fix(mothership): guard the run's controller token in the recovery helper and shrink the non-null baseline

Author: waleedlatif1

apps/sim/lib/mothership/async-runs/orphaned-runs.integration.ts

@@ -570,14 +570,17 @@ describe.runIf(Boolean(redisUrl))('Chat runs no controller owns', () => {
      * then claim, so the claimed run has a lock holder for as long as its controller lives.
      */
     const recover = async (orphan: Awaited<ReturnType<typeof admittedRun>>) => {
+      const previousToken = orphan.controllerToken
+      if (!previousToken)
+        throw new Error('Recovery needs the run it takes over to have a controller')
       if (!(await acquirePendingChatStream(orphan.chatId, orphan.streamId, 0))) return false
       const lease = getLocalChatStreamLease(orphan.chatId, orphan.streamId)
       if (!lease) throw new Error('Recovery acquired the chat lock without a local lease')
       await assertChatStreamLease(lease)
       const claimed = await claimRunController({
         runId: orphan.runId,
         chatId: orphan.chatId,
-        previousToken: orphan.controllerToken!,
+        previousToken,
         token: lease.value,
         recoveryBackoff: FIRST_RECOVERY,
       })

scripts/check-explicit-any.baseline.json

@@ -1592,7 +1592,7 @@
     "apps/sim/lib/mothership/agent-cli/workbench-file-provenance.integration.ts": 4,
     "apps/sim/lib/mothership/agent-cli/workbench-file-provenance.ts": 2,
     "apps/sim/lib/mothership/assistant/tool-policy.test.ts": 2,
-    "apps/sim/lib/mothership/async-runs/orphaned-runs.integration.ts": 11,
+    "apps/sim/lib/mothership/async-runs/orphaned-runs.integration.ts": 10,
     "apps/sim/lib/mothership/auth/internal.ts": 1,
     "apps/sim/lib/mothership/billing/service-store.integration.ts": 3,
     "apps/sim/lib/mothership/chat/application/context.ts": 1,