@hivemagnus/magnus-agent 1.1.12 → 1.1.13

package/dist/executors/historical-mutation-cli.js

@@ -33,7 +33,7 @@ async function main() {
         throw new Error('Offline Linux root controller required');
     const [mode, ...args] = process.argv.slice(2);
     if (!['inspect', 'apply'].includes(mode ?? '') || args.length % 2)
-        throw new Error('Usage: inspect --output FILE | apply --before FILE --records UUID,UUID --approval-ref REF --output FILE');
+        throw new Error('Usage: inspect --output FILE [--records UUID,UUID] | apply --before FILE --records UUID,UUID --approval-ref REF --output FILE');
     const options = {};
     for (let i = 0; i < args.length; i += 2) {
         const key = args[i];
@@ -41,7 +41,7 @@ async function main() {
             throw new Error('Invalid or duplicate option');
         options[key] = args[i + 1];
     }
-    if (!options['--output'] || (mode === 'inspect' && Object.keys(options).length !== 1) ||
+    if (!options['--output'] || (mode === 'inspect' && Object.keys(options).some(key => !['--output', '--records'].includes(key))) ||
         (mode === 'apply' && Object.keys(options).length !== 4))
         throw new Error('Exact mode options required');
     const install = await lstat('/opt/magnus-agent');
@@ -54,7 +54,7 @@ async function main() {
     const { MutationBarrier } = await import('./mutation-barrier.js');
     const barrier = new MutationBarrier('/opt/magnus-agent/.magnus/mutation-barrier');
     if (mode === 'inspect') {
-        const observation = await barrier.historicalObservation();
+        const observation = await barrier.historicalObservation(options['--records']?.split(','));
         await writePrivate(options['--output'], observation);
         console.log(JSON.stringify({ mode, records: observation.records.length, boot: observation.boot,
             output: options['--output'], originalOutcomes: 'unknown' }));

package/dist/executors/mutation-barrier.d.ts

@@ -30,7 +30,7 @@ export declare class MutationBarrier {
     private recordDigest;
     private historicalSettlement;
     /** Before-maintenance owner evidence; read-only and signed with the result key. */
-    historicalObservation(): Promise<{
+    historicalObservation(recordIds?: readonly string[]): Promise<{
         version: 1;
         drain: {
             nodeId: string;

package/dist/executors/mutation-barrier.js

@@ -171,7 +171,11 @@ export class MutationBarrier {
         return receipt;
     }
     /** Before-maintenance owner evidence; read-only and signed with the result key. */
-    async historicalObservation() {
+    async historicalObservation(recordIds) {
+        const selected = recordIds === undefined ? undefined
+            : z.array(z.string().guid()).min(1).max(16).parse(recordIds);
+        if (selected && new Set(selected).size !== selected.length)
+            throw new Error('Exact distinct historical record IDs required');
         return this.lockedRead(async () => {
             const drain = await this.identity();
             if (!drain)
@@ -184,12 +188,16 @@ export class MutationBarrier {
                 const row = recordSchema.parse(await this.read(name));
                 if (name !== 'request-' + row.id + '.json')
                     throw new Error('Mutation record identity differs');
+                if (selected && !selected.includes(row.id))
+                    continue;
                 if (row.state === 'completed' || await this.historicalSettlement(row, drain))
                     continue;
                 if (this.active.has(row.id))
                     throw new Error('Active operation cannot be retired');
                 records.push({ id: row.id, recordSha256: await this.recordDigest(row.id), acceptedAt: row.acceptedAt, routeSha256: row.routeSha256 });
             }
+            if (selected && records.length !== selected.length)
+                throw new Error('Selected historical records must all remain unsettled');
             return signHistoricalObservation({ version: 1, drain, boot: await this.bootReader(), observedAt: Date.now(), records }, this.historicalKeys.result);
         });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hivemagnus/magnus-agent",
-  "version": "1.1.12",
+  "version": "1.1.13",
   "description": "Magnus node agent: a small daemon that enrolls a Linux host with a magnus-server and runs authenticated health, command, cron, file and skill management, with optional Hermes Agent, Codex and Ardent management.",
   "keywords": [
     "magnus",
@@ -60,7 +60,7 @@
     "clean": "node -e \"const fs=require('node:fs');fs.rmSync('dist',{recursive:true,force:true});fs.rmSync('tsconfig.tsbuildinfo',{force:true})\""
   },
   "dependencies": {
-    "@hivemagnus/magnus-contracts": "1.1.12",
+    "@hivemagnus/magnus-contracts": "1.1.13",
     "@hono/node-server": "^2.1.5",
     "dotenv": "^18.0.9",
     "hono": "^4.13.16",