@securecoms/agent-bridge 0.25.4 → 0.26.1

package/dist/vault.d.ts

@@ -6,6 +6,18 @@
 export declare class VaultIntegrityError extends Error {
     constructor(message: string, cause?: unknown);
 }
+/** Which Files-link pin a pinned read refused on (review 2026-10-01 R4). */
+export type VaultPin = "content_hash_server" | "ciphertext_digest" | "dek_commit";
+/** A pinned read (`/v1/vault-read` with expected_*) refused because the node no
+ *  longer holds the bytes or key that were shared: "This file changed in Files
+ *  after it was shared. Not opened." A VaultIntegrityError, so every existing
+ *  integrity handler still fails closed on it. */
+export declare class VaultPinMismatchError extends VaultIntegrityError {
+    readonly pin: VaultPin;
+    constructor(pin: VaultPin);
+}
+/** The pin pair error text, shared with the HTTP boundary's refine (H1). */
+export declare const VAULT_PINS_TOGETHER = "expected_content_hash and expected_dek_commit go together";
 export interface VaultWriteDeps {
     exporterKekForGeneration: (gen: number) => Uint8Array;
     currentGeneration: number;
@@ -45,10 +57,21 @@ export interface VaultReadDeps {
     }>;
     getBlob: (url: string) => Promise<Uint8Array>;
 }
+/** Files-link pins for a read (review 2026-10-01 R4). Both are
+ *  "blake2b:" + 64 hex, validated at the HTTP boundary. BOTH OR NEITHER
+ *  (audit H1): a lone dekCommit fell back to the server's content_hash, so a
+ *  member holding the KEK could re-encrypt new plaintext under the same DEK,
+ *  recreate the node with the same wrap and a new hash, and be served it; a
+ *  lone contentHash leaves the two-key swap open. */
+export interface VaultReadExpectations {
+    contentHash: string;
+    dekCommit: string;
+}
 export declare function vaultReadImpl(args: {
     enclaveId: string;
     nodeId: string;
     deps: VaultReadDeps;
+    expected?: VaultReadExpectations;
 }): Promise<Uint8Array>;
 export interface VaultListRawNode {
     node_id: string;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.25.4";
+export declare const BRIDGE_VERSION = "0.26.1";

package/dist/voice/defer-intent.d.ts

@@ -0,0 +1,22 @@
+export declare function needsRuntime(text: string): boolean;
+/** Spoken while the full agent works. Persona-neutral; never carries [[DEFER]]. */
+export declare const DEFER_ACKS: readonly string[];
+/** Deterministic per turn (a redelivered turn re-speaks the same line). */
+export declare function deferAck(messageId: string): string;
+/**
+ * Per-agent voice fast-path mode (credential `voice_fast_path_mode`):
+ * - `full`: today's front desk — the fast LLM answers small talk, defers the
+ *   rest (pre-check above + [[DEFER]]).
+ * - `ack_only`: NO fast LLM call. An instant canned ack is spoken and every
+ *   turn goes to the agent's runtime (tools + memory). The call-start greeting
+ *   is a template.
+ * - `off`: no fast path at all — runtime only, no ack.
+ */
+export declare const FAST_PATH_MODES: readonly ["full", "ack_only", "off"];
+export type FastPathMode = (typeof FAST_PATH_MODES)[number];
+export declare function parseFastPathMode(raw: unknown): FastPathMode;
+/** `ack_only`: spoken the instant a turn arrives, before the runtime answers. */
+export declare const ACK_ONLY_ACKS: readonly string[];
+export declare function ackOnlyAck(messageId: string): string;
+/** `ack_only` call-start greeting: a template, no model call. */
+export declare function ackOnlyGreeting(agentName: string | undefined, callerName: string | undefined): string;

package/dist/voice/fast-prompt.d.ts

@@ -15,6 +15,20 @@ export interface ChatMessage {
  * just facts — a defensive floor under whatever grows in the future.
  */
 export declare const MAX_MESSAGE_CHARS = 8000;
+/**
+ * Fast-path prompt budget (perf, 2026-10-02). The fast model writes ONE short
+ * spoken line, so it needs only the last few exchanges; every extra input
+ * token is time on the voice critical path (transcript -> reply measured at
+ * ~3.0-3.2 s in prod, this LLM call included). Previously 30 turns / 4000
+ * recent chars / ~7800 facts chars.
+ * - FAST_PATH_MEMORY_TURNS: turns requested from the memory provider.
+ * - FAST_RECENT_CHARS_CAP: default `charCap` on the recent transcript (oldest
+ *   turns dropped first, the newest always kept).
+ * - FAST_FACTS_CHARS_CAP: cap on the joined facts body.
+ */
+export declare const FAST_PATH_MEMORY_TURNS = 10;
+export declare const FAST_RECENT_CHARS_CAP = 1500;
+export declare const FAST_FACTS_CHARS_CAP = 2000;
 export declare function buildFastMessages(args: {
     persona: VoicePersona;
     guidance: string;

package/dist/voice/prompt-compiler.d.ts

@@ -1,4 +1,12 @@
 import type { VoiceSettings } from "./settings.js";
+/**
+ * Owner report 2026-10-02 (voice calls never used tools): this model has no
+ * tools, no clock and only the last few turns, yet it answered "what time is
+ * it" / "what's the weather" itself instead of deferring. Applies under EVERY
+ * handoff dial — no dial can make this model know live data — and is
+ * compiled in (never interpolated with peer data).
+ */
+export declare const NO_TOOLS_RULE: string;
 /**
  * `agentName` is the agent's identity display name (`ConnectIdentity.display_name`,
  * the one name shown in rosters and the Directory). Owner decision 2026-10-01

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.25.4",
+  "version": "0.26.1",
   "type": "module",
   "engines": {
     "node": ">=22.5.0"