@inetafrica/open-claudia 3.4.20 → 3.4.23

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 3.4.23
+
+- Watch, wakeup and cron turns now stream their progress (interim narration, and thinking under `/verbose`) like chat turns. The live preview was gated to chat turns only, so a watch-woken turn showed the bell notice and "thinking…" and then nothing until its final answer, however long it worked.
+- `/stop` no longer cancels the messages you send after it. It released the room the moment it killed the run, before that run had unwound, so a message sent in those seconds started, met the stop flag at its pre-spawn checkpoint and was cancelled "before the provider started" — three messages lost after one `/stop` on 24 Sep. The room now stays busy until the stopped run's own unwind releases it and drains the queue (a 30 s backstop covers a child that never reports its exit), and the stop flag names the run it stops, so it can never cancel another.
+- "Queued." now says what the message is waiting on once the wait passes two minutes, e.g. `Queued behind the watch "Phone alarm" (running 42 min). /stop cancels it.`
+- A watch that has triggered but waited 15 minutes behind a busy room posts one plain line per occurrence, so an alarm is never hidden for hours (24 Sep: 2 h and 7.5 h, with nothing in the chat).
+
+## 3.4.22
+
+Supersedes 3.4.21, which was tagged but never published: its build failed because `test-upgrade-path.js` was wired into the test chain without being committed. Nothing shipped from that tag.
+
+
+- Fix `/upgrade` reporting success while upgrading a copy of the bot that nothing runs. It ran `npm install -g`, then read the resulting version back from `npm root -g` — the one directory guaranteed to agree with itself. Found on a host where the bot executes from `/usr/local/lib/node_modules` while `npm config get prefix` is `~/.local`: three releases (3.4.18, 3.4.19, 3.4.20) were each announced as installed while the running process stayed on 3.4.17.
+- The layout check no longer string-matches the docker `/app` path. It compares the directory the running process executes from against the directory npm would write to, so any prefix drift routes to the in-place overlay, not just the container case. An unqueryable `npm root -g` is not treated as a mismatch — the post-install check is the backstop there.
+- `/upgrade` and `/downgrade` now read the resulting version back from the directory the process actually executes from. A mismatch reports "Upgrade did NOT take", names both directories, and restarts nothing; the previous behaviour was to restart and claim success.
+- Drop the superseded `claude-opus-4-8`, `claude-opus-4-7` and `claude-opus-4-6` buttons from the Claude model picker, which had grown long enough to bury the current models.
+- Removal is cosmetic by design. `/model` takes a typed name verbatim without consulting the list, so `/model claude-opus-4-8` still works as a rollback; only the buttons go. The list is still checked on tapped callbacks, whose job is to reject a stale button from an old message.
+- `claude-sonnet-4-6` and `claude-haiku-4-5-20251001` deliberately stay: they are the tier models for medium and low utility work, not picker garnish, and dropping them would push recall, pack review and the enforcer onto opus.
+
 ## 3.4.20
 
 - Make `claude-opus-5-5` the default Claude model. 3.4.19 only added it to the picker; the default stayed on `claude-opus-4-8`, so a room that had never run `/model` kept the old model.
@@ -261,7 +280,7 @@ Three approved plans land together — memory adoption A1-A4 (from the TencentDB
 ## v3.1.21 — Kazee public participation: owner seeding, group tag-gating, guarded external turns
 
 - **Owner seeding for kazee-only pods.** A pod whose only owner signal is `KAZEE_OWNER_USER_ID` (empty `auth.json`) never got a people-store owner record, so every unknown inbound — group or DM — was refused with a false "no owner configured" (observed on network-mon, 2026-07-23). `seedOwnerFromLegacy` now falls back to the kazee env owner; legacy `auth.json` owners keep precedence and seeding stays idempotent.
-- **Group chats engage only when addressed.** The kazee adapter fetches chat meta (5-min cache) and, in group chats, engages only on an @-mention of the bot or a reply to the bot's own message — matching chat-central's own `assistantAction` default `assistant_tagged_reply`. Chats set to `assistant_free_reply` engage on everything. Untagged group chatter is dropped silently (no roster prompts, no refusals — owner included). 1:1 chats are unchanged; a meta-fetch failure fails open to pre-gate behavior and is not cached.
+- **Group chats engage only when addressed.** The kazee adapter fetches chat meta (5-min cache) and, in group chats, engages only on an @-mention of the bot or a reply to the bot's own message — matching chat-central's own `assistantAction` default `assistant_tagged_reply`. Chats set to `assistant_free_reply` engage on everything. Untagged group chatter is dropped silently (no roster prompts, no refusals — owner included). 1:1 chats are unchanged; an unresolved metadata fetch is not cached and fails closed because the room cannot safely be classified as a DM.
 - **Tagged externals get the guarded turn.** An engaged group message authorizes the turn via adapter-attested `envelope.engaged` (never derived from message content), but the speaker still classifies external: replies are vetted by the enforcer and escalate to the owner's approve-once / deny / make-a-rule card — the same pattern as Spaces. Slash commands stay closed to externals.
 - **Escalation cards reach the kazee owner.** `ownerTarget` used to return env-seeded kazee owner handles as the raw user id, but kazee sends need a chat-document id, so approval cards would 404. User-id handles now resolve through `openDirectChat`, falling back to the configured owner target.
 - New release-chain tests: `test-people-owner-seed.js` (env seed, legacy precedence, no-signal refusal) and `test-kazee-group-gate.js` (mention/reply engagement, free-reply, 1:1, meta failure, meta cache, engaged access pass-through).

package/core/handlers.js

@@ -20,7 +20,7 @@ const {
   getProviderSettings, resolveProviderSettings,
   getProjectSessions, getLastProjectSession, userOwnsProviderSession,
   createSessionCallbackToken, linkIdentity,
-  roomSettingsFor, setRoomSetting,
+  roomSettingsFor, setRoomSetting, cancelFlagFor,
 } = require("./state");
 const { canonicalForChannel, canonicalForTelegram, normalizeCanonicalUserId, channelKey, identities, isConfiguredOwnerChannel, removeIdentityMapping } = require("./identity");
 const { isChatAuthorized, isChatOwner, recordPendingAuthRequest, authRequestLabel, hasOwner, bootstrapOwner } = require("./access");
@@ -643,21 +643,70 @@ async function requestAgentSpaceUpgrade() {
   });
 }
 
-// True when the running bot's source lives at /app (docker image layout from
-// our Dockerfile). In that case `npm install -g` can't actually upgrade us:
-// the process reads code from /app, not from the global npm root, and uid
-// 1001 can't write to /usr/local/lib/node_modules anyway. Detect this and
-// run an in-place tarball overlay instead.
-function isDockerAppLayout() {
+// The directory the RUNNING bot's source actually lives in. Everything about
+// upgrading has to be judged against this, never against `npm root -g`.
+function runningInstallRoot() {
+  return path.resolve(path.join(__dirname, ".."));
+}
+
+// Where `npm install -g` would place our package, or null when npm cannot be
+// asked. Null means "cannot tell" and callers fall back to the npm path.
+function globalInstallRoot() {
+  try {
+    const root = execSync("npm root -g", {
+      encoding: "utf-8", timeout: 15000,
+      cwd: process.env.HOME || require("os").homedir(),
+      env: { ...process.env, PATH: FULL_PATH },
+    }).trim();
+    if (!root) return null;
+    return path.resolve(path.join(root, "@inetafrica", "open-claudia"));
+  } catch (e) {
+    return null;
+  }
+}
+
+// True when `npm install -g` cannot upgrade THIS process, because the code it
+// executes does not live where npm would write. Two shapes seen in the wild:
+//
+//   1. the docker /app layout from our Dockerfile - the process reads code
+//      from /app and uid 1001 cannot write the global root anyway;
+//   2. a host whose npm prefix has moved away from where the bot was
+//      installed. Observed 2026-09-23 on Sumeet's Mac: launchd runs
+//      /usr/local/lib/node_modules/@inetafrica/open-claudia/bot.js while
+//      `npm config get prefix` is ~/.local, so `npm install -g` faithfully
+//      installed a copy nothing executes. Three releases (3.4.18, 3.4.19,
+//      3.4.20) landed in that copy and /upgrade reported success each time
+//      while the running bot stayed on 3.4.17 from 7 Sep.
+//
+// Case 2 is why this is a directory comparison and not a string match on
+// "/app": the failure is general, and it is silent, which is the worst part.
+// Version recorded in a given install directory, or null if unreadable. The
+// ONLY honest way to answer "did the upgrade take": read it back from the
+// directory the process executes from.
+function installedVersionAt(dir) {
   try {
-    const pkgPath = path.resolve(path.join(__dirname, "..", "package.json"));
-    return pkgPath === "/app/package.json";
+    return JSON.parse(fs.readFileSync(path.join(dir, "package.json"), "utf-8")).version || null;
+  } catch (e) {
+    return null;
+  }
+}
+
+function npmGlobalUpgradeWouldMiss(probe = {}) {
+  try {
+    const running = probe.running !== undefined ? probe.running : runningInstallRoot();
+    if (running === "/app") return true;
+    const global = probe.global !== undefined ? probe.global : globalInstallRoot();
+    // Cannot tell where npm would write - keep the historical behaviour and
+    // let `npm install -g` run. The post-install version check below is what
+    // catches it if that guess was wrong.
+    if (!global) return false;
+    return global !== running;
   } catch (e) {
     return false;
   }
 }
 
-function inPlaceTarballUpgrade(targetVersion) {
+function inPlaceTarballUpgrade(targetVersion, targetDir = "/app") {
   const tmpDir = `/tmp/oc-upgrade-${process.pid}-${Date.now()}`;
   fs.mkdirSync(tmpDir, { recursive: true });
   const env = { ...process.env, PATH: FULL_PATH, HOME: process.env.HOME || require("os").homedir() };
@@ -670,10 +719,10 @@ function inPlaceTarballUpgrade(targetVersion) {
   execSync(`tar -xzf "${tgzPath}" -C "${tmpDir}"`, { encoding: "utf-8", timeout: 60000 });
   // npm pack tarballs always extract into a top-level "package/" directory.
   // cp -a preserves perms and symlinks; the trailing /. copies contents only.
-  execSync(`cp -a "${tmpDir}/package/." /app/`, { encoding: "utf-8", timeout: 60000 });
-  try { fs.chmodSync("/app/bin/cli.js", 0o755); } catch (e) {}
+  execSync(`cp -a "${tmpDir}/package/." "${targetDir}/"`, { encoding: "utf-8", timeout: 60000 });
+  try { fs.chmodSync(path.join(targetDir, "bin", "cli.js"), 0o755); } catch (e) {}
   execSync(`npm install --omit=dev --no-audit --no-fund`, {
-    encoding: "utf-8", cwd: "/app", timeout: 240000, env,
+    encoding: "utf-8", cwd: targetDir, timeout: 240000, env,
   });
   try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch (e) {}
 }
@@ -731,11 +780,12 @@ register({
         return;
       }
     }
-    // Docker /app layout: bot runs from baked-in source, not from the global
-    // npm root, and as a non-root user. Do an in-place tarball overlay and
-    // exit; whatever orchestrates the container (k8s, docker restart=always)
-    // brings us back on the new source.
-    if (isDockerAppLayout()) {
+    // The running source does not live where `npm install -g` writes - docker
+    // /app, or a host whose npm prefix has drifted. Overlay the tarball onto
+    // the directory we actually execute from and exit; whatever supervises us
+    // (k8s, docker restart=always, launchd) brings us back on the new source.
+    if (npmGlobalUpgradeWouldMiss()) {
+      const overlayDir = runningInstallRoot();
       try { process.chdir("/tmp"); } catch (e) {}
       let latest = null;
       try {
@@ -751,19 +801,27 @@ register({
         await send(`Already on the latest version (v${CURRENT_VERSION}).`);
         return;
       }
-      await send(`Upgrading v${CURRENT_VERSION} → v${latest} (in-place tarball overlay into /app)...`);
+      await send(`Upgrading v${CURRENT_VERSION} → v${latest} (in-place overlay into ${overlayDir})...`);
       try {
-        inPlaceTarballUpgrade(latest);
+        inPlaceTarballUpgrade(latest, overlayDir);
       } catch (e) {
         const errOutput = (e.stdout || e.stderr || e.message || String(e)).slice(-700);
         await send(`Upgrade failed:\n${errOutput}`);
         return;
       }
+      // Verify against the directory we RUN from. Reporting a version read
+      // from anywhere else is how three releases were announced as installed
+      // while the running bot never moved.
+      const landed = installedVersionAt(overlayDir);
+      if (landed !== latest) {
+        await send(`Upgrade did NOT take: ${overlayDir} still reports v${landed || "unknown"}, expected v${latest}. Nothing was restarted.`);
+        return;
+      }
       let newVersion = latest;
       let whatsNew = "";
       try {
-        newVersion = JSON.parse(fs.readFileSync("/app/package.json", "utf-8")).version;
-        const changelog = fs.readFileSync("/app/CHANGELOG.md", "utf-8");
+        newVersion = JSON.parse(fs.readFileSync(path.join(overlayDir, "package.json"), "utf-8")).version;
+        const changelog = fs.readFileSync(path.join(overlayDir, "CHANGELOG.md"), "utf-8");
         let versionHeader = `## v${newVersion}`;
         let start = changelog.indexOf(versionHeader);
         if (start < 0) { versionHeader = `## ${newVersion}`; start = changelog.indexOf(versionHeader); }
@@ -809,11 +867,20 @@ register({
         const { ensureSetup: postUpgradeSetup } = require("../health");
         postUpgradeSetup();
       } catch (e) {}
-      const root = execSync("npm root -g", { encoding: "utf-8", cwd: process.env.HOME || require("os").homedir(), env: { ...process.env, PATH: FULL_PATH } }).trim();
-      const newPkg = JSON.parse(fs.readFileSync(path.join(root, "@inetafrica", "open-claudia", "package.json"), "utf-8"));
+      // Read the result back from the directory we EXECUTE from. Reading it
+      // from `npm root -g` only proves npm wrote somewhere, which is exactly
+      // the bug that let 3.4.18/19/20 be announced as installed on a host
+      // whose prefix had drifted while the running bot stayed on 3.4.17.
+      const runRoot = runningInstallRoot();
+      const landed = installedVersionAt(runRoot);
+      if (installTarget !== "latest" && landed !== installTarget) {
+        await send(`Upgrade did NOT take: ${runRoot} still reports v${landed || "unknown"}, expected v${installTarget}. npm installed elsewhere (prefix ${globalInstallRoot() || "unknown"}). Nothing was restarted.`);
+        return;
+      }
+      const newPkg = { version: landed || installTarget };
       let whatsNew = "";
       try {
-        const changelog = fs.readFileSync(path.join(root, "@inetafrica", "open-claudia", "CHANGELOG.md"), "utf-8");
+        const changelog = fs.readFileSync(path.join(runRoot, "CHANGELOG.md"), "utf-8");
         let versionHeader = `## v${newPkg.version}`;
         let start = changelog.indexOf(versionHeader);
         if (start < 0) { versionHeader = `## ${newPkg.version}`; start = changelog.indexOf(versionHeader); }
@@ -882,14 +949,14 @@ register({
       return;
     }
     const direction = isNewerVersion(resolved, CURRENT_VERSION) ? "Moving" : "Rolling back";
-    if (isDockerAppLayout()) {
+    if (npmGlobalUpgradeWouldMiss()) {
       try { process.chdir("/tmp"); } catch (e) {}
       const podNote = process.env.AGENTSPACE_POD_TOKEN
         ? "\nNote: this is an in-place overlay — a pod recreate returns to the deployment image version. Roll the image for a permanent downgrade."
         : "";
       await send(`${direction} v${CURRENT_VERSION} → v${resolved} (in-place tarball overlay into /app)...${podNote}`);
       try {
-        inPlaceTarballUpgrade(resolved);
+        inPlaceTarballUpgrade(resolved, runningInstallRoot());
       } catch (e) {
         const errOutput = (e.stdout || e.stderr || e.message || String(e)).slice(-700);
         await send(`Downgrade failed:\n${errOutput}`);
@@ -1575,6 +1642,17 @@ register({
   },
 });
 
+// How long /stop waits for a stopped child to report its exit before it
+// releases the room anyway (SIGKILL follows SIGTERM after 3 s).
+const STOP_RELEASE_MS = 30 * 1000;
+function releaseStuckStop(state, proc, stopped) {
+  if (state.runningProcess !== proc) return;
+  if (proc.exitCode != null || proc.signalCode != null) return; // exited: its unwind releases the room
+  console.warn(`[stop] child ${proc.pid} never reported its exit; releasing the room`);
+  state.runningProcess = null;
+  if (state.cancelRequested === stopped) state.cancelRequested = false;
+}
+
 register({
   name: "stop", description: "Cancel running task",
   handler: async (env) => {
@@ -1588,14 +1666,23 @@ register({
       return n ? ` ${n} queued message${n === 1 ? "" : "s"} will run next.` : "";
     };
     if (state.runningProcess) {
-      const pid = state.runningProcess.pid;
+      const proc = state.runningProcess;
+      const pid = proc.pid;
       const { killProcessTree } = require("./process-tree");
       // Quiet unwind: deliverForegroundResult consumes this flag to suppress
-      // the "run failed" diagnostic the SIGTERM exit would otherwise emit.
-      state.cancelRequested = true;
+      // the "run failed" diagnostic the SIGTERM exit would otherwise emit. It
+      // names the run it stops, so it can never cancel a different one.
+      const stopped = cancelFlagFor(state);
+      state.cancelRequested = stopped;
       killProcessTree(pid, "SIGTERM");
       setTimeout(() => killProcessTree(pid, "SIGKILL"), 3000);
-      state.runningProcess = null;
+      // The room stays busy until the stopped run has unwound: its own
+      // finally releases the lock, clears this flag and drains the queue.
+      // Releasing it here let a message sent in those seconds start, meet the
+      // flag and be cancelled "before the provider started" (24 Sep: three
+      // messages lost after one /stop). Backstop: a child that never reports
+      // its exit must not pin the room.
+      setTimeout(() => releaseStuckStop(state, proc, stopped), STOP_RELEASE_MS).unref?.();
       // Stop pending preview flushes but keep statusMessageId/Channel: the
       // killed run's delivery unwind edits the preview to drop its footer.
       if (state.streamInterval) { clearTimeout(state.streamInterval); state.streamInterval = null; }
@@ -1608,7 +1695,7 @@ register({
     } else if (state.preparingRun) {
       // Turn is mid-recall/prompt-build — no process to kill yet. Flag it so
       // the runner's pre-spawn shouldAbort checkpoint bails before spawning.
-      state.cancelRequested = true;
+      state.cancelRequested = cancelFlagFor(state);
       if (state.typingHeartbeat) { clearInterval(state.typingHeartbeat); state.typingHeartbeat = null; state.thinkingPhase = false; state.typingTick = null; }
       try { currentAdapter()?.typingStop?.(currentChannelId()); } catch (_) {}
       await sideCancellation;
@@ -2687,3 +2774,8 @@ register({
     send("Usage: /intros | /intros approve <id> | /intros reject <id> [reason]");
   },
 });
+
+module.exports.runningInstallRoot = runningInstallRoot;
+module.exports.globalInstallRoot = globalInstallRoot;
+module.exports.npmGlobalUpgradeWouldMiss = npmGlobalUpgradeWouldMiss;
+module.exports.installedVersionAt = installedVersionAt;

package/core/providers/claude.js

@@ -12,14 +12,19 @@ const { createClaudeHookTransport } = require("./claude-hook");
 // them. Verified 2026-09-23 on 2.1.280: the API reported claude-opus-5-5 as the
 // serving model (canonicalModel claude-opus-5-5, 1M context), while 2.1.258
 // returned "does not support this model; version 2.1.280 or newer is required".
+// The opus 4.x entries (4-8, 4-7, 4-6) were dropped from the picker in 3.4.21 —
+// superseded, and the menu had grown long enough to bury the current models.
+// This removes the BUTTONS only: /model takes a typed name verbatim without
+// consulting this list, so `/model claude-opus-4-8` still works as a rollback.
+// The list is consulted on tapped mb: callbacks (core/actions.js), whose job is
+// to reject a stale button from an old message — that is the intended effect.
+// claude-sonnet-4-6 and claude-haiku-4-5 STAY: they are the tier models for
+// utility work (see tierModel below), not just picker entries.
 const CLAUDE_MODELS = Object.freeze([
   "claude-fable-5-1",
   "claude-fable-5",
   "claude-opus-5-5",
   "claude-opus-5",
-  "claude-opus-4-8",
-  "claude-opus-4-7",
-  "claude-opus-4-6",
   "claude-sonnet-4-6",
   "claude-haiku-4-5-20251001",
 ]);

package/core/runner.js

@@ -13,7 +13,7 @@ const {
 } = require("./config");
 const {
   currentState, saveState, recordSession,
-  resetSessionUsage, acquireRunLock, getActiveProvider, getProjectKey,
+  resetSessionUsage, acquireRunLock, cancelTargets, getActiveProvider, getProjectKey,
   getProviderSession, setProviderSession, clearProviderSession, quarantineProviderSession, getUsageForSession, commitProviderCompaction,
   resolveProviderSettings,
 } = require("./state");
@@ -1698,9 +1698,10 @@ async function deliverForegroundResult(result, runContext, state = currentState(
   // /stop unwind: the SIGTERM (or pre-spawn abort) that follows a user cancel
   // is not a failure worth announcing — /stop already replied "Cancelled.".
   // The flag is consumed here (and re-cleared on the run's unwind) so it can
-  // never suppress a later run's genuine failure.
-  if (!result.ok && (state.cancelRequested || result.error?.code === "RUN_CANCELLED")) {
-    state.cancelRequested = false;
+  // never suppress a later run's genuine failure; it names the run it stopped.
+  const stoppedHere = cancelTargets(state.cancelRequested, runContext);
+  if (!result.ok && (stoppedHere || result.error?.code === "RUN_CANCELLED")) {
+    if (stoppedHere) state.cancelRequested = false;
     return { ok: true, suppressed: "cancelled" };
   }
   const diagnostic = providerRunDiagnostic(result, runContext);
@@ -1871,6 +1872,18 @@ function settleImmediateEffects(result, runContext, { state, store, capture }) {
 const STREAM_PREVIEW_THROTTLE_MS = 2500;
 const STREAM_PREVIEW_FOOTER = "\n\n⏳ working — /stop to cancel";
 
+// Runs whose interim narration (and, under /verbose, thinking) streams into
+// the chat: the person's own turns, and scheduled wake-ups (watches, wakeups,
+// crons). A scheduled run answers in the same room and settles through
+// deliverForegroundResult, which cleans the preview up exactly as for a
+// foreground turn; without it a watch-woken turn showed only "thinking..."
+// until the final answer. Background runs (dream, review, recall, learn,
+// compaction, subagents, side chats, silent runs) stay silent.
+const STREAM_PREVIEW_PURPOSES = new Set(["foreground", "scheduled"]);
+function streamPreviewAllowed(runContext) {
+  return STREAM_PREVIEW_PURPOSES.has(runContext?.purpose);
+}
+
 // Edited-in-place interim preview: each completed text block the provider
 // emits mid-run is appended to one throttled status message, so the user sees
 // the narration as it happens instead of silence. finalizeStreamPreview
@@ -1911,7 +1924,7 @@ function createStreamPreview({ state, store }) {
   };
 
   const appendChunk = (chunk, runContext) => {
-    if (!enabled || runContext?.purpose !== "foreground" || state.cancelRequested) return;
+    if (!enabled || !streamPreviewAllowed(runContext) || state.cancelRequested) return;
     state.streamBuffer = state.streamBuffer ? `${state.streamBuffer}\n\n${chunk}` : chunk;
     if (state.streamBuffer.length > 20000) state.streamBuffer = state.streamBuffer.slice(-16000);
     if (!state.streamInterval) state.streamInterval = setTimeout(flush, STREAM_PREVIEW_THROTTLE_MS);
@@ -1983,7 +1996,7 @@ function createForegroundService({ state, store, stopTyping, capture, ownsAdmiss
     },
     shouldAbort(runContext, { capture: isCapture } = {}) {
       if (isCapture || !ownsAdmissionLock) return false;
-      if (!state.cancelRequested) return false;
+      if (!cancelTargets(state.cancelRequested, runContext)) return false;
       state.cancelRequested = false;
       return true;
     },
@@ -2197,7 +2210,7 @@ async function executeAdmittedRun(runContext, state, store, capture, ownsAdmissi
     // A cancel flag that survived this run (e.g. /stop raced a run that
     // finished successfully anyway) must not leak into the next turn, where
     // it would falsely abort a queued run or mute a genuine failure.
-    if (ownsAdmissionLock) state.cancelRequested = false;
+    if (ownsAdmissionLock && cancelTargets(state.cancelRequested, runContext)) state.cancelRequested = false;
     if (tracksMainRun && state.activeRunContext === runContext) state.activeRunContext = null;
     stopTyping();
   }
@@ -2265,6 +2278,21 @@ function admitRunContext(prompt, cwd, replyToMsgId, opts = {}) {
   });
 }
 
+// What a message queued behind a long run is waiting for. A short wait is just
+// "Queued."; after two minutes it says what is running and how to stop it, so a
+// busy room never looks like a dead one (24 Sep: an hour behind a watch run).
+const QUEUED_DETAIL_AFTER_MS = 2 * 60 * 1000;
+function queuedNotice(activeRunContext, at = Date.now()) {
+  const since = Number(activeRunContext?.admittedAt);
+  if (!Number.isFinite(since) || at - since < QUEUED_DETAIL_AFTER_MS) return "Queued.";
+  const minutes = Math.floor((at - since) / 60000);
+  const header = String(activeRunContext.userPrompt || "").match(/^\[(Watch triggered|Watch expired|Scheduled cron|Scheduled wakeup) "([^"]*)"/);
+  const kind = header ? { "Watch triggered": "watch", "Watch expired": "watch", "Scheduled cron": "scheduled job", "Scheduled wakeup": "wakeup" }[header[1]] : null;
+  const label = header && header[2].length > 60 ? `${header[2].slice(0, 59).trimEnd()}…` : header?.[2];
+  const what = kind ? `the ${kind} "${label}"` : "an earlier message";
+  return `Queued behind ${what} (running ${minutes} min). /stop cancels it.`;
+}
+
 function runAgent(prompt, cwd, replyToMsgId, opts = {}) {
   const state = currentState();
   const store = chatContext.getStore() || null;
@@ -2294,7 +2322,7 @@ function runAgent(prompt, cwd, replyToMsgId, opts = {}) {
     // task — noise. On a live call, send() is the TTS line: "Queued." would be
     // spoken to the caller. Both stay quiet and just deliver the real reply.
     if (currentAdapter()?.type !== "spaces" && !statusChatterMuted()) {
-      send(state.isCompacting ? "Compacting context, will pick this up next…" : "Queued.", { replyTo: replyToMsgId }).catch(() => {});
+      send(state.isCompacting ? "Compacting context, will pick this up next…" : queuedNotice(state.activeRunContext), { replyTo: replyToMsgId }).catch(() => {});
     }
     return deferred.promise;
   }
@@ -2389,7 +2417,9 @@ function runAgentSilent(prompt, cwd, label, opts = {}) {
 }
 
 module.exports = {
+  queuedNotice,
   admitRunContext,
+  streamPreviewAllowed,
   capturedTranscriptMetadata,
   decorateForegroundInvocation,
   createRunnerService,

package/core/scheduler.js

@@ -41,6 +41,11 @@ const { redactSensitive } = require("./redact");
 const MISSED_WAKEUP_GRACE_MS = 60 * 60 * 1000;
 const RETRY_DELAY_MS = 30 * 1000;
 const BUSY_DELAY_MS = 30 * 1000;
+// A watch alarm that has waited this long behind a busy room says so in the
+// chat, once per occurrence, so a busy room never hides an alarm for hours
+// (24 Sep: the Phone alarm waited 2 h through 244 deferrals, the event-bus
+// alarm 7.5 h through 902).
+const BUSY_NOTICE_AFTER_MS = 15 * 60 * 1000;
 // A watch's `check` command is capped so a hung poll can't wedge the tick.
 const WATCH_CHECK_TIMEOUT_MS = 30 * 1000;
 // Every watch carries a hard expiry so none can idle-poll forever: when the
@@ -110,6 +115,7 @@ function createSchedulerService(dependencies = {}) {
   );
   const retryDelayMs = Number.isFinite(dependencies.retryDelayMs) ? dependencies.retryDelayMs : RETRY_DELAY_MS;
   const busyDelayMs = Number.isFinite(dependencies.busyDelayMs) ? dependencies.busyDelayMs : BUSY_DELAY_MS;
+  const busyNoticeAfterMs = Number.isFinite(dependencies.busyNoticeAfterMs) ? dependencies.busyNoticeAfterMs : BUSY_NOTICE_AFTER_MS;
   const missedGraceMs = Number.isFinite(dependencies.missedGraceMs) ? dependencies.missedGraceMs : MISSED_WAKEUP_GRACE_MS;
   const watchTimeoutMs = Number.isFinite(dependencies.watchTimeoutMs) ? dependencies.watchTimeoutMs : DEFAULT_WATCH_TIMEOUT_MS;
   const occurrenceIdFactory = dependencies.occurrenceIdFactory || (() => uniqueId("occ"));
@@ -345,14 +351,27 @@ function createSchedulerService(dependencies = {}) {
   function markBusy(job) {
     const latest = jobsStore.get(job.id) || job;
     const busyDeferralCount = (latest.busyDeferralCount || 0) + 1;
+    const waited = now() - Number(latest.watchTriggeredAt);
+    const noticeDue = !!latest.check
+      && latest.busyNoticeOccurrenceId !== latest.occurrenceId
+      && Number.isFinite(waited) && waited >= busyNoticeAfterMs;
     const patch = {
       status: "deferred",
       disabled: false,
       busyDeferralCount,
       nextAttemptAt: now() + busyDelayMs,
+      // At most once per occurrence: the marker is persisted with the deferral, before the send.
+      ...(noticeDue ? { busyNoticeOccurrenceId: latest.occurrenceId } : {}),
     };
     const updated = jobsStore.update(job.id, patch) || { ...latest, ...patch };
     armRetry(updated, busyDelayMs);
+    if (noticeDue) {
+      const minutes = Math.floor(waited / 60000);
+      const what = updated.watchExpired ? "timed out" : "triggered";
+      try {
+        Promise.resolve(send(`⏳ Watch "${updated.label}" ${what} ${minutes} min ago and is waiting for the current run to end. /stop ends that run so the watch can go.`)).catch(() => {});
+      } catch (_) { /* a notice only */ }
+    }
     return { ok: false, deferred: true, status: updated.status, job: updated };
   }
 

package/core/state.js

@@ -796,6 +796,16 @@ function acquireRunLock(state = currentState()) {
   return true;
 }
 
+// /stop arms state.cancelRequested with the id of the run it stops (true only
+// when no run context is known), and a run acts on the flag only when it names
+// that run. A bare boolean let a stop outlive its run and cancel the next one.
+function cancelFlagFor(state = currentState()) {
+  return state.activeRunContext?.runId || true;
+}
+function cancelTargets(flag, runContext) {
+  return flag === true || (!!flag && flag === runContext?.runId);
+}
+
 // True when ANY user has a turn running, admitted-and-preparing, compacting, or
 // waiting in its queue. Same busy predicate as acquireRunLock, but across every
 // user state rather than one — the Telegram poll-wedge backstop consults this
@@ -1535,6 +1545,8 @@ module.exports = {
   resetSessionUsage,
   resetSettings,
   acquireRunLock,
+  cancelFlagFor,
+  cancelTargets,
   anyTurnActive,
   saveState,
   loadSessions,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.4.20",
+  "version": "3.4.23",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -10,8 +10,8 @@
     "test:kazee-call": "node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
     "setup": "node setup.js",
     "start": "node bot.js",
-    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-kazee-context-media.js && node test-kazee-typing-join.js && node test-kazee-inbound-dedup.js && node test-typing-phase-push.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
-    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && node test-codex-rollout.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-grants.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-room-provider-settings.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-store-durability.js"
+    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-upgrade-path.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-kazee-context-media.js && node test-kazee-typing-join.js && node test-kazee-inbound-dedup.js && node test-typing-phase-push.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-call-speech.js && node test-kazee-call-session.js",
+    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && node test-codex-rollout.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-stream-preview-purpose.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-grants.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-room-provider-settings.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-store-durability.js"
   },
   "files": [
     "bot.js",

package/test-provider-claude.js

@@ -49,6 +49,15 @@ assert.ok(provider.modelChoices().includes("claude-fable-5-1"));
 assert.ok(provider.modelChoices().includes("claude-opus-5-5"), "opus 5.5 is offered in the model picker");
 assert.ok(provider.modelChoices().includes("claude-fable-5"));
 assert.ok(provider.modelChoices().includes("claude-sonnet-4-6"));
+// 3.4.21: the superseded opus 4.x entries are gone from the picker. They are
+// BUTTONS only - /model takes a typed name verbatim (core/handlers.js reads
+// tail without consulting this list), so the rollback path survives removal.
+for (const retired of ["claude-opus-4-8", "claude-opus-4-7", "claude-opus-4-6"]) {
+  assert.ok(!provider.modelChoices().includes(retired), `retired model still offered: ${retired}`);
+}
+// These two are NOT picker garnish - they are what tierModel returns for
+// utility work, so they must survive any picker trim.
+assert.ok(provider.modelChoices().includes("claude-haiku-4-5-20251001"), "haiku stays: it is the low tier");
 
 // The SHIPPED default, asserted on the real module rather than the fixture above,
 // so changing the constant cannot pass unnoticed. Read from source because the
@@ -65,8 +74,15 @@ assert.match(
 // stop a default bump from silently repricing recall, pack review and the enforcer.
 assert.strictEqual(claudeProvider.tierModel("low"), "claude-haiku-4-5-20251001", "low-tier utility work stays on haiku");
 assert.strictEqual(claudeProvider.tierModel("medium"), "claude-sonnet-4-6", "medium-tier utility work stays on sonnet");
-if (!process.env.CLAUDE_MODEL && !claudeSource.includes("__fixture__")) {
-  assert.ok(CLAUDE_MODELS.includes(claudeProvider.defaultModel()), "the resolved default is a model the picker offers");
+// Guard on the RESOLVED config, not process.env: loadEnv folds ~/.open-claudia/.env
+// over process.env, so an operator pin lives in config.config and never appears in
+// process.env. The 3.4.20 version of this check tested the wrong one and passed
+// locally on a machine that was in fact pinned - fixed in 3.4.21.
+if (!require("./core/config").config.CLAUDE_MODEL) {
+  assert.ok(
+    CLAUDE_MODELS.includes(claudeProvider.defaultModel()),
+    "with no operator override, the resolved default must be a model the picker offers",
+  );
 }
 assert.deepStrictEqual(provider.compatibilityStatus(), {
   state: "compatible",

package/test-provider-language.js

@@ -487,7 +487,20 @@ assert.match(pkg.description, /provider-agnostic coding-agent harness/i);
 // entrypoint never writes one, so the constant is what pods resolve; the pod
 // image installs Claude Code unpinned, which must be >= 2.1.280 or the model is
 // refused with an API 400 rather than degrading.
-assert.strictEqual(pkg.version, "3.4.20", "release version must remain unchanged without explicit approval");
+// 3.4.21 approved by Sumeet 2026-09-23 ("I think we can get rid of the 4th gen",
+// then "Your call" when asked to confirm the scope): drop claude-opus-4-8, 4-7
+// and 4-6 from the Claude picker. Deliberately NOT dropped: claude-sonnet-4-6
+// and claude-haiku-4-5, which tierModel returns for medium/low utility work -
+// removing those would push recall, pack review and the enforcer onto opus.
+// Removal is cosmetic by design: /model accepts a typed name without checking
+// the list, so `/model claude-opus-4-8` remains a working rollback.
+// 3.4.23 approved by Sumeet 2026-09-24 ("push", answering "Shall I install
+// 3.4.23 once that is done?" after "can you fix this in open claudia"): watch and
+// wakeup turns stream like chat turns; /stop keeps the room busy until the
+// stopped run unwinds and its flag names that run, so it no longer cancels the
+// next messages; "Queued." names what it waits on; a watch alarm stuck 15 min
+// behind a busy room posts one line.
+assert.strictEqual(pkg.version, "3.4.23", "release version must remain unchanged without explicit approval");
 for (const keyword of ["claude", "codex", "coding-agent", "provider-agnostic"]) {
   assert.ok(pkg.keywords.includes(keyword), `package keyword missing: ${keyword}`);
 }

package/test-provider-scheduler.js

@@ -633,6 +633,43 @@ async function busyRestartAndMissedProbe(createSchedulerService) {
   assert.strictEqual(missedTimers.length, 1, "a missed wakeup gets exactly one startup attempt");
 }
 
+async function busyWatchNoticeProbe(createSchedulerService) {
+  // A watch alarm waiting behind a busy room: silent for 15 minutes, then one
+  // plain line, never a second for the same occurrence; the next occurrence
+  // may say so again.
+  let clock = 1_720_000_000_000;
+  let checks = 0;
+  const h = schedulerHarness(createSchedulerService, [baseJob({
+    id: "alarm", kind: "cron", schedule: "*/15 * * * *", check: "fixture-check", repeat: true,
+    label: "Phone alarm", expiresAt: clock + 24 * 60 * 60 * 1000,
+  })], { now: () => clock, runWatchCheck: async () => { checks++; return { code: 0 }; } });
+  h.state.runningProcess = { pid: 1 };
+  await h.service.fireJob("alarm");                    // triggers and latches
+  assert.strictEqual(checks, 1);
+  for (const minutes of [5, 10, 14]) {
+    clock = 1_720_000_000_000 + minutes * 60_000;
+    assert.strictEqual((await h.service.fireJob("alarm")).deferred, true);
+  }
+  assert.strictEqual(h.sends.length, 0, "no notice before 15 minutes");
+  clock = 1_720_000_000_000 + 16 * 60_000;
+  await h.service.fireJob("alarm");
+  assert.deepStrictEqual(h.sends, ['⏳ Watch "Phone alarm" triggered 16 min ago and is waiting for the current run to end. /stop ends that run so the watch can go.']);
+  for (const minutes of [20, 45, 120]) {
+    clock = 1_720_000_000_000 + minutes * 60_000;
+    await h.service.fireJob("alarm");
+  }
+  assert.strictEqual(h.sends.length, 1, "one notice per occurrence");
+  assert.strictEqual(h.jobsStore.get("alarm").busyNoticeOccurrenceId, "occ-wake-1", "the marker is persisted");
+  assert.strictEqual(checks, 1, "a latched alarm is not re-checked while it waits");
+
+  // A wakeup waiting behind the same run stays quiet.
+  const w = schedulerHarness(createSchedulerService, [baseJob({ id: "wake" })], { now: () => clock });
+  w.state.runningProcess = { pid: 1 };
+  clock += 60 * 60_000;
+  await w.service.fireJob("wake");
+  assert.strictEqual(w.sends.length, 0);
+}
+
 async function durablePendingProbe(createSchedulerService, jobsApi) {
   const configDir = fs.mkdtempSync(path.join(os.tmpdir(), "oc-pending-restart-"));
   let clock = 1_720_000_000_500;
@@ -659,7 +696,9 @@ async function durablePendingProbe(createSchedulerService, jobsApi) {
       assert.strictEqual(store.get(kind).attemptCount, 0);
       assert.strictEqual(store.get(kind).disabled, false);
       assert.strictEqual(checks, kind === "wakeup" ? 0 : 1);
-      assert.strictEqual(h.sends.length, 0);
+      // A watch that waits says so once; a wakeup stays quiet.
+      assert.strictEqual(h.sends.length, kind === "wakeup" ? 0 : 1);
+      if (kind !== "wakeup") assert.match(h.sends[0], /^⏳ Watch "fixture wakeup" (triggered|timed out) 60 min ago/);
       h.service.stopAll();
 
       // Reopen the real on-disk store and construct a new scheduler, as boot does.
@@ -1043,6 +1082,7 @@ async function main() {
   await detachedHistoricalBranchProbe(schedulerApi.createSchedulerService);
   await busyRestartAndMissedProbe(schedulerApi.createSchedulerService);
   await durablePendingProbe(schedulerApi.createSchedulerService, jobsApi);
+  await busyWatchNoticeProbe(schedulerApi.createSchedulerService);
   await unavailableAndFallbackProbe(schedulerApi.createSchedulerService);
   await cronOccurrenceProbe(schedulerApi.createSchedulerService);
   await watchGateProbe(schedulerApi.createSchedulerService);

package/test-run-lock.js

@@ -60,4 +60,35 @@ const { acquireRunLock } = require("./core/state");
   assert.strictEqual(acquireRunLock(shared), true, "lock is re-acquirable once the turn fully releases");
 }
 
+// A /stop flag names the run it stops. Only that run (or a legacy bare `true`)
+// may act on it: a stop that outlived its run cancelled the next message
+// "before the provider started" (24 Sep, three messages lost after one /stop).
+{
+  const { cancelFlagFor, cancelTargets } = require("./core/state");
+  assert.strictEqual(cancelFlagFor({ activeRunContext: { runId: "run-a" } }), "run-a", "the flag names the active run");
+  assert.strictEqual(cancelFlagFor({ activeRunContext: null }), true, "no known run: a bare flag");
+  assert.strictEqual(cancelTargets("run-a", { runId: "run-a" }), true, "the stopped run sees its stop");
+  assert.strictEqual(cancelTargets("run-a", { runId: "run-b" }), false, "another run never does");
+  assert.strictEqual(cancelTargets(true, { runId: "run-b" }), true, "a bare flag still stops whatever is preparing");
+  assert.strictEqual(cancelTargets(false, { runId: "run-a" }), false, "no stop, no cancel");
+  assert.strictEqual(cancelTargets("run-a", null), false, "no run context, no match");
+}
+
+// "Queued." says what the room is busy with once the wait is long enough to
+// look like a dead bot.
+{
+  const { queuedNotice } = require("./core/runner");
+  const t0 = 1_720_000_000_000;
+  assert.strictEqual(queuedNotice(null, t0), "Queued.");
+  assert.strictEqual(queuedNotice({ admittedAt: t0, userPrompt: "hi" }, t0 + 60_000), "Queued.", "a short wait stays terse");
+  assert.strictEqual(queuedNotice({ admittedAt: t0, userPrompt: "hi" }, t0 + 5 * 60_000),
+    "Queued behind an earlier message (running 5 min). /stop cancels it.");
+  assert.strictEqual(queuedNotice({ admittedAt: t0, userPrompt: '[Watch triggered "Phone alarm" fired at x; occurrence y]\nbody' }, t0 + 42 * 60_000),
+    'Queued behind the watch "Phone alarm" (running 42 min). /stop cancels it.');
+  assert.strictEqual(queuedNotice({ admittedAt: t0, userPrompt: '[Scheduled wakeup "Check CI" fired at x]' }, t0 + 3 * 60_000),
+    'Queued behind the wakeup "Check CI" (running 3 min). /stop cancels it.');
+  const long = queuedNotice({ admittedAt: t0, userPrompt: `[Watch triggered "${"x".repeat(90)}" fired at x]` }, t0 + 3 * 60_000);
+  assert.ok(long.includes(`"${"x".repeat(59)}…"`), "a long label is shortened to 60 characters");
+}
+
 console.log("run-lock OK");