switchroom 0.16.24 → 0.16.27

package/dist/cli/switchroom.js

@@ -29230,7 +29230,8 @@ var init_protocol3 = __esm(() => {
       skip_images: exports_external.boolean().optional(),
       rebuild: exports_external.boolean().optional(),
       channel: exports_external.enum(["dev", "rc", "latest"]).nullable().optional(),
-      pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional()
+      pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional(),
+      reason: exports_external.string().max(512).optional()
     }).optional()
   });
   ApplyRequestSchema = exports_external.object({
@@ -29245,21 +29246,24 @@ var init_protocol3 = __esm(() => {
       pin: exports_external.string().regex(/^v\d+\.\d+\.\d+$/),
       agents: exports_external.array(AgentNameSchema2).min(1).optional(),
       skip_web: exports_external.boolean().optional(),
-      allow_downgrade: exports_external.boolean().optional()
+      allow_downgrade: exports_external.boolean().optional(),
+      reason: exports_external.string().max(512).optional()
     }).required({ pin: true })
   });
   AgentStartRequestSchema = exports_external.object({
     ...RequestEnvelope,
     op: exports_external.literal("agent_start"),
     args: exports_external.object({
-      name: AgentNameSchema2
+      name: AgentNameSchema2,
+      reason: exports_external.string().max(512).optional()
     })
   });
   AgentStopRequestSchema = exports_external.object({
     ...RequestEnvelope,
     op: exports_external.literal("agent_stop"),
     args: exports_external.object({
-      name: AgentNameSchema2
+      name: AgentNameSchema2,
+      reason: exports_external.string().max(512).optional()
     })
   });
   AgentLogsRequestSchema = exports_external.object({
@@ -29267,7 +29271,8 @@ var init_protocol3 = __esm(() => {
     op: exports_external.literal("agent_logs"),
     args: exports_external.object({
       name: AgentNameSchema2,
-      tail: exports_external.number().int().positive().max(2000).optional()
+      tail: exports_external.number().int().positive().max(2000).optional(),
+      reason: exports_external.string().max(512).optional()
     })
   });
   AgentExecRequestSchema = exports_external.object({
@@ -29275,7 +29280,8 @@ var init_protocol3 = __esm(() => {
     op: exports_external.literal("agent_exec"),
     args: exports_external.object({
       name: AgentNameSchema2,
-      argv: exports_external.array(exports_external.string().min(1)).min(1).max(32)
+      argv: exports_external.array(exports_external.string().min(1)).min(1).max(32),
+      reason: exports_external.string().max(512).optional()
     })
   });
   DoctorRequestSchema = exports_external.object({
@@ -51263,7 +51269,10 @@ async function dispatchTool2(name, args) {
         v: 1,
         op: "agent_start",
         request_id: makeRequestId("mcp-start"),
-        args: { name: args.name }
+        args: {
+          name: args.name,
+          ...args.reason ? { reason: args.reason } : {}
+        }
       };
       break;
     }
@@ -51274,7 +51283,10 @@ async function dispatchTool2(name, args) {
         v: 1,
         op: "agent_stop",
         request_id: makeRequestId("mcp-stop"),
-        args: { name: args.name }
+        args: {
+          name: args.name,
+          ...args.reason ? { reason: args.reason } : {}
+        }
       };
       break;
     }
@@ -51287,7 +51299,8 @@ async function dispatchTool2(name, args) {
         request_id: makeRequestId("mcp-logs"),
         args: {
           name: args.name,
-          ...typeof args.tail === "number" ? { tail: args.tail } : {}
+          ...typeof args.tail === "number" ? { tail: args.tail } : {},
+          ...args.reason ? { reason: args.reason } : {}
         }
       };
       break;
@@ -51302,7 +51315,11 @@ async function dispatchTool2(name, args) {
         v: 1,
         op: "agent_exec",
         request_id: makeRequestId("mcp-exec"),
-        args: { name: args.name, argv: args.argv }
+        args: {
+          name: args.name,
+          argv: args.argv,
+          ...args.reason ? { reason: args.reason } : {}
+        }
       };
       break;
     }
@@ -51329,7 +51346,8 @@ async function dispatchTool2(name, args) {
           ...args.skip_images ? { skip_images: true } : {},
           ...args.rebuild ? { rebuild: true } : {},
           ...args.channel ? { channel: args.channel } : {},
-          ...args.pin ? { pin: args.pin } : {}
+          ...args.pin ? { pin: args.pin } : {},
+          ...args.reason ? { reason: args.reason } : {}
         }
       };
       break;
@@ -51352,7 +51370,8 @@ async function dispatchTool2(name, args) {
           pin: args.pin,
           ...args.agents ? { agents: args.agents } : {},
           ...args.skip_web ? { skip_web: true } : {},
-          ...args.allow_downgrade ? { allow_downgrade: true } : {}
+          ...args.allow_downgrade ? { allow_downgrade: true } : {},
+          ...args.reason ? { reason: args.reason } : {}
         }
       };
       break;
@@ -51503,11 +51522,16 @@ var init_server4 = __esm(() => {
     },
     {
       name: "agent_start",
-      description: "Start a stopped agent. Self-targeting allowed; cross-agent " + "requires admin. Equivalent to `switchroom agent start <name>`.",
+      description: "Start a stopped agent. Self-targeting allowed; cross-agent " + "requires admin. Equivalent to `switchroom agent start <name>`. " + "This is operator-gated \u2014 every call surfaces a Telegram approval " + "card. ALWAYS pass a one-line `reason` explaining why you're " + "starting this agent; it renders on the card's `why:` line so the " + "operator can decide in context.",
       inputSchema: {
         type: "object",
         required: ["name"],
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           name: {
             type: "string",
             pattern: "^[a-zA-Z0-9][a-zA-Z0-9_-]*$"
@@ -51517,11 +51541,16 @@ var init_server4 = __esm(() => {
     },
     {
       name: "agent_stop",
-      description: "Stop a running agent. Self-targeting allowed; cross-agent " + "requires admin. Equivalent to `switchroom agent stop <name>`.",
+      description: "Stop a running agent. Self-targeting allowed; cross-agent " + "requires admin. Equivalent to `switchroom agent stop <name>`. " + "This is operator-gated \u2014 every call surfaces a Telegram approval " + "card. ALWAYS pass a one-line `reason` explaining why you're " + "stopping this agent; it renders on the card's `why:` line so the " + "operator can decide in context.",
       inputSchema: {
         type: "object",
         required: ["name"],
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           name: {
             type: "string",
             pattern: "^[a-zA-Z0-9][a-zA-Z0-9_-]*$"
@@ -51539,11 +51568,16 @@ var init_server4 = __esm(() => {
     },
     {
       name: "agent_logs",
-      description: "Read recent docker logs of any peer agent. Self-target is " + "always allowed; cross-agent requires admin: true on the caller. " + "Returns the trailing `tail` lines (default 100, max 2000) as " + "`stdout_tail` / `stderr_tail` (each capped at 4 KiB). Use this " + "for triage when a user reports a peer agent is misbehaving.",
+      description: "Read recent docker logs of any peer agent. Self-target is " + "always allowed; cross-agent requires admin: true on the caller. " + "Returns the trailing `tail` lines (default 100, max 2000) as " + "`stdout_tail` / `stderr_tail` (each capped at 4 KiB). Use this " + "for triage when a user reports a peer agent is misbehaving. " + "This is operator-gated \u2014 every call surfaces a Telegram approval " + "card. ALWAYS pass a one-line `reason` explaining what you're " + "triaging; it renders on the card's `why:` line.",
       inputSchema: {
         type: "object",
         required: ["name"],
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           name: {
             type: "string",
             pattern: "^[a-zA-Z0-9][a-zA-Z0-9_-]*$",
@@ -51558,11 +51592,16 @@ var init_server4 = __esm(() => {
     },
     {
       name: "agent_exec",
-      description: "Run a read-only inspection command inside a peer agent's " + "container via `docker exec`. Self-target allowed; cross-agent " + "requires admin: true. argv[0] must be on the daemon's read-only " + "allowlist (cat, df, du, free, grep, head, hostname, id, " + "ls, ps, pwd, stat, tail, uname, uptime, wc, whoami). Anything " + "outside the allowlist returns `denied` with a pointer to the " + "deferred host_os.exec approval-kernel scope. Returns stdout/" + "stderr tails capped at 4 KiB each.",
+      description: "Run a read-only inspection command inside a peer agent's " + "container via `docker exec`. Self-target allowed; cross-agent " + "requires admin: true. argv[0] must be on the daemon's read-only " + "allowlist (cat, df, du, free, grep, head, hostname, id, " + "ls, ps, pwd, stat, tail, uname, uptime, wc, whoami). Anything " + "outside the allowlist returns `denied` with a pointer to the " + "deferred host_os.exec approval-kernel scope. Returns stdout/" + "stderr tails capped at 4 KiB each. This is operator-gated \u2014 every " + "call surfaces a Telegram approval card. ALWAYS pass a one-line " + "`reason` explaining why you're running this inspection; it renders " + "on the card's `why:` line so the operator can decide in context.",
       inputSchema: {
         type: "object",
         required: ["name", "argv"],
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           name: {
             type: "string",
             pattern: "^[a-zA-Z0-9][a-zA-Z0-9_-]*$"
@@ -51579,10 +51618,15 @@ var init_server4 = __esm(() => {
     },
     {
       name: "update_apply",
-      description: "Execute a fleet-wide update: pull images, regenerate " + "scaffolds, recreate containers. Admin-only at the wire layer. " + "Returns `started` once dispatched \u2014 the actual work runs " + "async on the host and the caller's own agent container will " + "be recreated as part of the cycle.",
+      description: "Execute a fleet-wide update: pull images, regenerate " + "scaffolds, recreate containers. Admin-only at the wire layer. " + "Returns `started` once dispatched \u2014 the actual work runs " + "async on the host and the caller's own agent container will " + "be recreated as part of the cycle. This is operator-gated \u2014 every " + "call surfaces a Telegram approval card. ALWAYS pass a one-line " + "`reason` explaining why you're applying this update; it renders on " + "the card's `why:` line so the operator can decide in context.",
       inputSchema: {
         type: "object",
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           skip_images: {
             type: "boolean",
             description: "Skip the `docker compose pull` step. Useful when local " + "images are already at the desired tag."
@@ -51606,11 +51650,16 @@ var init_server4 = __esm(() => {
     },
     {
       name: "rollout",
-      description: "SAFELY roll the fleet to a pinned SEMVER version, staggered and " + "canary-gated (#2487). Unlike update_apply (a blunt all-at-once " + "recreate), this restarts agents one at a time canary-first, asserts " + "each agent's in-container `switchroom --version` matches the target, " + "and STOPS on the first mismatch \u2014 so a bad build fails on the canary " + "before touching the rest of the fleet. The durable release.pin is " + "persisted only AFTER the canary confirms (a failed canary never " + "strands a bad pin). `pin` MUST be a tagged semver (vX.Y.Z) \u2014 sha " + "pins are rejected because the version assert needs a semver to " + "compare against. The hostd/web self-refresh is DEFERRED on this path " + "(an agent-invoked rollout cannot recreate its own hostd container " + "without killing itself); run that host-side. By default downgrade pins " + "are rejected \u2014 pass `allow_downgrade: true` for the operator-approved " + "rollback path to a known-good earlier tag; all other safety rails " + "(canary order, version-assert, stop-on-mismatch) apply unchanged. " + "Admin-only at the wire layer AND deliberately NOT pre-approved \u2014 every " + "call surfaces a Telegram approval card for the operator to tap. " + "Returns `started`; poll get_status for the structured outcome " + "(which agents rolled / where it stopped).",
+      description: "SAFELY roll the fleet to a pinned SEMVER version, staggered and " + "canary-gated (#2487). Unlike update_apply (a blunt all-at-once " + "recreate), this restarts agents one at a time canary-first, asserts " + "each agent's in-container `switchroom --version` matches the target, " + "and STOPS on the first mismatch \u2014 so a bad build fails on the canary " + "before touching the rest of the fleet. The durable release.pin is " + "persisted only AFTER the canary confirms (a failed canary never " + "strands a bad pin). `pin` MUST be a tagged semver (vX.Y.Z) \u2014 sha " + "pins are rejected because the version assert needs a semver to " + "compare against. The hostd/web self-refresh is DEFERRED on this path " + "(an agent-invoked rollout cannot recreate its own hostd container " + "without killing itself); run that host-side. By default downgrade pins " + "are rejected \u2014 pass `allow_downgrade: true` for the operator-approved " + "rollback path to a known-good earlier tag; all other safety rails " + "(canary order, version-assert, stop-on-mismatch) apply unchanged. " + "Admin-only at the wire layer AND deliberately NOT pre-approved \u2014 every " + "call surfaces a Telegram approval card for the operator to tap. " + "ALWAYS pass a one-line `reason` explaining why you're rolling the " + "fleet to this pin; it renders on the card's `why:` line so the " + "operator can decide in context. " + "Returns `started`; poll get_status for the structured outcome " + "(which agents rolled / where it stopped).",
       inputSchema: {
         type: "object",
         required: ["pin"],
         properties: {
+          reason: {
+            type: "string",
+            maxLength: 512,
+            description: "One-line operator-facing rationale, rendered on the " + "approval card's `why:` line."
+          },
           pin: {
             type: "string",
             pattern: "^v\\d+\\.\\d+\\.\\d+$",
@@ -51692,8 +51741,8 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.23";
-var COMMIT_SHA = "3c17304c";
+var VERSION = "0.16.27";
+var COMMIT_SHA = "68a4feed";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -53099,8 +53148,10 @@ value back into chat.
 
 ### Formatting \u2014 make it scannable
 
-\`reply\` and \`stream_reply\` render Markdown as Telegram HTML for you, so
-\`**bold**\` becomes bold and backtick-wrapped text becomes monospace. Use it.
+\`reply\` and \`stream_reply\` render rich Markdown (Bot API 10.1) for you, so
+\`**bold**\` becomes bold and backtick-wrapped text becomes monospace. Your full
+formatting floor card \u2014 the toolkit and when to reach for each \u2014 is injected
+into your system prompt every session; this is the conversational summary.
 
 - **A one- or two-line conversational reply needs almost no markup.** Keep
   bold for the single fact that matters, never for decoration. "on it, pulling
@@ -53122,11 +53173,9 @@ value back into chat.
   \u2022 flag anything user-facing
 
   **Back in** ~2 min with a synthesized summary.
-- Bullets stay one level deep \u2014 Telegram flattens nested lists awkwardly. Use
-  backtick-wrapped \`inline code\` for filenames, commands, and identifiers.
-- Don't use Markdown headings (\`#\` / \`##\`) in a reply \u2014 bold the label
-  instead (\`**Blockers**\`, not \`## Blockers\`). Keep lines short; long
-  unwrapped lines are hard to read on a phone.
+- Use backtick-wrapped \`inline code\` for filenames, commands, and
+  identifiers. Keep lines short; long unwrapped lines are hard to read on a
+  phone.
 
 Every turn that answers a user message ends with a user-visible
 \`reply\` (or \`stream_reply\` done=true) \u2014 Telegram is all the user
@@ -53211,6 +53260,47 @@ belongs in plain config, not the vault. If a tool call is **blocked for
 containing a vaulted secret**, report that exact block message to the
 operator and stop \u2014 don't theorise about auth or tokens; it just means
 a stored value reached a tool argument.`;
+var TELEGRAM_FORMATTING_FLOOR_CARD = `## Formatting for Telegram
+
+You're writing for a phone screen in Telegram. Every reply renders as rich Markdown
+(Bot API 10.1). Format to make the message **scannable and easy to read**, not
+decorated. These are communication tools \u2014 use them with judgment. Most short replies
+need none of them.
+
+### Mechanical rules (always)
+- Separate paragraphs with a blank line (\`\\n\\n\`). A single newline collapses onto the
+  same line and reads as a wall of text.
+- Keep paragraphs short \u2014 1 to 4 lines. Break before the reader has to work for it.
+- Hard cap is 32768 characters. Long before that, ask whether a wall of text is the
+  right answer at all.
+
+### The toolkit, and when to reach for each
+- **Bold** \u2014 the one key fact or the answer. Not every noun. If everything is bold,
+  nothing is.
+- *Italic* \u2014 light emphasis, asides, labels.
+- \`code spans\` \u2014 every identifier: filenames, commands, config keys, agent / account /
+  slot names, error codes. Tap-to-copy, and visually distinct from prose.
+- Code fences \u2014 multi-line output: diffs, logs, command blocks, JSON. Add a language
+  hint (\` \`\`\`diff \`, \` \`\`\`json \`) when it sharpens the render.
+- Bulleted list \u2014 3+ parallel items the reader will scan or compare. Never for a single
+  thought or a flowing narrative.
+- Numbered list \u2014 ordered steps or ranked items.
+- Tables \u2014 2-D data only (rows \u00d7 columns): per-account usage, status fields. Overkill
+  for a flat list.
+- Headings \u2014 only in a long, multi-section answer. Clutter on a short reply.
+- Blockquotes (\`>\`) \u2014 quoted text or indented continuation. Telegram drops leading
+  spaces, so use \`>\`, never literal indentation.
+- Dividers (\`---\`) \u2014 between genuinely separate sections. Heavy; use sparingly.
+
+### The why
+Structure exists for the reader, not the writer. A two-item bullet list is worse than a
+sentence. A heading on a three-line reply is noise. Reach for structure only when it
+**reduces the reader's effort** \u2014 parallel options, scannable data, ordered steps \u2014 and
+stay in prose when the thought is connected. When in doubt: shorter and plainer wins.
+
+Every turn that answers a user message ends with a user-visible \`reply\` (or
+\`stream_reply\` done=true) \u2014 Telegram is all the user sees; your terminal output
+never reaches them.`;
 function renderFleetInvariants() {
   return [
     "<!--",
@@ -54148,7 +54238,10 @@ function buildWorkspaceContext(args) {
     })(),
     systemPromptAppendShellQuoted: (() => {
       const baseAppend = agentConfig.system_prompt_append ?? "";
-      return baseAppend.length > 0 ? shellSingleQuote(baseAppend) : undefined;
+      const combined = baseAppend.length > 0 ? `${TELEGRAM_FORMATTING_FLOOR_CARD}
+
+${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
+      return shellSingleQuote(combined);
     })(),
     extraCliArgs: (() => {
       const parts = [];
@@ -55261,7 +55354,10 @@ function reconcileAgent(name, agentConfigRaw, agentsDir, telegramConfig, switchr
       model: agentConfig.model,
       systemPromptAppendShellQuoted: (() => {
         const baseAppend = agentConfig.system_prompt_append ?? "";
-        return baseAppend.length > 0 ? shellSingleQuote(baseAppend) : undefined;
+        const combined = baseAppend.length > 0 ? `${TELEGRAM_FORMATTING_FLOOR_CARD}
+
+${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
+        return shellSingleQuote(combined);
       })(),
       extraCliArgs: (() => {
         const parts = [];
@@ -86658,17 +86754,11 @@ async function provisionLiteLLMKeys(config, agentNames, switchroomConfigPath, ct
   ]);
   const passphrase = await resolveOperatorVaultPassphrase(ctx.home ?? homedir46());
   if (passphrase === null) {
-    for (const { name } of optedIn) {
-      failures.push({
-        agent: name,
-        message: `litellm: cannot write virtual key \u2014 no operator vault passphrase available ` + `(set SWITCHROOM_VAULT_PASSPHRASE, or enable auto-unlock with 'switchroom vault broker enable-auto-unlock'). The broker refuses new keys without operator attestation.`
-      });
-    }
     const targets = [
       ...optedIn.map(({ name }) => name),
       ...needsHindsight ? ["hindsight (service)"] : []
     ];
-    ctx.writeErr(source_default.red(`  x litellm: no operator vault passphrase \u2014 skipping provisioning for ` + `${targets.join(", ")}. They will NOT get routing env until a key exists.
+    ctx.writeErr(source_default.yellow(`  \u26a0 litellm: vault passphrase unavailable \u2014 skipping new-key provisioning for ` + `${targets.join(", ")}. Already-provisioned keys are unaffected; run \`switchroom apply\` interactively to provision new agents.
 `));
     return;
   }
@@ -90926,6 +91016,14 @@ services:
       # have it, but hostd (auditing every shell-out via run-hook.sh's
       # pattern) is the controlled chokepoint.
       - /var/run/docker.sock:/var/run/docker.sock:rw
+      # /etc/machine-id passthrough \u2014 the vault auto-unlock blob
+      # (~/.switchroom/vault-auto-unlock) is encrypted with a key derived
+      # from the host machine-id. Without this mount, readAutoUnlockFile
+      # inside switchroom apply (called by rollout) cannot derive the
+      # decryption key, resolveOperatorVaultPassphrase returns null, LiteLLM
+      # provisioning fails for all agents, and rollout stops at apply.
+      # Same mount the vault-broker compose carries (compose.ts:1364).
+      - /etc/machine-id:/etc/machine-id:ro
     environment:
       # Hostd resolves homedir() to set the per-agent socket dir; pin
       # it inside the container to /host-home (which bind-mounts to the

package/dist/host-control/main.js

@@ -17243,7 +17243,8 @@ var UpdateApplyRequestSchema = exports_external.object({
     skip_images: exports_external.boolean().optional(),
     rebuild: exports_external.boolean().optional(),
     channel: exports_external.enum(["dev", "rc", "latest"]).nullable().optional(),
-    pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional()
+    pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional(),
+    reason: exports_external.string().max(512).optional()
   }).optional()
 });
 var ApplyRequestSchema = exports_external.object({
@@ -17258,21 +17259,24 @@ var RolloutRequestSchema = exports_external.object({
     pin: exports_external.string().regex(/^v\d+\.\d+\.\d+$/),
     agents: exports_external.array(AgentNameSchema).min(1).optional(),
     skip_web: exports_external.boolean().optional(),
-    allow_downgrade: exports_external.boolean().optional()
+    allow_downgrade: exports_external.boolean().optional(),
+    reason: exports_external.string().max(512).optional()
   }).required({ pin: true })
 });
 var AgentStartRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_start"),
   args: exports_external.object({
-    name: AgentNameSchema
+    name: AgentNameSchema,
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentStopRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_stop"),
   args: exports_external.object({
-    name: AgentNameSchema
+    name: AgentNameSchema,
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentLogsRequestSchema = exports_external.object({
@@ -17280,7 +17284,8 @@ var AgentLogsRequestSchema = exports_external.object({
   op: exports_external.literal("agent_logs"),
   args: exports_external.object({
     name: AgentNameSchema,
-    tail: exports_external.number().int().positive().max(2000).optional()
+    tail: exports_external.number().int().positive().max(2000).optional(),
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentExecRequestSchema = exports_external.object({
@@ -17288,7 +17293,8 @@ var AgentExecRequestSchema = exports_external.object({
   op: exports_external.literal("agent_exec"),
   args: exports_external.object({
     name: AgentNameSchema,
-    argv: exports_external.array(exports_external.string().min(1)).min(1).max(32)
+    argv: exports_external.array(exports_external.string().min(1)).min(1).max(32),
+    reason: exports_external.string().max(512).optional()
   })
 });
 var DoctorRequestSchema = exports_external.object({
@@ -22587,7 +22593,7 @@ import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:f
 import { dirname as dirname4, join as join2 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.23";
+var VERSION = "0.16.27";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
-  "version": "0.16.24",
-  "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw \u2014 no API keys.",
+  "version": "0.16.27",
+  "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
     "switchroom": "./dist/cli/switchroom.js"

package/telegram-plugin/answer-stream.ts

@@ -368,12 +368,13 @@ export function createAnswerStream(config: AnswerStreamConfig): AnswerStreamHand
         return undefined
       }
 
-      // Telegram caps a single message at 4096 chars. The streaming path
-      // already guards on this in sendOrEdit; materialize must too, or
-      // long answers silently drop the final push notification (Telegram
-      // returns 400, the catch swallows). Per the JTBD anti-pattern
-      // "silent failure of any kind", warn and bail explicitly so the
-      // operator can correlate.
+      // Telegram caps a single rich message at TELEGRAM_MAX_CHARS (32768,
+      // the Bot API 10.1 rich-message wire cap post-#2669 — NOT the legacy
+      // 4096 plain-text limit). The streaming path already guards on this in
+      // sendOrEdit; materialize must too, or long answers silently drop the
+      // final push notification (Telegram returns 400, the catch swallows).
+      // Per the JTBD anti-pattern "silent failure of any kind", warn and bail
+      // explicitly so the operator can correlate.
       if (textToSend.length > TELEGRAM_MAX_CHARS) {
         warn?.(
           `answer-stream: materialize — text exceeds ${TELEGRAM_MAX_CHARS} chars (got ${textToSend.length}); skipping. ` +

package/telegram-plugin/bridge/bridge.ts

@@ -137,7 +137,7 @@ const TOOL_SCHEMAS = [
   {
     name: 'stream_reply',
     description:
-      'Post the final answer for this turn. The plugin renders an event-driven progress card (Plan → Run → Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard-stops at 4096 chars — longer text throws; fall back to `reply`, which chunks. Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message — see `reply` for shape and constraints.',
+      'Post the final answer for this turn. The plugin renders an event-driven progress card (Plan → Run → Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard cap is 32768 chars (the rich-message wire limit) — longer text is dropped by a defensive guard, so use `reply` for anything that long (it chunks). Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message — see `reply` for shape and constraints.',
     inputSchema: {
       type: 'object',
       properties: {

package/telegram-plugin/dist/bridge/bridge.js

@@ -24687,7 +24687,7 @@ var TOOL_SCHEMAS = [
   },
   {
     name: "stream_reply",
-    description: "Post the final answer for this turn. The plugin renders an event-driven progress card (Plan \u2192 Run \u2192 Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard-stops at 4096 chars \u2014 longer text throws; fall back to `reply`, which chunks. Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message \u2014 see `reply` for shape and constraints.",
+    description: "Post the final answer for this turn. The plugin renders an event-driven progress card (Plan \u2192 Run \u2192 Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard cap is 32768 chars (the rich-message wire limit) \u2014 longer text is dropped by a defensive guard, so use `reply` for anything that long (it chunks). Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message \u2014 see `reply` for shape and constraints.",
     inputSchema: {
       type: "object",
       properties: {