switchroom 0.18.13 → 0.18.14

package/dist/cli/foreground-hog-pretool.mjs

@@ -0,0 +1,264 @@
+// src/cli/foreground-hog-pretool.ts
+import { readFileSync } from "node:fs";
+function gateEnabledFromEnv(env = process.env) {
+  const v = env.SWITCHROOM_FOREGROUND_HOG_GATE;
+  if (v == null)
+    return true;
+  const t = v.trim().toLowerCase();
+  return !(t === "0" || t === "false" || t === "off" || t === "no");
+}
+function blankQuotedAndHeredocs(src) {
+  const out = src.split("");
+  const n = src.length;
+  const pending = [];
+  let i = 0;
+  while (i < n) {
+    const ch = src[i];
+    if (ch === "\\") {
+      out[i] = " ";
+      if (i + 1 < n)
+        out[i + 1] = " ";
+      i += 2;
+      continue;
+    }
+    if (ch === "'") {
+      let j = i + 1;
+      while (j < n && src[j] !== "'")
+        j++;
+      if (j >= n)
+        return null;
+      for (let k = i;k <= j; k++)
+        out[k] = " ";
+      i = j + 1;
+      continue;
+    }
+    if (ch === '"') {
+      let j = i + 1;
+      while (j < n && src[j] !== '"') {
+        j += src[j] === "\\" ? 2 : 1;
+      }
+      if (j >= n)
+        return null;
+      for (let k = i;k <= j && k < n; k++)
+        out[k] = " ";
+      i = j + 1;
+      continue;
+    }
+    if (ch === "<" && src[i + 1] === "<") {
+      if (src[i + 2] === "<") {
+        i += 3;
+        continue;
+      }
+      let j = i + 2;
+      let stripTabs = false;
+      if (src[j] === "-") {
+        stripTabs = true;
+        j++;
+      }
+      while (j < n && (src[j] === " " || src[j] === "\t"))
+        j++;
+      let quote = "";
+      if (src[j] === "'" || src[j] === '"') {
+        quote = src[j];
+        j++;
+      }
+      let tag = "";
+      while (j < n && /[A-Za-z0-9_]/.test(src[j])) {
+        tag += src[j];
+        j++;
+      }
+      if (quote) {
+        if (src[j] !== quote)
+          return null;
+        j++;
+      }
+      if (!tag)
+        return null;
+      pending.push({ tag, stripTabs });
+      i = j;
+      continue;
+    }
+    if (ch === `
+` && pending.length > 0) {
+      let j = i + 1;
+      while (pending.length > 0) {
+        const { tag, stripTabs } = pending.shift();
+        let found = false;
+        while (j <= n) {
+          let eol = src.indexOf(`
+`, j);
+          if (eol === -1)
+            eol = n;
+          const line = src.slice(j, eol);
+          const cmp = stripTabs ? line.replace(/^\t+/, "") : line;
+          if (cmp === tag) {
+            found = true;
+            j = eol + 1;
+            break;
+          }
+          for (let k = j;k < eol; k++)
+            out[k] = " ";
+          if (eol === n) {
+            j = n + 1;
+            break;
+          }
+          j = eol + 1;
+        }
+        if (!found)
+          return null;
+      }
+      i = j;
+      continue;
+    }
+    i++;
+  }
+  return out.join("");
+}
+var LOOP_SLEEP = /\b(?:while|until|for)\b[\s\S]*?\bdo\b[\s\S]*?\bsleep\b[\s\S]*?\bdone\b/;
+function sleepSeconds(token) {
+  const m = /^(\d+(?:\.\d+)?)([smhd]?)$/.exec(token);
+  if (!m)
+    return null;
+  const mult = { "": 1, s: 1, m: 60, h: 3600, d: 86400 }[m[2]];
+  return Number(m[1]) * mult;
+}
+function hasFollowFlag(args, allowCapitalF) {
+  return args.some((a) => a === "--follow" || a.startsWith("--follow=") || /^-[a-zA-Z0-9]+$/.test(a) && (a.includes("f") || allowCapitalF && a.includes("F")));
+}
+function foregroundSegments(command) {
+  const cleaned = command.replace(/\d*>&\d*/g, " ");
+  const out = [];
+  const sep = /&&|\|\||[;|\n&]/g;
+  let last = 0;
+  let m;
+  const push = (seg, backgrounded) => {
+    const t = seg.trim();
+    if (t && !backgrounded)
+      out.push(t);
+  };
+  while ((m = sep.exec(cleaned)) !== null) {
+    push(cleaned.slice(last, m.index), m[0] === "&");
+    last = m.index + m[0].length;
+  }
+  push(cleaned.slice(last), false);
+  return out;
+}
+function commandTokens(segment) {
+  const SKIP = new Set([
+    "if",
+    "elif",
+    "then",
+    "else",
+    "do",
+    "time",
+    "nohup",
+    "sudo",
+    "command",
+    "exec"
+  ]);
+  const tokens = segment.split(/\s+/);
+  const out = [];
+  let started = false;
+  for (const rawTok of tokens) {
+    const tok = rawTok.replace(/^[({]+/, "");
+    if (!tok)
+      continue;
+    if (!started) {
+      if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(tok))
+        continue;
+      if (SKIP.has(tok))
+        continue;
+      started = true;
+    }
+    out.push(tok);
+  }
+  return out;
+}
+function matchSegment(segment) {
+  const tokens = commandTokens(segment);
+  const cmd = tokens[0];
+  if (!cmd)
+    return null;
+  const args = tokens.slice(1);
+  if (cmd === "tail" && hasFollowFlag(args, true))
+    return "tail -f/--follow";
+  if (cmd === "watch")
+    return "watch";
+  if (cmd === "sleep") {
+    const secs = sleepSeconds(args[0] ?? "");
+    if (secs !== null && secs > 30)
+      return `sleep ${args[0]} (> 30s foreground)`;
+  }
+  if (cmd === "gh") {
+    const positionals = args.filter((a) => !a.startsWith("-"));
+    if (positionals[0] === "pr" && positionals[1] === "checks" && args.includes("--watch"))
+      return "gh pr checks --watch";
+    if (positionals[0] === "run" && positionals[1] === "watch")
+      return "gh run watch";
+  }
+  if (cmd === "docker" && args[0] === "logs" && hasFollowFlag(args.slice(1), false))
+    return "docker logs -f/--follow";
+  if (cmd === "kubectl" && args[0] === "logs" && hasFollowFlag(args.slice(1), false))
+    return "kubectl logs -f/--follow";
+  if (cmd === "journalctl" && hasFollowFlag(args, false))
+    return "journalctl -f";
+  return null;
+}
+function detectForegroundHog(command) {
+  const blanked = blankQuotedAndHeredocs(command);
+  if (blanked === null)
+    return null;
+  if (LOOP_SLEEP.test(blanked))
+    return "sleep in a while/until/for loop";
+  for (const segment of foregroundSegments(blanked)) {
+    const hit = matchSegment(segment);
+    if (hit)
+      return hit;
+  }
+  return null;
+}
+function denyMessage(pattern) {
+  return `Foreground-hog gate: \`${pattern}\` would hold the session foreground for its full duration. ` + "Re-run this exact command with `run_in_background: true` and act on the completion notification, " + "or use a bounded alternative (e.g. `tail -n 200` instead of `tail -f`).";
+}
+function readStdin() {
+  try {
+    return readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+function allow() {
+  process.exit(0);
+}
+function block(reason) {
+  process.stdout.write(JSON.stringify({ decision: "block", reason }));
+  process.exit(0);
+}
+function main() {
+  if (!gateEnabledFromEnv())
+    allow();
+  const raw = readStdin().trim();
+  if (!raw)
+    allow();
+  let event;
+  try {
+    event = JSON.parse(raw);
+  } catch {
+    allow();
+  }
+  if (event.tool_name !== "Bash")
+    allow();
+  const input = event.tool_input;
+  if (!input || typeof input !== "object")
+    allow();
+  const { run_in_background: runInBackground, command } = input;
+  if (runInBackground === true)
+    allow();
+  if (typeof command !== "string" || command.length === 0)
+    allow();
+  const pattern = detectForegroundHog(command);
+  if (pattern)
+    block(denyMessage(pattern));
+  allow();
+}
+main();

package/dist/cli/notion-write-pretool.mjs

@@ -11945,7 +11945,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' \u2014 the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI \u2014 " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events \u2014 stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message \u2014 Reading X, Searching the web for Y, \u2026) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) \u2014 no post-then-delete. Per-agent " + "override; cascades defaults \u2192 profile \u2192 agent (per-key)."),

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.18.13", COMMIT_SHA = "58d180bf";
+var VERSION = "0.18.14", COMMIT_SHA = "b0db04aa";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -13806,7 +13806,6 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
     plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' \u2014 the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
     format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-    rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
     stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI \u2014 " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events \u2014 stable " + "order, per-tool status emojis, fires only on semantic transitions."),
     stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
     clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message \u2014 Reading X, Searching the web for Y, \u2026) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) \u2014 no post-then-delete. Per-agent " + "override; cascades defaults \u2192 profile \u2192 agent (per-key)."),
@@ -26595,9 +26594,6 @@ function channelsToEnv(agent) {
     return out;
   if (tg.format !== undefined)
     out.SWITCHROOM_TG_FORMAT = tg.format;
-  if (tg.rate_limit_ms !== undefined) {
-    out.SWITCHROOM_TG_RATE_LIMIT_MS = String(tg.rate_limit_ms);
-  }
   if (tg.stream_mode !== undefined) {
     out.SWITCHROOM_TG_STREAM_MODE = tg.stream_mode;
   }
@@ -27883,6 +27879,16 @@ function buildSettingsHooksBlock(p) {
         }
       ]
     },
+    {
+      matcher: "^Bash$",
+      hooks: [
+        {
+          type: "command",
+          command: wrap("hook:foreground-hog-pretool", `node "${join10(DOCKER_BUNDLED_HOOKS_PATH, "foreground-hog-pretool.mjs")}"`),
+          timeout: 10
+        }
+      ]
+    },
     {
       matcher: "^(Write|Edit|MultiEdit)$",
       hooks: [
@@ -32060,7 +32066,7 @@ function decodeResponse2(line) {
   }
   return ResponseSchema2.parse(parsed);
 }
-var MAX_FRAME_BYTES2, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, RequestSchema2, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema2, ResponseSchema2;
+var MAX_FRAME_BYTES2, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, MarkThrottledRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, RequestSchema2, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, MarkThrottledDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema2, ResponseSchema2;
 var init_protocol2 = __esm(() => {
   init_zod();
   MAX_FRAME_BYTES2 = 64 * 1024;
@@ -32089,6 +32095,12 @@ var init_protocol2 = __esm(() => {
     id: exports_external.string().min(1),
     until: exports_external.number().int().positive().optional()
   });
+  MarkThrottledRequestSchema = exports_external.object({
+    v: exports_external.literal(PROTOCOL_VERSION),
+    op: exports_external.literal("mark-throttled"),
+    id: exports_external.string().min(1),
+    until: exports_external.number().int().positive()
+  });
   RefreshAccountRequestSchema = exports_external.object({
     v: exports_external.literal(PROTOCOL_VERSION),
     op: exports_external.literal("refresh-account"),
@@ -32189,6 +32201,7 @@ var init_protocol2 = __esm(() => {
     ListStateRequestSchema,
     SetActiveRequestSchema,
     MarkExhaustedRequestSchema,
+    MarkThrottledRequestSchema,
     RefreshAccountRequestSchema,
     AddAccountRequestSchema,
     RmAccountRequestSchema,
@@ -32208,6 +32221,7 @@ var init_protocol2 = __esm(() => {
     expiresAt: exports_external.number().optional(),
     exhausted: exports_external.boolean(),
     exhausted_until: exports_external.number().optional(),
+    throttled_until: exports_external.number().optional(),
     threshold_violations: exports_external.number().int().nonnegative().optional(),
     last_refreshed_at: exports_external.number().optional()
   });
@@ -32238,6 +32252,12 @@ var init_protocol2 = __esm(() => {
     rolled: exports_external.array(exports_external.string()),
     rolledTo: exports_external.string().nullable().optional()
   });
+  MarkThrottledDataSchema = exports_external.object({
+    account: exports_external.string(),
+    throttled_until: exports_external.number(),
+    escalated: exports_external.boolean(),
+    rolledTo: exports_external.string().nullable().optional()
+  });
   RefreshAccountDataSchema = exports_external.object({
     account: exports_external.string(),
     expiresAt: exports_external.number().optional()
@@ -32436,6 +32456,15 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
+  async markThrottled(until) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID(),
+      op: "mark-throttled",
+      until
+    });
+    return data;
+  }
   async claimNotification(key, windowMs) {
     const data = await this.send({
       v: PROTOCOL_VERSION,

package/dist/host-control/main.js

@@ -18824,7 +18824,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
@@ -26588,7 +26587,7 @@ import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:f
 import { dirname as dirname4, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.18.13";
+var VERSION = "0.18.14";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/dist/vault/approvals/kernel-server.js

@@ -4244,7 +4244,6 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
     plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
     format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-    rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
     stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
     stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
     clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),

package/dist/vault/broker/server.js

@@ -4244,7 +4244,6 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
     plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
     format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-    rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
     stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
     stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
     clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.18.13",
+  "version": "0.18.14",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/coding/CLAUDE.md.hbs

@@ -51,6 +51,8 @@ Save proactively: architecture decisions, codebase patterns, conventions, known
 
 If sub-agents are configured, delegate implementation to `@worker` (background, own worktree) and research to `@researcher` (background). Keep your turns short — dispatch and acknowledge quickly so you stay available for the user.
 
+If the user amends in-flight delegated work mid-turn, steer the running worker now (`SendMessage` to the worker by name, or by the agent id from its spawn result) instead of holding the update for handback — and say in your reply whether you folded the update into the running worker or queued it as a separate task; never classify silently. If unsure whether a message amends in-flight work, queue it and say so — queue is the default. If the steer lands too late (worker effectively done), say so and apply the update yourself.
+
 {{#if schedule}}
 ## Schedule
 You are running on a schedule: `{{schedule}}`. Use scheduled runs to check CI status, review open PRs, or surface stale issues.

package/profiles/default/CLAUDE.md.hbs

@@ -92,6 +92,8 @@ The main session is for conversation. Execution belongs in sub-agents. Before ma
 
 **Anti-patterns:** starting a task inline then realizing it's complex mid-way; doing 5+ tool calls "because it's almost done"; polling sub-agent status in a loop.
 
+**Steer running workers — don't sit on amendments.** When a mid-turn user message amends work you've already delegated to a running sub-agent, forward the amendment to that worker now — `SendMessage` to the worker by name (or by the agent id from the Agent tool's spawn result, if it has no name) — rather than holding it for handback. If the message is a new independent task, queue it instead; if you're unsure whether it amends the in-flight work, queue it and say so — queue is the default. Either way, state in your reply which you did ("folded your update into the running worker" / "queued as a separate task after the current one") — the steer-or-queue rule is that the classification is always visible in chat, never inferred. If the steer arrives too late (the worker is effectively done), say that and apply the update yourself in the parent.
+
 If no sub-agents are configured, do the work yourself.
 
 ## Session Continuity

package/skills/switchroom-architecture/telegram.md

@@ -81,7 +81,6 @@ agents:
 | Var | Source | Purpose |
 |-----|--------|---------|
 | `SWITCHROOM_TG_FORMAT` | `channels.telegram.format` | Default reply format |
-| `SWITCHROOM_TG_RATE_LIMIT_MS` | `channels.telegram.rate_limit_ms` | Min delay between outgoing messages |
 | `TELEGRAM_STATE_DIR` | Auto-set by scaffold | Path to `telegram/` dir |
 | `SWITCHROOM_AGENT_NAME` | Auto-set by scaffold | Agent name (used for self-restart detection) |
 | `SWITCHROOM_CONFIG` | Auto-set by scaffold | Path to switchroom.yaml |

package/telegram-plugin/auth-snapshot-format.ts

@@ -704,6 +704,22 @@ export interface FallbackAnnouncementInput {
    * shows the target's headroom and is unchanged.
    */
   fleetSnapshots?: AccountSnapshot[];
+  /**
+   * 429 throttle tier enrichment — the reset time PARSED from the error
+   * prose ("resets 8:50am (TZ)" / "retry after 60s") that triggered the
+   * fallback. Fallback for the recovery line when the old account's probe
+   * carried no reset (probe failed / thin headers), so the announcement
+   * still names when the account frees. A probe-derived reset wins when
+   * present — it is the fresher, server-authoritative signal.
+   */
+  parsedResetAt?: Date | null;
+  /**
+   * 429 throttle tier escalation — the trigger was a long-reset transient
+   * RATE LIMIT, not a quota wall. Names the headline honestly ("rate limit
+   * on X" instead of a utilization-derived "5-hour limit on X", which would
+   * be wrong: a rate-limited account's utilization is typically LOW).
+   */
+  cause?: 'rate-limit';
   tz?: string;
   now?: Date;
 }
@@ -728,7 +744,12 @@ export function renderFallbackAnnouncement(input: FallbackAnnouncementInput): st
   const lines: string[] = [];
 
   const limitWord = input.oldQuota ? limitWordFor(input.oldQuota) : 'quota';
-  const headerLimit = limitWord === 'quota' ? 'quota cap' : `${limitWord} limit`;
+  const headerLimit =
+    input.cause === 'rate-limit'
+      ? 'rate limit'
+      : limitWord === 'quota'
+        ? 'quota cap'
+        : `${limitWord} limit`;
 
   if (!input.newLabel) {
     // All-blocked path — no swap occurred. Tell user what's broken and, so they
@@ -765,9 +786,14 @@ export function renderFallbackAnnouncement(input: FallbackAnnouncementInput): st
             `${formatAbsolute(earliest.at, tz)} (in ${formatRelative(earliest.at, now)})`,
         );
       }
-    } else if (input.oldQuota) {
+    } else {
       // Back-compat: no fleet snapshot supplied → old single-account shape.
-      const recovery = recoveryAtFor(input.oldQuota);
+      // Probe-derived reset first; the prose-parsed reset (429 throttle tier
+      // enrichment) covers the probe-failed case.
+      const recovery =
+        (input.oldQuota ? recoveryAtFor(input.oldQuota) : null) ??
+        input.parsedResetAt ??
+        null;
       if (recovery) {
         lines.push(
           `${escapeMarkdown(input.oldLabel)} recovers ${formatAbsolute(recovery, tz)} ` +
@@ -794,8 +820,14 @@ export function renderFallbackAnnouncement(input: FallbackAnnouncementInput): st
   lines.push(`Triggered by: agent **${escapeMarkdown(input.triggerAgent)}**`);
   lines.push('');
 
-  if (input.oldQuota) {
-    const recovery = recoveryAtFor(input.oldQuota);
+  {
+    // Probe-derived reset first; the prose-parsed reset (429 throttle tier
+    // enrichment) keeps the recovery line honest when the old account's
+    // probe failed at the moment of the wall.
+    const recovery =
+      (input.oldQuota ? recoveryAtFor(input.oldQuota) : null) ??
+      input.parsedResetAt ??
+      null;
     if (recovery) {
       lines.push(
         `\`${codeSpanSafe(input.oldLabel)}\` recovers ` +

package/telegram-plugin/auto-fallback-fleet.ts

@@ -183,6 +183,26 @@ export interface FleetFallbackDeps {
   /** Operator timezone for absolute reset times in the announcement. */
   tz?: string;
   now?: Date;
+  /**
+   * The reset time PARSED from the triggering error prose (429 throttle tier
+   * enrichment) — threaded into the announcement as the recovery-line
+   * fallback when the old account's live probe carried no reset.
+   */
+  parsedResetAt?: Date;
+  /**
+   * 429 throttle tier escalation: the trigger is a TERMINAL transient 429
+   * whose parsed reset lies beyond the retry-in-place threshold. Its wording
+   * explicitly NEGATES the usage-limit reading, so the old account's
+   * UTILIZATION probe typically classifies healthy — the healthy-idempotency
+   * guard would self-cancel the swap ("probed healthy / Stale event?"),
+   * silently dropping the spec's ">threshold → mark + fail over" leg. When
+   * set, the terminal parsed-reset signal is trusted over the utilization
+   * probe: the guard is bypassed and the swap proceeds (the broker mark
+   * honors the caller-passed `until` — the parsed reset). Staleness safety
+   * holds upstream: the flag is only set for a terminal error line the
+   * session-tail just read, never for replayed/late events.
+   */
+  rateLimitTrigger?: boolean;
 }
 
 /**
@@ -217,8 +237,12 @@ export async function runFleetAutoFallback(
   // normalization uses the same clock as the rest of the decision (a default
   // `new Date()` would diverge from `deps.now` and could mis-zero a window
   // whose reset is still future relative to the event's clock).
+  // 429 throttle tier: a rate-limit trigger's wording NEGATES the usage-limit
+  // reading, so healthy utilization is the EXPECTED state, not evidence of a
+  // stale event — the guard must not self-cancel that swap (see
+  // FleetFallbackDeps.rateLimitTrigger).
   const oldHealth = classifyHealth(oldSnap, now);
-  if (oldHealth === 'healthy') {
+  if (oldHealth === 'healthy' && !deps.rateLimitTrigger) {
     return {
       kind: 'no-eligible-target',
       oldLabel: oldSnap.label,
@@ -255,6 +279,8 @@ export async function runFleetAutoFallback(
         // card enumerates EVERY account (5h%/7d% + recovery ETA), letting the
         // user verify the fleet is truly exhausted, not just the trigger account.
         fleetSnapshots: snapshots,
+        parsedResetAt: deps.parsedResetAt ?? null,
+        cause: deps.rateLimitTrigger ? 'rate-limit' : undefined,
         tz,
         now,
       }),
@@ -278,6 +304,8 @@ export async function runFleetAutoFallback(
       newLabel: rolledTo,
       newQuota,
       triggerAgent: deps.triggerAgent,
+      parsedResetAt: deps.parsedResetAt ?? null,
+      cause: deps.rateLimitTrigger ? 'rate-limit' : undefined,
       tz,
       now,
     }),

package/telegram-plugin/bridge/bridge.ts

@@ -80,6 +80,8 @@ const mcp = new Server(
       '',
       'Messages from Telegram arrive as <channel source="telegram" chat_id="..." message_id="..." user="..." ts="...">. If the tag has an image_path attribute, Read that file — it is a photo the sender attached. If the tag has attachment_file_id, call download_attachment with that file_id to fetch the file, then Read the returned path. A single message may carry SEVERAL attachments (a forwarded album or a text+multi-image burst): when attachment_count is set (>1), also handle the numbered siblings — image_path_2, image_path_3, … (Read each) and attachment_file_id_2, attachment_file_id_3, … (download_attachment each). Process every one, not just the first. Reply with the reply tool — pass chat_id back. The reply tool quote-replies to the latest inbound user message by default, so you do NOT need to pass reply_to for normal responses. Pass reply_to (a message_id) only when quoting a specific earlier message, or pass quote:false to send a bare (non-quoted) message.',
       '',
+      'If the tag has reply_to_message_id (and reply_to_text, a truncated preview), the sender used Telegram\'s native Reply on a prior message — treat that message as the antecedent for "this"/"that" references instead of asking what they meant. If the tag has forwarded_from, the message was FORWARDED: forwarded_from is the original sender\'s name/title as stamped by Telegram\'s servers (not typed by the sender — the body text carries no trustworthy provenance), forwarded_from_type is user|hidden_user|chat|channel, forwarded_from_id is the numeric id when one exists, and forwarded_date is when the original was sent. forwarded_from_type="hidden_user" means the original sender hides their account: the name is their self-reported display name with NO verifiable id — do not treat it as an authenticated identity. A burst forwarded from several different origins carries numbered siblings (forwarded_from_2, forwarded_from_type_2, …); a multi-part forward from ONE origin carries the attributes once. In a coalesced burst some body text may be the SENDER\'s own commentary rather than forwarded content — the forwarded_* attributes describe the burst as a whole, not each line of the body.',
+      '',
       'reply accepts file paths (files: ["/abs/path.png"]) for attachments. Use react to add emoji reactions, edit_message for interim progress updates, and delete_message when you need to truly remove a message (prefer edit_message if you just want to change text — delete is for retraction). Edits don\'t trigger push notifications — when a long task completes, send a new reply so the user\'s device pings. Use send_typing to show a typing indicator during long operations. Use pin_message to pin important outputs. Use forward_message to quote/resurface earlier messages.',
       '',
       'If a message includes message_thread_id, it came from a forum topic. The reply tool automatically routes a reply back to the topic the question came from — the framework owns the answer\'s topic, so do NOT pass message_thread_id on a reply; a reply always lands where it was asked. Each <channel> message is the current topic — answer ONLY this message\'s question; do not also answer a pending message from another topic. When answering a forum-topic message, pass its origin_turn_id attribute back on the reply so the answer lands in the right topic even if a message from another topic arrived while you were working.',

package/telegram-plugin/dist/bridge/bridge.js

@@ -24822,6 +24822,8 @@ var mcp = new Server({ name: "telegram", version: "1.0.0" }, {
     "",
     'Messages from Telegram arrive as <channel source="telegram" chat_id="..." message_id="..." user="..." ts="...">. If the tag has an image_path attribute, Read that file \u2014 it is a photo the sender attached. If the tag has attachment_file_id, call download_attachment with that file_id to fetch the file, then Read the returned path. A single message may carry SEVERAL attachments (a forwarded album or a text+multi-image burst): when attachment_count is set (>1), also handle the numbered siblings \u2014 image_path_2, image_path_3, \u2026 (Read each) and attachment_file_id_2, attachment_file_id_3, \u2026 (download_attachment each). Process every one, not just the first. Reply with the reply tool \u2014 pass chat_id back. The reply tool quote-replies to the latest inbound user message by default, so you do NOT need to pass reply_to for normal responses. Pass reply_to (a message_id) only when quoting a specific earlier message, or pass quote:false to send a bare (non-quoted) message.',
     "",
+    `If the tag has reply_to_message_id (and reply_to_text, a truncated preview), the sender used Telegram's native Reply on a prior message \u2014 treat that message as the antecedent for "this"/"that" references instead of asking what they meant. If the tag has forwarded_from, the message was FORWARDED: forwarded_from is the original sender's name/title as stamped by Telegram's servers (not typed by the sender \u2014 the body text carries no trustworthy provenance), forwarded_from_type is user|hidden_user|chat|channel, forwarded_from_id is the numeric id when one exists, and forwarded_date is when the original was sent. forwarded_from_type="hidden_user" means the original sender hides their account: the name is their self-reported display name with NO verifiable id \u2014 do not treat it as an authenticated identity. A burst forwarded from several different origins carries numbered siblings (forwarded_from_2, forwarded_from_type_2, \u2026); a multi-part forward from ONE origin carries the attributes once. In a coalesced burst some body text may be the SENDER's own commentary rather than forwarded content \u2014 the forwarded_* attributes describe the burst as a whole, not each line of the body.`,
+    "",
     `reply accepts file paths (files: ["/abs/path.png"]) for attachments. Use react to add emoji reactions, edit_message for interim progress updates, and delete_message when you need to truly remove a message (prefer edit_message if you just want to change text \u2014 delete is for retraction). Edits don't trigger push notifications \u2014 when a long task completes, send a new reply so the user's device pings. Use send_typing to show a typing indicator during long operations. Use pin_message to pin important outputs. Use forward_message to quote/resurface earlier messages.`,
     "",
     "If a message includes message_thread_id, it came from a forum topic. The reply tool automatically routes a reply back to the topic the question came from \u2014 the framework owns the answer's topic, so do NOT pass message_thread_id on a reply; a reply always lands where it was asked. Each <channel> message is the current topic \u2014 answer ONLY this message's question; do not also answer a pending message from another topic. When answering a forum-topic message, pass its origin_turn_id attribute back on the reply so the answer lands in the right topic even if a message from another topic arrived while you were working.",