switchroom 0.21.5 → 0.21.7

package/bin/autoaccept.exp

@@ -86,8 +86,28 @@ expect {
         send "\r"
         exp_continue
     }
+    -re {Continue with Fable} {
+        # Fable-5 usage-credits consent modal:
+        #     Fable 5 runs on usage credits, purchased separately from your plan.
+        #       1. Continue with Fable 5
+        #     ❯ 2. Switch to Sonnet 5 and continue
+        #     Enter to confirm · Esc to cancel
+        # MUST precede the generic "Enter to confirm" branch below: that
+        # footer matches this modal too, and the CLI focuses option 2 by
+        # default (`defaultFocusValue:"switch"`), so a bare Return silently
+        # declines Fable and downgrades the agent to Sonnet. Select option 1
+        # by digit instead. Kept in sync with the `fable-usage-credits-consent`
+        # rule in src/agents/autoaccept.ts.
+        sleep 0.5
+        send "1\r"
+        exp_continue
+    }
     -re {Enter.{1,30}confirm} {
-        # Generic "Enter to confirm" prompt (dev channels, trust dialog)
+        # Generic "Enter to confirm" prompt (dev channels, trust dialog).
+        # NOTE: the TS poller additionally guards this catch-all against
+        # numbered selectors (NUMBERED_CHOICE_SIGNATURE). expect matches a
+        # STREAM in branch order, so here the equivalent protection is
+        # ordering: every option-selecting branch must sit above this one.
         sleep 0.8
         send "\r"
         exp_continue

package/dist/cli/autoaccept-poll.js

@@ -20,6 +20,29 @@ import { execFileSync as execFileSync3 } from "child_process";
 
 // src/agents/autoaccept.ts
 import { execFileSync } from "node:child_process";
+var NUMBERED_CHOICE_SIGNATURE = /(?=[\s\S]*^[^\S\n]*(?:\u276f[^\S\n]*)?1\.[^\S\n]+\S)(?=[\s\S]*^[^\S\n]*(?:\u276f[^\S\n]*)?2\.[^\S\n]+\S)/m;
+var FABLE_CONSENT_SIGNATURE = /(?=[\s\S]*Continue with Fable)(?=[\s\S]*usage credits)/i;
+function fableConsentNav(text) {
+  for (const line of text.split(`
+`)) {
+    const m = line.match(/^\s*(\u276f)?\s*(\d+)\.\s+(.*\S)\s*$/);
+    if (!m)
+      continue;
+    if (/Continue with Fable/i.test(m[3]))
+      return [m[2], "Enter"];
+  }
+  return null;
+}
+function ruleMatches(rule, text) {
+  if (!rule.match.test(text))
+    return false;
+  if (rule.notMatch && rule.notMatch.test(text))
+    return false;
+  return true;
+}
+function resolveRuleKeys(rule, text) {
+  return rule.keysFor?.(text) ?? rule.keys;
+}
 var PROMPTS = [
   {
     name: "dev-channels-loading",
@@ -57,9 +80,16 @@ var PROMPTS = [
     keys: ["Escape"],
     maxFires: 5
   },
+  {
+    name: "fable-usage-credits-consent",
+    match: FABLE_CONSENT_SIGNATURE,
+    keysFor: fableConsentNav,
+    keys: ["1", "Enter"]
+  },
   {
     name: "enter-to-confirm",
     match: /Enter.{1,30}confirm/,
+    notMatch: NUMBERED_CHOICE_SIGNATURE,
     keys: ["Enter"]
   }
 ];
@@ -117,12 +147,13 @@ async function runAutoaccept(opts) {
       for (const entry of rules) {
         if (entry.fired >= entry.cap)
           continue;
-        if (entry.rule.match.test(text)) {
+        if (ruleMatches(entry.rule, text)) {
+          const keys = resolveRuleKeys(entry.rule, text);
           entry.fired++;
           matchedThisPoll = true;
           fired.push(entry.rule.name);
-          console.error(`[autoaccept] ${opts.agentName}: fired ${entry.rule.name} (${entry.rule.keys.join("+")})`);
-          sendKeys(opts.agentName, entry.rule.keys);
+          console.error(`[autoaccept] ${opts.agentName}: fired ${entry.rule.name} (${keys.join("+")})`);
+          sendKeys(opts.agentName, keys);
         }
       }
     }
@@ -141,6 +172,26 @@ async function runAutoaccept(opts) {
 
 // src/agents/autoaccept.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
+var NUMBERED_CHOICE_SIGNATURE2 = /(?=[\s\S]*^[^\S\n]*(?:\u276f[^\S\n]*)?1\.[^\S\n]+\S)(?=[\s\S]*^[^\S\n]*(?:\u276f[^\S\n]*)?2\.[^\S\n]+\S)/m;
+var FABLE_CONSENT_SIGNATURE2 = /(?=[\s\S]*Continue with Fable)(?=[\s\S]*usage credits)/i;
+function fableConsentNav2(text) {
+  for (const line of text.split(`
+`)) {
+    const m = line.match(/^\s*(\u276f)?\s*(\d+)\.\s+(.*\S)\s*$/);
+    if (!m)
+      continue;
+    if (/Continue with Fable/i.test(m[3]))
+      return [m[2], "Enter"];
+  }
+  return null;
+}
+function ruleMatches2(rule, text) {
+  if (!rule.match.test(text))
+    return false;
+  if (rule.notMatch && rule.notMatch.test(text))
+    return false;
+  return true;
+}
 var PROMPTS2 = [
   {
     name: "dev-channels-loading",
@@ -178,9 +229,16 @@ var PROMPTS2 = [
     keys: ["Escape"],
     maxFires: 5
   },
+  {
+    name: "fable-usage-credits-consent",
+    match: FABLE_CONSENT_SIGNATURE2,
+    keysFor: fableConsentNav2,
+    keys: ["1", "Enter"]
+  },
   {
     name: "enter-to-confirm",
     match: /Enter.{1,30}confirm/,
+    notMatch: NUMBERED_CHOICE_SIGNATURE2,
     keys: ["Enter"]
   }
 ];
@@ -613,6 +671,7 @@ var DEFAULT_STABILITY_THRESHOLD = 3;
 var DEFAULT_COOLDOWN_MS = 60000;
 var DEFAULT_CONFIRM_MODAL_POLLS = 3;
 var DEFAULT_MANIFEST_STALL_POLLS = 60;
+var DEFAULT_FABLE_CONSENT_POLLS = 3;
 var DEFAULT_PERMISSION_PROMPT_POLLS = 3;
 var DEFAULT_PERMISSION_CARDLESS_POLLS = 24;
 var DEFAULT_PERMISSION_FLOOD_MAX_POLLS = 120;
@@ -643,6 +702,8 @@ async function runWedgeWatchdog(opts) {
   const parseReset = opts.parseReset ?? parseWeeklyReset;
   const confirmModalSignature = opts.confirmModalSignature === null ? null : opts.confirmModalSignature ?? CONFIRM_MODAL_SIGNATURE;
   const confirmModalPolls = opts.confirmModalPolls ?? envInt("SWITCHROOM_WEDGE_CONFIRM_POLLS", DEFAULT_CONFIRM_MODAL_POLLS);
+  const fableConsentSignature = opts.fableConsentSignature === null ? null : opts.fableConsentSignature ?? FABLE_CONSENT_SIGNATURE2;
+  const fableConsentPolls = opts.fableConsentPolls ?? envInt("SWITCHROOM_WEDGE_FABLE_POLLS", DEFAULT_FABLE_CONSENT_POLLS);
   const permissionPromptSignature = opts.permissionPromptSignature === null ? null : opts.permissionPromptSignature ?? PERMISSION_PROMPT_SIGNATURE;
   const permissionPromptPolls = opts.permissionPromptPolls ?? envInt("SWITCHROOM_WEDGE_PERMISSION_POLLS", DEFAULT_PERMISSION_PROMPT_POLLS);
   const permissionCardlessPolls = Math.max(permissionPromptPolls, opts.permissionCardlessPolls ?? envInt("SWITCHROOM_WEDGE_PERMISSION_CARDLESS_POLLS", DEFAULT_PERMISSION_CARDLESS_POLLS));
@@ -664,6 +725,7 @@ async function runWedgeWatchdog(opts) {
   let rateLimitFires = 0;
   let overageCreditSelections = 0;
   let confirmModalFires = 0;
+  let fableConsentFires = 0;
   let permissionPromptFires = 0;
   let permissionPromptDeferrals = 0;
   let permissionPromptFloodHolds = 0;
@@ -671,10 +733,12 @@ async function runWedgeWatchdog(opts) {
   let restartEscalations = 0;
   let polls = 0;
   let confirmModalPresent = 0;
+  let fableConsentPresent = 0;
   let permissionPromptPresent = 0;
   let manifestStallPresent = 0;
   let lastManifestKey = null;
   let confirmCooldownUntil = 0;
+  let fableCooldownUntil = 0;
   let permissionCooldownUntil = 0;
   let lastPermissionHoldLogAt = Number.NEGATIVE_INFINITY;
   while (polls < maxPolls) {
@@ -687,9 +751,10 @@ async function runWedgeWatchdog(opts) {
       text = "";
     }
     const isRateLimitMenu = !!text && rateLimitSignature !== null && rateLimitSignature.test(text);
-    const isPermissionPrompt = !isRateLimitMenu && !!text && permissionPromptSignature !== null && permissionPromptSignature.test(text);
-    const isConfirmModal = !isRateLimitMenu && !isPermissionPrompt && !!text && confirmModalSignature !== null && confirmModalSignature.test(text);
-    const isBlockingModal = !isRateLimitMenu && !isPermissionPrompt && !isConfirmModal && !!text && signature.test(text) && !deferToPrompts.some((p) => p.match.test(text));
+    const isFableConsent = !isRateLimitMenu && !!text && fableConsentSignature !== null && fableConsentSignature.test(text);
+    const isPermissionPrompt = !isRateLimitMenu && !isFableConsent && !!text && permissionPromptSignature !== null && permissionPromptSignature.test(text);
+    const isConfirmModal = !isRateLimitMenu && !isFableConsent && !isPermissionPrompt && !!text && confirmModalSignature !== null && confirmModalSignature.test(text);
+    const isBlockingModal = !isRateLimitMenu && !isFableConsent && !isPermissionPrompt && !isConfirmModal && !!text && signature.test(text) && !deferToPrompts.some((p) => ruleMatches2(p, text));
     const manifestSignatureHit = !!text && manifestStallSignature !== null && manifestStallSignature.test(text);
     const manifestKey = manifestSignatureHit ? stabilityKey(text) : null;
     const stopHookPresent = !!text && STOP_HOOK_ERROR_SIGNATURE.test(text);
@@ -767,10 +832,30 @@ async function runWedgeWatchdog(opts) {
         stableCount = 0;
         lastKey = null;
       }
+    } else if (isFableConsent) {
+      fableConsentPresent++;
+      stableCount = 0;
+      lastKey = null;
+      permissionPromptPresent = 0;
+      confirmModalPresent = 0;
+      if (fableConsentPresent >= fableConsentPolls && now() >= fableCooldownUntil) {
+        const nav = fableConsentNav2(text) ?? ["1", "Enter"];
+        console.error(`[wedge-watchdog] ${opts.agentName}: Fable-5 usage-credits consent modal present ` + `${fableConsentPresent} polls ` + `(~${Math.round(fableConsentPresent * pollIntervalMs / 1000)}s) \u2014 ` + `selecting "Continue with Fable 5" (${nav.join(" ")}); the session is on fable ` + `because the operator configured it, and Enter/Esc here would silently decline it`);
+        try {
+          send(opts.agentName, nav);
+        } catch (err) {
+          console.error(`[wedge-watchdog] ${opts.agentName}: send threw: ${err.message}`);
+        }
+        fires++;
+        fableConsentFires++;
+        fableCooldownUntil = now() + cooldownMs;
+        fableConsentPresent = 0;
+      }
     } else if (isPermissionPrompt) {
       permissionPromptPresent++;
       stableCount = 0;
       lastKey = null;
+      fableConsentPresent = 0;
       if (permissionPromptPresent >= permissionPromptPolls && now() >= permissionCooldownUntil) {
         let status = null;
         if (queryPendingPermission2) {
@@ -824,6 +909,7 @@ async function runWedgeWatchdog(opts) {
       stableCount = 0;
       lastKey = null;
       permissionPromptPresent = 0;
+      fableConsentPresent = 0;
       if (confirmModalPresent >= confirmModalPolls && now() >= confirmCooldownUntil) {
         console.error(`[wedge-watchdog] ${opts.agentName}: dismissing stuck confirmation modal ` + `(Esc == "No, go back") after ${confirmModalPresent} polls present ` + `(~${Math.round(confirmModalPresent * pollIntervalMs / 1000)}s, flicker-immune) ` + `\u2014 no human to answer it`);
         try {
@@ -861,6 +947,7 @@ async function runWedgeWatchdog(opts) {
       lastKey = null;
       confirmModalPresent = 0;
       permissionPromptPresent = 0;
+      fableConsentPresent = 0;
     }
     await sleep(pollIntervalMs);
   }
@@ -869,6 +956,7 @@ async function runWedgeWatchdog(opts) {
     rateLimitFires,
     overageCreditSelections,
     confirmModalFires,
+    fableConsentFires,
     permissionPromptFires,
     permissionPromptDeferrals,
     permissionPromptFloodHolds,
@@ -5628,7 +5716,7 @@ async function main() {
       queryPendingPermission: permissionCardAware ? undefined : null,
       floodPressure: permissionFloodAware ? undefined : null
     });
-    console.error(`[autoaccept-poll] ${agentName}: wedge-watchdog returned reason=${res.reason} fires=${res.fires} rateLimitFires=${res.rateLimitFires} overageCreditSelections=${res.overageCreditSelections} confirmModalFires=${res.confirmModalFires} permissionPromptFires=${res.permissionPromptFires} permissionPromptDeferrals=${res.permissionPromptDeferrals} permissionPromptFloodHolds=${res.permissionPromptFloodHolds} permissionPromptCardlessHolds=${res.permissionPromptCardlessHolds} restartEscalations=${res.restartEscalations}`);
+    console.error(`[autoaccept-poll] ${agentName}: wedge-watchdog returned reason=${res.reason} fires=${res.fires} rateLimitFires=${res.rateLimitFires} overageCreditSelections=${res.overageCreditSelections} confirmModalFires=${res.confirmModalFires} fableConsentFires=${res.fableConsentFires} permissionPromptFires=${res.permissionPromptFires} permissionPromptDeferrals=${res.permissionPromptDeferrals} permissionPromptFloodHolds=${res.permissionPromptFloodHolds} permissionPromptCardlessHolds=${res.permissionPromptCardlessHolds} restartEscalations=${res.restartEscalations}`);
   } catch (err) {
     console.error(`[autoaccept-poll] ${agentName}: wedge-watchdog unexpected throw: ${err.message}`);
   }

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.21.5", COMMIT_SHA = "a9aceb2f";
+var VERSION = "0.21.7", COMMIT_SHA = "e4e50f84";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -31796,7 +31796,7 @@ ${baseAppend}` : TELEGRAM_FORMATTING_FLOOR_CARD;
     }
   }
   const settingsPath = join12(agentDir, ".claude", "settings.json");
-  if (existsSync18(settingsPath)) {
+  if (existsSync18(settingsPath) && !options.skipNonCronWrites) {
     const before = readFileSync16(settingsPath, "utf-8");
     const settings = JSON.parse(before);
     settings.permissions = settings.permissions ?? {};
@@ -31955,8 +31955,10 @@ ${body}
       }
     }
   }
-  refreshTelegramBotTokenEnv(agentDir, resolvedBotToken, changes);
-  if (agentConfig.skills) {
+  if (!options.skipNonCronWrites) {
+    refreshTelegramBotTokenEnv(agentDir, resolvedBotToken, changes);
+  }
+  if (agentConfig.skills && !options.skipNonCronWrites) {
     syncGlobalSkills(agentDir, agentConfig.skills, switchroomConfig.switchroom.skills_dir);
   }
   if (!options.skipProfileTemplates) {
@@ -32027,14 +32029,16 @@ ${body}
     const after = JSON.stringify(mcpJson, null, 2) + `
 `;
     const before = existsSync18(mcpJsonPath) ? readFileSync16(mcpJsonPath, "utf-8") : "";
-    if (after !== before) {
+    if (after !== before && !options.skipNonCronWrites) {
       atomicWriteFileSync2(mcpJsonPath, after, 384);
       changes.push(mcpJsonPath);
     }
     const cronMcp = maybeWriteCronMcp(agentDir, mcpServers, buildCronSessionContext(agentConfig).cronSessionEnabled);
     if (cronMcp)
       changes.push(cronMcp);
-    ensureMcpServersTrusted(agentDir, Object.keys(mcpServers));
+    if (!options.skipNonCronWrites) {
+      ensureMcpServersTrusted(agentDir, Object.keys(mcpServers));
+    }
   }
   const reconcileWorkspaceDir = join12(agentDir, "workspace");
   if (!options.skipProfileTemplates) {
@@ -32093,7 +32097,7 @@ ${body}
   }
   const agentSoulPath = join12(agentDir, "SOUL.md");
   const workspaceSoulPath = join12(agentDir, "workspace", "SOUL.md");
-  if (existsSync18(workspaceSoulPath)) {
+  if (existsSync18(workspaceSoulPath) && !options.skipNonCronWrites) {
     if (existsSync18(agentSoulPath)) {
       const stat = lstatSync4(agentSoulPath);
       if (stat.isSymbolicLink()) {
@@ -34980,7 +34984,7 @@ function getAgentLogs(name, follow, tail, timestamps) {
   });
 }
 function classifyChangeKind(path2) {
-  if (/\/telegram\/cron-(?:\d+|[0-9a-f]{12})\.sh$/.test(path2))
+  if (/\/telegram\/cron-(?:\d+|[0-9a-f]{12})\.(?:sh|source)$/.test(path2))
     return "cron";
   if (path2.includes("/.claude-cron/"))
     return "cron";
@@ -124771,13 +124775,13 @@ function reconcileAgentCronOnly(agent) {
       return { ok: false, error: `agent "${agent}" not in switchroom.yaml` };
     }
     const agentsDir = resolveAgentsDir(config);
-    const result = reconcileAgent(agent, agentConfig, agentsDir, config.telegram, config, undefined, { skipProfileTemplates: true });
+    const result = reconcileAgent(agent, agentConfig, agentsDir, config.telegram, config, undefined, { skipProfileTemplates: true, skipNonCronWrites: true });
     const changes = [...result.changes];
     const nonCron = changes.filter((p) => classifyChangeKind(p) !== "cron");
     if (nonCron.length > 0) {
       return {
         ok: false,
-        error: `non-cron changes surfaced during cron-only reconcile: ${nonCron.join(", ")}`
+        error: `non-cron changes surfaced during cron-only reconcile ` + `(ungated writer \u2014 see ReconcileOptions.skipNonCronWrites): ${nonCron.join(", ")}`
       };
     }
     const r = applyCronChangesHot(agent, changes);

package/dist/host-control/main.js

@@ -21565,7 +21565,7 @@ function allocateAgentUid(name) {
 }
 
 // src/build-info.ts
-var VERSION = "0.21.5";
+var VERSION = "0.21.7";
 
 // src/setup/hindsight-recall-passthrough.ts
 var HINDSIGHT_RECALL_TAG_WEIGHT_SEED = Object.freeze({ sidechain: 0.8 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.21.5",
+  "version": "0.21.7",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
     "test:vitest": "vitest run",
     "test:bun": "bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/hindsight-bank-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-scope-persist.test.ts src/vault/broker/server-tokenless-scope.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/self-approval-bypass.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:watch": "vitest",
-    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-bench-baseline-anonymised.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-hindsight-bank-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-ctx-send-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-foreign-db-readonly.mjs && node scripts/check-changelog-entry.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
+    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-bench-baseline-anonymised.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-hindsight-bank-hermeticity.mjs && node scripts/check-parked-turn-start-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-ctx-send-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-foreign-db-readonly.mjs && node scripts/check-changelog-entry.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
     "lint:tsc": "tsc --noEmit",
     "lint:hindsight-write-redaction": "node scripts/check-hindsight-write-redaction.mjs",
     "lint:secret-pattern-parity": "bun scripts/check-secret-pattern-parity.ts",
@@ -41,6 +41,7 @@
     "lint:auth-test-hermeticity": "node scripts/check-auth-test-hermeticity.mjs",
     "lint:agent-state-dir-hermeticity": "node scripts/check-agent-state-dir-hermeticity.mjs",
     "lint:hindsight-bank-hermeticity": "node scripts/check-hindsight-bank-hermeticity.mjs",
+    "lint:parked-turn-start-hermeticity": "node scripts/check-parked-turn-start-hermeticity.mjs",
     "lint:web-subscription-honest": "node scripts/check-web-subscription-honest.mjs",
     "lint:no-broadcast-delivery": "node scripts/check-no-broadcast-delivery.mjs",
     "lint:gateway-line-ratchet": "node scripts/check-gateway-line-ratchet.mjs",

package/telegram-plugin/bunfig.toml

@@ -3,12 +3,20 @@
 #
 # bun reads the bunfig.toml in its CWD only, so this file exists purely to load
 # the same shared-state hermeticity preloads as the repo-root bunfig.toml. Keep
-# the two in sync; `npm run lint:agent-state-dir-hermeticity` and
-# `npm run lint:hindsight-bank-hermeticity` fail if either bunfig stops loading
-# either guard. Rationale lives in tests/vitest-setup/agent-state-dir-guard.mjs
-# and tests/vitest-setup/hindsight-bank-guard.mjs.
+# the two in sync; `npm run lint:agent-state-dir-hermeticity`,
+# `npm run lint:hindsight-bank-hermeticity` and
+# `npm run lint:parked-turn-start-hermeticity` fail if either bunfig stops
+# loading any of the three guards. Rationale lives in
+# tests/vitest-setup/agent-state-dir-guard.mjs,
+# tests/vitest-setup/hindsight-bank-guard.mjs and
+# tests/vitest-setup/parked-turn-start-guard.mjs.
+#
+# This is the bunfig CI's full plugin sweep reads, so the parked-turn-start
+# guard's blast radius is exactly the ~657-file one-process run that #4611
+# poisoned.
 [test]
 preload = [
   "../tests/vitest-setup/agent-state-dir-guard.mjs",
   "../tests/vitest-setup/hindsight-bank-guard.mjs",
+  "../tests/vitest-setup/parked-turn-start-guard.mjs",
 ]

package/telegram-plugin/dist/gateway/gateway.js

@@ -104467,10 +104467,10 @@ function startOutboxSweep(deps) {
 }
 
 // ../src/build-info.ts
-var VERSION2 = "0.21.5";
-var COMMIT_SHA = "a9aceb2f";
-var COMMIT_DATE = "2026-08-10T21:47:53Z";
-var LATEST_PR = 4603;
+var VERSION2 = "0.21.7";
+var COMMIT_SHA = "e4e50f84";
+var COMMIT_DATE = "2026-08-11T23:08:27Z";
+var LATEST_PR = 4613;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts

package/telegram-plugin/tests/framework-fallback-drains-parked.test.ts

@@ -23,7 +23,7 @@
  * parked store is emptied AND the parked message was handed back into turn
  * processing (its turn begun, its card opened) rather than silently dropped.
  */
-import { describe, it, expect, beforeEach } from 'vitest'
+import { describe, it, expect, beforeEach, afterEach } from 'vitest'
 import {
   handleSessionEvent,
   drainParkedTurnStartsForChat,
@@ -34,9 +34,15 @@ import { buildSilencePokeOptions } from '../gateway/liveness-wiring.js'
 import { makeLivenessFixture, makeTurn, statusKeyForTests } from './helpers/liveness-wiring-fixture.js'
 import { CHAT, enqueue, makeHarness } from './turn-mint-harness.js'
 
+// Module-scope store + one-process `bun test` sweep: resetting on ENTRY alone
+// leaves a mid-park case's entry behind for every later FILE, which makes the
+// obligation sweep read the session as busy for the rest of the run (#4611).
 beforeEach(() => {
   __resetParkedTurnStartsForTest()
 })
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
 
 describe('silence-fallback drains parkedTurnStarts so a hung REPL cannot wedge the park gate', () => {
   it('empties the parked store AND redelivers the parked message into turn processing', async () => {

package/telegram-plugin/tests/parked-turn-start-preload.test.ts

@@ -0,0 +1,65 @@
+import { afterEach, describe, expect, it } from 'bun:test'
+import {
+  handleSessionEvent,
+  __parkedTurnStartCountForTest,
+  __resetParkedTurnStartsForTest,
+} from '../gateway/stream-render.js'
+import { enqueue, makeHarness } from './turn-mint-harness.js'
+
+/**
+ * Runtime alarm for the parked-turn-start leak guard (#4611).
+ *
+ * `parkedTurnStarts` is module-scope by design (one CLI session, one queue) and
+ * `bun test` runs all ~657 telegram-plugin files in ONE process, so a file that
+ * exits mid-park changes global state for every file after it:
+ * `gateway/obligation-wiring.ts` folds the parked count into `sessionBusy`, and
+ * `tests/represent-guard.test.ts`'s idle case then asserts `toHaveLength(1)`
+ * against `0`. Two PRs were ejected from the merge queue that way, with
+ * byte-identical retries passing, because bun's file order is not stable.
+ *
+ * `npm run lint:parked-turn-start-hermeticity` pins the WIRING statically; this
+ * pins the EFFECT, so a bunfig that is present but no longer loading the guard
+ * (wrong relative path, bun config-discovery change) fails a test rather than
+ * silently un-protecting the runner.
+ */
+// This suite deliberately parks, so it follows the discipline the guard
+// enforces for every other suite: reset on EXIT, not just on entry.
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
+
+describe('bun test runs with the parked-turn-start leak guard installed', () => {
+  it('the preload registered the global afterEach', () => {
+    const installed = (globalThis as { __switchroomParkedTurnStartGuard?: { hook: () => void } })
+      .__switchroomParkedTurnStartGuard
+    expect(
+      installed,
+      'guard absent — bunfig.toml `[test] preload` did not load parked-turn-start-guard.mjs',
+    ).toBeTruthy()
+    expect(typeof installed!.hook).toBe('function')
+  })
+
+  it('the hook throws on a leaked entry AND resets the store (one failure, not a cascade)', () => {
+    const { hook } = (globalThis as { __switchroomParkedTurnStartGuard: { hook: () => void } })
+      .__switchroomParkedTurnStartGuard
+
+    // Reproduce the #4611 leak shape: a mid-turn enqueue parks behind a live
+    // turn and is never dequeued — exactly queued-card-surface.test.ts:318.
+    const h = makeHarness()
+    handleSessionEvent(h.deps, enqueue('501'))
+    handleSessionEvent(h.deps, enqueue('502', 'real mid-turn message'))
+    expect(__parkedTurnStartCountForTest()).toBe(1)
+
+    expect(() => hook()).toThrow(/SWITCHROOM_PARKED_TURN_START_LEAK/)
+    // Reset-before-throw is what turns the ~1800-deep victim cascade into one
+    // attributable failure — and is why this test's own leak does not escape.
+    expect(__parkedTurnStartCountForTest()).toBe(0)
+
+    // A clean store is silent.
+    expect(() => hook()).not.toThrow()
+  })
+
+  it('leaves the store clean for the next file', () => {
+    expect(__parkedTurnStartCountForTest()).toBe(0)
+  })
+})

package/telegram-plugin/tests/queued-card-surface.test.ts

@@ -14,7 +14,7 @@
  *   • remove  → the card is finalized as "folded into the current task".
  *   • TTL     → the card is finalized as timed-out, never left frozen.
  */
-import { describe, it, expect, beforeEach } from 'vitest'
+import { describe, it, expect, beforeEach, afterEach } from 'vitest'
 import {
   handleSessionEvent,
   __resetParkedTurnStartsForTest,
@@ -58,9 +58,17 @@ function withRecordingBot(h: Harness) {
  *  stores the card id on the parked envelope) has run. */
 const settle = () => new Promise((r) => setTimeout(r, 0))
 
+// The parked store is module-scope and `bun test` runs all ~657 files in ONE
+// process, so resetting on ENTRY alone is not enough: a case that ends mid-park
+// leaves the entry behind for every later FILE. #4611 — this suite's last case
+// parks msg 502 and never dequeues, and the leftover made the obligation sweep
+// read the session as busy for the rest of the run, failing represent-guard.
 beforeEach(() => {
   __resetParkedTurnStartsForTest()
 })
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
 
 describe('Part B — queued card is posted at park and adopted on dequeue', () => {
   it('parks with a reply-anchored "Queued" card, then EDITS that same card in place on dequeue', async () => {

package/telegram-plugin/tests/stream-render-golden.test.ts

@@ -19,7 +19,7 @@
  * the duplicate. This is the exact duplicate-reply class the shared-singleton
  * injection (never a re-`new`) exists to kill.
  */
-import { describe, it, expect, beforeEach } from 'vitest'
+import { describe, it, expect, beforeEach, afterEach } from 'vitest'
 import { readFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import {
@@ -47,6 +47,15 @@ import {
 import type { CurrentTurn } from '../gateway/gateway.js'
 import type { ReplyOwnerTier } from '../reply-owner-resolve.js'
 
+// The parked turn-start store is module-scope and `bun test` runs every file in
+// ONE process, so the two describe-scoped `beforeEach` resets below clean ENTRY
+// only — a case that ends mid-park still leaks into the next FILE, where the
+// obligation sweep reads the leftover as a busy session (#4611). File-level so
+// it covers every case here, not just the two blocks that reset on entry.
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
+
 /** The owner-resolution shape `resolveReplyOwnerTurn` returns, including the
  *  candidate set the content-gate bypass corroborates against. These fixtures
  *  never exercise the supersede path, so the candidates mirror the resolved turn

package/telegram-plugin/tests/turn-mint-defers-until-dequeue.test.ts

@@ -20,7 +20,7 @@
  * These drive the REAL `handleSessionEvent` (extracted-module golden-harness
  * oracle, same standard as `stream-render-golden.test.ts`).
  */
-import { describe, it, expect, beforeEach, vi } from 'vitest'
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
 import {
   handleSessionEvent,
   __resetParkedTurnStartsForTest,
@@ -29,9 +29,15 @@ import {
 import { projectTranscriptLine } from '../session-tail.js'
 import { CHAT, enqueue, inbound, makeHarness } from './turn-mint-harness.js'
 
+// Module-scope store + one-process `bun test` sweep: resetting on ENTRY alone
+// leaves a mid-park case's entry behind for every later FILE, which makes the
+// obligation sweep read the session as busy for the rest of the run (#4611).
 beforeEach(() => {
   __resetParkedTurnStartsForTest()
 })
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
 
 describe('#3927 FIX A — a mid-turn enqueue parks; the turn mints on dequeue', () => {
   it('a second enqueue while turn A is live opens NO card, does not steal the slot, ' +

package/telegram-plugin/tests/turn-supersede-finalizes-prior-card.test.ts

@@ -25,7 +25,7 @@
  * mints straight on top of it. That is the exact orphan carrie hit, and it is
  * what FIX B finalizes.
  */
-import { describe, it, expect, beforeEach } from 'vitest'
+import { describe, it, expect, beforeEach, afterEach } from 'vitest'
 import {
   handleSessionEvent,
   __resetParkedTurnStartsForTest,
@@ -45,9 +45,15 @@ function syntheticEnqueue(chatId: string, text: string) {
   }
 }
 
+// Module-scope store + one-process `bun test` sweep: resetting on ENTRY alone
+// leaves a mid-park case's entry behind for every later FILE, which makes the
+// obligation sweep read the session as busy for the rest of the run (#4611).
 beforeEach(() => {
   __resetParkedTurnStartsForTest()
 })
+afterEach(() => {
+  __resetParkedTurnStartsForTest()
+})
 
 describe('#3927 FIX B — superseding a live turn finalizes its card', () => {
   it('a dequeue-driven mint on top of a never-ended turn calls clearActivitySummary ' +