switchroom 0.14.67 → 0.14.68

package/dist/cli/switchroom.js

@@ -14593,6 +14593,35 @@ function shouldEmitNotionMcp(agentName, config) {
     return false;
   return true;
 }
+function normalizeNotionUuid(uuid) {
+  if (typeof uuid !== "string")
+    return null;
+  const stripped = uuid.replace(/-/g, "").toLowerCase();
+  if (!/^[0-9a-f]{32}$/.test(stripped))
+    return null;
+  return stripped;
+}
+function agentCanAccessNotionDB(config, agentName, dbUuid) {
+  if (!shouldEmitNotionMcp(agentName, config))
+    return false;
+  const targetNorm = normalizeNotionUuid(dbUuid);
+  if (targetNorm === null)
+    return false;
+  const agentConfig = config.agents?.[agentName];
+  const allowedNames = agentConfig?.notion_workspace?.databases;
+  if (allowedNames === undefined || allowedNames.length === 0) {
+    return true;
+  }
+  const dbMap = config.notion_workspace?.databases ?? {};
+  for (const name of allowedNames) {
+    const uuid = dbMap[name];
+    if (!uuid)
+      continue;
+    if (normalizeNotionUuid(uuid) === targetNorm)
+      return true;
+  }
+  return false;
+}
 function validateNotionWorkspaceConfig(config) {
   const issues = [];
   const dbMap = config.notion_workspace?.databases ?? {};
@@ -49572,8 +49601,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.14.67";
-var COMMIT_SHA = "dcade213";
+var VERSION = "0.14.68";
+var COMMIT_SHA = "4f371b79";
 
 // src/cli/agent.ts
 init_source();
@@ -71710,6 +71739,70 @@ async function handleGetGoogleAccounts(config) {
   }
   return out;
 }
+async function handleGetMicrosoftAccounts(config) {
+  const live = new Map;
+  try {
+    await withAuthBrokerClient(async (client2) => {
+      const data = await client2.listMicrosoftAccounts();
+      for (const a of data.accounts) {
+        live.set(a.account.toLowerCase(), {
+          expiresAt: a.expiresAt,
+          scope: a.scope,
+          clientId: a.clientId,
+          accountType: a.accountType
+        });
+      }
+    });
+  } catch (err) {
+    if (!(err instanceof AuthBrokerUnreachableError))
+      throw err;
+  }
+  const cfgAccounts = config.microsoft_accounts ?? {};
+  const keys = new Set([
+    ...Object.keys(cfgAccounts).map((k) => k.toLowerCase()),
+    ...live.keys()
+  ]);
+  const out = [];
+  for (const key of [...keys].sort()) {
+    const cfg = cfgAccounts[key];
+    const l = live.get(key);
+    out.push({
+      account: key,
+      expiresAt: l?.expiresAt ?? null,
+      scope: l?.scope ?? null,
+      clientId: l?.clientId ?? null,
+      accountType: l?.accountType ?? null,
+      enabledFor: cfg?.enabled_for ? [...cfg.enabled_for].sort() : [],
+      brokerKnown: l != null
+    });
+  }
+  return out;
+}
+function handleGetNotionWorkspace(config) {
+  const nw = config.notion_workspace;
+  if (!nw) {
+    return { configured: false, vaultKey: null, databases: [], fullAccessAgents: [] };
+  }
+  const declared = nw.databases ?? {};
+  const agentNames = Object.keys(config.agents ?? {});
+  const databases = Object.entries(declared).map(([name, id]) => {
+    const enabledFor = agentNames.filter((n) => agentCanAccessNotionDB(config, n, id)).sort();
+    return { name, id, enabledFor };
+  }).sort((a, b) => a.name.localeCompare(b.name));
+  const agentsRaw = config.agents ?? {};
+  const fullAccessAgents = agentNames.filter((n) => {
+    if (!shouldEmitNotionMcp(n, config))
+      return false;
+    const dbs = agentsRaw[n]?.notion_workspace?.databases;
+    return dbs === undefined || dbs.length === 0;
+  }).sort();
+  return {
+    configured: true,
+    vaultKey: nw.vault_key ?? null,
+    databases,
+    fullAccessAgents
+  };
+}
 function handleGetSchedule(config) {
   const entries = collectScheduleEntries(config);
   const agentsDir = resolveAgentsDir(config);
@@ -72387,6 +72480,12 @@ function parseRoute(pathname, method) {
   if (method === "GET" && pathname === "/api/google-accounts") {
     return { handler: "getGoogleAccounts", params: {} };
   }
+  if (method === "GET" && pathname === "/api/microsoft-accounts") {
+    return { handler: "getMicrosoftAccounts", params: {} };
+  }
+  if (method === "GET" && pathname === "/api/notion-workspace") {
+    return { handler: "getNotionWorkspace", params: {} };
+  }
   if (method === "GET" && pathname === "/api/schedule") {
     return { handler: "getSchedule", params: {} };
   }
@@ -72512,6 +72611,10 @@ function startWebServer(config, port, hostname = "127.0.0.1", configPath) {
             return (async () => jsonResponse(await handleGetSystemHealth()))();
           case "getGoogleAccounts":
             return (async () => jsonResponse(await handleGetGoogleAccounts(config)))();
+          case "getMicrosoftAccounts":
+            return (async () => jsonResponse(await handleGetMicrosoftAccounts(config)))();
+          case "getNotionWorkspace":
+            return jsonResponse(handleGetNotionWorkspace(config));
           case "getSchedule":
             return jsonResponse(handleGetSchedule(config));
           case "getApprovals":

package/dist/cli/ui/index.html

@@ -409,7 +409,7 @@
     <button id="tab-agents" onclick="switchTab('agents')">Agents</button>
     <button id="tab-accounts" onclick="switchTab('accounts')">Accounts</button>
     <button id="tab-system" onclick="switchTab('system')">System</button>
-    <button id="tab-google" onclick="switchTab('google')">Google</button>
+    <button id="tab-connections" onclick="switchTab('connections')">Connections</button>
     <button id="tab-schedule" onclick="switchTab('schedule')">Schedule</button>
     <button id="tab-approvals" onclick="switchTab('approvals')">Approvals</button>
   </nav>
@@ -419,7 +419,7 @@
     <div id="agents" style="display:none" class="loading">Loading agents...</div>
     <div id="accounts" style="display:none"></div>
     <div id="system" style="display:none"></div>
-    <div id="google" style="display:none"></div>
+    <div id="connections" style="display:none"></div>
     <div id="schedule" style="display:none"></div>
     <div id="approvals" style="display:none"></div>
   </main>
@@ -493,14 +493,17 @@
       }
     }
 
-    async function fetchGoogleAccounts() {
+    async function fetchConnections() {
       try {
-        const res = await fetch(`${API}/api/google-accounts`, { headers: authHeaders() });
-        if (!res.ok) throw new Error(`HTTP ${res.status}`);
-        renderGoogleAccounts(await res.json());
+        const [google, microsoft, notion] = await Promise.all([
+          fetch(`${API}/api/google-accounts`, { headers: authHeaders() }).then(r => r.ok ? r.json() : []),
+          fetch(`${API}/api/microsoft-accounts`, { headers: authHeaders() }).then(r => r.ok ? r.json() : []),
+          fetch(`${API}/api/notion-workspace`, { headers: authHeaders() }).then(r => r.ok ? r.json() : { configured: false, databases: [] }),
+        ]);
+        renderConnections({ google, microsoft, notion });
         clearError();
       } catch (err) {
-        showError(`Failed to fetch Google accounts: ${err.message}`);
+        showError(`Failed to fetch connections: ${err.message}`);
       }
     }
 
@@ -527,7 +530,7 @@
     }
 
     function switchTab(tab) {
-      const tabs = ['summary', 'agents', 'accounts', 'system', 'google', 'schedule', 'approvals'];
+      const tabs = ['summary', 'agents', 'accounts', 'system', 'connections', 'schedule', 'approvals'];
       for (const t of tabs) {
         document.getElementById(`tab-${t}`).classList.toggle('active', tab === t);
         document.getElementById(t).style.display = tab === t ? '' : 'none';
@@ -535,7 +538,7 @@
       if (tab === 'summary') fetchSummary();
       if (tab === 'accounts') fetchAccounts();
       if (tab === 'system') fetchSystemHealth();
-      if (tab === 'google') fetchGoogleAccounts();
+      if (tab === 'connections') fetchConnections();
       if (tab === 'schedule') fetchSchedule();
       if (tab === 'approvals') fetchApprovals();
     }
@@ -988,37 +991,99 @@
       return String(ts).replace('T', ' ').replace(/\.\d+Z?$/, '').replace(/Z$/, '');
     }
 
-    function renderGoogleAccounts(rows) {
-      const container = document.getElementById('google');
-      if (!rows || rows.length === 0) {
-        container.innerHTML = '<div class="loading">No Google accounts. Add one under <code>google_accounts:</code> in switchroom.yaml and run <code>switchroom auth google account add</code>.</div>';
-        return;
+    const _dimC = (s) => `<span style="color:var(--text-dim)">${escapeHtml(s)}</span>`;
+
+    // One OAuth-account card (Google or Microsoft — same shape; Microsoft
+    // adds an account-type pill).
+    function renderOAuthAccountCard(a, opts) {
+      const expires = a.expiresAt ? formatTimestamp(a.expiresAt) : _dimC('—');
+      const known = a.brokerKnown
+        ? '<span class="usage-pill primary">slot present</span>'
+        : '<span style="color:var(--yellow)">config-only (no broker slot)</span>';
+      const acl = (a.enabledFor && a.enabledFor.length)
+        ? a.enabledFor.map(escapeHtml).join(', ')
+        : _dimC('no agents enabled');
+      const typePill = (opts && opts.showType && a.accountType)
+        ? `<span class="usage-pill" style="margin-left:.4rem">${escapeHtml(a.accountType)}</span>`
+        : '';
+      return `
+      <div class="account-card">
+        <div class="account-card-header">
+          <div class="account-label">${escapeHtml(a.account)}${typePill}</div>
+          <span style="margin-left:auto">${known}</span>
+        </div>
+        <div class="account-usage"><label style="color:var(--text-dim);opacity:.7">Enabled for: </label>${acl}</div>
+        <div class="card-meta" style="padding:0">
+          <div class="meta-item"><label>Expires </label><span>${expires}</span></div>
+          <div class="meta-item" title="${a.scope ? escapeHtml(a.scope) : ''}"><label>Scope </label><span>${a.scope ? escapeHtml(a.scope.split(' ').length + ' scope(s)') : _dimC('—')}</span></div>
+          <div class="meta-item"><label>Client </label><span>${a.clientId ? escapeHtml(a.clientId.slice(0, 16) + '…') : _dimC('—')}</span></div>
+        </div>
+      </div>`;
+    }
+
+    function _connectionSection(title, emptyHtml, cardsHtml) {
+      return `
+        <div style="margin-bottom:1.5rem">
+          <h3 style="margin:0 0 .6rem;font-size:.95rem;color:var(--text-dim);text-transform:uppercase;letter-spacing:.04em">${title}</h3>
+          ${cardsHtml ? `<div class="accounts-grid">${cardsHtml}</div>` : `<div class="loading" style="padding:.8rem">${emptyHtml}</div>`}
+        </div>`;
+    }
+
+    // Unified external-connections view: Google + Microsoft accounts and
+    // the Notion workspace, each showing which agents have access.
+    function renderConnections(data) {
+      const container = document.getElementById('connections');
+      const google = data.google || [];
+      const microsoft = data.microsoft || [];
+      const notion = data.notion || { configured: false, databases: [] };
+
+      const googleSection = _connectionSection(
+        'Google',
+        'No Google accounts. Add one under <code>google_accounts:</code> and run <code>switchroom auth google account add</code>.',
+        google.map(a => renderOAuthAccountCard(a, { showType: false })).join(''),
+      );
+
+      const microsoftSection = _connectionSection(
+        'Microsoft 365',
+        'No Microsoft accounts. Connect one from Telegram with <code>/connect microsoft</code> (admin DM), or <code>switchroom auth microsoft account add</code>.',
+        microsoft.map(a => renderOAuthAccountCard(a, { showType: true })).join(''),
+      );
+
+      let notionCards = '';
+      if (notion.configured) {
+        notionCards = (notion.databases || []).map(db => {
+          const acl = (db.enabledFor && db.enabledFor.length)
+            ? db.enabledFor.map(escapeHtml).join(', ')
+            : _dimC('no agents enabled');
+          return `
+          <div class="account-card">
+            <div class="account-card-header">
+              <div class="account-label">${escapeHtml(db.name)}</div>
+              <span style="margin-left:auto" class="usage-pill">database</span>
+            </div>
+            <div class="account-usage"><label style="color:var(--text-dim);opacity:.7">Enabled for: </label>${acl}</div>
+            <div class="card-meta" style="padding:0">
+              <div class="meta-item"><label>DB id </label><span>${escapeHtml(db.id.slice(0, 12))}…</span></div>
+            </div>
+          </div>`;
+        }).join('');
       }
-      const dim = (s) => `<span style="color:var(--text-dim)">${escapeHtml(s)}</span>`;
-      const cards = rows.map(a => {
-        const expires = a.expiresAt ? formatTimestamp(a.expiresAt) : dim('—');
-        const scope = a.scope ? escapeHtml(a.scope) : dim('broker offline');
-        const known = a.brokerKnown
-          ? '<span class="usage-pill primary">slot present</span>'
-          : '<span style="color:var(--yellow)">config-only (no broker slot)</span>';
-        const acl = (a.enabledFor && a.enabledFor.length)
-          ? a.enabledFor.map(escapeHtml).join(', ')
-          : dim('no agents enabled');
-        return `
-        <div class="account-card">
-          <div class="account-card-header">
-            <div class="account-label">${escapeHtml(a.account)}</div>
-            <span style="margin-left:auto">${known}</span>
-          </div>
-          <div class="account-usage"><label style="color:var(--text-dim);opacity:.7">Enabled for: </label>${acl}</div>
-          <div class="card-meta" style="padding:0">
-            <div class="meta-item"><label>Expires </label><span>${expires}</span></div>
-            <div class="meta-item" title="${a.scope ? escapeHtml(a.scope) : ''}"><label>Scope </label><span>${a.scope ? escapeHtml(a.scope.split(' ').length + ' scope(s)') : dim('—')}</span></div>
-            <div class="meta-item"><label>Client </label><span>${a.clientId ? escapeHtml(a.clientId.slice(0, 16) + '…') : dim('—')}</span></div>
-          </div>
+      const notionTitle = 'Notion' + (notion.configured && notion.vaultKey ? ` <span style="text-transform:none;font-weight:400">· token <code>${escapeHtml(notion.vaultKey)}</code></span>` : '');
+      const fullAccessBanner = (notion.fullAccessAgents && notion.fullAccessAgents.length)
+        ? `<div style="margin:0 0 .6rem;font-size:.85rem;color:var(--text-dim)">Full access (all databases): ${notion.fullAccessAgents.map(escapeHtml).join(', ')}</div>`
+        : '';
+      const notionBody = notionCards
+        ? `<div class="accounts-grid">${notionCards}</div>`
+        : `<div class="loading" style="padding:.8rem">${notion.configured
+            ? 'Notion configured but no databases declared. Add them under <code>notion_workspace.databases:</code>.'
+            : 'Notion not configured. See <code>docs/notion-integration.md</code>.'}</div>`;
+      const notionSection = `
+        <div style="margin-bottom:1.5rem">
+          <h3 style="margin:0 0 .6rem;font-size:.95rem;color:var(--text-dim);text-transform:uppercase;letter-spacing:.04em">${notionTitle}</h3>
+          ${fullAccessBanner}${notionBody}
         </div>`;
-      }).join('');
-      container.innerHTML = `<div class="accounts-grid">${cards}</div>`;
+
+      container.innerHTML = googleSection + microsoftSection + notionSection;
     }
 
     function renderSchedule(data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.14.67",
+  "version": "0.14.68",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/answer-stream-flag.ts

@@ -16,3 +16,22 @@ export function parseVisibleAnswerStreamEnabled(raw: string | undefined): boolea
   const v = raw.trim().toLowerCase()
   return v === '1' || v === 'true' || v === 'on' || v === 'yes'
 }
+
+/**
+ * Draft-answer-lane retirement (2026-06-05). The compose-box draft transport
+ * (`sendMessageDraft`) is invisible to the mtcute UAT harness, so the live
+ * answer-stream surface couldn't be tested. Retired by DEFAULT: the answer lane
+ * now opens a real, observable edit-in-place message instead of the compose-box
+ * draft (and the onMetric silence-liveness reset from #2169 now fires on visible
+ * sends in BOTH DMs and supergroups, not just DM drafts). Kill switch
+ * `SWITCHROOM_DRAFT_ANSWER_LANE=0` (also false/off/no) restores the legacy
+ * invisible draft.
+ *
+ * Returns true when the draft lane is RETIRED (the default — env unset or any
+ * truthy value); false only for an explicit disable of the retirement.
+ */
+export function parseDraftLaneRetiredEnabled(raw: string | undefined): boolean {
+  if (raw == null) return true
+  const v = raw.trim().toLowerCase()
+  return !(v === '0' || v === 'false' || v === 'off' || v === 'no')
+}

package/telegram-plugin/dist/gateway/gateway.js

@@ -39761,6 +39761,12 @@ function parseVisibleAnswerStreamEnabled(raw) {
   const v = raw.trim().toLowerCase();
   return v === "1" || v === "true" || v === "on" || v === "yes";
 }
+function parseDraftLaneRetiredEnabled(raw) {
+  if (raw == null)
+    return true;
+  const v = raw.trim().toLowerCase();
+  return !(v === "0" || v === "false" || v === "off" || v === "no");
+}
 
 // pty-tail.ts
 var import_headless = __toESM(require_xterm_headless(), 1);
@@ -52770,11 +52776,11 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.14.67";
-var COMMIT_SHA = "dcade213";
-var COMMIT_DATE = "2026-06-05T08:22:01Z";
-var LATEST_PR = 2171;
-var COMMITS_AHEAD_OF_TAG = 4;
+var VERSION = "0.14.68";
+var COMMIT_SHA = "4f371b79";
+var COMMIT_DATE = "2026-06-05T10:24:42Z";
+var LATEST_PR = 2174;
+var COMMITS_AHEAD_OF_TAG = 3;
 
 // gateway/boot-version.ts
 function formatRelativeAgo(iso) {
@@ -53574,6 +53580,7 @@ var TOPIC_ID = process.env.TELEGRAM_TOPIC_ID ? Number(process.env.TELEGRAM_TOPIC
 var AGENT_ADMIN = process.env.SWITCHROOM_AGENT_ADMIN === "true";
 var bot = new import_grammy9.Bot(TOKEN);
 installTgPostLogger(bot);
+var DRAFT_ANSWER_LANE_RETIRED = parseDraftLaneRetiredEnabled(process.env.SWITCHROOM_DRAFT_ANSWER_LANE);
 var _rawSendMessageDraft = bot.api.raw.sendMessageDraft;
 var GRAMMY_VERSION = (() => {
   try {
@@ -53583,7 +53590,7 @@ var GRAMMY_VERSION = (() => {
     return "unknown";
   }
 })();
-var sendMessageDraftFn = typeof _rawSendMessageDraft === "function" ? (chatId, draftId, text, params) => _rawSendMessageDraft({
+var sendMessageDraftFn = !DRAFT_ANSWER_LANE_RETIRED && typeof _rawSendMessageDraft === "function" ? (chatId, draftId, text, params) => _rawSendMessageDraft({
   chat_id: Number(chatId),
   draft_id: draftId,
   text,
@@ -58106,7 +58113,7 @@ function handleSessionEvent(ev) {
             chatId: turn.sessionChatId,
             isPrivateChat: turn.isDm,
             threadId: turn.sessionThreadId,
-            ...ANSWER_STREAM_VISIBLE_ENABLED ? { minInitialChars: 1 } : { sendMessageDraft: sendMessageDraftFn, minInitialChars: Number.MAX_SAFE_INTEGER },
+            ...ANSWER_STREAM_VISIBLE_ENABLED || DRAFT_ANSWER_LANE_RETIRED ? { minInitialChars: 1 } : { sendMessageDraft: sendMessageDraftFn, minInitialChars: Number.MAX_SAFE_INTEGER },
             sendMessage: async (chatId, text, params) => {
               const tid = params?.message_thread_id;
               const silent = params?.purpose !== "materialize";
@@ -58238,7 +58245,7 @@ function handleSessionEvent(ev) {
         const stream = turn.answerStream;
         const streamedMsgId = stream.messageId();
         const streamedFinalText = turn.capturedText.join("").trim();
-        if (ANSWER_STREAM_VISIBLE_ENABLED && !turn.replyCalled && streamedMsgId != null && streamedFinalText.length > 0) {
+        if ((ANSWER_STREAM_VISIBLE_ENABLED || DRAFT_ANSWER_LANE_RETIRED) && !turn.replyCalled && streamedMsgId != null && streamedFinalText.length > 0) {
           turn.answerStream = null;
           streamFinalizedAsAnswer = true;
           turn.finalAnswerDelivered = true;
@@ -64574,7 +64581,7 @@ var didOneTimeSetup = false;
           }
         }
       }
-      process.stderr.write(`telegram gateway: answer-stream draft transport=${sendMessageDraftFn != null ? "available" : "unavailable"} grammy=${GRAMMY_VERSION}
+      process.stderr.write(`telegram gateway: answer-stream lane=${DRAFT_ANSWER_LANE_RETIRED ? "visible(draft-retired)" : ANSWER_STREAM_VISIBLE_ENABLED ? "visible" : "draft"} draftFn=${sendMessageDraftFn != null ? "available" : "off"} grammy=${GRAMMY_VERSION}
 `);
       process.stderr.write(`telegram gateway: starting bot polling pid=${process.pid} agent=${process.env.SWITCHROOM_AGENT_NAME ?? "-"} stateDir=${STATE_DIR} historyEnabled=${HISTORY_ENABLED} streamMode=${process.env.SWITCHROOM_TG_STREAM_MODE ?? "checklist"}
 `);

package/telegram-plugin/gateway/gateway.ts

@@ -98,7 +98,7 @@ import * as pendingProgress from '../pending-work-progress.js'
 import { writeSilentEndState, clearSilentEndState, recordUndeliveredTurnEnd } from '../silent-end.js'
 import { isFinalAnswerReply, isSubstantiveFinalReply } from '../final-answer-detect.js'
 import { createAnswerStream, type AnswerStreamHandle } from '../answer-stream.js'
-import { parseVisibleAnswerStreamEnabled } from '../answer-stream-flag.js'
+import { parseVisibleAnswerStreamEnabled, parseDraftLaneRetiredEnabled } from '../answer-stream-flag.js'
 import { type SessionEvent } from '../session-tail.js'
 import {
   shouldSuppressToolActivity,
@@ -678,6 +678,14 @@ const AGENT_ADMIN = process.env.SWITCHROOM_AGENT_ADMIN === 'true'
 const bot = new Bot(TOKEN)
 installTgPostLogger(bot)
 
+// Draft-answer-lane retirement (2026-06-05): default RETIRED so the live answer
+// lane uses a real, mtcute-observable message instead of the invisible
+// compose-box draft. Declared HERE (above the boot-probe block) because
+// `sendMessageDraftFn` below reads it — keep it above its first use to avoid a
+// temporal-dead-zone ReferenceError at boot. Kill switch
+// SWITCHROOM_DRAFT_ANSWER_LANE=0 restores the legacy draft.
+const DRAFT_ANSWER_LANE_RETIRED = parseDraftLaneRetiredEnabled(process.env.SWITCHROOM_DRAFT_ANSWER_LANE)
+
 // ─── sendMessageDraft boot probe ──────────────────────────────────────────
 // grammY 1.x exposes all Telegram Bot API methods through bot.api.raw.
 // bot.api.sendMessageDraft (the typed wrapper) takes chat_id as number, but
@@ -695,7 +703,11 @@ const GRAMMY_VERSION: string = (() => {
 const sendMessageDraftFn: (
   (chatId: string, draftId: number, text: string, params?: { message_thread_id?: number; parse_mode?: 'HTML' }) => Promise<unknown>
 ) | undefined =
-  typeof _rawSendMessageDraft === 'function'
+  // When the draft lane is retired (default), force this undefined so BOTH
+  // consumers (the answer-stream config + the stream_reply handler) drop the
+  // draft transport and fall back to visible message transport — the single
+  // chokepoint for the retirement.
+  !DRAFT_ANSWER_LANE_RETIRED && typeof _rawSendMessageDraft === 'function'
     ? (chatId, draftId, text, params) =>
         (_rawSendMessageDraft as (args: Record<string, unknown>) => Promise<unknown>)({
           chat_id: Number(chatId),
@@ -9545,7 +9557,13 @@ function handleSessionEvent(ev: SessionEvent): void {
             // General). With the gate unreachable the only posted message is
             // the canonical reply. (The gate is bypassed for DM draft
             // transport, so DM draft streaming is unaffected.)
-            ...(ANSWER_STREAM_VISIBLE_ENABLED
+            // Draft retired (default) OR visible explicitly on → a real
+            // edit-in-place message (minInitialChars:1, no draft): observable by
+            // the UAT and the onMetric silence-liveness reset fires on visible
+            // sends in DMs AND supergroups. Legacy draft only when the kill
+            // switch re-enables it (DRAFT_ANSWER_LANE_RETIRED=false), which also
+            // restores sendMessageDraftFn above.
+            ...(ANSWER_STREAM_VISIBLE_ENABLED || DRAFT_ANSWER_LANE_RETIRED
               ? { minInitialChars: 1 }
               : { sendMessageDraft: sendMessageDraftFn, minInitialChars: Number.MAX_SAFE_INTEGER }),
             // #1075: route through robustApiCall so flood-wait,
@@ -9835,7 +9853,13 @@ function handleSessionEvent(ev: SessionEvent): void {
         const streamedMsgId = stream.messageId()
         const streamedFinalText = turn.capturedText.join('').trim()
         if (
-          ANSWER_STREAM_VISIBLE_ENABLED
+          // Broadened for draft retirement: a text-only no-reply turn that
+          // streamed a VISIBLE preview must materialize a pinged final answer +
+          // delete the preview. Without this, the retired-default path would
+          // fall into the else-branch retract() and delete the user's only copy
+          // of the answer (a lost-answer bug). The reply-tool branch still hits
+          // retract() → single canonical formatted reply, no flash.
+          (ANSWER_STREAM_VISIBLE_ENABLED || DRAFT_ANSWER_LANE_RETIRED)
           && !turn.replyCalled
           && streamedMsgId != null
           && streamedFinalText.length > 0
@@ -20565,7 +20589,7 @@ void (async () => {
         }
       }
 
-      process.stderr.write(`telegram gateway: answer-stream draft transport=${sendMessageDraftFn != null ? 'available' : 'unavailable'} grammy=${GRAMMY_VERSION}\n`)
+      process.stderr.write(`telegram gateway: answer-stream lane=${DRAFT_ANSWER_LANE_RETIRED ? 'visible(draft-retired)' : (ANSWER_STREAM_VISIBLE_ENABLED ? 'visible' : 'draft')} draftFn=${sendMessageDraftFn != null ? 'available' : 'off'} grammy=${GRAMMY_VERSION}\n`)
       process.stderr.write(`telegram gateway: starting bot polling pid=${process.pid} agent=${process.env.SWITCHROOM_AGENT_NAME ?? '-'} stateDir=${STATE_DIR} historyEnabled=${HISTORY_ENABLED} streamMode=${process.env.SWITCHROOM_TG_STREAM_MODE ?? 'checklist'}\n`)
       runnerHandle = run(bot, {
         runner: {

package/telegram-plugin/tests/answer-stream-flag.test.ts

@@ -6,7 +6,7 @@
  */
 
 import { describe, it, expect } from 'vitest'
-import { parseVisibleAnswerStreamEnabled } from '../answer-stream-flag.js'
+import { parseVisibleAnswerStreamEnabled, parseDraftLaneRetiredEnabled } from '../answer-stream-flag.js'
 
 describe('parseVisibleAnswerStreamEnabled — default OFF, opt-in', () => {
   it('defaults OFF when unset', () => {
@@ -25,3 +25,21 @@ describe('parseVisibleAnswerStreamEnabled — default OFF, opt-in', () => {
     }
   })
 })
+
+describe('parseDraftLaneRetiredEnabled — default RETIRED (2026-06-05), kill-switch off', () => {
+  it('defaults to RETIRED (true) when unset — the draft lane is gone by default', () => {
+    expect(parseDraftLaneRetiredEnabled(undefined)).toBe(true)
+  })
+
+  it('stays RETIRED for any non-disable value (including unrecognized)', () => {
+    for (const v of ['1', 'true', 'on', 'yes', '', '   ', 'whatever', 'retired']) {
+      expect(parseDraftLaneRetiredEnabled(v)).toBe(true)
+    }
+  })
+
+  it('restores the legacy draft (false) ONLY on an explicit disable (case/space-insensitive)', () => {
+    for (const v of ['0', 'false', 'off', 'no', ' FALSE ', 'Off', 'NO']) {
+      expect(parseDraftLaneRetiredEnabled(v)).toBe(false)
+    }
+  })
+})

package/telegram-plugin/tests/draft-retirement-wiring.test.ts

@@ -0,0 +1,52 @@
+/**
+ * Draft-answer-lane retirement — gateway wiring guards (2026-06-05).
+ *
+ * The retirement switches the live answer lane from the invisible compose-box
+ * draft to a real, mtcute-observable edit-in-place message, default-on. The
+ * design review flagged two ways this silently breaks (gateway IIFE can't be
+ * instantiated in-process, so these are source-level assertions, same pattern as
+ * silence-liveness-wiring.test):
+ *
+ *  PRIMARY: drop sendMessageDraftFn but FORGET to flip minInitialChars to 1 →
+ *  the lane becomes a total no-op (the MAX gate never opens it), losing ALL
+ *  answer-lane status AND the #2169 onMetric silence-liveness reset.
+ *  SECONDARY: flip the lane to visible but FORGET to broaden the
+ *  materialize-as-answer guard → a text-only no-reply turn falls into retract()
+ *  and deletes the user's only copy of the answer (a lost-answer bug).
+ */
+import { describe, it, expect } from 'vitest'
+import { readFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+
+const gatewaySrc = readFileSync(resolve(__dirname, '..', 'gateway', 'gateway.ts'), 'utf-8')
+
+describe('draft-retirement wiring', () => {
+  it('sendMessageDraftFn is gated on the retirement (the single chokepoint)', () => {
+    expect(gatewaySrc).toMatch(/!DRAFT_ANSWER_LANE_RETIRED && typeof _rawSendMessageDraft === 'function'/)
+  })
+
+  it('DRAFT_ANSWER_LANE_RETIRED is declared before its first use (no TDZ at boot)', () => {
+    const declIdx = gatewaySrc.indexOf('const DRAFT_ANSWER_LANE_RETIRED =')
+    const firstUseIdx = gatewaySrc.indexOf('!DRAFT_ANSWER_LANE_RETIRED && typeof _rawSendMessageDraft')
+    expect(declIdx).toBeGreaterThan(0)
+    expect(firstUseIdx).toBeGreaterThan(declIdx)
+  })
+
+  it('PRIMARY GUARD: retired lane uses minInitialChars:1 (visible), never the MAX no-op gate', () => {
+    // The config must pick the {minInitialChars:1} branch when retired, so the
+    // lane actually opens a real message. The MAX branch is draft-only (legacy).
+    expect(gatewaySrc).toMatch(/ANSWER_STREAM_VISIBLE_ENABLED \|\| DRAFT_ANSWER_LANE_RETIRED\s*\n?\s*\?\s*\{ minInitialChars: 1 \}/)
+  })
+
+  it('SECONDARY GUARD: the materialize-as-answer guard is broadened in lockstep', () => {
+    // A text-only no-reply turn must materialize (ping + delete preview), not
+    // retract() the answer away.
+    expect(gatewaySrc).toMatch(/\(ANSWER_STREAM_VISIBLE_ENABLED \|\| DRAFT_ANSWER_LANE_RETIRED\)\s*\n?\s*&& !turn\.replyCalled/)
+  })
+
+  it('the #2169 onMetric silence-liveness reset is preserved (fires on visible sends now)', () => {
+    const onMetric = (gatewaySrc.split('onMetric: (metricEv) => {')[1] ?? '').split('\n            },')[0]
+    expect(onMetric).toMatch(/silencePoke\.noteProduction/)
+    expect(onMetric).toMatch(/currentTurn === turn/)
+  })
+})