switchroom 0.20.8 → 0.20.9

package/telegram-plugin/dist/gateway/gateway.js

@@ -11329,7 +11329,8 @@ var init_protocol = __esm(() => {
     v: exports_external.literal(PROTOCOL_VERSION),
     op: exports_external.literal("mark-throttled"),
     id: exports_external.string().min(1),
-    until: exports_external.number().int().positive()
+    until: exports_external.number().int().positive(),
+    probeOnly: exports_external.boolean().optional()
   });
   RefreshAccountRequestSchema = exports_external.object({
     v: exports_external.literal(PROTOCOL_VERSION),
@@ -11725,12 +11726,13 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
-  async markThrottled(until) {
+  async markThrottled(until, probeOnly = false) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
       id: randomUUID2(),
       op: "mark-throttled",
-      until
+      until,
+      ...probeOnly ? { probeOnly: true } : {}
     });
     return data;
   }
@@ -13480,12 +13482,27 @@ var init_dollar_math_guard = __esm(() => {
 });
 
 // render/emphasis-guard.ts
+function isLineLeadingBullet(text, starIndex) {
+  const next = text[starIndex + 1];
+  if (next !== " " && next !== "\t")
+    return false;
+  let i = starIndex - 1;
+  let indent = 0;
+  while (i >= 0 && (text[i] === " " || text[i] === "\t")) {
+    if (++indent > 3)
+      return false;
+    i--;
+  }
+  return i < 0 || text[i] === `
+`;
+}
 function guardAccidentalEmphasis(text) {
   if (!text.includes("_") && !text.includes("*"))
     return text;
   const segments = splitProtectedSegments(text);
   let hasIntraUnderscore = false;
   let hasIntraAsterisk = false;
+  let hasBoundaryAsterisk = false;
   let underscoreCount = 0;
   let asteriskCount = 0;
   for (const seg of segments) {
@@ -13495,14 +13512,24 @@ function guardAccidentalEmphasis(text) {
       hasIntraUnderscore = true;
     if (INTRA_WORD_ASTERISK.test(seg.text))
       hasIntraAsterisk = true;
+    if (!hasBoundaryAsterisk) {
+      for (const m of seg.text.matchAll(BOUNDARY_FLANKED_ASTERISK)) {
+        if (!isLineLeadingBullet(seg.text, m.index ?? 0)) {
+          hasBoundaryAsterisk = true;
+          break;
+        }
+      }
+    }
     underscoreCount += seg.text.match(ANY_UNDERSCORE)?.length ?? 0;
     asteriskCount += seg.text.match(ANY_ASTERISK)?.length ?? 0;
   }
   INTRA_WORD_UNDERSCORE.lastIndex = 0;
   INTRA_WORD_ASTERISK.lastIndex = 0;
+  BOUNDARY_FLANKED_ASTERISK.lastIndex = 0;
   const armUnderscore = hasIntraUnderscore && underscoreCount >= 2;
   const armAsterisk = hasIntraAsterisk && asteriskCount >= 2;
-  if (!armUnderscore && !armAsterisk)
+  const armBoundaryAsterisk = hasBoundaryAsterisk;
+  if (!armUnderscore && !armAsterisk && !armBoundaryAsterisk)
     return text;
   return segments.map((seg) => {
     if (seg.code)
@@ -13512,13 +13539,17 @@ function guardAccidentalEmphasis(text) {
       out = out.replace(INTRA_WORD_UNDERSCORE, "\\_");
     if (armAsterisk)
       out = out.replace(INTRA_WORD_ASTERISK, "\\*");
+    if (armBoundaryAsterisk) {
+      out = out.replace(BOUNDARY_FLANKED_ASTERISK, (m, offset, str) => isLineLeadingBullet(str, offset) ? m : "\\*");
+    }
     return out;
   }).join("");
 }
-var INTRA_WORD_UNDERSCORE, INTRA_WORD_ASTERISK, ANY_UNDERSCORE, ANY_ASTERISK;
+var INTRA_WORD_UNDERSCORE, INTRA_WORD_ASTERISK, BOUNDARY_FLANKED_ASTERISK, ANY_UNDERSCORE, ANY_ASTERISK;
 var init_emphasis_guard = __esm(() => {
   INTRA_WORD_UNDERSCORE = /(?<=[A-Za-z0-9])_(?=[A-Za-z0-9])/g;
   INTRA_WORD_ASTERISK = /(?<=[A-Za-z0-9])\*(?=[A-Za-z0-9])/g;
+  BOUNDARY_FLANKED_ASTERISK = /(?<=^|\s)\*(?=\s|$)/g;
   ANY_UNDERSCORE = /(?<!\\)_/g;
   ANY_ASTERISK = /(?<!\\)\*/g;
 });
@@ -13569,7 +13600,7 @@ function guardAccidentalBlockConstructs(text) {
   return out;
 }
 function escapeAccidentalHeadingLine(line) {
-  return line.replace(ACCIDENTAL_HEADING, "$1\\$2");
+  return line.replace(ACCIDENTAL_HEADING, "$1\\$2").replace(ACCIDENTAL_HEADING_AFTER_MARKER, "$1\\$2");
 }
 function guardAccidentalHeading(text) {
   if (!text.includes("#"))
@@ -13599,11 +13630,12 @@ function guardAccidentalHeading(text) {
   }
   return out;
 }
-var ACCIDENTAL_BLOCKQUOTE, ACCIDENTAL_ORDERED_LIST, ACCIDENTAL_HEADING;
+var ACCIDENTAL_BLOCKQUOTE, ACCIDENTAL_ORDERED_LIST, ACCIDENTAL_HEADING, ACCIDENTAL_HEADING_AFTER_MARKER;
 var init_line_start_guard = __esm(() => {
   ACCIDENTAL_BLOCKQUOTE = /^>[0-9=]/;
   ACCIDENTAL_ORDERED_LIST = /^(\d{4,})([.)])(\s|$)/;
   ACCIDENTAL_HEADING = /^([ \t]{0,3})(#{1,6})(?=[^\s#])/;
+  ACCIDENTAL_HEADING_AFTER_MARKER = /^([ \t]{0,3}(?:(?:[-*+]|\d{1,3}[.)])[ \t]+|>[ \t]*)+)(#{1,6})(?=[^\s#])/;
 });
 
 // render/inline-pairs-guard.ts
@@ -22616,7 +22648,7 @@ function deriveOverlayTitle(raw, fileName) {
     return;
   return base.length > 0 ? base : undefined;
 }
-function readOverlayFile(agentName, file, agentCfg, warnings) {
+function readOverlayFile(agentName, file, agentCfg, warnings, source) {
   try {
     return readFileSync5(file, "utf-8");
   } catch (err) {
@@ -22629,7 +22661,7 @@ function readOverlayFile(agentName, file, agentCfg, warnings) {
       reason: `read error: ${err.message}`,
       code: code ?? "EUNKNOWN"
     };
-    recordReadFailure(agentCfg, { file, code: w.code });
+    recordReadFailure(agentCfg, { file, code: w.code, source });
     warnings.push(w);
     console.warn(`[switchroom] overlay-loader: agent='${agentName}' file='${file}': ${w.reason}`);
     return;
@@ -22693,14 +22725,14 @@ function applyAgentOverlays(config) {
           reason: `read error: cannot list overlay directory (${code})`,
           code
         };
-        recordReadFailure(agentCfg, { file: scheduleDir, code });
+        recordReadFailure(agentCfg, { file: scheduleDir, code, source: "schedule" });
         warnings.push(w);
         console.warn(`[switchroom] overlay-loader: agent='${agentName}' file='${scheduleDir}': ${w.reason}`);
       });
       if (files.length > 0) {
         const merged = [...agentCfg.schedule ?? []];
         for (const file of files) {
-          const raw = readOverlayFile(agentName, file, agentCfg, warnings);
+          const raw = readOverlayFile(agentName, file, agentCfg, warnings, "schedule");
           if (raw === undefined)
             continue;
           try {
@@ -22745,7 +22777,7 @@ function applyAgentOverlays(config) {
           reason: `read error: cannot list overlay directory (${code})`,
           code
         };
-        recordReadFailure(agentCfg, { file: skillsDir, code });
+        recordReadFailure(agentCfg, { file: skillsDir, code, source: "skills" });
         warnings.push(w);
         console.warn(`[switchroom] overlay-loader: agent='${agentName}' file='${skillsDir}': ${w.reason}`);
       });
@@ -22753,7 +22785,7 @@ function applyAgentOverlays(config) {
         const merged = [...agentCfg.skills ?? []];
         const seen = new Set(merged);
         for (const file of skillFiles) {
-          const raw = readOverlayFile(agentName, file, agentCfg, warnings);
+          const raw = readOverlayFile(agentName, file, agentCfg, warnings, "skills");
           if (raw === undefined)
             continue;
           try {
@@ -39617,6 +39649,22 @@ function redactAuthCodeMessage(api, chatId, messageId, log) {
 
 // ask-user.ts
 import { randomBytes as randomBytes2 } from "crypto";
+
+// gateway/source-message-id.ts
+var MAX_TELEGRAM_MESSAGE_ID = 2 ** 31;
+function parseSourceMessageId(raw) {
+  if (raw == null)
+    return null;
+  const s = String(raw);
+  if (!/^\d+$/.test(s))
+    return null;
+  const n = Number(s);
+  if (!Number.isSafeInteger(n) || n <= 0 || n >= MAX_TELEGRAM_MESSAGE_ID)
+    return null;
+  return n;
+}
+
+// ask-user.ts
 var ASK_USER_DEFAULT_TIMEOUT_MS = 300000;
 var ASK_USER_MAX_TIMEOUT_MS = 1800000;
 var ASK_USER_MIN_TIMEOUT_MS = 5000;
@@ -39653,13 +39701,7 @@ function validateAskUserArgs(args) {
       throw new Error("ask_user: message_thread_id must be a positive integer string");
     }
   }
-  let replyTo;
-  if (args.reply_to != null) {
-    replyTo = Number(args.reply_to);
-    if (!Number.isFinite(replyTo) || replyTo <= 0) {
-      throw new Error("ask_user: reply_to must be a positive integer string");
-    }
-  }
+  const replyTo = parseSourceMessageId(args.reply_to) ?? undefined;
   let timeoutMs = args.timeout_ms ?? ASK_USER_DEFAULT_TIMEOUT_MS;
   if (typeof timeoutMs !== "number" || !Number.isFinite(timeoutMs)) {
     throw new Error("ask_user: timeout_ms must be a number");
@@ -39739,6 +39781,7 @@ function applyChecklistPatch(cl, patch) {
   return { title: patch.title ?? cl.title, tasks };
 }
 function buildNativeChecklistPayload(p) {
+  const replyAnchor = parseSourceMessageId(p.replyToMessageId);
   return {
     business_connection_id: p.businessConnectionId,
     chat_id: p.chatId,
@@ -39746,7 +39789,7 @@ function buildNativeChecklistPayload(p) {
       title: p.title,
       tasks: p.tasks.map((t) => ({ id: t.id, text: t.text }))
     },
-    ...p.replyToMessageId != null ? { reply_parameters: { message_id: p.replyToMessageId } } : {},
+    ...replyAnchor != null ? { reply_parameters: { message_id: replyAnchor } } : {},
     ...p.protectContent === true ? { protect_content: true } : {}
   };
 }
@@ -40030,13 +40073,7 @@ function resolveStickerSendArgs(raw, aliasMap) {
       throw new Error("send_sticker: message_thread_id must be a positive integer string");
     }
   }
-  let replyTo;
-  if (raw.reply_to != null) {
-    replyTo = Number(raw.reply_to);
-    if (!Number.isFinite(replyTo) || replyTo <= 0) {
-      throw new Error("send_sticker: reply_to must be a positive integer string");
-    }
-  }
+  const replyTo = parseSourceMessageId(raw.reply_to) ?? undefined;
   return {
     chatId: raw.chat_id,
     fileId,
@@ -40088,13 +40125,7 @@ function resolveGifSendArgs(raw) {
       throw new Error("send_gif: message_thread_id must be a positive integer string");
     }
   }
-  let replyTo;
-  if (raw.reply_to != null) {
-    replyTo = Number(raw.reply_to);
-    if (!Number.isFinite(replyTo) || replyTo <= 0) {
-      throw new Error("send_gif: reply_to must be a positive integer string");
-    }
-  }
+  const replyTo = parseSourceMessageId(raw.reply_to) ?? undefined;
   return {
     chatId: raw.chat_id,
     animationRef,
@@ -50208,6 +50239,20 @@ class PinRightsCache2 {
   }
 }
 
+// gateway/source-message-id.ts
+var MAX_TELEGRAM_MESSAGE_ID2 = 2 ** 31;
+function parseSourceMessageId2(raw) {
+  if (raw == null)
+    return null;
+  const s = String(raw);
+  if (!/^\d+$/.test(s))
+    return null;
+  const n = Number(s);
+  if (!Number.isSafeInteger(n) || n <= 0 || n >= MAX_TELEGRAM_MESSAGE_ID2)
+    return null;
+  return n;
+}
+
 // gateway/permission-timeout.ts
 var SIGNATURE_SEP = String.fromCharCode(0);
 function permissionSignature(toolName, inputPreview) {
@@ -51221,7 +51266,7 @@ function createAuthBrokerClient() {
     listState: () => broker.listState(),
     setActive: (label) => broker.setActive(label),
     markExhausted: (until) => broker.markExhausted(until),
-    markThrottled: (until) => broker.markThrottled(until),
+    markThrottled: (until, probeOnly) => broker.markThrottled(until, probeOnly),
     rmAccount: (label) => broker.rmAccount(label),
     refreshAccount: (label) => broker.refreshAccount(label),
     setOverride: (agent, account) => broker.setOverride(agent, account),
@@ -73979,7 +74024,7 @@ function createAuthBrokerClient2() {
     listState: () => broker.listState(),
     setActive: (label) => broker.setActive(label),
     markExhausted: (until) => broker.markExhausted(until),
-    markThrottled: (until) => broker.markThrottled(until),
+    markThrottled: (until, probeOnly) => broker.markThrottled(until, probeOnly),
     rmAccount: (label) => broker.rmAccount(label),
     refreshAccount: (label) => broker.refreshAccount(label),
     setOverride: (agent, account) => broker.setOverride(agent, account),
@@ -74398,12 +74443,13 @@ class AuthBrokerClient2 {
     const data = await this.send(req);
     return data;
   }
-  async markThrottled(until) {
+  async markThrottled(until, probeOnly = false) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
       id: randomUUID5(),
       op: "mark-throttled",
-      until
+      until,
+      ...probeOnly ? { probeOnly: true } : {}
     });
     return data;
   }
@@ -77103,6 +77149,15 @@ function classify429Detail2(text4) {
     return "litellm-local";
   return "generic-transient";
 }
+function classification429WarrantsCorroboration(classification) {
+  return classification === "generic-transient";
+}
+function routeRateLimit429(classification, runner, agent) {
+  if (!classification429WarrantsCorroboration(classification))
+    return false;
+  runner.fireProbeOnly(agent);
+  return true;
+}
 function build429ClassifiedMetric(opts) {
   const detail = typeof opts.detail === "string" ? opts.detail : "";
   const litellm = parseLitellmLimitDetail(detail, new Date(opts.now));
@@ -77199,6 +77254,12 @@ function createThrottleTierRunner(deps) {
       deps.log(`[throttle-tier] resume suppressed (${verdict}) reason=${reason}`);
     }
   }
+  async function announceEscalation(client3, account, rolledTo, triggerAgent, armedAtMs) {
+    deps.log(`[throttle-tier] escalated to wall account=${account ?? "?"} ` + `rolledTo=${rolledTo ?? "none (all blocked)"}`);
+    await broadcastDeduped(client3, "throttle-escalation", account, renderThrottleEscalationNotice({ account, agent: triggerAgent, rolledTo }));
+    if (rolledTo)
+      nudgeResume("throttle-escalation-resume", armedAtMs);
+  }
   async function fire(triggerAgent, throttledUntilMs, resetParsed) {
     const armedAtMs = now();
     let client3 = null;
@@ -77219,10 +77280,7 @@ function createThrottleTierRunner(deps) {
       deps.log(`[throttle-tier] markThrottled failed agent=${triggerAgent}: ${err?.message ?? err}`);
     }
     if (escalated) {
-      deps.log(`[throttle-tier] escalated to wall account=${account ?? "?"} ` + `rolledTo=${rolledTo ?? "none (all blocked)"}`);
-      await broadcastDeduped(client3, "throttle-escalation", account, renderThrottleEscalationNotice({ account, agent: triggerAgent, rolledTo }));
-      if (rolledTo)
-        nudgeResume("throttle-escalation-resume", armedAtMs);
+      await announceEscalation(client3, account, rolledTo, triggerAgent, armedAtMs);
       return;
     }
     const cooldownKey = account ?? `agent:${triggerAgent}`;
@@ -77247,8 +77305,34 @@ function createThrottleTierRunner(deps) {
       nudgeResume("throttle-retry-resume", armedAtMs);
     }, delayMs);
   }
+  async function fireProbeOnly(triggerAgent) {
+    const armedAtMs = now();
+    let client3 = null;
+    let account = null;
+    let escalated = false;
+    let rolledTo = null;
+    try {
+      client3 = await deps.getBrokerClient();
+      if (client3) {
+        const r = await client3.markThrottled(now() + 1, true);
+        account = r.account;
+        escalated = r.escalated;
+        rolledTo = r.rolledTo ?? null;
+      } else {
+        deps.log(`[throttle-tier] broker unreachable \u2014 probe-only skipped agent=${triggerAgent}`);
+      }
+    } catch (err) {
+      deps.log(`[throttle-tier] probe-only markThrottled failed agent=${triggerAgent}: ${err?.message ?? err}`);
+    }
+    if (escalated) {
+      await announceEscalation(client3, account, rolledTo, triggerAgent, armedAtMs);
+      return;
+    }
+    deps.log(`[throttle-tier] generic-transient probe-only inert (no wall) agent=${triggerAgent}`);
+  }
   return {
     fire,
+    fireProbeOnly,
     inspect: () => ({ noticeState, nudgePending: pendingNudge != null })
   };
 }
@@ -79457,6 +79541,26 @@ function stampsHandbackMarker(source) {
   return known.decoupledCompletion;
 }
 var HANDBACK_RECENCY_WINDOW_MS = 60000;
+var TASK_NOTIFICATION_DEDUP_TTL_MS = 30000;
+var NOTIF_TERMINAL_STATUSES = new Set(["completed", "failed", "killed"]);
+
+class CliTaskNotificationLedger {
+  seen = new Map;
+  record(taskId, status, now) {
+    if (taskId.length === 0 || !NOTIF_TERMINAL_STATUSES.has(status))
+      return;
+    this.seen.set(taskId, now);
+    for (const [id, ts] of this.seen) {
+      if (now - ts > TASK_NOTIFICATION_DEDUP_TTL_MS)
+        this.seen.delete(id);
+    }
+  }
+  seenRecently(taskId, now) {
+    const ts = this.seen.get(taskId);
+    return ts != null && now - ts <= TASK_NOTIFICATION_DEDUP_TTL_MS;
+  }
+}
+var cliTaskNotifLedger = new CliTaskNotificationLedger;
 var MAIN_THREAD_KEY = "<main>";
 
 class SubagentHandbackMarker {
@@ -80205,7 +80309,7 @@ async function sendReply(deps, req) {
   }
   const files = args.files ?? [];
   const quoteOptIn = args.quote !== false;
-  let reply_to = args.reply_to != null ? Number(args.reply_to) : undefined;
+  let reply_to = parseSourceMessageId(args.reply_to) ?? undefined;
   const protectContent = args.protect_content === true;
   const quoteText = args.quote_text;
   const access = loadAccess();
@@ -82011,20 +82115,6 @@ function formatEventDetail(event) {
   }
 }
 
-// gateway/source-message-id.ts
-var MAX_TELEGRAM_MESSAGE_ID = 2 ** 31;
-function parseSourceMessageId(raw) {
-  if (raw == null)
-    return null;
-  const s = String(raw);
-  if (!/^\d+$/.test(s))
-    return null;
-  const n = Number(s);
-  if (!Number.isSafeInteger(n) || n <= 0 || n >= MAX_TELEGRAM_MESSAGE_ID)
-    return null;
-  return n;
-}
-
 // gateway/status-surface-log.ts
 function formatTurnLifecycle(action, reason, t, now) {
   const ageMs = action === "clear" ? Math.max(0, now - t.startedAt) : 0;
@@ -84230,6 +84320,26 @@ function isTurnFlushSafetyEnabled(env = process.env) {
 }
 
 // gateway/subagent-handback-marker.ts
+var TASK_NOTIFICATION_DEDUP_TTL_MS2 = 30000;
+var NOTIF_TERMINAL_STATUSES2 = new Set(["completed", "failed", "killed"]);
+
+class CliTaskNotificationLedger2 {
+  seen = new Map;
+  record(taskId, status, now) {
+    if (taskId.length === 0 || !NOTIF_TERMINAL_STATUSES2.has(status))
+      return;
+    this.seen.set(taskId, now);
+    for (const [id, ts] of this.seen) {
+      if (now - ts > TASK_NOTIFICATION_DEDUP_TTL_MS2)
+        this.seen.delete(id);
+    }
+  }
+  seenRecently(taskId, now) {
+    const ts = this.seen.get(taskId);
+    return ts != null && now - ts <= TASK_NOTIFICATION_DEDUP_TTL_MS2;
+  }
+}
+var cliTaskNotifLedger2 = new CliTaskNotificationLedger2;
 var MAIN_THREAD_KEY2 = "<main>";
 
 class SubagentHandbackMarker2 {
@@ -97011,6 +97121,9 @@ function decideSubagentHandback(input) {
   if (!input.isBackground) {
     return { deliver: false, reason: "foreground" };
   }
+  if (input.cliTaskNotificationSeen === true) {
+    return { deliver: false, reason: "cli-task-notification" };
+  }
   const chatId = input.fleetChatId || input.ownerChatId;
   if (!chatId) {
     return { deliver: false, reason: "no-chat" };
@@ -102693,10 +102806,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.20.8";
-var COMMIT_SHA = "a6efc10f";
-var COMMIT_DATE = "2026-08-04T21:38:16Z";
-var LATEST_PR = 4374;
+var VERSION2 = "0.20.9";
+var COMMIT_SHA = "63c4c44b";
+var COMMIT_DATE = "2026-08-05T03:51:28Z";
+var LATEST_PR = 4388;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts
@@ -107873,6 +107986,7 @@ function emitGatewayOperatorEvent(event) {
       agent,
       shouldEmitCard: (a) => shouldEmitOperatorEvent(a, "rate-limited")
     });
+    routeRateLimit429(rateLimit429Classification, throttleTierRunner, agent);
     if (surface === "litellm-local-notice") {
       process.stderr.write(`telegram gateway: 429 classified litellm-proxy-local agent=${agent} \u2014 ` + `calm path, no account attribution, no failover
 `);
@@ -109150,6 +109264,8 @@ if (isGatewayMain)
         }
       }
       const ev = msg.event;
+      if (ev.kind === "task_notification")
+        cliTaskNotifLedger2.record(ev.taskId, ev.status, Date.now());
       handleSessionEvent2(ev);
       toolFlightTracker.onEvent(ev);
       if (pendingDeferredInterrupt != null && !toolFlightTracker.isMidToolCall()) {
@@ -109867,7 +109983,7 @@ async function executeSendChecklist(args) {
   if (!Array.isArray(tasks) || tasks.length === 0)
     throw new Error("send_checklist: tasks must be a non-empty array");
   const threadId = args.message_thread_id != null ? Number(args.message_thread_id) : undefined;
-  const replyTo = args.reply_to != null ? Number(args.reply_to) : undefined;
+  const replyTo = parseSourceMessageId2(args.reply_to) ?? undefined;
   const protectContent = args.protect_content === true;
   assertAllowedChat(chat_id);
   const { title: redactedTitle, tasks: redactedTasks } = redactChecklistFields(title, tasks, (t) => redactOutboundText(t, "send_checklist"));
@@ -116715,11 +116831,12 @@ async function startGateway() {
                   ownerChatId: hbOwnerDm,
                   taskDescription: description2,
                   resultText,
-                  jsonlAgentId: agentId
+                  jsonlAgentId: agentId,
+                  cliTaskNotificationSeen: cliTaskNotifLedger2.seenRecently(agentId, Date.now())
                 });
                 if (!decision.deliver) {
-                  if (decision.reason === "no-chat") {
-                    process.stderr.write(`telegram gateway: subagent-handback ${agentId} \u2014 no chat to deliver to; skipped
+                  if (decision.reason === "no-chat" || decision.reason === "cli-task-notification") {
+                    process.stderr.write(`telegram gateway: subagent-handback ${agentId} skipped \u2014 ${decision.reason === "no-chat" ? "no chat to deliver to" : "CLI task-notification already woke the parent for this completion (double-wake dedup)"}
 `);
                   }
                   return;

package/telegram-plugin/gateway/auth-broker-client.ts

@@ -28,7 +28,7 @@ export function createAuthBrokerClient(): {
     listState: () => broker.listState(),
     setActive: (label: string) => broker.setActive(label),
     markExhausted: (until?: number) => broker.markExhausted(until),
-    markThrottled: (until: number) => broker.markThrottled(until),
+    markThrottled: (until: number, probeOnly?: boolean) => broker.markThrottled(until, probeOnly),
     rmAccount: (label: string) => broker.rmAccount(label),
     refreshAccount: (label: string) => broker.refreshAccount(label),
     setOverride: (agent: string, account: string | null) =>

package/telegram-plugin/gateway/auth-command.ts

@@ -334,10 +334,12 @@ export interface AuthBrokerClient {
    * per-account rate limit on the CALLER's own account — `throttled_until`
    * in the quota ledger — WITHOUT rolling the fleet and WITHOUT touching
    * eligibility. `escalated` is true when the broker's escalation guard
-   * (repeated hits corroborated by a live probe) converted it into the
+   * (a first-hit live probe corroborating a wall) converted it into the
    * standard mark-exhausted + roll; `rolledTo` names the roll target then.
+   * `probeOnly` (#failover-429-corroborate, generic-transient origin): run ONLY
+   * the escalation probe — a healthy probe records nothing (account stays inert).
    */
-  markThrottled(until: number): Promise<{
+  markThrottled(until: number, probeOnly?: boolean): Promise<{
     account: string
     throttled_until: number
     escalated: boolean

package/telegram-plugin/gateway/checklist-fallback.ts

@@ -33,6 +33,8 @@
  * (same pattern as checklist-message-handler.ts).
  */
 
+import { parseSourceMessageId } from './source-message-id.js'
+
 export interface ChecklistTaskState {
   /** 1-based sequential id assigned at send time (mirrors the native API's
    *  required per-task integer id; doubles as the patch handle in text mode). */
@@ -130,6 +132,11 @@ export function buildNativeChecklistPayload(p: {
   replyToMessageId?: number
   protectContent?: boolean
 }): Record<string, unknown> {
+  // #4368 — defense at the payload boundary: a fabricated / out-of-int32
+  // reply anchor is dropped here so the native checklist sends UNANCHORED
+  // rather than Telegram 400ing on `reply_parameters.message_id`. Independent
+  // of any caller-side guard so this builder can never emit a bad anchor.
+  const replyAnchor = parseSourceMessageId(p.replyToMessageId)
   return {
     business_connection_id: p.businessConnectionId,
     chat_id: p.chatId,
@@ -137,7 +144,7 @@ export function buildNativeChecklistPayload(p: {
       title: p.title,
       tasks: p.tasks.map((t) => ({ id: t.id, text: t.text })),
     },
-    ...(p.replyToMessageId != null ? { reply_parameters: { message_id: p.replyToMessageId } } : {}),
+    ...(replyAnchor != null ? { reply_parameters: { message_id: replyAnchor } } : {}),
     ...(p.protectContent === true ? { protect_content: true } : {}),
   }
 }

package/telegram-plugin/gateway/gateway.ts

@@ -427,6 +427,7 @@ import {
   build429ClassifiedMetric,
   classify429Detail,
   decideThrottleTier,
+  routeRateLimit429,
   throttleRetryInPlaceMaxMs,
 } from '../throttle-tier.js'
 import { createThrottleTierRunner } from './throttle-tier-wiring.js'
@@ -497,7 +498,7 @@ import {
   type ReplyOwnerTier, type ReplyOwnerCandidates,
   type AnswerDeliveredLatch,
 } from '../reply-owner-resolve.js'
-import { SubagentHandbackMarker } from './subagent-handback-marker.js'
+import { SubagentHandbackMarker, cliTaskNotifLedger } from './subagent-handback-marker.js'
 // PR A — deterministic answer-ready quiescence flush (late-delivery fix).
 import { AnswerReadyFlushController, resolveAnswerReadyFlushMs, resolveAnswerStageMs } from '../answer-ready-flush.js'
 // #1667 — pure decision core for the turn_end answer-delivery gate (#1664).
@@ -7827,6 +7828,7 @@ function emitGatewayOperatorEvent(event: OperatorEvent): void {
       agent,
       shouldEmitCard: (a) => shouldEmitOperatorEvent(a, 'rate-limited'),
     })
+    routeRateLimit429(rateLimit429Classification, throttleTierRunner, agent) // #failover-429-corroborate probe-only seam; boolean return is for test observability (throttle-tier-route-429.test.ts), intentionally discarded here — see docstring
     if (surface === 'litellm-local-notice') {
       process.stderr.write(
         `telegram gateway: 429 classified litellm-proxy-local agent=${agent} — ` +
@@ -10690,6 +10692,7 @@ if (isGatewayMain) ipcServer = createIpcServer({
       }
     }
     const ev = msg.event as unknown as SessionEvent
+    if (ev.kind === 'task_notification') cliTaskNotifLedger.record(ev.taskId, ev.status, Date.now()) // double-wake dedup — ledger doc in subagent-handback-marker.ts
     // #1122/#1126: session events used to be ingested into the pinned progress
     // card here (`progressDriver.ingest`). The card is retired and the driver
     // is permanently null, so that call was a dead no-op — removed. Session
@@ -11917,7 +11920,7 @@ async function executeSendChecklist(args: Record<string, unknown>): Promise<{ co
   const tasks = args.tasks as Array<{ text: string; done?: boolean }> | undefined
   if (!Array.isArray(tasks) || tasks.length === 0) throw new Error('send_checklist: tasks must be a non-empty array')
   const threadId = args.message_thread_id != null ? Number(args.message_thread_id) : undefined
-  const replyTo = args.reply_to != null ? Number(args.reply_to) : undefined
+  const replyTo = parseSourceMessageId(args.reply_to as string | number | null | undefined) ?? undefined // #4368: drop a fabricated/out-of-int32 anchor so the send lands unanchored, not 400
   const protectContent = args.protect_content === true
 
   assertAllowedChat(chat_id)
@@ -24370,11 +24373,12 @@ async function startGateway(): Promise<void> {  // #2996 P0c: the boot IIFE, now
                   // deterministic dedup key — closes the #1719
                   // re-fire-on-restart class.
                   jsonlAgentId: agentId,
+                  cliTaskNotificationSeen: cliTaskNotifLedger.seenRecently(agentId, Date.now()), // double-wake dedup, fail-open — ledger doc in subagent-handback-marker.ts
                 })
                 if (!decision.deliver) {
-                  if (decision.reason === 'no-chat') {
+                  if (decision.reason === 'no-chat' || decision.reason === 'cli-task-notification') {
                     process.stderr.write(
-                      `telegram gateway: subagent-handback ${agentId} — no chat to deliver to; skipped\n`,
+                      `telegram gateway: subagent-handback ${agentId} skipped — ${decision.reason === 'no-chat' ? 'no chat to deliver to' : 'CLI task-notification already woke the parent for this completion (double-wake dedup)'}\n`,
                     )
                   }
                   return

package/telegram-plugin/gateway/outbound-send-path.ts

@@ -73,6 +73,7 @@ import { getBuzzMirror } from './buzz-mirror.js'
 import { isFinalAnswerReply, isSubstantiveFinalReply, shouldJournalReplySiteDelivery } from '../final-answer-detect.js'
 import { decideOverPing, type OverPingDecision } from '../over-ping-safety-net.js'
 import { decideSilentReplyAnchor } from '../silent-reply-anchor.js'
+import { parseSourceMessageId } from './source-message-id.js'
 import {
   decideSupersedeCorrection,
   flushedAnswerMatchesReply,
@@ -1343,7 +1344,14 @@ export async function sendReply(
 
   const files = (args.files as string[] | undefined) ?? []
   const quoteOptIn = args.quote !== false
-  let reply_to = args.reply_to != null ? Number(args.reply_to) : undefined
+  // #4368 — the model's reply tool can quote a synthetic inbound (a boot-
+  // resume/handback/cron fabricated id at `Date.now()` scale). Route it through
+  // the canonical guard so an out-of-int32 anchor is DROPPED (send lands
+  // unanchored) rather than 400ing every chunk on `reply_parameters.message_id`.
+  // A later `reply_to = latest` (quote-opt-in default) is a Telegram-returned
+  // id and needs no re-check. Also closes the pre-existing NaN hole: a non-
+  // numeric `reply_to` used to coerce to NaN and still build the anchor.
+  let reply_to = parseSourceMessageId(args.reply_to as string | number | null | undefined) ?? undefined
   const protectContent = args.protect_content === true
   const quoteText = args.quote_text as string | undefined
   const access = loadAccess()