comisai 1.0.14 → 1.0.16

package/node_modules/@comis/core/dist/config/schema.d.ts

@@ -54,6 +54,9 @@ export declare const AppConfigSchema: z.ZodObject<{
             "multi-zone": "multi-zone";
             single: "single";
         }>>;
+        advancedCacheOptimization: z.ZodDefault<z.ZodObject<{
+            enableRecentZonePromotion: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
         geminiCache: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxActiveCaches: z.ZodDefault<z.ZodNumber>;
@@ -105,9 +108,9 @@ export declare const AppConfigSchema: z.ZodObject<{
         bootstrap: z.ZodDefault<z.ZodObject<{
             maxChars: z.ZodDefault<z.ZodNumber>;
             promptMode: z.ZodDefault<z.ZodEnum<{
-                minimal: "minimal";
-                full: "full";
                 none: "none";
+                full: "full";
+                minimal: "minimal";
             }>>;
             groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strict>>;
@@ -184,11 +187,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             }, z.core.$strict>>;
             toolPolicy: z.ZodDefault<z.ZodObject<{
                 profile: z.ZodDefault<z.ZodEnum<{
+                    full: "full";
                     minimal: "minimal";
                     coding: "coding";
                     messaging: "messaging";
                     supervisor: "supervisor";
-                    full: "full";
                 }>>;
                 allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -250,6 +253,11 @@ export declare const AppConfigSchema: z.ZodObject<{
                 alertThreshold: z.ZodOptional<z.ZodNumber>;
                 alertCooldownMs: z.ZodOptional<z.ZodNumber>;
                 staleMs: z.ZodOptional<z.ZodNumber>;
+                toolPolicy: z.ZodOptional<z.ZodObject<{
+                    profile: z.ZodDefault<z.ZodString>;
+                    allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
         session: z.ZodOptional<z.ZodObject<{
@@ -1105,11 +1113,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             waitTimeoutMs: z.ZodDefault<z.ZodNumber>;
             subAgentMaxSteps: z.ZodDefault<z.ZodNumber>;
             subAgentToolGroups: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
-                full: "full";
             }>>>;
             subAgentMcpTools: z.ZodDefault<z.ZodEnum<{
                 none: "none";
@@ -1572,10 +1580,10 @@ export declare const AppConfigSchema: z.ZodObject<{
     streaming: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         defaultChunkMode: z.ZodDefault<z.ZodEnum<{
-            length: "length";
             paragraph: "paragraph";
             newline: "newline";
             sentence: "sentence";
+            length: "length";
         }>>;
         defaultDeliveryTiming: z.ZodDefault<z.ZodObject<{
             mode: z.ZodDefault<z.ZodEnum<{
@@ -1620,10 +1628,10 @@ export declare const AppConfigSchema: z.ZodObject<{
         perChannel: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             chunkMode: z.ZodDefault<z.ZodEnum<{
-                length: "length";
                 paragraph: "paragraph";
                 newline: "newline";
                 sentence: "sentence";
+                length: "length";
             }>>;
             chunkMaxChars: z.ZodOptional<z.ZodNumber>;
             chunkMinChars: z.ZodDefault<z.ZodNumber>;
@@ -1670,10 +1678,10 @@ export declare const AppConfigSchema: z.ZodObject<{
                 all: "all";
             }>>;
             replyModeByChatType: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
-                channel: "channel";
                 dm: "dm";
                 group: "group";
                 thread: "thread";
+                channel: "channel";
                 forum: "forum";
             }>, z.ZodEnum<{
                 off: "off";
@@ -1718,8 +1726,8 @@ export declare const AppConfigSchema: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         provider: z.ZodDefault<z.ZodEnum<{
             auto: "auto";
-            local: "local";
             openai: "openai";
+            local: "local";
         }>>;
         local: z.ZodDefault<z.ZodObject<{
             modelUri: z.ZodDefault<z.ZodString>;
@@ -1867,15 +1875,15 @@ export declare const AppConfigSchema: z.ZodObject<{
     approvals: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         defaultMode: z.ZodDefault<z.ZodEnum<{
-            deny: "deny";
             auto: "auto";
+            deny: "deny";
             require: "require";
         }>>;
         rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
             actionPattern: z.ZodString;
             mode: z.ZodDefault<z.ZodEnum<{
-                deny: "deny";
                 auto: "auto";
+                deny: "deny";
                 require: "require";
             }>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
@@ -2009,8 +2017,8 @@ export declare const AppConfigSchema: z.ZodObject<{
     senderTrustDisplay: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         displayMode: z.ZodDefault<z.ZodEnum<{
-            raw: "raw";
             alias: "alias";
+            raw: "raw";
             hash: "hash";
         }>>;
         hashPrefix: z.ZodDefault<z.ZodNumber>;

package/node_modules/@comis/core/dist/event-bus/events-infra.d.ts

@@ -189,6 +189,14 @@ export interface InfraEvents {
         cronJobModel?: string;
         /** Per-cron-job cache retention override from CronJob config. */
         cacheRetention?: "none" | "short" | "long";
+        /** Per-cron-job tool policy override (opt-in). Resolution in the handler:
+         *  job.toolPolicy > agentConfig.toolPolicy > passthrough `{ profile: "full" }`.
+         *  Opt-in by design; omitting preserves pre-existing tool set. */
+        toolPolicy?: {
+            profile: string;
+            allow: string[];
+            deny: string[];
+        };
         /** Callback for agent_turn jobs to report execution result back to the scheduler.
          *  Called by the event handler after agent execution completes. */
         onComplete?: (result: {

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/daemon.js

@@ -295,7 +295,7 @@ export async function main(overrides = {}) {
         container, logger, daemonLogger, _createProcessMonitor, _startWatchdog,
     });
     // 6.5. Memory + embedding
-    const { disposeEmbedding, cachedPort, memoryAdapter, db, sessionStore, memoryApi, embeddingQueue, backgroundIndexingPromise, embeddingCacheStats, embeddingCircuitBreakerState, } = await setupMemory({ container, memoryLogger });
+    const { disposeEmbedding, cachedPort, memoryAdapter, db, sessionStore, memoryApi, embeddingQueue, backgroundIndexingPromise, embeddingCacheStats, embeddingCircuitBreakerState, maintenanceTick, } = await setupMemory({ container, memoryLogger });
     // Observability persistence (dual-write to SQLite)
     const obsConfig = container.config.observability;
     let obsStore;
@@ -1179,6 +1179,7 @@ export async function main(overrides = {}) {
             }
         }
         catch { /* stat failure must not crash health check */ }
+        maintenanceTick();
         // Compute sub-agent health metrics (threshold-aware split)
         const stuckKillThresholdMs = container.config.security.agentToAgent.subagentContext?.stuckKillThresholdMs ?? 180_000;
         const graphStuckKillThresholdMs = container.config.security.agentToAgent.subagentContext?.graphStuckKillThresholdMs ?? 600_000;

package/node_modules/@comis/daemon/dist/wiring/setup-channels.js

@@ -16,7 +16,7 @@ import { formatSessionKey, runWithContext, createDeliveryOrigin, safePath } from
 import { createMessageRouter, createCommandQueue, createCommandHandler, parseSlashCommand, sanitizeAssistantResponse, resolveOperationModel, resolveProviderFamily, runMemoryReview } from "@comis/agent";
 import { createChannelManager, createRetryEngine, createApprovalNotifier, deliverToChannel, filterResponse, } from "@comis/channels";
 import { RetryConfigSchema } from "@comis/core";
-import { shouldAutoTts, resolveOutputFormat, parseOutboundMedia, } from "@comis/skills";
+import { shouldAutoTts, resolveOutputFormat, parseOutboundMedia, applyToolPolicy, } from "@comis/skills";
 import { bootstrapAdapters } from "./setup-channels-adapters.js";
 import { buildMediaPipeline } from "./setup-channels-media.js";
 import { createLifecycleReactor, reactWithFallback, initTelegramFileGuardConfig } from "@comis/channels";
@@ -193,9 +193,26 @@ export async function setupChannels(deps) {
             };
             const execStartTs = Date.now();
             try {
-                const tools = deps.assembleToolsForAgent
+                const allTools = deps.assembleToolsForAgent
                     ? await deps.assembleToolsForAgent(payload.agentId)
                     : [];
+                // Resolve effective tool policy: job > agent > passthrough `{ profile: "full" }`.
+                // Opt-in per job — omitting payload.toolPolicy preserves the agent's interactive
+                // tool set. The explicit "full" fallback makes the no-silent-default contract
+                // readable in the call site (see design-doc §"no silent default").
+                const effectivePolicy = payload.toolPolicy ??
+                    agentConfig?.skills?.toolPolicy ??
+                    { profile: "full", allow: [], deny: [] };
+                const { tools, filtered: policyFiltered } = applyToolPolicy(allTools, effectivePolicy);
+                if (policyFiltered.length > 0) {
+                    logger.debug({
+                        jobName,
+                        agentId: payload.agentId,
+                        profile: effectivePolicy.profile,
+                        filteredCount: policyFiltered.length,
+                        filtered: policyFiltered.map((f) => ({ tool: f.toolName, reason: f.reason.kind })),
+                    }, "Cron tool policy applied");
+                }
                 logger.info({ jobName, agentId: payload.agentId, channelType: deliveryTarget.channelType, toolCount: Array.isArray(tools) ? tools.length : 0 }, "Executing cron agentTurn");
                 const execResult = await runWithContext({
                     traceId: randomUUID(),

package/node_modules/@comis/daemon/dist/wiring/setup-heartbeat.js

@@ -11,6 +11,7 @@ import { readFile } from "node:fs/promises";
 import { safePath } from "@comis/core";
 import { isHeartbeatContentEffectivelyEmpty } from "@comis/agent";
 import { resolveEffectiveHeartbeatConfig, createAgentHeartbeatSource, createPerAgentHeartbeatRunner, createDuplicateDetector, } from "@comis/scheduler";
+import { applyToolPolicy } from "@comis/skills";
 // ---------------------------------------------------------------------------
 // Setup function
 // ---------------------------------------------------------------------------
@@ -85,6 +86,7 @@ export function setupHeartbeat(deps) {
         getAgentConfig: (agentId) => ({
             model: agents[agentId].model,
             tenantId: container.config.tenantId,
+            toolPolicy: agents[agentId].skills?.toolPolicy,
         }),
         checkFileGate,
         systemEventQueue,
@@ -96,6 +98,14 @@ export function setupHeartbeat(deps) {
         },
         activeRunRegistry,
         getMemoryStats,
+        // Inject applyToolPolicy so scheduler can filter without taking a direct
+        // dependency on @comis/skills. Type-erased `unknown[]` at the boundary is
+        // safe: the filter reads only the `.name` field from each tool, and
+        // scheduler never inspects tool contents beyond passing them through.
+        applyToolPolicyFilter: (allTools, policy) => {
+            const { tools, filtered } = applyToolPolicy(allTools, policy);
+            return { tools, filtered };
+        },
         logger: schedulerLogger,
     });
     // 5. Create and start the per-agent runner

package/node_modules/@comis/daemon/dist/wiring/setup-memory.d.ts

@@ -32,6 +32,8 @@ export interface MemoryResult {
     embeddingCacheStats?: () => import("@comis/memory").EmbeddingCacheStats;
     /** Embedding circuit breaker state accessor for memory persistence operations. */
     embeddingCircuitBreakerState?: () => import("@comis/agent").CircuitState;
+    /** Throttled WAL checkpoint — call every health tick, runs checkpoint every 10th call. */
+    maintenanceTick: () => void;
 }
 /**
  * Wraps an EmbeddingPort with a circuit breaker that blocks calls when the

package/node_modules/@comis/daemon/dist/wiring/setup-memory.js

@@ -199,6 +199,20 @@ export async function setupMemory(deps) {
     const disposeEmbedding = cachedPort?.dispose
         ? async () => { await cachedPort.dispose(); }
         : undefined;
+    // Throttled WAL checkpoint: runs PASSIVE checkpoint every 10th call (~5 min at 30s health interval)
+    let maintenanceTickCount = 0;
+    const maintenanceTick = () => {
+        maintenanceTickCount++;
+        if (maintenanceTickCount % 10 !== 0)
+            return;
+        try {
+            const pages = memoryAdapter.checkpoint();
+            if (pages > 0) {
+                memoryLogger.debug({ pages }, "WAL checkpoint moved pages");
+            }
+        }
+        catch { /* checkpoint failure must not crash health tick */ }
+    };
     return {
         disposeEmbedding,
         cachedPort,
@@ -210,5 +224,6 @@ export async function setupMemory(deps) {
         backgroundIndexingPromise,
         embeddingCacheStats,
         embeddingCircuitBreakerState: embeddingCbRef ? () => embeddingCbRef.getState() : undefined,
+        maintenanceTick,
     };
 }

package/node_modules/@comis/daemon/dist/wiring/setup-schedulers.js

@@ -110,6 +110,7 @@ export async function setupSchedulers(deps) {
                         maxHistoryTurns: job.maxHistoryTurns,
                         cronJobModel: job.payload.kind === "agent_turn" ? job.payload.model : undefined,
                         cacheRetention: job.cacheRetention,
+                        toolPolicy: job.toolPolicy,
                         onComplete: deferredResolve,
                     });
                     // Forward isolated results to main session if requested

package/node_modules/@comis/daemon/dist/wiring/setup-shutdown.d.ts

@@ -79,6 +79,7 @@ export interface ShutdownDeps {
     /** Raw database handle for close. */
     db: {
         close: () => void;
+        pragma: (source: string) => unknown;
     };
     /** Coordinated embedding dispose callback: L1 -> L2 flush -> provider dispose */
     disposeEmbedding?: () => Promise<void>;

package/node_modules/@comis/daemon/dist/wiring/setup-shutdown.js

@@ -284,6 +284,10 @@ export function setupShutdown(deps) {
             // DB close is ALWAYS last -- no withStepTimeout (must complete or the outer 30s hard timeout handles it)
             {
                 const stopMs = Date.now();
+                try {
+                    db.pragma("wal_checkpoint(TRUNCATE)");
+                }
+                catch { /* best-effort flush before close */ }
                 db.close();
                 daemonLogger.info({ component: "memory-database", durationMs: Date.now() - stopMs, shutdownOrder: shutdownOrder + 1 }, "Component stopped");
             }

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/dist/cron/cron-types.d.ts

@@ -144,6 +144,17 @@ export declare const CronJobSchema: z.ZodObject<{
         short: "short";
         long: "long";
     }>>;
+    /** Per-job tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: job.toolPolicy > agentConfig.toolPolicy > passthrough
+     *  (no filtering). Opt-in: omitting this field preserves existing tool set
+     *  for the job. No silent defaults -- operators explicitly request
+     *  conservative presets like `{ profile: "cron-minimal" }`. */
+    toolPolicy: z.ZodOptional<z.ZodObject<{
+        profile: z.ZodDefault<z.ZodString>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
     /** Delivery target for routing results to originating channel */
     deliveryTarget: z.ZodOptional<z.ZodObject<{
         channelId: z.ZodString;

package/node_modules/@comis/scheduler/dist/cron/cron-types.js

@@ -98,6 +98,17 @@ export const CronJobSchema = z.strictObject({
     maxHistoryTurns: z.number().int().positive().default(3).optional(),
     /** Per-job cache retention override. Default inherits OPERATION_CACHE_DEFAULTS["cron"] = "short". */
     cacheRetention: z.enum(["none", "short", "long"]).optional(),
+    /** Per-job tool policy override -- matches AgentConfig.toolPolicy shape.
+     *
+     *  Resolution order: job.toolPolicy > agentConfig.toolPolicy > passthrough
+     *  (no filtering). Opt-in: omitting this field preserves existing tool set
+     *  for the job. No silent defaults -- operators explicitly request
+     *  conservative presets like `{ profile: "cron-minimal" }`. */
+    toolPolicy: z.object({
+        profile: z.string().default("full"),
+        allow: z.array(z.string()).default([]),
+        deny: z.array(z.string()).default([]),
+    }).optional(),
     /** Delivery target for routing results to originating channel */
     deliveryTarget: CronDeliveryTargetSchema.optional(),
     /** Whether this job is currently enabled */

package/node_modules/@comis/scheduler/dist/heartbeat/agent-heartbeat-source.d.ts

@@ -41,6 +41,23 @@ interface HeartbeatExecutor {
 interface HeartbeatActiveRunRegistry {
     has(sessionKey: string): boolean;
 }
+/** Tool policy filter function signature -- matches applyToolPolicy from @comis/skills.
+ *  Injected as a dep so scheduler doesn't take a hard dependency on skills. */
+export interface HeartbeatToolPolicyFilter {
+    (tools: unknown[], policy: {
+        profile: string;
+        allow: string[];
+        deny: string[];
+    }): {
+        tools: unknown[];
+        filtered: Array<{
+            toolName: string;
+            reason: {
+                kind: string;
+            };
+        }>;
+    };
+}
 /** Injected session side-effects for heartbeat response processing. */
 export interface HeartbeatSessionOps {
     /** Remove the last user+assistant turn from session transcript. */
@@ -63,10 +80,15 @@ export interface AgentHeartbeatSourceDeps {
     assembleToolsForAgent: (agentId: string) => Promise<unknown[]>;
     /** Get the resolved heartbeat config for an agent. */
     getEffectiveConfig: (agentId: string) => EffectiveHeartbeatConfig;
-    /** Get agent-level config (model, tenantId). */
+    /** Get agent-level config (model, tenantId, optional toolPolicy). */
     getAgentConfig: (agentId: string) => {
         model: string;
         tenantId: string;
+        toolPolicy?: {
+            profile: string;
+            allow: string[];
+            deny: string[];
+        };
     };
     /** Returns true if HEARTBEAT.md is effectively empty (should skip LLM). */
     checkFileGate: (agentId: string) => Promise<boolean>;
@@ -80,6 +102,9 @@ export interface AgentHeartbeatSourceDeps {
     sessionOps?: HeartbeatSessionOps;
     /** Optional: fetch memory stats for an agent (for heartbeat prompt injection). */
     getMemoryStats?: (agentId: string, tenantId: string) => HeartbeatMemoryStats | undefined;
+    /** Optional: apply a tool policy filter (wired to `applyToolPolicy` from @comis/skills).
+     *  When absent, no policy is applied and tools pass through unchanged. */
+    applyToolPolicyFilter?: HeartbeatToolPolicyFilter;
     /** Logger instance. */
     logger: SchedulerLogger;
 }

package/node_modules/@comis/scheduler/dist/heartbeat/agent-heartbeat-source.js

@@ -104,8 +104,29 @@ export function createAgentHeartbeatSource(deps) {
                 logger.debug({ agentId, formattedKey }, "Heartbeat skipped: session queue busy");
                 return;
             }
-            // 6. Assemble tools
-            const tools = await deps.assembleToolsForAgent(agentId);
+            // 6. Assemble tools, then apply opt-in tool policy.
+            // Resolution order: config.toolPolicy (heartbeat) > agentConfig.toolPolicy > passthrough.
+            // Policy is opt-in per agent -- a missing toolPolicy preserves the agent's
+            // interactive tool set for heartbeat ticks. No silent defaults: the explicit
+            // "full" fallback documents the contract at the call site.
+            const allTools = await deps.assembleToolsForAgent(agentId);
+            const effectivePolicy = config.toolPolicy ??
+                agentConfig.toolPolicy ??
+                { profile: "full", allow: [], deny: [] };
+            let tools = allTools;
+            if (deps.applyToolPolicyFilter) {
+                const { tools: filteredTools, filtered } = deps.applyToolPolicyFilter(allTools, effectivePolicy);
+                tools = filteredTools;
+                if (filtered.length > 0) {
+                    logger.debug({
+                        agentId,
+                        trigger,
+                        profile: effectivePolicy.profile,
+                        filteredCount: filtered.length,
+                        filtered: filtered.map((f) => ({ tool: f.toolName, reason: f.reason.kind })),
+                    }, "Heartbeat tool policy applied");
+                }
+            }
             // 6.5 Fetch memory stats for conditional prompt injection
             let memoryStats;
             if (deps.getMemoryStats) {

package/node_modules/@comis/scheduler/dist/heartbeat/heartbeat-config.d.ts

@@ -23,5 +23,12 @@ export interface EffectiveHeartbeatConfig {
     alertCooldownMs?: number;
     /** Max ms a heartbeat tick can run before stuck detection */
     staleMs?: number;
+    /** Per-agent heartbeat tool policy override. Opt-in.
+     *  Resolution order: config.toolPolicy > agentConfig.toolPolicy > passthrough. */
+    toolPolicy?: {
+        profile: string;
+        allow: string[];
+        deny: string[];
+    };
 }
 export declare function resolveEffectiveHeartbeatConfig(global: HeartbeatConfig, perAgent?: PerAgentHeartbeatConfig): EffectiveHeartbeatConfig;

package/node_modules/@comis/scheduler/dist/heartbeat/heartbeat-config.js

@@ -15,5 +15,7 @@ export function resolveEffectiveHeartbeatConfig(global, perAgent) {
         alertThreshold: perAgent?.alertThreshold ?? global.alertThreshold,
         alertCooldownMs: perAgent?.alertCooldownMs ?? global.alertCooldownMs,
         staleMs: perAgent?.staleMs ?? global.staleMs,
+        // Heartbeat tool policy is per-agent only (no global counterpart). Opt-in.
+        toolPolicy: perAgent?.toolPolicy,
     };
 }

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/dist/index.d.ts

@@ -58,5 +58,5 @@ export type { PdfPageRenderer } from "./integrations/document/pdf-page-renderer.
 export { createCompositeFileExtractor } from "./integrations/document/composite-extractor.js";
 export { createImageGenProvider, createImageGenRateLimiter } from "./integrations/image-gen/index.js";
 export type { ImageGenRateLimiter } from "./integrations/image-gen/index.js";
-export { TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
+export { applyToolPolicy, expandGroups, TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
 export type { ToolFilterReason, ToolPolicyResult } from "./policy/index.js";

package/node_modules/@comis/skills/dist/index.js

@@ -110,4 +110,4 @@ export { createCompositeFileExtractor } from "./integrations/document/composite-
 // Image generation (provider adapters, factory, rate limiter)
 export { createImageGenProvider, createImageGenRateLimiter } from "./integrations/image-gen/index.js";
 // Tool policy (profiles and groups for tool filtering)
-export { TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";
+export { applyToolPolicy, expandGroups, TOOL_PROFILES, TOOL_GROUPS } from "./policy/index.js";

package/node_modules/@comis/skills/dist/policy/tool-policy.js

@@ -40,6 +40,31 @@ export const TOOL_PROFILES = {
         "mcp_manage",
         "heartbeat_manage",
     ],
+    /**
+     * Conservative presets for non-interactive operations.
+     *
+     * Opt-in via `toolPolicy: { profile: "cron-minimal" }` on a `CronJob` or
+     * `toolPolicy: { profile: "heartbeat-minimal" }` on heartbeat config. The
+     * `*-minimal` suffix signals "opinionated narrow default, expect to `allow`
+     * extras per job" -- never applied as a silent default at the call site.
+     */
+    "cron-minimal": [
+        "web_search",
+        "message",
+        "read_file",
+        "write_file",
+        "list_dir",
+        "memory_store",
+        "memory_search",
+        "cron",
+        "discover",
+    ],
+    "heartbeat-minimal": [
+        "message",
+        "memory_store",
+        "memory_search",
+        "discover",
+    ],
     full: [], // empty = all tools allowed
 };
 /**

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -115,17 +115,17 @@
     "@comis/daemon"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.14",
-    "@comis/core": "1.0.14",
-    "@comis/infra": "1.0.14",
-    "@comis/memory": "1.0.14",
-    "@comis/gateway": "1.0.14",
-    "@comis/skills": "1.0.14",
-    "@comis/scheduler": "1.0.14",
-    "@comis/agent": "1.0.14",
-    "@comis/channels": "1.0.14",
-    "@comis/cli": "1.0.14",
-    "@comis/daemon": "1.0.14",
+    "@comis/shared": "1.0.16",
+    "@comis/core": "1.0.16",
+    "@comis/infra": "1.0.16",
+    "@comis/memory": "1.0.16",
+    "@comis/gateway": "1.0.16",
+    "@comis/skills": "1.0.16",
+    "@comis/scheduler": "1.0.16",
+    "@comis/agent": "1.0.16",
+    "@comis/channels": "1.0.16",
+    "@comis/cli": "1.0.16",
+    "@comis/daemon": "1.0.16",
     "@agentclientprotocol/sdk": "^0.15.0",
     "@clack/core": "^1.1.0",
     "@clack/prompts": "^1.1.0",