switchroom 0.19.17 → 0.19.18

package/telegram-plugin/dist/gateway/gateway.js

@@ -20663,7 +20663,7 @@ var require_dist = __commonJS((exports) => {
 });
 
 // ../src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, ReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   CodeRepoEntrySchema = exports_external.object({
@@ -20814,7 +20814,7 @@ var init_schema = __esm(() => {
     recall: exports_external.object({
       max_memories: exports_external.number().int().min(0).optional().describe("Cap on the number of memories injected into the prompt by " + "auto-recall, regardless of token budget. Plugin default is 12. " + "0 disables the cap (all memories Hindsight returns are injected)."),
       cache_ttl_secs: exports_external.number().int().min(0).optional().describe("Per-session recall cache TTL in seconds. When > 0, identical " + "(prompt, bank) within the same session reuse the cached recall " + "result instead of round-tripping to Hindsight. 0 disables. " + "Default is 600 (10 min) for switchroom-managed agents."),
-      min_overlap: exports_external.number().min(0).max(1).optional().describe("Minimum Jaccard token overlap [0.0\u20131.0] between the user " + "prompt and a memory's text for the memory to be injected. " + "Drops low-relevance matches before the count cap so weak hits " + "don't fill the slot on real queries. 0.0 disables (default \u2014 " + "current behaviour). Try 0.10\u20130.20 to start; observe the " + "`overlap_dropped` field via `switchroom memory recall-log`."),
+      min_overlap: exports_external.number().min(0).max(1).optional().describe("Minimum containment token overlap [0.0\u20131.0] between the user " + "prompt and a memory's text for the memory to be injected. " + "A cheap FLOOR that removes candidates with (near-)zero lexical " + "relationship to the prompt \u2014 NOT a precision control: at the " + "recommended 0.10 the gate is near-passthrough, and the " + "effective precision control is the engine rerank plus the " + "max_memories head-slice. 0.0 disables (default \u2014 current " + "behaviour). Use 0.10; values at or above 0.20 measurably " + "starve recall \u2014 on production replay 0.20 leaves ~41.9% of " + "turns with NO memories at all, re-creating the bug #3541 " + "fixed. Observe the `overlap_dropped` field via " + "`switchroom memory recall-log`."),
       types: exports_external.array(exports_external.string()).optional().describe("Hindsight fact types to recall. Switchroom default is " + '["world", "experience", "observation"] \u2014 the synthesized ' + "`observation` tier is on by default. Set to " + '["world", "experience"] to opt out of observation-backed ' + "recall for this agent (or fleet-wide under defaults)."),
       additional_banks: exports_external.array(exports_external.string()).optional().describe("Extra Hindsight banks to recall from on every turn, merged into " + "the agent's own bank results \u2014 e.g. a shared operator/household " + "profile bank authored via `switchroom memory profile`. Each is " + "recalled with an 8s timeout and is non-fatal on failure. Stays " + "within the single tenant: all banks are the operator's data, in " + "the operator's Hindsight instance (see the `single-tenant` " + "invariant). Defaults to [] (no extra banks)."),
       sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Per-speaker recall routing: a map of Telegram sender \u2192 extra " + "recall bank. When a message arrives, the agent also recalls the " + "speaker's bank (matched by Telegram username \u2014 a leading @ is " + "optional \u2014 or numeric user_id), merged " + "into its own results \u2014 so each trusted user gets their own " + "profile context. Additive recall scoping within the single " + "tenant: never an access boundary (who may drive an agent stays " + "the per-agent user assignment in `access.allowFrom`). Author the " + "banks via `switchroom memory profile`."),
@@ -21126,9 +21126,16 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().optional().describe("Master switch for the reaction-dispatch path. Default false \u2014 " + "with no reaction_dispatch block, reactions are persisted (and may " + "feed the `reactions` feedback path) but are NEVER dispatched as " + "event-driven inbound turns."),
     emojis: exports_external.array(exports_external.string()).optional().describe('Emoji allowlist that triggers a `<channel event="reaction">` ' + "inbound turn when reacted to any message. Default [] (nothing " + "fires). Cascade mode: REPLACE (not union) \u2014 a layer's list " + "replaces lower layers entirely so an operator can narrow per-agent.")
   }).optional();
-  ReleaseBlock = exports_external.object({
+  releaseBlockFields = {
     channel: exports_external.enum(["dev", "rc", "latest"]).optional(),
     pin: exports_external.string().regex(/^(sha-[0-9a-f]{7,40}|v\d+\.\d+\.\d+)$/).optional()
+  };
+  ReleaseBlock = exports_external.object(releaseBlockFields).strict().refine((r) => !(r.channel && r.pin), {
+    message: "release.channel and release.pin are mutually exclusive"
+  });
+  RootReleaseBlock = exports_external.object({
+    ...releaseBlockFields,
+    auto_update: exports_external.boolean().optional().describe("Opt-in unattended fleet auto-update (KEN-131). When true, hostd's " + "release watcher polls the published release version and, on a new " + "release, drives the EXISTING staggered canary rollout " + "(`switchroom rollout --pin vX.Y.Z`) unattended: canary-first, " + "per-agent version assert, durable pin persisted only after the " + "canary is green, abort + operator alert card on canary failure, " + "and compose rollback on a failed apply. Default false \u2014 with it " + "unset/false, behaviour is unchanged.")
   }).strict().refine((r) => !(r.channel && r.pin), {
     message: "release.channel and release.pin are mutually exclusive"
   });
@@ -21372,6 +21379,7 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().default(false).describe("When true, hostd polls the remote release tag every " + "`interval_minutes` and applies + restarts the fleet when a new " + "release is detected. Default false \u2014 opt-in."),
     interval_minutes: exports_external.number().int().min(5).max(1440).default(5).describe("Poll interval in minutes. Floor of 5m matches the agent-config " + "cron rate limit; ceiling of 1440m (24h) is a sanity cap."),
     apply_on_detect: exports_external.boolean().default(true).describe("When false, hostd logs `release_detected` but does NOT call " + "update_apply / restart all. Useful for dogfooding the detector " + "without rolling the fleet."),
+    notify_on_detect: exports_external.boolean().default(false).describe("KEN-129 \u2014 operator-in-the-loop update prompt. Only consulted " + "when apply_on_detect is false (auto-apply supersedes notify): " + "a newly detected release posts ONE operator approval card " + "('fleet is behind \u2014 tap to apply') via an admin agent's " + "gateway; Approve runs hostd's update_apply path (fleet-" + "mutation-locked, durable status rows, get_status-pollable). " + "Dedup on release id: the last-notified id persists in " + "~/.switchroom/release-notify-state.json, so a card that " + "reached the operator is never re-posted for the same release."),
     image_ref: exports_external.string().default("ghcr.io/switchroom/switchroom-agent:latest").describe("Image reference whose remote digest is compared to the local " + "image digest. Defaults to the agent image's :latest tag, which " + "is the canonical signal that a release has been promoted.")
   });
   HostControlConfigSchema = exports_external.object({
@@ -21414,7 +21422,7 @@ var init_schema = __esm(() => {
       timezone: exports_external.string().regex(TIMEZONE_REGEX, "timezone must be an IANA zone name like 'Australia/Melbourne' or 'UTC'").optional().describe("Global default IANA timezone applied to every agent unless the " + "agent (or its profile) declares its own. See the per-agent " + "timezone field for the full cascade and auto-detection fallback.")
     }),
     telegram: TelegramConfigSchema,
-    release: ReleaseBlock.optional().describe("Fleet-wide default release-channel pin / pointer for the update " + "flow. Either `channel` (dev|rc|latest) or `pin` (sha-<hex>|v<semver>) " + "\u2014 mutually exclusive. Per-agent `release` REPLACES this entirely."),
+    release: RootReleaseBlock.optional().describe("Fleet-wide default release-channel pin / pointer for the update " + "flow. Either `channel` (dev|rc|latest) or `pin` (sha-<hex>|v<semver>) " + "\u2014 mutually exclusive. Per-agent `release` REPLACES this entirely " + "(except `auto_update`, which is root-only \u2014 a fleet property read by " + "hostd's release watcher, never per-agent)."),
     memory: MemoryBackendConfigSchema.optional(),
     hindsight: HindsightConfigSchema.optional().describe("Fleet-singleton Hindsight (memory backend) configuration. Currently " + "just the LLM knob (provider + model) used for retain/reflect/" + "consolidation. Both fields optional; when unset the container falls " + "back to provider=claude-code + the hard-coded HINDSIGHT_DEFAULT_MODEL " + "so nothing changes for operators who don't set it. Read at container " + "launch by startHindsight() (src/setup/hindsight.ts) \u2014 takes effect on " + "the next `switchroom apply` / `memory setup --recreate`."),
     vault: VaultConfigSchema.optional(),
@@ -29495,6 +29503,79 @@ var init_atomic = __esm(() => {
   TMP_OPEN_FLAGS = constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | (constants2.O_NOFOLLOW ?? 0);
 });
 
+// ../src/agents/generation-stamp.ts
+import { createHash as createHash5 } from "node:crypto";
+import { existsSync as existsSync33, readFileSync as readFileSync32, writeFileSync as writeFileSync29 } from "node:fs";
+import { join as join38 } from "node:path";
+function sha256Text(s) {
+  return createHash5("sha256").update(s, "utf-8").digest("hex");
+}
+function hashManagedClaudeMd(content3) {
+  const idx = content3.indexOf(CLAUDE_MD_YOURS_MARKER);
+  const managed = idx === -1 ? content3 : content3.slice(0, idx + CLAUDE_MD_YOURS_MARKER.length);
+  return sha256Text(managed);
+}
+function hashStampedFileOnDisk(agentDir, rel) {
+  const p = join38(agentDir, rel);
+  if (!existsSync33(p))
+    return null;
+  let content3;
+  try {
+    content3 = readFileSync32(p, "utf-8");
+  } catch {
+    return null;
+  }
+  return rel === "CLAUDE.md" ? hashManagedClaudeMd(content3) : sha256Text(content3);
+}
+function readGenerationStamp(agentDir) {
+  const p = join38(agentDir, GENERATION_STAMP_FILE);
+  if (!existsSync33(p))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync32(p, "utf-8"));
+    if (parsed?.version !== 1 || typeof parsed.files !== "object" || parsed.files === null || Array.isArray(parsed.files)) {
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function detectStampDrift(agentDir, opts = {}) {
+  const stamp = readGenerationStamp(agentDir);
+  if (!stamp)
+    return { hasStamp: false, findings: [] };
+  const findings = [];
+  for (const rel of STAMPED_FILES) {
+    const stamped = stamp.files[rel];
+    if (!stamped)
+      continue;
+    const current = hashStampedFileOnDisk(agentDir, rel);
+    if (current === null) {
+      findings.push({ surface: rel, detail: "missing (was present at last apply)" });
+    } else if (current !== stamped) {
+      findings.push({ surface: rel, detail: "modified since last apply" });
+    }
+  }
+  if (opts.currentConfigHash && opts.currentConfigHash !== stamp.configHash) {
+    findings.push({
+      surface: "config",
+      detail: "switchroom.yaml changed since last apply (generated files are stale)"
+    });
+  }
+  if (opts.currentVersion && opts.currentVersion !== stamp.switchroomVersion) {
+    findings.push({
+      surface: "version",
+      detail: `generated by switchroom ${stamp.switchroomVersion}, installed ${opts.currentVersion} \u2014 re-apply to refresh`
+    });
+  }
+  return { hasStamp: true, findings };
+}
+var GENERATION_STAMP_FILE = ".switchroom-generated.json", CLAUDE_MD_YOURS_MARKER = "# --- Yours (preserved across apply) ---", STAMPED_FILES;
+var init_generation_stamp = __esm(() => {
+  STAMPED_FILES = ["start.sh", "CLAUDE.md", ".mcp.json"];
+});
+
 // ../node_modules/.bun/handlebars@4.7.9/node_modules/handlebars/dist/cjs/handlebars/utils.js
 var require_utils = __commonJS((exports2) => {
   exports2.__esModule = true;
@@ -32451,7 +32532,7 @@ var require_util = __commonJS((exports2) => {
     return path2;
   }
   exports2.normalize = normalize;
-  function join39(aRoot, aPath) {
+  function join40(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -32483,7 +32564,7 @@ var require_util = __commonJS((exports2) => {
     }
     return joined;
   }
-  exports2.join = join39;
+  exports2.join = join40;
   exports2.isAbsolute = function(aPath) {
     return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
   };
@@ -32656,7 +32737,7 @@ var require_util = __commonJS((exports2) => {
           parsed.path = parsed.path.substring(0, index2 + 1);
         }
       }
-      sourceURL = join39(urlGenerate(parsed), sourceURL);
+      sourceURL = join40(urlGenerate(parsed), sourceURL);
     }
     return normalize(sourceURL);
   }
@@ -35261,19 +35342,19 @@ function renderAuthLine(state7, agentName3, now = Date.now()) {
 }
 
 // gateway/quota-cache.ts
-import { existsSync as existsSync43, readFileSync as readFileSync44, writeFileSync as writeFileSync37, mkdirSync as mkdirSync38 } from "fs";
-import { join as join48, dirname as dirname15 } from "path";
+import { existsSync as existsSync44, readFileSync as readFileSync45, writeFileSync as writeFileSync38, mkdirSync as mkdirSync38 } from "fs";
+import { join as join49, dirname as dirname15 } from "path";
 function defaultCachePath() {
-  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join48(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
+  return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join49(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
 }
 function readQuotaCache(opts = {}) {
   const path2 = opts.path ?? defaultCachePath();
   const now = opts.now ?? Date.now();
-  if (!existsSync43(path2))
+  if (!existsSync44(path2))
     return null;
   let entry;
   try {
-    entry = JSON.parse(readFileSync44(path2, "utf8"));
+    entry = JSON.parse(readFileSync45(path2, "utf8"));
   } catch {
     return null;
   }
@@ -35300,7 +35381,7 @@ function writeQuotaCache(result, opts = {}) {
   };
   try {
     mkdirSync38(dirname15(path2), { recursive: true });
-    writeFileSync37(path2, JSON.stringify(entry, null, 2), { mode: 384 });
+    writeFileSync38(path2, JSON.stringify(entry, null, 2), { mode: 384 });
   } catch {}
 }
 var DEFAULT_TTL_MS4, RATE_LIMIT_TTL_MS;
@@ -35310,8 +35391,8 @@ var init_quota_cache = __esm(() => {
 });
 
 // gateway/boot-probes.ts
-import { readFileSync as readFileSync45, readdirSync as readdirSync10, existsSync as existsSync44 } from "fs";
-import { join as join49 } from "path";
+import { readFileSync as readFileSync46, readdirSync as readdirSync10, existsSync as existsSync45 } from "fs";
+import { join as join50 } from "path";
 import { execFile as execFileCb } from "child_process";
 import { promisify } from "util";
 async function withTimeout(label, p, timeoutMs = PROBE_TIMEOUT_MS) {
@@ -35353,11 +35434,11 @@ function mapPlan(billingType, hasExtra) {
 }
 async function probeAccount(agentDir) {
   return withTimeout("Account", (async () => {
-    const claudeDir = join49(agentDir, ".claude");
-    const claudeJsonPath = join49(claudeDir, ".claude.json");
+    const claudeDir = join50(agentDir, ".claude");
+    const claudeJsonPath = join50(claudeDir, ".claude.json");
     let cfg = {};
     try {
-      const raw = readFileSync45(claudeJsonPath, "utf8");
+      const raw = readFileSync46(claudeJsonPath, "utf8");
       cfg = JSON.parse(raw);
     } catch {
       return { status: "fail", label: "Account", detail: "no .claude.json" };
@@ -35375,12 +35456,12 @@ async function probeAccount(agentDir) {
     let tokenStr = "";
     let status = "ok";
     for (const candidate of [
-      join49(claudeDir, ".oauth-token.meta.json"),
-      join49(claudeDir, "accounts", "default", ".oauth-token.meta.json")
+      join50(claudeDir, ".oauth-token.meta.json"),
+      join50(claudeDir, "accounts", "default", ".oauth-token.meta.json")
     ]) {
-      if (existsSync44(candidate)) {
+      if (existsSync45(candidate)) {
         try {
-          const meta = JSON.parse(readFileSync45(candidate, "utf8"));
+          const meta = JSON.parse(readFileSync46(candidate, "utf8"));
           if (meta.expiresAt) {
             tokenStr = " \u00b7 " + formatDaysFromNow(meta.expiresAt);
             const daysLeft = Math.round((meta.expiresAt - Date.now()) / 86400000);
@@ -35555,9 +35636,9 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
     if (!cgroup)
       return null;
     const procsPath = `/sys/fs/cgroup${cgroup}/cgroup.procs`;
-    if (!existsSync44(procsPath))
+    if (!existsSync45(procsPath))
       return null;
-    const pidsRaw = readFileSync45(procsPath, "utf-8");
+    const pidsRaw = readFileSync46(procsPath, "utf-8");
     const pids = pidsRaw.split(`
 `).map((s) => s.trim()).filter(Boolean);
     if (pids.length === 0)
@@ -35570,7 +35651,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
       let rss = 0;
       let comm = "";
       try {
-        const status = readFileSync45(`/proc/${pid}/status`, "utf-8");
+        const status = readFileSync46(`/proc/${pid}/status`, "utf-8");
         const rssLine = status.split(`
 `).find((l) => l.startsWith("VmRSS:"));
         if (rssLine) {
@@ -35582,7 +35663,7 @@ async function resolveTmuxSupervisorPid(agentName3, execFileImpl) {
         continue;
       }
       try {
-        comm = readFileSync45(`/proc/${pid}/comm`, "utf-8").trim();
+        comm = readFileSync46(`/proc/${pid}/comm`, "utf-8").trim();
       } catch {}
       candidates.push({ pid, rss, comm });
     }
@@ -35762,9 +35843,9 @@ async function probeQuota(claudeConfigDir, _agentDir, fetchImpl = fetch, opts =
       let claudeDirForProbe = null;
       for (const candidate of [
         claudeConfigDir,
-        join49(claudeConfigDir, "accounts", "default")
+        join50(claudeConfigDir, "accounts", "default")
       ]) {
-        if (existsSync44(join49(candidate, ".oauth-token"))) {
+        if (existsSync45(join50(candidate, ".oauth-token"))) {
           claudeDirForProbe = candidate;
           break;
         }
@@ -35829,7 +35910,7 @@ async function probeHindsight(bankName, fetchImpl = fetch) {
 }
 function readContainerBootTimeMsForProbe() {
   try {
-    const stat1 = readFileSync45("/proc/1/stat", "utf8");
+    const stat1 = readFileSync46("/proc/1/stat", "utf8");
     const lastParen = stat1.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -35837,7 +35918,7 @@ function readContainerBootTimeMsForProbe() {
     const starttimeTicks = Number(after[19]);
     if (!Number.isFinite(starttimeTicks))
       return null;
-    const procStat = readFileSync45("/proc/stat", "utf8");
+    const procStat = readFileSync46("/proc/stat", "utf8");
     const btimeLine = procStat.split(`
 `).find((l) => l.startsWith("btime "));
     if (!btimeLine)
@@ -35935,7 +36016,7 @@ async function probeUds(label, socketPath, opts = {}) {
   }
   return withTimeout(label, (async () => {
     if (!opts.connectImpl) {
-      if (!existsSync44(socketPath)) {
+      if (!existsSync45(socketPath)) {
         return {
           status: "fail",
           label,
@@ -35999,7 +36080,7 @@ async function probeSkills(agentDir, opts = {}) {
   return withTimeout("Skills", (async () => {
     const fs2 = opts.fs ?? realSkillsFs;
     const max = opts.maxNamesShown ?? 3;
-    const skillsDir = join49(agentDir, ".claude", "skills");
+    const skillsDir = join50(agentDir, ".claude", "skills");
     if (!fs2.exists(skillsDir)) {
       return { status: "ok", label: "Skills", detail: "no skills dir" };
     }
@@ -36014,17 +36095,17 @@ async function probeSkills(agentDir, opts = {}) {
     }
     const dangling = [];
     for (const name of entries) {
-      const skillPath = join49(skillsDir, name);
+      const skillPath = join50(skillsDir, name);
       if (!fs2.exists(skillPath)) {
         dangling.push(name);
         continue;
       }
-      const skillMd = join49(skillPath, "SKILL.md");
+      const skillMd = join50(skillPath, "SKILL.md");
       if (!fs2.exists(skillMd) && !fs2.exists(skillPath + ".md")) {
         continue;
       }
     }
-    const overlayDir = opts.overlaySkillsDir ?? join49(agentDir, "skills.d");
+    const overlayDir = opts.overlaySkillsDir ?? join50(agentDir, "skills.d");
     const overlaySlugs = new Set;
     if (fs2.exists(overlayDir)) {
       let overlayEntries = [];
@@ -36066,8 +36147,8 @@ function renderBucketedSkills(switchroom, agent) {
 }
 async function probeConnections(agentDir, opts = {}) {
   return withTimeout("Connections", (async () => {
-    const path2 = join49(agentDir, ".claude", "connection-health.json");
-    const read = opts.readFileImpl ?? ((p) => readFileSync45(p, "utf8"));
+    const path2 = join50(agentDir, ".claude", "connection-health.json");
+    const read = opts.readFileImpl ?? ((p) => readFileSync46(p, "utf8"));
     let issues = [];
     try {
       const parsed = JSON.parse(read(path2));
@@ -36091,31 +36172,87 @@ async function probeConnections(agentDir, opts = {}) {
     };
   })());
 }
+async function probeDrift(agentDir, opts = {}) {
+  return withTimeout("Drift", (async () => {
+    const surfaces = [];
+    let stampGeneratedAtMs = NaN;
+    try {
+      const stampResult = detectStampDrift(agentDir);
+      for (const f of stampResult.findings) {
+        surfaces.push(`${f.surface} (${f.detail})`);
+      }
+      if (stampResult.hasStamp) {
+        const raw = readGenerationStamp(agentDir);
+        if (raw?.generatedAt)
+          stampGeneratedAtMs = Date.parse(raw.generatedAt);
+      }
+    } catch {}
+    try {
+      const raw = readFileSync46(join50(agentDir, ".switchroom-drift.json"), "utf8");
+      const report = JSON.parse(raw);
+      if (report?.version === 1 && Array.isArray(report.findings)) {
+        const gen = report.generatedAt ? Date.parse(report.generatedAt) : NaN;
+        const supersededByApply = Number.isFinite(stampGeneratedAtMs) && Number.isFinite(gen) && gen < stampGeneratedAtMs;
+        if (!supersededByApply) {
+          const seen = new Set(surfaces.map((s) => s.split(" ")[0]));
+          let ageNote = "";
+          if (Number.isFinite(gen)) {
+            const ageMs = (opts.nowMs?.() ?? Date.now()) - gen;
+            if (ageMs > 3600000) {
+              const hours = Math.round(ageMs / 3600000);
+              const human = hours >= 48 ? `${Math.round(hours / 24)}d` : `${hours}h`;
+              ageNote = ` \u2014 as of ${human} ago`;
+            }
+          }
+          for (const f of report.findings) {
+            if (!f?.surface || seen.has(f.surface))
+              continue;
+            seen.add(f.surface);
+            surfaces.push(`${f.surface}${ageNote}`);
+          }
+        }
+      }
+    } catch {}
+    if (surfaces.length === 0) {
+      return { status: "ok", label: "Drift", detail: "generated surfaces in sync" };
+    }
+    const shown = surfaces.slice(0, 4).join(", ");
+    const more = surfaces.length > 4 ? ` +${surfaces.length - 4} more` : "";
+    const target = opts.agentName ? ` ${opts.agentName}` : "";
+    return {
+      status: "degraded",
+      label: "Drift",
+      detail: `${surfaces.length} drifted surface(s): ${shown}${more}`,
+      nextStep: `Run \`switchroom apply\` (or \`switchroom agent reconcile${target} --restart\`); see \`switchroom doctor\` for detail`
+    };
+  })());
+}
 var execFile, PROBE_TIMEOUT_MS = 2000, QUOTA_BROKER_TIMEOUT_MS = 7000, QUOTA_DIRECT_FALLBACK_TIMEOUT_MS = 5000, QUOTA_PROBE_OUTER_TIMEOUT_MS = 9000, TOKEN_EXPIRING_SOON_DAYS = 7, AGENT_RETRY_INTERVAL_MS = 1500, AGENT_RETRY_MAX_MS = 12000, AGENT_LIVE_WINDOW_MS = 45000, AGENT_LIVE_POLL_INTERVAL_MS = 2000, AGENT_LIVE_FOLLOWUP_REPOLL_MS = 30000, realProcFs, SCHEDULER_LOCK_PATH_DEFAULT = "/state/agent/scheduler.lock", SCHEDULER_JSONL_PATH_DEFAULT = "/state/agent/scheduler.jsonl", SCHEDULER_FRESH_BOOT_MS = 30000, realSchedulerFs, realSkillsFs;
 var init_boot_probes = __esm(() => {
   init_quota_cache();
+  init_generation_stamp();
   init_quota_check();
   execFile = promisify(execFileCb);
   realProcFs = {
     readdir: (p) => readdirSync10(p),
-    readFile: (p) => readFileSync45(p, "utf-8")
+    readFile: (p) => readFileSync46(p, "utf-8")
   };
   realSchedulerFs = {
-    readFile: (p) => readFileSync45(p, "utf-8"),
+    readFile: (p) => readFileSync46(p, "utf-8"),
     mtimeMs: (p) => {
       const { statSync: statSync14 } = __require("fs");
       return statSync14(p).mtimeMs;
     },
-    exists: (p) => existsSync44(p)
+    exists: (p) => existsSync45(p)
   };
   realSkillsFs = {
     readdir: (p) => readdirSync10(p),
-    exists: (p) => existsSync44(p)
+    exists: (p) => existsSync45(p)
   };
 });
 
 // gateway/boot-issue-cache.ts
-import { existsSync as existsSync45, readFileSync as readFileSync46, writeFileSync as writeFileSync38, mkdirSync as mkdirSync39, renameSync as renameSync19 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync47, writeFileSync as writeFileSync39, mkdirSync as mkdirSync39, renameSync as renameSync19 } from "fs";
 import { dirname as dirname16 } from "path";
 function fingerprintProbe(key, r) {
   if (r.status === "ok")
@@ -36195,11 +36332,11 @@ function diffProbes(probes, cache, opts = {}) {
   return out;
 }
 function loadCache(path2, now = Date.now) {
-  if (!existsSync45(path2))
+  if (!existsSync46(path2))
     return { ...EMPTY_CACHE, probes: {} };
   let raw;
   try {
-    raw = readFileSync46(path2, "utf-8");
+    raw = readFileSync47(path2, "utf-8");
   } catch {
     return { ...EMPTY_CACHE, probes: {} };
   }
@@ -36244,7 +36381,7 @@ function applyAndSave(path2, cache, diff) {
   try {
     mkdirSync39(dirname16(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
-    writeFileSync38(tmp, JSON.stringify(next), { mode: 384 });
+    writeFileSync39(tmp, JSON.stringify(next), { mode: 384 });
     renameSync19(tmp, path2);
   } catch {}
   return next;
@@ -36257,14 +36394,14 @@ var init_boot_issue_cache = __esm(() => {
 });
 
 // gateway/config-snapshot.ts
-import { createHash as createHash5 } from "crypto";
-import { existsSync as existsSync46, readFileSync as readFileSync47, writeFileSync as writeFileSync39, mkdirSync as mkdirSync40, renameSync as renameSync20 } from "fs";
+import { createHash as createHash6 } from "crypto";
+import { existsSync as existsSync47, readFileSync as readFileSync48, writeFileSync as writeFileSync40, mkdirSync as mkdirSync40, renameSync as renameSync20 } from "fs";
 import { dirname as dirname17 } from "path";
 function hashStringArray(items) {
   if (!items || items.length === 0)
     return null;
   const sorted = [...items].sort();
-  const raw = createHash5("sha256").update(sorted.join("\x00")).digest("hex");
+  const raw = createHash6("sha256").update(sorted.join("\x00")).digest("hex");
   return raw.slice(0, 12);
 }
 function normalizeModel(model) {
@@ -36323,11 +36460,11 @@ function renderConfigChangeDim(dim) {
   }
 }
 function loadSnapshot(path2, now = Date.now) {
-  if (!existsSync46(path2))
+  if (!existsSync47(path2))
     return null;
   let raw;
   try {
-    raw = readFileSync47(path2, "utf-8");
+    raw = readFileSync48(path2, "utf-8");
   } catch {
     return null;
   }
@@ -36359,7 +36496,7 @@ function persistSnapshot(path2, snapshot) {
   try {
     mkdirSync40(dirname17(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
-    writeFileSync39(tmp, JSON.stringify(snapshot), { mode: 384 });
+    writeFileSync40(tmp, JSON.stringify(snapshot), { mode: 384 });
     renameSync20(tmp, path2);
   } catch {}
 }
@@ -36368,13 +36505,13 @@ var init_config_snapshot = __esm(() => {
 });
 
 // gateway/boot-card-msgid.ts
-import { readFileSync as readFileSync48, writeFileSync as writeFileSync40 } from "node:fs";
+import { readFileSync as readFileSync49, writeFileSync as writeFileSync41 } from "node:fs";
 function bootCardChatKey(chatId, threadId) {
   return `${chatId}:${threadId ?? ""}`;
 }
 function readStore(path2) {
   try {
-    const parsed = JSON.parse(readFileSync48(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync49(path2, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -36393,7 +36530,7 @@ function saveBootCardMsgId(path2, chatKey3, messageId) {
     if (store2[chatKey3] === messageId)
       return;
     store2[chatKey3] = messageId;
-    writeFileSync40(path2, JSON.stringify(store2), "utf8");
+    writeFileSync41(path2, JSON.stringify(store2), "utf8");
   } catch {}
 }
 var init_boot_card_msgid = () => {};
@@ -36411,8 +36548,8 @@ __export(exports_boot_card, {
   readRoutingMode: () => readRoutingMode,
   containerBootStartMs: () => containerBootStartMs
 });
-import { join as join50 } from "path";
-import { readFileSync as readFileSync49, statSync as statSync14 } from "fs";
+import { join as join51 } from "path";
+import { readFileSync as readFileSync50, statSync as statSync14 } from "fs";
 function resolvePersonaName(slug, loadConfig3) {
   try {
     const config = loadConfig3 ? loadConfig3() : loadConfig();
@@ -36434,7 +36571,7 @@ function shouldSkipDuplicateBootCard(gate, site) {
   }
   return { skip: false };
 }
-function containerBootStartMs(fsImpl = { readFileSync: readFileSync49 }) {
+function containerBootStartMs(fsImpl = { readFileSync: readFileSync50 }) {
   try {
     const btimeLine = fsImpl.readFileSync("/proc/stat", "utf-8").split(`
 `).find((l) => l.startsWith("btime "));
@@ -36455,8 +36592,8 @@ function containerBootStartMs(fsImpl = { readFileSync: readFileSync49 }) {
     return null;
   }
 }
-function readRoutingMode(agentDir, bootStartMs, fsImpl = { readFileSync: readFileSync49, statSync: statSync14 }) {
-  const path2 = join50(agentDir, ".routing-mode");
+function readRoutingMode(agentDir, bootStartMs, fsImpl = { readFileSync: readFileSync50, statSync: statSync14 }) {
+  const path2 = join51(agentDir, ".routing-mode");
   try {
     const raw = fsImpl.readFileSync(path2, "utf-8");
     const line = raw.split(`
@@ -36563,7 +36700,7 @@ function renderBootCard(opts) {
   return stackCardLines(flatLines);
 }
 async function runAllProbes(opts) {
-  const claudeDir = join50(opts.agentDir, ".claude");
+  const claudeDir = join51(opts.agentDir, ".claude");
   const probes = {};
   const slug = opts.agentSlug ?? opts.agentName;
   await Promise.allSettled([
@@ -36596,6 +36733,9 @@ async function runAllProbes(opts) {
     }),
     probeConnections(opts.agentDir).then((r) => {
       probes.connections = r;
+    }),
+    probeDrift(opts.agentDir, { agentName: opts.agentSlug ?? opts.agentName }).then((r) => {
+      probes.drift = r;
     })
   ]);
   return probes;
@@ -36854,7 +36994,8 @@ var init_boot_card = __esm(() => {
     broker: "Broker",
     kernel: "Kernel",
     skills: "Skills",
-    connections: "Connections"
+    connections: "Connections",
+    drift: "Drift"
   };
   PROBE_KEYS = [
     "account",
@@ -36866,7 +37007,8 @@ var init_boot_card = __esm(() => {
     "broker",
     "kernel",
     "skills",
-    "connections"
+    "connections",
+    "drift"
   ];
   REASON_EMOJI = {
     planned: "\u2705",
@@ -37417,7 +37559,7 @@ __export(exports_tmux2, {
   captureAgentPane: () => captureAgentPane2
 });
 import { execFileSync as execFileSync8 } from "node:child_process";
-import { chmodSync as chmodSync13, mkdirSync as mkdirSync48, readdirSync as readdirSync13, statSync as statSync19, unlinkSync as unlinkSync26, writeFileSync as writeFileSync49 } from "node:fs";
+import { chmodSync as chmodSync13, mkdirSync as mkdirSync48, readdirSync as readdirSync13, statSync as statSync19, unlinkSync as unlinkSync26, writeFileSync as writeFileSync50 } from "node:fs";
 import { resolve as resolve12 } from "node:path";
 function captureAgentPane2(opts) {
   const { agentName: agentName3, agentDir, reason } = opts;
@@ -37468,7 +37610,7 @@ function captureAgentPane2(opts) {
 ` + `
 `;
   try {
-    writeFileSync49(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
+    writeFileSync50(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
       mode: 384
     });
   } catch (err) {
@@ -37606,7 +37748,8 @@ function clipReason(reason) {
 }
 function buildConfigApprovalCardBody(args) {
   const safeReason = clipReason(args.reason);
-  const render = (diff) => `\uD83D\uDEE0 **Config edit proposed**
+  const safeTitle = args.title ? args.title.replace(/[\u0000-\u001f\u007f]+/g, " ").slice(0, 200) : undefined;
+  const render = (diff) => `${safeTitle ?? "\uD83D\uDEE0 **Config edit proposed**"}
 ` + `Agent: \`${args.agentName}\`
 ` + `Reason: ${escapeMarkdown(safeReason)}
 
@@ -37651,7 +37794,8 @@ async function handleRequestConfigApproval(client3, msg, deps) {
   const built = buildConfigApprovalCardBody({
     agentName: msg.agentName,
     reason: msg.reason,
-    unifiedDiff: prelim
+    unifiedDiff: prelim,
+    ...msg.title !== undefined ? { title: msg.title } : {}
   });
   const body = built.body;
   const oversize = prelim !== msg.unifiedDiff || built.truncated;
@@ -38348,7 +38492,7 @@ __export(exports_materialize_bot_token, {
   materializeBotToken: () => materializeBotToken,
   BotTokenMaterializeError: () => BotTokenMaterializeError
 });
-import { existsSync as existsSync55 } from "node:fs";
+import { existsSync as existsSync56 } from "node:fs";
 function pickConfiguredToken(config, agentName3) {
   if (agentName3) {
     const agent = config.agents?.[agentName3];
@@ -38362,7 +38506,7 @@ function tryDirectVaultRead4(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync55(vaultPath))
+  if (!existsSync56(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -38514,11 +38658,11 @@ var init_approvals_commands = __esm(() => {
 // gateway/gateway.ts
 var import_grammy16 = __toESM(require_mod(), 1);
 var import_runner3 = __toESM(require_mod3(), 1);
-import { randomBytes as randomBytes10, createHash as createHash6 } from "crypto";
+import { randomBytes as randomBytes10, createHash as createHash7 } from "crypto";
 import { execFileSync as execFileSync9, execSync as execSync2, spawn as spawn2 } from "child_process";
 import {
-  readFileSync as readFileSync60,
-  writeFileSync as writeFileSync50,
+  readFileSync as readFileSync61,
+  writeFileSync as writeFileSync51,
   mkdirSync as mkdirSync49,
   readdirSync as readdirSync14,
   rmSync as rmSync6,
@@ -38528,12 +38672,12 @@ import {
   chmodSync as chmodSync14,
   openSync as openSync12,
   closeSync as closeSync12,
-  existsSync as existsSync56,
+  existsSync as existsSync57,
   unlinkSync as unlinkSync27,
   appendFileSync as appendFileSync9
 } from "fs";
 import { homedir as homedir20 } from "os";
-import { join as join62, sep as sep4, basename as basename15 } from "path";
+import { join as join63, sep as sep4, basename as basename15 } from "path";
 
 // plugin-logger.ts
 import { appendFileSync, mkdirSync, renameSync, statSync, existsSync } from "fs";
@@ -39942,8 +40086,89 @@ var ACRONYMS = new Set([
   "HTTP",
   "JSON",
   "SQL",
-  "UI"
+  "UI",
+  "HTTPS",
+  "SSH",
+  "DNS",
+  "CLI",
+  "AWS",
+  "UTC",
+  "MCP",
+  "PDF",
+  "ID",
+  "OK",
+  "VM",
+  "LLM",
+  "YAML",
+  "RAM",
+  "USB"
 ]);
+var ACRONYM_MAX_LEN = Math.max(...[...ACRONYMS].map((a) => a.length));
+var PATH_TOKEN_RE = /(?<![\w~./-])(?:~|\.{1,2}|[A-Za-z0-9_.@-]+)?(?:\/[A-Za-z0-9_.@+-]+){2,}\/?(?![\w/-])/g;
+function looksLikePath(m, segs) {
+  if (/^(?:\/|\.{1,2}\/|~\/)/.test(m))
+    return true;
+  const last = segs[segs.length - 1];
+  if (/\.[A-Za-z][A-Za-z0-9]{0,7}$/.test(last))
+    return true;
+  return !segs.every((sg) => /^[a-z][a-z0-9]*$/.test(sg));
+}
+function isSpeakableSegment(seg) {
+  if (!/[A-Za-z]/.test(seg))
+    return false;
+  if (seg.length > 32)
+    return false;
+  if (/^[0-9a-f]{8,}$/i.test(seg))
+    return false;
+  return true;
+}
+function speakPaths(input) {
+  return input.replace(PATH_TOKEN_RE, (m) => {
+    const segs = m.split("/").filter((sg) => sg.length > 0);
+    if (segs.length < 2)
+      return m;
+    if (segs.every((sg) => /^\d+$/.test(sg)))
+      return m;
+    if (!looksLikePath(m, segs))
+      return m;
+    const last = segs[segs.length - 1];
+    return isSpeakableSegment(last) ? last : "a path";
+  });
+}
+var BLOCK_MARKER_RE = /^[ \t]{0,3}(?:#{1,6}[ \t]+|[-*+][ \t]+|\d+[.)][ \t]+)/;
+var HEADING_MARKER_RE = /^[ \t]{0,3}#{1,6}[ \t]+/;
+function ensureTerminated(line) {
+  const t = line.replace(/[ \t]+$/, "");
+  if (!t.trim())
+    return t;
+  if (/[.!?:;]$/.test(t))
+    return t;
+  if (/,$/.test(t))
+    return `${t.slice(0, -1)}.`;
+  return `${t}.`;
+}
+function applyBlockPauses(input) {
+  const lines = input.split(`
+`);
+  const isBlock = lines.map((l) => BLOCK_MARKER_RE.test(l));
+  const isHeading = lines.map((l) => HEADING_MARKER_RE.test(l));
+  const stripped = lines.map((l, i) => isBlock[i] ? l.slice(l.match(BLOCK_MARKER_RE)[0].length) : l);
+  const inUnit = [];
+  for (let i = 0;i < stripped.length; i++) {
+    inUnit[i] = isBlock[i] === true || i > 0 && inUnit[i - 1] === true && isHeading[i - 1] !== true && stripped[i].trim() !== "";
+  }
+  return stripped.map((line, i) => {
+    const next = stripped[i + 1];
+    const nextIsBlock = isBlock[i + 1] === true;
+    const unitEndsHere = isHeading[i] === true || next === undefined || next.trim() === "" || nextIsBlock;
+    if (inUnit[i] && unitEndsHere)
+      return ensureTerminated(line);
+    if (nextIsBlock && line.trim() !== "")
+      return ensureTerminated(line);
+    return line;
+  }).join(`
+`);
+}
 function normalizeForSpeech(input) {
   if (!input)
     return "";
@@ -39952,7 +40177,7 @@ function normalizeForSpeech(input) {
   s = decodeHtmlEntities(s);
   s = stripBackslashEscapes(s);
   s = s.replace(/[\u{1F000}-\u{1FAFF}\u{1F1E6}-\u{1F1FF}\u{2600}-\u{27BF}\u{2B00}-\u{2BFF}\u{FE00}-\u{FE0F}\u{200D}\u{2B50}\u{3030}\u{303D}\u{3297}\u{3299}\u{24C2}]/gu, "");
-  s = s.replace(/:([a-z0-9][a-z0-9_+-]*):/gi, " ");
+  s = s.replace(/(?<![\w:]):([a-z0-9][a-z0-9_+-]*):(?!\d)/gi, " ");
   s = s.replace(/(^|\n)[ \t]*(`{3,}|~{3,})[^\n]*\n[\s\S]*?\n[ \t]*\2[ \t]*(?=\n|$)/g, `$1${CODE_BLOCK_PLACEHOLDER}.`);
   s = s.replace(/(^|\n)[ \t]*(`{3,}|~{3,})[^\n]*\n[\s\S]*$/g, `$1${CODE_BLOCK_PLACEHOLDER}.`);
   s = s.replace(/!\[([^\]]*)\]\([^)]*\)/g, "$1");
@@ -39961,6 +40186,7 @@ function normalizeForSpeech(input) {
   s = s.replace(/\bhttps?:\/\/[^\s)]+/gi, "a link");
   s = s.replace(/`([^`\n]+)`/g, "$1");
   s = s.replace(/`/g, "");
+  s = speakPaths(s);
   s = s.replace(/\*\*\*(.+?)\*\*\*/g, "$1");
   s = s.replace(/___(.+?)___/g, "$1");
   s = s.replace(/\*\*(.+?)\*\*/g, "$1");
@@ -39968,10 +40194,8 @@ function normalizeForSpeech(input) {
   s = s.replace(/\*(.+?)\*/g, "$1");
   s = s.replace(/(?<![A-Za-z0-9])_(.+?)_(?![A-Za-z0-9])/g, "$1");
   s = s.replace(/~~(.+?)~~/g, "$1");
-  s = s.replace(/^[ \t]{0,3}#{1,6}[ \t]+/gm, "");
   s = s.replace(/^[ \t]{0,3}>[ \t]?/gm, "");
-  s = s.replace(/^[ \t]{0,3}[-*+][ \t]+/gm, "");
-  s = s.replace(/^[ \t]{0,3}\d+[.)][ \t]+/gm, "");
+  s = applyBlockPauses(s);
   s = s.replace(/^[ \t]{0,3}([-_*])\1{2,}[ \t]*$/gm, "");
   s = s.replace(/^[ \t]*\|?[ \t]*:?-{2,}:?[ \t]*(\|[ \t]*:?-{2,}:?[ \t]*)+\|?[ \t]*$/gm, "");
   s = s.replace(/\|/g, " ");
@@ -39996,7 +40220,7 @@ function normalizeForSpeech(input) {
       return m;
     return `${MONTHS[month]} ${ord} ${yw}`;
   });
-  s = s.replace(/\b([01]?\d|2[0-3]):([0-5]\d)\b/g, (m, hh, mm) => {
+  s = s.replace(/(?<![\d:])\b([01]?\d|2[0-3]):([0-5]\d)(?!:?\d)/g, (m, hh, mm) => {
     const h = Number(hh);
     const min = Number(mm);
     const hw = belowThousand(h);
@@ -40004,11 +40228,12 @@ function normalizeForSpeech(input) {
       return `${hw} o'clock`;
     return `${hw} ${minutesToWords(min)}`;
   });
-  s = s.replace(/\$(\d{1,9})(?:\.(\d{2}))?\b/g, (m, dollars, cents) => {
-    const dw = numberToWords(Number(dollars));
+  s = s.replace(/\$(\d{1,3}(?:,\d{3})+|\d{1,9})(?:\.(\d{2}))?(?!\d|[.,]\d)/g, (m, dollarsRaw, cents) => {
+    const dollars = Number(String(dollarsRaw).replace(/,/g, ""));
+    const dw = numberToWords(dollars);
     if (!dw)
       return m;
-    const noun = Number(dollars) === 1 && !cents ? "dollar" : "dollars";
+    const noun = dollars === 1 && !cents ? "dollar" : "dollars";
     if (cents && cents !== "00") {
       const cw = numberToWords(Number(cents));
       return `${dw} ${noun} ${cw}`;
@@ -40040,7 +40265,7 @@ function normalizeForSpeech(input) {
   s = s.replace(/\s=\s/g, " equals ");
   s = s.replace(/(\s)&(\s)/g, "$1and$2");
   s = s.replace(/(\w)&(\w)/g, "$1 and $2");
-  s = s.replace(/\b[A-Z]{2,5}\b/g, (tok) => ACRONYMS.has(tok) ? tok.split("").join(" ") : tok);
+  s = s.replace(new RegExp(`\\b[A-Z]{2,${ACRONYM_MAX_LEN}}\\b`, "g"), (tok) => ACRONYMS.has(tok) ? tok.split("").join(" ") : tok);
   s = s.replace(/([!?.]){2,}/g, "$1");
   s = s.replace(/[ \t]*\n[ \t]*\n[ \t]*/g, ". ");
   s = s.replace(/\s*\n\s*/g, " ");
@@ -40106,8 +40331,24 @@ var ACRONYMS2 = new Set([
   "HTTP",
   "JSON",
   "SQL",
-  "UI"
+  "UI",
+  "HTTPS",
+  "SSH",
+  "DNS",
+  "CLI",
+  "AWS",
+  "UTC",
+  "MCP",
+  "PDF",
+  "ID",
+  "OK",
+  "VM",
+  "LLM",
+  "YAML",
+  "RAM",
+  "USB"
 ]);
+var ACRONYM_MAX_LEN2 = Math.max(...[...ACRONYMS2].map((a) => a.length));
 
 // tts-normalize.ts
 var NULL = "\x00";
@@ -40344,7 +40585,7 @@ table omitted.`);
       words.push(ONES2[Number(ch)]);
     return words.join(" ");
   });
-  s = s.replace(/\b([01]?\d|2[0-3]):([0-5]\d)(?!:?\d)/g, (_m, hh, mm) => {
+  s = s.replace(/(?<![\d:])\b([01]?\d|2[0-3]):([0-5]\d)(?!:?\d)/g, (_m, hh, mm) => {
     const h = Number(hh);
     const min = Number(mm);
     const hw = belowThousand2(h);
@@ -45438,7 +45679,7 @@ table omitted.`);
       words.push(ONES3[Number(ch)]);
     return words.join(" ");
   });
-  s = s.replace(/\b([01]?\d|2[0-3]):([0-5]\d)(?!:?\d)/g, (_m, hh, mm) => {
+  s = s.replace(/(?<![\d:])\b([01]?\d|2[0-3]):([0-5]\d)(?!:?\d)/g, (_m, hh, mm) => {
     const h = Number(hh);
     const min = Number(mm);
     const hw = belowThousand3(h);
@@ -51919,12 +52160,20 @@ function createHandbackPreturnSignal(deps) {
 `);
     });
   }
+  function stopTypingUnlessTurnLive(entry, reason) {
+    if (deps.hasLiveTurn?.(entry.statusKey) === true) {
+      log(`handback-preturn-signal: ${reason} key=${entry.statusKey} ` + `typing=kept (live turn owns the stop)
+`);
+      return;
+    }
+    deps.stopTypingLoop(entry.chatId, entry.threadId);
+  }
   function reap(entry) {
     entry.reapTimer = null;
     if (entry.consumed)
       return;
     entry.consumed = true;
-    deps.stopTypingLoop(entry.chatId, entry.threadId);
+    stopTypingUnlessTurnLive(entry, "orphan reap");
     if (entry.activityMessageId != null) {
       const record = {
         turnKey: entry.syntheticTurnKey,
@@ -51951,11 +52200,20 @@ function createHandbackPreturnSignal(deps) {
         return;
       const threadId = inbound.threadId ?? null;
       const adoptTurnId = deps.deriveTurnId(chatId, threadId, inbound.messageId);
-      if (adoptTurnId == null)
+      const releaseKey = deps.chatKey(chatId, threadId);
+      if (adoptTurnId == null) {
+        log(`handback-preturn-signal: release key=${releaseKey} armed=no (no derivable turnId)
+`);
         return;
-      const statusKey = deps.chatKey(chatId, threadId);
-      if (byKey.has(statusKey))
+      }
+      const statusKey = releaseKey;
+      if (byKey.has(statusKey)) {
+        log(`handback-preturn-signal: release key=${statusKey} turnId=${adoptTurnId} ` + `armed=no (deduped: topic already has a live pre-turn entry)
+`);
         return;
+      }
+      log(`handback-preturn-signal: release key=${statusKey} turnId=${adoptTurnId} armed=yes
+`);
       const startedAt = now();
       const syntheticTurnKey = `${PRETURN_TURNKEY_PREFIX}${statusKey}:${startedAt}`;
       const entry = {
@@ -52021,7 +52279,7 @@ function createHandbackPreturnSignal(deps) {
       if (entry == null)
         return;
       entry.consumed = true;
-      deps.stopTypingLoop(entry.chatId, entry.threadId);
+      stopTypingUnlessTurnLive(entry, "reaped record");
       dropEntry(entry);
     },
     pendingCount() {
@@ -68058,6 +68316,7 @@ __export(exports_silence_poke, {
   longestInFlightTool: () => longestInFlightTool,
   formatFrameworkFallbackText: () => formatFrameworkFallbackText,
   endTurn: () => endTurn,
+  decideFallbackTeardownNotice: () => decideFallbackTeardownNotice,
   __tickForTests: () => __tickForTests,
   __setDepsForTests: () => __setDepsForTests,
   __resetAllForTests: () => __resetAllForTests2,
@@ -68224,6 +68483,22 @@ function formatFrameworkFallbackText(fallbackKind, silenceMs, inFlightTools = []
   }
   return null;
 }
+function decideFallbackTeardownNotice(input) {
+  if (input.userAddressedTextDelivered)
+    return { send: false, reason: "user-addressed-text-delivered" };
+  if (!input.tearsDownLiveTurn)
+    return { send: false, reason: "no-live-turn-torn-down" };
+  if (input.role !== "user")
+    return { send: false, reason: "non-user-turn" };
+  if (input.finalAnswerDelivered)
+    return { send: false, reason: "answer-already-delivered" };
+  const minutes = Math.max(1, Math.round(input.silenceMs / 60000));
+  const tail = input.representWillFollow ? "Your message is still tracked and is being re-asked now." : "Your message was not answered \u2014 please re-send it.";
+  return {
+    send: true,
+    text: `\u26a0\ufe0f no output for ${minutes} min \u2014 the framework ended that stalled turn. ${tail}`
+  };
+}
 function longestInFlightTool(key, now) {
   const s = state2.get(key);
   if (s == null)
@@ -68297,6 +68572,11 @@ function tick(now) {
     const silence = now - zeroAt;
     if (silence < 0)
       continue;
+    if (activeDeps.isTurnLive != null && !activeDeps.isTurnLive(key)) {
+      state2.delete(key);
+      activeDeps.emitMetric({ kind: "silence_poke_orphan_reaped", key, silence_ms: silence });
+      continue;
+    }
     tryMidTurnFloor(key, s, now, false);
     if (!s.fallbackFired && silence >= thresholds.fallback) {
       const ceiling = thresholds.fallbackHardCeiling ?? Number.POSITIVE_INFINITY;
@@ -76716,6 +76996,7 @@ function recordTurnEnd(db3, args) {
 }
 var INTERRUPTED_VIA = new Set([
   "restart",
+  "reaped_stale",
   "sigterm",
   "timeout",
   "unknown"
@@ -77425,6 +77706,22 @@ function formatFrameworkFallbackText2(fallbackKind, silenceMs, inFlightTools = [
   }
   return null;
 }
+function decideFallbackTeardownNotice2(input) {
+  if (input.userAddressedTextDelivered)
+    return { send: false, reason: "user-addressed-text-delivered" };
+  if (!input.tearsDownLiveTurn)
+    return { send: false, reason: "no-live-turn-torn-down" };
+  if (input.role !== "user")
+    return { send: false, reason: "non-user-turn" };
+  if (input.finalAnswerDelivered)
+    return { send: false, reason: "answer-already-delivered" };
+  const minutes = Math.max(1, Math.round(input.silenceMs / 60000));
+  const tail = input.representWillFollow ? "Your message is still tracked and is being re-asked now." : "Your message was not answered \u2014 please re-send it.";
+  return {
+    send: true,
+    text: `\u26a0\ufe0f no output for ${minutes} min \u2014 the framework ended that stalled turn. ${tail}`
+  };
+}
 
 // gateway/stream-render.ts
 function handleSessionEvent(deps, ev) {
@@ -77602,9 +77899,11 @@ function handleSessionEvent(deps, ev) {
               next.activityMessageId = handbackAdoption.activityMessageId;
               next.activityEverOpened = true;
             }
-            startTurnTypingLoop(ev.chatId, enqThreadIdNum ?? null);
+            process.stderr.write(`telegram gateway: handback pre-turn adopted turnId=${turnId} ` + `key=${handbackAdoption.statusKey} card=${handbackAdoption.activityMessageId ?? "none"}
+`);
           }
         }
+        startTurnTypingLoop(ev.chatId, enqThreadIdNum ?? null);
         setCurrentTurn(next, statusKey(ev.chatId, enqThreadIdNum));
         scheduleEarlyLivenessOpen(next);
         process.stderr.write(`telegram gateway: ${formatTurnLifecycle("set", "enqueue", next, startedAt)}
@@ -79338,6 +79637,7 @@ function flushOnAgentDisconnect(deps) {
     disposeProgressDriver,
     stopTurnTypingLoops,
     onDanglingTurnsSwept,
+    onTurnKeyEnded,
     log
   } = deps;
   if (agentName3 == null) {
@@ -79349,6 +79649,7 @@ function flushOnAgentDisconnect(deps) {
     activeStatusReactions.delete(key);
     activeReactionMsgIds.delete(key);
     activeTurnStartedAt.delete(key);
+    onTurnKeyEnded?.(key);
   }
   clearActiveReactions3();
   const danglingKeys = [...activeTurnStartedAt.keys()];
@@ -79356,6 +79657,7 @@ function flushOnAgentDisconnect(deps) {
     for (const k of danglingKeys) {
       activeTurnStartedAt.delete(k);
       activeReactionMsgIds.delete(k);
+      onTurnKeyEnded?.(k);
     }
     log(`telegram gateway: disconnect-flush swept ${danglingKeys.length} dangling turn key(s) ` + `post-bridge-death (controller loop missed \u2014 finalize raced disconnect)`);
     onDanglingTurnsSwept?.(danglingKeys);
@@ -81894,13 +82196,14 @@ async function discoverModels(agentName3, opts = {}) {
 }
 
 // ../src/agents/scaffold.ts
-import { dirname as dirname14, isAbsolute, join as join40, relative, resolve as resolve8 } from "node:path";
+import { dirname as dirname14, isAbsolute, join as join41, relative, resolve as resolve8 } from "node:path";
 init_atomic();
 
 // ../src/agents/agent-uid.ts
 init_peercred();
 
 // ../src/agents/scaffold.ts
+init_generation_stamp();
 init_schema();
 
 // ../src/config/users.ts
@@ -81911,7 +82214,7 @@ init_merge();
 init_timezone();
 
 // ../src/cli/agent-config.ts
-import { join as join38 } from "node:path";
+import { join as join39 } from "node:path";
 import { homedir as homedir12 } from "node:os";
 
 // ../src/cli/helpers.ts
@@ -81932,12 +82235,12 @@ var WEBKITE_VAULT_KEYS = new Set([
 init_overlay_loader();
 
 // ../src/cli/agent-config.ts
-var AUDIT_ROOT = join38(homedir12(), ".switchroom", "audit");
+var AUDIT_ROOT = join39(homedir12(), ".switchroom", "audit");
 
 // ../src/agents/profiles.ts
 var import_handlebars = __toESM(require_lib(), 1);
-import { readFileSync as readFileSync32, writeFileSync as writeFileSync29, existsSync as existsSync33, readdirSync as readdirSync7, statSync as statSync12, copyFileSync, mkdirSync as mkdirSync31, realpathSync as realpathSync2 } from "node:fs";
-import { resolve as resolve7, join as join39, sep as pathSep } from "node:path";
+import { readFileSync as readFileSync33, writeFileSync as writeFileSync30, existsSync as existsSync34, readdirSync as readdirSync7, statSync as statSync12, copyFileSync, mkdirSync as mkdirSync31, realpathSync as realpathSync2 } from "node:fs";
+import { resolve as resolve7, join as join40, sep as pathSep } from "node:path";
 function resolveProfilesRoot() {
   const envOverride = process.env.SWITCHROOM_PROFILES_ROOT?.trim();
   if (envOverride) {
@@ -81948,7 +82251,7 @@ function resolveProfilesRoot() {
     resolve7(import.meta.dirname, "profiles")
   ];
   for (const candidate of candidates) {
-    if (existsSync33(candidate)) {
+    if (existsSync34(candidate)) {
       return candidate;
     }
   }
@@ -81964,9 +82267,9 @@ import_handlebars.default.registerHelper("isNumber", (value) => {
 var SHARED_FRAGMENTS_DIR = resolve7(PROFILES_ROOT, "_shared");
 var SHARED_FRAGMENTS = ["vault-protocol", "agent-self-service", "execution-discipline", "reply-discipline", "dev-protocol"];
 for (const name of SHARED_FRAGMENTS) {
-  const fragPath = join39(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
-  if (existsSync33(fragPath)) {
-    import_handlebars.default.registerPartial(name, readFileSync32(fragPath, "utf-8"));
+  const fragPath = join40(SHARED_FRAGMENTS_DIR, `${name}.md.hbs`);
+  if (existsSync34(fragPath)) {
+    import_handlebars.default.registerPartial(name, readFileSync33(fragPath, "utf-8"));
   }
 }
 
@@ -81983,7 +82286,23 @@ var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.
 var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 
 // ../src/memory/hindsight.ts
-var DEFAULT_RETAIN_MISSION = "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise, " + "including in-flight workflow/process narration (a sub-task started, " + "paused, or is still running) \u2014 only retain the outcome once a task " + "actually completes or a decision is made.";
+var DEFAULT_RETAIN_MISSION = "Extract durable facts that will still be true and useful weeks from now: " + "user preferences and standing rules, ongoing projects and recurring " + "commitments, technical and architectural decisions with their rationale, " + "and people/tool relationships. A preference revealed by a request is " + "durable \u2014 record the preference (what the user likes, wants, or always " + `does), not the request itself.
+
+` + `NEVER extract:
+` + "- Agent tool-use traces or narration of what the assistant did (e.g. " + `"the assistant used X to query Y", "ran a search", "sent the message").
+` + "- In-flight workflow/process narration (a sub-task started, paused, or is " + "still running) \u2014 retain the outcome only once the task completes or a " + `decision is made.
+` + `- Operation, request, batch or session IDs, UUIDs, hashes, or error codes.
+` + "- Hindsight's own errors, retries, backlogs, or internal state \u2014 the " + `memory system's self-reports are not memories.
+` + `- Restatements of the user's current request or the task in progress.
+` + "- Transient state (unread counts, build status, what is running right now) " + "unless the fact is explicitly dated, in which case record it as a dated " + `observation.
+` + `- Greetings, acknowledgements, and routine operational chatter.
+
+` + "If a candidate fact matches an exclusion, drop it rather than rewording " + "it. If nothing durable remains, return an empty facts list.";
+var SUPERSEDED_RETAIN_MISSIONS = [
+  "Extract technical decisions, architectural choices, user preferences, project context, and people/tool relationships. Ignore routine greetings and transient operational details.",
+  "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise.",
+  "Extract user preferences, ongoing projects, recurring commitments, " + "important context, and durable facts that should help across future " + "conversations. Skip one-off chatter and temporary task noise, " + "including in-flight workflow/process narration (a sub-task started, " + "paused, or is still running) \u2014 only retain the outcome once a task " + "actually completes or a decision is made."
+];
 var PROFILE_MEMORY_DEFAULTS = {
   "health-coach": {
     disposition: { skepticism: 2, literalism: 2, empathy: 5 },
@@ -82028,6 +82347,7 @@ function normalizeModelAlias(model) {
   return model === "claude-fable-5" ? "fable" : model;
 }
 var CLAUDE_MD_YOURS_PLACEHOLDER = "This space is yours. Add per-agent rules, exceptions, or context the " + "Switchroom template doesn't capture. Everything above the marker line is " + "regenerated on every apply; this section is preserved.";
+var pendingBankOps = new Set;
 var SWITCHROOM_OWNED_SETTINGS_KEYS = new Set([
   "permissions",
   "mcpServers",
@@ -82573,7 +82893,7 @@ init_overlay_loader();
 init_merge();
 init_timezone();
 var import_yaml4 = __toESM(require_dist(), 1);
-import { readFileSync as readFileSync33, existsSync as existsSync34 } from "node:fs";
+import { readFileSync as readFileSync34, existsSync as existsSync35 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { resolve as resolve9 } from "node:path";
 
@@ -82649,7 +82969,7 @@ function findConfigFile2(startDir) {
     resolve9(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path2 of searchPaths) {
-    if (existsSync34(path2)) {
+    if (existsSync35(path2)) {
       return path2;
     }
   }
@@ -82657,12 +82977,12 @@ function findConfigFile2(startDir) {
 }
 function loadConfig2(configPath) {
   const filePath = configPath ?? findConfigFile2();
-  if (!existsSync34(filePath)) {
+  if (!existsSync35(filePath)) {
     throw new ConfigError2(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync33(filePath, "utf-8");
+    raw = readFileSync34(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError2(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -83192,15 +83512,15 @@ function topicForRecipient(args) {
 }
 
 // ../src/agents/perf.ts
-import { existsSync as existsSync35, readFileSync as readFileSync34 } from "node:fs";
+import { existsSync as existsSync36, readFileSync as readFileSync35 } from "node:fs";
 function readTurnUsages(jsonlPath, lastN) {
-  if (!existsSync35(jsonlPath))
+  if (!existsSync36(jsonlPath))
     return [];
   if (lastN <= 0)
     return [];
   let raw;
   try {
-    raw = readFileSync34(jsonlPath, "utf-8");
+    raw = readFileSync35(jsonlPath, "utf-8");
   } catch {
     return [];
   }
@@ -83291,8 +83611,8 @@ function numField(obj, key) {
 }
 
 // gateway/context-occupancy.ts
-import { mkdirSync as mkdirSync32, writeFileSync as writeFileSync30 } from "node:fs";
-import { join as join41 } from "node:path";
+import { mkdirSync as mkdirSync32, writeFileSync as writeFileSync31 } from "node:fs";
+import { join as join42 } from "node:path";
 var CONTEXT_OCCUPANCY_FILENAME = "context-occupancy.json";
 var TIGHT_FRACTION = 0.8;
 function buildContextOccupancy(occupancy, cap, now) {
@@ -83315,9 +83635,9 @@ function buildContextOccupancy(occupancy, cap, now) {
 }
 function writeContextOccupancySnapshot(stateDir, snapshot, deps) {
   try {
-    const path2 = join41(stateDir, CONTEXT_OCCUPANCY_FILENAME);
+    const path2 = join42(stateDir, CONTEXT_OCCUPANCY_FILENAME);
     (deps?.mkdir ?? ((p, o) => mkdirSync32(p, o)))(stateDir, { recursive: true });
-    (deps?.writeFile ?? ((p, d) => writeFileSync30(p, d)))(path2, JSON.stringify(snapshot, null, 2) + `
+    (deps?.writeFile ?? ((p, d) => writeFileSync31(p, d)))(path2, JSON.stringify(snapshot, null, 2) + `
 `);
   } catch {}
 }
@@ -83471,7 +83791,7 @@ function nextCompactNotify(state6, ev) {
 }
 
 // gateway/hostd-dispatch.ts
-import { existsSync as existsSync36 } from "node:fs";
+import { existsSync as existsSync37 } from "node:fs";
 import { randomBytes as randomBytes7 } from "node:crypto";
 init_loader();
 var _hostdEnabled2;
@@ -83495,13 +83815,13 @@ function hostdSocketPath2(agentName3) {
 function hostdWillBeUsed2(agentName3) {
   if (!isHostdEnabled2())
     return false;
-  return existsSync36(hostdSocketPath2(agentName3));
+  return existsSync37(hostdSocketPath2(agentName3));
 }
 async function tryHostdDispatch2(agentName3, req, timeoutMs = 5000) {
   if (!isHostdEnabled2())
     return "not-configured";
   const sockPath = hostdSocketPath2(agentName3);
-  if (!existsSync36(sockPath))
+  if (!existsSync37(sockPath))
     return "not-configured";
   try {
     return await hostdRequest({ socketPath: sockPath, timeoutMs }, req);
@@ -83530,7 +83850,7 @@ async function pollHostdStatus(agentName3, targetRequestId, opts) {
   if (!isHostdEnabled2())
     return "not-configured";
   const sockPath = hostdSocketPath2(agentName3);
-  if (!existsSync36(sockPath))
+  if (!existsSync37(sockPath))
     return "not-configured";
   const now = opts.now ?? Date.now;
   const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -83649,7 +83969,7 @@ function createDmPinSweeper(deps) {
 
 // gateway/webhook-ingest-server.ts
 import net4 from "node:net";
-import { chmodSync as chmodSync10, existsSync as existsSync37, unlinkSync as unlinkSync17 } from "node:fs";
+import { chmodSync as chmodSync10, existsSync as existsSync38, unlinkSync as unlinkSync17 } from "node:fs";
 var MAX_REQUEST_BYTES = 1024 * 1024;
 function fdOf(conn) {
   const handle = conn._handle;
@@ -83661,7 +83981,7 @@ function startWebhookIngestServer(opts) {
   const log = opts.log ?? ((s) => process.stderr.write(s));
   const allowed = new Set(opts.allowedUids);
   try {
-    if (existsSync37(opts.socketPath))
+    if (existsSync38(opts.socketPath))
       unlinkSync17(opts.socketPath);
   } catch (err) {
     log(`webhook-ingest-server: could not unlink stale socket: ${err.message}
@@ -83754,7 +84074,7 @@ function startWebhookIngestServer(opts) {
         server.close();
       } catch {}
       try {
-        if (existsSync37(opts.socketPath))
+        if (existsSync38(opts.socketPath))
           unlinkSync17(opts.socketPath);
       } catch {}
     }
@@ -83763,19 +84083,19 @@ function startWebhookIngestServer(opts) {
 
 // ../src/web/webhook-gateway-record.ts
 import { appendFileSync as appendFileSync8, mkdirSync as mkdirSync35 } from "fs";
-import { join as join44 } from "path";
+import { join as join45 } from "path";
 import { homedir as homedir15 } from "os";
 
 // ../src/web/webhook-handler.ts
-import { appendFileSync as appendFileSync7, existsSync as existsSync38, mkdirSync as mkdirSync33, readFileSync as readFileSync35, writeFileSync as writeFileSync31 } from "fs";
-import { join as join42 } from "path";
+import { appendFileSync as appendFileSync7, existsSync as existsSync39, mkdirSync as mkdirSync33, readFileSync as readFileSync36, writeFileSync as writeFileSync32 } from "fs";
+import { join as join43 } from "path";
 var DEDUP_MAX = 1000;
 var DEDUP_TTL_MS = 24 * 60 * 60 * 1000;
 function loadDedupFile(path2) {
   try {
-    if (!existsSync38(path2))
+    if (!existsSync39(path2))
       return {};
-    const raw = JSON.parse(readFileSync35(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync36(path2, "utf-8"));
     return typeof raw.deliveries === "object" && raw.deliveries !== null ? raw.deliveries : {};
   } catch {
     return {};
@@ -83789,7 +84109,7 @@ function saveDedupFile(path2, deliveries, now) {
   }
   const sorted = Object.entries(pruned).sort((a, b) => b[1] - a[1]).slice(0, DEDUP_MAX);
   const final = Object.fromEntries(sorted);
-  writeFileSync31(path2, JSON.stringify({ deliveries: final }), {
+  writeFileSync32(path2, JSON.stringify({ deliveries: final }), {
     mode: 384
   });
 }
@@ -83797,8 +84117,8 @@ var agentDedupCache = new Map;
 function createFileDedupStore(resolveAgentDir) {
   return {
     check(agent, deliveryId, now) {
-      const telegramDir = join42(resolveAgentDir(agent), "telegram");
-      const filePath = join42(telegramDir, "webhook-dedup.json");
+      const telegramDir = join43(resolveAgentDir(agent), "telegram");
+      const filePath = join43(telegramDir, "webhook-dedup.json");
       if (!agentDedupCache.has(agent)) {
         agentDedupCache.set(agent, loadDedupFile(filePath));
       }
@@ -83819,8 +84139,8 @@ var tokenBuckets = new Map;
 var throttleIssueWindow = new Map;
 
 // ../src/web/webhook-dispatch.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync34, readFileSync as readFileSync36, writeFileSync as writeFileSync32 } from "fs";
-import { join as join43 } from "path";
+import { existsSync as existsSync40, mkdirSync as mkdirSync34, readFileSync as readFileSync37, writeFileSync as writeFileSync33 } from "fs";
+import { join as join44 } from "path";
 import { homedir as homedir14 } from "os";
 
 // ../src/agent-scheduler/ipc-client.ts
@@ -84119,9 +84439,9 @@ function cooldownKey(source, eventType, repo, number, ruleIndex) {
 }
 function loadCooldownFile(path2) {
   try {
-    if (!existsSync39(path2))
+    if (!existsSync40(path2))
       return {};
-    const raw = JSON.parse(readFileSync36(path2, "utf-8"));
+    const raw = JSON.parse(readFileSync37(path2, "utf-8"));
     return typeof raw.dispatches === "object" && raw.dispatches !== null ? raw.dispatches : {};
   } catch {
     return {};
@@ -84129,7 +84449,7 @@ function loadCooldownFile(path2) {
 }
 function saveCooldownFile(path2, dispatches) {
   try {
-    writeFileSync32(path2, JSON.stringify({ dispatches }), {
+    writeFileSync33(path2, JSON.stringify({ dispatches }), {
       mode: 384
     });
   } catch {}
@@ -84140,8 +84460,8 @@ function createFileCooldownStore(resolveAgentDir) {
     isCoolingDown(agent, key, cooldownMs, now) {
       if (cooldownMs <= 0)
         return false;
-      const telegramDir = join43(resolveAgentDir(agent), "telegram");
-      const filePath = join43(telegramDir, "webhook-cooldown.json");
+      const telegramDir = join44(resolveAgentDir(agent), "telegram");
+      const filePath = join44(telegramDir, "webhook-cooldown.json");
       if (!cache.has(agent)) {
         cache.set(agent, loadCooldownFile(filePath));
       }
@@ -84198,9 +84518,9 @@ async function defaultInject(socketPath, agentName3, inbound) {
 }
 function injectWebhookInbound(agent, prompt, ctx, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join43(homedir14(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join44(homedir14(), ".switchroom", "agents", a));
   const now = (deps.now ?? Date.now)();
-  const socketPath = join43(resolveAgentDir(agent), "telegram", "gateway.sock");
+  const socketPath = join44(resolveAgentDir(agent), "telegram", "gateway.sock");
   const inbound = {
     type: "inbound",
     chatId: ctx.chatId,
@@ -84272,7 +84592,7 @@ function evaluateDispatch(args, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = (deps.now ?? Date.now)();
   const nowDate = deps.nowDate ?? (() => new Date(now));
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join43(homedir14(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join44(homedir14(), ".switchroom", "agents", a));
   const cooldownStore = deps.cooldownStore ?? createFileCooldownStore(resolveAgentDir);
   if (!DISPATCH_SOURCES.includes(args.source))
     return 0;
@@ -84350,10 +84670,10 @@ var CONSOLIDATION_COMPLETED_EVENT = "consolidation.completed";
 function recordWebhookEvent(rec, deps = {}) {
   const log = deps.log ?? ((s) => process.stderr.write(s));
   const now = rec.ts || (deps.now ?? Date.now)();
-  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join44(homedir15(), ".switchroom", "agents", a));
+  const resolveAgentDir = deps.resolveAgentDir ?? ((a) => join45(homedir15(), ".switchroom", "agents", a));
   const dedupStore = deps.dedupStore ?? createFileDedupStore(resolveAgentDir);
   const agent = rec.agent;
-  const telegramDir = join44(resolveAgentDir(agent), "telegram");
+  const telegramDir = join45(resolveAgentDir(agent), "telegram");
   if (rec.source === "github" && rec.delivery_id) {
     const originalTs = dedupStore.check(agent, rec.delivery_id, now);
     if (originalTs !== undefined) {
@@ -84362,7 +84682,7 @@ function recordWebhookEvent(rec, deps = {}) {
       return { status: "deduped", ts: originalTs };
     }
   }
-  const logPath = join44(telegramDir, "webhook-events.jsonl");
+  const logPath = join45(telegramDir, "webhook-events.jsonl");
   try {
     mkdirSync35(telegramDir, { recursive: true });
     const record = {
@@ -84588,6 +84908,8 @@ function validateClientMessage(msg) {
         return false;
       if (typeof m.timeoutMs !== "number" || !Number.isFinite(m.timeoutMs) || m.timeoutMs <= 0)
         return false;
+      if (m.title !== undefined && (typeof m.title !== "string" || m.title.length === 0 || m.title.length > 200 || /[\u0000-\u001f\u007f]/.test(m.title)))
+        return false;
       return true;
     }
     case "request_config_finalize": {
@@ -85899,6 +86221,22 @@ class ObligationLedger {
       return { action: "escalate", obligation: o };
     return { action: "represent", obligation: o };
   }
+  static representGraceStillProtecting(o, now, representGraceMs, trailingGraceMs) {
+    if (representGraceMs <= 0)
+      return false;
+    if (o.lastRepresentedAt == null)
+      return false;
+    const sinceRepresent = now - o.lastRepresentedAt;
+    if (sinceRepresent >= representGraceMs)
+      return false;
+    const representTurnEnded = o.lastTurnEndedAt != null && o.lastTurnEndedAt > o.lastRepresentedAt;
+    if (representTurnEnded && trailingGraceMs > 0) {
+      const floorMs = Math.min(representGraceMs, Math.max(trailingGraceMs, ObligationLedger.MIN_REPRESENT_INTERVAL_MS));
+      return sinceRepresent < floorMs;
+    }
+    return true;
+  }
+  static MIN_REPRESENT_INTERVAL_MS = 30000;
   oldestEligible(now, graceMs, backgroundWorkActive, backgroundGraceMs, representGraceMs) {
     let best;
     for (const o of this.open.values()) {
@@ -85906,7 +86244,7 @@ class ObligationLedger {
         continue;
       if (backgroundWorkActive && backgroundGraceMs > 0 && now - o.openedAt < backgroundGraceMs)
         continue;
-      if (representGraceMs > 0 && o.lastRepresentedAt != null && now - o.lastRepresentedAt < representGraceMs)
+      if (ObligationLedger.representGraceStillProtecting(o, now, representGraceMs, graceMs))
         continue;
       if (best === undefined || o.openedAt < best.openedAt)
         best = o;
@@ -88158,6 +88496,22 @@ class ObligationLedger2 {
       return { action: "escalate", obligation: o };
     return { action: "represent", obligation: o };
   }
+  static representGraceStillProtecting(o, now, representGraceMs, trailingGraceMs) {
+    if (representGraceMs <= 0)
+      return false;
+    if (o.lastRepresentedAt == null)
+      return false;
+    const sinceRepresent = now - o.lastRepresentedAt;
+    if (sinceRepresent >= representGraceMs)
+      return false;
+    const representTurnEnded = o.lastTurnEndedAt != null && o.lastTurnEndedAt > o.lastRepresentedAt;
+    if (representTurnEnded && trailingGraceMs > 0) {
+      const floorMs = Math.min(representGraceMs, Math.max(trailingGraceMs, ObligationLedger2.MIN_REPRESENT_INTERVAL_MS));
+      return sinceRepresent < floorMs;
+    }
+    return true;
+  }
+  static MIN_REPRESENT_INTERVAL_MS = 30000;
   oldestEligible(now, graceMs, backgroundWorkActive, backgroundGraceMs, representGraceMs) {
     let best;
     for (const o of this.open.values()) {
@@ -88165,7 +88519,7 @@ class ObligationLedger2 {
         continue;
       if (backgroundWorkActive && backgroundGraceMs > 0 && now - o.openedAt < backgroundGraceMs)
         continue;
-      if (representGraceMs > 0 && o.lastRepresentedAt != null && now - o.lastRepresentedAt < representGraceMs)
+      if (ObligationLedger2.representGraceStillProtecting(o, now, representGraceMs, graceMs))
         continue;
       if (best === undefined || o.openedAt < best.openedAt)
         best = o;
@@ -88540,10 +88894,12 @@ function buildSilencePokeOptions(deps) {
     SILENCE_FALLBACK_HARD_MS,
     SILENCE_FLOOR_MS,
     SILENCE_DEFER_INFLIGHT_TOOLS,
+    isObligationOpenForTurn,
     TURN_PREVIEW_MAX,
     STATE_DIR,
     isLegitimatelyWorking,
     getCurrentTurn,
+    getCurrentTurnForKey,
     getInFlightUpdate,
     getTurnsDb,
     getInboundSpool,
@@ -88569,6 +88925,7 @@ function buildSilencePokeOptions(deps) {
     thresholdsMs: { fallback: SILENCE_FALLBACK_MS, fallbackHardCeiling: SILENCE_FALLBACK_HARD_MS, floor: SILENCE_FLOOR_MS },
     deferFallbackWhileToolInFlight: SILENCE_DEFER_INFLIGHT_TOOLS,
     isLegitimatelyWorking: (key) => isLegitimatelyWorking(key),
+    isTurnLive: (key) => !(activeTurnStartedAt.get(key) == null && getCurrentTurnForKey(key) == null),
     emitMetric: (event) => {
       emitRuntimeMetric2(event);
     },
@@ -88581,7 +88938,7 @@ function buildSilencePokeOptions(deps) {
       return { role: turn.role, finalAnswerDelivered: turn.finalAnswerDelivered };
     },
     onMidTurnFloor: async (ctx) => {
-      if (activeTurnStartedAt.get(ctx.key) == null && getCurrentTurn() == null)
+      if (activeTurnStartedAt.get(ctx.key) == null && getCurrentTurnForKey(ctx.key) == null)
         return;
       const blockedOnApproval = activeStatusReactions.get(statusKey(ctx.chatId, ctx.threadId))?.isAwaiting() ?? false;
       if (!blockedOnApproval)
@@ -88598,7 +88955,7 @@ function buildSilencePokeOptions(deps) {
       }
     },
     onFrameworkFallback: async (ctx) => {
-      if (activeTurnStartedAt.get(ctx.key) == null && getCurrentTurn() == null) {
+      if (activeTurnStartedAt.get(ctx.key) == null && getCurrentTurnForKey(ctx.key) == null) {
         process.stderr.write(`telegram gateway: silence-poke framework-fallback late-fire skipped \u2014 ` + `turn ended cleanly during silence window ` + `chat=${ctx.chatId} thread=${ctx.threadId ?? "-"} silence_ms=${ctx.silenceMs}
 `);
         logStreamingEvent2({
@@ -88647,9 +89004,11 @@ function buildSilencePokeOptions(deps) {
         silenceMs: ctx.silenceMs,
         fallbackKind: ctx.fallbackKind
       });
+      let userAddressedTextDelivered = false;
       if (text4 != null) {
         try {
           await sendSilenceText(ctx.chatId, ctx.threadId ?? null, text4, blockedOnApproval ? false : true);
+          userAddressedTextDelivered = blockedOnApproval;
         } catch (err) {
           process.stderr.write(`silence-poke fallback sendMessage failed chat=${ctx.chatId} thread=${ctx.threadId}: ${err}
 `);
@@ -88660,6 +89019,7 @@ function buildSilencePokeOptions(deps) {
       const fbThreadId = ctx.threadId ?? undefined;
       const wedgedTurn = getCurrentTurn();
       const turnMatchesFallback = wedgedTurn != null && wedgedTurn.sessionChatId === fbChatId && wedgedTurn.sessionThreadId === fbThreadId;
+      const tearsDownLiveTurn = turnMatchesFallback && wedgedTurn != null && turnLiveForItsTopic(wedgedTurn);
       const turnStartedAt = activeTurnStartedAt.get(fbKey);
       if (turnStartedAt != null) {
         const turnDurationMs = Date.now() - turnStartedAt;
@@ -88717,17 +89077,36 @@ function buildSilencePokeOptions(deps) {
         const sib = silenceMsForKey2(siblingKey, fbNow);
         return sib == null || sib >= DEFAULT_THRESHOLDS2.fallback;
       });
-      if (turnMatchesFallback && wedgedTurn != null && turnLiveForItsTopic(wedgedTurn)) {
+      if (tearsDownLiveTurn && wedgedTurn != null) {
         process.stderr.write(`telegram gateway: ${formatTurnLifecycle("clear", "silence_fallback", wedgedTurn, Date.now())}
 `);
         endCurrentTurnForKey(wedgedTurn, fbKey);
       }
+      const teardownNotice = decideFallbackTeardownNotice2({
+        tearsDownLiveTurn,
+        role: wedgedTurn?.role ?? null,
+        finalAnswerDelivered: wedgedTurn?.finalAnswerDelivered ?? false,
+        userAddressedTextDelivered,
+        representWillFollow: isObligationOpenForTurn(wedgedTurn?.turnId ?? null),
+        silenceMs: ctx.silenceMs
+      });
+      if (teardownNotice.send) {
+        try {
+          await sendSilenceText(fbChatId, ctx.threadId ?? null, teardownNotice.text, false);
+        } catch (err) {
+          process.stderr.write(`silence-poke teardown notice sendMessage failed chat=${fbChatId} thread=${ctx.threadId}: ${err}
+`);
+        }
+      } else {
+        process.stderr.write(`telegram gateway: silence-poke teardown notice skipped reason=${teardownNotice.reason} ` + `chat=${fbChatId} thread=${ctx.threadId ?? "-"}
+`);
+      }
       try {
         clearSilentEndState2(fbKey);
       } catch {}
       const fbSelfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
       const fbRedeliver = redeliverBufferedInbound2(getPendingInboundBuffer(), fbSelfAgent, (m) => sendToAgent(fbSelfAgent, m), getInboundSpool(), trackRedeliveredInbound);
-      process.stderr.write(`telegram gateway: silence-poke framework-fallback ended wedged turn ` + `chat=${fbChatId} thread=${ctx.threadId ?? "-"} silence_ms=${ctx.silenceMs} ` + `currentTurn_nulled=${turnMatchesFallback} ` + `drained_buffered=${fbRedeliver.redelivered}/${fbRedeliver.drained}` + `${fbRedeliver.rebuffered > 0 ? ` rebuffered=${fbRedeliver.rebuffered}` : ""}` + `${fbExtraPurge.purged.length > 0 ? ` extra_keys_purged=${fbExtraPurge.purged.length}` : ""}
+      process.stderr.write(`telegram gateway: silence-poke framework-fallback ended wedged turn ` + `chat=${fbChatId} thread=${ctx.threadId ?? "-"} silence_ms=${ctx.silenceMs} ` + `currentTurn_nulled=${tearsDownLiveTurn} ` + `drained_buffered=${fbRedeliver.redelivered}/${fbRedeliver.drained}` + `${fbRedeliver.rebuffered > 0 ? ` rebuffered=${fbRedeliver.rebuffered}` : ""}` + `${fbExtraPurge.purged.length > 0 ? ` extra_keys_purged=${fbExtraPurge.purged.length}` : ""}
 `);
     }
   };
@@ -89248,26 +89627,26 @@ function skillProposalKeyboard(id) {
 // ../src/self-improve/skill-proposals.ts
 import {
   closeSync as closeSync7,
-  existsSync as existsSync40,
+  existsSync as existsSync41,
   mkdirSync as mkdirSync36,
   openSync as openSync7,
-  readFileSync as readFileSync37,
+  readFileSync as readFileSync38,
   writeSync as writeSync5
 } from "node:fs";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 var PROPOSALS_FILE2 = "skill-proposals.jsonl";
 var REJECTED_FILE2 = "skill-proposals-rejected.jsonl";
 var REJECTION_TTL_MS2 = 90 * 24 * 60 * 60 * 1000;
 var PROPOSAL_SIM_THRESHOLD = 0.5;
 function proposalsPath2(stateDir) {
-  return join45(stateDir, PROPOSALS_FILE2);
+  return join46(stateDir, PROPOSALS_FILE2);
 }
 function rejectedPath2(stateDir) {
-  return join45(stateDir, REJECTED_FILE2);
+  return join46(stateDir, REJECTED_FILE2);
 }
 function ensureDir3(stateDir) {
-  if (!existsSync40(stateDir)) {
+  if (!existsSync41(stateDir)) {
     mkdirSync36(stateDir, { recursive: true, mode: 493 });
   }
 }
@@ -89281,11 +89660,11 @@ function appendLine2(path2, obj) {
   }
 }
 function readLines2(path2, isValid2) {
-  if (!existsSync40(path2))
+  if (!existsSync41(path2))
     return [];
   let raw;
   try {
-    raw = readFileSync37(path2, "utf-8");
+    raw = readFileSync38(path2, "utf-8");
   } catch {
     return [];
   }
@@ -89882,10 +90261,10 @@ function escapeBody2(s) {
 }
 
 // gateway/pid-file.ts
-import { writeFileSync as writeFileSync33, readFileSync as readFileSync38, unlinkSync as unlinkSync19, renameSync as renameSync15 } from "node:fs";
+import { writeFileSync as writeFileSync34, readFileSync as readFileSync39, unlinkSync as unlinkSync19, renameSync as renameSync15 } from "node:fs";
 function writePidFile(path2, record) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync33(tmp, JSON.stringify(record), "utf-8");
+  writeFileSync34(tmp, JSON.stringify(record), "utf-8");
   renameSync15(tmp, path2);
 }
 function clearPidFile(path2) {
@@ -89901,10 +90280,10 @@ import {
   writeFile as writeFileAsync,
   readFile as readFileAsync
 } from "node:fs/promises";
-import { readFileSync as readFileSync39 } from "node:fs";
+import { readFileSync as readFileSync40 } from "node:fs";
 function readCurrentBootId() {
   try {
-    const stat = readFileSync39("/proc/1/stat", "utf-8");
+    const stat = readFileSync40("/proc/1/stat", "utf-8");
     const lastParen = stat.lastIndexOf(")");
     if (lastParen < 0)
       return null;
@@ -90107,15 +90486,15 @@ function safeCount(fn) {
 }
 
 // gateway/session-marker.ts
-import { writeFileSync as writeFileSync34, readFileSync as readFileSync40, renameSync as renameSync16, unlinkSync as unlinkSync20 } from "node:fs";
+import { writeFileSync as writeFileSync35, readFileSync as readFileSync41, renameSync as renameSync16, unlinkSync as unlinkSync20 } from "node:fs";
 function writeSessionMarker(path2, marker) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync34(tmp, JSON.stringify(marker), "utf-8");
+  writeFileSync35(tmp, JSON.stringify(marker), "utf-8");
   renameSync16(tmp, path2);
 }
 function readSessionMarker(path2) {
   try {
-    const raw = readFileSync40(path2, "utf-8");
+    const raw = readFileSync41(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.pid === "number" && typeof parsed.startedAtMs === "number" && Number.isFinite(parsed.pid) && Number.isFinite(parsed.startedAtMs)) {
       return { pid: parsed.pid, startedAtMs: parsed.startedAtMs };
@@ -90137,16 +90516,16 @@ function shouldFireRestartBanner(input) {
 }
 
 // gateway/clean-shutdown-marker.ts
-import { writeFileSync as writeFileSync35, readFileSync as readFileSync41, renameSync as renameSync17, unlinkSync as unlinkSync21 } from "node:fs";
+import { writeFileSync as writeFileSync36, readFileSync as readFileSync42, renameSync as renameSync17, unlinkSync as unlinkSync21 } from "node:fs";
 var DEFAULT_MAX_AGE_MS = 60000;
 function writeCleanShutdownMarker(path2, marker) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync35(tmp, JSON.stringify(marker), "utf-8");
+  writeFileSync36(tmp, JSON.stringify(marker), "utf-8");
   renameSync17(tmp, path2);
 }
 function readCleanShutdownMarker(path2) {
   try {
-    const raw = readFileSync41(path2, "utf-8");
+    const raw = readFileSync42(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.ts === "number" && Number.isFinite(parsed.ts) && typeof parsed.signal === "string" && parsed.signal.length > 0) {
       const out = { ts: parsed.ts, signal: parsed.signal };
@@ -90518,16 +90897,16 @@ function classifyAdminGate(text4, myAgentName) {
 
 // subagent-watcher.ts
 import {
-  existsSync as existsSync41,
+  existsSync as existsSync42,
   openSync as openSync8,
   readSync as readSync2,
   statSync as statSync13,
   closeSync as closeSync8,
   watch,
   readdirSync as readdirSync8,
-  readFileSync as readFileSync42
+  readFileSync as readFileSync43
 } from "fs";
-import { join as join46 } from "path";
+import { join as join47 } from "path";
 
 // session-tail.ts
 function sanitizeCwdToProjectName2(cwd) {
@@ -90877,7 +91256,7 @@ function backfillJsonlAgentId(db3, jsonlPath, agentId, log) {
   const metaPath = jsonlPath.replace(/\.jsonl$/, ".meta.json");
   let meta;
   try {
-    const raw = readFileSync42(metaPath, "utf8");
+    const raw = readFileSync43(metaPath, "utf8");
     meta = JSON.parse(raw);
   } catch {
     log?.(`subagent-watcher: backfill skip ${agentId} \u2014 meta.json not readable at ${metaPath}`);
@@ -91332,7 +91711,7 @@ function startSubagentWatcher(config) {
     clearTimeout(ref.ref);
   });
   const fs2 = config.fs ?? {
-    existsSync: existsSync41,
+    existsSync: existsSync42,
     readdirSync: readdirSync8,
     statSync: statSync13,
     openSync: openSync8,
@@ -91850,8 +92229,8 @@ function startSubagentWatcher(config) {
     if (stopped)
       return;
     pruneVanishedDirWatchers();
-    const claudeHome = join46(agentDir, ".claude");
-    const projectsRoot = join46(claudeHome, "projects");
+    const claudeHome = join47(agentDir, ".claude");
+    const projectsRoot = join47(claudeHome, "projects");
     if (!fs2.existsSync(projectsRoot))
       return;
     let projectDirs;
@@ -91885,7 +92264,7 @@ function startSubagentWatcher(config) {
         continue;
       }
       warnedForeignSlugs.delete(pDir);
-      const projectPath = join46(projectsRoot, pDir);
+      const projectPath = join47(projectsRoot, pDir);
       let sessionDirs;
       try {
         sessionDirs = fs2.readdirSync(projectPath);
@@ -91895,7 +92274,7 @@ function startSubagentWatcher(config) {
       for (const sDir of sessionDirs) {
         if (sDir.endsWith(".jsonl"))
           continue;
-        const subagentsPath = join46(projectPath, sDir, "subagents");
+        const subagentsPath = join47(projectPath, sDir, "subagents");
         if (!fs2.existsSync(subagentsPath))
           continue;
         const watchAndScan = (dirPath) => {
@@ -91904,7 +92283,7 @@ function startSubagentWatcher(config) {
               const w = fs2.watch(dirPath, (_event, filename) => {
                 if (!filename || !filename.toString().startsWith("agent-") || !filename.toString().endsWith(".jsonl"))
                   return;
-                const filePath = join46(dirPath, filename.toString());
+                const filePath = join47(dirPath, filename.toString());
                 if (!knownFiles.has(filePath)) {
                   scanSubagentsDir(dirPath);
                 }
@@ -91918,7 +92297,7 @@ function startSubagentWatcher(config) {
           scanSubagentsDir(dirPath);
         };
         watchAndScan(subagentsPath);
-        const workflowsPath = join46(subagentsPath, "workflows");
+        const workflowsPath = join47(subagentsPath, "workflows");
         if (fs2.existsSync(workflowsPath)) {
           let wfDirs;
           try {
@@ -91928,7 +92307,7 @@ function startSubagentWatcher(config) {
           }
           for (const wfDir of wfDirs) {
             try {
-              const wfPath = join46(workflowsPath, wfDir);
+              const wfPath = join47(workflowsPath, wfDir);
               if (!fs2.statSync(wfPath).isDirectory())
                 continue;
               watchAndScan(wfPath);
@@ -91948,7 +92327,7 @@ function startSubagentWatcher(config) {
     for (const e of entries) {
       if (!e.startsWith("agent-") || !e.endsWith(".jsonl"))
         continue;
-      const filePath = join46(subagentsPath, e);
+      const filePath = join47(subagentsPath, e);
       if (knownFiles.has(filePath))
         continue;
       const agentId = e.slice("agent-".length, -".jsonl".length);
@@ -92077,20 +92456,20 @@ function startSubagentWatcher(config) {
 // ../src/worktree/registry.ts
 import {
   mkdirSync as mkdirSync37,
-  writeFileSync as writeFileSync36,
-  readFileSync as readFileSync43,
+  writeFileSync as writeFileSync37,
+  readFileSync as readFileSync44,
   readdirSync as readdirSync9,
   unlinkSync as unlinkSync22,
-  existsSync as existsSync42,
+  existsSync as existsSync43,
   renameSync as renameSync18
 } from "node:fs";
-import { join as join47, resolve as resolve10 } from "node:path";
+import { join as join48, resolve as resolve10 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function registryDir() {
-  return resolve10(process.env.SWITCHROOM_WORKTREE_DIR ?? join47(homedir16(), ".switchroom", "worktrees"));
+  return resolve10(process.env.SWITCHROOM_WORKTREE_DIR ?? join48(homedir16(), ".switchroom", "worktrees"));
 }
 function recordPath(id) {
-  return join47(registryDir(), `${id}.json`);
+  return join48(registryDir(), `${id}.json`);
 }
 function ensureDir4() {
   mkdirSync37(registryDir(), { recursive: true });
@@ -92099,14 +92478,14 @@ function writeRecord(record) {
   ensureDir4();
   const target = recordPath(record.id);
   const tmp = `${target}.tmp${process.pid}`;
-  writeFileSync36(tmp, JSON.stringify(record, null, 2) + `
+  writeFileSync37(tmp, JSON.stringify(record, null, 2) + `
 `, { mode: 384 });
   renameSync18(tmp, target);
 }
 function readRecord(id) {
   const path2 = recordPath(id);
   try {
-    const raw = readFileSync43(path2, "utf8");
+    const raw = readFileSync44(path2, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -92136,7 +92515,7 @@ function touchHeartbeat(id, onAfterRead) {
   writeRecord({ ...rec, heartbeatAt: new Date().toISOString() });
 }
 function recordExists(id) {
-  return existsSync42(recordPath(id));
+  return existsSync43(recordPath(id));
 }
 
 // worktree-watch-cwds.ts
@@ -92268,15 +92647,15 @@ function determineRestartReason(opts) {
 init_boot_card();
 
 // gateway/update-announce.ts
-import { existsSync as existsSync47, mkdirSync as mkdirSync41, openSync as openSync9, closeSync as closeSync9, readFileSync as readFileSync50 } from "node:fs";
-import { join as join52 } from "node:path";
+import { existsSync as existsSync48, mkdirSync as mkdirSync41, openSync as openSync9, closeSync as closeSync9, readFileSync as readFileSync51 } from "node:fs";
+import { join as join53 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 
 // ../src/host-control/audit-reader.ts
 import { homedir as homedir17 } from "node:os";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function defaultAuditLogPath(home2 = homedir17()) {
-  return join51(home2, ".switchroom", "host-control-audit.log");
+  return join52(home2, ".switchroom", "host-control-audit.log");
 }
 function parseAuditLine(line) {
   const trimmed = line.trim();
@@ -92399,8 +92778,8 @@ function readAndFilter(raw, filters, limit) {
 var DEFAULT_LOOKBACK_MS = 10 * 60 * 1000;
 function readLastTerminalUpdateAudit(opts = {}) {
   const path2 = opts.auditLogPath ?? defaultAuditLogPath();
-  const exists = opts.exists ?? existsSync47;
-  const readFile = opts.readFile ?? ((p) => readFileSync50(p, "utf-8"));
+  const exists = opts.exists ?? existsSync48;
+  const readFile = opts.readFile ?? ((p) => readFileSync51(p, "utf-8"));
   if (!exists(path2))
     return null;
   let raw;
@@ -92461,15 +92840,15 @@ function renderUpdateOutcomeLine(entry) {
 `);
 }
 function claimUpdateAnnouncement(requestId, opts = {}) {
-  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join52(homedir18(), ".switchroom");
-  const dir = join52(stateDir, "update-announced");
+  const stateDir = opts.stateDir ?? process.env.TELEGRAM_STATE_DIR ?? join53(homedir18(), ".switchroom");
+  const dir = join53(stateDir, "update-announced");
   try {
     mkdirSync41(dir, { recursive: true });
   } catch {
     return false;
   }
   const safeId = requestId.replace(/[^A-Za-z0-9_.-]/g, "_").slice(0, 200);
-  const path2 = join52(dir, safeId);
+  const path2 = join53(dir, safeId);
   try {
     const fd = openSync9(path2, "wx");
     closeSync9(fd);
@@ -92489,7 +92868,7 @@ function maybeRenderUpdateAnnouncement(opts = {}) {
 
 // issues-card.ts
 init_card_format();
-import { readFileSync as readFileSync51, writeFileSync as writeFileSync41 } from "node:fs";
+import { readFileSync as readFileSync52, writeFileSync as writeFileSync42 } from "node:fs";
 var SEVERITY_EMOJI = {
   info: "\u2139\ufe0f",
   warn: "\u26a0\ufe0f",
@@ -92581,7 +92960,7 @@ function extractRetryAfterSecs2(err) {
 var COOLDOWN_JITTER_MS2 = 500;
 function readPersistedMessageId(path2, log) {
   try {
-    const raw = readFileSync51(path2, "utf8");
+    const raw = readFileSync52(path2, "utf8");
     const parsed = JSON.parse(raw);
     const v = parsed.messageId;
     if (typeof v === "number" && Number.isInteger(v) && v > 0)
@@ -92597,7 +92976,7 @@ function readPersistedMessageId(path2, log) {
 }
 function writePersistedMessageId(path2, messageId, log) {
   try {
-    writeFileSync41(path2, JSON.stringify({ messageId }) + `
+    writeFileSync42(path2, JSON.stringify({ messageId }) + `
 `, { mode: 384 });
   } catch (err) {
     log(`issues-card: persist write failed (${err.message})`);
@@ -92690,24 +93069,24 @@ function createIssuesCardHandle(opts) {
 }
 
 // issues-watcher.ts
-import { existsSync as existsSync49, statSync as statSync16 } from "node:fs";
-import { join as join54 } from "node:path";
+import { existsSync as existsSync50, statSync as statSync16 } from "node:fs";
+import { join as join55 } from "node:path";
 
 // ../src/issues/store.ts
 import {
   closeSync as closeSync10,
-  existsSync as existsSync48,
+  existsSync as existsSync49,
   mkdirSync as mkdirSync42,
   openSync as openSync10,
   readdirSync as readdirSync11,
-  readFileSync as readFileSync52,
+  readFileSync as readFileSync53,
   renameSync as renameSync21,
   statSync as statSync15,
   unlinkSync as unlinkSync23,
-  writeFileSync as writeFileSync42,
+  writeFileSync as writeFileSync43,
   writeSync as writeSync6
 } from "node:fs";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 import { randomBytes as randomBytes8 } from "node:crypto";
 import { execSync } from "node:child_process";
 
@@ -92726,12 +93105,12 @@ init_redact();
 var ISSUES_FILE = "issues.jsonl";
 var ISSUES_LOCK = "issues.lock";
 function readAll(stateDir) {
-  const path2 = join53(stateDir, ISSUES_FILE);
-  if (!existsSync48(path2))
+  const path2 = join54(stateDir, ISSUES_FILE);
+  if (!existsSync49(path2))
     return [];
   let raw;
   try {
-    raw = readFileSync52(path2, "utf-8");
+    raw = readFileSync53(path2, "utf-8");
   } catch {
     return [];
   }
@@ -92763,7 +93142,7 @@ function list2(stateDir, opts = {}) {
   });
 }
 function resolve11(stateDir, fingerprint, nowFn = Date.now) {
-  if (!existsSync48(join53(stateDir, ISSUES_FILE)))
+  if (!existsSync49(join54(stateDir, ISSUES_FILE)))
     return 0;
   return withLock(stateDir, () => {
     const all2 = readAll(stateDir);
@@ -92781,13 +93160,13 @@ function resolve11(stateDir, fingerprint, nowFn = Date.now) {
   });
 }
 function writeAll(stateDir, events) {
-  const path2 = join53(stateDir, ISSUES_FILE);
+  const path2 = join54(stateDir, ISSUES_FILE);
   sweepOrphanTmpFiles(stateDir);
   const tmp = `${path2}.tmp-${process.pid}-${randomBytes8(4).toString("hex")}`;
   const body = events.length === 0 ? "" : events.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
-  writeFileSync42(tmp, body, "utf-8");
+  writeFileSync43(tmp, body, "utf-8");
   renameSync21(tmp, path2);
 }
 var ORPHAN_TMP_TTL_MS = 60000;
@@ -92803,7 +93182,7 @@ function sweepOrphanTmpFiles(stateDir) {
   for (const entry of entries) {
     if (!entry.startsWith(TMP_PREFIX))
       continue;
-    const tmpPath2 = join53(stateDir, entry);
+    const tmpPath2 = join54(stateDir, entry);
     try {
       const stat = statSync15(tmpPath2);
       if (stat.mtimeMs < cutoff) {
@@ -92815,7 +93194,7 @@ function sweepOrphanTmpFiles(stateDir) {
 var LOCK_RETRY_MS = 25;
 var LOCK_TIMEOUT_MS = 1e4;
 function withLock(stateDir, fn) {
-  const lockPath = join53(stateDir, ISSUES_LOCK);
+  const lockPath = join54(stateDir, ISSUES_LOCK);
   const startedAt = Date.now();
   let fd = null;
   while (fd === null) {
@@ -92850,7 +93229,7 @@ function withLock(stateDir, fn) {
 function tryStealStaleLock(lockPath) {
   let pidStr;
   try {
-    pidStr = readFileSync52(lockPath, "utf-8").trim();
+    pidStr = readFileSync53(lockPath, "utf-8").trim();
   } catch {
     return true;
   }
@@ -92900,7 +93279,7 @@ function isIssueEvent(v) {
 // issues-watcher.ts
 var DEFAULT_POLL_INTERVAL_MS2 = 2000;
 function startIssuesWatcher(opts) {
-  const path2 = join54(opts.stateDir, ISSUES_FILE);
+  const path2 = join55(opts.stateDir, ISSUES_FILE);
   const log = opts.log ?? (() => {});
   const intervalMs = opts.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS2;
   const setIntervalFn = opts.setInterval ?? setInterval;
@@ -92948,7 +93327,7 @@ function startIssuesWatcher(opts) {
   };
 }
 function defaultSignatureProvider(path2) {
-  if (!existsSync49(path2))
+  if (!existsSync50(path2))
     return null;
   try {
     const stat = statSync16(path2);
@@ -93659,8 +94038,8 @@ function readBashCommand(inputPreview) {
 }
 
 // gateway/scoped-grant-store.ts
-import { readFileSync as readFileSync53, writeFileSync as writeFileSync43 } from "node:fs";
-import { join as join55 } from "node:path";
+import { readFileSync as readFileSync54, writeFileSync as writeFileSync44 } from "node:fs";
+import { join as join56 } from "node:path";
 
 // scoped-approval.ts
 var SCOPED_APPROVAL_DEFAULT_TTL_MS2 = 30 * 60 * 1000;
@@ -93702,11 +94081,11 @@ function scopedGrantPersistEnabled(env = process.env) {
   return env.SWITCHROOM_SCOPED_GRANT_PERSIST !== "0";
 }
 function createScopedGrantStore(stateDir, env = process.env) {
-  const filePath = join55(stateDir, "scoped-grants.json");
+  const filePath = join56(stateDir, "scoped-grants.json");
   const enabled7 = scopedGrantPersistEnabled(env);
   function read() {
     try {
-      const raw = readFileSync53(filePath, "utf-8");
+      const raw = readFileSync54(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return Array.isArray(parsed) ? parsed : [];
     } catch {
@@ -93724,7 +94103,7 @@ function createScopedGrantStore(stateDir, env = process.env) {
       if (!enabled7)
         return;
       try {
-        writeFileSync43(filePath, JSON.stringify(serializeScopedGrants(store2)), {
+        writeFileSync44(filePath, JSON.stringify(serializeScopedGrants(store2)), {
           encoding: "utf-8",
           mode: 384
         });
@@ -94075,8 +94454,8 @@ function isDiffPreApproved(agentName3, unifiedDiff, deps) {
 
 // credits-watch.ts
 init_card_format();
-import { readFileSync as readFileSync54, writeFileSync as writeFileSync44, existsSync as existsSync50, mkdirSync as mkdirSync43 } from "fs";
-import { join as join56 } from "path";
+import { readFileSync as readFileSync55, writeFileSync as writeFileSync45, existsSync as existsSync51, mkdirSync as mkdirSync43 } from "fs";
+import { join as join57 } from "path";
 var STATE_FILE = "credits-watch.json";
 var DEFAULT_CREDIT_FATAL_REASONS = new Set;
 var KNOWN_CREDIT_REASONS = [
@@ -94098,12 +94477,12 @@ function emptyCreditState() {
   return { lastNotifiedReason: null, lastNotifiedAt: 0 };
 }
 function readClaudeJsonOverage(claudeConfigDir) {
-  const path2 = join56(claudeConfigDir, ".claude.json");
-  if (!existsSync50(path2))
+  const path2 = join57(claudeConfigDir, ".claude.json");
+  if (!existsSync51(path2))
     return null;
   let raw;
   try {
-    raw = readFileSync54(path2, "utf-8");
+    raw = readFileSync55(path2, "utf-8");
   } catch {
     return null;
   }
@@ -94181,11 +94560,11 @@ function humanizeReason(reason) {
   }
 }
 function loadCreditState(stateDir) {
-  const path2 = join56(stateDir, STATE_FILE);
-  if (!existsSync50(path2))
+  const path2 = join57(stateDir, STATE_FILE);
+  if (!existsSync51(path2))
     return emptyCreditState();
   try {
-    const raw = readFileSync54(path2, "utf-8");
+    const raw = readFileSync55(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && (parsed.lastNotifiedReason === null || typeof parsed.lastNotifiedReason === "string") && typeof parsed.lastNotifiedAt === "number" && Number.isFinite(parsed.lastNotifiedAt)) {
       return {
@@ -94198,16 +94577,16 @@ function loadCreditState(stateDir) {
 }
 function saveCreditState(stateDir, state7) {
   mkdirSync43(stateDir, { recursive: true });
-  const path2 = join56(stateDir, STATE_FILE);
-  writeFileSync44(path2, JSON.stringify(state7, null, 2) + `
+  const path2 = join57(stateDir, STATE_FILE);
+  writeFileSync45(path2, JSON.stringify(state7, null, 2) + `
 `, { mode: 384 });
 }
 
 // quota-watch.ts
 init_auth_snapshot_format();
 init_card_format();
-import { readFileSync as readFileSync55, writeFileSync as writeFileSync45, existsSync as existsSync51, mkdirSync as mkdirSync44 } from "fs";
-import { join as join57 } from "path";
+import { readFileSync as readFileSync56, writeFileSync as writeFileSync46, existsSync as existsSync52, mkdirSync as mkdirSync44 } from "fs";
+import { join as join58 } from "path";
 var STATE_FILE2 = "quota-watch.json";
 function emptyQuotaWatchState() {
   return {};
@@ -94445,11 +94824,11 @@ function buildRecoveryMessage(agentName3, snap) {
 `);
 }
 function loadQuotaWatchState(stateDir) {
-  const path2 = join57(stateDir, STATE_FILE2);
-  if (!existsSync51(path2))
+  const path2 = join58(stateDir, STATE_FILE2);
+  if (!existsSync52(path2))
     return emptyQuotaWatchState();
   try {
-    const raw = readFileSync55(path2, "utf-8");
+    const raw = readFileSync56(path2, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return emptyQuotaWatchState();
@@ -94467,8 +94846,8 @@ function loadQuotaWatchState(stateDir) {
 }
 function saveQuotaWatchState(stateDir, state7) {
   mkdirSync44(stateDir, { recursive: true });
-  const path2 = join57(stateDir, STATE_FILE2);
-  writeFileSync45(path2, JSON.stringify(state7, null, 2) + `
+  const path2 = join58(stateDir, STATE_FILE2);
+  writeFileSync46(path2, JSON.stringify(state7, null, 2) + `
 `, { mode: 384 });
 }
 function patchQuotaWatchState(current, accountLabel, accountState) {
@@ -94516,27 +94895,27 @@ init_auth_snapshot_format2();
 // gateway/turn-active-marker.ts
 import {
   closeSync as closeSync11,
-  existsSync as existsSync52,
+  existsSync as existsSync53,
   mkdirSync as mkdirSync45,
   openSync as openSync11,
-  readFileSync as readFileSync56,
+  readFileSync as readFileSync57,
   statSync as statSync17,
   unlinkSync as unlinkSync24,
   utimesSync as utimesSync2,
-  writeFileSync as writeFileSync46
+  writeFileSync as writeFileSync47
 } from "node:fs";
-import { join as join58 } from "node:path";
+import { join as join59 } from "node:path";
 var TURN_ACTIVE_MARKER_FILE2 = "turn-active.json";
 var TURN_ACTIVE_HARD_TTL_MS2 = 10 * 60000;
 var TURN_ACTIVE_IDLE_SWEEP_MS = 60000;
 function removeTurnActiveMarker2(stateDir) {
   try {
-    unlinkSync24(join58(stateDir, TURN_ACTIVE_MARKER_FILE2));
+    unlinkSync24(join59(stateDir, TURN_ACTIVE_MARKER_FILE2));
   } catch {}
 }
 function sweepStaleTurnActiveMarker(stateDir, opts) {
-  const path2 = join58(stateDir, TURN_ACTIVE_MARKER_FILE2);
-  if (!existsSync52(path2))
+  const path2 = join59(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  if (!existsSync53(path2))
     return false;
   const now = opts.now ?? Date.now();
   try {
@@ -94548,7 +94927,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
       return false;
     let payload = null;
     try {
-      payload = readFileSync56(path2, "utf8");
+      payload = readFileSync57(path2, "utf8");
     } catch {}
     unlinkSync24(path2);
     if (opts.onRemove) {
@@ -94566,7 +94945,7 @@ function sweepStaleTurnActiveMarker(stateDir, opts) {
   }
 }
 function readTurnActiveMarkerAgeMs2(stateDir, now) {
-  const path2 = join58(stateDir, TURN_ACTIVE_MARKER_FILE2);
+  const path2 = join59(stateDir, TURN_ACTIVE_MARKER_FILE2);
   try {
     const st = statSync17(path2);
     return (now ?? Date.now()) - st.mtimeMs;
@@ -94579,19 +94958,19 @@ function effectiveTurnAgeMs(markerAgeMs, turnStartedAt, now) {
 }
 
 // gateway/gateway-heartbeat.ts
-import { mkdirSync as mkdirSync46, utimesSync as utimesSync3, writeFileSync as writeFileSync47 } from "node:fs";
-import { join as join59 } from "node:path";
+import { mkdirSync as mkdirSync46, utimesSync as utimesSync3, writeFileSync as writeFileSync48 } from "node:fs";
+import { join as join60 } from "node:path";
 var GATEWAY_HEARTBEAT_FILE = "gateway-heartbeat";
 var GATEWAY_HEARTBEAT_INTERVAL_MS = 15000;
 function touchGatewayHeartbeat(stateDir) {
-  const path2 = join59(stateDir, GATEWAY_HEARTBEAT_FILE);
+  const path2 = join60(stateDir, GATEWAY_HEARTBEAT_FILE);
   const now = new Date;
   try {
     utimesSync3(path2, now, now);
   } catch {
     try {
       mkdirSync46(stateDir, { recursive: true });
-      writeFileSync47(path2, `${Date.now()}
+      writeFileSync48(path2, `${Date.now()}
 `, { mode: 384 });
     } catch {}
   }
@@ -94758,10 +95137,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.19.17";
-var COMMIT_SHA = "75114a8a";
-var COMMIT_DATE = "2026-07-25T06:59:05+10:00";
-var LATEST_PR = 3525;
+var VERSION2 = "0.19.18";
+var COMMIT_SHA = "d3a10dee";
+var COMMIT_DATE = "2026-07-25T15:13:16+10:00";
+var LATEST_PR = 3595;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -94839,11 +95218,11 @@ init_peercred();
 import * as net5 from "node:net";
 import * as fs2 from "node:fs";
 import { homedir as homedir19 } from "node:os";
-import { join as join60 } from "node:path";
+import { join as join61 } from "node:path";
 var DEFAULT_TIMEOUT_MS4 = 2000;
 var UNLOCK_TIMEOUT_MS = 30000;
-var LEGACY_SOCKET_PATH2 = join60(homedir19(), ".switchroom", "vault-broker.sock");
-var OPERATOR_SOCKET_PATH2 = join60(homedir19(), ".switchroom", "broker-operator", "sock");
+var LEGACY_SOCKET_PATH2 = join61(homedir19(), ".switchroom", "vault-broker.sock");
+var OPERATOR_SOCKET_PATH2 = join61(homedir19(), ".switchroom", "broker-operator", "sock");
 function defaultBrokerSocketPath2() {
   if (fs2.existsSync(OPERATOR_SOCKET_PATH2))
     return OPERATOR_SOCKET_PATH2;
@@ -95726,7 +96105,7 @@ function resolveVaultApprovalPosture(broker) {
 
 // registry/turns-schema.ts
 import { chmodSync as chmodSync12, mkdirSync as mkdirSync47 } from "fs";
-import { join as join61 } from "path";
+import { join as join62 } from "path";
 var DatabaseClass3 = null;
 function loadDatabaseClass3() {
   if (DatabaseClass3 != null)
@@ -95798,9 +96177,9 @@ function applySchema(db3) {
 }
 function openTurnsDb(agentDir) {
   const Database = loadDatabaseClass3();
-  const dir = join61(agentDir, "telegram");
+  const dir = join62(agentDir, "telegram");
   mkdirSync47(dir, { recursive: true, mode: 448 });
-  const path2 = join61(dir, "registry.db");
+  const path2 = join62(dir, "registry.db");
   const db3 = new Database(path2, { create: true });
   applySchema(db3);
   try {
@@ -95889,7 +96268,7 @@ function reapStaleOpenTurns(db3, opts) {
   const stamp = db3.prepare(`
     UPDATE turns
     SET ended_at   = ?,
-        ended_via  = 'restart',
+        ended_via  = 'reaped_stale',
         updated_at = ?
     WHERE turn_key = ? AND ended_at IS NULL
   `);
@@ -95905,6 +96284,7 @@ function reapStaleOpenTurns(db3, opts) {
 }
 var INTERRUPTED_VIA2 = new Set([
   "restart",
+  "reaped_stale",
   "sigterm",
   "timeout",
   "unknown"
@@ -96131,7 +96511,7 @@ function selectResumeBuilder(endedVia, opts) {
   let kind;
   if (endedVia === "timeout")
     kind = "report";
-  else if (endedVia === "restart" || endedVia === "sigterm" || endedVia === "unknown")
+  else if (endedVia === "restart" || endedVia === "reaped_stale" || endedVia === "sigterm" || endedVia === "unknown")
     kind = "resume";
   else if (endedVia == null)
     kind = "resume";
@@ -96144,7 +96524,7 @@ function selectResumeBuilder(endedVia, opts) {
 }
 
 // gateway/bridge-dead-watchdog.ts
-import { readFileSync as readFileSync58, writeFileSync as writeFileSync48, renameSync as renameSync22, unlinkSync as unlinkSync25 } from "node:fs";
+import { readFileSync as readFileSync59, writeFileSync as writeFileSync49, renameSync as renameSync22, unlinkSync as unlinkSync25 } from "node:fs";
 
 // gateway/cron-session.ts
 var CRON_IDENTITY_SUFFIX2 = "-cron";
@@ -96177,7 +96557,7 @@ function readFreshCrashLogTail(path2, opts = {}) {
   const nowMs3 = opts.nowMs ?? Date.now();
   const freshWindowMs = opts.freshWindowMs ?? CRASH_LOG_FRESH_WINDOW_MS;
   const maxLines = opts.maxLines ?? CRASH_LOG_TAIL_LINES;
-  const readFile = opts.readFile ?? ((p) => readFileSync58(p, "utf8"));
+  const readFile = opts.readFile ?? ((p) => readFileSync59(p, "utf8"));
   let raw;
   try {
     raw = readFile(path2);
@@ -96198,13 +96578,13 @@ function readFreshCrashLogTail(path2, opts = {}) {
 }
 function writeBridgeDeadEscalationMarker(path2, marker) {
   const tmp = `${path2}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync48(tmp, JSON.stringify(marker), "utf8");
+  writeFileSync49(tmp, JSON.stringify(marker), "utf8");
   renameSync22(tmp, path2);
 }
 function consumeBridgeDeadEscalationMarker(path2, nowMs3 = Date.now(), maxAgeMs = ESCALATION_MARKER_MAX_AGE_MS) {
   let marker = null;
   try {
-    const parsed = JSON.parse(readFileSync58(path2, "utf8"));
+    const parsed = JSON.parse(readFileSync59(path2, "utf8"));
     if (typeof parsed.ts === "number" && Number.isFinite(parsed.ts) && typeof parsed.reason === "string") {
       const age = nowMs3 - parsed.ts;
       if (age >= 0 && age < maxAgeMs) {
@@ -96357,15 +96737,16 @@ function createBridgeDeadWatchdog(opts) {
 }
 
 // gateway/boot-probes.ts
-import { readFileSync as readFileSync59, readdirSync as readdirSync12, existsSync as existsSync54 } from "fs";
+import { readFileSync as readFileSync60, readdirSync as readdirSync12, existsSync as existsSync55 } from "fs";
 init_quota_cache();
+init_generation_stamp();
 init_quota_check();
 import { execFile as execFileCb2 } from "child_process";
 import { promisify as promisify2 } from "util";
 var execFile2 = promisify2(execFileCb2);
 var realProcFs2 = {
   readdir: (p) => readdirSync12(p),
-  readFile: (p) => readFileSync59(p, "utf-8")
+  readFile: (p) => readFileSync60(p, "utf-8")
 };
 function findAgentProcessInContainer2(fs3 = realProcFs2) {
   let entries;
@@ -96615,7 +96996,7 @@ if (isGatewayMain) {
     shutdownAnalytics();
   });
 }
-var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join62(homedir20(), ".claude", "channels", "telegram");
+var STATE_DIR = process.env.TELEGRAM_STATE_DIR ?? join63(homedir20(), ".claude", "channels", "telegram");
 var permCardStore = createPermissionCardStore(STATE_DIR);
 var BLOCKED_APPROVALS_DIR = process.env.SWITCHROOM_BLOCKED_APPROVALS_DIR ?? "/state/blocked-approvals";
 var AGENT_NAME = process.env.SWITCHROOM_AGENT_NAME ?? "agent";
@@ -96654,7 +97035,7 @@ function alwaysAllowDrainDeps() {
   return {
     readConfigText: () => {
       const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-      return readFileSync60(cfgPath, "utf8");
+      return readFileSync61(cfgPath, "utf8");
     },
     resolveAllowList: (_configText, agentName3) => {
       const cfg = loadConfig2();
@@ -96715,11 +97096,11 @@ function scheduleAlwaysAllowPersistDrain() {
   }, ALWAYS_ALLOW_DRAIN_INTERVAL_MS);
   timer3.unref?.();
 }
-var ACCESS_FILE = join62(STATE_DIR, "access.json");
-var APPROVED_DIR = join62(STATE_DIR, "approved");
-var ENV_FILE = join62(STATE_DIR, ".env");
-var INBOX_DIR = join62(STATE_DIR, "inbox");
-var PEOPLE_FILE = join62(STATE_DIR, "people.json");
+var ACCESS_FILE = join63(STATE_DIR, "access.json");
+var APPROVED_DIR = join63(STATE_DIR, "approved");
+var ENV_FILE = join63(STATE_DIR, ".env");
+var INBOX_DIR = join63(STATE_DIR, "inbox");
+var PEOPLE_FILE = join63(STATE_DIR, "people.json");
 function triggerSelfRestart(targetAgent, reason, delayMs = 300) {
   const isDocker = process.env.SWITCHROOM_RUNTIME === "docker";
   const selfAgent = process.env.SWITCHROOM_AGENT_NAME;
@@ -96774,7 +97155,7 @@ function getClaudeCliVersion() {
 }
 function formatBootVersion() {
   return composeBootVersionString({
-    version: VERSION,
+    version: VERSION2,
     commitSha: COMMIT_SHA,
     commitDate: COMMIT_DATE,
     latestPr: LATEST_PR,
@@ -96784,7 +97165,7 @@ function formatBootVersion() {
 }
 try {
   chmodSync14(ENV_FILE, 384);
-  for (const line of readFileSync60(ENV_FILE, "utf8").split(`
+  for (const line of readFileSync61(ENV_FILE, "utf8").split(`
 `)) {
     const m = line.match(/^(\w+)=(.*)$/);
     if (m && process.env[m[1]] === undefined)
@@ -96805,7 +97186,7 @@ var bot;
 var lastGetUpdatesHeartbeatMs = Date.now();
 var GRAMMY_VERSION = (() => {
   try {
-    const raw = readFileSync60(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
+    const raw = readFileSync61(new URL("../../node_modules/grammy/package.json", import.meta.url), "utf8");
     return JSON.parse(raw).version ?? "unknown";
   } catch {
     return "unknown";
@@ -96868,7 +97249,7 @@ function assertSendable(f) {
   } catch {
     throw new Error(`refusing to send file \u2014 cannot resolve real path: ${f}`);
   }
-  const inbox = join62(stateReal, "inbox");
+  const inbox = join63(stateReal, "inbox");
   if (real.startsWith(stateReal + sep4) && !real.startsWith(inbox + sep4)) {
     throw new Error(`refusing to send channel state: ${f}`);
   }
@@ -96887,7 +97268,7 @@ function assertSendable(f) {
 }
 function readAccessFile() {
   try {
-    const raw = readFileSync60(ACCESS_FILE, "utf8");
+    const raw = readFileSync61(ACCESS_FILE, "utf8");
     const parsed = JSON.parse(raw);
     const allowFrom = validateStringArray("allowFrom", parsed.allowFrom ?? []);
     const groups = {};
@@ -96949,7 +97330,7 @@ function loadAccess() {
 }
 function readPeopleFile() {
   try {
-    const raw = readFileSync60(PEOPLE_FILE, "utf8");
+    const raw = readFileSync61(PEOPLE_FILE, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.entries))
       return [];
@@ -96973,7 +97354,7 @@ function saveAccess(a) {
     return;
   mkdirSync49(STATE_DIR, { recursive: true, mode: 448 });
   const tmp = ACCESS_FILE + ".tmp";
-  writeFileSync50(tmp, JSON.stringify(a, null, 2) + `
+  writeFileSync51(tmp, JSON.stringify(a, null, 2) + `
 `, { mode: 384 });
   renameSync23(tmp, ACCESS_FILE);
 }
@@ -96993,7 +97374,7 @@ var HISTORY_ENABLED = HISTORY_ACCESS.historyEnabled !== false;
 if (isGatewayMain && HISTORY_ENABLED) {
   try {
     initHistory(STATE_DIR, HISTORY_ACCESS.historyRetentionDays ?? 30);
-    process.stderr.write(`telegram gateway: history capture enabled at ${join62(STATE_DIR, "history.db")}
+    process.stderr.write(`telegram gateway: history capture enabled at ${join63(STATE_DIR, "history.db")}
 `);
   } catch (err) {
     process.stderr.write(`telegram gateway: history init failed (${err.message}) \u2014 capture disabled
@@ -97012,12 +97393,12 @@ if (isGatewayMain)
     let markerTurnKey = null;
     let markerAgeMs = null;
     try {
-      const markerPath = join62(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
-      if (existsSync56(markerPath)) {
+      const markerPath = join63(STATE_DIR, TURN_ACTIVE_MARKER_FILE2);
+      if (existsSync57(markerPath)) {
         const st = statSync20(markerPath);
         markerAgeMs = Date.now() - st.mtimeMs;
         try {
-          const payload = JSON.parse(readFileSync60(markerPath, "utf8"));
+          const payload = JSON.parse(readFileSync61(markerPath, "utf8"));
           if (typeof payload.turnKey === "string" && payload.turnKey.length > 0) {
             markerTurnKey = payload.turnKey;
           }
@@ -97037,10 +97418,10 @@ if (isGatewayMain)
       process.stderr.write(`telegram gateway: turn-registry boot-reaper stamped ${reaped} orphaned turn(s)` + `${timeoutTurnKey ? ` (turnKey=${timeoutTurnKey} as 'timeout', markerAgeMs=${markerAgeMs})` : " as 'restart'"}
 `);
     } else {
-      process.stderr.write(`telegram gateway: turn-registry initialized at ${join62(agentDir, "telegram", "registry.db")}
+      process.stderr.write(`telegram gateway: turn-registry initialized at ${join63(agentDir, "telegram", "registry.db")}
 `);
     }
-    const bridgeDeadMarker = consumeBridgeDeadEscalationMarker(join62(STATE_DIR, "bridge-dead-escalation.json"));
+    const bridgeDeadMarker = consumeBridgeDeadEscalationMarker(join63(STATE_DIR, "bridge-dead-escalation.json"));
     if (bridgeDeadMarker != null) {
       bridgeDeadPriorStreak = bridgeDeadMarker.count ?? 1;
       process.stderr.write(`telegram gateway: boot: prior restart was a bridge-dead escalation (reason=${bridgeDeadMarker.reason}` + `, consecutive=${bridgeDeadPriorStreak}` + `${bridgeDeadMarker.crashTail ? `, crashTail=${bridgeDeadMarker.crashTail}` : ""})
@@ -97053,7 +97434,7 @@ if (isGatewayMain)
     const pending2 = findLatestTurnIfInterrupted(turnsDb);
     const selfAgent = process.env.SWITCHROOM_AGENT_NAME ?? "";
     if (pending2 != null && selfAgent) {
-      const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join62(STATE_DIR, "clean-shutdown.json");
+      const bootResumeMarkerPath = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join63(STATE_DIR, "clean-shutdown.json");
       const bootResumeCleanMarker = readCleanShutdownMarker(bootResumeMarkerPath);
       const bootResumeForceAlways = process.env.SWITCHROOM_BOOT_RESUME_ALWAYS === "1";
       const bootResumeMode = parseBootResumeMode(process.env.SWITCHROOM_BOOT_RESUME);
@@ -97166,7 +97547,7 @@ if (isGatewayMain)
 `);
       }
     }
-    const pendingEnvPath = join62(agentDir, ".pending-turn.env");
+    const pendingEnvPath = join63(agentDir, ".pending-turn.env");
     try {
       if (pending2 != null) {
         const lines = [
@@ -97180,13 +97561,13 @@ if (isGatewayMain)
           pending2.interrupt_reason != null ? `SWITCHROOM_PENDING_INTERRUPT_REASON=${pending2.interrupt_reason}` : `SWITCHROOM_PENDING_INTERRUPT_REASON=`
         ];
         const pendingEnvTmp = `${pendingEnvPath}.tmp-${process.pid}`;
-        writeFileSync50(pendingEnvTmp, lines.join(`
+        writeFileSync51(pendingEnvTmp, lines.join(`
 `) + `
 `, { mode: 384 });
         renameSync23(pendingEnvTmp, pendingEnvPath);
         process.stderr.write(`telegram gateway: pending-turn env written to ${pendingEnvPath} turnKey=${pending2.turn_key} endedVia=${pending2.ended_via ?? "open"}
 `);
-      } else if (existsSync56(pendingEnvPath)) {
+      } else if (existsSync57(pendingEnvPath)) {
         rmSync6(pendingEnvPath, { force: true });
         process.stderr.write(`telegram gateway: pending-turn env cleared (clean previous shutdown)
 `);
@@ -97294,7 +97675,7 @@ function checkApprovals() {
     return;
   }
   for (const senderId of files) {
-    const file = join62(APPROVED_DIR, senderId);
+    const file = join63(APPROVED_DIR, senderId);
     bot.api.sendMessage(senderId, "Paired! Say hi to Claude.").then(() => rmSync6(file, { force: true }), (err) => {
       process.stderr.write(`telegram gateway: failed to send approval confirm: ${err}
 `);
@@ -97467,12 +97848,12 @@ function noteAgentOutputAt(key, ts) {
       lastAgentOutputAt.delete(oldest);
   }
 }
-var OBLIGATION_STORE_PATH = join62(STATE_DIR, "obligations.json");
+var OBLIGATION_STORE_PATH = join63(STATE_DIR, "obligations.json");
 var obligationStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync50(p, d),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync51(p, d),
   renameSync: (a, b) => renameSync23(a, b),
-  existsSync: (p) => existsSync56(p)
+  existsSync: (p) => existsSync57(p)
 };
 var obligationLedger = new ObligationLedger(OBLIGATION_REPRESENT_MAX, {
   onChange: STATIC || !OBLIGATION_LEDGER_ENABLED ? undefined : (snapshot) => persistObligations(OBLIGATION_STORE_PATH, obligationStoreFs, snapshot)
@@ -98879,7 +99260,7 @@ function sweepStaleAlwaysAllowCorrelations(now = Date.now()) {
 var MENTAL_MODEL_CORRELATION_TTL_MS = 720000;
 var pendingMentalModelCorrelations = createSweepableStore((entry, now) => now - entry.createdAt > MENTAL_MODEL_CORRELATION_TTL_MS);
 function mentalModelCorrelationKey(agentName3, unifiedDiff) {
-  return `${agentName3}::${createHash6("sha256").update(unifiedDiff).digest("hex")}`;
+  return `${agentName3}::${createHash7("sha256").update(unifiedDiff).digest("hex")}`;
 }
 function sweepStaleMentalModelCorrelations(now = Date.now()) {
   pendingMentalModelCorrelations.sweep(now);
@@ -99815,28 +100196,28 @@ var statusPinState = new Map;
 var statusPinChatIds = new Map;
 var statusPinPinnedAt = new Map;
 var statusPinRightsCache = new PinRightsCache2;
-var STATUS_PIN_STORE_PATH = join62(STATE_DIR, "status-pins.json");
+var STATUS_PIN_STORE_PATH = join63(STATE_DIR, "status-pins.json");
 var statusPinStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync50(p, d),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync51(p, d),
   renameSync: (a, b) => renameSync23(a, b),
-  existsSync: (p) => existsSync56(p)
+  existsSync: (p) => existsSync57(p)
 };
 var statusPinPersistEnabled = !STATIC && PIN_STATUS_WHILE_WORKING;
-var ACTIVITY_CARD_STORE_PATH = join62(STATE_DIR, "activity-cards-pending.json");
+var ACTIVITY_CARD_STORE_PATH = join63(STATE_DIR, "activity-cards-pending.json");
 var activityCardStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync50(p, d),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync51(p, d),
   renameSync: (a, b) => renameSync23(a, b),
-  existsSync: (p) => existsSync56(p)
+  existsSync: (p) => existsSync57(p)
 };
 var activityCardPersistEnabled = !STATIC;
-var QUEUED_CARD_STORE_PATH = join62(STATE_DIR, "queued-cards-pending.json");
+var QUEUED_CARD_STORE_PATH = join63(STATE_DIR, "queued-cards-pending.json");
 var queuedCardStoreFs = {
-  readFileSync: (p) => readFileSync60(p, "utf8"),
-  writeFileSync: (p, d) => writeFileSync50(p, d),
+  readFileSync: (p) => readFileSync61(p, "utf8"),
+  writeFileSync: (p, d) => writeFileSync51(p, d),
   renameSync: (a, b) => renameSync23(a, b),
-  existsSync: (p) => existsSync56(p)
+  existsSync: (p) => existsSync57(p)
 };
 var queuedCardPersistEnabled = !STATIC;
 function persistQueuedCard(key, chatId, threadId, messageId) {
@@ -99961,7 +100342,7 @@ async function runMidSessionCardReaper() {
         now
       });
       if (reaped > 0) {
-        process.stderr.write(`telegram gateway: mid-session reaper stamped ${reaped} orphaned turn(s) as 'restart' (${reapedTurnKeys.join(",")})
+        process.stderr.write(`telegram gateway: mid-session reaper stamped ${reaped} orphaned turn(s) as 'reaped_stale' (${reapedTurnKeys.join(",")})
 `);
       }
     } catch (err) {
@@ -100209,12 +100590,12 @@ var getPinnedProgressCardMessageId = null;
 var completeProgressCardTurn = null;
 var subagentWatcher = null;
 var workerActivityFeed = null;
-var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join62(STATE_DIR, "gateway.sock");
+var SOCKET_PATH = process.env.SWITCHROOM_GATEWAY_SOCKET ?? join63(STATE_DIR, "gateway.sock");
 if (isGatewayMain)
   mkdirSync49(STATE_DIR, { recursive: true, mode: 448 });
-var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join62(STATE_DIR, "gateway.pid.json");
-var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join62(STATE_DIR, "gateway-session.json");
-var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join62(STATE_DIR, "clean-shutdown.json");
+var GATEWAY_PID_PATH = process.env.SWITCHROOM_GATEWAY_PID_FILE ?? join63(STATE_DIR, "gateway.pid.json");
+var GATEWAY_SESSION_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_SESSION_MARKER ?? join63(STATE_DIR, "gateway-session.json");
+var GATEWAY_CLEAN_SHUTDOWN_MARKER_PATH = process.env.SWITCHROOM_GATEWAY_CLEAN_SHUTDOWN_MARKER ?? join63(STATE_DIR, "clean-shutdown.json");
 var GATEWAY_STARTED_AT_MS = Date.now();
 var BOOT_CARD_ENABLED = process.env.SWITCHROOM_BOOT_CARD !== "false";
 var activeBootCard = null;
@@ -100243,7 +100624,7 @@ function ensureIssuesCard(chatId, threadId) {
     bot: botApi,
     log: (msg) => process.stderr.write(`telegram gateway: ${msg}
 `),
-    persistPath: join62(stateDir, "issues-card.json")
+    persistPath: join63(stateDir, "issues-card.json")
   });
   activeIssuesWatcher = startIssuesWatcher({
     stateDir,
@@ -100335,10 +100716,12 @@ function gatewayLivenessWiringDeps() {
     SILENCE_FALLBACK_HARD_MS,
     SILENCE_FLOOR_MS,
     SILENCE_DEFER_INFLIGHT_TOOLS,
+    isObligationOpenForTurn: (originTurnId) => OBLIGATION_LEDGER_ENABLED && originTurnId != null && obligationLedger.isOpen(originTurnId),
     TURN_PREVIEW_MAX,
     STATE_DIR,
     isLegitimatelyWorking,
     getCurrentTurn: () => currentTurn,
+    getCurrentTurnForKey: (key) => currentTurnMap.get(key),
     getInFlightUpdate: () => inFlightUpdate,
     getTurnsDb: () => turnsDb,
     getInboundSpool: () => inboundSpool,
@@ -100441,13 +100824,13 @@ if (isGatewayMain)
 var inboundSpool;
 if (isGatewayMain)
   inboundSpool = STATIC ? undefined : createInboundSpool({
-    path: join62(STATE_DIR, "inbound-spool.jsonl"),
+    path: join63(STATE_DIR, "inbound-spool.jsonl"),
     fs: {
       appendFileSync: (p, d) => appendFileSync9(p, d),
-      readFileSync: (p) => readFileSync60(p, "utf8"),
-      writeFileSync: (p, d) => writeFileSync50(p, d),
+      readFileSync: (p) => readFileSync61(p, "utf8"),
+      writeFileSync: (p, d) => writeFileSync51(p, d),
       renameSync: (a, b) => renameSync23(a, b),
-      existsSync: (p) => existsSync56(p),
+      existsSync: (p) => existsSync57(p),
       statSizeSync: (p) => statSync20(p).size
     },
     onDegraded: (info) => {
@@ -100509,13 +100892,13 @@ async function maybeRedeliverUndeliveredAnswer() {
   let transcriptText;
   try {
     const projectsDir = getProjectsDirForCwd();
-    const path2 = join62(projectsDir, `${sessionId}.jsonl`);
-    if (!existsSync56(path2)) {
+    const path2 = join63(projectsDir, `${sessionId}.jsonl`);
+    if (!existsSync57(path2)) {
       process.stderr.write(`telegram gateway: crash-redelivery \u2014 transcript not found for turnKey=${turn.turn_key} session=${sessionId} (${path2}); skipping
 `);
       return;
     }
-    transcriptText = readFileSync60(path2, "utf8");
+    transcriptText = readFileSync61(path2, "utf8");
   } catch (err) {
     process.stderr.write(`telegram gateway: crash-redelivery \u2014 transcript read failed turnKey=${turn.turn_key}: ${err.message}
 `);
@@ -100674,8 +101057,8 @@ var bridgeDeadWatchdog = createBridgeDeadWatchdog({
   isSessionAlive: () => findAgentProcessInContainer2()?.comm === "claude",
   isShuttingDown: () => shuttingDown,
   escalate: (reason) => triggerSelfRestart(process.env.SWITCHROOM_AGENT_NAME ?? "", reason, 1500),
-  crashLogPath: join62(STATE_DIR, "bridge-crash.log"),
-  markerPath: join62(STATE_DIR, "bridge-dead-escalation.json"),
+  crashLogPath: join63(STATE_DIR, "bridge-crash.log"),
+  markerPath: join63(STATE_DIR, "bridge-dead-escalation.json"),
   log: (line) => process.stderr.write(`${line}
 `),
   priorStreak: bridgeDeadPriorStreak,
@@ -100781,8 +101164,8 @@ if (isGatewayMain)
               probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
               tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
               dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-              configSnapshotPath: join62(resolvedAgentDirForCard, ".config-snapshot.json"),
-              bootCardStatePath: join62(resolvedAgentDirForCard, ".boot-card-msgid.json"),
+              configSnapshotPath: join63(resolvedAgentDirForCard, ".config-snapshot.json"),
+              bootCardStatePath: join63(resolvedAgentDirForCard, ".boot-card-msgid.json"),
               floodStatePath: FLOOD_STATE_PATH,
               ...updateOutcomeLine ? { updateOutcomeLine } : {}
             }, ackMsgId).then((handle) => {
@@ -100834,6 +101217,7 @@ if (isGatewayMain)
           turnTypingLoop.stopAll();
           typingEmitter.reset();
         },
+        onTurnKeyEnded: (key) => endTurn(key),
         onDanglingTurnsSwept: () => {
           if (currentTurn != null) {
             process.stderr.write(`telegram gateway: disconnect-flush nulled currentTurn (bridge died with turn in flight)
@@ -101449,7 +101833,7 @@ if (isGatewayMain)
       const receiverUid = receiverUidRaw ? Number(receiverUidRaw) : NaN;
       if (Number.isInteger(receiverUid))
         allowedUids.push(receiverUid);
-      const socketPath = join62(STATE_DIR, "webhook.sock");
+      const socketPath = join63(STATE_DIR, "webhook.sock");
       const webhookInject = (agentName3, inbound) => {
         const msg = inbound;
         const delivered = ipcServer.sendToAgent(agentName3, msg);
@@ -101677,9 +102061,9 @@ function redactOutboundText(text5, site) {
 var VOICE_OUT_DEFAULT_CHUNK_CHARS = 600;
 var VOICE_OUT_HARD_CHUNK_CAP = 4096;
 var voiceOnDemandCache = new VoiceOnDemandCache({
-  persistPath: join62(STATE_DIR, "voice-ondemand.json")
+  persistPath: join63(STATE_DIR, "voice-ondemand.json")
 });
-var VOICE_CACHE_DIR = join62(STATE_DIR, "voice-cache");
+var VOICE_CACHE_DIR = join63(STATE_DIR, "voice-cache");
 var voicePreSynthQueue = new PreSynthQueue({
   runJob: async (job) => {
     const sidecarToken = await materializeSidecarToken2();
@@ -102081,11 +102465,11 @@ async function executeSendGif(rawArgs) {
   };
 }
 async function publishToTelegraph(text5, shortName, authorName) {
-  const accountPath = join62(STATE_DIR, "telegraph-account.json");
+  const accountPath = join63(STATE_DIR, "telegraph-account.json");
   let account = null;
   try {
-    if (existsSync56(accountPath)) {
-      const raw = readFileSync60(accountPath, "utf-8");
+    if (existsSync57(accountPath)) {
+      const raw = readFileSync61(accountPath, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed.shortName && parsed.accessToken) {
         account = parsed;
@@ -102105,7 +102489,7 @@ async function publishToTelegraph(text5, shortName, authorName) {
     account = created.value;
     try {
       mkdirSync49(STATE_DIR, { recursive: true, mode: 448 });
-      writeFileSync50(accountPath, JSON.stringify(account, null, 2), { mode: 384 });
+      writeFileSync51(accountPath, JSON.stringify(account, null, 2), { mode: 384 });
     } catch (err) {
       process.stderr.write(`telegram gateway: telegraph cache write failed: ${err.message}
 `);
@@ -102221,7 +102605,7 @@ _The secret was NOT saved. The agent can re-request with \`request_secret\`._`,
 }
 function readLiveSwitchroomConfigText() {
   const cfgPath = process.env.SWITCHROOM_CONFIG ?? findConfigFile2();
-  return readFileSync60(cfgPath, "utf8");
+  return readFileSync61(cfgPath, "utf8");
 }
 async function executeReact(args) {
   if (!args.chat_id)
@@ -102262,7 +102646,7 @@ async function executeDownloadAttachment(args) {
   });
   mkdirSync49(INBOX_DIR, { recursive: true, mode: 448 });
   assertInsideInbox2(INBOX_DIR, dlPath);
-  writeFileSync50(dlPath, buf, { mode: 384 });
+  writeFileSync51(dlPath, buf, { mode: 384 });
   return { content: [{ type: "text", text: dlPath }] };
 }
 async function executeEditMessage(args) {
@@ -102645,6 +103029,12 @@ var handbackPreturnSignal = createHandbackPreturnSignal({
   isTurnSettled: (key) => {
     const live = currentTurnMap.get(key);
     return live != null && (live.finalAnswerDelivered || live.endedAt != null);
+  },
+  hasLiveTurn: (key) => {
+    const live = currentTurnMap.get(key);
+    if (live == null || live.endedAt != null)
+      return false;
+    return statusKey(live.sessionChatId, live.sessionThreadId) === key;
   }
 });
 var memoryLegibilityStager = new MemoryLegibilityStager;
@@ -103622,14 +104012,14 @@ function restartMarkerPath() {
   const agentDir = resolveAgentDirFromEnv();
   if (!agentDir)
     return null;
-  return join62(agentDir, "restart-pending.json");
+  return join63(agentDir, "restart-pending.json");
 }
 function writeRestartMarker(marker) {
   const p = restartMarkerPath();
   if (!p)
     return;
   try {
-    writeFileSync50(p, JSON.stringify(marker));
+    writeFileSync51(p, JSON.stringify(marker));
     lastPlannedRestartAt = Date.now();
     process.stderr.write(`telegram gateway: restart-marker: write chat_id=${marker.chat_id} thread_id=${marker.thread_id ?? "-"} ack=${marker.ack_message_id ?? "-"} path=${p}
 `);
@@ -103648,7 +104038,7 @@ function readRestartMarker() {
   if (!p)
     return null;
   try {
-    return JSON.parse(readFileSync60(p, "utf8"));
+    return JSON.parse(readFileSync61(p, "utf8"));
   } catch {
     return null;
   }
@@ -103797,7 +104187,7 @@ var _dockerReachable;
 function isDockerReachable() {
   if (_dockerReachable !== undefined)
     return _dockerReachable;
-  if (!existsSync56("/var/run/docker.sock")) {
+  if (!existsSync57("/var/run/docker.sock")) {
     _dockerReachable = false;
     return _dockerReachable;
   }
@@ -103814,12 +104204,12 @@ function _resetDockerReachableCache() {
 }
 function spawnSwitchroomDetached(args, onFailure) {
   const fullArgs = SWITCHROOM_CONFIG ? ["--config", SWITCHROOM_CONFIG, ...args] : args;
-  const logPath = join62(STATE_DIR, "detached-spawn.log");
+  const logPath = join63(STATE_DIR, "detached-spawn.log");
   let outFd = null;
   try {
     mkdirSync49(STATE_DIR, { recursive: true });
     outFd = openSync12(logPath, "a");
-    writeFileSync50(logPath, `
+    writeFileSync51(logPath, `
 [${new Date().toISOString()}] spawn ${SWITCHROOM_CLI} ${fullArgs.join(" ")}
 `, { flag: "a" });
   } catch {}
@@ -103845,7 +104235,7 @@ function spawnSwitchroomDetached(args, onFailure) {
         return;
       let tail = "";
       try {
-        const full = readFileSync60(logPath, "utf8");
+        const full = readFileSync61(logPath, "utf8");
         tail = full.split(`
 `).slice(-30).join(`
 `).trim();
@@ -104107,10 +104497,10 @@ ${preBlock(formatSwitchroomOutput(detail))}`, { html: true });
 }
 function readRecentDenialsForAgent(agentName3, windowMs, limit) {
   try {
-    const auditPath = join62(homedir20(), ".switchroom", "vault-audit.log");
-    if (!existsSync56(auditPath))
+    const auditPath = join63(homedir20(), ".switchroom", "vault-audit.log");
+    if (!existsSync57(auditPath))
       return [];
-    const raw = readFileSync60(auditPath, "utf8");
+    const raw = readFileSync61(auditPath, "utf8");
     return recentDenialsFromAuditLog(raw, { agentName: agentName3, windowMs, limit });
   } catch {
     return [];
@@ -104161,7 +104551,7 @@ async function buildAgentMetadata(agentName3) {
   try {
     const agentDir = resolveAgentDirFromEnv();
     if (agentDir) {
-      const raw = readFileSync60(join62(agentDir, ".claude", ".claude.json"), "utf8");
+      const raw = readFileSync61(join63(agentDir, ".claude", ".claude.json"), "utf8");
       claudeJson = JSON.parse(raw);
     }
   } catch {}
@@ -104290,7 +104680,7 @@ function buildModelDeps(restartCtx) {
       try {
         const agentDir = resolveAgentDirFromEnv();
         if (agentDir) {
-          const local = await fetchQuota2({ claudeConfigDir: join62(agentDir, ".claude") });
+          const local = await fetchQuota2({ claudeConfigDir: join63(agentDir, ".claude") });
           if (local.ok)
             return formatQuotaLine2(local.data);
         }
@@ -104536,9 +104926,9 @@ function effortMenuReplyMarkup(reply) {
 function flushAgentHandoff(agentDir) {
   let removed = 0;
   for (const fname of [".handoff.md", ".handoff-topic"]) {
-    const p = join62(agentDir, fname);
+    const p = join63(agentDir, fname);
     try {
-      if (existsSync56(p)) {
+      if (existsSync57(p)) {
         unlinkSync27(p);
         removed++;
       }
@@ -104594,7 +104984,7 @@ async function handleNewCommand(ctx) {
   writeRestartMarker({ chat_id: chatId, thread_id: threadId ?? null, ack_message_id: ackId, ts: Date.now() });
   if (agentDir != null) {
     try {
-      writeFileSync50(join62(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
+      writeFileSync51(join63(agentDir, ".force-fresh-session"), `${kind} at ${new Date().toISOString()}
 `, "utf8");
     } catch (err) {
       process.stderr.write(`telegram gateway: failed to write force-fresh marker: ${err}
@@ -104707,16 +105097,16 @@ function buildFolderPickerDeps() {
   };
 }
 var lockoutOps = {
-  readFileSync: (p, enc) => readFileSync60(p, enc),
-  writeFileSync: (p, data, opts) => writeFileSync50(p, data, opts),
-  existsSync: (p) => existsSync56(p),
+  readFileSync: (p, enc) => readFileSync61(p, enc),
+  writeFileSync: (p, data, opts) => writeFileSync51(p, data, opts),
+  existsSync: (p) => existsSync57(p),
   mkdirSync: (p, opts) => mkdirSync49(p, opts),
-  joinPath: (...parts) => join62(...parts)
+  joinPath: (...parts) => join63(...parts)
 };
 var FLEET_FALLBACK_DEDUP_MS = 30000;
 function isAuthBrokerSocketReachable() {
   try {
-    return existsSync56(resolveAuthBrokerSocketPath2());
+    return existsSync57(resolveAuthBrokerSocketPath2());
   } catch {
     return false;
   }
@@ -104971,7 +105361,7 @@ async function runCreditWatch() {
   if (!agentDir)
     return;
   const agentName3 = getMyAgentName();
-  const claudeConfigDir = join62(agentDir, ".claude");
+  const claudeConfigDir = join63(agentDir, ".claude");
   const stateDir = STATE_DIR;
   const reason = readClaudeJsonOverage(claudeConfigDir);
   const prev = loadCreditState(stateDir);
@@ -106727,7 +107117,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
       await switchroomReply(ctx, "**/usage:** cannot resolve agent dir.", { html: true });
       return;
     }
-    const result = await fetchQuota2({ claudeConfigDir: join62(agentDir, ".claude") });
+    const result = await fetchQuota2({ claudeConfigDir: join63(agentDir, ".claude") });
     if (!result.ok) {
       await switchroomReply(ctx, `**/usage:** ${escapeHtmlForTg2(result.reason)}`, { html: true });
       return;
@@ -107113,7 +107503,7 @@ ${interimLabel}` : interimLabel
           const unifiedDiff = (() => {
             try {
               const cfgPath = process.env.SWITCHROOM_CONFIG ?? SWITCHROOM_CONFIG ?? findConfigFile2();
-              const raw = readFileSync60(cfgPath, "utf8");
+              const raw = readFileSync61(cfgPath, "utf8");
               return synthesizeAllowRuleDiff({ agentName: agentName3, rule: chosen.rule, configText: raw });
             } catch (err) {
               process.stderr.write(`telegram gateway: always-allow diff synth failed: ${err.message}
@@ -107970,7 +108360,7 @@ async function startGateway() {
                         return;
                       }
                     })();
-                    const resolvedAgentDirForBootCard = agentDir ?? join62(homedir20(), ".switchroom", "agents", agentSlug);
+                    const resolvedAgentDirForBootCard = agentDir ?? join63(homedir20(), ".switchroom", "agents", agentSlug);
                     const handle = await startBootCard(chatId, threadId, botApiForCard, {
                       agentName: agentDisplayName,
                       agentSlug,
@@ -107984,8 +108374,8 @@ async function startGateway() {
                       probeQuotaViaBroker: (t) => probeQuotaForBootCard(agentSlug, t),
                       tmuxSupervisor: process.env.SWITCHROOM_TMUX_SUPERVISOR === "1",
                       dockerMode: process.env.SWITCHROOM_RUNTIME === "docker",
-                      configSnapshotPath: join62(resolvedAgentDirForBootCard, ".config-snapshot.json"),
-                      bootCardStatePath: join62(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
+                      configSnapshotPath: join63(resolvedAgentDirForBootCard, ".config-snapshot.json"),
+                      bootCardStatePath: join63(resolvedAgentDirForBootCard, ".boot-card-msgid.json"),
                       floodStatePath: FLOOD_STATE_PATH,
                       ...updateOutcomeLine ? { updateOutcomeLine } : {}
                     }, ackMsgId);
@@ -108016,10 +108406,10 @@ async function startGateway() {
         try {
           const smAgentDir = resolveAgentDirFromEnv();
           if (smAgentDir) {
-            const activePath = join62(smAgentDir, ".active-session-model");
-            if (existsSync56(activePath)) {
+            const activePath = join63(smAgentDir, ".active-session-model");
+            if (existsSync57(activePath)) {
               try {
-                const launched = readFileSync60(activePath, "utf8").trim();
+                const launched = readFileSync61(activePath, "utf8").trim();
                 const configured = (() => {
                   const d = switchroomExecJson(["agent", "list"]);
                   const raw = d?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
@@ -108052,24 +108442,24 @@ async function startGateway() {
                   deliverModelSwitchBootNotice({
                     ...modelBootCardDeps,
                     confirmation,
-                    hasSessionModelAlert: existsSync56(join62(smAgentDir, ".session-model-alert"))
+                    hasSessionModelAlert: existsSync57(join63(smAgentDir, ".session-model-alert"))
                   });
                 }
               } catch {}
             }
-            const activeEffortPath = join62(smAgentDir, ".active-session-effort");
-            if (existsSync56(activeEffortPath)) {
+            const activeEffortPath = join63(smAgentDir, ".active-session-effort");
+            if (existsSync57(activeEffortPath)) {
               try {
-                const launchedEffort = readFileSync60(activeEffortPath, "utf8").trim();
+                const launchedEffort = readFileSync61(activeEffortPath, "utf8").trim();
                 const configuredEffort = getConfiguredEffortForPersist();
                 sessionEffortOverride = launchedEffort.length > 0 && launchedEffort !== configuredEffort ? launchedEffort : null;
               } catch {}
             }
-            const alertPath = join62(smAgentDir, ".session-model-alert");
-            if (existsSync56(alertPath)) {
+            const alertPath = join63(smAgentDir, ".session-model-alert");
+            if (existsSync57(alertPath)) {
               let alertText = null;
               try {
-                alertText = readFileSync60(alertPath, "utf8").trim();
+                alertText = readFileSync61(alertPath, "utf8").trim();
               } catch {
                 alertText = null;
               }