@agentcomms/whatsapp 0.25.0 → 0.26.1

package/dist/{sync-DEG2YdIm.mjs → sync-BVVwDpry.mjs}

@@ -1,4 +1,4 @@
-import { C as unknown, S as union, b as strictObject, c as boolean, g as object, h as number, i as _enum, l as discriminatedUnion, m as looseObject, n as datetime, p as literal, s as array, x as string, y as record } from "./iso-USuVU_sk.mjs";
+import { C as unknown, S as union, b as strictObject, c as boolean, g as object, h as number, i as _enum, l as discriminatedUnion, m as looseObject, n as datetime, p as literal, s as array, x as string, y as record } from "./iso-5-9R47LC.mjs";
 import { access, chmod, constants, link, lstat, mkdir, open, readFile, readdir, readlink, realpath, rename, rm, stat, unlink, utimes } from "node:fs/promises";
 import path, { basename, delimiter, dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { domainToASCII, fileURLToPath, pathToFileURL } from "node:url";
@@ -11,7 +11,7 @@ import { execFile, spawn } from "node:child_process";
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION$2 = "0.25.0";
+const VERSION$2 = "0.26.1";
 //#endregion
 //#region src/caller.ts
 /** This package's name, as its manifest has it. */
@@ -28,7 +28,7 @@ const CALLER = Object.freeze({
 	packageName: PACKAGE_NAME
 });
 //#endregion
-//#region ../core/dist/update-check-CMD_Te5S.mjs
+//#region ../core/dist/update-check-CfybSI56.mjs
 /**
 * Every failure a user or an agent can act on carries a specific, stable code from this registry, a message, an
 * optional one-line hint and structured `details`. The code decides the process exit status; agents and skills branch
@@ -5303,8 +5303,8 @@ async function mergeIntoJsonConfig(path, client, name, entry) {
 }
 /** Starts the server exactly as a client would, and completes the handshake. */
 async function verifyEntry(entry, product) {
-	const { Client } = await import("./dist-C7DG2LdL-l0mj9_dH.mjs");
-	const { StdioClientTransport } = await import("./stdio-CyjIgrch-59zcjSEt.mjs");
+	const { Client } = await import("./dist-C7DG2LdL-6QTVBgXp.mjs");
+	const { StdioClientTransport } = await import("./stdio-CRbkOCqe-BpzkpnG6.mjs");
 	const client = new Client({
 		name: `${product.binary}-install-check`,
 		version: product.version
@@ -12026,7 +12026,7 @@ function folding(platform) {
 	return platform === "win32" ? (text) => text.toLowerCase() : (text) => text;
 }
 /** The package version, read from package.json at build time. */
-const VERSION = "0.25.0";
+const VERSION = "0.26.1";
 /**
 * The command a person is told to run for one of this suite's own CLIs (design 2026-10-04, D1 and D5; CUE-403).
 *
@@ -13320,7 +13320,7 @@ const PER_WORKSPACE = {
 	"agentLabel.slackStyles": "app",
 	"agentLabel.slackIcons": "your Slack photo"
 };
-function recordOf$1(value) {
+function recordOf$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /**
@@ -13330,7 +13330,7 @@ function recordOf$1(value) {
 */
 function perWorkspace(field, before, after) {
 	const none = PER_WORKSPACE[field];
-	const [was, now] = [recordOf$1(before ?? {}), recordOf$1(after ?? {})];
+	const [was, now] = [recordOf$2(before ?? {}), recordOf$2(after ?? {})];
 	if (none === void 0 || was === void 0 || now === void 0) return void 0;
 	const value = (record, name) => Object.hasOwn(record, name) ? String(record[name]) : none;
 	const moved = [.../* @__PURE__ */ new Set([...Object.keys(was), ...Object.keys(now)])].filter((name) => value(was, name) !== value(now, name)).sort();
@@ -13343,7 +13343,7 @@ function perWorkspace(field, before, after) {
 * commas. A level one side does not list allows everything there. Undefined for a value of another shape.
 */
 function perLevel(field, before, after) {
-	const [was, now] = [recordOf$1(before ?? {}), recordOf$1(after ?? {})];
+	const [was, now] = [recordOf$2(before ?? {}), recordOf$2(after ?? {})];
 	if (field !== "behaviour.rules" || was === void 0 || now === void 0) return void 0;
 	const value = (record, level) => Object.hasOwn(record, level) ? String(record[level]) : "everything";
 	const levels = [.../* @__PURE__ */ new Set([...Object.keys(was), ...Object.keys(now)])].sort();
@@ -13918,7 +13918,7 @@ const OUTCOMES = [
 	"unknown"
 ];
 const isString = (value) => typeof value === "string";
-const isTime$2 = (value) => isString(value) && ISO.test(value) && !Number.isNaN(Date.parse(value));
+const isTime$3 = (value) => isString(value) && ISO.test(value) && !Number.isNaN(Date.parse(value));
 /** One line as an entry, or null when it is not one this release wrote. */
 function entryOf$2(line) {
 	let raw;
@@ -13929,7 +13929,7 @@ function entryOf$2(line) {
 	}
 	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
 	const entry = raw;
-	if (!isTime$2(entry.at)) return null;
+	if (!isTime$3(entry.at)) return null;
 	if (entry.kind === "use") {
 		if (![
 			"standingId",
@@ -13961,7 +13961,7 @@ function entryOf$2(line) {
 	if (entry.kind === "outcome") {
 		if (!isString(entry.childId) || !isString(entry.outcome) || !OUTCOMES.includes(entry.outcome)) return null;
 		if (!isString(entry.notice) || entry.link !== void 0 && !isString(entry.link)) return null;
-		if (entry.actAt !== void 0 && !isTime$2(entry.actAt)) return null;
+		if (entry.actAt !== void 0 && !isTime$3(entry.actAt)) return null;
 		return {
 			kind: "outcome",
 			at: entry.at,
@@ -14406,7 +14406,7 @@ function updateJobSupported(platform) {
 function updateJobMarkerPath(stateDir) {
 	return join(stateDir, "update-job.json");
 }
-const isTime$1 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+const isTime$2 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
 /** The record, or null when there is none — or none this release can read, which is treated as none. */
 async function readUpdateJobMarker(stateDir) {
 	let parsed;
@@ -14421,11 +14421,11 @@ async function readUpdateJobMarker(stateDir) {
 		platform: record.platform,
 		installedAt: record.installedAt,
 		label: record.label,
-		...isTime$1(record.lastRun) ? { lastRun: record.lastRun } : {}
+		...isTime$2(record.lastRun) ? { lastRun: record.lastRun } : {}
 	};
 }
 function within$1(at, now, intervalMs) {
-	if (at === void 0 || !isTime$1(at)) return false;
+	if (at === void 0 || !isTime$2(at)) return false;
 	const since = now.getTime() - Date.parse(at);
 	return since >= -3e5 && since < intervalMs;
 }
@@ -14506,7 +14506,7 @@ const NOTICE_OUTCOMES = [
 function readBackgroundNotice(value) {
 	if (typeof value !== "object" || value === null) return null;
 	const { at, outcome, version, text } = value;
-	if (!isTime(at) || !NOTICE_OUTCOMES.includes(outcome) || typeof text !== "string") return null;
+	if (!isTime$1(at) || !NOTICE_OUTCOMES.includes(outcome) || typeof text !== "string") return null;
 	return {
 		at,
 		outcome,
@@ -14535,7 +14535,7 @@ const EMPTY_UPDATE_CHECK = Object.freeze({
 function updateCheckPath(stateDir) {
 	return join(stateDir, UPDATE_CHECK_FILE);
 }
-const isTime = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+const isTime$1 = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
 const isWords = (value) => Array.isArray(value) && value.every((word) => typeof word === "string");
 function readRelease(value) {
 	if (typeof value !== "object" || value === null) return null;
@@ -14568,17 +14568,17 @@ async function readUpdateCheck(stateDir) {
 	}
 	const held = typeof parsed === "object" && parsed !== null ? parsed : {};
 	return {
-		lastChecked: isTime(held.lastChecked) ? held.lastChecked : null,
+		lastChecked: isTime$1(held.lastChecked) ? held.lastChecked : null,
 		latest: isPlainVersion(held.latest) ? held.latest : null,
 		behind: typeof held.behind === "boolean" ? held.behind : null,
 		current: readCurrent(held.current),
 		lastError: typeof held.lastError === "string" ? held.lastError.slice(0, 300) : null,
-		snoozedUntil: isTime(held.snoozedUntil) ? held.snoozedUntil : null,
-		checking: isTime(held.checking) ? held.checking : null,
-		commandNoticeAt: isTime(held.commandNoticeAt) ? held.commandNoticeAt : null,
-		noticeAt: isTime(held.noticeAt) ? held.noticeAt : null,
-		pausedAt: isTime(held.pausedAt) ? held.pausedAt : null,
-		pausedUntil: isTime(held.pausedUntil) ? held.pausedUntil : null,
+		snoozedUntil: isTime$1(held.snoozedUntil) ? held.snoozedUntil : null,
+		checking: isTime$1(held.checking) ? held.checking : null,
+		commandNoticeAt: isTime$1(held.commandNoticeAt) ? held.commandNoticeAt : null,
+		noticeAt: isTime$1(held.noticeAt) ? held.noticeAt : null,
+		pausedAt: isTime$1(held.pausedAt) ? held.pausedAt : null,
+		pausedUntil: isTime$1(held.pausedUntil) ? held.pausedUntil : null,
 		release: readRelease(held.release),
 		securityAsked: isPlainVersion(held.securityAsked) ? held.securityAsked : null,
 		securityShown: readSecurityShown(held.securityShown),
@@ -14587,11 +14587,41 @@ async function readUpdateCheck(stateDir) {
 	};
 }
 /**
+* How every writer of the record takes the lock beside it: 2 s for each holder, and 15 s in all (design 2026-10-22, R2).
+*
+* Every server's tool call takes this lock for its refresh, so on a busy machine a writer often waits behind several
+* holders in turn, each holding it for a moment. Counted from the start of the wait, 2 s was a budget for that whole
+* queue, and a writer at the back of it gave up while the lock was being handed on exactly as it should be: a
+* person's update was installed and its record dropped. Counted per holder, a writer gives up only on one holder that
+* kept the lock for 2 s, which is a stuck lock; 15 s bounds a queue that never empties, as config writes are bounded.
+*/
+const UPDATE_CHECK_LOCK = Object.freeze({
+	timeoutPerHolder: true,
+	timeoutMs: 2e3,
+	maxWaitMs: 15e3
+});
+/**
+* How a notice takes the lock: 2 s in all, counted from the start of the wait, however often it changes hands meanwhile.
+*
+* A notice is best effort. Deciding a tool call's or a command's line, the security line in a preview, and recording
+* the person's answer to that line take the lock only for what is said, and each runs while a person or an agent
+* waits. Waited out holder by holder, as `UPDATE_CHECK_LOCK` waits, a busy machine's queue of refreshes held them for
+* up to 15 s. Busy past 2 s, a notice decides nothing this time, and a later call says it.
+*
+* Claiming the day's check is best effort too: busy past 2 s, nothing is claimed, and a later process claims it (0.26.0
+* review B). The claim's function is not named here: this comment ships in WhatsApp's bundle, which carries none of the
+* checker, not even its name (`packages/whatsapp/test/update-gate.test.ts`).
+*/
+const UPDATE_NOTICE_LOCK = Object.freeze({ timeoutMs: 2e3 });
+/**
 * Reads the record, changes it and writes it back, under a lock beside it, atomically — so a server recording a check
 * and a person's "not now" arriving at the same moment each keep what the other wrote. Returns what `change` returned
 * alongside the record written; `change` returning `null` writes nothing.
+*
+* `lock` is how long to wait for the lock: `UPDATE_CHECK_LOCK`, for a record that matters, unless a notice or the
+* day's claim passes `UPDATE_NOTICE_LOCK`. Busy past it, this throws LOCK_TIMEOUT, and nothing is written.
 */
-async function changeUpdateCheck(stateDir, change) {
+async function changeUpdateCheck(stateDir, change, lock = UPDATE_CHECK_LOCK) {
 	return withFileLock(join(stateDir, ".update-check.lock"), async () => {
 		const current = await readUpdateCheck(stateDir);
 		const next = change(current);
@@ -14606,7 +14636,7 @@ async function changeUpdateCheck(stateDir, change) {
 			result: next.result,
 			written: true
 		};
-	}, { timeoutMs: 2e3 });
+	}, lock);
 }
 /**
 * Whether the check is due: never asked, asked a day or more ago, or — a clock that went back — asked more than a few
@@ -14845,7 +14875,7 @@ async function securityAnswered(stateDir, approvalId) {
 				securityAsked: record.securityShown.version,
 				securityShown: null
 			} };
-		});
+		}, UPDATE_NOTICE_LOCK);
 	} catch {}
 }
 /** A local time as a person reads it in a preview: `2026-09-29 00:00`. */
@@ -15510,6 +15540,7 @@ function serverInstallChange(core, env, request, own, deps = {}) {
 			});
 			const unverifiedOwn = fetches && deps.verifyRelease === void 0 && running !== void 0 && running.packageName === product.packageName && running.version === version;
 			const verified = fetches && !unverifiedOwn || checksDisk ? (await verifyReleaseSet(from, /* @__PURE__ */ new Map([[product.packageName, version]]), "install", from.registry === null || from.verify === null ? verifyInCore() : void 0)).get(product.packageName) : void 0;
+			if (request.print !== true && launcher === "npx" && target.writes && deps.verifyRelease !== void 0) await verifyReleaseSet(from, /* @__PURE__ */ new Map([[facts.npxPackage, version]]), "install");
 			planned = {
 				product,
 				install: plannedInstall(preflight),
@@ -15689,7 +15720,7 @@ function serverPruneChange(core, env, request, own) {
 	};
 	const { packageName, version } = ownProduct(request.channel, own) ?? {
 		packageName: serverFacts(request.channel).packageName,
-		version: "0.25.0"
+		version: "0.26.1"
 	};
 	const product = {
 		packageName,
@@ -15971,7 +16002,7 @@ async function decideNotice(options, where) {
 		};
 	};
 	if (due(await readUpdateCheck(options.core.paths.stateDir), now()) === null) return null;
-	return (await changeUpdateCheck(options.core.paths.stateDir, (record) => {
+	const decide = (record) => {
 		const at = now();
 		const decision = due(record, at);
 		if (decision === null) return null;
@@ -15995,7 +16026,8 @@ async function decideNotice(options, where) {
 				}
 			}
 		};
-	})).result ?? null;
+	};
+	return (await changeUpdateCheck(options.core.paths.stateDir, decide, UPDATE_NOTICE_LOCK)).result ?? null;
 }
 /**
 * What a background run left, when it is this process's to say: an install only to a process running a release before
@@ -16228,7 +16260,7 @@ function commandDecisionLine(core, decision, channel, platform) {
 }
 channelServer("core").packageName;
 //#endregion
-//#region ../core/dist/tool-arguments-BW3WUyxT.mjs
+//#region ../core/dist/tool-arguments-CJ4RQpx4.mjs
 const APPLIED = Symbol.for("agentcomms.strictToolArguments");
 const TARGET = "draft-2020-12";
 /**
@@ -16664,8 +16696,6 @@ new Set([
 	"cseuckr csksc56011987 euc-kr iso-ir-149 korean ks_c_5601-1987 ks_c_5601-1989 ksc5601 ksc_5601",
 	"windows-949",
 	"csiso2022kr hz-gb-2312 iso-2022-cn iso-2022-cn-ext iso-2022-kr replacement",
-	"unicodefffe utf-16be",
-	"csunicode iso-10646-ucs-2 ucs-2 unicode unicodefeff utf-16 utf-16le",
 	"x-user-defined"
 ].join(" ").split(" "));
 new TextDecoder();
@@ -16673,6 +16703,10 @@ const ENCODED_WORD_PATTERN = "=\\?([^?\\s]+)\\?([QqBb])\\?([^?]*)\\?=";
 new RegExp(ENCODED_WORD_PATTERN, "g");
 new RegExp(`^(?:${ENCODED_WORD_PATTERN}\\s*)+$`);
 new TextDecoder("utf-8", { ignoreBOM: true });
+//#endregion
+//#region ../../node_modules/.pnpm/postal-mime@4.1.4/node_modules/postal-mime/dist/esm/text-format.js
+const hexByte = (value) => value.toString(16).toUpperCase().padStart(2, "0");
+Array.from({ length: 256 }, (_, byte) => "%" + hexByte(byte));
 new Uint8Array([10]);
 //#endregion
 //#region ../../node_modules/.pnpm/deepmerge-ts@8.0.2/node_modules/deepmerge-ts/dist/index.mjs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/whatsapp",
-  "version": "0.25.0",
+  "version": "0.26.1",
   "description": "WhatsApp for coding agents, read-only: list, read and search the chats WhatsApp for Mac keeps on this Mac, and draft replies as links the person sends. No network client; it never sends.",
   "type": "module",
   "license": "MIT",
@@ -34,13 +34,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentcomms/core": "0.25.0"
+    "@agentcomms/core": "0.26.1"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.3.1",
     "@modelcontextprotocol/server": "^2.3.1",
     "commander": "^15.0.0",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "agentcomms": {
     "contract": 1,
@@ -98,5 +98,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --experimental-strip-types --disable-warning=ExperimentalWarning --test --test-timeout=600000 \"test/**/*.test.ts\""
   },
-  "gitHead": "1aca79f8c2674add5086fe4f05a52c8fb2719657"
+  "gitHead": "70247de711a9ae1aac5bdaea40acfc3e474817f7"
 }