@animalabs/agent-framework 0.7.4 → 0.8.0

package/dist/test/deferred-wake-integrity.test.js

@@ -0,0 +1,320 @@
+/**
+ * Deferred-message / wake integrity (2026-07-31 Mythos "phantom skip").
+ *
+ * The incident: a DM arrived while a turn was streaming → the message body
+ * was deferred (hear-while-acting) but its inference wake was pushed
+ * immediately. The wake fired a new turn whose compile ran BEFORE the
+ * previous turn's finally flushed the deferred DM; the new turn saw only the
+ * routing-shift notice, reasonably skipped, and the DM then landed in the
+ * window mid-compile — positioned before the skip. Result: falsified history
+ * (the window testified the agent saw the DM and skipped it; the agent later
+ * confabulated an apology for a choice it never made) and a KV bust (every
+ * later compile diverged from the live prefix at the inserted message).
+ *
+ * Invariants under test:
+ *  1. A turn started by a queued wake CONTAINS the deferred message that woke
+ *     it (turn-start flush runs before the locus announcement and compile).
+ *  2. addMessage defers on turn-alive (activeTurnTokens), not merely
+ *     stream-alive — the compile window between dequeue and stream
+ *     registration is closed to cross-turn writers.
+ *  3. endTurn edge: a message stored at an endTurn tool boundary (collected
+ *     for injection but never delivered — the stream is cancelled) is seen by
+ *     the follow-up turn its own wake starts, positioned AFTER the turn that
+ *     never saw it, never before.
+ *  4. Turn tokens never leak: after runUntilIdle, no turn-alive markers
+ *     remain (a leaked token would permanently requeue every wake — the
+ *     'idle+turn-alive' wedge).
+ */
+import { describe, it, beforeEach, afterEach } from 'node:test';
+import assert from 'node:assert/strict';
+import { tmpdir } from 'node:os';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { AgentFramework } from '../src/index.js';
+import { MockMembrane, MockYieldingStream, createMockResponse } from './helpers/mock-membrane.js';
+// ---------------------------------------------------------------------------
+// Test module: a halt tool that ends the turn, and mid-turn interjections
+// that DO request inference (unlike present-while-acting's, which don't) —
+// this suite is about the wake/payload split, so the wake matters.
+// ---------------------------------------------------------------------------
+class DmModule {
+    name = 'dm';
+    framework = null;
+    /** Next `halt` call pushes this text as an external message (with
+     *  requestInference) BEFORE returning its endTurn result. */
+    interjection = null;
+    async start(_ctx) { }
+    async stop() { }
+    getTools() {
+        return [
+            {
+                name: 'halt',
+                description: 'End the turn',
+                inputSchema: { type: 'object', properties: {} },
+            },
+        ];
+    }
+    async handleToolCall(call) {
+        if (call.name.endsWith('halt')) {
+            if (this.interjection) {
+                const text = this.interjection;
+                this.interjection = null;
+                this.framework.pushEvent({
+                    type: 'external-message',
+                    source: 'test',
+                    content: text,
+                    metadata: { channelId: 'dm-antra' },
+                });
+                // Let the run loop process the queued message while this tool round
+                // is still pending, so it lands in deferredMessages with its wake
+                // queued behind the busy agent.
+                await new Promise((r) => setTimeout(r, 30));
+            }
+            return { success: true, data: { halted: true }, endTurn: true };
+        }
+        return { success: true, data: { ok: true } };
+    }
+    async onProcess(event, _state) {
+        if (event.type === 'external-message') {
+            const text = String(event.content);
+            const metadata = event.metadata;
+            return {
+                addMessages: [
+                    {
+                        participant: 'Antra',
+                        content: [{ type: 'text', text }],
+                        ...(metadata ? { metadata: { ...metadata, triggered: true } } : {}),
+                    },
+                ],
+                requestInference: true,
+            };
+        }
+        return {};
+    }
+}
+/** Minimal ChannelRegistry stub (same shape as present-while-acting's). */
+function stubChannelRegistry(framework) {
+    const routed = [];
+    const explicit = {
+        resolveLocus: () => 'dm-antra',
+        routeSpeech: async (_agent, text, locus) => {
+            routed.push({ text, locus: locus ?? null });
+        },
+        getDefaultPublishChannel: () => null,
+        isChannelOpen: () => true,
+        getDescriptor: () => undefined,
+        getChannelTools: () => [],
+    };
+    framework.channelRegistry = new Proxy(explicit, {
+        get: (target, prop) => (prop in target ? target[prop] : () => undefined),
+    });
+    return routed;
+}
+/** Serialize a request's messages for containment/ordering checks. */
+function flatten(req) {
+    return req.messages.map((m) => JSON.stringify(m));
+}
+function indexContaining(flat, needle) {
+    return flat.findIndex((s) => s.includes(needle));
+}
+/** Per-turn response scheduling: MockMembrane's streamYielding hands ALL
+ *  remaining responses to the first stream, which starves multi-turn tests.
+ *  This override gives each turn exactly its own slate. */
+function scheduleTurns(membrane, turns) {
+    let turnIdx = 0;
+    membrane.streamYielding = (req) => {
+        membrane.calls.push(req);
+        const slate = turns[turnIdx++] ?? [createMockResponse([{ type: 'text', text: 'fallback' }])];
+        const stream = new MockYieldingStream(slate);
+        membrane.lastStream = stream;
+        return stream;
+    };
+}
+// ---------------------------------------------------------------------------
+describe('deferred-message wake integrity', () => {
+    let tempDir;
+    let membrane;
+    let module;
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), 'dwi-test-'));
+        membrane = new MockMembrane();
+        module = new DmModule();
+    });
+    afterEach(() => {
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    async function createFramework() {
+        const framework = await AgentFramework.create({
+            storePath: join(tempDir, 'test.chronicle'),
+            membrane: membrane.asMembrane(),
+            agents: [
+                { name: 'assistant', model: 'test-model', systemPrompt: 'You are Mythos.' },
+            ],
+            modules: [module],
+        });
+        module.framework = framework;
+        return framework;
+    }
+    const internals = (f) => f;
+    // -------------------------------------------------------------------------
+    it('a turn started by a queued wake contains the deferred message that woke it', async () => {
+        scheduleTurns(membrane, [
+            [createMockResponse([{ type: 'text', text: 'answering the DM' }])],
+        ]);
+        const framework = await createFramework();
+        stubChannelRegistry(framework);
+        const fw = internals(framework);
+        // The incident state, seeded directly: payload deferred, wake queued,
+        // agent idle. (Live, this arises when a message lands during another
+        // turn's stream: addMessage defers the body, the wake pushes anyway.)
+        const dmText = 'and then the restaurant, and the hike — the deferred DM';
+        fw.deferredMessages.push({
+            participant: 'Antra',
+            content: [{ type: 'text', text: dmText }],
+            metadata: { channelId: 'dm-antra', triggered: true },
+        });
+        fw.pendingRequests.push({
+            agentName: 'assistant',
+            reason: 'mcpl:channel-incoming',
+            source: 'test',
+            timestamp: Date.now(),
+            channelId: 'dm-antra',
+            addressed: true,
+        });
+        await framework.runUntilIdle();
+        assert.equal(membrane.calls.length, 1, 'the wake fired exactly one turn');
+        const flat = flatten(membrane.calls[0]);
+        assert.ok(indexContaining(flat, dmText) >= 0, 'the compiled request contains the message that woke the turn (turn-start flush)');
+        assert.equal(fw.deferredMessages.length, 0, 'deferred queue drained');
+        assert.equal(fw.activeTurnTokens.size, 0, 'no turn token leaked');
+        await framework.stop();
+    });
+    it('addMessage defers on turn-alive even when no stream is registered (compile window)', async () => {
+        const framework = await createFramework();
+        stubChannelRegistry(framework);
+        const fw = internals(framework);
+        // Simulate the dequeue→stream gap: a turn is alive (token set) but its
+        // stream has not registered yet. This is exactly when the incident's
+        // deferred flush wrote into the window mid-compile.
+        fw.activeTurnTokens.set('assistant', 999999);
+        assert.equal(fw.activeStreams.size, 0, 'precondition: no live stream');
+        const id = fw.addMessage('Antra', [{ type: 'text', text: 'arrives mid-compile' }]);
+        assert.equal(id, '', 'message was deferred, not appended');
+        assert.equal(fw.deferredMessages.length, 1, 'message waits in the deferred queue');
+        fw.activeTurnTokens.delete('assistant');
+        fw.deferredMessages.length = 0; // don't leak state into stop()
+        await framework.stop();
+    });
+    it('endTurn edge: a message stored at an endTurn boundary is answered by its own wake, positioned after the turn that never saw it', async () => {
+        scheduleTurns(membrane, [
+            // Turn A: the agent is mid-scene and halts (skip_reply-shaped: an
+            // endTurn tool result cancels the stream — collected injections are
+            // never delivered).
+            [createMockResponse([{ type: 'tool_use', id: 'c1', name: 'dm--halt', input: {} }], 'tool_use')],
+            // Turn B: the DM's own wake.
+            [createMockResponse([{ type: 'text', text: 'answering antra now' }])],
+        ]);
+        const framework = await createFramework();
+        stubChannelRegistry(framework);
+        const fw = internals(framework);
+        const dmText = 'laria read me your messages aloud on the trail';
+        module.interjection = dmText;
+        // Start turn A.
+        framework.pushEvent({
+            type: 'external-message',
+            source: 'test',
+            content: 'go',
+            metadata: {},
+        });
+        await framework.runUntilIdle();
+        assert.equal(membrane.calls.length, 2, 'turn A (go → halt) and the DM-wake turn B ran');
+        // Turn B contains the DM.
+        const flatB = flatten(membrane.calls[1]);
+        const dmIdx = indexContaining(flatB, dmText);
+        assert.ok(dmIdx >= 0, "turn B's request contains the DM");
+        // History integrity: in turn B's request the DM appears AFTER turn A's
+        // halt (the turn that never saw it) — never retroactively before it.
+        const haltIdx = indexContaining(flatB, 'dm--halt');
+        assert.ok(haltIdx >= 0, "turn A's halt is in turn B's history");
+        assert.ok(dmIdx > haltIdx, `DM (idx ${dmIdx}) must be positioned after the halt (idx ${haltIdx}) — ` +
+            'a DM placed before it would testify the agent saw and skipped it');
+        // And turn A itself must NOT contain the DM (it arrived mid-turn and was
+        // never injected — the endTurn cancelled the stream before delivery).
+        const flatA = flatten(membrane.calls[0]);
+        assert.equal(indexContaining(flatA, dmText), -1, "turn A's request predates the DM");
+        assert.equal(fw.activeTurnTokens.size, 0, 'no turn token leaked across the sequence');
+        assert.equal(fw.deferredMessages.length, 0, 'no message stranded in the deferred queue');
+        await framework.stop();
+    });
+    it('a throw before the compile (checkpoint/store failure) does not leak the turn token', async () => {
+        // ENOSPC-class failure: recordTurnCheckpoint (a store write) throws after
+        // the token is set but before driveStream exists. Without the caller's
+        // token-matched finally, the token leaks and every later wake requeues
+        // forever (the 'idle+turn-alive' wedge) — a one-turn failure must stay a
+        // one-turn failure.
+        scheduleTurns(membrane, [
+            [createMockResponse([{ type: 'text', text: 'recovered turn' }])],
+        ]);
+        const framework = await createFramework();
+        stubChannelRegistry(framework);
+        const fw = internals(framework);
+        const patchable = framework;
+        const original = patchable.recordTurnCheckpoint.bind(framework);
+        patchable.recordTurnCheckpoint = () => {
+            patchable.recordTurnCheckpoint = original; // one-shot
+            throw new Error('ENOSPC: simulated store-write failure');
+        };
+        framework.pushEvent({
+            type: 'external-message',
+            source: 'test',
+            content: 'go',
+            metadata: {},
+        });
+        // The throw propagates out of the event loop iteration (runUntilIdle
+        // surfaces it in this harness; production runLoop logs and continues).
+        await assert.rejects(framework.runUntilIdle(), /ENOSPC/);
+        assert.equal(fw.activeTurnTokens.size, 0, 'the failed turn cleared its own token');
+        // The agent is not wedged: a fresh wake still runs to completion.
+        framework.pushEvent({
+            type: 'external-message',
+            source: 'test',
+            content: 'go again',
+            metadata: {},
+        });
+        await framework.runUntilIdle();
+        assert.equal(membrane.calls.length, 1, 'the follow-up wake produced a turn');
+        assert.equal(fw.activeTurnTokens.size, 0, 'no token leaked after recovery either');
+        await framework.stop();
+    });
+    it('turn tokens are released on normal completion (no idle+turn-alive wedge)', async () => {
+        scheduleTurns(membrane, [
+            [createMockResponse([{ type: 'text', text: 'plain turn' }])],
+        ]);
+        const framework = await createFramework();
+        stubChannelRegistry(framework);
+        const fw = internals(framework);
+        framework.pushEvent({
+            type: 'external-message',
+            source: 'test',
+            content: 'go',
+            metadata: {},
+        });
+        await framework.runUntilIdle();
+        assert.equal(fw.activeTurnTokens.size, 0, 'token cleared at teardown');
+        // A fresh wake still runs (the agent is not wedged).
+        scheduleTurns(membrane, [
+            [createMockResponse([{ type: 'text', text: 'second turn' }])],
+        ]);
+        const callsBefore = membrane.calls.length;
+        framework.pushEvent({
+            type: 'external-message',
+            source: 'test',
+            content: 'go again',
+            metadata: {},
+        });
+        await framework.runUntilIdle();
+        assert.equal(membrane.calls.length, callsBefore + 1, 'agent takes the next turn');
+        await framework.stop();
+    });
+});
+//# sourceMappingURL=deferred-wake-integrity.test.js.map

package/dist/test/deferred-wake-integrity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-wake-integrity.test.js","sourceRoot":"","sources":["../../test/deferred-wake-integrity.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGlG,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,mEAAmE;AACnE,8EAA8E;AAE9E,MAAM,QAAQ;IACH,IAAI,GAAG,IAAI,CAAC;IACrB,SAAS,GAA0B,IAAI,CAAC;IACxC;iEAC6D;IAC7D,YAAY,GAAkB,IAAI,CAAC;IAEnC,KAAK,CAAC,KAAK,CAAC,IAAmB,IAAkB,CAAC;IAClD,KAAK,CAAC,IAAI,KAAmB,CAAC;IAE9B,QAAQ;QACN,OAAO;YACL;gBACE,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,cAAc;gBAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aAChD;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAc;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;gBAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;gBACzB,IAAI,CAAC,SAAU,CAAC,SAAS,CAAC;oBACxB,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE;iBACT,CAAC,CAAC;gBAC9B,oEAAoE;gBACpE,kEAAkE;gBAClE,gCAAgC;gBAChC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAmB,EAAE,MAAoB;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,CAAE,KAA+B,CAAC,OAAO,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAI,KAAgD,CAAC,QAAQ,CAAC;YAC5E,OAAO;gBACL,WAAW,EAAE;oBACX;wBACE,WAAW,EAAE,OAAO;wBACpB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACjC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE;iBACF;gBACD,gBAAgB,EAAE,IAAI;aACvB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,2EAA2E;AAC3E,SAAS,mBAAmB,CAAC,SAAyB;IACpD,MAAM,MAAM,GAAkD,EAAE,CAAC;IACjE,MAAM,QAAQ,GAA4B;QACxC,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU;QAC9B,WAAW,EAAE,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,KAAqB,EAAE,EAAE;YACzE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI;QACpC,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS;QAC9B,eAAe,EAAE,GAAG,EAAE,CAAC,EAAE;KAC1B,CAAC;IACD,SAAqD,CAAC,eAAe,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE;QAC3F,GAAG,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KACjF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAS,OAAO,CAAC,GAAsB;IACrC,OAAQ,GAAG,CAAC,QAA6E,CAAC,GAAG,CAC3F,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AACD,SAAS,eAAe,CAAC,IAAc,EAAE,MAAc;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;2DAE2D;AAC3D,SAAS,aAAa,CAAC,QAAsB,EAAE,KAA6B;IAC1E,IAAI,OAAO,GAAG,CAAC,CAAC;IACf,QAA0F,CAAC,cAAc,GAAG,CAC3G,GAAsB,EACtB,EAAE;QACF,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAmB,CAAC,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,OAAe,CAAC;IACpB,IAAI,QAAsB,CAAC;IAC3B,IAAI,MAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QACnD,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,eAAe;QAC5B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC;YAC5C,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;YAC1C,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC/B,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE;aAC5E;YACD,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IASD,MAAM,SAAS,GAAG,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAyB,CAAC;IAEnE,4EAA4E;IAE5E,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,aAAa,CAAC,QAAQ,EAAE;YACtB,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAmB,CAAC,CAAC;SACrF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEhC,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,MAAM,GAAG,yDAAyD,CAAC;QACzE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACvB,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACzC,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC;QACH,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YACtB,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,uBAAuB;YAC/B,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,UAAU;YACrB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CACP,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAClC,iFAAiF,CAClF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAElE,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEhC,uEAAuE;QACvE,qEAAqE;QACrE,oDAAoD;QACpD,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAEvE,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAEnF,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,EAAE,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,+BAA+B;QAE/D,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gIAAgI,EAAE,KAAK,IAAI,EAAE;QAC9I,aAAa,CAAC,QAAQ,EAAE;YACtB,kEAAkE;YAClE,oEAAoE;YACpE,oBAAoB;YACpB,CAAC,kBAAkB,CACjB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAmB,EAC/E,UAAU,CACX,CAAC;YACF,6BAA6B;YAC7B,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAmB,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,gDAAgD,CAAC;QAChE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC;QAE7B,gBAAgB;QAChB,SAAS,CAAC,SAAS,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE;SACc,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,+CAA+C,CAAC,CAAC;QAExF,0BAA0B;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAE1D,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CACP,KAAK,GAAG,OAAO,EACf,WAAW,KAAK,4CAA4C,OAAO,MAAM;YACzE,kEAAkE,CACnE,CAAC;QAEF,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAErF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,0CAA0C,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,2CAA2C,CAAC,CAAC;QAEzF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,oBAAoB;QACpB,aAAa,CAAC,QAAQ,EAAE;YACtB,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAmB,CAAC,CAAC;SACnF,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,SAAiC,CAAC;QAEpD,MAAM,QAAQ,GAAG,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,SAAS,CAAC,oBAAoB,GAAG,GAAG,EAAE;YACpC,SAAS,CAAC,oBAAoB,GAAG,QAAQ,CAAC,CAAC,WAAW;YACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,SAAS,CAAC,SAAS,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE;SACc,CAAC,CAAC;QAC9B,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,uCAAuC,CAAC,CAAC;QAEnF,kEAAkE;QAClE,SAAS,CAAC,SAAS,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,EAAE;SACc,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,uCAAuC,CAAC,CAAC;QAEnF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,aAAa,CAAC,QAAQ,EAAE;YACtB,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAmB,CAAC,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEhC,SAAS,CAAC,SAAS,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE;SACc,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAE/B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAEvE,qDAAqD;QACrD,aAAa,CAAC,QAAQ,EAAE;YACtB,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAmB,CAAC,CAAC;SAChF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,SAAS,CAAC,SAAS,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,EAAE;SACc,CAAC,CAAC;QAC9B,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAElF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/machine-close-provenance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=machine-close-provenance.test.d.ts.map

package/dist/test/machine-close-provenance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-close-provenance.test.d.ts","sourceRoot":"","sources":["../../test/machine-close-provenance.test.ts"],"names":[],"mappings":""}

package/dist/test/machine-close-provenance.test.js

@@ -0,0 +1,110 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { ChannelRegistry } from '../src/mcpl/channel-registry.js';
+/**
+ * Machine-close provenance + explicit-open protection (issue #5): closes
+ * invoked by housekeeping modules must record their own decision source —
+ * never 'agent-tool' — and must not override a channel the resident or
+ * operator explicitly opened, unless the caller certifies an explicit idle
+ * lease. The Mythos "channel settings keep getting reset" mechanism was
+ * subscription-GC closes wearing the agent's badge.
+ */
+function makeRegistry() {
+    const closeCalls = [];
+    const mockServer = {
+        sendChannelsOpen: async () => ({}),
+        sendChannelsClose: async (params) => {
+            closeCalls.push(params);
+            return {};
+        },
+        sendChannelsPublish: async () => ({ delivered: true }),
+    };
+    const serverRegistry = {
+        getServer: (_id) => mockServer,
+    };
+    const registry = new ChannelRegistry(serverRegistry, {}, () => { }, () => { });
+    const internals = registry;
+    const desired = (channelId) => internals.desiredStates.get(internals.lifecycleKey('discord', channelId));
+    // Register the channel the way a live server would surface it.
+    registry.handleIncoming('discord', {
+        messages: [{
+                channelId: 'c1',
+                messageId: 'm1',
+                author: { id: 'u1', name: 'Antra' },
+                timestamp: '2026-07-28T00:00:00.000Z',
+                content: [{ type: 'text', text: 'hello' }],
+                metadata: { channelName: '#commons' },
+            }],
+    });
+    return { registry, internals, desired, closeCalls };
+}
+const MODULE_ORIGIN = { kind: 'module' };
+test('a machine close of an explicitly-opened channel is refused, structurally', async () => {
+    const { registry, desired, closeCalls } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    assert.deepEqual(desired('c1'), { state: 'open', source: 'agent-tool' });
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1', source: 'subscription-gc' }, MODULE_ORIGIN);
+    assert.equal(result.success, false);
+    assert.equal(result.data?.refusal, 'explicit-open');
+    // Stated intent survives: desired state untouched, nothing sent to the server.
+    assert.deepEqual(desired('c1'), { state: 'open', source: 'agent-tool' });
+    assert.equal(closeCalls.length, 0);
+});
+test('an explicit idle lease lets the machine close through, with honest provenance', async () => {
+    const { registry, desired, closeCalls } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1', source: 'subscription-gc', overrideExplicitOpen: true }, MODULE_ORIGIN);
+    assert.equal(result.success, true);
+    // The durable record names the janitor, not the agent.
+    assert.deepEqual(desired('c1'), { state: 'closed', source: 'subscription-gc' });
+    assert.equal(closeCalls.length, 1);
+});
+test('agent closes are recorded as agent-tool, exactly as before', async () => {
+    const { registry, desired } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1' }, { kind: 'agent', agentName: 'mythos' });
+    assert.equal(result.success, true);
+    assert.deepEqual(desired('c1'), { state: 'closed', source: 'agent-tool' });
+});
+test('machine closes of policy-opened channels proceed without a lease', async () => {
+    const { registry, internals, desired, closeCalls } = makeRegistry();
+    // A channel nobody explicitly chose — opened by delivery/policy.
+    internals.setDesiredState('discord', 'c1', 'open', 'opened-by-delivery');
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1', source: 'subscription-gc' }, MODULE_ORIGIN);
+    assert.equal(result.success, true);
+    assert.deepEqual(desired('c1'), { state: 'closed', source: 'subscription-gc' });
+    assert.equal(closeCalls.length, 1);
+});
+test('forged machine fields on a MODEL-origin call are ignored: agent-tool is recorded', async () => {
+    const { registry, desired, closeCalls } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    // The schema omits these fields but does not reject extras — a model can
+    // emit them. Trusted dispatch context must win over self-description.
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1', source: 'subscription-gc', overrideExplicitOpen: true }, { kind: 'agent', agentName: 'mythos' });
+    assert.equal(result.success, true);
+    // The close succeeds (the resident may close their own channel) but the
+    // record attributes it to them, not to housekeeping.
+    assert.deepEqual(desired('c1'), { state: 'closed', source: 'agent-tool' });
+    assert.equal(closeCalls.length, 1);
+});
+test('origin-less calls default to agent semantics (safe for legacy callers)', async () => {
+    const { registry, desired } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    const result = await registry.handleChannelToolCall('channel_close', {
+        channelId: 'c1',
+        source: 'subscription-gc',
+        overrideExplicitOpen: true,
+    });
+    assert.equal(result.success, true);
+    assert.deepEqual(desired('c1'), { state: 'closed', source: 'agent-tool' });
+});
+test('module-origin closes outside the closed source vocabulary are rejected loudly', async () => {
+    const { registry, desired } = makeRegistry();
+    await registry.handleChannelToolCall('channel_open', { channelId: 'c1' });
+    const result = await registry.handleChannelToolCall('channel_close', { channelId: 'c1', source: 'gremlin-module' }, MODULE_ORIGIN);
+    assert.equal(result.success, false);
+    assert.equal(result.isError, true);
+    assert.match(result.error ?? '', /Unknown machine close source/);
+    assert.deepEqual(desired('c1'), { state: 'open', source: 'agent-tool' });
+});
+//# sourceMappingURL=machine-close-provenance.test.js.map

package/dist/test/machine-close-provenance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-close-provenance.test.js","sourceRoot":"","sources":["../../test/machine-close-provenance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAIlE;;;;;;;GAOG;AAEH,SAAS,YAAY;IACnB,MAAM,UAAU,GAAkC,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG;QACjB,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAClC,iBAAiB,EAAE,KAAK,EAAE,MAA8B,EAAE,EAAE;YAC1D,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACvD,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU;KACN,CAAC;IAEnC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAClC,cAAc,EACd,EAAuB,EACvB,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IAEF,MAAM,SAAS,GAAG,QAIjB,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,EAAE,CACpC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAE5E,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,CAAC,SAAS,EAAE;QACjC,QAAQ,EAAE,CAAC;gBACT,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;gBACnC,SAAS,EAAE,0BAA0B;gBACrC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnD,QAAQ,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;aACtC,CAAC;KACH,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;AAElD,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACzD,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC9C,aAAa,CACd,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAE,MAAM,CAAC,IAA6B,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9E,+EAA+E;IAC/E,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACzD,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC1E,aAAa,CACd,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,uDAAuD;IACvD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7C,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CACvC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACpE,iEAAiE;IACjE,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC9C,aAAa,CACd,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACzD,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC1E,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CACvC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,wEAAwE;IACxE,qDAAqD;IACrD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7C,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,eAAe,EAAE;QACnE,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,iBAAiB;QACzB,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7C,MAAM,QAAQ,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CACjD,eAAe,EACf,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAC7C,aAAa,CACd,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,8BAA8B,CAAC,CAAC;IACjE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC"}

package/dist/test/mcpl-access-provider.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcpl-access-provider.test.d.ts.map

package/dist/test/mcpl-access-provider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpl-access-provider.test.d.ts","sourceRoot":"","sources":["../../test/mcpl-access-provider.test.ts"],"names":[],"mappings":""}

package/dist/test/mcpl-access-provider.test.js

@@ -0,0 +1,20 @@
+// Per-dial credential resolution: `accessProvider` overrides `token` at URL
+// build time (transport.open runs it on every dial), and error-path URLs are
+// redacted so credentials never ride error strings into traces or the model.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { buildWebSocketUrl } from '../src/mcpl/transport.js';
+const base = { id: 's', url: 'wss://example.test/mcpl' };
+describe('mcpl per-dial credentials', () => {
+    it('static token appends as ?token=', () => {
+        assert.equal(buildWebSocketUrl({ ...base, token: 'static' }), 'wss://example.test/mcpl?token=static');
+    });
+    it('override wins over static token; null strips it (redaction path)', () => {
+        assert.equal(buildWebSocketUrl({ ...base, token: 'static' }, 'fresh'), 'wss://example.test/mcpl?token=fresh');
+        assert.equal(buildWebSocketUrl({ ...base, token: 'static' }, null), 'wss://example.test/mcpl');
+    });
+    it('existing query params are preserved', () => {
+        assert.equal(buildWebSocketUrl({ ...base, url: 'wss://example.test/mcpl?x=1' }, 'fresh'), 'wss://example.test/mcpl?x=1&token=fresh');
+    });
+});
+//# sourceMappingURL=mcpl-access-provider.test.js.map

package/dist/test/mcpl-access-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpl-access-provider.test.js","sourceRoot":"","sources":["../../test/mcpl-access-provider.test.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,MAAM,IAAI,GAAqB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC;AAE3E,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,KAAK,CACV,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAC/C,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,KAAK,CACV,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,EACxD,qCAAqC,CACtC,CAAC;QACF,MAAM,CAAC,KAAK,CACV,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,EACrD,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,KAAK,CACV,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,6BAA6B,EAAE,EAAE,OAAO,CAAC,EAC3E,yCAAyC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/module-context-integration.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Integration tests for the module-facing framework seams added for issue #5,
+ * run through the REAL ModuleContextImpl (not hand-written mocks — a detached
+ * or mis-bound method must fail here the way it would in production):
+ *
+ *  - ModuleContext.notifyOps reaches the framework ops channel (ops:alert
+ *    trace) when invoked as a method on the context object;
+ *  - ctx.callTool routes synthesized channel_* tools to the ChannelRegistry
+ *    with trusted module origin (the route was missing entirely — module
+ *    closes failed as "Invalid tool name format" since subscription-GC moved
+ *    onto the generic channel_close);
+ *  - the PUBLIC executeToolCall (the promise-based entry shared with
+ *    ephemeral/model callers) stamps agent origin no matter what machine
+ *    fields the input claims — module provenance is conferred by which
+ *    internal path was used, never by which public method.
+ */
+export {};
+//# sourceMappingURL=module-context-integration.test.d.ts.map

package/dist/test/module-context-integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-context-integration.test.d.ts","sourceRoot":"","sources":["../../test/module-context-integration.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}