switchroom 0.18.28 → 0.18.30

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.18.28",
+  "version": "0.18.30",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
@@ -24,9 +24,9 @@
     "build": "node scripts/build.mjs",
     "build:cli": "node scripts/build.mjs && bun build --compile --target=bun-linux-x64 --minify bin/switchroom.ts --outfile switchroom-linux-amd64",
     "pretest": "npm run build",
-    "test": "vitest run && bun test telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test": "vitest run && bun test telegram-plugin/tests/catch-all-forwarded-history.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:vitest": "vitest run",
-    "test:bun": "bun test src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test:bun": "bun test telegram-plugin/tests/catch-all-forwarded-history.test.ts src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:watch": "vitest",
     "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs",
     "lint:tsc": "tsc --noEmit",

package/profiles/_base/start.sh.hbs

@@ -1148,18 +1148,19 @@ fi
 
 # --- Session model resolution (consume-once .session-model carrier) ---
 #
-# Contract: reference/rfcs/session-model-stickiness.md §0.1 (rev 4, operator
-# decision 2026-07-12 — SESSION-SCOPED, superseding rev 3 keep-by-default). A
-# `/model` override lasts only for the current session:
+# Contract: reference/rfcs/session-model-stickiness.md §0.05 (rev 5, operator
+# decision 2026-07-16 — DETERMINISTIC SWITCH, superseding rev 4 §0.1's "live
+# Claude switches write no carrier"). A `/model` override lasts only for the
+# current session:
 #
-#   - Claude switches apply LIVE in-session (claude's native picker) and write
-#     NO carrier — the explicit `claude --model {{{modelQ}}}` this script execs
-#     reverts them for free on the next boot.
-#   - sr-* / sr→Claude switches and a queued /model persisted at shutdown need
-#     a relaunch to take effect, so the gateway writes `{{agentDir}}/.session-model`
-#     (one-line JSON) IMMEDIATELY before that relaunch. This block APPLIES the
-#     carrier on the single boot that reads it and then DELETES it (consume-once).
-#     Any SUBSEQUENT restart — deploy, `/restart`, `/new`, watchdog recovery,
+#   - EVERY `/model` switch — Claude→Claude, Claude→sr-*, sr-*→Claude, the
+#     Fable/alias button, and the picker SELECT — writes `{{agentDir}}/.session-model`
+#     (one-line JSON) IMMEDIATELY before the relaunch that applies it. The
+#     inject-into-tmux + terminal-scrape path is RETIRED: it silently no-op'd
+#     then optimistically lied to /status. This block APPLIES the carrier on the
+#     single boot that reads it and then DELETES it (consume-once), and the
+#     `exec claude --model <token>` below cannot silently no-op.
+#   - Any SUBSEQUENT restart — deploy, `/restart`, `/new`, watchdog recovery,
 #     crash, raw `docker restart`, host reboot — finds no carrier and boots the
 #     configured default. That deletion is the marker distinguishing the
 #     model-apply relaunch from every later restart.
@@ -1181,10 +1182,17 @@ _EFFECTIVE_MODEL={{{modelQ}}}
 printf '%s\n' "$_EFFECTIVE_MODEL" > "{{agentDir}}/.configured-default-model" 2>/dev/null || true
 
 # Rev-4 hygiene (#3184 review LOW-2): remove the files retired with the
-# keep/revert intent subsystem and the crashloop self-heal. Nothing reads them
-# anymore; without this rm they would linger in the bind-mounted state dir
-# forever after rollout. Idempotent — a cheap no-op once clean.
-rm -f "{{agentDir}}/.relaunch-model-intent" "{{agentDir}}/.session-model-boot-attempts" "{{agentDir}}/.session-model-kept-notified"
+# keep/revert intent subsystem. Nothing reads them anymore; without this rm they
+# would linger in the bind-mounted state dir forever after rollout. Idempotent —
+# a cheap no-op once clean.
+rm -f "{{agentDir}}/.relaunch-model-intent" "{{agentDir}}/.session-model-kept-notified"
+# `.session-model-boot-attempts` is REVIVED as LIVE state (#3284 bounded-retry
+# counter, see the resolution block below): the gateway clears it on a healthy
+# boot, and start.sh gives up + reverts once it exceeds the attempt bound. It is
+# meaningless without a carrier to belong to, so sweep it as stale ONLY when no
+# `.session-model` carrier is present (rollout leftover / completed apply / a
+# prior giveup that didn't get to delete it).
+[ -f "{{agentDir}}/.session-model" ] || rm -f "{{agentDir}}/.session-model-boot-attempts"
 
 # Migration shim (one release): a leftover one-shot `.session-model-override`
 # carrier from a pre-consume-once gateway means an OLD gateway wrote it
@@ -1206,11 +1214,34 @@ if [ -f "{{agentDir}}/.session-model" ]; then
   _smf="$(cat "{{agentDir}}/.session-model" 2>/dev/null || true)"
   _sm_model="$(printf '%s' "$_smf" | sed -n 's/.*"model"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')"
   _sm_cfg="$(printf '%s' "$_smf" | sed -n 's/.*"configuredDefaultAtWrite"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')"
-  # CONSUME-ONCE: delete the carrier now, before any apply/exec. The carrier
-  # governs exactly this one boot; a bad token can therefore crash at most one
-  # boot (the next boot has no carrier and reverts), so no crashloop self-heal
-  # is needed. Every branch below has already removed the file.
-  rm -f "{{agentDir}}/.session-model"
+  # BOUNDED-RETRY CONSUME (#3284) — the carrier is NO LONGER deleted here before
+  # the apply/exec. It used to be (pure consume-once), but a boot that reads the
+  # carrier may WEDGE before its gateway acquires the boot lock (the
+  # boot.lock_stale_recovered_boot_mismatch race, e.g. a proxy-only `fable`
+  # apply-boot) and never become the surviving healthy session. Deleting before
+  # apply handed the requested model to that loser: the retry boot found no
+  # carrier and silently reverted to the configured default. Instead:
+  #
+  #   - the GATEWAY deletes the carrier + the attempt counter once it ACQUIRES
+  #     the boot lock (boot.lock_acquired in gateway.ts — the healthy-boot signal
+  #     a wedged boot cannot fake), so a GOOD token survives a transient wedge
+  #     and RE-APPLIES on the retry boot instead of reverting;
+  #   - a persisted attempt counter (`.session-model-boot-attempts`) BOUNDS the
+  #     retries: a token that never reaches a healthy gateway (a genuinely BAD
+  #     token that crashes claude before lock-acquire) is given up after
+  #     _SM_MAX_ATTEMPTS boots — deleted, reverted, and alerted — so a bad token
+  #     can NEVER produce an unbounded wedge→retry→wedge crashloop. The original
+  #     "a bad token crashes at most one boot then reverts" guarantee becomes "at
+  #     most _SM_MAX_ATTEMPTS boots then reverts", still a hard finite bound.
+  #
+  # Every INVALIDATION / GIVEUP branch below deletes BOTH the carrier and the
+  # counter; only the APPLY branch keeps the carrier (for the gateway to clear)
+  # and persists the incremented counter. The delete-before-apply that used to
+  # sit here is GONE by design.
+  _SM_MAX_ATTEMPTS=3
+  _sm_attempts="$(cat "{{agentDir}}/.session-model-boot-attempts" 2>/dev/null | tr -dc '0-9' || true)"
+  [ -z "$_sm_attempts" ] && _sm_attempts=0
+  _sm_attempts=$(( _sm_attempts + 1 ))
   # Shape gate — kept BYTE-IDENTICAL with MODEL_ARG_RE in
   # telegram-plugin/gateway/model-command.ts. `/` is allowed for
   # OpenRouter-style `sr-vendor/model` ids; it is not a shell metachar inside
@@ -1221,29 +1252,56 @@ if [ -f "{{agentDir}}/.session-model" ]; then
   # `claude --model` (parity with parseSessionModel's single-string check).
   if [ "$(printf '%s' "$_sm_model" | wc -c)" -eq 0 ] || [ "$(printf '%s' "$_sm_model" | wc -l)" -ne 0 ] || ! printf '%s' "$_sm_model" | grep -Eq '^[A-Za-z0-9][]A-Za-z0-9._[/-]{0,99}$'; then
     # Invalid carrier: fall back to the configured default AND tell the
-    # operator once — never a silent stderr-only drop.
+    # operator once — never a silent stderr-only drop. Terminal → drop the
+    # carrier + counter (a corrupt token is never worth retrying).
+    rm -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model-boot-attempts"
     echo "session-model: ignoring malformed .session-model (failed shape gate) — using configured default '$_EFFECTIVE_MODEL'" >&2
     printf 'Your saved session model override could not be read (invalid or corrupt), so the agent booted on its configured default `%s`. Re-issue /model <name> if you want a different model.\n' "$_EFFECTIVE_MODEL" > "{{agentDir}}/.session-model-alert" 2>/dev/null || true
   elif [ "$_sm_cfg" != "$_EFFECTIVE_MODEL" ]; then
     # switchroom.yaml `model:` changed between the switch and this apply-boot →
     # the carrier is against a default that no longer exists. Invalidate +
-    # announce once.
+    # announce once. Terminal → drop the carrier + counter.
+    rm -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model-boot-attempts"
     echo "session-model: configured default changed ('$_sm_cfg' → '$_EFFECTIVE_MODEL') — dropping session override '$_sm_model'" >&2
     printf 'The configured default model changed (`%s` → `%s`), so your session override to `%s` was not applied — the agent booted on the new configured default. Re-issue /model %s if you still want it.\n' "$_sm_cfg" "$_EFFECTIVE_MODEL" "$_sm_model" "$_sm_model" > "{{agentDir}}/.session-model-alert" 2>/dev/null || true
-  elif [ "${_sm_model#sr-}" != "$_sm_model" ] && [ -z "$_LITELLM_OK" ]; then
-    # sr-* + LiteLLM unreachable at the apply-boot: booting the override would
-    # 4xx against Anthropic, and consume-once means we can't retain it for a
-    # later relaunch. Boot the configured default and tell the operator to
-    # re-issue once the proxy is back.
-    echo "session-model: LiteLLM proxy unreachable at boot — NOT applying sr-* override '$_sm_model'; booting configured default '$_EFFECTIVE_MODEL' (re-issue /model when the proxy is back)" >&2
+  elif { [ "${_sm_model#sr-}" != "$_sm_model" ] || [ "$_sm_model" = fable ] || [ "$_sm_model" = claude-fable-5 ]; } && [ -z "$_LITELLM_OK" ]; then
+    # Proxy-only override + LiteLLM unreachable at the apply-boot: booting the
+    # override would 4xx (sr-* against Anthropic; `fable`/`claude-fable-5` is a
+    # retired codename direct-to-Anthropic and ONLY resolves via the LiteLLM
+    # router — see the repoint case below). The litellm probe already waited out
+    # its full 120s window before we got here, so "still unreachable" is a real
+    # down-state, not the transient boot-lock wedge the bounded-retry counter
+    # covers — drop the carrier + counter (terminal) and tell the operator to
+    # re-issue once the proxy is back, rather than looping against a dead proxy.
+    # (Rev 5: Fable is now reachable via the carrier relaunch — the old
+    # live-inject path never launched it — so it needs the same down-guard as sr-*.)
+    rm -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model-boot-attempts"
+    echo "session-model: LiteLLM proxy unreachable at boot — NOT applying proxy-only override '$_sm_model'; booting configured default '$_EFFECTIVE_MODEL' (re-issue /model when the proxy is back)" >&2
     printf 'LiteLLM proxy was unreachable at boot, so the session model override `%s` was not applied — the agent booted on its configured default `%s`. Re-issue /model %s once the proxy is reachable.\n' "$_sm_model" "$_EFFECTIVE_MODEL" "$_sm_model" > "{{agentDir}}/.session-model-alert" 2>/dev/null || true
+  elif [ "$_sm_attempts" -gt "$_SM_MAX_ATTEMPTS" ]; then
+    # CRASHLOOP BOUND (#3284). This carrier has now been read on more than
+    # _SM_MAX_ATTEMPTS boots WITHOUT the gateway ever reaching boot.lock_acquired
+    # to clear it — i.e. every apply-boot wedged/crashed before a healthy
+    # gateway. That is the signature of a genuinely bad token (one that will
+    # never boot), NOT the transient boot-lock race we retry for. Give up:
+    # drop the carrier + counter, revert to the configured default, and alert.
+    # This is the hard finite bound that guarantees no unbounded crashloop.
+    rm -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model-boot-attempts"
+    echo "session-model: override '$_sm_model' did not reach a healthy boot after $_SM_MAX_ATTEMPTS attempts — reverting to configured default '$_EFFECTIVE_MODEL'" >&2
+    printf 'Your session model override `%s` could not boot successfully after %s attempts, so the agent reverted to its configured default `%s`. Re-issue /model %s to try again.\n' "$_sm_model" "$_SM_MAX_ATTEMPTS" "$_EFFECTIVE_MODEL" "$_sm_model" > "{{agentDir}}/.session-model-alert" 2>/dev/null || true
   else
-    # Apply the carrier for THIS session. No boot alert — the gateway already
-    # acked the /model switch in chat, and the override reverts on next restart.
+    # Apply the carrier for THIS session and KEEP it: the gateway deletes the
+    # carrier + counter once it acquires the boot lock (healthy boot), so a
+    # transient wedge before that RE-APPLIES on the retry boot instead of
+    # reverting. Persist the incremented attempt counter so the crashloop bound
+    # above can fire if this token keeps wedging. No boot alert — the gateway
+    # already acked the /model switch in chat, and the override reverts on the
+    # next restart (once the gateway has cleared the carrier).
+    printf '%s\n' "$_sm_attempts" > "{{agentDir}}/.session-model-boot-attempts" 2>/dev/null || true
     _EFFECTIVE_MODEL="$_sm_model"
-    echo "session-model: applying session override '$_sm_model' this boot (consume-once — reverts on next restart)" >&2
+    echo "session-model: applying session override '$_sm_model' this boot (attempt $_sm_attempts/$_SM_MAX_ATTEMPTS — cleared by the gateway on a healthy boot, reverts on next restart)" >&2
   fi
-  unset _smf _sm_model _sm_cfg
+  unset _smf _sm_model _sm_cfg _sm_attempts _SM_MAX_ATTEMPTS
 fi
 
 # --- Session effort resolution (consume-once .session-effort carrier, #3186) ---
@@ -1312,11 +1370,24 @@ printf '%s\n' "$_EFFECTIVE_EFFORT" > "{{agentDir}}/.active-session-effort" 2>/de
 # non-Claude default at the router root) and run degraded until litellm returns —
 # there is NO Claude default to fall back to for a persistent sr-* agent, and
 # that (loud-warned, non-fatal) degraded state is the correct behavior.
+#
+# Rev 5 (F2): `fable`/`claude-fable-5` ALSO needs the router root, not the
+# passthrough. The `fable` alias resolves in the CLI to `claude-fable-5`
+# (ANTHROPIC_DEFAULT_FABLE_MODEL above), a RETIRED codename that 4xxs
+# direct-to-Anthropic; it ONLY resolves via the LiteLLM router (maps
+# fable/claude-fable-5 -> anthropic/claude-fable-5, forwarding the OAuth). The
+# old Fable path was a live inject that silently no-op'd, so Fable never actually
+# launched via `--model`; routing the Fable button through the carrier relaunch
+# newly exposes this, so the repoint case must include it or a fable carrier
+# 4xxs even with LiteLLM UP. Verified against the live litellm config + router
+# /v1/models (both `fable` and `claude-fable-5` served). Other Claude sessions
+# (opus/sonnet/haiku/default) keep the passthrough — it dodges the Opus SSE
+# re-chunk stall; Fable trades that for being routable at all.
 case "$_EFFECTIVE_MODEL" in
-  sr-*)
+  sr-*|fable|claude-fable-5)
     if [ -n "$_LITELLM_OK" ] && [ -n "$SWITCHROOM_LITELLM_BASE" ]; then
       export ANTHROPIC_BASE_URL="$SWITCHROOM_LITELLM_BASE"
-      echo "session-model: effective model '$_EFFECTIVE_MODEL' is sr-* — routing via LiteLLM model router '$SWITCHROOM_LITELLM_BASE' (off /anthropic passthrough) so it reaches OpenRouter" >&2
+      echo "session-model: effective model '$_EFFECTIVE_MODEL' is proxy-only (sr-*/fable) — routing via LiteLLM model router '$SWITCHROOM_LITELLM_BASE' (off /anthropic passthrough)" >&2
     fi
     ;;
 esac

package/telegram-plugin/dist/bridge/bridge.js

@@ -22970,6 +22970,65 @@ import {
 import { homedir as homedir2 } from "os";
 import { basename, join as join3 } from "path";
 
+// text-voice-scrub.ts
+var NULL = "\x00";
+var FENCE_PH = `${NULL}VS_FENCE`;
+var INLINE_PH = `${NULL}VS_INLINE`;
+var HTML_CODE_PH = `${NULL}VS_HTMLCODE`;
+var HTML_PRE_PH = `${NULL}VS_HTMLPRE`;
+var URL_PH = `${NULL}VS_URL`;
+
+// model-unavailable.ts
+var transientUpstreamSignals = [
+  "not your usage limit",
+  "not your account",
+  "not your account's",
+  "temporarily limiting requests",
+  "temporarily rate",
+  "server is temporarily",
+  "would exceed your account\u2019s rate limit",
+  "would exceed your account's rate limit"
+];
+function isTransientUpstreamSignal(text) {
+  if (typeof text !== "string" || text.length === 0)
+    return false;
+  const sample = text.length > 16384 ? text.slice(0, 16384) : text;
+  const lower = sample.toLowerCase();
+  return transientUpstreamSignals.some((s) => lower.includes(s));
+}
+var litellmProxyLocal429Signals = [
+  "deployment over user-defined ratelimit",
+  "model rate limit exceeded. tpm limit",
+  "model rate limit exceeded. rpm limit",
+  "deployment over defined rpm limit",
+  "no deployments available for selected model",
+  "litellm rate limit handler",
+  "crossed tpm / rpm",
+  "max parallel request limit reached"
+];
+var litellmV3LimiterSignalPair = ["rate limit exceeded for ", "limit type:"];
+function isLitellmProxyLocal429(text) {
+  if (typeof text !== "string" || text.length === 0)
+    return false;
+  const sample = text.length > 16384 ? text.slice(0, 16384) : text;
+  const lower = sample.toLowerCase();
+  if (litellmProxyLocal429Signals.some((s) => lower.includes(s)))
+    return true;
+  return litellmV3LimiterSignalPair.every((s) => lower.includes(s));
+}
+function isLitellmProxyAuthMisconfig(text) {
+  if (typeof text !== "string" || text.length === 0)
+    return false;
+  const sample = text.length > 16384 ? text.slice(0, 16384) : text;
+  const lower = sample.toLowerCase();
+  if (lower.includes("x-api-key header is required"))
+    return true;
+  const isAuthErr = lower.includes("authentication_error") || lower.includes("authenticationerror");
+  if (!isAuthErr)
+    return false;
+  return lower.includes("fallback") && lower.includes("x-api-key");
+}
+
 // operator-events.ts
 function classifyClaudeError(raw) {
   try {
@@ -22987,6 +23046,12 @@ function classifyInner(raw) {
   const message = extractString(obj, "message") ?? extractString(getNestedObj(obj, "error"), "message") ?? (typeof raw === "string" ? raw : "") ?? "";
   const status = extractNumber(obj, "status") ?? extractNumber(obj, "statusCode") ?? extractNumber(obj, "status_code") ?? null;
   const sdkCode = extractString(obj, "error_code") ?? "";
+  if (isLitellmProxyAuthMisconfig(`${errorType}
+${errorCode}
+${sdkCode}
+${message}`)) {
+    return "proxy-misconfig";
+  }
   if (errorType === "authentication_error" || errorCode === "authentication_error" || sdkCode === "authentication_error" || message.toLowerCase().includes("authentication_error")) {
     const msg = message.toLowerCase();
     if (msg.includes("expired") || msg.includes("refresh")) {
@@ -23034,53 +23099,12 @@ function getNestedObj(obj, key) {
 }
 var DEFAULT_OPERATOR_EVENT_COOLDOWN_MS = 5 * 60000;
 var cooldownMap = new Map;
-
-// text-voice-scrub.ts
-var NULL = "\x00";
-var FENCE_PH = `${NULL}VS_FENCE`;
-var INLINE_PH = `${NULL}VS_INLINE`;
-var HTML_CODE_PH = `${NULL}VS_HTMLCODE`;
-var HTML_PRE_PH = `${NULL}VS_HTMLPRE`;
-var URL_PH = `${NULL}VS_URL`;
-
-// model-unavailable.ts
-var transientUpstreamSignals = [
-  "not your usage limit",
-  "not your account",
-  "not your account's",
-  "temporarily limiting requests",
-  "temporarily rate",
-  "server is temporarily",
-  "would exceed your account\u2019s rate limit",
-  "would exceed your account's rate limit"
-];
-function isTransientUpstreamSignal(text) {
-  if (typeof text !== "string" || text.length === 0)
-    return false;
-  const sample = text.length > 16384 ? text.slice(0, 16384) : text;
-  const lower = sample.toLowerCase();
-  return transientUpstreamSignals.some((s) => lower.includes(s));
-}
-var litellmProxyLocal429Signals = [
-  "deployment over user-defined ratelimit",
-  "model rate limit exceeded. tpm limit",
-  "model rate limit exceeded. rpm limit",
-  "deployment over defined rpm limit",
-  "no deployments available for selected model",
-  "litellm rate limit handler",
-  "crossed tpm / rpm",
-  "max parallel request limit reached"
-];
-var litellmV3LimiterSignalPair = ["rate limit exceeded for ", "limit type:"];
-function isLitellmProxyLocal429(text) {
-  if (typeof text !== "string" || text.length === 0)
-    return false;
-  const sample = text.length > 16384 ? text.slice(0, 16384) : text;
-  const lower = sample.toLowerCase();
-  if (litellmProxyLocal429Signals.some((s) => lower.includes(s)))
-    return true;
-  return litellmV3LimiterSignalPair.every((s) => lower.includes(s));
-}
+var OPERATOR_ACTIONABLE_KINDS = new Set([
+  "credentials-expired",
+  "credentials-invalid",
+  "credit-exhausted",
+  "proxy-misconfig"
+]);
 
 // tool-label-sidecar.ts
 import { existsSync as existsSync2, readFileSync, statSync as statSync2 } from "node:fs";