switchroom 0.19.25 → 0.19.26

package/telegram-plugin/dist/gateway/gateway.js

@@ -21496,13 +21496,15 @@ var init_schema = __esm(() => {
     recall: exports_external.object({
       max_memories: exports_external.number().int().min(0).optional().describe("Cap on the number of memories injected into the prompt by " + "auto-recall, regardless of token budget. Plugin default is 12. " + "0 disables the cap (all memories Hindsight returns are injected)."),
       cache_ttl_secs: exports_external.number().int().min(0).optional().describe("Per-session recall cache TTL in seconds. When > 0, identical " + "(prompt, bank) within the same session reuse the cached recall " + "result instead of round-tripping to Hindsight. 0 disables. " + "Default is 600 (10 min) for switchroom-managed agents."),
+      hook_timeout_seconds: exports_external.number().int().min(1).optional().describe("Ceiling (seconds) Claude Code gives the UserPromptSubmit recall " + "hook before killing it. Stamped into the installed plugin's " + "hooks/hooks.json, so it survives `switchroom apply` reinstalling " + "the plugin. Default 12. Raising it lets slow banks finish at the " + "cost of pre-turn dead air; `parallel_deadline_seconds` and " + "`request_timeout_seconds` are both kept under it. A value below " + "3s is raised to 3s and reported: the fan-out deadline must be at " + "least 1s AND still leave 2s of post-deadline headroom, so a " + "lower ceiling admits no usable envelope at all."),
+      parallel_deadline_seconds: exports_external.number().int().min(1).optional().describe("Shared deadline (seconds) for the whole parallel multi-bank " + "recall fan-out. Slots unfinished when it elapses are abandoned " + "and reported as timed out. Defaults to `hook_timeout_seconds` " + "minus 2s of headroom for block formatting, cache write and " + "stdout flush, so a straggler bank can never push the hook past " + "its ceiling. Set explicitly to override that derivation; a value " + "that would leave less than 2s under the hook ceiling \u2014 including " + "one set EQUAL to it \u2014 is clamped back to `hook_timeout_seconds` " + "minus 2, and the clamp is reported. Equality is not allowed: at " + "zero headroom the hook is killed mid-write and the turn loses " + "both the memories and the recall_log row explaining why."),
       query_max_tokens: exports_external.number().int().min(0).optional().describe("Cap on the number of DISTINCT BM25 terms the recall hook may " + "put on the wire. `recallMaxQueryChars` bounds characters, which " + "is not the cost driver: Hindsight OR-joins every query token " + "into one tsquery and Postgres native FTS ranks the entire " + "matched set before the top-60 heapsort, so cost tracks TERMS. " + "An 800-char composed query is ~96 distinct terms and matched " + "119,510 of 135,565 rows on the `overlord` bank (14.0s for the " + "3-arm " + "BM25 UNION), past the per-bank timeout \u2014 96.8% of that agent's " + "own-bank recalls returned nothing. Plugin default is 24 " + "(measured 48,433 rows / 2.7s on the same bank). Terms are " + "chosen recency-first (the latest turn beats prior context), " + "then by selectivity. 0 disables shaping (rollback lever)."),
       query_stop_terms: exports_external.array(exports_external.string().min(1).regex(/^[\w./-]+$/)).optional().describe("Extra terms dropped from the BM25 recall query, on top of the " + "built-in English stopword list. For BANK-SPECIFIC " + "high-document-frequency words a generic stoplist cannot know " + "about: on `overlord`, `switchroom` matches 20% of the bank and " + "`agent` another 20%, purely because that is what the corpus is " + "about, and each such term drags tens of thousands of rows into " + "the ranking. Defaults to []."),
-      request_timeout_seconds: exports_external.number().int().min(1).optional().describe("Per-bank HTTP read timeout, in seconds, for one recall " + "request. Plugin default is 12, matching the UserPromptSubmit " + "hook ceiling; the shared `recallParallelDeadlineSeconds` (10) " + "is the tighter outer guard in the default configuration, so " + "this is a per-request safety net. Was a hardcoded 8 in the " + "plugin before #3757."),
+      request_timeout_seconds: exports_external.number().int().min(1).optional().describe("Per-bank HTTP read timeout, in seconds, for one recall " + "request. Even parallelised, each bank carries its own deadline " + "so ONE hung bank returns empty instead of consuming the shared " + "deadline and starving its siblings. The plugin default is 12 " + "(raised from a hardcoded 8 in #3757, which fired on 96.8% of " + "one agent's own-bank recalls). Switchroom defaults it to the " + "effective `parallel_deadline_seconds` instead \u2014 10 at the " + "shipped ceiling \u2014 because the shared fan-out deadline is " + "already the tighter outer guard, so a per-bank value above it " + "can never bind. An explicitly configured value above the " + "effective deadline is clamped down to it, and the clamp is " + "reported."),
       own_bank_min_slots: exports_external.number().int().min(0).optional().describe("Slots inside `max_memories` reserved as a FLOOR for the agent's " + "own bank when recall fans out to more than one bank. The merged " + "set is sorted globally by relevance and head-sliced, which is " + "winner-take-all across banks: when both banks return more " + "candidates than the cap, one bank's score distribution can fill " + "every slot and the agent gets a dossier about its operator with " + "none of its own session memory. A floor, not a quota: at most " + "this many slots, only if the own bank returned that many, and " + "only up to HALF the cap shared with `additional_bank_min_slots` " + "\u2014 the rest is always won on pure relevance, so composition still " + "moves with the scores. Fixes score-based crowd-out only; a " + "timed-out bank returns no candidates and reservation is a no-op " + "there. 0 disables (default). Switchroom-managed agents use 2 " + "against the fleet-deployed cap of 6."),
       additional_bank_min_slots: exports_external.number().int().min(0).optional().describe("Slots inside `max_memories` reserved as a FLOOR for the " + "additional (profile / shared / sender) banks. Symmetric with " + "`own_bank_min_slots` \u2014 same floor-not-quota semantics, and the " + "two share the same half-of-cap reservation budget. When they sum " + "above that budget the own-bank floor is honoured first. 0 " + "disables (default). Switchroom-managed agents use 1 against the " + "fleet-deployed cap of 6. Observe `injected_own_bank_count` / " + "`injected_additional_bank_count` via " + "`switchroom memory recall-log`."),
       types: exports_external.array(exports_external.string()).optional().describe("Hindsight fact types to recall. Switchroom default is " + '["world", "experience", "observation"] \u2014 the synthesized ' + "`observation` tier is on by default. Set to " + '["world", "experience"] to opt out of observation-backed ' + "recall for this agent (or fleet-wide under defaults)."),
-      additional_banks: exports_external.array(exports_external.string()).optional().describe("Extra Hindsight banks to recall from on every turn, merged into " + "the agent's own bank results \u2014 e.g. a shared operator/household " + "profile bank authored via `switchroom memory profile`. Each is " + "recalled with an 8s timeout and is non-fatal on failure. Stays " + "within the single tenant: all banks are the operator's data, in " + "the operator's Hindsight instance (see the `single-tenant` " + "invariant). Defaults to [] (no extra banks)."),
+      additional_banks: exports_external.array(exports_external.string()).optional().describe("Extra Hindsight banks to recall from on every turn, merged into " + "the agent's own bank results \u2014 e.g. a shared operator/household " + "profile bank authored via `switchroom memory profile`. Each is " + "recalled with the `request_timeout_seconds` per-bank timeout " + "(defaults to the effective `parallel_deadline_seconds`, 10s at " + "the shipped ceiling) and is non-fatal on failure. Stays " + "within the single tenant: all banks are the operator's data, in " + "the operator's Hindsight instance (see the `single-tenant` " + "invariant). Defaults to [] (no extra banks)."),
       sender_banks: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Per-speaker recall routing: a map of Telegram sender \u2192 extra " + "recall bank. When a message arrives, the agent also recalls the " + "speaker's bank (matched by Telegram username \u2014 a leading @ is " + "optional \u2014 or numeric user_id), merged " + "into its own results \u2014 so each trusted user gets their own " + "profile context. Additive recall scoping within the single " + "tenant: never an access boundary (who may drive an agent stays " + "the per-agent user assignment in `access.allowFrom`). Author the " + "banks via `switchroom memory profile`."),
       skip_trivial: exports_external.boolean().optional().describe("Skip recall on plausibly-stateless trivial turns (time/date/" + "greeting). Switchroom default true \u2014 saves the recall arm + " + "injected tokens on turns that never need memory, guarded so it " + "never skips a turn that references user/project/session state. " + "Set false to always run recall."),
       topic_filter_mode: exports_external.enum(["soft-preamble", "hard-filter"]).optional().describe("Supergroup-mode cross-topic memory behaviour. Default " + "(unset) \u2192 soft-preamble: recall returns memories from all " + "topics, and a 'Current topic: \u2026' preamble tells the model " + "to self-scope. hard-filter: drop any recalled memory whose " + "metadata.thread_id differs from the active inbound's topic. " + "Flip to hard-filter when the recall_log shows binding " + "failures (model surfacing the right memory but applying " + "it to the wrong topic).")
@@ -21861,6 +21863,8 @@ var init_schema = __esm(() => {
       recall: exports_external.object({
         max_memories: exports_external.number().int().min(0).optional(),
         cache_ttl_secs: exports_external.number().int().min(0).optional(),
+        hook_timeout_seconds: exports_external.number().int().min(1).optional(),
+        parallel_deadline_seconds: exports_external.number().int().min(1).optional(),
         query_max_tokens: exports_external.number().int().min(0).optional(),
         query_stop_terms: exports_external.array(exports_external.string().min(1).regex(/^[\w./-]+$/)).optional(),
         request_timeout_seconds: exports_external.number().int().min(1).optional(),
@@ -44389,6 +44393,45 @@ async function handleVoiceMessage(ctx, deps) {
 }
 
 // gateway/status-pin-store.ts
+function isPinRow(x) {
+  if (x == null || typeof x !== "object")
+    return false;
+  const o = x;
+  return typeof o.pinKey === "string" && o.pinKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && typeof o.messageId === "number" && (o.pending === undefined || typeof o.pending === "boolean") && (o.expiresAt === undefined || typeof o.expiresAt === "number") && (o.attempts === undefined || typeof o.attempts === "number");
+}
+function loadStatusPins(path, fs2) {
+  if (!fs2.existsSync(path))
+    return [];
+  let raw = "";
+  try {
+    raw = fs2.readFileSync(path);
+  } catch {
+    return [];
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  if (parsed == null || typeof parsed !== "object")
+    return [];
+  const env = parsed;
+  if (env.v !== 1 && env.v !== 2 || !Array.isArray(env.pins))
+    return [];
+  return env.pins.filter(isPinRow);
+}
+function persistStatusPins(path, fs2, snapshot, log = (l) => process.stderr.write(l)) {
+  const env = { v: 2, pins: [...snapshot] };
+  const tmp = path + ".tmp";
+  try {
+    fs2.writeFileSync(tmp, JSON.stringify(env));
+    fs2.renameSync(tmp, path);
+  } catch (err) {
+    log(`status-pin-store: persist FAILED path=${path}: ${err.message} \u2014 ` + `durability degraded to in-memory
+`);
+  }
+}
 function pinnedMessageIsOurs(tracked, chatId, pinnedMessageId) {
   for (const t of tracked) {
     if (t.messageId === pinnedMessageId && t.chatId === chatId)
@@ -44397,7 +44440,46 @@ function pinnedMessageIsOurs(tracked, chatId, pinnedMessageId) {
   return false;
 }
 var storeLockTails = new Map;
+function withStoreLock(path, fn) {
+  const prev = storeLockTails.get(path) ?? Promise.resolve();
+  const run2 = prev.then(fn, fn);
+  storeLockTails.set(path, run2.then(() => {
+    return;
+  }, () => {
+    return;
+  }));
+  return run2;
+}
 var pinReconcileTails = new Map;
+function applyStatusPinRow(path, fs2, pinKey, row, log) {
+  const current = loadStatusPins(path, fs2);
+  const others = current.filter((p) => p.pinKey !== pinKey);
+  const next = row == null ? others : [...others, row];
+  persistStatusPins(path, fs2, next, log);
+}
+function reconcileAndPersistStatusPin(args) {
+  const { path, fs: fs2, pinKey, chatId, op } = args;
+  const log = args.log ?? ((l) => process.stderr.write(l));
+  return withStoreLock(path, async () => {
+    if (op.kind === "pin") {
+      applyStatusPinRow(path, fs2, pinKey, { pinKey, chatId, messageId: op.messageId, pending: true }, log);
+      const next2 = await args.applyPin();
+      if (next2 == null) {
+        applyStatusPinRow(path, fs2, pinKey, null, log);
+        return null;
+      }
+      applyStatusPinRow(path, fs2, pinKey, { pinKey, chatId, messageId: next2.messageId }, log);
+      return next2;
+    }
+    const next = await args.applyPin();
+    if (next == null) {
+      applyStatusPinRow(path, fs2, pinKey, null, log);
+    } else {
+      applyStatusPinRow(path, fs2, pinKey, { pinKey, chatId, messageId: next.messageId }, log);
+    }
+    return next;
+  });
+}
 
 // gateway/pinned-message-handler.ts
 async function handlePinnedMessage(ctx, deps) {
@@ -46504,6 +46586,11 @@ var STATUS_LINE_MAX = 200;
 var STATUS_CARD_CHAR_BUDGET = RICH_MESSAGE_MAX_CHARS;
 var NESTED_PREFIX = "   \u21b3 ";
 var WORKER_STEP_INDENT = "\u2800\u2800\u2800";
+var SUBORDINATE_HEADER_PREFIX = "\u2514\u2500 ";
+var SUBORDINATE_LINE_INDENT = WORKER_STEP_INDENT;
+function nestSubordinateCardLines(lines) {
+  return lines.map((line, i) => i === 0 ? `${SUBORDINATE_HEADER_PREFIX}${line}` : `${SUBORDINATE_LINE_INDENT}${line}`);
+}
 
 // hooks/tool-label-pretool.mjs
 import { readFileSync as readFileSync9, mkdirSync as mkdirSync10, appendFileSync as appendFileSync2, existsSync as existsSync9 } from "node:fs";
@@ -46976,7 +47063,9 @@ function renderStatusCard(opts) {
   }
   if (out.length === 0)
     return null;
-  const joined = stackCardLines(out, { collapseSafe: true });
+  const joined = stackCardLines(opts.subordinate === true ? nestSubordinateCardLines(out) : out, {
+    collapseSafe: true
+  });
   if (joined.length <= STATUS_CARD_CHAR_BUDGET)
     return joined;
   return fitCardToBudget(opts, headerLines);
@@ -46988,6 +47077,9 @@ function fitCardToBudget(opts, headerLines) {
   const rawSteps = opts.steps.filter((s) => s != null);
   const rawChildren = (opts.childSteps ?? []).map((s) => s.trim()).filter((s) => s.length > 0);
   const hasChildren = rawChildren.length > 0;
+  const subordinate = opts.subordinate === true;
+  const nestCost = subordinate ? SUBORDINATE_LINE_INDENT.length : 0;
+  const stack = (lines2) => stackCardLines(subordinate ? nestSubordinateCardLines(lines2) : lines2, { collapseSafe: true });
   const footerLines = [];
   if (final && stepCount != null && stepCount > 0)
     footerLines.push(`_\u2713 ${stepCount} steps_`);
@@ -46996,7 +47088,7 @@ function fitCardToBudget(opts, headerLines) {
     footerLines.push(`${result.emoji} _${escapeMarkdown(truncate(result.text, WORKER_RESULT_MAX))}_`);
   }
   const fixedCost = [...headerLines, ...footerLines].join(`
-`).length;
+`).length + (headerLines.length + footerLines.length) * nestCost;
   const body = hasChildren ? rawChildren : rawSteps;
   const escapedBody = body.map(escapeStepLine);
   const prefix = hasChildren ? NESTED_PREFIX : "";
@@ -47011,13 +47103,13 @@ function fitCardToBudget(opts, headerLines) {
     const lastIdx = shown.length - 1;
     shown.forEach((esc, i) => lines2.push(buildBullet(esc, i === lastIdx)));
     lines2.push(...footerLines);
-    const candidate = stackCardLines(lines2, { collapseSafe: true });
+    const candidate = stack(lines2);
     if (candidate.length <= STATUS_CARD_CHAR_BUDGET)
       return candidate;
   }
   const rawNewest = body.length > 0 ? stripMarkdown(body[body.length - 1]).replace(/\s+/g, " ").trim() : "";
-  const wrapperOverhead = final ? (prefix + "_\u2713 _").length : (prefix + "**\u2192 **").length + liveSuffix.length;
-  const headerFooterCost = fixedCost + (fixedCost > 0 ? 1 : 0) + (parentMarker != null ? parentMarker.length + 1 : 0);
+  const wrapperOverhead = (final ? (prefix + "_\u2713 _").length : (prefix + "**\u2192 **").length + liveSuffix.length) + nestCost;
+  const headerFooterCost = fixedCost + (fixedCost > 0 ? 1 : 0) + (parentMarker != null ? parentMarker.length + nestCost + 1 : 0);
   const budget = STATUS_CARD_CHAR_BUDGET - headerFooterCost - wrapperOverhead;
   let raw = rawNewest.slice(0, Math.max(0, budget));
   let newest = escapeMarkdown(raw);
@@ -47032,7 +47124,7 @@ function fitCardToBudget(opts, headerLines) {
     lines.push(parentMarker);
   lines.push(newestLine);
   lines.push(...footerLines);
-  return stackCardLines(lines, { collapseSafe: true });
+  return stack(lines);
 }
 function renderActivityFeed(lines, final = false, liveSuffix = "", stepCount, header) {
   if (lines.length === 0 && header == null)
@@ -47090,7 +47182,7 @@ function glanceLine(rows) {
   const tools = rows.reduce((n, r) => n + r.toolCount, 0);
   const tok = rows.reduce((n, r) => n + (r.totalTokens ?? 0), 0);
   const toolWord = tools === 1 ? "tool" : "tools";
-  return `\uD83D\uDEE0 **Workers** \u00b7 _${rows.length} running \u00b7 oldest ${formatFeedElapsed(oldestMs)}` + ` \u00b7 ${tools} ${toolWord}${tokenSegment(tok)}_`;
+  return `\uD83D\uDEE0 **WORKERS** \u00b7 _${rows.length} running \u00b7 oldest ${formatFeedElapsed(oldestMs)}` + ` \u00b7 ${tools} ${toolWord}${tokenSegment(tok)}_`;
 }
 function renderCombinedWorkerFeed(rows, opts) {
   if (rows.length === 0)
@@ -47129,7 +47221,10 @@ function renderCombinedWorkerFeed(rows, opts) {
     const out = [...chrome, ...bodyOut];
     if (hidden > 0)
       out.push(`_+${hidden} more working\u2026_`);
-    return { body: stackCardLines(out, { collapseSafe: true }), bodyLines: bodyOut.length };
+    return {
+      body: stackCardLines(nestSubordinateCardLines(out), { collapseSafe: true }),
+      bodyLines: bodyOut.length
+    };
   };
   let visible = Math.min(rows.length, maxRows);
   let { body, bodyLines } = compose(visible);
@@ -47185,7 +47280,7 @@ function renderWorkerActivity(v, liveSuffix = "") {
   }
   const header = {
     emoji: "\uD83D\uDEE0",
-    label: "Worker",
+    label: "WORKER",
     description: desc,
     elapsedMs: v.elapsedMs,
     toolCount: v.toolCount,
@@ -47205,21 +47300,22 @@ function renderWorkerActivity(v, liveSuffix = "") {
     final: finished,
     liveSuffix: finished ? "" : liveSuffix,
     result,
-    historyWindow: workerHistoryDepth(1)
+    historyWindow: workerHistoryDepth(1),
+    subordinate: true
   });
   if (card == null) {
-    return `\uD83D\uDEE0 **Worker** \u00b7 _starting\u2026_`;
+    return `${SUBORDINATE_HEADER_PREFIX}\uD83D\uDEE0 **WORKER** \u00b7 _starting\u2026_`;
   }
   if (!finished && steps.length === 0) {
     return `${card}${COLLAPSE_SAFE_SEPARATOR}  
-_starting\u2026_`;
+${SUBORDINATE_LINE_INDENT}_starting\u2026_`;
   }
   return card;
 }
 var COOLDOWN_JITTER_MS = 500;
-var WORKER_CARD_SUPERSEDED_BODY = `\uD83D\uDEE0 **Worker** \u00b7 _continued_
+var WORKER_CARD_SUPERSEDED_BODY = `${SUBORDINATE_HEADER_PREFIX}\uD83D\uDEE0 **WORKER** \u00b7 _continued_
 
-_Live progress moved to a fresh card to stay pinned._`;
+` + `${SUBORDINATE_LINE_INDENT}_Live progress moved to a fresh card to stay pinned._`;
 function extractRetryAfterSecs(err) {
   if (err == null || typeof err !== "object")
     return null;
@@ -48095,7 +48191,11 @@ function decidePinAction(prev, desired) {
   if (prev.messageId === desired.messageId) {
     return { kind: "noop", reason: "already pinned this message" };
   }
-  return { kind: "unpin", messageId: prev.messageId };
+  return {
+    kind: "repin",
+    unpinMessageId: prev.messageId,
+    pinMessageId: desired.messageId
+  };
 }
 function errorDescription(err) {
   if (err != null && typeof err === "object") {
@@ -48144,6 +48244,19 @@ async function reconcilePin(args) {
   const action = decidePinAction(args.prevState, args.desired);
   if (action.kind === "noop")
     return args.prevState;
+  if (action.kind === "repin") {
+    const afterUnpin = await reconcilePin({
+      ...args,
+      desired: { pinned: false }
+    });
+    if (afterUnpin != null)
+      return afterUnpin;
+    return reconcilePin({
+      ...args,
+      prevState: null,
+      desired: { pinned: true, messageId: action.pinMessageId }
+    });
+  }
   if (action.kind === "unpin") {
     if (args.rightsCache?.isBlocked(args.chatId))
       return null;
@@ -48184,19 +48297,6 @@ async function reconcilePin(args) {
 }
 
 // status-pin.ts
-function decidePinAction2(prev, desired) {
-  if (!desired.pinned) {
-    if (prev)
-      return { kind: "unpin", messageId: prev.messageId };
-    return { kind: "noop", reason: "nothing pinned, nothing wanted" };
-  }
-  if (prev == null)
-    return { kind: "pin", messageId: desired.messageId };
-  if (prev.messageId === desired.messageId) {
-    return { kind: "noop", reason: "already pinned this message" };
-  }
-  return { kind: "unpin", messageId: prev.messageId };
-}
 class PinRightsCache2 {
   blocked = new Set;
   isBlocked(chatId) {
@@ -83028,6 +83128,12 @@ init_peercred();
 
 // ../src/agents/scaffold.ts
 init_generation_stamp();
+
+// ../src/setup/hindsight-recall-tunables.ts
+var RECALL_DEADLINE_HEADROOM_SECONDS = 2;
+var MIN_RECALL_HOOK_TIMEOUT_SECONDS = RECALL_DEADLINE_HEADROOM_SECONDS + 1;
+
+// ../src/agents/scaffold.ts
 init_schema();
 
 // ../src/config/users.ts
@@ -84974,6 +85080,97 @@ async function runBootPinSweepSteps(deps) {
     await step(`dm-sweep:${id}`, () => deps.sweepDm(id), log);
 }
 
+// gateway/status-pin-retarget.ts
+async function runStatusPinReconcile(args) {
+  const { pinKey, chatId, prev, desired, persist, runPin, registries } = args;
+  const commit = (next) => {
+    if (next == null) {
+      registries.state.delete(pinKey);
+      registries.chatIds.delete(pinKey);
+      registries.pinnedAt.delete(pinKey);
+      return;
+    }
+    registries.state.set(pinKey, next);
+    registries.chatIds.set(pinKey, chatId);
+    if (!registries.pinnedAt.has(pinKey))
+      registries.pinnedAt.set(pinKey, Date.now());
+  };
+  const runLeg = (from, want) => {
+    if (persist == null)
+      return runPin(from, want);
+    const legAction = decidePinAction(from, want);
+    const op = legAction.kind === "pin" ? { kind: "pin", messageId: legAction.messageId } : { kind: "clear" };
+    return reconcileAndPersistStatusPin({
+      path: persist.path,
+      fs: persist.fs,
+      pinKey,
+      chatId,
+      op,
+      applyPin: () => runPin(from, want)
+    });
+  };
+  const action = decidePinAction(prev, desired);
+  if (action.kind === "repin" && desired.pinned) {
+    const afterUnpin = await runLeg(prev, { pinned: false });
+    commit(afterUnpin);
+    if (afterUnpin != null)
+      return;
+    commit(await runLeg(null, desired));
+    return;
+  }
+  commit(await runLeg(prev, desired));
+}
+
+// gateway/periodic-sweep-guard.ts
+function createPeriodicSweepGuard(args) {
+  let running = false;
+  let skippedCount = 0;
+  const notify = (fn) => {
+    if (fn == null)
+      return;
+    try {
+      fn();
+    } catch {}
+  };
+  return {
+    async tick() {
+      if (running) {
+        skippedCount += 1;
+        notify(args.onSkip);
+        return;
+      }
+      running = true;
+      try {
+        await args.run();
+      } catch (err) {
+        notify(args.onError == null ? undefined : () => args.onError?.(err));
+      } finally {
+        running = false;
+      }
+    },
+    isRunning() {
+      return running;
+    },
+    skipped() {
+      return skippedCount;
+    }
+  };
+}
+
+// gateway/with-deadline.ts
+function withDeadline(p, ms, timeoutMessage) {
+  p.catch(() => {});
+  let timer3;
+  const deadline = new Promise((_resolve, reject) => {
+    timer3 = setTimeout(() => reject(new Error(timeoutMessage)), ms);
+    timer3.unref?.();
+  });
+  return Promise.race([p, deadline]).finally(() => {
+    if (timer3 !== undefined)
+      clearTimeout(timer3);
+  });
+}
+
 // gateway/status-pin-api.ts
 class BotNotReadyError extends Error {
   constructor(what) {
@@ -87879,13 +88076,13 @@ function createCapturedResumeDispatcher(ports) {
 
 // gateway/status-pin-store.ts
 var BOOT_UNPIN_MAX_ATTEMPTS = 5;
-function isPinRow(x) {
+function isPinRow2(x) {
   if (x == null || typeof x !== "object")
     return false;
   const o = x;
   return typeof o.pinKey === "string" && o.pinKey.length > 0 && typeof o.chatId === "string" && o.chatId.length > 0 && typeof o.messageId === "number" && (o.pending === undefined || typeof o.pending === "boolean") && (o.expiresAt === undefined || typeof o.expiresAt === "number") && (o.attempts === undefined || typeof o.attempts === "number");
 }
-function loadStatusPins(path3, fs3) {
+function loadStatusPins2(path3, fs3) {
   if (!fs3.existsSync(path3))
     return [];
   let raw = "";
@@ -87905,9 +88102,9 @@ function loadStatusPins(path3, fs3) {
   const env = parsed;
   if (env.v !== 1 && env.v !== 2 || !Array.isArray(env.pins))
     return [];
-  return env.pins.filter(isPinRow);
+  return env.pins.filter(isPinRow2);
 }
-function persistStatusPins(path3, fs3, snapshot, log = (l) => process.stderr.write(l)) {
+function persistStatusPins2(path3, fs3, snapshot, log = (l) => process.stderr.write(l)) {
   const env = { v: 2, pins: [...snapshot] };
   const tmp = path3 + ".tmp";
   try {
@@ -87921,7 +88118,7 @@ function persistStatusPins(path3, fs3, snapshot, log = (l) => process.stderr.wri
 async function runStatusPinBootCleanup(args) {
   const log = args.log ?? ((l) => process.stderr.write(l));
   const now = args.now ?? Date.now();
-  const persisted = loadStatusPins(args.path, args.fs);
+  const persisted = loadStatusPins2(args.path, args.fs);
   if (persisted.length === 0)
     return { cleared: 0, retained: 0, kept: 0, total: 0 };
   let cleared = 0;
@@ -87950,11 +88147,11 @@ async function runStatusPinBootCleanup(args) {
       }
     }
   }
-  persistStatusPins(args.path, args.fs, next, log);
+  persistStatusPins2(args.path, args.fs, next, log);
   return { cleared, retained, kept, total: persisted.length };
 }
 var storeLockTails2 = new Map;
-function withStoreLock(path3, fn) {
+function withStoreLock2(path3, fn) {
   const prev = storeLockTails2.get(path3) ?? Promise.resolve();
   const run3 = prev.then(fn, fn);
   storeLockTails2.set(path3, run3.then(() => {
@@ -87975,38 +88172,15 @@ function withPinReconcileLock(pinKey, fn) {
   }));
   return run3;
 }
-function applyStatusPinRow(path3, fs3, pinKey, row, log) {
-  const current = loadStatusPins(path3, fs3);
+function applyStatusPinRow2(path3, fs3, pinKey, row, log) {
+  const current = loadStatusPins2(path3, fs3);
   const others = current.filter((p) => p.pinKey !== pinKey);
   const next = row == null ? others : [...others, row];
-  persistStatusPins(path3, fs3, next, log);
+  persistStatusPins2(path3, fs3, next, log);
 }
 function mutateStatusPinRow(path3, fs3, pinKey, row, log = (l) => process.stderr.write(l)) {
-  return withStoreLock(path3, async () => {
-    applyStatusPinRow(path3, fs3, pinKey, row, log);
-  });
-}
-function reconcileAndPersistStatusPin(args) {
-  const { path: path3, fs: fs3, pinKey, chatId, op } = args;
-  const log = args.log ?? ((l) => process.stderr.write(l));
-  return withStoreLock(path3, async () => {
-    if (op.kind === "pin") {
-      applyStatusPinRow(path3, fs3, pinKey, { pinKey, chatId, messageId: op.messageId, pending: true }, log);
-      const next2 = await args.applyPin();
-      if (next2 == null) {
-        applyStatusPinRow(path3, fs3, pinKey, null, log);
-        return null;
-      }
-      applyStatusPinRow(path3, fs3, pinKey, { pinKey, chatId, messageId: next2.messageId }, log);
-      return next2;
-    }
-    const next = await args.applyPin();
-    if (next == null) {
-      applyStatusPinRow(path3, fs3, pinKey, null, log);
-    } else {
-      applyStatusPinRow(path3, fs3, pinKey, { pinKey, chatId, messageId: next.messageId }, log);
-    }
-    return next;
+  return withStoreLock2(path3, async () => {
+    applyStatusPinRow2(path3, fs3, pinKey, row, log);
   });
 }
 
@@ -90059,7 +90233,7 @@ function buildObligationRepresentInbound(o, now) {
 }
 
 // gateway/with-deadline.ts
-function withDeadline(p, ms, timeoutMessage) {
+function withDeadline2(p, ms, timeoutMessage) {
   p.catch(() => {});
   let timer3;
   const deadline = new Promise((_resolve, reject) => {
@@ -90076,7 +90250,7 @@ function withDeadline(p, ms, timeoutMessage) {
 function driveEscalation(args) {
   const { escId, inFlight, ledger, send, maxAttempts, deadlineMs } = args;
   const log = args.log ?? ((l) => process.stderr.write(l));
-  const wd = args.withDeadlineFn ?? withDeadline;
+  const wd = args.withDeadlineFn ?? withDeadline2;
   if (inFlight.has(escId))
     return;
   const attempt = ledger.markEscalateAttempt(escId);
@@ -96617,10 +96791,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.19.25";
-var COMMIT_SHA = "d6ed6bdd";
-var COMMIT_DATE = "2026-07-27T09:38:45Z";
-var LATEST_PR = 3808;
+var VERSION2 = "0.19.26";
+var COMMIT_SHA = "f9314b89";
+var COMMIT_DATE = "2026-07-27T13:46:37Z";
+var LATEST_PR = 3829;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -101873,7 +102047,7 @@ async function runMidSessionCardReaper() {
         pinnedAt: statusPinPinnedAt.get(k) ?? now
       }));
       const storeOnlyCandidates = statusPinPersistEnabled ? storeOnlyWorkerPinCandidates({
-        rows: loadStatusPins(STATUS_PIN_STORE_PATH, statusPinStoreFs),
+        rows: loadStatusPins2(STATUS_PIN_STORE_PATH, statusPinStoreFs),
         inMemoryPinKeys: inMemoryKeys,
         now
       }) : [];
@@ -101926,8 +102100,15 @@ async function runMidSessionCardReaper() {
     }
   }
 }
+var midSessionReaperGuard = createPeriodicSweepGuard({
+  run: runMidSessionCardReaper,
+  onSkip: () => process.stderr.write(`telegram gateway: mid-session reaper tick skipped \u2014 previous pass still running
+`),
+  onError: (err) => process.stderr.write(`telegram gateway: mid-session reaper pass threw: ${err.message}
+`)
+});
 var midSessionCardReaper = isGatewayMain ? setInterval(() => {
-  runMidSessionCardReaper();
+  midSessionReaperGuard.tick();
 }, MID_SESSION_CARD_REAPER_INTERVAL_MS) : undefined;
 midSessionCardReaper?.unref();
 async function reconcileStatusPin(pinKey, chatId, desired) {
@@ -101945,11 +102126,11 @@ async function reconcileStatusPinInner(pinKey, chatId, desired) {
   if (chatId.length === 0)
     return;
   const prev = statusPinState.get(pinKey) ?? null;
-  const runReconcile = () => reconcilePin({
+  const runReconcileFrom = (from, want) => reconcilePin({
     api: statusPinApi(),
     chatId,
-    prevState: prev,
-    desired,
+    prevState: from,
+    desired: want,
     rightsCache: statusPinRightsCache,
     onPinRightsDisabled: (chat) => {
       process.stderr.write(`telegram gateway: status-pin disabled for chat ${chat}: bot lacks pin rights; grant 'Pin messages' admin right to re-enable after restart
@@ -101961,40 +102142,19 @@ async function reconcileStatusPinInner(pinKey, chatId, desired) {
 `);
     }
   });
-  const action = decidePinAction2(prev, desired);
-  const op = action.kind === "pin" ? { kind: "pin", messageId: action.messageId } : { kind: "clear" };
-  if (!statusPinPersistEnabled) {
-    const next2 = await runReconcile();
-    if (next2 == null) {
-      statusPinState.delete(pinKey);
-      statusPinChatIds.delete(pinKey);
-      statusPinPinnedAt.delete(pinKey);
-    } else {
-      statusPinState.set(pinKey, next2);
-      statusPinChatIds.set(pinKey, chatId);
-      if (!statusPinPinnedAt.has(pinKey))
-        statusPinPinnedAt.set(pinKey, Date.now());
-    }
-    return;
-  }
-  const next = await reconcileAndPersistStatusPin({
-    path: STATUS_PIN_STORE_PATH,
-    fs: statusPinStoreFs,
+  await runStatusPinReconcile({
     pinKey,
     chatId,
-    op,
-    applyPin: runReconcile
+    prev,
+    desired,
+    persist: statusPinPersistEnabled ? { path: STATUS_PIN_STORE_PATH, fs: statusPinStoreFs } : null,
+    runPin: runReconcileFrom,
+    registries: {
+      state: statusPinState,
+      chatIds: statusPinChatIds,
+      pinnedAt: statusPinPinnedAt
+    }
   });
-  if (next == null) {
-    statusPinState.delete(pinKey);
-    statusPinChatIds.delete(pinKey);
-    statusPinPinnedAt.delete(pinKey);
-  } else {
-    statusPinState.set(pinKey, next);
-    statusPinChatIds.set(pinKey, chatId);
-    if (!statusPinPinnedAt.has(pinKey))
-      statusPinPinnedAt.set(pinKey, Date.now());
-  }
 }
 async function unpinAllStatusPins() {
   const keys = [...statusPinState.keys()];
@@ -102028,7 +102188,7 @@ var dmPinSweeper = createDmPinSweeper({
     }
     if (statusPinPersistEnabled || bannerPinPersistEnabled || toolPinPersistEnabled) {
       try {
-        ids.push(...unexpiredStoreRepinIds(loadStatusPins(STATUS_PIN_STORE_PATH, statusPinStoreFs), chatId, Date.now()));
+        ids.push(...unexpiredStoreRepinIds(loadStatusPins2(STATUS_PIN_STORE_PATH, statusPinStoreFs), chatId, Date.now()));
       } catch (err) {
         process.stderr.write(`telegram gateway: dm-pin-sweep: store repin scan failed (chat=${chatId}): ${err.message}
 `);
@@ -102042,7 +102202,7 @@ var dmPinSweeper = createDmPinSweeper({
 function runBootPinCleanupAndDmSweep() {
   return runBootPinSweepSteps({
     scanDmChatIds: () => collectDmChatIdsFromStores({
-      statusPins: statusPinPersistEnabled || bannerPinPersistEnabled || toolPinPersistEnabled ? loadStatusPins(STATUS_PIN_STORE_PATH, statusPinStoreFs) : [],
+      statusPins: statusPinPersistEnabled || bannerPinPersistEnabled || toolPinPersistEnabled ? loadStatusPins2(STATUS_PIN_STORE_PATH, statusPinStoreFs) : [],
       activityCards: activityCardPersistEnabled ? loadActivityCards2(ACTIVITY_CARD_STORE_PATH, activityCardStoreFs) : [],
       queuedCards: queuedCardPersistEnabled ? loadQueuedCards(QUEUED_CARD_STORE_PATH, queuedCardStoreFs) : []
     }),
@@ -109375,6 +109535,12 @@ async function shutdown(signal) {
     budgetMs: SHUTDOWN_DRAIN_BUDGET_MS,
     agentName: agentName3
   });
+  try {
+    await withDeadline(unpinAllStatusPins(), 5000, "status-pin shutdown sweep timed out");
+  } catch (err) {
+    process.stderr.write(`telegram gateway: shutdown status-pin sweep incomplete: ${err.message}
+`);
+  }
   inboundCoalescer.reset();
   pendingReauthFlows.clear();
   for (const [, v] of pendingLoopbackFlows2)