switchroom 0.18.7 → 0.18.8

package/telegram-plugin/dist/gateway/gateway.js

@@ -6784,7 +6784,89 @@ function isBlockquoteLine(line) {
 function isHeadingLine(line) {
   return /^#{1,6}\s/.test(line.trimStart());
 }
-var RICH_MESSAGE_MAX_CHARS = 32768;
+function hardSliceToCap(text, cap = RICH_MESSAGE_MAX_CHARS) {
+  if (cap <= 0)
+    return [text];
+  if (text.length <= cap)
+    return [text];
+  const out = [];
+  for (let i = 0;i < text.length; i += cap) {
+    out.push(text.slice(i, i + cap));
+  }
+  return out;
+}
+function splitMarkdownChunks(text, maxLen = RICH_MESSAGE_MAX_CHARS) {
+  if (text.length <= maxLen)
+    return [text];
+  const chunks = [];
+  let rest = text;
+  while (rest.length > 0) {
+    if (rest.length <= maxLen) {
+      chunks.push(rest);
+      break;
+    }
+    let cut = maxLen;
+    const paraIdx = rest.lastIndexOf(`
+
+`, maxLen);
+    const lineIdx = rest.lastIndexOf(`
+`, maxLen);
+    const spaceIdx = rest.lastIndexOf(" ", maxLen);
+    if (paraIdx > maxLen / 3) {
+      cut = paraIdx;
+    } else if (lineIdx > maxLen / 3) {
+      cut = lineIdx;
+    } else if (spaceIdx > 0) {
+      cut = spaceIdx;
+    }
+    cut = backOffOpenFence(rest, cut);
+    cut = backOffTableRow(rest, cut);
+    if (cut <= 0) {
+      const sliced = hardSliceToCap(rest, maxLen);
+      chunks.push(stripBoundarySpacers(sliced[0], "trailing"));
+      rest = stripBoundarySpacers(sliced.slice(1).join(""), "leading");
+      continue;
+    }
+    chunks.push(stripBoundarySpacers(rest.slice(0, cut), "trailing"));
+    rest = stripBoundarySpacers(rest.slice(cut), "leading");
+  }
+  return chunks.map((c) => stripBoundarySpacers(c, "trailing"));
+}
+function stripBoundarySpacers(chunk, side) {
+  const sp = PARAGRAPH_SPACER;
+  if (side === "leading") {
+    return chunk.replace(new RegExp(`^(?:[ \\t]*${sp}?[ \\t]*\\n+)+`), "");
+  }
+  return chunk.replace(new RegExp(`(?:\\n+[ \\t]*${sp}?[ \\t]*)+$`), "");
+}
+function backOffOpenFence(text, cut) {
+  if (cut <= 0 || cut >= text.length)
+    return cut;
+  const before = text.slice(0, cut);
+  const fences = before.match(/^```/gm);
+  if (fences == null || fences.length % 2 === 0)
+    return cut;
+  const lastFence = before.lastIndexOf("\n```");
+  if (lastFence <= 0) {
+    return 0;
+  }
+  return lastFence;
+}
+function backOffTableRow(text, cut) {
+  if (cut <= 0 || cut >= text.length)
+    return cut;
+  const lineStart = text.lastIndexOf(`
+`, cut - 1) + 1;
+  const nextNl = text.indexOf(`
+`, cut);
+  const lineEnd = nextNl === -1 ? text.length : nextNl;
+  const line = text.slice(lineStart, lineEnd);
+  if (line.includes("|")) {
+    return lineStart > 0 ? lineStart - 1 : 0;
+  }
+  return cut;
+}
+var RICH_MESSAGE_MAX_CHARS = 32768, PARAGRAPH_SPACER = "\u00a0";
 
 // text-voice-scrub.ts
 function enabled() {
@@ -6975,6 +7057,34 @@ var require_mod4 = __commonJS((exports) => {
   __exportStar(require_worker(), exports);
 });
 
+// flood-circuit-breaker.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync5 } from "node:fs";
+function floodWaitRemainingMs(state, now) {
+  if (!state)
+    return 0;
+  return Math.max(0, state.untilTs - now);
+}
+function readFloodState(path) {
+  try {
+    if (!existsSync3(path))
+      return null;
+    const raw = JSON.parse(readFileSync3(path, "utf-8"));
+    if (typeof raw.untilTs !== "number")
+      return null;
+    return {
+      untilTs: raw.untilTs,
+      retryAfterSec: typeof raw.retryAfterSec === "number" ? raw.retryAfterSec : 0,
+      recordedTs: typeof raw.recordedTs === "number" ? raw.recordedTs : 0
+    };
+  } catch {
+    return null;
+  }
+}
+function suppressNonEssentialSendMs(path, now) {
+  return floodWaitRemainingMs(readFloodState(path), now);
+}
+var init_flood_circuit_breaker = () => {};
+
 // gateway/approval-card.ts
 function parseApprovalCallback(data) {
   if (!data.startsWith("apv:"))
@@ -17343,7 +17453,7 @@ __export(exports_client, {
 import * as net from "node:net";
 import { homedir as homedir3 } from "node:os";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function reviveDate(v) {
   if (v == null)
     return null;
@@ -17353,7 +17463,7 @@ function reviveDate(v) {
   return Number.isNaN(d.getTime()) ? null : d;
 }
 function operatorSocketPath(home = homedir3()) {
-  return join14(home, ".switchroom", "state", "auth-broker-operator", "sock");
+  return join15(home, ".switchroom", "state", "auth-broker-operator", "sock");
 }
 function resolveAuthBrokerSocketPath(opts) {
   if (opts?.socket)
@@ -17670,11 +17780,11 @@ var init_flock = () => {};
 // ../src/vault/vault.ts
 import { randomBytes as randomBytes3, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
 import {
-  readFileSync as readFileSync10,
+  readFileSync as readFileSync12,
   writeSync,
-  existsSync as existsSync7,
+  existsSync as existsSync9,
   renameSync as renameSync4,
-  mkdirSync as mkdirSync10,
+  mkdirSync as mkdirSync12,
   unlinkSync as unlinkSync7,
   fsyncSync,
   openSync,
@@ -17713,12 +17823,12 @@ function normalizeSecrets(raw) {
   return out;
 }
 function openVault(passphrase, vaultPath) {
-  if (!existsSync7(vaultPath)) {
+  if (!existsSync9(vaultPath)) {
     throw new VaultError(`Vault file not found: ${vaultPath}`);
   }
   let vaultFile;
   try {
-    vaultFile = JSON.parse(readFileSync10(vaultPath, "utf8"));
+    vaultFile = JSON.parse(readFileSync12(vaultPath, "utf8"));
   } catch {
     throw new VaultError(`Failed to read vault file: ${vaultPath}`);
   }
@@ -25473,7 +25583,7 @@ var init_schema = __esm(() => {
 });
 
 // ../src/config/paths.ts
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync10 } from "node:fs";
 import { resolve as resolve2 } from "node:path";
 function home() {
   return process.env.HOME ?? "/root";
@@ -25489,7 +25599,7 @@ function resolveStatePath2(fragment) {
   const h = home();
   const primary = resolve2(h, DEFAULT_STATE_DIR, fragment);
   const legacy = resolve2(h, LEGACY_STATE_DIR, fragment);
-  if (!existsSync8(primary) && existsSync8(legacy)) {
+  if (!existsSync10(primary) && existsSync10(legacy)) {
     warnLegacyStateOnce(legacy);
     return legacy;
   }
@@ -25502,9 +25612,9 @@ function resolveDualPath(pathStr) {
     const absolute = resolve2(h, rest);
     if (rest.startsWith(`${DEFAULT_STATE_DIR}/`)) {
       const frag = rest.slice(DEFAULT_STATE_DIR.length + 1);
-      if (!existsSync8(absolute)) {
+      if (!existsSync10(absolute)) {
         const legacy = resolve2(h, LEGACY_STATE_DIR, frag);
-        if (existsSync8(legacy)) {
+        if (existsSync10(legacy)) {
           warnLegacyStateOnce(legacy);
           return legacy;
         }
@@ -25529,7 +25639,7 @@ var init_overlay_schema = __esm(() => {
 });
 
 // ../src/config/overlay-loader.ts
-import { existsSync as existsSync9, readFileSync as readFileSync11, readdirSync as readdirSync2, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync13, readdirSync as readdirSync2, statSync as statSync3 } from "node:fs";
 import { basename as basename4, resolve as resolve3 } from "node:path";
 function deriveOverlayTitle(raw, fileName) {
   const titleFromComment = raw.match(/^#[^\S\n]*name:[^\S\n]*(\S.*?)[^\S\n]*$/m)?.[1];
@@ -25545,7 +25655,7 @@ function overlayDirFor(agentName3, subdir) {
   return resolve3(base);
 }
 function listYamlFiles(dir) {
-  if (!existsSync9(dir))
+  if (!existsSync11(dir))
     return [];
   let entries;
   try {
@@ -25593,7 +25703,7 @@ function applyAgentOverlays(config) {
         const merged = [...agentCfg.schedule ?? []];
         for (const file of files) {
           try {
-            const raw = readFileSync11(file, "utf-8");
+            const raw = readFileSync13(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             const title = deriveOverlayTitle(raw, basename4(file));
@@ -25634,7 +25744,7 @@ function applyAgentOverlays(config) {
         const seen = new Set(merged);
         for (const file of skillFiles) {
           try {
-            const raw = readFileSync11(file, "utf-8");
+            const raw = readFileSync13(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             for (const skillName of doc.skills ?? []) {
@@ -26080,7 +26190,7 @@ function validateNotionWorkspaceConfig(config) {
 }
 
 // ../src/config/loader.ts
-import { readFileSync as readFileSync12, existsSync as existsSync10 } from "node:fs";
+import { readFileSync as readFileSync14, existsSync as existsSync12 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { resolve as resolve4 } from "node:path";
 function formatZodErrors(error) {
@@ -26147,7 +26257,7 @@ function findConfigFile(startDir) {
     resolve4(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path2 of searchPaths) {
-    if (existsSync10(path2)) {
+    if (existsSync12(path2)) {
       return path2;
     }
   }
@@ -26155,12 +26265,12 @@ function findConfigFile(startDir) {
 }
 function loadConfig(configPath) {
   const filePath = configPath ?? findConfigFile();
-  if (!existsSync10(filePath)) {
+  if (!existsSync12(filePath)) {
     throw new ConfigError(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync12(filePath, "utf-8");
+    raw = readFileSync14(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -26651,7 +26761,7 @@ function isDockerRuntime() {
 import * as net2 from "node:net";
 import * as fs from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function defaultBrokerSocketPath() {
   if (fs.existsSync(OPERATOR_SOCKET_PATH))
     return OPERATOR_SOCKET_PATH;
@@ -26660,8 +26770,8 @@ function defaultBrokerSocketPath() {
   return LEGACY_SOCKET_PATH;
 }
 function vaultTokenFilePath(agentSlug) {
-  const base = process.env.SWITCHROOM_AGENTS_DIR || join15(homedir5(), ".switchroom", "agents");
-  return join15(base, agentSlug, ".vault-token");
+  const base = process.env.SWITCHROOM_AGENTS_DIR || join16(homedir5(), ".switchroom", "agents");
+  return join16(base, agentSlug, ".vault-token");
 }
 function readVaultTokenFile(agentSlug) {
   const filePath = vaultTokenFilePath(agentSlug);
@@ -26816,22 +26926,22 @@ var DEFAULT_TIMEOUT_MS2 = 2000, LEGACY_SOCKET_PATH, OPERATOR_SOCKET_PATH;
 var init_client2 = __esm(() => {
   init_protocol2();
   init_peercred();
-  LEGACY_SOCKET_PATH = join15(homedir5(), ".switchroom", "vault-broker.sock");
-  OPERATOR_SOCKET_PATH = join15(homedir5(), ".switchroom", "broker-operator", "sock");
+  LEGACY_SOCKET_PATH = join16(homedir5(), ".switchroom", "vault-broker.sock");
+  OPERATOR_SOCKET_PATH = join16(homedir5(), ".switchroom", "broker-operator", "sock");
 });
 
 // ../src/vault/resolver.ts
 import {
   chmodSync as chmodSync2,
   closeSync as closeSync2,
-  mkdirSync as mkdirSync11,
+  mkdirSync as mkdirSync13,
   mkdtempSync,
   openSync as openSync2,
   rmSync,
   statSync as statSync5,
   writeSync as writeSync2
 } from "node:fs";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import { tmpdir } from "node:os";
 import { constants as fsConstants } from "node:fs";
 function isVaultReference(value) {
@@ -26883,11 +26993,11 @@ function materializationRoot() {
     return cachedRoot;
   const xdg = process.env.XDG_RUNTIME_DIR;
   if (xdg) {
-    const base = join16(xdg, "switchroom", "vault");
-    mkdirSync11(base, { recursive: true, mode: 448 });
-    cachedRoot = mkdtempSync(join16(base, "run-"));
+    const base = join17(xdg, "switchroom", "vault");
+    mkdirSync13(base, { recursive: true, mode: 448 });
+    cachedRoot = mkdtempSync(join17(base, "run-"));
   } else {
-    cachedRoot = mkdtempSync(join16(tmpdir(), "switchroom-vault-"));
+    cachedRoot = mkdtempSync(join17(tmpdir(), "switchroom-vault-"));
   }
   chmodSync2(cachedRoot, 448);
   return cachedRoot;
@@ -26902,13 +27012,13 @@ function writeFileExclusive(filePath, content3) {
   }
 }
 function materializeFilesEntry(key, files) {
-  const dir = join16(materializationRoot(), key);
+  const dir = join17(materializationRoot(), key);
   if (materializedDirs.has(dir)) {
     try {
       rmSync(dir, { recursive: true, force: true });
     } catch {}
   }
-  mkdirSync11(dir, { recursive: true, mode: 448 });
+  mkdirSync13(dir, { recursive: true, mode: 448 });
   chmodSync2(dir, 448);
   const st = statSync5(dir);
   if (typeof process.getuid === "function" && st.uid !== process.getuid()) {
@@ -26918,7 +27028,7 @@ function materializeFilesEntry(key, files) {
     if (filename.includes("/") || filename.includes("\\") || filename === ".." || filename === "." || filename.includes("\x00")) {
       throw new Error(`Refusing to materialize vault file with unsafe name: ${filename}`);
     }
-    const filePath = join16(dir, filename);
+    const filePath = join17(dir, filename);
     const content3 = encoding === "base64" ? Buffer.from(value, "base64") : value;
     writeFileExclusive(filePath, content3);
   }
@@ -29432,8 +29542,8 @@ __export(exports_history, {
   checkpointWal: () => checkpointWal,
   _resetForTests: () => _resetForTests
 });
-import { chmodSync as chmodSync4, existsSync as existsSync17, mkdirSync as mkdirSync15 } from "fs";
-import { join as join19 } from "path";
+import { chmodSync as chmodSync4, existsSync as existsSync19, mkdirSync as mkdirSync17 } from "fs";
+import { join as join20 } from "path";
 function loadDatabaseClass() {
   if (DatabaseClass != null)
     return DatabaseClass;
@@ -29455,8 +29565,8 @@ function initHistory(stateDir, retentionDays = 30) {
   if (db != null)
     return;
   const Database = loadDatabaseClass();
-  mkdirSync15(stateDir, { recursive: true, mode: 448 });
-  const path2 = join19(stateDir, "history.db");
+  mkdirSync17(stateDir, { recursive: true, mode: 448 });
+  const path2 = join20(stateDir, "history.db");
   dbPath = path2;
   db = new Database(path2, { create: true });
   db.exec("PRAGMA journal_mode = WAL");
@@ -29494,7 +29604,7 @@ function initHistory(stateDir, retentionDays = 30) {
   }
   for (const suffix of ["", "-shm", "-wal"]) {
     const f = path2 + suffix;
-    if (existsSync17(f)) {
+    if (existsSync19(f)) {
       try {
         chmodSync4(f, 420);
       } catch {}
@@ -29519,7 +29629,7 @@ function checkpointWal() {
     if (dbPath) {
       for (const suffix of ["-shm", "-wal"]) {
         const f = dbPath + suffix;
-        if (existsSync17(f)) {
+        if (existsSync19(f)) {
           try {
             chmodSync4(f, 420);
           } catch {}
@@ -29686,14 +29796,14 @@ var init_history = __esm(() => {
 });
 
 // quota-check.ts
-import { readFileSync as readFileSync17, existsSync as existsSync18 } from "fs";
-import { join as join20 } from "path";
+import { readFileSync as readFileSync19, existsSync as existsSync20 } from "fs";
+import { join as join21 } from "path";
 function readOauthToken(claudeConfigDir) {
-  const tokenFile = join20(claudeConfigDir, ".oauth-token");
-  if (!existsSync18(tokenFile))
+  const tokenFile = join21(claudeConfigDir, ".oauth-token");
+  if (!existsSync20(tokenFile))
     return null;
   try {
-    const raw = readFileSync17(tokenFile, "utf-8").trim();
+    const raw = readFileSync19(tokenFile, "utf-8").trim();
     return raw.length > 0 ? raw : null;
   } catch {
     return null;
@@ -32777,7 +32887,7 @@ var require_util = __commonJS((exports2) => {
     return path2;
   }
   exports2.normalize = normalize;
-  function join25(aRoot, aPath) {
+  function join27(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -32809,7 +32919,7 @@ var require_util = __commonJS((exports2) => {
     }
     return joined;
   }
-  exports2.join = join25;
+  exports2.join = join27;
   exports2.isAbsolute = function(aPath) {
     return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
   };
@@ -32982,7 +33092,7 @@ var require_util = __commonJS((exports2) => {
           parsed.path = parsed.path.substring(0, index2 + 1);
         }
       }
-      sourceURL = join25(urlGenerate(parsed), sourceURL);
+      sourceURL = join27(urlGenerate(parsed), sourceURL);
     }
     return normalize(sourceURL);
   }
@@ -35587,19 +35697,19 @@ function renderAuthLine(state4, agentName3, now = Date.now()) {
 }
 
 // gateway/quota-cache.ts
-import { existsSync as existsSync33, readFileSync as readFileSync34, writeFileSync as writeFileSync26, mkdirSync as mkdirSync25 } from "fs";
-import { join as join36, dirname as dirname9 } from "path";
+import { existsSync as existsSync35, readFileSync as readFileSync37, writeFileSync as writeFileSync29, mkdirSync as mkdirSync27 } from "fs";
+import { join as join38, dirname as dirname10 } from "path";
 function defaultCachePath() {
-  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join36(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
+  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join38(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
 }
 function readQuotaCache(opts = {}) {
   const path2 = opts.path ?? defaultCachePath();
   const now = opts.now ?? Date.now();
-  if (!existsSync33(path2))
+  if (!existsSync35(path2))
     return null;
   let entry;
   try {
-    entry = JSON.parse(readFileSync34(path2, "utf8"));
+    entry = JSON.parse(readFileSync37(path2, "utf8"));
   } catch {
     return null;
   }
@@ -35625,8 +35735,8 @@ function writeQuotaCache(result, opts = {}) {
     result
   };
   try {
-    mkdirSync25(dirname9(path2), { recursive: true });
-    writeFileSync26(path2, JSON.stringify(entry, null, 2), { mode: 384 });
+    mkdirSync27(dirname10(path2), { recursive: true });
+    writeFileSync29(path2, JSON.stringify(entry, null, 2), { mode: 384 });
   } catch {}
 }
 var DEFAULT_TTL_MS4, RATE_LIMIT_TTL_MS;
@@ -35636,8 +35746,8 @@ var init_quota_cache = __esm(() => {
 });
 
 // gateway/boot-probes.ts
-import { readFileSync as readFileSync35, readdirSync as readdirSync8, existsSync as existsSync34 } from "fs";
-import { join as join37 } from "path";
+import { readFileSync as readFileSync38, readdirSync as readdirSync8, existsSync as existsSync36 } from "fs";
+import { join as join39 } from "path";
 import { execFile as execFileCb } from "child_process";
 import { promisify } from "util";
 async function withTimeout(label, p, timeoutMs = PROBE_TIMEOUT_MS) {
@@ -35679,11 +35789,11 @@ function mapPlan(billingType, hasExtra) {
 }
 async function probeAccount(agentDir) {
   return withTimeout("Account", (async () => {
-    const claudeDir = join37(agentDir, ".claude");
-    const claudeJsonPath = join37(claudeDir, ".claude.json");
+    const claudeDir = join39(agentDir, ".claude");
+    const claudeJsonPath = join39(claudeDir, ".claude.json");
     let cfg = {};
     try {
-      const raw = readFileSync35(claudeJsonPath, "utf8");
+      const raw = readFileSync38(claudeJsonPath, "utf8");
       cfg = JSON.parse(raw);
     } catch {
       return { status: "fail", label: "Account", detail: "no .claude.json" };
@@ -35701,12 +35811,12 @@ async function probeAccount(agentDir) {
     let tokenStr = "";
     let status = "ok";
     for (const candidate of [
-      join37(claudeDir, ".oauth-token.meta.json"),
-      join37(claudeDir, "accounts", "default", ".oauth-token.meta.json")
+      join39(claudeDir, ".oauth-token.meta.json"),
+      join39(claudeDir, "accounts", "default", ".oauth-token.meta.json")
     ]) {
-      if (existsSync34(candidate)) {
+      if (existsSync36(candidate)) {
         try {
-          const meta = JSON.parse(readFileSync35(candidate, "utf8"));
+          const meta = JSON.parse(readFileSync38(candidate, "utf8"));
           if (meta.expiresAt) {
             tokenStr = " \u00b7 " + formatDaysFromNow(meta.expiresAt);
             const daysLeft = Math.round((meta.expiresAt - Date.now()) / 86400000);
@@ -35881,9 +35991,9 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
     if (!cgroup)
       return null;
     const procsPath = `/sys/fs/cgroup${cgroup}/cgroup.procs`;
-    if (!existsSync34(procsPath))
+    if (!existsSync36(procsPath))
       return null;
-    const pidsRaw = readFileSync35(procsPath, "utf-8");
+    const pidsRaw = readFileSync38(procsPath, "utf-8");
     const pids = pidsRaw.split(`
 `).map((s) => s.trim()).filter(Boolean);
     if (pids.length === 0)
@@ -35896,7 +36006,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
       let rss = 0;
       let comm = "";
       try {
-        const status = readFileSync35(`/proc/${pid}/status`, "utf-8");
+        const status = readFileSync38(`/proc/${pid}/status`, "utf-8");
         const rssLine = status.split(`
 `).find((l) => l.startsWith("VmRSS:"));
         if (rssLine) {
@@ -35908,7 +36018,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
         continue;
       }
       try {
-        comm = readFileSync35(`/proc/${pid}/comm`, "utf-8").trim();
+        comm = readFileSync38(`/proc/${pid}/comm`, "utf-8").trim();
       } catch {}
       candidates.push({ pid, rss, comm });
     }
@@ -36088,9 +36198,9 @@ async function probeQuota(claudeConfigDir, _agentDir, fetchImpl = fetch, opts =
       let claudeDirForProbe = null;
       for (const candidate of [
         claudeConfigDir,
-        join37(claudeConfigDir, "accounts", "default")
+        join39(claudeConfigDir, "accounts", "default")
       ]) {
-        if (existsSync34(join37(candidate, ".oauth-token"))) {
+        if (existsSync36(join39(candidate, ".oauth-token"))) {
           claudeDirForProbe = candidate;
           break;
         }
@@ -36155,7 +36265,7 @@ async function probeHindsight(bankName, fetchImpl = fetch) {
 }
 function readContainerBootTimeMsForProbe() {
   try {
-    const stat1 = readFileSync35("/proc/1/stat", "utf8");
+    const stat1 = readFileSync38("/proc/1/stat", "utf8");
     const lastParen = stat1.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -36163,7 +36273,7 @@ function readContainerBootTimeMsForProbe() {
     const starttimeTicks = Number(after[19]);
     if (!Number.isFinite(starttimeTicks))
       return null;
-    const procStat = readFileSync35("/proc/stat", "utf8");
+    const procStat = readFileSync38("/proc/stat", "utf8");
     const btimeLine = procStat.split(`
 `).find((l) => l.startsWith("btime "));
     if (!btimeLine)
@@ -36261,7 +36371,7 @@ async function probeUds(label, socketPath, opts = {}) {
   }
   return withTimeout(label, (async () => {
     if (!opts.connectImpl) {
-      if (!existsSync34(socketPath)) {
+      if (!existsSync36(socketPath)) {
         return {
           status: "fail",
           label,
@@ -36325,7 +36435,7 @@ async function probeSkills(agentDir, opts = {}) {
   return withTimeout("Skills", (async () => {
     const fs2 = opts.fs ?? realSkillsFs;
     const max = opts.maxNamesShown ?? 3;
-    const skillsDir = join37(agentDir, ".claude", "skills");
+    const skillsDir = join39(agentDir, ".claude", "skills");
     if (!fs2.exists(skillsDir)) {
       return { status: "ok", label: "Skills", detail: "no skills dir" };
     }
@@ -36340,17 +36450,17 @@ async function probeSkills(agentDir, opts = {}) {
     }
     const dangling = [];
     for (const name of entries) {
-      const skillPath = join37(skillsDir, name);
+      const skillPath = join39(skillsDir, name);
       if (!fs2.exists(skillPath)) {
         dangling.push(name);
         continue;
       }
-      const skillMd = join37(skillPath, "SKILL.md");
+      const skillMd = join39(skillPath, "SKILL.md");
       if (!fs2.exists(skillMd) && !fs2.exists(skillPath + ".md")) {
         continue;
       }
     }
-    const overlayDir = opts.overlaySkillsDir ?? join37(agentDir, "skills.d");
+    const overlayDir = opts.overlaySkillsDir ?? join39(agentDir, "skills.d");
     const overlaySlugs = new Set;
     if (fs2.exists(overlayDir)) {
       let overlayEntries = [];
@@ -36392,8 +36502,8 @@ function renderBucketedSkills(switchroom, agent) {
 }
 async function probeConnections(agentDir, opts = {}) {
   return withTimeout("Connections", (async () => {
-    const path2 = join37(agentDir, ".claude", "connection-health.json");
-    const read = opts.readFileImpl ?? ((p) => readFileSync35(p, "utf8"));
+    const path2 = join39(agentDir, ".claude", "connection-health.json");
+    const read = opts.readFileImpl ?? ((p) => readFileSync38(p, "utf8"));
     let issues = [];
     try {
       const parsed = JSON.parse(read(path2));
@@ -36424,25 +36534,25 @@ var init_boot_probes = __esm(() => {
   execFile = promisify(execFileCb);
   realProcFs = {
     readdir: (p) => readdirSync8(p),
-    readFile: (p) => readFileSync35(p, "utf-8")
+    readFile: (p) => readFileSync38(p, "utf-8")
   };
   realSchedulerFs = {
-    readFile: (p) => readFileSync35(p, "utf-8"),
+    readFile: (p) => readFileSync38(p, "utf-8"),
     mtimeMs: (p) => {
       const { statSync: statSync11 } = __require("fs");
       return statSync11(p).mtimeMs;
     },
-    exists: (p) => existsSync34(p)
+    exists: (p) => existsSync36(p)
   };
   realSkillsFs = {
     readdir: (p) => readdirSync8(p),
-    exists: (p) => existsSync34(p)
+    exists: (p) => existsSync36(p)
   };
 });
 
 // gateway/boot-issue-cache.ts
-import { existsSync as existsSync35, readFileSync as readFileSync36, writeFileSync as writeFileSync27, mkdirSync as mkdirSync26, renameSync as renameSync12 } from "fs";
-import { dirname as dirname10 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync39, writeFileSync as writeFileSync30, mkdirSync as mkdirSync28, renameSync as renameSync13 } from "fs";
+import { dirname as dirname11 } from "path";
 function fingerprintProbe(key, r) {
   if (r.status === "ok")
     return `${key}:ok`;
@@ -36521,11 +36631,11 @@ function diffProbes(probes, cache, opts = {}) {
   return out;
 }
 function loadCache(path2, now = Date.now) {
-  if (!existsSync35(path2))
+  if (!existsSync37(path2))
     return { ...EMPTY_CACHE, probes: {} };
   let raw;
   try {
-    raw = readFileSync36(path2, "utf-8");
+    raw = readFileSync39(path2, "utf-8");
   } catch {
     return { ...EMPTY_CACHE, probes: {} };
   }
@@ -36534,7 +36644,7 @@ function loadCache(path2, now = Date.now) {
     parsed = JSON.parse(raw);
   } catch {
     try {
-      renameSync12(path2, `${path2}.corrupt-${now()}`);
+      renameSync13(path2, `${path2}.corrupt-${now()}`);
     } catch {}
     return { ...EMPTY_CACHE, probes: {} };
   }
@@ -36568,10 +36678,10 @@ function applyAndSave(path2, cache, diff) {
     }
   }
   try {
-    mkdirSync26(dirname10(path2), { recursive: true });
+    mkdirSync28(dirname11(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
-    writeFileSync27(tmp, JSON.stringify(next), { mode: 384 });
-    renameSync12(tmp, path2);
+    writeFileSync30(tmp, JSON.stringify(next), { mode: 384 });
+    renameSync13(tmp, path2);
   } catch {}
   return next;
 }
@@ -36584,8 +36694,8 @@ var init_boot_issue_cache = __esm(() => {
 
 // gateway/config-snapshot.ts
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync36, readFileSync as readFileSync37, writeFileSync as writeFileSync28, mkdirSync as mkdirSync27, renameSync as renameSync13 } from "fs";
-import { dirname as dirname11 } from "path";
+import { existsSync as existsSync38, readFileSync as readFileSync40, writeFileSync as writeFileSync31, mkdirSync as mkdirSync29, renameSync as renameSync14 } from "fs";
+import { dirname as dirname12 } from "path";
 function hashStringArray(items) {
   if (!items || items.length === 0)
     return null;
@@ -36649,11 +36759,11 @@ function renderConfigChangeDim(dim) {
   }
 }
 function loadSnapshot(path2, now = Date.now) {
-  if (!existsSync36(path2))
+  if (!existsSync38(path2))
     return null;
   let raw;
   try {
-    raw = readFileSync37(path2, "utf-8");
+    raw = readFileSync40(path2, "utf-8");
   } catch {
     return null;
   }
@@ -36662,7 +36772,7 @@ function loadSnapshot(path2, now = Date.now) {
     parsed = JSON.parse(raw);
   } catch {
     try {
-      renameSync13(path2, `${path2}.corrupt-${now()}`);
+      renameSync14(path2, `${path2}.corrupt-${now()}`);
     } catch {}
     return null;
   }
@@ -36683,10 +36793,10 @@ function loadSnapshot(path2, now = Date.now) {
 }
 function persistSnapshot(path2, snapshot) {
   try {
-    mkdirSync27(dirname11(path2), { recursive: true });
+    mkdirSync29(dirname12(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
-    writeFileSync28(tmp, JSON.stringify(snapshot), { mode: 384 });
-    renameSync13(tmp, path2);
+    writeFileSync31(tmp, JSON.stringify(snapshot), { mode: 384 });
+    renameSync14(tmp, path2);
   } catch {}
 }
 var init_config_snapshot = __esm(() => {
@@ -36694,13 +36804,13 @@ var init_config_snapshot = __esm(() => {
 });
 
 // gateway/boot-card-msgid.ts
-import { readFileSync as readFileSync38, writeFileSync as writeFileSync29 } from "node:fs";
+import { readFileSync as readFileSync41, writeFileSync as writeFileSync32 } from "node:fs";
 function bootCardChatKey(chatId, threadId) {
   return `${chatId}:${threadId ?? ""}`;
 }
 function readStore(path2) {
   try {
-    const parsed = JSON.parse(readFileSync38(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync41(path2, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -36719,7 +36829,7 @@ function saveBootCardMsgId(path2, chatKey3, messageId) {
     if (store2[chatKey3] === messageId)
       return;
     store2[chatKey3] = messageId;
-    writeFileSync29(path2, JSON.stringify(store2), "utf8");
+    writeFileSync32(path2, JSON.stringify(store2), "utf8");
   } catch {}
 }
 var init_boot_card_msgid = () => {};
@@ -36734,7 +36844,7 @@ __export(exports_boot_card, {
   renderBootCard: () => renderBootCard,
   renderAccountRows: () => renderAuthLine
 });
-import { join as join38 } from "path";
+import { join as join40 } from "path";
 function resolvePersonaName(slug, loadConfig3) {
   try {
     const config = loadConfig3 ? loadConfig3() : loadConfig();
@@ -36825,7 +36935,7 @@ function renderBootCard(opts) {
   return stackCardLines(flatLines);
 }
 async function runAllProbes(opts) {
-  const claudeDir = join38(opts.agentDir, ".claude");
+  const claudeDir = join40(opts.agentDir, ".claude");
   const probes = {};
   const slug = opts.agentSlug ?? opts.agentName;
   await Promise.allSettled([
@@ -36866,6 +36976,15 @@ async function startBootCard(chatId, threadId, bot, opts, ackMessageId, log) {
   const logger2 = log ?? ((l) => process.stderr.write(l));
   const setTimeoutFn = opts.setTimeoutImpl ?? setTimeout;
   const settleMs = opts.settleWindowMs ?? SETTLE_WINDOW_MS;
+  if (opts.floodStatePath != null) {
+    const now = (opts.nowMs ?? Date.now)();
+    const remainingMs = suppressNonEssentialSendMs(opts.floodStatePath, now);
+    if (remainingMs > 0) {
+      logger2(`telegram gateway: boot-card: SUPPRESSED \u2014 Telegram flood-wait active for ~${Math.round(remainingMs / 1000)}s; ` + `not posting a restart card into the open ban window (issue #2923)
+`);
+      return { messageId: -1, complete: () => {} };
+    }
+  }
   const ackText = renderBootCard({
     agentName: opts.agentName,
     agentSlug: opts.agentSlug,
@@ -37079,6 +37198,7 @@ var init_boot_card = __esm(() => {
   init_boot_issue_cache();
   init_config_snapshot();
   init_boot_card_msgid();
+  init_flood_circuit_breaker();
   init_loader();
   init_merge();
   DOT = {
@@ -37614,7 +37734,7 @@ __export(exports_materialize_bot_token, {
   materializeBotToken: () => materializeBotToken,
   BotTokenMaterializeError: () => BotTokenMaterializeError
 });
-import { existsSync as existsSync44 } from "node:fs";
+import { existsSync as existsSync46 } from "node:fs";
 function pickConfiguredToken(config, agentName3) {
   if (agentName3) {
     const agent = config.agents?.[agentName3];
@@ -37628,7 +37748,7 @@ function tryDirectVaultRead3(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync44(vaultPath))
+  if (!existsSync46(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -37720,7 +37840,7 @@ __export(exports_tmux, {
   captureAgentPane: () => captureAgentPane
 });
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { mkdirSync as mkdirSync34, readdirSync as readdirSync10, statSync as statSync15, unlinkSync as unlinkSync19, writeFileSync as writeFileSync36 } from "node:fs";
+import { mkdirSync as mkdirSync36, readdirSync as readdirSync10, statSync as statSync15, unlinkSync as unlinkSync19, writeFileSync as writeFileSync39 } from "node:fs";
 import { resolve as resolve10 } from "node:path";
 function captureAgentPane(opts) {
   const { agentName: agentName3, agentDir, reason } = opts;
@@ -37732,7 +37852,7 @@ function captureAgentPane(opts) {
   const reasonSlug = sanitizeReason(reason);
   const outPath = resolve10(outDir, `${ts}-${reasonSlug}.txt`);
   try {
-    mkdirSync34(outDir, { recursive: true, mode: 493 });
+    mkdirSync36(outDir, { recursive: true, mode: 493 });
   } catch (err) {
     const msg = `mkdir crash-reports failed: ${err.message}`;
     console.error(`[tmux-capture] ${agentName3}: ${msg}`);
@@ -37766,7 +37886,7 @@ function captureAgentPane(opts) {
 ` + `
 `;
   try {
-    writeFileSync36(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
+    writeFileSync39(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
       mode: 420
     });
   } catch (err) {
@@ -38470,23 +38590,23 @@ var import_runner3 = __toESM(require_mod3(), 1);
 import { randomBytes as randomBytes8, createHash as createHash3 } from "crypto";
 import { execFileSync as execFileSync6, execSync as execSync2, spawn } from "child_process";
 import {
-  readFileSync as readFileSync47,
-  writeFileSync as writeFileSync37,
-  mkdirSync as mkdirSync35,
+  readFileSync as readFileSync50,
+  writeFileSync as writeFileSync40,
+  mkdirSync as mkdirSync37,
   readdirSync as readdirSync11,
-  rmSync as rmSync4,
+  rmSync as rmSync5,
   statSync as statSync16,
-  renameSync as renameSync15,
+  renameSync as renameSync16,
   realpathSync as realpathSync4,
   chmodSync as chmodSync8,
   openSync as openSync9,
   closeSync as closeSync9,
-  existsSync as existsSync45,
+  existsSync as existsSync47,
   unlinkSync as unlinkSync20,
   appendFileSync as appendFileSync6
 } from "fs";
 import { homedir as homedir16 } from "os";
-import { join as join49, extname, sep as sep3, basename as basename12 } from "path";
+import { join as join51, extname, sep as sep3, basename as basename12 } from "path";
 
 // plugin-logger.ts
 import { appendFileSync, mkdirSync, renameSync, statSync, existsSync } from "fs";
@@ -38776,6 +38896,28 @@ function resolveSafeBoundaryEnabled(configured) {
   return configured !== false;
 }
 
+// gateway/busy-ack.ts
+var BUSY_ACK_STEP_AGE_THRESHOLD_MS = 12000;
+function shouldPostBusyAck(input) {
+  if (input.gateDecision !== "buffer-until-idle" && input.gateDecision !== "steer")
+    return false;
+  if (!input.midToolCall)
+    return false;
+  if (input.stepAgeMs == null || input.stepAgeMs < BUSY_ACK_STEP_AGE_THRESHOLD_MS)
+    return false;
+  if (input.alreadyAcked)
+    return false;
+  return true;
+}
+function formatBusyAckText(input) {
+  const name = input.toolName ?? "a long-running step";
+  const activity = input.toolLabel != null && input.toolLabel.length > 0 ? `${name}: ${input.toolLabel}` : name;
+  if (input.gateDecision === "steer") {
+    return `\u23f3 Steer noted \u2014 currently inside \`${activity}\`; I'll fold it in when this step finishes.`;
+  }
+  return `\u23f3 Queued \u2014 currently inside \`${activity}\`; I'll answer when this step finishes.`;
+}
+
 // sticker-aliases.ts
 function looksLikeFileId(s) {
   return /^[A-Za-z0-9_-]{10,200}$/.test(s);
@@ -39229,12 +39371,13 @@ class VoiceOnDemandCache {
       this.flush();
       return null;
     }
-    const { text, voice, speed, filePath } = entry;
+    const { text, voice, speed, filePath, telegramFileId } = entry;
     return {
       text,
       speed,
       ...voice !== undefined ? { voice } : {},
-      ...filePath !== undefined ? { filePath } : {}
+      ...filePath !== undefined ? { filePath } : {},
+      ...telegramFileId !== undefined ? { telegramFileId } : {}
     };
   }
   setFilePath(token, filePath) {
@@ -39244,6 +39387,15 @@ class VoiceOnDemandCache {
     entry.filePath = filePath;
     this.flush();
   }
+  setTelegramFileId(token, fileId) {
+    if (fileId.length === 0)
+      return;
+    const entry = this.store.get(token);
+    if (entry == null || entry.expiresAt <= this.now())
+      return;
+    entry.telegramFileId = fileId;
+    this.flush();
+  }
   prune(tokens) {
     let changed = false;
     for (const token of tokens) {
@@ -39332,6 +39484,49 @@ function mayInjectListenButton(rawKeyboard) {
   return !rawKeyboard.some((row) => Array.isArray(row) && row.length > 0);
 }
 
+// voice-send.ts
+function extractVoiceFileId(sent) {
+  const id = sent?.voice?.file_id;
+  return typeof id === "string" && id.length > 0 ? id : undefined;
+}
+function isHttp400Error(err) {
+  if (err == null || typeof err !== "object")
+    return false;
+  const e = err;
+  return e.error_code === 400;
+}
+async function sendVoiceReusingFileId(deps) {
+  const shouldReupload = deps.isInvalidFileIdError ?? isHttp400Error;
+  if (deps.fileId != null && deps.fileId.length > 0) {
+    try {
+      const sent = await deps.sendByFileId(deps.fileId);
+      const fresh = extractVoiceFileId(sent);
+      if (fresh != null)
+        deps.onFileId(fresh);
+      return { ok: true, path: "file_id", refreshed: false };
+    } catch (err) {
+      if (!shouldReupload(err)) {
+        return { ok: false, reason: "send-failed", error: err };
+      }
+      deps.log?.(`voice-ondemand: stored file_id rejected (${String(err?.description ?? err?.message ?? err)}) \u2014 re-uploading from disk
+`);
+    }
+  }
+  const audio = await deps.loadAudio();
+  if (audio == null)
+    return { ok: false, reason: "no-audio" };
+  const refreshed = deps.fileId != null && deps.fileId.length > 0;
+  try {
+    const sent = await deps.sendByUpload(audio);
+    const fresh = extractVoiceFileId(sent);
+    if (fresh != null)
+      deps.onFileId(fresh);
+    return { ok: true, path: "upload", refreshed };
+  } catch (err) {
+    return { ok: false, reason: "send-failed", error: err };
+  }
+}
+
 // voice-presynth.ts
 import { readdirSync, statSync as statSync2, unlinkSync, mkdirSync as mkdirSync3, writeFileSync as writeFileSync2, renameSync as renameSync3 } from "fs";
 import { join as join2 } from "path";
@@ -41954,6 +42149,7 @@ import { AsyncLocalStorage } from "async_hooks";
 var import_grammy = __toESM(require_mod2(), 1);
 
 // shared/bot-runtime.ts
+init_flood_circuit_breaker();
 var tgPostTagStore = new AsyncLocalStorage;
 function escapeHtmlForTg(text) {
   return text.replace(/([\\`*_~=\[\]|])/g, "\\$1");
@@ -41981,13 +42177,13 @@ function renderVaultRequestAccessCard(req) {
 }
 
 // gateway/permission-card-store.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync as unlinkSync2 } from "node:fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, unlinkSync as unlinkSync2 } from "node:fs";
 import { join as join4 } from "node:path";
 function createPermissionCardStore(stateDir) {
   const filePath = join4(stateDir, "pending-perm-cards.json");
   function read() {
     try {
-      const raw = readFileSync3(filePath, "utf-8");
+      const raw = readFileSync4(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return Array.isArray(parsed) ? parsed : [];
     } catch {
@@ -41996,7 +42192,7 @@ function createPermissionCardStore(stateDir) {
   }
   function write(entries) {
     try {
-      writeFileSync3(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
+      writeFileSync4(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
     } catch (err) {
       process.stderr.write(`telegram gateway: permission-card-store write failed: ${err.message}
 `);
@@ -42032,13 +42228,13 @@ function createPermissionCardStore(stateDir) {
 }
 
 // gateway/pending-card-store.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3, chmodSync } from "node:fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, unlinkSync as unlinkSync3, chmodSync } from "node:fs";
 import { join as join5 } from "node:path";
 function createPendingCardStore(stateDir) {
   const filePath = join5(stateDir, "pending-approval-cards.json");
   function read() {
     try {
-      const raw = readFileSync4(filePath, "utf-8");
+      const raw = readFileSync5(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return Array.isArray(parsed) ? parsed : [];
     } catch {
@@ -42047,7 +42243,7 @@ function createPendingCardStore(stateDir) {
   }
   function write(entries) {
     try {
-      writeFileSync4(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
+      writeFileSync5(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
       chmodSync(filePath, 384);
     } catch (err) {
       process.stderr.write(`telegram gateway: pending-card-store write failed: ${err.message}
@@ -42216,7 +42412,7 @@ function distinctRequestIds(cards) {
 }
 
 // gateway/missed-approvals-store.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, unlinkSync as unlinkSync4 } from "node:fs";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4 } from "node:fs";
 import { join as join6 } from "node:path";
 var MAX_PENDING = 50;
 var MAX_DELIVERED = 20;
@@ -42224,7 +42420,7 @@ function createMissedApprovalsStore(stateDir) {
   const filePath = join6(stateDir, "missed-approvals.json");
   function read() {
     try {
-      const raw = readFileSync5(filePath, "utf-8");
+      const raw = readFileSync6(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return {
         pending: Array.isArray(parsed?.pending) ? parsed.pending : [],
@@ -42236,7 +42432,7 @@ function createMissedApprovalsStore(stateDir) {
   }
   function write(f) {
     try {
-      writeFileSync5(filePath, JSON.stringify(f), { encoding: "utf-8", mode: 384 });
+      writeFileSync6(filePath, JSON.stringify(f), { encoding: "utf-8", mode: 384 });
     } catch (err) {
       process.stderr.write(`telegram gateway: missed-approvals-store write failed: ${err.message}
 `);
@@ -42293,7 +42489,7 @@ function createMissedApprovalsStore(stateDir) {
 }
 
 // gateway/always-allow-persist-queue.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, unlinkSync as unlinkSync5 } from "node:fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync5 } from "node:fs";
 import { join as join7 } from "node:path";
 var MAX_ATTEMPTS = 5;
 var MAX_AGE_MS = 24 * 60 * 60 * 1000;
@@ -42313,7 +42509,7 @@ function computeBackoffMs(attempts, retryAfterMs) {
   }
   return exp;
 }
-function createAlwaysAllowPersistQueue(stateDir, writeFileSyncFn = writeFileSync6) {
+function createAlwaysAllowPersistQueue(stateDir, writeFileSyncFn = writeFileSync7) {
   const filePath = join7(stateDir, "always-allow-persist-queue.json");
   let lock = Promise.resolve();
   function withLock(fn) {
@@ -42323,7 +42519,7 @@ function createAlwaysAllowPersistQueue(stateDir, writeFileSyncFn = writeFileSync
   }
   function read() {
     try {
-      const raw = readFileSync6(filePath, "utf-8");
+      const raw = readFileSync7(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return { entries: Array.isArray(parsed?.entries) ? parsed.entries : [] };
     } catch {
@@ -52753,6 +52949,7 @@ function renderSafe(doc, source, maxLen = RICH_MESSAGE_MAX_CHARS) {
 }
 
 // render/rich-render.ts
+var PLAIN_TEXT_MAX_CHARS = 4096;
 function parseRichRenderEnabled(raw) {
   if (raw == null)
     return false;
@@ -52765,10 +52962,27 @@ function richRenderEnabled(env = process.env) {
 function renderOutbound(text4, maxLen = RICH_MESSAGE_MAX_CHARS) {
   return renderSafe(parse2(text4), text4, maxLen);
 }
-function maybeRenderOutbound(text4, env = process.env, maxLen = RICH_MESSAGE_MAX_CHARS) {
-  if (!richRenderEnabled(env))
-    return { text: text4, mode: "markdown", degradations: [] };
-  return renderOutbound(text4, maxLen);
+function renderOutboundChunks(text4, env = process.env, maxLen = RICH_MESSAGE_MAX_CHARS, plainMax = PLAIN_TEXT_MAX_CHARS) {
+  if (!richRenderEnabled(env)) {
+    return [{ text: text4, mode: "markdown", degradations: [] }];
+  }
+  const whole = renderOutbound(text4, maxLen);
+  if (whole.mode === "markdown" && whole.text.length <= maxLen)
+    return [whole];
+  if (whole.mode === "plain" && whole.text.length <= plainMax)
+    return [whole];
+  const out = [];
+  for (const rawPiece of splitMarkdownChunks(text4, maxLen)) {
+    const rendered = renderOutbound(rawPiece, maxLen);
+    if (rendered.mode === "markdown" && rendered.text.length <= maxLen) {
+      out.push(rendered);
+      continue;
+    }
+    for (const plainPiece of splitMarkdownChunks(rendered.text, plainMax)) {
+      out.push({ text: plainPiece, mode: "plain", degradations: rendered.degradations });
+    }
+  }
+  return out.length > 0 ? out : [whole];
 }
 
 // stream-controller.ts
@@ -52809,50 +53023,103 @@ function createStreamController(cfg) {
     ...protectContent === true ? { protect_content: true } : {},
     ...cfg.disableNotification === true ? { disable_notification: true } : {}
   };
-  const doSend = (text4, opts) => {
+  const renderPieces = (text4) => {
     if (literalText)
-      return bot.api.sendMessage(chatId, text4, opts);
-    const rendered = maybeRenderOutbound(text4);
-    if (rendered.mode === "plain")
-      return bot.api.sendMessage(chatId, rendered.text, opts);
+      return [{ text: text4, rich: false }];
+    return renderOutboundChunks(text4).map((r) => ({ text: r.text, rich: r.mode !== "plain" }));
+  };
+  const sendPiece = (piece, opts) => {
+    if (!piece.rich)
+      return bot.api.sendMessage(chatId, piece.text, opts);
     const richOpts = { ...opts };
     delete richOpts.link_preview_options;
-    return bot.api.sendRichMessage(chatId, richMessage(rendered.text), richOpts);
-  };
-  const doEdit = (id, text4, opts) => {
-    if (literalText)
-      return bot.api.editMessageText(chatId, id, text4, opts);
-    const rendered = maybeRenderOutbound(text4);
-    if (rendered.mode === "plain")
-      return bot.api.editMessageText(chatId, id, rendered.text, opts);
-    return bot.api.editMessageText(chatId, id, richMessage(rendered.text), opts);
+    return bot.api.sendRichMessage(chatId, richMessage(piece.text), richOpts);
+  };
+  const editPiece = (id, piece, opts) => {
+    if (!piece.rich)
+      return bot.api.editMessageText(chatId, id, piece.text, opts);
+    return bot.api.editMessageText(chatId, id, richMessage(piece.text), opts);
+  };
+  const tailIds = [];
+  const tailLastText = [];
+  const upsertTail = async (ti, piece) => {
+    const existingId = tailIds[ti];
+    if (existingId != null) {
+      if (tailLastText[ti] === piece.text)
+        return;
+      try {
+        await retry(() => editPiece(existingId, piece, baseOpts), { threadId, chat_id: chatId });
+        tailLastText[ti] = piece.text;
+        onEdit?.(existingId, piece.text.length);
+      } catch (err) {
+        if (!literalText && piece.rich && isParseEntitiesError(err)) {
+          warn?.(`stream-controller: tail-piece #${ti + 1} edit parse-entities rejected \u2014 retrying same id=${existingId} as plain text (${err instanceof Error ? err.message : String(err)})`);
+          await retry(() => bot.api.editMessageText(chatId, existingId, piece.text, baseOpts), { threadId, chat_id: chatId });
+          tailLastText[ti] = piece.text;
+          onEdit?.(existingId, piece.text.length);
+        } else {
+          warn?.(`stream-controller: tail-piece #${ti + 1} edit FAILED (id=${existingId}) \u2014 partial delivery, this piece may be stale (${err instanceof Error ? err.message : String(err)})`);
+        }
+      }
+      return;
+    }
+    try {
+      const sent = await retry(() => sendPiece(piece, sendOpts), { threadId, chat_id: chatId });
+      tailIds[ti] = sent.message_id;
+      tailLastText[ti] = piece.text;
+      onSend?.(sent.message_id, piece.text.length);
+    } catch (err) {
+      if (!literalText && piece.rich && isParseEntitiesError(err)) {
+        warn?.(`stream-controller: tail-piece #${ti + 1} send parse-entities rejected \u2014 sending as plain text (${err instanceof Error ? err.message : String(err)})`);
+        const sent = await retry(() => bot.api.sendMessage(chatId, piece.text, sendOpts), { threadId, chat_id: chatId });
+        tailIds[ti] = sent.message_id;
+        tailLastText[ti] = piece.text;
+        onSend?.(sent.message_id, piece.text.length);
+      } else {
+        warn?.(`stream-controller: tail-piece #${ti + 1} send FAILED \u2014 partial delivery, this and later pieces may be missing this flush (${err instanceof Error ? err.message : String(err)})`);
+      }
+    }
   };
   return createDraftStream(async (text4) => {
+    const pieces = renderPieces(text4);
+    const head = pieces[0];
+    let anchorId;
     try {
-      const sent = await retry(() => doSend(text4, sendOpts), { threadId, chat_id: chatId });
-      onSend?.(sent.message_id, text4.length);
-      return sent.message_id;
+      const sent = await retry(() => sendPiece(head, sendOpts), { threadId, chat_id: chatId });
+      anchorId = sent.message_id;
     } catch (err) {
-      if (!literalText && isParseEntitiesError(err)) {
+      if (!literalText && head.rich && isParseEntitiesError(err)) {
         warn?.(`stream-controller: send parse-entities rejected \u2014 retrying once as plain text (${err instanceof Error ? err.message : String(err)})`);
-        const sent = await retry(() => bot.api.sendMessage(chatId, text4, sendOpts), { threadId, chat_id: chatId });
-        onSend?.(sent.message_id, text4.length);
-        return sent.message_id;
+        const fallbackBody = pieces.length === 1 ? text4 : head.text;
+        const sent = await retry(() => bot.api.sendMessage(chatId, fallbackBody, sendOpts), { threadId, chat_id: chatId });
+        anchorId = sent.message_id;
+      } else {
+        throw err;
       }
-      throw err;
     }
+    onSend?.(anchorId, head.text.length);
+    for (let pi = 1;pi < pieces.length; pi++) {
+      await upsertTail(pi - 1, pieces[pi]);
+    }
+    return anchorId;
   }, async (id, text4) => {
+    const pieces = renderPieces(text4);
+    const head = pieces[0];
     try {
-      await retry(() => doEdit(id, text4, baseOpts), { threadId, chat_id: chatId });
-      onEdit?.(id, text4.length);
+      await retry(() => editPiece(id, head, baseOpts), { threadId, chat_id: chatId });
+      onEdit?.(id, head.text.length);
     } catch (err) {
-      if (!literalText && isParseEntitiesError(err)) {
+      if (!literalText && head.rich && isParseEntitiesError(err)) {
         warn?.(`stream-controller: edit parse-entities rejected \u2014 retrying same id=${id} as plain text (${err instanceof Error ? err.message : String(err)})`);
-        await retry(() => bot.api.editMessageText(chatId, id, text4, baseOpts), { threadId, chat_id: chatId });
-        onEdit?.(id, text4.length);
-        return;
+        const fallbackBody = pieces.length === 1 ? text4 : head.text;
+        await retry(() => bot.api.editMessageText(chatId, id, fallbackBody, baseOpts), { threadId, chat_id: chatId });
+        onEdit?.(id, head.text.length);
+      } else {
+        throw err;
       }
-      throw err;
+    }
+    for (let pi = 1;pi < pieces.length; pi++) {
+      await upsertTail(pi - 1, pieces[pi]);
     }
   }, {
     ...throttleMs != null ? { throttleMs } : {},
@@ -52866,6 +53133,12 @@ function createStreamController(cfg) {
 }
 
 // pty-partial-handler.ts
+function looksLikeRawApiError(text4) {
+  if (typeof text4 !== "string" || text4.length === 0)
+    return false;
+  const lower = text4.toLowerCase();
+  return lower.includes("api error:") || lower.includes('"type":"error"') || lower.includes("'type': 'error'") || lower.includes("rate_limit_error") || lower.includes("overloaded_error") || lower.includes('"is_error":true') || / b'\{/.test(text4);
+}
 function streamKey(chatId, threadId) {
   const t = threadId == null || threadId === 0 ? "_" : String(threadId);
   return `${chatId}:${t}`;
@@ -52898,6 +53171,8 @@ function handlePtyPartialPure(text4, state, deps) {
   });
   if (suppressed)
     return "suppressed";
+  if (looksLikeRawApiError(text4))
+    return "error-suppressed";
   if (state.lastPtyPreviewByChat.get(sKey) === text4)
     return "dedup-skip";
   const isFirst = !state.lastPtyPreviewByChat.has(sKey);
@@ -52977,12 +53252,22 @@ function createChatLock() {
 
 // retry-api-call.ts
 var import_grammy5 = __toESM(require_mod2(), 1);
+function isLocalResourceError(err) {
+  const code2 = err?.code;
+  if (typeof code2 === "string" && ["ENOSPC", "EDQUOT", "EIO", "ENOMEM"].includes(code2)) {
+    return true;
+  }
+  const msg = err instanceof Error ? err.message : String(err ?? "");
+  return /\b(ENOSPC|EDQUOT|EIO|ENOMEM)\b/.test(msg) || /no space left on device/i.test(msg) || /disk quota exceeded/i.test(msg);
+}
+var LOCAL_RESOURCE_EXHAUSTED = "LOCAL_RESOURCE_EXHAUSTED";
 var DEFAULT_SLEEP = (ms) => new Promise((r) => setTimeout(r, ms));
 function createRetryApiCall2(config = {}) {
   const maxRetries = config.maxRetries ?? 3;
   const sleep = config.sleep ?? DEFAULT_SLEEP;
   const observer = config.observer;
   const log = config.log;
+  const onFloodWait = config.onFloodWait;
   return async function retryApiCall(fn, opts) {
     for (let attempt = 0;attempt < maxRetries; attempt++) {
       try {
@@ -52991,9 +53276,18 @@ function createRetryApiCall2(config = {}) {
         const isGrammyErr = err instanceof import_grammy5.GrammyError;
         const msg = err instanceof Error ? err.message : String(err);
         const desc = isGrammyErr ? err.description : msg;
+        if (isLocalResourceError(err)) {
+          log?.(`telegram gateway: LOCAL resource exhaustion (${err.code ?? "disk/mem"}) \u2014 ` + `not retrying the send (would feed a flood ban); surfacing degraded state
+`);
+          observer?.onGiveUp?.({ attempts: attempt + 1, error: err });
+          throw Object.assign(new Error(LOCAL_RESOURCE_EXHAUSTED), { original: err });
+        }
         if (isGrammyErr && err.error_code === 429) {
           const retryAfter = Number(err.parameters?.retry_after ?? 5);
           const delayMs = retryAfter * 1000;
+          try {
+            onFloodWait?.(retryAfter);
+          } catch {}
           log?.(`telegram gateway: 429 rate limited, waiting ${retryAfter}s
 `);
           observer?.onRetry?.({ attempt, reason: "flood_wait", delayMs });
@@ -53082,6 +53376,7 @@ var import_grammy6 = __toESM(require_mod2(), 1);
 var import_runner2 = __toESM(require_mod4(), 1);
 import { createHash } from "crypto";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
+init_flood_circuit_breaker();
 var tgPostTagStore2 = new AsyncLocalStorage2;
 function _getTgPostTags() {
   return tgPostTagStore2.getStore();
@@ -53125,8 +53420,50 @@ function installTgPostLogger(bot) {
   });
 }
 
+// flood-circuit-breaker.ts
+import { existsSync as existsSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync8, mkdirSync as mkdirSync6 } from "node:fs";
+import { dirname as dirname3, join as join8 } from "node:path";
+var FLOOD_STATE_FILE = "flood-wait.json";
+function floodStatePath(stateDir) {
+  return join8(stateDir, FLOOD_STATE_FILE);
+}
+function computeFloodWait(prior, retryAfterSec, now) {
+  const candidate = now + Math.max(0, retryAfterSec) * 1000;
+  const untilTs = prior && prior.untilTs > candidate ? prior.untilTs : candidate;
+  return { untilTs, retryAfterSec, recordedTs: now };
+}
+function readFloodState2(path2) {
+  try {
+    if (!existsSync4(path2))
+      return null;
+    const raw = JSON.parse(readFileSync8(path2, "utf-8"));
+    if (typeof raw.untilTs !== "number")
+      return null;
+    return {
+      untilTs: raw.untilTs,
+      retryAfterSec: typeof raw.retryAfterSec === "number" ? raw.retryAfterSec : 0,
+      recordedTs: typeof raw.recordedTs === "number" ? raw.recordedTs : 0
+    };
+  } catch {
+    return null;
+  }
+}
+function writeFloodState(path2, state) {
+  try {
+    mkdirSync6(dirname3(path2), { recursive: true });
+    writeFileSync8(path2, JSON.stringify(state), { mode: 384 });
+  } catch {}
+}
+function makeFloodWaitRecorder2(path2, now = Date.now) {
+  return (retryAfterSec) => {
+    const t = now();
+    const next = computeFloodWait(readFloodState2(path2), retryAfterSec, t);
+    writeFloodState(path2, next);
+  };
+}
+
 // attachment-path.ts
-import { join as join8, basename as basename3, resolve, sep } from "node:path";
+import { join as join9, basename as basename3, resolve, sep } from "node:path";
 function sanitizeExtension(ext) {
   if (ext == null)
     return "bin";
@@ -53149,7 +53486,7 @@ function buildAttachmentPath(input) {
   const ext = extractExtension(input.telegramFilePath);
   const uid = sanitizeUniqueId(input.fileUniqueId);
   const filename = `${input.now}-${uid}.${ext}`;
-  return join8(input.inboxDir, filename);
+  return join9(input.inboxDir, filename);
 }
 function assertInsideInbox(inboxDir, candidatePath) {
   const inboxReal = resolve(inboxDir);
@@ -53236,7 +53573,7 @@ function clear(key) {
 }
 
 // ../node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname3, posix, sep as sep2 } from "path";
+import { dirname as dirname4, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -53245,7 +53582,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname3(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname4(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -57676,8 +58013,8 @@ class PostHog extends PostHogBackendClient {
 }
 
 // analytics-posthog.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync7, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname4, join as join9 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync9, writeFileSync as writeFileSync9 } from "node:fs";
+import { dirname as dirname5, join as join10 } from "node:path";
 import { randomUUID } from "node:crypto";
 var DEFAULT_KEY = "phc_qKY87cKWZm6ZyCtk7LcRd2cU8Sg42u7Ywhui5stYCegd";
 var DEFAULT_HOST = "https://us.i.posthog.com";
@@ -57703,10 +58040,10 @@ function getDistinctId() {
     cachedDistinctId = envId.trim();
     return cachedDistinctId;
   }
-  const fallbackPath = join9(process.env.SWITCHROOM_RUNTIME_STATE_DIR ?? "/state/agent", "analytics-id");
+  const fallbackPath = join10(process.env.SWITCHROOM_RUNTIME_STATE_DIR ?? "/state/agent", "analytics-id");
   try {
-    if (existsSync3(fallbackPath)) {
-      const existing = readFileSync7(fallbackPath, "utf-8").trim();
+    if (existsSync5(fallbackPath)) {
+      const existing = readFileSync9(fallbackPath, "utf-8").trim();
       if (existing) {
         cachedDistinctId = existing;
         return existing;
@@ -57716,8 +58053,8 @@ function getDistinctId() {
   const id = randomUUID();
   cachedDistinctId = id;
   try {
-    mkdirSync5(dirname4(fallbackPath), { recursive: true });
-    writeFileSync7(fallbackPath, id, "utf-8");
+    mkdirSync7(dirname5(fallbackPath), { recursive: true });
+    writeFileSync9(fallbackPath, id, "utf-8");
   } catch {}
   return id;
 }
@@ -57788,12 +58125,12 @@ function installGlobalErrorHandlers() {
 }
 
 // runtime-metrics.ts
-import { mkdirSync as mkdirSync7, appendFileSync as appendFileSync3 } from "node:fs";
-import { dirname as dirname6, join as join11 } from "node:path";
+import { mkdirSync as mkdirSync9, appendFileSync as appendFileSync3 } from "node:fs";
+import { dirname as dirname7, join as join12 } from "node:path";
 
 // analytics-posthog.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync6, readFileSync as readFileSync8, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname5, join as join10 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { dirname as dirname6, join as join11 } from "node:path";
 import { randomUUID as randomUUID2 } from "node:crypto";
 var DEFAULT_KEY2 = "phc_qKY87cKWZm6ZyCtk7LcRd2cU8Sg42u7Ywhui5stYCegd";
 var DEFAULT_HOST2 = "https://us.i.posthog.com";
@@ -57818,10 +58155,10 @@ function getDistinctId2() {
     cachedDistinctId2 = envId.trim();
     return cachedDistinctId2;
   }
-  const fallbackPath = join10(process.env.SWITCHROOM_RUNTIME_STATE_DIR ?? "/state/agent", "analytics-id");
+  const fallbackPath = join11(process.env.SWITCHROOM_RUNTIME_STATE_DIR ?? "/state/agent", "analytics-id");
   try {
-    if (existsSync4(fallbackPath)) {
-      const existing = readFileSync8(fallbackPath, "utf-8").trim();
+    if (existsSync6(fallbackPath)) {
+      const existing = readFileSync10(fallbackPath, "utf-8").trim();
       if (existing) {
         cachedDistinctId2 = existing;
         return existing;
@@ -57831,8 +58168,8 @@ function getDistinctId2() {
   const id = randomUUID2();
   cachedDistinctId2 = id;
   try {
-    mkdirSync6(dirname5(fallbackPath), { recursive: true });
-    writeFileSync8(fallbackPath, id, "utf-8");
+    mkdirSync8(dirname6(fallbackPath), { recursive: true });
+    writeFileSync10(fallbackPath, id, "utf-8");
   } catch {}
   return id;
 }
@@ -57881,12 +58218,12 @@ function resolveJsonlPath() {
   if (override && override.trim() !== "")
     return override.trim();
   const base = process.env.SWITCHROOM_RUNTIME_STATE_DIR ?? "/state/agent";
-  return join11(base, "runtime-metrics.jsonl");
+  return join12(base, "runtime-metrics.jsonl");
 }
 function appendJsonl(line) {
   const path2 = resolveJsonlPath();
   try {
-    mkdirSync7(dirname6(path2), { recursive: true });
+    mkdirSync9(dirname7(path2), { recursive: true });
     appendFileSync3(path2, line + `
 `, "utf-8");
   } catch (err) {
@@ -58101,6 +58438,13 @@ function formatFrameworkFallbackText(fallbackKind, silenceMs, inFlightTools = []
   }
   return null;
 }
+function longestInFlightTool(key, now) {
+  const s = state2.get(key);
+  if (s == null)
+    return null;
+  const snaps = snapshotInFlight(s, now);
+  return snaps.length > 0 ? snaps[0] : null;
+}
 function snapshotInFlight(s, now) {
   return Array.from(s.inFlightTools.values()).sort((a, b) => a.startedAt - b.startedAt).map((t) => ({ name: t.name, label: t.label, durationMs: now - t.startedAt }));
 }
@@ -58401,8 +58745,8 @@ _still working (${minutes}m) \u00b7 message me anytime, I'll keep you posted_`;
 }
 
 // silent-end.ts
-import { existsSync as existsSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync9, unlinkSync as unlinkSync6, mkdirSync as mkdirSync8 } from "node:fs";
-import { dirname as dirname7, join as join12 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync11, unlinkSync as unlinkSync6, mkdirSync as mkdirSync10 } from "node:fs";
+import { dirname as dirname8, join as join13 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 var SILENT_END_MAX_RETRIES = 2;
 var SILENT_END_STALE_RECORD_MAX_AGE_MS = 30 * 60000;
@@ -58417,10 +58761,10 @@ function resolveStateDir(deps) {
   if (env != null && env !== "")
     return env;
   const home = process.env.HOME ?? homedir2();
-  return join12(home, ".claude", "channels", "telegram");
+  return join13(home, ".claude", "channels", "telegram");
 }
 function resolveStatePath(deps) {
-  return join12(resolveStateDir(deps), "silent-end-pending.json");
+  return join13(resolveStateDir(deps), "silent-end-pending.json");
 }
 function emitLog(deps, line) {
   if (deps?.log != null)
@@ -58432,8 +58776,8 @@ function writeSilentEndState(args, deps) {
   const statePath = resolveStatePath(deps);
   let retryCount = 0;
   try {
-    if (existsSync6(statePath)) {
-      const prev = JSON.parse(readFileSync9(statePath, "utf8"));
+    if (existsSync8(statePath)) {
+      const prev = JSON.parse(readFileSync11(statePath, "utf8"));
       if (prev.turnKey === args.turnKey && typeof prev.retryCount === "number") {
         retryCount = prev.retryCount;
       }
@@ -58449,8 +58793,8 @@ function writeSilentEndState(args, deps) {
     timestamp: Date.now()
   };
   try {
-    mkdirSync8(dirname7(statePath), { recursive: true });
-    writeFileSync9(statePath, JSON.stringify(state3), "utf8");
+    mkdirSync10(dirname8(statePath), { recursive: true });
+    writeFileSync11(statePath, JSON.stringify(state3), "utf8");
     emitLog(deps, `silent-end: wrote state file turnKey=${args.turnKey} retryCount=${retryCount}
 `);
   } catch (err) {
@@ -58460,10 +58804,10 @@ function writeSilentEndState(args, deps) {
 }
 function clearSilentEndState(turnKey, deps) {
   const statePath = resolveStatePath(deps);
-  if (!existsSync6(statePath))
+  if (!existsSync8(statePath))
     return;
   try {
-    const prev = JSON.parse(readFileSync9(statePath, "utf8"));
+    const prev = JSON.parse(readFileSync11(statePath, "utf8"));
     if (prev.turnKey != null && prev.turnKey !== turnKey)
       return;
     unlinkSync6(statePath);
@@ -58473,10 +58817,10 @@ function clearSilentEndState(turnKey, deps) {
 }
 function readSilentEndState(deps) {
   const statePath = resolveStatePath(deps);
-  if (!existsSync6(statePath))
+  if (!existsSync8(statePath))
     return null;
   try {
-    return JSON.parse(readFileSync9(statePath, "utf8"));
+    return JSON.parse(readFileSync11(statePath, "utf8"));
   } catch {
     return null;
   }
@@ -58937,18 +59281,18 @@ async function gatewayStartupRetry(fn, opts = {}) {
 }
 
 // gateway/quarantine.ts
-import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join13 } from "node:path";
+import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join14 } from "node:path";
 var QUARANTINE_FILENAME = "quarantine.json";
 function writeQuarantineMarker(telegramStateDir, reason, detail, nowFn = Date.now) {
-  mkdirSync9(telegramStateDir, { recursive: true, mode: 448 });
+  mkdirSync11(telegramStateDir, { recursive: true, mode: 448 });
   const marker = {
     v: 1,
     reason,
     ts: nowFn(),
     detail
   };
-  writeFileSync10(join13(telegramStateDir, QUARANTINE_FILENAME), JSON.stringify(marker) + `
+  writeFileSync12(join14(telegramStateDir, QUARANTINE_FILENAME), JSON.stringify(marker) + `
 `, "utf-8");
 }
 
@@ -59928,7 +60272,7 @@ init_protocol();
 import * as net3 from "node:net";
 import { homedir as homedir6 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var DEFAULT_TIMEOUT_MS3 = 5000;
 function reviveDate2(v) {
   if (v == null)
@@ -59939,7 +60283,7 @@ function reviveDate2(v) {
   return Number.isNaN(d.getTime()) ? null : d;
 }
 function operatorSocketPath2(home2 = homedir6()) {
-  return join17(home2, ".switchroom", "state", "auth-broker-operator", "sock");
+  return join18(home2, ".switchroom", "state", "auth-broker-operator", "sock");
 }
 function resolveAuthBrokerSocketPath2(opts) {
   if (opts?.socket)
@@ -60244,13 +60588,13 @@ class AuthBrokerClient2 {
 init_loader();
 init_resolver();
 init_vault();
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync14 } from "node:fs";
 var DEFAULT_VOICE_API_KEY_REF = "vault:openai/api-key";
 function tryDirectVaultRead(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync12(vaultPath))
+  if (!existsSync14(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -60306,14 +60650,14 @@ async function materializeVoiceKey(opts = {}, logger2 = (line) => process.stderr
 init_loader();
 init_resolver();
 init_vault();
-import { existsSync as existsSync13 } from "node:fs";
+import { existsSync as existsSync15 } from "node:fs";
 var VOICE_SIDECAR_TOKEN_KEY = "voice/sidecar-token";
 var DEFAULT_VOICE_SIDECAR_TOKEN_REF = `vault:${VOICE_SIDECAR_TOKEN_KEY}`;
 function tryDirectVaultRead2(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync13(vaultPath))
+  if (!existsSync15(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -60366,17 +60710,17 @@ async function materializeSidecarToken(opts = {}, logger2 = (line) => process.st
 }
 
 // ../src/setup/host-capabilities.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync12, readFileSync as readFileSync14, writeFileSync as writeFileSync11 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync14, readFileSync as readFileSync16, writeFileSync as writeFileSync13 } from "node:fs";
 init_paths();
 function hostCapabilitiesPath() {
   return resolveStatePath2("host-capabilities.json");
 }
 function loadHostCapabilities() {
   const path2 = hostCapabilitiesPath();
-  if (!existsSync14(path2))
+  if (!existsSync16(path2))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync14(path2, "utf-8"));
+    const parsed = JSON.parse(readFileSync16(path2, "utf-8"));
     if (parsed && typeof parsed === "object" && "voice" in parsed && typeof parsed.voice === "object") {
       return parsed;
     }
@@ -60474,18 +60818,18 @@ function resolveExhaustUntil(resetAtMs, now = Date.now()) {
 
 // gateway/auth-add-flow.ts
 import { execFileSync } from "node:child_process";
-import { existsSync as existsSync16, mkdirSync as mkdirSync14, readFileSync as readFileSync16, readdirSync as readdirSync4, rmSync as rmSync3, statSync as statSync7, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync16, readFileSync as readFileSync18, readdirSync as readdirSync4, rmSync as rmSync3, statSync as statSync7, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import { randomBytes as randomBytes4 } from "node:crypto";
 
 // ../src/auth/manager.ts
 import {
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync17,
   readdirSync as readdirSync3,
-  existsSync as existsSync15,
-  writeFileSync as writeFileSync12,
-  mkdirSync as mkdirSync13,
+  existsSync as existsSync17,
+  writeFileSync as writeFileSync14,
+  mkdirSync as mkdirSync15,
   mkdtempSync as mkdtempSync2,
   rmSync as rmSync2,
   chmodSync as chmodSync3,
@@ -60510,9 +60854,9 @@ function parseSetupTokenUrl(output) {
 }
 function readTokenFromCredentialsFile(credentialsFilePath) {
   try {
-    if (!existsSync15(credentialsFilePath))
+    if (!existsSync17(credentialsFilePath))
       return null;
-    const raw = readFileSync15(credentialsFilePath, "utf-8");
+    const raw = readFileSync17(credentialsFilePath, "utf-8");
     const parsed = JSON.parse(raw);
     const token = parsed?.claudeAiOauth?.accessToken;
     if (typeof token !== "string")
@@ -60572,7 +60916,7 @@ function makeAuthAddTmuxOps(tmuxBin = "tmux") {
 var pendingAuthAddFlows = new Map;
 function pickScratchDir(label, home2 = homedir7()) {
   const suffix = randomBytes4(8).toString("hex");
-  return join18(home2, ".switchroom", "accounts", ".in-progress", `${label}-${suffix}`);
+  return join19(home2, ".switchroom", "accounts", ".in-progress", `${label}-${suffix}`);
 }
 function cleanScratchDir(scratchDir) {
   try {
@@ -60581,8 +60925,8 @@ function cleanScratchDir(scratchDir) {
 }
 var AUTH_TMUX_SESSION_FILE = ".auth-tmux-session";
 function sweepOrphanSessions(home2, tmux, nowMs2 = Date.now()) {
-  const inProgressDir = join18(home2, ".switchroom", "accounts", ".in-progress");
-  if (!existsSync16(inProgressDir))
+  const inProgressDir = join19(home2, ".switchroom", "accounts", ".in-progress");
+  if (!existsSync18(inProgressDir))
     return;
   let entries;
   try {
@@ -60592,16 +60936,16 @@ function sweepOrphanSessions(home2, tmux, nowMs2 = Date.now()) {
   }
   const tenMinMs = 10 * 60000;
   for (const entry of entries) {
-    const dir = join18(inProgressDir, entry);
-    const sessionFile = join18(dir, AUTH_TMUX_SESSION_FILE);
-    if (!existsSync16(sessionFile))
+    const dir = join19(inProgressDir, entry);
+    const sessionFile = join19(dir, AUTH_TMUX_SESSION_FILE);
+    if (!existsSync18(sessionFile))
       continue;
     let fileContents;
     let fileMtime;
     try {
       const stat = statSync7(sessionFile);
       fileMtime = stat.mtimeMs;
-      fileContents = readFileSync16(sessionFile, "utf8").trim();
+      fileContents = readFileSync18(sessionFile, "utf8").trim();
     } catch {
       continue;
     }
@@ -60627,13 +60971,13 @@ async function startAccountAuthSession(label, opts = {}) {
   const tmux = opts.tmuxOps ?? makeAuthAddTmuxOps(opts.tmuxBin);
   const binary = opts.claudeBinary ?? "claude";
   const scratchDir = pickScratchDir(label, home2);
-  mkdirSync14(scratchDir, { recursive: true, mode: 448 });
+  mkdirSync16(scratchDir, { recursive: true, mode: 448 });
   sweepOrphanSessions(home2, tmux);
   const hexSuffix = scratchDir.slice(scratchDir.lastIndexOf("-") + 1);
   const tmuxSocket = `switchroom-${agentName3}`;
   const tmuxSession = `auth-add-${label}-${hexSuffix}`.slice(0, 64);
   try {
-    writeFileSync13(join18(scratchDir, AUTH_TMUX_SESSION_FILE), `${tmuxSocket}
+    writeFileSync15(join19(scratchDir, AUTH_TMUX_SESSION_FILE), `${tmuxSocket}
 ${tmuxSession}`, "utf8");
   } catch {}
   const sessionEnv = {
@@ -60682,7 +61026,7 @@ async function submitAccountAuthCode(flow3, code2, opts = {}) {
   const pollIntervalMs = opts.pollIntervalMs ?? 250;
   const pollTimeoutMs = opts.pollTimeoutMs ?? 300000;
   const tmux = opts.tmuxOps ?? makeAuthAddTmuxOps();
-  const credentialsPath = join18(flow3.scratchDir, ".credentials.json");
+  const credentialsPath = join19(flow3.scratchDir, ".credentials.json");
   try {
     tmux.send(flow3.tmuxSocket, flow3.tmuxSession, code2);
   } catch (err) {
@@ -60692,11 +61036,11 @@ async function submitAccountAuthCode(flow3, code2, opts = {}) {
   const deadline = Date.now() + pollTimeoutMs;
   while (Date.now() < deadline) {
     await new Promise((r) => setTimeout(r, pollIntervalMs));
-    if (existsSync16(credentialsPath)) {
+    if (existsSync18(credentialsPath)) {
       const token = readTokenFromCredentialsFile(credentialsPath);
       if (token) {
         try {
-          const raw = readFileSync16(credentialsPath, "utf-8");
+          const raw = readFileSync18(credentialsPath, "utf-8");
           const parsed = JSON.parse(raw);
           if (parsed.claudeAiOauth?.accessToken) {
             tmux.killSession(flow3.tmuxSocket, flow3.tmuxSession);
@@ -60706,7 +61050,7 @@ async function submitAccountAuthCode(flow3, code2, opts = {}) {
       }
     }
     if (!tmux.hasSession(flow3.tmuxSocket, flow3.tmuxSession)) {
-      if (!existsSync16(credentialsPath)) {
+      if (!existsSync18(credentialsPath)) {
         cleanScratchDir(flow3.scratchDir);
         throw new Error("claude setup-token exited without writing credentials \u2014 the code may be invalid or expired");
       }
@@ -61060,6 +61404,20 @@ function detectModelUnavailable(stderr) {
     return null;
   const sample = stderr.length > 16384 ? stderr.slice(0, 16384) : stderr;
   const lower = sample.toLowerCase();
+  const transientUpstreamSignals = [
+    "not your usage limit",
+    "not your account",
+    "not your account's",
+    "temporarily limiting requests",
+    "temporarily rate",
+    "server is temporarily",
+    "would exceed your account\u2019s rate limit",
+    "would exceed your account's rate limit"
+  ];
+  if (transientUpstreamSignals.some((s) => lower.includes(s))) {
+    const resetAt = parseResetTime(sample);
+    return resetAt !== undefined ? { kind: "overload", resetAt, raw: stderr } : { kind: "overload", raw: stderr };
+  }
   const quotaSignals = [
     "out of extra usage",
     "extra usage",
@@ -61599,7 +61957,7 @@ function hardenCardBreaks2(text4) {
   }
   return restore2(pieces.join(""));
 }
-var PARAGRAPH_SPACER = "\u00a0";
+var PARAGRAPH_SPACER2 = "\u00a0";
 function addParagraphSpacers(text4) {
   if (!text4.includes(`
 
@@ -61611,7 +61969,7 @@ function addParagraphSpacers(text4) {
 
 `))
     return restore2(masked);
-  const spacerLine = PARAGRAPH_SPACER;
+  const spacerLine = PARAGRAPH_SPACER2;
   const isBlankLine = (line) => /^[ \t\r\f\v]*$/.test(line);
   const asciiTrim = (line) => line.replace(/^[ \t\r\f\v]+|[ \t\r\f\v]+$/g, "");
   const blockKind = (line) => {
@@ -61848,7 +62206,7 @@ function shouldPromoteBreak(prev, next, placeholder) {
   }
   return false;
 }
-function hardSliceToCap(text4, cap = RICH_MESSAGE_MAX_CHARS2) {
+function hardSliceToCap2(text4, cap = RICH_MESSAGE_MAX_CHARS2) {
   if (cap <= 0)
     return [text4];
   if (text4.length <= cap)
@@ -61859,7 +62217,7 @@ function hardSliceToCap(text4, cap = RICH_MESSAGE_MAX_CHARS2) {
   }
   return out;
 }
-function splitMarkdownChunks(text4, maxLen = RICH_MESSAGE_MAX_CHARS2) {
+function splitMarkdownChunks2(text4, maxLen = RICH_MESSAGE_MAX_CHARS2) {
   if (text4.length <= maxLen)
     return [text4];
   const chunks = [];
@@ -61883,27 +62241,27 @@ function splitMarkdownChunks(text4, maxLen = RICH_MESSAGE_MAX_CHARS2) {
     } else if (spaceIdx > 0) {
       cut = spaceIdx;
     }
-    cut = backOffOpenFence(rest, cut);
-    cut = backOffTableRow(rest, cut);
+    cut = backOffOpenFence2(rest, cut);
+    cut = backOffTableRow2(rest, cut);
     if (cut <= 0) {
-      const sliced = hardSliceToCap(rest, maxLen);
-      chunks.push(stripBoundarySpacers(sliced[0], "trailing"));
-      rest = stripBoundarySpacers(sliced.slice(1).join(""), "leading");
+      const sliced = hardSliceToCap2(rest, maxLen);
+      chunks.push(stripBoundarySpacers2(sliced[0], "trailing"));
+      rest = stripBoundarySpacers2(sliced.slice(1).join(""), "leading");
       continue;
     }
-    chunks.push(stripBoundarySpacers(rest.slice(0, cut), "trailing"));
-    rest = stripBoundarySpacers(rest.slice(cut), "leading");
+    chunks.push(stripBoundarySpacers2(rest.slice(0, cut), "trailing"));
+    rest = stripBoundarySpacers2(rest.slice(cut), "leading");
   }
-  return chunks.map((c) => stripBoundarySpacers(c, "trailing"));
+  return chunks.map((c) => stripBoundarySpacers2(c, "trailing"));
 }
-function stripBoundarySpacers(chunk2, side) {
-  const sp = PARAGRAPH_SPACER;
+function stripBoundarySpacers2(chunk2, side) {
+  const sp = PARAGRAPH_SPACER2;
   if (side === "leading") {
     return chunk2.replace(new RegExp(`^(?:[ \\t]*${sp}?[ \\t]*\\n+)+`), "");
   }
   return chunk2.replace(new RegExp(`(?:\\n+[ \\t]*${sp}?[ \\t]*)+$`), "");
 }
-function backOffOpenFence(text4, cut) {
+function backOffOpenFence2(text4, cut) {
   if (cut <= 0 || cut >= text4.length)
     return cut;
   const before = text4.slice(0, cut);
@@ -61916,7 +62274,7 @@ function backOffOpenFence(text4, cut) {
   }
   return lastFence;
 }
-function backOffTableRow(text4, cut) {
+function backOffTableRow2(text4, cut) {
   if (cut <= 0 || cut >= text4.length)
     return cut;
   const lineStart2 = text4.lastIndexOf(`
@@ -62588,28 +62946,28 @@ function isTurnFlushSafetyEnabled(env = process.env) {
 }
 
 // agent-dir.ts
-import { dirname as dirname8 } from "node:path";
+import { dirname as dirname9 } from "node:path";
 function resolveAgentDirFromEnv() {
   const state3 = process.env.TELEGRAM_STATE_DIR;
   if (!state3 || state3.trim().length === 0)
     return null;
-  return dirname8(state3);
+  return dirname9(state3);
 }
 
 // active-reactions.ts
-import { readFileSync as readFileSync18, writeFileSync as writeFileSync14, renameSync as renameSync5, existsSync as existsSync19, unlinkSync as unlinkSync8 } from "node:fs";
-import { join as join21 } from "node:path";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync16, renameSync as renameSync5, existsSync as existsSync21, unlinkSync as unlinkSync8 } from "node:fs";
+import { join as join22 } from "node:path";
 var ACTIVE_REACTIONS_FILENAME = ".active-reactions.json";
 function reactionsPath(agentDir) {
-  return join21(agentDir, ACTIVE_REACTIONS_FILENAME);
+  return join22(agentDir, ACTIVE_REACTIONS_FILENAME);
 }
 function readActiveReactions(agentDir) {
   const p = reactionsPath(agentDir);
-  if (!existsSync19(p))
+  if (!existsSync21(p))
     return [];
   let raw;
   try {
-    raw = readFileSync18(p, "utf-8");
+    raw = readFileSync20(p, "utf-8");
   } catch {
     return [];
   }
@@ -62641,7 +62999,7 @@ function writeActiveReactions(agentDir, reactions) {
   }
   const tmp = `${p}.tmp-${process.pid}-${Date.now()}`;
   try {
-    writeFileSync14(tmp, JSON.stringify(reactions) + `
+    writeFileSync16(tmp, JSON.stringify(reactions) + `
 `, "utf-8");
     renameSync5(tmp, p);
   } catch {}
@@ -62665,19 +63023,19 @@ function clearActiveReactions(agentDir) {
 }
 
 // active-reactions.ts
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync15, renameSync as renameSync6, existsSync as existsSync20, unlinkSync as unlinkSync9 } from "node:fs";
-import { join as join22 } from "node:path";
+import { readFileSync as readFileSync21, writeFileSync as writeFileSync17, renameSync as renameSync6, existsSync as existsSync22, unlinkSync as unlinkSync9 } from "node:fs";
+import { join as join23 } from "node:path";
 var ACTIVE_REACTIONS_FILENAME2 = ".active-reactions.json";
 function reactionsPath2(agentDir) {
-  return join22(agentDir, ACTIVE_REACTIONS_FILENAME2);
+  return join23(agentDir, ACTIVE_REACTIONS_FILENAME2);
 }
 function readActiveReactions2(agentDir) {
   const p = reactionsPath2(agentDir);
-  if (!existsSync20(p))
+  if (!existsSync22(p))
     return [];
   let raw;
   try {
-    raw = readFileSync19(p, "utf-8");
+    raw = readFileSync21(p, "utf-8");
   } catch {
     return [];
   }
@@ -63584,17 +63942,17 @@ async function approvalRecord(args, opts) {
 }
 
 // quota-check.ts
-import { readFileSync as readFileSync20, existsSync as existsSync21 } from "fs";
-import { join as join23 } from "path";
+import { readFileSync as readFileSync22, existsSync as existsSync23 } from "fs";
+import { join as join24 } from "path";
 var OAUTH_BETA2 = "oauth-2025-04-20";
 var DEFAULT_USER_AGENT2 = "claude-cli/1.0.0 (external, cli)";
 var DEFAULT_PROBE_MODEL2 = "claude-haiku-4-5-20251001";
 function readOauthToken2(claudeConfigDir) {
-  const tokenFile = join23(claudeConfigDir, ".oauth-token");
-  if (!existsSync21(tokenFile))
+  const tokenFile = join24(claudeConfigDir, ".oauth-token");
+  if (!existsSync23(tokenFile))
     return null;
   try {
-    const raw = readFileSync20(tokenFile, "utf-8").trim();
+    const raw = readFileSync22(tokenFile, "utf-8").trim();
     return raw.length > 0 ? raw : null;
   } catch {
     return null;
@@ -64329,7 +64687,7 @@ function parseModelCommand(text4) {
   }
   return { kind: "set", model: arg };
 }
-var PERSIST_NOTE = "_Session-only \u2014 lasts until restart. To persist, set `model:` in switchroom.yaml and restart._";
+var PERSIST_NOTE = "_Sticky across switchroom-managed relaunches (`/new`, watchdog recovery); reverts on `/restart`, agent restart, crash, or external container restart. `/model default` clears it. To persist, set `model:` in switchroom.yaml._";
 function helpText2(deps, reason) {
   const srAliasExamples = Object.keys(SR_MODEL_ALIASES).map((a) => `\`${a}\``).join(" \u00b7 ");
   const lines = [];
@@ -64414,7 +64772,7 @@ async function handleModelCommand(parsed, deps) {
     return {
       text: [
         `Switching to \`${deps.escapeHtml(model)}\` \u2014 restarting session (~30s).`,
-        "_Session-only \u2014 reverts to the configured default on the next restart._"
+        PERSIST_NOTE
       ].join(`
 `),
       html: true
@@ -64714,7 +65072,8 @@ async function handleModelMenuCallback(data, deps) {
     }
     return {
       answer: `Switching to ${friendlyName} \u2014 restarting (~30s)`,
-      reply: await menuWithBannerStatic(deps, `\uD83D\uDD04 Switching session to **${deps.escapeHtml(friendlyName)}** \u2014 restarting (~30s). _Session-only; reverts to the configured default on the next restart._`),
+      reply: await menuWithBannerStatic(deps, `\uD83D\uDD04 Switching session to **${deps.escapeHtml(friendlyName)}** \u2014 restarting (~30s).
+${PERSIST_NOTE}`),
       selectedModel: srName
     };
   }
@@ -64756,11 +65115,13 @@ async function handleModelMenuCallback(data, deps) {
   }
   const token = canonicalClaudeToken(target.label);
   const selectedModel = sessionModelFromConfirmation(result.confirmation) ?? token ?? undefined;
+  const clearedDefault = token == null && /^default\b/i.test(target.label.trim());
   return {
     answer: deps.escapeHtml(result.confirmation),
     reply: await menuWithBanner(deps, `\u2705 ${deps.escapeHtml(result.confirmation)}`),
     ...selectedModel ? { selectedModel } : {},
-    ...token ? { selectedModelToken: token } : {}
+    ...token ? { selectedModelToken: token } : {},
+    ...clearedDefault ? { clearedDefault: true } : {}
   };
 }
 function isSrToClaudeTransition(prevModel, nextModel) {
@@ -64818,6 +65179,87 @@ async function menuWithBannerStatic(deps, banner) {
   };
 }
 
+// gateway/session-model-file.ts
+import { readFileSync as readFileSync23, writeFileSync as writeFileSync18, renameSync as renameSync7, rmSync as rmSync4 } from "node:fs";
+import { join as join25 } from "node:path";
+
+// gateway/model-command.ts
+var MODEL_ARG_RE2 = /^[A-Za-z0-9][A-Za-z0-9._/\[\]-]{0,99}$/;
+function isValidModelArg2(arg) {
+  return MODEL_ARG_RE2.test(arg);
+}
+
+// gateway/session-model-file.ts
+var SESSION_MODEL_FILE = ".session-model";
+var RELAUNCH_MODEL_INTENT_FILE = ".relaunch-model-intent";
+var CONFIGURED_DEFAULT_MODEL_FILE = ".configured-default-model";
+var REVERT_RESTART_REASONS = new Set(["inline-button-restart"]);
+function intentForRestartReason(reason) {
+  return REVERT_RESTART_REASONS.has(reason) ? "revert" : "keep";
+}
+function atomicWrite(path2, content3) {
+  const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
+  writeFileSync18(tmp, content3, "utf8");
+  renameSync7(tmp, path2);
+}
+function serializeSessionModel(rec) {
+  return `${JSON.stringify({
+    model: rec.model,
+    configuredDefaultAtWrite: rec.configuredDefaultAtWrite,
+    ts: rec.ts
+  })}
+`;
+}
+function writeSessionModelFile(agentDir, model, configuredDefaultAtWrite) {
+  if (!isValidModelArg2(model)) {
+    throw new Error(`refusing to persist non-canonical session model token: ${JSON.stringify(model)}`);
+  }
+  atomicWrite(join25(agentDir, SESSION_MODEL_FILE), serializeSessionModel({ model, configuredDefaultAtWrite, ts: Date.now() }));
+}
+function readSessionModelFileRaw(agentDir) {
+  try {
+    return readFileSync23(join25(agentDir, SESSION_MODEL_FILE), "utf8");
+  } catch {
+    return null;
+  }
+}
+function clearSessionModelFile(agentDir) {
+  try {
+    rmSync4(join25(agentDir, SESSION_MODEL_FILE), { force: true });
+  } catch {}
+}
+function restoreSessionModelFileRaw(agentDir, raw) {
+  if (raw == null) {
+    clearSessionModelFile(agentDir);
+    return;
+  }
+  try {
+    atomicWrite(join25(agentDir, SESSION_MODEL_FILE), raw);
+  } catch {}
+}
+function writeRelaunchModelIntent(agentDir, intent, reason) {
+  try {
+    atomicWrite(join25(agentDir, RELAUNCH_MODEL_INTENT_FILE), `${JSON.stringify({ intent, reason, ts: Date.now() })}
+`);
+  } catch (err) {
+    process.stderr.write(`telegram gateway: relaunch-model-intent write failed (boot will revert): ${err?.message ?? String(err)}
+`);
+  }
+}
+function clearRelaunchModelIntent(agentDir) {
+  try {
+    rmSync4(join25(agentDir, RELAUNCH_MODEL_INTENT_FILE), { force: true });
+  } catch {}
+}
+function readConfiguredDefaultModel(agentDir) {
+  try {
+    const v = readFileSync23(join25(agentDir, CONFIGURED_DEFAULT_MODEL_FILE), "utf8").trim();
+    return v.length > 0 ? v : null;
+  } catch {
+    return null;
+  }
+}
+
 // ../src/agents/model-picker.ts
 var HEADER_RE = /Select model/;
 var OPTION_RE = /^\s*(\u276f)?\s*(\d+)\.\s+(.*)$/;
@@ -65029,7 +65471,7 @@ function extractConfirmation(pane) {
 }
 
 // ../src/agents/scaffold.ts
-import { join as join26, resolve as resolve6 } from "node:path";
+import { join as join28, resolve as resolve6 } from "node:path";
 init_schema();
 
 // ../src/config/users.ts
@@ -65047,7 +65489,7 @@ var CONTAINER_DEFAULT_UTC_ZONES = new Set([
 ]);
 
 // ../src/cli/agent-config.ts
-import { join as join24 } from "node:path";
+import { join as join26 } from "node:path";
 import { homedir as homedir8 } from "node:os";
 
 // ../src/cli/helpers.ts
@@ -65067,12 +65509,12 @@ var WEBKITE_VAULT_KEYS = new Set([
 init_overlay_loader();
 
 // ../src/cli/agent-config.ts
-var AUDIT_ROOT = join24(homedir8(), ".switchroom", "audit");
+var AUDIT_ROOT = join26(homedir8(), ".switchroom", "audit");
 
 // ../src/agents/profiles.ts
 var import_handlebars = __toESM(require_lib2(), 1);
-import { readFileSync as readFileSync21, writeFileSync as writeFileSync16, existsSync as existsSync22, readdirSync as readdirSync5, statSync as statSync8, copyFileSync, mkdirSync as mkdirSync16, realpathSync as realpathSync2 } from "node:fs";
-import { resolve as resolve5, join as join25, sep as pathSep } from "node:path";
+import { readFileSync as readFileSync24, writeFileSync as writeFileSync19, existsSync as existsSync24, readdirSync as readdirSync5, statSync as statSync8, copyFileSync, mkdirSync as mkdirSync18, realpathSync as realpathSync2 } from "node:fs";
+import { resolve as resolve5, join as join27, sep as pathSep } from "node:path";
 var PROFILES_ROOT = resolve5(import.meta.dirname, "../../profiles");
 import_handlebars.default.registerHelper("json", (value) => {
   return new import_handlebars.default.SafeString(JSON.stringify(value, null, 2));
@@ -65083,9 +65525,9 @@ import_handlebars.default.registerHelper("isNumber", (value) => {
 var SHARED_FRAGMENTS_DIR = resolve5(PROFILES_ROOT, "_shared");
 var SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline"];
 for (const name of SHARED_FRAGMENTS) {
-  const fragPath = join25(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
-  if (existsSync22(fragPath)) {
-    import_handlebars.default.registerPartial(name, readFileSync21(fragPath, "utf-8"));
+  const fragPath = join27(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
+  if (existsSync24(fragPath)) {
+    import_handlebars.default.registerPartial(name, readFileSync24(fragPath, "utf-8"));
   }
 }
 
@@ -65377,7 +65819,7 @@ init_paths();
 init_overlay_loader();
 init_merge();
 var import_yaml3 = __toESM(require_dist(), 1);
-import { readFileSync as readFileSync22, existsSync as existsSync23 } from "node:fs";
+import { readFileSync as readFileSync25, existsSync as existsSync25 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
 import { resolve as resolve7 } from "node:path";
 
@@ -65453,7 +65895,7 @@ function findConfigFile2(startDir) {
     resolve7(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path2 of searchPaths) {
-    if (existsSync23(path2)) {
+    if (existsSync25(path2)) {
       return path2;
     }
   }
@@ -65461,12 +65903,12 @@ function findConfigFile2(startDir) {
 }
 function loadConfig2(configPath) {
   const filePath = configPath ?? findConfigFile2();
-  if (!existsSync23(filePath)) {
+  if (!existsSync25(filePath)) {
     throw new ConfigError2(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync22(filePath, "utf-8");
+    raw = readFileSync25(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError2(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -65969,15 +66411,15 @@ function topicForRecipient(args) {
 }
 
 // ../src/agents/perf.ts
-import { existsSync as existsSync24, readFileSync as readFileSync23 } from "node:fs";
+import { existsSync as existsSync26, readFileSync as readFileSync26 } from "node:fs";
 function readTurnUsages(jsonlPath, lastN) {
-  if (!existsSync24(jsonlPath))
+  if (!existsSync26(jsonlPath))
     return [];
   if (lastN <= 0)
     return [];
   let raw;
   try {
-    raw = readFileSync23(jsonlPath, "utf-8");
+    raw = readFileSync26(jsonlPath, "utf-8");
   } catch {
     return [];
   }
@@ -66068,8 +66510,8 @@ function numField(obj, key) {
 }
 
 // gateway/context-occupancy.ts
-import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join27 } from "node:path";
+import { mkdirSync as mkdirSync19, writeFileSync as writeFileSync20 } from "node:fs";
+import { join as join29 } from "node:path";
 var CONTEXT_OCCUPANCY_FILENAME = "context-occupancy.json";
 var TIGHT_FRACTION = 0.8;
 function buildContextOccupancy(occupancy, cap, now) {
@@ -66092,9 +66534,9 @@ function buildContextOccupancy(occupancy, cap, now) {
 }
 function writeContextOccupancySnapshot(stateDir, snapshot, deps) {
   try {
-    const path2 = join27(stateDir, CONTEXT_OCCUPANCY_FILENAME);
-    (deps?.mkdir ?? ((p, o) => mkdirSync17(p, o)))(stateDir, { recursive: true });
-    (deps?.writeFile ?? ((p, d) => writeFileSync17(p, d)))(path2, JSON.stringify(snapshot, null, 2) + `
+    const path2 = join29(stateDir, CONTEXT_OCCUPANCY_FILENAME);
+    (deps?.mkdir ?? ((p, o) => mkdirSync19(p, o)))(stateDir, { recursive: true });
+    (deps?.writeFile ?? ((p, d) => writeFileSync20(p, d)))(path2, JSON.stringify(snapshot, null, 2) + `
 `);
   } catch {}
 }
@@ -66177,7 +66619,7 @@ function nextCompactNotify(state3, ev) {
 }
 
 // gateway/hostd-dispatch.ts
-import { existsSync as existsSync25 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 import { randomBytes as randomBytes5 } from "node:crypto";
 
 // ../src/host-control/client.ts
@@ -66502,13 +66944,13 @@ function hostdSocketPath(agentName3) {
 function hostdWillBeUsed(agentName3) {
   if (!isHostdEnabled())
     return false;
-  return existsSync25(hostdSocketPath(agentName3));
+  return existsSync27(hostdSocketPath(agentName3));
 }
 async function tryHostdDispatch(agentName3, req, timeoutMs = 5000) {
   if (!isHostdEnabled())
     return "not-configured";
   const sockPath = hostdSocketPath(agentName3);
-  if (!existsSync25(sockPath))
+  if (!existsSync27(sockPath))
     return "not-configured";
   try {
     return await hostdRequest({ socketPath: sockPath, timeoutMs }, req);
@@ -66532,7 +66974,7 @@ async function hostdGetStatusOnce(agentName3, targetRequestId) {
   if (!isHostdEnabled())
     return "not-configured";
   const sockPath = hostdSocketPath(agentName3);
-  if (!existsSync25(sockPath))
+  if (!existsSync27(sockPath))
     return "not-configured";
   try {
     const resp = await hostdRequest({ socketPath: sockPath, timeoutMs: 3000 }, {
@@ -66553,7 +66995,7 @@ async function pollHostdStatus(agentName3, targetRequestId, opts) {
   if (!isHostdEnabled())
     return "not-configured";
   const sockPath = hostdSocketPath(agentName3);
-  if (!existsSync25(sockPath))
+  if (!existsSync27(sockPath))
     return "not-configured";
   const now = opts.now ?? Date.now;
   const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -66632,7 +67074,7 @@ function shouldSweepChatAtBoot(chatId) {
 
 // gateway/webhook-ingest-server.ts
 import net4 from "node:net";
-import { chmodSync as chmodSync5, existsSync as existsSync26, unlinkSync as unlinkSync10 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync28, unlinkSync as unlinkSync10 } from "node:fs";
 var MAX_REQUEST_BYTES = 1024 * 1024;
 function fdOf(conn) {
   const handle = conn._handle;
@@ -66644,7 +67086,7 @@ function startWebhookIngestServer(opts) {
   const log = opts.log ?? ((s) => process.stderr.write(s));
   const allowed = new Set(opts.allowedUids);
   try {
-    if (existsSync26(opts.socketPath))
+    if (existsSync28(opts.socketPath))
       unlinkSync10(opts.socketPath);
   } catch (err) {
     log(`webhook-ingest-server: could not unlink stale socket: ${err.message}
@@ -66737,7 +67179,7 @@ function startWebhookIngestServer(opts) {
         server.close();
       } catch {}
       try {
-        if (existsSync26(opts.socketPath))
+        if (existsSync28(opts.socketPath))
           unlinkSync10(opts.socketPath);
       } catch {}
     }
@@ -66745,20 +67187,20 @@ function startWebhookIngestServer(opts) {
 }
 
 // ../src/web/webhook-gateway-record.ts
-import { appendFileSync as appendFileSync5, mkdirSync as mkdirSync20 } from "fs";
-import { join as join30 } from "path";
+import { appendFileSync as appendFileSync5, mkdirSync as mkdirSync22 } from "fs";
+import { join as join32 } from "path";
 import { homedir as homedir11 } from "os";
 
 // ../src/web/webhook-handler.ts
-import { appendFileSync as appendFileSync4, existsSync as existsSync27, mkdirSync as mkdirSync18, readFileSync as readFileSync24, writeFileSync as writeFileSync18 } from "fs";
-import { join as join28 } from "path";
+import { appendFileSync as appendFileSync4, existsSync as existsSync29, mkdirSync as mkdirSync20, readFileSync as readFileSync27, writeFileSync as writeFileSync21 } from "fs";
+import { join as join30 } from "path";
 var DEDUP_MAX = 1000;
 var DEDUP_TTL_MS = 24 * 60 * 60 * 1000;
 function loadDedupFile(path2) {
   try {
-    if (!existsSync27(path2))
+    if (!existsSync29(path2))
       return {};
-    const raw = JSON.parse(readFileSync24(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync27(path2, "utf-8"));
     return typeof raw.deliveries === "object" && raw.deliveries !== null ? raw.deliveries : {};
   } catch {
     return {};
@@ -66772,7 +67214,7 @@ function saveDedupFile(path2, deliveries, now) {
   }
   const sorted = Object.entries(pruned).sort((a, b) => b[1] - a[1]).slice(0, DEDUP_MAX);
   const final = Object.fromEntries(sorted);
-  writeFileSync18(path2, JSON.stringify({ deliveries: final }), {
+  writeFileSync21(path2, JSON.stringify({ deliveries: final }), {
     mode: 384
   });
 }
@@ -66780,8 +67222,8 @@ var agentDedupCache = new Map;
 function createFileDedupStore(resolveAgentDir) {
   return {
     check(agent, deliveryId, now) {
-      const telegramDir = join28(resolveAgentDir(agent), "telegram");
-      const filePath = join28(telegramDir, "webhook-dedup.json");
+      const telegramDir = join30(resolveAgentDir(agent), "telegram");
+      const filePath = join30(telegramDir, "webhook-dedup.json");
       if (!agentDedupCache.has(agent)) {
         agentDedupCache.set(agent, loadDedupFile(filePath));
       }
@@ -66791,7 +67233,7 @@ function createFileDedupStore(resolveAgentDir) {
       }
       deliveries[deliveryId] = now;
       try {
-        mkdirSync18(telegramDir, { recursive: true });
+        mkdirSync20(telegramDir, { recursive: true });
         saveDedupFile(filePath, deliveries, now);
       } catch {}
       return;
@@ -66802,8 +67244,8 @@ var tokenBuckets = new Map;
 var throttleIssueWindow = new Map;
 
 // ../src/web/webhook-dispatch.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync19, readFileSync as readFileSync25, writeFileSync as writeFileSync19 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync30, mkdirSync as mkdirSync21, readFileSync as readFileSync28, writeFileSync as writeFileSync22 } from "fs";
+import { join as join31 } from "path";
 import { homedir as homedir10 } from "os";
 
 // ../src/agent-scheduler/ipc-client.ts
@@ -67102,9 +67544,9 @@ function cooldownKey(source, eventType, repo, number, ruleIndex) {
 }
 function loadCooldownFile(path2) {
   try {
-    if (!existsSync28(path2))
+    if (!existsSync30(path2))
       return {};
-    const raw = JSON.parse(readFileSync25(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync28(path2, "utf-8"));
     return typeof raw.dispatches === "object" && raw.dispatches !== null ? raw.dispatches : {};
   } catch {
     return {};
@@ -67112,7 +67554,7 @@ function loadCooldownFile(path2) {
 }
 function saveCooldownFile(path2, dispatches) {
   try {
-    writeFileSync19(path2, JSON.stringify({ dispatches }), {
+    writeFileSync22(path2, JSON.stringify({ dispatches }), {
       mode: 384
     });
   } catch {}
@@ -67123,8 +67565,8 @@ function createFileCooldownStore(resolveAgentDir) {
     isCoolingDown(agent, key, cooldownMs, now) {
       if (cooldownMs <= 0)
         return false;
-      const telegramDir = join29(resolveAgentDir(agent), "telegram");
-      const filePath = join29(telegramDir, "webhook-cooldown.json");
+      const telegramDir = join31(resolveAgentDir(agent), "telegram");
+      const filePath = join31(telegramDir, "webhook-cooldown.json");
       if (!cache.has(agent)) {
         cache.set(agent, loadCooldownFile(filePath));
       }
@@ -67135,7 +67577,7 @@ function createFileCooldownStore(resolveAgentDir) {
       }
       dispatches[key] = now;
       try {
-        mkdirSync19(telegramDir, { recursive: true });
+        mkdirSync21(telegramDir, { recursive: true });
         saveCooldownFile(filePath, dispatches);
       } catch {}
       return false;
@@ -67181,9 +67623,9 @@ async function defaultInject(socketPath, agentName3, inbound) {
 }
 function injectWebhookInbound(agent, prompt, ctx, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join29(homedir10(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join31(homedir10(), ".switchroom", "agents", a));
   const now = (deps.now ?? Date.now)();
-  const socketPath = join29(resolveAgentDir(agent), "telegram", "gateway.sock");
+  const socketPath = join31(resolveAgentDir(agent), "telegram", "gateway.sock");
   const inbound = {
     type: "inbound",
     chatId: ctx.chatId,
@@ -67255,7 +67697,7 @@ function evaluateDispatch(args, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = (deps.now ?? Date.now)();
   const nowDate = deps.nowDate ?? (() => new Date(now));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join29(homedir10(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join31(homedir10(), ".switchroom", "agents", a));
   const cooldownStore = deps.cooldownStore ?? createFileCooldownStore(resolveAgentDir);
   if (!DISPATCH_SOURCES.includes(args.source))
     return 0;
@@ -67333,10 +67775,10 @@ var CONSOLIDATION_COMPLETED_EVENT = "consolidation.completed";
 function recordWebhookEvent(rec, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = rec.ts || (deps.now ?? Date.now)();
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join30(homedir11(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join32(homedir11(), ".switchroom", "agents", a));
   const dedupStore = deps.dedupStore ?? createFileDedupStore(resolveAgentDir);
   const agent = rec.agent;
-  const telegramDir = join30(resolveAgentDir(agent), "telegram");
+  const telegramDir = join32(resolveAgentDir(agent), "telegram");
   if (rec.source === "github" && rec.delivery_id) {
     const originalTs = dedupStore.check(agent, rec.delivery_id, now);
     if (originalTs !== undefined) {
@@ -67345,9 +67787,9 @@ function recordWebhookEvent(rec, deps = {}) {
       return { status: "deduped", ts: originalTs };
     }
   }
-  const logPath = join30(telegramDir, "webhook-events.jsonl");
+  const logPath = join32(telegramDir, "webhook-events.jsonl");
   try {
-    mkdirSync20(telegramDir, { recursive: true });
+    mkdirSync22(telegramDir, { recursive: true });
     const record = {
       ts: now,
       source: rec.source,
@@ -67456,7 +67898,7 @@ function recordWebhookEvent(rec, deps = {}) {
 }
 
 // gateway/ipc-server.ts
-import { renameSync as renameSync7, unlinkSync as unlinkSync11, chmodSync as chmodSync6 } from "fs";
+import { renameSync as renameSync8, unlinkSync as unlinkSync11, chmodSync as chmodSync6 } from "fs";
 var MAX_BUFFER_SIZE = 1024 * 1024;
 var VALID_OPERATOR_KINDS = new Set([
   "credentials-expired",
@@ -67655,7 +68097,7 @@ function createIpcServer(options) {
     heartbeatTimeoutMs = 30000
   } = options;
   try {
-    renameSync7(socketPath, socketPath + ".bak");
+    renameSync8(socketPath, socketPath + ".bak");
   } catch {}
   try {
     unlinkSync11(socketPath + ".bak");
@@ -68032,7 +68474,7 @@ function createIpcServer(options) {
       clientBySocketId.clear();
       server.stop(true);
       try {
-        renameSync7(socketPath, socketPath + ".bak");
+        renameSync8(socketPath, socketPath + ".bak");
       } catch {}
     }
   };
@@ -68856,11 +69298,12 @@ function persistObligations(path2, fs2, snapshot, log = (l) => process.stderr.wr
 }
 
 // gateway/status-pin-store.ts
+var BOOT_UNPIN_MAX_ATTEMPTS = 5;
 function isPinRow(x) {
   if (x == null || typeof x !== "object")
     return false;
   const o = x;
-  return typeof o.pinKey === "string" && o.pinKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && typeof o.messageId === "number" && (o.pending === undefined || typeof o.pending === "boolean");
+  return typeof o.pinKey === "string" && o.pinKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && typeof o.messageId === "number" && (o.pending === undefined || typeof o.pending === "boolean") && (o.expiresAt === undefined || typeof o.expiresAt === "number") && (o.attempts === undefined || typeof o.attempts === "number");
 }
 function loadStatusPins(path2, fs2) {
   if (!fs2.existsSync(path2))
@@ -68904,21 +69347,38 @@ function pinnedMessageIsOurs(tracked, chatId, pinnedMessageId) {
 }
 async function runStatusPinBootCleanup(args) {
   const log = args.log ?? ((l) => process.stderr.write(l));
+  const now = args.now ?? Date.now();
   const persisted = loadStatusPins(args.path, args.fs);
   if (persisted.length === 0)
-    return { cleared: 0, total: 0 };
+    return { cleared: 0, retained: 0, kept: 0, total: 0 };
   let cleared = 0;
+  let retained = 0;
+  let kept = 0;
+  const next = [];
   for (const pin of persisted) {
+    if (pin.expiresAt != null && pin.expiresAt > now) {
+      next.push(pin);
+      kept++;
+      continue;
+    }
     try {
       await args.unpin(pin.chatId, pin.messageId);
       cleared++;
     } catch (err) {
-      log(`status-pin-store: boot cleanup unpin failed ` + `(chat=${pin.chatId} msg=${pin.messageId}): ${err.message}
+      const attempts = (pin.attempts ?? 0) + 1;
+      log(`status-pin-store: boot cleanup unpin failed ` + `(chat=${pin.chatId} msg=${pin.messageId} attempt=${attempts}): ` + `${err.message}
 `);
+      if (attempts < BOOT_UNPIN_MAX_ATTEMPTS) {
+        next.push({ ...pin, attempts });
+        retained++;
+      } else {
+        log(`status-pin-store: boot cleanup FORFEITING pin after ` + `${attempts} failed unpin attempts ` + `(key=${pin.pinKey} chat=${pin.chatId} msg=${pin.messageId}) \u2014 ` + `will not retry again
+`);
+      }
     }
   }
-  persistStatusPins(args.path, args.fs, [], log);
-  return { cleared, total: persisted.length };
+  persistStatusPins(args.path, args.fs, next, log);
+  return { cleared, retained, kept, total: persisted.length };
 }
 var storeLockTails = new Map;
 function withStoreLock(path2, fn) {
@@ -68937,6 +69397,11 @@ function applyStatusPinRow(path2, fs2, pinKey, row, log) {
   const next = row == null ? others : [...others, row];
   persistStatusPins(path2, fs2, next, log);
 }
+function mutateStatusPinRow(path2, fs2, pinKey, row, log = (l) => process.stderr.write(l)) {
+  return withStoreLock(path2, async () => {
+    applyStatusPinRow(path2, fs2, pinKey, row, log);
+  });
+}
 function reconcileAndPersistStatusPin(args) {
   const { path: path2, fs: fs2, pinKey, chatId, op } = args;
   const log = args.log ?? ((l) => process.stderr.write(l));
@@ -68958,11 +69423,12 @@ function reconcileAndPersistStatusPin(args) {
 }
 
 // gateway/activity-card-store.ts
+var BOOT_UNPIN_MAX_ATTEMPTS2 = 5;
 function isCardRow(x) {
   if (x == null || typeof x !== "object")
     return false;
   const o = x;
-  return typeof o.turnKey === "string" && o.turnKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && (o.threadId === null || typeof o.threadId === "number") && typeof o.activityMessageId === "number" && typeof o.startedAt === "number" && (o.pinned === undefined || typeof o.pinned === "boolean");
+  return typeof o.turnKey === "string" && o.turnKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && (o.threadId === null || typeof o.threadId === "number") && typeof o.activityMessageId === "number" && typeof o.startedAt === "number" && (o.pinned === undefined || typeof o.pinned === "boolean") && (o.finalizeAttempted === undefined || typeof o.finalizeAttempted === "boolean") && (o.unpinAttempts === undefined || typeof o.unpinAttempts === "number");
 }
 function loadActivityCards(path2, fs2) {
   if (!fs2.existsSync(path2))
@@ -69021,23 +69487,32 @@ async function runActivityCardBootReaper(args) {
   let unpinned = 0;
   for (const record of persisted) {
     clearActivityCardRecord(args.path, args.fs, record.turnKey, record.activityMessageId, log);
-    try {
-      const res = await args.finalizeCard(record);
-      if (res != null)
-        finalized++;
-      else
-        vanished++;
-    } catch (err) {
-      log(`activity-card-store: boot reaper finalize failed ` + `(chat=${record.chatId} msg=${record.activityMessageId}): ` + `${err.message}
+    if (!record.finalizeAttempted) {
+      try {
+        const res = await args.finalizeCard(record);
+        if (res != null)
+          finalized++;
+        else
+          vanished++;
+      } catch (err) {
+        log(`activity-card-store: boot reaper finalize failed ` + `(chat=${record.chatId} msg=${record.activityMessageId}): ` + `${err.message}
 `);
+      }
     }
     if (record.pinned) {
       try {
         await args.unpinCard(record);
         unpinned++;
       } catch (err) {
-        log(`activity-card-store: boot reaper unpin failed ` + `(chat=${record.chatId} msg=${record.activityMessageId}): ` + `${err.message}
+        const attempts = (record.unpinAttempts ?? 0) + 1;
+        log(`activity-card-store: boot reaper unpin failed ` + `(chat=${record.chatId} msg=${record.activityMessageId} ` + `attempt=${attempts}): ${err.message}
 `);
+        if (attempts < BOOT_UNPIN_MAX_ATTEMPTS2) {
+          writeActivityCardRecord(args.path, args.fs, { ...record, finalizeAttempted: true, unpinAttempts: attempts }, log);
+        } else {
+          log(`activity-card-store: boot reaper FORFEITING card unpin after ` + `${attempts} failed attempts ` + `(chat=${record.chatId} msg=${record.activityMessageId}) \u2014 ` + `will not retry again
+`);
+        }
       }
     }
   }
@@ -69084,6 +69559,37 @@ function restartOrphanCardFinalizeText(startedAt) {
   return `\u26a0\ufe0f Interrupted by a gateway restart${elapsed} \u2014 this turn did not finish.`;
 }
 
+// gateway/worker-pin-reaper.ts
+var WORKER_PIN_TTL_MS_DEFAULT = 6 * 60 * 60000;
+var WORKER_PIN_KEY_PREFIX = "wk:";
+function workerAgentIdOfPinKey(pinKey) {
+  if (!pinKey.startsWith(WORKER_PIN_KEY_PREFIX))
+    return null;
+  const agentId = pinKey.slice(WORKER_PIN_KEY_PREFIX.length);
+  return agentId.length > 0 ? agentId : null;
+}
+function decideWorkerPinReaps(args) {
+  const reaps = [];
+  for (const pin of args.pins) {
+    const agentId = workerAgentIdOfPinKey(pin.pinKey);
+    if (agentId == null)
+      continue;
+    if (pin.chatId.length === 0)
+      continue;
+    const status = args.statusOf(agentId);
+    if (status === "terminal") {
+      reaps.push({ ...pin, reason: "terminal" });
+      continue;
+    }
+    if (status === "running")
+      continue;
+    if (args.now - pin.pinnedAt >= args.ttlMs) {
+      reaps.push({ ...pin, reason: "ttl" });
+    }
+  }
+  return reaps;
+}
+
 // gateway/with-deadline.ts
 function withDeadline(p, ms, timeoutMessage) {
   p.catch(() => {});
@@ -70504,26 +71010,26 @@ var import_yaml4 = __toESM(require_dist(), 1);
 
 // ../src/web/config-diff.ts
 import {
-  mkdirSync as mkdirSync21,
+  mkdirSync as mkdirSync23,
   mkdtempSync as mkdtemp,
   rmSync as rmrf,
-  writeFileSync as writeFileSync20
+  writeFileSync as writeFileSync23
 } from "node:fs";
 import { spawnSync } from "node:child_process";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join33 } from "node:path";
 
 class ConfigDiffError extends Error {
 }
 function generateUnifiedDiff(before, after, name = "switchroom.yaml", gitBin = "git") {
   if (before === after)
     return "";
-  const dir = mkdtemp(join31(tmpdir2(), "switchroom-config-diff-"));
+  const dir = mkdtemp(join33(tmpdir2(), "switchroom-config-diff-"));
   try {
-    mkdirSync21(join31(dir, "cur"), { recursive: true });
-    mkdirSync21(join31(dir, "new"), { recursive: true });
-    writeFileSync20(join31(dir, "cur", name), before);
-    writeFileSync20(join31(dir, "new", name), after);
+    mkdirSync23(join33(dir, "cur"), { recursive: true });
+    mkdirSync23(join33(dir, "new"), { recursive: true });
+    writeFileSync23(join33(dir, "cur", name), before);
+    writeFileSync23(join33(dir, "new", name), after);
     const r = spawnSync(gitBin, ["diff", "--no-index", "--no-color", "--", `cur/${name}`, `new/${name}`], { cwd: dir, encoding: "utf-8", timeout: 1e4 });
     if (r.status === 0)
       return "";
@@ -70554,6 +71060,9 @@ function generateUnifiedDiff(before, after, name = "switchroom.yaml", gitBin = "
 }
 
 // gateway/mental-model-propose-diff.ts
+function decodeCanonicalEntities(s) {
+  return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&#39;/g, "'").replace(/&amp;/g, "&");
+}
 function readDeclaredMentalModelNames(configText, agentName3) {
   if (!configText || !agentName3)
     return [];
@@ -70600,17 +71109,20 @@ function buildMentalModelAppendDiff(args) {
       detail: `agents.${agentName3} not present in config`
     };
   }
+  const decodedName = decodeCanonicalEntities(spec.name);
   const existing = readDeclaredMentalModelNames(configText, agentName3);
-  if (existing.includes(spec.name)) {
+  if (existing.includes(decodedName)) {
     return {
       ok: false,
       error: "duplicate",
-      detail: `mental model "${spec.name}" is already declared for ${agentName3}`
+      detail: `mental model "${decodedName}" is already declared for ${agentName3}`
     };
   }
+  const name = decodedName;
+  const source_query = decodeCanonicalEntities(spec.source_query);
   const item = {
-    name: spec.name,
-    source_query: spec.source_query
+    name,
+    source_query
   };
   if (spec.refresh_after_consolidation !== undefined) {
     item.refresh_after_consolidation = spec.refresh_after_consolidation;
@@ -70897,27 +71409,27 @@ function buildSkillProposalApplyInbound(opts) {
 // ../src/self-improve/skill-proposals.ts
 import {
   closeSync as closeSync3,
-  existsSync as existsSync29,
-  mkdirSync as mkdirSync22,
+  existsSync as existsSync31,
+  mkdirSync as mkdirSync24,
   openSync as openSync3,
-  readFileSync as readFileSync26,
+  readFileSync as readFileSync29,
   writeSync as writeSync3
 } from "node:fs";
-import { join as join32 } from "node:path";
+import { join as join34 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 var PROPOSALS_FILE = "skill-proposals.jsonl";
 var REJECTED_FILE = "skill-proposals-rejected.jsonl";
 var REJECTION_TTL_MS = 90 * 24 * 60 * 60 * 1000;
 var PROPOSAL_SIM_THRESHOLD = 0.5;
 function proposalsPath(stateDir) {
-  return join32(stateDir, PROPOSALS_FILE);
+  return join34(stateDir, PROPOSALS_FILE);
 }
 function rejectedPath(stateDir) {
-  return join32(stateDir, REJECTED_FILE);
+  return join34(stateDir, REJECTED_FILE);
 }
 function ensureDir2(stateDir) {
-  if (!existsSync29(stateDir)) {
-    mkdirSync22(stateDir, { recursive: true, mode: 493 });
+  if (!existsSync31(stateDir)) {
+    mkdirSync24(stateDir, { recursive: true, mode: 493 });
   }
 }
 function appendLine(path2, obj) {
@@ -70930,11 +71442,11 @@ function appendLine(path2, obj) {
   }
 }
 function readLines(path2, isValid2) {
-  if (!existsSync29(path2))
+  if (!existsSync31(path2))
     return [];
   let raw;
   try {
-    raw = readFileSync26(path2, "utf-8");
+    raw = readFileSync29(path2, "utf-8");
   } catch {
     return [];
   }
@@ -71563,11 +72075,11 @@ function escapeBody2(s) {
 }
 
 // gateway/pid-file.ts
-import { writeFileSync as writeFileSync21, readFileSync as readFileSync27, unlinkSync as unlinkSync12, renameSync as renameSync8 } from "node:fs";
+import { writeFileSync as writeFileSync24, readFileSync as readFileSync30, unlinkSync as unlinkSync12, renameSync as renameSync9 } from "node:fs";
 function writePidFile(path2, record) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync21(tmp, JSON.stringify(record), "utf-8");
-  renameSync8(tmp, path2);
+  writeFileSync24(tmp, JSON.stringify(record), "utf-8");
+  renameSync9(tmp, path2);
 }
 function clearPidFile(path2) {
   try {
@@ -71582,10 +72094,10 @@ import {
   writeFile as writeFileAsync,
   readFile as readFileAsync
 } from "node:fs/promises";
-import { readFileSync as readFileSync28 } from "node:fs";
+import { readFileSync as readFileSync31 } from "node:fs";
 function readCurrentBootId() {
   try {
-    const stat = readFileSync28("/proc/1/stat", "utf-8");
+    const stat = readFileSync31("/proc/1/stat", "utf-8");
     const lastParen = stat.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -71788,15 +72300,15 @@ function safeCount(fn) {
 }
 
 // gateway/session-marker.ts
-import { writeFileSync as writeFileSync22, readFileSync as readFileSync29, renameSync as renameSync9, unlinkSync as unlinkSync13 } from "node:fs";
+import { writeFileSync as writeFileSync25, readFileSync as readFileSync32, renameSync as renameSync10, unlinkSync as unlinkSync13 } from "node:fs";
 function writeSessionMarker(path2, marker) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync22(tmp, JSON.stringify(marker), "utf-8");
-  renameSync9(tmp, path2);
+  writeFileSync25(tmp, JSON.stringify(marker), "utf-8");
+  renameSync10(tmp, path2);
 }
 function readSessionMarker(path2) {
   try {
-    const raw = readFileSync29(path2, "utf-8");
+    const raw = readFileSync32(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.pid === "number" && typeof parsed.startedAtMs === "number" && Number.isFinite(parsed.pid) && Number.isFinite(parsed.startedAtMs)) {
       return { pid: parsed.pid, startedAtMs: parsed.startedAtMs };
@@ -71818,16 +72330,16 @@ function shouldFireRestartBanner(input) {
 }
 
 // gateway/clean-shutdown-marker.ts
-import { writeFileSync as writeFileSync23, readFileSync as readFileSync30, renameSync as renameSync10, unlinkSync as unlinkSync14 } from "node:fs";
+import { writeFileSync as writeFileSync26, readFileSync as readFileSync33, renameSync as renameSync11, unlinkSync as unlinkSync14 } from "node:fs";
 var DEFAULT_MAX_AGE_MS = 60000;
 function writeCleanShutdownMarker(path2, marker) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync23(tmp, JSON.stringify(marker), "utf-8");
-  renameSync10(tmp, path2);
+  writeFileSync26(tmp, JSON.stringify(marker), "utf-8");
+  renameSync11(tmp, path2);
 }
 function readCleanShutdownMarker(path2) {
   try {
-    const raw = readFileSync30(path2, "utf-8");
+    const raw = readFileSync33(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.ts === "number" && Number.isFinite(parsed.ts) && typeof parsed.signal === "string" && parsed.signal.length > 0) {
       const out = { ts: parsed.ts, signal: parsed.signal };
@@ -72433,16 +72945,16 @@ function classifyAdminGate(text4, myAgentName) {
 
 // subagent-watcher.ts
 import {
-  existsSync as existsSync31,
+  existsSync as existsSync33,
   openSync as openSync5,
   readSync,
   statSync as statSync10,
   closeSync as closeSync5,
   watch,
   readdirSync as readdirSync6,
-  readFileSync as readFileSync32
+  readFileSync as readFileSync35
 } from "fs";
-import { join as join34 } from "path";
+import { join as join36 } from "path";
 
 // operator-events.ts
 function classifyClaudeError(raw) {
@@ -72922,20 +73434,20 @@ function recordNestedSubagentDispatch(db2, args) {
 // gateway/turn-active-marker.ts
 import {
   closeSync as closeSync4,
-  existsSync as existsSync30,
-  mkdirSync as mkdirSync23,
+  existsSync as existsSync32,
+  mkdirSync as mkdirSync25,
   openSync as openSync4,
-  readFileSync as readFileSync31,
+  readFileSync as readFileSync34,
   statSync as statSync9,
   unlinkSync as unlinkSync15,
   utimesSync,
-  writeFileSync as writeFileSync24
+  writeFileSync as writeFileSync27
 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join35 } from "node:path";
 var TURN_ACTIVE_MARKER_FILE = "turn-active.json";
 function touchTurnActiveMarker(stateDir) {
-  const path2 = join33(stateDir, TURN_ACTIVE_MARKER_FILE);
-  if (!existsSync30(path2))
+  const path2 = join35(stateDir, TURN_ACTIVE_MARKER_FILE);
+  if (!existsSync32(path2))
     return;
   const now = new Date;
   try {
@@ -72977,7 +73489,7 @@ function backfillJsonlAgentId(db2, jsonlPath, agentId, log) {
   const metaPath = jsonlPath.replace(/\.jsonl$/, ".meta.json");
   let meta;
   try {
-    const raw = readFileSync32(metaPath, "utf8");
+    const raw = readFileSync35(metaPath, "utf8");
     meta = JSON.parse(raw);
   } catch {
     log?.(`subagent-watcher: backfill skip ${agentId} \u2014 meta.json not readable at ${metaPath}`);
@@ -73325,7 +73837,7 @@ function startSubagentWatcher(config) {
     clearTimeout(ref.ref);
   });
   const fs2 = config.fs ?? {
-    existsSync: existsSync31,
+    existsSync: existsSync33,
     readdirSync: readdirSync6,
     statSync: statSync10,
     openSync: openSync5,
@@ -73623,8 +74135,8 @@ function startSubagentWatcher(config) {
   function rescanSubagentDirs() {
     if (stopped)
       return;
-    const claudeHome = join34(agentDir, ".claude");
-    const projectsRoot = join34(claudeHome, "projects");
+    const claudeHome = join36(agentDir, ".claude");
+    const projectsRoot = join36(claudeHome, "projects");
     if (!fs2.existsSync(projectsRoot))
       return;
     let projectDirs;
@@ -73658,7 +74170,7 @@ function startSubagentWatcher(config) {
         continue;
       }
       warnedForeignSlugs.delete(pDir);
-      const projectPath = join34(projectsRoot, pDir);
+      const projectPath = join36(projectsRoot, pDir);
       let sessionDirs;
       try {
         sessionDirs = fs2.readdirSync(projectPath);
@@ -73668,7 +74180,7 @@ function startSubagentWatcher(config) {
       for (const sDir of sessionDirs) {
         if (sDir.endsWith(".jsonl"))
           continue;
-        const subagentsPath = join34(projectPath, sDir, "subagents");
+        const subagentsPath = join36(projectPath, sDir, "subagents");
         if (!fs2.existsSync(subagentsPath))
           continue;
         const watchAndScan = (dirPath) => {
@@ -73677,7 +74189,7 @@ function startSubagentWatcher(config) {
               const w = fs2.watch(dirPath, (_event, filename) => {
                 if (!filename || !filename.toString().startsWith("agent-") || !filename.toString().endsWith(".jsonl"))
                   return;
-                const filePath = join34(dirPath, filename.toString());
+                const filePath = join36(dirPath, filename.toString());
                 if (!knownFiles.has(filePath)) {
                   scanSubagentsDir(dirPath);
                 }
@@ -73691,7 +74203,7 @@ function startSubagentWatcher(config) {
           scanSubagentsDir(dirPath);
         };
         watchAndScan(subagentsPath);
-        const workflowsPath = join34(subagentsPath, "workflows");
+        const workflowsPath = join36(subagentsPath, "workflows");
         if (fs2.existsSync(workflowsPath)) {
           let wfDirs;
           try {
@@ -73701,7 +74213,7 @@ function startSubagentWatcher(config) {
           }
           for (const wfDir of wfDirs) {
             try {
-              const wfPath = join34(workflowsPath, wfDir);
+              const wfPath = join36(workflowsPath, wfDir);
               if (!fs2.statSync(wfPath).isDirectory())
                 continue;
               watchAndScan(wfPath);
@@ -73721,7 +74233,7 @@ function startSubagentWatcher(config) {
     for (const e of entries) {
       if (!e.startsWith("agent-") || !e.endsWith(".jsonl"))
         continue;
-      const filePath = join34(subagentsPath, e);
+      const filePath = join36(subagentsPath, e);
       if (knownFiles.has(filePath))
         continue;
       const agentId = e.slice("agent-".length, -".jsonl".length);
@@ -73815,29 +74327,29 @@ function startSubagentWatcher(config) {
 
 // ../src/worktree/registry.ts
 import {
-  mkdirSync as mkdirSync24,
-  writeFileSync as writeFileSync25,
-  readFileSync as readFileSync33,
+  mkdirSync as mkdirSync26,
+  writeFileSync as writeFileSync28,
+  readFileSync as readFileSync36,
   readdirSync as readdirSync7,
   unlinkSync as unlinkSync16,
-  existsSync as existsSync32,
-  renameSync as renameSync11
+  existsSync as existsSync34,
+  renameSync as renameSync12
 } from "node:fs";
-import { join as join35, resolve as resolve8 } from "node:path";
+import { join as join37, resolve as resolve8 } from "node:path";
 import { homedir as homedir12 } from "node:os";
 function registryDir() {
-  return resolve8(process.env.SWITCHROOM_WORKTREE_DIR ?? join35(homedir12(), ".switchroom", "worktrees"));
+  return resolve8(process.env.SWITCHROOM_WORKTREE_DIR ?? join37(homedir12(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join35(registryDir(), `${id}.json`);
+  return join37(registryDir(), `${id}.json`);
 }
 function ensureDir3() {
-  mkdirSync24(registryDir(), { recursive: true });
+  mkdirSync26(registryDir(), { recursive: true });
 }
 function readRecord(id) {
   const path2 = recordPath(id);
   try {
-    const raw = readFileSync33(path2, "utf8");
+    const raw = readFileSync36(path2, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -73930,15 +74442,15 @@ function determineRestartReason(opts) {
 init_boot_card();
 
 // gateway/update-announce.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync28, openSync as openSync6, closeSync as closeSync6, readFileSync as readFileSync39 } from "node:fs";
-import { join as join40 } from "node:path";
+import { existsSync as existsSync39, mkdirSync as mkdirSync30, openSync as openSync6, closeSync as closeSync6, readFileSync as readFileSync42 } from "node:fs";
+import { join as join42 } from "node:path";
 import { homedir as homedir14 } from "node:os";
 
 // ../src/host-control/audit-reader.ts
 import { homedir as homedir13 } from "node:os";
-import { join as join39 } from "node:path";
+import { join as join41 } from "node:path";
 function defaultAuditLogPath(home2 = homedir13()) {
-  return join39(home2, ".switchroom", "host-control-audit.log");
+  return join41(home2, ".switchroom", "host-control-audit.log");
 }
 function parseAuditLine(line) {
   const trimmed = line.trim();
@@ -74059,8 +74571,8 @@ function readAndFilter(raw, filters, limit) {
 var DEFAULT_LOOKBACK_MS = 10 * 60 * 1000;
 function readLastTerminalUpdateAudit(opts = {}) {
   const path2 = opts.auditLogPath ?? defaultAuditLogPath();
-  const exists = opts.exists ?? existsSync37;
-  const readFile = opts.readFile ?? ((p) => readFileSync39(p, "utf-8"));
+  const exists = opts.exists ?? existsSync39;
+  const readFile = opts.readFile ?? ((p) => readFileSync42(p, "utf-8"));
   if (!exists(path2))
     return null;
   let raw;
@@ -74121,15 +74633,15 @@ function renderUpdateOutcomeLine(entry) {
 `);
 }
 function claimUpdateAnnouncement(requestId, opts = {}) {
-  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join40(homedir14(), ".switchroom");
-  const dir = join40(stateDir, "update-announced");
+  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join42(homedir14(), ".switchroom");
+  const dir = join42(stateDir, "update-announced");
   try {
-    mkdirSync28(dir, { recursive: true });
+    mkdirSync30(dir, { recursive: true });
   } catch {
     return false;
   }
   const safeId = requestId.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 200);
-  const path2 = join40(dir, safeId);
+  const path2 = join42(dir, safeId);
   try {
     const fd = openSync6(path2, "wx");
     closeSync6(fd);
@@ -74149,7 +74661,7 @@ function maybeRenderUpdateAnnouncement(opts = {}) {
 
 // issues-card.ts
 init_card_format();
-import { readFileSync as readFileSync40, writeFileSync as writeFileSync30 } from "node:fs";
+import { readFileSync as readFileSync43, writeFileSync as writeFileSync33 } from "node:fs";
 var SEVERITY_EMOJI = {
   info: "\u2139\ufe0f",
   warn: "\u26a0\ufe0f",
@@ -74241,7 +74753,7 @@ function extractRetryAfterSecs2(err) {
 var COOLDOWN_JITTER_MS2 = 500;
 function readPersistedMessageId(path2, log) {
   try {
-    const raw = readFileSync40(path2, "utf8");
+    const raw = readFileSync43(path2, "utf8");
     const parsed = JSON.parse(raw);
     const v = parsed.messageId;
     if (typeof v === "number" && Number.isInteger(v) && v > 0)
@@ -74257,7 +74769,7 @@ function readPersistedMessageId(path2, log) {
 }
 function writePersistedMessageId(path2, messageId, log) {
   try {
-    writeFileSync30(path2, JSON.stringify({ messageId }) + `
+    writeFileSync33(path2, JSON.stringify({ messageId }) + `
 `, { mode: 384 });
   } catch (err) {
     log(`issues-card: persist write failed (${err.message})`);
@@ -74350,24 +74862,24 @@ function createIssuesCardHandle(opts) {
 }
 
 // issues-watcher.ts
-import { existsSync as existsSync39, statSync as statSync12 } from "node:fs";
-import { join as join42 } from "node:path";
+import { existsSync as existsSync41, statSync as statSync12 } from "node:fs";
+import { join as join44 } from "node:path";
 
 // ../src/issues/store.ts
 import {
   closeSync as closeSync7,
-  existsSync as existsSync38,
-  mkdirSync as mkdirSync29,
+  existsSync as existsSync40,
+  mkdirSync as mkdirSync31,
   openSync as openSync7,
   readdirSync as readdirSync9,
-  readFileSync as readFileSync41,
-  renameSync as renameSync14,
+  readFileSync as readFileSync44,
+  renameSync as renameSync15,
   statSync as statSync11,
   unlinkSync as unlinkSync17,
-  writeFileSync as writeFileSync31,
+  writeFileSync as writeFileSync34,
   writeSync as writeSync4
 } from "node:fs";
-import { join as join41 } from "node:path";
+import { join as join43 } from "node:path";
 import { randomBytes as randomBytes6 } from "node:crypto";
 import { execSync } from "node:child_process";
 
@@ -74386,12 +74898,12 @@ init_redact();
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path2 = join41(stateDir, ISSUES_FILE);
-  if (!existsSync38(path2))
+  const path2 = join43(stateDir, ISSUES_FILE);
+  if (!existsSync40(path2))
     return [];
   let raw;
   try {
-    raw = readFileSync41(path2, "utf-8");
+    raw = readFileSync44(path2, "utf-8");
   } catch {
     return [];
   }
@@ -74423,7 +74935,7 @@ function list2(stateDir, opts = {}) {
   });
 }
 function resolve9(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync38(join41(stateDir, ISSUES_FILE)))
+  if (!existsSync40(join43(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all2 = readAll(stateDir);
@@ -74441,14 +74953,14 @@ function resolve9(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function writeAll(stateDir, events) {
-  const path2 = join41(stateDir, ISSUES_FILE);
+  const path2 = join43(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path2}.tmp-${process.pid}-${randomBytes6(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
-  writeFileSync31(tmp, body, "utf-8");
-  renameSync14(tmp, path2);
+  writeFileSync34(tmp, body, "utf-8");
+  renameSync15(tmp, path2);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
 var TMP_PREFIX = `${ISSUES_FILE}.tmp-`;
@@ -74463,7 +74975,7 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath2 = join41(stateDir, entry);
+    const tmpPath2 = join43(stateDir, entry);
     try {
       const stat = statSync11(tmpPath2);
       if (stat.mtimeMs < cutoff) {
@@ -74475,7 +74987,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join41(stateDir, ISSUES_LOCK);
+  const lockPath = join43(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -74510,7 +75022,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync41(lockPath, "utf-8").trim();
+    pidStr = readFileSync44(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -74560,7 +75072,7 @@ function isIssueEvent(v) {
 // issues-watcher.ts
 var DEFAULT_POLL_INTERVAL_MS2 = 2000;
 function startIssuesWatcher(opts) {
-  const path2 = join42(opts.stateDir, ISSUES_FILE);
+  const path2 = join44(opts.stateDir, ISSUES_FILE);
   const log = opts.log ?? (() => {});
   const intervalMs = opts.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS2;
   const setIntervalFn = opts.setInterval ?? setInterval;
@@ -74608,7 +75120,7 @@ function startIssuesWatcher(opts) {
   };
 }
 function defaultSignatureProvider(path2) {
-  if (!existsSync39(path2))
+  if (!existsSync41(path2))
     return null;
   try {
     const stat = statSync12(path2);
@@ -75364,8 +75876,8 @@ function readBashCommand(inputPreview) {
 }
 
 // gateway/scoped-grant-store.ts
-import { readFileSync as readFileSync42, writeFileSync as writeFileSync32 } from "node:fs";
-import { join as join43 } from "node:path";
+import { readFileSync as readFileSync45, writeFileSync as writeFileSync35 } from "node:fs";
+import { join as join45 } from "node:path";
 
 // scoped-approval.ts
 var SCOPED_APPROVAL_DEFAULT_TTL_MS2 = 30 * 60 * 1000;
@@ -75407,11 +75919,11 @@ function scopedGrantPersistEnabled(env = process.env) {
   return env.SWITCHROOM_SCOPED_GRANT_PERSIST !== "0";
 }
 function createScopedGrantStore(stateDir, env = process.env) {
-  const filePath = join43(stateDir, "scoped-grants.json");
+  const filePath = join45(stateDir, "scoped-grants.json");
   const enabled8 = scopedGrantPersistEnabled(env);
   function read() {
     try {
-      const raw = readFileSync42(filePath, "utf-8");
+      const raw = readFileSync45(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return Array.isArray(parsed) ? parsed : [];
     } catch {
@@ -75429,7 +75941,7 @@ function createScopedGrantStore(stateDir, env = process.env) {
       if (!enabled8)
         return;
       try {
-        writeFileSync32(filePath, JSON.stringify(serializeScopedGrants(store2)), {
+        writeFileSync35(filePath, JSON.stringify(serializeScopedGrants(store2)), {
           encoding: "utf-8",
           mode: 384
         });
@@ -75763,8 +76275,8 @@ function extractFlowItems(line) {
 
 // credits-watch.ts
 init_card_format();
-import { readFileSync as readFileSync43, writeFileSync as writeFileSync33, existsSync as existsSync40, mkdirSync as mkdirSync30 } from "fs";
-import { join as join44 } from "path";
+import { readFileSync as readFileSync46, writeFileSync as writeFileSync36, existsSync as existsSync42, mkdirSync as mkdirSync32 } from "fs";
+import { join as join46 } from "path";
 var STATE_FILE = "credits-watch.json";
 var DEFAULT_CREDIT_FATAL_REASONS = new Set;
 var KNOWN_CREDIT_REASONS = [
@@ -75786,12 +76298,12 @@ function emptyCreditState() {
   return { lastNotifiedReason: null, lastNotifiedAt: 0 };
 }
 function readClaudeJsonOverage(claudeConfigDir) {
-  const path2 = join44(claudeConfigDir, ".claude.json");
-  if (!existsSync40(path2))
+  const path2 = join46(claudeConfigDir, ".claude.json");
+  if (!existsSync42(path2))
     return null;
   let raw;
   try {
-    raw = readFileSync43(path2, "utf-8");
+    raw = readFileSync46(path2, "utf-8");
   } catch {
     return null;
   }
@@ -75869,11 +76381,11 @@ function humanizeReason(reason) {
   }
 }
 function loadCreditState(stateDir) {
-  const path2 = join44(stateDir, STATE_FILE);
-  if (!existsSync40(path2))
+  const path2 = join46(stateDir, STATE_FILE);
+  if (!existsSync42(path2))
     return emptyCreditState();
   try {
-    const raw = readFileSync43(path2, "utf-8");
+    const raw = readFileSync46(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && (parsed.lastNotifiedReason === null || typeof parsed.lastNotifiedReason === "string") && typeof parsed.lastNotifiedAt === "number" && Number.isFinite(parsed.lastNotifiedAt)) {
       return {
@@ -75885,17 +76397,17 @@ function loadCreditState(stateDir) {
   return emptyCreditState();
 }
 function saveCreditState(stateDir, state4) {
-  mkdirSync30(stateDir, { recursive: true });
-  const path2 = join44(stateDir, STATE_FILE);
-  writeFileSync33(path2, JSON.stringify(state4, null, 2) + `
+  mkdirSync32(stateDir, { recursive: true });
+  const path2 = join46(stateDir, STATE_FILE);
+  writeFileSync36(path2, JSON.stringify(state4, null, 2) + `
 `, { mode: 384 });
 }
 
 // quota-watch.ts
 init_auth_snapshot_format();
 init_card_format();
-import { readFileSync as readFileSync44, writeFileSync as writeFileSync34, existsSync as existsSync41, mkdirSync as mkdirSync31 } from "fs";
-import { join as join45 } from "path";
+import { readFileSync as readFileSync47, writeFileSync as writeFileSync37, existsSync as existsSync43, mkdirSync as mkdirSync33 } from "fs";
+import { join as join47 } from "path";
 var STATE_FILE2 = "quota-watch.json";
 function emptyQuotaWatchState() {
   return {};
@@ -76088,11 +76600,11 @@ function buildRecoveryMessage(agentName3, snap) {
 `);
 }
 function loadQuotaWatchState(stateDir) {
-  const path2 = join45(stateDir, STATE_FILE2);
-  if (!existsSync41(path2))
+  const path2 = join47(stateDir, STATE_FILE2);
+  if (!existsSync43(path2))
     return emptyQuotaWatchState();
   try {
-    const raw = readFileSync44(path2, "utf-8");
+    const raw = readFileSync47(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return emptyQuotaWatchState();
@@ -76109,9 +76621,9 @@ function loadQuotaWatchState(stateDir) {
   }
 }
 function saveQuotaWatchState(stateDir, state4) {
-  mkdirSync31(stateDir, { recursive: true });
-  const path2 = join45(stateDir, STATE_FILE2);
-  writeFileSync34(path2, JSON.stringify(state4, null, 2) + `
+  mkdirSync33(stateDir, { recursive: true });
+  const path2 = join47(stateDir, STATE_FILE2);
+  writeFileSync37(path2, JSON.stringify(state4, null, 2) + `
 `, { mode: 384 });
 }
 function patchQuotaWatchState(current, accountLabel, accountState) {
@@ -76141,27 +76653,27 @@ function maskVaultKey(name) {
 // gateway/turn-active-marker.ts
 import {
   closeSync as closeSync8,
-  existsSync as existsSync42,
-  mkdirSync as mkdirSync32,
+  existsSync as existsSync44,
+  mkdirSync as mkdirSync34,
   openSync as openSync8,
-  readFileSync as readFileSync45,
+  readFileSync as readFileSync48,
   statSync as statSync13,
   unlinkSync as unlinkSync18,
   utimesSync as utimesSync2,
-  writeFileSync as writeFileSync35
+  writeFileSync as writeFileSync38
 } from "node:fs";
-import { join as join46 } from "node:path";
+import { join as join48 } from "node:path";
 var TURN_ACTIVE_MARKER_FILE2 = "turn-active.json";
 function writeTurnActiveMarker(stateDir, marker) {
   try {
-    mkdirSync32(stateDir, { recursive: true });
-    writeFileSync35(join46(stateDir, TURN_ACTIVE_MARKER_FILE2), JSON.stringify(marker, null, 2) + `
+    mkdirSync34(stateDir, { recursive: true });
+    writeFileSync38(join48(stateDir, TURN_ACTIVE_MARKER_FILE2), JSON.stringify(marker, null, 2) + `
 `, { mode: 384 });
   } catch {}
 }
 function touchTurnActiveMarker2(stateDir) {
-  const path2 = join46(stateDir, TURN_ACTIVE_MARKER_FILE2);
-  if (!existsSync42(path2))
+  const path2 = join48(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  if (!existsSync44(path2))
     return;
   const now = new Date;
   try {
@@ -76175,12 +76687,12 @@ function touchTurnActiveMarker2(stateDir) {
 }
 function removeTurnActiveMarker(stateDir) {
   try {
-    unlinkSync18(join46(stateDir, TURN_ACTIVE_MARKER_FILE2));
+    unlinkSync18(join48(stateDir, TURN_ACTIVE_MARKER_FILE2));
   } catch {}
 }
 function sweepStaleTurnActiveMarker(stateDir, opts) {
-  const path2 = join46(stateDir, TURN_ACTIVE_MARKER_FILE2);
-  if (!existsSync42(path2))
+  const path2 = join48(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  if (!existsSync44(path2))
     return false;
   const now = opts.now ?? Date.now();
   try {
@@ -76192,7 +76704,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
       return false;
     let payload = null;
     try {
-      payload = readFileSync45(path2, "utf8");
+      payload = readFileSync48(path2, "utf8");
     } catch {}
     unlinkSync18(path2);
     if (opts.onRemove) {
@@ -76210,7 +76722,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
   }
 }
 function readTurnActiveMarkerAgeMs(stateDir, now) {
-  const path2 = join46(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  const path2 = join48(stateDir, TURN_ACTIVE_MARKER_FILE2);
   try {
     const st = statSync13(path2);
     return (now ?? Date.now()) - st.mtimeMs;
@@ -76220,10 +76732,10 @@ function readTurnActiveMarkerAgeMs(stateDir, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.18.7";
-var COMMIT_SHA = "21478348";
-var COMMIT_DATE = "2026-07-10T08:22:23Z";
-var LATEST_PR = 2990;
+var VERSION = "0.18.8";
+var COMMIT_SHA = "9255fe22";
+var COMMIT_DATE = "2026-07-10T12:33:35Z";
+var LATEST_PR = 3004;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -76297,11 +76809,11 @@ init_peercred();
 import * as net5 from "node:net";
 import * as fs2 from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join47 } from "node:path";
+import { join as join49 } from "node:path";
 var DEFAULT_TIMEOUT_MS4 = 2000;
 var UNLOCK_TIMEOUT_MS = 30000;
-var LEGACY_SOCKET_PATH2 = join47(homedir15(), ".switchroom", "vault-broker.sock");
-var OPERATOR_SOCKET_PATH2 = join47(homedir15(), ".switchroom", "broker-operator", "sock");
+var LEGACY_SOCKET_PATH2 = join49(homedir15(), ".switchroom", "vault-broker.sock");
+var OPERATOR_SOCKET_PATH2 = join49(homedir15(), ".switchroom", "broker-operator", "sock");
 function defaultBrokerSocketPath2() {
   if (fs2.existsSync(OPERATOR_SOCKET_PATH2))
     return OPERATOR_SOCKET_PATH2;
@@ -77231,8 +77743,8 @@ function matchesAdminOnlyKey(key, patterns) {
 }
 
 // registry/turns-schema.ts
-import { chmodSync as chmodSync7, mkdirSync as mkdirSync33 } from "fs";
-import { join as join48 } from "path";
+import { chmodSync as chmodSync7, mkdirSync as mkdirSync35 } from "fs";
+import { join as join50 } from "path";
 var DatabaseClass2 = null;
 function loadDatabaseClass2() {
   if (DatabaseClass2 != null)
@@ -77300,9 +77812,9 @@ function applySchema(db2) {
 }
 function openTurnsDb(agentDir) {
   const Database = loadDatabaseClass2();
-  const dir = join48(agentDir, "telegram");
-  mkdirSync33(dir, { recursive: true, mode: 448 });
-  const path2 = join48(dir, "registry.db");
+  const dir = join50(agentDir, "telegram");
+  mkdirSync35(dir, { recursive: true, mode: 448 });
+  const path2 = join50(dir, "registry.db");
   const db2 = new Database(path2, { create: true });
   applySchema(db2);
   try {
@@ -77757,7 +78269,7 @@ installGlobalErrorHandlers();
 process.on("beforeExit", () => {
   shutdownAnalytics();
 });
-var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join49(homedir16(), ".claude", "channels", "telegram");
+var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join51(homedir16(), ".claude", "channels", "telegram");
 var permCardStore = createPermissionCardStore(STATE_DIR);
 var pendingCardStore = createPendingCardStore(STATE_DIR);
 var missedApprovalsStore = createMissedApprovalsStore(STATE_DIR);
@@ -77776,7 +78288,7 @@ function alwaysAllowDrainDeps() {
   return {
     readConfigText: () => {
       const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-      return readFileSync47(cfgPath, "utf8");
+      return readFileSync50(cfgPath, "utf8");
     },
     resolveAllowList: (_configText, agentName3) => {
       const cfg = loadConfig2();
@@ -77837,11 +78349,11 @@ function scheduleAlwaysAllowPersistDrain() {
   }, ALWAYS_ALLOW_DRAIN_INTERVAL_MS);
   timer3.unref?.();
 }
-var ACCESS_FILE = join49(STATE_DIR, "access.json");
-var APPROVED_DIR = join49(STATE_DIR, "approved");
-var ENV_FILE = join49(STATE_DIR, ".env");
-var INBOX_DIR = join49(STATE_DIR, "inbox");
-var PEOPLE_FILE = join49(STATE_DIR, "people.json");
+var ACCESS_FILE = join51(STATE_DIR, "access.json");
+var APPROVED_DIR = join51(STATE_DIR, "approved");
+var ENV_FILE = join51(STATE_DIR, ".env");
+var INBOX_DIR = join51(STATE_DIR, "inbox");
+var PEOPLE_FILE = join51(STATE_DIR, "people.json");
 function triggerSelfRestart(targetAgent, reason, delayMs = 300) {
   const isDocker = process.env.SWITCHROOM_RUNTIME === "docker";
   const selfAgent = process.env.SWITCHROOM_AGENT_NAME;
@@ -77851,6 +78363,11 @@ function triggerSelfRestart(targetAgent, reason, delayMs = 300) {
 `);
       return false;
     }
+    {
+      const smDir = resolveAgentDirFromEnv();
+      if (smDir)
+        writeRelaunchModelIntent(smDir, intentForRestartReason(reason), reason);
+    }
     process.stderr.write(`telegram gateway: restart-via-SIGTERM-PID1 agent=${targetAgent} reason=${reason} (docker)
 `);
     setTimeout(() => {
@@ -77863,6 +78380,11 @@ function triggerSelfRestart(targetAgent, reason, delayMs = 300) {
     }, delayMs).unref();
     return true;
   }
+  if (targetAgent === selfAgent) {
+    const smDir = resolveAgentDirFromEnv();
+    if (smDir)
+      writeRelaunchModelIntent(smDir, intentForRestartReason(reason), reason);
+  }
   process.stderr.write(`telegram gateway: restart-via-systemctl agent=${targetAgent} reason=${reason}
 `);
   try {
@@ -77906,7 +78428,7 @@ function formatBootVersion() {
 }
 try {
   chmodSync8(ENV_FILE, 384);
-  for (const line of readFileSync47(ENV_FILE, "utf8").split(`
+  for (const line of readFileSync50(ENV_FILE, "utf8").split(`
 `)) {
     const m = line.match(/^(\w+)=(.*)$/);
     if (m && process.env[m[1]] === undefined)
@@ -77971,7 +78493,7 @@ bot.api.config.use(async (prev, method, payload, signal) => {
 });
 var GRAMMY_VERSION = (() => {
   try {
-    const raw = readFileSync47(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
+    const raw = readFileSync50(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
     return JSON.parse(raw).version ?? "unknown";
   } catch {
     return "unknown";
@@ -78038,7 +78560,7 @@ function assertSendable(f) {
   } catch {
     throw new Error(`refusing to send file \u2014 cannot resolve real path: ${f}`);
   }
-  const inbox = join49(stateReal, "inbox");
+  const inbox = join51(stateReal, "inbox");
   if (real.startsWith(stateReal + sep3) && !real.startsWith(inbox + sep3)) {
     throw new Error(`refusing to send channel state: ${f}`);
   }
@@ -78057,7 +78579,7 @@ function assertSendable(f) {
 }
 function readAccessFile() {
   try {
-    const raw = readFileSync47(ACCESS_FILE, "utf8");
+    const raw = readFileSync50(ACCESS_FILE, "utf8");
     const parsed = JSON.parse(raw);
     const allowFrom = validateStringArray("allowFrom", parsed.allowFrom ?? []);
     const groups = {};
@@ -78095,7 +78617,7 @@ function readAccessFile() {
     if (err.code === "ENOENT")
       return defaultAccess();
     try {
-      renameSync15(ACCESS_FILE, `${ACCESS_FILE}.corrupt-${Date.now()}`);
+      renameSync16(ACCESS_FILE, `${ACCESS_FILE}.corrupt-${Date.now()}`);
     } catch {}
     process.stderr.write(`telegram gateway: access.json is corrupt, moved aside. Starting fresh.
 `);
@@ -78117,7 +78639,7 @@ function loadAccess() {
 }
 function readPeopleFile() {
   try {
-    const raw = readFileSync47(PEOPLE_FILE, "utf8");
+    const raw = readFileSync50(PEOPLE_FILE, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.entries))
       return [];
@@ -78139,11 +78661,11 @@ function assertAllowedChat(chat_id) {
 function saveAccess(a) {
   if (STATIC)
     return;
-  mkdirSync35(STATE_DIR, { recursive: true, mode: 448 });
+  mkdirSync37(STATE_DIR, { recursive: true, mode: 448 });
   const tmp = ACCESS_FILE + ".tmp";
-  writeFileSync37(tmp, JSON.stringify(a, null, 2) + `
+  writeFileSync40(tmp, JSON.stringify(a, null, 2) + `
 `, { mode: 384 });
-  renameSync15(tmp, ACCESS_FILE);
+  renameSync16(tmp, ACCESS_FILE);
 }
 function pruneExpired(a) {
   const now = Date.now();
@@ -78161,7 +78683,7 @@ var HISTORY_ENABLED = HISTORY_ACCESS.historyEnabled !== false;
 if (HISTORY_ENABLED) {
   try {
     initHistory(STATE_DIR, HISTORY_ACCESS.historyRetentionDays ?? 30);
-    process.stderr.write(`telegram gateway: history capture enabled at ${join49(STATE_DIR, "history.db")}
+    process.stderr.write(`telegram gateway: history capture enabled at ${join51(STATE_DIR, "history.db")}
 `);
   } catch (err) {
     process.stderr.write(`telegram gateway: history init failed (${err.message}) \u2014 capture disabled
@@ -78177,12 +78699,12 @@ try {
   let markerTurnKey = null;
   let markerAgeMs = null;
   try {
-    const markerPath = join49(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
-    if (existsSync45(markerPath)) {
+    const markerPath = join51(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
+    if (existsSync47(markerPath)) {
       const st = statSync16(markerPath);
       markerAgeMs = Date.now() - st.mtimeMs;
       try {
-        const payload = JSON.parse(readFileSync47(markerPath, "utf8"));
+        const payload = JSON.parse(readFileSync50(markerPath, "utf8"));
         if (typeof payload.turnKey === "string" && payload.turnKey.length > 0) {
           markerTurnKey = payload.turnKey;
         }
@@ -78202,13 +78724,13 @@ try {
     process.stderr.write(`telegram gateway: turn-registry boot-reaper stamped ${reaped} orphaned turn(s)${timeoutTurnKey ? ` (turnKey=${timeoutTurnKey} as 'timeout', markerAgeMs=${markerAgeMs})` : " as 'restart'"}
 `);
   } else {
-    process.stderr.write(`telegram gateway: turn-registry initialized at ${join49(agentDir, "telegram", "registry.db")}
+    process.stderr.write(`telegram gateway: turn-registry initialized at ${join51(agentDir, "telegram", "registry.db")}
 `);
   }
   const pending2 = findLatestTurnIfInterrupted(turnsDb);
   const selfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
   if (pending2 != null && selfAgent) {
-    const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join49(STATE_DIR, "clean-shutdown.json");
+    const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join51(STATE_DIR, "clean-shutdown.json");
     const bootResumeCleanMarker = readCleanShutdownMarker(bootResumeMarkerPath);
     const bootResumeForceAlways = process.env.SWITCHROOM_BOOT_RESUME_ALWAYS === "1";
     const bootResumeMode = parseBootResumeMode(process.env.SWITCHROOM_BOOT_RESUME);
@@ -78275,7 +78797,7 @@ try {
 `);
     }
   }
-  const pendingEnvPath = join49(agentDir, ".pending-turn.env");
+  const pendingEnvPath = join51(agentDir, ".pending-turn.env");
   try {
     if (pending2 != null) {
       const lines = [
@@ -78289,14 +78811,14 @@ try {
         pending2.interrupt_reason != null ? `SWITCHROOM_PENDING_INTERRUPT_REASON=${pending2.interrupt_reason}` : `SWITCHROOM_PENDING_INTERRUPT_REASON=`
       ];
       const pendingEnvTmp = `${pendingEnvPath}.tmp-${process.pid}`;
-      writeFileSync37(pendingEnvTmp, lines.join(`
+      writeFileSync40(pendingEnvTmp, lines.join(`
 `) + `
 `, { mode: 384 });
-      renameSync15(pendingEnvTmp, pendingEnvPath);
+      renameSync16(pendingEnvTmp, pendingEnvPath);
       process.stderr.write(`telegram gateway: pending-turn env written to ${pendingEnvPath} turnKey=${pending2.turn_key} endedVia=${pending2.ended_via ?? "open"}
 `);
-    } else if (existsSync45(pendingEnvPath)) {
-      rmSync4(pendingEnvPath, { force: true });
+    } else if (existsSync47(pendingEnvPath)) {
+      rmSync5(pendingEnvPath, { force: true });
       process.stderr.write(`telegram gateway: pending-turn env cleared (clean previous shutdown)
 `);
     }
@@ -78391,11 +78913,11 @@ function checkApprovals() {
     return;
   }
   for (const senderId of files) {
-    const file = join49(APPROVED_DIR, senderId);
-    bot.api.sendMessage(senderId, "Paired! Say hi to Claude.").then(() => rmSync4(file, { force: true }), (err) => {
+    const file = join51(APPROVED_DIR, senderId);
+    bot.api.sendMessage(senderId, "Paired! Say hi to Claude.").then(() => rmSync5(file, { force: true }), (err) => {
       process.stderr.write(`telegram gateway: failed to send approval confirm: ${err}
 `);
-      rmSync4(file, { force: true });
+      rmSync5(file, { force: true });
     });
   }
 }
@@ -78408,6 +78930,8 @@ var chatThreadMap = new Map;
 var activeStatusReactions = new Map;
 var activeReactionMsgIds = new Map;
 var queuedStatusMsgIds = new Map;
+var busyAckPostedKeys = new Set;
+var busyAckRecheckTimers = new Map;
 var deferredDoneReactions = new DeferredDoneReactions({
   countRunningWorkers: () => countRunningWorkers(),
   getActive: (key) => activeStatusReactions.get(key),
@@ -78493,12 +79017,12 @@ function noteAgentOutputAt(key, ts) {
       lastAgentOutputAt.delete(oldest);
   }
 }
-var OBLIGATION_STORE_PATH = join49(STATE_DIR, "obligations.json");
+var OBLIGATION_STORE_PATH = join51(STATE_DIR, "obligations.json");
 var obligationStoreFs = {
-  readFileSync: (p) => readFileSync47(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync37(p, d),
-  renameSync: (a, b) => renameSync15(a, b),
-  existsSync: (p) => existsSync45(p)
+  readFileSync: (p) => readFileSync50(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync40(p, d),
+  renameSync: (a, b) => renameSync16(a, b),
+  existsSync: (p) => existsSync47(p)
 };
 var obligationLedger = new ObligationLedger(OBLIGATION_REPRESENT_MAX, {
   onChange: STATIC || !OBLIGATION_LEDGER_ENABLED ? undefined : (snapshot) => persistObligations(OBLIGATION_STORE_PATH, obligationStoreFs, snapshot)
@@ -78522,6 +79046,7 @@ var FRAMEWORK_ORIGIN_ROUTING_ENABLED = process.env.SWITCHROOM_FRAMEWORK_ORIGIN_R
 var REPLY_TOPIC_AUTHORITY_ENABLED = process.env.SWITCHROOM_REPLY_TOPIC_AUTHORITY !== "0";
 var TOPIC_FRAMING_ENABLED = process.env.SWITCHROOM_TOPIC_FRAMING !== "0";
 var QUEUED_STATUS_UX_ENABLED = process.env.SWITCHROOM_QUEUED_STATUS_UX !== "0";
+var MIDFLIGHT_BUSY_ACK_ENABLED = process.env.SWITCHROOM_MIDFLIGHT_BUSY_ACK !== "0";
 var FEED_REOPEN_AFTER_ACK_ENABLED = process.env.SWITCHROOM_FEED_REOPEN_AFTER_ACK !== "0";
 var FEED_HEARTBEAT_ENABLED = process.env.SWITCHROOM_FEED_HEARTBEAT !== "0";
 var FEED_HEARTBEAT_TICK_MS = 6000;
@@ -78816,13 +79341,11 @@ function postQueuedStatus(chatId, bufferedThread, inFlightThread) {
 function promoteQueuedStatus(chatId, thread) {
   if (!QUEUED_STATUS_UX_ENABLED)
     return;
-  if (thread == null)
-    return;
   const key = statusKey(chatId, thread);
   const entry = queuedStatusMsgIds.get(key);
   if (entry == null)
     return;
-  swallowingApiCall(() => bot.api.editMessageText(chatId, entry.messageId, "\u270D\uFE0F On it \u2014 replying now.", {}), { chat_id: chatId, verb: "queued-status.promote", threadId: thread });
+  swallowingApiCall(() => bot.api.editMessageText(chatId, entry.messageId, "\u270D\uFE0F On it \u2014 replying now.", {}), { chat_id: chatId, verb: "queued-status.promote", ...thread != null ? { threadId: thread } : {} });
 }
 function reapQueuedStatus(chatId, thread) {
   const key = statusKey(chatId, thread ?? null);
@@ -78832,6 +79355,65 @@ function reapQueuedStatus(chatId, thread) {
   queuedStatusMsgIds.delete(key);
   swallowingApiCall(() => bot.api.deleteMessage(chatId, entry.messageId), { chat_id: chatId, verb: "queued-status.reap", ...entry.threadId != null ? { threadId: entry.threadId } : {} });
 }
+function maybePostBusyAck(gateDecision, chatId, threadId) {
+  if (!MIDFLIGHT_BUSY_ACK_ENABLED)
+    return;
+  const key = statusKey(chatId, threadId);
+  const inFlight = currentTurn;
+  const inFlightKey = inFlight != null ? statusKey(inFlight.sessionChatId, inFlight.sessionThreadId) : key;
+  const now = Date.now();
+  const step = longestInFlightTool(inFlightKey, now);
+  const midToolCall = toolFlightTracker.isMidToolCall();
+  const stepAgeMs = step?.durationMs ?? null;
+  const alreadyAcked = queuedStatusMsgIds.has(key) || busyAckPostedKeys.has(key);
+  const fire = shouldPostBusyAck({ gateDecision, midToolCall, stepAgeMs, alreadyAcked });
+  if (!fire) {
+    if (midToolCall && !alreadyAcked && stepAgeMs != null && stepAgeMs < BUSY_ACK_STEP_AGE_THRESHOLD_MS && !busyAckRecheckTimers.has(key)) {
+      const turnIdAtSchedule = inFlight?.turnId ?? null;
+      const delayMs = BUSY_ACK_STEP_AGE_THRESHOLD_MS - stepAgeMs + 250;
+      busyAckRecheckTimers.set(key, setTimeout(() => {
+        busyAckRecheckTimers.delete(key);
+        if (turnIdAtSchedule == null || currentTurn?.turnId !== turnIdAtSchedule)
+          return;
+        maybePostBusyAck(gateDecision, chatId, threadId);
+      }, delayMs));
+    }
+    return;
+  }
+  const pendingRecheck = busyAckRecheckTimers.get(key);
+  if (pendingRecheck != null) {
+    clearTimeout(pendingRecheck);
+    busyAckRecheckTimers.delete(key);
+  }
+  busyAckPostedKeys.add(key);
+  const text5 = formatBusyAckText({
+    gateDecision,
+    toolName: step?.name ?? null,
+    toolLabel: step?.label ?? null
+  });
+  process.stderr.write(`telegram gateway: mid-flight busy ack chat=${chatId} thread=${threadId ?? "-"} decision=${gateDecision} step=${step?.name ?? "-"} step_age_ms=${step?.durationMs ?? "-"}
+`);
+  postBusyAck(chatId, threadId, text5);
+}
+function postBusyAck(chatId, threadId, text5) {
+  const key = statusKey(chatId, threadId);
+  if (queuedStatusMsgIds.has(key))
+    return;
+  (async () => {
+    const sent = await swallowingApiCall(() => bot.api.sendMessage(chatId, text5, {
+      ...threadId != null ? { message_thread_id: threadId } : {},
+      disable_notification: true
+    }), { chat_id: chatId, verb: "busy-ack.post", ...threadId != null ? { threadId } : {} });
+    const messageId = sent?.message_id;
+    if (typeof messageId !== "number")
+      return;
+    if (queuedStatusMsgIds.has(key)) {
+      swallowingApiCall(() => bot.api.deleteMessage(chatId, messageId), { chat_id: chatId, verb: "busy-ack.post-race-cleanup", ...threadId != null ? { threadId } : {} });
+      return;
+    }
+    queuedStatusMsgIds.set(key, { chatId, threadId: threadId ?? null, messageId });
+  })();
+}
 var toolFlightTracker = new ToolFlightTracker;
 var pendingDeferredInterrupt = null;
 function cancelInterruptedObligation() {
@@ -78970,6 +79552,12 @@ function purgeReactionTracking(key, endingTurn) {
     const pqThread = pqThreadPart === "_" || pqThreadPart === "" ? null : Number(pqThreadPart);
     reapQueuedStatus(pqChatId, Number.isFinite(pqThread) ? pqThread : undefined);
   }
+  busyAckPostedKeys.delete(key);
+  const busyAckRecheck = busyAckRecheckTimers.get(key);
+  if (busyAckRecheck != null) {
+    clearTimeout(busyAckRecheck);
+    busyAckRecheckTimers.delete(key);
+  }
   claudeBusyKeys.delete(key);
   claudeBusyKeySince.delete(key);
   reactionTransitionCounts.delete(key);
@@ -79058,7 +79646,7 @@ function emitTurnRecord(turn, endedAt) {
           return;
         }
       },
-      rename: (from, to) => renameSync15(from, to)
+      rename: (from, to) => renameSync16(from, to)
     });
     appendFileSync6(turnsPath, rec);
   } catch {}
@@ -79480,8 +80068,10 @@ var typingWrapper = createTypingWrapper({
   stopTypingLoop,
   isSurfaceTool: isTelegramSurfaceTool2
 });
+var FLOOD_STATE_PATH = floodStatePath(STATE_DIR);
 var robustApiCall = createRetryApiCall2({
-  log: (line) => process.stderr.write(line)
+  log: (line) => process.stderr.write(line),
+  onFloodWait: makeFloodWaitRecorder2(FLOOD_STATE_PATH)
 });
 var swallowingApiCall = createSwallowingRetryApiCall(robustApiCall, (line) => process.stderr.write(line));
 function wrapBootCardApi(threadId) {
@@ -80348,23 +80938,29 @@ var PIN_STATUS_WHILE_WORKING = (() => {
 })();
 var statusPinState = new Map;
 var statusPinChatIds = new Map;
-var STATUS_PIN_STORE_PATH = join49(STATE_DIR, "status-pins.json");
+var statusPinPinnedAt = new Map;
+var STATUS_PIN_STORE_PATH = join51(STATE_DIR, "status-pins.json");
 var statusPinStoreFs = {
-  readFileSync: (p) => readFileSync47(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync37(p, d),
-  renameSync: (a, b) => renameSync15(a, b),
-  existsSync: (p) => existsSync45(p)
+  readFileSync: (p) => readFileSync50(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync40(p, d),
+  renameSync: (a, b) => renameSync16(a, b),
+  existsSync: (p) => existsSync47(p)
 };
 var statusPinPersistEnabled = !STATIC && PIN_STATUS_WHILE_WORKING;
-var ACTIVITY_CARD_STORE_PATH = join49(STATE_DIR, "activity-cards-pending.json");
+var ACTIVITY_CARD_STORE_PATH = join51(STATE_DIR, "activity-cards-pending.json");
 var activityCardStoreFs = {
-  readFileSync: (p) => readFileSync47(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync37(p, d),
-  renameSync: (a, b) => renameSync15(a, b),
-  existsSync: (p) => existsSync45(p)
+  readFileSync: (p) => readFileSync50(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync40(p, d),
+  renameSync: (a, b) => renameSync16(a, b),
+  existsSync: (p) => existsSync47(p)
 };
 var activityCardPersistEnabled = !STATIC;
 var bannerPinPersistEnabled = !STATIC;
+var toolPinPersistEnabled = !STATIC;
+var TOOL_PIN_TTL_MS = (() => {
+  const v = Number(process.env.SWITCHROOM_TOOL_PIN_TTL_MS);
+  return Number.isFinite(v) && v > 0 ? v : 604800000;
+})();
 function statusPinApi() {
   return {
     pinChatMessage: (chat_id, message_id, opts) => robustApiCall(() => lockedBot.api.pinChatMessage(chat_id, message_id, opts), { chat_id: String(chat_id), verb: "status-pin.pin" }),
@@ -80372,16 +80968,16 @@ function statusPinApi() {
   };
 }
 async function statusPinBootCleanup() {
-  if (!statusPinPersistEnabled && !bannerPinPersistEnabled)
+  if (!statusPinPersistEnabled && !bannerPinPersistEnabled && !toolPinPersistEnabled)
     return;
   const api = statusPinApi();
-  const { cleared, total } = await runStatusPinBootCleanup({
+  const { cleared, retained, kept, total } = await runStatusPinBootCleanup({
     path: STATUS_PIN_STORE_PATH,
     fs: statusPinStoreFs,
     unpin: (chatId, messageId) => api.unpinChatMessage(chatId, messageId)
   });
   if (total > 0) {
-    process.stderr.write(`telegram gateway: status-pin: cleared ${cleared}/${total} orphaned pin(s) from a prior session
+    process.stderr.write(`telegram gateway: status-pin: cleared ${cleared}/${total} orphaned pin(s) from a prior session (retained ${retained} for retry, kept ${kept} unexpired tool pin(s))
 `);
   }
 }
@@ -80416,6 +81012,11 @@ var MID_SESSION_CARD_REAPER_INTERVAL_MS = (() => {
   const v = Number(process.env.SWITCHROOM_MID_SESSION_CARD_REAPER_INTERVAL_MS);
   return Number.isFinite(v) && v > 0 ? v : 300000;
 })();
+var WORKER_PIN_REAPER_ENABLED = process.env.SWITCHROOM_WORKER_PIN_REAPER !== "0";
+var WORKER_PIN_REAPER_TTL_MS = (() => {
+  const v = Number(process.env.SWITCHROOM_WORKER_PIN_REAPER_TTL_MS);
+  return Number.isFinite(v) && v > 0 ? v : WORKER_PIN_TTL_MS_DEFAULT;
+})();
 function liveTurnKeySets() {
   const registryKeys = new Set;
   const topicKeys = new Set;
@@ -80465,11 +81066,18 @@ async function runMidSessionCardReaper() {
           ...record2.threadId != null ? { threadId: record2.threadId } : {},
           verb: "activity-card.mid-session-reap-finalize"
         }),
-        unpinCard: (record2) => robustApiCall(() => lockedBot.api.unpinChatMessage(record2.chatId, record2.activityMessageId), {
-          chat_id: record2.chatId,
-          ...record2.threadId != null ? { threadId: record2.threadId } : {},
-          verb: "activity-card.mid-session-reap-unpin"
-        })
+        unpinCard: async (record2) => {
+          const pinKey = `fg:${record2.turnKey}`;
+          if (statusPinState.has(pinKey)) {
+            await reconcileStatusPin(pinKey, record2.chatId, { pinned: false });
+            return true;
+          }
+          return robustApiCall(() => lockedBot.api.unpinChatMessage(record2.chatId, record2.activityMessageId), {
+            chat_id: record2.chatId,
+            ...record2.threadId != null ? { threadId: record2.threadId } : {},
+            verb: "activity-card.mid-session-reap-unpin"
+          });
+        }
       });
       if (total > 0) {
         process.stderr.write(`telegram gateway: activity-card: mid-session finalized ${finalized}/${total} (vanished ${vanished}/${total}) orphaned card(s) (at-most-once)
@@ -80477,6 +81085,44 @@ async function runMidSessionCardReaper() {
       }
     } catch (err) {
       process.stderr.write(`telegram gateway: mid-session card reaper error: ${err.message}
+`);
+    }
+  }
+  if (WORKER_PIN_REAPER_ENABLED && PIN_STATUS_WHILE_WORKING) {
+    try {
+      const candidates = [...statusPinState.keys()].filter((k) => k.startsWith("wk:")).map((k) => ({
+        pinKey: k,
+        chatId: statusPinChatIds.get(k) ?? "",
+        pinnedAt: statusPinPinnedAt.get(k) ?? now
+      }));
+      const reaps = decideWorkerPinReaps({
+        pins: candidates,
+        statusOf: (agentId) => {
+          if (turnsDb == null)
+            return "unknown";
+          try {
+            const row = getSubagentByJsonlId(turnsDb, agentId);
+            if (row == null)
+              return "unknown";
+            if (row.status === "completed" || row.status === "failed")
+              return "terminal";
+            if (row.status === "running")
+              return "running";
+            return "unknown";
+          } catch {
+            return "unknown";
+          }
+        },
+        ttlMs: WORKER_PIN_REAPER_TTL_MS,
+        now
+      });
+      for (const reap of reaps) {
+        process.stderr.write(`telegram gateway: worker-pin reaper unpinning ${reap.pinKey} (chat=${reap.chatId} reason=${reap.reason})
+`);
+        await reconcileStatusPin(reap.pinKey, reap.chatId, { pinned: false });
+      }
+    } catch (err) {
+      process.stderr.write(`telegram gateway: worker-pin reaper error: ${err.message}
 `);
     }
   }
@@ -80518,9 +81164,12 @@ async function reconcileStatusPinInner(pinKey, chatId, desired) {
     if (next2 == null) {
       statusPinState.delete(pinKey);
       statusPinChatIds.delete(pinKey);
+      statusPinPinnedAt.delete(pinKey);
     } else {
       statusPinState.set(pinKey, next2);
       statusPinChatIds.set(pinKey, chatId);
+      if (!statusPinPinnedAt.has(pinKey))
+        statusPinPinnedAt.set(pinKey, Date.now());
     }
     return;
   }
@@ -80535,9 +81184,12 @@ async function reconcileStatusPinInner(pinKey, chatId, desired) {
   if (next == null) {
     statusPinState.delete(pinKey);
     statusPinChatIds.delete(pinKey);
+    statusPinPinnedAt.delete(pinKey);
   } else {
     statusPinState.set(pinKey, next);
     statusPinChatIds.set(pinKey, chatId);
+    if (!statusPinPinnedAt.has(pinKey))
+      statusPinPinnedAt.set(pinKey, Date.now());
   }
 }
 function reconcileWorkerPin(agentId, chatId, running) {
@@ -80567,6 +81219,7 @@ async function unpinAllStatusPins() {
     const chatId = statusPinChatIds.get(key);
     if (chatId == null) {
       statusPinState.delete(key);
+      statusPinPinnedAt.delete(key);
       continue;
     }
     await reconcileStatusPin(key, chatId, { pinned: false });
@@ -80578,11 +81231,11 @@ var getPinnedProgressCardMessageId = null;
 var completeProgressCardTurn = null;
 var subagentWatcher = null;
 var workerActivityFeed = null;
-var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join49(STATE_DIR, "gateway.sock");
-mkdirSync35(STATE_DIR, { recursive: true, mode: 448 });
-var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join49(STATE_DIR, "gateway.pid.json");
-var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join49(STATE_DIR, "gateway-session.json");
-var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join49(STATE_DIR, "clean-shutdown.json");
+var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join51(STATE_DIR, "gateway.sock");
+mkdirSync37(STATE_DIR, { recursive: true, mode: 448 });
+var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join51(STATE_DIR, "gateway.pid.json");
+var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join51(STATE_DIR, "gateway-session.json");
+var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join51(STATE_DIR, "clean-shutdown.json");
 var GATEWAY_STARTED_AT_MS = Date.now();
 var BOOT_CARD_ENABLED = process.env.SWITCHROOM_BOOT_CARD !== "false";
 var activeBootCard = null;
@@ -80611,7 +81264,7 @@ function ensureIssuesCard(chatId, threadId) {
     bot: botApi,
     log: (msg) => process.stderr.write(`telegram gateway: ${msg}
 `),
-    persistPath: join49(stateDir, "issues-card.json")
+    persistPath: join51(stateDir, "issues-card.json")
   });
   activeIssuesWatcher = startIssuesWatcher({
     stateDir,
@@ -80940,13 +81593,13 @@ startTimer2({
   }
 });
 var inboundSpool = STATIC ? undefined : createInboundSpool({
-  path: join49(STATE_DIR, "inbound-spool.jsonl"),
+  path: join51(STATE_DIR, "inbound-spool.jsonl"),
   fs: {
     appendFileSync: (p, d) => appendFileSync6(p, d),
-    readFileSync: (p) => readFileSync47(p, "utf8"),
-    writeFileSync: (p, d) => writeFileSync37(p, d),
-    renameSync: (a, b) => renameSync15(a, b),
-    existsSync: (p) => existsSync45(p),
+    readFileSync: (p) => readFileSync50(p, "utf8"),
+    writeFileSync: (p, d) => writeFileSync40(p, d),
+    renameSync: (a, b) => renameSync16(a, b),
+    existsSync: (p) => existsSync47(p),
     statSizeSync: (p) => statSync16(p).size
   },
   onDegraded: (info) => {
@@ -81242,8 +81895,9 @@ var ipcServer = createIpcServer({
             probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
             tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
             dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-            configSnapshotPath: join49(resolvedAgentDirForCard, ".config-snapshot.json"),
-            bootCardStatePath: join49(resolvedAgentDirForCard, ".boot-card-msgid.json"),
+            configSnapshotPath: join51(resolvedAgentDirForCard, ".config-snapshot.json"),
+            bootCardStatePath: join51(resolvedAgentDirForCard, ".boot-card-msgid.json"),
+            floodStatePath: FLOOD_STATE_PATH,
             ...updateOutcomeLine ? { updateOutcomeLine } : {}
           }, ackMsgId).then((handle) => {
             activeBootCard = handle;
@@ -81906,7 +82560,7 @@ var ipcServer = createIpcServer({
     const receiverUid = receiverUidRaw ? Number(receiverUidRaw) : NaN;
     if (Number.isInteger(receiverUid))
       allowedUids.push(receiverUid);
-    const socketPath = join49(STATE_DIR, "webhook.sock");
+    const socketPath = join51(STATE_DIR, "webhook.sock");
     const webhookInject = (agentName3, inbound) => {
       const msg = inbound;
       const delivered = ipcServer.sendToAgent(agentName3, msg);
@@ -82139,9 +82793,9 @@ function redactOutboundText(text5, site) {
 var VOICE_OUT_DEFAULT_CHUNK_CHARS = 600;
 var VOICE_OUT_HARD_CHUNK_CAP = 4096;
 var voiceOnDemandCache = new VoiceOnDemandCache({
-  persistPath: join49(STATE_DIR, "voice-ondemand.json")
+  persistPath: join51(STATE_DIR, "voice-ondemand.json")
 });
-var VOICE_CACHE_DIR = join49(STATE_DIR, "voice-cache");
+var VOICE_CACHE_DIR = join51(STATE_DIR, "voice-cache");
 var voicePreSynthQueue = new PreSynthQueue({
   runJob: async (job) => {
     const sidecarToken = await materializeSidecarToken();
@@ -82416,7 +83070,7 @@ ${url}`;
   }
   const limit = Math.max(1, Math.min(access.textChunkLimit ?? RICH_MESSAGE_MAX_CHARS2, MAX_CHUNK_LIMIT));
   const replyMode = access.replyToMode ?? "first";
-  const chunks = literalText ? chunk2(effectiveText, limit, access.chunkMode ?? "length") : splitMarkdownChunks(effectiveText, limit);
+  const chunks = literalText ? chunk2(effectiveText, limit, access.chunkMode ?? "length") : splitMarkdownChunks2(effectiveText, limit);
   const sentIds = [];
   const useOnDemandButton = voiceOutPlan != null && voiceOutPlan.replyMode === "on-demand" && voiceOutPlan.engine === "kokoro";
   const voiceOggs = [];
@@ -82665,8 +83319,8 @@ ${url}`;
         return lockedBot.api.sendRichMessage(chat_id, richMessage2(chunks[i]), richOpts);
       };
       const sendChunkResplit = async (opts) => {
-        const subPieces = splitMarkdownChunks(chunks[i], RICH_MESSAGE_MAX_CHARS2);
-        const pieces = subPieces.length > 1 ? subPieces : hardSliceToCap(chunks[i], RICH_MESSAGE_MAX_CHARS2);
+        const subPieces = splitMarkdownChunks2(chunks[i], RICH_MESSAGE_MAX_CHARS2);
+        const pieces = subPieces.length > 1 ? subPieces : hardSliceToCap2(chunks[i], RICH_MESSAGE_MAX_CHARS2);
         for (let p = 0;p < pieces.length; p++) {
           let sent;
           if (literalText) {
@@ -83092,11 +83746,11 @@ async function executeSendGif(rawArgs) {
   };
 }
 async function publishToTelegraph(text5, shortName, authorName) {
-  const accountPath = join49(STATE_DIR, "telegraph-account.json");
+  const accountPath = join51(STATE_DIR, "telegraph-account.json");
   let account = null;
   try {
-    if (existsSync45(accountPath)) {
-      const raw = readFileSync47(accountPath, "utf-8");
+    if (existsSync47(accountPath)) {
+      const raw = readFileSync50(accountPath, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed.shortName && parsed.accessToken) {
         account = parsed;
@@ -83115,8 +83769,8 @@ async function publishToTelegraph(text5, shortName, authorName) {
     }
     account = created.value;
     try {
-      mkdirSync35(STATE_DIR, { recursive: true, mode: 448 });
-      writeFileSync37(accountPath, JSON.stringify(account, null, 2), { mode: 384 });
+      mkdirSync37(STATE_DIR, { recursive: true, mode: 448 });
+      writeFileSync40(accountPath, JSON.stringify(account, null, 2), { mode: 384 });
     } catch (err) {
       process.stderr.write(`telegram gateway: telegraph cache write failed: ${err.message}
 `);
@@ -83555,7 +84209,7 @@ async function executeVaultRequestAccess(args) {
 }
 function readLiveSwitchroomConfigText() {
   const cfgPath = process.env.SWITCHROOM_CONFIG ?? findConfigFile2();
-  return readFileSync47(cfgPath, "utf8");
+  return readFileSync50(cfgPath, "utf8");
 }
 var MENTAL_MODEL_NAME_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
 function buildMentalModelProposeKeyboard(stageId) {
@@ -83724,9 +84378,9 @@ async function executeDownloadAttachment(args) {
     fileUniqueId: file.file_unique_id,
     now: Date.now()
   });
-  mkdirSync35(INBOX_DIR, { recursive: true, mode: 448 });
+  mkdirSync37(INBOX_DIR, { recursive: true, mode: 448 });
   assertInsideInbox(INBOX_DIR, dlPath);
-  writeFileSync37(dlPath, buf, { mode: 384 });
+  writeFileSync40(dlPath, buf, { mode: 384 });
   return { content: [{ type: "text", text: dlPath }] };
 }
 async function executeEditMessage(args) {
@@ -83799,7 +84453,17 @@ async function executePinMessage(args) {
     throw new Error("pin_message: message_id is required");
   const pinChatId = String(args.chat_id ?? "");
   assertAllowedChat(pinChatId);
-  await robustApiCall(() => lockedBot.api.pinChatMessage(pinChatId, Number(args.message_id)), { chat_id: pinChatId, verb: "pin_message" });
+  const pinMsgId = Number(args.message_id);
+  await robustApiCall(() => lockedBot.api.pinChatMessage(pinChatId, pinMsgId), { chat_id: pinChatId, verb: "pin_message" });
+  if (toolPinPersistEnabled) {
+    const toolPinKey = `tool:${pinChatId}:${pinMsgId}`;
+    mutateStatusPinRow(STATUS_PIN_STORE_PATH, statusPinStoreFs, toolPinKey, {
+      pinKey: toolPinKey,
+      chatId: pinChatId,
+      messageId: pinMsgId,
+      expiresAt: Date.now() + TOOL_PIN_TTL_MS
+    });
+  }
   return { content: [{ type: "text", text: `pinned message ${args.message_id}` }] };
 }
 async function executeDeleteMessage(args) {
@@ -84894,7 +85558,7 @@ function handleSessionEvent(ev) {
           };
           const limit = RICH_MESSAGE_MAX_CHARS2;
           const renderedText = addParagraphSpacers(capturedText);
-          const htmlChunks = splitMarkdownChunks(renderedText, limit);
+          const htmlChunks = splitMarkdownChunks2(renderedText, limit);
           const sentIds = [];
           try {
             let firstSendUsedEdit = false;
@@ -85999,8 +86663,11 @@ ${preBlock(write.output)}`;
     process.stderr.write(`telegram gateway: inbound held mid-turn agent=${selfAgent} chat=${chat_id} msg=${msgId ?? "-"} \u2014 will flush on turn-complete
 `);
     const inFlightThread = currentTurn?.sessionThreadId;
-    if (QUEUED_STATUS_UX_ENABLED && !isDmChatId(chat_id) && messageThreadId != null && messageThreadId !== inFlightThread) {
+    const crossTopicQueuedCard = QUEUED_STATUS_UX_ENABLED && !isDmChatId(chat_id) && messageThreadId != null && messageThreadId !== inFlightThread;
+    if (crossTopicQueuedCard) {
       postQueuedStatus(chat_id, messageThreadId, inFlightThread);
+    } else {
+      maybePostBusyAck("buffer-until-idle", chat_id, messageThreadId ?? undefined);
     }
     return;
   }
@@ -86023,6 +86690,9 @@ ${preBlock(write.output)}`;
   }
   const delivered = ipcServer.sendToAgent(selfAgent, inboundMsg);
   if (delivered) {
+    if (isSteering) {
+      maybePostBusyAck("steer", chat_id, messageThreadId ?? undefined);
+    }
     const busyKey = reservedBusyKey ?? markClaudeBusyForInbound(inboundMsg);
     if (DELIVERY_CONFIRM_ENABLED && shouldTrackDelivery({
       isSteering,
@@ -86154,14 +86824,14 @@ function restartMarkerPath() {
   const agentDir = resolveAgentDirFromEnv();
   if (!agentDir)
     return null;
-  return join49(agentDir, "restart-pending.json");
+  return join51(agentDir, "restart-pending.json");
 }
 function writeRestartMarker(marker) {
   const p = restartMarkerPath();
   if (!p)
     return;
   try {
-    writeFileSync37(p, JSON.stringify(marker));
+    writeFileSync40(p, JSON.stringify(marker));
     lastPlannedRestartAt = Date.now();
     process.stderr.write(`telegram gateway: restart-marker: write chat_id=${marker.chat_id} thread_id=${marker.thread_id ?? "-"} ack=${marker.ack_message_id ?? "-"} path=${p}
 `);
@@ -86180,7 +86850,7 @@ function readRestartMarker() {
   if (!p)
     return null;
   try {
-    return JSON.parse(readFileSync47(p, "utf8"));
+    return JSON.parse(readFileSync50(p, "utf8"));
   } catch {
     return null;
   }
@@ -86190,7 +86860,7 @@ function clearRestartMarker() {
   if (!p)
     return;
   try {
-    rmSync4(p, { force: true });
+    rmSync5(p, { force: true });
     process.stderr.write(`telegram gateway: restart-marker: cleared path=${p}
 `);
   } catch {}
@@ -86329,7 +86999,7 @@ var _dockerReachable;
 function isDockerReachable() {
   if (_dockerReachable !== undefined)
     return _dockerReachable;
-  if (!existsSync45("/var/run/docker.sock")) {
+  if (!existsSync47("/var/run/docker.sock")) {
     _dockerReachable = false;
     return _dockerReachable;
   }
@@ -86346,12 +87016,12 @@ function _resetDockerReachableCache() {
 }
 function spawnSwitchroomDetached(args, onFailure) {
   const fullArgs = SWITCHROOM_CONFIG ? ["--config", SWITCHROOM_CONFIG, ...args] : args;
-  const logPath = join49(STATE_DIR, "detached-spawn.log");
+  const logPath = join51(STATE_DIR, "detached-spawn.log");
   let outFd = null;
   try {
-    mkdirSync35(STATE_DIR, { recursive: true });
+    mkdirSync37(STATE_DIR, { recursive: true });
     outFd = openSync9(logPath, "a");
-    writeFileSync37(logPath, `
+    writeFileSync40(logPath, `
 [${new Date().toISOString()}] spawn ${SWITCHROOM_CLI} ${fullArgs.join(" ")}
 `, { flag: "a" });
   } catch {}
@@ -86377,7 +87047,7 @@ function spawnSwitchroomDetached(args, onFailure) {
         return;
       let tail = "";
       try {
-        const full = readFileSync47(logPath, "utf8");
+        const full = readFileSync50(logPath, "utf8");
         tail = full.split(`
 `).slice(-30).join(`
 `).trim();
@@ -86744,10 +87414,10 @@ bot.use(async (ctx, next) => {
 });
 function readRecentDenialsForAgent(agentName3, windowMs, limit) {
   try {
-    const auditPath = join49(homedir16(), ".switchroom", "vault-audit.log");
-    if (!existsSync45(auditPath))
+    const auditPath = join51(homedir16(), ".switchroom", "vault-audit.log");
+    if (!existsSync47(auditPath))
       return [];
-    const raw = readFileSync47(auditPath, "utf8");
+    const raw = readFileSync50(auditPath, "utf8");
     return recentDenialsFromAuditLog(raw, { agentName: agentName3, windowMs, limit });
   } catch {
     return [];
@@ -86798,7 +87468,7 @@ async function buildAgentMetadata(agentName3) {
   try {
     const agentDir = resolveAgentDirFromEnv();
     if (agentDir) {
-      const raw = readFileSync47(join49(agentDir, ".claude", ".claude.json"), "utf8");
+      const raw = readFileSync50(join51(agentDir, ".claude", ".claude.json"), "utf8");
       claudeJson = JSON.parse(raw);
     }
   } catch {}
@@ -86976,7 +87646,7 @@ function buildModelDeps(restartCtx) {
       try {
         const agentDir = resolveAgentDirFromEnv();
         if (agentDir) {
-          const local = await fetchQuota2({ claudeConfigDir: join49(agentDir, ".claude") });
+          const local = await fetchQuota2({ claudeConfigDir: join51(agentDir, ".claude") });
           if (local.ok)
             return formatQuotaLine2(local.data);
         }
@@ -87008,6 +87678,11 @@ function buildModelDeps(restartCtx) {
         });
       }
       stampUserRestartReason(reason);
+      {
+        const smDir = resolveAgentDirFromEnv();
+        if (smDir)
+          writeRelaunchModelIntent(smDir, "keep", reason);
+      }
       await sweepBeforeSelfRestart();
       const hostdResp = await tryHostdDispatch(name, {
         v: 1,
@@ -87022,26 +87697,29 @@ function buildModelDeps(restartCtx) {
       }
       if (hostdResp.result !== "started" && hostdResp.result !== "completed") {
         clearRestartMarker();
+        {
+          const smDir = resolveAgentDirFromEnv();
+          if (smDir)
+            clearRelaunchModelIntent(smDir);
+        }
         throw new Error(`hostd restart failed (result=${hostdResp.result}): ${hostdResp.error ?? "(no details)"}`);
       }
     },
     scheduleModelRelaunch: async (model, reason) => {
       const agentDir = resolveAgentDirFromEnv();
       if (!agentDir)
-        throw new Error("agent dir unresolvable \u2014 cannot write session-model carrier");
+        throw new Error("agent dir unresolvable \u2014 cannot write session-model file");
       const prevOverride = sessionModelSource.getOverride();
-      writeFileSync37(join49(agentDir, ".session-model-override"), `${model}
-`, "utf8");
+      const prevFileRaw = readSessionModelFileRaw(agentDir);
+      writeSessionModelFile(agentDir, model, readConfiguredDefaultModel(agentDir) ?? resolveMainModel(deps.getConfiguredModel() ?? undefined));
       sessionModelSource.setOverride(model);
       try {
         await deps.scheduleRestart(reason);
       } catch (err) {
-        const carrierPath = join49(agentDir, ".session-model-override");
         if (err?.code !== "restart_in_flight") {
-          try {
-            rmSync4(carrierPath, { force: true });
-          } catch {}
+          restoreSessionModelFileRaw(agentDir, prevFileRaw);
           sessionModelSource.setOverride(prevOverride);
+          clearRelaunchModelIntent(agentDir);
         }
         throw err;
       }
@@ -87074,10 +87752,29 @@ bot.command("model", async (ctx) => {
     return;
   }
   const reply = await handleModelCommand(parsed, deps);
-  if (reply.selectedModel) {
+  const requested = parsed.kind === "set" ? expandSrAlias(parsed.model) : null;
+  let persistWarning = "";
+  if (requested?.toLowerCase() === "default") {
+    const smDir = resolveAgentDirFromEnv();
+    if (smDir)
+      clearSessionModelFile(smDir);
+    if (reply.selectedModel)
+      sessionModelSource.setOverride(null);
+  } else if (reply.selectedModel) {
     sessionModelSource.setOverride(reply.selectedModel);
+    const smDir = resolveAgentDirFromEnv();
+    if (smDir && requested && isValidModelArg(requested) && !isSrModel(requested)) {
+      try {
+        writeSessionModelFile(smDir, requested, readConfiguredDefaultModel(smDir) ?? resolveMainModel(deps.getConfiguredModel() ?? undefined));
+      } catch (err) {
+        persistWarning = `
+\u26A0\uFE0F Couldn\u2019t persist the sticky override \u2014 the switch is live now but won\u2019t survive a relaunch.`;
+        process.stderr.write(`telegram gateway: session-model persist failed (typed /model): ${err?.message ?? String(err)}
+`);
+      }
+    }
   }
-  await switchroomReply(ctx, reply.text, { html: reply.html });
+  await switchroomReply(ctx, reply.text + persistWarning, { html: reply.html });
 });
 function buildEffortDeps() {
   return {
@@ -87173,6 +87870,11 @@ bot.command("restart", async (ctx) => {
     } catch {}
     writeRestartMarker({ chat_id: chatId, thread_id: threadId ?? null, ack_message_id: ackId, ts: Date.now() });
     stampUserRestartReason("user: /restart from chat");
+    {
+      const smDir = resolveAgentDirFromEnv();
+      if (smDir)
+        writeRelaunchModelIntent(smDir, "revert", "user: /restart from chat");
+    }
     await sweepBeforeSelfRestart();
     const hostdResp = await tryHostdDispatch(getMyAgentName(), {
       v: 1,
@@ -87203,9 +87905,9 @@ bot.command("restart", async (ctx) => {
 function flushAgentHandoff(agentDir) {
   let removed = 0;
   for (const fname of [".handoff.md", ".handoff-topic"]) {
-    const p = join49(agentDir, fname);
+    const p = join51(agentDir, fname);
     try {
-      if (existsSync45(p)) {
+      if (existsSync47(p)) {
         unlinkSync20(p);
         removed++;
       }
@@ -87261,7 +87963,7 @@ async function handleNewCommand(ctx) {
   writeRestartMarker({ chat_id: chatId, thread_id: threadId ?? null, ack_message_id: ackId, ts: Date.now() });
   if (agentDir != null) {
     try {
-      writeFileSync37(join49(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
+      writeFileSync40(join51(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
 `, "utf8");
     } catch (err) {
       process.stderr.write(`telegram gateway: failed to write force-fresh marker: ${err}
@@ -87269,6 +87971,9 @@ async function handleNewCommand(ctx) {
     }
   }
   stampUserRestartReason(`user: /${kind} from chat`);
+  if (agentDir != null) {
+    writeRelaunchModelIntent(agentDir, "keep", `user: /${kind} from chat`);
+  }
   await sweepBeforeSelfRestart();
   const hostdResp = await tryHostdDispatch(getMyAgentName(), {
     v: 1,
@@ -87625,16 +88330,16 @@ bot.command("interrupt", async (ctx) => {
   await runSwitchroomCommand(ctx, ["agent", "interrupt", name], `interrupt ${name}`);
 });
 var lockoutOps = {
-  readFileSync: (p, enc) => readFileSync47(p, enc),
-  writeFileSync: (p, data, opts) => writeFileSync37(p, data, opts),
-  existsSync: (p) => existsSync45(p),
-  mkdirSync: (p, opts) => mkdirSync35(p, opts),
-  joinPath: (...parts) => join49(...parts)
+  readFileSync: (p, enc) => readFileSync50(p, enc),
+  writeFileSync: (p, data, opts) => writeFileSync40(p, data, opts),
+  existsSync: (p) => existsSync47(p),
+  mkdirSync: (p, opts) => mkdirSync37(p, opts),
+  joinPath: (...parts) => join51(...parts)
 };
 var FLEET_FALLBACK_DEDUP_MS = 30000;
 function isAuthBrokerSocketReachable() {
   try {
-    return existsSync45(resolveAuthBrokerSocketPath2());
+    return existsSync47(resolveAuthBrokerSocketPath2());
   } catch {
     return false;
   }
@@ -87757,7 +88462,7 @@ async function runCreditWatch() {
   if (!agentDir)
     return;
   const agentName3 = getMyAgentName();
-  const claudeConfigDir = join49(agentDir, ".claude");
+  const claudeConfigDir = join51(agentDir, ".claude");
   const stateDir = STATE_DIR;
   const reason = readClaudeJsonOverage(claudeConfigDir);
   const prev = loadCreditState(stateDir);
@@ -88275,10 +88980,10 @@ async function handleVaultRecentDenialCallback(ctx, data) {
     return;
   }
   const { token, id } = result;
-  const tokenPath = join49(homedir16(), ".switchroom", "agents", agentName3, ".vault-token");
+  const tokenPath = join51(homedir16(), ".switchroom", "agents", agentName3, ".vault-token");
   try {
-    mkdirSync35(join49(homedir16(), ".switchroom", "agents", agentName3), { recursive: true });
-    writeFileSync37(tokenPath, token, { mode: 384 });
+    mkdirSync37(join51(homedir16(), ".switchroom", "agents", agentName3), { recursive: true });
+    writeFileSync40(tokenPath, token, { mode: 384 });
   } catch (err) {
     await switchroomReply(ctx, `**Grant created (${escapeHtmlForTg2(id)}) but token write failed:** ${escapeHtmlForTg2(String(err))}
 _Recover with: \`switchroom vault grant ${escapeHtmlForTg2(agentName3)} --keys ${escapeHtmlForTg2(keyName)} --duration 30d\` on the host._`, { html: true });
@@ -88355,10 +89060,10 @@ async function performVaultAccessApproval(ctx, pending2, stageId, senderId, atte
     return;
   }
   const { token, id } = result;
-  const tokenPath = join49(homedir16(), ".switchroom", "agents", pending2.agent, ".vault-token");
+  const tokenPath = join51(homedir16(), ".switchroom", "agents", pending2.agent, ".vault-token");
   try {
-    mkdirSync35(join49(homedir16(), ".switchroom", "agents", pending2.agent), { recursive: true });
-    writeFileSync37(tokenPath, token, { mode: 384 });
+    mkdirSync37(join51(homedir16(), ".switchroom", "agents", pending2.agent), { recursive: true });
+    writeFileSync40(tokenPath, token, { mode: 384 });
   } catch (err) {
     await switchroomReply(ctx, `**Grant created (${escapeHtmlForTg2(id)}) but token write failed:** ${escapeHtmlForTg2(String(err))}
 _Recover with: \`switchroom vault grant ${escapeHtmlForTg2(pending2.agent)} --keys ${escapeHtmlForTg2(pending2.key)} --duration ${Math.round(pending2.ttl_seconds / 86400)}d\` on the host._`, { html: true });
@@ -89064,10 +89769,10 @@ async function executeGrantWizard(ctx, chatId, state4) {
     return;
   }
   const { token, id } = result;
-  const tokenPath = join49(homedir16(), ".switchroom", "agents", state4.agent, ".vault-token");
+  const tokenPath = join51(homedir16(), ".switchroom", "agents", state4.agent, ".vault-token");
   try {
-    mkdirSync35(join49(homedir16(), ".switchroom", "agents", state4.agent), { recursive: true });
-    writeFileSync37(tokenPath, token, { mode: 384 });
+    mkdirSync37(join51(homedir16(), ".switchroom", "agents", state4.agent), { recursive: true });
+    writeFileSync40(tokenPath, token, { mode: 384 });
   } catch (err) {
     await switchroomReply(ctx, `**Grant created but token write failed:** ${escapeHtmlForTg2(String(err))}`, { html: true });
     return;
@@ -89917,7 +90622,7 @@ bot.command("usage", async (ctx) => {
     await switchroomReply(ctx, "**/usage:** cannot resolve agent dir.", { html: true });
     return;
   }
-  const result = await fetchQuota2({ claudeConfigDir: join49(agentDir, ".claude") });
+  const result = await fetchQuota2({ claudeConfigDir: join51(agentDir, ".claude") });
   if (!result.ok) {
     await switchroomReply(ctx, `**/usage:** ${escapeHtmlForTg2(result.reason)}`, { html: true });
     return;
@@ -90197,6 +90902,22 @@ bot.on("callback_query:data", async (ctx) => {
       const outcome = await handleModelMenuCallback(data, modelDeps);
       if (outcome.selectedModel) {
         sessionModelSource.setOverride(outcome.selectedModel);
+        const smDir = resolveAgentDirFromEnv();
+        if (smDir && outcome.selectedModelToken) {
+          try {
+            writeSessionModelFile(smDir, outcome.selectedModelToken, readConfiguredDefaultModel(smDir) ?? resolveMainModel(modelDeps.getConfiguredModel() ?? undefined));
+          } catch (err) {
+            outcome.reply.text += `
+\u26A0\uFE0F Couldn\u2019t persist the sticky override \u2014 the switch is live now but won\u2019t survive a relaunch.`;
+            process.stderr.write(`telegram gateway: session-model persist failed (menu): ${err?.message ?? String(err)}
+`);
+          }
+        }
+      }
+      if (outcome.clearedDefault) {
+        const smDir = resolveAgentDirFromEnv();
+        if (smDir)
+          clearSessionModelFile(smDir);
       }
       if (outcome.toastOnly && !didInterimSrEdit)
         return;
@@ -90208,13 +90929,14 @@ bot.on("callback_query:data", async (ctx) => {
           const token = outcome.selectedModelToken;
           if (agentDir && token) {
             try {
-              writeFileSync37(join49(agentDir, ".session-model-override"), `${token}
-`, "utf8");
+              writeSessionModelFile(agentDir, token, readConfiguredDefaultModel(agentDir) ?? resolveMainModel(modelDeps.getConfiguredModel() ?? undefined));
               sessionModelSource.setOverride(token);
             } catch (e) {
-              process.stderr.write(`telegram gateway: sr-to-claude carrier write failed: ${e?.message ?? String(e)}
+              process.stderr.write(`telegram gateway: sr-to-claude session-model write failed: ${e?.message ?? String(e)}
 `);
             }
+          } else if (agentDir) {
+            clearSessionModelFile(agentDir);
           }
         }
         writeRestartMarker({ chat_id: cbChatId, thread_id: cbThreadId ?? null, ack_message_id: null, ts: Date.now() });
@@ -90426,22 +91148,34 @@ ${preBlock(formatSwitchroomOutput(err.message ?? "unknown error"))}`, { html: tr
       }
       return;
     })();
-    let audio = null;
-    if (entry.filePath != null) {
-      try {
-        audio = readFileSync47(entry.filePath);
-      } catch {
-        audio = null;
+    const tok = token;
+    const sendOpts = {
+      ...cbMessageId != null ? { reply_parameters: { message_id: cbMessageId } } : {},
+      ...cbThreadId != null ? { message_thread_id: cbThreadId } : {}
+    };
+    const sendVerbOpts = {
+      chat_id: cbChatId,
+      verb: "voice-ondemand.sendVoice",
+      ...cbThreadId != null ? { threadId: cbThreadId } : {}
+    };
+    const loadAudio = async () => {
+      let audio = null;
+      if (entry.filePath != null) {
+        try {
+          audio = readFileSync50(entry.filePath);
+        } catch {
+          audio = null;
+        }
+      }
+      if (audio != null) {
+        await ctx.answerCallbackQuery({ text: "\uD83D\uDD0A" }).catch(() => {});
+        return audio;
       }
-    }
-    if (audio != null) {
-      await ctx.answerCallbackQuery({ text: "\uD83D\uDD0A" }).catch(() => {});
-    } else {
       await ctx.answerCallbackQuery({ text: "\uD83D\uDD0A Synthesizing\u2026" }).catch(() => {});
       const sidecarToken = await materializeSidecarToken();
       if (!sidecarToken) {
         await ctx.answerCallbackQuery({ text: "Voice sidecar unavailable \u2014 try again later." }).catch(() => {});
-        return;
+        return null;
       }
       const result = await synthesizeViaSidecar({
         token: sidecarToken,
@@ -90453,20 +91187,31 @@ ${preBlock(formatSwitchroomOutput(err.message ?? "unknown error"))}`, { html: tr
         process.stderr.write(`telegram gateway: voice-out on-demand: synthesis failed reason=${result.reason}
 `);
         await ctx.answerCallbackQuery({ text: `Voice failed: ${result.reason}` }).catch(() => {});
-        return;
+        return null;
       }
-      audio = result.audio;
+      return result.audio;
+    };
+    if (entry.telegramFileId != null) {
+      await ctx.answerCallbackQuery({ text: "\uD83D\uDD0A" }).catch(() => {});
+    }
+    const sendResult = await sendVoiceReusingFileId({
+      fileId: entry.telegramFileId ?? null,
+      sendByFileId: (fid) => robustApiCall(() => bot.api.sendVoice(cbChatId, fid, sendOpts), sendVerbOpts),
+      loadAudio,
+      sendByUpload: (audioOut) => robustApiCall(() => bot.api.sendVoice(cbChatId, new import_grammy12.InputFile(Buffer.from(audioOut)), sendOpts), sendVerbOpts),
+      onFileId: (fid) => voiceOnDemandCache.setTelegramFileId(tok, fid),
+      log: (line) => process.stderr.write(line)
+    });
+    if (!sendResult.ok) {
+      if (sendResult.reason === "send-failed") {
+        const err = sendResult.error;
+        const msg2 = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`telegram gateway: voice-out on-demand: sendVoice failed (non-fatal): ${msg2}
+`);
+      }
+      return;
     }
-    const audioOut = audio;
     try {
-      await robustApiCall(() => bot.api.sendVoice(cbChatId, new import_grammy12.InputFile(Buffer.from(audioOut)), {
-        ...cbMessageId != null ? { reply_parameters: { message_id: cbMessageId } } : {},
-        ...cbThreadId != null ? { message_thread_id: cbThreadId } : {}
-      }), {
-        chat_id: cbChatId,
-        verb: "voice-ondemand.sendVoice",
-        ...cbThreadId != null ? { threadId: cbThreadId } : {}
-      });
       if (cbMessageId != null) {
         await robustApiCall(() => bot.api.editMessageReplyMarkup(cbChatId, cbMessageId, {
           reply_markup: { inline_keyboard: [] }
@@ -90478,7 +91223,7 @@ ${preBlock(formatSwitchroomOutput(err.message ?? "unknown error"))}`, { html: tr
       }
     } catch (err) {
       const msg2 = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`telegram gateway: voice-out on-demand: sendVoice failed (non-fatal): ${msg2}
+      process.stderr.write(`telegram gateway: voice-out on-demand: strip-listen-keyboard failed (non-fatal): ${msg2}
 `);
     }
     return;
@@ -90648,7 +91393,7 @@ ${interimLabel}` : interimLabel
         const unifiedDiff = (() => {
           try {
             const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-            const raw = readFileSync47(cfgPath, "utf8");
+            const raw = readFileSync50(cfgPath, "utf8");
             return synthesizeAllowRuleDiff({ agentName: agentName3, rule: chosen.rule, configText: raw });
           } catch (err) {
             process.stderr.write(`telegram gateway: always-allow diff synth failed: ${err.message}
@@ -90837,9 +91582,9 @@ bot.on("message:photo", async (ctx) => {
         fileUniqueId: best.file_unique_id,
         now: Date.now()
       });
-      mkdirSync35(INBOX_DIR, { recursive: true, mode: 448 });
+      mkdirSync37(INBOX_DIR, { recursive: true, mode: 448 });
       assertInsideInbox(INBOX_DIR, dlPath);
-      writeFileSync37(dlPath, buf, { mode: 384 });
+      writeFileSync40(dlPath, buf, { mode: 384 });
       return dlPath;
     } catch (err) {
       const msg = err instanceof Error ? err.message : "unknown error";
@@ -91932,7 +92677,7 @@ var didOneTimeSetup = false;
                         return;
                       }
                     })();
-                    const resolvedAgentDirForBootCard = agentDir ?? join49(homedir16(), ".switchroom", "agents", agentSlug);
+                    const resolvedAgentDirForBootCard = agentDir ?? join51(homedir16(), ".switchroom", "agents", agentSlug);
                     const handle = await startBootCard(chatId, threadId, botApiForCard, {
                       agentName: agentDisplayName,
                       agentSlug,
@@ -91946,8 +92691,9 @@ var didOneTimeSetup = false;
                       probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
                       tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
                       dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-                      configSnapshotPath: join49(resolvedAgentDirForBootCard, ".config-snapshot.json"),
-                      bootCardStatePath: join49(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
+                      configSnapshotPath: join51(resolvedAgentDirForBootCard, ".config-snapshot.json"),
+                      bootCardStatePath: join51(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
+                      floodStatePath: FLOOD_STATE_PATH,
                       ...updateOutcomeLine ? { updateOutcomeLine } : {}
                     }, ackMsgId);
                     activeBootCard = handle;
@@ -91977,10 +92723,10 @@ var didOneTimeSetup = false;
         try {
           const smAgentDir = resolveAgentDirFromEnv();
           if (smAgentDir) {
-            const activePath = join49(smAgentDir, ".active-session-model");
-            if (existsSync45(activePath)) {
+            const activePath = join51(smAgentDir, ".active-session-model");
+            if (existsSync47(activePath)) {
               try {
-                const launched = readFileSync47(activePath, "utf8").trim();
+                const launched = readFileSync50(activePath, "utf8").trim();
                 const configured = (() => {
                   const d = switchroomExecJson(["agent", "list"]);
                   const raw = d?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
@@ -91989,11 +92735,11 @@ var didOneTimeSetup = false;
                 sessionModelSource.setOverride(launched.length > 0 && launched !== configured ? launched : null);
               } catch {}
             }
-            const alertPath = join49(smAgentDir, ".session-model-alert");
-            if (existsSync45(alertPath)) {
+            const alertPath = join51(smAgentDir, ".session-model-alert");
+            if (existsSync47(alertPath)) {
               let alertText = null;
               try {
-                alertText = readFileSync47(alertPath, "utf8").trim();
+                alertText = readFileSync50(alertPath, "utf8").trim();
               } catch {
                 alertText = null;
               }