@blockrun/franklin 3.15.38 → 3.15.40

package/dist/session/storage.js

@@ -21,7 +21,17 @@ export function setSessionPersistenceDisabled(disabled) {
     persistenceDisabled = disabled;
 }
 export function isSessionPersistenceDisabled() {
-    return persistenceDisabled;
+    // Also honor FRANKLIN_NO_PERSIST — a separate env var, deliberately
+    // NOT piggybacking on FRANKLIN_NO_AUDIT. test/local.mjs sets
+    // FRANKLIN_NO_AUDIT=1 at file level expecting session writes to
+    // keep working so resume tests can verify state on disk; that
+    // contract has to stay intact. FRANKLIN_NO_PERSIST is used by
+    // test/e2e.mjs to block home-dir writes from spawned franklin
+    // children. Verified 2026-05-04: prior e2e runs left 3 ghost
+    // session metas in the user's ~/.blockrun/sessions/ because real
+    // model names (zai/glm-5.1, nvidia/qwen3-coder-480b) escaped
+    // isTestFixtureModel()'s name-prefix gate.
+    return persistenceDisabled || process.env.FRANKLIN_NO_PERSIST === '1';
 }
 function getSessionsDir() {
     if (resolvedSessionsDir)
@@ -83,7 +93,7 @@ export function createSessionId() {
  * Save a message to the session transcript (append-only JSONL).
  */
 export function appendToSession(sessionId, message) {
-    if (persistenceDisabled)
+    if (isSessionPersistenceDisabled())
         return;
     const line = JSON.stringify(message) + '\n';
     withWritableSessionDir(() => {
@@ -94,7 +104,7 @@ export function appendToSession(sessionId, message) {
  * Update session metadata.
  */
 export function updateSessionMeta(sessionId, meta) {
-    if (persistenceDisabled)
+    if (isSessionPersistenceDisabled())
         return;
     withWritableSessionDir(() => {
         const existing = loadSessionMeta(sessionId);

package/dist/tools/bash.js

@@ -2,6 +2,7 @@
  * Bash capability — execute shell commands with timeout and output capture.
  */
 import { spawn } from 'node:child_process';
+import fs from 'node:fs';
 // ─── Smart Output Compression ─────────────────────────────────────────────
 // Learned from RTK (Rust Token Killer): strip noise before sending to LLM.
 // Applied after capture, before the 32KB cap — reduces tokens on verbose commands.
@@ -273,7 +274,19 @@ async function execute(input, ctx) {
 }
 function executeCommand(command, timeoutMs, ctx) {
     return new Promise((resolve) => {
-        const shell = process.env.SHELL || '/bin/bash';
+        // Force /bin/bash (not $SHELL) so the tool's behavior matches its name
+        // and its tool description. Pre-3.15.39 used `process.env.SHELL ||
+        // '/bin/bash'`, which on macOS defaults to zsh — and zsh has
+        // semantically different rules (NOMATCH on unmatched globs is fatal,
+        // unlike bash's literal-passthrough). Verified 2026-05-04 from a real
+        // session: agent ran `rm -f data/etl_out/shard-*.ndjson` expecting
+        // bash's "if no match, -f ignores it"; zsh fatal-erred with `no
+        // matches found`. Other zsh-vs-bash divergences (process substitution
+        // syntax, `[[` bashisms in scripts, parameter expansion edge cases)
+        // would silently bite agents that learned bash. /bin/bash exists on
+        // every Linux + macOS install we ship to. Fall back to $SHELL only if
+        // /bin/bash is somehow missing (NixOS-style stores, exotic Docker).
+        const shell = fs.existsSync('/bin/bash') ? '/bin/bash' : (process.env.SHELL || '/bin/sh');
         let child;
         try {
             child = spawn(shell, ['-c', command], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/franklin",
-  "version": "3.15.38",
+  "version": "3.15.40",
   "description": "Franklin — The AI agent with a wallet. Spends USDC autonomously to get real work done. Pay per action, no subscriptions.",
   "type": "module",
   "exports": {