@nopeek/agent-bridge 0.6.2 → 0.6.3

package/dist/bot.d.ts

@@ -27,6 +27,7 @@ export declare class BotRunner {
     private declined;
     private ownerPresence;
     private mutedNoOwner;
+    private runtimeOwnerId;
     private chains;
     private cantPost;
     private log;
@@ -46,6 +47,9 @@ export declare class BotRunner {
     refreshAccess(): Promise<void>;
     /** Sender permitted to talk to this bot? Fail closed if access never loaded. */
     private isAllowed;
+    /** The USER whose presence the owner-present policy requires: the bot's
+     *  owner for user-owned bots, else the user who paired this runtime. */
+    private effectiveOwnerId;
     /** Is the bot's owner currently a member of this channel? Server-checked via
      *  the channel roster (the bot is a member, so it may list members), cached
      *  for a short TTL, invalidated by member.joined/left. On a fetch failure we

package/dist/bot.js

@@ -39,6 +39,10 @@ export class BotRunner {
     // server per channel and cached briefly; member.joined/left invalidate it.
     ownerPresence = new Map();
     mutedNoOwner = new Set(); // channels already logged as owner-absent
+    // For a workspace-owned bot there is no single owner USER — the accountable
+    // human is whoever paired the runtime that runs it. The access endpoint
+    // reports that as runtimeOwnerUserId; the owner-present policy uses it.
+    runtimeOwnerId;
     // Per-channel serialization: two messages in one channel must be answered in
     // order, one at a time — concurrent brain runs against the same agent session
     // (e.g. one Hermes session per channel) deadlock or reply out of order.
@@ -107,6 +111,8 @@ export class BotRunner {
                 throw new Error(`access HTTP ${res.status}`);
             const j = (await res.json());
             this.allowed = new Set(j.allowedUserIds ?? []);
+            if (j.runtimeOwnerUserId)
+                this.runtimeOwnerId = j.runtimeOwnerUserId;
             // The access response is authoritative on ownership — adopt it so the
             // owner-present policy always knows who the owner is, even when the
             // runtime/bots listing omitted the fields.
@@ -129,12 +135,19 @@ export class BotRunner {
             return false; // fail closed until we know the list
         return this.allowed.has(senderUserId);
     }
+    /** The USER whose presence the owner-present policy requires: the bot's
+     *  owner for user-owned bots, else the user who paired this runtime. */
+    effectiveOwnerId() {
+        if (this.info.ownerType === "workspace")
+            return this.runtimeOwnerId;
+        return this.info.ownerId ?? this.runtimeOwnerId;
+    }
     /** Is the bot's owner currently a member of this channel? Server-checked via
      *  the channel roster (the bot is a member, so it may list members), cached
      *  for a short TTL, invalidated by member.joined/left. On a fetch failure we
      *  keep the last-known answer; with no known answer we FAIL CLOSED. */
     async ownerIsChannelMember(channelId) {
-        const ownerId = this.info.ownerId;
+        const ownerId = this.effectiveOwnerId();
         if (!ownerId)
             return false; // unknown owner → fail closed
         const cached = this.ownerPresence.get(channelId);
@@ -214,7 +227,7 @@ export class BotRunner {
             if (!p?.channelId)
                 return;
             this.ownerPresence.delete(p.channelId);
-            if (p.userId && p.userId === this.info.ownerId) {
+            if (p.userId && p.userId === this.effectiveOwnerId()) {
                 this.mutedNoOwner.delete(p.channelId); // re-log if the owner leaves again later
                 this.log(`owner membership changed in ${p.channelId} — presence cache invalidated`);
             }
@@ -311,15 +324,16 @@ export class BotRunner {
         // OWNER-PRESENT POLICY: in a multi-party channel (anything but a direct
         // chat), a non-owner sender may use the bot ONLY while the bot's owner is
         // also a member of that channel. Owner absent → completely silent (no
-        // brain run, not even the decline notice), regardless of grants. Workspace
-        // bots are exempt — they have no single owner user to require present.
-        if (m.senderUserId !== this.info.ownerId && this.info.ownerType !== "workspace") {
+        // brain run, not even the decline notice), regardless of grants. For a
+        // workspace bot "owner" means the user who paired this runtime.
+        const effOwner = this.effectiveOwnerId();
+        if (m.senderUserId !== effOwner) {
             const ch = await this.getChannel(m.channelId);
             if (ch.record.kind !== "direct") {
                 if (!(await this.ownerIsChannelMember(m.channelId))) {
                     if (!this.mutedNoOwner.has(m.channelId)) {
                         this.mutedNoOwner.add(m.channelId);
-                        this.log(`muting ${m.channelId} — owner ${this.info.ownerId ?? "?"} is not a member (owner-present policy); staying silent`);
+                        this.log(`muting ${m.channelId} — owner ${effOwner ?? "?"} is not a member (owner-present policy); staying silent`);
                     }
                     return;
                 }

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BridgeConfig, Pairing, BrainSpec, BrainBackend } from "./config.js";
-export declare const VERSION = "0.6.2";
+export declare const VERSION = "0.6.3";
 export interface PairRequest {
     pairingSecret: string;
     appId: string;

package/dist/bridge.js

@@ -17,7 +17,7 @@ import { resolveBrain } from "./brain.js";
 import { provisionSoul, provisionHermesProfile } from "./backends.js";
 import { reportCapabilities } from "./capabilities.js";
 import { isBrainBackend } from "./config.js";
-export const VERSION = "0.6.2";
+export const VERSION = "0.6.3";
 /** How often to re-probe + report brain availability to the server. */
 const CAPABILITIES_INTERVAL_MS = 5 * 60_000;
 export class PairError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nopeek/agent-bridge",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Run your own agents as E2EE NoPeek bots. Pairs with one-time codes (multiple accounts per computer), runs every bot each account owns, and pipes messages to any command or webhook.",
   "type": "module",
   "license": "MIT",