@metamynd/agentsafe-signer 0.20.1 → 0.20.3

package/daemon.mjs

@@ -84,10 +84,10 @@ export function buildServiceCallMessage({ action, authorizationId, fields, nonce
 export const DEFAULT_CHECKPOINT_INTERVAL_MS = 15 * 60 * 1000;
 
 // Matches agentsafe-guard.mjs's own REPORTABLE_LOCAL_DECISIONS exactly (LOCAL_DECISIONS the
-// backend's /policy/decisions/local actually accepts) — this daemon must never sign a
-// 'quarantine'/'suspend' or other value here just because a caller asked; only a genuine
-// local-first verdict shape is a valid thing to have signed under this op.
-const REPORTABLE_LOCAL_DECISIONS = new Set(['allow', 'observe', 'block', 'escalate']);
+// backend's /policy/decisions/local accepts) — this daemon never signs another value here just because a caller asked;
+// only a genuine local-first verdict shape, or (since 0.20.3, N-4) a containment refusal the guard gave from the
+// server's own `contained` flag, is a valid thing to have signed under this op. Never 'decommission'.
+const REPORTABLE_LOCAL_DECISIONS = new Set(['allow', 'observe', 'block', 'escalate', 'suspend', 'quarantine']);
 
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const HEX_RE = /^[0-9a-f]+$/i;
@@ -390,8 +390,7 @@ export class SignerDaemon {
 
   /**
    * An agent settling its OWN hold that nobody has claimed (MAGP §8.7.4): capture it, or void it. The issuer accepts an
-   * unclaimed settlement only from that hold's agent, a counterparty the owner registered, or — for an open testnet owner —
-   * anyone. Built from validated fields under the fixed MAGP-SETTLE-v1 prefix, which no other message this daemon signs
+   * unclaimed settlement only from that hold's agent or a counterparty the owner registered, on every owner. Built from validated fields under the fixed MAGP-SETTLE-v1 prefix, which no other message this daemon signs
    * starts with; it names the agent, so it is never a counterparty's signature (sign-service-call, MAGP-SERVICE-v1), and an
    * agent cannot use it to claim. Agent-role only.
    */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamynd/agentsafe-signer",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Local signer daemon for AgentSafe agent/service keys \u2014 the key never enters the calling guard's own process. See docs/design/agent-key-custody-local-signer-daemon-plan.md.",
   "type": "module",
   "main": "./daemon.mjs",