@securecoms/agent-bridge 0.23.0 → 0.24.0

package/dist/coordination.d.ts

@@ -73,18 +73,40 @@ export declare const AGENT_HOP_QUIET_MS: number;
  *
  * In memory and bounded (oldest channel evicted first): a restart resets the
  * counts, which can at worst allow one more bounded run of hops.
+ *
+ * Idempotent per message: delivery is at-least-once (a failed ack redelivers
+ * the row, and custody serves it again), so the same message can reach
+ * {@link noteInbound} more than once. Each (channel, message id) is counted
+ * once, and a repeat returns the hop count its first sighting got, so the
+ * repeat gets the same verdict and leaves the run untouched. Counting a repeat
+ * inflated the run until the NEXT agent message was suppressed and acked, a
+ * silent loss. The key is sound because a message id is globally unique at the
+ * backend (`mls_messages_pkey`): a second, different message under a reused id
+ * is refused (`message_id_conflict`) and never fanned out, so a peer cannot
+ * use it to slip past the cap.
  */
 export declare class AgentHopTracker {
     private readonly maxChannels;
     private readonly hops;
+    /** `${channelId}\u0000${messageId}` → the hop count its first sighting got. Map order = age. */
+    private readonly seen;
     private readonly now;
     private readonly quietMs;
+    private readonly maxSeenIds;
     constructor(maxChannels?: number, opts?: {
         now?: () => number;
         quietMs?: number;
+        maxSeenIds?: number;
     });
-    /** Record an inbound message; returns the consecutive agent hops including it. */
-    noteInbound(channelId: string, senderIsAgent: boolean | undefined): number;
+    /**
+     * Record an inbound message; returns the consecutive agent hops including it.
+     * `messageId` makes the call idempotent (see the class comment). Without one
+     * the message is counted every time, the conservative direction for a loop
+     * guard.
+     */
+    noteInbound(channelId: string, senderIsAgent: boolean | undefined, messageId?: string): number;
+    /** Test seam: how many message ids are remembered. */
+    seenIdCount(): number;
     /**
      * Record one of this agent's own SUBSTANTIVE sends (an agent turn in the
      * channel). Callers do not report status frames, daily-limit or dead-letter

package/dist/errors.d.ts

@@ -6,7 +6,7 @@
  * WebSocket returns `{type:"error", error, message, detail?}`. A client gets the
  * same `error` code regardless of which transport it used. (A2A §9.5/§10.6 pattern.)
  */
-export type BridgeErrorCode = "unauthorized" | "forbidden_origin" | "not_found" | "invalid_request" | "invalid_json" | "body_too_large" | "channel_pending" | "rate_limited" | "agent_paused" | "send_forbidden" | "unknown_action_run" | "vault_integrity_failed" | "internal";
+export type BridgeErrorCode = "unauthorized" | "forbidden_origin" | "not_found" | "invalid_request" | "invalid_json" | "body_too_large" | "channel_pending" | "rate_limited" | "agent_paused" | "send_forbidden" | "group_superseded" | "unknown_action_run" | "vault_integrity_failed" | "internal";
 export interface BridgeErrorSpec {
     /** HTTP status this code maps to (the WS binding ignores it). */
     http: number;

package/dist/http-server.d.ts

@@ -53,32 +53,32 @@ export declare const memoryRecordSchema: z.ZodEffects<z.ZodObject<{
     message_id: z.ZodOptional<z.ZodString>;
     idempotency_key: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    role: "agent" | "peer";
     text: string;
+    role: "agent" | "peer";
     conversation_id: string;
     modality: "voice" | "text";
     message_id?: string | undefined;
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }, {
-    role: "agent" | "peer";
     text: string;
+    role: "agent" | "peer";
     conversation_id: string;
     modality: "voice" | "text";
     message_id?: string | undefined;
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }>, {
-    role: "agent" | "peer";
     text: string;
+    role: "agent" | "peer";
     conversation_id: string;
     modality: "voice" | "text";
     message_id?: string | undefined;
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }, {
-    role: "agent" | "peer";
     text: string;
+    role: "agent" | "peer";
     conversation_id: string;
     modality: "voice" | "text";
     message_id?: string | undefined;