fix(policy): keep checks read-only

Gio Della-Libera · Gio Della-Libera · commit 0fb828e20e4b · 2026-05-18T12:38:09.000-07:00
diff --git a/extensions/policy/src/cli.ts b/extensions/policy/src/cli.ts
@@ -79,7 +79,7 @@ async function buildPolicyCheckReport(
   if (severityMin === null) {
     throw new Error("Invalid --severity-min value. Expected one of: info, warning, error.");
   }
-  const snapshot = await readConfigFileSnapshot();
+  const snapshot = await readConfigFileSnapshot({ observe: false });
   if (!snapshot.valid) {
     const findings: HealthFinding[] = snapshot.issues.map((issue) => ({
       checkId: "policy/config-invalid",
diff --git a/extensions/telegram/src/bot-handlers.runtime.ts b/extensions/telegram/src/bot-handlers.runtime.ts
@@ -1783,10 +1783,7 @@ export const registerTelegramHandlers = ({
           debounceLane,
         })
       : null;
-    const authorizedAbortControlMessage = senderId
-      ? await isAuthorizedAbortControlMessage()
-      : false;
-    if (authorizedAbortControlMessage) {
+    if (senderId && (await isAuthorizedAbortControlMessage())) {
       for (const lane of ["default", "forward"] as const) {
         inboundDebouncer.cancelKey(
           buildTelegramInboundDebounceKey({
@@ -1804,7 +1801,7 @@ export const registerTelegramHandlers = ({
       allMedia,
       storeAllowFrom,
       receivedAtMs: Date.now(),
-      debounceKey: authorizedAbortControlMessage ? null : debounceKey,
+      debounceKey: isAbortControlMessage ? null : debounceKey,
       debounceLane,
       botUsername,
       ...promptContextBoundaryOptions(promptContextMinTimestampMs),

Original file line number	Diff line number	Diff line change
`@@ -79,7 +79,7 @@ async function buildPolicyCheckReport(`
`79`	`79`	`if (severityMin === null) {`
`80`	`80`	`throw new Error("Invalid --severity-min value. Expected one of: info, warning, error.");`
`81`	`81`	`}`
`82`		`- const snapshot = await readConfigFileSnapshot();`
	`82`	`+ const snapshot = await readConfigFileSnapshot({ observe: false });`
`83`	`83`	`if (!snapshot.valid) {`
`84`	`84`	`const findings: HealthFinding[] = snapshot.issues.map((issue) => ({`
`85`	`85`	`checkId: "policy/config-invalid",`