comisai 1.0.14 → 1.0.15

package/node_modules/@comis/core/dist/config/schema-agent.d.ts

@@ -550,9 +550,9 @@ export declare const BootstrapConfigSchema: z.ZodObject<{
     maxChars: z.ZodDefault<z.ZodNumber>;
     /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
     promptMode: z.ZodDefault<z.ZodEnum<{
-        minimal: "minimal";
-        full: "full";
         none: "none";
+        full: "full";
+        minimal: "minimal";
     }>>;
     /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
     groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -822,9 +822,9 @@ export declare const AgentConfigSchema: z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            minimal: "minimal";
-            full: "full";
             none: "none";
+            full: "full";
+            minimal: "minimal";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -987,6 +987,17 @@ export declare const PerAgentHeartbeatConfigSchema: z.ZodObject<{
     alertCooldownMs: z.ZodOptional<z.ZodNumber>;
     /** Override stuck detection timeout in ms (per-agent) */
     staleMs: z.ZodOptional<z.ZodNumber>;
+    /** Per-agent heartbeat tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: heartbeat.toolPolicy > agentConfig.toolPolicy > passthrough.
+     *  Opt-in: omitting this field preserves the agent's interactive tool set for
+     *  heartbeat ticks. Use `{ profile: "heartbeat-minimal" }` for the conservative
+     *  preset in `packages/skills/src/policy/tool-policy.ts`. */
+    toolPolicy: z.ZodOptional<z.ZodObject<{
+        profile: z.ZodDefault<z.ZodString>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
 }, z.core.$strict>;
 export type HeartbeatTarget = z.infer<typeof HeartbeatTargetSchema>;
 export type PerAgentHeartbeatConfig = z.infer<typeof PerAgentHeartbeatConfigSchema>;
@@ -1046,6 +1057,17 @@ export declare const PerAgentSchedulerConfigSchema: z.ZodObject<{
         alertCooldownMs: z.ZodOptional<z.ZodNumber>;
         /** Override stuck detection timeout in ms (per-agent) */
         staleMs: z.ZodOptional<z.ZodNumber>;
+        /** Per-agent heartbeat tool policy override -- matches AgentConfig.toolPolicy shape.
+         *
+         *  Resolution order: heartbeat.toolPolicy > agentConfig.toolPolicy > passthrough.
+         *  Opt-in: omitting this field preserves the agent's interactive tool set for
+         *  heartbeat ticks. Use `{ profile: "heartbeat-minimal" }` for the conservative
+         *  preset in `packages/skills/src/policy/tool-policy.ts`. */
+        toolPolicy: z.ZodOptional<z.ZodObject<{
+            profile: z.ZodDefault<z.ZodString>;
+            allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 /** Per-agent configuration: extends AgentConfigSchema with skills, scheduler, session, concurrency. */
@@ -1150,9 +1172,9 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            minimal: "minimal";
-            full: "full";
             none: "none";
+            full: "full";
+            minimal: "minimal";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -1259,11 +1281,11 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         }, z.core.$strict>>;
         toolPolicy: z.ZodDefault<z.ZodObject<{
             profile: z.ZodDefault<z.ZodEnum<{
+                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
-                full: "full";
             }>>;
             allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
             deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -1351,6 +1373,17 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
             alertCooldownMs: z.ZodOptional<z.ZodNumber>;
             /** Override stuck detection timeout in ms (per-agent) */
             staleMs: z.ZodOptional<z.ZodNumber>;
+            /** Per-agent heartbeat tool policy override -- matches AgentConfig.toolPolicy shape.
+             *
+             *  Resolution order: heartbeat.toolPolicy > agentConfig.toolPolicy > passthrough.
+             *  Opt-in: omitting this field preserves the agent's interactive tool set for
+             *  heartbeat ticks. Use `{ profile: "heartbeat-minimal" }` for the conservative
+             *  preset in `packages/skills/src/policy/tool-policy.ts`. */
+            toolPolicy: z.ZodOptional<z.ZodObject<{
+                profile: z.ZodDefault<z.ZodString>;
+                allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     session: z.ZodOptional<z.ZodObject<{
@@ -1810,9 +1843,9 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            minimal: "minimal";
-            full: "full";
             none: "none";
+            full: "full";
+            minimal: "minimal";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -1919,11 +1952,11 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         }, z.core.$strict>>;
         toolPolicy: z.ZodDefault<z.ZodObject<{
             profile: z.ZodDefault<z.ZodEnum<{
+                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
-                full: "full";
             }>>;
             allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
             deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -2011,6 +2044,17 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
             alertCooldownMs: z.ZodOptional<z.ZodNumber>;
             /** Override stuck detection timeout in ms (per-agent) */
             staleMs: z.ZodOptional<z.ZodNumber>;
+            /** Per-agent heartbeat tool policy override -- matches AgentConfig.toolPolicy shape.
+             *
+             *  Resolution order: heartbeat.toolPolicy > agentConfig.toolPolicy > passthrough.
+             *  Opt-in: omitting this field preserves the agent's interactive tool set for
+             *  heartbeat ticks. Use `{ profile: "heartbeat-minimal" }` for the conservative
+             *  preset in `packages/skills/src/policy/tool-policy.ts`. */
+            toolPolicy: z.ZodOptional<z.ZodObject<{
+                profile: z.ZodDefault<z.ZodString>;
+                allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     session: z.ZodOptional<z.ZodObject<{

package/node_modules/@comis/core/dist/config/schema-agent.js

@@ -674,6 +674,17 @@ export const PerAgentHeartbeatConfigSchema = z.strictObject({
     alertCooldownMs: z.number().int().positive().optional(),
     /** Override stuck detection timeout in ms (per-agent) */
     staleMs: z.number().int().positive().optional(),
+    /** Per-agent heartbeat tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: heartbeat.toolPolicy > agentConfig.toolPolicy > passthrough.
+     *  Opt-in: omitting this field preserves the agent's interactive tool set for
+     *  heartbeat ticks. Use `{ profile: "heartbeat-minimal" }` for the conservative
+     *  preset in `packages/skills/src/policy/tool-policy.ts`. */
+    toolPolicy: z.object({
+        profile: z.string().default("full"),
+        allow: z.array(z.string()).default([]),
+        deny: z.array(z.string()).default([]),
+    }).optional(),
 });
 /** Per-agent scheduler configuration (wraps cron and heartbeat settings). */
 export const PerAgentSchedulerConfigSchema = z.strictObject({

package/node_modules/@comis/core/dist/config/schema.d.ts

@@ -105,9 +105,9 @@ export declare const AppConfigSchema: z.ZodObject<{
         bootstrap: z.ZodDefault<z.ZodObject<{
             maxChars: z.ZodDefault<z.ZodNumber>;
             promptMode: z.ZodDefault<z.ZodEnum<{
-                minimal: "minimal";
-                full: "full";
                 none: "none";
+                full: "full";
+                minimal: "minimal";
             }>>;
             groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strict>>;
@@ -184,11 +184,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             }, z.core.$strict>>;
             toolPolicy: z.ZodDefault<z.ZodObject<{
                 profile: z.ZodDefault<z.ZodEnum<{
+                    full: "full";
                     minimal: "minimal";
                     coding: "coding";
                     messaging: "messaging";
                     supervisor: "supervisor";
-                    full: "full";
                 }>>;
                 allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -250,6 +250,11 @@ export declare const AppConfigSchema: z.ZodObject<{
                 alertThreshold: z.ZodOptional<z.ZodNumber>;
                 alertCooldownMs: z.ZodOptional<z.ZodNumber>;
                 staleMs: z.ZodOptional<z.ZodNumber>;
+                toolPolicy: z.ZodOptional<z.ZodObject<{
+                    profile: z.ZodDefault<z.ZodString>;
+                    allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
         session: z.ZodOptional<z.ZodObject<{
@@ -1105,11 +1110,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             waitTimeoutMs: z.ZodDefault<z.ZodNumber>;
             subAgentMaxSteps: z.ZodDefault<z.ZodNumber>;
             subAgentToolGroups: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
-                full: "full";
             }>>>;
             subAgentMcpTools: z.ZodDefault<z.ZodEnum<{
                 none: "none";
@@ -1572,10 +1577,10 @@ export declare const AppConfigSchema: z.ZodObject<{
     streaming: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         defaultChunkMode: z.ZodDefault<z.ZodEnum<{
-            length: "length";
             paragraph: "paragraph";
             newline: "newline";
             sentence: "sentence";
+            length: "length";
         }>>;
         defaultDeliveryTiming: z.ZodDefault<z.ZodObject<{
             mode: z.ZodDefault<z.ZodEnum<{
@@ -1614,16 +1619,16 @@ export declare const AppConfigSchema: z.ZodObject<{
         defaultUseMarkdownIR: z.ZodDefault<z.ZodBoolean>;
         defaultReplyMode: z.ZodDefault<z.ZodEnum<{
             off: "off";
-            first: "first";
             all: "all";
+            first: "first";
         }>>;
         perChannel: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             chunkMode: z.ZodDefault<z.ZodEnum<{
-                length: "length";
                 paragraph: "paragraph";
                 newline: "newline";
                 sentence: "sentence";
+                length: "length";
             }>>;
             chunkMaxChars: z.ZodOptional<z.ZodNumber>;
             chunkMinChars: z.ZodDefault<z.ZodNumber>;
@@ -1666,19 +1671,19 @@ export declare const AppConfigSchema: z.ZodObject<{
             }>>;
             replyMode: z.ZodDefault<z.ZodEnum<{
                 off: "off";
-                first: "first";
                 all: "all";
+                first: "first";
             }>>;
             replyModeByChatType: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
-                channel: "channel";
                 dm: "dm";
                 group: "group";
                 thread: "thread";
+                channel: "channel";
                 forum: "forum";
             }>, z.ZodEnum<{
                 off: "off";
-                first: "first";
                 all: "all";
+                first: "first";
             }>>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
@@ -1718,8 +1723,8 @@ export declare const AppConfigSchema: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         provider: z.ZodDefault<z.ZodEnum<{
             auto: "auto";
-            local: "local";
             openai: "openai";
+            local: "local";
         }>>;
         local: z.ZodDefault<z.ZodObject<{
             modelUri: z.ZodDefault<z.ZodString>;
@@ -1867,15 +1872,15 @@ export declare const AppConfigSchema: z.ZodObject<{
     approvals: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         defaultMode: z.ZodDefault<z.ZodEnum<{
-            deny: "deny";
             auto: "auto";
+            deny: "deny";
             require: "require";
         }>>;
         rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
             actionPattern: z.ZodString;
             mode: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
                 auto: "auto";
+                deny: "deny";
                 require: "require";
             }>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
@@ -2009,8 +2014,8 @@ export declare const AppConfigSchema: z.ZodObject<{
     senderTrustDisplay: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         displayMode: z.ZodDefault<z.ZodEnum<{
-            raw: "raw";
             alias: "alias";
+            raw: "raw";
             hash: "hash";
         }>>;
         hashPrefix: z.ZodDefault<z.ZodNumber>;

package/node_modules/@comis/core/dist/event-bus/events-infra.d.ts

@@ -189,6 +189,14 @@ export interface InfraEvents {
         cronJobModel?: string;
         /** Per-cron-job cache retention override from CronJob config. */
         cacheRetention?: "none" | "short" | "long";
+        /** Per-cron-job tool policy override (opt-in). Resolution in the handler:
+         *  job.toolPolicy > agentConfig.toolPolicy > passthrough `{ profile: "full" }`.
+         *  Opt-in by design; omitting preserves pre-existing tool set. */
+        toolPolicy?: {
+            profile: string;
+            allow: string[];
+            deny: string[];
+        };
         /** Callback for agent_turn jobs to report execution result back to the scheduler.
          *  Called by the event handler after agent execution completes. */
         onComplete?: (result: {

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/daemon.js

@@ -295,7 +295,7 @@ export async function main(overrides = {}) {
         container, logger, daemonLogger, _createProcessMonitor, _startWatchdog,
     });
     // 6.5. Memory + embedding
-    const { disposeEmbedding, cachedPort, memoryAdapter, db, sessionStore, memoryApi, embeddingQueue, backgroundIndexingPromise, embeddingCacheStats, embeddingCircuitBreakerState, } = await setupMemory({ container, memoryLogger });
+    const { disposeEmbedding, cachedPort, memoryAdapter, db, sessionStore, memoryApi, embeddingQueue, backgroundIndexingPromise, embeddingCacheStats, embeddingCircuitBreakerState, maintenanceTick, } = await setupMemory({ container, memoryLogger });
     // Observability persistence (dual-write to SQLite)
     const obsConfig = container.config.observability;
     let obsStore;
@@ -1179,6 +1179,7 @@ export async function main(overrides = {}) {
             }
         }
         catch { /* stat failure must not crash health check */ }
+        maintenanceTick();
         // Compute sub-agent health metrics (threshold-aware split)
         const stuckKillThresholdMs = container.config.security.agentToAgent.subagentContext?.stuckKillThresholdMs ?? 180_000;
         const graphStuckKillThresholdMs = container.config.security.agentToAgent.subagentContext?.graphStuckKillThresholdMs ?? 600_000;

package/node_modules/@comis/daemon/dist/wiring/setup-channels.js

@@ -16,7 +16,7 @@ import { formatSessionKey, runWithContext, createDeliveryOrigin, safePath } from
 import { createMessageRouter, createCommandQueue, createCommandHandler, parseSlashCommand, sanitizeAssistantResponse, resolveOperationModel, resolveProviderFamily, runMemoryReview } from "@comis/agent";
 import { createChannelManager, createRetryEngine, createApprovalNotifier, deliverToChannel, filterResponse, } from "@comis/channels";
 import { RetryConfigSchema } from "@comis/core";
-import { shouldAutoTts, resolveOutputFormat, parseOutboundMedia, } from "@comis/skills";
+import { shouldAutoTts, resolveOutputFormat, parseOutboundMedia, applyToolPolicy, } from "@comis/skills";
 import { bootstrapAdapters } from "./setup-channels-adapters.js";
 import { buildMediaPipeline } from "./setup-channels-media.js";
 import { createLifecycleReactor, reactWithFallback, initTelegramFileGuardConfig } from "@comis/channels";
@@ -193,9 +193,26 @@ export async function setupChannels(deps) {
             };
             const execStartTs = Date.now();
             try {
-                const tools = deps.assembleToolsForAgent
+                const allTools = deps.assembleToolsForAgent
                     ? await deps.assembleToolsForAgent(payload.agentId)
                     : [];
+                // Resolve effective tool policy: job > agent > passthrough `{ profile: "full" }`.
+                // Opt-in per job — omitting payload.toolPolicy preserves the agent's interactive
+                // tool set. The explicit "full" fallback makes the no-silent-default contract
+                // readable in the call site (see design-doc §"no silent default").
+                const effectivePolicy = payload.toolPolicy ??
+                    agentConfig?.skills?.toolPolicy ??
+                    { profile: "full", allow: [], deny: [] };
+                const { tools, filtered: policyFiltered } = applyToolPolicy(allTools, effectivePolicy);
+                if (policyFiltered.length > 0) {
+                    logger.debug({
+                        jobName,
+                        agentId: payload.agentId,
+                        profile: effectivePolicy.profile,
+                        filteredCount: policyFiltered.length,
+                        filtered: policyFiltered.map((f) => ({ tool: f.toolName, reason: f.reason.kind })),
+                    }, "Cron tool policy applied");
+                }
                 logger.info({ jobName, agentId: payload.agentId, channelType: deliveryTarget.channelType, toolCount: Array.isArray(tools) ? tools.length : 0 }, "Executing cron agentTurn");
                 const execResult = await runWithContext({
                     traceId: randomUUID(),

package/node_modules/@comis/daemon/dist/wiring/setup-heartbeat.js

@@ -11,6 +11,7 @@ import { readFile } from "node:fs/promises";
 import { safePath } from "@comis/core";
 import { isHeartbeatContentEffectivelyEmpty } from "@comis/agent";
 import { resolveEffectiveHeartbeatConfig, createAgentHeartbeatSource, createPerAgentHeartbeatRunner, createDuplicateDetector, } from "@comis/scheduler";
+import { applyToolPolicy } from "@comis/skills";
 // ---------------------------------------------------------------------------
 // Setup function
 // ---------------------------------------------------------------------------
@@ -85,6 +86,7 @@ export function setupHeartbeat(deps) {
         getAgentConfig: (agentId) => ({
             model: agents[agentId].model,
             tenantId: container.config.tenantId,
+            toolPolicy: agents[agentId].skills?.toolPolicy,
         }),
         checkFileGate,
         systemEventQueue,
@@ -96,6 +98,14 @@ export function setupHeartbeat(deps) {
         },
         activeRunRegistry,
         getMemoryStats,
+        // Inject applyToolPolicy so scheduler can filter without taking a direct
+        // dependency on @comis/skills. Type-erased `unknown[]` at the boundary is
+        // safe: the filter reads only the `.name` field from each tool, and
+        // scheduler never inspects tool contents beyond passing them through.
+        applyToolPolicyFilter: (allTools, policy) => {
+            const { tools, filtered } = applyToolPolicy(allTools, policy);
+            return { tools, filtered };
+        },
         logger: schedulerLogger,
     });
     // 5. Create and start the per-agent runner

package/node_modules/@comis/daemon/dist/wiring/setup-memory.d.ts

@@ -32,6 +32,8 @@ export interface MemoryResult {
     embeddingCacheStats?: () => import("@comis/memory").EmbeddingCacheStats;
     /** Embedding circuit breaker state accessor for memory persistence operations. */
     embeddingCircuitBreakerState?: () => import("@comis/agent").CircuitState;
+    /** Throttled WAL checkpoint — call every health tick, runs checkpoint every 10th call. */
+    maintenanceTick: () => void;
 }
 /**
  * Wraps an EmbeddingPort with a circuit breaker that blocks calls when the

package/node_modules/@comis/daemon/dist/wiring/setup-memory.js

@@ -199,6 +199,20 @@ export async function setupMemory(deps) {
     const disposeEmbedding = cachedPort?.dispose
         ? async () => { await cachedPort.dispose(); }
         : undefined;
+    // Throttled WAL checkpoint: runs PASSIVE checkpoint every 10th call (~5 min at 30s health interval)
+    let maintenanceTickCount = 0;
+    const maintenanceTick = () => {
+        maintenanceTickCount++;
+        if (maintenanceTickCount % 10 !== 0)
+            return;
+        try {
+            const pages = memoryAdapter.checkpoint();
+            if (pages > 0) {
+                memoryLogger.debug({ pages }, "WAL checkpoint moved pages");
+            }
+        }
+        catch { /* checkpoint failure must not crash health tick */ }
+    };
     return {
         disposeEmbedding,
         cachedPort,
@@ -210,5 +224,6 @@ export async function setupMemory(deps) {
         backgroundIndexingPromise,
         embeddingCacheStats,
         embeddingCircuitBreakerState: embeddingCbRef ? () => embeddingCbRef.getState() : undefined,
+        maintenanceTick,
     };
 }

package/node_modules/@comis/daemon/dist/wiring/setup-schedulers.js

@@ -110,6 +110,7 @@ export async function setupSchedulers(deps) {
                         maxHistoryTurns: job.maxHistoryTurns,
                         cronJobModel: job.payload.kind === "agent_turn" ? job.payload.model : undefined,
                         cacheRetention: job.cacheRetention,
+                        toolPolicy: job.toolPolicy,
                         onComplete: deferredResolve,
                     });
                     // Forward isolated results to main session if requested

package/node_modules/@comis/daemon/dist/wiring/setup-shutdown.d.ts

@@ -79,6 +79,7 @@ export interface ShutdownDeps {
     /** Raw database handle for close. */
     db: {
         close: () => void;
+        pragma: (source: string) => unknown;
     };
     /** Coordinated embedding dispose callback: L1 -> L2 flush -> provider dispose */
     disposeEmbedding?: () => Promise<void>;

package/node_modules/@comis/daemon/dist/wiring/setup-shutdown.js

@@ -284,6 +284,10 @@ export function setupShutdown(deps) {
             // DB close is ALWAYS last -- no withStepTimeout (must complete or the outer 30s hard timeout handles it)
             {
                 const stopMs = Date.now();
+                try {
+                    db.pragma("wal_checkpoint(TRUNCATE)");
+                }
+                catch { /* best-effort flush before close */ }
                 db.close();
                 daemonLogger.info({ component: "memory-database", durationMs: Date.now() - stopMs, shutdownOrder: shutdownOrder + 1 }, "Component stopped");
             }

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/dist/cron/cron-types.d.ts

@@ -144,6 +144,17 @@ export declare const CronJobSchema: z.ZodObject<{
         short: "short";
         long: "long";
     }>>;
+    /** Per-job tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: job.toolPolicy > agentConfig.toolPolicy > passthrough
+     *  (no filtering). Opt-in: omitting this field preserves existing tool set
+     *  for the job. No silent defaults -- operators explicitly request
+     *  conservative presets like `{ profile: "cron-minimal" }`. */
+    toolPolicy: z.ZodOptional<z.ZodObject<{
+        profile: z.ZodDefault<z.ZodString>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
     /** Delivery target for routing results to originating channel */
     deliveryTarget: z.ZodOptional<z.ZodObject<{
         channelId: z.ZodString;

package/node_modules/@comis/scheduler/dist/cron/cron-types.js

@@ -98,6 +98,17 @@ export const CronJobSchema = z.strictObject({
     maxHistoryTurns: z.number().int().positive().default(3).optional(),
     /** Per-job cache retention override. Default inherits OPERATION_CACHE_DEFAULTS["cron"] = "short". */
     cacheRetention: z.enum(["none", "short", "long"]).optional(),
+    /** Per-job tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: job.toolPolicy > agentConfig.toolPolicy > passthrough
+     *  (no filtering). Opt-in: omitting this field preserves existing tool set
+     *  for the job. No silent defaults -- operators explicitly request
+     *  conservative presets like `{ profile: "cron-minimal" }`. */
+    toolPolicy: z.object({
+        profile: z.string().default("full"),
+        allow: z.array(z.string()).default([]),
+        deny: z.array(z.string()).default([]),
+    }).optional(),
     /** Delivery target for routing results to originating channel */
     deliveryTarget: CronDeliveryTargetSchema.optional(),
     /** Whether this job is currently enabled */

package/node_modules/@comis/scheduler/dist/heartbeat/agent-heartbeat-source.d.ts

@@ -41,6 +41,23 @@ interface HeartbeatExecutor {
 interface HeartbeatActiveRunRegistry {
     has(sessionKey: string): boolean;
 }
+/** Tool policy filter function signature -- matches applyToolPolicy from @comis/skills.
+ *  Injected as a dep so scheduler doesn't take a hard dependency on skills. */
+export interface HeartbeatToolPolicyFilter {
+    (tools: unknown[], policy: {
+        profile: string;
+        allow: string[];
+        deny: string[];
+    }): {
+        tools: unknown[];
+        filtered: Array<{
+            toolName: string;
+            reason: {
+                kind: string;
+            };
+        }>;
+    };
+}
 /** Injected session side-effects for heartbeat response processing. */
 export interface HeartbeatSessionOps {
     /** Remove the last user+assistant turn from session transcript. */
@@ -63,10 +80,15 @@ export interface AgentHeartbeatSourceDeps {
     assembleToolsForAgent: (agentId: string) => Promise<unknown[]>;
     /** Get the resolved heartbeat config for an agent. */
     getEffectiveConfig: (agentId: string) => EffectiveHeartbeatConfig;
-    /** Get agent-level config (model, tenantId). */
+    /** Get agent-level config (model, tenantId, optional toolPolicy). */
     getAgentConfig: (agentId: string) => {
         model: string;
         tenantId: string;
+        toolPolicy?: {
+            profile: string;
+            allow: string[];
+            deny: string[];
+        };
     };
     /** Returns true if HEARTBEAT.md is effectively empty (should skip LLM). */
     checkFileGate: (agentId: string) => Promise<boolean>;
@@ -80,6 +102,9 @@ export interface AgentHeartbeatSourceDeps {
     sessionOps?: HeartbeatSessionOps;
     /** Optional: fetch memory stats for an agent (for heartbeat prompt injection). */
     getMemoryStats?: (agentId: string, tenantId: string) => HeartbeatMemoryStats | undefined;
+    /** Optional: apply a tool policy filter (wired to `applyToolPolicy` from @comis/skills).
+     *  When absent, no policy is applied and tools pass through unchanged. */
+    applyToolPolicyFilter?: HeartbeatToolPolicyFilter;
     /** Logger instance. */
     logger: SchedulerLogger;
 }

package/node_modules/@comis/scheduler/dist/heartbeat/agent-heartbeat-source.js

@@ -104,8 +104,29 @@ export function createAgentHeartbeatSource(deps) {
                 logger.debug({ agentId, formattedKey }, "Heartbeat skipped: session queue busy");
                 return;
             }
-            // 6. Assemble tools
-            const tools = await deps.assembleToolsForAgent(agentId);
+            // 6. Assemble tools, then apply opt-in tool policy.
+            // Resolution order: config.toolPolicy (heartbeat) > agentConfig.toolPolicy > passthrough.
+            // Policy is opt-in per agent -- a missing toolPolicy preserves the agent's
+            // interactive tool set for heartbeat ticks. No silent defaults: the explicit
+            // "full" fallback documents the contract at the call site.
+            const allTools = await deps.assembleToolsForAgent(agentId);
+            const effectivePolicy = config.toolPolicy ??
+                agentConfig.toolPolicy ??
+                { profile: "full", allow: [], deny: [] };
+            let tools = allTools;
+            if (deps.applyToolPolicyFilter) {
+                const { tools: filteredTools, filtered } = deps.applyToolPolicyFilter(allTools, effectivePolicy);
+                tools = filteredTools;
+                if (filtered.length > 0) {
+                    logger.debug({
+                        agentId,
+                        trigger,
+                        profile: effectivePolicy.profile,
+                        filteredCount: filtered.length,
+                        filtered: filtered.map((f) => ({ tool: f.toolName, reason: f.reason.kind })),
+                    }, "Heartbeat tool policy applied");
+                }
+            }
             // 6.5 Fetch memory stats for conditional prompt injection
             let memoryStats;
             if (deps.getMemoryStats) {