
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
agentic-engage
Advanced tools
Create and approve engagement drafts with an in-memory Node.js queue, generic HTTP webhook adapter, CLI, and MCP tools.
agentic-engage is an open-source engagement queue for Node.js developers and agents, with approval steps, local receipts, and a generic HTTP adapter.
npm install agentic-engage
Requires Node.js 18 or later. Includes TypeScript declarations and two runtime dependencies.
Save this as preview.mjs, then run node preview.mjs. No credentials are needed.
import {
createEngagementQueue, planEngagement, approveEngagement,
executeEngagement, getCostReport,
} from "agentic-engage";
const queue = createEngagementQueue();
const [draft] = planEngagement(
[{ id: "post-1", platform: "webhook", context: "your launch" }],
"Helpful brand", queue,
);
approveEngagement(draft.id, queue);
const preview = await executeEngagement(draft.id, { queue });
console.log(preview.dryRun, preview.action.status); // true approved
console.log(getCostReport()); // entries: [], dispatches: 0, units: 0
Success prints true approved and zero dispatch costs. Preview makes no delivery request.
| Target label | Native integration status |
|---|---|
| scaffold; generic HTTP or local receipt only | |
| X (Twitter) | scaffold; generic HTTP or local receipt only |
| scaffold; generic HTTP or local receipt only | |
| YouTube | scaffold; generic HTTP or local receipt only |
| Bluesky | scaffold; generic HTTP or local receipt only |
| Webhook | Generic HTTP adapter implemented; endpoint supplied by caller |
Six target labels share two engagement adapter classes. No native social API is credential-verified.
Use new HttpEngagementAdapter("webhook", { endpoint }) in the library's adapters map.
Your endpoint handles authentication and platform delivery. No vendor environment variables or .env loader exist.
CLI commands: plan, queue, approve, deny, send, costs, and mcp; also --help and --version.
Run npx agentic-engage mcp or npx --package agentic-engage agentic-engage-mcp for Model Context Protocol (MCP).
Tools: plan_engagement, get_engagement_queue, approve_engagement, deny_engagement, execute_engagement, and get_cost_report.
Worker source exposes GET /health, POST /summarize, and POST /plan; you deploy it yourself.
Queues and costs reset when the process exits. Separate CLI invocations do not share actions.
CLI and MCP live execution use local receipts; they cannot configure HTTP adapters.
Library execution also defaults to local receipts without an adapter, even with live: true.
A sent status therefore does not prove social publication. HTTP receipts use locally generated IDs.
HTTP requests default to a 10-second timeout with no retries. Costs count characters, not currency.
Drafts use fixed text templates; no language model generates them. Account ownership is not verified.
Version 0.1.0 has an API that may change. No managed social delivery service is included.
FAQs
Create and approve engagement drafts with an in-memory Node.js queue, generic HTTP webhook adapter, CLI, and MCP tools.
The npm package agentic-engage receives a total of 0 weekly downloads. As such, agentic-engage popularity was classified as not popular.
We found that agentic-engage demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.