@jc_stack/ez-agents 0.1.0-beta.39 → 0.1.0-beta.40

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.0-beta.40
+
+- Apply eligible npm releases under each agent's saved automatic update policy
+  through the existing guarded updater. Queue one update at a time, preserve
+  manual policies, and wait for a newer version after a failed automatic update.
+
 ## 0.1.0-beta.39
 
 - Render completed, binding-scoped application replies as WAV speech with

package/docs/upgrades.md

@@ -12,12 +12,13 @@ automatic channel for core and plugins without a saved policy. Existing explicit
 stable or manual policies are preserved. The owner may select either per target.
 The main target and installed plugins version independently.
 
-The agent owns release review, policy decisions and communication. The host
-supervisor owns interruption-safe replacement. There is one host service per
-agent, not a second agent or an additional updater daemon. Its replaceable child
-runs the normal CLI transport. It checks npm every six hours while running and
-records automatic-channel changes; discovery never wakes the agent or injects
-wrapper state into a session. Updates stay owner-invoked through `ez updates`.
+The owner chooses the saved update policy. The host supervisor owns
+interruption-safe replacement. There is one host service per agent, not a second
+agent or an additional updater daemon. Its replaceable child runs the normal CLI
+transport. It checks npm every six hours while running and queues one eligible
+release at a time when the policy is automatic. Discovery and replacement never
+wake the agent or inject wrapper state into a session. Manual policies retain
+owner-invoked updates through `ez updates`.
 Checks use the installed scoped npm identity; failures are
 visible in `updates check` and private `tools/updates/available.json`. Plugins marked
 `private: true` in their package metadata are reported as local-source updates
@@ -265,5 +266,7 @@ execution authority.
 
 Update discovery runs independently of active host work. A discovery failure is
 logged locally and retried at the next regular six-hour check; it does not stop
-the host or create a repair task. Inspect `ez updates check` for target diagnostics.
+the host or create a repair task. An automatically failed or rolled-back version
+is not retried until a newer version appears or the owner explicitly retries.
+Inspect `ez updates check` and `ez updates status` for target diagnostics.
 Actual update transactions retain their existing admission, drain and rollback rules.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jc_stack/ez-agents",
-  "version": "0.1.0-beta.39",
+  "version": "0.1.0-beta.40",
   "private": false,
   "type": "module",
   "description": "A lightweight foundation for persistent business AI assistants using existing AI harnesses, workspaces and plugins.",

package/src/updates/supervisor.mjs

@@ -4,7 +4,7 @@ import { fileURLToPath } from 'node:url';
 import { spawn } from 'node:child_process';
 import { atomic, locked } from '../plugins/manager.mjs';
 import { callDeliverySocket } from '../delivery-socket-client.mjs';
-import { state, read, jobs, jobPath, check, missing, cleanupStaleBackups } from './control.mjs';
+import { state, read, jobs, jobPath, check, prepare, submit, missing, cleanupStaleBackups } from './control.mjs';
 import { perform, environment } from './runtime.mjs';
 
 const reservedProviderKeys=new Set(['HOME','LANG','LC_ALL','LOGNAME','PATH','SHELL','TERM','TMPDIR','USER','CODEX_HOME','NODE_OPTIONS']);
@@ -28,6 +28,22 @@ export async function idle(control) {
   const status=await callDeliverySocket(path.join(control,'delivery.sock'),{op:'status'},2000).catch(()=>null);
   return !status||status.running===0;
 }
+export async function queueAutomatic(home,available) {
+  const existing=await jobs(home);
+  if(existing.some(job=>['queued','applying','recovery-required'].includes(job.status)))return null;
+  for(const candidate of available) {
+    if(!candidate.newer||!candidate.policy?.automatic||!candidate.available)continue;
+    // A failed release needs a newer version or an explicit owner retry.
+    if(existing.some(job=>job.target===candidate.target&&job.version===candidate.available&&['failed','rolled-back'].includes(job.status)))continue;
+    try {
+      const job=await prepare(home,candidate.target,{release:candidate.available});
+      return await submit(home,job.id,true);
+    }catch {
+      console.error(`Automatic update of ${candidate.target} failed; inspect ez updates check/status.`);
+    }
+  }
+  return null;
+}
 export async function supervise(deployment,signal,{discover=check}={}) {
   const host=await read(path.join(deployment,'host-executor.json'));
   if(host.agents.length!==1||!host.agents[0].toolsHome)throw Error('Initialize a single deployment plugin registry before starting the supervisor');
@@ -96,12 +112,16 @@ export async function supervise(deployment,signal,{discover=check}={}) {
           const latest=await read(path.join(jobPath(home,pending.id),'job.json'));
           if(latest.status==='queued'){latest.status='failed';latest.error=error.message;await atomic(path.join(jobPath(home,pending.id),'job.json'),latest);}else throw error;
         } finally {await fs.rm(pause,{force:true});}
-        if(result?.status==='completed'&&pending.target==='main')return;
+        if(result?.status==='completed') {
+          if(pending.target==='main')return;
+          nextCheck=0;
+        }
       }
       if(Date.now()>=nextCheck) {
         nextCheck=Date.now()+6*60*60*1000;
         try {
           const results=await discover(home);await atomic(path.join(directory,'available.json'),results);
+          await queueAutomatic(home,results);
         } catch {
           // Discovery is optional; its failure must not terminate the host.
           // Do not expose registry response bodies or credentials in logs.

package/test/updates.test.mjs

@@ -13,7 +13,7 @@ import { perform, environment, packageManager, backupStateDirectory } from '../s
 import { atomic, snapshot, compose, prepareCommand } from '../src/plugins/manager.mjs';
 import { bindUpdates } from '../src/updates/binding.mjs';
 import { status as runtimeStatus } from '../src/updates/status.mjs';
-import { providerEnvironment } from '../src/updates/supervisor.mjs';
+import { providerEnvironment, queueAutomatic } from '../src/updates/supervisor.mjs';
 const exec=promisify(execFile);
 
 test('main upgrade backup omits a live plugin socket and keeps private files',async t=>{
@@ -442,6 +442,29 @@ test('npm candidates verify exact version and integrity; automatic policy is enf
  pkg.version='0.1.2';await assert.rejects(prepare(f.home,'main',{release:'0.1.1'}),/version mismatch/);
 });
 
+test('supervisor queues an eligible release once and preserves manual and failed-version gates',async t=>{
+ const f=await fixture(t),data=await fs.readFile(await f.pack());
+ const {createHash}=await import('node:crypto');
+ const pkg={name:'@ez-test/example',version:'0.1.1',dist:{tarball:'https://registry.npmjs.org/@ez-test/example/-/example-0.1.1.tgz',integrity:'sha512-'+createHash('sha512').update(data).digest('base64')}};
+ const original=globalThis.fetch;
+ globalThis.fetch=async url=>new Response(String(url).endsWith('.tgz')?data:JSON.stringify(String(url).endsWith('/0.1.1')?pkg:{name:pkg.name,'dist-tags':{latest:pkg.version},versions:{[pkg.version]:pkg}}));
+ t.after(()=>globalThis.fetch=original);
+ await atomic(path.join(f.home,'updates/supervisor.json'),{at:Date.now()});
+ await command(f.home,['policy','main','manual']);
+ assert.equal(await queueAutomatic(f.home,await command(f.home,['check'])),null);
+ assert.deepEqual(await jobs(f.home),[]);
+ await command(f.home,['policy','main','beta']);
+ const queued=await queueAutomatic(f.home,await command(f.home,['check']));
+ assert.equal(queued.status,'queued');assert.equal(queued.automatic,true);
+ assert.equal(queued.origin.type,'npm');assert.equal(queued.sha256,digest(data));
+ assert.equal(await queueAutomatic(f.home,await command(f.home,['check'])),null);
+ assert.equal((await jobs(f.home)).length,1);
+ queued.status='failed';await atomic(path.join(jobPath(f.home,queued.id),'job.json'),queued);
+ assert.equal(await queueAutomatic(f.home,await command(f.home,['check'])),null);
+ assert.equal((await jobs(f.home)).length,1);
+ await assert.rejects(fs.readFile(path.join(f.agent.controlDir,'update-attention.json')),error=>error.code==='ENOENT');
+});
+
 test('update discovery follows latest while preserving legacy beta and stable-only policies',async t=>{
  const {registryCandidate}=await import('../src/updates/artifact.mjs');
  const name='@ez-test/example',pkg=v=>({name,version:v});