@cgh567/agent 2.4.2 → 2.4.3

package/lib/triage-core/classifier.ts

@@ -52,8 +52,9 @@ import * as senderPrestige from './signals/prestige-scorer.ts';
 import * as personalImportance from './signals/personal-importance.ts';
 import * as goalRelevance from './signals/goal-relevance.ts';
 
-// W-12: Startup warning if HELIOS_SELF_ID not set
-const SELF_ID = process.env.HELIOS_SELF_ID || (() => { process.stderr.write('[triage] HELIOS_SELF_ID not set — self-relationship queries will return empty\n'); return '__SELF_ID_NOT_SET__'; })();
+// C5: HELIOS_SELF_ID is structurally required — throw at startup if missing
+if (!process.env.HELIOS_SELF_ID) throw new Error('HELIOS_SELF_ID env var is required — set it in .env');
+const SELF_ID = process.env.HELIOS_SELF_ID;
 
 // B11: Load goal-lifecycle at module init (not inside hot path) to avoid repeated require() calls.
 // If the module is not found, goal boost is disabled and a warning is emitted once at startup.

package/lib/triage-core/graph/schema.cypher

@@ -52,6 +52,16 @@ CREATE INDEX ON :FAVEESnapshot(week) IF NOT EXISTS;
 // NODE LABEL REFERENCE (no DDL needed — Memgraph creates on first write)
 // ---------------------------------------------------------------------------
 //
+// DraftAction:
+//   id (string), type (email|slack), triggeredBy (string), content (JSON string),
+//   personId (string nullable), status (created|approved|executed|expired),
+//   createdAt (datetime), expiresAt (datetime)
+//
+//   SEC-5 TTL POLICY: DraftAction nodes store PII (email body, recipient handle).
+//   30-day TTL enforced by warm-tick-maintenance.ts daily cleanup:
+//     MATCH (da:DraftAction) WHERE da.expiresAt < datetime() DETACH DELETE da
+//   All new DraftAction writes MUST set expiresAt = datetime() + duration({days: 30}).
+//
 // Identity:
 //   id (UUID), handle (string), platform (email|imessage|phone),
 //   displayName (string), createdAt (ISO), verified (boolean)

package/lib/triage-core/mental-model/key-facts.ts

@@ -13,8 +13,7 @@ import { createRequire } from 'module';
 import { KEY_FACTS_MODEL_ID } from './bedrock-config.ts';
 
 function getSelfId(): string {
-  const id = process.env.HELIOS_SELF_ID || '';
-  if (!id) throw new Error('[key-facts] HELIOS_SELF_ID env var is required -- set it in .env');
+  const id = process.env.HELIOS_SELF_ID ?? (() => { throw new Error('[key-facts] HELIOS_SELF_ID env var is required -- set it in .env'); })();
   return id;
 }
 

package/lib/triage-core/orchestrator.ts

@@ -537,7 +537,8 @@ export class TriageOrchestrator {
             }),
             personId: (item.senderModel as any)?.personId || null,
             status: 'created',
-            expiresAt: new Date(Date.now() + 48 * 60 * 60 * 1000).toISOString(),
+            // SEC-5: 30-day TTL — DraftAction nodes contain PII; cleaned up by warm-tick daily maintenance
+            expiresAt: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString(),
           }));
           await rawWrite(
             `UNWIND $batch AS d
@@ -1478,11 +1479,7 @@ export class TriageOrchestrator {
   }
 
   private checkExtractionTriggers(personIds: string[]): void {
-    const selfId = process.env.HELIOS_SELF_ID || '';
-    if (!selfId) {
-      this.log('warn', 'self_id.missing', { fn: 'checkExtractionTriggers' });
-      return; // early exit, not fatal
-    }
+    const selfId = process.env.HELIOS_SELF_ID ?? (() => { throw new Error('HELIOS_SELF_ID env var is required'); })();
     const unique = [...new Set(personIds.filter(id => id && id !== selfId))];
     if (unique.length === 0) return;
 
@@ -1544,11 +1541,7 @@ export class TriageOrchestrator {
     try {
       const { rawRead } = require('../safe-memgraph.js');
       let md = briefing.markdown || '';
-      const selfId = process.env.HELIOS_SELF_ID || '';
-      if (!selfId) {
-        this.log('warn', 'self_id.missing', { fn: 'enrichBriefingWithSecretary' });
-        return; // early exit, not fatal
-      }
+      const selfId = process.env.HELIOS_SELF_ID ?? (() => { throw new Error('HELIOS_SELF_ID env var is required'); })();
 
       if (!md.includes('<!-- active-situations -->')) {
         // NOTE: briefing.markdown uses emoji. All consumers must parse as UTF-8.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cgh567/agent",
-  "version": "2.4.2",
+  "version": "2.4.3",
   "description": "Helios agent runtime \u2014 full stack: extensions, skills, daemon, brain-v2, HEMA, governance",
   "type": "commonjs",
   "bin": {
@@ -97,14 +97,13 @@
     "puppeteer-extra-plugin-stealth": "^2.11.2",
     "qrcode-terminal": "^0.12.0",
     "signal-sdk": "^0.2.4",
-    "tree-sitter": "^0.25.0",
-    "tree-sitter-javascript": "^0.25.0",
-    "tree-sitter-python": "^0.25.0",
+    "tree-sitter": "^0.21.1",
+    "tree-sitter-javascript": "^0.23.1",
+    "tree-sitter-python": "^0.21.0",
     "tree-sitter-typescript": "^0.23.2",
     "write-file-atomic": "^7.0.1"
   },
   "devDependencies": {
-    "@esbuild/linux-x64": "^0.28.0",
     "ts-morph": "^27.0.2",
     "tsx": "^4.21.0",
     "typescript": "^6.0.3",
@@ -124,7 +123,12 @@
     "daemon/schema-migrations-harada.js",
     "daemon/schema-migrations-hbo.js",
     "daemon/schema-migrations-hitl.js",
+    "daemon/schema-migrations-proj.js",
+    "daemon/schema-migrations-hed.js",
     "daemon/schema-migrations.js",
+    "daemon/schema-apply.js",
+    "daemon/schema-definitions.js",
+    "daemon/db/",
     "daemon/context-enrichment.js",
     "daemon/agent-discovery.js",
     "daemon/daemon-manager.js",