@agentcomms/events-daemon 0.16.0 → 0.18.0

package/dist/{stdio-CD7QQBAh.mjs → stdio-Dp1EE6ok.mjs}

@@ -1,10 +1,25 @@
-import { i as serializeMessage, n as process, r as ReadBuffer } from "./mcp-DXXb3Vv3-B0sHZfig.mjs";
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/stdio.mjs
+import { i as serializeMessage, n as process, r as ReadBuffer } from "./mcp-DIH4cS6P-YuKZfqTg.mjs";
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.1/node_modules/@modelcontextprotocol/server/dist/stdio.mjs
+/**
+* Marks a stdout `'error'` listener that a closed transport left attached purely to
+* swallow late write failures (see {@link StdioServerTransport.close}). A fresh
+* transport taking over the same stream removes listeners carrying this tag in
+* `start()`, so repeated create→close cycles on the process-global `process.stdout`
+* don't accumulate listeners.
+*/
+const swallowsErrorsAfterClose = Symbol("swallowsErrorsAfterClose");
 /**
 * Server transport for stdio: this communicates with an MCP client by reading from the current process' `stdin` and writing to `stdout`.
 *
 * This transport is only available in Node.js environments.
 *
+* When the client closes its end of the pipe (stdin reaches end-of-file), the transport
+* closes itself and fires `onclose`, per the MCP stdio binding's guidance that servers
+* should exit promptly when their standard input is closed. A server that holds no other
+* keep-alive handles will then exit naturally. Requests still in flight when stdin ends are
+* aborted and not answered; a client that expects responses keeps stdin open until it has
+* read them.
+*
 * @example
 * ```ts source="./stdio.examples.ts#StdioServerTransport_basicUsage"
 * const server = new McpServer({ name: 'my-server', version: '1.0.0' });
@@ -37,17 +52,25 @@ var StdioServerTransport = class {
 		this.onerror?.(error);
 	};
 	_onstdouterror = (error) => {
+		if (this._closed) return;
 		this.onerror?.(error);
 		this.close().catch(() => {});
 	};
+	_onstdinclose = () => {
+		this.close().catch(() => {});
+	};
 	/**
 	* Starts listening for messages on `stdin`.
 	*/
 	async start() {
 		if (this._started) throw new Error("StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.");
 		this._started = true;
+		for (const listener of this._stdout.listeners("error")) if (listener[swallowsErrorsAfterClose]) this._stdout.off("error", listener);
+		if (this._stdin.readableEnded || this._stdin.destroyed) setImmediate(this._onstdinclose);
 		this._stdin.on("data", this._ondata);
 		this._stdin.on("error", this._onerror);
+		this._stdin.on("end", this._onstdinclose);
+		this._stdin.on("close", this._onstdinclose);
 		this._stdout.on("error", this._onstdouterror);
 	}
 	processReadBuffer() {
@@ -64,7 +87,9 @@ var StdioServerTransport = class {
 		this._closed = true;
 		this._stdin.off("data", this._ondata);
 		this._stdin.off("error", this._onerror);
-		this._stdout.off("error", this._onstdouterror);
+		this._stdin.off("end", this._onstdinclose);
+		this._stdin.off("close", this._onstdinclose);
+		this._onstdouterror[swallowsErrorsAfterClose] = true;
 		if (this._stdin.listenerCount("data") === 0) this._stdin.pause();
 		this._readBuffer.clear();
 		this.onclose?.();

package/dist/{webhook-target-BkA_wHIu.mjs → webhook-target-DyDTwWhV.mjs}

@@ -1,25 +1,4 @@
 import { canonicalJson, sha256Hex } from "@agentcomms/core";
-//#region src/domain/lifecycle.ts
-/** A content-free domain refusal. No caller should substitute an arbitrary Error message at a control boundary. */
-var EventDomainError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.name = "EventDomainError";
-		this.code = code;
-	}
-};
-const JUDGE_KINDS = [
-	"typesafe",
-	"laya",
-	"local-endpoint"
-];
-function isJudgeKind(value) {
-	return typeof value === "string" && JUDGE_KINDS.includes(value);
-}
-function assertJudgeKindEnabled(kind, enabled) {
-	if (!enabled) throw new EventDomainError("JUDGE_KIND_DISABLED", `the ${kind} judge kind is disabled`);
-}
 //#endregion
 //#region src/network/iana-special-purpose.ts
 /** Checked-in IANA policy; network code must never refresh or consult it at runtime. */
@@ -464,23 +443,30 @@ function embeddedAddresses(address, options) {
 		embedded.push(ipv4From(address.value >> 64n));
 		embedded.push(ipv4From((address.value ^ IPV4_MAX) & IPV4_MAX));
 	}
+	const isatapInterface = address.value >> 32n & IPV4_MAX;
+	if (isatapInterface === 24318n || isatapInterface === 33578750n) embedded.push(ipv4From(address.value));
 	return embedded;
 }
 function assertOne(address, approved, options, seen) {
 	if (seen.has(`${address.family}:${address.value}`)) return [];
 	seen.add(`${address.family}:${address.value}`);
 	if (isUnconditionallyDenied(address)) throw new AddressPolicyError(`address ${address.address} is metadata or link-local and is always refused`);
-	const explicitlyApproved = approved.some((entry) => inCidr(address, entry));
-	if (!globallyReachable(address) && !explicitlyApproved) throw new AddressPolicyError(`non-global address ${address.address} needs an exact approvedAddressSet entry`);
-	if (!explicitlyApproved) throw new AddressPolicyError(`address ${address.address} is not in the approvedAddressSet`);
+	if (options.addressMode === "global-only") {
+		if (!globallyReachable(address)) throw new AddressPolicyError(`non-global address ${address.address} is refused by global-only policy`);
+	} else {
+		if (approved === void 0) throw new AddressPolicyError("approvedAddressSet was unavailable");
+		const explicitlyApproved = approved.some((entry) => inCidr(address, entry));
+		if (!globallyReachable(address) && !explicitlyApproved) throw new AddressPolicyError(`non-global address ${address.address} needs an exact approvedAddressSet entry`);
+		if (!explicitlyApproved) throw new AddressPolicyError(`address ${address.address} is not in the approvedAddressSet`);
+	}
 	const nested = embeddedAddresses(address, options);
 	for (const child of nested) assertOne(child, approved, options, seen);
 	return nested;
 }
-/** Validates the literal itself and every embedded transition address against the exact approved set. */
+/** Validates the literal itself and every embedded transition address under the selected exact-set or global-only policy. */
 function assertAddressAllowed(input, options) {
 	const address = parseIpLiteral(input);
-	const embedded = assertOne(address, parseApprovedAddressSet(options.approvedAddressSet), options, /* @__PURE__ */ new Set());
+	const embedded = assertOne(address, options.addressMode === "global-only" ? void 0 : parseApprovedAddressSet(options.approvedAddressSet), options, /* @__PURE__ */ new Set());
 	return {
 		address: address.address,
 		family: address.family,
@@ -518,6 +504,31 @@ function validateLocalEndpoint(input, approvedAddressSet) {
 	};
 }
 //#endregion
+//#region src/domain/lifecycle.ts
+/** A content-free domain refusal. No caller should substitute an arbitrary Error message at a control boundary. */
+var EventDomainError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "EventDomainError";
+		this.code = code;
+	}
+};
+const JUDGE_KIND_TYPESAFE = "typesafe";
+const JUDGE_KIND_LAYA = "laya";
+const JUDGE_KIND_LOCAL_ENDPOINT = "local-endpoint";
+const JUDGE_KINDS = [
+	JUDGE_KIND_TYPESAFE,
+	JUDGE_KIND_LAYA,
+	JUDGE_KIND_LOCAL_ENDPOINT
+];
+function isJudgeKind(value) {
+	return typeof value === "string" && JUDGE_KINDS.includes(value);
+}
+function assertJudgeKindEnabled(kind, enabled) {
+	if (!enabled) throw new EventDomainError("JUDGE_KIND_DISABLED", `the ${kind} judge kind is disabled`);
+}
+//#endregion
 //#region src/domain/webhook-target.ts
 function fail(message) {
 	throw new EventDomainError("VERSION_DOCUMENT_INVALID", message);
@@ -659,4 +670,4 @@ function webhookDeliveryTarget(document) {
 	};
 }
 //#endregion
-export { AddressPolicyError as a, parseIpLiteral as c, isJudgeKind as d, webhookDeliveryTarget as i, EventDomainError as l, canonicalWebhookTarget as n, assertAddressAllowed as o, secretWebhookUrlDescriptor as r, assertApprovedAddressSet as s, canonicalSecretWebhookUrl as t, assertJudgeKindEnabled as u };
+export { EventDomainError as a, JUDGE_KIND_LOCAL_ENDPOINT as c, isJudgeKind as d, validateLocalEndpoint as f, parseIpLiteral as g, assertApprovedAddressSet as h, webhookDeliveryTarget as i, JUDGE_KIND_TYPESAFE as l, assertAddressAllowed as m, canonicalWebhookTarget as n, JUDGE_KINDS as o, AddressPolicyError as p, secretWebhookUrlDescriptor as r, JUDGE_KIND_LAYA as s, canonicalSecretWebhookUrl as t, assertJudgeKindEnabled as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/events-daemon",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "The local event service for agent-communications: rules you approve deliver Gmail, Slack, Resend and WhatsApp events to a signed webhook, a local live stream or a dry-run log.",
   "type": "module",
   "license": "MIT",
@@ -34,19 +34,19 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentcomms/gmail": "0.16.0",
-    "@agentcomms/events": "0.16.0",
-    "@agentcomms/slack": "0.16.0",
-    "@agentcomms/whatsapp": "0.16.0",
-    "@agentcomms/core": "0.16.0",
-    "@agentcomms/resend": "0.16.0"
+    "@agentcomms/events": "0.18.0",
+    "@agentcomms/resend": "0.18.0",
+    "@agentcomms/gmail": "0.18.0",
+    "@agentcomms/slack": "0.18.0",
+    "@agentcomms/core": "0.18.0",
+    "@agentcomms/whatsapp": "0.18.0"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "2.0.0",
-    "@modelcontextprotocol/server": "^2.0.0",
+    "@modelcontextprotocol/client": "2.3.1",
+    "@modelcontextprotocol/server": "^2.3.1",
     "ajv": "8.20.0",
     "commander": "^15.0.0",
-    "playwright": "1.61.1",
+    "playwright": "1.64.0",
     "tsdown": "0.23.0",
     "typescript": "7.0.2",
     "zod": "^4.6.5"
@@ -70,5 +70,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --import ../../test/helpers/loopback-seal-preload.mjs --experimental-strip-types --disable-warning=ExperimentalWarning --test \"test/**/*.test.ts\""
   },
-  "gitHead": "01cee751d91be360cc363338cfe432672745f431"
+  "gitHead": "a55c5383b35a8214b9e481e2a148b0e29a663a9f"
 }

package/dist/records-DojbuTaG.mjs

@@ -1,2 +0,0 @@
-import { n as RECORD_LAYOUTS } from "./records-3rGS8spn.mjs";
-export { RECORD_LAYOUTS };