switchroom 0.16.23 → 0.16.27

package/telegram-plugin/tool-activity-summary.ts

@@ -177,7 +177,7 @@ import {
   STATUS_LINE_MAX,
   NESTED_PREFIX,
 } from './status-no-truncate.js'
-import { escapeHtml, stripMarkdown, truncate } from './card-format.js'
+import { escapeMarkdown, stripMarkdown, truncate } from './card-format.js'
 import { isTelegramSurfaceTool } from './tool-names.js'
 
 /**
@@ -264,11 +264,11 @@ export function renderActivityHeader(
 ): [string, string] {
   const toolWord = toolCount === 1 ? 'tool' : 'tools'
   const elapsed = formatFeedElapsed(elapsedMs)
-  const descPart = description.length > 0 ? ` · <i>${escapeHtml(description)}</i>` : ''
-  const line1 = `${emoji} <b>${escapeHtml(label)}</b>${descPart}`
+  const descPart = description.length > 0 ? ` · _${escapeMarkdown(description)}_` : ''
+  const line1 = `${emoji} **${escapeMarkdown(label)}**${descPart}`
   const line2 = state === 'running'
-    ? `<i>${elapsed} · ${toolCount} ${toolWord}</i>`
-    : `<i>${state} · ${toolCount} ${toolWord} · ${elapsed}</i>`
+    ? `_${elapsed} · ${toolCount} ${toolWord}_`
+    : `_${state} · ${toolCount} ${toolWord} · ${elapsed}_`
   return [line1, line2]
 }
 
@@ -286,14 +286,14 @@ export function formatFeedElapsed(ms: number): string {
 //   1. stripMarkdown(raw)
 //   2. .replace(/\s+/g, ' ').trim()
 //   3. truncate(_, STATUS_LINE_MAX)
-//   4. escapeHtml(_)   ← escape is ALWAYS the last per-line op.
+//   4. escapeMarkdown(_)   ← escape is ALWAYS the last per-line op.
 // Escaping last is load-bearing: clipping an already-escaped string can split
-// an HTML entity (&amp; → &amp), which Telegram's HTML parser rejects.
+// a markdown escape (\* → \), which renders wrong.
 
-/** Clean + clip + escape a single raw step line. Returns ready-to-wrap HTML. */
+/** Clean + clip + escape a single raw step line. Returns ready-to-wrap markdown. */
 function escapeStepLine(raw: string): string {
   const cleaned = stripMarkdown(raw).replace(/\s+/g, ' ').trim()
-  return escapeHtml(truncate(cleaned, STATUS_LINE_MAX))
+  return escapeMarkdown(truncate(cleaned, STATUS_LINE_MAX))
 }
 
 /**
@@ -317,10 +317,10 @@ export function renderStepFeed(
   if (steps.length === 0) return
   const shown = steps.slice(-STATUS_ROLLING_LINES)
   const hidden = steps.length - shown.length
-  if (hidden > 0) out.push(`<i>✓ +${hidden} earlier…</i>`)
+  if (hidden > 0) out.push(`_✓ +${hidden} earlier…_`)
   const lastIdx = shown.length - 1
   shown.forEach((s, i) => {
-    out.push(!allDone && i === lastIdx ? `<b>→ ${s}${liveSuffix}</b>` : `<i>✓ ${s}</i>`)
+    out.push(!allDone && i === lastIdx ? `**→ ${s}${liveSuffix}**` : `_✓ ${s}_`)
   })
 }
 
@@ -399,18 +399,18 @@ export function renderStatusCard(opts: StatusCardOpts): string | null {
     // Parent lines all render done — the live → step lives in the nested block.
     const shownParent = steps.slice(-STATUS_ROLLING_LINES)
     const hiddenParent = steps.length - shownParent.length
-    if (hiddenParent > 0) out.push(`<i>✓ +${hiddenParent} earlier…</i>`)
-    for (const s of shownParent) out.push(`<i>✓ ${s}</i>`)
+    if (hiddenParent > 0) out.push(`_✓ +${hiddenParent} earlier…_`)
+    for (const s of shownParent) out.push(`_✓ ${s}_`)
     // Child block.
     const shownChild = children.slice(-STATUS_ROLLING_LINES)
     const hiddenChild = children.length - shownChild.length
-    if (hiddenChild > 0) out.push(`${NESTED_PREFIX}<i>+${hiddenChild} earlier…</i>`)
+    if (hiddenChild > 0) out.push(`${NESTED_PREFIX}_+${hiddenChild} earlier…_`)
     const lastChildIdx = shownChild.length - 1
     shownChild.forEach((s, i) => {
       out.push(
         i === lastChildIdx && !final
-          ? `${NESTED_PREFIX}<b>→ ${s}${liveSuffix}</b>`
-          : `${NESTED_PREFIX}<i>${s}</i>`,
+          ? `${NESTED_PREFIX}**→ ${s}${liveSuffix}**`
+          : `${NESTED_PREFIX}_${s}_`,
       )
     })
   } else {
@@ -418,12 +418,12 @@ export function renderStatusCard(opts: StatusCardOpts): string | null {
   }
 
   if (final && stepCount != null && stepCount > 0) {
-    out.push(`<i>✓ ${stepCount} steps</i>`)
+    out.push(`_✓ ${stepCount} steps_`)
   }
 
   if (result != null && result.text.length > 0) {
     out.push(WORKER_RESULT_RULE)
-    out.push(`${result.emoji} <i>${escapeHtml(truncate(result.text, WORKER_RESULT_MAX))}</i>`)
+    out.push(`${result.emoji} _${escapeMarkdown(truncate(result.text, WORKER_RESULT_MAX))}_`)
   }
 
   // out always carries the two header lines, so it is never empty — but guard
@@ -444,7 +444,7 @@ const WORKER_RESULT_MAX = 320
  * drops the oldest body bullets one at a time, re-inserting a `+N earlier…`
  * marker, until the card fits STATUS_CARD_CHAR_BUDGET. In the extreme case
  * (a single newest bullet that is itself oversized) it truncates the RAW
- * newest text, THEN escapes, THEN wraps — never slicing already-escaped HTML.
+ * newest text, THEN escapes, THEN wraps — never slicing already-escaped markdown.
  */
 function fitCardToBudget(opts: StatusCardOpts, headerLines: string[]): string {
   const { final = false, liveSuffix = '', stepCount, result } = opts
@@ -454,10 +454,10 @@ function fitCardToBudget(opts: StatusCardOpts, headerLines: string[]): string {
 
   // Fixed footer/result lines (always kept).
   const footerLines: string[] = []
-  if (final && stepCount != null && stepCount > 0) footerLines.push(`<i>✓ ${stepCount} steps</i>`)
+  if (final && stepCount != null && stepCount > 0) footerLines.push(`_✓ ${stepCount} steps_`)
   if (result != null && result.text.length > 0) {
     footerLines.push(WORKER_RESULT_RULE)
-    footerLines.push(`${result.emoji} <i>${escapeHtml(truncate(result.text, WORKER_RESULT_MAX))}</i>`)
+    footerLines.push(`${result.emoji} _${escapeMarkdown(truncate(result.text, WORKER_RESULT_MAX))}_`)
   }
   const fixedCost = [...headerLines, ...footerLines].join('\n').length
 
@@ -468,17 +468,17 @@ function fitCardToBudget(opts: StatusCardOpts, headerLines: string[]): string {
   const prefix = hasChildren ? NESTED_PREFIX : ''
 
   const buildBullet = (esc: string, isLast: boolean): string =>
-    !final && isLast ? `${prefix}<b>→ ${esc}${liveSuffix}</b>` : `${prefix}<i>${esc}</i>`
+    !final && isLast ? `${prefix}**→ ${esc}${liveSuffix}**` : `${prefix}_${esc}_`
 
   // Parent-collapsed marker line when we are dropping children but parent steps exist.
   const parentMarker =
-    hasChildren && rawSteps.length > 0 ? `<i>✓ +${rawSteps.length} earlier…</i>` : null
+    hasChildren && rawSteps.length > 0 ? `_✓ +${rawSteps.length} earlier…_` : null
 
   for (let drop = 1; drop < escapedBody.length; drop++) {
     const shown = escapedBody.slice(drop)
     const lines: string[] = [...headerLines]
     if (parentMarker != null) lines.push(parentMarker)
-    lines.push(hasChildren ? `${NESTED_PREFIX}<i>+${drop} earlier…</i>` : `<i>✓ +${drop} earlier…</i>`)
+    lines.push(hasChildren ? `${NESTED_PREFIX}_+${drop} earlier…_` : `_✓ +${drop} earlier…_`)
     const lastIdx = shown.length - 1
     shown.forEach((esc, i) => lines.push(buildBullet(esc, i === lastIdx)))
     lines.push(...footerLines)
@@ -491,19 +491,19 @@ function fitCardToBudget(opts: StatusCardOpts, headerLines: string[]): string {
   // escaping can expand the string (& → &amp;).
   const rawNewest = body.length > 0 ? stripMarkdown(body[body.length - 1]).replace(/\s+/g, ' ').trim() : ''
   const wrapperOverhead = final
-    ? (prefix + '<i>✓ </i>').length
-    : (prefix + '<b>→ </b>').length + liveSuffix.length
+    ? (prefix + '_✓ _').length
+    : (prefix + '**→ **').length + liveSuffix.length
   const headerFooterCost =
     fixedCost + (fixedCost > 0 ? 1 : 0) + (parentMarker != null ? parentMarker.length + 1 : 0)
   const budget = STATUS_CARD_CHAR_BUDGET - headerFooterCost - wrapperOverhead
   let raw = rawNewest.slice(0, Math.max(0, budget))
-  let newest = escapeHtml(raw)
+  let newest = escapeMarkdown(raw)
   while (raw.length > 0 && wrapperOverhead + headerFooterCost + newest.length > STATUS_CARD_CHAR_BUDGET) {
     const excess = wrapperOverhead + headerFooterCost + newest.length - STATUS_CARD_CHAR_BUDGET
     raw = raw.slice(0, Math.max(0, raw.length - excess - 1))
-    newest = escapeHtml(raw)
+    newest = escapeMarkdown(raw)
   }
-  const newestLine = final ? `${prefix}<i>✓ ${newest}</i>` : `${prefix}<b>→ ${newest}${liveSuffix}</b>`
+  const newestLine = final ? `${prefix}_✓ ${newest}_` : `${prefix}**→ ${newest}${liveSuffix}**`
   const lines: string[] = [...headerLines]
   if (parentMarker != null) lines.push(parentMarker)
   lines.push(newestLine)

package/telegram-plugin/welcome-text.ts

@@ -5,13 +5,15 @@
  *   1. single-sourced (no drift between gateway mode and monolith mode)
  *   2. unit-testable without needing a grammy Context
  *
- * All functions return HTML-safe strings with <b>/<i>/<code> markup ready
- * for Telegram's parse_mode=HTML. The <code>…</code> wrapper is deliberate
- * for things like command names and agent identifiers, which render as
- * monospace inline and avoid Telegram treating them as markdown.
+ * All functions return GFM markdown strings (bold, italic, inline code)
+ * ready for the rich-message path (#2669). The code-span wrapper is
+ * deliberate for command names and agent identifiers, which render as
+ * monospace inline (and inside a code span, characters are literal so no
+ * escaping is needed).
  */
 
 import { maskUsername } from "./demo-mask.js";
+import { escapeMarkdown } from "./card-format.js";
 
 export type AuthSummary = {
   authenticated: boolean;
@@ -93,14 +95,11 @@ export type AgentMetadata = {
   live?: StatusProbeRow[];
 };
 
-// Tiny escaper — duplicates the one in gateway.ts / server.ts so this
-// module stays dependency-free and easy to test.
+// Markdown escaper for dynamic values interpolated into bold/plain card
+// text (#2669). Kept under the legacy `escapeHtml` name so existing imports
+// don't churn; it now escapes GFM-markdown specials.
 export function escapeHtml(text: string): string {
-  return text
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;");
+  return escapeMarkdown(text);
 }
 
 /**
@@ -137,9 +136,9 @@ export function formatAgentLine(meta: AgentMetadata): string {
   // restart, when the session reverts to the configured model).
   const session =
     meta.sessionModel && meta.sessionModel.length > 0
-      ? ` · live session: <code>${escapeHtml(meta.sessionModel)}</code>`
+      ? ` · live session: \`${meta.sessionModel}\``
       : "";
-  return `<b>${escapeHtml(meta.agentName)}</b> · model: <code>${escapeHtml(m)}</code>${session}${topic}`;
+  return `**${escapeHtml(meta.agentName)}** · model: \`${m}\`${session}${topic}`;
 }
 
 /**
@@ -150,15 +149,15 @@ export function formatAgentLine(meta: AgentMetadata): string {
 export function startText(agentName: string, dmDisabled: boolean): string {
   if (dmDisabled) return "This bot isn't accepting new connections.";
   return [
-    `<b>Switchroom</b> — Telegram on your Claude Pro or Max subscription.`,
+    `**Switchroom** — Telegram on your Claude Pro or Max subscription.`,
     ``,
-    `This bot is the <b>${escapeHtml(agentName)}</b> agent. Pair first, then send messages here and they reach the agent; replies and reactions come back.`,
+    `This bot is the **${escapeHtml(agentName)}** agent. Pair first, then send messages here and they reach the agent; replies and reactions come back.`,
     ``,
-    `<b>To pair:</b>`,
+    `**To pair:**`,
     `1. DM me anything — you'll get a 6-char code`,
-    `2. In Claude Code: <code>/telegram:access pair &lt;code&gt;</code>`,
+    `2. In Claude Code: \`/telegram:access pair <code>\``,
     ``,
-    `After pairing, try <code>/status</code> or <code>/commands</code>.`,
+    `After pairing, try \`/status\` or \`/commands\`.`,
   ].join("\n");
 }
 
@@ -168,16 +167,16 @@ export function startText(agentName: string, dmDisabled: boolean): string {
  */
 export function helpText(agentName: string): string {
   return [
-    `<b>Switchroom</b> — your Pro/Max subscription, wired to Telegram.`,
+    `**Switchroom** — your Pro/Max subscription, wired to Telegram.`,
     ``,
-    `This bot is the <b>${escapeHtml(agentName)}</b> agent. Text and photos route through to it; replies, reactions and progress cards come back.`,
+    `This bot is the **${escapeHtml(agentName)}** agent. Text and photos route through to it; replies, reactions and progress cards come back.`,
     ``,
-    `Tool approvals surface as inline buttons (✅ / ❌) or via <code>/approve</code>, <code>/deny</code>, <code>/pending</code>. Start a fresh session with <code>/new</code>, or trim/clear context with <code>/compact</code> / <code>/clear</code>.`,
+    `Tool approvals surface as inline buttons (✅ / ❌) or via \`/approve\`, \`/deny\`, \`/pending\`. Start a fresh session with \`/new\`, or trim/clear context with \`/compact\` / \`/clear\`.`,
     ``,
-    `<code>/start</code> — pairing instructions`,
-    `<code>/status</code> — agent, model, auth`,
-    `<code>/vault audit &lt;agent&gt;</code> — admin: review agent's vault access + one-tap [🔓 Allow] on recent denials`,
-    `<code>/commands</code> — full command list`,
+    `\`/start\` — pairing instructions`,
+    `\`/status\` — agent, model, auth`,
+    `\`/vault audit <agent>\` — admin: review agent's vault access + one-tap [🔓 Allow] on recent denials`,
+    `\`/commands\` — full command list`,
   ].join("\n");
 }
 
@@ -217,7 +216,7 @@ export function statusPairedText(params: {
     `Agent: ${formatAgentLine(meta)}`,
     `Auth: ${formatAuthLine(meta.auth)}`,
   ];
-  if (meta.status) lines.push(`Status: <code>${escapeHtml(meta.status)}</code>${meta.uptime ? ` · up ${escapeHtml(meta.uptime)}` : ""}`);
+  if (meta.status) lines.push(`Status: \`${meta.status}\`${meta.uptime ? ` · up ${escapeHtml(meta.uptime)}` : ""}`);
 
   // Live health block — every probe (green and otherwise) so the user
   // can see at a glance what's working AND what isn't. This is the
@@ -225,10 +224,10 @@ export function statusPairedText(params: {
   // contract: the boot card is a quiet ack, /status is the dashboard.
   if (meta.live && meta.live.length > 0) {
     lines.push("");
-    lines.push("<b>Health</b>");
+    lines.push("**Health**");
     for (const row of meta.live) {
       const dot = STATUS_DOT[row.status] ?? STATUS_DOT.fail;
-      lines.push(`${dot} <b>${escapeHtml(row.label)}</b>  ${escapeHtml(row.detail)}`);
+      lines.push(`${dot} **${escapeHtml(row.label)}**  ${escapeHtml(row.detail)}`);
     }
   }
 
@@ -237,14 +236,14 @@ export function statusPairedText(params: {
     // Blank separator before the audit block so the reply reads as two
     // sections: live state up top, config audit below.
     lines.push("");
-    if (audit.version) lines.push(`<b>Version</b> ${escapeHtml(audit.version)}`);
-    if (meta.extendsProfile) lines.push(`<b>Profile</b> ${escapeHtml(meta.extendsProfile)}`);
-    if (audit.tools) lines.push(`<b>Tools</b> ${escapeHtml(audit.tools)}`);
-    if (audit.toolsDeny) lines.push(`<b>Deny</b> ${escapeHtml(audit.toolsDeny)}`);
-    if (audit.skills) lines.push(`<b>Skills</b> ${escapeHtml(audit.skills)}`);
-    if (audit.limits) lines.push(`<b>Limits</b> ${escapeHtml(audit.limits)}`);
-    if (audit.channel) lines.push(`<b>Channel</b> ${escapeHtml(audit.channel)}`);
-    if (audit.memoryBank) lines.push(`<b>Memory</b> ${escapeHtml(audit.memoryBank)}`);
+    if (audit.version) lines.push(`**Version** ${escapeHtml(audit.version)}`);
+    if (meta.extendsProfile) lines.push(`**Profile** ${escapeHtml(meta.extendsProfile)}`);
+    if (audit.tools) lines.push(`**Tools** ${escapeHtml(audit.tools)}`);
+    if (audit.toolsDeny) lines.push(`**Deny** ${escapeHtml(audit.toolsDeny)}`);
+    if (audit.skills) lines.push(`**Skills** ${escapeHtml(audit.skills)}`);
+    if (audit.limits) lines.push(`**Limits** ${escapeHtml(audit.limits)}`);
+    if (audit.channel) lines.push(`**Channel** ${escapeHtml(audit.channel)}`);
+    if (audit.memoryBank) lines.push(`**Memory** ${escapeHtml(audit.memoryBank)}`);
   }
 
   return lines.join("\n");
@@ -254,7 +253,7 @@ export function statusPairedText(params: {
  * `/status` when the sender isn't paired yet but has a pending code.
  */
 export function statusPendingText(code: string): string {
-  return `Pending pairing — run in Claude Code:\n\n<code>/telegram:access pair ${escapeHtml(code)}</code>`;
+  return `Pending pairing — run in Claude Code:\n\n\`/telegram:access pair ${code}\``;
 }
 
 /**
@@ -367,55 +366,55 @@ export const TELEGRAM_SWITCHROOM_COMMANDS = TELEGRAM_MENU_COMMANDS.slice(3);
 
 export function switchroomHelpText(agentName: string): string {
   return [
-    `<b>Switchroom bot</b> — commands for the <b>${escapeHtml(agentName)}</b> agent.`,
+    `**Switchroom bot** — commands for the **${escapeHtml(agentName)}** agent.`,
     ``,
-    `<b>Session &amp; approvals</b>`,
-    `<code>/new</code> — fresh session (flush handoff, restart)`,
-    `<code>/compact</code> — compact context (summarize, keep the thread)`,
-    `<code>/clear</code> — clear context (fresh slate; memory in Hindsight)`,
-    `<code>/approve [id]</code> — approve pending tool permission`,
-    `<code>/deny [id]</code> — deny pending tool permission`,
-    `<code>/pending</code> — list pending permission prompts`,
-    `<code>/interrupt [name]</code> — interrupt an agent turn`,
+    `**Session & approvals**`,
+    `\`/new\` — fresh session (flush handoff, restart)`,
+    `\`/compact\` — compact context (summarize, keep the thread)`,
+    `\`/clear\` — clear context (fresh slate; memory in Hindsight)`,
+    `\`/approve [id]\` — approve pending tool permission`,
+    `\`/deny [id]\` — deny pending tool permission`,
+    `\`/pending\` — list pending permission prompts`,
+    `\`/interrupt [name]\` — interrupt an agent turn`,
     ``,
-    `<b>Agents</b>`,
-    `<code>/agents</code> — list all agents`,
-    `<code>/agentstart [name]</code> — start an agent`,
-    `<code>/stop [name]</code> — stop an agent`,
-    `<code>/logs [name] [lines]</code> — show agent logs`,
-    `<code>/memory &lt;query&gt;</code> — search agent memory`,
+    `**Agents**`,
+    `\`/agents\` — list all agents`,
+    `\`/agentstart [name]\` — start an agent`,
+    `\`/stop [name]\` — stop an agent`,
+    `\`/logs [name] [lines]\` — show agent logs`,
+    `\`/memory <query>\` — search agent memory`,
     ``,
-    `<b>Fleet management</b>`,
-    `<code>/upgradestatus</code> — read-only: CLI version, image age, container age per service`,
-    `<code>/update</code> — dry-run plan; <code>/update apply</code> — actually pull images, reconcile, restart`,
-    `<code>/restart [name|all]</code> — bounce agent (drains in-flight turn by default)`,
-    `<code>/version</code> — show versions + running agent health summary`,
-    `<code>/whoami</code> — this agent's sandbox: tools, MCP, vault key-names, powers`,
+    `**Fleet management**`,
+    `\`/upgradestatus\` — read-only: CLI version, image age, container age per service`,
+    `\`/update\` — dry-run plan; \`/update apply\` — actually pull images, reconcile, restart`,
+    `\`/restart [name|all]\` — bounce agent (drains in-flight turn by default)`,
+    `\`/version\` — show versions + running agent health summary`,
+    `\`/whoami\` — this agent's sandbox: tools, MCP, vault key-names, powers`,
     ``,
-    `<b>Auth &amp; config</b>`,
-    `<code>/auth</code> — auth status or actions`,
-    `<code>/auth add [agent]</code> — add a new account slot (fallback pool)`,
-    `<code>/auth list [agent]</code> — list account slots and health`,
-    `<code>/auth use [agent] &lt;slot&gt;</code> — switch active slot and restart`,
-    `<code>/auth rm [agent] &lt;slot&gt; [--force]</code> — remove a slot`,
-    `<code>/model</code> — show the configured Claude model`,
-    `<code>/model &lt;name&gt;</code> — switch the live session's model (opus · sonnet · haiku or a full id; until restart)`,
-    `<code>/effort</code> — show or switch reasoning effort (low · medium · high · xhigh · max; until restart)`,
-    `<code>/topics</code> — topic-to-agent mappings`,
-    `<code>/permissions [agent]</code> — show agent permissions`,
-    `<code>/grant &lt;tool&gt;</code> — grant a tool permission`,
-    `<code>/dangerous [off]</code> — toggle full tool access`,
-    `<code>/vault list|get|set|delete</code> — manage encrypted secrets`,
-    `<code>/vault status</code> — show broker state (locked/unlocked, uptime, key count)`,
-    `<code>/vault unlock</code> — unlock the broker (prompts for passphrase via Telegram)`,
-    `<code>/vault lock</code> — lock the broker`,
-    `<code>/vault grants [agent]</code> — list active capability grants (tap to revoke)`,
-    `<code>/doctor</code> — health check (deps, services, MCP)`,
-    `<code>/usage</code> — Pro/Max plan quota (5h + 7d windows)`,
-    `<code>/inject &lt;slash&gt;</code> — inject a Claude Code REPL slash command (e.g. <code>/inject /cost</code>; allowlisted)`,
-    `<code>/commands</code> — this help`,
+    `**Auth & config**`,
+    `\`/auth\` — auth status or actions`,
+    `\`/auth add [agent]\` — add a new account slot (fallback pool)`,
+    `\`/auth list [agent]\` — list account slots and health`,
+    `\`/auth use [agent] <slot>\` — switch active slot and restart`,
+    `\`/auth rm [agent] <slot> [--force]\` — remove a slot`,
+    `\`/model\` — show the configured Claude model`,
+    `\`/model <name>\` — switch the live session's model (opus · sonnet · haiku or a full id; until restart)`,
+    `\`/effort\` — show or switch reasoning effort (low · medium · high · xhigh · max; until restart)`,
+    `\`/topics\` — topic-to-agent mappings`,
+    `\`/permissions [agent]\` — show agent permissions`,
+    `\`/grant <tool>\` — grant a tool permission`,
+    `\`/dangerous [off]\` — toggle full tool access`,
+    `\`/vault list|get|set|delete\` — manage encrypted secrets`,
+    `\`/vault status\` — show broker state (locked/unlocked, uptime, key count)`,
+    `\`/vault unlock\` — unlock the broker (prompts for passphrase via Telegram)`,
+    `\`/vault lock\` — lock the broker`,
+    `\`/vault grants [agent]\` — list active capability grants (tap to revoke)`,
+    `\`/doctor\` — health check (deps, services, MCP)`,
+    `\`/usage\` — Pro/Max plan quota (5h + 7d windows)`,
+    `\`/inject <slash>\` — inject a Claude Code REPL slash command (e.g. \`/inject /cost\`; allowlisted)`,
+    `\`/commands\` — this help`,
     ``,
-    `<i>Tip: <code>/update</code> shows the plan; <code>/update apply</code> executes it; <code>/restart</code> bounces a stuck agent; <code>/version</code> checks what's running.</i>`,
+    `_Tip: \`/update\` shows the plan; \`/update apply\` executes it; \`/restart\` bounces a stuck agent; \`/version\` checks what's running._`,
   ].join("\n");
 }
 
@@ -424,10 +423,10 @@ export function switchroomHelpText(agentName: string): string {
  * Centralized so gateway and monolith agree on wording.
  */
 export function restartAckText(agentName: string): string {
-  return `🔄 Restarting <b>${escapeHtml(agentName)}</b>…`;
+  return `🔄 Restarting **${escapeHtml(agentName)}**…`;
 }
 
 export function newSessionAckText(agentName: string, flushedHandoff: boolean): string {
   const tail = flushedHandoff ? " · flushed handoff" : "";
-  return `🆕 Started fresh session for <b>${escapeHtml(agentName)}</b>${tail} · restarting…`;
+  return `🆕 Started fresh session for **${escapeHtml(agentName)}**${tail} · restarting…`;
 }

package/telegram-plugin/worker-activity-feed.ts

@@ -155,11 +155,11 @@ export function renderWorkerActivity(v: WorkerActivityView, liveSuffix = ''): st
   })
   if (card == null) {
     // Unreachable (header always present) — defensive.
-    return `🛠 <b>Worker</b> · <i>starting…</i>`
+    return `🛠 **Worker** · _starting…_`
   }
   if (!finished && steps.length === 0) {
     // Header-only running render → append the starting placeholder.
-    return `${card}\n<i>starting…</i>`
+    return `${card}\n_starting…_`
   }
   return card
 }
@@ -285,7 +285,6 @@ export function createWorkerActivityFeed(opts: WorkerActivityFeedOpts): WorkerAc
 
   function sendOptsFor(h: WorkerHandle): Record<string, unknown> {
     return {
-      parse_mode: 'HTML',
       disable_web_page_preview: true,
       // Sub-agent progress card is a status surface, never the user's
       // answer — silence the open ping. (editMessageText ignores