@beeos-ai/device-agent 0.12.1 → 0.12.3

package/dist/runtime-authority/contract.d.ts

@@ -1,26 +1,27 @@
 export declare const DEVICE_RUNTIME_CONTRACT_REVISION = "2026-07-14.3";
 export declare const DEVICE_RUNTIME_RPC_PROTOCOL_VERSION = 1;
 /**
- * Review-frozen digest of the BeeOS Types 4 method manifest, which is the only
- * manifest the Agent Gateway admits. It is kept outside the manifest so the
- * hash input can never become self-referential.
- *
- * The digest identifies the *contract vocabulary* both sides compiled against;
- * it is not a claim that this runtime serves every method in it. What this
- * runtime actually serves is declared separately in DEVICE_RUNTIME_METHODS,
- * which the gateway uses as the dispatch allowlist.
+ * Projection-only runtimes hold a lease only to publish their Agent projection;
+ * they do not accept runtime RPC. This object is the exact canonical contract
+ * admitted by Backend's shared/runtimeauth registry.
  */
-export declare const ADMITTED_RUNTIME_MANIFEST_DIGEST = "2746b3d10fd1aed3fa23f717c58dbf7175d04e74274aee8a5a56230f7ce18206";
+export declare const DEVICE_RUNTIME_MANIFEST: Readonly<{
+    schemaVersion: 1;
+    kind: "beeos.device-agent.projection-runtime";
+    contractRevision: "2026-07-14.3";
+    runtimeRpcProtocolVersion: 1;
+    runtimeMethods: readonly string[];
+    capabilities: readonly string[];
+    authorityRoutes: readonly string[];
+}>;
+export declare const ADMITTED_RUNTIME_MANIFEST_DIGEST = "0c5cc7469a6373ffac9b7ca9cba90df9ee24bf48f38487a949bf352b7a2ee73c";
 /**
- * Projection-only runtime: device-agent holds a runtime lease so it can publish
- * its Agent projection, and does not accept ACP service RPC. These names stay
- * deliberately outside the ACP method vocabulary so the gateway's exact-match
- * dispatch allowlist can never route session/* traffic to a handler this
- * runtime does not own.
+ * Keep the registration claims honest. Empty arrays are intentional and are
+ * encoded as [] (not omitted/null), which Backend admits for this digest only.
  */
 export declare const DEVICE_RUNTIME_METHODS: readonly string[];
 export declare const DEVICE_RUNTIME_CAPABILITIES: readonly string[];
-/** Recompute the digest from the exact installed registry artifact. */
+/** Recompute the digest from the exact device projection contract. */
 export declare function computeAdmittedManifestDigest(): string;
 export declare function requireAdmittedManifestDigest(actual: string): string;
 /** Registration must fail closed before any runtime authority is advertised. */

package/dist/runtime-authority/contract.js

@@ -1,42 +1,38 @@
-import { readFileSync } from "node:fs";
-import { createRequire } from "node:module";
 import { canonicalizeJcs, sha256Hex } from "./canonical.js";
 export const DEVICE_RUNTIME_CONTRACT_REVISION = "2026-07-14.3";
 export const DEVICE_RUNTIME_RPC_PROTOCOL_VERSION = 1;
 /**
- * Review-frozen digest of the BeeOS Types 4 method manifest, which is the only
- * manifest the Agent Gateway admits. It is kept outside the manifest so the
- * hash input can never become self-referential.
- *
- * The digest identifies the *contract vocabulary* both sides compiled against;
- * it is not a claim that this runtime serves every method in it. What this
- * runtime actually serves is declared separately in DEVICE_RUNTIME_METHODS,
- * which the gateway uses as the dispatch allowlist.
+ * Projection-only runtimes hold a lease only to publish their Agent projection;
+ * they do not accept runtime RPC. This object is the exact canonical contract
+ * admitted by Backend's shared/runtimeauth registry.
  */
-export const ADMITTED_RUNTIME_MANIFEST_DIGEST = "2746b3d10fd1aed3fa23f717c58dbf7175d04e74274aee8a5a56230f7ce18206";
+export const DEVICE_RUNTIME_MANIFEST = Object.freeze({
+    schemaVersion: 1,
+    kind: "beeos.device-agent.projection-runtime",
+    contractRevision: DEVICE_RUNTIME_CONTRACT_REVISION,
+    runtimeRpcProtocolVersion: DEVICE_RUNTIME_RPC_PROTOCOL_VERSION,
+    runtimeMethods: Object.freeze([]),
+    capabilities: Object.freeze([]),
+    authorityRoutes: Object.freeze([
+        "POST /api/v1/runtime/registrations",
+        "POST /api/v1/runtime/registrations/{registrationId}/heartbeat",
+        "POST /api/v1/agents/sync",
+    ]),
+});
+export const ADMITTED_RUNTIME_MANIFEST_DIGEST = "0c5cc7469a6373ffac9b7ca9cba90df9ee24bf48f38487a949bf352b7a2ee73c";
 /**
- * Projection-only runtime: device-agent holds a runtime lease so it can publish
- * its Agent projection, and does not accept ACP service RPC. These names stay
- * deliberately outside the ACP method vocabulary so the gateway's exact-match
- * dispatch allowlist can never route session/* traffic to a handler this
- * runtime does not own.
+ * Keep the registration claims honest. Empty arrays are intentional and are
+ * encoded as [] (not omitted/null), which Backend admits for this digest only.
  */
-export const DEVICE_RUNTIME_METHODS = Object.freeze([
-    "device-agent/agents.sync",
-]);
-export const DEVICE_RUNTIME_CAPABILITIES = Object.freeze([
-    "device-agent-projection",
-]);
-const require = createRequire(import.meta.url);
-/** Recompute the digest from the exact installed registry artifact. */
+export const DEVICE_RUNTIME_METHODS = DEVICE_RUNTIME_MANIFEST.runtimeMethods;
+export const DEVICE_RUNTIME_CAPABILITIES = DEVICE_RUNTIME_MANIFEST.capabilities;
+/** Recompute the digest from the exact device projection contract. */
 export function computeAdmittedManifestDigest() {
-    const manifestPath = require.resolve("@beeos-ai/beeos-types/contracts/runtime-method-manifest.v1.json");
-    const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-    return sha256Hex(canonicalizeJcs(manifest));
+    return sha256Hex(canonicalizeJcs(DEVICE_RUNTIME_MANIFEST));
 }
 export function requireAdmittedManifestDigest(actual) {
     if (actual !== ADMITTED_RUNTIME_MANIFEST_DIGEST) {
-        throw new Error(`BeeOS Types manifest digest mismatch: expected ${ADMITTED_RUNTIME_MANIFEST_DIGEST}, received ${actual}`);
+        throw new Error(`device projection manifest digest mismatch: expected ${ADMITTED_RUNTIME_MANIFEST_DIGEST}, received ${actual}`);
     }
     return actual;
 }

package/dist/runtime-authority/contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/runtime-authority/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAAG,cAAc,CAAC;AAC/D,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kEAAkE,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACrE,0BAA0B;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC1E,yBAAyB;CAC1B,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,uEAAuE;AACvE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAClC,iEAAiE,CAClE,CAAC;IACF,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,kDAAkD,gCAAgC,cAAc,MAAM,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,8BAA8B;IAC5C,OAAO,6BAA6B,CAAC,6BAA6B,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC"}
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/runtime-authority/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,gCAAgC,GAAG,cAAc,CAAC;AAC/D,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC;IAChB,IAAI,EAAE,uCAAuC;IAC7C,gBAAgB,EAAE,gCAAgC;IAClD,yBAAyB,EAAE,mCAAmC;IAC9D,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAsB;IACtD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAsB;IACpD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7B,oCAAoC;QACpC,+DAA+D;QAC/D,0BAA0B;KAC3B,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kEAAkE,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,cAAc,CAAC;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC,YAAY,CAAC;AAEhF,sEAAsE;AACtE,MAAM,UAAU,6BAA6B;IAC3C,OAAO,SAAS,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC1D,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,wDAAwD,gCAAgC,cAAc,MAAM,EAAE,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,8BAA8B;IAC5C,OAAO,6BAA6B,CAAC,6BAA6B,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beeos-ai/device-agent",
-  "version": "0.12.1",
+  "version": "0.12.3",
   "description": "BeeOS device-agent — Android/desktop AI control agent (TypeScript) speaking ACP over Bridge WebSocket. Connects to a sibling device-mcp-server process for device control.",
   "license": "Apache-2.0",
   "type": "module",
@@ -71,7 +71,7 @@
     "tsx": "^4.19.0",
     "typescript": "^5.8.0",
     "vitest": "^4.1.5",
-    "@beeos-ai/device-mcp-server": "0.4.6"
+    "@beeos-ai/device-mcp-server": "0.4.7"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json && chmod +x dist/inbound/cli/main.js",