switchroom 0.19.35 → 0.19.37

package/telegram-plugin/dist/gateway/gateway.js

@@ -6923,7 +6923,11 @@ function normalizePunctuation(text) {
   const escNonce = nonce.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const linkRestoreRe = new RegExp(`\x00RML${escNonce}_(\\d+)\x00`, "g");
   const restoreLinks = (s) => s.replace(linkRestoreRe, (_m, idx) => linkMasks[Number(idx)] ?? _m);
-  let out = maskedAutolinks.replace(/(\S)[ \t][\u2014\u2013][ \t](?=(\S))/g, (_m, a, b) => /\d/.test(a) && /\d/.test(b) ? `${a}-` : `${a}, `).replace(/(\w)\u2014(?=(\w))/g, (_m, a, b) => /\d/.test(a) && /\d/.test(b) ? `${a}-` : `${a}, `).replace(/(\w)\u2013(?=\w)/g, "$1-");
+  const rewriteDashes = (line) => line.replace(/(\S)[ \t][\u2014\u2013][ \t](?=(\S))/g, (_m, a, b) => /\d/.test(a) && /\d/.test(b) ? `${a}-` : `${a}, `).replace(/(\w)\u2014(?=(\w))/g, (_m, a, b) => /\d/.test(a) && /\d/.test(b) ? `${a}-` : `${a}, `).replace(/(\w)\u2013(?=\w)/g, "$1-");
+  const isQuotedLine = (line) => isBlockquoteLine(line) || line.trimStart().startsWith("**>");
+  let out = maskedAutolinks.split(`
+`).map((line) => isQuotedLine(line) ? line : rewriteDashes(line)).join(`
+`);
   out = restoreLinks(out);
   out = out.split(`
 `).map((line) => line.replace(/^([ \t]*)[\u2022\u00b7][ \t]+/, "$1- ")).join(`
@@ -6936,10 +6940,18 @@ function listItemContent(line) {
 function isFullyBolded(fragment) {
   return /^\*\*[^*]+\*\*[.,:;!?]?$/.test(fragment.trim());
 }
+function isPseudoHeadingBlock(block) {
+  const lines = block.split(`
+`).filter((l) => l.trim() !== "");
+  if (lines.length !== 1)
+    return false;
+  const t = lines[0].trim();
+  return t.length <= PSEUDO_HEADING_MAX_CHARS && isFullyBolded(t);
+}
 function unbold(fragment) {
   return fragment.replace(/\*\*([^*]+)\*\*/g, "$1");
 }
-function stripExcessBold(text) {
+function stripExcessBold(text, onStrip) {
   if (!text.includes("**"))
     return text;
   const nonce = Math.random().toString(36).slice(2);
@@ -6950,10 +6962,15 @@ function stripExcessBold(text) {
   let boldChars = 0;
   for (const m of visible.matchAll(/\*\*([^*]+)\*\*/g))
     boldChars += m[1].length;
-  if (boldChars / visible.length > 0.3) {
-    return restore(unbold(masked));
-  }
+  const ratio = boldChars / visible.length;
   const blocks = masked.split(/\n{2,}/);
+  if (ratio > 0.3) {
+    const rebuilt2 = blocks.map((block) => isPseudoHeadingBlock(block) ? block : unbold(block));
+    const out2 = rejoinBlocks(masked, rebuilt2);
+    if (out2 !== masked)
+      onStrip?.({ rule: "global", ratio });
+    return restore(out2);
+  }
   const rebuilt = blocks.map((block) => {
     const lines = block.split(`
 `).filter((l) => l.trim() !== "");
@@ -6970,17 +6987,23 @@ function stripExcessBold(text) {
       return block;
     if (!lines.every((l) => isFullyBolded(l)))
       return block;
-    if (lines.length === 1 && lines[0].trim().length <= 48)
+    if (isPseudoHeadingBlock(block))
       return block;
     return unbold(block);
   });
+  const out = rejoinBlocks(masked, rebuilt);
+  if (out !== masked)
+    onStrip?.({ rule: "per-block", ratio });
+  return restore(out);
+}
+function rejoinBlocks(masked, rebuilt) {
   const seps = masked.match(/\n{2,}/g) ?? [];
   let out = rebuilt[0] ?? "";
   for (let i = 1;i < rebuilt.length; i++)
     out += (seps[i - 1] ?? `
 
 `) + rebuilt[i];
-  return restore(out);
+  return out;
 }
 function isListItemLine(line) {
   const t = line.trimStart();
@@ -7183,7 +7206,7 @@ function backOffOpenInline(text, cut) {
   }
   return earliest;
 }
-var RICH_MESSAGE_MAX_CHARS = 32768, PARAGRAPH_SPACER = "\u00a0", INLINE_SPAN_PATTERNS;
+var RICH_MESSAGE_MAX_CHARS = 32768, PARAGRAPH_SPACER = "\u00a0", PSEUDO_HEADING_MAX_CHARS = 48, INLINE_SPAN_PATTERNS;
 var init_format = __esm(() => {
   INLINE_SPAN_PATTERNS = [
     /`[^`\n]+`/g,
@@ -12660,16 +12683,22 @@ var init_patterns = __esm(() => {
     },
     {
       rule_id: "bearer_auth_header",
-      regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/g,
+      regex: /Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
       captureIndex: 1,
       slugHint: "bearer_token"
     },
     {
       rule_id: "bearer_loose",
-      regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/g,
+      regex: /\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b/gi,
       captureIndex: 1,
       slugHint: "bearer_token"
     },
+    {
+      rule_id: "basic_auth_header",
+      regex: /Authorization\s*[:=]\s*Basic\s+([A-Za-z0-9+/=]{8,})/gi,
+      captureIndex: 1,
+      slugHint: "basic_auth"
+    },
     {
       rule_id: "pem_private_key",
       regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g,
@@ -12729,7 +12758,104 @@ function shannonEntropy(s) {
   return h;
 }
 
+// secret-detect/inert-values.ts
+function runIsCredentialShaped(run) {
+  let classes = 0;
+  if (/[a-z]/.test(run))
+    classes++;
+  if (/[A-Z]/.test(run))
+    classes++;
+  if (/[0-9]/.test(run))
+    classes++;
+  return run.length >= (classes >= 2 ? MIXED_CLASS_RUN_MIN : SINGLE_CLASS_RUN_MIN);
+}
+function hasCredentialShapedRun(value) {
+  for (const run of value.match(CREDENTIAL_RUN_RE) ?? []) {
+    if (runIsCredentialShaped(run))
+      return true;
+  }
+  return false;
+}
+function isInertValue(value) {
+  if (!INERT_VALUE_RE.some((re) => re.test(value)))
+    return false;
+  return !hasCredentialShapedRun(value);
+}
+function stripTrailingPunctuation(value) {
+  return value.replace(TRAILING_PUNCT_RE, "");
+}
+var INERT_VALUE_RE, CREDENTIAL_RUN_RE, MIXED_CLASS_RUN_MIN = 12, SINGLE_CLASS_RUN_MIN = 16, INERT_GATED_RULES, TRAILING_PUNCT_RE;
+var init_inert_values = __esm(() => {
+  INERT_VALUE_RE = [
+    /^\[REDACTED(?::[A-Za-z0-9_]+)?\]$/i,
+    /^\$\{?[A-Za-z_][A-Za-z0-9_]*\}?$/,
+    /^\{\{[^\n\r\u2028\u2029]*\}\}$/,
+    /^<[^<>\n\r\u2028\u2029]*>$/,
+    /^%[A-Za-z_][A-Za-z0-9_]*%$/,
+    /^vault:[A-Za-z0-9_./-]*$/i,
+    /^[*x\u2022.]+$/i,
+    /^(?:process\.env|import\.meta\.env|os\.environ)(?:\.[A-Za-z_$][A-Za-z0-9_$]*|\[["']?[A-Za-z_$][A-Za-z0-9_$]*["']?\])*$/,
+    /^(?:changeme|change-me|replaceme|replace-me|placeholder|todo|tbd|yourkey|your-key|yourpassword|your-password|yoursecret|your-secret|yourtoken|your-token)(?:[-_][A-Za-z0-9-]+)?$/i,
+    /^[a-z]+(?: [a-z]+){2,}$/
+  ];
+  CREDENTIAL_RUN_RE = /[A-Za-z0-9]{12,}/g;
+  INERT_GATED_RULES = new Set([
+    "env_key_value",
+    "json_secret_field",
+    "cli_flag"
+  ]);
+  TRAILING_PUNCT_RE = /[.,;:!?)\]}]+$/;
+});
+
 // secret-detect/kv-scanner.ts
+function charClassCount(value) {
+  let n = 0;
+  if (/[a-z]/.test(value))
+    n++;
+  if (/[A-Z]/.test(value))
+    n++;
+  if (/[0-9]/.test(value))
+    n++;
+  if (/[^A-Za-z0-9]/.test(value))
+    n++;
+  return n;
+}
+function looksLikeMemorablePassword(value) {
+  if (isInertValue(value))
+    return false;
+  const core = stripTrailingPunctuation(value);
+  if (core.length < 8 || core.length > 64)
+    return false;
+  if (isInertValue(core))
+    return false;
+  if (new Set(core).size < 4)
+    return false;
+  return charClassCount(core) >= MEMORABLE_PW_MIN_CLASSES;
+}
+function scanMemorablePasswords(text) {
+  const hits = [];
+  MEMORABLE_PW_RE.lastIndex = 0;
+  let m;
+  while ((m = MEMORABLE_PW_RE.exec(text)) !== null) {
+    const keyName = m[1];
+    const value = m[3];
+    if (!value || !looksLikeMemorablePassword(value))
+      continue;
+    const valueOffsetInMatch = m[0].indexOf(value, keyName.length);
+    if (valueOffsetInMatch < 0)
+      continue;
+    const start = m.index + valueOffsetInMatch;
+    hits.push({
+      rule_id: MEMORABLE_PW_RULE_ID,
+      start,
+      end: start + value.length,
+      matched_text: value,
+      key_name: keyName,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
 function scanKeyValue(text) {
   const hits = [];
   KV_RE.lastIndex = 0;
@@ -12738,6 +12864,8 @@ function scanKeyValue(text) {
     const [, keyName, value] = m;
     if (!value)
       continue;
+    if (isInertValue(value))
+      continue;
     const h = shannonEntropy(value);
     if (h < KV_ENTROPY_THRESHOLD)
       continue;
@@ -12757,9 +12885,44 @@ function scanKeyValue(text) {
   }
   return hits;
 }
-var KV_RE, KV_ENTROPY_THRESHOLD = 4;
+var KV_RE, KV_ENTROPY_THRESHOLD = 4, MEMORABLE_PW_RE, MEMORABLE_PW_RULE_ID = "memorable_password", MEMORABLE_PW_MIN_CLASSES = 2;
 var init_kv_scanner = __esm(() => {
+  init_inert_values();
   KV_RE = /\b([A-Za-z_][A-Za-z0-9_-]*(?:password|passwd|token|secret|key|api[_-]?key))\s*[:=]\s*["']?([^\s"'\\]{8,})["']?/gi;
+  MEMORABLE_PW_RE = /\b([A-Za-z0-9_-]*(?:password|passwd|passphrase|pwd))\b\s*(?:[:=]\s*|\s+is\s+)(["']?)([^\s"']{8,64})\2/gi;
+});
+
+// secret-detect/db-uri.ts
+function isInertPassword(value) {
+  if (value.startsWith("[REDACTED"))
+    return true;
+  return /^[*x]+$/i.test(value);
+}
+function scanDbUris(text) {
+  const hits = [];
+  DB_URI_RE.lastIndex = 0;
+  let m;
+  while ((m = DB_URI_RE.exec(text)) !== null) {
+    const scheme = m[1];
+    const user = m[2];
+    const password = m[3];
+    if (isInertPassword(password))
+      continue;
+    const start = m.index + scheme.length + 3 + user.length + 1;
+    hits.push({
+      rule_id: DB_URI_RULE_ID,
+      start,
+      end: start + password.length,
+      matched_text: password,
+      key_name: `${scheme}_password`,
+      confidence: "ambiguous"
+    });
+  }
+  return hits;
+}
+var DB_URI_RE, DB_URI_RULE_ID = "db_uri_password";
+var init_db_uri = __esm(() => {
+  DB_URI_RE = /\b([a-zA-Z][a-zA-Z0-9+.-]+):\/\/([^\s:/@]+):([^\s/?#]+)@([^\s/@?#]+)/g;
 });
 
 // secret-detect/generic-entropy.ts
@@ -12953,6 +13116,8 @@ function detectSecrets(text) {
         const globalStart = win.offset + matchStart;
         const globalEnd = globalStart + cap.length;
         const keyName = p.rule_id === "env_key_value" ? m[1] : undefined;
+        if (INERT_GATED_RULES.has(p.rule_id) && isInertValue(cap))
+          continue;
         if (p.rule_id === "env_key_value") {
           const ENV_KV_MIN_LEN = 12;
           const ENV_KV_MIN_ENTROPY = 3.5;
@@ -12975,6 +13140,12 @@ function detectSecrets(text) {
     for (const h of kvHits) {
       raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
     }
+    for (const h of scanDbUris(win.text)) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
+    for (const h of scanMemorablePasswords(win.text)) {
+      raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
+    }
     const genHits = scanGenericSecrets(win.text);
     for (const h of genHits) {
       raw.push({ ...h, start: h.start + win.offset, end: h.end + win.offset });
@@ -13024,6 +13195,8 @@ function dropOverlaps(hits) {
 var init_secret_detect = __esm(() => {
   init_patterns();
   init_kv_scanner();
+  init_db_uri();
+  init_inert_values();
   init_generic_entropy();
   init_chunker();
   init_suppressor();
@@ -13438,7 +13611,7 @@ function guardUnsupportedTokens(text) {
 var CARET_PAIR, FOOTNOTE_MARKER, DETAILS_BLOCK, ORPHAN_TAGS;
 var init_unsupported_token_guard = __esm(() => {
   CARET_PAIR = /\^([A-Za-z0-9]+)\^/g;
-  FOOTNOTE_MARKER = /\[\^\d+\](?!:)/g;
+  FOOTNOTE_MARKER = /\[\^[A-Za-z0-9]{1,10}\](?!:)/g;
   DETAILS_BLOCK = /<details[^>]*>\s*(?:<summary[^>]*>([\s\S]*?)<\/summary>)?([\s\S]*?)<\/details>/gi;
   ORPHAN_TAGS = /<\/?(?:details|summary)[^>]*>/gi;
 });
@@ -71039,6 +71212,23 @@ function describeProviderCreditRemedy(provider) {
 }
 
 // operator-events.ts
+var OPERATOR_EVENT_KINDS = [
+  "credentials-expired",
+  "credentials-invalid",
+  "proxy-misconfig",
+  "credit-exhausted",
+  "provider-credit-exhausted",
+  "mcp-dependency-blocked",
+  "quota-exhausted",
+  "rate-limited",
+  "agent-crashed",
+  "agent-restarted-unexpectedly",
+  "unknown-4xx",
+  "unknown-5xx",
+  "config-warning",
+  "always-allow-persist-failed",
+  "mental-model-persist-failed"
+];
 function classifyClaudeError(raw) {
   try {
     return classifyInner(raw);
@@ -77648,7 +77838,12 @@ function normalizeOutboundBody(rawText, site, redact2, opts = {}) {
     text4 = normalizeParagraphBreaks(text4);
   text4 = redact2(text4, site);
   if (!literalText) {
-    let formatted = stripExcessBold(normalizePunctuation(text4));
+    let formatted = stripExcessBold(normalizePunctuation(text4), (d) => {
+      try {
+        process.stderr.write(`telegram gateway: strip-excess-bold: fired site=${site} rule=${d.rule} ratio=${d.ratio.toFixed(3)}
+`);
+      } catch {}
+    });
     if (addSpacers)
       formatted = addParagraphSpacers(formatted);
     text4 = formatted;
@@ -79094,7 +79289,12 @@ function normalizeOutboundBody2(rawText, site, redact2, opts = {}) {
     text4 = normalizeParagraphBreaks(text4);
   text4 = redact2(text4, site);
   if (!literalText) {
-    let formatted = stripExcessBold(normalizePunctuation(text4));
+    let formatted = stripExcessBold(normalizePunctuation(text4), (d) => {
+      try {
+        process.stderr.write(`telegram gateway: strip-excess-bold: fired site=${site} rule=${d.rule} ratio=${d.ratio.toFixed(3)}
+`);
+      } catch {}
+    });
     if (addSpacers)
       formatted = addParagraphSpacers(formatted);
     text4 = formatted;
@@ -83583,6 +83783,27 @@ var MODEL_ARG_RE2 = /^[A-Za-z0-9][A-Za-z0-9._/\[\]-]{0,99}$/;
 function isValidModelArg2(arg) {
   return MODEL_ARG_RE2.test(arg);
 }
+var DEFAULT_SESSION_MODEL_RESOLUTION_TIMEOUT_MS = 180000;
+var SESSION_MODEL_RESOLUTION_POLL_MS = 250;
+function resolveSessionModelResolutionTimeoutMs(raw) {
+  if (raw == null || raw.trim() === "")
+    return DEFAULT_SESSION_MODEL_RESOLUTION_TIMEOUT_MS;
+  const value = Number(raw);
+  return Number.isFinite(value) && value >= 0 ? value : DEFAULT_SESSION_MODEL_RESOLUTION_TIMEOUT_MS;
+}
+async function waitForSessionModelResolution(input) {
+  const pollMs = input.pollMs ?? SESSION_MODEL_RESOLUTION_POLL_MS;
+  const sleep2 = input.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms)));
+  const startedAt = Date.now();
+  for (;; ) {
+    if (input.barrierExists())
+      return true;
+    const remaining = input.timeoutMs - (Date.now() - startedAt);
+    if (remaining <= 0)
+      return false;
+    await sleep2(Math.min(pollMs, remaining));
+  }
+}
 function isSrModel2(name) {
   return name.startsWith("sr-");
 }
@@ -88847,17 +89068,7 @@ function recordWebhookEvent(rec, deps = {}) {
 init_format();
 import { renameSync as renameSync17, unlinkSync as unlinkSync20, chmodSync as chmodSync11 } from "fs";
 var MAX_BUFFER_SIZE = 1024 * 1024;
-var VALID_OPERATOR_KINDS = new Set([
-  "credentials-expired",
-  "credentials-invalid",
-  "credit-exhausted",
-  "quota-exhausted",
-  "rate-limited",
-  "agent-crashed",
-  "agent-restarted-unexpectedly",
-  "unknown-4xx",
-  "unknown-5xx"
-]);
+var VALID_OPERATOR_KINDS = new Set(OPERATOR_EVENT_KINDS);
 var AGENT_NAME_RE3 = /^[a-z0-9][a-z0-9_-]{0,50}$/;
 var OPERATOR_EVENT_DETAIL_MAX = 1000;
 function validateClientMessage(msg) {
@@ -99461,10 +99672,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.19.35";
-var COMMIT_SHA = "76ae22ca";
-var COMMIT_DATE = "2026-07-30T01:27:21Z";
-var LATEST_PR = 4011;
+var VERSION2 = "0.19.37";
+var COMMIT_SHA = "5d2f9a17";
+var COMMIT_DATE = "2026-07-30T08:57:38Z";
+var LATEST_PR = 4023;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -112706,76 +112917,87 @@ async function startGateway() {
         try {
           const smAgentDir = resolveAgentDirFromEnv();
           if (smAgentDir) {
-            const activePath = join68(smAgentDir, ".active-session-model");
-            if (existsSync57(activePath)) {
-              try {
-                const launched = readFileSync60(activePath, "utf8").trim();
-                const configured = (() => {
-                  const d = switchroomExecJson(["agent", "list"]);
-                  const raw = d?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
-                  return resolveMainModel(raw ?? undefined);
-                })();
-                const isApplyBoot = launched.length > 0 && launched !== configured;
-                sessionModelSource.setOverride(isApplyBoot ? launched : null, { verify: true });
-                const modelBootCardDeps = {
-                  agent: getMyAgentName(),
-                  chat: modelSwitchMarkerChat,
-                  log: (line) => process.stderr.write(line),
-                  sendCard: (chatId, body, opts) => lockedBot.api.sendMessage(chatId, body, opts)
-                };
-                if (isApplyBoot) {
-                  sessionModelSource.setDivergenceHandler(buildServedModelDivergenceHandler(modelBootCardDeps));
-                }
-                const confirmation = modelSwitchReason != null ? classifyModelSwitchConfirmation({
-                  reason: modelSwitchReason,
-                  launched,
-                  configured
-                }) : null;
-                process.stderr.write(formatModelRelaunchDiagLog({
-                  agent: getMyAgentName(),
-                  launched,
-                  configured,
-                  confirmation,
-                  isApplyBoot
-                }));
-                if (confirmation != null) {
-                  deliverModelSwitchBootNotice({
-                    ...modelBootCardDeps,
+            const resolutionTimeoutMs = resolveSessionModelResolutionTimeoutMs(process.env.SWITCHROOM_SESSION_MODEL_RESOLUTION_TIMEOUT_MS);
+            const resolved = await waitForSessionModelResolution({
+              barrierExists: () => existsSync57(join68(smAgentDir, ".session-model-resolved")),
+              timeoutMs: resolutionTimeoutMs
+            });
+            if (!resolved) {
+              const target = modelSwitchReason == null ? "(none)" : parseModelSwitchTarget(modelSwitchReason) ?? "(unknown)";
+              process.stderr.write(`telegram gateway: gw /model relaunch UNRESOLVED agent=${getMyAgentName()} target=${target} (barrier timeout after ${resolutionTimeoutMs}ms)
+`);
+            } else {
+              const activePath = join68(smAgentDir, ".active-session-model");
+              if (existsSync57(activePath)) {
+                try {
+                  const launched = readFileSync60(activePath, "utf8").trim();
+                  const configured = (() => {
+                    const d = switchroomExecJson(["agent", "list"]);
+                    const raw = d?.agents?.find((a) => a.name === getMyAgentName())?.model ?? null;
+                    return resolveMainModel(raw ?? undefined);
+                  })();
+                  const isApplyBoot = launched.length > 0 && launched !== configured;
+                  sessionModelSource.setOverride(isApplyBoot ? launched : null, { verify: true });
+                  const modelBootCardDeps = {
+                    agent: getMyAgentName(),
+                    chat: modelSwitchMarkerChat,
+                    log: (line) => process.stderr.write(line),
+                    sendCard: (chatId, body, opts) => lockedBot.api.sendMessage(chatId, body, opts)
+                  };
+                  if (isApplyBoot) {
+                    sessionModelSource.setDivergenceHandler(buildServedModelDivergenceHandler(modelBootCardDeps));
+                  }
+                  const confirmation = modelSwitchReason != null ? classifyModelSwitchConfirmation({
+                    reason: modelSwitchReason,
+                    launched,
+                    configured
+                  }) : null;
+                  process.stderr.write(formatModelRelaunchDiagLog({
+                    agent: getMyAgentName(),
+                    launched,
+                    configured,
                     confirmation,
-                    hasSessionModelAlert: existsSync57(join68(smAgentDir, ".session-model-alert"))
-                  });
-                }
-              } catch {}
-            }
-            const activeEffortPath = join68(smAgentDir, ".active-session-effort");
-            if (existsSync57(activeEffortPath)) {
-              try {
-                const launchedEffort = readFileSync60(activeEffortPath, "utf8").trim();
-                const configuredEffort = getConfiguredEffortForPersist();
-                sessionEffortOverride = launchedEffort.length > 0 && launchedEffort !== configuredEffort ? launchedEffort : null;
-              } catch {}
-            }
-            const alertPath = join68(smAgentDir, ".session-model-alert");
-            if (existsSync57(alertPath)) {
-              let alertText = null;
-              try {
-                alertText = readFileSync60(alertPath, "utf8").trim();
-              } catch {
-                alertText = null;
+                    isApplyBoot
+                  }));
+                  if (confirmation != null) {
+                    deliverModelSwitchBootNotice({
+                      ...modelBootCardDeps,
+                      confirmation,
+                      hasSessionModelAlert: existsSync57(join68(smAgentDir, ".session-model-alert"))
+                    });
+                  }
+                } catch {}
               }
-              try {
-                unlinkSync30(alertPath);
-              } catch {}
-              if (alertText && alertText.length > 0) {
-                const operators = loadAccess().allowFrom;
-                for (const operator of operators) {
-                  if (!operator)
-                    continue;
-                  lockedBot.api.sendMessage(operator, `\u26A0\uFE0F ${alertText}`).catch((err) => process.stderr.write(`telegram gateway: session-model alert send failed for ${operator}: ${err?.message ?? String(err)}
-`));
+              const activeEffortPath = join68(smAgentDir, ".active-session-effort");
+              if (existsSync57(activeEffortPath)) {
+                try {
+                  const launchedEffort = readFileSync60(activeEffortPath, "utf8").trim();
+                  const configuredEffort = getConfiguredEffortForPersist();
+                  sessionEffortOverride = launchedEffort.length > 0 && launchedEffort !== configuredEffort ? launchedEffort : null;
+                } catch {}
+              }
+              const alertPath = join68(smAgentDir, ".session-model-alert");
+              if (existsSync57(alertPath)) {
+                let alertText = null;
+                try {
+                  alertText = readFileSync60(alertPath, "utf8").trim();
+                } catch {
+                  alertText = null;
                 }
-                process.stderr.write(`telegram gateway: session-model: LiteLLM-down override drop \u2014 ${alertText}
+                try {
+                  unlinkSync30(alertPath);
+                } catch {}
+                if (alertText && alertText.length > 0) {
+                  const operators = loadAccess().allowFrom;
+                  for (const operator of operators) {
+                    if (!operator)
+                      continue;
+                    lockedBot.api.sendMessage(operator, `\u26A0\uFE0F ${alertText}`).catch((err) => process.stderr.write(`telegram gateway: session-model alert send failed for ${operator}: ${err?.message ?? String(err)}
+`));
+                  }
+                  process.stderr.write(`telegram gateway: session-model: LiteLLM-down override drop \u2014 ${alertText}
 `);
+                }
               }
             }
           }

package/telegram-plugin/dist/server.js

@@ -24827,7 +24827,7 @@ var init_bridge = __esm(async () => {
   TOOL_SCHEMAS = [
     {
       name: "reply",
-      description: "Reply on Telegram. Pass chat_id from the inbound message. By default the reply is a quote-reply to the latest inbound user message in this chat+thread \u2014 pass quote:false to opt out, or pass an explicit reply_to to thread under a specific earlier message. files (absolute paths) attach images or documents. inline_keyboard adds tappable buttons (URL or callback) under the message \u2014 single-tap actions beat asking the user to type YES. " + "FORUM TOPICS: a reply is auto-routed back to the topic the question came from, so do NOT pass message_thread_id on a normal reply \u2014 pass the inbound's origin_turn_id instead, so the answer lands in the right topic even if a message from another topic arrived while you were working. message_thread_id is only for deliberately posting into a topic that is not the one you were asked in. " + 'FORMAT: the default format is "html" \u2014 write natural markdown and it is auto-converted to Telegram HTML (bold, italic, code, links, code blocks). Pass format: "markdownv2" for MarkdownV2 with auto-escaping, or "text" for plain text sent verbatim.',
+      description: "Reply on Telegram. Pass chat_id from the inbound message. By default the reply is a quote-reply to the latest inbound user message in this chat+thread \u2014 pass quote:false to opt out, or pass an explicit reply_to to thread under a specific earlier message. files (absolute paths) attach images or documents. inline_keyboard adds tappable buttons (URL or callback) under the message \u2014 single-tap actions beat asking the user to type YES. " + "FORUM TOPICS: a reply is auto-routed back to the topic the question came from, so do NOT pass message_thread_id on a normal reply \u2014 pass the inbound's origin_turn_id instead, so the answer lands in the right topic even if a message from another topic arrived while you were working. message_thread_id is only for deliberately posting into a topic that is not the one you were asked in. " + 'FORMAT: by default your text is rendered as rich GFM markdown (Bot API 10.1) \u2014 write natural markdown (bold, italic, code, links, code blocks, lists, tables) and it renders as-is. Pass format: "text" to send plain text verbatim with no rendering. "html" and "markdownv2" are accepted legacy aliases that route through the exact same single rich GFM path \u2014 there is no separate HTML engine and no auto-escaping.',
       inputSchema: {
         type: "object",
         properties: {
@@ -24838,7 +24838,7 @@ var init_bridge = __esm(async () => {
           message_thread_id: { type: "string", description: "Forum topic thread ID. Auto-applied from the last inbound message in the same chat if not specified." },
           origin_turn_id: { type: "string", description: "In a forum supergroup, pass back the origin_turn_id attribute from the <channel> message you are answering. It pins the reply to that message's topic even if another topic's turn started meanwhile. Omit in DMs / single-topic chats." },
           files: { type: "array", items: { type: "string" }, description: "Absolute file paths to attach. Images send as photos; other types as documents. Max 50MB each. Telegram rejects photos with extreme dimensions (aspect ratio over ~10:1, width+height over 10000px, or over 10MB) \u2014 very tall images like full-page screenshots are auto-rerouted as documents; crop or split them first if the user should see them inline as photos." },
-          format: { type: "string", enum: ["html", "markdownv2", "text"], description: "Rendering mode. 'html' (default) converts markdown to Telegram HTML." },
+          format: { type: "string", enum: ["html", "markdownv2", "text"], description: "Rendering mode. Default renders your text as rich GFM markdown (Bot API 10.1). 'text' sends plain text verbatim. 'html' and 'markdownv2' are legacy aliases that route through the same single rich GFM path \u2014 no separate HTML engine, no auto-escaping." },
           disable_web_page_preview: { type: "boolean", description: "Disable link preview thumbnails. Default: true." },
           protect_content: { type: "boolean", description: "When true, Telegram prevents the message from being forwarded or saved." },
           quote_text: { type: "string", description: "Surgical quote: specific text to highlight from the reply_to message. Requires reply_to." },
@@ -24912,7 +24912,7 @@ var init_bridge = __esm(async () => {
           chat_id: { type: "string" },
           message_id: { type: "string" },
           text: { type: "string" },
-          format: { type: "string", enum: ["html", "markdownv2", "text"], description: "Rendering mode. 'html' (default) converts markdown to Telegram HTML." }
+          format: { type: "string", enum: ["html", "markdownv2", "text"], description: "Rendering mode. Default renders your text as rich GFM markdown (Bot API 10.1). 'text' sends plain text verbatim. 'html' and 'markdownv2' are legacy aliases that route through the same single rich GFM path \u2014 no separate HTML engine, no auto-escaping." }
         },
         required: ["chat_id", "message_id", "text"]
       }
@@ -25069,7 +25069,7 @@ var init_bridge = __esm(async () => {
         type: "object",
         properties: {
           chat_id: { type: "string", description: "Chat that should receive the question. Pass from inbound meta." },
-          question: { type: "string", description: "The question text. Plain text or HTML. Keep it short \u2014 buttons render below." },
+          question: { type: "string", description: "The question text. Plain text or GFM markdown (rendered through the same rich path as replies). Keep it short \u2014 buttons render below." },
           options: {
             type: "array",
             items: { type: "string" },