@inetafrica/open-claudia 3.2.3 → 3.3.2

package/core/router.js

@@ -63,15 +63,24 @@ async function deliverRouterError(error) {
 // person is still caught once the owner's channels are unified.
 const processedMessages = new Set();
 function isDuplicate(envelope) {
+  // Memoized per envelope object: the unauthorized path checks dedup before
+  // intro handling, then falls through to the normal handlers (which check
+  // again) when a known sender's chat was auto-adopted — that second check
+  // must not mistake the envelope's own first check for a redelivery.
+  if (envelope._dedupSeen !== undefined) return envelope._dedupSeen;
   const canonical = envelope.canonicalUserId || envelope.channelId;
   const key = `${canonical}:${envelope.adapter?.id || envelope.adapter?.type}:${envelope.messageId}`;
-  if (processedMessages.has(key)) return true;
+  if (processedMessages.has(key)) {
+    envelope._dedupSeen = true;
+    return true;
+  }
   processedMessages.add(key);
   if (processedMessages.size > 400) {
     const arr = [...processedMessages];
     processedMessages.clear();
     arr.slice(-200).forEach((k) => processedMessages.add(k));
   }
+  envelope._dedupSeen = false;
   return false;
 }
 
@@ -141,11 +150,12 @@ async function onMessage(envelope) {
       }
 
       if (!isChatAuthorized(envelope.channelId, envelope)) {
-        if (envelope.type === "text") {
-          if (isDuplicate(envelope)) return;
-          await introFlow.handleInbound(envelope, (text) => send(text));
-        }
-        return;
+        if (envelope.type !== "text") return;
+        if (isDuplicate(envelope)) return;
+        const consumed = await introFlow.handleInbound(envelope, (text) => send(text));
+        if (consumed) return;
+        // false = a transport-verified known sender was auto-adopted and the
+        // channel is authorized now — fall through and handle the turn.
       }
 
       // Auto-contact: an authorized speaker the people store doesn't know yet
@@ -604,7 +614,7 @@ async function handleText(envelope) {
         // ("... for 14d" / "... until 2026-08-30").
         const { text: coreRule, expiresAt } = require("./mandates").extractExpiry(ruleText);
         const r = require("./actions").appendMandateLine(
-          { entitySlug: pend.entitySlug, personName: pend.personName },
+          { entitySlug: pend.entitySlug, personId: pend.personId, personName: pend.personName },
           coreRule,
           "owner added a per-person rule via approval card",
           { expiresAt },

package/core/runner.js

@@ -1707,7 +1707,13 @@ function decorateForegroundInvocation(invocation, runContext, bundle) {
     if (runContext.origin?.adapterId) env.OC_CHANNEL_ADAPTER = runContext.origin.adapterId;
     if (runContext.channelId) env.OC_CHANNEL_ID = String(runContext.channelId);
     if (runContext.origin?.userId) env.OC_CHANNEL_USER_ID = String(runContext.origin.userId);
-    if (runContext.canonicalUserId) env.OC_CANONICAL_USER_ID = String(runContext.canonicalUserId);
+    if (runContext.canonicalUserId) {
+      env.OC_CANONICAL_USER_ID = String(runContext.canonicalUserId);
+      // Server-side attestation of the id above: the loopback's owner-gated
+      // kinds only honor a canonicalUserId whose attest verifies, so a shell
+      // that rewrites OC_CANONICAL_USER_ID cannot impersonate the owner.
+      try { env.OC_SPEAKER_ATTEST = require("./speaker-attest").mint(runContext.canonicalUserId); } catch (e) {}
+    }
     if (runContext.sessionId) env.OC_LAST_SESSION_ID = String(runContext.sessionId);
     if (lb?.url) env.OC_SEND_URL = lb.url;
   }

package/core/speaker-attest.js

@@ -0,0 +1,56 @@
+// Speaker attestation: lets the loopback server trust OC_CANONICAL_USER_ID.
+//
+// The problem: the loopback's owner-gated kinds (people mutations, auth,
+// intros) identified the caller by payload.canonicalUserId, which the CLI read
+// from env — and env is writable by the agent's shell, so a guarded external
+// turn could forge `OC_CANONICAL_USER_ID=<owner-id> open-claudia people link …`
+// and rewrite the identity map the relationship guard depends on.
+//
+// The fix: the RUNNER (which knows the turn's true speaker from the inbound
+// envelope, server-side) mints an HMAC over the canonical user id with a
+// per-boot secret that lives ONLY in bot-process memory — never on disk, never
+// in the loopback info file, stripped from provider env like all control-plane
+// keys would be (it is simply never exported). The provider spawn env carries
+// OC_SPEAKER_ATTEST next to OC_CANONICAL_USER_ID; the CLI forwards both; the
+// loopback verifies the pair before honoring an owner claim. An agent can
+// still LIE about OC_CANONICAL_USER_ID, but it cannot mint a matching
+// signature for any id other than the one the runner stamped for its turn.
+//
+// Scope and honesty: this authenticates "the runner said this turn speaks as
+// X". It is per-boot (a restart invalidates in-flight attests — same blast
+// radius as the loopback port/token rotating) and deliberately unforgeable
+// rather than merely obscure: no attest, wrong attest, or an attest for a
+// different id all fail closed. It does NOT bind adapter/channel — those stay
+// best-effort inputs to the guarded-speaker checks, whose spoof failure modes
+// are self-limiting (buttons/files land on the spoofed channel, i.e. the
+// owner's own chat, never silently on the attacker's).
+
+const crypto = require("crypto");
+
+// Lazily created so tests get a fresh secret per process, like production.
+let SECRET = null;
+
+function secret() {
+  if (!SECRET) SECRET = crypto.randomBytes(32);
+  return SECRET;
+}
+
+function mint(canonicalUserId) {
+  const id = String(canonicalUserId || "");
+  if (!id) return "";
+  return crypto.createHmac("sha256", secret()).update(id).digest("hex");
+}
+
+// Constant-time compare; every malformed shape is a plain false (fail closed).
+function verify(canonicalUserId, attest) {
+  const id = String(canonicalUserId || "");
+  const sig = String(attest || "");
+  if (!id || !sig) return false;
+  const expected = mint(id);
+  const a = Buffer.from(sig, "utf-8");
+  const b = Buffer.from(expected, "utf-8");
+  if (a.length !== b.length) return false;
+  try { return crypto.timingSafeEqual(a, b); } catch (e) { return false; }
+}
+
+module.exports = { mint, verify };

package/core/system-prompt.js

@@ -865,20 +865,29 @@ function buildSpeakerPersonaBlock(opts = {}) {
   if (!speaker.isOwner && (s.Mandate || "").trim()) {
     rows.push(`Mandate — what you may do/discuss with them: ${s.Mandate.trim()}`);
   }
-  if (rows.length === 0) return "";
+  // A bare note used to render nothing — which hid the guard's policy source
+  // exactly when it mattered most (auto-added stubs are born bare, so the
+  // agent couldn't see WHICH file governs the speaker, or that a same-named
+  // note elsewhere is a different identity). For non-owners the block always
+  // renders; an owner with an empty note still gets the quiet no-op.
+  if (rows.length === 0 && speaker.isOwner) return "";
   const runIdentity = promptDedupeIdentity(opts);
   const key = `${adapter.id || "?"}:${channelId}`;
   const stamp = `${runIdentity}:${slug}:${ent.updated}`;
   if (speakerPersonaInjectedFor.get(key) === stamp) return "";
   speakerPersonaInjectedFor.set(key, stamp);
   const rel = ent.relationship || (speaker.isOwner ? "owner" : "");
+  const unverified = !speaker.isOwner && !!speaker.autoCreated;
   const clip = (str) => (str.length > SPEAKER_PERSONA_MAX_CHARS ? str.slice(0, SPEAKER_PERSONA_MAX_CHARS) + "\n…[truncated — `open-claudia entity show " + slug + "`]" : str);
   return clip([
-    `\n\n## Who you're speaking with: ${speaker.name}${rel ? ` (${rel})` : ""}`,
+    `\n\n## Who you're speaking with: ${speaker.name}${rel ? ` (${rel})` : ""}${unverified ? " — UNVERIFIED auto-added contact" : ""}`,
     `Their persona pack (source: ${entitiesLib.ENTITIES_DIR}/${slug}.md) — adapt your voice and scope to it. Edit that file to refine how you treat them.`,
+    ...(speaker.isOwner ? [] : [
+      `That file is the ONLY note the relationship guard reads for them — a same-named note anywhere else belongs to a DIFFERENT identity and grants nothing here.${unverified ? " The owner has not yet confirmed who they are (verification happens on the owner's approval card or /people verify)." : ""}`,
+    ]),
     "",
     rows.join("\n"),
-  ].join("\n"));
+  ].join("\n")).trimEnd();
 }
 
 // External-mode posture block (Phase 3). For a non-owner (guarded) speaker,
@@ -896,9 +905,17 @@ function buildExternalModeBlock() {
   const who = speaker.name || "this person";
   const mandate = (speaker.mandate || "").trim();
   const unverified = !!(speaker.person && speaker.person.autoCreated);
+  let sourceLine = "";
+  if (speaker.slug) {
+    try {
+      const entitiesLib = require("./entities");
+      sourceLine = `Guard policy source: ${entitiesLib.ENTITIES_DIR}/${speaker.slug}.md — the ONLY note the guard reads for ${who}. A same-named note elsewhere is a different identity and grants nothing here.`;
+    } catch (e) {}
+  }
   const lines = [
     `\n\n## External speaker — restricted mode`,
-    `You are talking to ${who}, who is NOT the owner. You are operating under a strict, owner-defined scope.`,
+    `You are talking to ${who}, who is NOT the owner. You are operating under a strict, owner-defined scope.${unverified ? ` Their identity is UNVERIFIED (auto-added on first contact — only the owner can verify them, via the approval card or /people verify).` : ""}`,
+    ...(sourceLine ? [sourceLine] : []),
     "",
     mandate
       ? `Mandate — the ONLY things you are cleared to do or discuss with ${who}:\n${mandate}`

package/core/verify-contact.js

@@ -0,0 +1,156 @@
+// Owner verification of auto-added contacts — the second half of the
+// ensureContact story. ensureContact deliberately NEVER links a first-time
+// speaker to an existing note by display name (names are claimable, so that
+// would be an impersonation path); it mints an unverified stub instead. This
+// module gives the OWNER the explicit, audited act that closes the loop:
+// confirm who the speaker is, optionally bind them to the existing trusted
+// note, retire the stub, and clear the unverified flag the enforcer surfaces.
+//
+// Security invariants (each refusal below is one of them):
+// - Verification is an OWNER decision arriving via a chat-envelope surface
+//   (approval-card button / /people slash command). There is deliberately no
+//   CLI or loopback verb: identity decisions never run on agent-forgeable
+//   input. Callers must gate on the transport envelope BEFORE calling here.
+// - Verification is NOT trust: it settles who the person is. Relationship
+//   upgrades and mandate lines remain separate explicit owner grants.
+// - Never link to an owner-relationship note (R1 defense-in-depth: speakerFor
+//   already coerces such a claim, but this surface refuses to create it).
+// - Never link two people to one note: a persona pack carries a Mandate, and
+//   sharing one across identities would silently share granted capabilities.
+// - Only auto-added (autoCreated) contacts are verifiable here. Re-pointing an
+//   already-verified person is intentionally NOT offered, so this surface can
+//   never be used as a general re-identity tool.
+
+const fs = require("fs");
+const path = require("path");
+const people = require("./people");
+const entities = require("./entities");
+const audit = require("./audit");
+
+// Same-name suggestions for the owner surfaces: existing person-type notes
+// this unverified contact could plausibly BE. Excludes the contact's own stub,
+// owner-relationship notes, and notes already bound to another person record.
+// Suggestion-only — verifyContact re-validates whatever the owner picks.
+function candidateEntitiesFor(person) {
+  if (!person) return [];
+  const stubSlug = people.resolveEntitySlug(person);
+  const wanted = String(person.name || "").trim().toLowerCase();
+  if (!wanted) return [];
+  const taken = new Set(
+    people.list()
+      .filter((p) => p.id !== person.id)
+      .map((p) => people.resolveEntitySlug(p))
+      .filter(Boolean),
+  );
+  const out = [];
+  for (const e of entities.listEntities()) {
+    if (e.type !== "person") continue;
+    if (e.slug === stubSlug) continue;
+    if (e.relationship === "owner") continue;
+    if (taken.has(e.slug)) continue;
+    const names = [e.name, ...(e.aliases || [])]
+      .map((n) => String(n || "").trim().toLowerCase())
+      .filter(Boolean);
+    if (names.includes(wanted)) out.push(e);
+  }
+  return out;
+}
+
+function refuse(reason, extra = {}) {
+  return { ok: false, reason, ...extra };
+}
+
+// Verify (and optionally link) one auto-added contact.
+//   personId  — the people.json record to verify
+//   linkSlug  — optional existing note to bind them to; omitted = "this stub
+//               IS the right note, just mark them verified"
+//   by / via  — provenance for the audit trail (owner id, surface name)
+function verifyContact({ personId, linkSlug = null, by = "", via = "" } = {}) {
+  const person = people.findById(String(personId || ""));
+  if (!person) return refuse("person not found");
+  if (person.isOwner) return refuse("the owner record is never routed through contact verification");
+  if (!person.autoCreated) return refuse(`${person.name} is already verified`, { already: true });
+
+  const stubSlug = people.resolveEntitySlug(person);
+  let targetSlug = stubSlug;
+  let supersededStub = false;
+
+  if (linkSlug) {
+    const wantedSlug = entities.slugify(String(linkSlug));
+    if (wantedSlug && wantedSlug !== stubSlug) {
+      const target = entities.readEntity(wantedSlug);
+      if (!target) return refuse(`no note found at ${wantedSlug}`);
+      if (target.type !== "person") return refuse(`${wantedSlug} is a ${target.type} note, not a person`);
+      if (target.relationship === "owner") {
+        return refuse("refusing to link a contact to an owner-relationship note — ownership only ever comes from the people record");
+      }
+      const holder = people.list().find(
+        (p) => p.id !== person.id && people.resolveEntitySlug(p) === target.slug,
+      );
+      if (holder) {
+        return refuse(`that note already belongs to ${holder.name} — two people can never share one persona pack`);
+      }
+      targetSlug = target.slug;
+
+      // Provenance onto the surviving note, then retire the stub file as
+      // .superseded (kept on disk — the merge is inspectable, not destructive).
+      entities.upsertEntity({
+        slug: target.slug,
+        name: target.name,
+        log: `owner verified ${person.name} as this contact (absorbed auto-added stub ${stubSlug})`,
+      }, "owner-verify");
+      if (stubSlug) {
+        const stubFile = path.join(entities.ENTITIES_DIR, `${stubSlug}.md`);
+        try {
+          if (fs.existsSync(stubFile)) {
+            fs.renameSync(stubFile, `${stubFile}.superseded`);
+            supersededStub = true;
+          }
+        } catch (e) { /* best-effort: a stranded stub is inert once unlinked */ }
+        try { entities.markIndexDirty(); } catch (e) {}
+      }
+      people.setEntitySlug(person.id, target.slug);
+    }
+  }
+
+  if (targetSlug === stubSlug && stubSlug) {
+    // Verify-only: the stub becomes the canonical note for this person. The
+    // description keeps its first-seen provenance, minus the unverified label.
+    const stub = entities.readEntity(stubSlug);
+    const description = stub && stub.description
+      ? stub.description
+          .replace(/^Auto-added contact \(unverified\)/, "Verified contact")
+          .replace(/\s*Possible existing note:.*$/, "")
+      : "Verified contact — identity confirmed by the owner.";
+    entities.upsertEntity({
+      slug: stubSlug,
+      name: person.name,
+      description,
+      log: "owner verified this contact; this note is now their canonical persona pack",
+    }, "owner-verify");
+  }
+
+  const fresh = people.findById(person.id) || person;
+  const updated = people.update(person.id, {
+    autoCreated: false,
+    verifiedAt: new Date().toISOString(),
+    verifiedBy: String(by || "owner"),
+    verifiedVia: String(via || ""),
+    handles: (fresh.handles || []).map((h) => (
+      h.approvedBy === "auto-contact" ? { ...h, approvedBy: String(by || "owner") } : h
+    )),
+  });
+
+  audit.log("people.verify", {
+    by: String(by || "owner"),
+    via: String(via || ""),
+    personId: person.id,
+    name: person.name,
+    slug: targetSlug,
+    supersededStub: supersededStub ? stubSlug : null,
+  });
+
+  return { ok: true, person: updated, slug: targetSlug, superseded: supersededStub ? stubSlug : null };
+}
+
+module.exports = { verifyContact, candidateEntitiesFor };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.2.3",
+  "version": "3.3.2",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -11,7 +11,7 @@
     "setup": "node setup.js",
     "start": "node bot.js",
     "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-kazee-call-session.js",
-    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js"
+    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js"
   },
   "files": [
     "bot.js",

package/test-enforcer.js

@@ -378,5 +378,36 @@ const extSpeaker = relationship.speakerFor("telegram", CH_EXT);
   await runInChat({ ...grantCtx, triageApprovalId: escReply.id }, () => enforcer.vetReply(extSpeaker, "reply-kind-grant-payload"));
   assert.ok(!/TURN GRANT/.test(grantPrompt), "only a triage-kind approval grants the turn");
 
+  // ── stranded-mandate hint (dual-file trap): a grant written to the
+  // name-obvious note while the speaker's record reads a hashed slug does
+  // nothing — the card must SAY so at the moment it bites, and the stranded
+  // text must never be applied or quoted. ──
+  const rahil = people.add({ name: "Rahil Malde" });
+  people.setEntitySlug(rahil.id, "rahil-malde-abc123");
+  people.linkHandle(rahil.id, { adapter: "telegram", channelId: "333" });
+  entities.upsertEntity({ slug: "rahil-malde-abc123", name: "Rahil Malde", type: "person", relationship: "external" });
+  entities.upsertEntity({ slug: "rahil-malde", name: "Rahil Malde", type: "person", relationship: "external",
+    mandate: "- May coordinate ticket triage." });
+  const strandedSpeaker = relationship.speakerFor("telegram", "333");
+  assert.strictEqual(String(strandedSpeaker.mandate || "").trim(), "",
+    "the stranded text never reaches the live mandate");
+  sends.length = 0;
+  const escStr = await enforcer.escalate({ speaker: strandedSpeaker, kind: "reply", payloadText: "p", summary: "s", reason: "r" });
+  assert.strictEqual(escStr.escalated, true, "stranded-mandate escalation still posts");
+  const strCard = sends.find((s) => s.channelId === CH_OWNER);
+  assert.ok(strCard && /rahil-malde\.md/.test(strCard.text) && /NO effect/.test(strCard.text),
+    "the owner card names the file holding the dead grant");
+  assert.ok(!/ticket triage/.test(strCard.text), "the stranded text itself stays off the card");
+
+  // A different person legitimately holding the name slug silences the hint —
+  // that mandate is THEIRS, not a stranded copy of this speaker's.
+  const rahil2 = people.add({ name: "Rahil M Other" });
+  people.setEntitySlug(rahil2.id, "rahil-malde");
+  sends.length = 0;
+  await enforcer.escalate({ speaker: relationship.speakerFor("telegram", "333"), kind: "reply", payloadText: "p", summary: "s", reason: "r" });
+  const strCard2 = sends.find((s) => s.channelId === CH_OWNER);
+  assert.ok(strCard2 && !/NO effect/.test(strCard2.text),
+    "no hint when the sibling note belongs to a real other person");
+
   console.log("enforcer OK");
 })().catch((e) => { console.error(e); process.exit(1); });

package/test-kazee-call-manager.js

@@ -25,7 +25,10 @@ function fixture() {
   assert.strictEqual(f.events[0].payload.reason, "unsupported_media");
   f = fixture();
   await f.manager.incoming({ fromUserId: "owner-1", fromUserName: "Owner", chatId: "chat", roomId: 12, callType: "audio" });
-  assert.strictEqual(f.events[0].name, "call:accept");
+  // Ringing must go out first (caller UI feedback), then the accept.
+  assert.strictEqual(f.events[0].name, "call:ringing");
+  assert.deepStrictEqual(f.events[0].payload, { toUserId: "owner-1", chatId: "chat" });
+  assert.strictEqual(f.events[1].name, "call:accept");
   f.manager.session.options.onTranscript("What is on my agenda?");
   assert.strictEqual(f.inbound[0].payload.raw.ephemeralAudio, true);
   // Call turns must mute observer banners (spoken otherwise) and flag live-call

package/test-kazee-call-session.js

@@ -29,8 +29,9 @@ class FakePC {
 }
 
 class FakeSpeechStream {
-  constructor({ onTranscript } = {}) {
+  constructor({ onTranscript, onPartial } = {}) {
     this.onTranscript = onTranscript;
+    this.onPartial = onPartial;
     this.audioFrames = [];
     this.commits = 0;
     this.closedStream = false;
@@ -41,12 +42,12 @@ class FakeSpeechStream {
   close() { this.closedStream = true; }
 }
 
-function makeSession({ synthesize, maxCallMs, idleMs, asCaller, greeting } = {}) {
+function makeSession({ synthesize, maxCallMs, idleMs, finalWaitMs, asCaller, greeting } = {}) {
   const ended = [];
   const transcripts = [];
   const session = new KazeeCallSession({
     roomId: 7, chatId: "chat", callerId: "owner", botUserId: "bot", janusUrl: "ws://test",
-    maxCallMs, idleMs, asCaller, greeting,
+    maxCallMs, idleMs, finalWaitMs, asCaller, greeting,
     synthesize: synthesize || (async () => ({ pcm: Buffer.alloc(WEBRTC_SAMPLES * 2 * 2), sampleRate: 48000 })),
     onTranscript: (text, meta) => transcripts.push({ text, meta }),
     onEnded: (reason) => ended.push(reason),
@@ -127,12 +128,98 @@ async function testPrebufferAndCommit() {
   assert.strictEqual(sub.stt.audioFrames.length, 0, "silence stays out of STT");
   for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
   assert.strictEqual(sub.stt.audioFrames.length, 8, "onset flushes the prebuffer (5 quiet + 2 onset + current)");
+  sub.stt.onPartial("hello there"); // recogniser heard words, so the energy close commits directly
   for (let i = 0; i < 36; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
   assert.strictEqual(sub.stt.commits, 1, "turn commits after sustained silence");
   gen.close();
   await session.close();
 }
 
+async function testHoldForWords() {
+  const { session } = makeSession({});
+  await session._subscribe(101, "caller");
+  const sub = session.subscribers.get(101);
+  const gen = new OpusAudioCodec();
+  for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
+  for (let i = 0; i < 36; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
+  assert.strictEqual(sub.stt.commits, 0, "energy close with zero words holds the commit");
+  assert(sub.awaitingWordsSince > 0, "hold state armed");
+  sub.stt.onPartial("hello there");
+  assert.strictEqual(sub.stt.commits, 1, "first words release the held commit");
+  assert.strictEqual(sub.awaitingWordsSince, 0);
+  assert(session._thinkTimer, "released commit acks and thinks like a normal turn");
+  gen.close();
+  await session.close();
+}
+
+async function testHoldTimeoutDropsNoiseTurn() {
+  const { session, transcripts } = makeSession({});
+  await session._subscribe(101, "caller");
+  const sub = session.subscribers.get(101);
+  const gen = new OpusAudioCodec();
+  for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
+  for (let i = 0; i < 36; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
+  sub.awaitingWordsSince = Date.now() - 5000; // hold expired
+  session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
+  assert.strictEqual(sub.stt.commits, 1, "expired hold still finalizes the audio");
+  assert.strictEqual(sub.noiseCommit, true);
+  assert.strictEqual(session._thinkTimer, null, "noise commit stays silent — no ack, no ticking");
+  sub.stt.onTranscript("uh"); // babble leaked a stray word into the transcript
+  assert.strictEqual(transcripts.length, 0, "sub-threshold noise transcript never dispatches");
+  gen.close();
+  await session.close();
+}
+
+async function testWordStallRescue() {
+  const { session } = makeSession({});
+  await session._subscribe(101, "caller");
+  const sub = session.subscribers.get(101);
+  const gen = new OpusAudioCodec();
+  for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
+  sub.stt.onPartial("so the deploy");
+  sub.lastWordAt = Date.now() - 4500; // word timeline stalled well past its cadence
+  session._onFeedRtp(101, { payload: toneOpus(gen, 12000) }); // background keeps energy loud
+  assert.strictEqual(sub.stt.commits, 1, "stalled words commit even while energy stays loud");
+  assert.strictEqual(sub.vad.active, false, "rescue resets the energy turn");
+  gen.close();
+  await session.close();
+}
+
+async function testInterimFallbackAndLateFinal() {
+  const { session, transcripts } = makeSession({ finalWaitMs: 30 });
+  await session._subscribe(101, "caller");
+  const sub = session.subscribers.get(101);
+  const gen = new OpusAudioCodec();
+  for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
+  sub.stt.onPartial("here is my answer");
+  for (let i = 0; i < 36; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
+  assert.strictEqual(sub.stt.commits, 1);
+  assert.strictEqual(transcripts.length, 0, "dispatch waits for the final first");
+  await wait(80);
+  assert.strictEqual(transcripts.length, 1, "missing final falls back to the interim");
+  assert.strictEqual(transcripts[0].text, "here is my answer");
+  sub.stt.onTranscript("here is my answer sir");
+  assert.strictEqual(transcripts.length, 1, "late final after fallback is dropped, not double-answered");
+  gen.close();
+  await session.close();
+}
+
+async function testTrickleBuffering() {
+  const { session } = makeSession({});
+  const added = [];
+  session.publisher = { pc: { addIceCandidate: async (c) => { added.push(c.candidate); } }, pending: [], remoteSet: false };
+  session._onPublisherEvent({ janus: "trickle", candidate: { candidate: "cand-early", sdpMid: "0" } });
+  assert.strictEqual(added.length, 0, "candidates before the answer are buffered");
+  assert.strictEqual(session.publisher.pending.length, 1);
+  session._flushTrickle(session.publisher);
+  assert.deepStrictEqual(added, ["cand-early"], "buffered candidates flush once the answer lands");
+  session._onPublisherEvent({ janus: "trickle", candidate: { candidate: "cand-late", sdpMid: "0" } });
+  assert.deepStrictEqual(added, ["cand-early", "cand-late"], "later candidates apply directly");
+  session._onPublisherEvent({ janus: "trickle", candidate: { completed: true } });
+  assert.strictEqual(added.length, 2, "end-of-candidates marker is ignored");
+  await session.close();
+}
+
 async function testTranscriptAttribution() {
   const { session, transcripts } = makeSession({});
   await session._subscribe(101, "alice@kazee");
@@ -245,8 +332,11 @@ async function testCallerModeRoomLifecycle() {
   const spoken = [];
   session.speak = async (text) => { spoken.push(text); return true; };
   await session._subscribe(101, "sumeet@kazee");
+  assert.deepStrictEqual(spoken, [], "no greeting while the publisher media leg is still down");
+  session._publisherUp = true;
+  session._maybeGreet();
   await session._subscribe(102, "second@kazee");
-  assert.deepStrictEqual(spoken, ["hi there"], "greeting speaks exactly once, on first remote feed");
+  assert.deepStrictEqual(spoken, ["hi there"], "greeting speaks exactly once, after media-up + first remote feed");
   await session.close();
   const destroy = messages.find((m) => m?.request === "destroy");
   assert.ok(destroy && destroy.room === 7, "created room is destroyed on close");
@@ -283,6 +373,7 @@ async function testThinkingCues() {
   // plays an audible "heard you" chime, and starts ticking right away — STT
   // finalization takes seconds and must not sound like a dead line.
   for (let i = 0; i < 3; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 12000) });
+  sub.stt.onPartial("what is the status");
   for (let i = 0; i < 36; i += 1) session._onFeedRtp(101, { payload: toneOpus(gen, 30) });
   assert.strictEqual(sub.stt.commits, 1);
   await wait(60);
@@ -335,6 +426,11 @@ async function testCloseResolvesSpeech() {
   await testSpeakCancellation();
   await testEchoGateAndBargeIn();
   await testPrebufferAndCommit();
+  await testHoldForWords();
+  await testHoldTimeoutDropsNoiseTurn();
+  await testWordStallRescue();
+  await testInterimFallbackAndLateFinal();
+  await testTrickleBuffering();
   await testTranscriptAttribution();
   await testIdleTimeout();
   await testIdleBargeInKeepsCall();