@agentvault/claude-bridge 0.5.5 → 0.5.7

package/dist/config.d.ts

@@ -20,6 +20,9 @@ export interface BridgeConfig {
     /** Slice 2: arm the pinned room (roomFilter) for worker tools on room turns.
      *  Off by default. Valid only with worker + roomFilter + workspaceDir. */
     armRoom: boolean;
+    /** Operator attestation that the agent process runs OS-isolated (own user / jail).
+     *  Only when true is Bash permitted in worker mode (the OS boundary is the fence). */
+    osIsolated: boolean;
 }
 export declare function loadConfig(env: NodeJS.ProcessEnv, argv?: string[]): BridgeConfig;
 //# sourceMappingURL=config.d.ts.map

package/dist/index.js

@@ -40,6 +40,7 @@ function loadConfig(env, argv = []) {
   const inviteToken = (argv[0] && !argv[0].startsWith("-") ? argv[0] : "") || env.AV_INVITE_TOKEN || "";
   const worker = env.AV_WORKER === "1" || env.AV_WORKER === "true";
   const workspaceDir = env.AV_WORKSPACE_DIR || void 0;
+  const osIsolated = env.AV_WORKER_OS_ISOLATED === "1" || env.AV_WORKER_OS_ISOLATED === "true";
   const PERMISSION_MODES = ["auto", "acceptEdits", "bypassPermissions"];
   const permissionMode = env.AV_PERMISSION_MODE ?? "auto";
   if (!PERMISSION_MODES.includes(permissionMode)) {
@@ -84,7 +85,8 @@ function loadConfig(env, argv = []) {
     worker,
     workspaceDir,
     permissionMode,
-    armRoom
+    armRoom,
+    osIsolated
   };
 }
 var CRED_FILES, BACKUP_FILE;
@@ -65024,145 +65026,140 @@ var init_channel = __esm2({
         }
         const raw = await loadState(this.config.dataDir);
         if (raw) {
-          await backupState(this.config.dataDir);
-          this._persisted = migratePersistedState(raw);
-          if (!this._persisted.messageHistory) {
-            this._persisted.messageHistory = [];
-          }
-          this._deviceId = this._persisted.deviceId;
-          this._deviceJwt = this._persisted.deviceJwt;
-          this._primaryConversationId = this._persisted.primaryConversationId;
-          this._fingerprint = this._persisted.fingerprint;
-          this._lastInboundRoomId = this._persisted.lastInboundRoomId;
-          if (this._persisted.seenMessageIds) {
-            this._seenMessageIds = new Set(this._persisted.seenMessageIds.slice(-_SecureChannel.SEEN_MSG_MAX));
-          }
-          if (this._persisted.seenA2AMessageIds) {
-            this._a2aSeenMessageIds = new Set(this._persisted.seenA2AMessageIds.slice(-_SecureChannel.A2A_SEEN_MAX));
-          }
-          if (this._persisted?.rooms) {
-            const roomConvIds = /* @__PURE__ */ new Set();
-            for (const room of Object.values(this._persisted.rooms)) {
-              for (const cid of room.conversationIds || []) {
-                roomConvIds.add(cid);
-              }
-            }
-            let cleanedCount = 0;
-            for (const cid of roomConvIds) {
-              if (this._persisted.sessions[cid]) {
-                delete this._persisted.sessions[cid];
-                cleanedCount++;
-              }
-            }
-            if (cleanedCount > 0) {
-              console.log(`[SecureChannel] Cleaned ${cleanedCount} stale DR room sessions`);
+          await this._hydrateFromPersisted(raw);
+          this._connect();
+          return;
+        }
+        const restored = await restoreState(this.config.dataDir);
+        if (restored) {
+          console.log("[SecureChannel] Restored state from backup");
+          const restoredRaw = await loadState(this.config.dataDir);
+          if (restoredRaw) {
+            await this._hydrateFromPersisted(restoredRaw);
+            this._connect();
+            return;
+          }
+        }
+        await this._enroll();
+      }
+      /**
+       * Hydrate all in-memory state from persisted creds. The single source of
+       * truth for both the primary boot and the .bak-restore boot, so the two can
+       * never drift (the drift is what caused #416: the backup branch used to skip
+       * MLS group loading and dropped owner MLS DMs). Callers invoke _connect()
+       * after this resolves.
+       */
+      async _hydrateFromPersisted(raw) {
+        await backupState(this.config.dataDir);
+        this._persisted = migratePersistedState(raw);
+        if (!this._persisted.messageHistory) {
+          this._persisted.messageHistory = [];
+        }
+        this._deviceId = this._persisted.deviceId;
+        this._deviceJwt = this._persisted.deviceJwt;
+        this._primaryConversationId = this._persisted.primaryConversationId;
+        this._fingerprint = this._persisted.fingerprint;
+        this._lastInboundRoomId = this._persisted.lastInboundRoomId;
+        if (this._persisted.seenMessageIds) {
+          this._seenMessageIds = new Set(this._persisted.seenMessageIds.slice(-_SecureChannel.SEEN_MSG_MAX));
+        }
+        if (this._persisted.seenA2AMessageIds) {
+          this._a2aSeenMessageIds = new Set(this._persisted.seenA2AMessageIds.slice(-_SecureChannel.A2A_SEEN_MAX));
+        }
+        if (this._persisted?.rooms) {
+          const roomConvIds = /* @__PURE__ */ new Set();
+          for (const room of Object.values(this._persisted.rooms)) {
+            for (const cid of room.conversationIds || []) {
+              roomConvIds.add(cid);
             }
           }
-          for (const [convId, sessionData] of Object.entries(
-            this._persisted.sessions
-          )) {
-            if (sessionData.ratchetState) {
-              const ratchet = DoubleRatchet.deserialize(sessionData.ratchetState);
-              this._sessions.set(convId, {
-                ownerDeviceId: sessionData.ownerDeviceId,
-                ratchet,
-                activated: sessionData.activated ?? false,
-                epoch: sessionData.epoch
-              });
+          let cleanedCount = 0;
+          for (const cid of roomConvIds) {
+            if (this._persisted.sessions[cid]) {
+              delete this._persisted.sessions[cid];
+              cleanedCount++;
             }
           }
-          if (this._persisted.conversationGroupIds) {
-            this._sessionGroupIds = new Map(Object.entries(this._persisted.conversationGroupIds));
-            console.log(`[SecureChannel] Restored ${this._sessionGroupIds.size} conversation\u2192group mappings`);
+          if (cleanedCount > 0) {
+            console.log(`[SecureChannel] Cleaned ${cleanedCount} stale DR room sessions`);
           }
-          if (this._persisted.rooms) {
-            for (const [roomId, room] of Object.entries(this._persisted.rooms)) {
-              const mlsGroupId = room.mlsGroupId;
-              if (mlsGroupId) {
-                try {
-                  const mlsState = await loadMlsState(this.config.dataDir, mlsGroupId);
-                  if (mlsState) {
-                    const mgr = new MLSGroupManager();
-                    mgr.importState(JSON.parse(mlsState));
-                    this._mlsGroups.set(roomId, mgr);
-                  }
-                } catch (mlsErr) {
-                  console.warn(`[SecureChannel] Failed to restore MLS state for room ${roomId.slice(0, 8)}:`, mlsErr);
-                }
-              }
-            }
+        }
+        for (const [convId, sessionData] of Object.entries(
+          this._persisted.sessions
+        )) {
+          if (sessionData.ratchetState) {
+            const ratchet = DoubleRatchet.deserialize(sessionData.ratchetState);
+            this._sessions.set(convId, {
+              ownerDeviceId: sessionData.ownerDeviceId,
+              ratchet,
+              activated: sessionData.activated ?? false,
+              epoch: sessionData.epoch
+            });
           }
-          for (const [convId, entry] of Object.entries(this._persisted.mlsConversations ?? {})) {
-            if (entry.mlsGroupId) {
+        }
+        if (this._persisted.conversationGroupIds) {
+          this._sessionGroupIds = new Map(Object.entries(this._persisted.conversationGroupIds));
+          console.log(`[SecureChannel] Restored ${this._sessionGroupIds.size} conversation\u2192group mappings`);
+        }
+        if (this._persisted.rooms) {
+          for (const [roomId, room] of Object.entries(this._persisted.rooms)) {
+            const mlsGroupId = room.mlsGroupId;
+            if (mlsGroupId) {
               try {
-                const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+                const mlsState = await loadMlsState(this.config.dataDir, mlsGroupId);
                 if (mlsState) {
                   const mgr = new MLSGroupManager();
                   mgr.importState(JSON.parse(mlsState));
-                  this._mlsGroups.set(`conv:${convId}`, mgr);
+                  this._mlsGroups.set(roomId, mgr);
                 }
               } catch (mlsErr) {
-                console.warn(`[SecureChannel] Failed to restore MLS state for conv ${convId.slice(0, 8)}:`, mlsErr);
+                console.warn(`[SecureChannel] Failed to restore MLS state for room ${roomId.slice(0, 8)}:`, mlsErr);
               }
             }
           }
-          for (const [gid, entry] of Object.entries(this._persisted.mlsGroups ?? {})) {
-            if (!entry.mlsGroupId) continue;
+        }
+        for (const [convId, entry] of Object.entries(this._persisted.mlsConversations ?? {})) {
+          if (entry.mlsGroupId) {
             try {
-              const stateJson = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
-              if (stateJson) {
+              const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+              if (mlsState) {
                 const mgr = new MLSGroupManager();
-                mgr.importState(JSON.parse(stateJson));
-                this._mlsGroups.set(`1to1-group:${gid}`, mgr);
-                console.log(`[SecureChannel] Loaded shared MLS group for ${gid.slice(0, 8)} (epoch=${mgr.epoch})`);
+                mgr.importState(JSON.parse(mlsState));
+                this._mlsGroups.set(`conv:${convId}`, mgr);
               }
-            } catch (loadErr) {
-              console.warn(`[SecureChannel] Failed to load shared MLS group ${gid.slice(0, 8)}:`, loadErr);
+            } catch (mlsErr) {
+              console.warn(`[SecureChannel] Failed to restore MLS state for conv ${convId.slice(0, 8)}:`, mlsErr);
             }
           }
-          for (const [channelId, entry] of Object.entries(this._persisted.a2aChannels ?? {})) {
-            if (entry.mlsGroupId) {
-              try {
-                const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
-                if (mlsState) {
-                  const mgr = new MLSGroupManager();
-                  mgr.importState(JSON.parse(mlsState));
-                  this._mlsGroups.set(`a2a:${channelId}`, mgr);
-                }
-              } catch (mlsErr) {
-                console.warn(`[SecureChannel] Failed to restore MLS state for A2A ${channelId.slice(0, 8)}:`, mlsErr);
-              }
+        }
+        for (const [gid, entry] of Object.entries(this._persisted.mlsGroups ?? {})) {
+          if (!entry.mlsGroupId) continue;
+          try {
+            const stateJson = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+            if (stateJson) {
+              const mgr = new MLSGroupManager();
+              mgr.importState(JSON.parse(stateJson));
+              this._mlsGroups.set(`1to1-group:${gid}`, mgr);
+              console.log(`[SecureChannel] Loaded shared MLS group for ${gid.slice(0, 8)} (epoch=${mgr.epoch})`);
             }
+          } catch (loadErr) {
+            console.warn(`[SecureChannel] Failed to load shared MLS group ${gid.slice(0, 8)}:`, loadErr);
           }
-          this._connect();
-          return;
         }
-        const restored = await restoreState(this.config.dataDir);
-        if (restored) {
-          console.log("[SecureChannel] Restored state from backup");
-          const restoredRaw = await loadState(this.config.dataDir);
-          if (restoredRaw) {
-            this._persisted = migratePersistedState(restoredRaw);
-            if (!this._persisted.messageHistory) this._persisted.messageHistory = [];
-            this._deviceId = this._persisted.deviceId;
-            this._deviceJwt = this._persisted.deviceJwt;
-            this._primaryConversationId = this._persisted.primaryConversationId;
-            this._fingerprint = this._persisted.fingerprint;
-            for (const [convId, sd] of Object.entries(this._persisted.sessions)) {
-              if (sd.ratchetState) {
-                this._sessions.set(convId, {
-                  ownerDeviceId: sd.ownerDeviceId,
-                  ratchet: DoubleRatchet.deserialize(sd.ratchetState),
-                  activated: sd.activated ?? false,
-                  epoch: sd.epoch
-                });
+        for (const [channelId, entry] of Object.entries(this._persisted.a2aChannels ?? {})) {
+          if (entry.mlsGroupId) {
+            try {
+              const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+              if (mlsState) {
+                const mgr = new MLSGroupManager();
+                mgr.importState(JSON.parse(mlsState));
+                this._mlsGroups.set(`a2a:${channelId}`, mgr);
               }
+            } catch (mlsErr) {
+              console.warn(`[SecureChannel] Failed to restore MLS state for A2A ${channelId.slice(0, 8)}:`, mlsErr);
             }
-            this._connect();
-            return;
           }
         }
-        await this._enroll();
       }
       /**
        * Fetch scan rules from the server and load them into the ScanEngine.
@@ -65502,7 +65499,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.2" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.3" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67119,7 +67116,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.2" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.3" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67429,7 +67426,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.2" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.3" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -68298,13 +68295,13 @@ ${messageText}`;
        * Looks for OpenClaw workspace config, falls back to default path.
        */
       _resolveWorkspaceDir() {
-        const homedir2 = osHomedir();
+        const homedir = osHomedir();
         const agentName = this.config.agentName;
         if (this._persisted?.agentRole === "lead") {
-          return join4(homedir2, ".openclaw", "workspace");
+          return join4(homedir, ".openclaw", "workspace");
         }
         try {
-          const configPath = join4(homedir2, ".openclaw", "openclaw.json");
+          const configPath = join4(homedir, ".openclaw", "openclaw.json");
           const raw = readFileSync(configPath, "utf-8");
           const config22 = JSON.parse(raw);
           const agents = config22?.agents?.list;
@@ -68318,9 +68315,9 @@ ${messageText}`;
         } catch {
         }
         if (agentName && agentName !== "CLI Agent" && agentName !== "OpenClaw Agent") {
-          return join4(homedir2, ".openclaw", `workspace-${agentName}`);
+          return join4(homedir, ".openclaw", `workspace-${agentName}`);
         }
-        return join4(homedir2, ".openclaw", "workspace");
+        return join4(homedir, ".openclaw", "workspace");
       }
       /**
        * Send a structured JSON reply to a specific conversation.
@@ -97176,7 +97173,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.2" : "0.0.0-dev";
+    VERSION = true ? "0.23.3" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -118480,52 +118477,75 @@ function Z_($10, Q4) {
 
 // src/worker-permission.ts
 import { realpathSync as realpathSync2 } from "node:fs";
-import { resolve as resolve2, dirname, basename, sep } from "node:path";
-import { homedir } from "node:os";
+import { resolve as resolve2, dirname, basename, sep, isAbsolute } from "node:path";
 var PATH_FIELDS = ["file_path", "path", "notebook_path"];
 function canonical(p2) {
   const abs = resolve2(p2);
   try {
     return realpathSync2(abs);
   } catch {
-    try {
-      return resolve2(realpathSync2(dirname(abs)), basename(abs));
-    } catch {
-      return abs;
+    const suffix = [];
+    let dir = abs;
+    for (; ; ) {
+      const parent2 = dirname(dir);
+      suffix.unshift(basename(dir));
+      if (parent2 === dir) return abs;
+      try {
+        return resolve2(realpathSync2(parent2), ...suffix);
+      } catch {
+        dir = parent2;
+      }
     }
   }
 }
-function targetsDataDir(_toolName, input, dataDir) {
-  const canonDir = canonical(dataDir);
+var FILE_TOOLS = /* @__PURE__ */ new Set(["Read", "Write", "Edit", "MultiEdit", "NotebookEdit", "Glob", "Grep"]);
+function pathsOf(input) {
+  const out = [];
   for (const f7 of PATH_FIELDS) {
     const v5 = input[f7];
-    if (typeof v5 === "string") {
-      const canon = canonical(v5);
-      if (canon === canonDir || canon.startsWith(canonDir + sep)) return true;
-    }
+    if (typeof v5 === "string" && v5.length > 0) out.push(canonical(v5));
   }
-  const cmd = input.command;
-  if (typeof cmd === "string") {
-    if (cmd.includes(canonDir)) return true;
-    const home = process.env.HOME || homedir();
-    if (home && (canonDir === home || canonDir.startsWith(home + sep))) {
-      const rel = canonDir.slice(home.length);
-      for (const prefix of ["~", "$HOME", "${HOME}"]) {
-        if (cmd.includes(prefix + rel)) return true;
-      }
-    }
-  }
-  return false;
+  return out;
+}
+function within(canonTarget, canonRoot) {
+  return canonTarget === canonRoot || canonTarget.startsWith(canonRoot + sep);
+}
+function globPatternEscapes(pattern) {
+  if (typeof pattern !== "string" || pattern.length === 0) return true;
+  if (!/^[A-Za-z0-9 _./*?-]+$/.test(pattern)) return true;
+  if (isAbsolute(pattern)) return true;
+  return pattern.split("/").some((seg) => seg === ".." || seg === "");
 }
 function gateDecision(toolName, input, opts) {
   if (toolName === ROOM_SAY_TOOL_NAME) return { deny: false };
   if (!opts.isToolTurn()) {
     return { deny: true, reason: "tools are disabled on this turn; reply with the say tool only" };
   }
-  if (targetsDataDir(toolName, input, opts.dataDir)) {
-    return { deny: true, reason: "access to the AgentVault key directory is not permitted" };
+  if (toolName === "Bash") {
+    return opts.osIsolated ? { deny: false } : { deny: true, reason: "Bash is disabled in worker mode unless the process is OS-isolated (set AV_WORKER_OS_ISOLATED=1)" };
   }
-  return { deny: false };
+  if (FILE_TOOLS.has(toolName)) {
+    if (!opts.workspaceDir) {
+      return { deny: true, reason: "no workspace is configured; file tools are disabled" };
+    }
+    const paths = pathsOf(input);
+    if (paths.length === 0) {
+      return { deny: true, reason: "file tool call has no resolvable path; blocked (workspace-confined)" };
+    }
+    if (toolName === "Glob" && globPatternEscapes(input.pattern)) {
+      return { deny: true, reason: "glob pattern must be workspace-relative" };
+    }
+    const wsRoot = canonical(opts.workspaceDir);
+    if (!paths.every((p2) => within(p2, wsRoot))) {
+      return { deny: true, reason: "file access is restricted to the workspace directory" };
+    }
+    const dataRoot = canonical(opts.dataDir);
+    if (paths.some((p2) => within(p2, dataRoot))) {
+      return { deny: true, reason: "access to the AgentVault key directory is not permitted" };
+    }
+    return { deny: false };
+  }
+  return { deny: true, reason: `tool ${toolName} is not permitted in worker mode` };
 }
 function makeWorkerPreToolUseHook(opts) {
   return {
@@ -132489,6 +132509,8 @@ var PersistentClaudeSession = class {
     }
     const gateOpts = {
       dataDir: this.opts.dataDir ?? "",
+      workspaceDir: this.opts.workspaceDir,
+      osIsolated: this.opts.osIsolated ?? false,
       // LOAD-BEARING: tools are allowed when this is an owner DM turn
       // (currentAutoReply) OR an armed-room turn (currentArmedGetter()). An UNARMED
       // room turn keeps both false → the gate denies all tools but room_say.
@@ -132510,6 +132532,9 @@ var PersistentClaudeSession = class {
         });
       }
     };
+    console.error(
+      `[worker-gate] allowlist active \u2014 workspace=${this.opts.workspaceDir ?? "(none: file tools disabled)"}, bash=${this.opts.osIsolated ? "enabled (OS-isolated)" : "disabled"}`
+    );
     return {
       ...base,
       permissionMode: this.opts.permissionMode ?? "auto",
@@ -132918,7 +132943,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  console.error(`[bridge] version: ${true ? "0.5.5" : "dev"}`);
+  console.error(`[bridge] version: ${true ? "0.5.7" : "dev"}`);
   console.error(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   if (cfg.worker) {
     console.error(`[bridge] WORKER MODE \u2014 workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
@@ -132956,6 +132981,7 @@ async function main() {
     onObserve: (text) => console.error(`[bridge] observed (${text.length} chars, not sent)`),
     worker: cfg.worker,
     workspaceDir: cfg.workspaceDir,
+    osIsolated: cfg.osIsolated,
     permissionMode: cfg.permissionMode,
     dataDir: cfg.dataDir,
     // Slice 2 Plan B: audit self-report context (only used on armed-room turns).

package/dist/session.d.ts

@@ -60,6 +60,8 @@ export interface SessionOpts {
     worker?: boolean;
     /** Workspace directory to set as cwd in worker mode. */
     workspaceDir?: string;
+    /** True when the process is attested OS-isolated, gating whether Bash is allowed at all. */
+    osIsolated?: boolean;
     /** Claude permission mode for worker turns (default: "auto"). */
     permissionMode?: "auto" | "acceptEdits" | "bypassPermissions";
     /** AgentVault data directory — fenced off from worker tool access. */

package/dist/worker-permission.d.ts

@@ -8,6 +8,10 @@ import type { CanUseTool, HookCallbackMatcher } from "@anthropic-ai/claude-agent
  */
 export declare function makeWorkerPreToolUseHook(opts: {
     dataDir: string;
+    /** The confined workspace root; file tools are denied entirely when unset. */
+    workspaceDir?: string;
+    /** True when the process is attested OS-isolated, gating whether Bash is allowed at all. */
+    osIsolated: boolean;
     isToolTurn: () => boolean;
     /** Slice 2 Plan B: true when this turn comes from an armed room. When set,
      *  each tool decision (allow AND deny) is forwarded to onToolDecision for
@@ -27,6 +31,10 @@ export declare function makeWorkerPreToolUseHook(opts: {
  */
 export declare function makeWorkerPermission(opts: {
     dataDir: string;
+    /** The confined workspace root; file tools are denied entirely when unset. */
+    workspaceDir?: string;
+    /** True when the process is attested OS-isolated, gating whether Bash is allowed at all. */
+    osIsolated: boolean;
     isToolTurn: () => boolean;
 }): CanUseTool;
 //# sourceMappingURL=worker-permission.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",