blun-king-cli 9.1.308 → 9.1.309

package/bin/cognitive-attention-policy.cjs

@@ -0,0 +1,143 @@
+'use strict';
+
+const crypto = require('node:crypto');
+
+const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
+const SUBJECT_KINDS = new Set(['human', 'agent', 'task']);
+const SIGNAL_KINDS = new Set(['heartbeat', 'commitment', 'task_blocked']);
+const HEARTBEAT_STALE_MS = 5 * 60 * 1000;
+const BLOCKED_TASK_STALE_MS = 10 * 60 * 1000;
+const MAX_COOLDOWN_MS = 7 * 24 * 60 * 60 * 1000;
+
+function fail() {
+  const error = new Error('ATTENTION_INVALID_INPUT');
+  error.code = 'ATTENTION_INVALID_INPUT';
+  throw error;
+}
+
+function exactKeys(value, keys) {
+  return value && typeof value === 'object' && !Array.isArray(value)
+    && Object.keys(value).every((key) => keys.has(key));
+}
+
+function safeId(value) {
+  const text = String(value ?? '').trim();
+  return SAFE_ID_RE.test(text) ? text : '';
+}
+
+function instant(value) {
+  if (value === null || value === undefined) return null;
+  const milliseconds = Date.parse(String(value));
+  return Number.isFinite(milliseconds) ? milliseconds : null;
+}
+
+function normalizeQuietHours(value) {
+  if (!exactKeys(value, new Set(['startHour', 'endHour']))) fail();
+  const startHour = Number(value.startHour);
+  const endHour = Number(value.endHour);
+  if (!Number.isInteger(startHour) || startHour < 0 || startHour > 23
+      || !Number.isInteger(endHour) || endHour < 0 || endHour > 23
+      || startHour === endHour) fail();
+  return { startHour, endHour };
+}
+
+function isQuietTime(nowMs, offsetMinutes, quietHours) {
+  const localHour = new Date(nowMs + offsetMinutes * 60 * 1000).getUTCHours();
+  return quietHours.startHour < quietHours.endHour
+    ? localHour >= quietHours.startHour && localHour < quietHours.endHour
+    : localHour >= quietHours.startHour || localHour < quietHours.endHour;
+}
+
+function signalReason(subjectKind, signal, nowMs) {
+  if (!exactKeys(signal, new Set([
+    'kind', 'heartbeatAt', 'activeTask', 'expectedBy', 'blockedSince',
+    'evidenceId', 'evidenceScope', 'confidence',
+  ]))) fail();
+  if (!SIGNAL_KINDS.has(signal.kind)) fail();
+  const evidenceId = safeId(signal.evidenceId);
+  const evidenceScope = safeId(signal.evidenceScope);
+  const confidence = Number(signal.confidence);
+  if (!evidenceId || !evidenceScope || !Number.isFinite(confidence)
+      || confidence < 0 || confidence > 1) fail();
+  if (confidence < 0.5) return null;
+
+  if (signal.kind === 'heartbeat') {
+    if (!exactKeys(signal, new Set(['kind', 'heartbeatAt', 'activeTask', 'evidenceId', 'evidenceScope', 'confidence']))
+        || subjectKind !== 'agent' || signal.activeTask !== true) return null;
+    const heartbeatAt = instant(signal.heartbeatAt);
+    if (heartbeatAt === null || heartbeatAt > nowMs) fail();
+    return nowMs - heartbeatAt >= HEARTBEAT_STALE_MS
+      ? { reason: 'missing_heartbeat', anchor: new Date(heartbeatAt).toISOString(), evidenceId, evidenceScope, confidence }
+      : null;
+  }
+  if (signal.kind === 'commitment') {
+    if (!exactKeys(signal, new Set(['kind', 'expectedBy', 'evidenceId', 'evidenceScope', 'confidence']))) fail();
+    const expectedBy = instant(signal.expectedBy);
+    if (expectedBy === null) fail();
+    return nowMs > expectedBy
+      ? { reason: 'overdue_commitment', anchor: new Date(expectedBy).toISOString(), evidenceId, evidenceScope, confidence }
+      : null;
+  }
+  if (!exactKeys(signal, new Set(['kind', 'blockedSince', 'evidenceId', 'evidenceScope', 'confidence'])) || subjectKind !== 'task') return null;
+  const blockedSince = instant(signal.blockedSince);
+  if (blockedSince === null || blockedSince > nowMs) fail();
+  return nowMs - blockedSince >= BLOCKED_TASK_STALE_MS
+    ? { reason: 'blocked_task', anchor: new Date(blockedSince).toISOString(), evidenceId, evidenceScope, confidence }
+    : null;
+}
+
+function buildAttentionCandidate(input) {
+  const allowed = new Set([
+    'tenantId', 'subjectKind', 'subjectId', 'responsibleAgent', 'currentAgent', 'now', 'signal',
+    'absenceUntil', 'timezoneOffsetMinutes', 'quietHours', 'cooldownMs', 'allowedChannel',
+  ]);
+  if (!exactKeys(input, allowed)) fail();
+  const tenantId = safeId(input.tenantId);
+  const subjectKind = String(input.subjectKind ?? '');
+  const subjectId = safeId(input.subjectId);
+  const responsibleAgent = safeId(input.responsibleAgent);
+  const currentAgent = safeId(input.currentAgent);
+  const allowedChannel = safeId(input.allowedChannel);
+  const nowMs = instant(input.now);
+  const offsetMinutes = Number(input.timezoneOffsetMinutes);
+  const cooldownMs = Number(input.cooldownMs);
+  if (!tenantId || !SUBJECT_KINDS.has(subjectKind) || !subjectId || !responsibleAgent
+      || !currentAgent || !allowedChannel || nowMs === null
+      || !Number.isInteger(offsetMinutes) || offsetMinutes < -840 || offsetMinutes > 840
+      || !Number.isSafeInteger(cooldownMs) || cooldownMs < 1000 || cooldownMs > MAX_COOLDOWN_MS) fail();
+  if (currentAgent !== responsibleAgent) return null;
+
+  const absenceUntil = instant(input.absenceUntil);
+  if (input.absenceUntil !== null && absenceUntil === null) fail();
+  if (absenceUntil !== null && absenceUntil > nowMs) return null;
+  const quietHours = normalizeQuietHours(input.quietHours);
+  if (isQuietTime(nowMs, offsetMinutes, quietHours)) return null;
+
+  const reason = signalReason(subjectKind, input.signal, nowMs);
+  if (reason === null) return null;
+  const digest = crypto.createHash('sha256')
+    .update([tenantId, subjectKind, subjectId, reason.reason, reason.evidenceId].join('\0'))
+    .digest('hex')
+    .slice(0, 40);
+  return {
+    candidate_id: `attention-${digest}`,
+    subject_kind: subjectKind,
+    subject_id: subjectId,
+    reason: reason.reason,
+    evidence_id: reason.evidenceId,
+    evidence_scope: reason.evidenceScope,
+    evidence_at: reason.anchor,
+    confidence: reason.confidence,
+    responsible_agent: responsibleAgent,
+    allowed_channel: allowedChannel,
+    detected_at: new Date(nowMs).toISOString(),
+    cooldown_ms: cooldownMs,
+    requires_runtime_authorization: true,
+  };
+}
+
+module.exports = {
+  BLOCKED_TASK_STALE_MS,
+  HEARTBEAT_STALE_MS,
+  buildAttentionCandidate,
+};

package/bin/cognitive-state-store.cjs

@@ -147,6 +147,14 @@ function initialize(db) {
     );
     CREATE INDEX IF NOT EXISTS cognitive_observations_stream
       ON cognitive_observations (tenant_id, agent_id, occurred_at, observation_id);
+    CREATE TABLE IF NOT EXISTS cognitive_attention_claims (
+      tenant_id TEXT NOT NULL,
+      candidate_id TEXT NOT NULL,
+      claimed_by TEXT NOT NULL,
+      claimed_at TEXT NOT NULL,
+      next_allowed_at TEXT NOT NULL,
+      PRIMARY KEY (tenant_id, candidate_id)
+    );
   `);
 }
 
@@ -235,10 +243,57 @@ function openCognitiveStateStore({ home } = {}) {
     return { valid: true, events: rows.length, head_hash: previousHash };
   }
 
+  function claimAttention(input) {
+    const allowedInput = new Set(['tenantId', 'candidate', 'claimedBy', 'claimedAt']);
+    const allowedCandidate = new Set([
+      'candidate_id', 'subject_kind', 'subject_id', 'reason', 'responsible_agent',
+      'evidence_id', 'evidence_scope', 'evidence_at', 'confidence', 'allowed_channel',
+      'detected_at', 'cooldown_ms', 'requires_runtime_authorization',
+    ]);
+    if (!exactKeys(input, allowedInput) || !exactKeys(input.candidate, allowedCandidate)
+        || hasForbiddenKey(input)) fail('COGNITIVE_FORBIDDEN_FIELD');
+    const tenant = safeId(input.tenantId);
+    const candidateId = safeId(input.candidate.candidate_id);
+    const claimedBy = safeId(input.claimedBy);
+    const claimedAtMs = Date.parse(String(input.claimedAt ?? ''));
+    const cooldownMs = Number(input.candidate.cooldown_ms);
+    if (!tenant || !candidateId || !claimedBy || !Number.isFinite(claimedAtMs)
+        || !Number.isSafeInteger(cooldownMs) || cooldownMs < 1000
+        || input.candidate.requires_runtime_authorization !== true) fail('COGNITIVE_INVALID_EVENT');
+    const claimedAt = new Date(claimedAtMs).toISOString();
+    const nextAllowedAt = new Date(claimedAtMs + cooldownMs).toISOString();
+    db.exec('BEGIN IMMEDIATE');
+    try {
+      const existing = db.prepare(`SELECT claimed_by, next_allowed_at FROM cognitive_attention_claims
+        WHERE tenant_id = ? AND candidate_id = ?`).get(tenant, candidateId);
+      if (existing && Date.parse(existing.next_allowed_at) > claimedAtMs) {
+        db.exec('COMMIT');
+        return {
+          claimed: false,
+          claimed_by: existing.claimed_by,
+          next_allowed_at: existing.next_allowed_at,
+        };
+      }
+      db.prepare(`INSERT INTO cognitive_attention_claims
+        (tenant_id, candidate_id, claimed_by, claimed_at, next_allowed_at) VALUES (?, ?, ?, ?, ?)
+        ON CONFLICT(tenant_id, candidate_id) DO UPDATE SET
+          claimed_by = excluded.claimed_by,
+          claimed_at = excluded.claimed_at,
+          next_allowed_at = excluded.next_allowed_at`)
+        .run(tenant, candidateId, claimedBy, claimedAt, nextAllowedAt);
+      db.exec('COMMIT');
+      return { claimed: true, claimed_by: claimedBy, next_allowed_at: nextAllowedAt };
+    } catch (error) {
+      try { db.exec('ROLLBACK'); } catch {}
+      throw error;
+    }
+  }
+
   return {
     commit,
     read,
     verify,
+    claimAttention,
     close: () => {
       try { db.exec('PRAGMA wal_checkpoint(TRUNCATE)'); } catch {}
       db.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.308",
+  "version": "9.1.309",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {