@agentcomms/events-daemon 0.18.1 → 0.19.0

package/README.md

@@ -57,6 +57,11 @@ agent-events dryrun show <record-id>
 Switch collection on before approving the rule: a pending target can be tested only while collection is on. If a test
 cannot run, the approval says why and still asks for its challenge.
 
+An approval that `rule enable` or `enable-all` prints lasts 30 minutes. If it runs out, or is revoked, before you
+approve it, nothing is turned on. On its next tick, or when it next starts, the service cancels the activation that
+was waiting for it, and `status` stops counting it as pending. Run `rule enable` again for a new approval. An update
+that lapsed this way no longer blocks the rule's next version.
+
 `rule.json`:
 
 ```json

package/dist/{b3-contract-BZIj-LWV.mjs → b3-contract-9xDk86Z-.mjs}

@@ -832,7 +832,7 @@ async function removeTarget(targetId, options = {}) {
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION = "0.18.1";
+const VERSION = "0.19.0";
 //#endregion
 //#region src/mcp/server.ts
 function reply(data) {

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as sourcesList, $t as assertControlSupported, A as normaliseWhatsAppSourceOptions, At as decideHeld, B as addTarget, Bt as CONTROL_PROTOCOL_VERSIONS, C as canonicalSseSubscriber, Ct as enableAll, D as normaliseResendSourceOptions, Dt as ACTIVATION_FAILURE, E as normaliseGmailSourceOptions, Et as doctor, F as canonicalJudgeBudget, Ft as catalogueList, G as addSubscriber, Gt as isControlRequest, H as targetsList, Ht as controlFailure, I as canonicalJudgeKindEnablement, It as catalogueShow, J as updateSubscriber, Jt as newInstanceRecord, K as removeSubscriber, Kt as negotiateVersion, L as judgeKindDefinition, Lt as approvalView, M as JUDGE_BUDGET_ID, Mt as dropDelivery, N as JUDGE_KIND_DEFINITIONS, Nt as heldList, O as normaliseSlackSourceOptions, Ot as isActivationFailureCode, P as canonicalJudge, Pt as retryDelivery, Q as sourceShow$1, Qt as writeInstance, R as createEventsMcpServer, Rt as EventControlClient, S as normaliseActivationDocument, St as updateJudge, T as classifySourceOptionChange, Tt as assertDoctorReportV2, U as updateTarget, Ut as encodeControlFrame, V as removeTarget$1, Vt as ControlFrameReader, W as targetTest, Wt as isControlHello, X as status, Xt as readInstance, Y as stop, Yt as processIsLive, Z as loadSqlite, Zt as removeInstance, _ as activationDocumentDigest, _t as judgeTest, an as ensureEventSocketDirectory, at as rulesList, b as canonicalTarget, bt as removeJudgeModel, cn as installErrorSink, ct as ruleTestRetained, d as B3_SECRET_TERMINAL_ORIGIN, dt as addJudge, en as assertSocketPathFits, et as createRule$1, f as isB3ControlOperation, ft as budgetShow, g as isOwnerControlWireOperation, gt as judgeModelStatus, h as OWNER_CONTROL_WIRES, ht as judgeKindsList, in as ensureEventPaths, it as ruleShow$1, j as APPROVED_TYPESAFE_MODELS, jt as deliveriesList, k as normaliseSourceOptions, kt as disableAll, lt as pause, m as renderB3ApprovalPreviewV1, mt as enableJudgeKind, nn as verifyControlSocket, nt as enableRule, on as ensureOwnerOnlyFile, ot as updateRule, p as isB3SecretOperation, pt as disableJudgeKind, q as subscribersList, qt as mayRecoverStaleInstance, rn as verifyPrivateSocketDirectory, rt as removeRule, sn as eventPaths, st as ruleTest, tn as controlEndpoint, tt as disableRule$1, ut as resume, v as canonicalFullRuleDocument, vt as judgesList, w as sseDeliveryTarget, wt as assertDoctorReportV1, x as disclosureBindingFor, xt as updateBudget, y as canonicalSubscriber, yt as removeJudge, z as VERSION, zt as probeControl } from "./b3-contract-BZIj-LWV.mjs";
+import { $ as sourcesList, $t as assertControlSupported, A as normaliseWhatsAppSourceOptions, At as decideHeld, B as addTarget, Bt as CONTROL_PROTOCOL_VERSIONS, C as canonicalSseSubscriber, Ct as enableAll, D as normaliseResendSourceOptions, Dt as ACTIVATION_FAILURE, E as normaliseGmailSourceOptions, Et as doctor, F as canonicalJudgeBudget, Ft as catalogueList, G as addSubscriber, Gt as isControlRequest, H as targetsList, Ht as controlFailure, I as canonicalJudgeKindEnablement, It as catalogueShow, J as updateSubscriber, Jt as newInstanceRecord, K as removeSubscriber, Kt as negotiateVersion, L as judgeKindDefinition, Lt as approvalView, M as JUDGE_BUDGET_ID, Mt as dropDelivery, N as JUDGE_KIND_DEFINITIONS, Nt as heldList, O as normaliseSlackSourceOptions, Ot as isActivationFailureCode, P as canonicalJudge, Pt as retryDelivery, Q as sourceShow$1, Qt as writeInstance, R as createEventsMcpServer, Rt as EventControlClient, S as normaliseActivationDocument, St as updateJudge, T as classifySourceOptionChange, Tt as assertDoctorReportV2, U as updateTarget, Ut as encodeControlFrame, V as removeTarget$1, Vt as ControlFrameReader, W as targetTest, Wt as isControlHello, X as status, Xt as readInstance, Y as stop, Yt as processIsLive, Z as loadSqlite, Zt as removeInstance, _ as activationDocumentDigest, _t as judgeTest, an as ensureEventSocketDirectory, at as rulesList, b as canonicalTarget, bt as removeJudgeModel, cn as installErrorSink, ct as ruleTestRetained, d as B3_SECRET_TERMINAL_ORIGIN, dt as addJudge, en as assertSocketPathFits, et as createRule$1, f as isB3ControlOperation, ft as budgetShow, g as isOwnerControlWireOperation, gt as judgeModelStatus, h as OWNER_CONTROL_WIRES, ht as judgeKindsList, in as ensureEventPaths, it as ruleShow$1, j as APPROVED_TYPESAFE_MODELS, jt as deliveriesList, k as normaliseSourceOptions, kt as disableAll, lt as pause, m as renderB3ApprovalPreviewV1, mt as enableJudgeKind, nn as verifyControlSocket, nt as enableRule, on as ensureOwnerOnlyFile, ot as updateRule, p as isB3SecretOperation, pt as disableJudgeKind, q as subscribersList, qt as mayRecoverStaleInstance, rn as verifyPrivateSocketDirectory, rt as removeRule, sn as eventPaths, st as ruleTest, tn as controlEndpoint, tt as disableRule$1, ut as resume, v as canonicalFullRuleDocument, vt as judgesList, w as sseDeliveryTarget, wt as assertDoctorReportV1, x as disclosureBindingFor, xt as updateBudget, y as canonicalSubscriber, yt as removeJudge, z as VERSION, zt as probeControl } from "./b3-contract-9xDk86Z-.mjs";
 import { a as EventDomainError, d as isJudgeKind, f as validateLocalEndpoint, g as parseIpLiteral, h as assertApprovedAddressSet, i as webhookDeliveryTarget, l as JUDGE_KIND_TYPESAFE, m as assertAddressAllowed, n as canonicalWebhookTarget, o as JUDGE_KINDS, p as AddressPolicyError, r as secretWebhookUrlDescriptor, s as JUDGE_KIND_LAYA, t as canonicalSecretWebhookUrl, u as assertJudgeKindEnabled } from "./webhook-target-DyDTwWhV.mjs";
 import { a as WriterQuiescer, c as openEventSecretStore, o as withEventWriterLease, r as RecordStorageError, s as migrateEventSecrets, t as EventRecordCipher } from "./records-DsUxYBwb.mjs";
 import process$1 from "node:process";
@@ -11935,6 +11935,7 @@ var ActivationRuntime = class {
 				};
 			}
 			const oldId = `${input.ruleId}@${active.version}`;
+			await this.#settleLapsedApprovals(oldId);
 			if (this.#store.database.prepare("SELECT 1 AS present FROM activation_intents WHERE replacement_of_version = ? AND status IN ('pending', 'pending-completion')").get(oldId) !== void 0) throw new CommsError("TRANSIENT", "this rule already has a replacement completing", { details: { reason: "REPLACEMENT_PENDING" } });
 			const live = await liveEventAccountIds(this.#config, parent.source.channel);
 			const points = this.#unionReplacementPoints(parent, document.rule).filter((point) => point.ruleVersion !== parent.version || live.has(point.accountId) && this.#holdsActivePoint(parent.ruleId, parent.version, {
@@ -12154,6 +12155,7 @@ var ActivationRuntime = class {
 				this.#cancel(intent.id, ACTIVATION_FAILURE.APPROVAL_ABSENT);
 				continue;
 			}
+			if (this.#settleLapsedApproval(intent.id, intent.approval_id, record)) continue;
 			if (record.record.state === "approved") {
 				const binding = this.#settleOnDrift(intent);
 				if (binding === null) continue;
@@ -12188,7 +12190,8 @@ var ActivationRuntime = class {
 	}
 	/**
 	* A live owner retries only work that core has already marked used. Unlike startup recovery this never claims an
-	* approved disclosure and it always carries the immutable usedAt back through the ordinary completion path.
+	* approved disclosure and it always carries the immutable usedAt back through the ordinary completion path. After
+	* that claimed work, it settles every unclaimed intent whose approval lapsed unused, as startup recovery does.
 	*/
 	async resumeClaimedCompletions() {
 		const rows = this.#store.database.prepare("SELECT id, kind, document, digest, effect, replacement_of_version, status, approval_id, claimed_at, completion_deadline FROM activation_intents WHERE status = 'pending-completion' ORDER BY id").all();
@@ -12217,6 +12220,36 @@ var ActivationRuntime = class {
 				throw error;
 			}
 		}
+		await this.#settleLapsedApprovals();
+	}
+	/** Settles the unclaimed pending intents — of one replacement slot, or every one — whose approval lapsed unused. */
+	async #settleLapsedApprovals(replacementOfVersion) {
+		const rows = this.#store.database.prepare("SELECT id, approval_id, replacement_of_version FROM activation_intents WHERE status = 'pending' AND claimed_at IS NULL AND approval_id IS NOT NULL ORDER BY id").all();
+		for (const row of rows) {
+			if (replacementOfVersion !== void 0 && row.replacement_of_version !== replacementOfVersion) continue;
+			this.#settleLapsedApproval(row.id, row.approval_id, await this.#approvals.get(row.approval_id));
+		}
+	}
+	/**
+	* CUE-491: a disclosure approval that core reads as expired or revoked can never be approved or claimed again, so
+	* its unclaimed intent is cancelled (D2: expired, revoked and absent drop). Left pending, every pass would carry it
+	* for good, and an update's would hold its rule's one replacement slot, refusing the next update as
+	* REPLACEMENT_PENDING. Core's answer crossed an await: the write re-reads the intent under its transaction and
+	* settles only the same unclaimed pending one. The failure code reuses APPROVAL_ABSENT — no usable approval
+	* remains, as the claimed path already records for a non-used one — because the B3 control and doctor v1 schemas
+	* that close the code set are pinned.
+	*/
+	#settleLapsedApproval(intentId, approvalId, record) {
+		if (record?.form !== "v2" || record.record.kind !== "disclosure") return false;
+		if (record.record.state !== "expired" && record.record.state !== "revoked") return false;
+		let settled = false;
+		this.#store.immediate(() => {
+			const latest = this.#store.database.prepare("SELECT status, approval_id, claimed_at FROM activation_intents WHERE id = ?").get(intentId);
+			if (latest?.status !== "pending" || latest.claimed_at !== null || latest.approval_id !== approvalId) return;
+			this.#cancel(intentId, ACTIVATION_FAILURE.APPROVAL_ABSENT);
+			settled = true;
+		});
+		return settled;
 	}
 	/**
 	* The live binding of a claimed intent, or null after settling it: a binding that no longer holds (its pointer or
@@ -17571,7 +17604,8 @@ var EventScheduler = class {
 					internalDomains: inbox?.internalDomains ?? []
 				}, input);
 			} },
-			...this.#hostedJudgeKeyFor === void 0 ? {} : { hostedJudgeKeyFor: this.#hostedJudgeKeyFor }
+			...this.#hostedJudgeKeyFor === void 0 ? {} : { hostedJudgeKeyFor: this.#hostedJudgeKeyFor },
+			now: this.#now
 		});
 		const fence = async (rule) => {
 			await assertDisclosable({

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { R as createEventsMcpServer, X as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-BZIj-LWV.mjs";
+import { R as createEventsMcpServer, X as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-9xDk86Z-.mjs";
 export { B3_APPROVAL_VIEW_VARIANTS, B3_CAPABILITIES, B3_CONTROL_CONTRACT, B3_CONTROL_ERROR_CODES, B3_CONTROL_V1_OPERATION_SPECS, B3_CONTROL_V1_RESULT_OPERATIONS, B3_CONTROL_V1_SCHEMA_VERSION, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, B3_DESKTOP_CONTROL_OPERATIONS, B3_JUDGE_UNAVAILABLE_VARIANTS, B3_SECRET_TERMINAL_ORIGIN, createEventsMcpServer, renderB3ApprovalPreviewV1, status };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/events-daemon",
-  "version": "0.18.1",
+  "version": "0.19.0",
   "description": "The local event service for agent-communications: rules you approve deliver Gmail, Slack, Resend and WhatsApp events to a signed webhook, a local live stream or a dry-run log.",
   "type": "module",
   "license": "MIT",
@@ -34,12 +34,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentcomms/core": "0.18.1",
-    "@agentcomms/gmail": "0.18.1",
-    "@agentcomms/events": "0.18.1",
-    "@agentcomms/whatsapp": "0.18.1",
-    "@agentcomms/slack": "0.18.1",
-    "@agentcomms/resend": "0.18.1"
+    "@agentcomms/events": "0.19.0",
+    "@agentcomms/core": "0.19.0",
+    "@agentcomms/gmail": "0.19.0",
+    "@agentcomms/resend": "0.19.0",
+    "@agentcomms/whatsapp": "0.19.0",
+    "@agentcomms/slack": "0.19.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.3.1",
@@ -70,5 +70,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --import ../../test/helpers/loopback-seal-preload.mjs --experimental-strip-types --disable-warning=ExperimentalWarning --test \"test/**/*.test.ts\""
   },
-  "gitHead": "fc398edc67287e411f8c5cb821f434220cb83aa5"
+  "gitHead": "29a7121620a9ef305a4260f193c40db1980312bd"
 }