@inetafrica/open-claudia 3.4.17 → 3.4.19

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 3.4.19
+
+- Offer `claude-opus-5-5` in the Claude model picker. Verified against the live API rather than assumed: on Claude Code 2.1.280 the API bills the request to `claude-opus-5-5` (1M context, 128k max output), while 2.1.258 refuses it with "does not support this model; version 2.1.280 or newer is required". An older CLI returns that API 400 instead of degrading, so a pod on a stale image errors on the model rather than falling back — the same constraint already recorded for `claude-fable-5-1` (>= 2.1.251).
+
+## 3.4.18
+
+- Pass images and files from recent Kazee group messages and quoted replies into the model, retaining sender and message attribution. Follow-up questions can reuse attachments after the text catch-up watermark advances.
+- Keep group participation and capability checks ahead of referenced downloads. Exclude deleted and cross-room attachments; prioritize quoted media, deduplicate files, and bound downloads by count, size, time and free disk space.
+- Cache completed downloads under generated filenames and explicitly report unavailable or omitted attachments. Cover real image bytes, repeated follow-ups, reply resolution, runner attachment handoff, held turns, room isolation and failed downloads.
+
 ## 3.4.17
 
 - Include resolved caller, channel and room identifiers in external guard judgments so caller-specific permissions can be evaluated for contacts without a saved profile. Identity never grants permission by itself; existing policy and refusal behavior remain in force.

package/channels/kazee/adapter.js

@@ -7,6 +7,9 @@ const fs = require("fs");
 const path = require("path");
 const https = require("https");
 const http = require("http");
+const crypto = require("crypto");
+const { pipeline } = require("stream/promises");
+const { Transform } = require("stream");
 const { URL } = require("url");
 const { TEMP_DIR, FILES_DIR } = require("../../core/config");
 const { canonicalForChannel } = require("../../core/identity");
@@ -35,7 +38,7 @@ const INBOUND_DEDUP_MEMORY = 500;
 
 const CONTEXT_MAX_MESSAGES = 40;
 const CONTEXT_BODY_LIMIT = 280;
-const COLD_START_WINDOW = 15;
+const COLD_START_WINDOW = 40;
 
 // Kazee Media docs from mobile uploads often carry no fileName, so the saved
 // extension must come from the mimeType (or the blob URL) — otherwise every
@@ -256,33 +259,11 @@ class KazeeAdapter {
     // chat-central V2 emits attached media on msg.medias (array) or
     // msg.media (single). Older shapes used msg.attachments — keep that
     // as a fallback for safety.
-    const rawMedia = (Array.isArray(msg.medias) && msg.medias.length)
-      ? msg.medias
-      : (msg.media ? [msg.media] : (msg.attachments || []));
-    if (rawMedia.length) {
-      // Kazee carries media captions in the same `content` field used for
-      // plain text. The image router reads the transport-neutral `caption`
-      // field (matching Telegram), so preserve it explicitly on media
-      // envelopes instead of silently falling back to "Describe this image".
+    const media = this._mediaRefs(msg);
+    if (media.length) {
       envelope.caption = text;
-      envelope.media = rawMedia.map((a) => {
-        let kind = a.type;
-        if (!kind) {
-          const mime = (a.mimeType || "").toLowerCase();
-          if (mime.startsWith("image/")) kind = "photo";
-          else if (mime.startsWith("audio/")) kind = "audio";
-          else if (mime.startsWith("video/")) kind = "video";
-          else kind = "document";
-        } else if (kind === "image") kind = "photo";
-        else if (kind === "file") kind = "document";
-        return {
-          type: kind,
-          fileId: a.url || a._id,
-          fileName: a.name || a.filename,
-          mimeType: a.mimeType,
-          size: a.size,
-        };
-      });
+      envelope.media = media;
+
       if (envelope.type === "text") {
         const k = envelope.media[0].type;
         envelope.type = k === "video" ? "document" : k;
@@ -309,10 +290,10 @@ class KazeeAdapter {
         if (typeof msg.replyTo === "object") {
           m = msg.replyTo;
         } else {
-          const data = await this._request("GET", `/message/${encodeURIComponent(String(msg.replyTo))}`);
-          m = data?.message || data;
+          m = await this._messageInChat(channelId, String(msg.replyTo));
         }
-        if (m && (m._id || m.id)) {
+        const repliedChat = m?.chatId || m?.chat?._id || m?.chat?.id || (typeof m?.chat === "string" ? m.chat : "");
+        if (m && (m._id || m.id) && !m.isDeleted && (!repliedChat || String(repliedChat) === channelId)) {
           envelope.reply = {
             text: m.content || "",
             from: {
@@ -321,8 +302,10 @@ class KazeeAdapter {
               username: m.sender?.username || "",
             },
             messageId: m._id || m.id,
+            media: this._mediaRefs(m, channelId, "Quoted message"),
           };
         }
+
       } catch (e) { /* best-effort — envelope is still valid without reply context */ }
     }
 
@@ -360,6 +343,36 @@ class KazeeAdapter {
     this._emit("message", envelope);
   }
 
+  _mediaRefs(msg, contextChatId, source) {
+    const raw = Array.isArray(msg.medias) && msg.medias.length ? msg.medias
+      : msg.media ? [msg.media] : Array.isArray(msg.attachments) ? msg.attachments : [];
+    return raw.filter((a) => a && typeof a === "object").filter((a) => {
+      const chat = a.chat?._id || a.chat?.id || a.chat;
+      return !contextChatId || !chat || String(chat) === String(contextChatId);
+    }).map((a) => {
+      const mime = String(a.mimeType || "").toLowerCase();
+      let type = a.type || (mime.startsWith("image/") ? "photo" : mime.startsWith("audio/") ? "audio" : mime.startsWith("video/") ? "video" : "document");
+      if (type === "image") type = "photo";
+      if (type === "file") type = "document";
+      const ref = { type, fileId: a.url || a._id, fileName: a.fileName || a.name || a.filename, mimeType: a.mimeType, size: a.size };
+      if (contextChatId) {
+        ref.messageId = String(msg._id || msg.id || "");
+        ref.contextKey = JSON.stringify([String(contextChatId), ref.messageId, String(a._id || a.url || "")]);
+        ref.source = source;
+      }
+      return ref;
+    });
+  }
+
+  async _messageInChat(chatId, messageId) {
+    if (!this.botUserId) return null;
+    const route = `/messages/${encodeURIComponent(chatId)}/${encodeURIComponent(String(this.botUserId))}/around/${encodeURIComponent(messageId)}?before=1&after=1`;
+    const response = await this._request("GET", route);
+    const data = response?.data || response || {};
+    if (response?.error || data.error || response?.success === false) return null;
+    return (data.messages || []).find((m) => String(m._id || m.id || "") === messageId) || null;
+  }
+
   // Channel-agnostic thread-context provider (ChannelAdapter contract, same
   // hook Spaces implements). The router calls this at the start of an engaged
   // group turn and prepends the returned contextBlock to the prompt, so the
@@ -377,7 +390,25 @@ class KazeeAdapter {
     try {
       const since = kazeeState.getContextWatermark(chatId);
       const msgs = await this._messagesSince(chatId, since);
-      if (!msgs.length) return null;
+      let recent = msgs;
+      if (since) {
+        try { recent = await this._messagesSince(chatId, null, CONTEXT_MAX_MESSAGES); }
+        catch (_) { /* Delta attachments remain available when recent-page fetch fails. */ }
+      }
+      const mediaMessages = new Map();
+      for (const m of [...recent, ...msgs]) {
+        const id = String(m._id || m.id || "");
+        const room = m.chatId || m.chat?._id || m.chat?.id || (typeof m.chat === "string" ? m.chat : "");
+        if (id && (!room || String(room) === chatId)) mediaMessages.set(id, m);
+      }
+      const media = [...mediaMessages.values()]
+        .filter((m) => !m.isDeleted && String(m._id || m.id) !== String(envelope.messageId || "")
+          && String(m.sender?._id || m.sender?.id || "") !== String(this.botUserId))
+        .sort((a, b) => String(a.createdAt || "").localeCompare(String(b.createdAt || "")))
+        .slice(-CONTEXT_MAX_MESSAGES)
+        .flatMap((m) => this._mediaRefs(m, chatId, `${m.sender?.name || "Someone"} (${m.createdAt || "unknown time"})`))
+        .reverse();
+      if (!msgs.length && !media.length) return null;
       const newest = msgs[msgs.length - 1]?.createdAt;
       if (newest) kazeeState.setContextWatermark(chatId, newest);
       const triggerId = String(envelope.messageId || "");
@@ -395,13 +426,13 @@ class KazeeAdapter {
           return { who, body, ago: this._ago(m.createdAt) };
         })
         .filter((m) => m.body);
-      if (!rendered.length) return null;
+      if (!rendered.length && !media.length) return null;
       const lines = ["[Kazee group chat context]"];
       lines.push(since
         ? "Messages in this group since your last engaged turn (oldest→newest):"
         : "Recent messages in this group (oldest→newest):");
       for (const m of rendered.slice(-CONTEXT_MAX_MESSAGES)) lines.push(`  [${m.ago}] ${m.who}: ${m.body}`);
-      return { contextBlock: lines.join("\n") };
+      return { contextBlock: lines.join("\n"), media };
     } catch (e) {
       console.error("kazee buildThreadContext:", e.message);
       return null;
@@ -412,11 +443,11 @@ class KazeeAdapter {
   // (oldest-first, server-capped at 500). Without one — the chat's first-ever
   // engage — one recent page, which the server already returns in
   // chronological order.
-  async _messagesSince(chatId, sinceIso) {
+  async _messagesSince(chatId, sinceIso, count = COLD_START_WINDOW) {
     const base = `/messages/${encodeURIComponent(chatId)}/${encodeURIComponent(String(this.botUserId))}`;
     const query = sinceIso
       ? `?since=${encodeURIComponent(sinceIso)}`
-      : `?page=1&messageCount=${COLD_START_WINDOW}`;
+      : `?page=1&messageCount=${count}`;
     const res = await this._request("GET", base + query);
     const data = res?.data || res || {};
     if (data.error) throw new Error(String(data.error));
@@ -726,6 +757,7 @@ class KazeeAdapter {
 
   async downloadMedia(media) {
     if (!media || !media.fileId) return null;
+    if (media.contextKey) return this._downloadContextMedia(media);
     const url = media.fileId; // Kazee passes the cloud URL through fileId.
     let urlExt = "";
     try { urlExt = path.extname(new URL(url).pathname); } catch (e) {}
@@ -748,6 +780,46 @@ class KazeeAdapter {
     return localPath;
   }
 
+  async _downloadContextMedia(media) {
+    const url = new URL(media.fileId);
+    if (!["https:", "http:"].includes(url.protocol) || url.username || url.password) throw new Error("Invalid media URL");
+    const candidateExt = path.extname(media.fileName || url.pathname).toLowerCase();
+    const ext = /^\.[a-z0-9]{1,8}$/.test(candidateExt) ? candidateExt : MIME_EXT[media.mimeType] || ".bin";
+    const key = crypto.createHash("sha256").update(media.contextKey).digest("hex");
+    const localPath = path.join(media.type === "photo" ? TEMP_DIR : FILES_DIR, `kz-context-${key}${ext}`);
+    const maxBytes = Math.min(Number(media.maxBytes) || 10 * 1024 * 1024, 10 * 1024 * 1024);
+    try {
+      const st = fs.statSync(localPath);
+      if (st.isFile() && st.size > 0 && st.size <= maxBytes) return localPath;
+    } catch (_) {}
+    const disk = fs.statfsSync(path.dirname(localPath));
+    if (disk.bavail * disk.bsize < maxBytes * 2 + 16 * 1024 * 1024) throw new Error("Insufficient space for media download");
+    const partial = `${localPath}.${crypto.randomUUID()}.part`;
+    let req;
+    const timer = setTimeout(() => req?.destroy(new Error("Media download timed out")), Math.min(media.timeoutMs || 8000, 8000));
+    try {
+      const res = await new Promise((resolve, reject) => {
+        req = (url.protocol === "https:" ? https : http).get(url, resolve);
+        req.on("error", reject);
+      });
+      if (res.statusCode !== 200 || Number(res.headers["content-length"]) > maxBytes) {
+        res.destroy(); throw new Error("Media unavailable or exceeds size limit");
+      }
+      let bytes = 0;
+      await pipeline(res, new Transform({ transform(chunk, enc, done) {
+        bytes += chunk.length;
+        done(bytes > maxBytes ? new Error("Media exceeds size limit") : null, chunk);
+      } }), fs.createWriteStream(partial, { flags: "wx" }));
+      if (!bytes) throw new Error("Empty media");
+      fs.renameSync(partial, localPath);
+      return localPath;
+    } catch (e) {
+      req?.destroy();
+      try { fs.unlinkSync(partial); } catch (_) {}
+      throw e;
+    } finally { clearTimeout(timer); }
+  }
+
   async registerCommands(commands) {
     if (!this.botUserId) {
       console.error("Kazee registerCommands: no botUserId yet, skipping");

package/channels/types.js

@@ -20,7 +20,7 @@
  * @property {string} [text]          // command text or message body
  * @property {string} [messageId]     // outer-channel message id
  * @property {string} [replyToId]     // id of message being replied to
- * @property {Object} [reply]         // {text, document, photo} for reply context
+ * @property {Object} [reply]         // {text, media?: MediaRef[], document, photo} for reply context
  * @property {Array<MediaRef>} [media]
  * @property {Object} [from]          // {id, name, username}
  * @property {Object} [action]        // for type:"action" — {buttonId, payload, sourceMessageId}
@@ -58,6 +58,7 @@
  *   typing(channelId, state?): Promise<void>  // state: "thinking" | "typing" (default). Non-socket channels ignore state.
  *   typingStop?(channelId): Promise<void>     // optional — socket channels only
  *   downloadMedia(mediaRef): Promise<localPath|null>
+ *   buildThreadContext?(envelope): Promise<{contextBlock: string, media?: MediaRef[]}|null>
  *   registerCommands(commands: CommandSpec[]): Promise<void>
  */
 

package/core/context-media.js

@@ -0,0 +1,43 @@
+// Hydrate adapter-attested reply/history media only after the turn's gates.
+// Never put remote URLs into the model prompt; keep source-message attribution.
+const path = require("path");
+const MAX_CONTEXT_MEDIA = 6;
+const MAX_CONTEXT_BYTES = 30 * 1024 * 1024;
+const MAX_ITEM_BYTES = 10 * 1024 * 1024;
+
+async function hydrateContextMedia(adapter, refs = []) {
+  const attachments = [], imagePaths = [], lines = [], seen = new Set();
+  let remaining = MAX_CONTEXT_BYTES, attempted = 0, omitted = 0;
+  for (const media of refs) {
+    if (!media || !media.fileId) continue;
+    const key = media.contextKey || media.fileId;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (attempted >= MAX_CONTEXT_MEDIA || remaining <= 0) { omitted++; continue; }
+    attempted++;
+    const label = [media.source || "Referenced attachment", media.messageId && `message ${media.messageId}`].filter(Boolean).join(" · ");
+    const maxBytes = Math.min(MAX_ITEM_BYTES, remaining);
+    try {
+      if (Number(media.size) > maxBytes) throw new Error("too large");
+      const localPath = await adapter.downloadMedia({ ...media, maxBytes, timeoutMs: 8000 });
+      if (!localPath) throw new Error("missing file");
+      // The adapter enforces the streamed size; stat prevents over-budget cache hits.
+      const size = require("fs").statSync(localPath).size;
+      if (!size || size > maxBytes) throw new Error("invalid size");
+      remaining -= size;
+      const isImage = media.type === "photo" || media.mimeType?.startsWith("image/");
+      attachments.push({ type: isImage ? "image" : "document", path: localPath,
+        fileName: media.fileName || path.basename(localPath), mimeType: media.mimeType || null,
+        sourceMessageId: media.messageId || null });
+      if (isImage) imagePaths.push(localPath);
+      lines.push(`${label}: ${isImage ? "image" : media.type || "file"} at ${localPath}`);
+    } catch (_) {
+      lines.push(`${label}: attachment unavailable (download failed or size limit); do not infer its contents.`);
+    }
+  }
+  if (omitted) lines.push(`${omitted} further attachment(s) omitted by this turn's limit; request a specific message if needed.`);
+  return { attachments, imagePaths, contextBlock: lines.length
+    ? `[Referenced media — inspect the attached files before answering]\n${lines.join("\n")}` : "" };
+}
+
+module.exports = { hydrateContextMedia, MAX_CONTEXT_MEDIA };

package/core/providers/claude.js

@@ -6,11 +6,16 @@ const { createJsonlDecoder } = require("./events");
 const { createClaudeParserState, normalizeClaudeEvent } = require("./claude-events");
 const { createClaudeHookTransport } = require("./claude-hook");
 
-// claude-fable-5-1 requires Claude Code >= 2.1.251; older CLIs reject it with an
-// API 400 rather than falling back, so a pod on a stale image will error on it.
+// New models are gated on the CLI build: claude-fable-5-1 requires Claude Code
+// >= 2.1.251, claude-opus-5-5 requires >= 2.1.280. An older CLI rejects them with
+// an API 400 rather than falling back, so a pod on a stale image will error on
+// them. Verified 2026-09-23 on 2.1.280: the API reported claude-opus-5-5 as the
+// serving model (canonicalModel claude-opus-5-5, 1M context), while 2.1.258
+// returned "does not support this model; version 2.1.280 or newer is required".
 const CLAUDE_MODELS = Object.freeze([
   "claude-fable-5-1",
   "claude-fable-5",
+  "claude-opus-5-5",
   "claude-opus-5",
   "claude-opus-4-8",
   "claude-opus-4-7",

package/core/router.js

@@ -14,6 +14,7 @@ const { send, deleteMessage } = require("./io");
 const { currentState, saveState, autoLinkOwnerChannel, getActiveProvider, getProjectKey } = require("./state");
 const { admitRunContext, runAgent, startTypingHeartbeat } = require("./runner");
 const { transcribeAudio, cloneVoiceFromClip } = require("./media");
+const { hydrateContextMedia } = require("./context-media");
 const { vault } = require("./vault-store");
 const { isOnboarded, handleOnboarding } = require("./onboarding");
 const {
@@ -258,7 +259,7 @@ async function handleVoice(envelope) {
     state.lastInputWasVoice = true;
     // Per-stage latency for the voice pipeline; the runner fills in the rest.
     state.voiceLat = { startAt: tStart, downloadMs: tAfterDownload - tStart, sttMs: tAfterStt - tAfterDownload };
-    return runAgent(transcript, runContext.cwd, envelope.messageId, {
+    return runWithContext(transcript, runContext, envelope, {
       runContext,
       attachments: [{ type: "voice", path: oggPath, mimeType: media.mimeType || "audio/ogg", fileName: media.fileName || null }],
       lastInputWasVoice: true,
@@ -291,7 +292,7 @@ async function handleAudio(envelope) {
     if (!t) return send("Couldn't transcribe.");
     await send(`Heard: "${t}"`, { replyTo: envelope.messageId });
     if (!(await admitGuardedTurn(t, envelope, state))) return;
-    return runAgent(t, runContext.cwd, envelope.messageId, {
+    return runWithContext(t, runContext, envelope, {
       runContext,
       attachments: [{ type: "audio", path: p, mimeType: media.mimeType || null, fileName: media.fileName || null }],
     });
@@ -340,10 +341,10 @@ async function handlePhoto(envelope) {
       ? `${envelope.caption} [${paths.length === 1 ? "photo" : `${paths.length} photos`} at: ${paths.join(", ")}]`
       : `[sent ${paths.length === 1 ? "a photo" : `${paths.length} photos`} with no caption at: ${paths.join(", ")}]`;
     if (!(await admitGuardedTurn(ask, envelope, state))) return;
-    const prompt = paths.length === 1
+    let prompt = paths.length === 1
       ? `Image at ${paths[0]}\n\nView it, then: ${caption}`
       : `Images:\n${paths.map((p, i) => `${i + 1}. ${p}`).join("\n")}\n\nView all ${paths.length}, then: ${caption}`;
-    return runAgent(prompt, runContext.cwd, envelope.messageId, {
+    return runWithContext(prompt, runContext, envelope, {
       runContext,
       imagePaths: paths,
       attachments: paths.map((imagePath, index) => ({
@@ -357,6 +358,31 @@ async function handlePhoto(envelope) {
   finally { stopPreTurnTyping(); }
 }
 
+async function runWithContext(prompt, runContext, envelope, options) {
+  const referenced = await referencedContext(envelope);
+  if (envelope.type !== "text" && envelope.reply?.text) {
+    prompt = `Quoted message:\n${envelope.reply.text.slice(0, 1000)}\n\n${prompt}`;
+  }
+  if (referenced.contextBlock) prompt = `${referenced.contextBlock}\n\n${prompt}`;
+  return runAgent(prompt, runContext.cwd, envelope.messageId, {
+    ...options,
+    imagePaths: [...(options.imagePaths || []), ...referenced.imagePaths],
+    attachments: [...(options.attachments || []), ...referenced.attachments],
+  });
+}
+
+async function referencedContext(envelope) {
+  let threadCtx = null;
+  if (typeof envelope.adapter?.buildThreadContext === "function") {
+    try { threadCtx = await envelope.adapter.buildThreadContext(envelope); }
+    catch (e) { console.error("router: buildThreadContext:", e.message); }
+  }
+  const hydrated = await hydrateContextMedia(envelope.adapter, [
+    ...(envelope.reply?.media || []), ...(threadCtx?.media || []),
+  ]);
+  return { ...hydrated, contextBlock: [threadCtx?.contextBlock, hydrated.contextBlock].filter(Boolean).join("\n\n") };
+}
+
 async function handleDocument(envelope) {
   if (isDuplicate(envelope)) return;
   const state = currentState();
@@ -385,7 +411,7 @@ async function handleDocument(envelope) {
       ? `${caption} [file: ${fileName} at ${savePath}]`
       : `[sent a file: ${fileName} at ${savePath} — no caption]`;
     if (!(await admitGuardedTurn(ask, envelope, state))) return;
-    return runAgent(prompt, runContext.cwd, envelope.messageId, {
+    return runWithContext(prompt, runContext, envelope, {
       runContext,
       imagePaths: isImage ? [savePath] : [],
       attachments: [{ type: isImage ? "image" : "document", path: savePath, mimeType: mime, fileName }],
@@ -699,18 +725,8 @@ async function handleText(envelope) {
   // message. The adapter owns WHAT to fetch; the router owns WHEN and HOW to
   // render it. Channels without the method (Telegram, Kazee DM, voice, web) are
   // untouched. Best-effort: a failure never blocks the turn.
-  if (typeof envelope.adapter?.buildThreadContext === "function") {
-    try {
-      const threadCtx = await envelope.adapter.buildThreadContext(envelope);
-      if (threadCtx && threadCtx.contextBlock) {
-        prompt = `${threadCtx.contextBlock}\n\n${prompt}`;
-      }
-    } catch (e) {
-      console.error("router: buildThreadContext:", e.message);
-    }
-  }
 
-  return runAgent(prompt, runContext.cwd, envelope.messageId, {
+  return runWithContext(prompt, runContext, envelope, {
     runContext,
     imagePaths,
     attachments,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.4.17",
+  "version": "3.4.19",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -10,7 +10,7 @@
     "test:kazee-call": "node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
     "setup": "node setup.js",
     "start": "node bot.js",
-    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-kazee-typing-join.js && node test-kazee-inbound-dedup.js && node test-typing-phase-push.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
+    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-kazee-context-media.js && node test-kazee-typing-join.js && node test-kazee-inbound-dedup.js && node test-typing-phase-push.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
     "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && node test-codex-rollout.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-grants.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-room-provider-settings.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-store-durability.js"
   },
   "files": [
@@ -127,6 +127,7 @@
     "test-provider-coupling-audit.js",
     "test-provider-parity-e2e.js",
     "test-telegram-poll-recovery.js",
+    "test-kazee-context-media.js",
     "test-fixtures/"
   ],
   "keywords": [

package/test-kazee-context-media.js

@@ -0,0 +1,98 @@
+const assert = require("assert");
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+const http = require("http");
+const testRoot = fs.mkdtempSync(path.join(os.tmpdir(), "oc-context-media-"));
+process.env.OPEN_CLAUDIA_CONFIG_DIR = testRoot;
+process.env.WORKSPACE = path.join(testRoot, "workspace");
+process.env.OPEN_CLAUDIA_TEST = "1";
+const { ensureRuntimeDirectories, TEMP_DIR } = require("./core/config");
+ensureRuntimeDirectories();
+const { KazeeAdapter } = require("./channels/kazee/adapter");
+const { hydrateContextMedia } = require("./core/context-media");
+const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+aL1sAAAAASUVORK5CYII=", "base64");
+let requests = 0;
+const server = http.createServer((req, res) => {
+  requests++;
+  if (req.url === "/failure") { res.writeHead(503); res.end("unavailable"); }
+  else if (req.url === "/large") { res.writeHead(200, { "content-length": 20 * 1024 * 1024 }); res.end(); }
+  else if (req.url === "/stream") { res.writeHead(200); res.end(Buffer.alloc(1000)); }
+  else if (req.url === "/slow") { /* bounded client timeout must terminate this socket */ }
+  else { res.writeHead(200, { "content-type": "image/png" }); res.end(png); }
+});
+
+(async () => {
+  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+  const origin = `http://127.0.0.1:${server.address().port}`;
+  const adapter = new KazeeAdapter({ url: "https://chat.invalid", token: "dummy", botUserId: "bot" });
+  adapter._chatMeta = async () => ({ isGroupChat: true, assistantAction: "assistant_tagged_reply" });
+  const screenshot = { _id: "screen", chat: "group", type: "image", content: "Trip concern", createdAt: "2026-09-07T13:56:04Z",
+    sender: { _id: "samson", name: "Samson" }, medias: [{ _id: "photo", chat: "group", type: "image", url: `${origin}/image.png`, fileName: "image.png" }] };
+  const followup = { _id: "ask", chat: "group", type: "text", content: "@bot check the screenshot above", createdAt: "2026-09-07T14:59:02Z", sender: { _id: "owner" }, mentions: ["bot"] };
+  let emitted = [];
+  adapter.on("message", (e) => emitted.push(e));
+  await adapter._handleInboundMessage(screenshot);
+  assert.equal(emitted.length, 0, "unaddressed group image stays silent");
+  assert.equal(requests, 0, "silent messages trigger no download");
+  await adapter._handleInboundMessage(followup);
+  adapter._request = async (_, url) => {
+    if (url.includes("/around/")) return { data: { messages: [screenshot] } };
+    return { data: { messages: [screenshot, followup] } };
+  };
+  const context = await adapter.buildThreadContext(emitted[0]);
+  assert.equal(context.media.length, 1, "group catch-up retains image reference");
+  assert.equal(context.media[0].fileName, "image.png", "actual Kazee fileName preserved");
+  const hydrated = await hydrateContextMedia(adapter, context.media);
+  assert.equal(hydrated.imagePaths.length, 1, "image reaches provider attachment preparation");
+  assert(fs.readFileSync(hydrated.imagePaths[0]).equals(png), "downloaded image bytes preserved");
+  assert(hydrated.contextBlock.includes("Samson"));
+  assert(hydrated.contextBlock.includes("message screen"));
+  assert(!hydrated.contextBlock.includes(origin), "no remote URLs exposed to model");
+  const before = requests;
+  adapter._request = async (_, url) => ({ data: { messages: url.includes("since=") ? [followup] : [screenshot, followup] } });
+  const again = await adapter.buildThreadContext(emitted[0]);
+  assert.equal(again.media.length, 1, "follow-up recovers image older than text watermark");
+  const cached = await hydrateContextMedia(adapter, again.media);
+  assert.deepEqual(cached.imagePaths, hydrated.imagePaths);
+  assert.equal(requests, before, "verified cached file avoids repeat download");
+
+  await adapter._handleInboundMessage({ ...followup, _id: "quote", replyTo: screenshot });
+  assert.equal(emitted.at(-1).reply.media.length, 1, "populated quote keeps media");
+  adapter._request = async (_, url) => {
+    assert.equal(url, "/messages/group/bot/around/screen?before=1&after=1", "ID lookup uses supported room-scoped route");
+    return { data: { messages: [{ ...screenshot, _id: "neighbor" }, screenshot] } };
+  };
+  await adapter._handleInboundMessage({ ...followup, _id: "quote-id", replyTo: "screen" });
+  assert.equal(emitted.at(-1).reply.media.length, 1, "id-only quote resolves media");
+  const combined = await hydrateContextMedia(adapter, [...emitted.at(-1).reply.media, ...again.media]);
+  assert.equal(combined.attachments.length, 1, "quote and history deduplicate same image");
+  await adapter._handleInboundMessage({ ...followup, _id: "foreign-quote", replyTo: { ...screenshot, chat: "other-room" } });
+  assert.equal(emitted.at(-1).reply, undefined, "cross-room quote refused");
+  await adapter._handleInboundMessage({ ...followup, _id: "deleted-quote", replyTo: { ...screenshot, isDeleted: true } });
+  assert.equal(emitted.at(-1).reply, undefined, "deleted quote refused");
+  adapter._request = async () => ({ data: { messages: [
+    { ...screenshot, _id: "other", chat: "other-room" },
+    { ...screenshot, _id: "deleted", isDeleted: true },
+    { ...screenshot, _id: "foreign-media", medias: [{ ...screenshot.medias[0], chat: "other-room" }] }, followup,
+  ] } });
+  const denied = await adapter.buildThreadContext(emitted[0]);
+  assert.equal(denied?.media?.length || 0, 0, "history excludes deleted and foreign-room attachments");
+
+  const ref = context.media[0];
+  const limited = await hydrateContextMedia(adapter, Array.from({ length: 9 }, (_, i) => ({ ...ref, contextKey: `limit-${i}` })));
+  assert.equal(limited.attachments.length, 6);
+  assert(limited.contextBlock.includes("3 further attachment(s) omitted"));
+  const failed = await hydrateContextMedia(adapter, [{ ...ref, contextKey: "failed", fileId: `${origin}/failure` }]);
+  assert.equal(failed.attachments.length, 0);
+  assert(failed.contextBlock.includes("unavailable"));
+  for (const [route, maxBytes, timeoutMs] of [["large", 500, 8000], ["stream", 100, 8000], ["slow", 500, 30]]) {
+    await assert.rejects(adapter.downloadMedia({ ...ref, contextKey: route, fileId: `${origin}/${route}`, maxBytes, timeoutMs }));
+  }
+  assert(!fs.readdirSync(TEMP_DIR).some((f) => f.endsWith(".part")), "failed/oversize/timed-out downloads leave no partial files");
+  const safe = await adapter.downloadMedia({ ...ref, contextKey: "filename", fileName: "../../outside.png" });
+  assert.equal(path.dirname(safe), TEMP_DIR, "context filenames cannot escape media directory");
+  console.log("kazee-context-media OK: catch-up, follow-up, quotes, isolation, bytes, cache, caps and failures");
+})().catch((e) => { console.error(e); process.exitCode = 1; }).finally(() => {
+  server.closeAllConnections(); server.close(); fs.rmSync(testRoot, { recursive: true, force: true });
+});

package/test-provider-claude.js

@@ -46,6 +46,7 @@ assert.strictEqual(provider.isAvailable(), true);
 assert.strictEqual(provider.executable(), "/fixture/claude");
 assert.strictEqual(provider.defaultModel(), "claude-default-fixture");
 assert.ok(provider.modelChoices().includes("claude-fable-5-1"));
+assert.ok(provider.modelChoices().includes("claude-opus-5-5"), "opus 5.5 is offered in the model picker");
 assert.ok(provider.modelChoices().includes("claude-fable-5"));
 assert.ok(provider.modelChoices().includes("claude-sonnet-4-6"));
 assert.deepStrictEqual(provider.compatibilityStatus(), {

package/test-provider-gateway.js

@@ -60,8 +60,9 @@ async function routerProbe() {
   // be CONSULTED with the routed text + provider/project pinning, then let the
   // turn through — the probe's subject is admission/dispatch mechanics.
   const triaged = [];
+  let triageHeld = false;
   installStub("./core/enforcer", {
-    guardInboundTriage: async (text, pinning) => { triaged.push({ text, pinning }); return { held: false, guarded: false }; },
+    guardInboundTriage: async (text, pinning) => { triaged.push({ text, pinning }); return { held: triageHeld, guarded: triageHeld }; },
   });
   installStub("./core/runner", {
     admitRunContext(prompt, cwd, replyToMsgId, opts = {}) {
@@ -252,6 +253,29 @@ async function routerProbe() {
     assert.strictEqual(lastTriage.pinning.projectDir, projectA, "triage pinning carries the project dir");
   }
 
+  {
+    resetRouting();
+    const image = path.join(process.env.OPEN_CLAUDIA_CONFIG_DIR, "group-screen.png");
+    fs.writeFileSync(image, "image-fixture");
+    const ref = { type: "photo", fileId: "remote-image", contextKey: "room:original:image", messageId: "original", source: "Samson" };
+    let fetches = 0, downloads = 0;
+    const groupAdapter = adapter("kazee", async () => { downloads++; return image; });
+    groupAdapter.buildThreadContext = async () => { fetches++; return { contextBlock: "[Group context]", media: [ref] }; };
+    await router.onMessage(envelope("text", { text: "check the screenshot above", adapter: groupAdapter, surface: "group", reply: { text: "Original caption", media: [ref] } }));
+    const run = runs.at(-1);
+    assert.deepStrictEqual(run.opts.imagePaths, [image], "group and quoted media reach actual runner options once");
+    assert.strictEqual(run.opts.attachments[0].sourceMessageId, "original");
+    assert.match(run.prompt, /Samson/);
+    assert.match(run.prompt, /Original caption/);
+    assert.match(run.prompt, /group-screen.png/);
+    assert.strictEqual(downloads, 1);
+    const before = { fetches, downloads, runs: runs.length };
+    triageHeld = true;
+    await router.onMessage(envelope("text", { text: "ungranted ask", adapter: groupAdapter, surface: "group", reply: { media: [ref] } }));
+    triageHeld = false;
+    assert.deepStrictEqual({ fetches, downloads, runs: runs.length }, before, "held turns cannot fetch context or download attachments");
+  }
+
   assert.ok(sends.length > 0, "media acknowledgement delivery remains active");
   console.log("provider gateway router OK");
 }

package/test-provider-language.js

@@ -469,7 +469,15 @@ assert.match(pkg.description, /provider-agnostic coding-agent harness/i);
 // prepared 2026-09-06 for his release go. Rollout-based Codex context, per-turn ledger, sub-agent + quota accounting.
 // 3.4.15: conversation flow and checked sentence speech; authorized calling rollout, 2026-09-05/06.
 // 3.4.17: bind guard judgments and cached verdicts to runtime caller/room identity; approved calling rollout, 2026-09-07.
-assert.strictEqual(pkg.version, "3.4.17", "release version must remain unchanged without explicit approval");
+// 3.4.18: group-history/quoted attachments; owner approved implement and release, Sept7 18:32 EAT.
+// 3.4.19: offer claude-opus-5-5 in the Claude model picker. Sumeet asked
+// 2026-09-23 ("check if opus 5.5 available on Claude code CLI and if yes please
+// add it"), approved the CLI upgrade ("Yes upgrade the CLI please") and left the
+// release shape to me ("Proceed as you see fit"). Shipped alone, ahead of the
+// unreleased Kazee fail-closed room gate, so a runtime behaviour change and an
+// additive picker entry can be rolled back independently. Local Claude Code went
+// 2.1.258 -> 2.1.280 first; the model is refused outright below that.
+assert.strictEqual(pkg.version, "3.4.19", "release version must remain unchanged without explicit approval");
 for (const keyword of ["claude", "codex", "coding-agent", "provider-agnostic"]) {
   assert.ok(pkg.keywords.includes(keyword), `package keyword missing: ${keyword}`);
 }