switchroom 0.18.29 → 0.18.30

package/telegram-plugin/dist/gateway/gateway.js

@@ -20036,7 +20036,8 @@ var init_protocol2 = __esm(() => {
     v: exports_external.literal(PROTOCOL_VERSION),
     op: exports_external.literal("get-credentials"),
     id: exports_external.string().min(1),
-    provider: ProviderNameSchema.optional()
+    provider: ProviderNameSchema.optional(),
+    account: exports_external.string().min(1).optional()
   });
   ListStateRequestSchema = exports_external.object({
     v: exports_external.literal(PROTOCOL_VERSION),
@@ -20351,13 +20352,17 @@ class AuthBrokerClient {
       sock.destroy();
     }
   }
-  async getCredentials(provider) {
+  async getCredentials(provider, account) {
     const base = {
       v: PROTOCOL_VERSION,
       id: randomUUID(),
       op: "get-credentials"
     };
-    const req = provider !== undefined ? { ...base, provider } : base;
+    let req = base;
+    if (provider !== undefined)
+      req = { ...req, provider };
+    if (account !== undefined)
+      req = { ...req, account };
     const data = await this.send(req);
     return data;
   }
@@ -20632,7 +20637,7 @@ var init_client2 = __esm(() => {
 });
 
 // ../src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -21030,11 +21035,52 @@ var init_schema = __esm(() => {
     approvers: exports_external.array(ApproverIdSchema).min(1).optional().describe("Per-agent approver override. When set, replaces (does not extend) " + "the top-level drive.approvers list for this agent's onboarding card."),
     tier: GoogleWorkspaceTierSchema.optional().describe("Per-agent tier override (RFC G Phase 1). When set, replaces the " + "top-level google_workspace.tier for this agent. Common case: most " + "agents on `core`, one specialist on `extended` for Slides access.")
   }).optional();
+  MicrosoftAccountEmailSchema = exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
+    message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
+  }).transform((v) => v.trim().toLowerCase());
+  MicrosoftToolTokenSchema = exports_external.string().min(1).regex(/^[a-z0-9-]+$/, {
+    message: "microsoft_workspace tools[] tokens are forwarded to softeria's " + "--enabled-tools regex; each must be lowercase kebab-case " + "([a-z0-9-]+, e.g. 'mail', 'calendar', 'send-mail') so an unescaped " + "regex metacharacter can't crash the launcher"
+  });
+  MicrosoftAccountBindingSchema = exports_external.object({
+    account: MicrosoftAccountEmailSchema.describe("The Microsoft account this binding uses. Must be a key in top-level " + "`microsoft_accounts:` with this agent in its `enabled_for[]`."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist \u2192 softeria `--enabled-tools <regex>` " + "(tokens joined with `|`). Omitted = all tools exposed for this account."),
+    org_mode: exports_external.boolean().optional().describe("Per-binding org_mode override (RFC #1873 \u00a76.4).")
+  });
   AgentMicrosoftWorkspaceConfigSchema = exports_external.object({
-    account: exports_external.string().regex(/^[^@\s:]+@[^@\s:]+\.[^@\s:]+$/, {
-      message: "microsoft_workspace.account must be a Microsoft account email like " + "'alice@outlook.com' or 'alice@contoso.com' (colons not allowed)"
-    }).transform((v) => v.trim().toLowerCase()).optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized)."),
-    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 \u00a76.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false).")
+    account: MicrosoftAccountEmailSchema.optional().describe("RFC #1873: the Microsoft account this agent uses for the M365 MCP. " + "Must be a key in top-level `microsoft_accounts:` with this agent " + "listed in its `enabled_for[]`. Read by the auth-broker " + "(get-credentials, provider=microsoft) and by the scaffold to " + "decide whether to emit the `ms-365` MCP entry. Normalized to " + "lowercase so it matches the microsoft_accounts key (which is " + "also normalized). Mutually exclusive with `accounts` (plural)."),
+    tools: exports_external.array(MicrosoftToolTokenSchema).min(1).optional().describe("Per-account tool allowlist for the SINGULAR `account` form \u2192 " + "softeria `--enabled-tools <regex>`. Omitted = all tools. Only " + "valid with the singular `account`; using it together with the " + "plural `accounts` (which carries per-binding `tools`) is an error."),
+    org_mode: exports_external.boolean().optional().describe("Per-agent org_mode override (RFC #1873 \u00a76.4). When set, replaces " + "the top-level microsoft_workspace.org_mode for this agent. " + "Defaults to top-level value (which defaults to false)."),
+    accounts: exports_external.array(MicrosoftAccountBindingSchema).min(1).optional().describe("Plural multi-account form: bind MULTIPLE Microsoft accounts to " + "this agent, each with its own tool scope. Mutually exclusive with " + "the singular `account`. Each account gets its own `ms-365-<slug>` " + "MCP server.")
+  }).superRefine((v, ctx) => {
+    const hasSingular = v.account !== undefined;
+    const hasPlural = v.accounts !== undefined;
+    if (hasSingular && hasPlural) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: use EITHER `account` (singular) OR " + "`accounts` (plural array), not both",
+        path: ["accounts"]
+      });
+    }
+    if (hasPlural && v.tools !== undefined) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "microsoft_workspace: block-level `tools` applies to the singular " + "`account` only; with `accounts` put `tools` inside each binding",
+        path: ["tools"]
+      });
+    }
+    if (hasPlural) {
+      const seen = new Set;
+      for (const b of v.accounts) {
+        if (seen.has(b.account)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `microsoft_workspace: duplicate account '${b.account}' in accounts[]`,
+            path: ["accounts"]
+          });
+        }
+        seen.add(b.account);
+      }
+    }
   }).optional();
   AgentNotionWorkspaceConfigSchema = exports_external.object({
     databases: exports_external.array(exports_external.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/, {
@@ -21409,6 +21455,26 @@ var init_schema = __esm(() => {
     for (const [name, a] of Object.entries(cfg.agents ?? {})) {
       checkServes(a.serves, ["agents", name, "serves"]);
     }
+    const microsoftAccounts = cfg.microsoft_accounts;
+    for (const [name, a] of Object.entries(cfg.agents ?? {})) {
+      const mw = a.microsoft_workspace;
+      const accounts = mw?.accounts;
+      if (!accounts)
+        continue;
+      accounts.forEach((b, i) => {
+        const acct = b?.account?.trim().toLowerCase();
+        if (!acct)
+          return;
+        const enabledFor = microsoftAccounts?.[acct]?.enabled_for ?? [];
+        if (!enabledFor.includes(name)) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            message: `agent '${name}' binds Microsoft account '${acct}' but is not in ` + `microsoft_accounts['${acct}'].enabled_for[] \u2014 operator must run ` + `\`switchroom auth microsoft enable ${acct} ${name}\``,
+            path: ["agents", name, "microsoft_workspace", "accounts", i, "account"]
+          });
+        }
+      });
+    }
   });
 });
 
@@ -22024,6 +22090,25 @@ function validateNotionWorkspaceConfig(config) {
   return issues;
 }
 
+// ../src/config/timezone.ts
+function isResolvableTimezone(zone) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone: zone });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CONTAINER_DEFAULT_UTC_ZONES;
+var init_timezone = __esm(() => {
+  CONTAINER_DEFAULT_UTC_ZONES = new Set([
+    "UTC",
+    "Etc/UTC",
+    "Etc/Universal",
+    "Universal"
+  ]);
+});
+
 // ../src/config/loader.ts
 import { readFileSync as readFileSync9, existsSync as existsSync8 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
@@ -22142,8 +22227,30 @@ function loadConfig(configPath) {
   if (notionIssues.length > 0) {
     throw new ConfigError(`Invalid notion_workspace configuration in ${filePath}`, notionIssues);
   }
+  validateAllTimezones(config, filePath);
   return config;
 }
+function validateAllTimezones(config, filePath) {
+  const issues = [];
+  const check = (zone, where) => {
+    if (zone == null)
+      return;
+    if (!isResolvableTimezone(zone)) {
+      issues.push(`  ${where}: "${zone}" is not a resolvable IANA timezone ` + `(shape is valid but no such zone exists \u2014 check for a typo, ` + `e.g. "Australia/Melbourne", "America/New_York", "UTC").`);
+    }
+  };
+  check(config.switchroom?.timezone, "switchroom.timezone");
+  check(config.defaults?.timezone, "defaults.timezone");
+  for (const [profileName, profile] of Object.entries(config.profiles ?? {})) {
+    check(profile?.timezone, `profiles.${profileName}.timezone`);
+  }
+  for (const [agentName, agentRaw] of Object.entries(config.agents)) {
+    check(agentRaw?.timezone, `agents.${agentName}.timezone`);
+  }
+  if (issues.length > 0) {
+    throw new ConfigError(`Invalid timezone configuration in ${filePath}`, issues);
+  }
+}
 function validateAllCronTopicAliases(config, filePath) {
   const issues = [];
   for (const [agentName, agentRaw] of Object.entries(config.agents)) {
@@ -22179,6 +22286,7 @@ var init_loader = __esm(() => {
   init_paths();
   init_overlay_loader();
   init_merge();
+  init_timezone();
   import_yaml3 = __toESM(require_dist(), 1);
   ConfigError = class ConfigError extends Error {
     details;
@@ -40072,6 +40180,131 @@ function forwardOriginDateIso(o) {
   return new Date(o.date * 1000).toISOString();
 }
 
+// gateway/unhandled-message.ts
+var MESSAGE_ENVELOPE_KEYS = new Set([
+  "message_id",
+  "message_thread_id",
+  "date",
+  "chat",
+  "from",
+  "sender_chat",
+  "forward_origin",
+  "reply_to_message",
+  "external_reply",
+  "quote",
+  "reply_to_story",
+  "edit_date",
+  "media_group_id",
+  "author_signature",
+  "is_topic_message",
+  "is_automatic_forward",
+  "via_bot",
+  "sender_boost_count",
+  "business_connection_id",
+  "effect_id",
+  "has_protected_content",
+  "is_from_offline",
+  "link_preview_options",
+  "show_caption_above_media",
+  "entities",
+  "caption_entities",
+  "paid_star_count"
+]);
+var SERVICE_NOISE_KEYS = new Set([
+  "new_chat_members",
+  "left_chat_member",
+  "new_chat_title",
+  "new_chat_photo",
+  "delete_chat_photo",
+  "group_chat_created",
+  "supergroup_chat_created",
+  "channel_chat_created",
+  "message_auto_delete_timer_changed",
+  "migrate_to_chat_id",
+  "migrate_from_chat_id",
+  "forum_topic_created",
+  "forum_topic_edited",
+  "forum_topic_closed",
+  "forum_topic_reopened",
+  "general_forum_topic_hidden",
+  "general_forum_topic_unhidden",
+  "video_chat_scheduled",
+  "video_chat_started",
+  "video_chat_ended",
+  "video_chat_participants_invited",
+  "giveaway_created",
+  "giveaway",
+  "giveaway_winners",
+  "giveaway_completed",
+  "boost_added",
+  "chat_background_set",
+  "write_access_allowed",
+  "proximity_alert_triggered",
+  "chat_set_theme",
+  "connected_website",
+  "direct_message_price_changed"
+]);
+function messageContentKeys(msg) {
+  return Object.keys(msg).filter((k) => !MESSAGE_ENVELOPE_KEYS.has(k));
+}
+function planUnhandledMessage(msg) {
+  const contentKeys = messageContentKeys(msg);
+  if (contentKeys.length > 0 && contentKeys.every((k) => SERVICE_NOISE_KEYS.has(k))) {
+    return { action: "log-only", contentKeys };
+  }
+  const contentType = contentKeys[0] ?? "unknown";
+  const text = (typeof msg.text === "string" ? msg.text : undefined) ?? (typeof msg.caption === "string" ? msg.caption : undefined) ?? `(unhandled message content: ${contentType})`;
+  return { action: "turn", text, contentKeys };
+}
+var TAP_MAX_LINES_PER_MINUTE = 300;
+function installUpdateTap(bot, log, nowMs = Date.now) {
+  let windowStart = 0;
+  let windowCount = 0;
+  let suppressed = 0;
+  bot.use(async (ctx, next) => {
+    try {
+      const now = nowMs();
+      if (now - windowStart >= 60000) {
+        if (suppressed > 0) {
+          log(`telegram gateway: rx tap suppressed ${suppressed} update lines in the last minute (cap ${TAP_MAX_LINES_PER_MINUTE}/min)
+`);
+        }
+        windowStart = now;
+        windowCount = 0;
+        suppressed = 0;
+      }
+      if (windowCount < TAP_MAX_LINES_PER_MINUTE) {
+        windowCount++;
+        const upd = ctx.update;
+        const updateType = Object.keys(upd).find((k) => k !== "update_id") ?? "unknown";
+        const msg = ctx.message;
+        const detail = msg ? ` content=[${messageContentKeys(msg).join(",")}]` : "";
+        log(`telegram gateway: rx update_id=${ctx.update.update_id} type=${updateType}${detail}
+`);
+      } else {
+        suppressed++;
+      }
+    } catch {}
+    await next();
+  });
+}
+function installUnhandledMessageCatchAll(bot, onInbound, log) {
+  bot.on("message", async (ctx) => {
+    try {
+      const msg = ctx.message;
+      const plan = planUnhandledMessage(msg);
+      log(`telegram gateway: catch-all inbound (no specific handler) ` + `update_id=${ctx.update.update_id} chat_id=${ctx.chat?.id ?? "?"} ` + `message_id=${ctx.message?.message_id ?? "?"} ` + `content_keys=[${plan.contentKeys.join(",")}] action=${plan.action}
+`);
+      if (plan.action === "turn") {
+        await onInbound(ctx, plan.text);
+      }
+    } catch (err) {
+      log(`telegram gateway: catch-all handler error: ${err.message}
+`);
+    }
+  });
+}
+
 // shared/local-time.ts
 function localDay2(ms, tz) {
   return new Intl.DateTimeFormat("en-CA", {
@@ -40114,6 +40347,22 @@ function fmtLocalStamp2(ms, tz) {
     return new Date(ms).toISOString();
   }
 }
+var LEADING_ISO_Z = /^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z)(\s|$)/;
+function renderLogTimestampsLocal(text, tz) {
+  if (!text)
+    return text;
+  return text.split(`
+`).map((line) => {
+    const m = LEADING_ISO_Z.exec(line);
+    if (!m)
+      return line;
+    const ms = Date.parse(m[1]);
+    if (Number.isNaN(ms))
+      return line;
+    return `${fmtLocalStamp2(ms, tz)}${m[2] === "" ? "" : " "}${line.slice(m[0].length)}`;
+  }).join(`
+`);
+}
 
 // status-reactions.ts
 var TELEGRAM_REACTION_WHITELIST = new Set([
@@ -63791,71 +64040,6 @@ function extractRequestId(raw) {
   return m ? m[1] : undefined;
 }
 
-// operator-events.ts
-function classifyClaudeError(raw) {
-  try {
-    return classifyInner(raw);
-  } catch {
-    return "unknown-4xx";
-  }
-}
-function classifyInner(raw) {
-  if (raw == null)
-    return "unknown-4xx";
-  const obj = typeof raw === "object" ? raw : {};
-  const errorType = extractString(obj, "error_type") ?? extractString(obj, "type") ?? extractString(getNestedObj(obj, "error"), "type") ?? "";
-  const errorCode = extractString(obj, "code") ?? extractString(getNestedObj(obj, "error"), "code") ?? "";
-  const message = extractString(obj, "message") ?? extractString(getNestedObj(obj, "error"), "message") ?? (typeof raw === "string" ? raw : "") ?? "";
-  const status = extractNumber(obj, "status") ?? extractNumber(obj, "statusCode") ?? extractNumber(obj, "status_code") ?? null;
-  const sdkCode = extractString(obj, "error_code") ?? "";
-  if (errorType === "authentication_error" || errorCode === "authentication_error" || sdkCode === "authentication_error" || message.toLowerCase().includes("authentication_error")) {
-    const msg = message.toLowerCase();
-    if (msg.includes("expired") || msg.includes("refresh")) {
-      return "credentials-expired";
-    }
-    return "credentials-invalid";
-  }
-  if (errorType === "invalid_api_key" || errorCode === "invalid_api_key" || sdkCode === "invalid_api_key" || message.toLowerCase().includes("invalid_api_key") || message.toLowerCase().includes("invalid api key")) {
-    return "credentials-invalid";
-  }
-  if (errorType === "credit_balance_too_low" || errorCode === "credit_balance_too_low" || sdkCode === "credit_balance_too_low" || message.toLowerCase().includes("credit_balance_too_low") || message.toLowerCase().includes("credit balance")) {
-    return "credit-exhausted";
-  }
-  if (errorType === "rate_limit_error" || errorCode === "rate_limit_error" || sdkCode === "rate_limit_error" || message.toLowerCase().includes("rate_limit_error") || message.toLowerCase().includes("rate limit")) {
-    return "rate-limited";
-  }
-  if (errorType === "overloaded_error" || errorCode === "overloaded_error" || sdkCode === "overloaded_error" || message.toLowerCase().includes("overloaded_error") || message.toLowerCase().includes("overloaded")) {
-    return "rate-limited";
-  }
-  if (errorType === "agent-crashed" || errorCode === "agent-crashed") {
-    return "agent-crashed";
-  }
-  if (errorType === "agent-restarted-unexpectedly" || errorCode === "agent-restarted-unexpectedly") {
-    return "agent-restarted-unexpectedly";
-  }
-  if (status != null) {
-    if (status >= 400 && status < 500)
-      return "unknown-4xx";
-    if (status >= 500 && status < 600)
-      return "unknown-5xx";
-  }
-  return "unknown-4xx";
-}
-function extractString(obj, key) {
-  const v = obj[key];
-  return typeof v === "string" && v.length > 0 ? v : null;
-}
-function extractNumber(obj, key) {
-  const v = obj[key];
-  return typeof v === "number" ? v : null;
-}
-function getNestedObj(obj, key) {
-  const v = obj[key];
-  return typeof v === "object" && v != null ? v : {};
-}
-var DEFAULT_OPERATOR_EVENT_COOLDOWN_MS = 5 * 60000;
-var cooldownMap = new Map;
-
 // model-unavailable.ts
 init_quota_check();
 init_card_format();
@@ -63896,6 +64080,18 @@ function isLitellmProxyLocal429(text4) {
     return true;
   return litellmV3LimiterSignalPair.every((s) => lower.includes(s));
 }
+function isLitellmProxyAuthMisconfig(text4) {
+  if (typeof text4 !== "string" || text4.length === 0)
+    return false;
+  const sample = text4.length > 16384 ? text4.slice(0, 16384) : text4;
+  const lower = sample.toLowerCase();
+  if (lower.includes("x-api-key header is required"))
+    return true;
+  const isAuthErr = lower.includes("authentication_error") || lower.includes("authenticationerror");
+  if (!isAuthErr)
+    return false;
+  return lower.includes("fallback") && lower.includes("x-api-key");
+}
 function parseLitellmLimitDetail(text4, parseTimeNow = new Date) {
   const empty2 = { limitType: null, limit: null, currentUsage: null, resetAtMs: null };
   if (typeof text4 !== "string" || text4.length === 0)
@@ -64140,6 +64336,83 @@ function parseRelativeDuration(s) {
   return matched && total > 0 ? total : null;
 }
 
+// operator-events.ts
+function classifyClaudeError(raw) {
+  try {
+    return classifyInner(raw);
+  } catch {
+    return "unknown-4xx";
+  }
+}
+function classifyInner(raw) {
+  if (raw == null)
+    return "unknown-4xx";
+  const obj = typeof raw === "object" ? raw : {};
+  const errorType = extractString(obj, "error_type") ?? extractString(obj, "type") ?? extractString(getNestedObj(obj, "error"), "type") ?? "";
+  const errorCode = extractString(obj, "code") ?? extractString(getNestedObj(obj, "error"), "code") ?? "";
+  const message = extractString(obj, "message") ?? extractString(getNestedObj(obj, "error"), "message") ?? (typeof raw === "string" ? raw : "") ?? "";
+  const status = extractNumber(obj, "status") ?? extractNumber(obj, "statusCode") ?? extractNumber(obj, "status_code") ?? null;
+  const sdkCode = extractString(obj, "error_code") ?? "";
+  if (isLitellmProxyAuthMisconfig(`${errorType}
+${errorCode}
+${sdkCode}
+${message}`)) {
+    return "proxy-misconfig";
+  }
+  if (errorType === "authentication_error" || errorCode === "authentication_error" || sdkCode === "authentication_error" || message.toLowerCase().includes("authentication_error")) {
+    const msg = message.toLowerCase();
+    if (msg.includes("expired") || msg.includes("refresh")) {
+      return "credentials-expired";
+    }
+    return "credentials-invalid";
+  }
+  if (errorType === "invalid_api_key" || errorCode === "invalid_api_key" || sdkCode === "invalid_api_key" || message.toLowerCase().includes("invalid_api_key") || message.toLowerCase().includes("invalid api key")) {
+    return "credentials-invalid";
+  }
+  if (errorType === "credit_balance_too_low" || errorCode === "credit_balance_too_low" || sdkCode === "credit_balance_too_low" || message.toLowerCase().includes("credit_balance_too_low") || message.toLowerCase().includes("credit balance")) {
+    return "credit-exhausted";
+  }
+  if (errorType === "rate_limit_error" || errorCode === "rate_limit_error" || sdkCode === "rate_limit_error" || message.toLowerCase().includes("rate_limit_error") || message.toLowerCase().includes("rate limit")) {
+    return "rate-limited";
+  }
+  if (errorType === "overloaded_error" || errorCode === "overloaded_error" || sdkCode === "overloaded_error" || message.toLowerCase().includes("overloaded_error") || message.toLowerCase().includes("overloaded")) {
+    return "rate-limited";
+  }
+  if (errorType === "agent-crashed" || errorCode === "agent-crashed") {
+    return "agent-crashed";
+  }
+  if (errorType === "agent-restarted-unexpectedly" || errorCode === "agent-restarted-unexpectedly") {
+    return "agent-restarted-unexpectedly";
+  }
+  if (status != null) {
+    if (status >= 400 && status < 500)
+      return "unknown-4xx";
+    if (status >= 500 && status < 600)
+      return "unknown-5xx";
+  }
+  return "unknown-4xx";
+}
+function extractString(obj, key) {
+  const v = obj[key];
+  return typeof v === "string" && v.length > 0 ? v : null;
+}
+function extractNumber(obj, key) {
+  const v = obj[key];
+  return typeof v === "number" ? v : null;
+}
+function getNestedObj(obj, key) {
+  const v = obj[key];
+  return typeof v === "object" && v != null ? v : {};
+}
+var DEFAULT_OPERATOR_EVENT_COOLDOWN_MS = 5 * 60000;
+var cooldownMap = new Map;
+var OPERATOR_ACTIONABLE_KINDS = new Set([
+  "credentials-expired",
+  "credentials-invalid",
+  "credit-exhausted",
+  "proxy-misconfig"
+]);
+
 // session-tail.ts
 function sanitizeCwdToProjectName(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
@@ -65541,13 +65814,17 @@ class AuthBrokerClient2 {
       sock.destroy();
     }
   }
-  async getCredentials(provider) {
+  async getCredentials(provider, account) {
     const base = {
       v: PROTOCOL_VERSION,
       id: randomUUID4(),
       op: "get-credentials"
     };
-    const req = provider !== undefined ? { ...base, provider } : base;
+    let req = base;
+    if (provider !== undefined)
+      req = { ...req, provider };
+    if (account !== undefined)
+      req = { ...req, account };
     const data = await this.send(req);
     return data;
   }
@@ -66757,6 +67034,20 @@ function renderOperatorEvent(ev) {
           ]
         }
       };
+    case "proxy-misconfig":
+      return {
+        text: [
+          `\uD83D\uDEE0\ufe0f **Model-gateway auth misconfig** for **${agent}**.`,
+          detail ? `_${detail}_` : "",
+          `The local LiteLLM proxy re-dispatched a fallback without forwarding the OAuth header (keyless deployment \u2192 Anthropic 401). Fix the proxy fallback config \u2014 this is NOT a login problem.`
+        ].filter(Boolean).join(`
+`),
+        keyboard: {
+          inline_keyboard: [
+            [{ text: "\u274c Dismiss", callback_data: `op:dismiss:${encodeURIComponent(ev.agent)}` }]
+          ]
+        }
+      };
     case "credit-exhausted":
       return {
         text: [
@@ -66917,6 +67208,55 @@ function shouldEmitOperatorEvent(agent, kind, now = Date.now(), cooldownMs = DEF
   cooldownMap2.set(key, now);
   return true;
 }
+var OPERATOR_ACTIONABLE_KINDS2 = new Set([
+  "credentials-expired",
+  "credentials-invalid",
+  "credit-exhausted",
+  "proxy-misconfig"
+]);
+function isOperatorActionableKind(kind) {
+  return OPERATOR_ACTIONABLE_KINDS2.has(kind);
+}
+function decideOperatorEventAudience(kind, allowFrom, operatorChatId) {
+  if (!isOperatorActionableKind(kind)) {
+    return { operatorChats: [...allowFrom], userNoticeChats: [] };
+  }
+  const operator = operatorChatId != null && allowFrom.includes(operatorChatId) ? operatorChatId : allowFrom[0];
+  const operatorChats = operator != null ? [operator] : [];
+  const userNoticeChats = allowFrom.filter((c) => c !== operator);
+  return { operatorChats, userNoticeChats };
+}
+function renderUserFacingFailureNotice() {
+  return "\u26a0\ufe0f Sorry \u2014 I couldn't complete that just now. It's a problem on our side, not anything you did. Please try again shortly.";
+}
+
+// pending-user-notice.ts
+var PENDING_USER_NOTICE_TTL_MS = 10 * 60000;
+
+class PendingUserNoticeGate {
+  pending = [];
+  schedule(notice) {
+    this.prune(notice.atMs);
+    this.pending = this.pending.filter((p) => p.agent !== notice.agent);
+    this.pending.push(notice);
+  }
+  resolveTurnEnd(turnDeliveredReply, now = Date.now()) {
+    this.prune(now);
+    const out = turnDeliveredReply ? [] : [...this.pending];
+    this.pending = [];
+    return out;
+  }
+  hasPending(now = Date.now()) {
+    return this.pending.some((p) => now - p.atMs < PENDING_USER_NOTICE_TTL_MS);
+  }
+  prune(now) {
+    this.pending = this.pending.filter((p) => now - p.atMs < PENDING_USER_NOTICE_TTL_MS);
+  }
+  reset() {
+    this.pending = [];
+  }
+}
+var pendingUserNoticeGate = new PendingUserNoticeGate;
 
 // operator-events-history.ts
 var EVENT_TTL_MS = 60 * 60 * 1000;
@@ -67030,7 +67370,13 @@ function parseLlmError(raw, retryState) {
 }
 function classifyKindAndSource(text4) {
   const lower = text4.toLowerCase();
+  if (isLitellmProxyAuthMisconfig(text4)) {
+    return { kind: "infra_misconfig", source: "litellm-local" };
+  }
   const claudeKind = classifyClaudeError({ message: text4, type: text4 });
+  if (claudeKind === "proxy-misconfig") {
+    return { kind: "infra_misconfig", source: "litellm-local" };
+  }
   if (claudeKind === "credentials-expired" || claudeKind === "credentials-invalid") {
     return { kind: "auth", source: "anthropic" };
   }
@@ -67073,6 +67419,8 @@ function buildCoreText(kind, source) {
       return "Usage limit reached on this Claude subscription.";
     case "auth":
       return "Claude login needs re-authentication.";
+    case "infra_misconfig":
+      return "Local model-gateway auth misconfig (proxy fallback dropped the OAuth header).";
     case "transient":
       return source === "network" ? "Couldn't reach Anthropic (network) \u2014 retrying automatically." : "A temporary upstream hiccup \u2014 retrying automatically.";
     case "unknown":
@@ -67118,6 +67466,8 @@ function buildRecommendation(parsed, tz) {
   switch (parsed.kind) {
     case "auth":
       return "\u2192 Re-authenticate this account to continue.";
+    case "infra_misconfig":
+      return "\u2192 Fix the LiteLLM proxy fallback config (deployment missing OAuth passthrough).";
     case "quota_wall": {
       const reset2 = formatResetClock(parsed.resetAt, tz);
       return reset2 ? `\u2192 Switch to another account, or wait for the quota to reset at ${reset2}.` : "\u2192 Switch to another account, or wait for the quota to reset.";
@@ -67159,6 +67509,8 @@ function kindEmoji(kind) {
       return "\u26a0\ufe0f";
     case "auth":
       return "\uD83D\uDD11";
+    case "infra_misconfig":
+      return "\uD83D\uDEE0\ufe0f";
     case "transient":
       return "\uD83C\uDF10";
     case "unknown":
@@ -71318,6 +71670,30 @@ function isValidModelArg(arg) {
 function isSrModel(name) {
   return name.startsWith("sr-");
 }
+function parseModelSwitchTarget(reason) {
+  const m = reason.match(/\/model\s+(\S+)/);
+  return m ? m[1] : null;
+}
+function modelFamilyToken(token) {
+  const t = token.trim().toLowerCase();
+  if (t.startsWith("claude-")) {
+    const family = t.slice("claude-".length).split("-").filter((p) => p.length > 0)[0];
+    return family ?? t;
+  }
+  return t;
+}
+function classifyModelSwitchConfirmation(input) {
+  const { reason, launched, configured } = input;
+  const isApplyBoot = launched.length > 0 && launched !== configured;
+  if (isApplyBoot)
+    return { kind: "applied", launched };
+  const target = parseModelSwitchTarget(reason);
+  const revertedTo = launched.length > 0 ? launched : configured;
+  if (target != null && target.toLowerCase() !== "default" && modelFamilyToken(target) !== modelFamilyToken(revertedTo)) {
+    return { kind: "not-applied", target, revertedTo };
+  }
+  return { kind: "default", launched: revertedTo };
+}
 function parseModelCommand(text4) {
   const m = text4.match(/^\/model(?:@[A-Za-z0-9_]+)?(?:\s+([\s\S]*))?$/);
   if (!m)
@@ -71761,6 +72137,7 @@ var MODEL_CALLBACK_ALIAS2 = "mdl:alias:";
 // gateway/session-model-file.ts
 var SESSION_MODEL_FILE = ".session-model";
 var CONFIGURED_DEFAULT_MODEL_FILE = ".configured-default-model";
+var SESSION_MODEL_BOOT_ATTEMPTS_FILE = ".session-model-boot-attempts";
 function atomicWrite(path2, content3) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync21(tmp, content3, "utf8");
@@ -71792,6 +72169,14 @@ function clearSessionModelFile(agentDir) {
     rmSync4(join30(agentDir, SESSION_MODEL_FILE), { force: true });
   } catch {}
 }
+function consumeSessionModelCarrierOnHealthyBoot(agentDir) {
+  try {
+    rmSync4(join30(agentDir, SESSION_MODEL_FILE), { force: true });
+  } catch {}
+  try {
+    rmSync4(join30(agentDir, SESSION_MODEL_BOOT_ATTEMPTS_FILE), { force: true });
+  } catch {}
+}
 function restoreSessionModelFileRaw(agentDir, raw) {
   if (raw == null) {
     clearSessionModelFile(agentDir);
@@ -72165,14 +72550,7 @@ init_merge();
 
 // ../src/agents/scaffold.ts
 init_merge();
-
-// ../src/config/timezone.ts
-var CONTAINER_DEFAULT_UTC_ZONES = new Set([
-  "UTC",
-  "Etc/UTC",
-  "Etc/Universal",
-  "Universal"
-]);
+init_timezone();
 
 // ../src/cli/agent-config.ts
 import { join as join31 } from "node:path";
@@ -72922,6 +73300,7 @@ init_schema();
 init_paths();
 init_overlay_loader();
 init_merge();
+init_timezone();
 var import_yaml4 = __toESM(require_dist(), 1);
 import { readFileSync as readFileSync27, existsSync as existsSync27 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
@@ -73049,8 +73428,30 @@ function loadConfig2(configPath) {
   if (notionIssues.length > 0) {
     throw new ConfigError2(`Invalid notion_workspace configuration in ${filePath}`, notionIssues);
   }
+  validateAllTimezones2(config, filePath);
   return config;
 }
+function validateAllTimezones2(config, filePath) {
+  const issues = [];
+  const check = (zone, where) => {
+    if (zone == null)
+      return;
+    if (!isResolvableTimezone(zone)) {
+      issues.push(`  ${where}: "${zone}" is not a resolvable IANA timezone ` + `(shape is valid but no such zone exists \u2014 check for a typo, ` + `e.g. "Australia/Melbourne", "America/New_York", "UTC").`);
+    }
+  };
+  check(config.switchroom?.timezone, "switchroom.timezone");
+  check(config.defaults?.timezone, "defaults.timezone");
+  for (const [profileName, profile] of Object.entries(config.profiles ?? {})) {
+    check(profile?.timezone, `profiles.${profileName}.timezone`);
+  }
+  for (const [agentName3, agentRaw] of Object.entries(config.agents)) {
+    check(agentRaw?.timezone, `agents.${agentName3}.timezone`);
+  }
+  if (issues.length > 0) {
+    throw new ConfigError2(`Invalid timezone configuration in ${filePath}`, issues);
+  }
+}
 function validateAllCronTopicAliases2(config, filePath) {
   const issues = [];
   for (const [agentName3, agentRaw] of Object.entries(config.agents)) {
@@ -84169,10 +84570,10 @@ function effectiveTurnAgeMs(markerAgeMs, turnStartedAt, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.18.29";
-var COMMIT_SHA = "8f9b38b3";
-var COMMIT_DATE = "2026-07-16T21:47:27+10:00";
-var LATEST_PR = 3281;
+var VERSION = "0.18.30";
+var COMMIT_SHA = "7729c674";
+var COMMIT_DATE = "2026-07-17T10:52:43+10:00";
+var LATEST_PR = 3293;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -86203,6 +86604,7 @@ var TOPIC_ID = process.env.TELEGRAM_TOPIC_ID ? Number(process.env.TELEGRAM_TOPIC
 var AGENT_ADMIN = process.env.SWITCHROOM_AGENT_ADMIN === "true";
 var bot = new import_grammy13.Bot(TOKEN);
 installTgPostLogger(bot);
+installUpdateTap(bot, (line) => process.stderr.write(line));
 var lastGetUpdatesHeartbeatMs = Date.now();
 bot.api.config.use(async (prev, method, payload, signal) => {
   try {
@@ -87712,6 +88114,7 @@ function endCurrentTurnAtomic(turn, opts) {
   turn.narrativeGate?.teardown();
   purgeReactionTracking(statusKey(turn.sessionChatId, turn.sessionThreadId), turn);
   armNoReplyDrainTimer(turn);
+  flushPendingUserFailureNotices(turn.finalAnswerDelivered || turn.replyCalled);
   return turnEndedAt;
 }
 function maybeProactiveCompact() {
@@ -89157,7 +89560,12 @@ function emitGatewayOperatorEvent(event) {
   const opEventSupergroup = resolveAgentSupergroupChatId();
   process.stderr.write(`telegram gateway: operator-event posting agent=${agent} kind=${kind} to ${access.allowFrom.length} chat(s)` + (opEventTopic != null ? ` topic=${opEventTopic}` : "") + `
 `);
-  for (const chat_id of access.allowFrom) {
+  const { operatorChats, userNoticeChats } = decideOperatorEventAudience(kind, access.allowFrom, access.allowFrom[0]);
+  if (userNoticeChats.length > 0) {
+    process.stderr.write(`telegram gateway: operator-event operator-only routing agent=${agent} kind=${kind} operatorChats=${operatorChats.length} userNoticeChats=${userNoticeChats.length}
+`);
+  }
+  for (const chat_id of operatorChats) {
     const opEventThread = topicForRecipient({ recipientChatId: chat_id, resolvedTopic: opEventTopic, supergroupChatId: opEventSupergroup });
     const opts = {
       ...renderedKeyboard ? { reply_markup: renderedKeyboard } : {},
@@ -89177,6 +89585,38 @@ function emitGatewayOperatorEvent(event) {
 `);
     });
   }
+  if (userNoticeChats.length > 0) {
+    pendingUserNoticeGate.schedule({
+      chatIds: userNoticeChats,
+      text: renderUserFacingFailureNotice(),
+      agent,
+      kind,
+      atMs: Date.now()
+    });
+    process.stderr.write(`telegram gateway: operator-event user-notice deferred to turn-end agent=${agent} kind=${kind} chats=${userNoticeChats.length}
+`);
+  }
+}
+function flushPendingUserFailureNotices(turnDeliveredReply) {
+  const notices = pendingUserNoticeGate.resolveTurnEnd(turnDeliveredReply);
+  if (notices.length === 0)
+    return;
+  const noticeTopic = resolveAgentOutboundTopic({ kind: "compact-watchdog" });
+  const noticeSupergroup = resolveAgentSupergroupChatId();
+  for (const notice of notices) {
+    process.stderr.write(`telegram gateway: user-notice flush (turn died reply-less) agent=${notice.agent} kind=${notice.kind} chats=${notice.chatIds.length}
+`);
+    for (const chat_id of notice.chatIds) {
+      const thread = topicForRecipient({ recipientChatId: chat_id, resolvedTopic: noticeTopic, supergroupChatId: noticeSupergroup });
+      const opts = {
+        ...thread != null ? { message_thread_id: thread } : {}
+      };
+      bot.api.sendRichMessage(chat_id, richMessage2(notice.text), opts).catch((e) => {
+        process.stderr.write(`telegram gateway: user-notice send to ${chat_id} failed agent=${notice.agent} kind=${notice.kind}: ${e}
+`);
+      });
+    }
+  }
 }
 function postLegacyBanner(chatId, threadId, ackMessageId, ageSec, site) {
   const text5 = `\uD83C\uDF9B\uFE0F Switchroom restarted \u2014 ready. (took ~${ageSec}s)`;
@@ -89687,6 +90127,11 @@ function ensureIssuesCard(chatId, threadId) {
     }
     process.stderr.write(`telegram gateway: wrote PID file ${GATEWAY_PID_PATH} pid=${process.pid} startedAt=${GATEWAY_STARTED_AT_MS}
 `);
+    {
+      const carrierAgentDir = resolveAgentDirFromEnv();
+      if (carrierAgentDir != null)
+        consumeSessionModelCarrierOnHealthyBoot(carrierAgentDir);
+    }
     runBootPinCleanupAndDmSweep();
   } catch (err) {
     process.stderr.write(`telegram gateway: boot.lock_acquire_failed err=${err.message} agent=${SWITCHROOM_AGENT_NAME}
@@ -89695,6 +90140,11 @@ function ensureIssuesCard(chatId, threadId) {
       writePidFile(GATEWAY_PID_PATH, { pid: process.pid, startedAtMs: GATEWAY_STARTED_AT_MS });
       process.stderr.write(`telegram gateway: wrote PID file ${GATEWAY_PID_PATH} pid=${process.pid} startedAt=${GATEWAY_STARTED_AT_MS} (mutex-fallback)
 `);
+      {
+        const carrierAgentDir = resolveAgentDirFromEnv();
+        if (carrierAgentDir != null)
+          consumeSessionModelCarrierOnHealthyBoot(carrierAgentDir);
+      }
       runBootPinCleanupAndDmSweep();
     } catch (writeErr) {
       process.stderr.write(`telegram gateway: writePidFile failed: ${writeErr}
@@ -96288,9 +96738,10 @@ async function dispatchShortVerbViaHostd(ctx, req, label, legacyArgs) {
   await switchroomReply(ctx, `\u274C **${escapeHtmlForTg2(label)} failed via hostd** (result=${escapeHtmlForTg2(hostdResp.result)}):
 ` + preBlock(stripAnsi3(errBody)), { html: true });
 }
-async function runSwitchroomCommand(ctx, args, label, classification = "query") {
+async function runSwitchroomCommand(ctx, args, label, classification = "query", transformOutput) {
   try {
-    const output = stripAnsi3(switchroomExec(args));
+    const stripped = stripAnsi3(switchroomExec(args));
+    const output = transformOutput ? transformOutput(stripped) : stripped;
     const formatted = formatSwitchroomOutput(output);
     if (formatted) {
       await switchroomReply(ctx, preBlock(formatted), { html: true, classification });
@@ -98677,7 +99128,8 @@ bot.command("logs", async (ctx) => {
   }
   const lines = linesArg ? parseInt(linesArg, 10) : 20;
   const lineCount = isNaN(lines) || lines < 1 ? 20 : Math.min(lines, 200);
-  await runSwitchroomCommand(ctx, ["agent", "logs", name, "--lines", String(lineCount)], `logs ${name}`, "heavy");
+  const tz = resolveEnvTimezone2();
+  await runSwitchroomCommand(ctx, ["agent", "logs", name, "--lines", String(lineCount), "--timestamps"], `logs ${name}`, "heavy", (raw) => renderLogTimestampsLocal(raw, tz));
 });
 bot.command("memory", async (ctx) => {
   if (!isAuthorizedSender(ctx))
@@ -100073,6 +100525,7 @@ bot.on("message:pinned_message", async (ctx) => {
 `);
   }
 });
+installUnhandledMessageCatchAll(bot, (ctx, text5) => handleInboundCoalesced(ctx, text5, undefined), (line) => process.stderr.write(line));
 var reactionsCfg = null;
 var reactionHourCap = null;
 var reactionDebounce = null;
@@ -100833,12 +101286,23 @@ var didOneTimeSetup = false;
 `);
                 if (modelSwitchReason != null && modelSwitchMarkerChat) {
                   const chat = modelSwitchMarkerChat;
-                  const body = isApplyBoot ? `\u2705 Now running \`${launched}\` \u2014 session-only, reverts to the configured model on the next restart. Fresh session; memory and the handoff briefing carry the context.` : `\u2705 Now running \`${launched || configured}\` (the configured default) \u2014 fresh session; memory and the handoff briefing carry the context.`;
-                  lockedBot.api.sendMessage(chat.chatId, body, {
-                    parse_mode: "Markdown",
-                    ...chat.threadId != null ? { message_thread_id: chat.threadId } : {}
-                  }).catch((err) => process.stderr.write(`telegram gateway: model-switch confirmation send failed: ${err?.message ?? String(err)}
+                  const confirmation = classifyModelSwitchConfirmation({
+                    reason: modelSwitchReason,
+                    launched,
+                    configured
+                  });
+                  const hasSessionModelAlert = existsSync50(join55(smAgentDir, ".session-model-alert"));
+                  if (confirmation.kind === "not-applied" && hasSessionModelAlert) {
+                    process.stderr.write(`telegram gateway: gw /model relaunch applied \u2014 suppressing not-applied confirmation (a .session-model-alert is present and will be relayed) agent=${getMyAgentName()} target=${confirmation.target}
+`);
+                  } else {
+                    const body = confirmation.kind === "applied" ? `\u2705 Now running \`${confirmation.launched}\` \u2014 session-only, reverts to the configured model on the next restart. Fresh session; memory and the handoff briefing carry the context.` : confirmation.kind === "not-applied" ? `\u26A0\uFE0F Your switch to \`${confirmation.target}\` didn't apply \u2014 the agent reverted to \`${confirmation.revertedTo}\` (the apply-boot didn't complete). Re-issue \`/model ${confirmation.target}\` to try again.` : `\u2705 Now running \`${confirmation.launched}\` (the configured default) \u2014 fresh session; memory and the handoff briefing carry the context.`;
+                    lockedBot.api.sendMessage(chat.chatId, body, {
+                      parse_mode: "Markdown",
+                      ...chat.threadId != null ? { message_thread_id: chat.threadId } : {}
+                    }).catch((err) => process.stderr.write(`telegram gateway: model-switch confirmation send failed: ${err?.message ?? String(err)}
 `));
+                  }
                 }
               } catch {}
             }