switchroom 0.19.8 → 0.19.10

package/dist/host-control/main.js

@@ -20614,7 +20614,7 @@ async function waitForConfigRecovery(opts) {
 }
 
 // src/agents/scaffold.ts
-import { join as join5, resolve as resolve5 } from "node:path";
+import { dirname, isAbsolute, join as join5, relative, resolve as resolve5 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -20748,6 +20748,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/vault/vault.ts
 var KNOWN_VAULT_ARTIFACT_NAMES = new Set([
@@ -21239,7 +21240,7 @@ import {
   copyFileSync as copyFileSync2,
   unlinkSync as unlinkSync2
 } from "node:fs";
-import { join as join10, dirname as dirname6, resolve as resolve8 } from "node:path";
+import { join as join10, dirname as dirname7, resolve as resolve8 } from "node:path";
 import { createHash as createHash5, randomUUID as randomUUID2, randomBytes } from "node:crypto";
 
 // src/host-control/protocol.ts
@@ -21488,7 +21489,7 @@ function deniedResponse(request_id, error, duration_ms = 0) {
 import { createHash as createHash2 } from "node:crypto";
 
 // node_modules/.bun/posthog-node@5.29.2/node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname, posix, sep } from "path";
+import { dirname as dirname2, posix, sep } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -21497,7 +21498,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname(process.argv[1]) : process.cwd(), isWindows = sep === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname2(process.argv[1]) : process.cwd(), isWindows = sep === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -25934,7 +25935,7 @@ import {
   readFileSync as readFileSync6,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { dirname as dirname2 } from "node:path";
+import { dirname as dirname3 } from "node:path";
 import { randomUUID } from "node:crypto";
 var DEFAULT_KEY = "phc_qKY87cKWZm6ZyCtk7LcRd2cU8Sg42u7Ywhui5stYCegd";
 var DEFAULT_HOST = "https://us.i.posthog.com";
@@ -25961,7 +25962,7 @@ function getDistinctId() {
   const id = randomUUID();
   cachedDistinctId = id;
   try {
-    mkdirSync3(dirname2(path), { recursive: true });
+    mkdirSync3(dirname3(path), { recursive: true });
     writeFileSync3(path, id, "utf-8");
   } catch {}
   return id;
@@ -26660,10 +26661,10 @@ init_atomic();
 
 // src/cli/resolve-version.ts
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:fs";
-import { dirname as dirname4, join as join7 } from "node:path";
+import { dirname as dirname5, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.19.8";
+var VERSION = "0.19.10";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -26678,7 +26679,7 @@ function readPackageVersion() {
         }
       } catch {}
     }
-    dir = dirname4(dir);
+    dir = dirname5(dir);
   }
   return null;
 }
@@ -26863,7 +26864,7 @@ function parseRolloutResultLine(stdout) {
 var import__2 = __toESM(require_commander(), 1);
 
 // src/cli/update.ts
-import { join as join8, dirname as dirname5, resolve as resolve7 } from "node:path";
+import { join as join8, dirname as dirname6, resolve as resolve7 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 
 // src/agents/lifecycle.ts
@@ -26985,7 +26986,7 @@ function parseUpdateResultLine(stdout) {
 var import_yaml5 = __toESM(require_dist(), 1);
 import { mkdtempSync, writeFileSync as writeFileSync4, rmSync as rmSync2, existsSync as existsSync10, readFileSync as readFileSync8 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join9, isAbsolute as isAbsolute2, normalize, basename as basename2 } from "node:path";
+import { join as join9, isAbsolute as isAbsolute3, normalize, basename as basename2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
 var MAX_PATCH_BYTES = 1024 * 1024;
@@ -26998,12 +26999,12 @@ function isTargetPathHeader(headerPath, targetBasename) {
   let p = headerPath;
   if (p.startsWith("a/") || p.startsWith("b/"))
     p = p.slice(2);
-  if (isAbsolute2(p))
+  if (isAbsolute3(p))
     return false;
   if (p.includes(".."))
     return false;
   const norm = normalize(p);
-  if (norm.includes("..") || isAbsolute2(norm))
+  if (norm.includes("..") || isAbsolute3(norm))
     return false;
   return norm === targetBasename || basename2(norm) === targetBasename;
 }
@@ -28448,7 +28449,8 @@ class HostdServer {
     return [
       join10(root, "profiles"),
       join10(root, "profiles", "default"),
-      join10(root, "vendor", "hindsight-memory")
+      join10(root, "vendor", "hindsight-memory"),
+      join10(root, "skills")
     ].filter((p) => !existsSync11(p));
   }
   applyAssetPreflight(request_id, started) {
@@ -29579,7 +29581,7 @@ ${output.recovery.stderr}` : "";
   appendAuditRow(row) {
     const path2 = this.auditLogPath();
     this.auditAppendChain = this.auditAppendChain.then(async () => {
-      await mkdir(dirname6(path2), { recursive: true }).catch(() => {
+      await mkdir(dirname7(path2), { recursive: true }).catch(() => {
         return;
       });
       if (this.auditChainState === undefined) {

package/dist/vault/approvals/kernel-server.js

@@ -18215,7 +18215,7 @@ var require_lib = __commonJS((exports, module) => {
 // src/vault/approvals/kernel-server.ts
 import * as net from "node:net";
 import { mkdirSync as mkdirSync2, chmodSync, chownSync, existsSync as existsSync5, unlinkSync, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
-import { dirname, resolve as resolve6, basename as basename2 } from "node:path";
+import { dirname as dirname2, resolve as resolve6, basename as basename2 } from "node:path";
 import { Database } from "bun:sqlite";
 
 // src/vault/broker/protocol.ts
@@ -19017,7 +19017,7 @@ function getNonce(db, request_id) {
 init_schema();
 
 // src/agents/scaffold.ts
-import { join as join4, resolve as resolve5 } from "node:path";
+import { dirname, isAbsolute, join as join4, relative, resolve as resolve5 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -19132,6 +19132,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/telegram/state.ts
 init_paths();
@@ -19224,7 +19225,7 @@ function checkApprovalAclByAgent(listenerAgent, claimedAgentUnit) {
 var DEFAULT_SOCKET_PARENT = "/run/switchroom/kernel";
 var DEFAULT_DB_PATH = "/state/approvals/kernel.db";
 function openKernelDb(dbPath) {
-  const dir = dirname(dbPath);
+  const dir = dirname2(dbPath);
   mkdirSync2(dir, { recursive: true });
   const db = new Database(dbPath, { create: true });
   try {
@@ -19603,7 +19604,7 @@ async function bootstrap(opts) {
 }
 async function main() {
   const socketEnv = process.env.SWITCHROOM_KERNEL_SOCKET ?? `${DEFAULT_SOCKET_PARENT}/approval-kernel.sock`;
-  const socketParent = dirname(resolve6(socketEnv));
+  const socketParent = dirname2(resolve6(socketEnv));
   const dbPath = process.env.SWITCHROOM_KERNEL_DB_PATH ?? DEFAULT_DB_PATH;
   const configPath = process.env.SWITCHROOM_CONFIG;
   const operatorUidRaw = process.env.SWITCHROOM_KERNEL_OPERATOR_UID;

package/dist/vault/broker/server.js

@@ -18220,7 +18220,7 @@ import { mkdirSync as mkdirSync7, chmodSync as chmodSync5, chownSync, existsSync
 init_schema();
 
 // src/agents/scaffold.ts
-import { join as join4, resolve as resolve6 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join4, relative, resolve as resolve6 } from "node:path";
 init_atomic();
 
 // src/agents/agent-uid.ts
@@ -18840,6 +18840,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // src/telegram/state.ts
 init_paths();
@@ -19719,7 +19720,7 @@ function migrateLegacyGrantsDbLocation(newDbPath = getGrantsDbPath(), deps) {
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/vault/broker/server.ts
-import { dirname as dirname6, resolve as resolve9, basename as basename4 } from "node:path";
+import { dirname as dirname7, resolve as resolve9, basename as basename4 } from "node:path";
 import * as os3 from "node:os";
 import * as path4 from "node:path";
 
@@ -19740,7 +19741,7 @@ import {
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { createHash as createHash2 } from "node:crypto";
-import { basename as basename3, dirname as dirname3, join as join6 } from "node:path";
+import { basename as basename3, dirname as dirname4, join as join6 } from "node:path";
 function vaultLayoutPaths(home2) {
   const switchroomRoot = join6(home2, ".switchroom");
   return {
@@ -19827,7 +19828,7 @@ function sha256File(path2) {
   return createHash2("sha256").update(data).digest("hex");
 }
 function atomicReplaceWithSymlink(target, linkTarget) {
-  const tmp = join6(dirname3(target), `.${basename3(target)}.symlink-tmp`);
+  const tmp = join6(dirname4(target), `.${basename3(target)}.symlink-tmp`);
   if (existsSync8(tmp)) {
     try {
       unlinkSync3(tmp);
@@ -22614,7 +22615,7 @@ class VaultBroker {
       this.passphrase = this.testOpts._testPassphrase;
     }
     process.umask(63);
-    const parentDir = dirname6(this.socketPath);
+    const parentDir = dirname7(this.socketPath);
     mkdirSync7(parentDir, { recursive: true, mode: 448 });
     try {
       chmodSync5(parentDir, 448);
@@ -24159,15 +24160,15 @@ class VaultBroker {
   }
 }
 function detectVaultLayoutDrift(vaultPath) {
-  const dir = dirname6(vaultPath);
+  const dir = dirname7(vaultPath);
   if (basename4(dir) !== "vault")
     return;
   if (basename4(vaultPath) !== "vault.enc")
     return;
-  const switchroomDir = dirname6(dir);
+  const switchroomDir = dirname7(dir);
   if (basename4(switchroomDir) !== ".switchroom")
     return;
-  const home2 = dirname6(switchroomDir);
+  const home2 = dirname7(switchroomDir);
   const result = inspectVaultLayout(home2);
   if (result.kind === "divergent") {
     throw new VaultError(`Vault layout divergence detected at boot: ${result.details.oldPath} and ${result.details.newPath} are both regular files with different content. An older switchroom CLI may have written to the legacy path after migration ran. Run \`switchroom apply\` from the host to surface the recovery recipe (state E refusal with literal \`mv\` commands). See docs/operators/state-e-recovery.md.`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.19.8",
+  "version": "0.19.10",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -8755,9 +8755,51 @@ var init_inline_pairs_guard = __esm(() => {
   SPOILER_OP = /(?<=\w)\|\|(?=\w)/g;
 });
 
+// render/unsupported-token-guard.ts
+function toExpandableBlockquote(title, body) {
+  const lines = [];
+  const t = title.trim();
+  if (t)
+    lines.push(t);
+  for (const raw of body.split(`
+`)) {
+    const line = raw.trimEnd();
+    if (line.trim() === "" && lines.length === 0)
+      continue;
+    lines.push(line);
+  }
+  while (lines.length > 0 && lines[lines.length - 1].trim() === "")
+    lines.pop();
+  if (lines.length === 0)
+    return "";
+  return lines.map((line, i) => i === 0 ? `**> ${line}` : `> ${line}`).join(`
+`);
+}
+function repairProse(text) {
+  let out = text;
+  out = out.replace(DETAILS_BLOCK, (_m, summary, body) => toExpandableBlockquote(summary ?? "", body ?? ""));
+  out = out.replace(ORPHAN_TAGS, "");
+  out = out.replace(CARET_PAIR, (_m, inner) => inner);
+  out = out.replace(FOOTNOTE_MARKER, "");
+  return out;
+}
+function guardUnsupportedTokens(text) {
+  if (!/[\^]|<details|<\/details|<summary/i.test(text))
+    return text;
+  return splitProtectedSegments(text).map((seg) => seg.code ? seg.text : repairProse(seg.text)).join("");
+}
+var CARET_PAIR, FOOTNOTE_MARKER, DETAILS_BLOCK, ORPHAN_TAGS;
+var init_unsupported_token_guard = __esm(() => {
+  CARET_PAIR = /\^([A-Za-z0-9]+)\^/g;
+  FOOTNOTE_MARKER = /\[\^\d+\](?!:)/g;
+  DETAILS_BLOCK = /<details[^>]*>\s*(?:<summary[^>]*>([\s\S]*?)<\/summary>)?([\s\S]*?)<\/details>/gi;
+  ORPHAN_TAGS = /<\/?(?:details|summary)[^>]*>/gi;
+});
+
 // rich-send.ts
 function guardAccidentalFormatting(markdown) {
   let out = markdown;
+  out = guardUnsupportedTokens(out);
   out = guardAccidentalEmphasis(out);
   out = guardAccidentalHeading(out);
   out = guardAccidentalBlockConstructs(out);
@@ -8788,6 +8830,7 @@ var init_rich_send = __esm(() => {
   init_emphasis_guard();
   init_line_start_guard();
   init_inline_pairs_guard();
+  init_unsupported_token_guard();
   import_grammy = __toESM(require_mod2(), 1);
 });
 
@@ -35216,7 +35259,7 @@ function renderAuthLine(state7, agentName3, now = Date.now()) {
 
 // gateway/quota-cache.ts
 import { existsSync as existsSync41, readFileSync as readFileSync42, writeFileSync as writeFileSync35, mkdirSync as mkdirSync36 } from "fs";
-import { join as join46, dirname as dirname14 } from "path";
+import { join as join46, dirname as dirname15 } from "path";
 function defaultCachePath() {
   return process.env.SWITCHROOM_QUOTA_CACHE_PATH ?? join46(process.env.HOME ?? "/tmp", ".switchroom", "quota-cache.json");
 }
@@ -35253,7 +35296,7 @@ function writeQuotaCache(result, opts = {}) {
     result
   };
   try {
-    mkdirSync36(dirname14(path2), { recursive: true });
+    mkdirSync36(dirname15(path2), { recursive: true });
     writeFileSync35(path2, JSON.stringify(entry, null, 2), { mode: 384 });
   } catch {}
 }
@@ -36070,7 +36113,7 @@ var init_boot_probes = __esm(() => {
 
 // gateway/boot-issue-cache.ts
 import { existsSync as existsSync43, readFileSync as readFileSync44, writeFileSync as writeFileSync36, mkdirSync as mkdirSync37, renameSync as renameSync17 } from "fs";
-import { dirname as dirname15 } from "path";
+import { dirname as dirname16 } from "path";
 function fingerprintProbe(key, r) {
   if (r.status === "ok")
     return `${key}:ok`;
@@ -36196,7 +36239,7 @@ function applyAndSave(path2, cache, diff) {
     }
   }
   try {
-    mkdirSync37(dirname15(path2), { recursive: true });
+    mkdirSync37(dirname16(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
     writeFileSync36(tmp, JSON.stringify(next), { mode: 384 });
     renameSync17(tmp, path2);
@@ -36213,7 +36256,7 @@ var init_boot_issue_cache = __esm(() => {
 // gateway/config-snapshot.ts
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync44, readFileSync as readFileSync45, writeFileSync as writeFileSync37, mkdirSync as mkdirSync38, renameSync as renameSync18 } from "fs";
-import { dirname as dirname16 } from "path";
+import { dirname as dirname17 } from "path";
 function hashStringArray(items) {
   if (!items || items.length === 0)
     return null;
@@ -36311,7 +36354,7 @@ function loadSnapshot(path2, now = Date.now) {
 }
 function persistSnapshot(path2, snapshot) {
   try {
-    mkdirSync38(dirname16(path2), { recursive: true });
+    mkdirSync38(dirname17(path2), { recursive: true });
     const tmp = `${path2}.tmp`;
     writeFileSync37(tmp, JSON.stringify(snapshot), { mode: 384 });
     renameSync18(tmp, path2);
@@ -73578,9 +73621,11 @@ init_dollar_math_guard();
 init_emphasis_guard();
 init_line_start_guard();
 init_inline_pairs_guard();
+init_unsupported_token_guard();
 var import_grammy9 = __toESM(require_mod2(), 1);
 function guardAccidentalFormatting2(markdown) {
   let out = markdown;
+  out = guardUnsupportedTokens(out);
   out = guardAccidentalEmphasis(out);
   out = guardAccidentalHeading(out);
   out = guardAccidentalBlockConstructs(out);
@@ -81001,7 +81046,7 @@ async function discoverModels(agentName3, opts = {}) {
 }
 
 // ../src/agents/scaffold.ts
-import { join as join38, resolve as resolve8 } from "node:path";
+import { dirname as dirname14, isAbsolute, join as join38, relative, resolve as resolve8 } from "node:path";
 init_atomic();
 
 // ../src/agents/agent-uid.ts
@@ -81105,6 +81150,7 @@ var PROFILE_MEMORY_DEFAULTS = {
 };
 // ../src/agents/reconcile-default-skills.ts
 var warnedMissingPool = new Set;
+var warnedMissingDefault = new Set;
 
 // ../src/telegram/state.ts
 init_paths();
@@ -93568,10 +93614,10 @@ function startGatewayHeartbeat(stateDir, intervalMs = GATEWAY_HEARTBEAT_INTERVAL
 }
 
 // ../src/build-info.ts
-var VERSION = "0.19.8";
-var COMMIT_SHA = "c356d3ba";
-var COMMIT_DATE = "2026-07-20T23:16:37Z";
-var LATEST_PR = 3483;
+var VERSION = "0.19.10";
+var COMMIT_SHA = "d88584dd";
+var COMMIT_DATE = "2026-07-21T11:39:08Z";
+var LATEST_PR = 3495;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts

package/telegram-plugin/render/unsupported-token-guard.ts

@@ -0,0 +1,121 @@
+// Outbound repair of markdown tokens Telegram's rich GFM parser (Bot API 10.1)
+// CANNOT render, so the reader would otherwise see literal noise glyphs.
+//
+// ── Root cause ───────────────────────────────────────────────────────────
+// Assistant replies are composed by a model that habitually emits constructs
+// from OTHER surfaces (GitHub / Obsidian / LaTeX): caret highlight/superscript
+// `^…^`, footnote markers `[^1]`, and HTML `<details><summary>` collapsibles.
+// None of these are part of Telegram's rich markdown; they degrade to literal
+// carets, stray `[^1]`, and raw `<details>` tags on the reader's screen — the
+// worst kind of consistency failure (a broken glyph in chat). The resident
+// floor card tells the model not to emit them, but prompt discipline is not a
+// guarantee. This guard makes the repair deterministic at send time.
+//
+// ── What it repairs (deterministic, pure string transform) ─────────────────
+//   • `<details><summary>Title</summary>body</details>` → a Telegram EXPANDABLE
+//     blockquote (`**> Title` first line + `> …` continuation) — the native
+//     equivalent of a collapsible. `<details>` without a `<summary>` folds the
+//     whole body into an expandable blockquote. Any orphan `<details>` /
+//     `</details>` / `<summary>` tags left over are stripped.
+//   • `^highlight^` / `x^2^` caret pairs → the inner text, carets removed
+//     (Telegram has no highlight/superscript; the carets render literally).
+//   • Footnote reference markers `[^id]` → removed (Telegram has no footnotes).
+//     A footnote DEFINITION line `[^id]: …` is left alone (the `]:` lookahead).
+//
+// ── What it deliberately does NOT touch ────────────────────────────────────
+//   • `$…$` math: already neutralised deterministically upstream by
+//     `guardDollarMath` (it backslash-escapes `$` so the pair can never typeset
+//     as math — the reader sees literal `$`). Re-processing `$` here would
+//     double-process and risk corrupting currency prose, so this guard leaves
+//     `$` untouched by design. Math repair is COVERED, just in the sibling guard.
+//   • `~sub~` tilde pairs: the strikethrough/tilde trigger is owned by
+//     `guardAccidentalInlinePairs` (disjoint char set). This guard never
+//     inspects or inserts `~`.
+//   • `__underline__`: renders as BOLD in Telegram — legible, not broken — so it
+//     is left as-is (the floor card asks the model to avoid it, but there is no
+//     glyph-level failure to repair).
+//
+// Code spans / fenced blocks / link destinations / table rows are emitted
+// verbatim (shared `splitProtectedSegments`). A strict no-op for any body
+// without one of these tokens, and idempotent (running twice is a no-op the
+// second time — a repaired blockquote contains no `<details>`, a stripped caret
+// pair contains no `^`). Safe to compose once per send alongside the #3252
+// accidental-formatting guards.
+
+import { splitProtectedSegments } from "./code-segments.js";
+
+/** Paired caret highlight / superscript: `^text^` where the inner run is a
+ *  single ALPHANUMERIC token (no newline, no whitespace, no nested caret, and
+ *  crucially no expression punctuation like `+ = -`). Non-greedy inner run.
+ *  Replaced by the inner text.
+ *
+ *  The alphanumeric-only constraint is deliberate and NARROWER than a plain
+ *  "non-caret non-space" run: it distinguishes a genuine single superscript /
+ *  highlight token (`x^2^`, `^highlighted^`) from a whitespace-free math
+ *  expression whose carets are INDEPENDENT exponents (`a^2+b^2=c^2`). With a
+ *  permissive inner run the first two carets of `a^2+b^2=c^2` pair up (`^2+b^`)
+ *  and get stripped, mangling the math; requiring the inner run to be pure
+ *  alphanumerics means `^2+b^` never matches (the `+` breaks the run), so
+ *  `a^2+b^2=c^2`, `2^8`, and `x^n` all pass through untouched. */
+const CARET_PAIR = /\^([A-Za-z0-9]+)\^/g;
+
+/** Footnote reference marker `[^N]` (digits only) NOT immediately followed by
+ *  `:` (which would make it a footnote DEFINITION line we leave intact). Removed
+ *  entirely. Restricting the id to digits keeps this off in-prose bracket
+ *  literals like `array[^index]` and regex-ish `[^/]`, which are NOT footnotes
+ *  and would otherwise be silently eaten. */
+const FOOTNOTE_MARKER = /\[\^\d+\](?!:)/g;
+
+/** `<details>…</details>` with an optional leading `<summary>…</summary>`.
+ *  Dot-all via `[\s\S]`; non-greedy so adjacent blocks don't merge. */
+const DETAILS_BLOCK =
+  /<details[^>]*>\s*(?:<summary[^>]*>([\s\S]*?)<\/summary>)?([\s\S]*?)<\/details>/gi;
+
+/** Orphan collapsible tags left after DETAILS_BLOCK (malformed / unpaired). */
+const ORPHAN_TAGS = /<\/?(?:details|summary)[^>]*>/gi;
+
+/** Fold `title` + `body` into a Telegram expandable blockquote: the first
+ *  emitted line carries the `**> ` marker (switchroom's expandable-blockquote
+ *  encoding — see parse.ts), every subsequent line a plain `> `. */
+function toExpandableBlockquote(title: string, body: string): string {
+  const lines: string[] = [];
+  const t = title.trim();
+  if (t) lines.push(t);
+  for (const raw of body.split("\n")) {
+    const line = raw.trimEnd();
+    // Collapse leading/trailing blank lines but keep interior structure.
+    if (line.trim() === "" && lines.length === 0) continue;
+    lines.push(line);
+  }
+  // Trim trailing blanks.
+  while (lines.length > 0 && lines[lines.length - 1].trim() === "") lines.pop();
+  if (lines.length === 0) return "";
+  return lines
+    .map((line, i) => (i === 0 ? `**> ${line}` : `> ${line}`))
+    .join("\n");
+}
+
+/** Repair unsupported tokens in a single PROSE segment. */
+function repairProse(text: string): string {
+  let out = text;
+  out = out.replace(DETAILS_BLOCK, (_m, summary: string | undefined, body: string) =>
+    toExpandableBlockquote(summary ?? "", body ?? ""),
+  );
+  out = out.replace(ORPHAN_TAGS, "");
+  out = out.replace(CARET_PAIR, (_m, inner: string) => inner);
+  out = out.replace(FOOTNOTE_MARKER, "");
+  return out;
+}
+
+/**
+ * Neutralise Telegram-unrenderable tokens (`<details>`, `^…^`, `[^1]`) on the
+ * FINAL rendered rich-markdown string. Code / links / tables are verbatim.
+ * Deterministic, idempotent, and a strict no-op absent any target token.
+ */
+export function guardUnsupportedTokens(text: string): string {
+  // Cheap pre-check: nothing to do unless a target trigger char is present.
+  if (!/[\^]|<details|<\/details|<summary/i.test(text)) return text;
+  return splitProtectedSegments(text)
+    .map((seg) => (seg.code ? seg.text : repairProse(seg.text)))
+    .join("");
+}

package/telegram-plugin/rich-send.ts

@@ -22,6 +22,7 @@ import { guardDollarMath } from './render/dollar-math-guard.js'
 import { guardAccidentalEmphasis } from './render/emphasis-guard.js'
 import { guardAccidentalBlockConstructs, guardAccidentalHeading } from './render/line-start-guard.js'
 import { guardAccidentalInlinePairs } from './render/inline-pairs-guard.js'
+import { guardUnsupportedTokens } from './render/unsupported-token-guard.js'
 
 /** The `InputRichMessage` shape grammy 1.44 accepts on send AND edit. */
 export interface InputRichMessageMarkdown {
@@ -56,6 +57,14 @@ export interface InputRichMessageMarkdown {
  */
 export function guardAccidentalFormatting(markdown: string): string {
   let out = markdown
+  // Repair Telegram-unrenderable tokens FIRST: `<details>` folds into a `**> `
+  // expandable blockquote whose `> `-with-space lines are invisible to the
+  // block-construct guard (which only escapes space-LESS `>digit`/`>=`), and
+  // `**> ` is the exact marker switchroom's own render path emits — so the
+  // downstream emphasis/block guards treat it identically to a native
+  // expandable quote. Caret/footnote removal inserts no trigger char for any
+  // sibling guard, so this pass neither creates nor destroys their signals.
+  out = guardUnsupportedTokens(out)
   out = guardAccidentalEmphasis(out)
   out = guardAccidentalHeading(out)
   out = guardAccidentalBlockConstructs(out)