switchroom 0.14.37 → 0.14.39

package/dist/agent-scheduler/index.js

@@ -11101,18 +11101,11 @@ var TelegramChannelSchema = exports_external.object({
   webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
   webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge — the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
   chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID — overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted — set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
   topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot → alerts, hostd → admin, etc.). " + "Cascades per-key through defaults → profile → agent.")
 }).optional().superRefine((tg, ctx) => {
   if (!tg)
     return;
-  if (tg.chat_id != null && tg.default_topic_id == null) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "`channels.telegram.chat_id` requires `default_topic_id` — supergroup-mode agents need a fallback topic for unclassified outbounds.",
-      path: ["default_topic_id"]
-    });
-  }
   if (tg.default_topic_id != null && tg.chat_id == null) {
     ctx.addIssue({
       code: exports_external.ZodIssueCode.custom,
@@ -11127,6 +11120,11 @@ var TelegramChannelSchema = exports_external.object({
       path: ["topic_aliases"]
     });
   }
+}).transform((tg) => {
+  if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+    return { ...tg, default_topic_id: 1 };
+  }
+  return tg;
 });
 var ChannelsSchema = exports_external.object({
   telegram: TelegramChannelSchema

package/dist/auth-broker/index.js

@@ -11101,18 +11101,11 @@ var TelegramChannelSchema = exports_external.object({
   webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
   webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge — the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
   chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID — overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted — set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
   topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot → alerts, hostd → admin, etc.). " + "Cascades per-key through defaults → profile → agent.")
 }).optional().superRefine((tg, ctx) => {
   if (!tg)
     return;
-  if (tg.chat_id != null && tg.default_topic_id == null) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "`channels.telegram.chat_id` requires `default_topic_id` — supergroup-mode agents need a fallback topic for unclassified outbounds.",
-      path: ["default_topic_id"]
-    });
-  }
   if (tg.default_topic_id != null && tg.chat_id == null) {
     ctx.addIssue({
       code: exports_external.ZodIssueCode.custom,
@@ -11127,6 +11120,11 @@ var TelegramChannelSchema = exports_external.object({
       path: ["topic_aliases"]
     });
   }
+}).transform((tg) => {
+  if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+    return { ...tg, default_topic_id: 1 };
+  }
+  return tg;
 });
 var ChannelsSchema = exports_external.object({
   telegram: TelegramChannelSchema

package/dist/cli/notion-write-pretool.mjs

@@ -11849,18 +11849,11 @@ var TelegramChannelSchema = exports_external.object({
   webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
   webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge \u2014 the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
   chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID \u2014 overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field \u2014 the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted \u2014 set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field \u2014 the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
   topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot \u2192 alerts, hostd \u2192 admin, etc.). " + "Cascades per-key through defaults \u2192 profile \u2192 agent.")
 }).optional().superRefine((tg, ctx) => {
   if (!tg)
     return;
-  if (tg.chat_id != null && tg.default_topic_id == null) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "`channels.telegram.chat_id` requires `default_topic_id` \u2014 supergroup-mode agents need a fallback topic for unclassified outbounds.",
-      path: ["default_topic_id"]
-    });
-  }
   if (tg.default_topic_id != null && tg.chat_id == null) {
     ctx.addIssue({
       code: exports_external.ZodIssueCode.custom,
@@ -11875,6 +11868,11 @@ var TelegramChannelSchema = exports_external.object({
       path: ["topic_aliases"]
     });
   }
+}).transform((tg) => {
+  if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+    return { ...tg, default_topic_id: 1 };
+  }
+  return tg;
 });
 var ChannelsSchema = exports_external.object({
   telegram: TelegramChannelSchema

package/dist/cli/switchroom.js

@@ -13665,18 +13665,11 @@ var init_schema = __esm(() => {
     webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
     webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge \u2014 the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
     chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID \u2014 overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-    default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field \u2014 the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+    default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted \u2014 set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field \u2014 the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
     topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot \u2192 alerts, hostd \u2192 admin, etc.). " + "Cascades per-key through defaults \u2192 profile \u2192 agent.")
   }).optional().superRefine((tg, ctx) => {
     if (!tg)
       return;
-    if (tg.chat_id != null && tg.default_topic_id == null) {
-      ctx.addIssue({
-        code: exports_external.ZodIssueCode.custom,
-        message: "`channels.telegram.chat_id` requires `default_topic_id` \u2014 supergroup-mode agents need a fallback topic for unclassified outbounds.",
-        path: ["default_topic_id"]
-      });
-    }
     if (tg.default_topic_id != null && tg.chat_id == null) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
@@ -13691,6 +13684,11 @@ var init_schema = __esm(() => {
         path: ["topic_aliases"]
       });
     }
+  }).transform((tg) => {
+    if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+      return { ...tg, default_topic_id: 1 };
+    }
+    return tg;
   });
   ChannelsSchema = exports_external.object({
     telegram: TelegramChannelSchema
@@ -23654,7 +23652,7 @@ var init_docker_fleet = __esm(() => {
 
 // src/agents/lifecycle.ts
 import { execFileSync as execFileSync7, spawn, spawnSync } from "node:child_process";
-import { existsSync as existsSync15, mkdirSync as mkdirSync12, writeFileSync as writeFileSync7, renameSync as renameSync3, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync12, writeFileSync as writeFileSync7, renameSync as renameSync4, readFileSync as readFileSync13 } from "node:fs";
 import { resolve as resolve13, join as join10 } from "node:path";
 import { connect } from "node:net";
 function cleanShutdownMarkerPathForAgent(name) {
@@ -23676,7 +23674,7 @@ function writeRestartReasonMarker(name, reason, opts = {}) {
     const marker = { ts: Date.now(), signal: "SIGTERM", reason };
     const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
     writeFileSync7(tmp, JSON.stringify(marker), "utf-8");
-    renameSync3(tmp, path);
+    renameSync4(tmp, path);
   } catch {}
 }
 function buildCliRestartReason(opts) {
@@ -24154,7 +24152,7 @@ import {
   mkdirSync as mkdirSync14,
   readFileSync as readFileSync17,
   readdirSync as readdirSync9,
-  renameSync as renameSync5,
+  renameSync as renameSync6,
   rmSync as rmSync4,
   statSync as statSync11,
   writeFileSync as writeFileSync9
@@ -24296,7 +24294,7 @@ function atomicCopy(src, dest, mode) {
   const tmp = `${dest}.tmp-${process.pid}-${randomBytes2(4).toString("hex")}`;
   try {
     writeFileSync9(tmp, contents, { mode });
-    renameSync5(tmp, dest);
+    renameSync6(tmp, dest);
   } catch (err) {
     try {
       rmSync4(tmp);
@@ -25835,7 +25833,7 @@ import {
   mkdirSync as mkdirSync17,
   readFileSync as readFileSync22,
   readdirSync as readdirSync14,
-  renameSync as renameSync6,
+  renameSync as renameSync7,
   rmSync as rmSync10,
   statSync as statSync15,
   writeFileSync as writeFileSync14
@@ -25972,7 +25970,7 @@ __export(exports_atomic, {
   atomicWriteFileSync: () => atomicWriteFileSync2
 });
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { closeSync as closeSync5, constants, fsyncSync as fsyncSync3, openSync as openSync5, renameSync as renameSync7, rmSync as rmSync11, writeSync as writeSync3 } from "node:fs";
+import { closeSync as closeSync5, constants, fsyncSync as fsyncSync3, openSync as openSync5, renameSync as renameSync8, rmSync as rmSync11, writeSync as writeSync3 } from "node:fs";
 function atomicWriteFileSync2(destPath, contents, mode = 384) {
   const tmp = `${destPath}.tmp-${process.pid}-${randomBytes3(4).toString("hex")}`;
   const buf = typeof contents === "string" ? Buffer.from(contents, "utf-8") : contents;
@@ -25983,7 +25981,7 @@ function atomicWriteFileSync2(destPath, contents, mode = 384) {
     fsyncSync3(fd);
     closeSync5(fd);
     fd = null;
-    renameSync7(tmp, destPath);
+    renameSync8(tmp, destPath);
   } catch (err) {
     if (fd !== null) {
       try {
@@ -49440,8 +49438,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.14.37";
-var COMMIT_SHA = "90d0c420";
+var VERSION = "0.14.39";
+var COMMIT_SHA = "fb30b654";
 
 // src/cli/agent.ts
 init_source();
@@ -49522,6 +49520,7 @@ import {
   writeFileSync as writeFileSync5,
   appendFileSync,
   readFileSync as readFileSync11,
+  renameSync as renameSync3,
   chmodSync as chmodSync2,
   symlinkSync as symlinkSync2,
   copyFileSync as copyFileSync4,
@@ -51637,6 +51636,7 @@ This file is auto-maintained. Do not edit manually.
 `;
   }, created, skipped, 384);
   writeIfMissing(join8(agentDir, "telegram", "access.json"), () => buildAccessJson2(agentConfig, telegramConfig, topicId, userId), created, skipped, 384);
+  reconcileConfiguredGroup(join8(agentDir, "telegram", "access.json"), agentConfig, telegramConfig);
   if (agentConfig.subagents) {
     const agentsDir2 = join8(agentDir, ".claude", "agents");
     mkdirSync9(agentsDir2, { recursive: true });
@@ -52760,6 +52760,36 @@ function rerenderWithFingerprint(filePath, contentFn, created, skipped, rewritte
   rewrittenWithBackup.push(filePath);
   created.push(filePath);
 }
+function resolveAgentForumChatId(agentConfig, telegramConfig) {
+  const override = agentConfig.channels?.telegram?.chat_id;
+  if (typeof override === "string" && override.length > 0)
+    return override;
+  return telegramConfig.forum_chat_id ?? "";
+}
+function reconcileConfiguredGroup(accessPath, agentConfig, telegramConfig) {
+  if (!existsSync13(accessPath))
+    return;
+  const forumChatId = resolveAgentForumChatId(agentConfig, telegramConfig);
+  const hasRealForumChat = forumChatId !== "" && forumChatId !== "0";
+  if (agentConfig.dm_only || !hasRealForumChat)
+    return;
+  let access;
+  try {
+    access = JSON.parse(readFileSync11(accessPath, "utf-8"));
+  } catch {
+    return;
+  }
+  const groups = access.groups ??= {};
+  if (groups[forumChatId] !== undefined)
+    return;
+  const allowFrom = Array.isArray(access.allowFrom) ? access.allowFrom : [];
+  groups[forumChatId] = { requireMention: false, allowFrom };
+  const tmp = accessPath + ".tmp";
+  writeFileSync5(tmp, JSON.stringify(access, null, 2) + `
+`, { mode: 384 });
+  renameSync3(tmp, accessPath);
+  console.log(source_default.green(`  registered supergroup ${forumChatId} in access.json ` + `(responds to all topics; requireMention=false)`));
+}
 function buildAccessJson2(agentConfig, telegramConfig, resolvedTopicId, userId) {
   const allowFrom = userId ? [String(userId)] : [];
   if (allowFrom.length === 0) {
@@ -52769,7 +52799,7 @@ function buildAccessJson2(agentConfig, telegramConfig, resolvedTopicId, userId)
     dmPolicy: "allowlist",
     allowFrom
   };
-  const forumChatId = telegramConfig.forum_chat_id;
+  const forumChatId = resolveAgentForumChatId(agentConfig, telegramConfig);
   const hasRealForumChat = forumChatId !== "" && forumChatId !== "0";
   if (!agentConfig.dm_only && hasRealForumChat) {
     access.groups = {
@@ -53035,7 +53065,7 @@ import { join as join12 } from "node:path";
 import { execFileSync as execFileSync8 } from "node:child_process";
 
 // src/agents/handoff-summarizer.ts
-import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, renameSync as renameSync4, mkdirSync as mkdirSync13, existsSync as existsSync16, statSync as statSync9, readdirSync as readdirSync8 } from "node:fs";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, renameSync as renameSync5, mkdirSync as mkdirSync13, existsSync as existsSync16, statSync as statSync9, readdirSync as readdirSync8 } from "node:fs";
 import { join as join11 } from "node:path";
 var DEFAULT_MAX_TURNS = 50;
 var TOPIC_MAX_CHARS = 117;
@@ -53177,8 +53207,8 @@ function writeSidecarsAtomic(agentDir, briefing, topic) {
   const topicTmp = topicPath + ".tmp";
   writeFileSync8(handoffTmp, briefing, "utf-8");
   writeFileSync8(topicTmp, topic, "utf-8");
-  renameSync4(handoffTmp, handoffPath);
-  renameSync4(topicTmp, topicPath);
+  renameSync5(handoffTmp, handoffPath);
+  renameSync5(topicTmp, topicPath);
 }
 async function buildHandoff(opts) {
   const maxTurns = opts.maxTurns ?? DEFAULT_MAX_TURNS;
@@ -59057,7 +59087,7 @@ import { spawn as spawn4 } from "node:child_process";
 init_compose();
 init_vault();
 import * as net3 from "node:net";
-import { mkdirSync as mkdirSync22, chmodSync as chmodSync7, chownSync as chownSync2, existsSync as existsSync35, readFileSync as readFileSync30, readdirSync as readdirSync16, statSync as statSync19, unlinkSync as unlinkSync8, writeFileSync as writeFileSync19, renameSync as renameSync9 } from "node:fs";
+import { mkdirSync as mkdirSync22, chmodSync as chmodSync7, chownSync as chownSync2, existsSync as existsSync35, readFileSync as readFileSync30, readdirSync as readdirSync16, statSync as statSync19, unlinkSync as unlinkSync8, writeFileSync as writeFileSync19, renameSync as renameSync10 } from "node:fs";
 import { dirname as dirname6, resolve as resolve26, basename as basename4 } from "node:path";
 import * as os4 from "node:os";
 import * as path3 from "node:path";
@@ -59074,7 +59104,7 @@ import {
   openSync as openSync6,
   closeSync as closeSync6,
   readFileSync as readFileSync28,
-  renameSync as renameSync8,
+  renameSync as renameSync9,
   statSync as statSync18,
   symlinkSync as symlinkSync3,
   unlinkSync as unlinkSync7
@@ -59151,7 +59181,7 @@ function runMigration(home2, opts) {
       copyFileSync7(oldPath, tempNew);
       chmodSync4(tempNew, 384);
       fsyncFile(tempNew);
-      renameSync8(tempNew, newPath);
+      renameSync9(tempNew, newPath);
       fsyncDir(parent);
       atomicReplaceWithSymlink(oldPath, "vault/vault.enc");
       fsyncDir(switchroomRoot);
@@ -59240,7 +59270,7 @@ function atomicReplaceWithSymlink(target, linkTarget) {
     } catch {}
   }
   symlinkSync3(linkTarget, tmp);
-  renameSync8(tmp, target);
+  renameSync9(tmp, target);
 }
 function fsyncFile(path) {
   const fd = openSync6(path, "r+");
@@ -62880,7 +62910,7 @@ class VaultBroker {
         const tokenPath = path3.join(tokenDir, ".vault-token");
         const tmpPath = `${tokenPath}.tmp.${process.pid}`;
         writeFileSync19(tmpPath, mintResult.token, { mode: 384 });
-        renameSync9(tmpPath, tokenPath);
+        renameSync10(tmpPath, tokenPath);
         try {
           const uid = allocateAgentUid(agent);
           chownSync2(tokenPath, uid, uid);
@@ -64262,7 +64292,7 @@ import {
   openSync as openSync9,
   readdirSync as readdirSync17,
   readFileSync as readFileSync34,
-  renameSync as renameSync10,
+  renameSync as renameSync11,
   statSync as statSync20,
   symlinkSync as symlinkSync4,
   unlinkSync as unlinkSync10,
@@ -64414,7 +64444,7 @@ function backupVault(opts) {
     } catch {}
     throw new Error(`vault backup refused: '${fullPath}' already exists ` + `(sub-second collision with another backup). Retry in 1 second, ` + `or check for a concurrent backup process.`);
   }
-  renameSync10(tmpPath, fullPath);
+  renameSync11(tmpPath, fullPath);
   const stat = statSync20(fullPath);
   const sha256 = sha256OfFile(fullPath);
   const row = {
@@ -74106,7 +74136,7 @@ import {
   openSync as openSync11,
   readdirSync as readdirSync21,
   readFileSync as readFileSync50,
-  renameSync as renameSync11,
+  renameSync as renameSync12,
   statSync as statSync25,
   unlinkSync as unlinkSync11,
   writeFileSync as writeFileSync26,
@@ -74664,7 +74694,7 @@ function writeAll(stateDir, events) {
 `) + `
 `;
   writeFileSync26(tmp, body, "utf-8");
-  renameSync11(tmp, path4);
+  renameSync12(tmp, path4);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
 var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
@@ -76504,7 +76534,7 @@ import {
   readdirSync as readdirSync23,
   unlinkSync as unlinkSync12,
   existsSync as existsSync64,
-  renameSync as renameSync12
+  renameSync as renameSync13
 } from "node:fs";
 import { join as join63, resolve as resolve41 } from "node:path";
 import { homedir as homedir37 } from "node:os";
@@ -76523,7 +76553,7 @@ function writeRecord(record2) {
   const tmp = `${target}.tmp${process.pid}`;
   writeFileSync30(tmp, JSON.stringify(record2, null, 2) + `
 `, { mode: 384 });
-  renameSync12(tmp, target);
+  renameSync13(tmp, target);
 }
 function readRecord(id) {
   const path7 = recordPath(id);
@@ -77842,7 +77872,7 @@ async function fetchToken(vaultKey) {
 
 // src/cli/apply.ts
 init_source();
-import { accessSync as accessSync3, chownSync as chownSync4, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync72, mkdirSync as mkdirSync40, readFileSync as readFileSync57, readdirSync as readdirSync26, renameSync as renameSync13, writeFileSync as writeFileSync35 } from "node:fs";
+import { accessSync as accessSync3, chownSync as chownSync4, constants as fsConstants6, copyFileSync as copyFileSync11, existsSync as existsSync72, mkdirSync as mkdirSync40, readFileSync as readFileSync57, readdirSync as readdirSync26, renameSync as renameSync14, writeFileSync as writeFileSync35 } from "node:fs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { spawnSync as childSpawnSync } from "node:child_process";
 import readline from "node:readline";
@@ -78692,7 +78722,7 @@ function writeInstallTypeCache(homeDir = homedir40()) {
     source_paths: ctx.source_paths
   };
   writeFileSync35(tmp, JSON.stringify(payload, null, 2), { mode: 420 });
-  renameSync13(tmp, out);
+  renameSync14(tmp, out);
   return out;
 }
 async function runApply(config, options, deps = {}, switchroomConfigPath) {
@@ -79764,7 +79794,7 @@ import {
   openSync as openSync13,
   readdirSync as readdirSync28,
   readFileSync as readFileSync60,
-  renameSync as renameSync14,
+  renameSync as renameSync15,
   statSync as statSync28,
   unlinkSync as unlinkSync14,
   writeSync as writeSync8
@@ -79846,7 +79876,7 @@ function writeOverlayEntry(agent, slug, yamlText, opts = {}) {
     } finally {
       closeSync13(fd);
     }
-    renameSync14(stagingPath, finalPath);
+    renameSync15(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -79863,7 +79893,7 @@ function writeSkillsOverlayEntry(agent, slug, yamlText, opts = {}) {
     } finally {
       closeSync13(fd);
     }
-    renameSync14(stagingPath, finalPath);
+    renameSync15(stagingPath, finalPath);
     return finalPath;
   });
 }
@@ -80063,7 +80093,7 @@ import {
   openSync as openSync14,
   readdirSync as readdirSync29,
   readFileSync as readFileSync61,
-  renameSync as renameSync15,
+  renameSync as renameSync16,
   unlinkSync as unlinkSync15,
   writeFileSync as writeFileSync36,
   writeSync as writeSync9
@@ -80106,7 +80136,7 @@ function stagePendingScheduleEntry(opts) {
     } finally {
       closeSync14(fd);
     }
-    renameSync15(yamlTmp, yamlPath);
+    renameSync16(yamlTmp, yamlPath);
   }
   writeFileSync36(metaPath, JSON.stringify(meta, null, 2) + `
 `, { mode: 384 });
@@ -80145,7 +80175,7 @@ function commitPendingScheduleEntry(opts) {
   if (existsSync76(finalPath)) {
     return { committed: false, reason: "slug_collision" };
   }
-  renameSync15(match.yamlPath, finalPath);
+  renameSync16(match.yamlPath, finalPath);
   unlinkSync15(match.metaPath);
   return { committed: true, path: finalPath, slug };
 }
@@ -80895,7 +80925,7 @@ import {
   readFileSync as readFileSync63,
   readdirSync as readdirSync30,
   realpathSync as realpathSync7,
-  renameSync as renameSync16,
+  renameSync as renameSync17,
   rmSync as rmSync16,
   statSync as statSync29,
   writeFileSync as writeFileSync37
@@ -81350,9 +81380,9 @@ function writePayload(poolDir, name, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${target}.skill-apply-old-${Date.now()}`;
-      renameSync16(target, oldRename);
+      renameSync17(target, oldRename);
     }
-    renameSync16(staging, target);
+    renameSync17(staging, target);
     if (oldRename) {
       rmSync16(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -81366,7 +81396,7 @@ function writePayload(poolDir, name, files) {
         if (existsSync79(target)) {
           rmSync16(target, { recursive: true, force: true });
         }
-        renameSync16(oldRename, target);
+        renameSync17(oldRename, target);
       } catch {}
     }
     throw err2;
@@ -81446,7 +81476,7 @@ import {
   openSync as openSync16,
   readFileSync as readFileSync64,
   readdirSync as readdirSync31,
-  renameSync as renameSync17,
+  renameSync as renameSync18,
   rmSync as rmSync17,
   statSync as statSync30,
   utimesSync,
@@ -81509,7 +81539,7 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
       sweepMirrorPriors(configSkillsRoot);
       if (existsSync80(dest)) {
         const trash = join77(configSkillsRoot, `.${name}-trash-${Date.now()}`);
-        renameSync17(dest, trash);
+        renameSync18(dest, trash);
       }
       return;
     }
@@ -81533,9 +81563,9 @@ function mirrorToConfigRepo(agent, name, liveSkillDir) {
     walk2(liveSkillDir, staging);
     if (existsSync80(dest)) {
       const prior = join77(configSkillsRoot, `.${name}-prior-${Date.now()}`);
-      renameSync17(dest, prior);
+      renameSync18(dest, prior);
     }
-    renameSync17(staging, dest);
+    renameSync18(staging, dest);
   } catch (err2) {
     process.stderr.write(source_default.yellow(`warning: mirror to ${dest} failed (${err2.message ?? err2}); ` + `live copy still works, but this skill is not version-controlled until next successful sync.
 `));
@@ -81718,9 +81748,9 @@ function writePersonalSkill(targetDir, files) {
     } catch {}
     if (targetExists) {
       oldRename = `${targetDir}.personal-old-${Date.now()}`;
-      renameSync17(targetDir, oldRename);
+      renameSync18(targetDir, oldRename);
     }
-    renameSync17(staging, targetDir);
+    renameSync18(staging, targetDir);
     if (oldRename) {
       rmSync17(oldRename, { recursive: true, force: true });
       oldRename = null;
@@ -81734,7 +81764,7 @@ function writePersonalSkill(targetDir, files) {
         if (existsSync80(targetDir)) {
           rmSync17(targetDir, { recursive: true, force: true });
         }
-        renameSync17(oldRename, targetDir);
+        renameSync18(oldRename, targetDir);
       } catch {}
     }
     throw err2;
@@ -81972,7 +82002,7 @@ function removePersonalAction(name, opts) {
   mkdirSync45(trashRoot, { recursive: true, mode: 493 });
   const ts = Date.now();
   const trashTarget = join77(trashRoot, `${name}-${ts}`);
-  renameSync17(target, trashTarget);
+  renameSync18(target, trashTarget);
   const now = new Date(ts);
   utimesSync(trashTarget, now, now);
   mirrorToConfigRepo(agent, name, null);

package/dist/host-control/main.js

@@ -13836,18 +13836,11 @@ var TelegramChannelSchema = exports_external.object({
   webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
   webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge — the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
   chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID — overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+  default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted — set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
   topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot → alerts, hostd → admin, etc.). " + "Cascades per-key through defaults → profile → agent.")
 }).optional().superRefine((tg, ctx) => {
   if (!tg)
     return;
-  if (tg.chat_id != null && tg.default_topic_id == null) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "`channels.telegram.chat_id` requires `default_topic_id` — supergroup-mode agents need a fallback topic for unclassified outbounds.",
-      path: ["default_topic_id"]
-    });
-  }
   if (tg.default_topic_id != null && tg.chat_id == null) {
     ctx.addIssue({
       code: exports_external.ZodIssueCode.custom,
@@ -13862,6 +13855,11 @@ var TelegramChannelSchema = exports_external.object({
       path: ["topic_aliases"]
     });
   }
+}).transform((tg) => {
+  if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+    return { ...tg, default_topic_id: 1 };
+  }
+  return tg;
 });
 var ChannelsSchema = exports_external.object({
   telegram: TelegramChannelSchema

package/dist/vault/approvals/kernel-server.js

@@ -11422,18 +11422,11 @@ var init_schema = __esm(() => {
     webhook_via_gateway: exports_external.boolean().optional().describe("Route verified webhook events to the agent's in-container gateway " + "over a peercred-gated UDS (<agent>/telegram/webhook.sock) instead " + "of having the host-side web receiver write the agent dir directly. " + "Required under the Docker runtime: the receiver runs as the host " + "operator UID and cannot write the per-agent-UID-owned agent dir " + "(EACCES 500) nor connect the gateway socket. When true the gateway " + "(running as the agent UID) becomes the sole writer of " + "webhook-events.jsonl + dedup/cooldown state and also fires " + "webhook_dispatch. Off by default for back-compat with host-runtime " + "installs. See docs/rfcs/webhook-via-gateway-socket.md."),
     webhook_require_edge: exports_external.boolean().optional().describe("Cloudflare-only edge lock: require the X-Switchroom-Edge header " + "(injected by a Cloudflare Transform Rule on hooks.switchroom.ai) to " + "match the operator's edge secret at ~/.switchroom/webhook-edge-secret " + "before any HMAC verification; reject 403 otherwise. Proves the " + "request entered through our Cloudflare edge — the per-agent HMAC " + "alone can't (it proves body provenance, not network path). Stacks " + "on the GitHub-IP WAF + per-agent HMAC. Fail-closed: when required " + "but the secret file is missing/empty every request is rejected. Off " + "by default. See docs/rfcs/webhook-cloudflare-edge-lock.md."),
     chat_id: exports_external.string().regex(/^-\d+$/, 'supergroup chat_id must be a negative integer as a string (e.g. "-1001234567890")').optional().describe("Per-agent supergroup ID — overrides fleet `telegram.forum_chat_id`. " + "When set, requires `default_topic_id`. Negative integer as string. " + "Forbidden when `dm_only: true`. See docs/rfcs/supergroup-mode.md."),
-    default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Required when `chat_id` is set. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
+    default_topic_id: exports_external.number().int().positive().optional().describe("Forum topic ID this agent's automated outbounds default to when " + "no more-specific alias resolves. Defaults to General (topic 1) when " + "`chat_id` is set and this is omitted — set it only to pin a different " + "fallback topic. " + "Telegram's General topic is `id=1` at MTProto but sends omit the " + "field — the outbound wrapper strips `message_thread_id === 1` " + "on send. Forbidden when `dm_only: true`."),
     topic_aliases: exports_external.record(exports_external.string(), exports_external.number().int().positive()).optional().describe("Operator-friendly names for forum topic IDs (e.g. " + "`{ general: 1, planning: 17, cron: 23, admin: 31, alerts: 41 }`). " + "Referenced from per-cron `topic:` fields and the outbound router " + "for autonomous events (boot → alerts, hostd → admin, etc.). " + "Cascades per-key through defaults → profile → agent.")
   }).optional().superRefine((tg, ctx) => {
     if (!tg)
       return;
-    if (tg.chat_id != null && tg.default_topic_id == null) {
-      ctx.addIssue({
-        code: exports_external.ZodIssueCode.custom,
-        message: "`channels.telegram.chat_id` requires `default_topic_id` — supergroup-mode agents need a fallback topic for unclassified outbounds.",
-        path: ["default_topic_id"]
-      });
-    }
     if (tg.default_topic_id != null && tg.chat_id == null) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
@@ -11448,6 +11441,11 @@ var init_schema = __esm(() => {
         path: ["topic_aliases"]
       });
     }
+  }).transform((tg) => {
+    if (tg && tg.chat_id != null && tg.default_topic_id == null) {
+      return { ...tg, default_topic_id: 1 };
+    }
+    return tg;
   });
   ChannelsSchema = exports_external.object({
     telegram: TelegramChannelSchema