instar 1.3.275 → 1.3.277

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgjRtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA8jRtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -3113,7 +3113,11 @@ export async function startServer(options) {
         // token, and dual-polling would 409. Fail-OPEN: any read miss/stale/
         // mismatch ⇒ false ⇒ server polls as today, so setups without a lifeline
         // are unaffected. Reads only — never writes the lease here.
-        const telegramBotToken = telegramConfig ? telegramConfig.config.token : undefined;
+        // HARDENED (v1.3.270 boot-crash incident): an unresolved `{ secret: true }`
+        // placeholder is a truthy OBJECT — only a real string token may reach
+        // tokenHash(), or the whole boot dies with ERR_INVALID_ARG_TYPE.
+        const rawTelegramToken = telegramConfig ? telegramConfig.config.token : undefined;
+        const telegramBotToken = typeof rawTelegramToken === 'string' && rawTelegramToken ? rawTelegramToken : undefined;
         const lifelineOwnsPolling = telegramConfig && telegramBotToken
             ? lifelineOwnsTelegramPoll(config.stateDir, telegramBotToken)
             : false;
@@ -9456,6 +9460,17 @@ export async function startServer(options) {
                                     ? provisioner.provisionAll()
                                     : Promise.resolve([]),
                                 localKeyPaths: () => secretSyncMod.secretKeyPaths(readSecrets()),
+                                // Vault readability probe — NEVER mask a decrypt failure as "empty"
+                                // (the 2026-06-05 bifurcation hid behind localKeyPaths: []).
+                                vaultStatus: () => {
+                                    try {
+                                        const secrets = provStore.read();
+                                        return { status: Object.keys(secrets).length > 0 ? 'ok' : 'empty' };
+                                    }
+                                    catch (err) {
+                                        return { status: 'decrypt-failed', error: err instanceof Error ? err.message : String(err) };
+                                    }
+                                },
                                 syncTargets: onlinePeers,
                             };
                             if (_secretSyncPushEnabled) {