@creatornader/agent-bridge 0.5.2 → 0.6.0

package/docs/ecosystem.md

@@ -1,9 +1,9 @@
 # Agent Bridge in the agent ecosystem
 
-Agent Bridge is a durable mailbox and work-delivery control plane for agent runtimes
-that may disconnect, restart, or move between machines. It stores immutable messages,
-read receipts, delivery claims, leases, retries, and replay state. It does not own the
-full agent stack.
+Agent Bridge lets agents exchange messages and hand off work across tools, sessions,
+and machines. It preserves each inbox through disconnections and restarts. It stores
+immutable messages, read receipts, delivery claims, leases, retries, and replay state.
+It does not own the full agent stack.
 
 ## System boundaries
 
@@ -21,6 +21,8 @@ defines the protocol boundary and the separate meanings of read receipts, delive
 settlement, and external task completion.
 [ADR-0003](decisions/0003-host-adapters-and-consumer-instance-keys.md) defines
 the host layers and consumer instance-key contract.
+[ADR-0005](decisions/0005-retire-direct-supabase-runtime.md) keeps Supabase as a
+PostgreSQL hosting option while removing its direct runtime adapter.
 
 ## Harnesses, hosts, adapters, and access
 

package/docs/troubleshooting.md

@@ -81,6 +81,21 @@ Queued sends retain their idempotency keys. Long-lived MCP clients retry them, a
 `agent-bridge sync` triggers the same bounded replay manually. Claims, lease changes,
 delivery settlement, presence, and read-receipt writes still require the gateway.
 
+## Legacy Supabase provider was removed
+
+Agent Bridge 0.6.0 rejects `legacy`, `supabase`, `legacy-supabase`, and key-only
+configurations. These names selected the direct PostgREST adapter in older releases.
+Choose local mode for one machine or create a principal-bound gateway backend:
+
+```bash
+agent-bridge init --provider local
+```
+
+Do not point new clients at `public.shared_context`. If the old table still contains
+data that has not been migrated, preserve it and follow the historical import and
+reconciliation steps in the
+[README](../README.md#upgrading-historical-supabase-deployments).
+
 ## Migration gate reported by status or doctor
 
 `clients migrate stage` does not begin a drain. `clients migrate cutover

package/llms.txt

@@ -3,7 +3,7 @@
 Repository: https://github.com/creatornader/agent-bridge
 Package: @creatornader/agent-bridge
 
-Agent Bridge is a durable, pull-first mailbox and work-delivery control plane for AI agents in different clients, processes, sessions, and machines.
+Agent Bridge lets AI agents send messages and hand off work across tools, sessions, and machines. Messages survive restarts and offline periods, and each agent resumes from its own inbox.
 History uses mailbox `inbox` (default), `sent`, or `all`. Receipt state is `any` (default), `unread`, or `read`; it is caller-relative and inbox-only. CLI: `inbox`, `sent`, and `history --mailbox/--receipt-state`. Deprecated unacked-principal arguments must equal the configured identity.
 
 ## Install
@@ -29,7 +29,6 @@ services can call the CLI or HTTPS API or embed the Node library without a host
 
 - local: SQLite WAL, no account or daemon
 - gateway: authenticated HTTPS, PostgreSQL authority, SQLite edge outbox and cache
-- legacy-supabase: compatibility with the v1 shared_context schema
 
 ## Commands
 
@@ -190,7 +189,7 @@ sidecars rather than read uncheckpointed outbox state. Resume uses only the reta
 request and waits for an unexpired drain lease instead of taking it over.
 
 Project is an optional immutable message label, not a tenant or identity selector. Omitted project reads include labeled and unlabeled messages. Exact project filters are supported by CLI, MCP, HTTP, and stores. Gateway workspace assertions must match the bound credential before network access.
-Local CLI calls may override workspace for one invocation. The legacy Supabase schema is global and always reports workspace `*`; use project labels for legacy filtering.
+Local CLI calls may override workspace for one invocation. Agent Bridge 0.6.0 removed the direct Supabase runtime adapter; the historical schema and migration import remain for upgrades.
 
 ## References
 
@@ -203,6 +202,7 @@ Local CLI calls may override workspace for one invocation. The legacy Supabase s
 - docs/decisions/0001-protocol-layers-and-acknowledgment-semantics.md: protocol layers and acknowledgment semantics
 - docs/decisions/0002-canonical-operation-contract-registry.md: generated contracts and version negotiation
 - docs/decisions/0003-host-adapters-and-consumer-instance-keys.md: host layers and instance-key semantics
+- docs/decisions/0005-retire-direct-supabase-runtime.md: runtime-provider retirement and migration boundary
 - docs/architecture-v2.md: protocol, storage, identity, delivery, and acceptance decisions
 - clients/*.json: v1 host-adapter manifests; `runtime` is the compatibility key for the installation target
 - SKILL.md: concise agent operating instructions

package/openapi/agent-bridge-v2.openapi.json

@@ -331,8 +331,7 @@
                       "enum": [
                         "scoped-credential",
                         "credential-wide",
-                        "process-identity",
-                        "legacy-key"
+                        "process-identity"
                       ]
                     },
                     "surface": {
@@ -345,8 +344,7 @@
                     "provider": {
                       "enum": [
                         "local",
-                        "gateway",
-                        "legacy-supabase"
+                        "gateway"
                       ]
                     },
                     "grantedScopes": {
@@ -849,8 +847,7 @@
                     "schemaVersion": {
                       "enum": [
                         "local-v2",
-                        "postgres-v2",
-                        "legacy-v1"
+                        "postgres-v2"
                       ]
                     },
                     "deliverySupported": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@creatornader/agent-bridge",
-  "version": "0.5.2",
-  "description": "Durable, pull-first mailbox and work-delivery control plane for AI agents across runtimes, sessions, and machines.",
+  "version": "0.6.0",
+  "description": "Messaging and work delivery for AI agents across tools, sessions, and machines.",
   "type": "module",
   "license": "Apache-2.0",
   "author": "Nader Helmy",
@@ -87,7 +87,7 @@
     "pretest": "npm run build",
     "test": "vitest run",
     "test:built": "vitest run",
-    "test:postgres:contract": "vitest run test/postgres_integration.test.ts --maxWorkers=1 --hookTimeout=60000",
+    "test:postgres:contract": "vitest run test/postgres_integration.test.ts --maxWorkers=1 --testTimeout=30000 --hookTimeout=60000",
     "test:postgres:preflight": "node scripts/postgres-preflight.mjs",
     "test:postgres:preflight:full": "node scripts/postgres-preflight.mjs --full",
     "preflight:postgres:production": "npm run build --silent && node dist/postgres-production-preflight.js",

package/schemas/agent-bridge-v2.capabilities.json

@@ -70,8 +70,7 @@
               "enum": [
                 "scoped-credential",
                 "credential-wide",
-                "process-identity",
-                "legacy-key"
+                "process-identity"
               ]
             },
             "surface": {
@@ -84,8 +83,7 @@
             "provider": {
               "enum": [
                 "local",
-                "gateway",
-                "legacy-supabase"
+                "gateway"
               ]
             },
             "grantedScopes": {
@@ -219,7 +217,8 @@
           "retry-max-ms",
           "retry-jitter",
           "not-before",
-          "message-id"
+          "message-id",
+          "queue-only"
         ],
         "outputSchema": {
           "type": "object",

package/schemas/agent-bridge-v2.mcp.json

@@ -3,8 +3,7 @@
   "protocolVersion": "2.1",
   "scopeEnforcementByProvider": {
     "local": false,
-    "gateway": true,
-    "legacy-supabase": false
+    "gateway": true
   },
   "tools": [
     {
@@ -59,8 +58,7 @@
             "enum": [
               "scoped-credential",
               "credential-wide",
-              "process-identity",
-              "legacy-key"
+              "process-identity"
             ]
           },
           "surface": {
@@ -73,8 +71,7 @@
           "provider": {
             "enum": [
               "local",
-              "gateway",
-              "legacy-supabase"
+              "gateway"
             ]
           },
           "grantedScopes": {
@@ -118,8 +115,7 @@
       "requiredScopes": [],
       "providers": [
         "local",
-        "gateway",
-        "legacy-supabase"
+        "gateway"
       ]
     },
     {
@@ -387,8 +383,7 @@
       ],
       "providers": [
         "local",
-        "gateway",
-        "legacy-supabase"
+        "gateway"
       ]
     },
     {
@@ -627,8 +622,7 @@
       ],
       "providers": [
         "local",
-        "gateway",
-        "legacy-supabase"
+        "gateway"
       ]
     },
     {

package/schemas/agent-bridge-v2.schema.json

@@ -5,8 +5,7 @@
   "protocolVersion": "2.1",
   "scopeEnforcementByProvider": {
     "local": false,
-    "gateway": true,
-    "legacy-supabase": false
+    "gateway": true
   },
   "$defs": {
     "ErrorEnvelope": {
@@ -320,8 +319,7 @@
           "enum": [
             "scoped-credential",
             "credential-wide",
-            "process-identity",
-            "legacy-key"
+            "process-identity"
           ]
         },
         "surface": {
@@ -334,8 +332,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "grantedScopes": {
@@ -420,8 +417,7 @@
           "enum": [
             "scoped-credential",
             "credential-wide",
-            "process-identity",
-            "legacy-key"
+            "process-identity"
           ]
         },
         "surface": {
@@ -434,8 +430,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "grantedScopes": {
@@ -495,8 +490,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "deliverySupported": {
@@ -780,8 +774,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "workspace": {
@@ -803,8 +796,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "endpoint": {
@@ -854,8 +846,7 @@
             "schemaVersion": {
               "enum": [
                 "local-v2",
-                "postgres-v2",
-                "legacy-v1"
+                "postgres-v2"
               ]
             },
             "deliverySupported": {
@@ -1161,8 +1152,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "workspace": {
@@ -1184,8 +1174,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "endpoint": {
@@ -1235,8 +1224,7 @@
             "schemaVersion": {
               "enum": [
                 "local-v2",
-                "postgres-v2",
-                "legacy-v1"
+                "postgres-v2"
               ]
             },
             "deliverySupported": {

package/dist/chunk-2EVLG3YA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client-config.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { BridgePrincipal } from \"./bridge-domain.js\";\n\nexport type ClientProvider = \"local\" | \"gateway\" | \"legacy-supabase\";\n\nexport interface ClientEnvironment extends NodeJS.ProcessEnv {\n  AGENT_BRIDGE_PROVIDER?: string;\n  AGENT_BRIDGE_URL?: string;\n  AGENT_BRIDGE_KEY?: string;\n  AGENT_BRIDGE_TOKEN?: string;\n  AGENT_BRIDGE_AGENT?: string;\n  AGENT_BRIDGE_WORKSPACE?: string;\n  AGENT_BRIDGE_INSTANCE?: string;\n  AGENT_BRIDGE_DB?: string;\n  AGENT_BRIDGE_EDGE_DB?: string;\n  AGENT_BRIDGE_CONFIG?: string;\n  AGENT_BRIDGE_CURSOR?: string;\n}\n\nexport interface ClientConfig {\n  provider: ClientProvider;\n  principal: BridgePrincipal;\n  url?: string;\n  credential?: string;\n  databasePath: string;\n  edgeDatabasePath: string;\n  cursorPath: string;\n  configPath: string;\n}\n\nfunction pathComponent(value: string): string {\n  const readable = value.replace(/[^A-Za-z0-9._-]+/g, \"_\").slice(0, 48) || \"_\";\n  const suffix = createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 12);\n  return `${readable}-${suffix}`;\n}\n\nfunction clean(value: string | undefined): string | undefined {\n  return value?.trim() || undefined;\n}\n\nfunction unquote(value: string): string {\n  const input = value.trim();\n  if (input.length > 1 && ((input[0] === '\"' && input[input.length - 1] === '\"') || (input[0] === \"'\" && input[input.length - 1] === \"'\"))) return input.slice(1, -1);\n  return input;\n}\n\nexport function readClientConfigFile(path: string): Record<string, string> {\n  if (!existsSync(path)) return {};\n  const result: Record<string, string> = {};\n  for (const raw of readFileSync(path, \"utf8\").split(/\\r?\\n/)) {\n    const line = raw.trim();\n    if (!line || line.startsWith(\"#\")) continue;\n    const separator = line.indexOf(\"=\");\n    if (separator > 0) result[line.slice(0, separator).trim()] = unquote(line.slice(separator + 1));\n  }\n  return result;\n}\n\nexport function resolveClientConfig(\n  env: ClientEnvironment = process.env,\n  explicitAgent?: string,\n): ClientConfig {\n  const home = clean(env.HOME) ?? homedir();\n  const configPath = clean(env.AGENT_BRIDGE_CONFIG) ?? join(home, \".agent-bridge\", \"config\");\n  const file = readClientConfigFile(configPath);\n  const value = (key: keyof ClientEnvironment) => clean(env[key]) ?? clean(file[key]);\n  const rawProvider = value(\"AGENT_BRIDGE_PROVIDER\") ?? (value(\"AGENT_BRIDGE_TOKEN\") ? \"gateway\" : value(\"AGENT_BRIDGE_URL\") ? \"legacy-supabase\" : \"local\");\n  const provider = rawProvider === \"legacy\" || rawProvider === \"supabase\" ? \"legacy-supabase\" : rawProvider;\n  if (!([\"local\", \"gateway\", \"legacy-supabase\"] as string[]).includes(provider)) throw new Error(`Unsupported AGENT_BRIDGE_PROVIDER: ${rawProvider}`);\n  // Identity belongs to the active client process. A shared config file must\n  // never make one runtime impersonate the client that initialized the bridge.\n  const configuredAgent = clean(env.AGENT_BRIDGE_AGENT);\n  const requestedAgent = clean(explicitAgent);\n  if (configuredAgent && requestedAgent && configuredAgent !== requestedAgent) {\n    throw new Error(`source must match AGENT_BRIDGE_AGENT (${configuredAgent}); got ${requestedAgent}`);\n  }\n  const agent = requestedAgent ?? configuredAgent;\n  if (!agent) throw new Error(\"AGENT_BRIDGE_AGENT is required\");\n  const url = value(\"AGENT_BRIDGE_URL\");\n  const credential = provider === \"gateway\" ? value(\"AGENT_BRIDGE_TOKEN\") : value(\"AGENT_BRIDGE_KEY\");\n  if (provider !== \"local\" && (!url || !credential)) throw new Error(`${provider} requires AGENT_BRIDGE_URL and ${provider === \"gateway\" ? \"AGENT_BRIDGE_TOKEN\" : \"AGENT_BRIDGE_KEY\"}`);\n  const workspace = provider === \"legacy-supabase\"\n    ? \"*\"\n    : value(\"AGENT_BRIDGE_WORKSPACE\") ?? \"default\";\n  const instance = clean(env.AGENT_BRIDGE_INSTANCE);\n  const databasePath = value(\"AGENT_BRIDGE_DB\") ?? join(home, \".agent-bridge\", \"bridge.sqlite3\");\n  const edgeDatabasePath = value(\"AGENT_BRIDGE_EDGE_DB\") ?? join(home, \".agent-bridge\", \"edge.sqlite3\");\n  const cursorScope = createHash(\"sha256\")\n    .update(`${provider}\\0${provider === \"local\" ? databasePath : url}`)\n    .digest(\"hex\")\n    .slice(0, 16);\n  return {\n    provider: provider as ClientProvider,\n    principal: { workspace, agent, instance },\n    url,\n    credential,\n    databasePath,\n    edgeDatabasePath,\n    cursorPath: value(\"AGENT_BRIDGE_CURSOR\") ?? join(\n      home,\n      \".agent-bridge\",\n      \"cursors\",\n      pathComponent(provider),\n      cursorScope,\n      pathComponent(workspace),\n      pathComponent(agent),\n      pathComponent(instance ?? \"default\"),\n    ),\n    configPath,\n  };\n}\n"],"mappings":";;;AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AA8BrB,SAAS,cAAc,OAAuB;AAC5C,QAAM,WAAW,MAAM,QAAQ,qBAAqB,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK;AACzE,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3E,SAAO,GAAG,QAAQ,IAAI,MAAM;AAC9B;AAEA,SAAS,MAAM,OAA+C;AAC5D,SAAO,OAAO,KAAK,KAAK;AAC1B;AAEA,SAAS,QAAQ,OAAuB;AACtC,QAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,MAAM,SAAS,MAAO,MAAM,CAAC,MAAM,OAAO,MAAM,MAAM,SAAS,CAAC,MAAM,OAAS,MAAM,CAAC,MAAM,OAAO,MAAM,MAAM,SAAS,CAAC,MAAM,KAAO,QAAO,MAAM,MAAM,GAAG,EAAE;AAClK,SAAO;AACT;AAEO,SAAS,qBAAqB,MAAsC;AACzE,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAM,SAAiC,CAAC;AACxC,aAAW,OAAO,aAAa,MAAM,MAAM,EAAE,MAAM,OAAO,GAAG;AAC3D,UAAM,OAAO,IAAI,KAAK;AACtB,QAAI,CAAC,QAAQ,KAAK,WAAW,GAAG,EAAG;AACnC,UAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,QAAI,YAAY,EAAG,QAAO,KAAK,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,QAAQ,KAAK,MAAM,YAAY,CAAC,CAAC;AAAA,EAChG;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MAAyB,QAAQ,KACjC,eACc;AACd,QAAM,OAAO,MAAM,IAAI,IAAI,KAAK,QAAQ;AACxC,QAAM,aAAa,MAAM,IAAI,mBAAmB,KAAK,KAAK,MAAM,iBAAiB,QAAQ;AACzF,QAAM,OAAO,qBAAqB,UAAU;AAC5C,QAAM,QAAQ,CAAC,QAAiC,MAAM,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG,CAAC;AAClF,QAAM,cAAc,MAAM,uBAAuB,MAAM,MAAM,oBAAoB,IAAI,YAAY,MAAM,kBAAkB,IAAI,oBAAoB;AACjJ,QAAM,WAAW,gBAAgB,YAAY,gBAAgB,aAAa,oBAAoB;AAC9F,MAAI,CAAE,CAAC,SAAS,WAAW,iBAAiB,EAAe,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,sCAAsC,WAAW,EAAE;AAGlJ,QAAM,kBAAkB,MAAM,IAAI,kBAAkB;AACpD,QAAM,iBAAiB,MAAM,aAAa;AAC1C,MAAI,mBAAmB,kBAAkB,oBAAoB,gBAAgB;AAC3E,UAAM,IAAI,MAAM,yCAAyC,eAAe,UAAU,cAAc,EAAE;AAAA,EACpG;AACA,QAAM,QAAQ,kBAAkB;AAChC,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gCAAgC;AAC5D,QAAM,MAAM,MAAM,kBAAkB;AACpC,QAAM,aAAa,aAAa,YAAY,MAAM,oBAAoB,IAAI,MAAM,kBAAkB;AAClG,MAAI,aAAa,YAAY,CAAC,OAAO,CAAC,YAAa,OAAM,IAAI,MAAM,GAAG,QAAQ,kCAAkC,aAAa,YAAY,uBAAuB,kBAAkB,EAAE;AACpL,QAAM,YAAY,aAAa,oBAC3B,MACA,MAAM,wBAAwB,KAAK;AACvC,QAAM,WAAW,MAAM,IAAI,qBAAqB;AAChD,QAAM,eAAe,MAAM,iBAAiB,KAAK,KAAK,MAAM,iBAAiB,gBAAgB;AAC7F,QAAM,mBAAmB,MAAM,sBAAsB,KAAK,KAAK,MAAM,iBAAiB,cAAc;AACpG,QAAM,cAAc,WAAW,QAAQ,EACpC,OAAO,GAAG,QAAQ,KAAK,aAAa,UAAU,eAAe,GAAG,EAAE,EAClE,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,SAAO;AAAA,IACL;AAAA,IACA,WAAW,EAAE,WAAW,OAAO,SAAS;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAM,qBAAqB,KAAK;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,cAAc,SAAS;AAAA,MACvB,cAAc,KAAK;AAAA,MACnB,cAAc,YAAY,SAAS;AAAA,IACrC;AAAA,IACA;AAAA,EACF;AACF;","names":[]}