@agentcomms/whatsapp 0.24.0 → 0.26.0

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as gatedChangeAtTerminal, A as requireAccount, B as PATH_OPTIONS, Ct as CALLER, F as expandSource, G as approveChangeAtTerminal, H as absoluteSearchPath, J as cliHandoffs, K as canPrompt, L as CHANNEL_SERVERS, M as storeIdentity, N as checkStorePath, O as PLATFORM, P as defaultStorePath, Q as exemptFromUpdateNotice, R as CommsError, S as chatRefOf, St as writeResult, Tt as VERSION, U as agentMarker, W as approveAndWaitSentence, X as commandPathOf, Y as colorEnabled, Z as escapeForDisplay, _ as WhatsAppContext, _t as truncateDisplay, a as CHAT_KINDS, at as nameAvailable, b as requireSupportedNode, bt as windowsSystemProgram, c as searchMessages, ct as paint, dt as renderPrune, et as handoffSentence, f as draftMessage, ft as resolvePaths, ht as serverPruneChange, i as probeStore, it as lookupName, j as requireNamedConfig, k as newWhatsAppAccount, l as Presenter, lt as pathOverridesFromCliOptions, m as listKey, mt as serverInstallChange, nt as installExitStatus, o as listChats, ot as nameShapeProblem, p as Visibility, pt as runCommand, q as childEnvironment, r as whatsappStatus, rt as isCommsError, s as readChat, st as openCore, t as syncAccount, tt as handoffText, u as innerText, ut as renderInstall, v as WhatsAppIndex, vt as updateNoticeAtTerminal, xt as withFileLock, z as EXIT_CODES } from "./sync-DYq2CGVj.mjs";
+import { $ as gatedChangeAtTerminal, A as requireAccount, B as PATH_OPTIONS, Ct as CALLER, F as expandSource, G as approveChangeAtTerminal, H as absoluteSearchPath, J as cliHandoffs, K as canPrompt, L as CHANNEL_SERVERS, M as storeIdentity, N as checkStorePath, O as PLATFORM, P as defaultStorePath, Q as exemptFromUpdateNotice, R as CommsError, S as chatRefOf, St as writeResult, Tt as VERSION, U as agentMarker, W as approveAndWaitSentence, X as commandPathOf, Y as colorEnabled, Z as escapeForDisplay, _ as WhatsAppContext, _t as truncateDisplay, a as CHAT_KINDS, at as nameAvailable, b as requireSupportedNode, bt as windowsSystemProgram, c as searchMessages, ct as paint, dt as renderPrune, et as handoffSentence, f as draftMessage, ft as resolvePaths, ht as serverPruneChange, i as probeStore, it as lookupName, j as requireNamedConfig, k as newWhatsAppAccount, l as Presenter, lt as pathOverridesFromCliOptions, m as listKey, mt as serverInstallChange, nt as installExitStatus, o as listChats, ot as nameShapeProblem, p as Visibility, pt as runCommand, q as childEnvironment, r as whatsappStatus, rt as isCommsError, s as readChat, st as openCore, t as syncAccount, tt as handoffText, u as innerText, ut as renderInstall, v as WhatsAppIndex, vt as updateNoticeAtTerminal, xt as withFileLock, z as EXIT_CODES } from "./sync-BwJSBi-M.mjs";
 import { rm } from "node:fs/promises";
 import path, { delimiter, join } from "node:path";
 import { stripVTControlCharacters } from "node:util";
@@ -3569,7 +3569,7 @@ a macOS dialog may be waiting) · 77 permission needed (macOS privacy) · 78 con
 		ran = true;
 		exitCode = await runCommand(output(), async () => {
 			requireSupportedNode();
-			await (deps.startMcp ?? (await import("./stdio-entry-pwRwRiwa.mjs")).startWhatsAppStdioServer)({
+			await (deps.startMcp ?? (await import("./stdio-entry-DQ1RgYGk.mjs")).startWhatsAppStdioServer)({
 				env,
 				platform,
 				...deps,

package/dist/index.d.mts

@@ -4277,7 +4277,7 @@ declare namespace external_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, INVALID, Infer$1 as Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIBAN, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInstanceOf, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape$1 as ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, currencyCode, custom, date$2 as date, decode, decodeAsync, deepPartial, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, iban, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, withParser, xid, xor };
 }
 //#endregion
-//#region ../core/dist/launcher-B8pYW7eG.d.mts
+//#region ../core/dist/launcher-PMDWJUz9.d.mts
 interface RegisteredServer {
   client: string;
   path: string;

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { C as chatKindOf, D as text, E as numeric, R as CommsError, T as kindOf, Tt as VERSION, _ as WhatsAppContext, d as composeDraft, g as visibilityUnitKey, h as statusAuthor, m as listKey, n as withCheckedCopy, p as Visibility, w as coreDataToIso, wt as PACKAGE_NAME, x as inspectSchema, y as rebuildIndex } from "./sync-DYq2CGVj.mjs";
-import { t as createWhatsAppMcpServer } from "./server-Btcjiqz2.mjs";
+import { C as chatKindOf, D as text, E as numeric, R as CommsError, T as kindOf, Tt as VERSION, _ as WhatsAppContext, d as composeDraft, g as visibilityUnitKey, h as statusAuthor, m as listKey, n as withCheckedCopy, p as Visibility, w as coreDataToIso, wt as PACKAGE_NAME, x as inspectSchema, y as rebuildIndex } from "./sync-BwJSBi-M.mjs";
+import { t as createWhatsAppMcpServer } from "./server-ubl3VinK.mjs";
 //#region src/source/event-reader.ts
 function rawFromMe(value) {
 	const number = numeric(value);

package/dist/{server-Btcjiqz2.mjs → server-ubl3VinK.mjs}

@@ -1,4 +1,4 @@
-import { I as strictToolArguments, Tt as VERSION, V as UNTRUSTED_NOTICE, _ as WhatsAppContext, a as CHAT_KINDS, c as searchMessages, f as draftMessage, gt as toCommsError, o as listChats, r as whatsappStatus, s as readChat, t as syncAccount, yt as updateToolNotice } from "./sync-DYq2CGVj.mjs";
+import { I as strictToolArguments, Tt as VERSION, V as UNTRUSTED_NOTICE, _ as WhatsAppContext, a as CHAT_KINDS, c as searchMessages, f as draftMessage, gt as toCommsError, o as listChats, r as whatsappStatus, s as readChat, t as syncAccount, yt as updateToolNotice } from "./sync-BwJSBi-M.mjs";
 import { c as boolean, h as number, x as string } from "./iso-USuVU_sk.mjs";
 import { t as McpServer } from "./mcp-DIH4cS6P-CIWWZQbz.mjs";
 //#region src/mcp/server.ts

package/dist/{stdio-entry-pwRwRiwa.mjs → stdio-entry-DQ1RgYGk.mjs}

@@ -1,4 +1,4 @@
-import { t as createWhatsAppMcpServer } from "./server-Btcjiqz2.mjs";
+import { t as createWhatsAppMcpServer } from "./server-ubl3VinK.mjs";
 //#region src/mcp/stdio-entry.ts
 /**
 * Starting the stdio server. On stdio, stdout is the protocol, so the console is redirected to stderr first — the

package/dist/{sync-DYq2CGVj.mjs → sync-BwJSBi-M.mjs}

@@ -11,7 +11,7 @@ import { execFile, spawn } from "node:child_process";
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION$2 = "0.24.0";
+const VERSION$2 = "0.26.0";
 //#endregion
 //#region src/caller.ts
 /** This package's name, as its manifest has it. */
@@ -28,7 +28,7 @@ const CALLER = Object.freeze({
 	packageName: PACKAGE_NAME
 });
 //#endregion
-//#region ../core/dist/update-check-BY5xNUZa.mjs
+//#region ../core/dist/update-check-C3j1VxDg.mjs
 /**
 * Every failure a user or an agent can act on carries a specific, stable code from this registry, a message, an
 * optional one-line hint and structured `details`. The code decides the process exit status; agents and skills branch
@@ -7157,6 +7157,24 @@ function parseConfig(text, source = "config.json") {
 	if (!parsed.success) throw new CommsError("CONFIG", `${source} is invalid: ${describeIssues(parsed.error, naming === 1 ? 1 : 2)}`);
 	return parsed.data;
 }
+/**
+* How a config write waits for the config lock: five seconds for each holder, thirty seconds in all.
+*
+* The lock is a queue. Every send prepare, claim and approval on every channel runs `ensureSendEpochConfig` first, and
+* while a legacy drain is open that is a config write or two per call, so an agent's parallel calls across several MCP
+* servers arrive at this lock together, each holding it for one read, check and fsynced rename (and the drain's, for a
+* list of the approvals too). Counted from when each waiter began, the lock's five seconds were a budget for the whole
+* line ahead: on the Windows runner a line of twelve writes gave up at the ninth, "another agent-communications process
+* is holding", while the lock was being handed on exactly as it should be. A holder there took about half a second, and
+* on Windows a rename alone may retry for one. Counted per holder, as Resend's throttle and Gmail's history caches count
+* theirs, a write gives up only on a holder that keeps the lock for the whole five seconds: the stuck lock the timeout is
+* for. The lock is polled rather than queued, so thirty seconds in all bounds the rest, and leaves room inside the minute
+* an MCP client waits for a tool call.
+*/
+const CONFIG_WRITE_LOCK = {
+	timeoutPerHolder: true,
+	maxWaitMs: 3e4
+};
 var ConfigStore = class {
 	path;
 	#lockPath;
@@ -7177,6 +7195,10 @@ var ConfigStore = class {
 	#namesMigrateAgain(why) {
 		return handoffSentence(requiredHandoffs(this.#handoffs).core(["names", "migrate"]), (command) => `Run ${command} again ${why}.`, { instead: `Call comms_names_migrate again ${why}.` });
 	}
+	/** Runs `fn` holding the config lock, waited for as a write waits for it (`CONFIG_WRITE_LOCK`). */
+	#withWriteLock(fn) {
+		return withFileLock(this.#lockPath, fn, CONFIG_WRITE_LOCK);
+	}
 	/** The current config; an empty one when the file does not exist yet. */
 	async load() {
 		let key;
@@ -7203,7 +7225,7 @@ var ConfigStore = class {
 		let committed;
 		let result;
 		try {
-			result = await withFileLock(this.#lockPath, async () => {
+			result = await this.#withWriteLock(async () => {
 				options.signal?.throwIfAborted();
 				this.#cache = null;
 				const current = structuredClone(await this.load());
@@ -12004,7 +12026,7 @@ function folding(platform) {
 	return platform === "win32" ? (text) => text.toLowerCase() : (text) => text;
 }
 /** The package version, read from package.json at build time. */
-const VERSION = "0.24.0";
+const VERSION = "0.26.0";
 /**
 * The command a person is told to run for one of this suite's own CLIs (design 2026-10-04, D1 and D5; CUE-403).
 *
@@ -13298,7 +13320,7 @@ const PER_WORKSPACE = {
 	"agentLabel.slackStyles": "app",
 	"agentLabel.slackIcons": "your Slack photo"
 };
-function recordOf$1(value) {
+function recordOf$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /**
@@ -13308,7 +13330,7 @@ function recordOf$1(value) {
 */
 function perWorkspace(field, before, after) {
 	const none = PER_WORKSPACE[field];
-	const [was, now] = [recordOf$1(before ?? {}), recordOf$1(after ?? {})];
+	const [was, now] = [recordOf$2(before ?? {}), recordOf$2(after ?? {})];
 	if (none === void 0 || was === void 0 || now === void 0) return void 0;
 	const value = (record, name) => Object.hasOwn(record, name) ? String(record[name]) : none;
 	const moved = [.../* @__PURE__ */ new Set([...Object.keys(was), ...Object.keys(now)])].filter((name) => value(was, name) !== value(now, name)).sort();
@@ -13321,7 +13343,7 @@ function perWorkspace(field, before, after) {
 * commas. A level one side does not list allows everything there. Undefined for a value of another shape.
 */
 function perLevel(field, before, after) {
-	const [was, now] = [recordOf$1(before ?? {}), recordOf$1(after ?? {})];
+	const [was, now] = [recordOf$2(before ?? {}), recordOf$2(after ?? {})];
 	if (field !== "behaviour.rules" || was === void 0 || now === void 0) return void 0;
 	const value = (record, level) => Object.hasOwn(record, level) ? String(record[level]) : "everything";
 	const levels = [.../* @__PURE__ */ new Set([...Object.keys(was), ...Object.keys(now)])].sort();
@@ -13896,7 +13918,7 @@ const OUTCOMES = [
 	"unknown"
 ];
 const isString = (value) => typeof value === "string";
-const isTime$2 = (value) => isString(value) && ISO.test(value) && !Number.isNaN(Date.parse(value));
+const isTime$3 = (value) => isString(value) && ISO.test(value) && !Number.isNaN(Date.parse(value));
 /** One line as an entry, or null when it is not one this release wrote. */
 function entryOf$2(line) {
 	let raw;
@@ -13907,7 +13929,7 @@ function entryOf$2(line) {
 	}
 	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
 	const entry = raw;
-	if (!isTime$2(entry.at)) return null;
+	if (!isTime$3(entry.at)) return null;
 	if (entry.kind === "use") {
 		if (![
 			"standingId",
@@ -13939,7 +13961,7 @@ function entryOf$2(line) {
 	if (entry.kind === "outcome") {
 		if (!isString(entry.childId) || !isString(entry.outcome) || !OUTCOMES.includes(entry.outcome)) return null;
 		if (!isString(entry.notice) || entry.link !== void 0 && !isString(entry.link)) return null;
-		if (entry.actAt !== void 0 && !isTime$2(entry.actAt)) return null;
+		if (entry.actAt !== void 0 && !isTime$3(entry.actAt)) return null;
 		return {
 			kind: "outcome",
 			at: entry.at,
@@ -14384,7 +14406,7 @@ function updateJobSupported(platform) {
 function updateJobMarkerPath(stateDir) {
 	return join(stateDir, "update-job.json");
 }
-const isTime$1 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+const isTime$2 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
 /** The record, or null when there is none — or none this release can read, which is treated as none. */
 async function readUpdateJobMarker(stateDir) {
 	let parsed;
@@ -14399,11 +14421,11 @@ async function readUpdateJobMarker(stateDir) {
 		platform: record.platform,
 		installedAt: record.installedAt,
 		label: record.label,
-		...isTime$1(record.lastRun) ? { lastRun: record.lastRun } : {}
+		...isTime$2(record.lastRun) ? { lastRun: record.lastRun } : {}
 	};
 }
 function within$1(at, now, intervalMs) {
-	if (at === void 0 || !isTime$1(at)) return false;
+	if (at === void 0 || !isTime$2(at)) return false;
 	const since = now.getTime() - Date.parse(at);
 	return since >= -3e5 && since < intervalMs;
 }
@@ -14484,7 +14506,7 @@ const NOTICE_OUTCOMES = [
 function readBackgroundNotice(value) {
 	if (typeof value !== "object" || value === null) return null;
 	const { at, outcome, version, text } = value;
-	if (!isTime(at) || !NOTICE_OUTCOMES.includes(outcome) || typeof text !== "string") return null;
+	if (!isTime$1(at) || !NOTICE_OUTCOMES.includes(outcome) || typeof text !== "string") return null;
 	return {
 		at,
 		outcome,
@@ -14513,7 +14535,7 @@ const EMPTY_UPDATE_CHECK = Object.freeze({
 function updateCheckPath(stateDir) {
 	return join(stateDir, UPDATE_CHECK_FILE);
 }
-const isTime = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+const isTime$1 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
 const isWords = (value) => Array.isArray(value) && value.every((word) => typeof word === "string");
 function readRelease(value) {
 	if (typeof value !== "object" || value === null) return null;
@@ -14546,17 +14568,17 @@ async function readUpdateCheck(stateDir) {
 	}
 	const held = typeof parsed === "object" && parsed !== null ? parsed : {};
 	return {
-		lastChecked: isTime(held.lastChecked) ? held.lastChecked : null,
+		lastChecked: isTime$1(held.lastChecked) ? held.lastChecked : null,
 		latest: isPlainVersion(held.latest) ? held.latest : null,
 		behind: typeof held.behind === "boolean" ? held.behind : null,
 		current: readCurrent(held.current),
 		lastError: typeof held.lastError === "string" ? held.lastError.slice(0, 300) : null,
-		snoozedUntil: isTime(held.snoozedUntil) ? held.snoozedUntil : null,
-		checking: isTime(held.checking) ? held.checking : null,
-		commandNoticeAt: isTime(held.commandNoticeAt) ? held.commandNoticeAt : null,
-		noticeAt: isTime(held.noticeAt) ? held.noticeAt : null,
-		pausedAt: isTime(held.pausedAt) ? held.pausedAt : null,
-		pausedUntil: isTime(held.pausedUntil) ? held.pausedUntil : null,
+		snoozedUntil: isTime$1(held.snoozedUntil) ? held.snoozedUntil : null,
+		checking: isTime$1(held.checking) ? held.checking : null,
+		commandNoticeAt: isTime$1(held.commandNoticeAt) ? held.commandNoticeAt : null,
+		noticeAt: isTime$1(held.noticeAt) ? held.noticeAt : null,
+		pausedAt: isTime$1(held.pausedAt) ? held.pausedAt : null,
+		pausedUntil: isTime$1(held.pausedUntil) ? held.pausedUntil : null,
 		release: readRelease(held.release),
 		securityAsked: isPlainVersion(held.securityAsked) ? held.securityAsked : null,
 		securityShown: readSecurityShown(held.securityShown),
@@ -14565,11 +14587,41 @@ async function readUpdateCheck(stateDir) {
 	};
 }
 /**
+* How every writer of the record takes the lock beside it: 2 s for each holder, and 15 s in all (design 2026-10-22, R2).
+*
+* Every server's tool call takes this lock for its refresh, so on a busy machine a writer often waits behind several
+* holders in turn, each holding it for a moment. Counted from the start of the wait, 2 s was a budget for that whole
+* queue, and a writer at the back of it gave up while the lock was being handed on exactly as it should be: a
+* person's update was installed and its record dropped. Counted per holder, a writer gives up only on one holder that
+* kept the lock for 2 s, which is a stuck lock; 15 s bounds a queue that never empties, as config writes are bounded.
+*/
+const UPDATE_CHECK_LOCK = Object.freeze({
+	timeoutPerHolder: true,
+	timeoutMs: 2e3,
+	maxWaitMs: 15e3
+});
+/**
+* How a notice takes the lock: 2 s in all, counted from the start of the wait, however often it changes hands meanwhile.
+*
+* A notice is best effort. Deciding a tool call's or a command's line, the security line in a preview, and recording
+* the person's answer to that line take the lock only for what is said, and each runs while a person or an agent
+* waits. Waited out holder by holder, as `UPDATE_CHECK_LOCK` waits, a busy machine's queue of refreshes held them for
+* up to 15 s. Busy past 2 s, a notice decides nothing this time, and a later call says it.
+*
+* Claiming the day's check is best effort too: busy past 2 s, nothing is claimed, and a later process claims it (0.26.0
+* review B). The claim's function is not named here: this comment ships in WhatsApp's bundle, which carries none of the
+* checker, not even its name (`packages/whatsapp/test/update-gate.test.ts`).
+*/
+const UPDATE_NOTICE_LOCK = Object.freeze({ timeoutMs: 2e3 });
+/**
 * Reads the record, changes it and writes it back, under a lock beside it, atomically — so a server recording a check
 * and a person's "not now" arriving at the same moment each keep what the other wrote. Returns what `change` returned
 * alongside the record written; `change` returning `null` writes nothing.
+*
+* `lock` is how long to wait for the lock: `UPDATE_CHECK_LOCK`, for a record that matters, unless a notice or the
+* day's claim passes `UPDATE_NOTICE_LOCK`. Busy past it, this throws LOCK_TIMEOUT, and nothing is written.
 */
-async function changeUpdateCheck(stateDir, change) {
+async function changeUpdateCheck(stateDir, change, lock = UPDATE_CHECK_LOCK) {
 	return withFileLock(join(stateDir, ".update-check.lock"), async () => {
 		const current = await readUpdateCheck(stateDir);
 		const next = change(current);
@@ -14584,7 +14636,7 @@ async function changeUpdateCheck(stateDir, change) {
 			result: next.result,
 			written: true
 		};
-	}, { timeoutMs: 2e3 });
+	}, lock);
 }
 /**
 * Whether the check is due: never asked, asked a day or more ago, or — a clock that went back — asked more than a few
@@ -14823,7 +14875,7 @@ async function securityAnswered(stateDir, approvalId) {
 				securityAsked: record.securityShown.version,
 				securityShown: null
 			} };
-		});
+		}, UPDATE_NOTICE_LOCK);
 	} catch {}
 }
 /** A local time as a person reads it in a preview: `2026-09-29 00:00`. */
@@ -15488,6 +15540,7 @@ function serverInstallChange(core, env, request, own, deps = {}) {
 			});
 			const unverifiedOwn = fetches && deps.verifyRelease === void 0 && running !== void 0 && running.packageName === product.packageName && running.version === version;
 			const verified = fetches && !unverifiedOwn || checksDisk ? (await verifyReleaseSet(from, /* @__PURE__ */ new Map([[product.packageName, version]]), "install", from.registry === null || from.verify === null ? verifyInCore() : void 0)).get(product.packageName) : void 0;
+			if (request.print !== true && launcher === "npx" && target.writes && deps.verifyRelease !== void 0) await verifyReleaseSet(from, /* @__PURE__ */ new Map([[facts.npxPackage, version]]), "install");
 			planned = {
 				product,
 				install: plannedInstall(preflight),
@@ -15667,7 +15720,7 @@ function serverPruneChange(core, env, request, own) {
 	};
 	const { packageName, version } = ownProduct(request.channel, own) ?? {
 		packageName: serverFacts(request.channel).packageName,
-		version: "0.24.0"
+		version: "0.26.0"
 	};
 	const product = {
 		packageName,
@@ -15949,7 +16002,7 @@ async function decideNotice(options, where) {
 		};
 	};
 	if (due(await readUpdateCheck(options.core.paths.stateDir), now()) === null) return null;
-	return (await changeUpdateCheck(options.core.paths.stateDir, (record) => {
+	const decide = (record) => {
 		const at = now();
 		const decision = due(record, at);
 		if (decision === null) return null;
@@ -15973,7 +16026,8 @@ async function decideNotice(options, where) {
 				}
 			}
 		};
-	})).result ?? null;
+	};
+	return (await changeUpdateCheck(options.core.paths.stateDir, decide, UPDATE_NOTICE_LOCK)).result ?? null;
 }
 /**
 * What a background run left, when it is this process's to say: an install only to a process running a release before
@@ -16206,7 +16260,7 @@ function commandDecisionLine(core, decision, channel, platform) {
 }
 channelServer("core").packageName;
 //#endregion
-//#region ../core/dist/tool-arguments-5t8Xd2eK.mjs
+//#region ../core/dist/tool-arguments-C8Oy4uOx.mjs
 const APPLIED = Symbol.for("agentcomms.strictToolArguments");
 const TARGET = "draft-2020-12";
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/whatsapp",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "WhatsApp for coding agents, read-only: list, read and search the chats WhatsApp for Mac keeps on this Mac, and draft replies as links the person sends. No network client; it never sends.",
   "type": "module",
   "license": "MIT",
@@ -34,7 +34,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentcomms/core": "0.24.0"
+    "@agentcomms/core": "0.26.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.3.1",
@@ -98,5 +98,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --experimental-strip-types --disable-warning=ExperimentalWarning --test --test-timeout=600000 \"test/**/*.test.ts\""
   },
-  "gitHead": "f239501ba696ae239586f22f1dae43f181bbe817"
+  "gitHead": "4a096cb13ea1444f1301137f9f91d07b8401aaa2"
 }