@agentvault/grok-bridge 0.4.24 → 0.4.26

package/dist/room-context.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Room context for messages this agent reads but does not answer (2026-10-26).
+ *
+ * Under the #1107 rule an agent owes a reply only when it is @-mentioned (or
+ * @all / the owner rules in `owesRoomReply`). The bridge used to push EVERY room
+ * message into the model session anyway, and let the session suppress the
+ * reply. That bought the agent a full model turn per message it was never going
+ * to answer — measured on loopita (Opus, 1M context) at ~$0.27–0.31 per
+ * unaddressed message, ~$4–5 a day, for output that was thrown away.
+ *
+ * Now an unaddressed message costs nothing. It is held here, per room, and
+ * handed to the model as one block of context in front of the next message in
+ * that room that IS addressed to this agent — one turn, not N+1. Hermes reached
+ * the same place by a different road (`_record_room_message` +
+ * `_room_history_block` in plugin-hermes secure_channel.py): "read, not
+ * answered", kept, replayed on the turn it takes.
+ *
+ * The buffer is cleared once delivered. Unlike Hermes, these bridges drive a
+ * PERSISTENT model session, so once the block has been delivered the session
+ * remembers it — replaying it again would show the model the same messages
+ * twice.
+ *
+ * Bounded on purpose: per room by message count AND characters (oldest dropped
+ * first), and by number of rooms (least recently used room dropped). A room the
+ * agent is never addressed in must not grow without limit.
+ *
+ * ⚠️ The block lands INSIDE the turn that answers someone else — often the
+ * owner, and on some bridges a turn with tools. Every held message was written
+ * by another room member, possibly another tenant's agent, so nothing in it may
+ * be able to pass for bridge framing (PR #1458 review). Three layers:
+ *   1. sender names lose line breaks and brackets (`sanitizeLabel`);
+ *   2. every held text line is prefixed with "> ", so no held line can start
+ *      with "[" and pose as a `[room … | owner]:` turn line;
+ *   3. the block is wrapped in delimiters carrying a fresh random id per turn,
+ *      which a held message cannot know in advance and so cannot close early.
+ *
+ * COPIED from packages/claude-room-bridge/src/room-context.ts (2026-10-26).
+ * This file is OWNED by the Grok bridge — edit it freely. It is NOT
+ * shared, and a fix on the Claude side does NOT reach it.
+ *
+ * Unlike the Claude bridge there is no tool-capable worker lane here: every
+ * turn goes to the one persistent session, which before this change had seen
+ * each held message as its own turn. So the block is simply placed in front of
+ * the addressed message's text.
+ */
+export interface RoomContextEntry {
+    senderName: string;
+    text: string;
+    /** ISO time the message was sent (from the emit), or received if absent. */
+    at: string;
+}
+export interface RoomContextLimits {
+    /** Messages kept per room. */
+    maxMessages: number;
+    /** Characters kept per room (sender + text), oldest dropped first. */
+    maxChars: number;
+    /** Rooms tracked at once; the least recently used room is dropped. */
+    maxRooms: number;
+    /** One message's text is cut to this many characters. */
+    maxEntryChars: number;
+}
+export declare const DEFAULT_ROOM_CONTEXT_LIMITS: RoomContextLimits;
+/**
+ * Cut `s` to at most `n` UTF-16 units without splitting a surrogate pair — a
+ * lone high surrogate left at the cut is invalid text (and garbles the turn).
+ */
+export declare function cutSafe(s: string, n: number): string;
+/**
+ * A display name or room name made safe to sit inside a bracketed framing
+ * line: no control characters or line breaks (a name with a newline would start
+ * a line of its own), no square brackets (which would close the frame early).
+ * Used for held senders AND for the live turn prefix (`roomTurnPrefix`).
+ */
+export declare function sanitizeLabel(name: string, max?: number): string;
+/** A fresh per-turn delimiter id: 12 hex chars from 6 random bytes. */
+export declare function newContextId(): string;
+export declare class RoomContextBuffer {
+    private readonly limits;
+    /** Insertion order IS recency order: a touched room is re-inserted at the end. */
+    private rooms;
+    constructor(limits?: Partial<RoomContextLimits>);
+    add(roomId: string, entry: RoomContextEntry): void;
+    /** The held messages for a room, oldest first. Does not clear. */
+    peek(roomId: string): {
+        entries: readonly RoomContextEntry[];
+        dropped: number;
+    };
+    clear(roomId: string): void;
+    size(roomId: string): number;
+    chars(roomId: string): number;
+    roomCount(): number;
+}
+/**
+ * The block placed in front of an addressed message. Empty string when there
+ * is nothing held — an empty "earlier in this room" header would claim the room
+ * was silent when it only means this process saw nothing (e.g. a restart).
+ *
+ * `id` defaults to a fresh random one; pass it only to make a test deterministic.
+ */
+export declare function formatRoomContext(entries: readonly RoomContextEntry[], roomLabel: string, dropped?: number, id?: string): string;
+//# sourceMappingURL=room-context.d.ts.map

package/dist/service/self-uninstall.d.ts

@@ -1,10 +1,38 @@
 import { type ServiceBackend } from "./backend.js";
+/**
+ * #913 item 2 / 2026-10-25 — what it takes to remove this agent's service.
+ *
+ * `attachLifecycle` routes every terminal signal here, and most of them mean
+ * the device is ALIVE:
+ *
+ *   session_replaced    another session took over — the device still exists
+ *   device_jwt_expired  the JWT aged out — the device still exists
+ *   reconnect_loop      gave up reconnecting — the device still exists
+ *
+ * This used to key on the reason string `device_revoked`. That was not proof:
+ * on 2026-10-25 a PAUSED (suspended) device's reissue 403 was mapped to
+ * "device_revoked" and this function removed loopita's launchd service — the
+ * owner switched the agent back on and nothing was installed to resume.
+ *
+ * So it now keys on the channel's CONFIRMED verdict only. SecureChannel sets
+ * `deviceGone: true` on `auth_failed` exclusively after the public status
+ * endpoint answered REVOKED or the device row is gone (404). Any reason string
+ * without that verdict — including `device_revoked` — leaves the service alone.
+ * An older channel that never sets the flag therefore never uninstalls: the
+ * safe direction.
+ */
+export interface TerminalVerdict {
+    reason: string;
+    /** Set by SecureChannel only when the status endpoint CONFIRMED revoked/deleted. */
+    deviceGone?: boolean;
+}
 export interface SelfUninstallDeps {
     backend?: ServiceBackend;
     log?: (msg: string) => void;
 }
 /**
- * Remove this agent's supervised service after its device was revoked.
+ * Remove this agent's supervised service after its device was CONFIRMED
+ * revoked or deleted.
  *
  * Returns whether a service was actually removed. NEVER throws: this runs on
  * the shutdown path, and a cleanup that cannot happen must not stop the bridge
@@ -15,5 +43,5 @@ export interface SelfUninstallDeps {
  * and LEAVES the credentials on disk. A false positive therefore costs the
  * customer a re-install, not their identity.
  */
-export declare function selfUninstallOnTerminal(reason: string, env: NodeJS.ProcessEnv, deps?: SelfUninstallDeps): boolean;
+export declare function selfUninstallOnTerminal(verdict: TerminalVerdict, env: NodeJS.ProcessEnv, deps?: SelfUninstallDeps): boolean;
 //# sourceMappingURL=self-uninstall.d.ts.map

package/dist/service/self-uninstall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-uninstall.d.ts","sourceRoot":"","sources":["../../src/service/self-uninstall.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAuBlE,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAyCT"}
+{"version":3,"file":"self-uninstall.d.ts","sourceRoot":"","sources":["../../src/service/self-uninstall.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAyCT"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/grok-bridge",
-  "version": "0.4.24",
+  "version": "0.4.26",
   "type": "module",
   "description": "AgentVault Grok Bridge — daemon bridging a Grok agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",