@agentvault/muse-bridge 0.1.30 → 0.1.31

package/dist/bridge.d.ts

@@ -15,6 +15,12 @@ export interface RoomMessage {
      *  `plaintext`. The @ gate reads this; absent on emitters < 0.23.42. */
     caption?: string;
     senderIsAgent?: boolean;
+    /** #1459 — SecureChannel: a human in THIS agent's own account. Absent on
+     *  emitters < 0.23.55, which reads as "not the owner" (fail closed). */
+    senderIsOwner?: boolean;
+    /** #1459 — SecureChannel: this turn carries a file from someone other than
+     *  the owner. Only an explicit `false` lets an owner turn be powered. */
+    foreignContent?: boolean;
     /** ISO send time from the emit (`data.created_at`). Used to stamp a message
      *  held as room context; receipt time stands in when absent. */
     timestamp?: string;
@@ -108,6 +114,8 @@ export declare function attachLifecycle(channel: LifecycleChannel, opts?: {
         restart: boolean;
     }) => void;
 }): void;
+/** #1459 — appended to an owner turn that lost full access to someone else's file. */
+export declare const FILE_LOCK_NOTE: string;
 export declare function roomTurnPrefix(roomId: string, senderName: string, roomName?: string): string;
 /**
  * What a held (unaddressed) room message contributes as context: the CAPTION

package/dist/index.js

@@ -11798,11 +11798,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.54" : FALLBACK;
+  const v2 = true ? "0.23.55" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "caa1937" : "";
+  const raw = true ? "45e77bd" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -13215,6 +13215,14 @@ function _isSelfHubAddress(ownHubAddress, target) {
   const tgt = (target ?? "").trim().toLowerCase();
   return own2.length > 0 && own2 === tgt;
 }
+function keepKnownMemberTenants(previous, next) {
+  const known = /* @__PURE__ */ new Map();
+  for (const m2 of previous) if (m2.tenantId) known.set(m2.deviceId, m2.tenantId);
+  return next.map((m2) => {
+    const tenantId = m2.tenantId ? void 0 : known.get(m2.deviceId);
+    return tenantId ? { ...m2, tenantId } : m2;
+  });
+}
 function historyErrorReason(error2) {
   let name = "Error";
   let status;
@@ -71809,15 +71817,19 @@ var init_dist = __esm({
            */
           _recentRoomAttachments = /* @__PURE__ */ new Map();
           static RECENT_ROOM_ATTACHMENT_MS = 10 * 60 * 1e3;
-          /** #1181: prefix a room turn that carries no attachment with the one saved in this room recently. */
+          /** #1181: prefix a room turn that carries no attachment with the one saved in this room recently.
+           *  `from` is who sent that file (#1459), so the turn can be marked as carrying their content. */
           _withRecentRoomAttachmentNote(roomId, text) {
             const recent = this._recentRoomAttachments.get(roomId);
-            if (!recent) return text;
+            if (!recent) return { text };
             const ageMs = Date.now() - recent.at;
-            if (ageMs > _SecureChannel.RECENT_ROOM_ATTACHMENT_MS) return text;
-            return `[Most recent file in this room: ${recent.filePath} (${recent.name}, received ${Math.round(ageMs / 1e3)}s ago). If this message refers to "the file" or "this file", it means that one \u2014 use your Read tool on it.]
+            if (ageMs > _SecureChannel.RECENT_ROOM_ATTACHMENT_MS) return { text };
+            return {
+              text: `[Most recent file in this room: ${recent.filePath} (${recent.name}, received ${Math.round(ageMs / 1e3)}s ago). If this message refers to "the file" or "this file", it means that one \u2014 use your Read tool on it.]
 
-${text}`;
+${text}`,
+              from: recent.senderDeviceId ?? null
+            };
           }
           /**
            * #1161: room attachments whose caption addressed nobody, NOT yet fetched.
@@ -71831,22 +71843,22 @@ ${text}`;
           _deferredRoomAttachments = /* @__PURE__ */ new Map();
           static DEFERRED_ROOM_ATTACHMENT_MAX = 5;
           static DEFERRED_ROOM_ATTACHMENT_MS = 60 * 60 * 1e3;
-          _deferRoomAttachment(roomId, info) {
+          _deferRoomAttachment(roomId, info, senderDeviceId) {
             const list = this._deferredRoomAttachments.get(roomId) ?? [];
-            list.push({ info, at: Date.now() });
+            list.push({ info, at: Date.now(), senderDeviceId });
             while (list.length > _SecureChannel.DEFERRED_ROOM_ATTACHMENT_MAX) list.shift();
             this._deferredRoomAttachments.set(roomId, list);
             console.log(
               `[SecureChannel] room ${roomId.slice(0, 8)}: attachment ${String(info?.filename ?? "file")} deferred \u2014 caption addresses nobody, fetch on the next @-addressed turn (#1161)`
             );
           }
-          /** Drain the room's deferred attachments that are still fresh (oldest first). */
+          /** Drain the room's deferred attachments that are still fresh (oldest first), with who sent each. */
           _takeDeferredRoomAttachments(roomId) {
             const list = this._deferredRoomAttachments.get(roomId);
             if (!list?.length) return [];
             this._deferredRoomAttachments.delete(roomId);
             const cutoff = Date.now() - _SecureChannel.DEFERRED_ROOM_ATTACHMENT_MS;
-            return list.filter((d2) => d2.at >= cutoff).map((d2) => d2.info);
+            return list.filter((d2) => d2.at >= cutoff).map((d2) => ({ info: d2.info, senderDeviceId: d2.senderDeviceId }));
           }
           /** In-flight roster-refresh promises (per room) — dedup concurrent refreshes. */
           _roomRosterRefreshInFlight = /* @__PURE__ */ new Map();
@@ -73938,7 +73950,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.54" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.55" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -74089,11 +74101,15 @@ ${text}`;
             }
             const existingMlsGroupId = this._persisted.rooms[roomData.roomId]?.mlsGroupId;
             const existingMlsTs = this._persisted.rooms[roomData.roomId]?.lastMlsMessageTs;
+            const members2 = keepKnownMemberTenants(
+              this._persisted.rooms[roomData.roomId]?.members ?? [],
+              roomData.members
+            );
             this._persisted.rooms[roomData.roomId] = {
               roomId: roomData.roomId,
               name: roomData.name,
               conversationIds,
-              members: roomData.members,
+              members: members2,
               ...existingMlsGroupId && { mlsGroupId: existingMlsGroupId },
               ...existingMlsTs && { lastMlsMessageTs: existingMlsTs }
             };
@@ -74598,7 +74614,8 @@ ${text}`;
                   entityType: m2.entity_type,
                   displayName: m2.display_name,
                   identityPublicKey: m2.identity_public_key,
-                  ephemeralPublicKey: m2.ephemeral_public_key
+                  ephemeralPublicKey: m2.ephemeral_public_key,
+                  ...typeof m2.tenant_id === "string" ? { tenantId: m2.tenant_id } : {}
                 }));
                 if (members2.length > 0) {
                   const roomState = this._persisted.rooms[roomId];
@@ -76143,7 +76160,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.54" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.55" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -76299,7 +76316,8 @@ ${text}`;
                       entityType: m2.entity_type,
                       displayName: m2.display_name,
                       identityPublicKey: m2.identity_public_key,
-                      ephemeralPublicKey: m2.ephemeral_public_key
+                      ephemeralPublicKey: m2.ephemeral_public_key,
+                      ...typeof m2.tenant_id === "string" ? { tenantId: m2.tenant_id } : {}
                     })),
                     conversations: (d2.conversations || []).map((c2) => ({
                       id: c2.id,
@@ -76474,7 +76492,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.54" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.55" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -77331,13 +77349,13 @@ ${messageText}`;
            * Returns the text unchanged when there is no attachment or the fetch fails —
            * but a failure is LOGGED and announced in the text, never silent.
            */
-          async _augmentWithAttachment(attachmentInfo, baseText, roomId) {
+          async _augmentWithAttachment(attachmentInfo, baseText, roomId, senderDeviceId) {
             if (!attachmentInfo) return baseText;
             try {
               const { filePath, decrypted } = await this._downloadAndDecryptAttachment(attachmentInfo);
               const mime = String(attachmentInfo.mime ?? "application/octet-stream");
               const name = String(attachmentInfo.filename ?? "attachment");
-              if (roomId) this._recentRoomAttachments.set(roomId, { filePath, name, at: Date.now() });
+              if (roomId) this._recentRoomAttachments.set(roomId, { filePath, name, at: Date.now(), senderDeviceId });
               const textMimes = ["text/", "application/json", "application/xml", "application/csv"];
               if (textMimes.some((m2) => mime.startsWith(m2))) {
                 const content = new TextDecoder().decode(decrypted);
@@ -77993,22 +78011,34 @@ ${baseText}`;
               }
               const caption = messageText;
               const addressed = parseMentions(messageText).length > 0;
+              const foldedFrom = [];
               if (roomAttachment && !addressed) {
-                this._deferRoomAttachment(resolvedRoomId, roomAttachment);
+                this._deferRoomAttachment(resolvedRoomId, roomAttachment, senderDeviceId);
               } else {
                 const deferred = addressed ? this._takeDeferredRoomAttachments(resolvedRoomId) : [];
-                for (const info of deferred) {
-                  messageText = await this._augmentWithAttachment(info, messageText, resolvedRoomId);
+                for (const d2 of deferred) {
+                  messageText = await this._augmentWithAttachment(d2.info, messageText, resolvedRoomId, d2.senderDeviceId);
+                  foldedFrom.push(d2.senderDeviceId ?? null);
                 }
                 if (roomAttachment) {
-                  messageText = await this._augmentWithAttachment(roomAttachment, messageText, resolvedRoomId);
+                  messageText = await this._augmentWithAttachment(roomAttachment, messageText, resolvedRoomId, senderDeviceId);
+                  foldedFrom.push(senderDeviceId ?? null);
                 } else if (deferred.length === 0) {
-                  messageText = this._withRecentRoomAttachmentNote(resolvedRoomId, messageText);
+                  const noted = this._withRecentRoomAttachmentNote(resolvedRoomId, messageText);
+                  messageText = noted.text;
+                  if (noted.from !== void 0) foldedFrom.push(noted.from);
                 }
               }
               const roomMembers = this._persisted?.rooms?.[resolvedRoomId]?.members ?? [];
               const senderMember = roomMembers.find((m2) => m2.deviceId === senderDeviceId);
               const senderIsAgent = senderMember?.entityType === "agent" ? true : senderMember?.entityType === "owner" || senderMember?.entityType === "human" ? false : void 0;
+              const ownTenantId = this._deviceJwt ? this._decodeTenantIdForRecovery(this._deviceJwt) : null;
+              const isOwnerMember = (deviceId) => {
+                const member = deviceId ? roomMembers.find((m2) => m2.deviceId === deviceId) : void 0;
+                return (member?.entityType === "owner" || member?.entityType === "human") && ownTenantId !== null && typeof member?.tenantId === "string" && member.tenantId.toLowerCase() === ownTenantId;
+              };
+              const senderIsOwner = senderIsAgent === false && isOwnerMember(senderDeviceId);
+              const foreignContent = foldedFrom.some((from) => !isOwnerMember(from));
               const metadata = {
                 messageId: data.message_id ?? "",
                 conversationId: "",
@@ -78017,6 +78047,8 @@ ${baseText}`;
                 roomId: resolvedRoomId,
                 senderDeviceId,
                 senderIsAgent,
+                senderIsOwner,
+                foreignContent,
                 senderName: senderMember?.displayName || "unknown",
                 roomName: this._persisted?.rooms?.[resolvedRoomId]?.name,
                 caption
@@ -78042,7 +78074,10 @@ ${baseText}`;
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 // Bridges require an explicit human classification for room tools.
                 // Reply policy separately uses this field for agent-loop prevention.
-                senderIsAgent
+                senderIsAgent,
+                // #1459 — owner-only power keys on these, never on senderIsAgent.
+                senderIsOwner,
+                foreignContent
               });
               const contextualMessage = senderIsAgent ? messageText : `[${senderLabel}]: ${messageText}`;
               Promise.resolve(this.config.onMessage?.(contextualMessage, metadata)).catch((err) => {
@@ -102874,7 +102909,7 @@ data:
         await init_policy_enforcer();
         init_room_protocol();
         init_tool_telemetry();
-        VERSION = true ? "0.23.54" : "0.0.0-dev";
+        VERSION = true ? "0.23.55" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -103595,7 +103630,8 @@ var MuseSession = class {
       text,
       reply,
       autoReplyOnText: opts?.replyExpected ?? opts?.autoReplyOnText,
-      sayAllowed: opts?.replyExpected ?? true
+      sayAllowed: opts?.replyExpected ?? true,
+      ownerTurn: opts?.ownerTurn === true
     });
     if (!this.running) this.drain = this.run();
   }
@@ -103646,7 +103682,7 @@ var MuseSession = class {
           const prompt = this.opts.identity ? `${this.opts.identity}
 
 ${item.text}` : item.text;
-          const result = await this.driver.runTurn(prompt);
+          const result = await this.driver.runTurn(prompt, { ownerTurn: item.ownerTurn });
           await this.maybeFallback(item, result);
         } catch {
           this.log("turn failed reason=driver");
@@ -103743,7 +103779,7 @@ function museSpawnArgs(opts) {
     );
   }
   const provider = opts.provider ?? "meta";
-  const ownerOn = opts.workAllowed === true && opts.gatesRemoved === true;
+  const ownerOn = opts.workAllowed === true && opts.gatesRemoved === true && opts.ownerTurn === true;
   const powerFlags = ownerOn ? ["--yolo"] : ["--disable-shell", "--disable-write"];
   const args = [
     "exec",
@@ -104019,6 +104055,7 @@ async function createMuseProviderAdapter(opts) {
 
 // src/muse-driver.ts
 var SESSION_FILE = "muse-session-id";
+var OWNER_SESSION_FILE = "muse-owner-session-id";
 var DEFAULT_TURN_TIMEOUT_MS = 3e5;
 var SIGKILL_GRACE_MS = 2e3;
 var MuseDriver = class {
@@ -104031,37 +104068,33 @@ var MuseDriver = class {
   spawnFn;
   turnTimeoutMs;
   persistedId = null;
+  ownerId = null;
   current = null;
   child = null;
   probed = false;
   adapter = null;
-  /** Load or create `<dataDir>/muse-session-id`. Does not spawn muse. */
+  /** Load or create `<dataDir>/muse-session-id` and the owner lane's id. Does not spawn muse. */
   async start() {
     mkdirSync3(this.opts.dataDir, { recursive: true });
-    const file = join11(this.opts.dataDir, SESSION_FILE);
-    if (existsSync4(file)) {
-      const existing = readFileSync5(file, "utf8").trim();
-      if (existing) {
-        this.persistedId = existing;
-        return existing;
-      }
-    }
-    this.persistedId = randomUUID5();
-    writeFileSync2(file, this.persistedId + "\n", { encoding: "utf8" });
+    this.persistedId = loadOrMintId(join11(this.opts.dataDir, SESSION_FILE));
+    this.ownerId = loadOrMintId(join11(this.opts.dataDir, OWNER_SESSION_FILE));
     return this.persistedId;
   }
   sessionId() {
     return this.persistedId;
   }
-  runTurn(prompt) {
-    if (!this.persistedId) {
+  ownerSessionId() {
+    return this.ownerId;
+  }
+  runTurn(prompt, opts = {}) {
+    if (!this.persistedId || !this.ownerId) {
       throw new Error("MuseDriver.runTurn before start()");
     }
     if (this.current || this.child) {
       throw new Error("MuseDriver.runTurn called while a turn is in flight");
     }
     this.current = { spoke: false, cancelled: false };
-    return this.executeTurn(prompt).finally(() => {
+    return this.executeTurn(prompt, opts.ownerTurn === true).finally(() => {
       this.current = null;
     });
   }
@@ -104084,8 +104117,8 @@ var MuseDriver = class {
     const dead = await waitForExit(child, SIGKILL_GRACE_MS);
     if (!dead) child.kill("SIGKILL");
   }
-  async executeTurn(prompt) {
-    const sessionId = this.persistedId;
+  async executeTurn(prompt, ownerTurn) {
+    const sessionId = ownerTurn ? this.ownerId : this.persistedId;
     if (!sessionId) {
       throw new Error("MuseDriver.runTurn before start()");
     }
@@ -104099,7 +104132,8 @@ var MuseDriver = class {
       prompt,
       apiKey: this.opts.apiKey,
       workAllowed: readFlag(this.opts.workAllowed),
-      gatesRemoved: readFlag(this.opts.gatesRemoved)
+      gatesRemoved: readFlag(this.opts.gatesRemoved),
+      ownerTurn
     });
     await this.probeUsable(spawn2);
     if (this.current?.cancelled) throw new Error("muse turn stopped");
@@ -104252,6 +104286,15 @@ function defaultSpawn(command, args, options) {
     stdio: ["ignore", "pipe", "pipe"]
   });
 }
+function loadOrMintId(file) {
+  if (existsSync4(file)) {
+    const existing = readFileSync5(file, "utf8").trim();
+    if (existing) return existing;
+  }
+  const id = randomUUID5();
+  writeFileSync2(file, id + "\n", { encoding: "utf8" });
+  return id;
+}
 function readFlag(value) {
   return typeof value === "function" ? value() : value;
 }
@@ -104805,6 +104848,7 @@ function attachLifecycle2(channel, opts = {}) {
     if (/reconnect loop detected/i.test(msg)) terminal("reconnect_loop", true);
   });
 }
+var FILE_LOCK_NOTE = "[AgentVault: this turn has no commands and no file changes, because it includes a file another room member shared. If you were asked to run or change something, say so, and that it will work in a message that doesn't refer to that file, or in a 1:1 chat.]";
 function roomTurnPrefix(roomId, senderName, roomName) {
   return `[room ${roomLabel(roomId, roomName)} | ${sanitizeLabel(senderName)}]`;
 }
@@ -104905,19 +104949,33 @@ function wireBridge(channel, session, target, opts = {}) {
     log(`inbound from ${e.senderName} in ${e.roomId.slice(0, 8)}`);
     target.setRoom(e.roomId);
     const held = roomContext.peek(e.roomId);
-    const contextBlock = formatRoomContext(held.entries, roomLabel(e.roomId, roomNames.get(e.roomId)), held.dropped);
     const turnText = `${roomTurnPrefix(e.roomId, e.senderName, roomNames.get(e.roomId))}: ${e.plaintext}`;
+    const ownerPowered = e.senderIsAgent === false && e.senderIsOwner === true && e.foreignContent === false && workAllowed() && gatesRemoved();
+    const contextBlock = ownerPowered ? "" : formatRoomContext(held.entries, roomLabel(e.roomId, roomNames.get(e.roomId)), held.dropped);
+    const fileLocked = e.senderIsOwner === true && e.foreignContent === true && workAllowed() && gatesRemoved();
+    if (fileLocked) log(`room ${e.roomId.slice(0, 8)}: owner turn WITHOUT full access \u2014 it carries a file another member shared (#1459)`);
+    const body = fileLocked ? `${turnText}
+
+${FILE_LOCK_NOTE}` : turnText;
     session.push(
       contextBlock ? `${contextBlock}
 
-${turnText}` : turnText,
+${body}` : body,
       target.snapshotReply(channel, log),
       {
         autoReplyOnText: false,
-        replyExpected: owes
+        replyExpected: owes,
+        ownerTurn: ownerPowered
       }
     );
-    if (held.entries.length > 0) {
+    if (ownerPowered) {
+      log(`room ${e.roomId.slice(0, 8)}: owner turn with full access`);
+      if (held.entries.length > 0) {
+        log(
+          `room ${e.roomId.slice(0, 8)}: ${held.entries.length} held message(s) kept for the next turn without full access (a full-access turn never carries room context)`
+        );
+      }
+    } else if (held.entries.length > 0) {
       roomContext.clear(e.roomId);
       log(`room ${e.roomId.slice(0, 8)}: delivered ${held.entries.length} held message(s) as context with this turn`);
     }
@@ -104931,7 +104989,10 @@ ${turnText}` : turnText,
       log("inbound 1:1 DM from owner");
     }
     target.setDm(metadata?.conversationId, metadata?.conversationGroupId);
-    session.push(text, target.snapshotReply(channel, log), { autoReplyOnText: ownerAttested });
+    session.push(text, target.snapshotReply(channel, log), {
+      autoReplyOnText: ownerAttested,
+      ownerTurn: ownerAttested
+    });
   });
 }
 
@@ -104989,7 +105050,7 @@ function mkdir700(path2) {
   chmodSync5(path2, 448);
 }
 function packageVersion() {
-  return true ? "0.1.30" : void 0;
+  return true ? "0.1.31" : void 0;
 }
 function helpText(version2) {
   return [

package/dist/muse-driver.d.ts

@@ -40,15 +40,19 @@ export declare class MuseDriver {
     private readonly spawnFn;
     private readonly turnTimeoutMs;
     private persistedId;
+    private ownerId;
     private current;
     private child;
     private probed;
     private adapter;
     constructor(opts: MuseDriverOpts);
-    /** Load or create `<dataDir>/muse-session-id`. Does not spawn muse. */
+    /** Load or create `<dataDir>/muse-session-id` and the owner lane's id. Does not spawn muse. */
     start(): Promise<string>;
     sessionId(): string | null;
-    runTurn(prompt: string): Promise<{
+    ownerSessionId(): string | null;
+    runTurn(prompt: string, opts?: {
+        ownerTurn?: boolean;
+    }): Promise<{
         text: string;
         spoke: boolean;
     }>;

package/dist/muse-session.d.ts

@@ -2,10 +2,13 @@ export interface RoomSession {
     push(text: string, reply?: (text: string) => Promise<void>, opts?: {
         autoReplyOnText?: boolean;
         replyExpected?: boolean;
+        ownerTurn?: boolean;
     }): void;
 }
 export interface DriverLike {
-    runTurn(prompt: string): Promise<{
+    runTurn(prompt: string, opts?: {
+        ownerTurn?: boolean;
+    }): Promise<{
         text: string;
         spoke: boolean;
     }>;
@@ -33,6 +36,7 @@ export declare class MuseSession implements RoomSession {
     push(text: string, reply?: (text: string) => Promise<void>, opts?: {
         autoReplyOnText?: boolean;
         replyExpected?: boolean;
+        ownerTurn?: boolean;
     }): void;
     sayHandler(): (text: string) => void;
     idle(): Promise<void>;

package/dist/muse-spawn.d.ts

@@ -14,6 +14,13 @@ export interface MuseSpawnOpts {
     apiKey?: string;
     workAllowed: boolean;
     gatesRemoved: boolean;
+    /**
+     * #1459 — this turn came from the owner: an owner-attested 1:1 DM, or a room
+     * message whose sender SecureChannel placed in this agent's own account.
+     * Owner power needs all three; the owner's switches alone used to grant it
+     * to whoever @-mentioned the agent.
+     */
+    ownerTurn: boolean;
 }
 export interface MuseSpawnEnv {
     HOME: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/muse-bridge",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "type": "module",
   "description": "AgentVault Muse Bridge — daemon bridging a Muse agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",