@stage-labs/metro 0.1.0-beta.324 → 0.1.0-beta.326

package/runtime/node_modules/@metro-labs/daemon/src/channels/inbound.ts

@@ -11,7 +11,7 @@ import { isMetroNotice } from './notice.js';
 import { replyMeta } from './addressed.js';
 import { reactContent, reactionEmoji } from './react-note.js';
 import {
-  capSet,
+  capSize,
   displayNameMeta,
   missingAttachmentNames,
   senderMeta,
@@ -76,7 +76,7 @@ export class InboundRelay {
   noteSent(messageId: string): void {
     if (!messageId) return;
     this.sentIds.add(messageId);
-    capSet(this.sentIds, SENT_IDS_MAX);
+    capSize(this.sentIds, SENT_IDS_MAX);
   }
 
   private notify(method: string, params: Record<string, unknown>): Promise<void> {
@@ -283,7 +283,7 @@ export class InboundRelay {
     }
     if (!base.line) return;
     this.allowedLines.add(base.line);
-    capSet(this.allowedLines, ALLOWED_LINES_MAX);
+    capSize(this.allowedLines, ALLOWED_LINES_MAX);
   }
 
   private droppedSender(ev: Record<string, unknown>, from: string, line: string): boolean {

package/runtime/node_modules/@metro-labs/daemon/src/channels/pending.ts

@@ -36,9 +36,9 @@ export interface MediaCtx {
   callMeta?: () => Record<string, string>;
 }
 
-export function capSet(set: Set<string>, max: number): void {
+export function capSize(set: Set<string> | Map<string, unknown>, max: number): void {
   while (set.size > max) {
-    const oldest = set.values().next();
+    const oldest = set.keys().next();
     if (oldest.done) break;
     set.delete(oldest.value);
   }

package/runtime/node_modules/@metro-labs/daemon/src/claude/files.ts

@@ -152,7 +152,7 @@ function sessionOf(path: string, id: string, mtime: number, size: number): Claud
   return {
     id,
     title: (titled === undefined ? null : str(titled.aiTitle)) ?? firstPrompt(head) ?? 'Untitled session',
-    startedAt: str(head.find((l) => str(l.timestamp) !== null)?.timestamp) ?? null,
+    startedAt: str(head.find((l) => str(l.timestamp) !== null)?.timestamp),
     lastAt: new Date(mtime).toISOString(),
     bytes: size,
     gitBranch: str(meta.gitBranch),

package/runtime/node_modules/@metro-labs/daemon/src/claude/skills.ts

@@ -104,7 +104,7 @@ const skillTemplate = (name: string): string =>
   ['---', `name: ${name}`, 'description: what this skill does, and when Claude should reach for it', '---', '', `# ${name}`, '', 'Write the instructions here.', ''].join('\n');
 
 export function createClaudeSkill(name: string, text: string | undefined, dir = claudeDir()): ClaudeSkill {
-  if (typeof name !== 'string' || !SKILL_NAME_RE.test(name))
+  if (!SKILL_NAME_RE.test(name))
     throw new ApiError('a skill name is lowercase letters, digits and dashes, up to 64 characters', 400);
   const path = join(userSkillsRoot(dir), name, FILE);
   if (existsSync(path)) throw new ApiError('a skill by that name already lives there', 409);

package/runtime/node_modules/@metro-labs/daemon/src/files/attach-grant.ts

@@ -1,5 +1,6 @@
 import { randomBytes, timingSafeEqual } from 'node:crypto';
 import { ID_RE } from '@metro-labs/core/ids';
+import { isRecord } from '@metro-labs/core/is-record';
 import { readFileSync } from 'node:fs';
 import { resolveCachedAttachment } from '@metro-labs/core/stations/attachments';
 import { writeSecure } from '@metro-labs/core/secure-fs';
@@ -23,8 +24,8 @@ function parseGrant(raw: string): AttachmentGrant | undefined {
   } catch {
     return undefined;
   }
-  if (typeof parsed !== 'object' || parsed === null) return undefined;
-  const { token, agentId, mintedAt } = parsed as Record<string, unknown>;
+  if (!isRecord(parsed)) return undefined;
+  const { token, agentId, mintedAt } = parsed;
   if (typeof token !== 'string' || token === '') return undefined;
   if (typeof agentId !== 'string' || !ID_RE.test(agentId)) return undefined;
   return {

package/runtime/node_modules/@metro-labs/daemon/src/files/attach-serve.ts

@@ -40,7 +40,7 @@ export function attachmentUrl(
   pathOrName: string,
   agentId: string,
 ): string | null {
-  const base = publicBaseUrl() ?? loopbackBase();
+  const base = publicBaseOrDefault();
   if (!base) return null;
   const name = pathOrName.split('/').pop();
   if (!name || !resolveCachedAttachment(name)) return null;

package/runtime/node_modules/@metro-labs/daemon/src/files/upload-api.ts

@@ -37,11 +37,8 @@ const VAGUE_MIMES = new Set([
 
 const mib = (n: number): string => `${Math.round(n / (1024 * 1024))} MiB`;
 
-const uploadLimit = (): string =>
-  `${mib(MAX_UPLOAD_BYTES)} (${MAX_UPLOAD_BYTES} bytes)`;
-
 const tooLarge = (): string =>
-  `upload exceeds the ${uploadLimit()} per-file limit; ` +
+  `upload exceeds the ${mib(MAX_UPLOAD_BYTES)} (${MAX_UPLOAD_BYTES} bytes) per-file limit; ` +
   'send a link in `text` for anything larger';
 
 const noRoom = (): string =>
@@ -96,9 +93,8 @@ function declaredLength(req: IncomingMessage): number | undefined {
 
 function assertRoomForDeclared(req: IncomingMessage, room: number): void {
   const declared = declaredLength(req);
-  if (declared === undefined) return;
-  if (declared > MAX_UPLOAD_BYTES) throw new ApiError(tooLarge(), 413);
-  if (declared > room) throw new ApiError(noRoom(), 507);
+  const over = declared === undefined ? undefined : overflowAt(declared, room);
+  if (over !== undefined) throw over;
 }
 
 async function drainInto(

package/runtime/node_modules/@metro-labs/daemon/src/gateway/model-api.ts

@@ -43,7 +43,7 @@ function helpersBody(setup: ModelSetup): Record<string, unknown> | null {
   const helpers = helperSetup(setup);
   if (helpers === null) return null;
   const primary = primaryRoute(helpers);
-  return { route: primary?.connection.id ?? '', model: primary?.model ?? '', fallbacks: helpers.fallbacks, chain: chainStatus(helpers) };
+  return { route: primary?.connection.id ?? '', model: primary?.model ?? '', fallbacks: helpers.fallbacks, chain: chainStatus(helpers, Date.now(), setupNotReady) };
 }
 
 export function settingsBody(deps: ModelApiDeps): Record<string, unknown> {
@@ -59,7 +59,7 @@ export function settingsBody(deps: ModelApiDeps): Record<string, unknown> {
     reason,
     connections: setup.connections.map(publicConnection),
     fallbacks: setup.fallbacks,
-    chain: chainStatus(setup),
+    chain: chainStatus(setup, Date.now(), setupNotReady),
     helpers: helpersBody(setup),
     effort: { ...EFFORT_DEFAULTS, ...setup.effort },
   };

package/runtime/node_modules/@metro-labs/daemon/src/mcp/accounts.ts

@@ -7,6 +7,7 @@ import {
 import { listEndpoints } from '../stations/webhook-endpoints.js';
 import { hookUrl, threemaCallbackUrl } from '../stations/attach.js';
 import { accountStatusOf } from '@metro-labs/core/stations/account-status';
+import { isRecord } from '@metro-labs/core/is-record';
 import { accountEnabled, agentIdForAccount, allowlistForAccount, approversForAccount, knownAccounts, type KnownAccount } from '../agents/map.js';
 
 const accountId = (acc: unknown): string | undefined => {
@@ -14,16 +15,9 @@ const accountId = (acc: unknown): string | undefined => {
   return typeof id === 'string' ? id : undefined;
 };
 
-const asRecord = (acc: unknown): Record<string, unknown> | undefined =>
-  typeof acc === 'object' && acc !== null && !Array.isArray(acc)
-    ? (acc as Record<string, unknown>)
-    : undefined;
-
 function withAgentId(station: string, acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  const id = typeof rec.id === 'string' ? rec.id : undefined;
-  if (id === undefined) return acc;
+  if (!isRecord(acc) || typeof acc.id !== 'string') return acc;
+  const id = acc.id;
   const agentId = agentIdForAccount(station, id);
   if (agentId === undefined) return acc;
   const allowlist = allowlistForAccount(station, id);
@@ -31,7 +25,7 @@ function withAgentId(station: string, acc: unknown): unknown {
   const policy = stored === undefined ? {} : { policy: stored };
   const approvers = approversForAccount(station, id);
   const extra = approvers.length === 0 ? policy : { ...policy, approvers };
-  const tagged = allowlist === undefined ? { ...rec, agentId, ...extra } : { ...rec, agentId, allowlist, ...extra };
+  const tagged = allowlist === undefined ? { ...acc, agentId, ...extra } : { ...acc, agentId, allowlist, ...extra };
   return accountEnabled(station, id) ? tagged : { ...tagged, enabled: false };
 }
 
@@ -79,17 +73,15 @@ function inCoreAccounts(station: string): unknown[] {
 }
 
 function withCallbackUrl(acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  const { callbackId, callbackToken, ...rest } = rec;
+  if (!isRecord(acc)) return acc;
+  const { callbackId, callbackToken, ...rest } = acc;
   if (typeof callbackId !== 'string' || typeof callbackToken !== 'string') return rest;
   return { ...rest, callback: threemaCallbackUrl(callbackId, callbackToken) };
 }
 
 function withStatus(reports: boolean, acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined || !('status' in rec)) return acc;
-  const { status, ...rest } = rec;
+  if (!isRecord(acc) || !('status' in acc)) return acc;
+  const { status, ...rest } = acc;
   const live = reports ? accountStatusOf(status) : null;
   return live === null ? rest : { ...rest, status: live };
 }
@@ -168,9 +160,8 @@ async function loadStations(): Promise<ScopedAccounts> {
 const URL_SECRETS = new Set(['endpoint', 'callback']);
 
 function withoutUrlSecrets(acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  return Object.fromEntries(Object.entries(rec).filter(([key]) => !URL_SECRETS.has(key)));
+  if (!isRecord(acc)) return acc;
+  return Object.fromEntries(Object.entries(acc).filter(([key]) => !URL_SECRETS.has(key)));
 }
 
 export async function gatherAccounts(

package/runtime/node_modules/@metro-labs/daemon/src/mcp/call-tools.ts

@@ -139,10 +139,6 @@ function refusal(m: MessageArgs, text: string | undefined, requested: CanonicalA
   return undefined;
 }
 
-function noteSent(m: MessageArgs, messageId: string | undefined): void {
-  if (messageId !== undefined) m.onSent?.(messageId);
-}
-
 async function handleSend(m: MessageArgs): Promise<ToolResult> {
   if (m.a.speech !== undefined) return sendSpeech(m.line, m.a);
   const text = m.a.text as string | undefined;
@@ -161,7 +157,7 @@ async function handleSend(m: MessageArgs): Promise<ToolResult> {
       ? await sendNative(m, text, replyTo, atts)
       : await sendForwarded(m, text, replyTo, atts);
     if (!sent.labels.length) return errResult(NOTHING_TO_SEND);
-    noteSent(m, sent.messageId);
+    if (sent.messageId !== undefined) m.onSent?.(sent.messageId);
     const done = withId(`sent: ${sent.labels.join(', ')}`, sent.messageId);
     return ok(sent.thread === undefined ? done : `${done} — new thread line: ${sent.thread}`);
   } finally {

package/runtime/node_modules/@metro-labs/daemon/src/mcp/event-store.ts

@@ -5,6 +5,7 @@ import type {
 } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
 import { str } from '@metro-labs/core/str';
+import { isRecord } from '@metro-labs/core/is-record';
 import { eventInScope } from '../agents/scope.js';
 import { CALL_NOTICE, CALL_STATE } from '@metro-labs/core/call';
 
@@ -28,10 +29,8 @@ const SEP = '_';
 
 function frameLine(message: JSONRPCMessage): string | undefined {
   const params: unknown = (message as { params?: unknown }).params;
-  if (typeof params !== 'object' || params === null) return undefined;
-  const meta: unknown = (params as { meta?: unknown }).meta;
-  if (typeof meta !== 'object' || meta === null) return undefined;
-  return str((meta as { line?: unknown }).line) || undefined;
+  if (!isRecord(params) || !isRecord(params.meta)) return undefined;
+  return str(params.meta.line) || undefined;
 }
 
 const isCallNotice = (message: JSONRPCMessage): boolean => 'method' in message && (message.method === CALL_NOTICE || message.method === CALL_STATE);

package/runtime/node_modules/@metro-labs/daemon/src/mcp/group-tools.ts

@@ -65,9 +65,8 @@ function forwardArgs(a: Record<string, unknown>): Record<string, unknown> {
   const args: Record<string, unknown> = {};
   const members = strList(a.members);
   if (members.length) args.members = members;
-  for (const key of ['name', 'account', 'parent', 'addresses', 'inboxIds'])
+  for (const key of ['name', 'account', 'parent', 'addresses', 'inboxIds', 'private'])
     if (a[key] !== undefined) args[key] = a[key];
-  if (a.private !== undefined) args.private = a.private;
   return args;
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/index.ts

@@ -15,6 +15,7 @@ import {
   serveChannelGet,
 } from './raw-get-stream.js';
 import { errMsg } from '@metro-labs/core/log';
+import { isRecord } from '@metro-labs/core/is-record';
 import { channelLog, type McpSession } from './session.js';
 import { SessionSlot } from './session-slot.js';
 import { connectCallBridge } from './call-bridge.js';
@@ -22,10 +23,7 @@ import { connectServerApprovals } from './server-approvals.js';
 import { handleIncomingDiagnostic } from './diagnostics.js';
 import { onConnectorToolsChanged } from '../mcp-server/connector-tools.js';
 
-const isInitialize = (b: unknown): boolean =>
-  !!b &&
-  typeof b === 'object' &&
-  (b as { method?: string }).method === 'initialize';
+const isInitialize = (b: unknown): boolean => isRecord(b) && b.method === 'initialize';
 
 const MCP_BODY_MAX = 32 * 1024 * 1024;
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/policy-gate.ts

@@ -1,3 +1,4 @@
+import { isRecord } from '@metro-labs/core/is-record';
 import { str } from '@metro-labs/core/str';
 import type { ToolResult } from '@metro-labs/core/stations/types';
 import { accountFromLine, knownAccounts } from '../agents/map.js';
@@ -22,7 +23,7 @@ function channelTargets(name: string, a: Record<string, unknown>): ChannelTarget
   if (UNGATED.has(name)) return [];
   if (name === 'get_profile') {
     const line = profileScopeLine(a);
-    return line === undefined ? [] : fromLine(line, undefined);
+    return line === undefined ? [] : fromLine(line);
   }
   const account = str(a.account);
   if (name === 'list_channels') return accountTargets(name, { account });
@@ -79,10 +80,8 @@ function effectivePolicy(target: ChannelTarget): EffectivePolicy {
 export function withEffectivePolicy(byStation: Record<string, unknown[]>): Record<string, unknown[]> {
   const out: Record<string, unknown[]> = {};
   for (const [station, rows] of Object.entries(byStation))
-    out[station] = rows.map((row) => {
-      if (typeof row !== 'object' || row === null || Array.isArray(row)) return row;
-      const id = (row as { id?: unknown }).id;
-      return typeof id === 'string' ? { ...row, policy: effectivePolicy({ kind: 'channel', station, account: id }) } : row;
-    });
+    out[station] = rows.map((row) =>
+      isRecord(row) && typeof row.id === 'string' ? { ...row, policy: effectivePolicy({ kind: 'channel', station, account: row.id }) } : row,
+    );
   return out;
 }

package/runtime/node_modules/@metro-labs/daemon/src/mcp/server-approvals.ts

@@ -4,6 +4,7 @@ import type { McpApproval, McpDecision } from '@metro-labs/http/mcp-server-proto
 import { holdPrompt, isPromptHeld, type Behavior } from '../approvals/pending.js';
 import { ownerLine } from '../approvals/owner-line.js';
 import { metroNotice } from '../channels/notice.js';
+import { capSize } from '../channels/pending.js';
 import { announcedLine, noteAnnounced } from '../mcp-server/announced.js';
 import type { AnswerOutcome } from '../mcp-server/link.js';
 import { serverPromptBody } from './permission-prompt.js';
@@ -32,11 +33,7 @@ const noticeLineFor = (line: string | undefined): string | undefined => line ??
 function remember(id: string, now = Date.now()): void {
   for (const [seen, at] of recent) if (now - at >= RECENT_MS) recent.delete(seen);
   recent.set(id, now);
-  while (recent.size > RECENT_MAX) {
-    const oldest = recent.keys().next();
-    if (oldest.done) break;
-    recent.delete(oldest.value);
-  }
+  capSize(recent, RECENT_MAX);
 }
 
 const answeredRecently = (id: string, now = Date.now()): boolean => now - (recent.get(id) ?? -Infinity) < RECENT_MS;

package/runtime/node_modules/@metro-labs/daemon/src/mcp/session.ts

@@ -197,7 +197,7 @@ export class McpSession {
     if (sink !== undefined) {
       this.lastStreamAttachedAt = new Date().toISOString();
       this.announceCallState();
-      this.announceToolSchema();
+      this.toolsChanged();
     }
   }
 
@@ -216,10 +216,6 @@ export class McpSession {
   }
 
   toolsChanged(): void {
-    this.announceToolSchema();
-  }
-
-  private announceToolSchema(): void {
     if (!this.streamAttached) return;
     this.deliverSchemaNotice(
       () => this.server.sendToolListChanged(),

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-catalog.ts

@@ -41,21 +41,19 @@ export const declaredGroup = (name: string): ToolGroup | undefined => BY_NAME.ge
 
 export const toolGroupOf = (name: string): ToolGroup => declaredGroup(name) ?? 'write';
 
-export type ToolAnnotations = Record<string, unknown>;
-
 export interface PublishedTool {
   name: string;
   title?: string;
   description: string;
   inputSchema: Record<string, unknown>;
-  annotations: ToolAnnotations;
+  annotations: Record<string, unknown>;
   _meta?: Record<string, boolean>;
 }
 
 const ALWAYS_LOADED = new Set(['react', 'typing', 'send', 'reply']);
 const ALWAYS_LOAD = { 'anthropic/alwaysLoad': true };
 
-const annotationsOf = (def: ToolDef): ToolAnnotations =>
+const annotationsOf = (def: ToolDef): Record<string, unknown> =>
   toolGroupOf(def.name) === 'read'
     ? { readOnlyHint: true }
     : { readOnlyHint: false, destructiveHint: def.destructive === true };

package/runtime/node_modules/@metro-labs/daemon/src/mcp-server/announced.ts

@@ -37,7 +37,7 @@ function prune(now: number): void {
 
 function save(): void {
   if (file === undefined) return;
-  const announced = Object.fromEntries([...known].map(([id, entry]) => [id, { line: entry.line, at: entry.at }]));
+  const announced = Object.fromEntries(known);
   try {
     writeSecure(file, `${JSON.stringify({ version: 1, announced })}\n`);
   } catch (err) {

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/helper-script.ts

@@ -16,7 +16,6 @@ export const sudoersText = (agent: string): string =>
   [
     `${METRO_USER} ALL=(${agent}) NOPASSWD: ALL`,
     `${METRO_USER} ALL=(root) NOPASSWD: ${HELPER_PATH} *`,
-    `Defaults:${METRO_USER} !requiretty`,
     '',
   ].join('\n');
 

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/install.ts

@@ -14,6 +14,7 @@ import {
   upgradeUnitText,
 } from './helper-script.js';
 import { AGENT_NAME } from '../agent-user/user.js';
+import { hardenTailscale } from './tailscale-guard.js';
 
 interface InstallPaths {
   helper: string;
@@ -72,6 +73,7 @@ if (import.meta.main) {
   installRootHelper();
   installImdsGuard();
   installUpgradeUnit(node);
+  for (const note of hardenTailscale()) process.stderr.write(`metro: ${note}\n`);
   process.stdout.write(
     `metro: wrote ${HELPER_PATH}, ${SUDOERS_PATH}, ${IMDS_UNIT_PATH} and ${UPGRADE_UNIT_PATH}; only root and metro reach the instance metadata service, and the root side follows every update\n`,
   );

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/tailscale-guard.ts

@@ -0,0 +1,26 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+
+export const TAILSCALED_DEFAULTS = '/etc/default/tailscaled';
+const NO_FORWARDING = 'TS_SSH_DISABLE_FORWARDING=1';
+
+type Run = (file: string, args: string[]) => boolean;
+
+const quiet: Run = (file, args) => spawnSync(file, args, { stdio: 'ignore' }).status === 0;
+
+export function withoutForwarding(text: string): string | null {
+  if (text.split('\n').some((line) => line.trim() === NO_FORWARDING)) return null;
+  return `${text}${text === '' || text.endsWith('\n') ? '' : '\n'}${NO_FORWARDING}\n`;
+}
+
+export function hardenTailscale(run: Run = quiet, path: string = TAILSCALED_DEFAULTS): string[] {
+  if (!run('tailscale', ['version'])) return ['tailscale is not installed here, nothing to harden'];
+  const notes: string[] = [];
+  const next = withoutForwarding(existsSync(path) ? readFileSync(path, 'utf8') : '');
+  if (next !== null) {
+    writeFileSync(path, next, { mode: 0o644 });
+    notes.push(run('systemctl', ['restart', 'tailscaled']) ? 'Tailscale SSH forwarding is off' : `wrote ${NO_FORWARDING}, but tailscaled did not restart; it applies at its next start`);
+  }
+  if (!run('tailscale', ['set', '--auto-update'])) notes.push('tailscale set --auto-update failed; update Tailscale by hand');
+  return notes;
+}

package/runtime/node_modules/@metro-labs/daemon/src/monitor/api.ts

@@ -10,8 +10,6 @@ import {
 
 const KEEPALIVE_MS = 25_000;
 
-const monitorEnabled = (): boolean => hasAnyKey();
-
 function cors(req: IncomingMessage): Record<string, string> {
   return {
     'access-control-allow-origin': req.headers.origin ?? '*',
@@ -104,7 +102,7 @@ function routeApi(
 }
 
 function preflight(req: IncomingMessage, res: ServerResponse): boolean {
-  if (!monitorEnabled()) {
+  if (!hasAnyKey()) {
     sendJson(res, req, 404, { error: 'not found' });
     return true;
   }

package/runtime/node_modules/@metro-labs/daemon/src/routes/gmail-attach.ts

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { ApiError } from '@metro-labs/http/api-error';
 import { stringOf } from '@metro-labs/http/api-http';
+import { isRecord } from '@metro-labs/core/is-record';
 import { publicBaseUrl } from '../files/attach-serve.js';
 import { localOwner, readLocalAgentFile, localRenewGmail } from '../agents/file-admin.js';
 import { startManagedGmail } from '../stations/attach-gmail.js';
@@ -57,9 +58,8 @@ export const startGmailAttach: StartAttach = async (_station, input, hooks, owne
 };
 
 export function finishGmailUpgrade(owner: AttachOwner, config: Record<string, unknown>): ReturnType<typeof localRenewGmail> | null {
-  const value = config.gmailUpgrade;
-  if (value === null || typeof value !== 'object' || Array.isArray(value)) return null;
-  const upgrade = value as Record<string, unknown>;
+  const upgrade = config.gmailUpgrade;
+  if (!isRecord(upgrade)) return null;
   assertGmailNotDeleting(owner.agentId, stringOf(upgrade.accountId));
   const saved = { ...config };
   delete saved.gmailUpgrade;

package/runtime/node_modules/@metro-labs/daemon/src/routes/http.ts

@@ -11,6 +11,7 @@ import {
 } from 'node:http';
 import { Line } from '@metro-labs/core/lines';
 import { MCP_STATUS_PATH } from '../mcp/diagnostics.js';
+import { capSize } from '../channels/pending.js';
 import { errMsg, log } from '@metro-labs/core/log';
 import {
   classifyEvent,
@@ -50,7 +51,7 @@ export interface DedupSeq {
 }
 
 export function makeDedupSeq(): DedupSeq {
-  const seen = new Map<string, true>();
+  const seen = new Set<string>();
   const seqByLine = new Map<string, number>();
 
   log.info('dedup+seq: live-from-boot (no persisted seed)');
@@ -72,20 +73,12 @@ export function makeDedupSeq(): DedupSeq {
           );
           return null;
         }
-        seen.set(key, true);
-        while (seen.size > LRU_CAP) {
-          const oldest = seen.keys().next();
-          if (oldest.done) break;
-          seen.delete(oldest.value);
-        }
+        seen.add(key);
+        capSize(seen, LRU_CAP);
       }
       const next = (seqByLine.get(entry.line) ?? 0) + 1;
       seqByLine.set(entry.line, next);
-      while (seqByLine.size > LRU_CAP) {
-        const oldest = seqByLine.keys().next();
-        if (oldest.done) break;
-        seqByLine.delete(oldest.value);
-      }
+      capSize(seqByLine, LRU_CAP);
       return next;
     },
   };
@@ -318,18 +311,10 @@ async function handleWebhookRoute(
   return true;
 }
 
-function handleSignInRoutes(
-  req: IncomingMessage,
-  res: ServerResponse,
-  apis: SessionApis,
-): boolean {
-  return apis.mode !== undefined && handleModeRequest(req, res, apis.mode);
-}
-
 function handleEarlyRoutes(req: IncomingMessage, res: ServerResponse, apis: SessionApis): boolean {
   if (handleHealth(req, res)) return true;
   if (apis.gateway?.(req, res) === true) return true;
-  if (handleSignInRoutes(req, res, apis)) return true;
+  if (apis.mode !== undefined && handleModeRequest(req, res, apis.mode)) return true;
   return handleSessionApis(req, res, apis);
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/routes/local-mode.ts

@@ -115,10 +115,6 @@ function bundleApi(deps: LocalModeDeps): BundleApiDeps {
   };
 }
 
-function localModeInfo(): ModeInfo {
-  return { mode: 'local', owner: localOwner(), version: METRO_VERSION };
-}
-
 async function accountCall(
   station: StationName,
   action: string,
@@ -150,6 +146,6 @@ export function localSessionApis(deps: LocalModeDeps): SessionApis {
     modelApi: {},
     gateway: boxGatewayHandler(),
     terminalApi: {},
-    mode: localModeInfo,
+    mode: (): ModeInfo => ({ mode: 'local', owner: localOwner(), version: METRO_VERSION }),
   };
 }

package/runtime/node_modules/@metro-labs/daemon/src/stations/attach-resolve.ts

@@ -64,7 +64,7 @@ async function fromPathAs(
   path: string,
 ): Promise<ResolvedAttachment> {
   const proc = Bun.spawn(agentCommand(['cat', '--', path]), { stdout: 'pipe', stderr: 'pipe' });
-  const name = a.name ?? basenameOf(path) ?? 'attachment';
+  const name = a.name ?? basenameOf(path);
   let saved: Awaited<ReturnType<typeof streamToTemp>>;
   try {
     saved = await streamToTemp(proc.stdout, name);
@@ -101,7 +101,7 @@ async function fromPath(
   return {
     path,
     mime: a.mime ?? guessMime(path),
-    name: a.name ?? basenameOf(path) ?? 'attachment',
+    name: a.name ?? basenameOf(path),
     bytes: file.size,
   };
 }
@@ -129,7 +129,7 @@ async function fromUrlAs(
   url: string,
 ): Promise<ResolvedAttachment> {
   const proc = Bun.spawn(agentCommand(curlArgs(url)), { stdout: 'pipe', stderr: 'pipe' });
-  const name = a.name ?? basenameOf(url) ?? 'attachment';
+  const name = a.name ?? basenameOf(url);
   const said = new Response(proc.stderr).text().catch((err: unknown) => {
     log.debug({ err: String(err) }, 'send: could not read what curl said');
     return '';
@@ -167,7 +167,7 @@ async function fromUrl(
   assertContentLength(res.headers.get('content-length'));
   const mime =
     a.mime ?? res.headers.get('content-type')?.split(';')[0] ?? guessMime(url);
-  const name = a.name ?? basenameOf(url) ?? 'attachment';
+  const name = a.name ?? basenameOf(url);
   if (res.body === null) throw new Error(`attachment fetch returned no body for '${url}'`);
   const { dir, path, bytes } = await streamToTemp(res.body, name);
   return { path, mime, name, bytes, temp: dir };
@@ -223,8 +223,8 @@ const sourcesOf = (a: CanonicalAttachment): string[] =>
 
 async function resolveAttachment(
   a: CanonicalAttachment,
-  budget: InlineBudget = { used: 0 },
-  opts: ResolveOptions = {},
+  budget: InlineBudget,
+  opts: ResolveOptions,
 ): Promise<ResolvedAttachment> {
   const sources = sourcesOf(a);
   if (sources.length === 0)

package/runtime/node_modules/@metro-labs/daemon/src/stations/attach.ts

@@ -217,7 +217,6 @@ async function prepareThreema(input: AttachInput): Promise<PreparedAccount> {
       },
     };
   } catch (err) {
-    if (err instanceof StationAttachError) throw err;
     return rejected(
       err,
       err instanceof ThreemaGatewayError,