@inetafrica/open-claudia 3.0.8 → 3.0.10

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## v3.0.10 — Kazee-only pods are first-class
+
+- **/doctor no longer demands Telegram env on a Kazee-only install.** `health.js` required `TELEGRAM_BOT_TOKEN`/`TELEGRAM_CHAT_ID` unconditionally — a pod provisioned with `CHANNELS=kazee` failed its env check despite being perfectly configured. Required keys are now derived from `CHANNELS` (default `telegram`, preserving legacy behaviour): telegram installs require the Telegram pair, kazee installs require `KAZEE_BOT_TOKEN`, and `WORKSPACE` stays universal.
+- **Kazee owner bootstrap stores the right identity in the right key.** `/auth` bootstrap on a kazee transport wrote the chat-document id into `TELEGRAM_CHAT_ID` — the wrong id (owner checks compare the Kazee *user* id) in the wrong key (polluting Telegram's authorized list). It now writes `KAZEE_OWNER_USER_ID` with the sender's user id and updates the in-memory config so ownership is live without a restart.
+- **An env-provisioned Kazee owner counts as an owner.** `hasOwner()` only looked at `TELEGRAM_CHAT_ID` and auth.json — on a Kazee-only pod provisioned with `KAZEE_OWNER_USER_ID` (the agent-space wizard path), the first stranger to send `/auth` would have been crowned bootstrap owner. `KAZEE_OWNER_USER_ID` now counts.
+- **Agent-space / OpenClaw:** no new deps, no new env, no schema change; Docker image builds identically (FROM the pre-baked `:base`). This is the bot-side half of Kazee pod provisioning via the agent-space wizard (wizard + provisioner land in agent-space itself). Coverage: new hermetic `test-kazee-channel-health.js` (required-key matrix; kazee bootstrap env writes; provisioned-owner /auth guard), wired into `npm test` and shipped in `files`.
+
+## v3.0.9 — one fat record no longer kills the turn
+
+- **Decoder failures are warnings, not run failures.** The v3 JSONL stream decoder capped provider records at 1MB and surfaced any oversized or malformed line as a terminal `error` event — so a single base64-image tool result (routine in image workflows) killed an otherwise healthy live turn with `Claude Code run failed: Provider JSONL record exceeded 1048576 bytes` (rahil, v3.0.8, 2026-07-12). `LINE_TOO_LARGE` / `MALFORMED_JSON` now normalize to a new non-terminal `warning` event: the record is skipped, the stream continues, and the warning is logged. If the dropped line happened to be the terminal record, the existing `PROVIDER_MISSING_TERMINAL` net still fails the run cleanly.
+- **Line cap raised 1MB → 16MB.** Image-bearing records are legitimate; the cap now exists to bound memory, not to police normal payloads.
+- **Agent-space / OpenClaw:** no new deps, no new env, no schema change; Docker image builds identically (FROM the pre-baked `:base`). Coverage: warning-shape assertions in `test-provider-events.js`, default-cap pin in `test-provider-stream-decoder.js`.
+
 ## v3.0.6 — cache-bust burn is now a one-line query
 
 - **Usage records carry a `coldStart` flag.** The restart→cache-bust burn (each bot restart re-bills the whole accumulated window as cache *writes* instead of ~13×-cheaper cache *reads*) was invisible to every token-count analysis — same token counts, different price class — and took a forensic reconstruction of the 22-day usage history to quantify (~8% of all spend, ~$12/day at its worst). Now the first usage record a process writes for each session is tagged `coldStart: true`: a cold start mid-conversation is the restart fingerprint, so the burn is one jq filter away instead of a modelling exercise. Records already carried `cacheReadTokens`/`cacheCreationTokens`; this adds the missing "was the cache necessarily cold?" dimension.

package/core/access.js

@@ -169,6 +169,10 @@ function listAuthorizedRaw() {
 
 function hasOwner() {
   if (CHAT_ID) return true;
+  // A provisioned Kazee owner (env-injected or set via /channel add) counts
+  // before their first message — otherwise a stranger's /auth on a
+  // Kazee-only pod would seize ownership.
+  if (config.KAZEE_OWNER_USER_ID) return true;
   try {
     const auth = JSON.parse(fs.readFileSync(AUTH_FILE, "utf-8"));
     return Array.isArray(auth.authorized) && auth.authorized.some((a) => a.isOwner === true);
@@ -190,6 +194,15 @@ function bootstrapOwner({ chatId, name, username }) {
     authorizedAt: new Date().toISOString(),
   });
   saveAuth(auth);
+  if (currentTransport() === "kazee") {
+    // Kazee owner identity is the user id (what transportOwnerUserId
+    // compares), not the chat-document id the envelope carries as chatId —
+    // and it must never be written into TELEGRAM_CHAT_ID.
+    const ownerUserId = String(currentUserId() || id);
+    saveEnvKey("KAZEE_OWNER_USER_ID", ownerUserId);
+    config.KAZEE_OWNER_USER_ID = ownerUserId;
+    return;
+  }
   if (!CHAT_IDS.includes(id)) CHAT_IDS.push(id);
   saveEnvKey("TELEGRAM_CHAT_ID", CHAT_IDS.join(","));
 }

package/core/providers/events.js

@@ -10,9 +10,12 @@ const NORMALIZED_EVENT_TYPES = Object.freeze([
   "usage",
   "result",
   "error",
+  "warning",
 ]);
 
-const DEFAULT_MAX_LINE_BYTES = 1024 * 1024;
+// 16MB: tool results carrying base64 images legitimately exceed 1MB — the old
+// cap killed rahil's image-workflow turn (v3.0.8) on a single oversized record.
+const DEFAULT_MAX_LINE_BYTES = 16 * 1024 * 1024;
 
 function decoderError(code, message, details = {}) {
   return { type: "decoder.error", code, message, ...details };
@@ -133,11 +136,13 @@ function providerErrorFlags(message) {
 
 function normalizeDecoderError(rawEvent) {
   if (!rawEvent || rawEvent.type !== "decoder.error") return null;
+  // Warning, not error: a single oversized or malformed record is skippable.
+  // If the dropped line was the terminal record, PROVIDER_MISSING_TERMINAL
+  // still fails the run cleanly.
   return {
-    type: "error",
+    type: "warning",
+    code: rawEvent.code || "DECODER_ERROR",
     message: rawEvent.message || "Provider stream decoding failed",
-    authError: false,
-    usageLimit: false,
   };
 }
 

package/core/runner.js

@@ -361,6 +361,8 @@ async function executeProviderInvocation(options = {}) {
     } else if (event.type === "error") {
       terminalSeen = true;
       rawErrors.push(event);
+    } else if (event.type === "warning") {
+      console.error("provider stream warning:", redactSensitive(String(event.message || event.code || "unknown")));
     }
     if (onEvent) {
       eventChain = eventChain.then(() => onEvent(event)).catch((error) => {

package/health.js

@@ -8,12 +8,20 @@ const { inspectProviderConfiguration } = require("./core/provider-status");
 const ENV_FILE = path.join(CONFIG_DIR, ".env");
 const AUTH_FILE = path.join(CONFIG_DIR, "auth.json");
 
-// Required env keys for the bot to function
-const REQUIRED_ENV_KEYS = [
-  "TELEGRAM_BOT_TOKEN",
-  "TELEGRAM_CHAT_ID",
-  "WORKSPACE",
-];
+// Required env keys depend on which channels the install runs: WORKSPACE is
+// universal, and each channel listed in CHANNELS (default telegram) adds its
+// own keys — a Kazee-only pod must not fail /doctor over missing Telegram env.
+function requiredEnvKeys(env = {}) {
+  const channels = String(env.CHANNELS || "telegram")
+    .split(",")
+    .map((entry) => entry.trim().split(":")[0])
+    .filter(Boolean);
+  const keys = [];
+  if (channels.includes("telegram")) keys.push("TELEGRAM_BOT_TOKEN", "TELEGRAM_CHAT_ID");
+  if (channels.includes("kazee")) keys.push("KAZEE_BOT_TOKEN");
+  keys.push("WORKSPACE");
+  return keys;
+}
 
 // Optional but recommended
 const OPTIONAL_ENV_KEYS = [
@@ -255,7 +263,7 @@ async function runHealthChecks(options = {}) {
     return results;
   }
 
-  const missingKeys = REQUIRED_ENV_KEYS.filter((k) => !env[k]);
+  const missingKeys = requiredEnvKeys(env).filter((k) => !env[k]);
   if (missingKeys.length > 0) {
     results.checks.env = { ok: false, reason: "missing_keys", message: `Missing required config: ${missingKeys.join(", ")}`, missingKeys };
     results.ok = false;
@@ -471,6 +479,6 @@ module.exports = {
   ensureSetup,
   formatSetupResults,
   ensureAgentBrowser,
-  REQUIRED_ENV_KEYS,
+  requiredEnvKeys,
   OPTIONAL_ENV_KEYS,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.0.8",
+  "version": "3.0.10",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -9,7 +9,7 @@
   "scripts": {
     "setup": "node setup.js",
     "start": "node bot.js",
-    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js",
+    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js",
     "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js"
   },
   "files": [
@@ -65,6 +65,7 @@
     "test-enforcer.js",
     "test-identity-prune.js",
     "test-kazee-message-id.js",
+    "test-kazee-channel-health.js",
     "test-delivery-contract.js",
     "test-run-lock.js",
     "test-web-sessions.js",

package/test-kazee-channel-health.js

@@ -0,0 +1,135 @@
+#!/usr/bin/env node
+
+"use strict";
+
+const assert = require("assert");
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+const { spawnSync } = require("child_process");
+
+if (process.argv[2] === "--owner-probe") {
+  (async () => {
+    const { runInChat } = require("./core/context");
+    const access = require("./core/access");
+    const { config } = require("./core/config");
+
+    if (process.env.PROBE_MODE === "provisioned") {
+      // Agent-space injects KAZEE_OWNER_USER_ID at provision time: the owner
+      // exists before their first message, so a stranger's /auth must not
+      // reach the bootstrap path.
+      assert.strictEqual(access.hasOwner(), true, "env-provisioned kazee owner counts as owner");
+      console.log("OWNER_PROBE_OK");
+      return;
+    }
+
+    assert.strictEqual(access.hasOwner(), false, "fresh kazee pod starts ownerless");
+    await runInChat({
+      adapter: { type: "kazee", id: "kazee" },
+      channelId: "chat-doc-1",
+      canonicalUserId: "kazee:user-77",
+      userId: "user-77",
+      transport: "kazee",
+    }, async () => {
+      access.bootstrapOwner({ chatId: "chat-doc-1", name: "Owner", username: "" });
+    });
+
+    const env = fs.readFileSync(path.join(process.env.OPEN_CLAUDIA_CONFIG_DIR, ".env"), "utf8");
+    assert.match(env, /^KAZEE_OWNER_USER_ID=user-77$/m, "kazee bootstrap stores the owner USER id");
+    assert.ok(!/^TELEGRAM_CHAT_ID=.*(chat-doc-1|user-77)/m.test(env), "kazee ids must never land in TELEGRAM_CHAT_ID");
+    assert.strictEqual(config.KAZEE_OWNER_USER_ID, "user-77", "owner is live without a restart");
+    assert.strictEqual(access.hasOwner(), true);
+
+    await runInChat({
+      adapter: { type: "kazee", id: "kazee" },
+      channelId: "chat-doc-2",
+      canonicalUserId: "kazee:user-77",
+      userId: "user-77",
+      transport: "kazee",
+    }, async () => {
+      assert.strictEqual(access.isChatOwner("chat-doc-2"), true, "owner matches by user id from any kazee chat");
+      assert.strictEqual(access.isChatAuthorized("chat-doc-2"), true);
+    });
+
+    await runInChat({
+      adapter: { type: "kazee", id: "kazee" },
+      channelId: "chat-doc-3",
+      canonicalUserId: "kazee:stranger-1",
+      userId: "stranger-1",
+      transport: "kazee",
+    }, async () => {
+      assert.strictEqual(access.isChatOwner("chat-doc-3"), false, "strangers are not owner");
+    });
+
+    console.log("OWNER_PROBE_OK");
+  })().catch((error) => {
+    process.stderr.write(`${error.stack || error.message}\n`);
+    process.exitCode = 1;
+  });
+} else {
+  const { requiredEnvKeys } = require("./health");
+
+  assert.deepStrictEqual(
+    requiredEnvKeys({}),
+    ["TELEGRAM_BOT_TOKEN", "TELEGRAM_CHAT_ID", "WORKSPACE"],
+    "no CHANNELS keeps the legacy telegram requirement",
+  );
+  assert.deepStrictEqual(
+    requiredEnvKeys({ CHANNELS: "kazee" }),
+    ["KAZEE_BOT_TOKEN", "WORKSPACE"],
+    "a kazee-only pod must not require telegram env",
+  );
+  assert.deepStrictEqual(
+    requiredEnvKeys({ CHANNELS: "telegram, kazee:main" }),
+    ["TELEGRAM_BOT_TOKEN", "TELEGRAM_CHAT_ID", "KAZEE_BOT_TOKEN", "WORKSPACE"],
+    "dual-channel installs require both, id overrides included",
+  );
+  assert.deepStrictEqual(requiredEnvKeys({ CHANNELS: "voice" }), ["WORKSPACE"]);
+
+  const scenarios = [
+    { name: "bootstrap", mode: "bootstrap", envLines: [
+      "CHANNELS=kazee",
+      "KAZEE_BOT_TOKEN=fixture-kazee-token",
+      "KAZEE_BOT_USER_ID=bot-1",
+    ] },
+    { name: "provisioned", mode: "provisioned", envLines: [
+      "CHANNELS=kazee",
+      "KAZEE_BOT_TOKEN=fixture-kazee-token",
+      "KAZEE_BOT_USER_ID=bot-1",
+      "KAZEE_OWNER_USER_ID=owner-1",
+    ] },
+  ];
+
+  for (const scenario of scenarios) {
+    const temp = fs.mkdtempSync(path.join(os.tmpdir(), `open-claudia-kazee-${scenario.name}-`));
+    try {
+      const configDir = path.join(temp, "config");
+      const workspace = path.join(temp, "workspace");
+      fs.mkdirSync(configDir);
+      fs.mkdirSync(workspace);
+      fs.writeFileSync(
+        path.join(configDir, ".env"),
+        `${scenario.envLines.join("\n")}\nWORKSPACE=${workspace}\n`,
+      );
+      const child = spawnSync(process.execPath, [__filename, "--owner-probe"], {
+        cwd: __dirname,
+        env: {
+          HOME: path.join(temp, "config"),
+          PATH: [path.dirname(process.execPath), "/usr/bin", "/bin"].join(path.delimiter),
+          OPEN_CLAUDIA_CONFIG_DIR: configDir,
+          OPEN_CLAUDIA_TEST: "1",
+          PROBE_MODE: scenario.mode,
+        },
+        encoding: "utf8",
+        timeout: 30000,
+      });
+      assert.ifError(child.error);
+      assert.strictEqual(child.status, 0, `${scenario.name}: ${child.stderr || child.stdout}`);
+      assert.match(child.stdout, /OWNER_PROBE_OK/, scenario.name);
+    } finally {
+      fs.rmSync(temp, { recursive: true, force: true });
+    }
+  }
+
+  console.log("kazee channel health OK");
+}

package/test-provider-events.js

@@ -24,6 +24,7 @@ assert.deepStrictEqual([...NORMALIZED_EVENT_TYPES].sort(), [
   "tool_end",
   "tool_start",
   "usage",
+  "warning",
 ].sort());
 
 const claudeState = createClaudeParserState();
@@ -154,10 +155,10 @@ assert.deepStrictEqual(codexAuth, [{
 
 const decoderError = { type: "decoder.error", code: "MALFORMED_JSON", message: "Malformed provider JSONL record" };
 assert.deepStrictEqual(normalizeClaudeEvent(decoderError, createClaudeParserState()), [{
-  type: "error", message: "Malformed provider JSONL record", authError: false, usageLimit: false,
-}]);
+  type: "warning", code: "MALFORMED_JSON", message: "Malformed provider JSONL record",
+}], "decoder failures must be non-fatal warnings, not run-killing errors");
 assert.deepStrictEqual(normalizeCodexEvent(decoderError, createCodexParserState()), [{
-  type: "error", message: "Malformed provider JSONL record", authError: false, usageLimit: false,
+  type: "warning", code: "MALFORMED_JSON", message: "Malformed provider JSONL record",
 }]);
 
 assert.deepStrictEqual(normalizeClaudeEvent({ type: "future.claude.event" }, createClaudeParserState()), []);

package/test-provider-language.js

@@ -32,11 +32,11 @@ assert.doesNotMatch(setup, /Your Claude Code bot is connected|Description=Claude
 
 const pkg = JSON.parse(read("package.json"));
 assert.match(pkg.description, /provider-agnostic coding-agent harness/i);
-// 3.0.8 approved by Sumeet 2026-07-12 (fast-path release after the v3.0.7
-// docker image was cancelled mid-build: same code as 3.0.7 — zombie-poll-loop
-// fix + turn-observer restore — plus the pre-baked :base CI image and codex
-// gpt-5.6-sol-pro / max / ultra support).
-assert.strictEqual(pkg.version, "3.0.8", "release version must remain unchanged without explicit approval");
+// 3.0.10 approved by Sumeet 2026-07-13 ("Do the whole stack from end go
+// finish now then deploy it all out for me"): Kazee-only pods for the
+// agent-space wizard — channel-aware required env keys in health.js, and
+// kazee owner bootstrap writes KAZEE_OWNER_USER_ID, never TELEGRAM_CHAT_ID.
+assert.strictEqual(pkg.version, "3.0.10", "release version must remain unchanged without explicit approval");
 for (const keyword of ["claude", "codex", "coding-agent", "provider-agnostic"]) {
   assert.ok(pkg.keywords.includes(keyword), `package keyword missing: ${keyword}`);
 }

package/test-provider-run-lifecycle.js

@@ -232,8 +232,29 @@ async function main() {
     proc.stdout.end();
     proc.emit("close", 0, null);
     const malformed = await malformedRun;
-    assert.strictEqual(malformed.ok, false);
-    assert.match(malformed.error.message, /Malformed provider JSONL record/);
+    // A single bad record is skipped (warning), not fatal: a >1MB base64-image
+    // tool result killed a healthy live turn on v3.0.8.
+    assert.strictEqual(malformed.ok, true, "one undecodable record must not fail a run that reached its terminal event");
+    assert.strictEqual(malformed.text, "fixture");
+  }
+
+  {
+    // But if the stream NEVER recovers a terminal event, the run still fails.
+    const proc = fakeChild();
+    const lostTerminalRun = executeProviderInvocation({
+      runContext: context(),
+      provider: provider(),
+      invocation: invocation(),
+      cwd: "/fixture/project",
+      spawnProcess: () => proc,
+      cleanup: async () => {},
+    });
+    proc.stdout.write("{not-json}\n");
+    proc.stdout.end();
+    proc.emit("close", 0, null);
+    const lostTerminal = await lostTerminalRun;
+    assert.strictEqual(lostTerminal.ok, false);
+    assert.match(lostTerminal.error.message, /terminal/i);
   }
 
   {

package/test-provider-stream-decoder.js

@@ -3,7 +3,13 @@
 "use strict";
 
 const assert = require("assert");
-const { createJsonlDecoder } = require("./core/providers/events");
+const { createJsonlDecoder, DEFAULT_MAX_LINE_BYTES } = require("./core/providers/events");
+
+assert.strictEqual(
+  DEFAULT_MAX_LINE_BYTES,
+  16 * 1024 * 1024,
+  "default line cap must fit base64-image tool results (1MB cap killed live image turns in v3.0.8)",
+);
 
 const unicodeEvent = { type: "fixture", text: "café 👋" };
 const unicodeLine = Buffer.from(`${JSON.stringify(unicodeEvent)}\n`, "utf8");