@agentcomms/whatsapp 0.19.0 → 0.20.0

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as exemptFromUpdateGate, A as requireAccount, B as PATH_OPTIONS, Ct as writeResult, Et as VERSION, F as expandSource, G as approveAndWaitSentence, H as absoluteSearchPath, J as childEnvironment, K as approveChangeAtTerminal, L as CHANNEL_SERVERS, M as storeIdentity, N as checkStorePath, O as PLATFORM, P as defaultStorePath, Q as escapeForDisplay, R as CommsError, S as chatRefOf, St as withFileLock, U as agentMarker, W as approvalsOf, X as colorEnabled, Y as cliHandoffs, Z as commandPathOf, _ as WhatsAppContext, a as CHAT_KINDS, at as lookupName, b as requireSupportedNode, c as searchMessages, ct as openCore, dt as renderInstall, et as gatedChangeAtTerminal, f as draftMessage, ft as renderPrune, gt as serverPruneChange, ht as serverInstallChange, i as probeStore, it as isCommsError, j as requireNamedConfig, k as newWhatsAppAccount, l as Presenter, lt as paint, m as listKey, mt as runCommand, nt as handoffText, o as listChats, ot as nameAvailable, p as Visibility, pt as resolvePaths, q as canPrompt, r as whatsappStatus, rt as installExitStatus, s as readChat, st as nameShapeProblem, t as syncAccount, tt as handoffSentence, u as innerText, ut as pathOverridesFromCliOptions, v as WhatsAppIndex, vt as truncateDisplay, wt as CALLER, xt as windowsSystemProgram, yt as updateGateAtTerminal, z as EXIT_CODES } from "./sync-Q9xVuh21.mjs";
+import { $ as gatedChangeAtTerminal, A as requireAccount, B as PATH_OPTIONS, Ct as CALLER, F as expandSource, G as approveChangeAtTerminal, H as absoluteSearchPath, J as cliHandoffs, K as canPrompt, L as CHANNEL_SERVERS, M as storeIdentity, N as checkStorePath, O as PLATFORM, P as defaultStorePath, Q as exemptFromUpdateNotice, R as CommsError, S as chatRefOf, St as writeResult, Tt as VERSION, U as agentMarker, W as approveAndWaitSentence, X as commandPathOf, Y as colorEnabled, Z as escapeForDisplay, _ as WhatsAppContext, _t as truncateDisplay, a as CHAT_KINDS, at as nameAvailable, b as requireSupportedNode, bt as windowsSystemProgram, c as searchMessages, ct as paint, dt as renderPrune, et as handoffSentence, f as draftMessage, ft as resolvePaths, ht as serverPruneChange, i as probeStore, it as lookupName, j as requireNamedConfig, k as newWhatsAppAccount, l as Presenter, lt as pathOverridesFromCliOptions, m as listKey, mt as serverInstallChange, nt as installExitStatus, o as listChats, ot as nameShapeProblem, p as Visibility, pt as runCommand, q as childEnvironment, r as whatsappStatus, rt as isCommsError, s as readChat, st as openCore, t as syncAccount, tt as handoffText, u as innerText, ut as renderInstall, v as WhatsAppIndex, vt as updateNoticeAtTerminal, xt as withFileLock, z as EXIT_CODES } from "./sync-Coys7_vB.mjs";
 import { rm } from "node:fs/promises";
 import path, { delimiter, join } from "node:path";
 import { stripVTControlCharacters } from "node:util";
@@ -3374,8 +3374,7 @@ Getting started — a person runs these with this CLI, in a terminal:
 
 Nothing here connects to WhatsApp or any other server, and nothing here can send. Needs Node 22.16 or newer.
 
-Exit codes: 0 ok · 1 unexpected · 10 only a person may do that, or a change needs approval · 11 an update
-is out: update first, or put it off (the stop names both commands) · 64 usage
+Exit codes: 0 ok · 1 unexpected · 10 only a person may do that, or a change needs approval · 64 usage
 · 65 bad data (a store whose layout changed) · 66 not found · 69 unavailable · 75 temporary (retry;
 a macOS dialog may be waiting) · 77 permission needed (macOS privacy) · 78 configuration problem.`).exitOverride();
 	for (const { flag } of PATH_OPTIONS) program.addOption(new Option(`${flag} <dir>`, "pin this suite directory for this run").argParser((value) => {
@@ -3421,34 +3420,22 @@ a macOS dialog may be waiting) · 77 permission needed (macOS privacy) · 78 con
 	* start — where the result *is* the output and `--json` must still print one envelope.
 	*/
 	let softExit = null;
-	let gated = null;
 	program.hook("preAction", async (_program, command) => {
 		const path = commandPathOf(command);
-		if (exemptFromUpdateGate(path, ["status"])) return;
+		if (exemptFromUpdateNotice(path, ["status"])) return;
 		const core = coreForInvocation();
-		let ended = null;
-		const code = await runCommand(output(), async () => {
-			ended = await updateGateAtTerminal({
-				core,
-				env,
-				binary: "agent-whatsapp",
-				channel: "whatsapp",
-				running: VERSION,
-				output: output(),
-				noInput: false,
-				streams,
-				approvals: approvalsOf(command)
-			});
-		}, streams);
-		gated = code !== 0 ? code : ended;
+		await updateNoticeAtTerminal({
+			core,
+			env,
+			channel: "whatsapp",
+			running: VERSION,
+			output: output(),
+			streams
+		});
 	});
 	const act = (body) => async (...args) => {
 		ran = true;
 		softExit = null;
-		if (gated !== null) {
-			exitCode = gated;
-			return;
-		}
 		exitCode = await runCommand(output(), async () => {
 			requireSupportedNode();
 			await body(new WhatsAppContext({
@@ -3582,7 +3569,7 @@ a macOS dialog may be waiting) · 77 permission needed (macOS privacy) · 78 con
 		ran = true;
 		exitCode = await runCommand(output(), async () => {
 			requireSupportedNode();
-			await (deps.startMcp ?? (await import("./stdio-entry-c95dpKwO.mjs")).startWhatsAppStdioServer)({
+			await (deps.startMcp ?? (await import("./stdio-entry-83qlMjK3.mjs")).startWhatsAppStdioServer)({
 				env,
 				platform,
 				...deps,

package/dist/index.d.mts

@@ -4277,7 +4277,7 @@ declare namespace external_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, INVALID, Infer$1 as Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIBAN, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInstanceOf, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape$1 as ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, currencyCode, custom, date$2 as date, decode, decodeAsync, deepPartial, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, iban, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, withParser, xid, xor };
 }
 //#endregion
-//#region ../core/dist/change-flow-DOyBTYin.d.mts
+//#region ../core/dist/launcher-VgihcM7Q.d.mts
 //#endregion
 //#region src/config-hooks.d.ts
 /**
@@ -4370,7 +4370,7 @@ interface ResolvedPaths {
    */
   downloadsDir: string;
 }
-type ErrorCode = "UNEXPECTED" | "APPROVAL_REQUIRED" | "APPROVAL_PENDING" | "APPROVAL_EXPIRED" | "APPROVAL_VOID" | "SEND_OUTCOME_UNKNOWN" | "SEND_REFUSED" | "POLICY_NEVER" | "RATE_CAPPED" | "UNSENDABLE_HTML" | "LOOSENING_REFUSED" | "UPDATE_REQUIRED" | "USAGE" | "CURSOR_MISMATCH" | "BAD_DATA" | "REPLY_INVALID" | "NOT_FOUND" | "PROVIDER_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "SECRET_STORE_UNAVAILABLE" | "TRANSIENT" | "KEYCHAIN_APPROVAL_PENDING" | "LOCK_TIMEOUT" | "AUTH_REQUIRED" | "SCOPE_MISSING" | "WHATSAPP_VISIBILITY_SEAM_REQUIRED" | "CONFIG";
+type ErrorCode = "UNEXPECTED" | "APPROVAL_REQUIRED" | "APPROVAL_PENDING" | "APPROVAL_EXPIRED" | "APPROVAL_VOID" | "SEND_OUTCOME_UNKNOWN" | "SEND_REFUSED" | "POLICY_NEVER" | "RATE_CAPPED" | "UNSENDABLE_HTML" | "LOOSENING_REFUSED" | "USAGE" | "CURSOR_MISMATCH" | "BAD_DATA" | "REPLY_INVALID" | "NOT_FOUND" | "PROVIDER_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "SECRET_STORE_UNAVAILABLE" | "TRANSIENT" | "KEYCHAIN_APPROVAL_PENDING" | "LOCK_TIMEOUT" | "AUTH_REQUIRED" | "SCOPE_MISSING" | "WHATSAPP_VISIBILITY_SEAM_REQUIRED" | "CONFIG";
 interface CommsErrorOptions {
   hint?: string;
   details?: Record<string, unknown>;
@@ -4550,7 +4550,7 @@ type SendPolicy = "chat" | "confirm" | "never";
  * way to change it, and that passes no gate at all.
  */
 type ChangePolicy = "chat" | "confirm";
-/** Whether this machine checks for a newer release once a day, and stops until it is updated or put off. */
+/** 0.18's switch for the daily update check: what `defaults.updates` reads from until a level is set. */
 type UpdateCheckSetting = "on" | "off";
 type StoreKind = "keychain" | "file";
 interface ClientConfig {
@@ -4623,6 +4623,16 @@ interface Defaults {
    * it is what keeps a machine from quietly falling behind a release — so it is approved like one; on applies at once.
    */
   updateCheck?: UpdateCheckSetting | undefined;
+  /**
+   * How this machine updates (design 2026-10-16, U2): `auto`, `every-14-days` or `never`. Absent reads from
+   * `updateCheck` — `on` as `auto`, `off` as `never` — and both absent as `auto`. A word this release does not know
+   * reads as `auto`, and the file stays readable: a later release may add a level.
+   *
+   * Moving to a level that updates less is a loosening, approved like one; moving back applies at once. Every write of
+   * a level writes `updateCheck` beside it, `off` for `never` and `on` otherwise, so a release before 0.20 sharing the
+   * file checks, or does not, as the person chose.
+   */
+  updates?: string | undefined;
 }
 /**
  * A connected account on a platform that is not mail: a Slack workspace, and every channel after it (design
@@ -4790,6 +4800,25 @@ interface OrganisationSlackApp {
   clientId: string;
   appId?: string | undefined;
 }
+/**
+ * An organisation's update caps, as the file beside its profile names them (design 2026-10-16, U8), and the SHA-256 of
+ * that file, so `org update` can tell the organisation changing them from the record drifting. A `max` word this release
+ * does not know reads as `never`, the strictest it could mean: caps only ever tighten.
+ */
+interface OrganisationUpdates {
+  max?: string | undefined;
+  background?: boolean | undefined;
+  sha256: string;
+}
+/**
+ * The organisation's bot-only agent app, as its profile's agent-app file names it (CUE-493): the app's id, and the
+ * SHA-256 of that file, so `org update` can tell the organisation changing it from the record drifting. No client id:
+ * nobody signs in through it — its administrator installs it once and its members paste its bot token.
+ */
+interface OrganisationAgentApp {
+  appId: string;
+  sha256: string;
+}
 /**
  * What this machine records of one organisation profile: never its bytes and never its secret — where it was read
  * from, the SHA-256 of what was read and when, the generations of its Google client, and its Slack apps.
@@ -4818,8 +4847,11 @@ interface OrganisationRecord {
     apps: {
       read?: OrganisationSlackApp | undefined;
       send?: OrganisationSlackApp | undefined;
+      agent?: OrganisationAgentApp | undefined;
     };
   } | undefined;
+  /** The organisation's update caps, from the file beside its profile; absent when it names none. */
+  updates?: OrganisationUpdates | undefined;
 }
 interface ConfigV2 extends ConfigBody {
   version: 2;
@@ -5746,10 +5778,19 @@ interface ApprovalStoreOptions {
    * count and interrupt every step. Every other read and write of the store is unaffected.
    */
   io?: ApprovalIo | undefined;
+  /**
+   * Told when a person has answered a send or post: approved at a terminal, or claimed to be sent — the person's yes
+   * under the chat policy (design 2026-10-16, U7: the security line a preview carried counts as asked once its approval
+   * is answered). Never when it is only prepared, refused or revoked. Awaited, and whatever it throws is ignored:
+   * nothing it does may stop a send. `openCore` passes `securityAnswered`.
+   */
+  answered?: ((approvalId: string) => Promise<void>) | undefined;
 }
 declare class ApprovalStore {
   #private;
   readonly directory: string;
+  /** `ApprovalStoreOptions.answered`, never throwing. */
+  readonly answered: ((approvalId: string) => Promise<void>) | undefined;
   constructor(stateDir: string, options?: ApprovalStoreOptions);
   /**
    * Daily retention (design 2026-10-05 §D9): once a day per state directory, a bounded batch deletes valid finished

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { C as chatKindOf, D as text, E as numeric, Et as VERSION, R as CommsError, T as kindOf, Tt as PACKAGE_NAME, _ as WhatsAppContext, d as composeDraft, g as visibilityUnitKey, h as statusAuthor, m as listKey, n as withCheckedCopy, p as Visibility, w as coreDataToIso, x as inspectSchema, y as rebuildIndex } from "./sync-Q9xVuh21.mjs";
-import { t as createWhatsAppMcpServer } from "./server-YS_r6FYq.mjs";
+import { C as chatKindOf, D as text, E as numeric, R as CommsError, T as kindOf, Tt as VERSION, _ as WhatsAppContext, d as composeDraft, g as visibilityUnitKey, h as statusAuthor, m as listKey, n as withCheckedCopy, p as Visibility, w as coreDataToIso, wt as PACKAGE_NAME, x as inspectSchema, y as rebuildIndex } from "./sync-Coys7_vB.mjs";
+import { t as createWhatsAppMcpServer } from "./server-DP6vz_rw.mjs";
 //#region src/source/event-reader.ts
 function rawFromMe(value) {
 	const number = numeric(value);

package/dist/{server-YS_r6FYq.mjs → server-DP6vz_rw.mjs}

@@ -1,4 +1,4 @@
-import { Et as VERSION, I as strictToolArguments, V as UNTRUSTED_NOTICE, _ as WhatsAppContext, _t as toCommsError, a as CHAT_KINDS, bt as updateToolGate, c as searchMessages, f as draftMessage, o as listChats, r as whatsappStatus, s as readChat, t as syncAccount } from "./sync-Q9xVuh21.mjs";
+import { I as strictToolArguments, Tt as VERSION, V as UNTRUSTED_NOTICE, _ as WhatsAppContext, a as CHAT_KINDS, c as searchMessages, f as draftMessage, gt as toCommsError, o as listChats, r as whatsappStatus, s as readChat, t as syncAccount, yt as updateToolNotice } from "./sync-Coys7_vB.mjs";
 import { c as boolean, h as number, x as string } from "./iso-USuVU_sk.mjs";
 import { t as McpServer } from "./mcp-DIH4cS6P-CIWWZQbz.mjs";
 //#region src/mcp/server.ts
@@ -70,10 +70,9 @@ async function createWhatsAppMcpServer(options = {}) {
 			}]
 		};
 	};
-	strictToolArguments(server, fail, updateToolGate({
+	strictToolArguments(server, fail, updateToolNotice({
 		core: context.core,
 		env: context.env,
-		server: "agent-whatsapp",
 		channel: "whatsapp",
 		running: VERSION,
 		exempt: ["whatsapp_status"],

package/dist/{stdio-entry-c95dpKwO.mjs → stdio-entry-83qlMjK3.mjs}

@@ -1,4 +1,4 @@
-import { t as createWhatsAppMcpServer } from "./server-YS_r6FYq.mjs";
+import { t as createWhatsAppMcpServer } from "./server-DP6vz_rw.mjs";
 //#region src/mcp/stdio-entry.ts
 /**
 * Starting the stdio server. On stdio, stdout is the protocol, so the console is redirected to stderr first — the