comisai 1.0.14 → 1.0.15

package/node_modules/@comis/scheduler/dist/heartbeat/heartbeat-config.d.ts

@@ -23,5 +23,12 @@ export interface EffectiveHeartbeatConfig {
     alertCooldownMs?: number;
     /** Max ms a heartbeat tick can run before stuck detection */
     staleMs?: number;
+    /** Per-agent heartbeat tool policy override. Opt-in.
+     *  Resolution order: config.toolPolicy > agentConfig.toolPolicy > passthrough. */
+    toolPolicy?: {
+        profile: string;
+        allow: string[];
+        deny: string[];
+    };
 }
 export declare function resolveEffectiveHeartbeatConfig(global: HeartbeatConfig, perAgent?: PerAgentHeartbeatConfig): EffectiveHeartbeatConfig;

package/node_modules/@comis/scheduler/dist/heartbeat/heartbeat-config.js

@@ -15,5 +15,7 @@ export function resolveEffectiveHeartbeatConfig(global, perAgent) {
         alertThreshold: perAgent?.alertThreshold ?? global.alertThreshold,
         alertCooldownMs: perAgent?.alertCooldownMs ?? global.alertCooldownMs,
         staleMs: perAgent?.staleMs ?? global.staleMs,
+        // Heartbeat tool policy is per-agent only (no global counterpart). Opt-in.
+        toolPolicy: perAgent?.toolPolicy,
     };
 }

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/dist/builtin/platform/gateway-tool.d.ts

@@ -21,7 +21,7 @@ import type { RpcCall } from "./cron-tool.js";
 export declare const GATEWAY_ACTIONS: readonly ["read", "patch", "apply", "restart", "schema", "status", "history", "diff", "rollback", "env_set", "env_list"];
 export type GatewayAction = typeof GATEWAY_ACTIONS[number];
 declare const GatewayToolParams: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"status" | "read" | "patch" | "apply" | "restart" | "schema" | "history" | "diff" | "rollback" | "env_set" | "env_list">[]>;
+    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"read" | "status" | "patch" | "apply" | "restart" | "schema" | "history" | "diff" | "rollback" | "env_set" | "env_list">[]>;
     section: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;

package/node_modules/@comis/skills/dist/index.d.ts

@@ -58,5 +58,5 @@ export type { PdfPageRenderer } from "./integrations/document/pdf-page-renderer.
 export { createCompositeFileExtractor } from "./integrations/document/composite-extractor.js";
 export { createImageGenProvider, createImageGenRateLimiter } from "./integrations/image-gen/index.js";
 export type { ImageGenRateLimiter } from "./integrations/image-gen/index.js";
-export { TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
+export { applyToolPolicy, expandGroups, TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
 export type { ToolFilterReason, ToolPolicyResult } from "./policy/index.js";

package/node_modules/@comis/skills/dist/index.js

@@ -110,4 +110,4 @@ export { createCompositeFileExtractor } from "./integrations/document/composite-
 // Image generation (provider adapters, factory, rate limiter)
 export { createImageGenProvider, createImageGenRateLimiter } from "./integrations/image-gen/index.js";
 // Tool policy (profiles and groups for tool filtering)
-export { TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
+export { applyToolPolicy, expandGroups, TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";

package/node_modules/@comis/skills/dist/policy/tool-policy.js

@@ -40,6 +40,31 @@ export const TOOL_PROFILES = {
         "mcp_manage",
         "heartbeat_manage",
     ],
+    /**
+     * Conservative presets for non-interactive operations.
+     *
+     * Opt-in via `toolPolicy: { profile: "cron-minimal" }` on a `CronJob` or
+     * `toolPolicy: { profile: "heartbeat-minimal" }` on heartbeat config. The
+     * `*-minimal` suffix signals "opinionated narrow default, expect to `allow`
+     * extras per job" -- never applied as a silent default at the call site.
+     */
+    "cron-minimal": [
+        "web_search",
+        "message",
+        "read_file",
+        "write_file",
+        "list_dir",
+        "memory_store",
+        "memory_search",
+        "cron",
+        "discover",
+    ],
+    "heartbeat-minimal": [
+        "message",
+        "memory_store",
+        "memory_search",
+        "discover",
+    ],
     full: [], // empty = all tools allowed
 };
 /**

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -115,17 +115,17 @@
     "@comis/daemon"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.14",
-    "@comis/core": "1.0.14",
-    "@comis/infra": "1.0.14",
-    "@comis/memory": "1.0.14",
-    "@comis/gateway": "1.0.14",
-    "@comis/skills": "1.0.14",
-    "@comis/scheduler": "1.0.14",
-    "@comis/agent": "1.0.14",
-    "@comis/channels": "1.0.14",
-    "@comis/cli": "1.0.14",
-    "@comis/daemon": "1.0.14",
+    "@comis/shared": "1.0.15",
+    "@comis/core": "1.0.15",
+    "@comis/infra": "1.0.15",
+    "@comis/memory": "1.0.15",
+    "@comis/gateway": "1.0.15",
+    "@comis/skills": "1.0.15",
+    "@comis/scheduler": "1.0.15",
+    "@comis/agent": "1.0.15",
+    "@comis/channels": "1.0.15",
+    "@comis/cli": "1.0.15",
+    "@comis/daemon": "1.0.15",
     "@agentclientprotocol/sdk": "^0.15.0",
     "@clack/core": "^1.1.0",
     "@clack/prompts": "^1.1.0",