agent-relay-server 0.88.2 → 0.89.0

package/src/services/send-message.ts

@@ -53,6 +53,24 @@ interface SendMessageOptions {
   integration?: IntegrationTokenConfig | null;
 }
 
+export function validateSendMessageAuthorization(
+  input: SendMessageInput,
+  ctx: AuthContext,
+  opts: SendMessageOptions = {},
+): DeliveryReceipt {
+  applyReplyRouting(input);
+  if (!input.to) throw new ValidationError("to is required (or provide replyTo to auto-route)");
+  // De-singletoned human addressing (#393): collapse a human address to its stored/canonical
+  // form so `user:default` is a fully WORKING alias of the legacy bare `'user'` sink.
+  if (isHumanAgentId(input.to)) input.to = canonicalHumanAgentId(input.to);
+  if (input.from && isHumanAgentId(input.from)) input.from = canonicalHumanAgentId(input.from);
+  const reservedSink = isMechanicalMessageKind(input.kind) && isReservedAgentId(input.to);
+  input.from = resolveFrom(input, ctx, reservedSink);
+  const receipt = resolveSendTarget(input, input.from);
+  authorizeSend(input, ctx, opts, reservedSink);
+  return receipt;
+}
+
 /** `from` resolves from the token identity: `callerAgentId` (the resolved agent behind the
  * token) cannot be spoofed and WINS over any wire `from`. The wire value is a fallback only
  * for identity-less tokens (admin/server/integration/multi-agent).
@@ -157,22 +175,7 @@ export function sendMessageService(
   ctx: AuthContext,
   opts: SendMessageOptions = {},
 ): SendMessageResult {
-  applyReplyRouting(input);
-  if (!input.to) throw new ValidationError("to is required (or provide replyTo to auto-route)");
-  // De-singletoned human addressing (#393): collapse a human address to its stored/canonical
-  // form so `user:default` is a fully WORKING alias of the legacy bare `'user'` sink — it routes
-  // to the same agent row + inbox + thread, with zero live-byte movement. Per-user `user:<id>`
-  // addresses pass through unchanged for the later #388 waves; non-human ids are untouched.
-  if (isHumanAgentId(input.to)) input.to = canonicalHumanAgentId(input.to);
-  if (input.from && isHumanAgentId(input.from)) input.from = canonicalHumanAgentId(input.from);
-  // The reserved-sink observability lane (#284) governs both `from` resolution (wire `from` is
-  // authoritative — the runner reports an agent's turn) and authorization (drop the recipient
-  // predicate). Compute once, after reply-routing has settled `to`.
-  const reservedSink = isMechanicalMessageKind(input.kind) && isReservedAgentId(input.to);
-  input.from = resolveFrom(input, ctx, reservedSink);
-  // Resolve BEFORE authorize so both run against the canonical id (kills the HTTP-authorizes-raw
-  // vs MCP-authorizes-resolved drift).
-  const receipt = resolveSendTarget(input, input.from);
+  const receipt = validateSendMessageAuthorization(input, ctx, opts);
   // Reply-obligation linking: some real answers are ordinary sends without replyTo/thread linkage.
   // Channel bridge replies and spawn report-backs both have a single unambiguous open obligation case;
   // link those at send time so the obligation clears with one message and the Stop hook does not nag
@@ -182,8 +185,6 @@ export function sendMessageService(
       ?? spawnObligationAnsweredBy(input.from, input.to);
     if (answered !== null) input.replyTo = answered;
   }
-  authorizeSend(input, ctx, opts, reservedSink);
-
   const result = sendMessageWithResult(input);
   if (result.created) {
     if (result.message.deliveryStatus === "queued") {

package/src/services/transient-agent-reaper.ts

@@ -137,7 +137,7 @@ export function reapTransientAgents(): Record<string, unknown> {
     emitRelayEvent({ type: "agent.exited", source: "server", subject: agent.id, data: { agentId: agent.id, parent: agent.spawnedBy, reason: "transient-complete", workspaceId: land.workspaceId, workspaceStatus: land.status } });
     // #645 — persist a clean terminal marker so the #634 heartbeat-gap watchdog reads this benign
     // completion as a terminus (not a silent death) once the reaped worker stops heartbeating.
-    recordTerminalEvent({ agentId: agent.id, reason: "transient-complete", kind: "agent.exited", createdAt: now });
+    recordTerminalEvent({ agentId: agent.id, reason: "transient-complete", kind: "agent.exited", epoch: agent.epoch, createdAt: now });
     createActivityEvent({
       clientId: `transient-agent-reaped-${agent.id}-${now}`,
       kind: "state",

package/src/team-idle-tracker.ts

@@ -20,6 +20,9 @@ export interface TeamMemberWatch {
   lastActiveAt: number;
   /** Whether the member's CURRENT silence has already pinged the coordinator (re-armed on recovery). */
   pinged: boolean;
+  /** Agent epoch at the time the member was last observed alive. Used to epoch-scope the terminal-event
+   *  suppression check (#652): a stale event from an older epoch must not suppress a current-epoch alert. */
+  epoch: number;
   /** Member label for a readable ping. */
   label?: string;
 }
@@ -39,6 +42,9 @@ export interface TeamCoordinatorWatch {
   lastActiveAt: number;
   /** Whether the coordinator's CURRENT gone-spell already escalated (re-armed when it recovers). */
   escalated: boolean;
+  /** Agent epoch at the time the coordinator was last observed alive. Used to epoch-scope the terminal-event
+   *  suppression check (#652): a stale event from an older epoch must not suppress a current-epoch alert. */
+  epoch: number;
   /** Coordinator label for a readable escalation. */
   label?: string;
 }

package/src/token-db.ts

@@ -78,7 +78,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Agent",
     description: "Coding-agent runtime access for messages, commands, tasks, and scoped memory reads.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "plans:read", "plans:write", "teams:read", "teams:write", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "schedule:write", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "plans:read", "plans:write", "teams:read", "teams:write", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
     ttlSeconds: 24 * 60 * 60,
     builtIn: true,
     createdBy: "system",
@@ -88,7 +88,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Child Agent",
     description: "Delegated child-agent runtime access, constrained to its parent and spawn request.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "teams:read", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "schedule:write", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "teams:read", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
     constraints: { canDelegate: false },
     ttlSeconds: 2 * 60 * 60,
     builtIn: true,
@@ -99,7 +99,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "Provider Interactive Agent",
     description: "User-launched provider runtime access constrained to its own agent and cwd for long interactive sessions.",
     role: "provider",
-    scope: ["agent:read", "agent:write", "message:read", "message:send", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "teams:read", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
+    scope: ["agent:read", "agent:write", "message:read", "message:send", "schedule:write", "command:read", "command:write", "task:read", "task:write", "memory:read", "artifact:read", "artifact:write", "mcp:use", "teams:read", "blackboard:read", "blackboard:write", "project:read", "project:write", "issue:read", "issue:write", "notifications:read", "notifications:write", "insights:write", "quota:write"],
     constraints: { terminalAttach: false, logsRead: false, canDelegate: false },
     ttlSeconds: 30 * 24 * 60 * 60,
     builtIn: true,
@@ -120,7 +120,7 @@ const BUILT_IN_PROFILES: Array<Omit<TokenProfile, "createdAt" | "updatedAt">> =
     name: "MCP Client",
     description: "Tool-client access for Relay MCP calls plus message read/send.",
     role: "mcp",
-    scope: ["mcp:use", "message:read", "message:send"],
+    scope: ["mcp:use", "message:read", "message:send", "schedule:write"],
     ttlSeconds: 7 * 24 * 60 * 60,
     builtIn: true,
     createdBy: "system",
@@ -343,7 +343,7 @@ function ensureBuiltInTokenProfiles(): void {
 }
 
 function defaultScopes(role: string): string[] {
-  if (role === "provider") return ["agent:read", "agent:write", "message:send", "message:read", "artifact:read"];
+  if (role === "provider") return ["agent:read", "agent:write", "message:send", "message:read", "schedule:write", "artifact:read"];
   if (role === "channel") return ["agent:read", "agent:write", "message:send", "message:read"];
   if (role === "orchestrator") return ["agent:read", "agent:write", "command:*", "task:read", "task:write"];
   if (role === "admin" || role === "dashboard") return ["admin:*"];