@jc_stack/ez-agents 0.1.0-beta.45 → 0.1.0-beta.46

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.1.0-beta.46
+
+- Allow private RC/QA candidates to graduate to their matching published beta
+  through the existing updater, without permitting a move to an older beta.
+
+- Refresh the isolated broker after plugin upgrade or rollback so status reports
+  the resulting installed versions rather than its startup inventory. Preserve
+  the previous registry snapshot independently during plugin activation.
+  Preserve stopped plugins as stopped when Docker retains a created container.
+
+- Include the existing Telegram runtime/version summary in authorized private
+  channel controls so channel status can show the running relay and host versions.
+
 ## 0.1.0-beta.45
 
 - Keep owner chat responsive while a scheduled native turn runs. Foreground

package/docs/application-channel.md

@@ -58,6 +58,9 @@ the ordinary last-selection-wins behavior. Already-admitted runs keep their
 captured conversation and AI. Uncertain control responses require a fresh read,
 not blind repetition of `/new`.
 
+The scope-control response includes `software`, the same current runtime/version
+summary used by Telegram status. It is read-only and does not create a session.
+
 For private application conversations, `GET /v1/scope-control?scope=<encoded-scope>` returns
 the same catalog and the current scope's public control ID and preset. The scope
 is the application's original admission scope, resolved under its authenticated

package/docs/plugins.md

@@ -157,6 +157,11 @@ snapshots. Reinstallation reuses that data. Plain install does not replace a dif
 compatible upgrades under saved policy; see [upgrades](upgrades.md). Manual
 uninstall/reinstall remains available but does not promise schema rollback.
 
+Installed package files retain their reviewed modes (0644 for ordinary files,
+0755 for executables and nested directories), including under restrictive umasks
+or inherited default ACLs. The snapshot root remains private (0700); provider
+data and private operation receipts keep their separate permissions.
+
 For another reviewed local package, inspect with `plugins inspect <id> --source
 /absolute/source`, then install with that source and the returned `--revision
 sha256:...`. Changed contents fail. To make a reviewed package discoverable without installing,

package/docs/upgrades.md

@@ -1,5 +1,9 @@
 # Agent-owned software upgrades
 
+Private `beta.N.rc.M` and `beta.N.qa.M` candidates may upgrade to the matching
+published `beta.N`, despite SemVer's prerelease ordering. All identity, integrity,
+deployment and owner-policy checks still apply; older betas remain rejected.
+
 For an application's independently deployed frontend, backend or embedded gateway,
 see [managed applications](managed-applications.md). They use their existing
 deployment tools and a saved maintenance mandate; this package updater inventories

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jc_stack/ez-agents",
-  "version": "0.1.0-beta.45",
+  "version": "0.1.0-beta.46",
   "private": false,
   "type": "module",
   "description": "A lightweight foundation for persistent business AI assistants using existing AI harnesses, workspaces and plugins.",

package/src/application-channel.ts

@@ -11,6 +11,7 @@ import { MAX_INCOMING_ATTACHMENT_BYTES, stageChatAttachment } from './files.js'
 import { assertEffort } from './model-policy.js'
 import { ApprovalStore } from './approval.js'
 import { Tasks } from './tasks.js'
+import { softwareStatus } from './software-status.js'
 import { SpeechCreditsDepletedError } from './audio.js'
 
 const hash = (value: string) => createHash('sha256').update(value).digest('hex')
@@ -72,7 +73,7 @@ export class ApplicationChannel {
   private admissions = Promise.resolve()
   readonly bindings: ApplicationBindings
   constructor(private options: {
-    controlDir: string; workspace?: string; initial: AiPreset
+    controlDir: string; workspace?: string; isolation?: string; initial: AiPreset
     wake: () => void
     cancel: (id: string) => Promise<void>
     speech?: (text: string, language: 'en' | 'es') => Promise<{ buffer: Buffer; mimeType: string }>
@@ -180,6 +181,7 @@ export class ApplicationChannel {
     await this.sharedBinding(bindingId, false)
     return {ai:{...ai, selectedId:session?.preset?.id ?? ai.selectedId,
       presets:session?.preset ? [...ai.presets.filter(item=>item.id!==session.preset!.id),session.preset] : ai.presets},
+      software: await softwareStatus(this.options.controlDir, this.options.isolation),
       models, activeSessionId:session?.sessionId ?? null, sessions:session ? [{id:session.sessionId,title:sessionTitle(session),cli:session.cli,archived:false}] : []}
   }
   async changeScopeControls(bindingId: string, scope: string, input: unknown) {

package/src/index.ts

@@ -100,7 +100,7 @@ export const createRelay = (config: Config, launch = startExecutorJob) => {
   }
 
   const applicationChannel = new ApplicationChannel({
-    controlDir: config.controlDir, workspace: config.workspace, initial: aiMenu.initial,
+    controlDir: config.controlDir, workspace: config.workspace, isolation: config.isolation, initial: aiMenu.initial,
     aiControls: aiMenu,
     speech: config.geminiApiKey ? (text, language) => synthesizeSpeech(text, {
       geminiApiKey: config.geminiApiKey,

package/src/plugins/manager.mjs

@@ -553,7 +553,13 @@ export async function install(home,config,name,source,revision) {
     const base=path.join(home,'packages',name),target=path.join(base,revision.slice(7));await privateDir(base);
     const stage=path.join(base,`.stage-${randomUUID()}`);await privateDir(stage);
     try {
-      for(const [relative,file] of p.files) {const dest=path.join(stage,relative);await fs.mkdir(path.dirname(dest),{recursive:true,mode:0o755});await fs.writeFile(dest,file.data,{mode:file.mode,flag:'wx'});}
+      for(const [relative,file] of p.files) {
+        const dest=path.join(stage,relative);await fs.mkdir(path.dirname(dest),{recursive:true,mode:0o755});
+        // Package modes are part of the reviewed snapshot; umask/default ACLs
+        // must not make Docker COPY inputs unreadable to the runtime user.
+        for(let dir=path.dirname(dest);dir!==stage;dir=path.dirname(dir))await fs.chmod(dir,0o755);
+        await fs.writeFile(dest,file.data,{mode:file.mode,flag:'wx'});await fs.chmod(dest,file.mode);
+      }
       // A previously interrupted install may leave a snapshot. Never silently replace it.
       try { await fs.rename(stage,target); } catch(error) {
         if(!['EEXIST','ENOTEMPTY'].includes(error.code)) throw error;

package/src/updates/control.mjs

@@ -10,8 +10,9 @@ export const missing = error => {if(error.code!=='ENOENT')throw error;return nul
 export const targetId = value => {if(value!=='main'&&!/^[a-z][a-z0-9-]{0,39}$/.test(value))throw Error('Invalid update target');return value;};
 const jobId=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
 const compatibilityBuild=/^(.+)\.compat\.\d+$/;
+const qaBuild=/^(\d+\.\d+\.\d+-beta\.\d+)\.(?:rc|qa)\.[1-9]\d*$/;
 const upgradeable=(candidate,installed)=>{
-  const match=compatibilityBuild.exec(installed);
+  const match=compatibilityBuild.exec(installed)||qaBuild.exec(installed);
   return newer(candidate,installed)||Boolean(match&&match[1]===candidate);
 };
 export const updateHome = home => path.join(home,'updates');

package/src/updates/runtime.mjs

@@ -61,6 +61,10 @@ export async function relayServices(config) {
   const env = await fs.readFile(path.join(config.deploymentDir,'docker.env'),'utf8').catch(() => '');
   return parseEnv(env).EZ_EXECUTOR_TRANSPORT === 'local' ? ['relay','plugin-broker'] : ['relay'];
 }
+async function refreshBroker(config, run) {
+  if ((await relayServices(config)).includes('plugin-broker'))
+    await run('docker', [...relayArgs(config), 'restart', 'plugin-broker']);
+}
 const healthCodes = new Set(['RELAY_UNREADABLE','RELAY_NOT_POLLING','RELAY_STALE','HOST_UNREADABLE','HOST_STALE','PLUGIN_BROKER_UNREADABLE']);
 async function healthEvidence(config,run) {
   const id=(await run('docker',[...relayArgs(config),'ps','-q','relay'])).trim();
@@ -145,8 +149,8 @@ export async function perform(home,job,hooks) {
       await checkFolders(config,candidate,home);
       const stage={...candidate,compose:path.join(dir,'compose.json')};await atomic(stage.compose,await compose(config,stage,secrets,home));
       for(const [service,spec] of Object.entries(stage.deployment.services))await run('docker',[...pluginArgs(stage),spec.image?'pull':'build',service]);
-      const running=Boolean((await run('docker',[...pluginArgs(old),'ps','-q'])).trim());
-      job.rollback={record:old,registry:r,compose:await read(old.compose),running};await save();
+      const running=Boolean((await run('docker',[...pluginArgs(old),'ps','--status','running','-q'])).trim());
+      job.rollback={record:old,registry:structuredClone(r),compose:await read(old.compose),running};await save();
       await run('docker',[...pluginArgs(old),'stop']);
       const backup=path.join(dir,'backup');await fs.mkdir(backup,{mode:0o700});
       const volumes=new Set(Object.values(old.deployment.services).flatMap(s=>Object.keys(s.volumes||{})));
@@ -156,6 +160,7 @@ export async function perform(home,job,hooks) {
       r.plugins[job.target]=candidate;
       for(const alias of Object.keys(candidate.manifest.commands))r.commands[alias]=job.target;
       await atomic(path.join(home,'registry.json'),r);
+      await refreshBroker(config,run);
       job.runtimeVerified=running;
     }
     job.status='completed';job.endedAt=new Date().toISOString();await save();
@@ -192,6 +197,7 @@ export async function recover(home,job,hooks) {
         const b=job.rollback;
         await run('docker',[...pluginArgs(b.record),'stop']);
         await atomic(b.record.compose,b.compose);await atomic(path.join(home,'registry.json'),b.registry);
+        await refreshBroker(config,run);
         if(b.running)await run('docker',[...pluginArgs(b.record),'up','-d','--wait','--wait-timeout','90','--no-build']);
       }
       job.status='rolled-back';

package/test/application-controls.test.ts

@@ -8,6 +8,7 @@ import { ApplicationChannel, applicationScope } from '../src/application-channel
 import { ControlStore } from '../src/control-state.js'
 import { createAiMenu } from '../src/menu.js'
 import { RunStore } from '../src/runs.js'
+import { softwareStatus } from '../src/software-status.js'
 
 test('shared controls validate detected host presets against the host catalog', async t => {
   const root = await mkdtemp(join(tmpdir(), 'ez-host-controls-'))
@@ -67,6 +68,8 @@ test('private scope reset and model controls preserve running sessions and share
     ...(body===undefined?{}:{body:JSON.stringify(body)}),
   })
   const before = await (await call()).json() as any
+  assert.deepEqual(before.software,await softwareStatus(root))
+  assert.match(before.software[0],/^Relay: running · /)
   assert.equal(before.activeSessionId,run.execution!.sessionId)
   assert.equal(JSON.stringify(before).includes('native-private'),false)
   assert.equal((await channel.scopeControls(second.bindingId,'exercise')).activeSessionId,null)

package/test/plugin-manager.test.mjs

@@ -46,6 +46,21 @@ async function fixture(t) {
  const call=(...args)=>exec(process.execPath,[bin,'--home',home,...args],{env});
  return {root,source,home,deploymentDir,workspace,control,hostConfig,fake,log,manifest,deployment,env,call};
 }
+test('install preserves reviewed package modes under a restrictive umask',async t=>{
+ const f=await fixture(t);
+ await fs.mkdir(path.join(f.source,'nested'));await fs.writeFile(path.join(f.source,'nested','note.md'),'Synthetic');
+ const pkg=JSON.parse(await fs.readFile(path.join(f.source,'package.json'),'utf8'));pkg.files.push('nested');
+ await fs.writeFile(path.join(f.source,'package.json'),JSON.stringify(pkg));await fs.chmod(path.join(f.source,'client.mjs'),0o755);
+ const p=await snapshot(f.source);await init(f.home,f.workspace);
+ const argv=['--home',f.home,'plugins','install','sample','--source',f.source,'--revision',p.revision];
+ const script=`process.umask(0o077);const m=await import(${JSON.stringify(new URL('../src/plugins/manager.mjs',import.meta.url).href)});await m.main(${JSON.stringify(argv)});`;
+ await exec(process.execPath,['--input-type=module','-e',script],{env:f.env});
+ const record=JSON.parse(await fs.readFile(path.join(f.home,'registry.json'),'utf8')).plugins.sample;
+ for(const [relative,file]of p.files)assert.equal((await fs.stat(path.join(record.source,relative))).mode&0o777,file.mode,relative);
+ assert.equal((await fs.stat(path.join(record.source,'nested'))).mode&0o777,0o755);
+ assert.equal((await fs.stat(record.source)).mode&0o777,0o700);
+ assert.equal((await snapshot(record.source)).revision,p.revision);
+});
 test('persistent connection reuses one container and releases registry lock between frames',async t=>{
  const f=await fixture(t),p=await snapshot(f.source);await init(f.home,f.workspace);await f.call('plugins','install','sample','--source',f.source,'--revision',p.revision);
  await fs.writeFile(path.join(f.fake,'docker'),`#!${process.execPath}\nif(process.argv[2]==='container')process.exit(0);require('readline').createInterface({input:process.stdin}).on('line',line=>{const f=JSON.parse(line);console.log(JSON.stringify(f.coreResponse?{reply:f.coreResponse}:{coreRequest:{id:f.id,method:'tools.list',params:{}}}));});`,{mode:0o700});

package/test/updates.test.mjs

@@ -276,6 +276,16 @@ test('compatibility bridge hands off any matching canonical beta release',async
  await atomic(path.join(f.source,'package.json'),{...candidate,version:'0.1.0-beta.34'});
  await assert.rejects(eligibility(f.home,'main',f.source,false),/newer/);
 });
+test('private RC and QA builds graduate only to their matching beta release',async t=>{
+ const f=await fixture(t),prior=await read(path.join(f.old,'package.json')),candidate=await read(path.join(f.source,'package.json'));
+ for(const suffix of ['rc.7','qa.4']) {
+  await atomic(path.join(f.old,'package.json'),{...prior,version:'0.1.0-beta.46.'+suffix});
+  await atomic(path.join(f.source,'package.json'),{...candidate,version:'0.1.0-beta.46'});
+  assert.equal((await eligibility(f.home,'main',f.source,true)).pkg.version,'0.1.0-beta.46');
+  await atomic(path.join(f.source,'package.json'),{...candidate,version:'0.1.0-beta.45'});
+  await assert.rejects(eligibility(f.home,'main',f.source,false),/newer/);
+ }
+});
 test('reviewed Library beta14 command migration is exact and fail-closed',()=>{
  const manifest=(version,document)=>({schemaVersion:1,id:'library',version,description:'library',commands:{library:{executable:'bin/ez-library.mjs',args:[]},'library-query':{executable:'bin/ez-library.mjs',args:[],channelQuery:true},...(document?{'library-document':{executable:'bin/ez-library.mjs',args:[],channelQuery:true}}:{})},skills:['skills/library/SKILL.md']});
  const deployment=(query,document)=>({schemaVersion:3,services:{library:{buildTarget:'runtime',volumes:{data:'/state'},healthcheck:['node','/app/bin/ez-library.mjs','--version'],memoryMiB:4096,cpus:2}},commands:{'library-query':{service:'library',argv:['node','/app/bin/ez-library.mjs',query]},...(document?{'library-document':{service:'library',argv:['node','/app/bin/ez-library.mjs','document']}}:{})},sharedServices:{}});
@@ -372,6 +382,33 @@ test('plugin updates register additive command routes on an unchanged deployment
  const dispatch=await prepareCommand(f.home,'query',[]);assert.deepEqual(dispatch.argv.slice(-4),['node','sample','/app/bin/example.mjs','query']);
  assert(r.calls.some(call=>call.includes('up')));
 });
+test('isolated plugin replacement refreshes broker version inventory after registry activation',async t=>{
+ const f=await fixture(t,'plugin');
+ await fs.appendFile(path.join(f.config.deploymentDir,'docker.env'),'EZ_EXECUTOR_TRANSPORT=local\n');
+ const job=await queued(f),r=runtime(f),execute=r.execute;
+ let observed;
+ r.execute=async(command,args,options)=>{
+  if(args.includes('restart')&&args.at(-1)==='plugin-broker') observed=(await read(path.join(f.home,'registry.json'))).plugins.sample.manifest.version;
+  return execute(command,args,options);
+ };
+ assert.equal((await perform(f.home,job,r)).status,'completed');
+ assert.equal(observed,'0.1.1');
+ assert.equal(r.calls.filter(call=>call.includes('restart')).length,1);
+ const interrupted=await read(path.join(jobPath(f.home,job.id),'job.json'));interrupted.status='applying';
+ assert.equal((await perform(f.home,interrupted,r)).status,'rolled-back');
+ assert.equal(observed,'0.1.0');
+ assert.equal(r.calls.filter(call=>call.includes('restart')).length,2);
+});
+test('plugin update preserves a created but never running service as stopped',async t=>{
+ const f=await fixture(t,'plugin'),job=await queued(f),r=runtime(f),execute=r.execute;
+ r.execute=async(command,args,options)=>{
+  if(args.includes('ps')) {r.calls.push([command,...args]);return args.includes('--status')?'':'created-container';}
+  return execute(command,args,options);
+ };
+ assert.equal((await perform(f.home,job,r)).status,'completed');
+ assert.equal(job.rollback.running,false);
+ assert.equal(r.calls.some(call=>call.includes('up')),false);
+});
 test('plugin command additions ignore object key order but reject collisions and changed routes',async t=>{
  const f=await fixture(t,'plugin'),deployment=await read(path.join(f.source,'ez-deployment.json'));
  deployment.services.sample={healthcheck:deployment.services.sample.healthcheck,volumes:deployment.services.sample.volumes,buildTarget:deployment.services.sample.buildTarget};