switchroom 0.21.3 → 0.21.5

package/bin/handoff-briefing.sh

@@ -136,6 +136,7 @@ if [ -n "$TELEGRAM_STATE" ] && [ -d "$TELEGRAM_STATE" ]; then
     # under `2>/dev/null`, so the breadcrumb is a debug/manual-run diagnostic.
     TELEGRAM_ROWS=$(python3 - "$HISTORY_DB" "$MAX_MESSAGES" "$TARGET_CHAT_ID" "$TARGET_THREAD_ID" <<'PYEOF'
 import sys, sqlite3, datetime
+from urllib.parse import quote
 
 db_path = sys.argv[1]
 limit = int(sys.argv[2])
@@ -143,7 +144,28 @@ target_chat = sys.argv[3] if len(sys.argv) > 3 else ""
 target_thread = sys.argv[4] if len(sys.argv) > 4 else ""
 
 try:
-    conn = sqlite3.connect(db_path)
+    # READ-ONLY, ALWAYS. `sqlite3.connect(path)` defaults to READ-WRITE, which
+    # makes this briefing assembler a writer on the gateway's live WAL DB. A
+    # read-write connection that closes as the LAST connection runs SQLite's
+    # checkpoint-and-delete path and UNLINKS `history.db-wal` / `-shm` — and
+    # this script runs at agent boot, precisely when the gateway is down or
+    # starting and this process IS the last connection. Any handle still
+    # mapped to those inodes then writes into deleted files: every INSERT
+    # reports success and every row is gone at the next restart (the
+    # `/proc/<pid>/fd/N -> history.db-wal (deleted)` signature that #4595
+    # sweeps for after the fact).
+    #
+    # `mode=ro` removes that primitive entirely: a read-only connection cannot
+    # checkpoint and cannot unlink a sidecar. It still reads a WAL database
+    # correctly in every boot state we care about — sidecars present, `-shm`
+    # absent, and `-shm` absent with an unwritable directory (SQLite falls back
+    # to a heap wal-index rather than failing). Every statement below is a
+    # SELECT or a PRAGMA table_info, so nothing here needs write access.
+    #
+    # The path is percent-encoded: a `?` or `#` in the state dir would
+    # otherwise be parsed as the URI's query/fragment delimiter and silently
+    # truncate the filename.
+    conn = sqlite3.connect("file:" + quote(db_path) + "?mode=ro", uri=True)
     conn.row_factory = sqlite3.Row
     cur = conn.cursor()
 

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.21.3", COMMIT_SHA = "8a74c2f6";
+var VERSION = "0.21.5", COMMIT_SHA = "a9aceb2f";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -63125,6 +63125,17 @@ function rollbackHint(installDir, previousVersion) {
 function alreadySelfUpdated(env2) {
   return env2[SELF_UPDATE_ENV_SENTINEL] === "1";
 }
+function describeBinaryProbeFailure(opts) {
+  const { probe: probe2, path: path7, subject } = opts;
+  switch (probe2.kind) {
+    case "not-executable":
+      return `could not EXECUTE ${subject} at ${path7} (${probe2.detail}). This is a ` + `property of WHERE it was staged, not of the artifact \u2014 the usual causes ` + `are a staging directory mounted \`noexec\`, a lost execute bit, or an ` + `architecture this kernel cannot run. The download's sha256 already ` + `matched the release's checksums file, so re-downloading will not help.`;
+    case "ran-but-failed":
+      return `${subject} at ${path7} ran but exited non-zero for \`--version\` ` + `(${probe2.detail}) \u2014 the artifact itself is faulty.`;
+    case "no-version":
+      return `${subject} at ${path7} ran and exited 0 but printed no parseable version ` + `(${probe2.detail}) \u2014 the artifact itself is faulty.`;
+  }
+}
 async function fetchLatestReleaseTag(io) {
   try {
     return parseLatestReleaseTag(await io.httpGetText(GITHUB_LATEST_RELEASE_URL));
@@ -63278,10 +63289,14 @@ async function performSelfUpdate(opts) {
     throw new Error(`self-update: SHA256 mismatch for ${assetName} (expected ${expected}, got ${actual}) \u2014 ` + `refusing to install. The installed CLI is unchanged.`);
   }
   io.chmodExec(tmp);
-  const proved = io.probeBinaryVersion(tmp);
-  if (!proved) {
+  const proved = io.probeBinary(tmp);
+  if (!proved.ok) {
     io.remove(tmp);
-    throw new Error(`self-update: the downloaded ${plan.to} binary did not run cleanly on this host ` + `(\`switchroom version\` failed) \u2014 refusing to install it. The installed CLI is unchanged.`);
+    throw new Error(`self-update: ${describeBinaryProbeFailure({
+      probe: proved,
+      path: tmp,
+      subject: `the downloaded ${plan.to} binary`
+    })} Refusing to install it. The installed CLI is unchanged.`);
   }
   const payload = await installAssetPayload({
     tag: plan.to,
@@ -64920,6 +64935,7 @@ async function defaultLoadDecisions() {
       "exec",
       "switchroom-vault-broker",
       "sqlite3",
+      "-readonly",
       "-separator",
       SEP2,
       GRANTS_DB_CONTAINER_PATH,
@@ -84377,7 +84393,8 @@ function detectGatewayFindings(agent, logText, logName = `logs/${agent}/gateway-
   const gw_hits = {
     "duplicate-delivery-represent": 0,
     "represent-escalation": 0,
-    "reply-delivery-failure": 0
+    "reply-delivery-failure": 0,
+    "orphaned-db-handle": 0
   };
   const lines = logText.split(`
 `);
@@ -84435,7 +84452,8 @@ var init_detect = __esm(() => {
   GATEWAY_SIGNATURES = {
     "duplicate-delivery-represent": /represent duplicate-send/,
     "represent-escalation": /obligation escalation/,
-    "reply-delivery-failure": /tg-post method=sendRichMessage[^\n]*status=err(?![a-z])/
+    "reply-delivery-failure": /tg-post method=sendRichMessage[^\n]*status=err(?![a-z])/,
+    "orphaned-db-handle": /orphaned-db-sweep DETECTED \d+ deleted-inode DB handle/
   };
 });
 
@@ -84499,6 +84517,12 @@ var init_mapping = __esm(() => {
       job_spec: "talk-to-agents-from-anywhere",
       signature: "reply-delivery-failure:sendRichMessage-err"
     },
+    "orphaned-db-handle": {
+      failure_mode: "success-theater",
+      severity: 3,
+      job_spec: "survive-reboots-and-real-life",
+      signature: "orphaned-db-handle:deleted-inode-writes"
+    },
     "hang-long-stalled": {
       failure_mode: "partial",
       severity: 2,
@@ -86288,6 +86312,7 @@ function readLastMessages(historyDbPath) {
   } catch {}
   try {
     const out = execFileSync11("sqlite3", [
+      "-readonly",
       historyDbPath,
       "SELECT role, MAX(ts) FROM messages GROUP BY role;"
     ], { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
@@ -92344,7 +92369,7 @@ function scrubSqlite(path2, values, dryRun) {
   for (const { value } of values) {
     const esc = value.replace(/'/g, "''");
     try {
-      const out = execFileSync17("sqlite3", [path2, `SELECT COUNT(*) FROM messages WHERE text LIKE '%${esc}%'`], { encoding: "utf8", timeout: 1e4 });
+      const out = execFileSync17("sqlite3", ["-readonly", path2, `SELECT COUNT(*) FROM messages WHERE text LIKE '%${esc}%'`], { encoding: "utf8", timeout: 1e4 });
       const n = parseInt(out.trim(), 10);
       if (!Number.isNaN(n))
         matches += n;
@@ -106609,7 +106634,7 @@ function readTopicsFromHistory(dbPath, chatId, limit) {
     fail2("`switchroom telegram topics` requires the Bun runtime (history DB uses bun:sqlite). " + "Run via `bun run dev` or via the installed `switchroom` CLI (bun-bundled).");
   }
   const { Database: Database2 } = metaRequire("bun:sqlite");
-  const db = new Database2(dbPath, { create: false });
+  const db = new Database2(dbPath, { create: false, readonly: true });
   try {
     const aggregateRows = db.prepare(`
         SELECT
@@ -115306,6 +115331,11 @@ import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { spawnSync as spawnSync18 } from "node:child_process";
 var HTTP_TIMEOUT_MS = 60000;
+function firstLine2(s) {
+  const line = `${s ?? ""}`.split(`
+`).map((l) => l.trim()).find((l) => l.length > 0) ?? "";
+  return line.length > 200 ? `${line.slice(0, 197)}...` : line;
+}
 function defaultSelfUpdateIO() {
   return {
     async httpGetText(url) {
@@ -115345,17 +115375,40 @@ function defaultSelfUpdateIO() {
       }
       return hash2.digest("hex");
     },
-    probeBinaryVersion(path7) {
-      const r = spawnSync18(path7, ["version"], {
+    probeBinary(path7) {
+      const r = spawnSync18(path7, ["--version"], {
         encoding: "utf-8",
         timeout: 30000,
         env: { ...process.env, SWITCHROOM_SELF_UPDATED: "" }
       });
-      if (r.status !== 0)
-        return null;
+      if (r.error) {
+        const code = r.error.code;
+        return {
+          ok: false,
+          kind: "not-executable",
+          detail: code ? `${code}: ${r.error.message}` : r.error.message
+        };
+      }
+      if (r.signal) {
+        return { ok: false, kind: "not-executable", detail: `killed by signal ${r.signal}` };
+      }
+      if (r.status !== 0) {
+        return {
+          ok: false,
+          kind: "ran-but-failed",
+          detail: `exit ${r.status}${firstLine2(r.stderr) ? `: ${firstLine2(r.stderr)}` : ""}`
+        };
+      }
       const out = `${r.stdout ?? ""}`.trim();
       const m = out.match(/\d+\.\d+\.\d+/);
-      return m ? m[0] : null;
+      if (!m) {
+        return {
+          ok: false,
+          kind: "no-version",
+          detail: out ? `printed ${JSON.stringify(firstLine2(out))}` : "printed nothing"
+        };
+      }
+      return { ok: true, version: m[0] };
     },
     mkdirp(dir) {
       mkdirSync49(dir, { recursive: true });
@@ -116807,11 +116860,21 @@ async function runHostCliUpgrade(opts, io = defaultIo(), log = () => {}) {
     } catch (err) {
       return { ok: false, error: err.message };
     }
-    const proven = io.selfUpdate.probeBinaryVersion(binary);
-    if (!proven || `v${proven.replace(/^v/, "")}` !== pin) {
+    const proven = io.selfUpdate.probeBinary(binary);
+    if (!proven.ok) {
+      return {
+        ok: false,
+        error: `swapped ${binary} but ${describeBinaryProbeFailure({
+          probe: proven,
+          path: binary,
+          subject: "the installed binary"
+        })} ${result.message}`
+      };
+    }
+    if (`v${proven.version.replace(/^v/, "")}` !== pin) {
       return {
         ok: false,
-        error: `swapped ${binary} but it reports ${proven ?? "<nothing>"}, not ${pin} \u2014 ` + `the install did not land. ${result.message}`
+        error: `swapped ${binary} but it reports ${proven.version}, not ${pin} \u2014 ` + `the install did not land. ${result.message}`
       };
     }
     return { ok: true, version: pin, binaryPath: binary };

package/dist/host-control/main.js

@@ -21565,7 +21565,7 @@ function allocateAgentUid(name) {
 }
 
 // src/build-info.ts
-var VERSION = "0.21.3";
+var VERSION = "0.21.5";
 
 // src/setup/hindsight-recall-passthrough.ts
 var HINDSIGHT_RECALL_TAG_WEIGHT_SEED = Object.freeze({ sidechain: 0.8 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.21.3",
+  "version": "0.21.5",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
     "test:vitest": "vitest run",
     "test:bun": "bun test telegram-plugin/tests/agent-state-dir-preload.test.ts telegram-plugin/tests/hindsight-bank-preload.test.ts telegram-plugin/tests/catch-all-forwarded-history.test.ts src/vault/grants.test.ts src/vault/grants-db.test.ts src/vault/write-grants.test.ts src/vault/broker/server-grants.test.ts src/vault/broker/server-write-grants.test.ts src/vault/broker/server-scope-persist.test.ts src/vault/broker/server-tokenless-scope.test.ts src/vault/broker/server-mint-grant-passphrase-attest.test.ts src/vault/broker/server-passphrase-attest.test.ts src/vault/broker/server-mint-grant-posture-attest.test.ts src/vault/broker/server-admin-only-keys.test.ts src/vault/broker/client-token.test.ts src/vault/broker/server-unlock.test.ts src/vault/broker/auto-unlock.test.ts src/vault/broker/drift-detection.test.ts tests/vault-broker-passphrase.test.ts src/cli/vault-get-broker.test.ts src/vault/resolver-via-broker.test.ts src/vault/broker/scope.test.ts src/vault/broker/server.test.ts src/litellm/provision-apply-e2e.test.ts src/drive/disconnect.test.ts src/drive/grants.test.ts src/drive/oauth.test.ts src/drive/onboarding.test.ts src/drive/reconciler.test.ts src/drive/vault-slots.test.ts src/drive/wrapper.test.ts src/vault/approvals/kernel.test.ts src/vault/approvals/approval-origin.test.ts src/vault/approvals/self-approval-bypass.test.ts src/vault/approvals/schema-idempotent.test.ts src/vault/broker/server-approvals.test.ts telegram-plugin/tests/boot-probes.test.ts telegram-plugin/tests/boot-version-string.test.ts telegram-plugin/tests/history.test.ts telegram-plugin/tests/boot-briefing-builder.test.ts telegram-plugin/tests/cross-turn-card-gate.test.ts telegram-plugin/tests/emission-authority-open-gate.test.ts telegram-plugin/tests/emission-authority-ping-gate.test.ts telegram-plugin/tests/emission-authority-card-drain-gate.test.ts telegram-plugin/tests/per-topic-current-turn.test.ts telegram-plugin/tests/history-reaper.test.ts telegram-plugin/tests/ipc-server-client.test.ts telegram-plugin/tests/ipc-server-race.test.ts telegram-plugin/tests/ipc-server-buzz-dedup.test.ts telegram-plugin/tests/ipc-server-query-pending-permission.test.ts telegram-plugin/tests/ipc-server-check-pre-approved.test.ts telegram-plugin/tests/rollout-narration-edit-socket.test.ts telegram-plugin/tests/gateway-bridge.test.ts telegram-plugin/tests/gateway-startup-mutex.test.ts telegram-plugin/tests/gateway-clean-shutdown-marker.test.ts telegram-plugin/tests/boot-card-dedupe.test.ts telegram-plugin/tests/boot-card-reason.test.ts telegram-plugin/tests/progress-update.test.ts telegram-plugin/tests/progress-fallback-cap.test.ts telegram-plugin/tests/progress-cap.test.ts telegram-plugin/tests/quota-cache.test.ts telegram-plugin/tests/silent-reply-guard.test.ts telegram-plugin/tests/unhandled-rejection-policy.test.ts telegram-plugin/tests/registry-turns.test.ts telegram-plugin/registry/subagents.test.ts telegram-plugin/registry/subagents-bugs.test.ts telegram-plugin/tests/subagent-watcher-parent-turn-key.test.ts telegram-plugin/tests/worker-origin-gap-dispatch.test.ts telegram-plugin/tests/subagent-nested-dispatch.test.ts telegram-plugin/tests/nested-worker-visibility-harness.test.ts telegram-plugin/tests/turns-writer.test.ts telegram-plugin/tests/resume-inbound-builder.test.ts telegram-plugin/tests/subagent-tracker-hooks.test.ts telegram-plugin/tests/resolve-calling-subagent.test.ts telegram-plugin/tests/gateway-update-placeholder-dispatch.test.ts telegram-plugin/tests/status-query-telemetry.test.ts telegram-plugin/tests/reaction-trigger.test.ts telegram-plugin/tests/reaction-trigger-flow.test.ts telegram-plugin/tests/subagent-watcher-workflow-visibility.test.ts telegram-plugin/uat/load-env.test.ts telegram-plugin/uat/feed-matcher.test.ts telegram-plugin/uat/uat-driver.test.ts telegram-plugin/gateway/webhook-ingest-server.test.ts telegram-plugin/tests/skill-proposal-card.test.ts",
     "test:watch": "vitest",
-    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-bench-baseline-anonymised.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-hindsight-bank-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-changelog-entry.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
+    "lint": "tsc --noEmit && node scripts/check-plugin-references.mjs && bash scripts/check-bot-api-wrapping.sh && node scripts/check-bun-test-imports.mjs && node scripts/check-test-runner-coverage.mjs && node scripts/check-bun-module-mock-scope.mjs && node scripts/check-no-pii-secrets.mjs && node scripts/check-bench-baseline-anonymised.mjs && node scripts/check-vault-test-hermeticity.mjs && node scripts/check-auth-test-hermeticity.mjs && node scripts/check-agent-state-dir-hermeticity.mjs && node scripts/check-hindsight-bank-hermeticity.mjs && node scripts/check-no-broadcast-delivery.mjs && node scripts/check-stale-tool-descriptions.mjs && node scripts/check-mcp-instructions-budget.mjs && node scripts/check-web-subscription-honest.mjs && node scripts/check-no-unpinned-npx-playwright.mjs && node scripts/check-gateway-line-ratchet.mjs && node scripts/check-retry-flood-hooks.mjs && node scripts/check-callback-ctx-wrapping.mjs && node scripts/check-ctx-send-wrapping.mjs && node scripts/check-status-pin-single-path.mjs && node scripts/check-litellm-config-guard.mjs && node scripts/check-release-asset-names.mjs && node scripts/check-foreign-db-readonly.mjs && node scripts/check-changelog-entry.mjs && node scripts/check-agent-attribution-trailers.mjs && node scripts/check-hindsight-write-redaction.mjs && bun scripts/check-secret-pattern-parity.ts && bun scripts/check-hostd-template-guard.ts",
     "lint:tsc": "tsc --noEmit",
     "lint:hindsight-write-redaction": "node scripts/check-hindsight-write-redaction.mjs",
     "lint:secret-pattern-parity": "bun scripts/check-secret-pattern-parity.ts",
@@ -46,10 +46,12 @@
     "lint:gateway-line-ratchet": "node scripts/check-gateway-line-ratchet.mjs",
     "lint:retry-flood-hooks": "node scripts/check-retry-flood-hooks.mjs",
     "lint:callback-ctx-wrapping": "node scripts/check-callback-ctx-wrapping.mjs",
+    "lint:ctx-send-wrapping": "node scripts/check-ctx-send-wrapping.mjs",
     "lint:status-pin-single-path": "node scripts/check-status-pin-single-path.mjs",
     "lint:mcp-instructions-budget": "node scripts/check-mcp-instructions-budget.mjs",
     "lint:litellm-config-guard": "node scripts/check-litellm-config-guard.mjs",
     "lint:release-asset-contract": "node scripts/check-release-asset-names.mjs",
+    "lint:foreign-db-readonly": "node scripts/check-foreign-db-readonly.mjs",
     "lint:changelog-entry": "node scripts/check-changelog-entry.mjs",
     "changelog:generate": "node scripts/gen-changelog-entry.mjs",
     "lint:agent-attribution-trailers": "node scripts/check-agent-attribution-trailers.mjs",