@tenex-chat/backend 0.9.5 → 0.9.7

package/src/conversations/search/embeddings/ConversationEmbeddingService.ts

@@ -8,13 +8,13 @@
  * - Embeds conversation summaries (not individual messages - too expensive)
  * - Uses existing RAG infrastructure (LanceDB, embedding providers)
  * - Supports hybrid search (semantic + keyword fallback)
- * - Graceful degradation when embeddings unavailable
  * - Project isolation: filters are applied DURING vector search (prefilter)
- * - Upsert semantics: re-indexing updates existing documents
+ * - Upsert semantics: re-indexing updates existing documents via bulkUpsert
  */
 
 import { logger } from "@/utils/logger";
 import { RAGService, type RAGDocument, type RAGQueryResult } from "@/services/rag/RAGService";
+import { buildProjectFilter } from "@/services/search/projectFilter";
 import { ConversationStore } from "@/conversations/ConversationStore";
 import { conversationRegistry } from "@/conversations/ConversationRegistry";
 
@@ -261,40 +261,17 @@ export class ConversationEmbeddingService {
     ): Promise<boolean> {
         await this.ensureInitialized();
 
-        try {
-            const result = this.buildDocument(conversationId, projectId, store);
-
-            if (result.kind !== "ok") {
-                return false;
-            }
-
-            const document = result.document;
-            // buildDocument always sets document.id — use it as the single source of truth
-            const documentId = document.id ?? `conv_${projectId}_${conversationId}`;
-
-            // Delete existing document before inserting (upsert semantics)
-            // This prevents duplicate entries when re-indexing
-            try {
-                await this.ragService.deleteDocumentById(CONVERSATION_COLLECTION, documentId);
-                logger.debug(`Deleted existing embedding for ${conversationId.substring(0, 8)}`);
-            } catch {
-                // Document might not exist - that's fine
-            }
+        const result = this.buildDocument(conversationId, projectId, store);
 
-            // Add to collection
-            await this.ragService.addDocuments(CONVERSATION_COLLECTION, [document]);
-
-            logger.debug(`Indexed conversation ${conversationId.substring(0, 8)} for project ${projectId}`);
-            return true;
-        } catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            logger.error("Failed to index conversation", {
-                conversationId: conversationId.substring(0, 8),
-                error: message,
-            });
-            // Don't throw - indexing failures shouldn't break the application
+        if (result.kind !== "ok") {
             return false;
         }
+
+        // Atomic upsert via mergeInsert — one LanceDB version per chunk
+        await this.ragService.bulkUpsert(CONVERSATION_COLLECTION, [result.document]);
+
+        logger.debug(`Indexed conversation ${conversationId.substring(0, 8)} for project ${projectId}`);
+        return true;
     }
 
     /**
@@ -349,23 +326,9 @@ export class ConversationEmbeddingService {
     }
 
     /**
-     * Build SQL filter for project isolation
-     * FIX #1: This filter is applied DURING vector search (prefilter), not after
-     */
-    private buildProjectFilter(projectId?: string): string | undefined {
-        if (!projectId || projectId.toLowerCase() === "all") {
-            return undefined;
-        }
-        // Filter on the metadata JSON string - LanceDB stores metadata as JSON string
-        // We need to match the projectId within the serialized JSON
-        const escapedProjectId = projectId.replace(/'/g, "''");
-        return `metadata LIKE '%"projectId":"${escapedProjectId}"%'`;
-    }
-
-    /**
-     * Perform semantic search on conversations
-     * FIX #1: Project filter is now applied DURING vector search (prefilter),
-     * ensuring proper project isolation without leakage from other projects
+     * Perform semantic search on conversations.
+     * Project filter is applied DURING vector search (prefilter),
+     * ensuring proper project isolation without leakage from other projects.
      */
     public async semanticSearch(
         query: string,
@@ -375,42 +338,30 @@ export class ConversationEmbeddingService {
 
         const { limit = 20, minScore = 0.3, projectId } = options;
 
-        try {
-            logger.info("🔍 Semantic search", { query, limit, minScore, projectId });
-
-            // FIX #1: Build SQL filter for project isolation - applied DURING vector search
-            const filter = this.buildProjectFilter(projectId);
-
-            // Perform RAG query with prefilter for project isolation
-            // Request more results to account for minScore filtering
-            const results = await this.ragService.queryWithFilter(
-                CONVERSATION_COLLECTION,
-                query,
-                limit * 2, // Request more to filter by minScore
-                filter
-            );
-
-            // Transform and filter by minScore only (project filtering already done)
-            const searchResults: SemanticSearchResult[] = results
-                .filter((result: RAGQueryResult) => result.score >= minScore)
-                .slice(0, limit)
-                .map((result: RAGQueryResult) => this.transformResult(result));
-
-            logger.info("✅ Semantic search complete", {
-                query,
-                found: searchResults.length,
-                limit,
-                projectFilter: filter || "none",
-            });
+        logger.info("🔍 Semantic search", { query, limit, minScore, projectId });
 
-            return searchResults;
-        } catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            logger.error("Semantic search failed", { query, error: message });
+        const filter = buildProjectFilter(projectId);
 
-            // Return empty results on error - let caller fall back to keyword search
-            return [];
-        }
+        const results = await this.ragService.queryWithFilter(
+            CONVERSATION_COLLECTION,
+            query,
+            limit * 2,
+            filter
+        );
+
+        const searchResults: SemanticSearchResult[] = results
+            .filter((result: RAGQueryResult) => result.score >= minScore)
+            .slice(0, limit)
+            .map((result: RAGQueryResult) => this.transformResult(result));
+
+        logger.info("✅ Semantic search complete", {
+            query,
+            found: searchResults.length,
+            limit,
+            projectFilter: filter || "none",
+        });
+
+        return searchResults;
     }
 
     /**
@@ -435,13 +386,9 @@ export class ConversationEmbeddingService {
      * Check if the service has any indexed conversations
      */
     public async hasIndexedConversations(): Promise<boolean> {
-        try {
-            await this.ensureInitialized();
-            const collections = await this.ragService.listCollections();
-            return collections.includes(CONVERSATION_COLLECTION);
-        } catch {
-            return false;
-        }
+        await this.ensureInitialized();
+        const collections = await this.ragService.listCollections();
+        return collections.includes(CONVERSATION_COLLECTION);
     }
 
     /**
@@ -456,14 +403,9 @@ export class ConversationEmbeddingService {
      * Clear all conversation embeddings
      */
     public async clearIndex(): Promise<void> {
-        try {
-            await this.ragService.deleteCollection(CONVERSATION_COLLECTION);
-            logger.info("Cleared conversation embeddings index");
-        } catch (error) {
-            logger.debug("No index to clear or error clearing", { error });
-        }
+        await this.ragService.deleteCollection(CONVERSATION_COLLECTION);
+        logger.info("Cleared conversation embeddings index");
 
-        // Reset initialization state
         this.initialized = false;
         this.initializationPromise = null;
     }

package/src/conversations/search/embeddings/ConversationIndexingJob.ts

@@ -11,7 +11,7 @@
  * - Indexes conversations across all projects
  * - Tracks indexing state durably to avoid redundant work
  * - Re-indexes when conversation metadata changes
- * - Graceful error handling - failures don't break the service
+ * - Errors propagate to scheduleNextBatch which catches and reschedules
  * - Prevents overlapping batches
  * - Decoupled from ConversationRegistry for multi-project support
  */
@@ -160,58 +160,50 @@ export class ConversationIndexingJob {
             const projectIds = listProjectIdsFromDisk(this.projectsBasePath);
 
             for (const projectId of projectIds) {
-                try {
-                    const conversationIds = listConversationIdsFromDiskForProject(
+                const conversationIds = listConversationIdsFromDiskForProject(
+                    this.projectsBasePath,
+                    projectId
+                );
+
+                for (const conversationId of conversationIds) {
+                    totalChecked++;
+
+                    // Check if conversation needs indexing using durable state
+                    const needsIndexing = this.stateManager.needsIndexing(
                         this.projectsBasePath,
+                        projectId,
+                        conversationId
+                    );
+
+                    if (!needsIndexing) {
+                        totalSkipped++;
+                        continue;
+                    }
+
+                    // Build document without writing
+                    const result: BuildDocumentResult = conversationEmbeddingService.buildDocument(
+                        conversationId,
                         projectId
                     );
 
-                    for (const conversationId of conversationIds) {
-                        totalChecked++;
-
-                        // Check if conversation needs indexing using durable state
-                        const needsIndexing = this.stateManager.needsIndexing(
-                            this.projectsBasePath,
-                            projectId,
-                            conversationId
-                        );
-
-                        if (!needsIndexing) {
-                            totalSkipped++;
-                            continue;
-                        }
-
-                        // Build document without writing
-                        const result: BuildDocumentResult = conversationEmbeddingService.buildDocument(
-                            conversationId,
-                            projectId
-                        );
-
-                        switch (result.kind) {
-                            case "ok":
-                                pendingDocuments.push(result.document);
-                                pendingMarkIndexed.push({ projectId, conversationId });
-                                break;
-                            case "noContent":
-                                pendingMarkNoContent.push({ projectId, conversationId });
-                                break;
-                            case "error":
-                                // Transient error — leave unmarked so it retries next cycle
-                                totalFailed++;
-                                logger.warn("Transient error building document, will retry", {
-                                    conversationId: conversationId.substring(0, 8),
-                                    projectId,
-                                    reason: result.reason,
-                                });
-                                break;
-                        }
+                    switch (result.kind) {
+                        case "ok":
+                            pendingDocuments.push(result.document);
+                            pendingMarkIndexed.push({ projectId, conversationId });
+                            break;
+                        case "noContent":
+                            pendingMarkNoContent.push({ projectId, conversationId });
+                            break;
+                        case "error":
+                            // Transient error — leave unmarked so it retries next cycle
+                            totalFailed++;
+                            logger.warn("Transient error building document, will retry", {
+                                conversationId: conversationId.substring(0, 8),
+                                projectId,
+                                reason: result.reason,
+                            });
+                            break;
                     }
-                } catch (error) {
-                    const message = error instanceof Error ? error.message : String(error);
-                    logger.error("Failed to process project conversations", {
-                        projectId,
-                        error: message,
-                    });
                 }
             }
 
@@ -267,10 +259,6 @@ export class ConversationIndexingJob {
             } else {
                 logger.debug("No conversations to index in this batch");
             }
-        } catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            logger.error("Conversation indexing batch failed", { error: message });
-            // Don't throw - we want the job to keep running even if one batch fails
         } finally {
             this.isBatchRunning = false;
         }

package/src/conversations/services/ConversationSummarizer.ts

@@ -75,7 +75,7 @@ export class ConversationSummarizer {
                 }
 
                 // Get existing categories for consistency
-                const existingCategories = await this.categoryManager.getCategories();
+                const existingCategories = (await this.categoryManager.getCategories()).slice(0, 10);
                 const categoryListText = existingCategories.length > 0
                     ? `Existing categories (prefer these for consistency): ${existingCategories.join(", ")}`
                     : "No existing categories yet. Create new ones as needed.";
@@ -165,7 +165,6 @@ export class ConversationSummarizer {
                             ),
                         categories: z
                             .array(z.string())
-                            .max(3)
                             .describe(
                                 "0-3 category tags. Lowercase singular nouns. Prefer canonical list; create new only if necessary; may be empty []."
                             ),

package/src/conversations/types.ts

@@ -44,6 +44,17 @@ export interface ConversationEntry {
      * Used to ensure compressed summaries are rendered as "system" role, not "user".
      */
     role?: "user" | "assistant" | "tool" | "system";
+    /**
+     * Human-readable summary of a tool call, generated by the tool's getHumanReadableContent().
+     * Stored at creation time so the compression system can use the tool's own formatting
+     * without needing access to the tool registry.
+     */
+    humanReadable?: string;
+    /**
+     * XML transcript attributes captured from tool input at execution time.
+     * Example: { description: "...", file_path: "/repo/file.ts" }.
+     */
+    transcriptToolAttributes?: Record<string, string>;
     /**
      * For delegation-marker messageType: contains the marker data.
      * This allows lazy expansion of delegation transcripts when building messages.

package/src/daemon/Daemon.ts

@@ -27,8 +27,6 @@ import { DaemonRouter } from "./routing/DaemonRouter";
 import type { DaemonStatus } from "./types";
 import { createEventSpan, endSpanSuccess, endSpanError, addRoutingEvent } from "./utils/telemetry";
 import { logDropped, logRouted } from "./utils/routing-log";
-import { UnixSocketTransport } from "./UnixSocketTransport";
-import { streamPublisher } from "@/llm";
 import { getConversationIndexingJob } from "@/conversations/search/embeddings";
 import { getLanceDBMaintenanceService } from "@/services/rag/LanceDBMaintenanceService";
 import { ConversationStore } from "@/conversations/ConversationStore";
@@ -40,6 +38,7 @@ import { RALRegistry } from "@/services/ral/RALRegistry";
 import { RestartState } from "./RestartState";
 import { AgentDefinitionMonitor } from "@/services/AgentDefinitionMonitor";
 import { APNsService } from "@/services/apns";
+import { getTrustPubkeyService } from "@/services/trust-pubkeys";
 const lessonTracer = trace.getTracer("tenex.lessons");
 
 /**
@@ -62,7 +61,6 @@ export class Daemon {
     private isRunning = false;
     private shutdownHandlers: Array<() => Promise<void>> = [];
     private lockfile: Lockfile | null = null;
-    private streamTransport: UnixSocketTransport | null = null;
 
     // Runtime management delegated to RuntimeLifecycle
     private runtimeLifecycle: RuntimeLifecycle | null = null;
@@ -73,6 +71,9 @@ export class Daemon {
     // Agent pubkey mapping for routing (pubkey -> project IDs)
     private agentPubkeyToProjects = new Map<Hexpubkey, Set<string>>();
 
+    // Agent pubkeys seeded from AgentStorage at startup (covers not-yet-running projects)
+    private storedAgentPubkeys = new Set<Hexpubkey>();
+
     // Tracked agent definition IDs for lesson subscription sync
     private trackedLessonDefinitionIds = new Set<string>();
 
@@ -178,9 +179,10 @@ export class Daemon {
             await initNDK();
             this.ndk = getNDK();
 
-            // 6. Publish backend profile (kind:0)
+            // 6. Set backend signer on NDK for NIP-42 relay auth + publish profile
             logger.debug("Publishing backend profile");
             const backendSigner = await config.getBackendSigner();
+            this.ndk.signer = backendSigner;
             const backendName = loadedConfig.backendName || "tenex backend";
             await AgentProfilePublisher.publishBackendProfile(backendSigner, backendName, this.whitelistedPubkeys);
 
@@ -214,28 +216,32 @@ export class Daemon {
                 this.routingLogger
             );
 
+            // 8b. Seed trust service with all known agent pubkeys from storage
+            // This covers agents from not-yet-running projects for cross-project trust
+            await agentStorage.initialize();
+            this.storedAgentPubkeys = await agentStorage.getAllKnownPubkeys();
+            if (this.storedAgentPubkeys.size > 0) {
+                getTrustPubkeyService().setGlobalAgentPubkeys(this.storedAgentPubkeys);
+                logger.info("Seeded trust service with stored agent pubkeys", {
+                    count: this.storedAgentPubkeys.size,
+                });
+            }
+
             // 9. Start subscription immediately
             // Projects will be discovered naturally as events arrive
             logger.debug("Starting subscription manager");
             await this.subscriptionManager.start();
             logger.debug("Subscription manager started");
 
-            // 10. Start local streaming socket
-            logger.debug("Starting local streaming socket");
-            this.streamTransport = new UnixSocketTransport();
-            await this.streamTransport.start();
-            streamPublisher.setTransport(this.streamTransport);
-            logger.info("Local streaming socket started", { path: this.streamTransport.getSocketPath() });
-
-            // 11. Start automatic conversation indexing job
+            // 10. Start automatic conversation indexing job
             getConversationIndexingJob().start();
             logger.info("Automatic conversation indexing job started");
 
-            // 11b. Start LanceDB maintenance service (periodic compaction)
+            // 10b. Start LanceDB maintenance service (periodic compaction)
             getLanceDBMaintenanceService().start();
             logger.info("LanceDB maintenance service started");
 
-            // 12. Initialize InterventionService (after projects are loaded)
+            // 11. Initialize InterventionService (after projects are loaded)
             // This must happen after subscriptions start so agent slugs can be resolved
             logger.debug("Initializing intervention service");
             const interventionService = InterventionService.getInstance();
@@ -250,20 +256,20 @@ export class Daemon {
 
             await interventionService.initialize();
 
-            // 12b. Initialize APNs push notification service
+            // 11b. Initialize APNs push notification service
             logger.debug("Initializing APNs service");
             await APNsService.getInstance().initialize();
 
-            // 13. Initialize restart state manager
+            // 12. Initialize restart state manager
             logger.debug("Initializing restart state manager");
             this.restartState = new RestartState(this.daemonDir);
 
-            // 14. Setup RAL completion listener for graceful restart
+            // 13. Setup RAL completion listener for graceful restart
             if (this.supervisedMode) {
                 this.setupRALCompletionListener();
             }
 
-            // 15. Start agent definition monitor for auto-upgrades
+            // 14. Start agent definition monitor for auto-upgrades
             logger.debug("Starting agent definition monitor");
             this.agentDefinitionMonitor = new AgentDefinitionMonitor(
                 this.ndk,
@@ -273,7 +279,7 @@ export class Daemon {
             await this.agentDefinitionMonitor.start();
             logger.info("Agent definition monitor started");
 
-            // 16. Setup graceful shutdown
+            // 15. Setup graceful shutdown
             this.setupShutdownHandlers();
 
             this.isRunning = true;
@@ -822,6 +828,9 @@ export class Daemon {
             // Sync per-agent lesson subscriptions: add new, remove stale
             this.syncLessonSubscriptions(allAgentDefinitionIds);
 
+            // Sync trust service with all known agent pubkeys (cross-project trust)
+            this.syncTrustServiceAgentPubkeys();
+
             // Set up callback for dynamic agent additions (e.g., via agents_write tool)
             // This ensures new agents are immediately routable without requiring a restart
             const context = runtime.getContext();
@@ -865,6 +874,23 @@ export class Daemon {
         this.trackedLessonDefinitionIds = new Set(currentDefinitionIds);
     }
 
+    /**
+     * Push current agent pubkeys to TrustPubkeyService for cross-project trust.
+     * Unions the daemon-level runtime pubkeys (from currently running projects)
+     * with the stored pubkeys seeded from AgentStorage at startup (covers
+     * not-yet-running projects), so trust is never dropped for known agents.
+     */
+    private syncTrustServiceAgentPubkeys(): void {
+        const allPubkeys = new Set<Hexpubkey>(this.agentPubkeyToProjects.keys());
+
+        // Union with stored pubkeys so non-running projects retain trust
+        for (const pubkey of this.storedAgentPubkeys) {
+            allPubkeys.add(pubkey);
+        }
+
+        getTrustPubkeyService().setGlobalAgentPubkeys(allPubkeys);
+    }
+
     /**
      * Handle a dynamically added agent (e.g., created via agents_write tool).
      * Updates the routing map and subscription to make the agent immediately routable.
@@ -879,6 +905,9 @@ export class Daemon {
             projectSet.add(projectId);
         }
 
+        // Persist in stored set so trust survives if this project later stops
+        this.storedAgentPubkeys.add(agent.pubkey);
+
         // Update subscriptions
         if (this.subscriptionManager) {
             const allPubkeys = Array.from(this.agentPubkeyToProjects.keys());
@@ -895,6 +924,9 @@ export class Daemon {
         const dTag = projectId.split(":").slice(2).join(":");
         OwnerAgentListService.getInstance().registerAgents(dTag, [agent.pubkey]);
 
+        // Sync trust service with updated agent pubkeys (cross-project trust)
+        this.syncTrustServiceAgentPubkeys();
+
         logger.info("Dynamic agent added to routing", {
             projectId,
             agentSlug: agent.slug,
@@ -1336,6 +1368,17 @@ export class Daemon {
      * Setup graceful shutdown handlers
      */
     private setupShutdownHandlers(): void {
+        // Prevent EPIPE from crashing the daemon when stdout/stderr pipe breaks
+        // (e.g. when the TUI exits). The daemon logs to ~/.tenex/daemon/daemon.log
+        // so silently dropping broken-pipe writes is correct behavior.
+        process.stdout.on('error', (err) => {
+            if ((err as NodeJS.ErrnoException).code === 'EPIPE') return;
+            throw err;
+        });
+        process.stderr.on('error', (err) => {
+            if ((err as NodeJS.ErrnoException).code === 'EPIPE') return;
+            throw err;
+        });
         /**
          * Perform graceful shutdown of the daemon.
          * @param exitCode - Exit code to use (default: 0)
@@ -1362,88 +1405,70 @@ export class Daemon {
                     console.log(`[Daemon] Saved ${bootedProjects.length} booted project(s) for restart`);
                 }
 
-                if (this.streamTransport) {
-                    process.stdout.write("Stopping stream transport...");
-                    await this.streamTransport.stop();
-                    streamPublisher.setTransport(null);
-                    this.streamTransport = null;
-                    console.log(" done");
-                }
-
                 // Stop conversation indexing job
-                process.stdout.write("Stopping conversation indexing job...");
+                logger.info("Stopping conversation indexing job...");
                 getConversationIndexingJob().stop();
-                console.log(" done");
 
                 // Stop LanceDB maintenance service
-                process.stdout.write("Stopping LanceDB maintenance service...");
+                logger.info("Stopping LanceDB maintenance service...");
                 getLanceDBMaintenanceService().stop();
-                console.log(" done");
 
                 // Stop agent definition monitor
                 if (this.agentDefinitionMonitor) {
-                    process.stdout.write("Stopping agent definition monitor...");
+                    logger.info("Stopping agent definition monitor...");
                     this.agentDefinitionMonitor.stop();
                     this.agentDefinitionMonitor = null;
-                    console.log(" done");
                 }
 
                 // Stop intervention service
-                process.stdout.write("Stopping intervention service...");
+                logger.info("Stopping intervention service...");
                 InterventionService.getInstance().shutdown();
-                console.log(" done");
 
                 // Stop owner agent list service
-                process.stdout.write("Stopping owner agent list service...");
+                logger.info("Stopping owner agent list service...");
                 OwnerAgentListService.getInstance().shutdown();
-                console.log(" done");
 
                 // Stop NIP-46 signing service
-                process.stdout.write("Stopping NIP-46 signing service...");
+                logger.info("Stopping NIP-46 signing service...");
                 await Nip46SigningService.getInstance().shutdown();
-                console.log(" done");
 
                 if (this.subscriptionManager) {
-                    process.stdout.write("Stopping subscriptions...");
+                    logger.info("Stopping subscriptions...");
                     this.subscriptionManager.stop();
-                    console.log(" done");
                 }
 
                 if (this.runtimeLifecycle) {
                     const stats = this.runtimeLifecycle.getStats();
                     if (stats.activeCount > 0) {
-                        console.log(`Stopping ${stats.activeCount} project runtime(s)...`);
+                        logger.info(`Stopping ${stats.activeCount} project runtime(s)...`);
                     }
                     await this.runtimeLifecycle.stopAllRuntimes();
                 }
 
                 // Close the global prefix KV store (after all runtimes are stopped)
-                process.stdout.write("Closing storage...");
+                logger.info("Closing storage...");
                 await prefixKVStore.forceClose();
-                console.log(" done");
 
                 if (this.shutdownHandlers.length > 0) {
-                    process.stdout.write("Running shutdown handlers...");
+                    logger.info("Running shutdown handlers...");
                     for (const handler of this.shutdownHandlers) {
                         await handler();
                     }
-                    console.log(" done");
                 }
 
                 if (this.lockfile) {
                     await this.lockfile.release();
                 }
 
-                process.stdout.write("Flushing telemetry...");
+                logger.info("Flushing telemetry...");
                 const conversationSpanManager = getConversationSpanManager();
                 conversationSpanManager.shutdown();
                 await shutdownTelemetry();
-                console.log(" done");
 
                 if (isGracefulRestart) {
-                    console.log("[Daemon] Graceful restart complete - exiting with code 0");
+                    logger.info("[Daemon] Graceful restart complete - exiting with code 0");
                 } else {
-                    console.log("Shutdown complete.");
+                    logger.info("Shutdown complete.");
                 }
                 process.exit(exitCode);
             } catch (error) {
@@ -1799,6 +1824,9 @@ export class Daemon {
 
             this.subscriptionManager.updateAgentMentions(Array.from(allAgentPubkeys));
             this.syncLessonSubscriptions(allAgentDefinitionIds);
+
+            // Sync trust service with remaining agent pubkeys (cross-project trust)
+            this.syncTrustServiceAgentPubkeys();
         } catch (error) {
             logger.error("Failed to update subscription after runtime removed", {
                 projectId,
@@ -1819,13 +1847,6 @@ export class Daemon {
 
         this.isRunning = false;
 
-        // Stop streaming socket
-        if (this.streamTransport) {
-            await this.streamTransport.stop();
-            streamPublisher.setTransport(null);
-            this.streamTransport = null;
-        }
-
         // Stop conversation indexing job
         getConversationIndexingJob().stop();