switchroom 0.19.7 → 0.19.9

package/dist/host-control/main.js

@@ -20614,7 +20614,7 @@ async function waitForConfigRecovery(opts) {
 }
 
 // src/agents/scaffold.ts
-import { join as join5, resolve as resolve5 } from "node:path";
+import { dirname, isAbsolute, join as join5, relative, resolve as resolve5 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -20748,6 +20748,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/vault/vault.ts
 var KNOWN_VAULT_ARTIFACT_NAMES = new Set([
@@ -21239,7 +21240,7 @@ import {
   copyFileSync as copyFileSync2,
   unlinkSync as unlinkSync2
 } from "node:fs";
-import { join as join10, dirname as dirname6, resolve as resolve8 } from "node:path";
+import { join as join10, dirname as dirname7, resolve as resolve8 } from "node:path";
 import { createHash as createHash5, randomUUID as randomUUID2, randomBytes } from "node:crypto";
 
 // src/host-control/protocol.ts
@@ -21488,7 +21489,7 @@ function deniedResponse(request_id, error, duration_ms = 0) {
 import { createHash as createHash2 } from "node:crypto";
 
 // node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname, posix, sep } from "path";
+import { dirname as dirname2, posix, sep } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -21497,7 +21498,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname(process.argv[1]) : process.cwd(), isWindows = sep === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname2(process.argv[1]) : process.cwd(), isWindows = sep === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -25934,7 +25935,7 @@ import {
   readFileSync as readFileSync6,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { dirname as dirname2 } from "node:path";
+import { dirname as dirname3 } from "node:path";
 import { randomUUID } from "node:crypto";
 var DEFAULT_KEY = "phc_qKY87cKWZm6ZyCtk7LcRd2cU8Sg42u7Ywhui5stYCegd";
 var DEFAULT_HOST = "https://us.i.posthog.com";
@@ -25961,7 +25962,7 @@ function getDistinctId() {
   const id = randomUUID();
   cachedDistinctId = id;
   try {
-    mkdirSync3(dirname2(path), { recursive: true });
+    mkdirSync3(dirname3(path), { recursive: true });
     writeFileSync3(path, id, "utf-8");
   } catch {}
   return id;
@@ -26660,10 +26661,10 @@ init_atomic();
 
 // src/cli/resolve-version.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:fs";
-import { dirname as dirname4, join as join7 } from "node:path";
+import { dirname as dirname5, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.19.7";
+var VERSION = "0.19.9";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -26678,7 +26679,7 @@ function readPackageVersion() {
         }
       } catch {}
     }
-    dir = dirname4(dir);
+    dir = dirname5(dir);
   }
   return null;
 }
@@ -26863,7 +26864,7 @@ function parseRolloutResultLine(stdout) {
 var import__2 = __toESM(require_commander(), 1);
 
 // src/cli/update.ts
-import { join as join8, dirname as dirname5, resolve as resolve7 } from "node:path";
+import { join as join8, dirname as dirname6, resolve as resolve7 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 
 // src/agents/lifecycle.ts
@@ -26985,7 +26986,7 @@ function parseUpdateResultLine(stdout) {
 var import_yaml5 = __toESM(require_dist(), 1);
 import { mkdtempSync, writeFileSync as writeFileSync4, rmSync as rmSync2, existsSync as existsSync10, readFileSync as readFileSync8 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join9, isAbsolute as isAbsolute2, normalize, basename as basename2 } from "node:path";
+import { join as join9, isAbsolute as isAbsolute3, normalize, basename as basename2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
 var MAX_PATCH_BYTES = 1024 * 1024;
@@ -26998,12 +26999,12 @@ function isTargetPathHeader(headerPath, targetBasename) {
   let p = headerPath;
   if (p.startsWith("a/") || p.startsWith("b/"))
     p = p.slice(2);
-  if (isAbsolute2(p))
+  if (isAbsolute3(p))
     return false;
   if (p.includes(".."))
     return false;
   const norm = normalize(p);
-  if (norm.includes("..") || isAbsolute2(norm))
+  if (norm.includes("..") || isAbsolute3(norm))
     return false;
   return norm === targetBasename || basename2(norm) === targetBasename;
 }
@@ -29579,7 +29580,7 @@ ${output.recovery.stderr}` : "";
   appendAuditRow(row) {
     const path2 = this.auditLogPath();
     this.auditAppendChain = this.auditAppendChain.then(async () => {
-      await mkdir(dirname6(path2), { recursive: true }).catch(() => {
+      await mkdir(dirname7(path2), { recursive: true }).catch(() => {
         return;
       });
       if (this.auditChainState === undefined) {

package/dist/vault/approvals/kernel-server.js

@@ -18215,7 +18215,7 @@ var require_lib = __commonJS((exports, module) => {
 // src/vault/approvals/kernel-server.ts
 import * as net from "node:net";
 import { mkdirSync as mkdirSync2, chmodSync, chownSync, existsSync as existsSync5, unlinkSync, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
-import { dirname, resolve as resolve6, basename as basename2 } from "node:path";
+import { dirname as dirname2, resolve as resolve6, basename as basename2 } from "node:path";
 import { Database } from "bun:sqlite";
 
 // src/vault/broker/protocol.ts
@@ -19017,7 +19017,7 @@ function getNonce(db, request_id) {
 init_schema();
 
 // src/agents/scaffold.ts
-import { join as join4, resolve as resolve5 } from "node:path";
+import { dirname, isAbsolute, join as join4, relative, resolve as resolve5 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -19132,6 +19132,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/telegram/state.ts
 init_paths();
@@ -19224,7 +19225,7 @@ function checkApprovalAclByAgent(listenerAgent, claimedAgentUnit) {
 var DEFAULT_SOCKET_PARENT = "/run/switchroom/kernel";
 var DEFAULT_DB_PATH = "/state/approvals/kernel.db";
 function openKernelDb(dbPath) {
-  const dir = dirname(dbPath);
+  const dir = dirname2(dbPath);
   mkdirSync2(dir, { recursive: true });
   const db = new Database(dbPath, { create: true });
   try {
@@ -19603,7 +19604,7 @@ async function bootstrap(opts) {
 }
 async function main() {
   const socketEnv = process.env.SWITCHROOM_KERNEL_SOCKET ?? `${DEFAULT_SOCKET_PARENT}/approval-kernel.sock`;
-  const socketParent = dirname(resolve6(socketEnv));
+  const socketParent = dirname2(resolve6(socketEnv));
   const dbPath = process.env.SWITCHROOM_KERNEL_DB_PATH ?? DEFAULT_DB_PATH;
   const configPath = process.env.SWITCHROOM_CONFIG;
   const operatorUidRaw = process.env.SWITCHROOM_KERNEL_OPERATOR_UID;

package/dist/vault/broker/server.js

@@ -18220,7 +18220,7 @@ import { mkdirSync as mkdirSync7, chmodSync as chmodSync5, chownSync, existsSync
 init_schema();
 
 // src/agents/scaffold.ts
-import { join as join4, resolve as resolve6 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join4, relative, resolve as resolve6 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -18840,6 +18840,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/telegram/state.ts
 init_paths();
@@ -19719,7 +19720,7 @@ function migrateLegacyGrantsDbLocation(newDbPath = getGrantsDbPath(), deps) {
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/vault/broker/server.ts
-import { dirname as dirname6, resolve as resolve9, basename as basename4 } from "node:path";
+import { dirname as dirname7, resolve as resolve9, basename as basename4 } from "node:path";
 import * as os3 from "node:os";
 import * as path4 from "node:path";
 
@@ -19740,7 +19741,7 @@ import {
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { basename as basename3, dirname as dirname3, join as join6 } from "node:path";
+import { basename as basename3, dirname as dirname4, join as join6 } from "node:path";
 function vaultLayoutPaths(home2) {
   const switchroomRoot = join6(home2, ".switchroom");
   return {
@@ -19827,7 +19828,7 @@ function sha256File(path2) {
   return createHash2("sha256").update(data).digest("hex");
 }
 function atomicReplaceWithSymlink(target, linkTarget) {
-  const tmp = join6(dirname3(target), `.${basename3(target)}.symlink-tmp`);
+  const tmp = join6(dirname4(target), `.${basename3(target)}.symlink-tmp`);
   if (existsSync8(tmp)) {
     try {
       unlinkSync3(tmp);
@@ -22614,7 +22615,7 @@ class VaultBroker {
       this.passphrase = this.testOpts._testPassphrase;
     }
     process.umask(63);
-    const parentDir = dirname6(this.socketPath);
+    const parentDir = dirname7(this.socketPath);
     mkdirSync7(parentDir, { recursive: true, mode: 448 });
     try {
       chmodSync5(parentDir, 448);
@@ -24159,15 +24160,15 @@ class VaultBroker {
   }
 }
 function detectVaultLayoutDrift(vaultPath) {
-  const dir = dirname6(vaultPath);
+  const dir = dirname7(vaultPath);
   if (basename4(dir) !== "vault")
     return;
   if (basename4(vaultPath) !== "vault.enc")
     return;
-  const switchroomDir = dirname6(dir);
+  const switchroomDir = dirname7(dir);
   if (basename4(switchroomDir) !== ".switchroom")
     return;
-  const home2 = dirname6(switchroomDir);
+  const home2 = dirname7(switchroomDir);
   const result = inspectVaultLayout(home2);
   if (result.kind === "divergent") {
     throw new VaultError(`Vault layout divergence detected at boot: ${result.details.oldPath} and ${result.details.newPath} are both regular files with different content. An older switchroom CLI may have written to the legacy path after migration ran. Run \`switchroom apply\` from the host to surface the recovery recipe (state E refusal with literal \`mv\` commands). See docs/operators/state-e-recovery.md.`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.19.7",
+  "version": "0.19.9",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/default/CLAUDE.md.hbs

@@ -72,11 +72,11 @@ The plugin's auto-retain (Stop hook) fires every turn, but in chunked mode each
 
 ### When to synthesize — concrete triggers
 
-Auto-recall and auto-retain keep the bank fed, but they never *synthesize* — that's on you, and it only happens if you act on these triggers. Each is paired with a deterministic backstop so nothing depends on you remembering:
+Auto-recall and auto-retain feed the bank but never *synthesize* — that's on you, only if you act on these triggers. Each has a backstop:
 
-- **Reflect instead of hand-assembling.** When a question needs an answer *across many past memories* — "what did we decide about X", "summarize where Y stands", "have I seen this before" — call `mcp__hindsight__reflect` rather than firing several `recall`s and stitching the fragments yourself. Rule of thumb: if you're about to make 2+ manual `recall` calls to reconstruct one answer, that's a `reflect`. (Backstop: auto-recall already injects the top hits every turn — reflect is the escalation when those aren't enough, not a replacement.)
-- **Propose a model when you keep re-deriving.** When you notice you've rebuilt the *same standing answer* two or three sessions running — the recurring state of your specialty a user keeps asking around — stop re-deriving and propose a mental model via `mcp__switchroom-telegram__mental_model_propose(name, source_query)` (or run the `mental-model-curator` skill to survey the bank and propose the earned few). One organic proposal beats ten reflexive recalls. Don't propose for a one-off fact — that's a `retain`; don't propose identity/"who is the user" — profile banks own that.
-- **Merge or retire directives when they pile up.** Directives are capped at `MAX_DIRECTIVES=15` active per bank — past that, the lowest-priority ones are silently truncated from the `<active_directives>` recall block and never reach you. When directives start overlapping or reading stale, run the `mental-model-curator` skill's directive merge/retire pass (it proposes; deletes stay operator-approved). (Backstop: `switchroom doctor` WARNs at >12 and FAILs at >15 active directives, so the pile-up surfaces on the issues card even if you don't notice it in-session.)
+- **Reflect instead of hand-assembling.** About to fire 2+ manual `recall`s for one answer ("summarize where Y stands")? Call `mcp__hindsight__reflect` instead. (Backstop: auto-recall injects the top hits every turn — reflect is the escalation.)
+- **Propose a model when you keep re-deriving.** Rebuilt the *same standing answer* across sessions? Propose a mental model via `mcp__switchroom-telegram__mental_model_propose(name, source_query)` (or run the `mental-model-curator` skill). Not for a one-off fact (`retain`) or identity (profile banks own that).
+- **Merge or retire directives when they pile up.** Directives cap at `MAX_DIRECTIVES=15` active per bank — past that the lowest-priority ones drop silently from recall. When they overlap or read stale, run the `mental-model-curator` merge/retire pass (deletes stay operator-approved). (Backstop: `switchroom doctor` WARNs at >12, FAILs at >15.)
 
 ## Sub-Agent Delegation
 

package/skills/telegram-formatting/SKILL.md

@@ -0,0 +1,147 @@
+---
+name: telegram-formatting
+description: >
+  Use when composing a rich or long Telegram reply and you want the full
+  formatting palette with exact syntax — expandable blockquotes, spoilers,
+  highlight, code-fence language hints, GFM tables, nested lists — plus the
+  escaping rules and the framework's send-time chunking/normalizer behaviour.
+  Load it when a message genuinely needs structure, NOT for everyday short
+  replies (plain prose already wins there). Teaches judgment first: which
+  construct helps the reader vs when plain text is better. Do NOT use for
+  deciding whether to reply, or for non-Telegram output.
+---
+
+# Telegram formatting — the full palette
+
+Every outbound Switchroom message renders as raw GFM markdown over Telegram
+Bot API 10.1 rich messages (`telegram-plugin/rich-send.ts` `richMessage(md)` →
+`{ markdown }` → `sendRichMessage` / `editMessageText({ markdown })`). No HTML,
+no `parse_mode`. This skill is the depth reference behind the boot-injected
+floor card: the full construct vocabulary, correct syntax, escaping, and the
+send-time behaviour you can rely on.
+
+## Judgment first — reach for structure only when it helps the reader
+
+The floor card's stance is the law here too: **structure exists for the reader,
+not the writer.** Loading this skill does not mean "use everything below." Match
+the construct to the message.
+
+- **Short answers (a line or two): plain prose, no formatting.** "on it,
+  pulling the logs now" is already perfect. No bold, no bullets, no headings.
+  Most replies live here — don't dress them up.
+- **Default: light structure.** Bold ONLY the one key fact or answer, never
+  more. A list only for 3+ genuinely parallel items the reader will scan or
+  compare; two items or a flowing thought stay prose. `code spans` for
+  identifiers (filenames, commands, config keys, error codes) — tap-to-copy.
+- **Long / multi-section answers may add the rich constructs below** — tables,
+  headings, blockquotes, expandable blocks, fences — but only when they cut the
+  reader's effort. If the structure doesn't reduce scanning effort, drop it. A
+  two-item bullet list is worse than a sentence; a heading on a three-line reply
+  is noise. When in doubt, shorter and plainer wins.
+
+Over-bolded messages (most of the text bold, whole paragraphs/lists bolded) get
+their bold stripped at send time — so bold sparingly and deliberately.
+
+## Full rich vocabulary
+
+### Inline spans
+
+| Effect | Markdown | When / notes |
+| --- | --- | --- |
+| Bold | `**text**` | The one key fact or answer, not decoration. |
+| Italic | `*text*` or `_text_` | Light emphasis, labels, asides. |
+| Strikethrough | `~~text~~` | Retractions, "was X now Y". |
+| Spoiler | `\|\|text\|\|` | Only for an opt-in surprise or a reveal the reader chose to wait for (a punchline they want suspended) — NEVER to hide an answer someone is asking for or anxious about; when in doubt, show it plainly. Surfaces as a `spoiler` entity on the wire (live-verified 2026-07). |
+| Highlight / marked | `==text==` | Surfaces as a `marked` entity on the wire (live-verified 2026-07). `=` is an `escapeMarkdown` special, so dynamic text won't trigger it by accident. |
+| Inline code | `` `text` `` | Identifiers, tap-to-copy. Content is literal — no escaping inside. |
+| Link | `[label](https://…)` | Standard GFM link. |
+
+**Do NOT rely on these — they don't render as intended:**
+
+- **Underline** — there is NO underline token on this path. `__text__` renders
+  as **bold** (Telegram's rich-message markdown parser reads a `__…__` run
+  identically to `**…**`, live-verified against the Bot API 2026-07). Use `**`
+  for bold and don't reach for underline.
+- **Subscript** `~text~` (single tilde) and **superscript** `^text^` fall back
+  to literal text in rich messages — avoid (write "squared", not `x^2^`).
+- **Custom emoji** (premium custom-emoji entity) renders as a normal emoji for
+  non-premium viewers — don't rely on it to carry meaning.
+
+(Inline math `$…$`, HTML `<details>`/collapsible, and footnotes `[^1]` are NOT
+supported on this path — do not emit them; they degrade to literal or neutralised
+text.)
+
+### Block types
+
+- **Code fence** — ` ```lang ` … ` ``` `. Multi-line literal output (diffs,
+  logs, JSON, command blocks). The language hint (`diff`, `json`, `bash`, …)
+  sharpens syntax rendering — use it. Content inside is verbatim, never escape
+  it; the only hazard is an embedded ` ``` ` closing the block early, which the
+  framework defuses (`preBlock` in `shared/bot-runtime.ts`).
+- **Preformatted block** — a code fence with NO language, for fixed-width
+  non-code (ASCII tables, aligned columns).
+- **Bulleted list** — `- item` (also `*` / `+`). 3+ parallel items only.
+- **Numbered list** — `1. item`. Ordered steps or ranked items.
+- **Nested lists** — indent sub-items; tight (no blank lines) vs loose (blank
+  lines between items) both render. 3-level nesting is live-verified.
+- **Task list** — `- [ ] todo` / `- [x] done`.
+- **Table** — GFM pipe table (`| col | col |` + `| --- | --- |` separator),
+  optional per-column alignment (`:---`, `:---:`, `---:`). 2-D data ONLY (rows ×
+  columns) — not a substitute for prose. Chunk-safe: `splitMarkdownChunks` never
+  bisects a row.
+- **Blockquote** — `> quoted`. Quoted text or an indented continuation; the
+  right way to indent, because Telegram drops leading whitespace.
+- **Expandable blockquote** — `**> …` (Bot API 10.1). A long quote/aside the
+  reader can collapse and expand. The flagship rich construct — use it for a
+  long quotation, a stack trace, or a detailed aside you don't want dominating
+  the message. First line carries the `**> ` marker; continuation lines use `> `.
+- **Section heading** — `#` … `######`. Only in a genuinely long, multi-section
+  answer. Never on a short reply.
+- **Divider** — `---` (thematic break). Heavy horizontal rule between genuinely
+  separate sections. Use sparingly.
+- **Collage / album** — multiple images grouped in one message (media group).
+  Send via the attachment path, not markdown.
+
+## Escaping rules
+
+Dynamic content (filenames, ids, arbitrary user text) interpolated into a
+hand-built markdown card MUST be escaped so it renders LITERALLY instead of
+being parsed as formatting. Use `escapeMarkdown(value)` from
+`telegram-plugin/format.ts`.
+
+`escapeMarkdown` escapes exactly the characters that trigger INLINE formatting:
+backslash, `` ` ``, `*`, `_`, `~`, `=`, `[`, `]`, `|` — the set `` \`*_~=[]| ``.
+The backslash is escaped first so it never double-escapes a following special.
+It deliberately does **not** escape `.` `-` `+` `#` `(` `)` `{` `}` `!` `>`:
+those are only meaningful at line-start or in link/structure context, and
+escaping them mid-word would litter filenames (`foo.ts`), versions (`v1.2-rc`),
+and URLs with visible backslashes.
+
+- **Bold/italic a dynamic value:** `` `**${escapeMarkdown(value)}**` ``.
+- **Code-span a dynamic value:** `` `\`${value}\`` `` — code spans need NO
+  escaping (backtick content is already literal). This is the preferred, safest
+  way to render any identifier.
+
+## Send-time behaviour you can rely on
+
+- **Chunking.** Hard cap is `RICH_MESSAGE_MAX_CHARS = 32768` (32768 accepted,
+  32769 rejected — the single constant, never re-derive it). A longer body is
+  split by `splitMarkdownChunks(text, 32768)` in `format.ts`: it cuts at the
+  largest safe boundary (blank line → newline → space), **never bisects a fenced
+  code block** (`backOffOpenFence`) and **never bisects a table row**
+  (`backOffTableRow`). A single indivisible region larger than the cap is
+  emitted whole and re-split / hard-sliced at send time rather than hanging.
+  Long before 32768, ask whether a wall of text is the right answer at all.
+- **Typography normalizer (deterministic, every message).** Block spacing (one
+  blank line between distinct blocks), em/en dashes, and `•` bullet markers are
+  rewritten at send time. A LONE `\n` between two prose paragraphs is promoted
+  to a real visual break; runs of 3+ newlines collapse to `\n\n`; lists, tables,
+  code, and existing `\n\n` gaps are left exactly as written. Don't hand-tune
+  spacing or fight the normalizer — write the content, the gateway makes the
+  typography consistent.
+
+## The one rule that outranks everything here
+
+You loaded this skill to format a rich message well — but the best formatting is
+still the least that serves the reader. Use the palette to make a genuinely
+complex answer scannable, never to decorate a simple one.

package/telegram-plugin/dist/gateway/gateway.js

@@ -35216,7 +35216,7 @@ function renderAuthLine(state7, agentName3, now = Date.now()) {
 
 // gateway/quota-cache.ts
 import { existsSync as existsSync41, readFileSync as readFileSync42, writeFileSync as writeFileSync35, mkdirSync as mkdirSync36 } from "fs";
-import { join as join46, dirname as dirname14 } from "path";
+import { join as join46, dirname as dirname15 } from "path";
 function defaultCachePath() {
   return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join46(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
 }
@@ -35253,7 +35253,7 @@ function writeQuotaCache(result, opts = {}) {
     result
   };
   try {
-    mkdirSync36(dirname14(path2), { recursive: true });
+    mkdirSync36(dirname15(path2), { recursive: true });
     writeFileSync35(path2, JSON.stringify(entry, null, 2), { mode: 384 });
   } catch {}
 }
@@ -36070,7 +36070,7 @@ var init_boot_probes = __esm(() => {
 
 // gateway/boot-issue-cache.ts
 import { existsSync as existsSync43, readFileSync as readFileSync44, writeFileSync as writeFileSync36, mkdirSync as mkdirSync37, renameSync as renameSync17 } from "fs";
-import { dirname as dirname15 } from "path";
+import { dirname as dirname16 } from "path";
 function fingerprintProbe(key, r) {
   if (r.status === "ok")
     return `${key}:ok`;
@@ -36196,7 +36196,7 @@ function applyAndSave(path2, cache, diff) {
     }
   }
   try {
-    mkdirSync37(dirname15(path2), { recursive: true });
+    mkdirSync37(dirname16(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
     writeFileSync36(tmp, JSON.stringify(next), { mode: 384 });
     renameSync17(tmp, path2);
@@ -36213,7 +36213,7 @@ var init_boot_issue_cache = __esm(() => {
 // gateway/config-snapshot.ts
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync44, readFileSync as readFileSync45, writeFileSync as writeFileSync37, mkdirSync as mkdirSync38, renameSync as renameSync18 } from "fs";
-import { dirname as dirname16 } from "path";
+import { dirname as dirname17 } from "path";
 function hashStringArray(items) {
   if (!items || items.length === 0)
     return null;
@@ -36311,7 +36311,7 @@ function loadSnapshot(path2, now = Date.now) {
 }
 function persistSnapshot(path2, snapshot) {
   try {
-    mkdirSync38(dirname16(path2), { recursive: true });
+    mkdirSync38(dirname17(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
     writeFileSync37(tmp, JSON.stringify(snapshot), { mode: 384 });
     renameSync18(tmp, path2);
@@ -41612,6 +41612,7 @@ function shouldEmitShadowTrace(eventKind, effectCount, globalKind, verbose = gwT
 }
 
 // shared/bot-runtime.ts
+init_rich_send();
 var tgPostTagStore = new AsyncLocalStorage;
 function escapeHtmlForTg(text) {
   return text.replace(/([\\`*_~=\[\]|])/g, "\\$1");
@@ -62511,6 +62512,7 @@ import { createHash as createHash2 } from "crypto";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 init_flood_circuit_breaker();
 init_format();
+init_rich_send();
 var tgPostTagStore2 = new AsyncLocalStorage2;
 function _getTgPostTags() {
   return tgPostTagStore2.getStore();
@@ -62555,6 +62557,21 @@ function installTgPostLogger(bot) {
     }
   });
 }
+function installRichMarkdownGuard(bot) {
+  bot.api.config.use(async (prev, method, payload, signal) => {
+    if ((method === "sendRichMessage" || method === "editMessageText") && payload != null) {
+      const p = payload;
+      const rich = p.rich_message;
+      if (rich != null && typeof rich.markdown === "string") {
+        const guarded = guardAccidentalFormatting(rich.markdown);
+        if (guarded !== rich.markdown) {
+          p.rich_message = { ...rich, markdown: guarded };
+        }
+      }
+    }
+    return prev(method, payload, signal);
+  });
+}
 
 // flood-circuit-breaker.ts
 import {
@@ -80984,7 +81001,7 @@ async function discoverModels(agentName3, opts = {}) {
 }
 
 // ../src/agents/scaffold.ts
-import { join as join38, resolve as resolve8 } from "node:path";
+import { dirname as dirname14, isAbsolute, join as join38, relative, resolve as resolve8 } from "node:path";
 init_atomic();
 
 // ../src/agents/agent-uid.ts
@@ -81088,6 +81105,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // ../src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // ../src/telegram/state.ts
 init_paths();
@@ -93551,10 +93569,10 @@ function startGatewayHeartbeat(stateDir, intervalMs = GATEWAY_HEARTBEAT_INTERVAL
 }
 
 // ../src/build-info.ts
-var VERSION = "0.19.7";
-var COMMIT_SHA = "2ddec4ae";
-var COMMIT_DATE = "2026-07-20T19:59:43Z";
-var LATEST_PR = 3478;
+var VERSION = "0.19.9";
+var COMMIT_SHA = "9d791e63";
+var COMMIT_DATE = "2026-07-21T06:12:01Z";
+var LATEST_PR = 3492;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -106426,6 +106444,7 @@ async function initGatewayBot() {
   }
   bot = new import_grammy15.Bot(TOKEN);
   installTgPostLogger(bot);
+  installRichMarkdownGuard(bot);
   installUpdateTap(bot, (line) => process.stderr.write(line));
   bot.api.config.use(async (prev, method, payload, signal) => {
     try {

package/telegram-plugin/gateway/gateway.ts

@@ -295,7 +295,7 @@ import {
 } from '../retry-api-call.js'
 import { createSendGate, sendGateConfigFromEnv, isSendGateShed } from '../send-gate.js'
 import { createStatsLogger, createFloodWindowObserver } from '../send-gate-observability.js'
-import { installTgPostLogger, withTgPostTags } from '../shared/bot-runtime.js'
+import { installTgPostLogger, installRichMarkdownGuard, withTgPostTags } from '../shared/bot-runtime.js'
 import {
   floodStatePath,
   floodWindowsPath,
@@ -22970,7 +22970,7 @@ async function initGatewayBot(): Promise<void> {
   }
 
   bot = new Bot(TOKEN)
-  installTgPostLogger(bot)
+  installTgPostLogger(bot); installRichMarkdownGuard(bot) // #3252/#3463: universal fmt guard installed after logger (composes outermost); see installRichMarkdownGuard docblock
 
   // Diagnostic update tap (#3300): one compact line per received update, logged
   // BEFORE any specific handler runs, so a routing-layer drop is diagnosable

package/telegram-plugin/render/ir.ts

@@ -1,38 +1,44 @@
-// Typed intermediate representation (IR) for the Telegram HTML render engine.
+// Typed intermediate representation (IR) for the Telegram rich-markdown render
+// engine. (Historical note: this file and render.ts were named for an "HTML
+// render engine" during Increment 1, before the Bot API 10.1 migration (#2669)
+// made GFM `{ markdown }` the live send path. There is NO HTML anywhere on the
+// outbound path today — the renderer in render.ts emits raw GFM markdown for
+// the `markdown` field of `InputRichMessageMarkdown`.)
 //
 // This is the parser <-> renderer contract. `parse()` (parse.ts) folds an
-// mdast tree into this shape; a later increment's renderer walks it and emits
-// Telegram Bot API HTML. Increment 1 lands ONLY the parser + this IR — there
-// is no renderer yet.
+// mdast tree into this shape; `render.ts` walks it and emits Telegram
+// rich-message GFM markdown.
 //
 // Every node carries `{ start, end }` UTF-16 source offsets copied verbatim
 // from mdast `position.start.offset` / `position.end.offset`. They are UTF-16
 // code-unit indices into the original markdown string, so
 // `source.slice(node.start, node.end)` round-trips to the node's source text.
 //
-// Telegram HTML tag mapping (for the next increment — NOT implemented here):
+// IR node -> emitted GFM markdown (see render.ts `renderInline`/block render):
 //
 //   Inline
-//     plain     -> (raw text, HTML-escaped)
-//     bold      -> <b>…</b>                 (markdown `**…**`)
-//     italic    -> <i>…</i>                 (markdown `*…*`)
-//     underline -> <u>…</u>                 (markdown `__…__`, Bot API 10.1)
-//     strike    -> <s>…</s>                 (markdown `~~…~~`)
-//     spoiler   -> <tg-spoiler>…</tg-spoiler> (markdown `||…||`)
-//     highlight -> <mark>…</mark>           (markdown `==…==`, Bot API 10.1)
-//     code      -> <code>…</code>
-//     link      -> <a href="…">…</a>
+//     plain     -> raw text (escapeMarkdown'd)
+//     bold      -> `**…**`
+//     italic    -> `*…*`
+//     underline -> `__…__`  — NOTE: the wire renders `__…__` as BOLD, not
+//                  underline. Telegram's rich-message markdown has no underline
+//                  token (live-verified, see reference/telegram-formatting-guide.md).
+//                  The node preserves the author's `__` bytes faithfully; it is
+//                  a distinct IR node but NOT a distinct wire style.
+//     strike    -> `~~…~~`
+//     spoiler   -> `||…||`
+//     highlight -> `==…==`  (Bot API 10.1 marked entity)
+//     code      -> `` `…` ``
+//     link      -> `[…](…)`
 //
 //   Block
 //     paragraph      -> children joined; blocks separated by "\n\n"
-//     heading        -> <b>…</b> (Telegram HTML has no <h1>…<h6>; bold + newlines)
-//     blockquote     -> <blockquote>…</blockquote>
-//                       (expandable === true -> <blockquote expandable>)
-//     code-block     -> <pre><code class="language-…">…</code></pre>
-//     list           -> rendered line-per-item with "•"/"1." bullets
-//                       (Telegram HTML has no <ul>/<ol>)
-//     thematic-break -> a horizontal-rule text line (e.g. "───")
-//     table          -> monospaced <pre> table (Telegram HTML has no <table>)
+//     heading        -> `#`…`######` line
+//     blockquote     -> `> …` (expandable === true -> `**> …` expandable blockquote)
+//     code-block     -> ```` ```lang … ``` ````
+//     list           -> line-per-item with `-`/`1.` markers
+//     thematic-break -> `---` thematic break
+//     table          -> GFM pipe table
 
 export interface Pos {
   /** UTF-16 code-unit offset of the node's first char (mdast position.start.offset). */
@@ -60,10 +66,12 @@ export interface ItalicNode extends Pos {
   children: Inline[];
 }
 
-/** Telegram underline (<u>…</u>). In Bot API 10.1 rich markdown the `__…__`
- *  double-underscore run is UNDERLINE — distinct from `**…**` bold, even though
- *  GFM/micromark folds both into a single `strong` mdast node. `parse.ts`
- *  disambiguates the two by looking at the run's source delimiter. */
+/** A `__…__` double-underscore run. `parse.ts` keeps it as a distinct node
+ *  (separate from `**…**` bold) by looking at the source delimiter, even though
+ *  GFM/micromark folds both into a single `strong` mdast node. NOTE: on the
+ *  Telegram wire this renders as BOLD, not a distinct underline style — Bot API
+ *  10.1 rich markdown has no underline entity here, so the round-trip is faithful
+ *  but the delivered text is bold. Kept distinct only to preserve authoring intent. */
 export interface UnderlineNode extends Pos {
   type: "underline";
   children: Inline[];