatKey, at: Date.now() })
       // #1741 — see executeReply for the rationale: only a plausibly-
       // final stream_reply clears the silent-end state. An interim
       // ack via stream_reply must NOT clear; the Stop hook needs
@@ -7012,6 +7064,20 @@ function handleSessionEvent(ev: SessionEvent): void {
           isDm: isDmChatId(ev.chatId),
         }
         currentTurn = next
+        // PR3b-cutover: feed the authoritative turn-start to the delivery
+        // machine. `enqueue` fires for EVERY turn atom regardless of
+        // source — inbound, cron, subagent-handback, vault-resume,
+        // restart-marker — so it is the single chokepoint that captures
+        // the non-inbound turns the machine's own `inbound` event never
+        // sees (those bypass handleInbound). Without it the machine reads
+        // idle during a cron/handback turn and the gate would mis-deliver
+        // a concurrent inbound mid-turn (the #1556 composer wedge).
+        // Idempotent when already in_turn (turnStart only sets perKey).
+        shadowEmit({
+          kind: 'turnStart',
+          key: statusKey(ev.chatId, ev.threadId != null ? Number(ev.threadId) : undefined) as _ChatKey,
+          at: startedAt,
+        })
         // #549 fix — fresh turn, reset preamble-suppression state.
         preambleSuppressor.reset()
         // Reset the silent-end retry budget for this chat. The stored
@@ -7130,7 +7196,12 @@ function handleSessionEvent(ev: SessionEvent): void {
         // empty draft to wipe the compose-area preview; for persisted
         // messages, delete. The user sees the real reply land in the
         // same beat the summary disappears.
-        if (wasFirstReply) {
+        // Legacy (flag-off): the activity summary clears on the first
+        // reply — it was a one-shot "what I did" line. DRAFT_MIRROR keeps
+        // the live feed running through mid-turn replies and clears it at
+        // turn_end instead, so an early reply doesn't wipe the stream
+        // (the fast-turn determinism fix).
+        if (wasFirstReply && !DRAFT_MIRROR_ENABLED) {
           clearActivitySummary(turn)
         }
       }
@@ -7153,22 +7224,19 @@ function handleSessionEvent(ev: SessionEvent): void {
       // exactly once at a time and re-running until pending matches
       // the last-sent. Captures `turn` so a late drain after turn-swap
       // can't corrupt the next turn's atom.
-      // DRAFT_MIRROR (RFC draft-mirror-preview): accumulate each tool_use
-      // into a human-friendly running feed in the live preview, using the
-      // model-authored descriptive field (Bash.description, Read/Edit file
-      // basename, hindsight→"Searching memory", etc. — see describeToolUse
-      // / appendActivityLine). The draft shows the turn's actions as a
-      // capped chronological list (Claude Code-style), clears on reply.
-      // Never surfaces raw shell/query syntax — option A, uniform across
-      // code + non-code agents.
-      //
       // Flag OFF (default): the legacy generic verb-count summary
       // ("Ran 5 commands") via registerAndRender — byte-identical to
-      // pre-draft-mirror behavior.
-      if (!turn.replyCalled && !isTelegramSurfaceTool(name)) {
-        const rendered = DRAFT_MIRROR_ENABLED
-          ? appendActivityLine(turn.mirrorLines, name, ev.input)
-          : registerAndRender(turn.toolActivity, name)
+      // pre-draft-mirror behavior, cleared on first reply.
+      //
+      // DRAFT_MIRROR: the draft is NOT driven from this (flush-gated)
+      // tool_use event — it's driven by the real-time `tool_label` event
+      // (PreToolUse sidecar, fires at tool-call time regardless of when
+      // claude flushes the transcript). See `case 'tool_label'`. That's
+      // the determinism fix: on a fast/clustered-tool turn the JSONL
+      // tool_use rows aren't on disk until ~turn-end, so sourcing the
+      // draft here lost the feed; the sidecar is flush-independent.
+      if (!DRAFT_MIRROR_ENABLED && !turn.replyCalled && !isTelegramSurfaceTool(name)) {
+        const rendered = registerAndRender(turn.toolActivity, name)
         if (rendered != null) {
           turn.activityPendingRender = rendered
           if (turn.activityInFlight == null) {
@@ -7184,6 +7252,31 @@ function handleSessionEvent(ev: SessionEvent): void {
       }
       return
     }
+    case 'tool_label': {
+      // DRAFT_MIRROR real-time driver. The PreToolUse hook wrote this
+      // label synchronously at tool-call time; the sidecar surfaced it
+      // here (~250ms) independent of the transcript flush. Accumulate it
+      // into the live feed and update the ephemeral draft — this is what
+      // makes the draft deterministic on fast/clustered-tool turns where
+      // the JSONL tool_use rows arrive too late.
+      if (!DRAFT_MIRROR_ENABLED) return
+      const turn = currentTurn
+      if (turn == null) return
+      // Surface tools (reply/stream_reply/react) are the conversation, not
+      // activity — the hook labels them ("Replying"), so filter by name.
+      if (isTelegramSurfaceTool(ev.toolName)) return
+      // Unlike the legacy tool_use path, do NOT gate on replyCalled — the
+      // whole point is to show activity even when a reply raced ahead of
+      // the (lagged) transcript. The feed clears at turn_end.
+      const rendered = appendActivityLabel(turn.mirrorLines, ev.label)
+      if (rendered != null) {
+        turn.activityPendingRender = rendered
+        if (turn.activityInFlight == null) {
+          turn.activityInFlight = drainActivitySummary(turn)
+        }
+      }
+      return
+    }
     case 'text': {
       // #1067: snapshot at entry. The answer-stream creation closures
       // below also read `turn` instead of currentTurn so they pin to
@@ -7454,6 +7547,14 @@ function handleSessionEvent(ev: SessionEvent): void {
         clearTimeout(turn.orphanedReplyTimeoutId)
         turn.orphanedReplyTimeoutId = null
       }
+      // DRAFT_MIRROR: the live activity feed runs through the whole turn
+      // (it is NOT cleared on the first reply, unlike the legacy summary)
+      // so an early/mid-turn reply can't wipe it. Clear it here, at the
+      // real end of the turn — the ephemeral compose-area draft goes away
+      // once the work is actually done.
+      if (DRAFT_MIRROR_ENABLED && turn != null) {
+        clearActivitySummary(turn)
+      }
       // #549 fix — flush any pending preamble BEFORE the answer stream is
       // nulled below. Text emitted immediately before turn_end (no tool
       // followed) is the answer; the suppressor's emitAnswer callback
@@ -8505,6 +8606,14 @@ async function handleInbound(
   // vs mid-turn — its decision will be visible in the gw-trace shadow
   // line emitted to stderr.
   const _shadowKey = statusKey(ctx.chat?.id != null ? String(ctx.chat.id) : '0', ctx.message?.message_thread_id) as _ChatKey
+  // PR3b-cutover: snapshot the machine's in-turn state BEFORE the
+  // inbound event advances it. A fresh-turn inbound transitions the
+  // machine idle→in_turn; reading after the emit would see THIS
+  // message's own just-started turn and self-block it (the same
+  // self-block hazard the claudeBusyKeys snapshot below guards). When
+  // the kill-switch is off this is null and the gate uses the legacy
+  // claudeBusyKeys read.
+  const machineInTurnAtReceipt = isDeliveryCutoverEnabled() ? isMachineInTurn() : null
   shadowEmit({
     kind: 'inbound',
     key: _shadowKey,
@@ -8556,7 +8665,12 @@ async function handleInbound(
   // no turn_end ever fires). With claudeBusyKeys, B sees true (A is
   // busy) → B is buffered correctly, AND the gate cleanly reopens
   // when A's turn_end deletes keyA → flush triggers → B delivered.
-  const turnInFlightAtReceipt = claudeBusyKeys.size > 0
+  // PR3b-cutover: prefer the machine snapshot taken before the inbound
+  // event advanced it (machineInTurnAtReceipt); null when the
+  // kill-switch is off, in which case the legacy claudeBusyKeys read
+  // stands. Both are "was a turn in flight at receipt", not a live
+  // post-this-inbound read — see machineInTurnAtReceipt's comment.
+  const turnInFlightAtReceipt = machineInTurnAtReceipt ?? (claudeBusyKeys.size > 0)
 
   const access = result.access
   const from = ctx.from!

package/telegram-plugin/gateway/inbound-delivery-machine-shadow.ts

@@ -43,6 +43,39 @@ import {
 let state: State = initialState()
 const enabled = process.env.SWITCHROOM_DELIVERY_MACHINE_SHADOW !== '0'
 
+// Phase 2b PR 3 — STAGED CUTOVER. When enabled, the gateway's
+// "is a turn in flight?" gate reads this machine's global state
+// instead of the PR3b `claudeBusyKeys` set. The machine tracks ONE
+// `activeTurn` (single bridge) plus TTL `tick` expiry, so — unlike a
+// per-delivery key set — it cannot accumulate orphan keys and wedge
+// the gate "in-flight forever" (the gymbro/clerk 5-min dangle of
+// 2026-05-28). Scope is the turn-in-flight GATE only; the poke ladder
+// and perm-verdict effects stay imperative for a follow-up PR.
+//
+// Kill switch: `SWITCHROOM_DELIVERY_MACHINE_CUTOVER=0` reverts every
+// gate to the legacy claudeBusyKeys read (zero behaviour change).
+// Requires shadow mode ON — with shadow off the machine state is
+// frozen and must NOT be read as authoritative.
+const cutoverEnabled = enabled && process.env.SWITCHROOM_DELIVERY_MACHINE_CUTOVER !== '0'
+
+/**
+ * True when the kill-switch leaves the delivery machine authoritative
+ * for the turn-in-flight gate. Gateway gate sites branch on this.
+ */
+export function isDeliveryCutoverEnabled(): boolean {
+  return cutoverEnabled
+}
+
+/**
+ * Authoritative "is a turn currently in flight?" read for the gate.
+ * Maps the machine's global state to the boolean the legacy
+ * `claudeBusyKeys.size > 0` gate produced. `bridge_dead` and
+ * `bridge_alive_idle` are both "not in flight".
+ */
+export function isMachineInTurn(): boolean {
+  return state.global.kind === 'bridge_alive_in_turn'
+}
+
 /**
  * Run an event through the state machine in shadow mode. The machine
  * state advances, the predicted effects are LOGGED, but no I/O fires.

package/telegram-plugin/hooks/tool-label-pretool.mjs

@@ -74,15 +74,24 @@ function urlHostPath(u) {
 export function computeLabel(toolName, input) {
   const i = input ?? {}
 
-  // Tools whose labels are already handled elsewhere — emit nothing so
-  // the existing description / TodoWrite / sub-agent paths win.
+  // Bash / Task / ToolSearch / TodoWrite: previously emitted nothing
+  // (deferred to the session-JSONL description path). The draft-mirror
+  // now drives off THIS sidecar in real time (flush-independent), so we
+  // must label them here too — otherwise the most common tool (Bash)
+  // never reaches the live draft. Uses the model-authored `description`
+  // for Bash/Task, matching the gateway's describeToolUse rendering.
   switch (toolName) {
     case 'Bash':
+      return clip(String(i.description ?? ''), 70).trim() || 'Running a command'
     case 'Task':
-    case 'Agent':
+    case 'Agent': {
+      const d = clip(String(i.description ?? ''), 60).trim()
+      return d ? `Delegating: ${d}` : 'Delegating to a sub-agent'
+    }
     case 'TodoWrite':
+      return 'Updating the plan'
     case 'ToolSearch':
-      return null
+      return 'Finding the right tool'
   }
 
   // Built-in rule table.

package/telegram-plugin/session-tail.ts

@@ -93,6 +93,11 @@ export type SessionEvent =
   | { kind: 'dequeue' }
   | { kind: 'thinking' }
   | { kind: 'tool_use'; toolName: string; toolUseId?: string | null; input?: Record<string, unknown>; precomputedLabel?: string }
+  // Real-time tool label from the PreToolUse-hook sidecar — fires when the
+  // hook writes the label (synchronous at tool-call time), independent of
+  // the lazily-flushed transcript. The draft-mirror drives off THIS, not
+  // the flush-gated `tool_use`, so activity streams deterministically.
+  | { kind: 'tool_label'; toolUseId: string; label: string; toolName: string }
   | { kind: 'text'; text: string }
   | { kind: 'tool_result'; toolUseId: string; toolName: string | null; isError?: boolean; errorText?: string }
   | { kind: 'turn_end'; durationMs: number }
@@ -639,6 +644,13 @@ export function startSessionTail(config: SessionTailConfig): SessionTailHandle {
     try {
       const s = createToolLabelSidecar({ stateDir: stateDirForSidecar, sessionId })
       sidecars.set(sessionId, s)
+      // Real-time draft-mirror source: emit a `tool_label` event the moment
+      // the hook writes a label (flush-independent), so the gateway can
+      // stream the activity feed without waiting on the transcript flush.
+      // Subscribed once per sidecar (this is the only creation site).
+      s.onLabel((toolUseId, label, toolName) => {
+        rawOnEvent({ kind: 'tool_label', toolUseId, label, toolName })
+      })
       return s
     } catch (err) {
       log?.(`session-tail: sidecar create failed: ${(err as Error).message}`)
@@ -775,6 +787,12 @@ export function startSessionTail(config: SessionTailConfig): SessionTailHandle {
       }
       log?.(`session-tail: attached to ${file} (cursor=${cursor})`)
     }
+    // Eagerly create + subscribe the PreToolUse sidecar for this session
+    // NOW (on attach), not lazily on the first JSONL tool_use — otherwise
+    // the real-time `tool_label` source wouldn't exist until a flush-gated
+    // tool_use arrived, re-introducing the very lag the sidecar avoids.
+    const attachSid = sessionIdForFile(file)
+    if (attachSid) ensureSidecar(attachSid)
     try {
       watcher = watch(file, () => readNew())
     } catch (err) {

package/telegram-plugin/tests/inbound-delivery-cutover-gate.test.ts

@@ -0,0 +1,93 @@
+/**
+ * PR3b cutover — the turn-in-flight GATE now reads the delivery state
+ * machine (`isMachineInTurn`) instead of the PR3b `claudeBusyKeys` set.
+ *
+ * The bug this closes (gymbro/clerk, 2026-05-28): `claudeBusyKeys` is a
+ * per-delivery Set — every delivery `.add`s a key, but turn-end `.delete`s
+ * exactly one. When a turn-end is missed (or fires under a non-matching
+ * key) the set keeps an orphan, `size > 0` reads true forever, and EVERY
+ * subsequent inbound buffers as "held mid-turn" until the 5-min
+ * framework-fallback force-drains it.
+ *
+ * The machine cannot accumulate orphans: global state holds ONE
+ * `activeTurn`, so any matching turnEnd returns it to idle, and the TTL
+ * `tick` self-heals a missed turnEnd. These tests pin both the normal
+ * reopen and the dangle-recovery path on the accessors the gate reads.
+ */
+
+import { describe, expect, it, beforeEach } from 'vitest'
+import {
+  shadowEmit,
+  isMachineInTurn,
+  isDeliveryCutoverEnabled,
+  __shadowResetForTests,
+} from '../gateway/inbound-delivery-machine-shadow.js'
+import { TURN_TTL_MS, type ChatKey } from '../gateway/inbound-delivery-machine.js'
+
+const KEY_A = '111:_' as ChatKey
+const KEY_B = '222:_' as ChatKey
+
+function inbound(key: ChatKey, at: number, msgId = 1) {
+  shadowEmit({ kind: 'inbound', key, msg: { msgId, isSteering: false, payload: null }, at })
+}
+
+describe('PR3b cutover gate accessors', () => {
+  beforeEach(() => __shadowResetForTests())
+
+  it('enabled by default (shadow on, no kill-switch in test env)', () => {
+    expect(isDeliveryCutoverEnabled()).toBe(true)
+  })
+
+  it('reads idle before any turn (bridge alive)', () => {
+    shadowEmit({ kind: 'bridgeUp', at: 1000 })
+    expect(isMachineInTurn()).toBe(false)
+  })
+
+  it('flips in-turn on a fresh inbound and reopens on turnEnd (the gate reopen)', () => {
+    shadowEmit({ kind: 'bridgeUp', at: 1000 })
+    inbound(KEY_A, 2000)
+    expect(isMachineInTurn()).toBe(true)
+    shadowEmit({ kind: 'turnEnd', key: KEY_A, at: 3000, outboundEmitted: true })
+    // Gate reopens immediately — this is the path claudeBusyKeys danged on.
+    expect(isMachineInTurn()).toBe(false)
+  })
+
+  it('self-heals a MISSED turnEnd via the TTL tick (the dangle the fix kills)', () => {
+    shadowEmit({ kind: 'bridgeUp', at: 1000 })
+    // Turn A starts via enqueue (turnStart), then turn B starts before A's
+    // turnEnd ever lands — the orphan scenario. The machine keeps
+    // activeTurn=A (turnStart is a no-op on global when already in_turn),
+    // so a later turnEnd(B) does NOT match and would leave A dangling.
+    shadowEmit({ kind: 'turnStart', key: KEY_A, at: 2000 })
+    shadowEmit({ kind: 'turnStart', key: KEY_B, at: 3000 })
+    shadowEmit({ kind: 'turnEnd', key: KEY_B, at: 4000, outboundEmitted: true })
+    // Without tick, the gate would still read in-turn (activeTurn=A stuck).
+    expect(isMachineInTurn()).toBe(true)
+    // TTL tick past A's start clears the orphan and reopens the gate —
+    // the structural guarantee claudeBusyKeys lacked.
+    shadowEmit({ kind: 'tick', now: 2000 + TURN_TTL_MS + 1 })
+    expect(isMachineInTurn()).toBe(false)
+  })
+
+  it('does NOT clear a long-but-ACTIVE turn (modelOutbound suppression)', () => {
+    shadowEmit({ kind: 'bridgeUp', at: 1000 })
+    shadowEmit({ kind: 'turnStart', key: KEY_A, at: 2000 })
+    // Model is still streaming just before the TTL boundary.
+    const justBeforeTtl = 2000 + TURN_TTL_MS - 5_000
+    shadowEmit({ kind: 'modelOutbound', key: KEY_A, at: justBeforeTtl })
+    // Tick past TTL — but recent outbound is within the suppression window,
+    // so the turn is NOT cleared (parity with the imperative silence-poke).
+    shadowEmit({ kind: 'tick', now: 2000 + TURN_TTL_MS + 1 })
+    expect(isMachineInTurn()).toBe(true)
+  })
+
+  it('a buffered sibling inbound does not change the active turn', () => {
+    shadowEmit({ kind: 'bridgeUp', at: 1000 })
+    inbound(KEY_A, 2000) // fresh turn A
+    inbound(KEY_B, 2500) // mid-turn — buffered, must NOT start a new turn
+    expect(isMachineInTurn()).toBe(true)
+    shadowEmit({ kind: 'turnEnd', key: KEY_A, at: 3000, outboundEmitted: true })
+    // A ended; nothing else active → gate reopens so B can drain.
+    expect(isMachineInTurn()).toBe(false)
+  })
+})

package/telegram-plugin/tests/tool-activity-summary.test.ts

@@ -7,6 +7,7 @@ import {
   verbForTool,
   describeToolUse,
   appendActivityLine,
+  appendActivityLabel,
   renderActivityFeed,
   MIRROR_MAX_LINES,
 } from "../tool-activity-summary.js";
@@ -328,3 +329,21 @@ describe("appendActivityLine + renderActivityFeed — accumulating draft feed",
     expect(renderActivityFeed([])).toBeNull();
   });
 });
+
+describe("appendActivityLabel — precomputed label feed (tool_label path)", () => {
+  it("accumulates precomputed labels, dedups consecutive, ignores empty", () => {
+    const lines: string[] = [];
+    expect(appendActivityLabel(lines, "Searching memory")).toBe("· Searching memory");
+    expect(appendActivityLabel(lines, "List workspace")).toBe(
+      "· Searching memory\n· List workspace",
+    );
+    // consecutive dup collapses
+    appendActivityLabel(lines, "List workspace");
+    expect(lines).toEqual(["Searching memory", "List workspace"]);
+    // empty / whitespace → null, no push
+    expect(appendActivityLabel(lines, "")).toBeNull();
+    expect(appendActivityLabel(lines, "   ")).toBeNull();
+    expect(appendActivityLabel(lines, undefined)).toBeNull();
+    expect(lines.length).toBe(2);
+  });
+});

package/telegram-plugin/tool-activity-summary.ts

@@ -382,3 +382,21 @@ export function renderActivityFeed(lines: string[]): string | null {
   const body = shown.map((l) => `· ${l}`).join("\n");
   return hidden > 0 ? `· +${hidden} earlier…\n${body}` : body;
 }
+
+/**
+ * Like appendActivityLine, but for a pre-computed label (from the
+ * real-time PreToolUse sidecar / `tool_label` event) — the hook already
+ * rendered the friendly text, so we skip describeToolUse. Returns the
+ * rendered feed, or null when the label is empty.
+ */
+export function appendActivityLabel(
+  lines: string[],
+  label: string | undefined,
+): string | null {
+  const l = (label ?? "").trim();
+  if (l.length === 0) return null;
+  if (lines.length === 0 || lines[lines.length - 1] !== l) {
+    lines.push(l);
+  }
+  return renderActivityFeed(lines);
+}

package/telegram-plugin/tool-label-sidecar.ts

@@ -40,8 +40,11 @@ export interface ToolLabelRow {
 export interface ToolLabelSidecar {
   /** Synchronous label lookup. */
   getLabel(toolUseId: string): string | undefined
-  /** Subscribe to "label arrived" notifications. */
-  onLabel(cb: (toolUseId: string, label: string) => void): () => void
+  /** Subscribe to "label arrived" notifications. Fires once per new
+   *  sidecar line, in real time (~pollMs after the hook's appendFileSync),
+   *  independent of when the claude transcript flushes. `toolName` lets
+   *  subscribers filter surface tools (reply/react) from a live feed. */
+  onLabel(cb: (toolUseId: string, label: string, toolName: string) => void): () => void
   /** Force a re-poll (tests). */
   poll(): void
   /** Stop polling and release resources. */
@@ -63,7 +66,7 @@ export interface SidecarOptions {
 export function createToolLabelSidecar(opts: SidecarOptions): ToolLabelSidecar {
   const path = join(opts.stateDir, `tool-labels-${opts.sessionId}.jsonl`)
   const labels = new Map<string, string>()
-  const subscribers = new Set<(toolUseId: string, label: string) => void>()
+  const subscribers = new Set<(toolUseId: string, label: string, toolName: string) => void>()
   let offset = 0
   let stopped = false
 
@@ -84,13 +87,18 @@ export function createToolLabelSidecar(opts: SidecarOptions): ToolLabelSidecar {
       } catch {
         continue
       }
-      if (!row || typeof row.tool_use_id !== 'string' || typeof row.label !== 'string') continue
+      if (
+        !row ||
+        typeof row.tool_use_id !== 'string' ||
+        typeof row.label !== 'string' ||
+        typeof row.tool_name !== 'string'
+      ) continue
       // First write wins — sidecar lines are append-only and we don't
       // expect duplicates, but if one lands we keep the earliest.
       if (labels.has(row.tool_use_id)) continue
       labels.set(row.tool_use_id, row.label)
       for (const cb of subscribers) {
-        try { cb(row.tool_use_id, row.label) } catch { /* ignore */ }
+        try { cb(row.tool_use_id, row.label, row.tool_name) } catch { /* ignore */ }
       }
     }
   }

package/telegram-plugin/uat/scenarios/fuzz-status-ask-dm.test.ts

@@ -215,9 +215,13 @@ const CC2_CASES: readonly CC2Case[] = [
   },
   {
     name: "long-running with planned check-ins",
+    // Use python time.sleep, NOT the `sleep` command — Claude Code's bash
+    // sandbox blocks standalone `sleep` ("foreground sleep is sandboxed
+    // away"), which made this case un-runnable (agent replied instantly).
     prompt:
-      "Run `bash` with `sleep 5 && echo step1`, send a brief update, " +
-      "then `sleep 5 && echo step2`, send another brief update, then " +
+      "Run `bash` with `python3 -c 'import time; time.sleep(5)'` then echo " +
+      "step1, send a brief update, then `python3 -c 'import time; " +
+      "time.sleep(5)'` then echo step2, send another brief update, then " +
       "send a final 'done' as your answer.",
   },
 ];
@@ -262,12 +266,27 @@ async function assertMidTurnSilent(
     )
     .join("\n");
 
-  const last = collected[collected.length - 1];
-  expect(last.silent, `final answer was silent — won't ping. Trail:\n${trail}`).toBe(
-    false,
-  );
-
-  const midTurn = collected.slice(0, -1);
+  // The model habitually emits a trailing trivial confirmation ("Done.",
+  // "Sent.", "OK") as a separate SILENT message AFTER its real pinged
+  // answer. That's pacing noise (the turn-pacing directive discourages
+  // it), not the final answer — so don't treat it as the
+  // "final-answer-must-ping" target. Find the last SUBSTANTIVE message
+  // and assert that one pinged; trailing trivial confirmations are
+  // ignored for this invariant (they're correctly silent anyway).
+  const TRIVIAL_TAIL = /^(done|sent|ok|okay|ack|got it|hope (that|this) helps)\b[.! ]*$/i;
+  const isTrivial = (m: ObservedMessage) => TRIVIAL_TAIL.test(m.text.trim());
+  let finalIdx = collected.length - 1;
+  while (finalIdx > 0 && isTrivial(collected[finalIdx])) finalIdx--;
+  const finalAnswer = collected[finalIdx];
+  expect(
+    finalAnswer.silent,
+    `final substantive answer was silent — won't ping. Trail:\n${trail}`,
+  ).toBe(false);
+
+  // Everything BEFORE the final substantive answer must be silent
+  // (mid-turn updates ping-free). Trailing trivial confirmations after
+  // it are already silent and are not "mid-turn" — exclude them too.
+  const midTurn = collected.slice(0, finalIdx);
   const loudMidTurn = midTurn.filter((m) => !m.silent);
   expect(
     loudMidTurn.length,
@@ -334,12 +353,19 @@ async function assertSilencePokeFires(
   // Single bash call so the poke piggybacks the single tool result.
   // Without the explicit "no replies" instruction the model might
   // soft-commit; that resets the silence clock but a single >75s
-  // sleep still pushes post-commit silence past the threshold.
+  // wait still pushes post-commit silence past the threshold.
+  //
+  // Use python time.sleep, NOT the `sleep` command — Claude Code's bash
+  // sandbox blocks standalone `sleep` ("foreground sleep is sandboxed
+  // away to prevent burning cache windows"), so a `sleep 80` prompt made
+  // the agent reply instantly instead of going silent, breaking this
+  // case. python3 time.sleep is a genuine foreground wait the sandbox
+  // doesn't special-case.
   const prompt =
-    `Run exactly one Bash tool call: \`sleep ${sleepSeconds}\`. Do NOT ` +
-    `send any reply before the sleep completes — no soft commit, no ` +
-    `mid-turn updates. When the sleep returns, send one brief 'done' ` +
-    `reply.`;
+    `Run exactly one Bash tool call: \`python3 -c 'import time; ` +
+    `time.sleep(${sleepSeconds})'\`. Do NOT send any reply before it ` +
+    `completes — no soft commit, no mid-turn updates. When it returns, ` +
+    `send one brief 'done' reply.`;
 
   await scenario.sendDM(prompt);