switchroom 0.19.42 → 0.19.43

package/telegram-plugin/dist/gateway/gateway.js

@@ -6965,7 +6965,9 @@ function stripExcessBold(text, onStrip) {
   const ratio = boldChars / visible.length;
   const blocks = masked.split(/\n{2,}/);
   if (ratio > 0.3) {
-    const rebuilt2 = blocks.map((block) => isPseudoHeadingBlock(block) ? block : unbold(block));
+    const contentBlocks = blocks.filter((b) => stripPlaceholders(b).trim() !== "");
+    const allHeadings = contentBlocks.length > 0 && contentBlocks.every(isPseudoHeadingBlock);
+    const rebuilt2 = blocks.map((block) => !allHeadings && isPseudoHeadingBlock(block) ? block : unbold(block));
     const out2 = rejoinBlocks(masked, rebuilt2);
     if (out2 !== masked)
       onStrip?.({ rule: "global", ratio });
@@ -7114,6 +7116,25 @@ function hardSliceToCap(text, cap = RICH_MESSAGE_MAX_CHARS) {
   }
   return out;
 }
+function splitPlainTextToCap(text, cap = PLAIN_TEXT_MAX_CHARS) {
+  if (cap <= 0)
+    return [text];
+  if (text.length <= cap)
+    return [text];
+  const out = [];
+  for (const piece of splitMarkdownChunks(text, cap)) {
+    if (piece.length <= cap) {
+      if (piece.length > 0)
+        out.push(piece);
+      continue;
+    }
+    for (const slice of hardSliceToCap(piece, cap)) {
+      if (slice.length > 0)
+        out.push(slice);
+    }
+  }
+  return out.length > 0 ? out : [text];
+}
 function splitMarkdownChunks(text, maxLen = RICH_MESSAGE_MAX_CHARS) {
   if (text.length <= maxLen)
     return [text];
@@ -7138,9 +7159,7 @@ function splitMarkdownChunks(text, maxLen = RICH_MESSAGE_MAX_CHARS) {
     } else if (spaceIdx > 0) {
       cut = spaceIdx;
     }
-    cut = backOffOpenFence(rest, cut);
-    cut = backOffTableRow(rest, cut);
-    cut = backOffOpenInline(rest, cut);
+    cut = safeMarkdownCut(rest, cut);
     if (cut <= 0) {
       const sliced = hardSliceToCap(rest, maxLen);
       chunks.push(stripBoundarySpacers(sliced[0], "trailing"));
@@ -7186,6 +7205,55 @@ function backOffTableRow(text, cut) {
   }
   return cut;
 }
+function safeMarkdownCut(text, cut) {
+  if (cut <= 0)
+    return 0;
+  if (cut >= text.length)
+    return text.length;
+  let safe = backOffOpenFence(text, cut);
+  safe = backOffTableRow(text, safe);
+  safe = backOffOpenInline(text, safe);
+  while (safe > 0 && DELIMITER_RUN_CHARS.has(text[safe]) && text[safe - 1] === text[safe])
+    safe--;
+  if (safe <= 0)
+    return 0;
+  const prev = text.charCodeAt(safe - 1);
+  const here = text.charCodeAt(safe);
+  if (prev >= 55296 && prev <= 56319 && here >= 56320 && here <= 57343)
+    safe -= 1;
+  return safe;
+}
+function truncateMarkdownSafe(text, budget) {
+  if (budget <= 0)
+    return "";
+  if (text.length <= budget)
+    return text;
+  let t = text;
+  let end = budget;
+  for (let pass = 0;pass <= MAX_OPENER_REPAIRS; pass++) {
+    const safe = safeMarkdownCut(t, end);
+    if (safe * 2 >= end)
+      return t.slice(0, safe);
+    const repaired = dropLeadingOpener(t.slice(safe));
+    if (repaired == null)
+      return t.slice(0, safe);
+    end -= t.length - safe - repaired.length;
+    t = t.slice(0, safe) + repaired;
+  }
+  return t.slice(0, Math.max(0, safeMarkdownCut(t, end)));
+}
+function dropLeadingOpener(rest) {
+  const fence = FENCE_OPENER_AT_HEAD.exec(rest);
+  if (fence != null)
+    return fence[1] + rest.slice(fence[0].length);
+  const inline = INLINE_OPENER_AT_HEAD.exec(rest);
+  if (inline != null)
+    return rest.slice(inline[0].length);
+  const row = TABLE_ROW_OPENER_AT_HEAD.exec(rest);
+  if (row != null)
+    return row[1] + rest.slice(row[0].length);
+  return null;
+}
 function backOffOpenInline(text, cut) {
   if (cut <= 0 || cut >= text.length)
     return cut;
@@ -7206,7 +7274,7 @@ function backOffOpenInline(text, cut) {
   }
   return earliest;
 }
-var RICH_MESSAGE_MAX_CHARS = 32768, PARAGRAPH_SPACER = "\u00a0", PSEUDO_HEADING_MAX_CHARS = 48, INLINE_SPAN_PATTERNS;
+var RICH_MESSAGE_MAX_CHARS = 32768, PLAIN_TEXT_MAX_CHARS = 4096, PARAGRAPH_SPACER = "\u00a0", PSEUDO_HEADING_MAX_CHARS = 64, INLINE_SPAN_PATTERNS, DELIMITER_RUN_CHARS, FENCE_OPENER_AT_HEAD, INLINE_OPENER_AT_HEAD, TABLE_ROW_OPENER_AT_HEAD, MAX_OPENER_REPAIRS = 8;
 var init_format = __esm(() => {
   INLINE_SPAN_PATTERNS = [
     /`[^`\n]+`/g,
@@ -7215,8 +7283,14 @@ var init_format = __esm(() => {
     /\*\*[^*\n]+\*\*/g,
     /__[^_\n]+__/g,
     /(?<![\w*])_[^_\n]+_(?![\w*])/g,
-    /\[[^\]\n]*\]\([^)\n]*\)/g
+    /\[[^\]\n]*\]\([^)\n]*\)/g,
+    /~~[^~\n]+~~/g,
+    /\|\|[^|\n]+\|\|/g
   ];
+  DELIMITER_RUN_CHARS = new Set(["*", "_", "`", "~", "|"]);
+  FENCE_OPENER_AT_HEAD = /^(\n?)(?:`{3,}|~{3,})[^\n]*/;
+  INLINE_OPENER_AT_HEAD = /^(?:\*{1,3}|_{1,3}|`+|~~|\|\||\[)/;
+  TABLE_ROW_OPENER_AT_HEAD = /^(\n?[ \t]*)\|/;
 });
 
 // ../src/auth/quota.ts
@@ -13686,276 +13760,6 @@ var require_mod4 = __commonJS((exports) => {
   __exportStar(require_worker(), exports);
 });
 
-// flood-429-ledger.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, chmodSync, unlinkSync as unlinkSync2 } from "node:fs";
-import { dirname as dirname4, join as join4 } from "node:path";
-function flood429LedgerPathFromFloodState(floodStatePath) {
-  return join4(dirname4(floodStatePath), FLOOD_429_LEDGER_FILE);
-}
-function belongsToEpisode(ep, obs) {
-  const impliedUntil = obs.ts + Math.max(0, obs.retryAfterSec) * 1000;
-  if (Math.abs(impliedUntil - ep.untilTs) <= EPISODE_MERGE_MS)
-    return true;
-  return obs.ts >= ep.firstTs && obs.ts <= ep.untilTs;
-}
-function foldFlood429Observation(episodes, obs, now = obs.ts) {
-  const retryAfterSec = Math.max(0, Math.floor(obs.retryAfterSec));
-  const impliedUntil = obs.ts + retryAfterSec * 1000;
-  const next = episodes.slice();
-  const last = next[next.length - 1];
-  if (last && belongsToEpisode(last, obs)) {
-    next[next.length - 1] = {
-      firstTs: Math.min(last.firstTs, obs.ts),
-      lastTs: Math.max(last.lastTs, obs.ts),
-      peakRetryAfterSec: Math.max(last.peakRetryAfterSec, retryAfterSec),
-      untilTs: Math.max(last.untilTs, impliedUntil),
-      count: last.count + 1
-    };
-  } else {
-    next.push({
-      firstTs: obs.ts,
-      lastTs: obs.ts,
-      peakRetryAfterSec: retryAfterSec,
-      untilTs: impliedUntil,
-      count: 1
-    });
-  }
-  return pruneFlood429Episodes(next, now);
-}
-function pruneFlood429Episodes(episodes, now) {
-  const floor = now - FLOOD_429_LEDGER_RETENTION_MS;
-  const kept = episodes.filter((e) => e.lastTs >= floor);
-  return kept.length > FLOOD_429_LEDGER_MAX_EPISODES ? kept.slice(kept.length - FLOOD_429_LEDGER_MAX_EPISODES) : kept;
-}
-function parseEpisode(raw) {
-  if (typeof raw !== "object" || raw === null)
-    return null;
-  const r = raw;
-  const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
-  const firstTs = num(r.firstTs);
-  const untilTs = num(r.untilTs);
-  const peak = num(r.peakRetryAfterSec);
-  if (firstTs === null || untilTs === null || peak === null)
-    return null;
-  return {
-    firstTs,
-    lastTs: num(r.lastTs) ?? firstTs,
-    peakRetryAfterSec: peak,
-    untilTs,
-    count: num(r.count) ?? 1
-  };
-}
-function readFlood429LedgerResult(path, readFile = (p) => readFileSync3(p, "utf-8")) {
-  let text;
-  try {
-    text = readFile(path);
-  } catch (err) {
-    const code = err?.code;
-    if (code === "ENOENT" || code === "ENOTDIR")
-      return { status: "absent", episodes: [] };
-    return {
-      status: "unreadable",
-      episodes: [],
-      error: `${code ?? "EUNKNOWN"}: ${err?.message ?? String(err)}`
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch (err) {
-    return { status: "corrupt", episodes: [], error: err?.message ?? String(err) };
-  }
-  if (!Array.isArray(parsed)) {
-    return { status: "corrupt", episodes: [], error: "ledger is not a JSON array" };
-  }
-  const out = [];
-  let dropped = 0;
-  for (const raw of parsed) {
-    const ep = parseEpisode(raw);
-    if (ep)
-      out.push(ep);
-    else
-      dropped += 1;
-  }
-  if (dropped > 0 && out.length === 0) {
-    return { status: "corrupt", episodes: [], error: `${dropped} unparseable entr(ies)` };
-  }
-  return { status: "ok", episodes: out };
-}
-function readFlood429Ledger(path, readFile = (p) => readFileSync3(p, "utf-8")) {
-  return readFlood429LedgerResult(path, readFile).episodes;
-}
-function writeFlood429Ledger(path, episodes, log = (l) => process.stderr.write(l)) {
-  const payload = JSON.stringify(episodes);
-  try {
-    mkdirSync5(dirname4(path), { recursive: true });
-  } catch {}
-  try {
-    writeFileSync4(path, payload, { mode: FLOOD_429_LEDGER_MODE });
-    try {
-      chmodSync(path, FLOOD_429_LEDGER_MODE);
-    } catch {}
-    return;
-  } catch (err) {
-    const code = err?.code;
-    if (code !== "EACCES" && code !== "EPERM") {
-      log(`telegram gateway: 429-ledger: could not persist ${path} (${code ?? "error"})
-`);
-      return;
-    }
-    try {
-      unlinkSync2(path);
-      writeFileSync4(path, payload, { mode: FLOOD_429_LEDGER_MODE });
-    } catch (err2) {
-      log(`telegram gateway: 429-ledger: cannot persist the 429 pressure ledger to ${path} ` + `(${code}, recreate failed: ${err2?.message ?? String(err2)}). ` + `Flood-pressure history will be missing from \`switchroom doctor\`
-`);
-    }
-  }
-}
-function recordFlood429(path, obs, log = (l) => process.stderr.write(l)) {
-  const folded = foldFlood429Observation(readFlood429Ledger(path), obs, obs.ts);
-  writeFlood429Ledger(path, folded, log);
-}
-var FLOOD_429_LEDGER_FILE = "429-ledger.json", FLOOD_429_LEDGER_MODE = 420, EPISODE_MERGE_MS = 60000, FLOOD_429_LEDGER_MAX_EPISODES = 400, FLOOD_429_LEDGER_RETENTION_MS, PENALTY_WINDOW_MS, TRIVIAL_PRESSURE_WINDOW_MS;
-var init_flood_429_ledger = __esm(() => {
-  FLOOD_429_LEDGER_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
-  PENALTY_WINDOW_MS = 7 * 24 * 60 * 60 * 1000;
-  TRIVIAL_PRESSURE_WINDOW_MS = 24 * 60 * 60 * 1000;
-});
-
-// flood-circuit-breaker.ts
-import {
-  existsSync as existsSync2,
-  readFileSync as readFileSync4,
-  writeFileSync as writeFileSync5,
-  mkdirSync as mkdirSync6,
-  chmodSync as chmodSync2,
-  unlinkSync as unlinkSync3,
-  renameSync as renameSync6
-} from "node:fs";
-import { dirname as dirname5, join as join5 } from "node:path";
-function floodStatePath(stateDir) {
-  return join5(stateDir, FLOOD_STATE_FILE);
-}
-function computeFloodWait(prior, retryAfterSec, now) {
-  const candidate = now + Math.max(0, retryAfterSec) * 1000;
-  const untilTs = prior && prior.untilTs > candidate ? prior.untilTs : candidate;
-  return { untilTs, retryAfterSec, recordedTs: now };
-}
-function floodWaitRemainingMs(state, now) {
-  if (!state)
-    return 0;
-  return Math.max(0, state.untilTs - now);
-}
-function readFloodStateResult(path) {
-  let text;
-  try {
-    text = readFileSync4(path, "utf-8");
-  } catch (err) {
-    const code = err?.code;
-    if (code === "ENOENT" || code === "ENOTDIR")
-      return { status: "absent", state: null };
-    return {
-      status: "unreadable",
-      state: null,
-      error: `${code ?? "EUNKNOWN"}: ${err?.message ?? String(err)}`
-    };
-  }
-  try {
-    const raw = JSON.parse(text);
-    if (typeof raw.untilTs !== "number" || !Number.isFinite(raw.untilTs)) {
-      return { status: "corrupt", state: null, error: "untilTs is not a finite number" };
-    }
-    return {
-      status: "ok",
-      state: {
-        untilTs: raw.untilTs,
-        retryAfterSec: typeof raw.retryAfterSec === "number" ? raw.retryAfterSec : 0,
-        recordedTs: typeof raw.recordedTs === "number" ? raw.recordedTs : 0
-      }
-    };
-  } catch (err) {
-    return { status: "corrupt", state: null, error: err?.message ?? String(err) };
-  }
-}
-function readFloodState(path) {
-  return readFloodStateResult(path).state;
-}
-function writeFloodState(path, state, log = (l) => process.stderr.write(l)) {
-  const payload = JSON.stringify(state);
-  try {
-    mkdirSync6(dirname5(path), { recursive: true });
-  } catch {}
-  try {
-    writeFileSync5(path, payload, { mode: FLOOD_STATE_MODE });
-    try {
-      chmodSync2(path, FLOOD_STATE_MODE);
-    } catch {}
-    return;
-  } catch (err) {
-    const code = err?.code;
-    if (code !== "EACCES" && code !== "EPERM") {
-      log(`telegram gateway: flood-breaker: could not persist ${path} (${code ?? "error"})
-`);
-      return;
-    }
-    try {
-      unlinkSync3(path);
-      writeFileSync5(path, payload, { mode: FLOOD_STATE_MODE });
-      log(`telegram gateway: flood-breaker: recreated ${path} \u2014 it was owned by another uid ` + `and could not be updated (${code}); the breaker was blind (issue #3106)
-`);
-    } catch (err2) {
-      log(`telegram gateway: flood-breaker: BLIND \u2014 cannot persist the flood-wait window to ${path} ` + `(${code}, and recreate failed: ${err2?.message ?? String(err2)}). ` + `Flood bans will NOT be recorded. Fix the file's ownership/mode (issue #3106)
-`);
-    }
-  }
-}
-function makeFloodWaitRecorder(path, now = Date.now, log = (l) => process.stderr.write(l)) {
-  return (retryAfterSec) => {
-    const t = now();
-    const next = computeFloodWait(readFloodState(path), retryAfterSec, t);
-    writeFloodState(path, next, log);
-    try {
-      recordFlood429(flood429LedgerPathFromFloodState(path), { ts: t, retryAfterSec }, log);
-    } catch {}
-  };
-}
-function warnBlind(path, error, now, log) {
-  const last = blindLoggedAt.get(path);
-  if (last !== undefined && now - last < BLIND_LOG_INTERVAL_MS)
-    return;
-  blindLoggedAt.set(path, now);
-  log(`telegram gateway: flood-breaker: BLIND \u2014 cannot read the flood-wait marker ${path} ` + `(${error ?? "unknown error"}). The breaker cannot tell whether a Telegram flood ban is ` + `open. Essential sends PROCEED (fail-open); non-essential sends (boot card, typing) are ` + `SUPPRESSED. Fix the file's ownership/mode (issue #3106)
-`);
-}
-function makeFloodWaitProbe(path, now = Date.now, log = (l) => process.stderr.write(l)) {
-  return () => {
-    const t = now();
-    const res = readFloodStateResult(path);
-    if (res.status === "unreadable") {
-      warnBlind(path, res.error, t, log);
-      return 0;
-    }
-    return floodWaitRemainingMs(res.state, t);
-  };
-}
-function nonEssentialSendSuppression(path, now) {
-  const res = readFloodStateResult(path);
-  if (res.status === "unreadable") {
-    return { suppress: true, reason: "blind", error: res.error ?? "unknown error" };
-  }
-  const remainingMs = floodWaitRemainingMs(res.state, now);
-  if (remainingMs > 0)
-    return { suppress: true, reason: "flood_wait", remainingMs };
-  return { suppress: false };
-}
-var FLOOD_STATE_FILE = "flood-wait.json", FLOOD_STATE_MODE = 420, BLIND_LOG_INTERVAL_MS = 60000, blindLoggedAt, FLOOD_WINDOWS_CORRUPT_SUPPRESS_MS;
-var init_flood_circuit_breaker = __esm(() => {
-  init_flood_429_ledger();
-  blindLoggedAt = new Map;
-  FLOOD_WINDOWS_CORRUPT_SUPPRESS_MS = 5 * 60000;
-});
-
 // ../src/vault/broker/peercred-ffi.ts
 function getPeerCred(fd) {
   if (process.platform !== "linux")
@@ -14372,7 +14176,7 @@ function isDockerRuntime() {
 import * as net2 from "node:net";
 import * as fs from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join4 } from "node:path";
 function defaultBrokerSocketPath() {
   if (fs.existsSync(OPERATOR_SOCKET_PATH))
     return OPERATOR_SOCKET_PATH;
@@ -14381,8 +14185,8 @@ function defaultBrokerSocketPath() {
   return LEGACY_SOCKET_PATH;
 }
 function vaultTokenFilePath(agentSlug) {
-  const base = process.env.SWITCHROOM_AGENTS_DIR || join6(homedir3(), ".switchroom", "agents");
-  return join6(base, agentSlug, ".vault-token");
+  const base = process.env.SWITCHROOM_AGENTS_DIR || join4(homedir3(), ".switchroom", "agents");
+  return join4(base, agentSlug, ".vault-token");
 }
 function readVaultTokenFile(agentSlug) {
   const filePath = vaultTokenFilePath(agentSlug);
@@ -14605,8 +14409,8 @@ var DEFAULT_TIMEOUT_MS2 = 2000, LEGACY_SOCKET_PATH, OPERATOR_SOCKET_PATH;
 var init_client2 = __esm(() => {
   init_protocol2();
   init_peercred();
-  LEGACY_SOCKET_PATH = join6(homedir3(), ".switchroom", "vault-broker.sock");
-  OPERATOR_SOCKET_PATH = join6(homedir3(), ".switchroom", "broker-operator", "sock");
+  LEGACY_SOCKET_PATH = join4(homedir3(), ".switchroom", "vault-broker.sock");
+  OPERATOR_SOCKET_PATH = join4(homedir3(), ".switchroom", "broker-operator", "sock");
 });
 
 // ../src/agents/tmux.ts
@@ -14617,7 +14421,7 @@ __export(exports_tmux, {
   captureAgentPane: () => captureAgentPane
 });
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync7, readdirSync as readdirSync2, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync6 } from "node:fs";
+import { chmodSync, mkdirSync as mkdirSync5, readdirSync as readdirSync2, statSync as statSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { resolve } from "node:path";
 function captureAgentPane(opts) {
   const { agentName, agentDir, reason } = opts;
@@ -14629,14 +14433,14 @@ function captureAgentPane(opts) {
   const reasonSlug = sanitizeReason(reason);
   const outPath = resolve(outDir, `${ts}-${reasonSlug}.txt`);
   try {
-    mkdirSync7(outDir, { recursive: true, mode: 448 });
+    mkdirSync5(outDir, { recursive: true, mode: 448 });
   } catch (err) {
     const msg = `mkdir crash-reports failed: ${err.message}`;
     console.error(`[tmux-capture] ${agentName}: ${msg}`);
     return { error: msg };
   }
   try {
-    chmodSync3(outDir, 448);
+    chmodSync(outDir, 448);
   } catch (err) {
     console.error(`[tmux-capture] ${agentName}: chmod crash-reports 0700 failed: ${err.message}`);
   }
@@ -14668,7 +14472,7 @@ function captureAgentPane(opts) {
 ` + `
 `;
   try {
-    writeFileSync6(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
+    writeFileSync4(outPath, Buffer.concat([Buffer.from(header, "utf8"), body]), {
       mode: 384
     });
   } catch (err) {
@@ -14752,7 +14556,7 @@ function pruneOldReports(dir, retain) {
   }).sort((a, b) => b.mtimeMs - a.mtimeMs);
   for (const stale of files.slice(retain)) {
     try {
-      unlinkSync4(stale.full);
+      unlinkSync2(stale.full);
     } catch {}
   }
 }
@@ -22165,7 +21969,7 @@ var init_schema = __esm(() => {
       reflect: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `reflect` LLM op (synthesis / mental-model " + "refresh). Emits `HINDSIGHT_API_REFLECT_LLM_*`. Absent \u2192 uses global."),
       consolidation: HindsightPerOpLlmSchema.optional().describe("Per-op override for the `consolidation` LLM op (background memory " + "merge). Emits `HINDSIGHT_API_CONSOLIDATION_LLM_*`. Absent \u2192 global.")
     }).optional().describe("LLM knob for the hindsight container. The flat `provider`/`model` set " + "the global default (backward-compatible); optional `retain`/`reflect`/" + "`consolidation` blocks override individual ops. All fields optional; " + "unset fields fall back to the hard-coded defaults."),
-    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_MAX_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS \u2014 switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY \u2014 a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP \u2014 the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS \u2014 only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS \u2014 the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_MAX_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_MAX_SLOTS \u2014 the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS \u2014 a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED \u2014 a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
+    env: exports_external.record(exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean()])).optional().describe("Operator overrides for switchroom's capability-gated Hindsight " + "performance defaults. Only the keys switchroom actually manages are " + "honoured (`HINDSIGHT_PERF_ENV_KEYS` in " + "src/setup/hindsight-perf-defaults.ts: RERANKER_LOCAL_FP16, " + "RERANKER_LOCAL_BATCH_SIZE, LLM_MAX_CONCURRENT, " + "RETAIN/CONSOLIDATION_LLM_MAX_CONCURRENT, LLM_STRICT_SCHEMA, " + "LLM_MAX_RETRIES, CONSOLIDATION_LLM_PARALLELISM, " + "MAX_OBSERVATIONS_PER_SCOPE, " + "RECALL_MAX_CANDIDATES_PER_SOURCE, LINK_EXPANSION_PER_ENTITY_LIMIT, " + "LINK_EXPANSION_TIMEOUT, LLM_REASONING_EFFORT, " + "RERANKER_LOCAL_BUCKET_BATCHING, RERANKER_MAX_CANDIDATES, " + "RERANKER_LOCAL_MAX_CONCURRENT, RECALL_MAX_CONCURRENT, " + "REFLECT_WALL_TIMEOUT, WORKER_CONSOLIDATION_RESERVED_SLOTS, " + "WORKER_CONSOLIDATION_SLOT_LIMIT, " + "CONSOLIDATION_MAX_MEMORIES_PER_ROUND, GRAPH_SEED_MIN_SIMILARITY, " + "LLM_SUPPORTS_MAX_ITEMS, RECENCY_DECAY_FUNCTION, " + "RECENCY_DECAY_HALFLIFE_DAYS \u2014 switchroom defaults recall's recency " + "curve to `exponential` with a 30-day half-life so a fact retained " + "today outranks a stale one, instead of upstream's near-flat " + "linear/365-day window), the override-only keys " + "switchroom manages but ships NO default for " + "(`HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS`: " + "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY \u2014 a per-deployment " + "`bank-pattern:priority,...` map; unset means upstream's flat " + "created_at FIFO across banks; and " + "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP \u2014 the rollback knob for " + "switchroom's CE-saturation damping patch, a float; >= ~0.65 backs the " + "damping out entirely, unset means the patch's own derived gap; and " + "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS \u2014 only read when the " + "decay function is `linear`, so switchroom ships no default for it but " + "still honours an operator who flips the function back; and " + "HINDSIGHT_API_WORKER_MAX_SLOTS \u2014 the worker poller's TOTAL in-flight " + "task budget, the pool WORKER_CONSOLIDATION_RESERVED_SLOTS reserves out of; " + "unset means upstream's own default; and " + "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS \u2014 the reserved slot FLOOR for the " + "retain (memory write) lane, carved from that same total; unset means " + "upstream's own 0, i.e. no floor and retain competes for the shared " + "pool; and " + "the pre-0.8.6 name HINDSIGHT_API_WORKER_<TYPE>_MAX_SLOTS is still " + "accepted for every operation type and normalised to " + "..._RESERVED_SLOTS on the way in, because setting both names for " + "one type is a hard boot failure in the engine and switchroom " + "therefore emits only the canonical name; and " + "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY \u2014 the cosine-similarity floor a " + "candidate must reach to be returned by the semantic retrieval arm at " + "all (0..1); unset means upstream's own 0.3, and where it should sit " + "depends on the bank's embedding model and phrasing diversity, so " + "switchroom ships no opinion; and " + "HINDSIGHT_MCP_RECALL_BUDGET_MODE \u2014 the rollback knob for switchroom's " + "mcp-recall-token-budget image patch; `legacy` restores upstream's " + "exact pre-patch recall returns, anything else or unset is the " + "honest-envelope mode; and " + "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT \u2014 upstream's own per-op reflect " + "temperature knob, made live by switchroom's reflect-temperature image " + "patch; a float, or `none` to omit the kwarg (provider default, " + "upstream's accidental pre-patch behaviour); unset means the image's " + "baked default 0.1), plus the " + "embedded-PostgreSQL (pg0) sizing keys switchroom manages in " + "src/setup/hindsight-pg-defaults.ts (`HINDSIGHT_PG_ENV_KEYS`: " + "SWITCHROOM_HINDSIGHT_PG_EFFECTIVE_CACHE_SIZE, " + "SWITCHROOM_HINDSIGHT_PG_SHARED_BUFFERS \u2014 a postgres size string such " + "as `4GB`, or the sentinel `off` to leave pg0's own default for that " + "one knob). A value set here " + "REPLACES switchroom's default and is emitted even when the gating " + "capability is absent, so an operator can always force a knob. Other " + "`HINDSIGHT_API_*` keys are deliberately IGNORED \u2014 a blanket " + "passthrough would collide with the vars startHindsight() derives " + "itself (HINDSIGHT_API_PORT, the retain token/deadline budget).")
   });
   MicrosoftWorkspaceConfigSchema = exports_external.object({
     microsoft_client_id: exports_external.string().min(1).optional().describe("Microsoft OAuth application (client) ID from Entra portal " + "(literal string or vault reference e.g. " + "'vault:microsoft-oauth-client-id'). OPTIONAL \u2014 omit it to use " + "switchroom's shipped default Microsoft app (zero-config). " + "Set it only to bring your own Entra app (BYO)."),
@@ -22698,7 +22502,7 @@ var init_schema = __esm(() => {
 });
 
 // ../src/config/paths.ts
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync3 } from "node:fs";
 import { resolve as resolve3 } from "node:path";
 function home() {
   return process.env.HOME ?? "/root";
@@ -22714,7 +22518,7 @@ function resolveStatePath(fragment) {
   const h = home();
   const primary = resolve3(h, DEFAULT_STATE_DIR, fragment);
   const legacy = resolve3(h, LEGACY_STATE_DIR, fragment);
-  if (!existsSync4(primary) && existsSync4(legacy)) {
+  if (!existsSync3(primary) && existsSync3(legacy)) {
     warnLegacyStateOnce(legacy);
     return legacy;
   }
@@ -22727,9 +22531,9 @@ function resolveDualPath(pathStr) {
     const absolute = resolve3(h, rest);
     if (rest.startsWith(`${DEFAULT_STATE_DIR}/`)) {
       const frag = rest.slice(DEFAULT_STATE_DIR.length + 1);
-      if (!existsSync4(absolute)) {
+      if (!existsSync3(absolute)) {
         const legacy = resolve3(h, LEGACY_STATE_DIR, frag);
-        if (existsSync4(legacy)) {
+        if (existsSync3(legacy)) {
           warnLegacyStateOnce(legacy);
           return legacy;
         }
@@ -22754,7 +22558,7 @@ var init_overlay_schema = __esm(() => {
 });
 
 // ../src/config/overlay-loader.ts
-import { existsSync as existsSync5, readFileSync as readFileSync6, readdirSync as readdirSync3, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync5 } from "node:fs";
 import { basename as basename4, resolve as resolve4 } from "node:path";
 function deriveOverlayTitle(raw, fileName) {
   const titleFromComment = raw.match(/^#[^\S\n]*name:[^\S\n]*(\S.*?)[^\S\n]*$/m)?.[1];
@@ -22770,7 +22574,7 @@ function overlayDirFor(agentName, subdir) {
   return resolve4(base);
 }
 function listYamlFiles(dir) {
-  if (!existsSync5(dir))
+  if (!existsSync4(dir))
     return [];
   let entries;
   try {
@@ -22818,7 +22622,7 @@ function applyAgentOverlays(config) {
         const merged = [...agentCfg.schedule ?? []];
         for (const file of files) {
           try {
-            const raw = readFileSync6(file, "utf-8");
+            const raw = readFileSync4(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             const title = deriveOverlayTitle(raw, basename4(file));
@@ -22859,7 +22663,7 @@ function applyAgentOverlays(config) {
         const seen = new Set(merged);
         for (const file of skillFiles) {
           try {
-            const raw = readFileSync6(file, "utf-8");
+            const raw = readFileSync4(file, "utf-8");
             const parsed = import_yaml.parse(raw);
             const doc = OverlayDocSchema.parse(parsed);
             for (const skillName of doc.skills ?? []) {
@@ -23329,7 +23133,7 @@ var init_timezone = __esm(() => {
 });
 
 // ../src/config/loader.ts
-import { readFileSync as readFileSync7, existsSync as existsSync6 } from "node:fs";
+import { readFileSync as readFileSync5, existsSync as existsSync5 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { resolve as resolve5 } from "node:path";
 function formatZodErrors(error) {
@@ -23396,7 +23200,7 @@ function findConfigFile(startDir) {
     resolve5(userDir, "clerk.yml")
   ].filter(Boolean);
   for (const path of searchPaths) {
-    if (existsSync6(path)) {
+    if (existsSync5(path)) {
       return path;
     }
   }
@@ -23404,12 +23208,12 @@ function findConfigFile(startDir) {
 }
 function loadConfig(configPath) {
   const filePath = configPath ?? findConfigFile();
-  if (!existsSync6(filePath)) {
+  if (!existsSync5(filePath)) {
     throw new ConfigError(`Config file not found: ${filePath}`);
   }
   let raw;
   try {
-    raw = readFileSync7(filePath, "utf-8");
+    raw = readFileSync5(filePath, "utf-8");
   } catch (err) {
     throw new ConfigError(`Failed to read config file: ${filePath}`, [
       `  ${err.message}`
@@ -23523,12 +23327,12 @@ var init_flock = () => {};
 // ../src/vault/vault.ts
 import { randomBytes as randomBytes4, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
 import {
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync6,
   writeSync as writeSync2,
-  existsSync as existsSync7,
-  renameSync as renameSync7,
-  mkdirSync as mkdirSync9,
-  unlinkSync as unlinkSync5,
+  existsSync as existsSync6,
+  renameSync as renameSync6,
+  mkdirSync as mkdirSync7,
+  unlinkSync as unlinkSync3,
   fsyncSync as fsyncSync2,
   openSync as openSync2,
   closeSync as closeSync2,
@@ -23566,12 +23370,12 @@ function normalizeSecrets(raw) {
   return out;
 }
 function openVault(passphrase, vaultPath) {
-  if (!existsSync7(vaultPath)) {
+  if (!existsSync6(vaultPath)) {
     throw new VaultError(`Vault file not found: ${vaultPath}`);
   }
   let vaultFile;
   try {
-    vaultFile = JSON.parse(readFileSync8(vaultPath, "utf8"));
+    vaultFile = JSON.parse(readFileSync6(vaultPath, "utf8"));
   } catch {
     throw new VaultError(`Failed to read vault file: ${vaultPath}`);
   }
@@ -23616,16 +23420,16 @@ var init_vault = __esm(() => {
 
 // ../src/vault/resolver.ts
 import {
-  chmodSync as chmodSync4,
+  chmodSync as chmodSync2,
   closeSync as closeSync3,
-  mkdirSync as mkdirSync10,
+  mkdirSync as mkdirSync8,
   mkdtempSync,
   openSync as openSync3,
   rmSync as rmSync2,
   statSync as statSync6,
   writeSync as writeSync3
 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join6 } from "node:path";
 import { tmpdir } from "node:os";
 import { constants as fsConstants } from "node:fs";
 function isVaultReference(value) {
@@ -23677,13 +23481,13 @@ function materializationRoot() {
     return cachedRoot;
   const xdg = process.env.XDG_RUNTIME_DIR;
   if (xdg) {
-    const base = join8(xdg, "switchroom", "vault");
-    mkdirSync10(base, { recursive: true, mode: 448 });
-    cachedRoot = mkdtempSync(join8(base, "run-"));
+    const base = join6(xdg, "switchroom", "vault");
+    mkdirSync8(base, { recursive: true, mode: 448 });
+    cachedRoot = mkdtempSync(join6(base, "run-"));
   } else {
-    cachedRoot = mkdtempSync(join8(tmpdir(), "switchroom-vault-"));
+    cachedRoot = mkdtempSync(join6(tmpdir(), "switchroom-vault-"));
   }
-  chmodSync4(cachedRoot, 448);
+  chmodSync2(cachedRoot, 448);
   return cachedRoot;
 }
 function writeFileExclusive(filePath, content) {
@@ -23696,14 +23500,14 @@ function writeFileExclusive(filePath, content) {
   }
 }
 function materializeFilesEntry(key, files) {
-  const dir = join8(materializationRoot(), key);
+  const dir = join6(materializationRoot(), key);
   if (materializedDirs.has(dir)) {
     try {
       rmSync2(dir, { recursive: true, force: true });
     } catch {}
   }
-  mkdirSync10(dir, { recursive: true, mode: 448 });
-  chmodSync4(dir, 448);
+  mkdirSync8(dir, { recursive: true, mode: 448 });
+  chmodSync2(dir, 448);
   const st = statSync6(dir);
   if (typeof process.getuid === "function" && st.uid !== process.getuid()) {
     throw new Error(`Refusing to materialize vault entry: ${dir} not owned by caller`);
@@ -23712,7 +23516,7 @@ function materializeFilesEntry(key, files) {
     if (filename.includes("/") || filename.includes("\\") || filename === ".." || filename === "." || filename.includes("\x00")) {
       throw new Error(`Refusing to materialize vault file with unsafe name: ${filename}`);
     }
-    const filePath = join8(dir, filename);
+    const filePath = join6(dir, filename);
     const content = encoding === "base64" ? Buffer.from(value, "base64") : value;
     writeFileExclusive(filePath, content);
   }
@@ -23839,9 +23643,16 @@ var init_resolver = __esm(() => {
   materializedDirs = new Set;
 });
 
+// status-no-truncate.ts
+var STATUS_ROLLING_LINES = 5, WORKER_HISTORY_MAX = 6, STATUS_LINE_MAX = 200, STATUS_CARD_CHAR_BUDGET, NESTED_PREFIX = "\u2800\u2800\u2800\u21b3 ", WORKER_STEP_INDENT = "\u2800\u2800\u2800";
+var init_status_no_truncate = __esm(() => {
+  init_format();
+  STATUS_CARD_CHAR_BUDGET = RICH_MESSAGE_MAX_CHARS;
+});
+
 // ../src/util/atomic.ts
 import { randomBytes as randomBytes5 } from "node:crypto";
-import { closeSync as closeSync4, constants as constants2, fchmodSync as fchmodSync2, fchownSync as fchownSync2, fsyncSync as fsyncSync3, openSync as openSync4, renameSync as renameSync8, rmSync as rmSync3, writeSync as writeSync4 } from "node:fs";
+import { closeSync as closeSync4, constants as constants2, fchmodSync as fchmodSync2, fchownSync as fchownSync2, fsyncSync as fsyncSync3, openSync as openSync4, renameSync as renameSync7, rmSync as rmSync3, writeSync as writeSync4 } from "node:fs";
 function atomicWriteFileSync2(destPath, contents, modeOrOpts = 384) {
   const opts = typeof modeOrOpts === "number" ? { mode: modeOrOpts } : modeOrOpts;
   const mode = opts.mode ?? 384;
@@ -23865,7 +23676,7 @@ function atomicWriteFileSync2(destPath, contents, modeOrOpts = 384) {
     fsyncSync3(fd);
     closeSync4(fd);
     fd = null;
-    renameSync8(tmp, destPath);
+    renameSync7(tmp, destPath);
   } catch (err) {
     if (fd !== null) {
       try {
@@ -23931,6 +23742,276 @@ var init_approval_card = __esm(() => {
   import_grammy5 = __toESM(require_mod2(), 1);
 });
 
+// flood-429-ledger.ts
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync11, mkdirSync as mkdirSync14, chmodSync as chmodSync4, unlinkSync as unlinkSync9 } from "node:fs";
+import { dirname as dirname7, join as join17 } from "node:path";
+function flood429LedgerPathFromFloodState(floodStatePath) {
+  return join17(dirname7(floodStatePath), FLOOD_429_LEDGER_FILE);
+}
+function belongsToEpisode(ep, obs) {
+  const impliedUntil = obs.ts + Math.max(0, obs.retryAfterSec) * 1000;
+  if (Math.abs(impliedUntil - ep.untilTs) <= EPISODE_MERGE_MS)
+    return true;
+  return obs.ts >= ep.firstTs && obs.ts <= ep.untilTs;
+}
+function foldFlood429Observation(episodes, obs, now = obs.ts) {
+  const retryAfterSec = Math.max(0, Math.floor(obs.retryAfterSec));
+  const impliedUntil = obs.ts + retryAfterSec * 1000;
+  const next = episodes.slice();
+  const last = next[next.length - 1];
+  if (last && belongsToEpisode(last, obs)) {
+    next[next.length - 1] = {
+      firstTs: Math.min(last.firstTs, obs.ts),
+      lastTs: Math.max(last.lastTs, obs.ts),
+      peakRetryAfterSec: Math.max(last.peakRetryAfterSec, retryAfterSec),
+      untilTs: Math.max(last.untilTs, impliedUntil),
+      count: last.count + 1
+    };
+  } else {
+    next.push({
+      firstTs: obs.ts,
+      lastTs: obs.ts,
+      peakRetryAfterSec: retryAfterSec,
+      untilTs: impliedUntil,
+      count: 1
+    });
+  }
+  return pruneFlood429Episodes(next, now);
+}
+function pruneFlood429Episodes(episodes, now) {
+  const floor = now - FLOOD_429_LEDGER_RETENTION_MS;
+  const kept = episodes.filter((e) => e.lastTs >= floor);
+  return kept.length > FLOOD_429_LEDGER_MAX_EPISODES ? kept.slice(kept.length - FLOOD_429_LEDGER_MAX_EPISODES) : kept;
+}
+function parseEpisode(raw) {
+  if (typeof raw !== "object" || raw === null)
+    return null;
+  const r = raw;
+  const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
+  const firstTs = num(r.firstTs);
+  const untilTs = num(r.untilTs);
+  const peak = num(r.peakRetryAfterSec);
+  if (firstTs === null || untilTs === null || peak === null)
+    return null;
+  return {
+    firstTs,
+    lastTs: num(r.lastTs) ?? firstTs,
+    peakRetryAfterSec: peak,
+    untilTs,
+    count: num(r.count) ?? 1
+  };
+}
+function readFlood429LedgerResult(path2, readFile = (p) => readFileSync13(p, "utf-8")) {
+  let text4;
+  try {
+    text4 = readFile(path2);
+  } catch (err) {
+    const code2 = err?.code;
+    if (code2 === "ENOENT" || code2 === "ENOTDIR")
+      return { status: "absent", episodes: [] };
+    return {
+      status: "unreadable",
+      episodes: [],
+      error: `${code2 ?? "EUNKNOWN"}: ${err?.message ?? String(err)}`
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text4);
+  } catch (err) {
+    return { status: "corrupt", episodes: [], error: err?.message ?? String(err) };
+  }
+  if (!Array.isArray(parsed)) {
+    return { status: "corrupt", episodes: [], error: "ledger is not a JSON array" };
+  }
+  const out = [];
+  let dropped = 0;
+  for (const raw of parsed) {
+    const ep = parseEpisode(raw);
+    if (ep)
+      out.push(ep);
+    else
+      dropped += 1;
+  }
+  if (dropped > 0 && out.length === 0) {
+    return { status: "corrupt", episodes: [], error: `${dropped} unparseable entr(ies)` };
+  }
+  return { status: "ok", episodes: out };
+}
+function readFlood429Ledger(path2, readFile = (p) => readFileSync13(p, "utf-8")) {
+  return readFlood429LedgerResult(path2, readFile).episodes;
+}
+function writeFlood429Ledger(path2, episodes, log = (l) => process.stderr.write(l)) {
+  const payload = JSON.stringify(episodes);
+  try {
+    mkdirSync14(dirname7(path2), { recursive: true });
+  } catch {}
+  try {
+    writeFileSync11(path2, payload, { mode: FLOOD_429_LEDGER_MODE });
+    try {
+      chmodSync4(path2, FLOOD_429_LEDGER_MODE);
+    } catch {}
+    return;
+  } catch (err) {
+    const code2 = err?.code;
+    if (code2 !== "EACCES" && code2 !== "EPERM") {
+      log(`telegram gateway: 429-ledger: could not persist ${path2} (${code2 ?? "error"})
+`);
+      return;
+    }
+    try {
+      unlinkSync9(path2);
+      writeFileSync11(path2, payload, { mode: FLOOD_429_LEDGER_MODE });
+    } catch (err2) {
+      log(`telegram gateway: 429-ledger: cannot persist the 429 pressure ledger to ${path2} ` + `(${code2}, recreate failed: ${err2?.message ?? String(err2)}). ` + `Flood-pressure history will be missing from \`switchroom doctor\`
+`);
+    }
+  }
+}
+function recordFlood429(path2, obs, log = (l) => process.stderr.write(l)) {
+  const folded = foldFlood429Observation(readFlood429Ledger(path2), obs, obs.ts);
+  writeFlood429Ledger(path2, folded, log);
+}
+var FLOOD_429_LEDGER_FILE = "429-ledger.json", FLOOD_429_LEDGER_MODE = 420, EPISODE_MERGE_MS = 60000, FLOOD_429_LEDGER_MAX_EPISODES = 400, FLOOD_429_LEDGER_RETENTION_MS, PENALTY_WINDOW_MS, TRIVIAL_PRESSURE_WINDOW_MS;
+var init_flood_429_ledger = __esm(() => {
+  FLOOD_429_LEDGER_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
+  PENALTY_WINDOW_MS = 7 * 24 * 60 * 60 * 1000;
+  TRIVIAL_PRESSURE_WINDOW_MS = 24 * 60 * 60 * 1000;
+});
+
+// flood-circuit-breaker.ts
+import {
+  existsSync as existsSync11,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync12,
+  mkdirSync as mkdirSync15,
+  chmodSync as chmodSync5,
+  unlinkSync as unlinkSync10,
+  renameSync as renameSync9
+} from "node:fs";
+import { dirname as dirname8, join as join18 } from "node:path";
+function floodStatePath(stateDir) {
+  return join18(stateDir, FLOOD_STATE_FILE);
+}
+function computeFloodWait(prior, retryAfterSec, now) {
+  const candidate = now + Math.max(0, retryAfterSec) * 1000;
+  const untilTs = prior && prior.untilTs > candidate ? prior.untilTs : candidate;
+  return { untilTs, retryAfterSec, recordedTs: now };
+}
+function floodWaitRemainingMs(state, now) {
+  if (!state)
+    return 0;
+  return Math.max(0, state.untilTs - now);
+}
+function readFloodStateResult(path2) {
+  let text4;
+  try {
+    text4 = readFileSync14(path2, "utf-8");
+  } catch (err) {
+    const code2 = err?.code;
+    if (code2 === "ENOENT" || code2 === "ENOTDIR")
+      return { status: "absent", state: null };
+    return {
+      status: "unreadable",
+      state: null,
+      error: `${code2 ?? "EUNKNOWN"}: ${err?.message ?? String(err)}`
+    };
+  }
+  try {
+    const raw = JSON.parse(text4);
+    if (typeof raw.untilTs !== "number" || !Number.isFinite(raw.untilTs)) {
+      return { status: "corrupt", state: null, error: "untilTs is not a finite number" };
+    }
+    return {
+      status: "ok",
+      state: {
+        untilTs: raw.untilTs,
+        retryAfterSec: typeof raw.retryAfterSec === "number" ? raw.retryAfterSec : 0,
+        recordedTs: typeof raw.recordedTs === "number" ? raw.recordedTs : 0
+      }
+    };
+  } catch (err) {
+    return { status: "corrupt", state: null, error: err?.message ?? String(err) };
+  }
+}
+function readFloodState(path2) {
+  return readFloodStateResult(path2).state;
+}
+function writeFloodState(path2, state, log = (l) => process.stderr.write(l)) {
+  const payload = JSON.stringify(state);
+  try {
+    mkdirSync15(dirname8(path2), { recursive: true });
+  } catch {}
+  try {
+    writeFileSync12(path2, payload, { mode: FLOOD_STATE_MODE });
+    try {
+      chmodSync5(path2, FLOOD_STATE_MODE);
+    } catch {}
+    return;
+  } catch (err) {
+    const code2 = err?.code;
+    if (code2 !== "EACCES" && code2 !== "EPERM") {
+      log(`telegram gateway: flood-breaker: could not persist ${path2} (${code2 ?? "error"})
+`);
+      return;
+    }
+    try {
+      unlinkSync10(path2);
+      writeFileSync12(path2, payload, { mode: FLOOD_STATE_MODE });
+      log(`telegram gateway: flood-breaker: recreated ${path2} \u2014 it was owned by another uid ` + `and could not be updated (${code2}); the breaker was blind (issue #3106)
+`);
+    } catch (err2) {
+      log(`telegram gateway: flood-breaker: BLIND \u2014 cannot persist the flood-wait window to ${path2} ` + `(${code2}, and recreate failed: ${err2?.message ?? String(err2)}). ` + `Flood bans will NOT be recorded. Fix the file's ownership/mode (issue #3106)
+`);
+    }
+  }
+}
+function makeFloodWaitRecorder(path2, now = Date.now, log = (l) => process.stderr.write(l)) {
+  return (retryAfterSec) => {
+    const t = now();
+    const next = computeFloodWait(readFloodState(path2), retryAfterSec, t);
+    writeFloodState(path2, next, log);
+    try {
+      recordFlood429(flood429LedgerPathFromFloodState(path2), { ts: t, retryAfterSec }, log);
+    } catch {}
+  };
+}
+function warnBlind(path2, error, now, log) {
+  const last = blindLoggedAt.get(path2);
+  if (last !== undefined && now - last < BLIND_LOG_INTERVAL_MS)
+    return;
+  blindLoggedAt.set(path2, now);
+  log(`telegram gateway: flood-breaker: BLIND \u2014 cannot read the flood-wait marker ${path2} ` + `(${error ?? "unknown error"}). The breaker cannot tell whether a Telegram flood ban is ` + `open. Essential sends PROCEED (fail-open); non-essential sends (boot card, typing) are ` + `SUPPRESSED. Fix the file's ownership/mode (issue #3106)
+`);
+}
+function makeFloodWaitProbe(path2, now = Date.now, log = (l) => process.stderr.write(l)) {
+  return () => {
+    const t = now();
+    const res = readFloodStateResult(path2);
+    if (res.status === "unreadable") {
+      warnBlind(path2, res.error, t, log);
+      return 0;
+    }
+    return floodWaitRemainingMs(res.state, t);
+  };
+}
+function nonEssentialSendSuppression(path2, now) {
+  const res = readFloodStateResult(path2);
+  if (res.status === "unreadable") {
+    return { suppress: true, reason: "blind", error: res.error ?? "unknown error" };
+  }
+  const remainingMs = floodWaitRemainingMs(res.state, now);
+  if (remainingMs > 0)
+    return { suppress: true, reason: "flood_wait", remainingMs };
+  return { suppress: false };
+}
+var FLOOD_STATE_FILE = "flood-wait.json", FLOOD_STATE_MODE = 420, BLIND_LOG_INTERVAL_MS = 60000, blindLoggedAt, FLOOD_WINDOWS_CORRUPT_SUPPRESS_MS;
+var init_flood_circuit_breaker = __esm(() => {
+  init_flood_429_ledger();
+  blindLoggedAt = new Map;
+  FLOOD_WINDOWS_CORRUPT_SUPPRESS_MS = 5 * 60000;
+});
+
 // quota-check.ts
 import { readFileSync as readFileSync19, existsSync as existsSync17 } from "fs";
 import { join as join25 } from "path";
@@ -37216,7 +37297,7 @@ function renderBootCard(opts) {
     const ageStr = restartAgeMs != null && restartAgeMs > 0 ? ` \u00b7 ${(restartAgeMs / 1000).toFixed(1)}s ago` : "";
     degradedRows.push(`\u26a0\ufe0f **Restart**  ${escapeMarkdown(REASON_LABEL.crash)}${ageStr}`);
     const tailCmd = process.env.SWITCHROOM_RUNTIME === "docker" ? `docker logs --tail 100 switchroom-${agentSlug}` : `journalctl --user -u switchroom-${agentSlug} -n 100`;
-    degradedRows.push(`    \u21b3 Tail logs: \`${tailCmd}\``);
+    degradedRows.push(`${NESTED_PREFIX}Tail logs: \`${tailCmd}\``);
   }
   if (probes) {
     for (const key of PROBE_KEYS) {
@@ -37230,7 +37311,7 @@ function renderBootCard(opts) {
       const dot = DOT[r.status] ?? DOT.fail;
       degradedRows.push(`${dot} **${PROBE_LABELS[key]}**  ${escapeMarkdown(r.detail)}`);
       if (r.nextStep) {
-        degradedRows.push(`    \u21b3 ${renderNextStep(r.nextStep)}`);
+        degradedRows.push(`${NESTED_PREFIX}${renderNextStep(r.nextStep)}`);
       }
     }
   }
@@ -37534,6 +37615,7 @@ var SETTLE_WINDOW_MS = 6000, DOT, PROBE_LABELS, PROBE_KEYS, REASON_EMOJI, REASON
 var init_boot_card = __esm(() => {
   init_boot_probes();
   init_card_format();
+  init_status_no_truncate();
   init_boot_issue_cache();
   init_config_snapshot();
   init_boot_card_msgid();
@@ -38999,7 +39081,7 @@ function buildGrantedKeyboard(scope) {
   const btn = scopeToOpenInDriveButton(scope);
   if (btn === null)
     return;
-  return new import_grammy15.InlineKeyboard().url(btn.text, btn.url);
+  return new import_grammy16.InlineKeyboard().url(btn.text, btn.url);
 }
 async function handleApprovalCallback(ctx, data) {
   const parsed = parseApprovalCallback(data);
@@ -39045,11 +39127,11 @@ async function handleApprovalCallback(ctx, data) {
   } catch {}
   await ctx.answerCallbackQuery({ text: granted ? "Approved" : "Denied" });
 }
-var import_grammy15;
+var import_grammy16;
 var init_approval_callback = __esm(() => {
   init_approval_card();
   init_client3();
-  import_grammy15 = __toESM(require_mod2(), 1);
+  import_grammy16 = __toESM(require_mod2(), 1);
 });
 
 // ../src/telegram/materialize-bot-token.ts
@@ -39222,7 +39304,7 @@ var init_approvals_commands = __esm(() => {
 });
 
 // gateway/gateway.ts
-var import_grammy16 = __toESM(require_mod(), 1);
+var import_grammy17 = __toESM(require_mod(), 1);
 var import_runner3 = __toESM(require_mod3(), 1);
 import { randomBytes as randomBytes13, createHash as createHash8 } from "crypto";
 import { execFileSync as execFileSync9, execSync as execSync2, spawn as spawn2 } from "child_process";
@@ -43201,10 +43283,64 @@ init_rich_send();
 // shared/bot-runtime.ts
 var import_grammy3 = __toESM(require_mod2(), 1);
 var import_runner = __toESM(require_mod4(), 1);
-import { AsyncLocalStorage } from "async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 
 // retry-api-call.ts
 var import_grammy2 = __toESM(require_mod2(), 1);
+import { AsyncLocalStorage } from "async_hooks";
+var attemptStore = new AsyncLocalStorage;
+function _getTgAttemptContext() {
+  return attemptStore.getStore();
+}
+function withAttemptContext(ctx, fn) {
+  return attemptStore.run(ctx, fn);
+}
+function isTransientNetworkMessage(msg) {
+  return msg.includes("ECONNRESET") || msg.includes("ETIMEDOUT") || msg.includes("fetch failed") || msg.includes("ENOTFOUND");
+}
+function isAbortError(err) {
+  const e = err;
+  return e?.name === "AbortError" || e?.code === "ABORT_ERR";
+}
+function isTransientTransportError(err) {
+  if (err instanceof import_grammy2.GrammyError)
+    return false;
+  if (isLocalResourceError(err))
+    return false;
+  if (err instanceof import_grammy2.HttpError) {
+    const inner = err.error;
+    if (isLocalResourceError(inner))
+      return false;
+    if (isAbortError(inner))
+      return false;
+    return true;
+  }
+  const msg = err instanceof Error ? err.message : String(err ?? "");
+  if (isTransientNetworkMessage(msg))
+    return true;
+  const cause = err?.cause;
+  if (cause == null || cause === err)
+    return false;
+  if (isLocalResourceError(cause))
+    return false;
+  return isTransientNetworkMessage(cause instanceof Error ? cause.message : String(cause));
+}
+function willRetryTelegramFailure(failure, ctx = _getTgAttemptContext()) {
+  if (ctx == null)
+    return false;
+  if (ctx.attempt >= ctx.maxRetries - 1)
+    return false;
+  if (failure.errorCode === 429) {
+    const retryAfter = Number(failure.retryAfterSec ?? 5);
+    const delayMs = (Number.isFinite(retryAfter) ? retryAfter : 5) * 1000;
+    return delayMs <= ctx.maxFloodSleepMs;
+  }
+  if (failure.errorCode != null)
+    return false;
+  if (failure.cause != null)
+    return isTransientTransportError(failure.cause);
+  return isTransientTransportError(new Error(failure.message ?? ""));
+}
 function classifyBenignTelegram400(errorCode, description) {
   if (errorCode !== 400)
     return null;
@@ -43272,7 +43408,7 @@ function createRetryApiCall(config = {}) {
         throw gated;
       }
       try {
-        return await fn();
+        return await withAttemptContext({ attempt, maxRetries, maxFloodSleepMs }, fn);
       } catch (err) {
         const isGrammyErr = err instanceof import_grammy2.GrammyError;
         const msg = err instanceof Error ? err.message : String(err);
@@ -43304,12 +43440,14 @@ function createRetryApiCall(config = {}) {
         const benignKind = isGrammyErr ? classifyBenignTelegram400(err.error_code, desc) : null;
         if (benignKind !== null) {
           observer?.onBenign?.({ kind: benignKind });
+          if (opts?.rethrowBenign400)
+            throw err;
           return;
         }
         if (isGrammyErr && err.error_code === 400 && desc.includes("thread not found") && opts?.threadId && opts?.chat_id) {
           throw Object.assign(new Error("THREAD_NOT_FOUND"), { original: err });
         }
-        if (!isGrammyErr && (msg.includes("ECONNRESET") || msg.includes("ETIMEDOUT") || msg.includes("fetch failed") || msg.includes("ENOTFOUND"))) {
+        if (isTransientTransportError(err)) {
           if (attempt < maxRetries - 1) {
             const delayMs = Math.pow(2, attempt) * 1000;
             log?.(`telegram gateway: network error, retrying in ${delayMs / 1000}s: ${msg}
@@ -43367,7 +43505,6 @@ function isPhotoDimensionRejectError(err) {
 }
 
 // shared/bot-runtime.ts
-init_flood_circuit_breaker();
 init_format();
 
 // shared/gw-trace-gate.ts
@@ -43380,7 +43517,7 @@ var ZERO_SIGNAL_POLL_METHODS = new Set(["getUpdates", "getMe"]);
 function shouldEmitTgPost(method, status, verbose = gwTraceVerbose) {
   if (verbose)
     return true;
-  if (status === "err")
+  if (status === "err" || status === "retry")
     return true;
   return !ZERO_SIGNAL_POLL_METHODS.has(method);
 }
@@ -43397,7 +43534,7 @@ function shouldEmitShadowTrace(eventKind, effectCount, globalKind, verbose = gwT
 
 // shared/bot-runtime.ts
 init_rich_send();
-var tgPostTagStore = new AsyncLocalStorage;
+var tgPostTagStore = new AsyncLocalStorage2;
 function escapeHtmlForTg(text) {
   return text.replace(/([\\`*_~=\[\]|])/g, "\\$1");
 }
@@ -45005,10 +45142,10 @@ async function handleAnimationMessage(ctx, deps) {
 }
 
 // gateway/photo-message-handler.ts
-import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync7 } from "node:fs";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "node:fs";
 
 // attachment-path.ts
-import { join as join7, basename as basename3, resolve as resolve2, sep } from "node:path";
+import { join as join5, basename as basename3, resolve as resolve2, sep } from "node:path";
 function sanitizeExtension(ext) {
   if (ext == null)
     return "bin";
@@ -45031,7 +45168,7 @@ function buildAttachmentPath(input) {
   const ext = extractExtension(input.telegramFilePath);
   const uid = sanitizeUniqueId(input.fileUniqueId);
   const filename = `${input.now}-${uid}.${ext}`;
-  return join7(input.inboxDir, filename);
+  return join5(input.inboxDir, filename);
 }
 function assertInsideInbox(inboxDir, candidatePath) {
   const inboxReal = resolve2(inboxDir);
@@ -45066,9 +45203,9 @@ async function handlePhotoMessage(ctx, deps) {
         fileUniqueId: best.file_unique_id,
         now: Date.now()
       });
-      mkdirSync8(deps.inboxDir, { recursive: true, mode: 448 });
+      mkdirSync6(deps.inboxDir, { recursive: true, mode: 448 });
       assertInsideInbox(deps.inboxDir, dlPath);
-      writeFileSync7(dlPath, buf, { mode: 384 });
+      writeFileSync5(dlPath, buf, { mode: 384 });
       return dlPath;
     } catch (err) {
       const msg = err instanceof Error ? err.message : "unknown error";
@@ -46294,7 +46431,7 @@ async function handleAskCallback(ctx, data, deps) {
 }
 
 // gateway/voice-ondemand-callback-handler.ts
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync7 } from "node:fs";
 
 // voice-send.ts
 function extractVoiceFileId(sent) {
@@ -46732,14 +46869,14 @@ table omitted.`);
 init_loader();
 init_resolver();
 init_vault();
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync7 } from "node:fs";
 var VOICE_SIDECAR_TOKEN_KEY = "voice/sidecar-token";
 var DEFAULT_VOICE_SIDECAR_TOKEN_REF = `vault:${VOICE_SIDECAR_TOKEN_KEY}`;
 function tryDirectVaultRead(ref, config, passphrase) {
   if (!passphrase)
     return null;
   const vaultPath = resolvePath(config.vault?.path ?? "~/.switchroom/vault.enc");
-  if (!existsSync8(vaultPath))
+  if (!existsSync7(vaultPath))
     return null;
   try {
     const secrets = openVault(passphrase, vaultPath);
@@ -46826,7 +46963,7 @@ async function handleVoiceOnDemandCallback(ctx, data, deps) {
     let audio = null;
     if (entry.filePath != null) {
       try {
-        audio = readFileSync9(entry.filePath);
+        audio = readFileSync7(entry.filePath);
       } catch {
         audio = null;
       }
@@ -47411,18 +47548,11 @@ class DeferredDoneReactions {
 
 // worker-activity-feed.ts
 init_card_format();
-
-// status-no-truncate.ts
-init_format();
-var STATUS_ROLLING_LINES = 5;
-var WORKER_HISTORY_MAX = 6;
-var STATUS_LINE_MAX = 200;
-var STATUS_CARD_CHAR_BUDGET = RICH_MESSAGE_MAX_CHARS;
-var NESTED_PREFIX = "   \u21b3 ";
-var WORKER_STEP_INDENT = "\u2800\u2800\u2800";
+init_status_no_truncate();
 
 // card-layout.ts
 init_card_format();
+init_format();
 
 // model-label.ts
 var DATE_SUFFIX = /^\d{8}$/;
@@ -47461,6 +47591,7 @@ function formatModelLabel(model) {
 }
 
 // card-layout.ts
+init_status_no_truncate();
 function formatFeedElapsed(ms) {
   const s = Math.floor(ms / 1000);
   if (s < 60)
@@ -47559,15 +47690,36 @@ function fitCardToBudget(build, maxLevel) {
     if (candidate.overflow !== true && text.length <= STATUS_CARD_CHAR_BUDGET)
       return text;
   }
-  return text;
+  return hardTruncateCard(text);
+}
+function hardTruncateCard(text, budget = STATUS_CARD_CHAR_BUDGET) {
+  if (text.length <= budget)
+    return text;
+  let kept = "";
+  for (const line of text.split(`
+`)) {
+    const next = kept.length === 0 ? line : `${kept}
+${line}`;
+    if (trimBreakChrome(next).length > budget)
+      break;
+    kept = next;
+  }
+  const target = kept.length > 0 ? kept.length : Math.min(budget, text.length);
+  let out = trimBreakChrome(truncateMarkdownSafe(text, target));
+  if (out.length > budget)
+    out = trimBreakChrome(truncateMarkdownSafe(text, budget));
+  return /[\uD800-\uDBFF]$/.test(out) ? out.slice(0, -1) : out;
+}
+function trimBreakChrome(text) {
+  return text.replace(/[ \t\r\u00A0]+$/, "");
 }
 
 // hooks/tool-label-pretool.mjs
-import { readFileSync as readFileSync10, mkdirSync as mkdirSync11, appendFileSync as appendFileSync2, existsSync as existsSync9 } from "node:fs";
-import { join as join9, basename as basename5 } from "node:path";
+import { readFileSync as readFileSync8, mkdirSync as mkdirSync9, appendFileSync as appendFileSync2, existsSync as existsSync8 } from "node:fs";
+import { join as join7, basename as basename5 } from "node:path";
 function readStdin() {
   try {
-    return readFileSync10(0, "utf8");
+    return readFileSync8(0, "utf8");
   } catch {
     return "";
   }
@@ -47873,10 +48025,10 @@ function main() {
   }) + `
 `;
   try {
-    if (!existsSync9(stateDir)) {
-      mkdirSync11(stateDir, { recursive: true });
+    if (!existsSync8(stateDir)) {
+      mkdirSync9(stateDir, { recursive: true });
     }
-    const target = join9(stateDir, `tool-labels-${sessionId}.jsonl`);
+    const target = join7(stateDir, `tool-labels-${sessionId}.jsonl`);
     appendFileSync2(target, line);
   } catch (err) {
     try {
@@ -47898,6 +48050,7 @@ if (isMain)
   main();
 
 // tool-activity-summary.ts
+init_status_no_truncate();
 init_card_format();
 init_redact();
 
@@ -47975,14 +48128,14 @@ function renderStatusCard(opts) {
     return null;
   const parentMarker = hasChildren && rawSteps.length > 0 ? `_\u2713 +${rawSteps.length} earlier\u2026_` : null;
   const deepest = Math.max(1, escapedBody.length);
+  const markerSection = {
+    steps: [],
+    window: 1,
+    placeholder: parentMarker ?? undefined
+  };
   return fitCardToBudget((level) => {
     if (level === 0)
       return { spec: fullSpec() };
-    const markerSection = {
-      steps: [],
-      window: 1,
-      placeholder: parentMarker ?? undefined
-    };
     if (level < escapedBody.length) {
       return {
         spec: {
@@ -48011,23 +48164,38 @@ function renderStatusCard(opts) {
       }
     };
   }, deepest);
+  function deepestSpec(bodyLine) {
+    return {
+      chrome,
+      sections: [markerSection, { steps: [], window: 1, placeholder: bodyLine }],
+      footer
+    };
+  }
+  function wrapNewest(escaped) {
+    return final ? `${bodyIndent}_\u2713 ${escaped}_` : `${bodyIndent}**\u2192 ${escaped}${liveSuffix}**`;
+  }
   function truncatedNewestLine() {
-    const fixedCost = [...chrome, ...footer].join(`
-`).length;
     const rawNewest = rawBody.length > 0 ? cleanStepLine(rawBody[rawBody.length - 1]) : "";
-    const wrapperOverhead = final ? (bodyIndent + "_\u2713 _").length : (bodyIndent + "**\u2192 **").length + liveSuffix.length;
-    const headerFooterCost = fixedCost + (fixedCost > 0 ? 1 : 0) + (parentMarker != null ? parentMarker.length + 1 : 0);
-    const budget = STATUS_CARD_CHAR_BUDGET - headerFooterCost - wrapperOverhead;
-    let raw = rawNewest.slice(0, Math.max(0, budget));
-    let newest = escapeMarkdown(raw);
-    while (raw.length > 0 && wrapperOverhead + headerFooterCost + newest.length > STATUS_CARD_CHAR_BUDGET) {
-      const excess = wrapperOverhead + headerFooterCost + newest.length - STATUS_CARD_CHAR_BUDGET;
-      raw = raw.slice(0, Math.max(0, raw.length - excess - 1));
-      newest = escapeMarkdown(raw);
+    const empty = wrapNewest("");
+    const fixedCost = renderCardSpec(deepestSpec(empty)).length;
+    const budget = STATUS_CARD_CHAR_BUDGET - fixedCost;
+    if (budget <= 0)
+      return empty;
+    let raw = clipRaw(rawNewest, budget);
+    let line = wrapNewest(escapeMarkdown(raw));
+    for (;; ) {
+      const excess = renderCardSpec(deepestSpec(line)).length - STATUS_CARD_CHAR_BUDGET;
+      if (excess <= 0 || raw.length === 0)
+        return line;
+      raw = clipRaw(raw, Math.max(0, raw.length - excess));
+      line = wrapNewest(escapeMarkdown(raw));
     }
-    return final ? `${bodyIndent}_\u2713 ${newest}_` : `${bodyIndent}**\u2192 ${newest}${liveSuffix}**`;
   }
 }
+function clipRaw(text, n) {
+  const out = text.slice(0, Math.max(0, n));
+  return /[\uD800-\uDBFF]$/.test(out) ? out.slice(0, -1) : out;
+}
 var WORKER_RESULT_RULE = "\u2500\u2500\u2500\u2500\u2500";
 var WORKER_RESULT_MAX = 320;
 function deriveCardResult(state, summary) {
@@ -48128,8 +48296,8 @@ function appendActivityLabel(lines, label) {
 }
 
 // outbound-class.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
-var store = new AsyncLocalStorage2;
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
+var store = new AsyncLocalStorage3;
 function withOutboundClass(cls, fn) {
   return store.run(cls, fn);
 }
@@ -48233,7 +48401,7 @@ function classifyEditError(err) {
 function createWorkerActivityFeed(opts) {
   const log = opts.log ?? (() => {});
   const nowFn = opts.now ?? Date.now;
-  const floodWaitRemainingMs2 = opts.floodWaitRemainingMs ?? (() => 0);
+  const floodWaitRemainingMs = opts.floodWaitRemainingMs ?? (() => 0);
   const minEditInterval = opts.minEditIntervalMs ?? 2500;
   const elapsedRefreshMs = Math.max(minEditInterval, Math.floor(opts.elapsedRefreshMs ?? 15000));
   const firstPaintMin = opts.firstPaintMinMs ?? 8000;
@@ -48286,7 +48454,7 @@ function createWorkerActivityFeed(opts) {
     log(`worker-feed: ${label} 429 \u2014 backing off ${retryAfter}s`);
   }
   function parkIfFloodWindowOpen(g) {
-    const remaining = floodWaitRemainingMs2();
+    const remaining = floodWaitRemainingMs();
     if (remaining <= 0)
       return false;
     const until = nowFn() + remaining + COOLDOWN_JITTER_MS;
@@ -49243,13 +49411,13 @@ function buildCancelledCardEdits(cardText, cards) {
 var STALE_TAP_NOTICE = "This request already resolved (timed out) \u2014 ask again to act.";
 
 // gateway/permission-card-store.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, unlinkSync as unlinkSync6 } from "node:fs";
-import { join as join10 } from "node:path";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4 } from "node:fs";
+import { join as join8 } from "node:path";
 function createPermissionCardStore(stateDir) {
-  const filePath = join10(stateDir, "pending-perm-cards.json");
+  const filePath = join8(stateDir, "pending-perm-cards.json");
   function read() {
     try {
-      const raw = readFileSync11(filePath, "utf-8");
+      const raw = readFileSync9(filePath, "utf-8");
       const parsed = JSON.parse(raw);
       return Array.isArray(parsed) ? parsed : [];
     } catch {
@@ -49258,7 +49426,7 @@ function createPermissionCardStore(stateDir) {
   }
   function write(entries) {
     try {
-      writeFileSync8(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
+      writeFileSync6(filePath, JSON.stringify(entries), { encoding: "utf-8", mode: 384 });
     } catch (err) {
       process.stderr.write(`telegram gateway: permission-card-store write failed: ${err.message}
 `);
@@ -49287,7 +49455,7 @@ function createPermissionCardStore(stateDir) {
     },
     clear() {
       try {
-        unlinkSync6(filePath);
+        unlinkSync4(filePath);
       } catch {}
     }
   };
@@ -49295,13 +49463,13 @@ function createPermissionCardStore(stateDir) {
 
 // gateway/pending-card-store.ts
 init_atomic();
-import { unlinkSync as unlinkSync7 } from "node:fs";
-import { join as join12 } from "node:path";
+import { unlinkSync as unlinkSync5 } from "node:fs";
+import { join as join10 } from "node:path";
 
 // gateway/store-file.ts
 import { randomBytes as randomBytes6 } from "node:crypto";
-import { readFileSync as readFileSync12, readdirSync as readdirSync4, renameSync as renameSync9, rmSync as rmSync4, statSync as statSync7 } from "node:fs";
-import { basename as basename6, dirname as dirname6, join as join11 } from "node:path";
+import { readFileSync as readFileSync10, readdirSync as readdirSync4, renameSync as renameSync8, rmSync as rmSync4, statSync as statSync7 } from "node:fs";
+import { basename as basename6, dirname as dirname4, join as join9 } from "node:path";
 var defaultLog = (line) => {
   process.stderr.write(line);
 };
@@ -49312,18 +49480,18 @@ function quarantinePath(filePath) {
   return `${filePath}.corrupt-${Date.now()}-${seq}-${randomBytes6(4).toString("hex")}`;
 }
 function reapOldQuarantines(filePath, log) {
-  const dir = dirname6(filePath);
+  const dir = dirname4(filePath);
   const prefix = `${basename6(filePath)}.corrupt-`;
   try {
     const copies = readdirSync4(dir).filter((f) => f.startsWith(prefix)).map((name) => {
       let mtimeNs = 0n;
       try {
-        mtimeNs = statSync7(join11(dir, name), { bigint: true }).mtimeNs;
+        mtimeNs = statSync7(join9(dir, name), { bigint: true }).mtimeNs;
       } catch {}
       return { name, mtimeNs };
     }).sort((a, b) => a.mtimeNs === b.mtimeNs ? a.name.localeCompare(b.name) : a.mtimeNs < b.mtimeNs ? -1 : 1);
     for (const stale of copies.slice(0, Math.max(0, copies.length - MAX_QUARANTINED_COPIES))) {
-      rmSync4(join11(dir, stale.name), { force: true });
+      rmSync4(join9(dir, stale.name), { force: true });
     }
   } catch (err) {
     log(`telegram gateway: quarantine reap failed dir=${dir}: ${err.message}
@@ -49334,7 +49502,7 @@ function quarantineCorruptStoreFile(filePath, store2, reason, log = defaultLog)
   const target = quarantinePath(filePath);
   let preserved = target;
   try {
-    renameSync9(filePath, target);
+    renameSync8(filePath, target);
   } catch (err) {
     preserved = `NOT preserved (${err.message})`;
   }
@@ -49345,7 +49513,7 @@ function quarantineCorruptStoreFile(filePath, store2, reason, log = defaultLog)
 function preserveUnreadableStoreFile(filePath, store2, log = defaultLog) {
   const target = quarantinePath(filePath);
   try {
-    renameSync9(filePath, target);
+    renameSync8(filePath, target);
   } catch (err) {
     if (err.code === "ENOENT") {
       return;
@@ -49361,7 +49529,7 @@ function preserveUnreadableStoreFile(filePath, store2, log = defaultLog) {
 function readStoreJsonSync(filePath, store2, log = defaultLog) {
   let raw;
   try {
-    raw = readFileSync12(filePath, "utf-8");
+    raw = readFileSync10(filePath, "utf-8");
   } catch (err) {
     if (err.code === "ENOENT")
       return { status: "missing" };
@@ -49379,7 +49547,7 @@ function readStoreJsonSync(filePath, store2, log = defaultLog) {
 
 // gateway/pending-card-store.ts
 function createPendingCardStore(stateDir, log = (l) => process.stderr.write(l)) {
-  const filePath = join12(stateDir, "pending-approval-cards.json");
+  const filePath = join10(stateDir, "pending-approval-cards.json");
   let unreadable = false;
   function read() {
     const result = readStoreJsonSync(filePath, "pending-card-store", log);
@@ -49427,7 +49595,7 @@ function createPendingCardStore(stateDir, log = (l) => process.stderr.write(l))
     },
     clear() {
       try {
-        unlinkSync7(filePath);
+        unlinkSync5(filePath);
       } catch {}
     }
   };
@@ -49566,8 +49734,8 @@ function createSweepableCardStore(deps) {
 init_rich_send();
 var import_grammy4 = __toESM(require_mod2(), 1);
 import { execFileSync as execFileSync3 } from "child_process";
-import { mkdirSync as mkdirSync14, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname7 } from "path";
+import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname5 } from "path";
 init_client2();
 
 // gateway/vault-grant-inbound-builders.ts
@@ -49699,26 +49867,26 @@ var import_yaml3 = __toESM(require_dist(), 1);
 
 // ../src/web/config-diff.ts
 import {
-  mkdirSync as mkdirSync12,
+  mkdirSync as mkdirSync10,
   mkdtempSync as mkdtemp,
   rmSync as rmrf,
-  writeFileSync as writeFileSync9
+  writeFileSync as writeFileSync7
 } from "node:fs";
 import { spawnSync } from "node:child_process";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join11 } from "node:path";
 
 class ConfigDiffError extends Error {
 }
 function generateUnifiedDiff(before, after, name = "switchroom.yaml", gitBin = "git") {
   if (before === after)
     return "";
-  const dir = mkdtemp(join13(tmpdir2(), "switchroom-config-diff-"));
+  const dir = mkdtemp(join11(tmpdir2(), "switchroom-config-diff-"));
   try {
-    mkdirSync12(join13(dir, "cur"), { recursive: true });
-    mkdirSync12(join13(dir, "new"), { recursive: true });
-    writeFileSync9(join13(dir, "cur", name), before);
-    writeFileSync9(join13(dir, "new", name), after);
+    mkdirSync10(join11(dir, "cur"), { recursive: true });
+    mkdirSync10(join11(dir, "new"), { recursive: true });
+    writeFileSync7(join11(dir, "cur", name), before);
+    writeFileSync7(join11(dir, "new", name), after);
     const r = spawnSync(gitBin, ["diff", "--no-index", "--no-color", "--", `cur/${name}`, `new/${name}`], { cwd: dir, encoding: "utf-8", timeout: 1e4 });
     if (r.status === 0)
       return "";
@@ -50049,25 +50217,25 @@ function buildSkillProposalApplyInbound(opts) {
 // ../src/self-improve/skill-proposals.ts
 import {
   closeSync as closeSync5,
-  existsSync as existsSync10,
-  mkdirSync as mkdirSync13,
+  existsSync as existsSync9,
+  mkdirSync as mkdirSync11,
   openSync as openSync5,
-  readFileSync as readFileSync13,
+  readFileSync as readFileSync11,
   writeSync as writeSync5
 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join12 } from "node:path";
 var PROPOSALS_FILE = "skill-proposals.jsonl";
 var REJECTED_FILE = "skill-proposals-rejected.jsonl";
 var REJECTION_TTL_MS = 90 * 24 * 60 * 60 * 1000;
 function proposalsPath(stateDir) {
-  return join14(stateDir, PROPOSALS_FILE);
+  return join12(stateDir, PROPOSALS_FILE);
 }
 function rejectedPath(stateDir) {
-  return join14(stateDir, REJECTED_FILE);
+  return join12(stateDir, REJECTED_FILE);
 }
 function ensureDir2(stateDir) {
-  if (!existsSync10(stateDir)) {
-    mkdirSync13(stateDir, { recursive: true, mode: 493 });
+  if (!existsSync9(stateDir)) {
+    mkdirSync11(stateDir, { recursive: true, mode: 493 });
   }
 }
 function appendLine(path, obj) {
@@ -50080,11 +50248,11 @@ function appendLine(path, obj) {
   }
 }
 function readLines(path, isValid2) {
-  if (!existsSync10(path))
+  if (!existsSync9(path))
     return [];
   let raw;
   try {
-    raw = readFileSync13(path, "utf-8");
+    raw = readFileSync11(path, "utf-8");
   } catch {
     return [];
   }
@@ -50226,7 +50394,7 @@ async function addAccountViaBroker(label, credentials, opts = {}) {
 }
 
 // gateway/hostd-dispatch.ts
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync10 } from "node:fs";
 import { randomBytes as randomBytes7 } from "node:crypto";
 
 // ../src/host-control/client.ts
@@ -50549,13 +50717,13 @@ function hostdSocketPath(agentName) {
 function hostdWillBeUsed(agentName) {
   if (!isHostdEnabled())
     return false;
-  return existsSync11(hostdSocketPath(agentName));
+  return existsSync10(hostdSocketPath(agentName));
 }
 async function tryHostdDispatch(agentName, req, timeoutMs = 5000) {
   if (!isHostdEnabled())
     return "not-configured";
   const sockPath = hostdSocketPath(agentName);
-  if (!existsSync11(sockPath))
+  if (!existsSync10(sockPath))
     return "not-configured";
   try {
     return await hostdRequest({ socketPath: sockPath, timeoutMs }, req);
@@ -50579,7 +50747,7 @@ async function hostdGetStatusOnce(agentName, targetRequestId) {
   if (!isHostdEnabled())
     return "not-configured";
   const sockPath = hostdSocketPath(agentName);
-  if (!existsSync11(sockPath))
+  if (!existsSync10(sockPath))
     return "not-configured";
   try {
     const resp = await hostdRequest({ socketPath: sockPath, timeoutMs: 3000 }, {
@@ -50727,8 +50895,8 @@ function createCallbackQueryHandlers(deps) {
     const { token, id } = result;
     const tokenPath = vaultTokenFilePath2(agentName);
     try {
-      mkdirSync14(dirname7(tokenPath), { recursive: true });
-      writeFileSync10(tokenPath, token, { mode: 384 });
+      mkdirSync12(dirname5(tokenPath), { recursive: true });
+      writeFileSync8(tokenPath, token, { mode: 384 });
     } catch (err) {
       await switchroomReply(ctx, `**Grant created (${escapeHtmlForTg2(id)}) but token write failed:** ` + `${escapeHtmlForTg2(String(err))}
 ` + `_Recover with: \`switchroom vault grant ${escapeHtmlForTg2(agentName)} ` + `--keys ${escapeHtmlForTg2(keyName)} --duration 30d\` on the host._`, { html: true });
@@ -50879,8 +51047,8 @@ function createCallbackQueryHandlers(deps) {
     const { token, id } = result;
     const tokenPath = vaultTokenFilePath2(pending.agent);
     try {
-      mkdirSync14(dirname7(tokenPath), { recursive: true });
-      writeFileSync10(tokenPath, token, { mode: 384 });
+      mkdirSync12(dirname5(tokenPath), { recursive: true });
+      writeFileSync8(tokenPath, token, { mode: 384 });
     } catch (err) {
       await switchroomReply(ctx, `**Grant created (${escapeHtmlForTg2(id)}) but token write failed:** ` + `${escapeHtmlForTg2(String(err))}
 ` + `_Recover with: \`switchroom vault grant ${escapeHtmlForTg2(pending.agent)} ` + `--keys ${escapeHtmlForTg2(pending.key)} --duration ${Math.round(pending.ttl_seconds / 86400)}d\` on the host._`, { html: true });
@@ -51708,8 +51876,8 @@ ${keyList}`,
     const { token, id } = result;
     const tokenPath = vaultTokenFilePath2(state.agent);
     try {
-      mkdirSync14(dirname7(tokenPath), { recursive: true });
-      writeFileSync10(tokenPath, token, { mode: 384 });
+      mkdirSync12(dirname5(tokenPath), { recursive: true });
+      writeFileSync8(tokenPath, token, { mode: 384 });
     } catch (err) {
       await switchroomReply(ctx, `**Grant created but token write failed:** ${escapeHtmlForTg2(String(err))}`, { html: true });
       return;
@@ -52767,12 +52935,12 @@ function hangStalenessMs(env = process.env) {
 
 // gateway/missed-approvals-store.ts
 init_atomic();
-import { unlinkSync as unlinkSync8 } from "node:fs";
-import { join as join16 } from "node:path";
+import { unlinkSync as unlinkSync6 } from "node:fs";
+import { join as join14 } from "node:path";
 var MAX_PENDING = 50;
 var MAX_DELIVERED = 20;
 function createMissedApprovalsStore(stateDir, log = (l) => process.stderr.write(l)) {
-  const filePath = join16(stateDir, "missed-approvals.json");
+  const filePath = join14(stateDir, "missed-approvals.json");
   const EMPTY = () => ({ pending: [], delivered: [] });
   let unreadable = false;
   function read() {
@@ -52852,7 +53020,7 @@ function createMissedApprovalsStore(stateDir, log = (l) => process.stderr.write(
     },
     clear() {
       try {
-        unlinkSync8(filePath);
+        unlinkSync6(filePath);
       } catch {}
     }
   };
@@ -52860,8 +53028,8 @@ function createMissedApprovalsStore(stateDir, log = (l) => process.stderr.write(
 
 // gateway/always-allow-persist-queue.ts
 init_atomic();
-import { unlinkSync as unlinkSync9 } from "node:fs";
-import { join as join17 } from "node:path";
+import { unlinkSync as unlinkSync7 } from "node:fs";
+import { join as join15 } from "node:path";
 var MAX_ATTEMPTS = 5;
 var MAX_AGE_MS = 24 * 60 * 60 * 1000;
 var MAX_QUEUE_SIZE = 50;
@@ -52885,7 +53053,7 @@ var atomicWriteSeam = (path, data, opts) => {
   atomicWriteFileSync2(path, data, mode);
 };
 function createAlwaysAllowPersistQueue(stateDir, writeFileSyncFn = atomicWriteSeam, log = (l) => process.stderr.write(l)) {
-  const filePath = join17(stateDir, "always-allow-persist-queue.json");
+  const filePath = join15(stateDir, "always-allow-persist-queue.json");
   let lock = Promise.resolve();
   function withLock(fn) {
     const result = lock.then(fn, fn);
@@ -52997,7 +53165,7 @@ function createAlwaysAllowPersistQueue(stateDir, writeFileSyncFn = atomicWriteSe
     },
     clear() {
       try {
-        unlinkSync9(filePath);
+        unlinkSync7(filePath);
       } catch {}
     }
   };
@@ -53160,8 +53328,8 @@ function pickRecoveredPermissionOrigin(recentTurns, now, maxAgeMs) {
 }
 
 // gateway/approval-hold.ts
-import { mkdirSync as mkdirSync15, writeFileSync as writeFileSync12, readFileSync as readFileSync14, unlinkSync as unlinkSync10, chmodSync as chmodSync5, lstatSync as lstatSync2 } from "node:fs";
-import { join as join18, dirname as dirname8 } from "node:path";
+import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync10, readFileSync as readFileSync12, unlinkSync as unlinkSync8, chmodSync as chmodSync3, lstatSync as lstatSync2 } from "node:fs";
+import { join as join16, dirname as dirname6 } from "node:path";
 var BLOCKED_APPROVAL_FILE_MODE = 420;
 var BLOCKED_APPROVAL_DIR_MODE = 1023;
 var HELD_RETRY_BACKOFF_MS = 60000;
@@ -53190,24 +53358,24 @@ function safeActionForRecord(naturalAction2, toolName, inputPreview) {
   return ACTION_SAFE_WITH_INPUT2.has(toolName) ? naturalAction2(toolName, inputPreview) : naturalAction2(toolName, undefined);
 }
 function createBlockedApprovalStore(dir, agent, fallbackDir) {
-  const primary = join18(dir, `${agent}.json`);
-  const fallback = fallbackDir != null ? join18(fallbackDir, "blocked-approval.json") : null;
+  const primary = join16(dir, `${agent}.json`);
+  const fallback = fallbackDir != null ? join16(fallbackDir, "blocked-approval.json") : null;
   let active = primary;
   function tryWrite(target, body, dirMode) {
-    const parent = dirname8(target);
+    const parent = dirname6(target);
     try {
-      mkdirSync15(parent, { recursive: true });
+      mkdirSync13(parent, { recursive: true });
       try {
         if (lstatSync2(target).isSymbolicLink())
           return false;
       } catch {}
       if (dirMode != null) {
         try {
-          chmodSync5(parent, dirMode);
+          chmodSync3(parent, dirMode);
         } catch {}
       }
-      writeFileSync12(target, body, { encoding: "utf-8", mode: BLOCKED_APPROVAL_FILE_MODE });
-      chmodSync5(target, BLOCKED_APPROVAL_FILE_MODE);
+      writeFileSync10(target, body, { encoding: "utf-8", mode: BLOCKED_APPROVAL_FILE_MODE });
+      chmodSync3(target, BLOCKED_APPROVAL_FILE_MODE);
       return true;
     } catch {
       return false;
@@ -53224,7 +53392,7 @@ function createBlockedApprovalStore(dir, agent, fallbackDir) {
         active = primary;
         if (fallback != null) {
           try {
-            unlinkSync10(fallback);
+            unlinkSync8(fallback);
           } catch {}
         }
         return;
@@ -53243,7 +53411,7 @@ function createBlockedApprovalStore(dir, agent, fallbackDir) {
         if (p == null)
           continue;
         try {
-          unlinkSync10(p);
+          unlinkSync8(p);
         } catch {}
       }
       active = primary;
@@ -53253,7 +53421,7 @@ function createBlockedApprovalStore(dir, agent, fallbackDir) {
         if (p == null)
           continue;
         try {
-          const parsed = JSON.parse(readFileSync14(p, "utf-8"));
+          const parsed = JSON.parse(readFileSync12(p, "utf-8"));
           if (parsed != null && typeof parsed === "object")
             return parsed;
         } catch {}
@@ -53332,6 +53500,7 @@ function isTelegramSurfaceTool2(toolName) {
 }
 
 // tool-activity-summary.ts
+init_status_no_truncate();
 init_card_format();
 init_redact();
 function clipNarrative2(s) {
@@ -53550,6 +53719,7 @@ function createTurnTypingLoop(deps) {
 
 // gateway/handback-preturn-signal.ts
 var PRETURN_TURNKEY_PREFIX = "preturn:";
+var HANDBACK_REINJECT_COUNT_META_KEY = "handbackReinjectCount";
 function isHandbackInbound(msg) {
   return msg.type === "inbound" && msg.meta?.source === "subagent_handback";
 }
@@ -53557,6 +53727,8 @@ function createHandbackPreturnSignal(deps) {
   const now = deps.now ?? (() => Date.now());
   const debounceMs = deps.debounceMs ?? 700;
   const adoptTimeoutMs = deps.adoptTimeoutMs ?? 30000;
+  const deliveredTtlMs = deps.deliveredTtlMs ?? 300000;
+  const maxReinjects = deps.maxReinjects ?? 2;
   const setTimer = deps.setTimer ?? ((fn, ms) => {
     const t = setTimeout(fn, ms);
     t.unref?.();
@@ -53596,7 +53768,7 @@ function createHandbackPreturnSignal(deps) {
       if (messageId == null)
         return;
       if (entry.consumed) {
-        deps.finalizeCard({
+        deps.deleteCard({
           turnKey: entry.syntheticTurnKey,
           chatId: entry.chatId,
           threadId: entry.threadId,
@@ -53629,12 +53801,15 @@ function createHandbackPreturnSignal(deps) {
     }
     deps.stopTypingLoop(entry.chatId, entry.threadId);
   }
+  function deliveredAwaitingTurnStart(entry) {
+    return now() - entry.deliveredAt < deliveredTtlMs;
+  }
   function reap(entry) {
     entry.reapTimer = null;
     if (entry.consumed)
       return;
-    if (deps.isClaudeBusy?.() === true) {
-      log(`handback-preturn-signal: reap deferred key=${entry.statusKey} ` + `(claude busy \u2014 handback enqueued behind an in-flight turn, not orphaned)
+    if (deps.isClaudeBusy?.() === true || deliveredAwaitingTurnStart(entry)) {
+      log(`handback-preturn-signal: reap deferred key=${entry.statusKey} ` + `(${deps.isClaudeBusy?.() === true ? "claude busy" : "delivered, turn not yet streaming"}` + ` \u2014 not orphaned)
 `);
       entry.reapTimer = setTimer(() => reap(entry), adoptTimeoutMs);
       return;
@@ -53651,12 +53826,40 @@ function createHandbackPreturnSignal(deps) {
         pinned: entry.pinned
       };
       deps.clearCardRecord(entry.syntheticTurnKey, entry.activityMessageId);
-      Promise.resolve(deps.finalizeCard(record)).catch((err) => {
-        log(`handback-preturn-signal: orphan finalize failed key=${entry.statusKey}: ` + `${err instanceof Error ? err.message : String(err)}
+      Promise.resolve(deps.deleteCard(record)).catch((err) => {
+        log(`handback-preturn-signal: orphan card delete failed key=${entry.statusKey}: ` + `${err instanceof Error ? err.message : String(err)}
 `);
       });
     }
     dropEntry(entry);
+    if (entry.reinjectCount < maxReinjects) {
+      const nextCount = entry.reinjectCount + 1;
+      entry.inbound.meta[HANDBACK_REINJECT_COUNT_META_KEY] = String(nextCount);
+      log(`handback-preturn-signal: orphan reap key=${entry.statusKey} ` + `turnId=${entry.adoptTurnId} \u2014 re-injecting handback (attempt ${nextCount}/${maxReinjects})
+`);
+      try {
+        deps.reinjectHandback(entry.inbound);
+      } catch (err) {
+        log(`handback-preturn-signal: orphan re-inject failed key=${entry.statusKey}: ` + `${err instanceof Error ? err.message : String(err)}
+`);
+      }
+    } else {
+      log(`handback-preturn-signal: orphan reap key=${entry.statusKey} ` + `turnId=${entry.adoptTurnId} \u2014 re-injection cap (${maxReinjects}) exhausted, ` + `escalating to fleet-health telemetry
+`);
+      try {
+        deps.escalateOrphan({
+          statusKey: entry.statusKey,
+          chatId: entry.chatId,
+          threadId: entry.threadId,
+          adoptTurnId: entry.adoptTurnId,
+          reinjectCount: entry.reinjectCount,
+          ageMs: now() - entry.deliveredAt
+        });
+      } catch (err) {
+        log(`handback-preturn-signal: orphan escalation failed key=${entry.statusKey}: ` + `${err instanceof Error ? err.message : String(err)}
+`);
+      }
+    }
   }
   return {
     noteHandbackRelease(inbound) {
@@ -53683,6 +53886,9 @@ function createHandbackPreturnSignal(deps) {
 `);
       const startedAt = now();
       const syntheticTurnKey = `${PRETURN_TURNKEY_PREFIX}${statusKey}:${startedAt}`;
+      const rawReinject = inbound.meta?.[HANDBACK_REINJECT_COUNT_META_KEY];
+      const parsedReinject = rawReinject != null ? Number.parseInt(rawReinject, 10) : 0;
+      const reinjectCount = Number.isFinite(parsedReinject) && parsedReinject > 0 ? parsedReinject : 0;
       const entry = {
         statusKey,
         chatId,
@@ -53690,6 +53896,9 @@ function createHandbackPreturnSignal(deps) {
         adoptTurnId,
         syntheticTurnKey,
         startedAt,
+        deliveredAt: startedAt,
+        reinjectCount,
+        inbound,
         pinned: false,
         debounceTimer: null,
         reapTimer: null,
@@ -53772,6 +53981,24 @@ function createHandbackPreturnSignal(deps) {
   };
 }
 
+// gateway/handback-orphan-recovery.ts
+function formatOrphanEscalation(esc) {
+  return `telegram gateway: handback orphan escalation key=${esc.statusKey} ` + `turnId=${esc.adoptTurnId} reinjects=${esc.reinjectCount} ageMs=${esc.ageMs} ` + `\u2014 deterministic recovery exhausted, no operator nudge issued
+`;
+}
+function createHandbackOrphanRecovery(deps) {
+  const writeLog = deps.writeLog ?? ((line) => void process.stderr.write(line));
+  return {
+    deleteCard: (record) => deps.deleteMessage(record.chatId, record.activityMessageId, record.threadId).then(() => {
+      return;
+    }).catch(() => {
+      return;
+    }),
+    reinjectHandback: (inbound) => deps.pushInbound(inbound),
+    escalateOrphan: (esc) => writeLog(formatOrphanEscalation(esc))
+  };
+}
+
 // gateway/derive-turn-id.ts
 function deriveTurnId2(chatId, threadId, messageId) {
   if (messageId == null || messageId === "" || String(messageId) === "0")
@@ -63395,7 +63622,6 @@ function renderSafe(doc, source, maxLen = RICH_MESSAGE_MAX_CHARS) {
 
 // render/rich-render.ts
 init_format();
-var PLAIN_TEXT_MAX_CHARS = 4096;
 function parseRichRenderEnabled(raw) {
   if (raw == null)
     return true;
@@ -63431,6 +63657,48 @@ function renderOutboundChunks(text4, env = process.env, maxLen = RICH_MESSAGE_MA
   return out.length > 0 ? out : [whole];
 }
 
+// reply-quote.ts
+var import_grammy6 = __toESM(require_mod2(), 1);
+var QUOTE_MAX_CHARS = 1024;
+function normalizeQuoteText(quoteText) {
+  if (typeof quoteText !== "string")
+    return null;
+  if (quoteText.trim().length === 0)
+    return null;
+  if (quoteText.length <= QUOTE_MAX_CHARS)
+    return quoteText;
+  let end = QUOTE_MAX_CHARS;
+  const code2 = quoteText.charCodeAt(end - 1);
+  if (code2 >= 55296 && code2 <= 56319)
+    end -= 1;
+  return quoteText.slice(0, end);
+}
+function buildReplyParameters(messageId, quoteText) {
+  const quote = normalizeQuoteText(quoteText);
+  return { message_id: messageId, ...quote != null ? { quote } : {} };
+}
+function isQuoteRejectionError(err) {
+  if (!(err instanceof import_grammy6.GrammyError) || err.error_code !== 400)
+    return false;
+  if (isHtmlParseRejectError(err) || isMessageTooLongError(err))
+    return false;
+  return (err.description || "").toLowerCase().includes("quote");
+}
+function sendOptsHaveQuote(opts) {
+  const rp = opts.reply_parameters;
+  return rp != null && typeof rp === "object" && rp.quote != null;
+}
+function dropQuoteFromSendOpts(opts) {
+  if (!sendOptsHaveQuote(opts))
+    return { ...opts };
+  const rp = { ...opts.reply_parameters };
+  delete rp.quote;
+  delete rp.quote_parse_mode;
+  delete rp.quote_entities;
+  delete rp.quote_position;
+  return { ...opts, reply_parameters: rp };
+}
+
 // stream-controller.ts
 function createStreamController(cfg) {
   const {
@@ -63458,13 +63726,10 @@ function createStreamController(cfg) {
     ...disableLinkPreview ? { link_preview_options: { is_disabled: true } } : {},
     ...replyMarkup != null ? { reply_markup: replyMarkup } : {}
   };
-  const sendOpts = {
+  let sendOpts = {
     ...baseOpts,
     ...replyToMessageId != null ? {
-      reply_parameters: {
-        message_id: replyToMessageId,
-        ...quoteText != null ? { quote: { text: quoteText, position: 0 } } : {}
-      }
+      reply_parameters: buildReplyParameters(replyToMessageId, quoteText)
     } : {},
     ...protectContent === true ? { protect_content: true } : {},
     ...cfg.disableNotification === true ? { disable_notification: true } : {}
@@ -63481,6 +63746,17 @@ function createStreamController(cfg) {
     delete richOpts.link_preview_options;
     return bot.api.sendRichMessage(chatId, richMessage(piece.text), richOpts);
   };
+  const sendPieceWithQuoteFallback = async (piece) => {
+    try {
+      return await sendPiece(piece, sendOpts);
+    } catch (err) {
+      if (!isQuoteRejectionError(err) || !sendOptsHaveQuote(sendOpts))
+        throw err;
+      warn?.(`stream-controller: quote not found in the replied-to message \u2014 re-sending without the quote (${err instanceof Error ? err.message : String(err)})`);
+      sendOpts = dropQuoteFromSendOpts(sendOpts);
+      return await sendPiece(piece, sendOpts);
+    }
+  };
   const editPiece = (id, piece, opts) => {
     if (!piece.rich)
       return bot.api.editMessageText(chatId, id, piece.text, opts);
@@ -63523,7 +63799,7 @@ function createStreamController(cfg) {
       return false;
     }
     try {
-      const sent = await retry(() => sendPiece(piece, sendOpts), { threadId, chat_id: chatId });
+      const sent = await retry(() => sendPieceWithQuoteFallback(piece), { threadId, chat_id: chatId });
       tailIds[ti] = sent.message_id;
       tailLastText[ti] = piece.text;
       onSend?.(sent.message_id, piece.text.length);
@@ -63545,7 +63821,7 @@ function createStreamController(cfg) {
     const head = pieces[0];
     let anchorId;
     try {
-      const sent = await retry(() => sendPiece(head, sendOpts), { threadId, chat_id: chatId });
+      const sent = await retry(() => sendPieceWithQuoteFallback(head), { threadId, chat_id: chatId });
       anchorId = sent.message_id;
     } catch (err) {
       if (!literalText && head.rich && isParseEntitiesError(err)) {
@@ -63730,7 +64006,42 @@ function createChatLock() {
 }
 
 // retry-api-call.ts
-var import_grammy6 = __toESM(require_mod2(), 1);
+var import_grammy7 = __toESM(require_mod2(), 1);
+import { AsyncLocalStorage as AsyncLocalStorage4 } from "async_hooks";
+var attemptStore2 = new AsyncLocalStorage4;
+function withAttemptContext2(ctx, fn) {
+  return attemptStore2.run(ctx, fn);
+}
+function isTransientNetworkMessage2(msg) {
+  return msg.includes("ECONNRESET") || msg.includes("ETIMEDOUT") || msg.includes("fetch failed") || msg.includes("ENOTFOUND");
+}
+function isAbortError2(err) {
+  const e = err;
+  return e?.name === "AbortError" || e?.code === "ABORT_ERR";
+}
+function isTransientTransportError2(err) {
+  if (err instanceof import_grammy7.GrammyError)
+    return false;
+  if (isLocalResourceError2(err))
+    return false;
+  if (err instanceof import_grammy7.HttpError) {
+    const inner = err.error;
+    if (isLocalResourceError2(inner))
+      return false;
+    if (isAbortError2(inner))
+      return false;
+    return true;
+  }
+  const msg = err instanceof Error ? err.message : String(err ?? "");
+  if (isTransientNetworkMessage2(msg))
+    return true;
+  const cause = err?.cause;
+  if (cause == null || cause === err)
+    return false;
+  if (isLocalResourceError2(cause))
+    return false;
+  return isTransientNetworkMessage2(cause instanceof Error ? cause.message : String(cause));
+}
 function classifyBenignTelegram4002(errorCode, description) {
   if (errorCode !== 400)
     return null;
@@ -63775,12 +64086,12 @@ function createRetryApiCall2(config = {}) {
   const observer = config.observer;
   const log = config.log;
   const onFloodWait = config.onFloodWait;
-  const floodWaitRemainingMs2 = config.floodWaitRemainingMs;
+  const floodWaitRemainingMs = config.floodWaitRemainingMs;
   function openWindowMs() {
-    if (!floodWaitRemainingMs2)
+    if (!floodWaitRemainingMs)
       return 0;
     try {
-      const ms = floodWaitRemainingMs2();
+      const ms = floodWaitRemainingMs();
       return Number.isFinite(ms) && ms > 0 ? ms : 0;
     } catch {
       return 0;
@@ -63798,9 +64109,9 @@ function createRetryApiCall2(config = {}) {
         throw gated;
       }
       try {
-        return await fn();
+        return await withAttemptContext2({ attempt, maxRetries, maxFloodSleepMs }, fn);
       } catch (err) {
-        const isGrammyErr = err instanceof import_grammy6.GrammyError;
+        const isGrammyErr = err instanceof import_grammy7.GrammyError;
         const msg = err instanceof Error ? err.message : String(err);
         const desc = isGrammyErr ? err.description : msg;
         if (isLocalResourceError2(err)) {
@@ -63830,12 +64141,14 @@ function createRetryApiCall2(config = {}) {
         const benignKind = isGrammyErr ? classifyBenignTelegram4002(err.error_code, desc) : null;
         if (benignKind !== null) {
           observer?.onBenign?.({ kind: benignKind });
+          if (opts?.rethrowBenign400)
+            throw err;
           return;
         }
         if (isGrammyErr && err.error_code === 400 && desc.includes("thread not found") && opts?.threadId && opts?.chat_id) {
           throw Object.assign(new Error("THREAD_NOT_FOUND"), { original: err });
         }
-        if (!isGrammyErr && (msg.includes("ECONNRESET") || msg.includes("ETIMEDOUT") || msg.includes("fetch failed") || msg.includes("ENOTFOUND"))) {
+        if (isTransientTransportError2(err)) {
           if (attempt < maxRetries - 1) {
             const delayMs = Math.pow(2, attempt) * 1000;
             log?.(`telegram gateway: network error, retrying in ${delayMs / 1000}s: ${msg}
@@ -65136,14 +65449,13 @@ function createFloodWindowObserver(config) {
 }
 
 // shared/bot-runtime.ts
-var import_grammy7 = __toESM(require_mod2(), 1);
+var import_grammy8 = __toESM(require_mod2(), 1);
 var import_runner2 = __toESM(require_mod4(), 1);
 import { createHash as createHash3 } from "crypto";
-import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
-init_flood_circuit_breaker();
+import { AsyncLocalStorage as AsyncLocalStorage5 } from "async_hooks";
 init_format();
 init_rich_send();
-var tgPostTagStore2 = new AsyncLocalStorage3;
+var tgPostTagStore2 = new AsyncLocalStorage5;
 function _getTgPostTags() {
   return tgPostTagStore2.getStore();
 }
@@ -65186,16 +65498,27 @@ function installTgPostLogger(bot) {
       if (r != null && typeof r === "object" && r.ok === false) {
         const code2 = r.error_code;
         const benign = classifyBenignTelegram400(code2, r.description);
-        emit(benign !== null ? "benign" : "err", `telegram_${code2 ?? "unknown"}`, code2 != null ? String(code2) : "-", shortDesc(r.description));
+        const retrying = benign === null && willRetryTelegramFailure({
+          errorCode: code2 ?? null,
+          retryAfterSec: r.parameters?.retry_after ?? null,
+          message: r.description ?? null
+        });
+        emit(benign !== null ? "benign" : retrying ? "retry" : "err", `telegram_${code2 ?? "unknown"}`, code2 != null ? String(code2) : "-", shortDesc(r.description));
         return res;
       }
       emit("ok", "-", "-", "-");
       return res;
     } catch (err) {
-      const errClass = err instanceof import_grammy7.GrammyError ? `grammy_${err.error_code}` : err?.constructor?.name ?? "Error";
-      const code2 = err instanceof import_grammy7.GrammyError ? String(err.error_code) : "-";
-      const rawDesc = err instanceof import_grammy7.GrammyError ? err.description : err instanceof Error ? err.message : "";
-      emit("err", errClass, code2, shortDesc(rawDesc));
+      const errClass = err instanceof import_grammy8.GrammyError ? `grammy_${err.error_code}` : err?.constructor?.name ?? "Error";
+      const code2 = err instanceof import_grammy8.GrammyError ? String(err.error_code) : "-";
+      const rawDesc = err instanceof import_grammy8.GrammyError ? err.description : err instanceof Error ? err.message : "";
+      const retrying = willRetryTelegramFailure({
+        errorCode: err instanceof import_grammy8.GrammyError ? err.error_code : null,
+        retryAfterSec: err instanceof import_grammy8.GrammyError ? err.parameters?.retry_after ?? null : null,
+        message: err instanceof Error ? err.message : String(err ?? ""),
+        cause: err
+      });
+      emit(retrying ? "retry" : "err", errClass, code2, shortDesc(rawDesc));
       throw err;
     }
   });
@@ -69909,11 +70232,11 @@ class PostHogBackendClient extends PostHogCoreStateless {
 }
 
 // ../node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/context/context.mjs
-import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
 
 class PostHogContext {
   constructor() {
-    this.storage = new AsyncLocalStorage4;
+    this.storage = new AsyncLocalStorage6;
   }
   get() {
     return this.storage.getStore();
@@ -76366,9 +76689,7 @@ function splitMarkdownChunks2(text4, maxLen = RICH_MESSAGE_MAX_CHARS2) {
     } else if (spaceIdx > 0) {
       cut = spaceIdx;
     }
-    cut = backOffOpenFence2(rest, cut);
-    cut = backOffTableRow2(rest, cut);
-    cut = backOffOpenInline2(rest, cut);
+    cut = safeMarkdownCut2(rest, cut);
     if (cut <= 0) {
       const sliced = hardSliceToCap2(rest, maxLen);
       chunks.push(stripBoundarySpacers2(sliced[0], "trailing"));
@@ -76421,8 +76742,29 @@ var INLINE_SPAN_PATTERNS2 = [
   /\*\*[^*\n]+\*\*/g,
   /__[^_\n]+__/g,
   /(?<![\w*])_[^_\n]+_(?![\w*])/g,
-  /\[[^\]\n]*\]\([^)\n]*\)/g
+  /\[[^\]\n]*\]\([^)\n]*\)/g,
+  /~~[^~\n]+~~/g,
+  /\|\|[^|\n]+\|\|/g
 ];
+var DELIMITER_RUN_CHARS2 = new Set(["*", "_", "`", "~", "|"]);
+function safeMarkdownCut2(text4, cut) {
+  if (cut <= 0)
+    return 0;
+  if (cut >= text4.length)
+    return text4.length;
+  let safe = backOffOpenFence2(text4, cut);
+  safe = backOffTableRow2(text4, safe);
+  safe = backOffOpenInline2(text4, safe);
+  while (safe > 0 && DELIMITER_RUN_CHARS2.has(text4[safe]) && text4[safe - 1] === text4[safe])
+    safe--;
+  if (safe <= 0)
+    return 0;
+  const prev = text4.charCodeAt(safe - 1);
+  const here = text4.charCodeAt(safe);
+  if (prev >= 55296 && prev <= 56319 && here >= 56320 && here <= 57343)
+    safe -= 1;
+  return safe;
+}
 function backOffOpenInline2(text4, cut) {
   if (cut <= 0 || cut >= text4.length)
     return cut;
@@ -76446,7 +76788,7 @@ function backOffOpenInline2(text4, cut) {
 
 // gateway/command-format.ts
 init_format();
-var import_grammy8 = __toESM(require_mod2(), 1);
+var import_grammy9 = __toESM(require_mod2(), 1);
 function formatSwitchroomOutput(output, maxLen = RICH_MESSAGE_MAX_CHARS) {
   const trimmed = output.trim();
   if (trimmed.length <= maxLen)
@@ -76514,7 +76856,7 @@ function formatAuthOutputForTelegram(output) {
 `), url };
 }
 function buildAuthUrlKeyboard(authorizeUrl) {
-  return new import_grammy8.InlineKeyboard().url("\uD83D\uDD10 Open Claude auth", authorizeUrl);
+  return new import_grammy9.InlineKeyboard().url("\uD83D\uDD10 Open Claude auth", authorizeUrl);
 }
 function buildDeferredSecretKeyboard(deferKey) {
   const unlockData = `vd:unlock:${deferKey}`;
@@ -76524,7 +76866,7 @@ function buildDeferredSecretKeyboard(deferKey) {
 `);
     throw new Error(`callback_data overflow: deferKey too long (${deferKey.length} chars)`);
   }
-  return new import_grammy8.InlineKeyboard().text("\uD83D\uDD13 Unlock vault & save", unlockData).text("\uD83D\uDDD1 Discard", cancelData);
+  return new import_grammy9.InlineKeyboard().text("\uD83D\uDD13 Unlock vault & save", unlockData).text("\uD83D\uDDD1 Discard", cancelData);
 }
 function renderVaultOpFailure(verbLabel, cliOutput, key) {
   const parsed = parseVaultCliError(cliOutput);
@@ -76560,7 +76902,7 @@ _${escapeHtmlForTg2(outcome.paneTailText)}_` : "";
   }
 }
 function buildDoctorScopeKeyboard() {
-  return new import_grammy8.InlineKeyboard().text("\uD83E\uDE7A Whole fleet", "dr:fleet").text("\uD83E\uDE7A This agent", "dr:self");
+  return new import_grammy9.InlineKeyboard().text("\uD83E\uDE7A Whole fleet", "dr:fleet").text("\uD83E\uDE7A This agent", "dr:self");
 }
 function formatDoctorReport(raw) {
   const trimmed = stripAnsi4(raw).trim();
@@ -76576,7 +76918,7 @@ init_emphasis_guard();
 init_line_start_guard();
 init_inline_pairs_guard();
 init_unsupported_token_guard();
-var import_grammy9 = __toESM(require_mod2(), 1);
+var import_grammy10 = __toESM(require_mod2(), 1);
 function guardAccidentalFormatting2(markdown) {
   let out = markdown;
   out = guardUnsupportedTokens(out);
@@ -76833,7 +77175,7 @@ function normalizeTemporal(text4, tz, nowMs2) {
 }
 
 // gateway/outbound-send-path.ts
-var import_grammy10 = __toESM(require_mod2(), 1);
+var import_grammy11 = __toESM(require_mod2(), 1);
 import { statSync as statSync11 } from "fs";
 import { extname } from "path";
 
@@ -76980,6 +77322,42 @@ import {
 } from "node:fs";
 import { join as join31 } from "node:path";
 import { homedir as homedir9 } from "node:os";
+
+// hooks/audience-classify.mjs
+var AUDIENCE_USER = "user";
+var AUDIENCE_INTERNAL = "internal";
+function resolveRecordAudience(value) {
+  return value === AUDIENCE_INTERNAL ? AUDIENCE_INTERNAL : AUDIENCE_USER;
+}
+function shouldSuppressForAudience(record, opts) {
+  if (opts?.gateEnabled === false)
+    return false;
+  return resolveRecordAudience(record?.audience) === AUDIENCE_INTERNAL;
+}
+var REPLY_THROW_PROVENANCE_NOTICE = "(my reply tool errored this turn, so this was never sent as an answer \u2014 " + "the safety net captured the last thing I wrote, which may be working notes)";
+function shouldFrameReplyThrow(record, opts) {
+  if (opts?.frameEnabled === false)
+    return false;
+  return record?.replyToolThrewThisTurn === true;
+}
+function applyReplyThrowFraming(text4) {
+  const body = typeof text4 === "string" ? text4 : "";
+  if (body.trim().length === 0)
+    return body;
+  return `${REPLY_THROW_PROVENANCE_NOTICE}
+
+${body}`;
+}
+function formatReplyThrowFraming(s) {
+  return `telegram gateway: outbox provenance framing nonce=${s.turnNonce} ` + `turnId=${s.turnId ?? "unknown"} chatId=${s.chatId ?? "unresolved"} ` + `sha=${(s.textSha256 ?? "").slice(0, 12)} source=${s.source ?? "unknown"} ` + `audience=user replyToolThrew=true \u2014 captured prose delivered with its ` + `provenance stated, not suppressed
+`;
+}
+function formatInternalSuppression(s) {
+  return `telegram gateway: outbox audience suppression nonce=${s.turnNonce} ` + `turnId=${s.turnId ?? "unknown"} chatId=${s.chatId ?? "unresolved"} ` + `sha=${(s.textSha256 ?? "").slice(0, 12)} ageMs=${s.ageMs ?? 0} ` + `source=${s.source ?? "unknown"} pastWindow=${s.pastWindow === true} ` + `audience=internal \u2014 internal prose withheld from chat, journaled terminally
+`;
+}
+
+// outbox.ts
 function sha256Hex(s) {
   return createHash4("sha256").update(s, "utf8").digest("hex");
 }
@@ -77159,7 +77537,8 @@ function decideOutboxSweep(input) {
     routePrefix = "",
     quietMs = OUTBOX_QUIET_MS,
     maxAgeMs = OUTBOX_MAX_AGE_MS,
-    shownLedgerHit = false
+    shownLedgerHit = false,
+    provenanceFraming = true
   } = input;
   if (deliveredNonces.has(record.turnNonce))
     return { action: "skip-journaled" };
@@ -77174,7 +77553,13 @@ function decideOutboxSweep(input) {
     return { action: "skip-unroutable" };
   const delayed = age > maxAgeMs;
   const prefix = (delayed ? "(delayed) " : "") + routePrefix;
-  return { action: delayed ? "send-delayed" : "send", text: prefix + record.text };
+  const framed = shouldFrameReplyThrow(record, { frameEnabled: provenanceFraming });
+  const body = framed ? applyReplyThrowFraming(record.text) : record.text;
+  return {
+    action: delayed ? "send-delayed" : "send",
+    text: prefix + body,
+    ...framed && body !== record.text ? { framedProvenance: "reply-throw" } : {}
+  };
 }
 function resolveOutboxChat(record, deps) {
   if (record.chatId != null && record.chatId !== "") {
@@ -77469,7 +77854,8 @@ function journalExternalDelivery(args, stateDir, now = Date.now()) {
     tgMessageId: args.tgMessageId,
     ts: now,
     deliverySource: args.deliverySource ?? "reply-tool",
-    ...args.replyAlreadyDeliveredThisTurn == null ? {} : { replyAlreadyDeliveredThisTurn: args.replyAlreadyDeliveredThisTurn }
+    ...args.replyAlreadyDeliveredThisTurn == null ? {} : { replyAlreadyDeliveredThisTurn: args.replyAlreadyDeliveredThisTurn },
+    ...args.framedProvenance == null ? {} : { framedProvenance: args.framedProvenance }
   }, stateDir);
   clearOutboxRecord(nonce, stateDir);
 }
@@ -77524,6 +77910,7 @@ function queueFloodBlockedReply(input) {
     textSha256: sha256Hex(text4),
     createdAt,
     source: FLOOD_QUEUED_SOURCE,
+    audience: "user",
     ...input.originChatId != null ? { originChatId: input.originChatId } : {},
     ...input.originThreadId != null ? { originThreadId: input.originThreadId } : {}
   };
@@ -78042,7 +78429,12 @@ function decideCapturedProseDelivery(args, deps) {
   if (deps?.backstopDeliveredNonceHit?.(state3.turnId) === true) {
     return { deliver: false, reason: "already-delivered" };
   }
-  return { deliver: true, text: text4, reason: "captured-prose" };
+  return {
+    deliver: true,
+    text: text4,
+    reason: "captured-prose",
+    ...state3.replyToolThrewThisTurn === true ? { replyToolThrewThisTurn: true } : {}
+  };
 }
 function settleCapturedProseDelivery(outcome, effects) {
   if (outcome === "failed") {
@@ -78179,10 +78571,23 @@ async function sendReplyChunks(deps, state3) {
     }
     const sendChunkPlainText = async (opts) => {
       const plain = chunks[i].length > 0 ? chunks[i] : "\u26a0\ufe0f (a fragment could not be rendered for Telegram)";
-      const sent = await deps.sendLiteralRaw(opts, plain);
-      sentIds.push(sent.message_id);
-      deps.logOutbound("reply", chatId, sent.message_id, plain.length, `chunk=${i + 1}/${chunks.length} plaintext-fallback`);
-      deps.stderr(`telegram gateway: markdown parse-reject \u2014 resent chunk ${i + 1}/${chunks.length} as plain text
+      const pieces = splitPlainTextToCap(plain);
+      const pieceOpts = (p) => {
+        if (pieces.length === 1)
+          return opts;
+        const o = { ...opts };
+        if (p !== pieces.length - 1)
+          delete o.reply_markup;
+        if (p !== 0)
+          delete o.reply_parameters;
+        return o;
+      };
+      for (let p = 0;p < pieces.length; p++) {
+        const sent = await deps.sendLiteralRaw(pieceOpts(p), pieces[p]);
+        sentIds.push(sent.message_id);
+        deps.logOutbound("reply", chatId, sent.message_id, pieces[p].length, pieces.length > 1 ? `chunk=${i + 1}/${chunks.length} plaintext-fallback piece=${p + 1}/${pieces.length}` : `chunk=${i + 1}/${chunks.length} plaintext-fallback`);
+      }
+      deps.stderr(`telegram gateway: markdown parse-reject \u2014 resent chunk ${i + 1}/${chunks.length} as plain text` + (pieces.length > 1 ? ` in ${pieces.length} piece(s) (4096-char plain cap)` : "") + `
 `);
     };
     const sendChunk = (opts, wrapped) => {
@@ -78231,6 +78636,13 @@ async function sendReplyChunks(deps, state3) {
           else
             throw retryErr;
         }
+      } else if (isQuoteRejectionError(err) && sendOptsHaveQuote(sendOpts)) {
+        const retryOpts = dropQuoteFromSendOpts(sendOpts);
+        const sent = await sendChunk(retryOpts, false);
+        sentIds.push(sent.message_id);
+        deps.logOutbound("reply", chatId, sent.message_id, chunks[i].length, `chunk=${i + 1}/${chunks.length} quote-dropped`);
+        deps.stderr(`telegram gateway: quote not found in the replied-to message \u2014 resent chunk ${i + 1}/${chunks.length} without the quote
+`);
       } else if (isMessageTooLongError(err)) {
         await sendChunkResplit(sendOpts);
       } else if (isHtmlParseRejectError(err)) {
@@ -78243,7 +78655,7 @@ async function sendReplyChunks(deps, state3) {
   return { threadId, previewMessageId };
 }
 function classifyReadBackError(err) {
-  if (err instanceof import_grammy10.GrammyError && err.error_code === 400) {
+  if (err instanceof import_grammy11.GrammyError && err.error_code === 400) {
     const d = (err.description || "").toLowerCase();
     if (d.includes("message to edit not found"))
       return "absent";
@@ -78798,10 +79210,7 @@ ${url}`;
         const shouldReplyTo = reply_to != null && replyMode !== "off" && (replyMode === "all" || i === 0);
         return {
           ...shouldReplyTo ? {
-            reply_parameters: {
-              message_id: reply_to,
-              ...quoteText != null ? { quote: { text: quoteText, position: 0 } } : {}
-            }
+            reply_parameters: buildReplyParameters(reply_to, quoteText)
           } : {},
           ...tid != null ? { message_thread_id: tid } : {},
           ...disableLinkPreview ? { link_preview_options: { is_disabled: true } } : {},
@@ -78860,7 +79269,7 @@ ${url}`;
           opts.message_thread_id = tid;
         else
           delete opts.message_thread_id;
-        return lockedBot.api.sendVoice(chat_id, new import_grammy10.InputFile(Buffer.from(oggBytes)), opts);
+        return lockedBot.api.sendVoice(chat_id, new import_grammy11.InputFile(Buffer.from(oggBytes)), opts);
       }, { threadId, chat_id, verb: "sendVoice" });
       sentIds.push(sentVoice.message_id);
       logOutbound("reply", chat_id, sentVoice.message_id, voiceOutPlan?.ttsChunks[v]?.length ?? 0, `voice-note=${v + 1}/${voiceOggs.length}`);
@@ -78933,12 +79342,12 @@ ${url}`;
       ...replyParams,
       ...tid != null ? { message_thread_id: tid } : {}
     };
-    return lockedBot.api.sendDocument(chat_id, new import_grammy10.InputFile(f), baseOpts);
+    return lockedBot.api.sendDocument(chat_id, new import_grammy11.InputFile(f), baseOpts);
   }, { threadId, chat_id, verb: "sendDocument" });
   if (allPhotos) {
     const media = files.map((f) => ({
       type: "photo",
-      media: new import_grammy10.InputFile(f)
+      media: new import_grammy11.InputFile(f)
     }));
     let sent;
     try {
@@ -78971,7 +79380,7 @@ ${url}`;
       sentIds.push(m.message_id);
   } else {
     for (const f of files) {
-      const input = new import_grammy10.InputFile(f);
+      const input = new import_grammy11.InputFile(f);
       const isPhoto = sendableAsPhoto(f);
       let sent;
       try {
@@ -79069,10 +79478,11 @@ async function deliverCapturedProse(deps, args) {
   } = deps;
   const { chatId, threadId, statusKeyStr, registryKey, originTurnId, text: text4, turnDurationMs } = args;
   const now = Date.now();
+  const framed = shouldFrameReplyThrow({ replyToolThrewThisTurn: args.replyToolThrewThisTurn }, { frameEnabled: process.env.SWITCHROOM_TG_OUTBOX_PROVENANCE_FRAMING !== "0" });
   let outcome;
   const already = outboundDedup.check(chatId, threadId, text4, now, registryKey);
   if (already == null) {
-    let out = normalizeParagraphBreaks(repairEscapedWhitespace(text4));
+    let out = normalizeParagraphBreaks(repairEscapedWhitespace(framed ? applyReplyThrowFraming(text4) : text4));
     out = redactOutboundText(out, "captured_prose");
     const chunks = splitMarkdownChunks(out, RICH_MESSAGE_MAX_CHARS);
     const sentIds = [];
@@ -79102,9 +79512,24 @@ async function deliverCapturedProse(deps, args) {
         } catch {}
       }
       outboundDedup.record(chatId, threadId, text4, now, registryKey);
-      journalExternalDelivery({ turnNonce: originTurnId, text: text4, tgMessageId: sentIds[sentIds.length - 1], replyAlreadyDeliveredThisTurn: false });
+      journalExternalDelivery({
+        turnNonce: originTurnId,
+        text: text4,
+        tgMessageId: sentIds[sentIds.length - 1],
+        replyAlreadyDeliveredThisTurn: false,
+        ...framed ? { framedProvenance: "reply-throw" } : {}
+      });
       process.stderr.write(`telegram gateway: captured-prose delivery \u2014 sent ${out.length} chars recovered from ` + `transcript scan (chat=${chatId} origin=${originTurnId})
 `);
+      if (framed) {
+        process.stderr.write(formatReplyThrowFraming({
+          turnNonce: originTurnId,
+          turnId: originTurnId,
+          chatId,
+          textSha256: sha256Hex(text4),
+          source: "captured-prose-bridge"
+        }));
+      }
       outcome = "sent";
     } catch (err) {
       process.stderr.write(`telegram gateway: captured-prose delivery failed: ${err.message} \u2014 ` + `arming the silent-end re-prompt net (recordUndeliveredTurnEnd) so the ` + `answer is recoverable (chat=${chatId} origin=${originTurnId})
@@ -79142,7 +79567,7 @@ async function deliverCapturedProse(deps, args) {
     process.stderr.write(`telegram gateway: WARN captured-prose exhausted-boundary fallback \u2014 rich send ` + `failed with the re-prompt budget already spent; attempting a plain-text ` + `delivery of the recovered answer before the generic apology ` + `(chat=${chatId} origin=${originTurnId})
 `);
     const plain = redactOutboundText(text4, "captured_prose");
-    const plainChunks = splitMarkdownChunks(plain, RICH_MESSAGE_MAX_CHARS);
+    const plainChunks = splitPlainTextToCap(plain);
     try {
       let liveThreadId = threadId;
       const plainSentIds = [];
@@ -79549,7 +79974,7 @@ class LivenessTracker {
 // gateway/outbound-send-path.ts
 init_format();
 init_text_voice_scrub();
-var import_grammy11 = __toESM(require_mod2(), 1);
+var import_grammy12 = __toESM(require_mod2(), 1);
 init_format();
 init_rich_send();
 function normalizeOutboundBody2(rawText, site, redact2, opts = {}) {
@@ -81422,6 +81847,7 @@ function handleSessionEvent(deps, ev) {
                 registryKey: turn.registryKey ?? null,
                 originTurnId: turn.turnId,
                 text: proseDecision.text,
+                replyToolThrewThisTurn: proseDecision.replyToolThrewThisTurn === true,
                 turnDurationMs
               });
             } else {
@@ -82942,7 +83368,7 @@ async function loadFromAuthBroker(options = {}) {
 }
 
 // gateway/folder-picker-handler.ts
-var import_grammy12 = __toESM(require_mod2(), 1);
+var import_grammy13 = __toESM(require_mod2(), 1);
 
 // ../src/drive/folder-picker.ts
 var DRIVE_ID_RE2 = /^[A-Za-z0-9_-]+$/;
@@ -83261,7 +83687,7 @@ async function recordGrantAndConfirm(ctx, deps, parsed) {
   const confirmText = `\u2705 Granted ${deps.agentName} access to folder ${parsed.folder_id}
 ` + `Scope: \`${scope}\`
 ` + `Revoke with: \`/approvals revoke ${decisionId}\``;
-  const kb = new import_grammy12.InlineKeyboard().url("\uD83D\uDCD6 Open in Drive", `https://drive.google.com/drive/folders/${parsed.folder_id}`);
+  const kb = new import_grammy13.InlineKeyboard().url("\uD83D\uDCD6 Open in Drive", `https://drive.google.com/drive/folders/${parsed.folder_id}`);
   try {
     await ctx.editMessageText({ markdown: confirmText }, {
       reply_markup: kb
@@ -83270,7 +83696,7 @@ async function recordGrantAndConfirm(ctx, deps, parsed) {
   await ctx.answerCallbackQuery({ text: "Allowed" });
 }
 function toKeyboard(spec) {
-  const kb = new import_grammy12.InlineKeyboard;
+  const kb = new import_grammy13.InlineKeyboard;
   for (let r = 0;r < spec.rows.length; r++) {
     const row = spec.rows[r];
     for (const btn of row) {
@@ -85346,7 +85772,9 @@ var HINDSIGHT_DEFAULT_RECALL_MAX_CONCURRENT = 8;
 var HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S = 600;
 var HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_MEMORIES_PER_ROUND = 250;
 var HINDSIGHT_DEFAULT_CONSOLIDATION_SLOT_LIMIT = 6;
-var HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS = 1;
+var HINDSIGHT_DEFAULT_CONSOLIDATION_RESERVED_SLOTS = 1;
+var HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY = 0.3;
+var HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS = "false";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_FUNCTION = "exponential";
 var HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS = 30;
 var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
@@ -85392,8 +85820,8 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
     String(HINDSIGHT_DEFAULT_REFLECT_WALL_TIMEOUT_S)
   ],
   [
-    "HINDSIGHT_API_WORKER_CONSOLIDATION_MAX_SLOTS",
-    String(HINDSIGHT_DEFAULT_CONSOLIDATION_MAX_SLOTS)
+    "HINDSIGHT_API_WORKER_CONSOLIDATION_RESERVED_SLOTS",
+    String(HINDSIGHT_DEFAULT_CONSOLIDATION_RESERVED_SLOTS)
   ],
   [
     "HINDSIGHT_API_WORKER_CONSOLIDATION_SLOT_LIMIT",
@@ -85410,6 +85838,10 @@ var HINDSIGHT_PERF_DEFAULTS_UNGATED = [
   [
     "HINDSIGHT_API_RECENCY_DECAY_HALFLIFE_DAYS",
     String(HINDSIGHT_DEFAULT_RECENCY_DECAY_HALFLIFE_DAYS)
+  ],
+  [
+    "HINDSIGHT_API_GRAPH_SEED_MIN_SIMILARITY",
+    String(HINDSIGHT_DEFAULT_GRAPH_SEED_MIN_SIMILARITY)
   ]
 ];
 var HINDSIGHT_PERF_DEFAULTS_GPU = [
@@ -85430,22 +85862,41 @@ var HINDSIGHT_PERF_DEFAULTS_LOCAL_LLM = [
     String(HINDSIGHT_DEFAULT_CONSOLIDATION_LLM_MAX_CONCURRENT)
   ],
   ["HINDSIGHT_API_LLM_STRICT_SCHEMA", HINDSIGHT_DEFAULT_LLM_STRICT_SCHEMA],
-  ["HINDSIGHT_API_LLM_MAX_RETRIES", String(HINDSIGHT_DEFAULT_LLM_MAX_RETRIES)]
+  ["HINDSIGHT_API_LLM_MAX_RETRIES", String(HINDSIGHT_DEFAULT_LLM_MAX_RETRIES)],
+  ["HINDSIGHT_API_LLM_SUPPORTS_MAX_ITEMS", HINDSIGHT_DEFAULT_LLM_SUPPORTS_MAX_ITEMS]
 ];
 var HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS = new Set([
   "HINDSIGHT_API_WORKER_CONSOLIDATION_BANK_PRIORITY",
   "HINDSIGHT_CE_DECISIVE_RELATIVE_GAP",
   "HINDSIGHT_API_RECENCY_DECAY_LINEAR_WINDOW_DAYS",
   "HINDSIGHT_API_WORKER_MAX_SLOTS",
-  "HINDSIGHT_API_WORKER_RETAIN_MAX_SLOTS"
+  "HINDSIGHT_API_WORKER_RETAIN_RESERVED_SLOTS",
+  "HINDSIGHT_API_SEMANTIC_MIN_SIMILARITY",
+  "HINDSIGHT_MCP_RECALL_BUDGET_MODE",
+  "HINDSIGHT_API_LLM_TEMPERATURE_REFLECT",
+  "HINDSIGHT_API_RETAIN_WALL_TIMEOUT"
 ]);
+var HINDSIGHT_WORKER_SLOT_TYPES = [
+  "consolidation",
+  "file_convert_retain",
+  "graph_maintenance",
+  "import_documents",
+  "refresh_mental_model",
+  "retain"
+];
+var HINDSIGHT_WORKER_RESERVED_SLOT_ALIASES = new Map(HINDSIGHT_WORKER_SLOT_TYPES.map((type) => [
+  `HINDSIGHT_API_WORKER_${type.toUpperCase()}_MAX_SLOTS`,
+  `HINDSIGHT_API_WORKER_${type.toUpperCase()}_RESERVED_SLOTS`
+]));
 var HINDSIGHT_PERF_ENV_KEYS = new Set([
   ...[
     ...HINDSIGHT_PERF_DEFAULTS_UNGATED,
     ...HINDSIGHT_PERF_DEFAULTS_GPU,
     ...HINDSIGHT_PERF_DEFAULTS_LOCAL_LLM
   ].map(([k]) => k),
-  ...HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS
+  ...HINDSIGHT_PERF_OVERRIDE_ONLY_KEYS,
+  ...HINDSIGHT_WORKER_RESERVED_SLOT_ALIASES.keys(),
+  ...HINDSIGHT_WORKER_RESERVED_SLOT_ALIASES.values()
 ]);
 
 // ../src/setup/hindsight-context-budget.ts
@@ -89841,7 +90292,9 @@ function createIpcServer(options) {
       case "rollout_status_edit":
         if (onRolloutStatusEdit) {
           try {
-            onRolloutStatusEdit(client3, msg);
+            Promise.resolve(onRolloutStatusEdit(client3, msg)).catch((err) => {
+              log(`rollout_status_edit handler rejected (client=${client3.id}): ${err.message}`);
+            });
           } catch (err) {
             log(`rollout_status_edit handler threw (client=${client3.id}): ${err.message}`);
           }
@@ -90027,6 +90480,58 @@ function createIpcServer(options) {
   return ipcServer;
 }
 
+// gateway/rollout-status-edit.ts
+var GONE_PATTERNS = [
+  /message to edit not found/i,
+  /message can't be edited/i,
+  /message_id_invalid/i,
+  /message to be edited not found/i
+];
+var NOT_MODIFIED = /message is not modified/i;
+function classifyRolloutEditError(err) {
+  const e = err;
+  const text4 = [
+    typeof e?.description === "string" ? e.description : "",
+    typeof e?.message === "string" ? e.message : ""
+  ].join(" ");
+  if (NOT_MODIFIED.test(text4))
+    return "not-modified";
+  if (GONE_PATTERNS.some((re) => re.test(text4)))
+    return "gone";
+  return "transient";
+}
+async function handleRolloutStatusEdit(deps, client3, msg) {
+  const reply = (ok3, extra = {}) => {
+    try {
+      client3.send({ type: "rollout_status_edited", requestId: msg.requestId, ok: ok3, ...extra });
+    } catch {}
+  };
+  const self = deps.selfAgentName;
+  if (self && msg.agentName !== self) {
+    deps.log(`rollout_status_edit rejected \u2014 agent mismatch (${msg.agentName} != ${self})`);
+    reply(false, { gone: false, reason: "agent mismatch" });
+    return;
+  }
+  const operator = deps.operatorChatId();
+  if (operator === undefined) {
+    deps.log("rollout_status_edit \u2014 no operator chat (allowFrom empty)");
+    reply(false, { gone: false, reason: "no operator chat" });
+    return;
+  }
+  try {
+    await deps.editMessage(operator, msg.messageId, msg.text);
+    reply(true);
+  } catch (err) {
+    const cls = classifyRolloutEditError(err);
+    if (cls === "not-modified") {
+      reply(true);
+      return;
+    }
+    deps.log(`rollout_status_edit failed (${cls}) request=${msg.requestId} message_id=${msg.messageId}: ${err.message}`);
+    reply(false, { gone: cls === "gone", reason: err.message });
+  }
+}
+
 // ../src/drive/diff-preview.ts
 function buildDiffPreview(input) {
   validateInput(input);
@@ -90474,7 +90979,7 @@ async function handleRequestMs365Approval(client3, msg, deps) {
 
 // gateway/diff-preview-card.ts
 init_format();
-var import_grammy13 = __toESM(require_mod2(), 1);
+var import_grammy14 = __toESM(require_mod2(), 1);
 var REQUEST_ID_RE = /^[0-9a-f]{32}$/;
 var PENDING_FILE_ID_SENTINEL = "pending-create";
 function buildDiffPreviewCard(input) {
@@ -90492,7 +90997,7 @@ function buildDiffPreviewCard(input) {
   }
   const text4 = bodyLines.join(`
 `);
-  const kb = new import_grammy13.InlineKeyboard;
+  const kb = new import_grammy14.InlineKeyboard;
   const ROW_BREAK_AFTER = [
     "apply_suggestion"
   ];
@@ -90975,6 +91480,23 @@ function loadObligations(path3, fs3) {
     return [];
   return env.obligations.filter(isObligationRow).map(sanitizeCapturedDelivery);
 }
+function removeUnmaintainedSnapshot(path3, fs3, reason = "persistence disabled", log = (l) => process.stderr.write(l)) {
+  const unlink = fs3.unlinkSync;
+  if (unlink == null)
+    return false;
+  try {
+    if (!fs3.existsSync(path3))
+      return false;
+    unlink(path3);
+    log(`obligation-store: persistence is off (${reason}) \u2014 removed unmaintained ` + `snapshot path=${path3} so it cannot be read as "nobody is waiting" (#4146)
+`);
+    return true;
+  } catch (err) {
+    log(`obligation-store: could not remove unmaintained snapshot path=${path3}: ` + `${err.message} \u2014 audience classification falls back to the ` + `reader-side ledger-off guard (#4146)
+`);
+    return false;
+  }
+}
 function persistObligations(path3, fs3, snapshot, log = (l) => process.stderr.write(l)) {
   const env = { v: 1, obligations: [...snapshot] };
   const tmp = path3 + ".tmp";
@@ -97505,6 +98027,7 @@ function readAndFilter(raw, filters, limit) {
 }
 
 // gateway/update-announce.ts
+init_status_no_truncate();
 var DEFAULT_LOOKBACK_MS = 10 * 60 * 1000;
 function readLastTerminalUpdateAudit(opts = {}) {
   const path3 = opts.auditLogPath ?? defaultAuditLogPath();
@@ -97565,7 +98088,10 @@ function renderUpdateOutcomeLine(entry) {
   const stderrTail = (entry.stderr_tail ?? entry.error ?? "").slice(-400);
   const opStep = entry.op;
   const hint = recoveryHint(entry.install_context?.install_type);
-  const lines = [`\u274c update failed at ${opStep}: ${stderrTail || "(no stderr captured)"}`, `    \u21b3 Recovery: ${hint}`];
+  const lines = [
+    `\u274c update failed at ${opStep}: ${stderrTail || "(no stderr captured)"}`,
+    `${NESTED_PREFIX}Recovery: ${hint}`
+  ];
   return lines.join(`
 `);
 }
@@ -99894,8 +100420,37 @@ async function sweepOutbox(deps) {
     return summary;
   const deliveredNonces = readDeliveredNonces(deps.stateDir);
   const records = pending.map((fileName) => readOutboxRecord(fileName, deps.stateDir)).filter((r) => r != null).sort((a, b) => a.createdAt !== b.createdAt ? a.createdAt - b.createdAt : a.turnNonce < b.turnNonce ? -1 : a.turnNonce > b.turnNonce ? 1 : 0);
+  const audienceGateEnabled = deps.audienceGateEnabled?.() ?? process.env.SWITCHROOM_TG_OUTBOX_AUDIENCE_GATE !== "0";
+  const escalateInternalSuppression = deps.escalateInternalSuppression ?? log;
+  const provenanceFramingEnabled = deps.provenanceFramingEnabled?.() ?? process.env.SWITCHROOM_TG_OUTBOX_PROVENANCE_FRAMING !== "0";
+  const logProvenanceFraming = deps.logProvenanceFraming ?? log;
   for (const record2 of records) {
     summary.scanned++;
+    if (shouldSuppressForAudience(record2, { gateEnabled: audienceGateEnabled })) {
+      summary.skipped++;
+      summary.audienceSuppressed = (summary.audienceSuppressed ?? 0) + 1;
+      const ageMs = now - record2.createdAt;
+      appendDelivered({
+        turnNonce: record2.turnNonce,
+        textSha256: record2.textSha256,
+        ts: now,
+        deliverySource: "sweep",
+        replyAlreadyDeliveredThisTurn: record2.replyAlreadyDeliveredThisTurn === true,
+        audience: AUDIENCE_INTERNAL,
+        suppressedAudience: AUDIENCE_INTERNAL
+      }, deps.stateDir);
+      clearOutboxRecord(record2.turnNonce, deps.stateDir);
+      escalateInternalSuppression(formatInternalSuppression({
+        turnNonce: record2.turnNonce,
+        turnId: turnIdFromNonce(record2.turnNonce),
+        chatId: record2.chatId,
+        textSha256: record2.textSha256,
+        ageMs,
+        source: record2.source,
+        pastWindow: ageMs > OUTBOX_MAX_AGE_MS
+      }));
+      continue;
+    }
     const resolved = resolveOutboxChat(record2, {
       registryChainLookup: (anchorContent) => {
         const taskId = extractTaskId(anchorContent);
@@ -99913,7 +100468,8 @@ async function sweepOutbox(deps) {
       routable: resolved != null,
       routePrefix,
       quietMs: deps.quietMs ?? OUTBOX_QUIET_MS,
-      shownLedgerHit: isShownBlock(record2.turnNonce, record2.text, deps.stateDir)
+      shownLedgerHit: isShownBlock(record2.turnNonce, record2.text, deps.stateDir),
+      provenanceFraming: provenanceFramingEnabled
     });
     if (decision.action !== "send" && decision.action !== "send-delayed") {
       summary.skipped++;
@@ -99956,8 +100512,19 @@ async function sweepOutbox(deps) {
         tgMessageId: sendResult.messageId,
         ts: now,
         deliverySource: "sweep",
-        replyAlreadyDeliveredThisTurn: record2.replyAlreadyDeliveredThisTurn === true
+        replyAlreadyDeliveredThisTurn: record2.replyAlreadyDeliveredThisTurn === true,
+        ...decision.framedProvenance != null ? { framedProvenance: decision.framedProvenance } : {}
       }, deps.stateDir);
+      if (decision.framedProvenance != null) {
+        summary.provenanceFramed = (summary.provenanceFramed ?? 0) + 1;
+        logProvenanceFraming(formatReplyThrowFraming({
+          turnNonce: record2.turnNonce,
+          turnId: turnIdFromNonce(record2.turnNonce),
+          chatId: resolvedChat.chatId,
+          textSha256: record2.textSha256,
+          source: record2.source
+        }));
+      }
       if (deps.recordOutbound != null && sendResult.chunks.length > 0) {
         try {
           deps.recordOutbound(resolvedChat.chatId, resolvedChat.threadId, sendResult.chunks.map((c) => c.messageId), sendResult.chunks.map((c) => c.text));
@@ -99977,6 +100544,9 @@ async function sweepOutbox(deps) {
   }
   return summary;
 }
+function turnIdFromNonce(nonce) {
+  return /^-?\d+:[^#]*#\d+$/.test(nonce) ? nonce : null;
+}
 function probeFloodWindow(probe) {
   if (probe == null)
     return 0;
@@ -100017,15 +100587,29 @@ function createSweepBackoff(cfg = {}) {
     failures: () => failures
   };
 }
-async function sendChunkRich(bot, chatId, chunk2, opts) {
-  try {
-    return await bot.api.sendRichMessage(chatId, richMessage(chunk2), opts);
-  } catch (err) {
-    if (isParseEntitiesError(err)) {
-      return await bot.api.sendMessage(chatId, chunk2, opts);
+function newChunkSendState() {
+  return { parseRejected: false, landed: [] };
+}
+async function sendChunkRich(bot, chatId, chunk2, opts, state7 = newChunkSendState()) {
+  if (!state7.parseRejected) {
+    try {
+      const sent = await bot.api.sendRichMessage(chatId, richMessage(chunk2), opts);
+      return [{ message_id: sent?.message_id, text: chunk2 }];
+    } catch (err) {
+      if (!isParseEntitiesError(err))
+        throw err;
+      state7.parseRejected = true;
     }
-    throw err;
   }
+  const pieces = splitPlainTextToCap(chunk2);
+  const withoutMarkup = { ...opts };
+  delete withoutMarkup.reply_markup;
+  for (let p = state7.landed.length;p < pieces.length; p++) {
+    const isFinalPiece = p === pieces.length - 1;
+    const sent = await bot.api.sendMessage(chatId, pieces[p], isFinalPiece ? opts : withoutMarkup);
+    state7.landed.push({ message_id: sent?.message_id, text: pieces[p] });
+  }
+  return state7.landed;
 }
 function createOutboxSend(deps) {
   return async (chatId, threadId, text4) => {
@@ -100040,14 +100624,16 @@ function createOutboxSend(deps) {
     for (let idx = 0;idx < chunks.length; idx++) {
       const chunk2 = chunks[idx];
       const isLast = idx === chunks.length - 1;
+      const chunkState = newChunkSendState();
       const res = await retryWithThreadFallback(deps.retry, (tid) => {
         const base = tid != null ? { message_thread_id: tid } : {};
         const opts = isLast && replyMarkup != null ? { ...base, reply_markup: replyMarkup } : base;
-        return sendChunkRich(bot, chatId, chunk2, opts);
+        return sendChunkRich(bot, chatId, chunk2, opts, chunkState);
       }, { threadId: threadId ?? undefined, chat_id: chatId, verb: "outbox-sweep.sendMessage" });
-      const id = res?.message_id;
-      if (id != null)
-        landed.push({ messageId: id, text: chunk2 });
+      for (const sent of res ?? []) {
+        if (sent.message_id != null)
+          landed.push({ messageId: sent.message_id, text: sent.text });
+      }
     }
     return {
       messageId: landed.length > 0 ? landed[landed.length - 1].messageId : undefined,
@@ -100055,6 +100641,54 @@ function createOutboxSend(deps) {
     };
   };
 }
+function createOutboxSweepTick(deps) {
+  const now = deps.now ?? (() => Date.now());
+  let lastDeferLogAt = 0;
+  let inFlight = false;
+  let overlapSkips = 0;
+  const tick3 = () => {
+    if (deps.getBot() == null)
+      return;
+    if (!deps.backoff.ready(now()))
+      return;
+    if (inFlight) {
+      overlapSkips++;
+      if (overlapSkips === 1) {
+        deps.log?.(`outbox-sweep: tick skipped \u2014 the previous sweep is still in flight ` + `(single-flight guard; no concurrent sweep started)
+`);
+      }
+      return;
+    }
+    inFlight = true;
+    deps.runSweep().then((summary) => {
+      if (summary.floodDeferred === true) {
+        const at = now();
+        if (at - lastDeferLogAt >= OUTBOX_SWEEP_DEFER_LOG_INTERVAL_MS) {
+          lastDeferLogAt = at;
+          deps.log?.(`outbox-sweep: deferred \u2014 Telegram flood window still open for ` + `${Math.ceil((summary.floodRemainingMs ?? 0) / 1000)}s; not issuing any ` + `send (would feed the ban)
+`);
+        }
+        return;
+      }
+      if (summary.sendFailures > 0) {
+        const delay = deps.backoff.noteFailure(now());
+        deps.log?.(`outbox-sweep: ${summary.sendFailures} send failure(s) \u2014 backing off ` + `${Math.round(delay / 1000)}s before the next sweep (attempt ${deps.backoff.failures()})
+`);
+      } else {
+        deps.backoff.noteSuccess();
+      }
+    }).catch((err) => deps.log?.(`outbox-sweep: tick failed: ${err.message}
+`)).finally(() => {
+      inFlight = false;
+      if (overlapSkips > 0) {
+        deps.log?.(`outbox-sweep: sweep finished; ${overlapSkips} tick(s) were skipped while it ran
+`);
+        overlapSkips = 0;
+      }
+    });
+  };
+  return Object.assign(tick3, { inFlight: () => inFlight });
+}
 function startOutboxSweep(deps) {
   if (!deps.isGatewayMain || process.env.SWITCHROOM_TG_OUTBOX_DELIVERY === "0")
     return;
@@ -100071,15 +100705,11 @@ function startOutboxSweep(deps) {
     ...deps.resolveReplyMarkup != null ? { resolveReplyMarkup: deps.resolveReplyMarkup } : {}
   });
   const backoff = deps.backoff ?? createSweepBackoff();
-  let lastDeferLogAt = 0;
-  const tick3 = () => {
-    const bot = deps.getBot();
-    if (bot == null)
-      return;
-    const now = Date.now();
-    if (!backoff.ready(now))
-      return;
-    sweepOutbox({
+  const tick3 = createOutboxSweepTick({
+    getBot: deps.getBot,
+    backoff,
+    log: deps.log,
+    runSweep: () => sweepOutbox({
       stateDir: deps.stateDir,
       log: deps.log,
       send,
@@ -100093,36 +100723,18 @@ function startOutboxSweep(deps) {
         const turnKey3 = resolveSubagentOriginTurnKey(db3, taskId);
         return turnKey3 == null ? null : chatFromTurnKey(turnKey3);
       }
-    }).then((summary) => {
-      if (summary.floodDeferred === true) {
-        const at = Date.now();
-        if (at - lastDeferLogAt >= OUTBOX_SWEEP_DEFER_LOG_INTERVAL_MS) {
-          lastDeferLogAt = at;
-          deps.log?.(`outbox-sweep: deferred \u2014 Telegram flood window still open for ` + `${Math.ceil((summary.floodRemainingMs ?? 0) / 1000)}s; not issuing any ` + `send (would feed the ban)
-`);
-        }
-        return;
-      }
-      if (summary.sendFailures > 0) {
-        const delay = backoff.noteFailure(Date.now());
-        deps.log?.(`outbox-sweep: ${summary.sendFailures} send failure(s) \u2014 backing off ` + `${Math.round(delay / 1000)}s before the next sweep (attempt ${backoff.failures()})
-`);
-      } else {
-        backoff.noteSuccess();
-      }
-    }).catch((err) => deps.log?.(`outbox-sweep: tick failed: ${err.message}
-`));
-  };
+    })
+  });
   const timer3 = setInterval(tick3, OUTBOX_SWEEP_INTERVAL_MS);
   timer3.unref?.();
   return timer3;
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.19.42";
-var COMMIT_SHA = "e288dac2";
-var COMMIT_DATE = "2026-08-01T02:20:24Z";
-var LATEST_PR = 4094;
+var VERSION2 = "0.19.43";
+var COMMIT_SHA = "4aaf442f";
+var COMMIT_DATE = "2026-08-01T10:38:38Z";
+var LATEST_PR = 4159;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -100167,10 +100779,10 @@ function composeBootVersionString(inputs) {
 }
 
 // gateway/unhandled-rejection-policy.ts
-var import_grammy14 = __toESM(require_mod2(), 1);
+var import_grammy15 = __toESM(require_mod2(), 1);
 function classifyRejection(err, opts = {}) {
-  const isGrammy = opts.isGrammyError != null ? opts.isGrammyError(err) : err instanceof import_grammy14.GrammyError;
-  const isHttp = opts.isHttpError != null ? opts.isHttpError(err) : err instanceof import_grammy14.HttpError;
+  const isGrammy = opts.isGrammyError != null ? opts.isGrammyError(err) : err instanceof import_grammy15.GrammyError;
+  const isHttp = opts.isHttpError != null ? opts.isHttpError(err) : err instanceof import_grammy15.HttpError;
   if (isHttp)
     return "log_only";
   if (err instanceof Error && err.message === FLOOD_WAIT_ACTIVE)
@@ -102820,7 +103432,8 @@ var obligationStoreFs = {
   renameSync: (a, b) => renameSync27(a, b),
   existsSync: (p) => existsSync57(p),
   fsyncFileSync: fsyncPathSync,
-  fsyncDirSync: fsyncPathSync
+  fsyncDirSync: fsyncPathSync,
+  unlinkSync: unlinkSync31
 };
 var obligationLedger = new ObligationLedger(OBLIGATION_REPRESENT_MAX, {
   onChange: STATIC || !OBLIGATION_LEDGER_ENABLED ? undefined : (snapshot) => persistObligations(OBLIGATION_STORE_PATH, obligationStoreFs, snapshot)
@@ -102832,7 +103445,8 @@ if (isGatewayMain && !STATIC && OBLIGATION_LEDGER_ENABLED) {
     process.stderr.write(`telegram gateway: obligation-ledger hydrated ${restored.length} open obligation(s) from ${OBLIGATION_STORE_PATH}
 `);
   }
-}
+} else if (isGatewayMain)
+  removeUnmaintainedSnapshot(OBLIGATION_STORE_PATH, obligationStoreFs, `static=${STATIC} enabled=${OBLIGATION_LEDGER_ENABLED}`);
 var obligationEscalateInFlight = new Set;
 var capturedResume = createCapturedResumeDispatcher({
   deliverAnswer: (a) => deliverAnswer(a),
@@ -104081,7 +104695,7 @@ function wrapBootCardApi(threadId) {
         await lockedBot.api.editMessageText(cid, mid, richMessage2(text5), editOpts);
         return "edited";
       } catch (err) {
-        const desc = err instanceof import_grammy16.GrammyError ? err.description : err instanceof Error ? err.message : String(err);
+        const desc = err instanceof import_grammy17.GrammyError ? err.description : err instanceof Error ? err.message : String(err);
         if (typeof desc === "string" && desc.toLowerCase().includes("not modified"))
           return "edited";
         return "gone";
@@ -105920,7 +106534,7 @@ if (isGatewayMain && inboundSpool != null) {
 }
 var pendingPermissionBuffer = createPendingPermissionBuffer();
 function buildPermissionActionRow(requestId, showAlways) {
-  const kb = new import_grammy16.InlineKeyboard().text("\u274C Deny", `perm:deny:${requestId}`).text("\u2705 Allow", `perm:allow:${requestId}`);
+  const kb = new import_grammy17.InlineKeyboard().text("\u274C Deny", `perm:deny:${requestId}`).text("\u2705 Allow", `perm:allow:${requestId}`);
   if (showAlways)
     kb.text("\uD83D\uDD01 Always\u2026", `perm:always:${requestId}`);
   return kb;
@@ -106480,7 +107094,7 @@ if (isGatewayMain)
           }
         },
         postAttachment: async (args) => {
-          const input = new import_grammy16.InputFile(Buffer.from(args.content, "utf8"), args.filename);
+          const input = new import_grammy17.InputFile(Buffer.from(args.content, "utf8"), args.filename);
           await robustApiCall(() => bot.api.sendDocument(args.chatId, input, {
             ...args.threadId !== undefined ? { message_thread_id: args.threadId } : {}
           }), {
@@ -106565,20 +107179,19 @@ if (isGatewayMain)
         } catch {}
       }
     },
-    onRolloutStatusEdit(_client, msg) {
-      const self = process.env.SWITCHROOM_AGENT_NAME;
-      if (self && msg.agentName !== self) {
-        process.stderr.write(`telegram gateway: rollout_status_edit rejected \u2014 agent mismatch (${msg.agentName} != ${self})
-`);
-        return;
-      }
-      const operator = loadAccess().allowFrom[0];
-      if (operator === undefined) {
-        process.stderr.write(`telegram gateway: rollout_status_edit \u2014 no operator chat (allowFrom empty)
-`);
-        return;
-      }
-      swallowingApiCall(() => bot.api.editMessageText(operator, msg.messageId, richMessage2(msg.text), {}), { chat_id: String(operator), verb: "rollout-status-edit" });
+    onRolloutStatusEdit(client3, msg) {
+      return handleRolloutStatusEdit({
+        selfAgentName: process.env.SWITCHROOM_AGENT_NAME,
+        operatorChatId: () => loadAccess().allowFrom[0],
+        editMessage: (chatId, messageId, text5) => robustApiCall(() => bot.api.editMessageText(chatId, messageId, richMessage2(text5), {}), {
+          chat_id: String(chatId),
+          verb: "rollout-status-edit",
+          priorityClass: "critical",
+          rethrowBenign400: true
+        }),
+        log: (m) => process.stderr.write(`telegram gateway: ${m}
+`)
+      }, client3, msg);
     },
     onInjectInbound(_client, msg) {
       if (!isCronInjectFire(msg.inbound.meta))
@@ -107278,7 +107891,7 @@ async function executeAskUser(rawArgs) {
     }
   }
   const askId = generateAskId();
-  const keyboard = new import_grammy16.InlineKeyboard;
+  const keyboard = new import_grammy17.InlineKeyboard;
   for (let i = 0;i < args.options.length; i++) {
     keyboard.text(args.options[i], encodeAskCallback(askId, i));
     if (i < args.options.length - 1)
@@ -107926,7 +108539,6 @@ if (isGatewayMain && !STATIC && FEED_HEARTBEAT_ENABLED) {
 }
 var HANDBACK_PRETURN_ENABLED = !STATIC && process.env.SWITCHROOM_HANDBACK_PRETURN !== "0";
 var HANDBACK_PRETURN_HTML = "\uD83E\uDD1D Reading the worker\u2019s results\u2026";
-var HANDBACK_PRETURN_ORPHAN_HTML = "\uD83E\uDD1D A background worker finished, but the handback never started \u2014 it may need a nudge.";
 async function openHandbackPreTurnCard(chatId, threadId) {
   if (STATIC)
     return null;
@@ -107946,24 +108558,23 @@ async function openHandbackPreTurnCard(chatId, threadId) {
     return null;
   }
 }
-function finalizeHandbackPreTurnCard(record2) {
-  return robustApiCall(() => bot.api.editMessageText(record2.chatId, record2.activityMessageId, richMessage2(HANDBACK_PRETURN_ORPHAN_HTML), {}), {
-    chat_id: record2.chatId,
-    ...record2.threadId != null ? { threadId: record2.threadId } : {},
-    verb: "handback-preturn.orphan-finalize"
-  }).then(() => {
-    return;
-  }).catch(() => {
-    return;
-  });
-}
+var handbackOrphanRecovery = createHandbackOrphanRecovery({
+  deleteMessage: (chatId, messageId, threadId) => robustApiCall(() => bot.api.deleteMessage(chatId, messageId), {
+    chat_id: chatId,
+    ...threadId != null ? { threadId } : {},
+    verb: "handback-preturn.orphan-delete"
+  }),
+  pushInbound: (inbound) => pendingInboundBuffer.push(process.env.SWITCHROOM_AGENT_NAME ?? "", inbound)
+});
 var handbackPreturnSignal = createHandbackPreturnSignal({
   chatKey: (chatId, threadId) => chatKey2(chatId, threadId),
   deriveTurnId: (chatId, threadId, messageId) => deriveTurnId2(chatId, threadId, messageId),
   startTypingLoop: (chatId, threadId) => startTurnTypingLoop(chatId, threadId),
   stopTypingLoop: (chatId, threadId) => stopTurnTypingLoop(chatId, threadId),
   openCard: openHandbackPreTurnCard,
-  finalizeCard: finalizeHandbackPreTurnCard,
+  deleteCard: handbackOrphanRecovery.deleteCard,
+  reinjectHandback: handbackOrphanRecovery.reinjectHandback,
+  escalateOrphan: handbackOrphanRecovery.escalateOrphan,
   writeCardRecord: (record2) => {
     if (!activityCardPersistEnabled)
       return;
@@ -109732,7 +110343,7 @@ function buildModelDeps(restartCtx) {
 function modelMenuReplyMarkup(reply) {
   if (!reply.keyboard)
     return;
-  const kb = new import_grammy16.InlineKeyboard;
+  const kb = new import_grammy17.InlineKeyboard;
   for (const row of reply.keyboard) {
     for (const btn of row)
       kb.text(btn.text, btn.callback_data);
@@ -109872,7 +110483,7 @@ function buildEffortDeps() {
 function effortMenuReplyMarkup(reply) {
   if (!reply.keyboard)
     return;
-  const kb = new import_grammy16.InlineKeyboard;
+  const kb = new import_grammy17.InlineKeyboard;
   for (const row of reply.keyboard) {
     for (const btn of row)
       kb.text(btn.text, btn.callback_data);
@@ -111525,7 +112136,7 @@ _Google accounts are connected from the host CLI._`, { html: true });
       return;
     }
     const appNote = started.source === "default" ? "_Using switchroom's shipped Microsoft app._" : "_Using your configured Microsoft app._";
-    const keyboard = new import_grammy16.InlineKeyboard().url("\uD83D\uDD10 Sign in to Microsoft", started.device.verification_uri).row().text("\u2716 Cancel", `cn:cancel:${key}`);
+    const keyboard = new import_grammy17.InlineKeyboard().url("\uD83D\uDD10 Sign in to Microsoft", started.device.verification_uri).row().text("\u2716 Cancel", `cn:cancel:${key}`);
     const sent = await ctx.replyWithRichMessage(richMessage2(`\uD83D\uDD17 **Connect a Microsoft account**
 
 ` + `1. Tap **Sign in to Microsoft** below.
@@ -111661,7 +112272,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
       tz: process.env.SWITCHROOM_TIMEZONE ?? process.env.TZ
     });
     if (reply.keyboard && reply.keyboard.length > 0) {
-      const kb = new import_grammy16.InlineKeyboard;
+      const kb = new import_grammy17.InlineKeyboard;
       for (let i = 0;i < reply.keyboard.length; i++) {
         const row = reply.keyboard[i];
         for (const b of row) {
@@ -111803,7 +112414,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
       }
       lines.push("");
       const denials = readRecentDenialsForAgent(targetAgent, 604800000, 5);
-      const denialKeyboard = new import_grammy16.InlineKeyboard;
+      const denialKeyboard = new import_grammy17.InlineKeyboard;
       if (denials.length > 0) {
         lines.push("**Recent denials (last 7d):**");
         for (const d of denials) {
@@ -111851,7 +112462,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
         byAgent.set(g.agent_slug, list3);
       }
       const lines = ["**\uD83D\uDCDC Active grants**", ""];
-      const keyboard = new import_grammy16.InlineKeyboard;
+      const keyboard = new import_grammy17.InlineKeyboard;
       for (const [agentName3, agentGrants] of byAgent) {
         lines.push(`**${escapeHtmlForTg2(agentName3)}:**`);
         for (const g of agentGrants) {
@@ -112048,7 +112659,7 @@ Send \`/auth ${parsed.provider} cancel\` to abort.`, { html: true });
           if (ctx.chat?.type !== "private") {
             kbRows = kbRows.filter((row) => !row.some((b) => b.callbackData?.startsWith("auth:use:")));
           }
-          const keyboard = new import_grammy16.InlineKeyboard;
+          const keyboard = new import_grammy17.InlineKeyboard;
           kbRows.forEach((row, ri) => {
             if (ri > 0)
               keyboard.row();
@@ -112400,7 +113011,7 @@ ${preBlock(formatSwitchroomOutput(err.message ?? "unknown error"))}`, { html: tr
           await ctx.answerCallbackQuery({ text: "No always-allow rule for this tool." }).catch(() => {});
           return;
         }
-        keyboard = new import_grammy16.InlineKeyboard().text("\u2190 Back", `perm:back:${request_id}`);
+        keyboard = new import_grammy17.InlineKeyboard().text("\u2190 Back", `perm:back:${request_id}`);
         if (choices.specific)
           keyboard.text(choices.specific.buttonLabel, `perm:asn:${request_id}`);
         keyboard.text(`${choices.broad.buttonLabel} \u26A0\uFE0F`, `perm:asb:${request_id}`);
@@ -112703,7 +113314,7 @@ ${labelWithResume}` : labelWithResume,
       verb: "voice-ondemand.sendVoice",
       ...threadId != null ? { threadId } : {}
     }),
-    sendVoiceByUpload: (chatId, audio, sendOpts, threadId) => robustApiCall(() => bot2.api.sendVoice(chatId, new import_grammy16.InputFile(Buffer.from(audio)), sendOpts), {
+    sendVoiceByUpload: (chatId, audio, sendOpts, threadId) => robustApiCall(() => bot2.api.sendVoice(chatId, new import_grammy17.InputFile(Buffer.from(audio)), sendOpts), {
       chat_id: chatId,
       verb: "voice-ondemand.sendVoice",
       ...threadId != null ? { threadId } : {}
@@ -112969,7 +113580,7 @@ async function initGatewayBot() {
 `);
     process.exit(1);
   }
-  bot = new import_grammy16.Bot(TOKEN);
+  bot = new import_grammy17.Bot(TOKEN);
   installTgPostLogger(bot);
   installRichMarkdownGuard(bot);
   installEditFloodFuse(bot, {
@@ -113941,7 +114552,7 @@ async function startGateway() {
       await runnerHandle.task();
       return;
     } catch (err) {
-      if (err instanceof import_grammy16.GrammyError && err.error_code === 409) {
+      if (err instanceof import_grammy17.GrammyError && err.error_code === 409) {
         const delay = Math.min(1000 * attempt, 15000);
         const agentName3 = process.env.SWITCHROOM_AGENT_NAME ?? "-";
         process.stderr.write(`telegram gateway: poll.409.detected attempt=${attempt} retry_in_ms=${delay} agent=${agentName3}