@agentcomms/events-daemon 0.16.0 → 0.17.0

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import "@agentcomms/core";
-import { CanonicalCondition, JsonValue } from "@agentcomms/events";
+import { AgenticConditionV1, CanonicalCondition, JsonValue } from "@agentcomms/events";
 //#endregion
 //#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/types-DUs7mGBv.d.mts
 //#region ../../node_modules/.pnpm/json-schema-typed@8.0.2/node_modules/json-schema-typed/draft_2020_12.d.ts
@@ -11461,9 +11461,69 @@ type RegisteredPrompt = {
 };
 //#endregion
 //#region src/domain/lifecycle.d.ts
-declare const JUDGE_KINDS: readonly ["typesafe", "laya", "local-endpoint"];
+declare const JUDGE_KIND_TYPESAFE: "typesafe";
+declare const JUDGE_KIND_LAYA: "laya";
+declare const JUDGE_KIND_LOCAL_ENDPOINT: "local-endpoint";
+declare const JUDGE_KINDS: readonly [typeof JUDGE_KIND_TYPESAFE, typeof JUDGE_KIND_LAYA, typeof JUDGE_KIND_LOCAL_ENDPOINT];
 type JudgeKind = (typeof JUDGE_KINDS)[number];
 //#endregion
+//#region src/domain/judges.d.ts
+declare const TYPESAFE_SYSTEM_ONE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+declare const JUDGE_BUDGET_ID = "judge-budget";
+/** Provider record: docs/superpowers/plans/2026-10-10-events-phase-e-provider-record.md, read 2026-10-10. */
+declare const APPROVED_TYPESAFE_MODELS: readonly ["jev-1.13.0"];
+type ApprovedTypeSafeModel = (typeof APPROVED_TYPESAFE_MODELS)[number];
+interface TypeSafeJudgeDocument {
+  readonly judgeId: string;
+  readonly version: number;
+  readonly kind: typeof JUDGE_KIND_TYPESAFE;
+  readonly provider: typeof JUDGE_KIND_TYPESAFE;
+  readonly model: ApprovedTypeSafeModel;
+  readonly endpoint: typeof TYPESAFE_SYSTEM_ONE_ENDPOINT;
+  readonly promptTemplate: string;
+  readonly protocol: "noul";
+}
+interface LocalEndpointJudgeBase {
+  readonly judgeId: string;
+  readonly version: number;
+  readonly kind: typeof JUDGE_KIND_LOCAL_ENDPOINT;
+  readonly provider: string;
+  readonly model: string;
+  readonly endpoint: string;
+  readonly approvedAddressSet: readonly [string];
+  readonly promptTemplate: string;
+}
+type LocalEndpointJudgeDocument = (LocalEndpointJudgeBase & {
+  readonly protocol: "noul";
+}) | (LocalEndpointJudgeBase & {
+  readonly protocol: "json-score";
+  readonly scorePointer: string;
+});
+type CanonicalJudgeDocument = TypeSafeJudgeDocument | LocalEndpointJudgeDocument;
+interface JudgeBudgetLimits {
+  readonly callsPerRollingHour: number;
+  readonly inputTokensPerRolling30Days: number;
+  readonly concurrency: number;
+}
+interface CanonicalJudgeBudgetDocument {
+  readonly budgetId: typeof JUDGE_BUDGET_ID;
+  readonly version: number;
+  readonly global: JudgeBudgetLimits;
+  readonly providers: readonly (JudgeBudgetLimits & {
+    readonly provider: string;
+  })[];
+}
+type CanonicalJudgeKindEnablementDocument = {
+  readonly id: "judge-kind:typesafe";
+  readonly kind: typeof JUDGE_KIND_TYPESAFE;
+  readonly version: number;
+  readonly endpoint: typeof TYPESAFE_SYSTEM_ONE_ENDPOINT;
+} | {
+  readonly id: "judge-kind:local-endpoint";
+  readonly kind: typeof JUDGE_KIND_LOCAL_ENDPOINT;
+  readonly version: number;
+};
+//#endregion
 //#region src/domain/source-options.d.ts
 interface GmailSourceOptions {
   readonly channel: "gmail";
@@ -11537,14 +11597,10 @@ interface DryRunTargetDocument {
   readonly retentionMs: number;
 }
 type TargetDocument = DryRunTargetDocument | WebhookTargetDocument | SseTargetDocument;
-interface JudgeDocument {
-  readonly judgeId: string;
-  readonly version: number;
-  readonly kind: JudgeKind;
-  readonly provider: string;
-  readonly model: string;
-  readonly [field: string]: unknown;
-}
+type JudgeDocument = CanonicalJudgeDocument;
+type CanonicalAgenticCondition = Omit<AgenticConditionV1, "judge"> & {
+  readonly judge: CanonicalJudgeDocument;
+};
 type SubscriberDocument = SseSubscriberDocument;
 interface RuleRetentionDocument {
   readonly ingestMs: number;
@@ -11589,6 +11645,8 @@ interface CanonicalFullRuleDocument {
     readonly version: number;
   };
   readonly condition: CanonicalCondition;
+  /** An optional exact judge authority; deterministic matching remains mandatory without it. */
+  readonly agentic?: CanonicalAgenticCondition;
   readonly mapping: JsonValue;
   /** D2/D6: the optional exact CloudEvent `type` override, part of the approval when present; absent means the default. */
   readonly cloudEventType?: string;
@@ -11598,16 +11656,8 @@ interface CanonicalFullRuleDocument {
   readonly deliveryRateCap: number;
   readonly retention: RuleRetentionDocument;
 }
-interface JudgeBudgetDocument {
-  readonly budgetId: string;
-  readonly version: number;
-  readonly [field: string]: unknown;
-}
-interface JudgeKindEnablementDocument {
-  readonly kind: JudgeKind;
-  readonly version: number;
-  readonly [field: string]: unknown;
-}
+type JudgeBudgetDocument = CanonicalJudgeBudgetDocument;
+type JudgeKindEnablementDocument = CanonicalJudgeKindEnablementDocument;
 type ActivationDocumentV1 = {
   readonly documentVersion: 1;
   readonly kind: "rule";
@@ -12083,7 +12133,7 @@ interface DoctorReportV1 {
     }[];
   };
   readonly judgeBoundary: readonly {
-    readonly kind: "typesafe" | "local-endpoint" | "laya";
+    readonly kind: JudgeKind;
     readonly code: "E_REQUIRED" | "E2_REQUIRED";
     readonly phase: "E" | "E2";
   }[];
@@ -12458,10 +12508,10 @@ interface B3ControlRequestArgumentsV1 {
   };
   readonly judgesList: Record<string, never>;
   readonly addJudge: {
-    readonly document: JudgeDocument;
+    readonly document: CanonicalJudgeDocument;
   };
   readonly updateJudge: {
-    readonly document: JudgeDocument;
+    readonly document: CanonicalJudgeDocument;
   };
   readonly removeJudge: {
     readonly judgeId: string;

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { M as createEventsMcpServer, U as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-03AO67VB.mjs";
+import { R as createEventsMcpServer, Y as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-DFxcHY0I.mjs";
 export { B3_APPROVAL_VIEW_VARIANTS, B3_CAPABILITIES, B3_CONTROL_CONTRACT, B3_CONTROL_ERROR_CODES, B3_CONTROL_V1_OPERATION_SPECS, B3_CONTROL_V1_RESULT_OPERATIONS, B3_CONTROL_V1_SCHEMA_VERSION, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, B3_DESKTOP_CONTROL_OPERATIONS, B3_JUDGE_UNAVAILABLE_VARIANTS, B3_SECRET_TERMINAL_ORIGIN, createEventsMcpServer, renderB3ApprovalPreviewV1, status };

package/dist/records-DjE5a4_H.mjs

@@ -0,0 +1,2 @@
+import { n as RECORD_LAYOUTS } from "./records-DsUxYBwb.mjs";
+export { RECORD_LAYOUTS };

package/dist/{records-3rGS8spn.mjs → records-DsUxYBwb.mjs}

@@ -1,4 +1,4 @@
-import { t as canonicalSecretWebhookUrl } from "./webhook-target-BkA_wHIu.mjs";
+import { t as canonicalSecretWebhookUrl } from "./webhook-target-DyDTwWhV.mjs";
 import { createCipheriv, createDecipheriv, hkdfSync, randomBytes } from "node:crypto";
 import "node:fs/promises";
 import { FileSecretStore, KeychainSecretStore, canonicalJson, keychainNamespace, loadKeyringModule, sha256Hex, withFileLock } from "@agentcomms/core";
@@ -354,7 +354,7 @@ var EventSecretStore = class {
 			this.assertSelectedBackend();
 			const row = this.#database.prepare("SELECT secret_ref, retired_at FROM event_secret_masters WHERE key_id = ?").get(input.keyId);
 			if (row === void 0 || row.retired_at === null) throw new EventSecretError("EVENT_MASTER_UNKNOWN", "only a known retired event master may be destroyed");
-			const { RECORD_LAYOUTS } = await import("./records-DojbuTaG.mjs");
+			const { RECORD_LAYOUTS } = await import("./records-DjE5a4_H.mjs");
 			for (const layout of RECORD_LAYOUTS) {
 				const records = this.#database.prepare(`SELECT ${layout.sqlColumn} AS record FROM ${layout.table} WHERE ${layout.sqlColumn} IS NOT NULL`).all();
 				for (const record of records) {

package/dist/{webhook-target-BkA_wHIu.mjs → webhook-target-DyDTwWhV.mjs}

@@ -1,25 +1,4 @@
 import { canonicalJson, sha256Hex } from "@agentcomms/core";
-//#region src/domain/lifecycle.ts
-/** A content-free domain refusal. No caller should substitute an arbitrary Error message at a control boundary. */
-var EventDomainError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.name = "EventDomainError";
-		this.code = code;
-	}
-};
-const JUDGE_KINDS = [
-	"typesafe",
-	"laya",
-	"local-endpoint"
-];
-function isJudgeKind(value) {
-	return typeof value === "string" && JUDGE_KINDS.includes(value);
-}
-function assertJudgeKindEnabled(kind, enabled) {
-	if (!enabled) throw new EventDomainError("JUDGE_KIND_DISABLED", `the ${kind} judge kind is disabled`);
-}
 //#endregion
 //#region src/network/iana-special-purpose.ts
 /** Checked-in IANA policy; network code must never refresh or consult it at runtime. */
@@ -464,23 +443,30 @@ function embeddedAddresses(address, options) {
 		embedded.push(ipv4From(address.value >> 64n));
 		embedded.push(ipv4From((address.value ^ IPV4_MAX) & IPV4_MAX));
 	}
+	const isatapInterface = address.value >> 32n & IPV4_MAX;
+	if (isatapInterface === 24318n || isatapInterface === 33578750n) embedded.push(ipv4From(address.value));
 	return embedded;
 }
 function assertOne(address, approved, options, seen) {
 	if (seen.has(`${address.family}:${address.value}`)) return [];
 	seen.add(`${address.family}:${address.value}`);
 	if (isUnconditionallyDenied(address)) throw new AddressPolicyError(`address ${address.address} is metadata or link-local and is always refused`);
-	const explicitlyApproved = approved.some((entry) => inCidr(address, entry));
-	if (!globallyReachable(address) && !explicitlyApproved) throw new AddressPolicyError(`non-global address ${address.address} needs an exact approvedAddressSet entry`);
-	if (!explicitlyApproved) throw new AddressPolicyError(`address ${address.address} is not in the approvedAddressSet`);
+	if (options.addressMode === "global-only") {
+		if (!globallyReachable(address)) throw new AddressPolicyError(`non-global address ${address.address} is refused by global-only policy`);
+	} else {
+		if (approved === void 0) throw new AddressPolicyError("approvedAddressSet was unavailable");
+		const explicitlyApproved = approved.some((entry) => inCidr(address, entry));
+		if (!globallyReachable(address) && !explicitlyApproved) throw new AddressPolicyError(`non-global address ${address.address} needs an exact approvedAddressSet entry`);
+		if (!explicitlyApproved) throw new AddressPolicyError(`address ${address.address} is not in the approvedAddressSet`);
+	}
 	const nested = embeddedAddresses(address, options);
 	for (const child of nested) assertOne(child, approved, options, seen);
 	return nested;
 }
-/** Validates the literal itself and every embedded transition address against the exact approved set. */
+/** Validates the literal itself and every embedded transition address under the selected exact-set or global-only policy. */
 function assertAddressAllowed(input, options) {
 	const address = parseIpLiteral(input);
-	const embedded = assertOne(address, parseApprovedAddressSet(options.approvedAddressSet), options, /* @__PURE__ */ new Set());
+	const embedded = assertOne(address, options.addressMode === "global-only" ? void 0 : parseApprovedAddressSet(options.approvedAddressSet), options, /* @__PURE__ */ new Set());
 	return {
 		address: address.address,
 		family: address.family,
@@ -518,6 +504,31 @@ function validateLocalEndpoint(input, approvedAddressSet) {
 	};
 }
 //#endregion
+//#region src/domain/lifecycle.ts
+/** A content-free domain refusal. No caller should substitute an arbitrary Error message at a control boundary. */
+var EventDomainError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "EventDomainError";
+		this.code = code;
+	}
+};
+const JUDGE_KIND_TYPESAFE = "typesafe";
+const JUDGE_KIND_LAYA = "laya";
+const JUDGE_KIND_LOCAL_ENDPOINT = "local-endpoint";
+const JUDGE_KINDS = [
+	JUDGE_KIND_TYPESAFE,
+	JUDGE_KIND_LAYA,
+	JUDGE_KIND_LOCAL_ENDPOINT
+];
+function isJudgeKind(value) {
+	return typeof value === "string" && JUDGE_KINDS.includes(value);
+}
+function assertJudgeKindEnabled(kind, enabled) {
+	if (!enabled) throw new EventDomainError("JUDGE_KIND_DISABLED", `the ${kind} judge kind is disabled`);
+}
+//#endregion
 //#region src/domain/webhook-target.ts
 function fail(message) {
 	throw new EventDomainError("VERSION_DOCUMENT_INVALID", message);
@@ -659,4 +670,4 @@ function webhookDeliveryTarget(document) {
 	};
 }
 //#endregion
-export { AddressPolicyError as a, parseIpLiteral as c, isJudgeKind as d, webhookDeliveryTarget as i, EventDomainError as l, canonicalWebhookTarget as n, assertAddressAllowed as o, secretWebhookUrlDescriptor as r, assertApprovedAddressSet as s, canonicalSecretWebhookUrl as t, assertJudgeKindEnabled as u };
+export { EventDomainError as a, JUDGE_KIND_LOCAL_ENDPOINT as c, isJudgeKind as d, validateLocalEndpoint as f, parseIpLiteral as g, assertApprovedAddressSet as h, webhookDeliveryTarget as i, JUDGE_KIND_TYPESAFE as l, assertAddressAllowed as m, canonicalWebhookTarget as n, JUDGE_KINDS as o, AddressPolicyError as p, secretWebhookUrlDescriptor as r, JUDGE_KIND_LAYA as s, canonicalSecretWebhookUrl as t, assertJudgeKindEnabled as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/events-daemon",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "The local event service for agent-communications: rules you approve deliver Gmail, Slack, Resend and WhatsApp events to a signed webhook, a local live stream or a dry-run log.",
   "type": "module",
   "license": "MIT",
@@ -34,12 +34,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentcomms/gmail": "0.16.0",
-    "@agentcomms/events": "0.16.0",
-    "@agentcomms/slack": "0.16.0",
-    "@agentcomms/whatsapp": "0.16.0",
-    "@agentcomms/core": "0.16.0",
-    "@agentcomms/resend": "0.16.0"
+    "@agentcomms/gmail": "0.17.0",
+    "@agentcomms/events": "0.17.0",
+    "@agentcomms/slack": "0.17.0",
+    "@agentcomms/resend": "0.17.0",
+    "@agentcomms/whatsapp": "0.17.0",
+    "@agentcomms/core": "0.17.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.0.0",
@@ -70,5 +70,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --import ../../test/helpers/loopback-seal-preload.mjs --experimental-strip-types --disable-warning=ExperimentalWarning --test \"test/**/*.test.ts\""
   },
-  "gitHead": "01cee751d91be360cc363338cfe432672745f431"
+  "gitHead": "15bf25acc4a5a1b75953c75873870a49f4fa1472"
 }

package/dist/records-DojbuTaG.mjs

@@ -1,2 +0,0 @@
-import { n as RECORD_LAYOUTS } from "./records-3rGS8spn.mjs";
-export { RECORD_LAYOUTS };