@stratusagent/gateway 0.13.7 → 0.14.0

package/dist/index.js

@@ -9,17 +9,21 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
 import { mkdir, readFile, rename, rm } from 'node:fs/promises';
 import path from 'node:path';
-import { filePathsOf, isUnaddressedTurn, carriesKey, leastTrusted, senderTrustOf, SENDER_TRUST_METADATA_KEY, workItemState, lastResponseIsAnswer, MAX_IDEMPOTENCY_KEY_LENGTH, recordTurnFailure, completeAnsweredTurn, abortErrorFor, sessionTrustOf, sessionWriteTrust, AgentRegistry, AgentRunner, ChannelRegistry, ContributionRegistry, createRoutedMemoryStore, EventBus, RunAbortedError, SkillRegistry, ToolRegistry, createSkillReadTool, missingSkillRequirements, describeToolAllowlistFinding, unmatchedToolAllowlist, CONTEXT_FLOOR_METADATA_KEY, PENDING_APPROVAL_METADATA_KEY, SESSION_TAINTED_BY_METADATA_KEY, SESSION_TRUST_METADATA_KEY, latestTurnReply, readPendingApproval, conversationContextFrom, CONVERSATION_METADATA_KEY, STRATUS_SKILL_ID, imagesWithinReplayBudget, matchesToolAllowlist, } from '@stratusagent/core';
-import { CREDENTIAL_REQUEST_TOOL_NAME, createCredentialRequestTool, createDelegateTool, DELEGATE_TOOL_NAME, createForgetTool, createPinTool, createMessageSendTool, createMessageReadTool, createChannelCreateTool, directMessageReadRefusal, createRecallTool, createRememberTool, createScheduleTools, DELEGATED_BY_METADATA_KEY, DEFAULT_MAX_DELEGATION_DEPTH, DELEGATION_DEPTH_METADATA_KEY, delegatingSessionIdOf, isDelegatedSession, outstandingDelegationFor, ROOT_SESSION_ID_METADATA_KEY, SCHEDULE_ID_METADATA_KEY, SCHEDULED_TURN_METADATA_KEY, withoutDelegation, loadStratusSkill, STRATUS_SKILL_PATH, } from '@stratusagent/agents';
+import { filePathsOf, isUnaddressedTurn, carriesKey, leastTrusted, senderTrustOf, SENDER_TRUST_METADATA_KEY, workItemState, leftForNextStart, lastResponseIsAnswer, MAX_IDEMPOTENCY_KEY_LENGTH, recordTurnFailure, completeAnsweredTurn, abortErrorFor, sessionTrustOf, sessionWriteTrust, AgentRegistry, AgentRunner, ChannelRegistry, ContributionRegistry, createRoutedMemoryStore, EventBus, RunAbortedError, SkillRegistry, ToolRegistry, createSkillReadTool, missingSkillRequirements, describeToolAllowlistFinding, unmatchedToolAllowlist, CONTEXT_FLOOR_METADATA_KEY, PENDING_APPROVAL_METADATA_KEY, SESSION_TAINTED_BY_METADATA_KEY, SESSION_TRUST_METADATA_KEY, latestTurnReply, readPendingApproval, conversationContextFrom, CONVERSATION_METADATA_KEY, STRATUS_SKILL_ID, imagesWithinReplayBudget, matchesToolAllowlist, } from '@stratusagent/core';
+import { CREDENTIAL_REQUEST_TOOL_NAME, createCredentialRequestTool, createDelegateTool, DELEGATE_TOOL_NAME, createForgetTool, createPinTool, createMessageSendTool, createMessageReadTool, createChannelCreateTool, directMessageReadRefusal, createRecallTool, createRememberTool, createScheduleTools, DELEGATED_BY_METADATA_KEY, DEFAULT_MAX_DELEGATION_DEPTH, DELEGATION_DEPTH_METADATA_KEY, delegatingSessionIdOf, isDelegatedSession, outstandingDelegationFor, ROOT_SESSION_ID_METADATA_KEY, SCHEDULE_ID_METADATA_KEY, SCHEDULED_TURN_METADATA_KEY, withoutDelegation, loadStratusSkill, STRATUS_SKILL_PATH, credentialVariableProblem, } from '@stratusagent/agents';
 import { createFleetReader } from "./fleet.js";
+import { createEventIntake, summarizeEvents, } from "./event-intake.js";
+import { SqliteEventStore } from "./events.js";
 import { createSchedulerRuntime, isScheduleSessionId, SqliteScheduleStore, SCHEDULE_SESSION_ID_PREFIX, } from "./schedules.js";
 import { ShardedSessionStore } from "./sessions.js";
 export { claimHome, homeLockPath, HomeClaimedError, } from "./lock.js";
 export { SqliteSessionStore, ShardedSessionStore, FleetSessionIndex, SessionIdTakenError, tightenSqliteFile, } from "./sessions.js";
 export { SqliteScheduleStore, createSchedulerRuntime, isScheduleSessionId, SCHEDULE_SESSION_ID_PREFIX, } from "./schedules.js";
+export { SqliteEventStore, EVENT_BLOCK_MAX_BYTES, EVENT_DEDUP_WINDOW_MS, EVENT_DELIVERY_ROW_CAP, eventCoalescingKey, eventDispatchKey, eventSessionId, renderEventBlock, } from "./events.js";
+export { createEventIntake, mapGithubDelivery, parseStandardWebhookEvent, verifyGithubSignature, verifyStandardWebhookSignature, DEFAULT_EVENT_MAX_BODY_BYTES, EVENT_SOURCE_REQUESTS_PER_MINUTE, } from "./event-intake.js";
 import { createLocalCommandExecutor } from '@stratusagent/executor-local';
 import { loadPlugins, } from '@stratusagent/plugins';
-import { BUILTIN_EXECUTOR_NAME, BUILTIN_MEMORY_STORE_NAME, BUILTIN_PROVIDER_NAMES, createDemoTool, createFileCredentialResolver, createHomeMemoryStore, drainSharedMemory, hasBracketedLegacyStateIn, createRuntimeProvider, describeServingModel, DEFAULT_STRATUS_AGENT, isRegisteredProviderName, loadChannelTransportSecrets, registeredProviderNameOf, loadOperatorSkills, loadRosterSouls, FALLBACK_ACTIVE_METADATA_KEY, loadSoulFile, grantSoulCredential, withSoulFileLock, addNamedCredential, appendCredentialAudit, replaceNamedCredential, NamedCredentialMissingError, namedCredentialSource, NamedCredentialExistsError, CREDENTIAL_NAME_PATTERN, quoteShellArg, migrateLegacyMemory, PROVIDER_STATE_METADATA_KEYS, ConfigFileError, loadConfigFile, resolveConfigLocation, resolveConfiguredSoul, resolveRuntimeConfig, runsOnHarness, applySoulPins, assertStateCompatible, stratusHomePath, intakeStatePath, fleetDbIn, createAgentWorkspaces, createPluginStateDirectories, createHostProtectedPaths, foldedAgentId, syncDirectory, writeFileSynced, } from '@stratusagent/state';
+import { BUILTIN_EXECUTOR_NAME, BUILTIN_MEMORY_STORE_NAME, BUILTIN_PROVIDER_NAMES, createDemoTool, createFileCredentialResolver, resolveDaemonCredential, createHomeMemoryStore, drainSharedMemory, hasBracketedLegacyStateIn, createRuntimeProvider, describeServingModel, DEFAULT_STRATUS_AGENT, isRegisteredProviderName, loadChannelTransportSecrets, registeredProviderNameOf, loadOperatorSkills, loadRosterSouls, FALLBACK_ACTIVE_METADATA_KEY, loadSoulFile, grantSoulCredential, withSoulFileLock, addNamedCredential, appendCredentialAudit, replaceNamedCredential, NamedCredentialMissingError, namedCredentialSource, NamedCredentialExistsError, CREDENTIAL_NAME_PATTERN, quoteShellArg, migrateLegacyMemory, PROVIDER_STATE_METADATA_KEYS, ConfigFileError, loadConfigFile, resolveConfigLocation, resolveConfiguredSoul, resolveRuntimeConfig, runsOnHarness, applySoulPins, assertStateCompatible, stratusHomePath, intakeStatePath, fleetDbIn, createAgentWorkspaces, createPluginStateDirectories, createHostProtectedPaths, foldedAgentId, syncDirectory, writeFileSynced, } from '@stratusagent/state';
 const DEFAULT_IDLE_TIMEOUT_MS = 120_000;
 /**
  * How long a parked call waits for a person. Long enough to survive a
@@ -393,6 +397,27 @@ export const createGateway = (options = {}) => {
     // The same database sessions live in — one file to back up — through the
     // schedule store's own connection (see its docs for why).
     const scheduleStore = new SqliteScheduleStore(fleetDbIn(stateDir), { stateHome: stateDir });
+    // ---- events (card 590) ---------------------------------------------------
+    // Opened only for a daemon with sources, so one that never takes events
+    // never grows the tables. Its own connection to fleet.db, like schedules'.
+    const eventSources = options.events?.sources ?? {};
+    const eventStore = Object.keys(eventSources).length > 0
+        ? new SqliteEventStore(fleetDbIn(stateDir), { stateHome: stateDir })
+        : undefined;
+    const eventIntake = eventStore
+        ? createEventIntake({
+            store: eventStore,
+            sources: () => eventSources,
+            // The daemon's own credential, read per delivery: a stored or
+            // rotated secret works on the next one, with no restart.
+            secret: (name) => resolveDaemonCredential(env, name),
+            // The triggers are schedules: `schedule.on` rows on this source.
+            // Late-bound, because the scheduler is built further down.
+            triggers: (sourceId) => scheduler.eventTriggers(sourceId),
+            ...(options.events?.maxBodyBytes !== undefined ? { maxBodyBytes: options.events.maxBodyBytes } : {}),
+            warn,
+        })
+        : undefined;
     /**
      * The started adapter of one kind that speaks for an agent and has the
      * capability asked for. `carriesOthers` says there were capable adapters
@@ -462,6 +487,7 @@ export const createGateway = (options = {}) => {
         // `SchedulerRuntimeOptions.ready`.
         ready: () => assertStateCompatible(env),
         paused: () => intakeState.paused,
+        ...(eventStore ? { events: { store: eventStore, sources: () => Object.keys(eventSources) } } : {}),
         log,
         warn,
     });
@@ -1367,11 +1393,26 @@ export const createGateway = (options = {}) => {
             throw new Error(`${JSON.stringify(request.name)} is not a credential name. Use letters, digits, dots, dashes, or underscores, `
                 + 'starting with a letter, the way the tool that needs it spells it: search.apiKey, github.token.');
         }
+        // The stricter rule, for a name the model picked: checked before anyone
+        // is asked, so an approver never sees a form whose binding the store
+        // would refuse, and so a variable that changes what a judged command
+        // does (NODE_OPTIONS) is never offered at all.
+        if (request.env !== undefined) {
+            const problem = credentialVariableProblem(request.env, { requested: true });
+            if (problem !== undefined) {
+                throw new Error(`${problem} Nothing is pending.`);
+            }
+        }
         // A key already stored is not something to ask a person for again: the
         // form only adds, so it could only fail. Say what is actually missing.
         const source = await namedCredentialSource(env, agentId, request.name);
         const stored = source !== undefined;
         const granted = session.agent.credentials?.includes(request.name) === true;
+        // Binding a key the agent already holds asks for no value, and every
+        // form today has a value field, so phase 1 leaves it to the machine.
+        const bindOnMachine = request.env !== undefined
+            ? ` To have your shell read it as ${request.env}, ask your operator to run \`stratus credential env ${request.name} ${request.env} --agent ${quoteShellArg(agentId)}\` on the machine.`
+            : '';
         if (request.replace === true) {
             // Checked here, before anyone is asked, so an approver is never shown
             // a form whose answer could only be refused.
@@ -1394,13 +1435,18 @@ export const createGateway = (options = {}) => {
             }
         }
         else if (stored && granted) {
-            throw new Error(`You already hold ${request.name}; the tools that need it use it for you. To rotate it for a new value, ask again with replace: true.`);
+            throw new Error(`You already hold ${request.name}; the tools that need it use it for you. To rotate it for a new value, ask again with replace: true.${bindOnMachine}`
+                + (request.env !== undefined ? ' Nothing is pending.' : ''));
         }
         else if (stored) {
             throw new Error(`${request.name} is already ${source === 'environment' ? "supplied by the daemon's environment" : 'stored'} but not granted to you. `
-                + 'Ask your operator to add it to the credentials list in your soul; a form would only refuse to store it again.');
+                + `Ask your operator to add it to the credentials list in your soul; a form would only refuse to store it again.${bindOnMachine}`);
         }
-        const onMachine = `\`stratus credential set ${request.name}${request.scope === 'agent' ? ` --agent ${quoteShellArg(agentId)}` : ''}\``;
+        const onMachine = request.env === undefined
+            ? `\`stratus credential set ${request.name}${request.scope === 'agent' ? ` --agent ${quoteShellArg(agentId)}` : ''}\``
+            : request.scope === 'agent'
+                ? `\`stratus credential set ${request.name} --agent ${quoteShellArg(agentId)} --env ${request.env}\``
+                : `\`stratus credential set ${request.name}\`, then \`stratus credential env ${request.name} ${request.env} --agent ${quoteShellArg(agentId)}\``;
         const record = {
             agentId,
             sessionId: session.id,
@@ -1408,6 +1454,7 @@ export const createGateway = (options = {}) => {
             scope: request.scope,
             soulPath,
             ...(request.replace === true ? { replace: true } : {}),
+            ...(request.env !== undefined ? { env: request.env } : {}),
         };
         const announce = async (requestId, via) => {
             await bus.emit({
@@ -1420,6 +1467,7 @@ export const createGateway = (options = {}) => {
                 ...(request.reason !== undefined ? { reason: request.reason } : {}),
                 via,
                 ...(request.replace === true ? { replace: true } : {}),
+                ...(request.env !== undefined ? { env: request.env } : {}),
                 ...(session.metadata ? { metadata: session.metadata } : {}),
             });
         };
@@ -1440,11 +1488,14 @@ export const createGateway = (options = {}) => {
             const kind = session.metadata?.channel;
             const { adapter } = typeof kind === 'string'
                 ? channelCarrying(kind, agentId, (candidate) => candidate.requestCredential !== undefined
-                    && (request.replace !== true || candidate.credentialReplaceForms === true))
+                    && (request.replace !== true || candidate.credentialReplaceForms === true)
+                    // A form that can't say the key will be shell-readable must not
+                    // be the approval for it: a link says it instead.
+                    && (request.env === undefined || candidate.credentialEnvForms === true))
                 : { adapter: undefined };
             if (!adapter?.requestCredential || !session.metadata) {
                 formUnavailable = typeof kind === 'string'
-                    ? `This conversation's channel (${kind}) cannot show your operator a ${request.replace === true ? 'replacement' : 'credential'} form here.`
+                    ? `This conversation's channel (${kind}) cannot show your operator a ${request.replace === true ? 'replacement' : 'credential'} form here${request.env !== undefined ? ' that says which variable your shell will read it from' : ''}.`
                     : 'This conversation is not in a channel that can show your operator a form.';
             }
             else {
@@ -1463,6 +1514,7 @@ export const createGateway = (options = {}) => {
                         scope: request.scope,
                         ...(request.reason !== undefined ? { reason: request.reason } : {}),
                         ...(request.replace === true ? { replace: true } : {}),
+                        ...(request.env !== undefined ? { env: request.env } : {}),
                         metadata: session.metadata,
                     });
                     await announce(requestId, 'form');
@@ -1504,6 +1556,7 @@ export const createGateway = (options = {}) => {
                 name: request.name,
                 scope: request.scope,
                 ...(request.reason !== undefined ? { reason: request.reason } : {}),
+                ...(request.env !== undefined ? { env: request.env } : {}),
             });
         }
         catch (error) {
@@ -1558,6 +1611,7 @@ export const createGateway = (options = {}) => {
                 ...(actor !== undefined ? { actor } : {}),
                 via: request.via ?? 'form',
                 requestedBy: request.agentId,
+                ...(request.env !== undefined ? { env: request.env, bindingFor: request.agentId } : {}),
             });
         }
         catch (error) {
@@ -1600,7 +1654,12 @@ export const createGateway = (options = {}) => {
                 message: `${request.soulPath} now belongs to ${owner}, not ${request.agentId}, so nothing was stored. Ask ${request.agentId} to request it again.`,
             };
         }
-        const store = request.scope === 'agent' ? { agentId: request.agentId } : {};
+        const store = {
+            ...(request.scope === 'agent' ? { agentId: request.agentId } : {}),
+            // The binding the form promised, written with the value, always for
+            // the agent that asked: consent is per agent even for a shared key.
+            ...(request.env !== undefined ? { bind: { agentId: request.agentId, variable: request.env } } : {}),
+        };
         if (request.replace === true) {
             // Re-read under the soul lock, so a grant removed while the form
             // waited (a shared key most of all) is never rotated on its behalf.
@@ -1641,6 +1700,7 @@ export const createGateway = (options = {}) => {
                 name: request.name,
                 scope: request.scope,
                 replace: true,
+                ...(request.env !== undefined ? { env: request.env } : {}),
                 ...(input.actor !== undefined ? { actor: input.actor } : {}),
             });
             // The soul already lists it: a replace is only asked for a key held.
@@ -1699,6 +1759,7 @@ export const createGateway = (options = {}) => {
             requestId: input.requestId,
             name: request.name,
             scope: request.scope,
+            ...(request.env !== undefined ? { env: request.env } : {}),
             ...(input.actor !== undefined ? { actor: input.actor } : {}),
             ...(grantError !== undefined ? { grantError } : {}),
         });
@@ -2092,7 +2153,7 @@ export const createGateway = (options = {}) => {
             const idle = new AbortController();
             trackTurn(sessionId, idle);
             if (abortingWith !== undefined) {
-                idle.abort(new RunAbortedError(abortingWith));
+                idle.abort(shutdownAbort());
             }
             try {
                 return await run(idle.signal);
@@ -2104,7 +2165,7 @@ export const createGateway = (options = {}) => {
         const controller = new AbortController();
         trackTurn(sessionId, controller);
         if (abortingWith !== undefined) {
-            controller.abort(new RunAbortedError(abortingWith));
+            controller.abort(shutdownAbort());
         }
         // The external reason travels: a caller that aborted with its own
         // `RunAbortedError` gets it recorded on the session, like the watchdog's.
@@ -2348,6 +2409,22 @@ export const createGateway = (options = {}) => {
     const refusal = () => restartStatus
         ? new GatewayStoppingError('stratusd is restarting and will accept new work once it is back up.', true)
         : new GatewayStoppingError('The gateway is stopping and no longer accepts new work.', false);
+    /**
+     * What the caller of a keyed turn the shutdown cut short hears: the same
+     * refusal, since its message is no more answered than one refused at the
+     * door (a channel keeps it for the next start, as it keeps those), and
+     * worded for a turn that ran and will be continued.
+     */
+    const leftForNext = () => restartStatus
+        ? new GatewayStoppingError('stratusd is restarting; this turn was cut short and continues once it is back up.', true)
+        : new GatewayStoppingError('stratusd is stopping; this turn was cut short and continues when it is started again.', false);
+    /**
+     * The abort a stop's or restart's window ends a turn with. Resumable: a
+     * keyed turn is left for the next start to continue once, as a crash
+     * leaves it, rather than failed (`RunAbortedError.resumable`); every
+     * other turn is failed with the reason, as before.
+     */
+    const shutdownAbort = () => new RunAbortedError(abortingWith, { resumable: true });
     /**
      * The turn id running on each session, for callers that named one.
      *
@@ -2478,6 +2555,27 @@ export const createGateway = (options = {}) => {
             ? runsOnHarness(fallback)
             : runsOnHarness(config) || (fallback !== undefined && runsOnHarness(fallback));
     };
+    /**
+     * A keyed turn the shutdown cut short and the runner left for the next
+     * start (`leftForNextStart`): its caller is told so, the way a message
+     * refused at the door is, and keeps it for the next daemon, which
+     * continues the turn. Read back on the chain, so it is this dispatch's
+     * own message the session is still running on.
+     */
+    const settleLeftForNextStart = async (input, turn) => {
+        try {
+            return await turn;
+        }
+        catch (error) {
+            if (input.idempotencyKey !== undefined && error instanceof RunAbortedError && error.resumable) {
+                const left = await store.get(input.sessionId).catch(() => undefined);
+                if (left !== undefined && workItemState(left, input.idempotencyKey) === 'unfinished' && leftForNextStart(left, error)) {
+                    throw leftForNext();
+                }
+            }
+            throw error;
+        }
+    };
     /**
      * `subAgent` is the narrowed definition `subAgents.run` built: the turn
      * runs as that, on the parent's resolved provider, with no memory and no
@@ -2546,7 +2644,7 @@ export const createGateway = (options = {}) => {
         // has switched for good, the primary is never called again, and only
         // the fallback counts.
         const hostedLoop = input.idempotencyKey !== undefined && reachesHarness(config, switchedToFallback);
-        return withWatchdog(input.sessionId, input.signal, effectiveStreams, fallbackStreams, async (signal) => {
+        return settleLeftForNextStart(input, withWatchdog(input.sessionId, input.signal, effectiveStreams, fallbackStreams, async (signal) => {
             // The preflight above (agent refresh, config resolution, session
             // load) awaited filesystem work; the entry check has long passed.
             // Recheck before the runner touches durable state, or a dispatch
@@ -2625,7 +2723,7 @@ export const createGateway = (options = {}) => {
                 runtime: runtimeContextFor(source, config, switchedToFallback, input.metadata, subAgent !== undefined),
                 signal,
             });
-        });
+        }));
     };
     /**
      * Finishes the turns that were parked on a human when this daemon last
@@ -2792,7 +2890,7 @@ export const createGateway = (options = {}) => {
             if (record) {
                 trackTurn(sessionId, controller);
                 if (abortingWith !== undefined) {
-                    controller.abort(new RunAbortedError(abortingWith));
+                    controller.abort(shutdownAbort());
                 }
             }
             try {
@@ -3156,7 +3254,21 @@ export const createGateway = (options = {}) => {
         if (stopping) {
             throw refusal();
         }
-        return onSessionChain(input.sessionId, () => dispatchInternal(input));
+        return onSessionChain(input.sessionId, async () => {
+            // A keyed firing (an event trigger's batch) that the session already
+            // holds is that turn, not a new one: a daemon that died after the
+            // turn and before the firing was recorded re-sends it at the next
+            // start, and must answer with the finished turn (or settle the
+            // unfinished one, as the start-up sweep would) instead of running the
+            // event again. The same check the public door makes, on the chain.
+            if (input.idempotencyKey !== undefined) {
+                const repeated = await settleRepeat(input.sessionId, input.idempotencyKey, input.agentId, input.turnId, input.onRepeat);
+                if (repeated !== undefined) {
+                    return repeated;
+                }
+            }
+            return dispatchInternal(input);
+        });
     };
     const dispatch = async (input) => {
         if (stopping) {
@@ -3948,6 +4060,7 @@ export const createGateway = (options = {}) => {
         }
         storesClosed = true;
         scheduleStore.close();
+        eventStore?.close();
         store.close();
     };
     /**
@@ -4085,12 +4198,15 @@ export const createGateway = (options = {}) => {
             // The watchdog's own mechanism: the runner fails each session with
             // the reason on the signal, saves it, and emits session.failed —
             // so the next daemon finds a finished turn, not an abandoned one.
+            // Except a keyed turn, which the resumable abort leaves running for
+            // the next daemon to continue once, as a crash would have left it
+            // (`shutdownAbort`); its caller is refused (`leftForNext`).
             // Before the loop, so a turn queued behind one aborted here, which
             // starts as soon as that one settles, is aborted the same way.
             abortingWith = kind === 'stop' ? STOPPING_TURN_ERROR : RESTARTING_TURN_ERROR;
             for (const running of turnControllers.values()) {
                 for (const controller of running) {
-                    controller.abort(new RunAbortedError(abortingWith));
+                    controller.abort(shutdownAbort());
                 }
             }
             drained = await settlesWithin(drain, remaining());
@@ -4425,6 +4541,29 @@ export const createGateway = (options = {}) => {
         cancelSchedule(scheduleId) {
             return scheduler.cancel(scheduleId);
         },
+        async receiveEvent(request) {
+            if (!eventIntake) {
+                return { status: 404, body: { error: 'unknown_source', message: 'No event source is configured at this path.' } };
+            }
+            const answer = await eventIntake.receive(request);
+            // The delivery and its firings are committed; send them now rather
+            // than at the next tick. The scheduler decides hold or fire, and does
+            // nothing while it is stopped or not yet started.
+            if (answer.body.status === 'matched') {
+                scheduler.kickEvents();
+            }
+            return answer;
+        },
+        eventSummary() {
+            const since = new Date(Date.now() - 86_400_000).toISOString();
+            if (!eventStore || !eventIntake) {
+                return { since, sources: {}, unknownSource: 0 };
+            }
+            return summarizeEvents({ sourceIds: Object.keys(eventSources), since, activity: eventStore.activity(since), counters: eventIntake.counters() });
+        },
+        eventDeliveries(options = {}) {
+            return eventStore?.deliveries(options) ?? [];
+        },
         tools() {
             // From the registry, not from the load records: the risk reported is
             // the one a call will actually be judged at, floor applied, and a