switchroom 0.16.11 → 0.16.12

package/dist/cli/switchroom.js

@@ -51674,8 +51674,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.11";
-var COMMIT_SHA = "7846a496";
+var VERSION = "0.16.12";
+var COMMIT_SHA = "4cab85e1";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -77783,6 +77783,13 @@ function extractBearerToken(req) {
     if (idx >= 0 && idx + 1 < parts.length)
       return parts[idx + 1];
   }
+  const url = new URL(req.url);
+  const queryToken = url.searchParams.get("token");
+  if (queryToken)
+    return queryToken;
+  const hermesHeader = req.headers.get("X-Hermes-Session-Token");
+  if (hermesHeader)
+    return hermesHeader;
   return null;
 }
 function checkAuth(req, token, server) {

package/dist/host-control/main.js

@@ -22587,7 +22587,7 @@ import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:f
 import { dirname as dirname4, join as join2 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.11";
+var VERSION = "0.16.12";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.16.11",
+  "version": "0.16.12",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -50062,7 +50062,8 @@ function buildObligationRepresentInbound(o, now) {
     meta: {
       source: "obligation_represent",
       origin_turn_id: o.originTurnId,
-      represent_count: String(o.representCount + 1)
+      represent_count: String(o.representCount + 1),
+      chat_id: o.chatId
     }
   };
 }
@@ -56063,10 +56064,10 @@ function readTurnActiveMarkerAgeMs(stateDir, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.16.11";
-var COMMIT_SHA = "7846a496";
-var COMMIT_DATE = "2026-06-28T09:51:30Z";
-var LATEST_PR = 2630;
+var VERSION = "0.16.12";
+var COMMIT_SHA = "4cab85e1";
+var COMMIT_DATE = "2026-06-28T11:11:09Z";
+var LATEST_PR = 2634;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -60795,9 +60796,20 @@ function redactOutboundText(text2, site) {
 }
 async function executeReply(args) {
   const turn = currentTurn;
-  const chat_id = String(args.chat_id ?? "");
-  if (!chat_id)
+  const _rawChatId = String(args.chat_id ?? "");
+  if (!_rawChatId)
     throw new Error("reply: chat_id is required");
+  const chat_id = (() => {
+    const _a = loadAccess();
+    if (_a.allowFrom.includes(_rawChatId) || _rawChatId in _a.groups)
+      return _rawChatId;
+    if (turn?.sessionChatId && (_a.allowFrom.includes(turn.sessionChatId) || (turn.sessionChatId in _a.groups))) {
+      process.stderr.write(`telegram gateway: reply: model passed chat_id "${_rawChatId}" (not allowlisted) \u2014 ` + `routing to active turn chat "${turn.sessionChatId}"
+`);
+      return turn.sessionChatId;
+    }
+    return _rawChatId;
+  })();
   const rawText = args.text;
   if (rawText == null || rawText === "")
     throw new Error("reply: text is required and cannot be empty");

package/telegram-plugin/gateway/gateway.ts

@@ -7972,8 +7972,25 @@ async function executeReply(args: Record<string, unknown>): Promise<{ content: A
   // module-scope currentTurn, which a future refactor could let roll over
   // mid-call.
   const turn = currentTurn
-  const chat_id = String(args.chat_id ?? '')
-  if (!chat_id) throw new Error('reply: chat_id is required')
+  const _rawChatId = String(args.chat_id ?? '')
+  if (!_rawChatId) throw new Error('reply: chat_id is required')
+  // Non-Claude models (e.g. Gemini via LiteLLM sr-* routing) sometimes pass a
+  // chat_id that is not in the allowlist — either an int/string mismatch, or
+  // the model echoing the wrong identifier from context. When the raw value
+  // fails the allowlist check and the active turn has a validated sessionChatId,
+  // fall back to the turn's origin chat so the reply still lands correctly.
+  const chat_id = (() => {
+    const _a = loadAccess()
+    if (_a.allowFrom.includes(_rawChatId) || _rawChatId in _a.groups) return _rawChatId
+    if (turn?.sessionChatId && (_a.allowFrom.includes(turn.sessionChatId) || turn.sessionChatId in _a.groups)) {
+      process.stderr.write(
+        `telegram gateway: reply: model passed chat_id "${_rawChatId}" (not allowlisted) — ` +
+          `routing to active turn chat "${turn.sessionChatId}"\n`,
+      )
+      return turn.sessionChatId
+    }
+    return _rawChatId // let assertAllowedChat below throw the human-readable error
+  })()
   const rawText = args.text as string | undefined
   if (rawText == null || rawText === '') throw new Error('reply: text is required and cannot be empty')
   let text = repairEscapedWhitespace(rawText)

package/telegram-plugin/gateway/obligation-ledger.ts

@@ -381,6 +381,7 @@ export function buildObligationRepresentInbound(o: Obligation, now: number): Inb
       source: 'obligation_represent',
       origin_turn_id: o.originTurnId,
       represent_count: String(o.representCount + 1),
+      chat_id: o.chatId,
     },
   }
 }

package/telegram-plugin/tests/obligation-ledger.test.ts

@@ -184,6 +184,7 @@ describe("buildObligationRepresentInbound", () => {
     expect(m.meta.origin_turn_id).toBe("-100123:3#715");
     expect(m.meta.source).toBe("obligation_represent"); // synthetic → not tracked, no new obligation
     expect(m.meta.represent_count).toBe("1");
+    expect(m.meta.chat_id).toBe("-100123"); // Bug C fix: chat_id in meta drives the <channel> tag
     expect(m.text).toContain("do the Meta report");
     expect(m.text).toMatch(/answer it now|reply tool/i);
   });