switchroom 0.16.24 → 0.16.27

package/telegram-plugin/dist/gateway/gateway.js

@@ -6588,9 +6588,17 @@ function richMessage(markdown) {
 function isParseEntitiesError(err) {
   if (!(err instanceof import_grammy.GrammyError) || err.error_code !== 400)
     return false;
+  if (isLengthError(err))
+    return false;
   const d = (err.description || "").toLowerCase();
   return d.includes("can't parse entities") || d.includes("can\u2019t parse entities") || d.includes("can't parse") || d.includes("can\u2019t parse") || d.includes("parse markdown") || d.includes("parse rich") || d.includes("can't find end of the entity") || d.includes("can\u2019t find end of the entity") || d.includes("unsupported start tag") || d.includes("unclosed start tag") || d.includes("expected end tag");
 }
+function isLengthError(err) {
+  if (!(err instanceof import_grammy.GrammyError) || err.error_code !== 400)
+    return false;
+  const d = (err.description || "").toLowerCase();
+  return d.includes("rich_message_text_too_long") || d.includes("message_too_long") || d.includes("text_too_long") || d.includes("message is too long") || d.includes("text is too long");
+}
 var import_grammy;
 var init_rich_send = __esm(() => {
   import_grammy = __toESM(require_mod2(), 1);
@@ -33006,7 +33014,7 @@ init_card_format();
 // status-no-truncate.ts
 var STATUS_ROLLING_LINES = 5;
 var STATUS_LINE_MAX = 200;
-var STATUS_CARD_CHAR_BUDGET = 4000;
+var STATUS_CARD_CHAR_BUDGET = RICH_MESSAGE_MAX_CHARS;
 var NESTED_PREFIX = "   \u21b3 ";
 
 // tool-activity-summary.ts
@@ -33545,6 +33553,23 @@ function isRecentTimeoutDuplicate(timeouts, sig, now, windowMs) {
   const at = timeouts.get(sig);
   return at != null && now - at <= windowMs;
 }
+var PERMISSION_TTL_MS = 10 * 60000;
+var HOSTD_PERMISSION_TTL_MS = 30 * 60000;
+function ttlForTool(toolName) {
+  return toolName && toolName.startsWith("mcp__hostd__") ? HOSTD_PERMISSION_TTL_MS : PERMISSION_TTL_MS;
+}
+var TIMED_OUT_FOOTER = `
+
+\u23f1 Timed out \u2014 re-request to act`;
+function buildTimedOutCardEdits(cardText, cards) {
+  return cards.map(({ chatId, messageId }) => ({
+    chatId,
+    messageId,
+    text: `${cardText}${TIMED_OUT_FOOTER}`,
+    stripKeyboard: true
+  }));
+}
+var STALE_TAP_NOTICE = "This request already resolved (timed out) \u2014 ask again to act.";
 
 // gateway/permission-card-origin.ts
 function pickRecoveredPermissionOrigin(recentTurns, now, maxAgeMs) {
@@ -34452,7 +34477,7 @@ function streamKey2(chatId, threadId, lane, turnKey) {
 }
 async function handleStreamReply(args, state, deps) {
   const chat_id = args.chat_id;
-  const rawText = deps.repairEscapedWhitespace(args.text);
+  const rawText = deps.normalizeParagraphBreaks ? deps.normalizeParagraphBreaks(deps.repairEscapedWhitespace(args.text)) : deps.repairEscapedWhitespace(args.text);
   const done = Boolean(args.done);
   const format = args.format ?? deps.defaultFormat;
   if (done) {
@@ -34736,9 +34761,17 @@ async function retryWithThreadFallback(retry, send, opts) {
 function isHtmlParseRejectError(err) {
   if (!(err instanceof import_grammy2.GrammyError) || err.error_code !== 400)
     return false;
+  if (isMessageTooLongError(err))
+    return false;
   const d = (err.description || "").toLowerCase();
   return d.includes("can't parse entities") || d.includes("can\u2019t parse entities") || d.includes("can't parse") || d.includes("can\u2019t parse") || d.includes("parse markdown") || d.includes("parse rich") || d.includes("unsupported start tag") || d.includes("unclosed start tag") || d.includes("can't find end of the entity") || d.includes("can\u2019t find end of the entity") || d.includes("expected end tag");
 }
+function isMessageTooLongError(err) {
+  if (!(err instanceof import_grammy2.GrammyError) || err.error_code !== 400)
+    return false;
+  const d = (err.description || "").toLowerCase();
+  return d.includes("rich_message_text_too_long") || d.includes("message_too_long") || d.includes("text_too_long") || d.includes("message is too long") || d.includes("text is too long");
+}
 
 // shared/bot-runtime.ts
 var import_grammy4 = __toESM(require_mod2(), 1);
@@ -39603,7 +39636,7 @@ function decideOverPing(input) {
 }
 
 // silent-reply-anchor.ts
-var TELEGRAM_MSG_CAP = 4000;
+var TELEGRAM_MSG_CAP = RICH_MESSAGE_MAX_CHARS;
 function enabled2() {
   const v = process.env.SWITCHROOM_DISABLE_SILENT_REPLY_AUTOEDIT;
   return !(v === "1" || v === "true");
@@ -43235,8 +43268,14 @@ function repairEscapedWhitespace(text) {
   if (!/\\[nrt"\\]/.test(text))
     return text;
   const nonce = Math.random().toString(36).slice(2);
-  const CODE_MASK_PH = `\x00RM${nonce}_`;
   const BACKSLASH_PH = `\x00BK${nonce}_`;
+  const { masked, restore } = maskCodeRegions(text, nonce);
+  const unescaped = masked.replace(/\\\\/g, BACKSLASH_PH).replace(/\\n/g, `
+`).replace(/\\r/g, "\r").replace(/\\t/g, "\t").replace(/\\"/g, '"').replace(new RegExp(BACKSLASH_PH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), "\\");
+  return restore(unescaped);
+}
+function maskCodeRegions(text, nonce) {
+  const CODE_MASK_PH = `\x00RM${nonce}_`;
   const codeMasks = [];
   const masked = text.replace(/```[\s\S]*?```/g, (m) => {
     const idx = codeMasks.length;
@@ -43247,10 +43286,127 @@ function repairEscapedWhitespace(text) {
     codeMasks.push(m);
     return `${CODE_MASK_PH}${idx}\x00`;
   });
-  const unescaped = masked.replace(/\\\\/g, BACKSLASH_PH).replace(/\\n/g, `
-`).replace(/\\r/g, "\r").replace(/\\t/g, "\t").replace(/\\"/g, '"').replace(new RegExp(BACKSLASH_PH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), "\\");
   const restoreRe = new RegExp(`${CODE_MASK_PH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(\\d+)\x00`, "g");
-  return unescaped.replace(restoreRe, (_m, idx) => codeMasks[Number(idx)] ?? _m);
+  const restore = (s) => s.replace(restoreRe, (_m, idx) => codeMasks[Number(idx)] ?? _m);
+  return { masked, restore, placeholder: CODE_MASK_PH };
+}
+function normalizeParagraphBreaks(text) {
+  if (!text.includes(`
+`))
+    return text;
+  const nonce = Math.random().toString(36).slice(2);
+  const { masked, restore, placeholder } = maskCodeRegions(text, nonce);
+  let out = masked.replace(/\n{3,}/g, `
+
+`);
+  const lines = out.split(`
+`);
+  const pieces = [];
+  for (let i = 0;i < lines.length; i++) {
+    let line = lines[i];
+    const isLast = i === lines.length - 1;
+    const next = isLast ? "" : lines[i + 1];
+    const promote = !isLast && line.trim() !== "" && next.trim() !== "" && shouldPromoteBreak(line, next, placeholder);
+    if (promote) {
+      line = line.replace(/[ \t\r]+$/, "");
+    }
+    pieces.push(line);
+    if (isLast)
+      break;
+    pieces.push(promote ? `  
+` : `
+`);
+  }
+  out = pieces.join("");
+  out = ensureBlockBoundaries(out, placeholder);
+  return restore(out);
+}
+function isListItemLine(line) {
+  const t = line.trimStart();
+  return /^[-*+]\s/.test(t) || /^\d+[.)]\s/.test(t);
+}
+function isTableRowLine(line) {
+  return /^\s*\|/.test(line);
+}
+function isTableDelimiterLine(line) {
+  return /^\s*\|?\s*:?-{1,}:?\s*(\|\s*:?-{1,}:?\s*)*\|?\s*$/.test(line);
+}
+function isFenceOpenLine(line, placeholder) {
+  const t = line.trimStart();
+  if (placeholder != null && placeholder.length > 0 && t.startsWith(placeholder))
+    return true;
+  return t.startsWith("```");
+}
+function isBlockquoteLine(line) {
+  return line.trimStart().startsWith(">");
+}
+function isHeadingLine(line) {
+  return /^#{1,6}\s/.test(line.trimStart());
+}
+function ensureBlockBoundaries(text, placeholder) {
+  if (!text.includes(`
+`))
+    return text;
+  const lines = text.split(`
+`);
+  const result = [];
+  for (let i = 0;i < lines.length; i++) {
+    const line = lines[i];
+    const prev = result.length > 0 ? result[result.length - 1] : null;
+    const prevNonBlank = prev != null && prev.trim() !== "";
+    const curBlank = line.trim() === "";
+    if (prevNonBlank && !curBlank) {
+      const next = i + 1 < lines.length ? lines[i + 1] : "";
+      const prevIsTable = isTableRowLine(prev);
+      const startsTableHere = !prevIsTable && (line.includes("|") && isTableDelimiterLine(next) || isTableRowLine(line) && isTableDelimiterLine(next));
+      const startsFence = isFenceOpenLine(line, placeholder) && !isFenceOpenLine(prev, placeholder);
+      const startsQuote = isBlockquoteLine(line) && !isBlockquoteLine(prev);
+      const startsHeading = isHeadingLine(line) && !isHeadingLine(prev);
+      if (startsTableHere || startsFence || startsQuote || startsHeading) {
+        result.push("");
+      }
+    }
+    if (prevNonBlank && !curBlank && isListItemLine(prev) && !isListItemLine(line)) {
+      const isIndentedContinuation = /^(\t| {4,})\S/.test(line);
+      const alreadySeparated = result.length > 0 && result[result.length - 1].trim() === "";
+      if (!isIndentedContinuation && !alreadySeparated) {
+        result.push("");
+      }
+    }
+    result.push(line);
+  }
+  return result.join(`
+`);
+}
+function isMarkerLine(line, placeholder) {
+  if (/^ {4,}\S/.test(line))
+    return true;
+  const t = line.trimStart();
+  if (placeholder != null && placeholder.length > 0 && t.startsWith(placeholder))
+    return true;
+  return /^[-*+]\s/.test(t) || /^\d+[.)]\s/.test(t) || t.startsWith(">") || /^#{1,6}\s/.test(t) || t.startsWith("|") || line.includes(" | ") || t.startsWith("```") || /^(-{3,}|\*{3,}|_{3,})\s*$/.test(t);
+}
+function shouldPromoteBreak(prev, next, placeholder) {
+  if (isMarkerLine(prev, placeholder) || isMarkerLine(next, placeholder))
+    return false;
+  const nextTrimmed = next.trimStart();
+  if (nextTrimmed.length === 0)
+    return false;
+  const prevTrimmed = prev.trimEnd();
+  const unwrapped = prevTrimmed.replace(/[)"'\u2019\u201d\]]+$/, "");
+  const terminator = unwrapped.slice(-1);
+  return terminator === "." || terminator === "!" || terminator === "?" || terminator === ":";
+}
+function hardSliceToCap(text, cap = RICH_MESSAGE_MAX_CHARS2) {
+  if (cap <= 0)
+    return [text];
+  if (text.length <= cap)
+    return [text];
+  const out = [];
+  for (let i = 0;i < text.length; i += cap) {
+    out.push(text.slice(i, i + cap));
+  }
+  return out;
 }
 function splitMarkdownChunks(text, maxLen = RICH_MESSAGE_MAX_CHARS2) {
   if (text.length <= maxLen)
@@ -47227,7 +47383,8 @@ var UpdateApplyRequestSchema = exports_external.object({
     skip_images: exports_external.boolean().optional(),
     rebuild: exports_external.boolean().optional(),
     channel: exports_external.enum(["dev", "rc", "latest"]).nullable().optional(),
-    pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional()
+    pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).nullable().optional(),
+    reason: exports_external.string().max(512).optional()
   }).optional()
 });
 var ApplyRequestSchema = exports_external.object({
@@ -47242,21 +47399,24 @@ var RolloutRequestSchema = exports_external.object({
     pin: exports_external.string().regex(/^v\d+\.\d+\.\d+$/),
     agents: exports_external.array(AgentNameSchema2).min(1).optional(),
     skip_web: exports_external.boolean().optional(),
-    allow_downgrade: exports_external.boolean().optional()
+    allow_downgrade: exports_external.boolean().optional(),
+    reason: exports_external.string().max(512).optional()
   }).required({ pin: true })
 });
 var AgentStartRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_start"),
   args: exports_external.object({
-    name: AgentNameSchema2
+    name: AgentNameSchema2,
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentStopRequestSchema = exports_external.object({
   ...RequestEnvelope,
   op: exports_external.literal("agent_stop"),
   args: exports_external.object({
-    name: AgentNameSchema2
+    name: AgentNameSchema2,
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentLogsRequestSchema = exports_external.object({
@@ -47264,7 +47424,8 @@ var AgentLogsRequestSchema = exports_external.object({
   op: exports_external.literal("agent_logs"),
   args: exports_external.object({
     name: AgentNameSchema2,
-    tail: exports_external.number().int().positive().max(2000).optional()
+    tail: exports_external.number().int().positive().max(2000).optional(),
+    reason: exports_external.string().max(512).optional()
   })
 });
 var AgentExecRequestSchema = exports_external.object({
@@ -47272,7 +47433,8 @@ var AgentExecRequestSchema = exports_external.object({
   op: exports_external.literal("agent_exec"),
   args: exports_external.object({
     name: AgentNameSchema2,
-    argv: exports_external.array(exports_external.string().min(1)).min(1).max(32)
+    argv: exports_external.array(exports_external.string().min(1)).min(1).max(32),
+    reason: exports_external.string().max(512).optional()
   })
 });
 var DoctorRequestSchema = exports_external.object({
@@ -48480,7 +48642,7 @@ function validateClientMessage(msg) {
         return false;
       if (typeof m.chatId !== "string" || m.chatId.length === 0)
         return false;
-      if (typeof m.text !== "string" || m.text.length === 0 || m.text.length > 4096)
+      if (typeof m.text !== "string" || m.text.length === 0 || m.text.length > RICH_MESSAGE_MAX_CHARS)
         return false;
       if (m.threadId !== undefined && (typeof m.threadId !== "number" || !Number.isInteger(m.threadId)))
         return false;
@@ -49044,8 +49206,8 @@ function validateInput(input) {
 var DEFAULT_TTL_MS = 5 * 60 * 1000;
 var MAX_TTL_MS = 30 * 60 * 1000;
 var MIN_TTL_MS = 30 * 1000;
-var TELEGRAM_SENDMESSAGE_LIMIT = 4096;
-var RENDERED_BODY_CAP = 3900;
+var TELEGRAM_SENDMESSAGE_LIMIT = RICH_MESSAGE_MAX_CHARS;
+var RENDERED_BODY_CAP = RICH_MESSAGE_MAX_CHARS - 200;
 var OVERSIZE_SENTINEL = `
 [\u2026 preview truncated; open in Drive for full context]`;
 async function handleRequestDriveApproval(client3, msg, deps) {
@@ -54699,6 +54861,9 @@ var MCP_TOOL_DESCRIPTIONS = {
   mcp__hostd__agent_exec: "Run a read-only inspection inside another agent",
   mcp__hostd__update_check: "Check what a fleet-wide update would do",
   mcp__hostd__update_apply: "Apply a fleet-wide update (pull + recreate)",
+  mcp__hostd__rollout: "Roll the fleet to a pinned version",
+  mcp__hostd__config_propose_edit: "Propose an edit to switchroom.yaml",
+  mcp__hostd__get_status: "Read the last fleet-update status",
   mcp__hindsight__recall: "Recall relevant memories",
   mcp__hindsight__retain: "Retain a memory",
   mcp__hindsight__reflect: "Reflect across its memory bank",
@@ -55999,11 +56164,11 @@ function readTurnActiveMarkerAgeMs(stateDir, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.16.23";
-var COMMIT_SHA = "3c17304c";
-var COMMIT_DATE = "2026-06-30T08:50:37+10:00";
+var VERSION = "0.16.27";
+var COMMIT_SHA = "68a4feed";
+var COMMIT_DATE = "2026-06-30T14:02:23+10:00";
 var LATEST_PR = null;
-var COMMITS_AHEAD_OF_TAG = 6;
+var COMMITS_AHEAD_OF_TAG = 2;
 
 // gateway/boot-version.ts
 function formatRelativeAgo(iso) {
@@ -58946,7 +59111,6 @@ function logOutbound(path, chatId, messageId, chars, extra, opts) {
 var STATUS_QUERY_RE = /^\s*status\??\s*$/i;
 var PERMISSION_REPLY_RE = /^\s*(y|yes|n|no)\s+([a-km-z]{5})\s*$/i;
 var pendingPermissions = new Map;
-var PERMISSION_TTL_MS = 600000;
 var PERMISSION_NO_REPEAT_ENABLED = process.env.SWITCHROOM_PERMISSION_NO_REPEAT !== "0";
 var PERMISSION_DUPLICATE_WINDOW_MS = 3600000;
 var permissionTimeoutSignatures = new Map;
@@ -59188,14 +59352,16 @@ var pendingStateReaper = setInterval(() => {
       pendingVaultOps.delete(k);
   }
   for (const [k, v] of pendingPermissions) {
-    if (now - v.startedAt > PERMISSION_TTL_MS) {
-      const timeoutMinutes = Math.round(PERMISSION_TTL_MS / 60000);
+    const ttl = ttlForTool(v.tool_name);
+    if (now - v.startedAt > ttl) {
+      const timeoutMinutes = Math.round(ttl / 60000);
       dispatchPermissionVerdict({
         type: "permission",
         requestId: k,
         behavior: "deny",
         message: timeoutDenyMessage(timeoutMinutes)
       });
+      stripTimedOutPermissionCards(v.card_text, v.cards);
       resumeReactionAfterVerdict();
       postPermissionResumeMessage({
         behavior: "deny",
@@ -59837,6 +60003,11 @@ function buildPermissionActionRow(requestId, showAlways) {
     kb.text("\uD83D\uDD01 Always\u2026", `perm:always:${requestId}`);
   return kb;
 }
+async function stripTimedOutPermissionCards(cardText, cards) {
+  for (const edit of buildTimedOutCardEdits(cardText, cards)) {
+    await swallowingApiCall(() => bot.api.editMessageText(edit.chatId, edit.messageId, richMessage2(edit.text), {}), { chat_id: edit.chatId, verb: "permission_timeout.strip" });
+  }
+}
 function dispatchPermissionVerdict(ev) {
   const selfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
   const delivered = ipcServer.sendToAgent(selfAgent, ev);
@@ -60094,13 +60265,13 @@ var ipcServer = createIpcServer({
         return;
       }
     }
-    pendingPermissions.set(requestId, { tool_name: toolName, description, input_preview: inputPreview, startedAt: Date.now() });
     const text2 = formatPermissionCardBody({
       toolName,
       inputPreview,
       description,
       agentName: _client.agentName
     });
+    pendingPermissions.set(requestId, { tool_name: toolName, description, input_preview: inputPreview, startedAt: Date.now(), card_text: text2, cards: [] });
     const showAlways = resolveScopedAllowChoices(toolName, inputPreview) != null;
     const keyboard = buildPermissionActionRow(requestId, showAlways);
     const activeTurn = currentTurn;
@@ -60109,7 +60280,12 @@ var ipcServer = createIpcServer({
       retryWithThreadFallback(robustApiCall, (tid) => bot.api.sendRichMessage(chatId, richMessage2(text2), {
         reply_markup: keyboard,
         ...tid != null ? { message_thread_id: tid } : {}
-      }), { threadId, chat_id: chatId, verb: "permission_request" }).catch((e) => {
+      }), { threadId, chat_id: chatId, verb: "permission_request" }).then((sent) => {
+        const pend = pendingPermissions.get(requestId);
+        if (pend && sent && typeof sent.message_id === "number") {
+          pend.cards.push({ chatId, messageId: sent.message_id });
+        }
+      }).catch((e) => {
         process.stderr.write(`telegram gateway: permission_request send to ${chatId} failed: ${e}
 `);
       });
@@ -60757,7 +60933,7 @@ async function executeReply(args) {
   const rawText = args.text;
   if (rawText == null || rawText === "")
     throw new Error("reply: text is required and cannot be empty");
-  let text2 = repairEscapedWhitespace(rawText);
+  let text2 = normalizeParagraphBreaks(repairEscapedWhitespace(rawText));
   text2 = redactOutboundText(text2, "reply");
   {
     const scrub = scrubVoice(text2);
@@ -61102,6 +61278,24 @@ ${url}`;
         delete richOpts.link_preview_options;
         return lockedBot.api.sendRichMessage(chat_id, richMessage2(chunks[i]), richOpts);
       };
+      const sendChunkResplit = async (opts) => {
+        const subPieces = splitMarkdownChunks(chunks[i], RICH_MESSAGE_MAX_CHARS2);
+        const pieces = subPieces.length > 1 ? subPieces : hardSliceToCap(chunks[i], RICH_MESSAGE_MAX_CHARS2);
+        for (let p = 0;p < pieces.length; p++) {
+          let sent;
+          if (literalText) {
+            sent = await lockedBot.api.sendMessage(chat_id, pieces[p], opts);
+          } else {
+            const ro = { ...opts };
+            delete ro.link_preview_options;
+            sent = await lockedBot.api.sendRichMessage(chat_id, richMessage2(pieces[p]), ro);
+          }
+          sentIds.push(sent.message_id);
+          logOutbound("reply", chat_id, sent.message_id, pieces[p].length, `chunk=${i + 1}/${chunks.length} resplit=${p + 1}/${pieces.length}`);
+        }
+        process.stderr.write(`telegram gateway: rich body too long \u2014 re-split chunk ${i + 1}/${chunks.length} into ${pieces.length} piece(s)
+`);
+      };
       try {
         const sent = await robustApiCall(() => sendChunk(sendOpts), { threadId, chat_id });
         sentIds.push(sent.message_id);
@@ -61115,11 +61309,15 @@ ${url}`;
             const sent = await sendChunk(retryOpts);
             sentIds.push(sent.message_id);
           } catch (retryErr) {
-            if (isHtmlParseRejectError(retryErr))
+            if (isMessageTooLongError(retryErr))
+              await sendChunkResplit(retryOpts);
+            else if (isHtmlParseRejectError(retryErr))
               await sendChunkPlainText(retryOpts);
             else
               throw retryErr;
           }
+        } else if (isMessageTooLongError(err)) {
+          await sendChunkResplit(sendOpts);
         } else if (isHtmlParseRejectError(err)) {
           await sendChunkPlainText(sendOpts);
         } else {
@@ -61369,6 +61567,7 @@ async function executeStreamReply(args) {
     bot: lockedBot,
     retry: robustApiCall,
     repairEscapedWhitespace,
+    normalizeParagraphBreaks,
     assertAllowedChat,
     resolveThreadId,
     disableLinkPreview: access.disableLinkPreview !== false,
@@ -62199,6 +62398,8 @@ async function executeEditMessage(args) {
   const editFormat = args.format ?? (editAccess.parseMode ?? "html");
   const editLiteralText = editFormat === "text";
   let editRawText = repairEscapedWhitespace(args.text);
+  if (!editLiteralText)
+    editRawText = normalizeParagraphBreaks(editRawText);
   editRawText = redactOutboundText(editRawText, "edit_message");
   {
     const scrub = scrubVoice(editRawText);
@@ -64353,7 +64554,7 @@ function switchroomExecCombined(args, timeoutMs = 15000) {
     shell: "/bin/bash"
   });
 }
-function formatSwitchroomOutput(output, maxLen = 4000) {
+function formatSwitchroomOutput(output, maxLen = RICH_MESSAGE_MAX_CHARS2) {
   const trimmed = output.trim();
   if (trimmed.length <= maxLen)
     return trimmed;
@@ -68699,6 +68900,10 @@ ${editLabel}` : editLabel
     });
     return;
   }
+  if (!pendingPermissions.has(request_id)) {
+    await ctx.answerCallbackQuery({ text: STALE_TAP_NOTICE }).catch(() => {});
+    return;
+  }
   clearPermissionTimeoutSuppression("operator answered a permission card");
   const pd = pendingPermissions.get(request_id);
   const resumeAction = pd ? naturalAction(pd.tool_name, pd.input_preview) : "";

package/telegram-plugin/dist/server.js

@@ -24388,7 +24388,7 @@ var init_bridge = __esm(async () => {
     },
     {
       name: "stream_reply",
-      description: "Post the final answer for this turn. The plugin renders an event-driven progress card (Plan \u2192 Run \u2192 Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard-stops at 4096 chars \u2014 longer text throws; fall back to `reply`, which chunks. Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message \u2014 see `reply` for shape and constraints.",
+      description: "Post the final answer for this turn. The plugin renders an event-driven progress card (Plan \u2192 Run \u2192 Done with live tool bullets, elapsed time, and status emoji) for free while the turn is in-flight, so you do not need to narrate intermediate progress. Call `stream_reply` exactly once per turn with done=true and the complete answer text. Hard cap is 32768 chars (the rich-message wire limit) \u2014 longer text is dropped by a defensive guard, so use `reply` for anything that long (it chunks). Calling with done=false is an error in this environment (the progress card already owns the mid-turn surface). inline_keyboard adds tappable buttons under the final message \u2014 see `reply` for shape and constraints.",
       inputSchema: {
         type: "object",
         properties: {