release: 2.4.0 — agent-experience overhaul + device history

[chenliuyun]

Summary

Consolidates 19 OpenClaw/Claude integration feedback items (P0-P3) plus a new device-history subsystem into a single minor release. All schema changes are additive-only; no fields were removed or renamed, so existing CLI and MCP integrations keep working unchanged.

P0 — Correctness & security

• IR devices command responses carry verification: { verifiable: false, reason, suggestedFollowup }; MCP send_command mirrors the field.
• config set-token positional form scrubs token/secret from process.argv before any hook, audit log, or verbose trace can observe them. Interactive hidden-echo mode is now the primary path.

P1 — Agent hardening

• devices status / devices command accept --name directly on the subcommand.
• New src/devices/resolve-name.ts with six strategies (exact | prefix | substring | fuzzy | first | require-unique). Reads default to fuzzy; writes default to require-unique and fail with exit 2 + ambiguous_name_match + candidate list.
• schema export / capabilities gained --compact, --types, --used, --fields, --surface. Banners/tips go to stderr; stdout is exactly one JSON document.
• Every leaf command in capabilities carries { mutating, consumesQuota, idempotencySupported, agentSafetyTier, verifiability, typicalLatencyMs }.

D — Device history (new subsystem)

• JSONL per-device storage at ~/.switchbot/device-history/<id>.jsonl with 50 MB rotation (.jsonl.1 → .2 → .3). Writes best-effort, 0o600.
• history range <deviceId> with --since, --from, --to, --field, --limit (streaming readline, safe on 50 MB files).
• history stats <deviceId> reports file count, bytes, record count, earliest/latest timestamp.
• MCP query_device_history tool mirrors the CLI with a 1000-record default cap.

P2 — DX & stability

• Locked doctor --json shape ({ ok, generatedAt, checks[], summary }); clock check probes the API and reports skewMs.
• events mqtt-tail synthesizes __connect / __reconnect / __disconnect / __heartbeat control events; every record carries a UUIDv4 eventId.
• devices batch --stagger / --max-concurrent / --plan with per-step telemetry.
• Idempotency cache hits set replayed: true; conflicting-shape reuse within 60 s exits 2 with idempotency_conflict. Keys are SHA-256 hashed on disk.
• Per-profile --label, --description, --daily-cap, --default-flags; pre-flight quota refusal.
• --verbose mid-masks sensitive headers; --trace-unsafe opts into raw output.

P3 — Polish

• quota show alias; tree-wide showSuggestionAfterError; schema export declares cliAddedFields; agent-bootstrap --compact aggregate (< 20 KB); --table-style unicode|ascii|simple|markdown; audit-log auditVersion: 1 + docs/audit-log.md + history verify.

Test plan

• npm test — 832/832 pass locally
• npm run build — clean compile
• Manual: switchbot agent-bootstrap --compact | wc -c < 20 KB on a real account
• Manual: switchbot devices command <ir-id> turnOn --json | jq -e '.verification.verifiable == false'
• Manual: switchbot schema export --compact --used | wc -c < 15 KB
• Manual: force ambiguous --name on a write command → exit 2 + ambiguous_name_match
• Manual: reuse idempotency key with conflicting shape within 60 s → exit 2 + idempotency_conflict
• Manual: switchbot history range <id> --since 5m after letting events mqtt-tail collect data