switchroom 0.16.47 → 0.17.0

package/dist/vault/broker/server.js

@@ -4151,7 +4151,9 @@ var init_schema = __esm(() => {
     enabled: exports_external.boolean().optional().describe("Master switch for the session-handoff briefing (default true)."),
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
-    resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale.")
+    resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale."),
+    session_retention_max_count: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): keep at most this many " + "newest session transcripts under .claude/projects; older ones " + "past both this count and the age bound are pruned by the Stop " + "hook. The newest sessions (and the handoff source) are always " + "kept. Default 20; set 0 to disable the count bound."),
+    session_retention_max_age_days: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): prune session transcripts " + "older than this many days (a file is deleted only when it is BOTH " + "over the count bound and older than this). Default 30; set 0 to " + "disable the age bound.")
   }).optional();
   webhookDispatchRule = exports_external.object({
     description: exports_external.string().optional(),
@@ -12411,7 +12413,7 @@ var init_loader = __esm(() => {
 
 // src/vault/broker/server.ts
 import * as net from "node:net";
-import { mkdirSync as mkdirSync5, chmodSync as chmodSync4, chownSync, existsSync as existsSync8, readFileSync as readFileSync8, readdirSync as readdirSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync3, renameSync as renameSync3 } from "node:fs";
+import { mkdirSync as mkdirSync5, chmodSync as chmodSync4, chownSync, existsSync as existsSync10, readFileSync as readFileSync8, readdirSync as readdirSync3, statSync as statSync5, unlinkSync as unlinkSync6, writeFileSync, renameSync as renameSync6 } from "node:fs";
 
 // src/agents/compose.ts
 import { createHash } from "node:crypto";
@@ -12482,23 +12484,46 @@ function getPeerCred(fd) {
   }
 }
 
-// src/vault/broker/peercred.ts
-var SOCKET_PATH_AGENT_RE = /^\/run\/switchroom\/broker\/([a-zA-Z0-9][a-zA-Z0-9_-]*)\.sock$/;
-var SOCKET_PATH_AGENT_SUBDIR_RE = /^\/run\/switchroom\/broker\/([a-zA-Z0-9][a-zA-Z0-9_-]*)\/sock$/;
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function socketPathToIdentity(socketPath) {
+// src/broker-common/peercred-path.ts
+function matchSocketName(socketPath, patterns, maxNameLen) {
   if (typeof socketPath !== "string" || socketPath.length === 0)
     return null;
-  const m = socketPath.match(SOCKET_PATH_AGENT_RE) ?? socketPath.match(SOCKET_PATH_AGENT_SUBDIR_RE);
-  if (!m)
+  let name = null;
+  for (const re of patterns) {
+    const m = socketPath.match(re);
+    if (m && typeof m[1] === "string") {
+      name = m[1];
+      break;
+    }
+  }
+  if (name === null || name.length === 0)
+    return null;
+  if (maxNameLen !== undefined && name.length > maxNameLen)
     return null;
-  const name = m[1];
-  if (name === "operator")
+  return name;
+}
+function parseSocketIdentity(socketPath, spec) {
+  const name = matchSocketName(socketPath, spec.patterns, spec.maxNameLen);
+  if (name === null)
+    return null;
+  const operatorName = spec.operatorName ?? "operator";
+  if (name === operatorName)
     return { kind: "operator" };
-  if (RESERVED_AGENT_NAMES.has(name))
+  if (spec.reservedNames.has(name))
     return null;
   return { kind: "agent", name };
 }
+
+// src/vault/broker/peercred.ts
+var SOCKET_PATH_AGENT_RE = /^\/run\/switchroom\/broker\/([a-zA-Z0-9][a-zA-Z0-9_-]*)\.sock$/;
+var SOCKET_PATH_AGENT_SUBDIR_RE = /^\/run\/switchroom\/broker\/([a-zA-Z0-9][a-zA-Z0-9_-]*)\/sock$/;
+var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+function socketPathToIdentity(socketPath) {
+  return parseSocketIdentity(socketPath, {
+    patterns: [SOCKET_PATH_AGENT_RE, SOCKET_PATH_AGENT_SUBDIR_RE],
+    reservedNames: RESERVED_AGENT_NAMES
+  });
+}
 function socketPathToAgent(socketPath) {
   const identity = socketPathToIdentity(socketPath);
   return identity?.kind === "agent" ? identity.name : null;
@@ -12769,11 +12794,14 @@ import * as path3 from "node:path";
 import { randomBytes, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
 import {
   readFileSync as readFileSync3,
-  writeFileSync,
+  writeSync as writeSync2,
   existsSync as existsSync3,
   renameSync,
   mkdirSync,
   unlinkSync as unlinkSync2,
+  fsyncSync as fsyncSync2,
+  openSync as openSync2,
+  closeSync as closeSync2,
   lstatSync,
   realpathSync
 } from "node:fs";
@@ -13017,8 +13045,22 @@ function atomicWriteFileSync(path, data, mode) {
   const dir = dirname(resolve2(effectivePath));
   const tmp = resolve2(dir, `.${basename(effectivePath)}.${process.pid}.${Date.now()}.tmp`);
   try {
-    writeFileSync(tmp, data, { encoding: "utf8", mode });
+    const fd = openSync2(tmp, "wx", mode);
+    try {
+      writeSync2(fd, data);
+      fsyncSync2(fd);
+    } finally {
+      closeSync2(fd);
+    }
     renameSync(tmp, effectivePath);
+    try {
+      const dirFd = openSync2(dir, "r");
+      try {
+        fsyncSync2(dirFd);
+      } finally {
+        closeSync2(dirFd);
+      }
+    } catch {}
   } catch (err) {
     try {
       if (existsSync3(tmp))
@@ -13289,7 +13331,18 @@ init_loader();
 
 // src/vault/auto-unlock.ts
 import { createHmac, randomBytes as randomBytes2, createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2 } from "node:crypto";
-import { chmodSync as chmodSync2, existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "node:fs";
+import {
+  chmodSync as chmodSync2,
+  closeSync as closeSync4,
+  existsSync as existsSync7,
+  fsyncSync as fsyncSync4,
+  mkdirSync as mkdirSync3,
+  openSync as openSync4,
+  readFileSync as readFileSync7,
+  renameSync as renameSync3,
+  unlinkSync as unlinkSync4,
+  writeSync as writeSync3
+} from "node:fs";
 var FORMAT_VERSION = 1;
 var SALT_LEN = 16;
 var NONCE_LEN = 12;
@@ -13959,7 +14012,7 @@ import * as path from "node:path";
 
 // src/util/audit-hashchain.ts
 import { createHash as createHash4 } from "node:crypto";
-import { openSync as openSync4, readSync, fstatSync as fstatSync2, closeSync as closeSync4 } from "node:fs";
+import { openSync as openSync5, readSync, fstatSync as fstatSync2, closeSync as closeSync5 } from "node:fs";
 var CHAIN_GENESIS = "GENESIS";
 var SEP = "\x00";
 function rowHash(prev, seq, rowJsonNoChain) {
@@ -13980,7 +14033,7 @@ function chainRow(state, entry) {
 function readTail(path, tailBytes = 64 * 1024) {
   let fd;
   try {
-    fd = openSync4(path, "r");
+    fd = openSync5(path, "r");
   } catch {
     return null;
   }
@@ -13996,7 +14049,7 @@ function readTail(path, tailBytes = 64 * 1024) {
     return null;
   } finally {
     try {
-      closeSync4(fd);
+      closeSync5(fd);
     } catch {}
   }
 }
@@ -14073,6 +14126,45 @@ function safeAuditLogPath(requestedPath) {
 }
 
 // src/vault/broker/audit-log.ts
+var DEFAULT_AUDIT_MAX_BYTES = 32 * 1024 * 1024;
+var DEFAULT_AUDIT_MAX_FILES = 5;
+function resolveRotation(opts) {
+  const envBytes = Number(process.env.SWITCHROOM_VAULT_AUDIT_MAX_BYTES);
+  const envFiles = Number(process.env.SWITCHROOM_VAULT_AUDIT_MAX_FILES);
+  const maxBytes = opts.maxBytes !== undefined && opts.maxBytes !== 0 ? opts.maxBytes : Number.isFinite(envBytes) && envBytes !== 0 ? envBytes : DEFAULT_AUDIT_MAX_BYTES;
+  const maxFiles = opts.maxFiles !== undefined && opts.maxFiles > 0 ? opts.maxFiles : Number.isFinite(envFiles) && envFiles > 0 ? envFiles : DEFAULT_AUDIT_MAX_FILES;
+  return { maxBytes, maxFiles };
+}
+function rotateAuditLog(logPath, maxFiles) {
+  const oldest = `${logPath}.${maxFiles}`;
+  if (fs.existsSync(oldest)) {
+    try {
+      fs.unlinkSync(oldest);
+    } catch (err) {
+      process.stderr.write(`[vault-audit] ERROR: could not drop oldest rotation ${oldest}: ${err.message}
+`);
+    }
+  }
+  for (let n = maxFiles - 1;n >= 1; n--) {
+    const from = `${logPath}.${n}`;
+    const to = `${logPath}.${n + 1}`;
+    if (!fs.existsSync(from))
+      continue;
+    try {
+      fs.renameSync(from, to);
+    } catch (err) {
+      process.stderr.write(`[vault-audit] ERROR: could not rotate ${from} → ${to}: ${err.message}
+`);
+      return;
+    }
+  }
+  try {
+    fs.renameSync(logPath, `${logPath}.1`);
+  } catch (err) {
+    process.stderr.write(`[vault-audit] ERROR: could not rotate active audit log ${logPath}: ${err.message}
+`);
+  }
+}
 function defaultAuditLogPath() {
   return path.join(os.homedir(), ".switchroom", "vault-audit.log");
 }
@@ -14085,8 +14177,17 @@ function callerFromPeer(peer) {
 function createAuditLogger(opts = {}) {
   const logPath = safeAuditLogPath(opts.path ?? defaultAuditLogPath());
   let chain = seedChain(logPath);
+  const rotation = resolveRotation(opts);
   return {
     write(entry) {
+      if (rotation.maxBytes > 0) {
+        try {
+          const size = fs.statSync(logPath).size;
+          if (size >= rotation.maxBytes) {
+            rotateAuditLog(logPath, rotation.maxFiles);
+          }
+        } catch {}
+      }
       const { line, next } = chainRow(chain, entry);
       let fd;
       try {
@@ -16068,19 +16169,63 @@ var DEFAULT_MAX_TTL_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000;
 
 // src/vault/grants-db.ts
 var DEFAULT_GRANTS_DB_PATH = path2.join(os2.homedir(), ".switchroom", "vault-grants.db");
-function openGrantsDb(dbPath = DEFAULT_GRANTS_DB_PATH) {
-  const dir = path2.dirname(dbPath);
-  fs2.mkdirSync(dir, { recursive: true });
+var WAL_SIDECAR_SUFFIXES = ["-wal", "-shm"];
+function isGrantsDbCorruption(err) {
+  if (!err || typeof err !== "object")
+    return false;
+  const code = String(err.code ?? "").toUpperCase();
+  if (code === "SQLITE_CORRUPT" || code.startsWith("SQLITE_CORRUPT_")) {
+    return true;
+  }
+  const message = String(err.message ?? "").toLowerCase();
+  return message.includes("database disk image is malformed") || message.includes("database is corrupt");
+}
+function quarantineGrantsDb(dbPath) {
+  const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+  const quarantinePath = `${dbPath}.corrupt-${stamp}`;
+  fs2.renameSync(dbPath, quarantinePath);
+  for (const suffix of WAL_SIDECAR_SUFFIXES) {
+    const sidecar = `${dbPath}${suffix}`;
+    if (fs2.existsSync(sidecar)) {
+      try {
+        fs2.renameSync(sidecar, `${quarantinePath}${suffix}`);
+      } catch {}
+    }
+  }
+  return quarantinePath;
+}
+function openAndMigrate(dbPath) {
   const db = new Database(dbPath, { create: true });
   try {
-    fs2.chmodSync(dbPath, 384);
-  } catch {}
-  db.run("PRAGMA journal_mode=WAL");
-  db.run("PRAGMA foreign_keys=ON");
-  migrateGrantsSchema(db);
-  migrateApprovalSchema(db);
+    try {
+      fs2.chmodSync(dbPath, 384);
+    } catch {}
+    db.run("PRAGMA journal_mode=WAL");
+    db.run("PRAGMA busy_timeout=5000");
+    db.run("PRAGMA foreign_keys=ON");
+    migrateGrantsSchema(db);
+    migrateApprovalSchema(db);
+  } catch (err) {
+    try {
+      db.close();
+    } catch {}
+    throw err;
+  }
   return db;
 }
+function openGrantsDb(dbPath = DEFAULT_GRANTS_DB_PATH, opener = openAndMigrate) {
+  const dir = path2.dirname(dbPath);
+  fs2.mkdirSync(dir, { recursive: true });
+  try {
+    return opener(dbPath);
+  } catch (err) {
+    if (!isGrantsDbCorruption(err))
+      throw err;
+    const quarantinePath = quarantineGrantsDb(dbPath);
+    console.error(`[vault-broker] grants DB at ${dbPath} is corrupt (${err.message ?? err}); quarantined to ${quarantinePath} and recreating an empty grants DB. ` + "Existing grants must be re-approved via the vault approval flow.");
+    return opener(dbPath);
+  }
+}
 
 // src/vault/approvals/kernel.ts
 import { randomBytes as randomBytes5, randomUUID } from "node:crypto";
@@ -16431,9 +16576,9 @@ class VaultBroker {
       chmodSync4(parentDir, 448);
     } catch {}
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (existsSync8(p)) {
+      if (existsSync10(p)) {
         try {
-          unlinkSync4(p);
+          unlinkSync6(p);
         } catch {}
       }
     }
@@ -16466,9 +16611,9 @@ class VaultBroker {
       return;
     try {
       if (ready) {
-        writeFileSync3(p, "", { mode: 384 });
-      } else if (existsSync8(p)) {
-        unlinkSync4(p);
+        writeFileSync(p, "", { mode: 384 });
+      } else if (existsSync10(p)) {
+        unlinkSync6(p);
       }
     } catch {}
   }
@@ -16500,24 +16645,24 @@ class VaultBroker {
       try {
         entry.server.close();
       } catch {}
-      if (existsSync8(sockPath)) {
+      if (existsSync10(sockPath)) {
         try {
-          unlinkSync4(sockPath);
+          unlinkSync6(sockPath);
         } catch {}
       }
     }
     this.agentServers.clear();
     for (const p of [this.socketPath, this.unlockSocketPath]) {
-      if (p && existsSync8(p)) {
+      if (p && existsSync10(p)) {
         try {
-          unlinkSync4(p);
+          unlinkSync6(p);
         } catch {}
       }
     }
     try {
       const pidPath = resolvePath(PID_FILE_DEFAULT);
-      if (existsSync8(pidPath))
-        unlinkSync4(pidPath);
+      if (existsSync10(pidPath))
+        unlinkSync6(pidPath);
     } catch {}
   }
   getStatus() {
@@ -16542,7 +16687,7 @@ class VaultBroker {
     return new Promise((resolveP, rejectP) => {
       if (abs.endsWith("/sock")) {
         const dir = abs.slice(0, -"/sock".length);
-        if (existsSync8(dir)) {
+        if (existsSync10(dir)) {
           try {
             chownSync(dir, 0, 0);
           } catch {}
@@ -16551,9 +16696,9 @@ class VaultBroker {
           } catch {}
         }
       }
-      if (existsSync8(abs)) {
+      if (existsSync10(abs)) {
         try {
-          unlinkSync4(abs);
+          unlinkSync6(abs);
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           process.stderr.write(`[vault-broker] could not unlink stale socket agent=${agentName} sock=${abs}: ${msg}
@@ -16583,9 +16728,9 @@ class VaultBroker {
         } catch {}
         this.agentServers.set(abs, { server, agentName });
         const unlockAbs = unlockSocketFor(abs);
-        if (existsSync8(unlockAbs)) {
+        if (existsSync10(unlockAbs)) {
           try {
-            unlinkSync4(unlockAbs);
+            unlinkSync6(unlockAbs);
           } catch {}
         }
         const unlockServer = net.createServer((sock) => {
@@ -16638,7 +16783,7 @@ class VaultBroker {
     if (!Number.isFinite(uid) || uid <= 0)
       return;
     try {
-      if (existsSync8(this.vaultPath))
+      if (existsSync10(this.vaultPath))
         chownSync(this.vaultPath, uid, uid);
     } catch {}
   }
@@ -16651,7 +16796,7 @@ class VaultBroker {
     const unlockAbs = unlockSocketFor(abs);
     if (abs.endsWith("/sock")) {
       const dir = abs.slice(0, -"/sock".length);
-      if (existsSync8(dir)) {
+      if (existsSync10(dir)) {
         try {
           chownSync(dir, 0, 0);
         } catch {}
@@ -16661,9 +16806,9 @@ class VaultBroker {
       }
     }
     for (const p of [abs, unlockAbs]) {
-      if (existsSync8(p)) {
+      if (existsSync10(p)) {
         try {
-          unlinkSync4(p);
+          unlinkSync6(p);
         } catch {}
       }
     }
@@ -17524,8 +17669,8 @@ class VaultBroker {
         mkdirSync5(tokenDir, { recursive: true });
         const tokenPath = path3.join(tokenDir, ".vault-token");
         const tmpPath = `${tokenPath}.tmp.${process.pid}`;
-        writeFileSync3(tmpPath, mintResult.token, { mode: 384 });
-        renameSync3(tmpPath, tokenPath);
+        writeFileSync(tmpPath, mintResult.token, { mode: 384 });
+        renameSync6(tmpPath, tokenPath);
         try {
           const uid = allocateAgentUid(agent);
           chownSync(tokenPath, uid, uid);
@@ -17585,9 +17730,9 @@ class VaultBroker {
         const row = this.grantsDb.query("SELECT agent_slug FROM vault_grants WHERE id = ?").get(id);
         if (row && AgentNameSchema.safeParse(row.agent_slug).success) {
           const tokenPath = path3.join(os3.homedir(), ".switchroom", "agents", row.agent_slug, ".vault-token");
-          if (existsSync8(tokenPath)) {
+          if (existsSync10(tokenPath)) {
             try {
-              unlinkSync4(tokenPath);
+              unlinkSync6(tokenPath);
             } catch {}
           }
         }
@@ -17810,7 +17955,7 @@ class VaultBroker {
   _writePidFile() {
     try {
       const pidPath = resolvePath(PID_FILE_DEFAULT);
-      writeFileSync3(pidPath, String(process.pid) + `
+      writeFileSync(pidPath, String(process.pid) + `
 `, { mode: 384 });
     } catch {}
   }
@@ -17823,10 +17968,10 @@ class VaultBroker {
     const envPath = process.env.SWITCHROOM_VAULT_BROKER_AUTO_UNLOCK_PATH;
     const configuredPath = (envPath && envPath.length > 0 ? envPath : undefined) ?? this.config?.vault?.broker?.autoUnlockCredentialPath ?? DEFAULT_AUTO_UNLOCK_PATH;
     const filePath = resolvePath(configuredPath);
-    if (!existsSync8(filePath))
+    if (!existsSync10(filePath))
       return false;
     try {
-      if (statSync4(filePath).size === 0)
+      if (statSync5(filePath).size === 0)
         return false;
     } catch {
       return false;
@@ -17938,7 +18083,7 @@ async function main() {
   const vaultPath = process.env.SWITCHROOM_VAULT_PATH;
   let perAgentTargets = [];
   try {
-    if (existsSync8(perAgentDir)) {
+    if (existsSync10(perAgentDir)) {
       const entries = readdirSync3(perAgentDir, { withFileTypes: true });
       const flat = [];
       const subdirs = [];
@@ -17993,7 +18138,7 @@ async function main() {
     }
     const operatorUidStr = process.env.SWITCHROOM_BROKER_OPERATOR_UID;
     const operatorDir = "/run/switchroom/broker/operator";
-    if (operatorUidStr !== undefined && existsSync8(operatorDir)) {
+    if (operatorUidStr !== undefined && existsSync10(operatorDir)) {
       const operatorUid = parseInt(operatorUidStr, 10);
       if (!Number.isFinite(operatorUid) || operatorUid <= 0) {
         process.stderr.write(`[vault-broker] SWITCHROOM_BROKER_OPERATOR_UID='${operatorUidStr}' is not a positive integer; skipping operator listener

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.16.47",
+  "version": "0.17.0",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
@@ -24,9 +24,9 @@
     "build": "node scripts/build.mjs",
     "build:cli": "node scripts/build.mjs && bun build --compile --target=bun-linux-x64 --minify bin/switchroom.ts --outfile switchroom-linux-amd64",
     "pretest": "npm run build",
-    "test": "vitest run && bun test telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test": "vitest run && bun test telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/registry/api-registry.test.ts telegram-plugin/registry/turns-schema.test.ts telegram-plugin/tests/idle-footer-wiring.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:vitest": "vitest run",
-    "test:bun": "bun test src/vault/grants.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
+    "test:bun": "bun test src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:watch": "vitest",
     "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-web-subscription-honest.mjs",
     "lint:tsc": "tsc --noEmit",

package/profiles/_base/cron-session.sh.hbs

@@ -95,7 +95,7 @@ cd "{{agentDir}}" || exit 1
 # can distinguish cron spend from main-session spend per agent.
 # FAIL-OPEN: missing key OR unreachable proxy → strip routing env, fall back to
 # direct OAuth. An outage must never take the cron session dark.
-if [ -n "$SWITCHROOM_LITELLM" ] && command -v switchroom >/dev/null 2>&1; then
+if [ -n "${SWITCHROOM_LITELLM:-}" ] && command -v switchroom >/dev/null 2>&1; then
   sr_ll_key="$(switchroom vault get "litellm/{{name}}/api-key" 2>/dev/null || true)"
   sr_ll_ok=""
   if [ -z "$sr_ll_key" ]; then

package/profiles/_base/start.sh.hbs

@@ -64,7 +64,7 @@ if [ "$SWITCHROOM_RUNTIME" = "docker" ] && [ -z "$SWITCHROOM_DOCKER_TMUX_INNER"
   #
   # SWITCHROOM_AGENT_NAME is injected by compose env (compose.ts:1816)
   # so it is available here, before the inner-pass export at line ~320.
-  if [ -n "$SWITCHROOM_LITELLM" ] && [ -z "$ANTHROPIC_CUSTOM_HEADERS" ] && command -v switchroom >/dev/null 2>&1; then
+  if [ -n "${SWITCHROOM_LITELLM:-}" ] && [ -z "$ANTHROPIC_CUSTOM_HEADERS" ] && command -v switchroom >/dev/null 2>&1; then
     sr_ll_key="$(switchroom vault get "litellm/$SWITCHROOM_AGENT_NAME/api-key" 2>/dev/null || true)"
     sr_ll_ok=""
     if [ -z "$sr_ll_key" ]; then
@@ -657,8 +657,24 @@ mkdir -p "$TELEGRAM_STATE_DIR" 2>/dev/null || true
 # .handoff-briefing.md and merged alongside (or instead of) .handoff.md.
 HANDOFF_FILE="{{agentDir}}/.handoff.md"
 HANDOFF_BRIEFING_FILE="{{agentDir}}/.handoff-briefing.md"
+# Decide whether the on-disk briefing is stale and must be rebuilt (#2790).
+# A clean shutdown leaves a non-empty .handoff.md; a *later* hard crash never
+# fires the Stop hook, so that stale briefing would otherwise be re-injected
+# — hiding the crashed session's turns and reorienting the agent from old
+# context. Rebuild when .handoff.md is empty OR when the newest session JSONL
+# is newer than .handoff.md (i.e. a session ran after the briefing was written).
+_LATEST_JSONL=$(_find_latest_jsonl "$CLAUDE_CONFIG_DIR/projects")
+_HANDOFF_STALE=0
 if [ ! -s "$HANDOFF_FILE" ]; then
-  _LATEST_JSONL=$(_find_latest_jsonl "$CLAUDE_CONFIG_DIR/projects")
+  _HANDOFF_STALE=1
+elif [ -n "$_LATEST_JSONL" ]; then
+  _JSONL_MOD=$(_stat_mtime "$_LATEST_JSONL")
+  _HANDOFF_MOD=$(_stat_mtime "$HANDOFF_FILE")
+  if [ "$_JSONL_MOD" -gt "$_HANDOFF_MOD" ]; then
+    _HANDOFF_STALE=1
+  fi
+fi
+if [ "$_HANDOFF_STALE" = "1" ]; then
   if [ -n "$_LATEST_JSONL" ]; then
     _LAST_MOD=$(_stat_mtime "$_LATEST_JSONL")
     _NOW=$(date +%s)
@@ -704,6 +720,11 @@ $_HANDOFF_CONTENT"
     APPEND_PROMPT="$_HANDOFF_CONTENT"
   fi
 fi
+# Consume the briefing sidecars once injected (#2790). Leaving them on disk
+# lets a later hard crash (which never fires the Stop hook to refresh them)
+# re-serve this now-stale briefing on the next boot. Removing them means the
+# staleness guard above starts from a clean slate every boot.
+rm -f "$HANDOFF_BRIEFING_FILE" "$HANDOFF_FILE" 2>/dev/null || true
 {{else}}
 APPEND_PROMPT={{#if systemPromptAppendShellQuoted}}{{{systemPromptAppendShellQuoted}}}{{else}}""{{/if}}
 {{/if}}
@@ -807,6 +828,36 @@ if command -v switchroom >/dev/null 2>&1; then
   unset sr_wk_pair sr_wk_env sr_wk_key sr_wk_val
 fi
 
+# Fleet-wide webkite render config (#2805). Seed the image-baked default
+# (/opt/switchroom/webkite/config.toml) into the XDG location webkite reads
+# ($HOME/.config/webkite/config.toml) so JS-heavy SPA/booking pages render
+# via the baked-in cloakbrowser instead of returning a static shell.
+#
+# REFRESH-from-image, not copy-if-absent. $HOME (/state/agent/home) is a
+# host-PERSISTENT bind mount (see src/agents/compose.ts), so a copy-if-absent
+# seed would write once and then the stale home copy would shadow every future
+# image-shipped config update forever — the config would be un-updatable
+# fleet-wide after first boot. Instead re-sync the target from the baked
+# default whenever they differ, so an image bump always propagates.
+#
+# Operator override still wins: an operator-authored
+# ~/.switchroom/webkite/config.toml is bind-mounted RO onto this exact target
+# (compose.ts). We detect that mount and leave it untouched; even absent the
+# mountpoint check, a cp onto the RO mount fails harmlessly and the override
+# is preserved.
+if [ -f /opt/switchroom/webkite/config.toml ]; then
+  sr_wk_target="$HOME/.config/webkite/config.toml"
+  if mountpoint -q "$sr_wk_target" 2>/dev/null; then
+    : # operator override bind-mounted RO — never clobber it
+  elif ! cmp -s /opt/switchroom/webkite/config.toml "$sr_wk_target" 2>/dev/null; then
+    mkdir -p "$HOME/.config/webkite" 2>/dev/null || true
+    cp /opt/switchroom/webkite/config.toml "$sr_wk_target" 2>/dev/null \
+      && echo "webkite: synced fleet render config to \$HOME/.config/webkite/config.toml" >&2 \
+      || echo "webkite: could not sync render config (non-fatal)" >&2
+  fi
+  unset sr_wk_target
+fi
+
 # LiteLLM routing (opt-in, #litellm). When SWITCHROOM_LITELLM is set (compose
 # env, gated on litellm.enabled && keyConfirmed), route the unmodified `claude`
 # CLI through the operator's LiteLLM proxy at ANTHROPIC_BASE_URL: fetch the
@@ -833,7 +884,7 @@ fi
 # per-session cost/issue tracking is handled out-of-band by correlating
 # LiteLLM's request log against switchroom's turn ledger, never by mutating the
 # claude protocol.
-if [ -n "$SWITCHROOM_LITELLM" ] && command -v switchroom >/dev/null 2>&1; then
+if [ -n "${SWITCHROOM_LITELLM:-}" ] && command -v switchroom >/dev/null 2>&1; then
   sr_ll_key="$(switchroom vault get "litellm/$SWITCHROOM_AGENT_NAME/api-key" 2>/dev/null || true)"
   sr_ll_ok=""
   if [ -z "$sr_ll_key" ]; then