@nopeek/agent-bridge 0.7.2 → 0.7.4

package/dist/bot.d.ts

@@ -25,6 +25,8 @@ export declare class BotRunner {
     private channelCache;
     private allowed;
     private accessLoaded;
+    private dmAllowed;
+    private mutedDmPrivate;
     private declined;
     private ownerPresence;
     private mutedNoOwner;
@@ -50,6 +52,9 @@ export declare class BotRunner {
     refreshAccess(): Promise<void>;
     /** Sender permitted to talk to this bot? Fail closed if access never loaded. */
     private isAllowed;
+    /** Sender permitted to DM this bot? Server-provided dmAllowedUserIds when we
+     *  have it; otherwise (older backend) accountable owner + nominal owner. */
+    private isDmAllowed;
     /** Merge live per-channel reply-mode updates (from a bot_config_changed
      *  control frame). Additive: only the listed channels change. */
     applyChannelModes(modes: Record<string, ChannelMode>): void;

package/dist/bot.js

@@ -32,6 +32,14 @@ export class BotRunner {
     // brain — so a stranger who finds the @handle can't drive the owner's agent.
     allowed = new Set();
     accessLoaded = false;
+    // DM PRIVACY: DMs with a bot are OWNER-ONLY unless the owner explicitly
+    // granted DM access. `dmAllowed` mirrors the server's dmAllowedUserIds
+    // (accountable owner + any explicit DM grants); null = the server didn't
+    // send the field (older backend) → fall back to accountable owner +
+    // info.ownerId. Enforced in kind=direct channels only — this also covers
+    // PRE-EXISTING DMs a non-owner opened before the server-side create guard.
+    dmAllowed = null;
+    mutedDmPrivate = new Set(); // DM channels already logged as owner-only
     declined = new Set(); // (senderId) already told "not authorized" once
     // OWNER-PRESENT POLICY (multi-party channels): other users may interact with
     // the bot in a group ONLY while the bot's owner is ALSO a member of that
@@ -118,6 +126,7 @@ export class BotRunner {
                 throw new Error(`access HTTP ${res.status}`);
             const j = (await res.json());
             this.allowed = new Set(j.allowedUserIds ?? []);
+            this.dmAllowed = Array.isArray(j.dmAllowedUserIds) ? new Set(j.dmAllowedUserIds) : null;
             // Channel reply modes: the access response is a full snapshot — replace
             // the map (a channel the server no longer lists reverts to "everyone").
             const modes = new Map();
@@ -150,6 +159,15 @@ export class BotRunner {
             return false; // fail closed until we know the list
         return this.allowed.has(senderUserId);
     }
+    /** Sender permitted to DM this bot? Server-provided dmAllowedUserIds when we
+     *  have it; otherwise (older backend) accountable owner + nominal owner. */
+    isDmAllowed(senderUserId) {
+        if (this.dmAllowed)
+            return this.dmAllowed.has(senderUserId);
+        return (senderUserId === this.effectiveOwnerId() ||
+            senderUserId === this.info.ownerId ||
+            senderUserId === this.runtimeOwnerId);
+    }
     /** Merge live per-channel reply-mode updates (from a bot_config_changed
      *  control frame). Additive: only the listed channels change. */
     applyChannelModes(modes) {
@@ -391,7 +409,22 @@ export class BotRunner {
         const effOwner = this.effectiveOwnerId();
         if (m.senderUserId !== effOwner) {
             const ch = await this.getChannel(m.channelId);
-            if (ch.record.kind !== "direct") {
+            if (ch.record.kind === "direct" || ch.record.kind === "dm") {
+                // DM PRIVACY: DMs with a bot are OWNER-ONLY (plus explicit DM grants
+                // from dmAllowedUserIds). A non-listed sender gets SILENCE — no brain
+                // run, no decline notice — even in a DM channel that predates the
+                // server-side create guard. Groups are handled below.
+                if (!this.isDmAllowed(m.senderUserId)) {
+                    if (!this.mutedDmPrivate.has(m.channelId)) {
+                        this.mutedDmPrivate.add(m.channelId);
+                        this.log(`muting DM ${m.channelId} — sender ${m.senderUserId} is not in dmAllowedUserIds (bot DMs are owner-only); staying silent`);
+                    }
+                    return;
+                }
+                this.mutedDmPrivate.delete(m.channelId);
+            }
+            else {
+                // OWNER-PRESENT POLICY (groups)
                 if (!(await this.ownerIsChannelMember(m.channelId))) {
                     if (!this.mutedNoOwner.has(m.channelId)) {
                         this.mutedNoOwner.add(m.channelId);

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BridgeConfig, Pairing, BrainSpec, BrainBackend } from "./config.js";
-export declare const VERSION = "0.7.2";
+export declare const VERSION = "0.7.4";
 export interface PairRequest {
     pairingSecret: string;
     appId: string;

package/dist/bridge.js

@@ -17,7 +17,7 @@ import { resolveBrain } from "./brain.js";
 import { provisionSoul, provisionHermesProfile } from "./backends.js";
 import { reportCapabilities } from "./capabilities.js";
 import { isBrainBackend } from "./config.js";
-export const VERSION = "0.7.2";
+export const VERSION = "0.7.4";
 /** How often to re-probe + report brain availability to the server. */
 const CAPABILITIES_INTERVAL_MS = 5 * 60_000;
 export class PairError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nopeek/agent-bridge",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "Run your own agents as E2EE NoPeek bots. Pairs with one-time codes (multiple accounts per computer), runs every bot each account owns, and pipes messages to any command or webhook.",
   "type": "module",
   "license": "MIT",