switchroom 0.19.0 → 0.19.2

package/telegram-plugin/dist/gateway/gateway.js

@@ -22057,6 +22057,7 @@ __export(exports_auth_snapshot_format, {
   formatRelative: () => formatRelative,
   formatAbsolute: () => formatAbsolute,
   fmtPct: () => fmtPct,
+  deriveUsageFooterFreshness: () => deriveUsageFooterFreshness,
   classifyHealth: () => classifyHealth,
   buildSnapshotsFromState: () => buildSnapshotsFromState,
   buildSnapshotsFromCachedState: () => buildSnapshotsFromCachedState,
@@ -22467,6 +22468,13 @@ function zipProbeResults(labels, results) {
   });
   return staleCachedAtMs != null ? { quotas, staleCachedAtMs } : { quotas };
 }
+function deriveUsageFooterFreshness(results, staleCachedAtMs, liveProbedAtMs) {
+  if (staleCachedAtMs != null)
+    return { staleCachedAtMs };
+  if (results.some((r) => r.result.ok))
+    return { liveProbedAtMs };
+  return { probeFailed: true };
+}
 function buildSnapshotsFromState(state, quotas) {
   const out = [];
   for (let i = 0;i < state.accounts.length; i++) {
@@ -22549,7 +22557,7 @@ function decodeResponse2(line) {
   }
   return ResponseSchema2.parse(parsed);
 }
-var MAX_FRAME_BYTES2, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, MarkThrottledRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, RequestSchema2, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, MarkThrottledDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema2, ResponseSchema2;
+var MAX_FRAME_BYTES2, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, MarkThrottledRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, GetExternalSpendRequestSchema, RequestSchema2, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, MarkThrottledDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GetExternalSpendDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema2, ResponseSchema2;
 var init_protocol2 = __esm(() => {
   init_zod();
   MAX_FRAME_BYTES2 = 64 * 1024;
@@ -22680,6 +22688,12 @@ var init_protocol2 = __esm(() => {
     key: exports_external.string().min(1).max(512),
     windowMs: exports_external.number().int().positive().max(86400000)
   });
+  GetExternalSpendRequestSchema = exports_external.object({
+    v: exports_external.literal(PROTOCOL_VERSION),
+    op: exports_external.literal("get-external-spend"),
+    id: exports_external.string().min(1),
+    forceLive: exports_external.boolean().optional()
+  });
   RequestSchema2 = exports_external.discriminatedUnion("op", [
     GetCredentialsRequestSchema,
     ListStateRequestSchema,
@@ -22693,7 +22707,8 @@ var init_protocol2 = __esm(() => {
     ListGoogleAccountsRequestSchema,
     ListMicrosoftAccountsRequestSchema,
     ProbeQuotaRequestSchema,
-    ClaimNotificationRequestSchema
+    ClaimNotificationRequestSchema,
+    GetExternalSpendRequestSchema
   ]);
   GetCredentialsDataSchema = exports_external.object({
     account: exports_external.string(),
@@ -22760,6 +22775,18 @@ var init_protocol2 = __esm(() => {
   ClaimNotificationDataSchema = exports_external.object({
     granted: exports_external.boolean()
   });
+  GetExternalSpendDataSchema = exports_external.object({
+    available: exports_external.boolean(),
+    day24hUsd: exports_external.number().optional(),
+    day7dUsd: exports_external.number().optional(),
+    top: exports_external.array(exports_external.object({
+      label: exports_external.string(),
+      usd: exports_external.number()
+    })).optional(),
+    capturedAtMs: exports_external.number().int().nonnegative().optional(),
+    served: exports_external.enum(["live", "cache"]).optional(),
+    reason: exports_external.string().optional()
+  });
   GoogleAccountStateSchema = exports_external.object({
     account: exports_external.string(),
     expiresAt: exports_external.number(),
@@ -22930,6 +22957,15 @@ class AuthBrokerClient {
     }
     return parsed;
   }
+  async getExternalSpend(forceLive) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID(),
+      op: "get-external-spend",
+      ...forceLive ? { forceLive: true } : {}
+    });
+    return data;
+  }
   async setActive(account) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
@@ -29337,7 +29373,7 @@ var FLUSH_SUPPRESSION_WINDOW_MS = 2000;
 var init_turn_flush_suppression = () => {};
 
 // ../src/util/atomic.ts
-import { closeSync as closeSync6, constants as constants2, fsyncSync as fsyncSync2, openSync as openSync6, renameSync as renameSync11, rmSync as rmSync5, writeSync as writeSync4 } from "node:fs";
+import { closeSync as closeSync6, constants as constants2, fchmodSync, fchownSync, fsyncSync as fsyncSync2, openSync as openSync6, renameSync as renameSync11, rmSync as rmSync5, writeSync as writeSync4 } from "node:fs";
 var TMP_OPEN_FLAGS;
 var init_atomic = __esm(() => {
   TMP_OPEN_FLAGS = constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | (constants2.O_NOFOLLOW ?? 0);
@@ -36742,6 +36778,7 @@ __export(exports_auth_snapshot_format2, {
   formatRelative: () => formatRelative2,
   formatAbsolute: () => formatAbsolute2,
   fmtPct: () => fmtPct2,
+  deriveUsageFooterFreshness: () => deriveUsageFooterFreshness2,
   classifyHealth: () => classifyHealth2,
   buildSnapshotsFromState: () => buildSnapshotsFromState2,
   buildSnapshotsFromCachedState: () => buildSnapshotsFromCachedState2,
@@ -37152,6 +37189,13 @@ function zipProbeResults2(labels, results) {
   });
   return staleCachedAtMs != null ? { quotas, staleCachedAtMs } : { quotas };
 }
+function deriveUsageFooterFreshness2(results, staleCachedAtMs, liveProbedAtMs) {
+  if (staleCachedAtMs != null)
+    return { staleCachedAtMs };
+  if (results.some((r) => r.result.ok))
+    return { liveProbedAtMs };
+  return { probeFailed: true };
+}
 function buildSnapshotsFromState2(state7, quotas) {
   const out = [];
   for (let i = 0;i < state7.accounts.length; i++) {
@@ -37626,6 +37670,140 @@ var init_config_approval_handler = __esm(() => {
   pending = new Map;
 });
 
+// ../src/litellm/external-spend.ts
+function isExternalModel(model) {
+  const m = model.trim().toLowerCase();
+  if (!m)
+    return false;
+  if (m.startsWith("claude"))
+    return false;
+  if (m.includes("anthropic/claude"))
+    return false;
+  if (m.startsWith("openrouter/"))
+    return true;
+  if (m.startsWith("sr-"))
+    return true;
+  for (const needle of BARE_EXTERNAL_NEEDLES) {
+    if (m.includes(needle))
+      return true;
+  }
+  return false;
+}
+function shortModelLabel(model) {
+  let m = model.trim();
+  if (m.toLowerCase().startsWith("openrouter/")) {
+    m = m.slice("openrouter/".length);
+  }
+  const parts = m.split("/").filter(Boolean);
+  if (parts.length >= 2) {
+    m = parts[parts.length - 1];
+  }
+  if (m.toLowerCase().startsWith("sr-")) {
+    m = m.slice(3);
+  }
+  return m || model.trim();
+}
+function formatUsd(n) {
+  if (!Number.isFinite(n) || n < 0)
+    return "$0.00";
+  return `$${n.toFixed(2)}`;
+}
+function utcDateString(d) {
+  return d.toISOString().slice(0, 10);
+}
+function addUtcDays(dateStr, days) {
+  const [y, m, d] = dateStr.split("-").map(Number);
+  const dt = new Date(Date.UTC(y, m - 1, d));
+  dt.setUTCDate(dt.getUTCDate() + days);
+  return utcDateString(dt);
+}
+function rowDay(row) {
+  const st = row.startTime;
+  if (!st || typeof st !== "string")
+    return null;
+  return st.length >= 10 ? st.slice(0, 10) : null;
+}
+function externalModelsFromRow(row) {
+  const out = {};
+  const models = row.models ?? {};
+  for (const [name, raw] of Object.entries(models)) {
+    if (!isExternalModel(name))
+      continue;
+    const n = typeof raw === "number" ? raw : Number(raw);
+    if (!Number.isFinite(n) || n === 0)
+      continue;
+    out[name] = (out[name] ?? 0) + n;
+  }
+  return out;
+}
+function summarizeExternalSpend(days, now = new Date) {
+  const today = utcDateString(now);
+  const start7 = addUtcDays(today, -6);
+  let day24hUsd = 0;
+  let day7dUsd = 0;
+  const byModel = {};
+  for (const row of days) {
+    const day = rowDay(row);
+    if (!day)
+      continue;
+    if (day < start7 || day > today)
+      continue;
+    const ext = externalModelsFromRow(row);
+    let rowSum = 0;
+    for (const [name, usd] of Object.entries(ext)) {
+      rowSum += usd;
+      byModel[name] = (byModel[name] ?? 0) + usd;
+    }
+    day7dUsd += rowSum;
+    if (day === today)
+      day24hUsd += rowSum;
+  }
+  const top = Object.entries(byModel).filter(([, usd]) => usd > 0).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, EXTERNAL_SPEND_TOP_N).map(([name, usd]) => ({ label: shortModelLabel(name), usd }));
+  return { day24hUsd, day7dUsd, top };
+}
+function normalizeSpendLogRows(body) {
+  if (Array.isArray(body))
+    return body;
+  if (body && typeof body === "object") {
+    const data = body.data;
+    if (Array.isArray(data))
+      return data;
+  }
+  return [];
+}
+var EXTERNAL_SPEND_TOP_N = 3, EXTERNAL_SPEND_CACHE_TTL_MS = 90000, BARE_EXTERNAL_NEEDLES;
+var init_external_spend = __esm(() => {
+  BARE_EXTERNAL_NEEDLES = [
+    "gpt-oss",
+    "grok",
+    "gemini",
+    "deepseek",
+    "kimi",
+    "glm-",
+    "qwen",
+    "llama"
+  ];
+});
+
+// external-spend.ts
+function formatExternalSpendBlock(summary) {
+  if (summary == null)
+    return [];
+  const lines = [
+    "- \uD83D\uDCB8 External",
+    `- 24h \`${formatUsd(summary.day24hUsd)}\` \u00b7 7d \`${formatUsd(summary.day7dUsd)}\``
+  ];
+  if (summary.top.length > 0) {
+    const topParts = summary.top.map((t) => `\`${t.label} ${formatUsd(t.usd)}\``);
+    lines.push(`- top ${topParts.join(" \u00b7 ")}`);
+  }
+  return lines;
+}
+var init_external_spend2 = __esm(() => {
+  init_external_spend();
+  init_external_spend();
+});
+
 // quota-bar-format.ts
 var exports_quota_bar_format = {};
 __export(exports_quota_bar_format, {
@@ -37747,6 +37925,9 @@ function renderUsageCard(snapshots, exhaustedByLabel, opts = {}) {
   const bar = renderQuotaBarBlock(snapshots, exhaustedByLabel, { now, demo });
   const lines = [bar];
   lines.push(`_${recommendation(snapshots, now, demo)}_`);
+  if (opts.externalSpend != null) {
+    lines.push(...formatExternalSpendBlock(opts.externalSpend));
+  }
   if (opts.staleCachedAtMs != null) {
     lines.push(`_\u26a0 cached ${formatAgeStamp3(opts.staleCachedAtMs, now)}_`);
   } else if (opts.liveProbedAtMs != null) {
@@ -37764,10 +37945,85 @@ var init_quota_bar_format = __esm(() => {
   init_auth_snapshot_format();
   init_card_format();
   init_demo_mask();
+  init_external_spend2();
   FIVE_HOUR_MS = 5 * 60 * 60 * 1000;
   SEVEN_DAY_MS = 7 * 24 * 60 * 60 * 1000;
 });
 
+// external-spend.ts
+var exports_external_spend = {};
+__export(exports_external_spend, {
+  utcDateString: () => utcDateString,
+  summarizeExternalSpend: () => summarizeExternalSpend,
+  shortModelLabel: () => shortModelLabel,
+  normalizeSpendLogRows: () => normalizeSpendLogRows,
+  isExternalModel: () => isExternalModel,
+  formatUsd: () => formatUsd,
+  formatExternalSpendBlock: () => formatExternalSpendBlock2,
+  fetchExternalSpendSummary: () => fetchExternalSpendSummary,
+  clearExternalSpendCache: () => clearExternalSpendCache,
+  addUtcDays: () => addUtcDays,
+  EXTERNAL_SPEND_CACHE_TTL_MS: () => EXTERNAL_SPEND_CACHE_TTL_MS
+});
+function clearExternalSpendCache() {
+  clientCache = null;
+}
+function formatExternalSpendBlock2(summary) {
+  if (summary == null)
+    return [];
+  const lines = [
+    "- \uD83D\uDCB8 External",
+    `- 24h \`${formatUsd(summary.day24hUsd)}\` \u00b7 7d \`${formatUsd(summary.day7dUsd)}\``
+  ];
+  if (summary.top.length > 0) {
+    const topParts = summary.top.map((t) => `\`${t.label} ${formatUsd(t.usd)}\``);
+    lines.push(`- top ${topParts.join(" \u00b7 ")}`);
+  }
+  return lines;
+}
+async function fetchExternalSpendSummary(nowOrDeps = {}) {
+  const deps = nowOrDeps instanceof Date ? { now: nowOrDeps } : nowOrDeps;
+  const ttl = deps.cacheTtlMs ?? CLIENT_CACHE_TTL_MS;
+  if (!deps.bypassCache && clientCache && Date.now() - clientCache.atMs < ttl) {
+    return clientCache.summary;
+  }
+  try {
+    let data;
+    if (deps.getExternalSpend) {
+      data = await deps.getExternalSpend(deps.forceLive);
+    } else {
+      const { AuthBrokerClient: AuthBrokerClient3 } = await Promise.resolve().then(() => (init_client2(), exports_client));
+      const client3 = new AuthBrokerClient3;
+      try {
+        data = await client3.getExternalSpend(deps.forceLive);
+      } finally {
+        try {
+          await client3.close();
+        } catch {}
+      }
+    }
+    if (!data?.available)
+      return null;
+    if (typeof data.day24hUsd !== "number" || typeof data.day7dUsd !== "number" || !Array.isArray(data.top)) {
+      return null;
+    }
+    const summary = {
+      day24hUsd: data.day24hUsd,
+      day7dUsd: data.day7dUsd,
+      top: data.top.map((t) => ({ label: String(t.label), usd: Number(t.usd) }))
+    };
+    clientCache = { atMs: Date.now(), summary };
+    return summary;
+  } catch {
+    return null;
+  }
+}
+var CLIENT_CACHE_TTL_MS = 30000, clientCache = null;
+var init_external_spend3 = __esm(() => {
+  init_external_spend();
+  init_external_spend();
+});
+
 // ../src/vault/approvals/client.ts
 function resolveKernelSocketPath2(opts) {
   if (opts?.socket)
@@ -38411,6 +38667,16 @@ function buildStopReply(turnInFlight, queuedSessionCmds) {
 `) };
 }
 
+// gateway/usage-mask.ts
+function shouldMaskUsageLabels(chatType, groupAllowFrom) {
+  if (chatType === "private")
+    return false;
+  if (chatType === "group" || chatType === "supergroup") {
+    return (groupAllowFrom ?? []).length === 0;
+  }
+  return true;
+}
+
 // gateway/busy-ack.ts
 var BUSY_ACK_STEP_AGE_THRESHOLD_MS = 12000;
 function shouldPostBusyAck(input) {
@@ -42809,6 +43075,7 @@ function pinnedMessageIsOurs(tracked, chatId, pinnedMessageId) {
   return false;
 }
 var storeLockTails = new Map;
+var pinReconcileTails = new Map;
 
 // gateway/pinned-message-handler.ts
 async function handlePinnedMessage(ctx, deps) {
@@ -69626,6 +69893,15 @@ class AuthBrokerClient2 {
     }
     return parsed;
   }
+  async getExternalSpend(forceLive) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID4(),
+      op: "get-external-spend",
+      ...forceLive ? { forceLive: true } : {}
+    });
+    return data;
+  }
   async setActive(account) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
@@ -78479,8 +78755,10 @@ function formatQuotaBlock(q, now = new Date) {
   const lines = [];
   lines.push("**Claude plan quota**");
   lines.push("");
-  lines.push(`**5h window**  \`${Math.round(q.fiveHourUtilizationPct)}%\` \u00b7 \`${formatResetRelative2(q.fiveHourResetAt, now)}\``);
-  lines.push(`**7d window**  \`${Math.round(q.sevenDayUtilizationPct)}%\` \u00b7 \`${formatResetRelative2(q.sevenDayResetAt, now)}\``);
+  const fiveHour = q.fiveHourUtilPresent === false ? "no data" : `\`${Math.round(q.fiveHourUtilizationPct)}%\``;
+  const sevenDay = q.sevenDayUtilPresent === false ? "no data" : `\`${Math.round(q.sevenDayUtilizationPct)}%\``;
+  lines.push(`**5h window**  ${fiveHour} \u00b7 \`${formatResetRelative2(q.fiveHourResetAt, now)}\``);
+  lines.push(`**7d window**  ${sevenDay} \u00b7 \`${formatResetRelative2(q.sevenDayResetAt, now)}\``);
   if (q.representativeClaim) {
     lines.push("");
     lines.push(`_Binding window: ${q.representativeClaim.replace(/_/g, " ")}_`);
@@ -79172,6 +79450,37 @@ function classifyModelSwitchConfirmation(input) {
   }
   return { kind: "default", launched: revertedTo };
 }
+function formatModelRelaunchDiagLog(input) {
+  const { agent, launched, configured, confirmation, isApplyBoot } = input;
+  const L = launched || "(none)";
+  if (confirmation == null) {
+    return "telegram gateway: gw /model relaunch applied agent=" + agent + " launched=" + L + " configured=" + configured + " override=" + (isApplyBoot ? "set" : "cleared") + `
+`;
+  }
+  if (confirmation.kind === "not-applied") {
+    return "telegram gateway: gw /model relaunch NOT-APPLIED agent=" + agent + " target=" + confirmation.target + " launched=" + L + " configured=" + configured + " revertedTo=" + confirmation.revertedTo + `
+`;
+  }
+  if (confirmation.kind === "applied") {
+    return "telegram gateway: gw /model relaunch applied agent=" + agent + " launched=" + L + " configured=" + configured + ` override=set outcome=applied
+`;
+  }
+  return "telegram gateway: gw /model relaunch applied agent=" + agent + " launched=" + L + " configured=" + configured + ` override=cleared outcome=default
+`;
+}
+function formatModelSwitchConfirmationBody(confirmation) {
+  if (confirmation.kind === "applied") {
+    return "\u2705 Now running `" + confirmation.launched + "` \u2014 session-only, reverts to the configured model on the next restart. Fresh session; memory and the handoff briefing carry the context.";
+  }
+  if (confirmation.kind === "not-applied") {
+    return "\u26a0\ufe0f Your switch to `" + confirmation.target + "` didn't apply \u2014 the agent reverted to `" + confirmation.revertedTo + "` (the apply-boot didn't complete). Re-issue `/model " + confirmation.target + "` to try again.";
+  }
+  return "\u2705 Now running `" + confirmation.launched + "` (the configured default) \u2014 fresh session; memory and the handoff briefing carry the context.";
+}
+function formatModelRelaunchSuppressNotAppliedLog(input) {
+  return "telegram gateway: gw /model relaunch NOT-APPLIED \u2014 suppressing not-applied confirmation (a .session-model-alert is present and will be relayed) agent=" + input.agent + " target=" + input.target + `
+`;
+}
 function resolveStaleAwareBusy(input) {
   const turnStale = input.currentTurnActive && input.turnAgeMs !== null && input.turnAgeMs > input.hardTtlMs;
   const approvalLive = input.oldestPendingApprovalAgeMs !== null && input.oldestPendingApprovalAgeMs <= input.hardTtlMs;
@@ -80073,7 +80382,7 @@ var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.
 var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 
 // ../src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.";
+var DEFAULT_RETAIN_MISSION = "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise, " + "including in-flight workflow/process narration (a sub-task started, " + "paused, or is still running) \u2014 only retain the outcome once a task " + "actually completes or a decision is made.";
 var PROFILE_MEMORY_DEFAULTS = {
   "health-coach": {
     disposition: { skepticism: 2, literalism: 2, empathy: 5 },
@@ -84201,6 +84510,17 @@ function withStoreLock(path2, fn) {
   }));
   return run3;
 }
+var pinReconcileTails2 = new Map;
+function withPinReconcileLock(pinKey, fn) {
+  const prev = pinReconcileTails2.get(pinKey) ?? Promise.resolve();
+  const run3 = prev.then(fn, fn);
+  pinReconcileTails2.set(pinKey, run3.then(() => {
+    return;
+  }, () => {
+    return;
+  }));
+  return run3;
+}
 function applyStatusPinRow(path2, fs2, pinKey, row, log) {
   const current = loadStatusPins(path2, fs2);
   const others = current.filter((p) => p.pinKey !== pinKey);
@@ -84227,7 +84547,11 @@ function reconcileAndPersistStatusPin(args) {
       return next2;
     }
     const next = await args.applyPin();
-    applyStatusPinRow(path2, fs2, pinKey, null, log);
+    if (next == null) {
+      applyStatusPinRow(path2, fs2, pinKey, null, log);
+    } else {
+      applyStatusPinRow(path2, fs2, pinKey, { pinKey, chatId, messageId: next.messageId }, log);
+    }
     return next;
   });
 }
@@ -92377,10 +92701,10 @@ function effectiveTurnAgeMs(markerAgeMs, turnStartedAt, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.19.0";
-var COMMIT_SHA = "9709a540";
-var COMMIT_DATE = "2026-07-19T03:15:55Z";
-var LATEST_PR = 3404;
+var VERSION = "0.19.2";
+var COMMIT_SHA = "1fa69736";
+var COMMIT_DATE = "2026-07-19T09:11:44Z";
+var LATEST_PR = 3425;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -97645,7 +97969,7 @@ var midSessionCardReaper = isGatewayMain ? setInterval(() => {
 midSessionCardReaper?.unref();
 async function reconcileStatusPin(pinKey, chatId, desired) {
   try {
-    await reconcileStatusPinInner(pinKey, chatId, desired);
+    await withPinReconcileLock(pinKey, () => reconcileStatusPinInner(pinKey, chatId, desired));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     process.stderr.write(`telegram gateway: status-pin reconcile absorbed error (key=${pinKey} chat=${chatId}): ${msg}
@@ -100546,6 +100870,10 @@ function isAuthorizedSender(ctx) {
   }
   return false;
 }
+function shouldMaskAccountLabels(ctx) {
+  const groupAllowFrom = ctx.chat?.type === "group" || ctx.chat?.type === "supergroup" ? loadAccess().groups[String(ctx.chat.id)]?.allowFrom : undefined;
+  return shouldMaskUsageLabels(ctx.chat?.type, groupAllowFrom);
+}
 var __inboundRouterTestSeam = {
   activeStatusReactions,
   activeTurnStartedAt,
@@ -104403,7 +104731,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
   bot2.command("usage", async (ctx) => {
     if (!isAuthorizedSender(ctx))
       return;
-    const demo = hasDemoFlag(getCommandArgs(ctx));
+    const demo = hasDemoFlag(getCommandArgs(ctx)) || shouldMaskAccountLabels(ctx);
     const currentAgent = getMyAgentName();
     try {
       const client3 = await getAuthBrokerClient2(currentAgent);
@@ -104416,11 +104744,14 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
           const { buildSnapshotsFromState: buildSnapshotsFromState4, buildSnapshotKeyboard: buildSnapshotKeyboard3 } = await Promise.resolve().then(() => (init_auth_snapshot_format2(), exports_auth_snapshot_format2));
           const { renderUsageCard: renderUsageCard2 } = await Promise.resolve().then(() => (init_quota_bar_format(), exports_quota_bar_format));
           const snapshots = buildSnapshotsFromState4(state7, quotas);
+          const { fetchExternalSpendSummary: fetchExternalSpendSummary2 } = await Promise.resolve().then(() => (init_external_spend3(), exports_external_spend));
+          const externalSpend = await fetchExternalSpendSummary2(renderNow).catch(() => null);
           const exhaustedByLabel = new Map(state7.accounts.map((a) => [a.label, a.exhausted]));
           const text5 = renderUsageCard2(snapshots, exhaustedByLabel, {
             now: renderNow,
             demo,
-            ...staleCachedAtMs != null ? { staleCachedAtMs } : probeResp.results.length > 0 ? { liveProbedAtMs: renderNow.getTime() } : { probeFailed: true }
+            externalSpend,
+            ...deriveUsageFooterFreshness2(probeResp.results, staleCachedAtMs, renderNow.getTime())
           });
           let kbRows = buildSnapshotKeyboard3(snapshots, { now: new Date, demo });
           if (ctx.chat?.type !== "private") {
@@ -105750,21 +106081,28 @@ async function startGateway() {
                 })();
                 const isApplyBoot = launched.length > 0 && launched !== configured;
                 sessionModelSource.setOverride(isApplyBoot ? launched : null);
-                process.stderr.write(`telegram gateway: gw /model relaunch applied agent=${getMyAgentName()} launched=${launched || "(none)"} configured=${configured} override=${isApplyBoot ? "set" : "cleared"}
-`);
-                if (modelSwitchReason != null && modelSwitchMarkerChat) {
+                const confirmation = modelSwitchReason != null ? classifyModelSwitchConfirmation({
+                  reason: modelSwitchReason,
+                  launched,
+                  configured
+                }) : null;
+                process.stderr.write(formatModelRelaunchDiagLog({
+                  agent: getMyAgentName(),
+                  launched,
+                  configured,
+                  confirmation,
+                  isApplyBoot
+                }));
+                if (confirmation != null && modelSwitchMarkerChat) {
                   const chat = modelSwitchMarkerChat;
-                  const confirmation = classifyModelSwitchConfirmation({
-                    reason: modelSwitchReason,
-                    launched,
-                    configured
-                  });
                   const hasSessionModelAlert = existsSync54(join59(smAgentDir, ".session-model-alert"));
                   if (confirmation.kind === "not-applied" && hasSessionModelAlert) {
-                    process.stderr.write(`telegram gateway: gw /model relaunch applied \u2014 suppressing not-applied confirmation (a .session-model-alert is present and will be relayed) agent=${getMyAgentName()} target=${confirmation.target}
-`);
+                    process.stderr.write(formatModelRelaunchSuppressNotAppliedLog({
+                      agent: getMyAgentName(),
+                      target: confirmation.target
+                    }));
                   } else {
-                    const body = confirmation.kind === "applied" ? `\u2705 Now running \`${confirmation.launched}\` \u2014 session-only, reverts to the configured model on the next restart. Fresh session; memory and the handoff briefing carry the context.` : confirmation.kind === "not-applied" ? `\u26A0\uFE0F Your switch to \`${confirmation.target}\` didn't apply \u2014 the agent reverted to \`${confirmation.revertedTo}\` (the apply-boot didn't complete). Re-issue \`/model ${confirmation.target}\` to try again.` : `\u2705 Now running \`${confirmation.launched}\` (the configured default) \u2014 fresh session; memory and the handoff briefing carry the context.`;
+                    const body = formatModelSwitchConfirmationBody(confirmation);
                     lockedBot.api.sendMessage(chat.chatId, body, {
                       parse_mode: "Markdown",
                       ...chat.threadId != null ? { message_thread_id: chat.threadId } : {}