feat(telegram): add session controls

[Maximooch]

Summary

Adds the curated Telegram controls requested after the live smoke test, stacked on #87.

• add session-scoped /model, /reasoning, and /fast controls with direct commands and durable inline pickers
• add bounded owner-lane /sessions history and safe one-tap rebinding
• add curated /settings for model, reasoning, fast mode, plan/build mode, session, permissions, and per-binding streaming
• resolve a fresh request-owned runtime inside the session gate; never mutate process-global model state or expose credentials
• keep control callbacks recipient-scoped, restart-safe, replay-safe, lease-renewed, paginated, and stale/busy fail-closed
• preserve configured-agent ownership and make failed session preference saves transactional across memory, index, primary file, and backup
• document the controls and intentionally omit arbitrary Telegram YAML editing

Why

The first Telegram smoke test showed that approvals worked but also highlighted the need for TUI-style model/session controls. These controls belong to the Penguin session or Telegram binding, not the server-wide configuration, so switching a Telegram lane cannot race or reconfigure unrelated clients.

Validation

• TELEGRAM_BOT_TOKEN=test-only-token uv run pytest -q tests/channels tests/integrations/telegram tests/core_runtime/test_process_lifecycle.py — 235 passed
• Ruff check and format check across channel and Telegram source/tests
• Python 3.9 byte-compilation of all changed runtime modules
• credential-pattern scan clean
• manager.py and store.py remain below 2,000 lines

Stack

• Base: feat(telegram): add durable support through Phase 5 #87 (codex/penguin-telegram-phases-0-5)
• This PR contains only the Telegram controls follow-up.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
penguin	Ready	Preview	Aug 12, 2026 1:30am

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 693c25b3-135a-468c-a3cf-343c549a2a07

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}