switchroom 0.19.33 → 0.19.35

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.19.33",
+  "version": "0.19.35",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -21972,6 +21972,7 @@ var init_schema = __esm(() => {
   }).describe("Per-operation LLM override. Every field optional; an unset field (or " + "an omitted op block) inherits the global `hindsight.llm.*`, which is " + "already the engine's fallback \u2014 switchroom emits only the vars set.");
   HindsightConfigSchema = exports_external.object({
     gpu: exports_external.boolean().optional().describe("Force GPU passthrough for the hindsight container on (`true`) or off " + "(`false`), overriding host autodetection in BOTH directions. Absent " + "(the default) \u2192 autodetect from the persisted host-capabilities " + "verdict (`~/.switchroom/host-capabilities.json`), which enables " + "`--gpus all` only when that file proves BOTH a GPU and the nvidia " + "container toolkit. Set `true` when that verdict is wrong or unreadable " + "and you know the host has a working toolkit \u2014 switchroom cannot verify " + "it for you, and `docker run --gpus all` hard-fails container create on " + "a host without one. Set `false` to pin the container to CPU on a GPU " + "host. This is also the declarative opt-out for the recreate-time GPU " + "drop guard (`switchroom memory setup --recreate` refuses to silently " + "turn a GPU container into a CPU one). `--gpu`/`--no-gpu` on `memory " + "setup` override this for a single run."),
+    cp_access_key: exports_external.string().min(1).optional().describe("Access key for the hindsight control-plane DASHBOARD (upstream " + "`HINDSIGHT_CP_ACCESS_KEY`, port 9999). Literal or \u2014 strongly preferred " + "\u2014 a `vault:` reference such as `vault:hindsight_cp_access_key`, read " + "through the broker at container-launch time. This is the ONLY thing " + "that arms the dashboard's login: upstream's middleware short-circuits " + "to `next()` when the var is unset, so an unset key means the dashboard " + "has no authentication at all, not weak authentication. Because of that, " + "leaving it unset is FAIL-CLOSED: switchroom pins " + "`HINDSIGHT_CP_HOSTNAME=127.0.0.1` so the loginless dashboard is " + "reachable only from the host, and warns. Set this to serve the " + "dashboard on the LAN/tailnet."),
     llm: exports_external.object({
       provider: exports_external.string().min(1).optional().describe("Hindsight LLM provider (upstream `HINDSIGHT_API_LLM_PROVIDER`). " + "Defaults to `claude-code` (subscription-honest, broker-fed OAuth). " + "Any litellm-routable provider the upstream image supports is valid. " + "Serves as the GLOBAL default for every op absent a per-op override."),
       model: exports_external.string().min(1).optional().describe("Hindsight LLM model (upstream `HINDSIGHT_API_LLM_MODEL`). Defaults " + "to HINDSIGHT_DEFAULT_MODEL. Any model your LiteLLM proxy can route " + "is valid, e.g. `openrouter/z-ai/glm-5.2` when routing through the " + "fleet proxy. With provider=claude-code this value is ALSO exported " + "as `ANTHROPIC_MODEL` to the claude subprocess. Serves as the GLOBAL " + "default for every op absent a per-op override."),
@@ -45182,8 +45183,37 @@ function registerStartInfoCommands(bot, deps) {
 init_rich_send();
 init_format();
 
+// ../src/config/thinking-effort-risk.ts
+var CLAUDE_CLI_THINKING_MERGE_FIX_VERSION = "2.1.156";
+var RISKY_EFFORTS = new Set(["medium", "high", "xhigh", "max"]);
+function isRiskyThinkingEffort(effort) {
+  if (!effort)
+    return false;
+  return RISKY_EFFORTS.has(effort.trim().toLowerCase());
+}
+function isAdaptiveThinkingOpus(model) {
+  if (!model)
+    return false;
+  const m = model.trim().toLowerCase();
+  return m.startsWith("claude-opus-4");
+}
+function assessThinkingEffortRisk(model, effort) {
+  if (!isRiskyThinkingEffort(effort))
+    return { risky: false };
+  if (!isAdaptiveThinkingOpus(model))
+    return { risky: false };
+  return {
+    risky: true,
+    reason: `thinking_effort '${effort}' on pinned Opus 4.x model '${model}' could trigger ` + `'400 thinking/redacted_thinking blocks cannot be modified' errors when work runs ` + `through concurrent sub-agents (issue #1978). The upstream claude-CLI fix shipped in ` + `${CLAUDE_CLI_THINKING_MERGE_FIX_VERSION}, but the Opus 4.x reproduction has not been ` + `re-tested since, so pin 'thinking_effort: low' or move the agent to a current Opus model.`
+  };
+}
+
 // gateway/model-command.ts
 var MODEL_ALIASES = ["opus", "sonnet", "haiku", "fable", "default"];
+var CLAUDE_MODEL_ALIASES = {
+  opus48: "claude-opus-4-8",
+  "opus-4-8": "claude-opus-4-8"
+};
 var MODEL_ARG_RE = /^[A-Za-z0-9][A-Za-z0-9._/\[\]-]{0,99}$/;
 function isValidModelArg(arg) {
   return MODEL_ARG_RE.test(arg);
@@ -45217,7 +45247,7 @@ function planModelCommand(parsed, ctx) {
   if (parsed.kind === "show" && ctx.menuEnabled)
     return { kind: "menu" };
   if (parsed.kind === "set" && isModelCommandBusy(ctx)) {
-    return { kind: "queue", target: expandSrAlias(parsed.model) };
+    return { kind: "queue", target: expandModelAlias(parsed.model) };
   }
   return { kind: "apply", parsed };
 }
@@ -45226,12 +45256,22 @@ function modelCommandReceiptLine(agent, parsed, busy) {
   return `telegram gateway: gw /model received agent=${agent} kind=${parsed.kind} arg=${arg} busy=${busy}`;
 }
 var PERSIST_NOTE = "_A `/model` switch relaunches the session (~30s) on the chosen model. Session-only \u2014 reverts to the configured `model:` on the next restart. `/model default` reverts now. Live scrollback is replaced by a fresh session; memory and the handoff briefing carry the context. To change the default permanently, set `model:` in switchroom.yaml._";
+function claudeAliasHints(prefix) {
+  const byTarget = new Map;
+  for (const [alias, target] of Object.entries(CLAUDE_MODEL_ALIASES)) {
+    const spellings = byTarget.get(target) ?? [];
+    spellings.push(alias);
+    byTarget.set(target, spellings);
+  }
+  return [...byTarget].map(([target, spellings]) => `${spellings.map((a) => `\`${prefix}${a}\``).join(" \u00b7 ")} \u2192 \`${target}\``).join("; ");
+}
 function helpText2(deps, reason) {
   const srAliasExamples = Object.keys(SR_MODEL_ALIASES).map((a) => `\`${a}\``).join(" \u00b7 ");
+  const claudeAliasExamples = claudeAliasHints("");
   const lines = [];
   if (reason)
     lines.push(`\u26a0\ufe0f ${deps.escapeHtml(reason)}`);
-  lines.push("**/model** \u2014 show or switch the Claude model", "`/model` \u2014 show the configured model", `\`/model <name>\` \u2014 switch the live session (${MODEL_ALIASES.map((a) => `\`${a}\``).join(" \u00b7 ")} or a full model id)`, `_OpenRouter shortcuts:_ ${srAliasExamples}`, "_Every switch relaunches the session (~30s) on the chosen model \u2014 Claude and OpenRouter (sr-\\*) alike._", PERSIST_NOTE);
+  lines.push("**/model** \u2014 show or switch the Claude model", "`/model` \u2014 show the configured model", `\`/model <name>\` \u2014 switch the live session (${MODEL_ALIASES.map((a) => `\`${a}\``).join(" \u00b7 ")} or a full model id)`, `_Pinned Claude shortcuts:_ ${claudeAliasExamples}`, `_OpenRouter shortcuts:_ ${srAliasExamples}`, "_Every switch relaunches the session (~30s) on the chosen model \u2014 Claude and OpenRouter (sr-\\*) alike._", PERSIST_NOTE);
   return { text: lines.join(`
 `), html: true };
 }
@@ -45247,6 +45287,7 @@ async function handleModelCommand(parsed, deps) {
         `**Model \u2014 ${deps.escapeHtml(deps.getAgentName())}**`,
         `Configured: \`${deps.escapeHtml(shown)}\``,
         `Switch the live session: ${MODEL_ALIASES.map((a) => `\`/model ${a}\``).join(" \u00b7 ")}`,
+        `Pinned Claude shortcuts: ${claudeAliasHints("/model ")}`,
         `OpenRouter shortcuts: ${srAliasExamples}`,
         "or `/model <full-model-id>`",
         PERSIST_NOTE
@@ -45258,7 +45299,7 @@ async function handleModelCommand(parsed, deps) {
   if (!isValidModelArg(parsed.model)) {
     return helpText2(deps, `not a valid model name: ${parsed.model}`);
   }
-  const model = expandSrAlias(parsed.model);
+  const model = expandModelAlias(parsed.model);
   if (deps.isBusy()) {
     return {
       text: "\u23f3 The agent is mid-turn \u2014 a model switch needs an idle session. The switch was not applied.",
@@ -45285,10 +45326,25 @@ function relaunchErrorReply(deps, model, err) {
   return { text: `\u274c Could not schedule model switch: ${deps.escapeHtml(msg)}`, html: true };
 }
 function unvalidatedIdCaveat(deps, model) {
-  if (!model.trim().toLowerCase().startsWith("claude-"))
+  const lower = canonicalModelToken(model).toLowerCase();
+  if (!lower.startsWith("claude-"))
+    return null;
+  if (Object.values(CLAUDE_MODEL_ALIASES).includes(lower))
     return null;
   return `_\`${deps.escapeHtml(model)}\` can't be validated before launch \u2014 if it isn't a real Claude model id, claude will silently serve the configured fallback model instead. I check the first reply and will warn if that happens._`;
 }
+function thinkingEffortCaveat(deps, model) {
+  let effort;
+  try {
+    effort = deps.getConfiguredEffort();
+  } catch {
+    return null;
+  }
+  const risk = assessThinkingEffortRisk(model, effort ?? undefined);
+  if (!risk.risky || !risk.reason)
+    return null;
+  return `\u26a0\ufe0f _${deps.escapeHtml(risk.reason)}_`;
+}
 async function scheduleRelaunchReply(deps, model, reason) {
   try {
     await deps.scheduleModelRelaunch(model, reason);
@@ -45296,8 +45352,14 @@ async function scheduleRelaunchReply(deps, model, reason) {
     return relaunchErrorReply(deps, model, err);
   }
   const caveat = unvalidatedIdCaveat(deps, model);
+  const effortRisk = thinkingEffortCaveat(deps, model);
   return {
-    text: [switchingLine(deps, model), ...caveat ? [caveat] : [], PERSIST_NOTE].join(`
+    text: [
+      switchingLine(deps, model),
+      ...caveat ? [caveat] : [],
+      ...effortRisk ? [effortRisk] : [],
+      PERSIST_NOTE
+    ].join(`
 `),
     html: true
   };
@@ -45324,8 +45386,9 @@ var MODEL_CALLBACK_HEADER = "mdl:h";
 var MODEL_CALLBACK_ALIAS = "mdl:alias:";
 var MODEL_CALLBACK_PAGE_EXTERNAL = "mdl:page:ext";
 var MODEL_CALLBACK_PAGE_MAIN = "mdl:page:main";
-var EXTRA_CLAUDE_ALIASES = [
-  { alias: "fable", label: "Fable" }
+var EXTRA_CLAUDE_MENU_TOKENS = [
+  { token: "fable", label: "Fable" },
+  { token: "claude-opus-4-8", label: "Opus 4.8" }
 ];
 var SR_MODEL_LABELS = {
   "sr-gemini-2.5-pro": "Gemini 2.5 Pro",
@@ -45367,6 +45430,17 @@ var SR_MODEL_ALIASES = {
 function expandSrAlias(arg) {
   return SR_MODEL_ALIASES[arg.toLowerCase()] ?? arg;
 }
+function canonicalModelToken(arg) {
+  const trimmed = arg.trim();
+  const lower = trimmed.toLowerCase();
+  return lower.startsWith("claude-") ? lower : trimmed;
+}
+function expandClaudeAlias(arg) {
+  return CLAUDE_MODEL_ALIASES[arg.trim().toLowerCase()] ?? arg;
+}
+function expandModelAlias(arg) {
+  return canonicalModelToken(expandSrAlias(expandClaudeAlias(arg)));
+}
 function srFriendlyLabel(srName) {
   return SR_MODEL_LABELS[srName] ?? srName.replace(/^sr-/, "").replace(/-/g, " ");
 }
@@ -45408,6 +45482,11 @@ function busyStaticMenu(deps, page) {
       callback_data: `${MODEL_CALLBACK_ALIAS}${alias}`
     }]);
   }
+  for (const { token, label } of EXTRA_CLAUDE_MENU_TOKENS) {
+    if (MODEL_ALIASES.includes(token.toLowerCase()))
+      continue;
+    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS}${token}` }]);
+  }
   rows.push([{ text: "Default (configured)", callback_data: `${MODEL_CALLBACK_ALIAS}default` }]);
   if (externalNames.length > 0) {
     rows.push([{ text: "\uD83C\uDF10 External models \u25b8", callback_data: MODEL_CALLBACK_PAGE_EXTERNAL }]);
@@ -45444,11 +45523,11 @@ function mainPageKeyboard(claudeOptions, hasExternal) {
       callback_data: modelSelectCallbackData(o.label)
     }]);
   }
-  for (const { alias, label } of EXTRA_CLAUDE_ALIASES) {
-    const already = claudeOptions.some((o) => o.label.toLowerCase() === label.toLowerCase() || o.label.toLowerCase() === alias.toLowerCase());
+  for (const { token, label } of EXTRA_CLAUDE_MENU_TOKENS) {
+    const already = claudeOptions.some((o) => o.label.toLowerCase() === label.toLowerCase() || o.label.toLowerCase() === token.toLowerCase());
     if (already)
       continue;
-    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS}${alias}` }]);
+    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS}${token}` }]);
   }
   if (hasExternal) {
     rows.push([{ text: "\uD83C\uDF10 External models \u25b8", callback_data: MODEL_CALLBACK_PAGE_EXTERNAL }]);
@@ -83496,6 +83575,10 @@ Allowed: \`${deps.escapeHtml(allow)}\``, { html: true });
 
 // gateway/model-command.ts
 var MODEL_ALIASES2 = ["opus", "sonnet", "haiku", "fable", "default"];
+var CLAUDE_MODEL_ALIASES2 = {
+  opus48: "claude-opus-4-8",
+  "opus-4-8": "claude-opus-4-8"
+};
 var MODEL_ARG_RE2 = /^[A-Za-z0-9][A-Za-z0-9._/\[\]-]{0,99}$/;
 function isValidModelArg2(arg) {
   return MODEL_ARG_RE2.test(arg);
@@ -83631,12 +83714,22 @@ function resolveStaleAwareBusy(input) {
   };
 }
 var PERSIST_NOTE3 = "_A `/model` switch relaunches the session (~30s) on the chosen model. Session-only \u2014 reverts to the configured `model:` on the next restart. `/model default` reverts now. Live scrollback is replaced by a fresh session; memory and the handoff briefing carry the context. To change the default permanently, set `model:` in switchroom.yaml._";
+function claudeAliasHints2(prefix) {
+  const byTarget = new Map;
+  for (const [alias, target] of Object.entries(CLAUDE_MODEL_ALIASES2)) {
+    const spellings = byTarget.get(target) ?? [];
+    spellings.push(alias);
+    byTarget.set(target, spellings);
+  }
+  return [...byTarget].map(([target, spellings]) => `${spellings.map((a) => `\`${prefix}${a}\``).join(" \u00b7 ")} \u2192 \`${target}\``).join("; ");
+}
 function helpText4(deps, reason) {
   const srAliasExamples = Object.keys(SR_MODEL_ALIASES2).map((a) => `\`${a}\``).join(" \u00b7 ");
+  const claudeAliasExamples = claudeAliasHints2("");
   const lines = [];
   if (reason)
     lines.push(`\u26a0\ufe0f ${deps.escapeHtml(reason)}`);
-  lines.push("**/model** \u2014 show or switch the Claude model", "`/model` \u2014 show the configured model", `\`/model <name>\` \u2014 switch the live session (${MODEL_ALIASES2.map((a) => `\`${a}\``).join(" \u00b7 ")} or a full model id)`, `_OpenRouter shortcuts:_ ${srAliasExamples}`, "_Every switch relaunches the session (~30s) on the chosen model \u2014 Claude and OpenRouter (sr-\\*) alike._", PERSIST_NOTE3);
+  lines.push("**/model** \u2014 show or switch the Claude model", "`/model` \u2014 show the configured model", `\`/model <name>\` \u2014 switch the live session (${MODEL_ALIASES2.map((a) => `\`${a}\``).join(" \u00b7 ")} or a full model id)`, `_Pinned Claude shortcuts:_ ${claudeAliasExamples}`, `_OpenRouter shortcuts:_ ${srAliasExamples}`, "_Every switch relaunches the session (~30s) on the chosen model \u2014 Claude and OpenRouter (sr-\\*) alike._", PERSIST_NOTE3);
   return { text: lines.join(`
 `), html: true };
 }
@@ -83652,6 +83745,7 @@ async function handleModelCommand2(parsed, deps) {
         `**Model \u2014 ${deps.escapeHtml(deps.getAgentName())}**`,
         `Configured: \`${deps.escapeHtml(shown)}\``,
         `Switch the live session: ${MODEL_ALIASES2.map((a) => `\`/model ${a}\``).join(" \u00b7 ")}`,
+        `Pinned Claude shortcuts: ${claudeAliasHints2("/model ")}`,
         `OpenRouter shortcuts: ${srAliasExamples}`,
         "or `/model <full-model-id>`",
         PERSIST_NOTE3
@@ -83663,7 +83757,7 @@ async function handleModelCommand2(parsed, deps) {
   if (!isValidModelArg2(parsed.model)) {
     return helpText4(deps, `not a valid model name: ${parsed.model}`);
   }
-  const model = expandSrAlias2(parsed.model);
+  const model = expandModelAlias2(parsed.model);
   if (deps.isBusy()) {
     return {
       text: "\u23f3 The agent is mid-turn \u2014 a model switch needs an idle session. The switch was not applied.",
@@ -83690,10 +83784,25 @@ function relaunchErrorReply2(deps, model, err) {
   return { text: `\u274c Could not schedule model switch: ${deps.escapeHtml(msg)}`, html: true };
 }
 function unvalidatedIdCaveat2(deps, model) {
-  if (!model.trim().toLowerCase().startsWith("claude-"))
+  const lower = canonicalModelToken2(model).toLowerCase();
+  if (!lower.startsWith("claude-"))
+    return null;
+  if (Object.values(CLAUDE_MODEL_ALIASES2).includes(lower))
     return null;
   return `_\`${deps.escapeHtml(model)}\` can't be validated before launch \u2014 if it isn't a real Claude model id, claude will silently serve the configured fallback model instead. I check the first reply and will warn if that happens._`;
 }
+function thinkingEffortCaveat2(deps, model) {
+  let effort;
+  try {
+    effort = deps.getConfiguredEffort();
+  } catch {
+    return null;
+  }
+  const risk = assessThinkingEffortRisk(model, effort ?? undefined);
+  if (!risk.risky || !risk.reason)
+    return null;
+  return `\u26a0\ufe0f _${deps.escapeHtml(risk.reason)}_`;
+}
 async function scheduleRelaunchReply2(deps, model, reason) {
   try {
     await deps.scheduleModelRelaunch(model, reason);
@@ -83701,8 +83810,14 @@ async function scheduleRelaunchReply2(deps, model, reason) {
     return relaunchErrorReply2(deps, model, err);
   }
   const caveat = unvalidatedIdCaveat2(deps, model);
+  const effortRisk = thinkingEffortCaveat2(deps, model);
   return {
-    text: [switchingLine2(deps, model), ...caveat ? [caveat] : [], PERSIST_NOTE3].join(`
+    text: [
+      switchingLine2(deps, model),
+      ...caveat ? [caveat] : [],
+      ...effortRisk ? [effortRisk] : [],
+      PERSIST_NOTE3
+    ].join(`
 `),
     html: true
   };
@@ -83730,8 +83845,9 @@ var MODEL_CALLBACK_HEADER2 = "mdl:h";
 var MODEL_CALLBACK_ALIAS2 = "mdl:alias:";
 var MODEL_CALLBACK_PAGE_EXTERNAL2 = "mdl:page:ext";
 var MODEL_CALLBACK_PAGE_MAIN2 = "mdl:page:main";
-var EXTRA_CLAUDE_ALIASES2 = [
-  { alias: "fable", label: "Fable" }
+var EXTRA_CLAUDE_MENU_TOKENS2 = [
+  { token: "fable", label: "Fable" },
+  { token: "claude-opus-4-8", label: "Opus 4.8" }
 ];
 var SR_MODEL_LABELS2 = {
   "sr-gemini-2.5-pro": "Gemini 2.5 Pro",
@@ -83776,11 +83892,26 @@ function isOfflineTrustedModelToken(token) {
     return true;
   if (lower in SR_MODEL_ALIASES2)
     return true;
-  return Object.values(SR_MODEL_ALIASES2).includes(lower);
+  if (Object.values(SR_MODEL_ALIASES2).includes(lower))
+    return true;
+  if (lower in CLAUDE_MODEL_ALIASES2)
+    return true;
+  return Object.values(CLAUDE_MODEL_ALIASES2).includes(lower);
 }
 function expandSrAlias2(arg) {
   return SR_MODEL_ALIASES2[arg.toLowerCase()] ?? arg;
 }
+function canonicalModelToken2(arg) {
+  const trimmed = arg.trim();
+  const lower = trimmed.toLowerCase();
+  return lower.startsWith("claude-") ? lower : trimmed;
+}
+function expandClaudeAlias2(arg) {
+  return CLAUDE_MODEL_ALIASES2[arg.trim().toLowerCase()] ?? arg;
+}
+function expandModelAlias2(arg) {
+  return canonicalModelToken2(expandSrAlias2(expandClaudeAlias2(arg)));
+}
 function srFriendlyLabel2(srName) {
   return SR_MODEL_LABELS2[srName] ?? srName.replace(/^sr-/, "").replace(/-/g, " ");
 }
@@ -83833,6 +83964,11 @@ function busyStaticMenu2(deps, page) {
       callback_data: `${MODEL_CALLBACK_ALIAS2}${alias}`
     }]);
   }
+  for (const { token, label } of EXTRA_CLAUDE_MENU_TOKENS2) {
+    if (MODEL_ALIASES2.includes(token.toLowerCase()))
+      continue;
+    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS2}${token}` }]);
+  }
   rows.push([{ text: "Default (configured)", callback_data: `${MODEL_CALLBACK_ALIAS2}default` }]);
   if (externalNames.length > 0) {
     rows.push([{ text: "\uD83C\uDF10 External models \u25b8", callback_data: MODEL_CALLBACK_PAGE_EXTERNAL2 }]);
@@ -83869,11 +84005,11 @@ function mainPageKeyboard2(claudeOptions, hasExternal) {
       callback_data: modelSelectCallbackData2(o.label)
     }]);
   }
-  for (const { alias, label } of EXTRA_CLAUDE_ALIASES2) {
-    const already = claudeOptions.some((o) => o.label.toLowerCase() === label.toLowerCase() || o.label.toLowerCase() === alias.toLowerCase());
+  for (const { token, label } of EXTRA_CLAUDE_MENU_TOKENS2) {
+    const already = claudeOptions.some((o) => o.label.toLowerCase() === label.toLowerCase() || o.label.toLowerCase() === token.toLowerCase());
     if (already)
       continue;
-    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS2}${alias}` }]);
+    rows.push([{ text: label, callback_data: `${MODEL_CALLBACK_ALIAS2}${token}` }]);
   }
   if (hasExternal) {
     rows.push([{ text: "\uD83C\uDF10 External models \u25b8", callback_data: MODEL_CALLBACK_PAGE_EXTERNAL2 }]);
@@ -83972,6 +84108,7 @@ async function handleModelMenuCallback(data, deps) {
     if (!isValidModelArg2(token)) {
       return { answer: "Invalid model name", reply: await buildModelMenu2(deps) };
     }
+    token = expandModelAlias2(token);
     if (!isRecognizedSwitchToken(token)) {
       return { answer: "Model list changed \u2014 menu refreshed", reply: await buildModelMenu2(deps) };
     }
@@ -84009,9 +84146,11 @@ async function menuRelaunchOutcome(deps, token, label) {
     };
   }
   const friendly = isDefault ? "the configured default" : label;
+  const effortRisk = isDefault ? null : thinkingEffortCaveat2(deps, token);
   return {
     answer: `Switching to ${isDefault ? "default" : label} \u2014 relaunching (~30s)`,
-    reply: await menuWithBannerStatic(deps, `\uD83D\uDD04 Switching session to **${deps.escapeHtml(friendly)}** \u2014 relaunching (~30s).
+    reply: await menuWithBannerStatic(deps, `\uD83D\uDD04 Switching session to **${deps.escapeHtml(friendly)}** \u2014 relaunching (~30s).${effortRisk ? `
+${effortRisk}` : ""}
 ${PERSIST_NOTE3}`)
   };
 }
@@ -84585,12 +84724,15 @@ function pgMib(mib) {
 }
 var HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV = "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE";
 var HINDSIGHT_PG_SHARED_BUFFERS_ENV = "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS";
+var HINDSIGHT_PG_FSYNC_ENV = "SWITCHROOM_HINDSIGHT_PG_FSYNC";
+var HINDSIGHT_PG_DEFAULT_FSYNC = "on";
 var HINDSIGHT_PG_DEFAULTS = [
   [
     HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE_ENV,
     pgMib(HINDSIGHT_PG_DEFAULT_EFFECTIVE_CACHE_SIZE_MIB)
   ],
-  [HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)]
+  [HINDSIGHT_PG_SHARED_BUFFERS_ENV, pgMib(HINDSIGHT_PG_DEFAULT_SHARED_BUFFERS_MIB)],
+  [HINDSIGHT_PG_FSYNC_ENV, HINDSIGHT_PG_DEFAULT_FSYNC]
 ];
 var HINDSIGHT_PG_ENV_KEYS = new Set(HINDSIGHT_PG_DEFAULTS.map(([k]) => k));
 
@@ -84752,6 +84894,8 @@ var HINDSIGHT_RETAIN_CLIENT_DEADLINE_S = hindsightRetainClientTimeoutSeconds() +
 var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)';
 var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
 var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
+var HINDSIGHT_CP_UNAUTHENTICATED_BIND_ADDR = "127.0.0.1";
+var HINDSIGHT_CP_NO_ACCESS_KEY_WARNING = "hindsight: no `hindsight.cp_access_key` configured \u2014 the control-plane " + "dashboard has NO login (the access-key middleware is inert when " + "HINDSIGHT_CP_ACCESS_KEY is unset), so it is pinned to " + `${HINDSIGHT_CP_UNAUTHENTICATED_BIND_ADDR} and will NOT be reachable from ` + "the LAN or tailnet. Set `hindsight.cp_access_key: vault:<key>` in " + "switchroom.yaml to arm the login and open it up.";
 
 // ../src/memory/hindsight.ts
 var DEFAULT_RETAIN_MISSION = `Extract durable facts that will still be true and useful weeks from now, once this session is forgotten.
@@ -99317,10 +99461,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.19.33";
-var COMMIT_SHA = "4ccbde6b";
-var COMMIT_DATE = "2026-07-29T02:39:39Z";
-var LATEST_PR = 3973;
+var VERSION2 = "0.19.35";
+var COMMIT_SHA = "76ae22ca";
+var COMMIT_DATE = "2026-07-30T01:27:21Z";
+var LATEST_PR = 4011;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -108833,6 +108977,7 @@ function buildModelDeps(restartCtx) {
       const data = switchroomExecJson(["agent", "list"]);
       return data?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
     },
+    getConfiguredEffort: () => getConfiguredEffortForPersist(),
     escapeHtml: escapeHtmlForTg2,
     preBlock,
     scheduleRestart: async (reason) => {
@@ -108983,7 +109128,7 @@ function persistQueuedCommandForRestart(action) {
           return `\u21A9\uFE0F Couldn\u2019t verify \`${escapeHtmlForTg2(action.cmd.targetLabel || action.arg)}\` as a known model without the live session \u2014 it was NOT saved. Re-issue \`/model ${escapeHtmlForTg2(action.arg)}\` once the agent is back.`;
         }
         const configured = readConfiguredDefaultModel(agentDir) ?? resolveMainModel(undefined);
-        writeSessionModelFile(agentDir, expandSrAlias2(action.arg), configured);
+        writeSessionModelFile(agentDir, expandModelAlias2(action.arg), configured);
         break;
       }
       case "clear-model":

package/telegram-plugin/gateway/gateway.ts

@@ -564,7 +564,7 @@ import {
   MODEL_CALLBACK_PAGE_EXTERNAL,
   MODEL_CALLBACK_PAGE_MAIN,
   srFriendlyLabel,
-  expandSrAlias,
+  expandModelAlias,
   isSrModel,
   isBusyRefusalText,
   isOfflineTrustedModelToken,
@@ -16961,6 +16961,9 @@ function buildModelDeps(restartCtx?: ModelDepsRestartContext): ModelMenuDeps & M
       const data = switchroomExecJson<AgentListResp>(['agent', 'list'])
       return data?.agents?.find(a => a.name === getMyAgentName())?.model ?? null
     },
+    // Feeds the switch-time #1978 assessment (thinkingEffortCaveat); see the
+    // ModelCommandDeps.getConfiguredEffort doc for why doctor can't make it.
+    getConfiguredEffort: () => getConfiguredEffortForPersist(),
     escapeHtml: escapeHtmlForTg,
     preBlock,
     /**
@@ -17259,7 +17262,7 @@ function persistQueuedCommandForRestart(action: ShutdownResolutionAction): strin
         const configured =
           readConfiguredDefaultModel(agentDir) ?? resolveMainModel(undefined)
         // Consume-once carrier: applied by the next boot, then reverts.
-        writeSessionModelFile(agentDir, expandSrAlias(action.arg), configured)
+        writeSessionModelFile(agentDir, expandModelAlias(action.arg), configured)
         break
       }
       case 'clear-model':