@securecoms/agent-bridge 0.26.2 → 0.26.4

package/dist/bin.js

@@ -7597,6 +7597,15 @@ function systemPrompt(p, settings, agentName) {
 }
 
 // src/service-log.ts
+var ENUM_VALUE = /^[a-z][a-z_]{0,31}$/;
+var ServiceLogEnum = class _ServiceLogEnum {
+  constructor(value) {
+    this.value = value;
+  }
+  static of(value, allowed) {
+    return new _ServiceLogEnum(allowed.includes(value) && ENUM_VALUE.test(value) ? value : "invalid");
+  }
+};
 var TOKEN = /^[a-z][a-z0-9_.-]{0,63}$/;
 var CLASS = /^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/;
 function errorClass(error) {
@@ -7626,6 +7635,7 @@ function formatServiceLog(level3, event, fields = {}, error) {
     if (!TOKEN.test(key)) continue;
     if (typeof value === "boolean") parts.push(`${key}=${value}`);
     else if (typeof value === "number" && Number.isFinite(value)) parts.push(`${key}=${value}`);
+    else if (value instanceof ServiceLogEnum && ENUM_VALUE.test(value.value)) parts.push(`${key}=${value.value}`);
   }
   if (error !== void 0) parts.push(`error_class=${errorClass(error)}`);
   return parts.join(" ");
@@ -28502,11 +28512,26 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
   const marker = "\u2026";
   return content.slice(0, Math.max(0, max - marker.length)) + marker;
 }
+var FAST_DEFER_RULE = `Whenever you cannot answer completely from what is shown here, never say you can't, that you lack a tool, access or real-time data: reply with one short sentence like "Let me check that." and end with the exact token [[DEFER]] so the full agent answers next.`;
+var REFUSAL_PATTERNS = [
+  // "I can't / cannot / am unable to / am not able to <check|access|...>", optional adverb.
+  /\b(?:can't|cannot|can\s+not|unable\s+to|not\s+able\s+to)\s+(?:\w+ly\s+)?(?:check|access|look|see|browse|search|get|provide|give\s+you|find|retrieve|fetch|pull|know|help\s+with\s+(?:that|this)|do\s+that)\b/,
+  // "I don't / do not / doesn't have (a|any|the)? <tool|access|ability|real-time|live ...>".
+  /\b(?:don't|do\s+not|doesn't|does\s+not|lack)\s+(?:have\s+)?(?:a\s+|any\s+|the\s+)?(?:tool|tools|access|ability|capability|real[-\s]?time|live|current|internet|web|way\s+to)\b/,
+  /\bno\s+(?:access|tools?|internet|web\s+access|real[-\s]?time|live\s+data|way\s+to\s+(?:check|access|know|see))\b/,
+  /\bas\s+an\s+(?:ai|a\.i\.|language\s+model)\b/,
+  /\bbeyond\s+my\s+(?:capabilities|abilities|capability)\b/,
+  /\b(?:knowledge\s+cutoff|training\s+data)\b/
+];
+function isRefusal(reply) {
+  const t = reply.toLowerCase().replace(/[‘’]/g, "'");
+  return REFUSAL_PATTERNS.some((re) => re.test(t));
+}
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? FAST_RECENT_CHARS_CAP;
   const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
-  const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
+  const system = `${head} ${args2.guidance.trim()} ${FAST_DEFER_RULE} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
     role: t.role === "agent" ? "assistant" : "user",
     content: t.text
@@ -29694,6 +29719,8 @@ var BridgeAgent = class _BridgeAgent {
   fastPathDeferred = 0;
   /** Of those, `full`-mode turns the deterministic pre-check deferred without calling the fast model. */
   fastPathIntentDeferred = 0;
+  /** Of those, fast-model replies that voiced inability ("I can't check...") — never spoken; the ack is spoken instead. */
+  fastPathRefusalDeferred = 0;
   /**
    * Task 8: count of live AUTHENTICATED /v1/ws sessions, so a later `status`
    * verb can tell "bridge process up" (the app's green dot, which only
@@ -31971,11 +31998,15 @@ var BridgeAgent = class _BridgeAgent {
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const raw = await this.latency.time("voice.fast_llm", () => fastLlm.complete(messages));
-      const { reply, defer } = splitFastReply(raw, 200, maxSentences);
-      if (!reply) return "failed";
+      const split3 = splitFastReply(raw, 200, maxSentences);
+      if (!split3.reply) return "failed";
+      const refusal = !isGreeting && isRefusal(split3.reply);
+      const defer = split3.defer || refusal;
+      const reply = refusal ? deferAck(m.messageId) : split3.reply;
       await this.sendSpoken(m.channelId, reply, fastReplyId(this.replyIdKey, this.cfg.identityId, m.channelId, m.messageId));
       this.fastPathSent++;
       if (defer) this.fastPathDeferred++;
+      if (refusal) this.fastPathRefusalDeferred++;
       return defer ? "deferred" : "answered";
     } catch (e) {
       this.fastPathFailed++;
@@ -32344,6 +32375,7 @@ var BridgeAgent = class _BridgeAgent {
         if (ownerDirect || ownerRelayed) tool_grants = OWNER_DM_DEFAULT_READ_GRANTS;
       }
     }
+    this.logAuthzDecision(channelId, senderId, relaySpeakerId, audience, tool_grants.length);
     return Object.freeze({
       version: 1,
       audience,
@@ -32351,6 +32383,54 @@ var BridgeAgent = class _BridgeAgent {
       tool_grants
     });
   }
+  /**
+   * One content-free INFO line per authorization decision (every call site of
+   * authorizationFor stages exactly one runtime turn). It says WHY a turn got
+   * the grants it got, without any identifier, name or text: every field is a
+   * boolean, a count, or a closed-set label.
+   *
+   *   owner_pin                pinned | anomalous | missing (channelOwner cache)
+   *   owner_row_is_agent_owner the pinned owner's roster row; `absent` when
+   *                            there is no pin or the row is not in the roster
+   *   sender_is_owner          sender identity == pinned owner identity
+   *   relay                    sender's roster row has is_relay
+   *   relay_speaker_is_owner   `na` unless a relay speaker was passed
+   *   kill_switch              SECURECOMS_OWNER_DM_DEFAULT_GRANTS as read at
+   *                            startup: `on` = default grants enabled
+   *   meta_fresh / roster_fresh whether the channel meta / roster caches were
+   *                            fresh (either stale forces audience=unknown)
+   */
+  logAuthzDecision(channelId, senderId, relaySpeakerId, audience, grants) {
+    const meta = this.freshMeta(channelId);
+    const roster = this.freshRoster(channelId);
+    const sender = roster?.get(senderId);
+    const pinned = this.channelOwner.get(channelId);
+    const ownerId = pinned && pinned !== "anomalous" ? pinned.identityId : void 0;
+    const ownerRow = ownerId !== void 0 ? roster?.get(ownerId) : void 0;
+    const ownerPin = pinned === void 0 ? "missing" : pinned === "anomalous" ? "anomalous" : "pinned";
+    const ownerRowIsAgentOwner = ownerRow === void 0 ? "absent" : ownerRow.is_agent_owner ? "true" : "false";
+    const speakerIsOwner = relaySpeakerId === void 0 ? "na" : ownerId !== void 0 && relaySpeakerId === ownerId ? "true" : "false";
+    writeServiceLog("info", "authz.decision", {
+      audience: ServiceLogEnum.of(audience, [
+        "owner_dm",
+        "other_human_dm",
+        "team_room",
+        "partner_room",
+        "agent_to_agent",
+        "unknown"
+      ]),
+      grants,
+      owner_pin: ServiceLogEnum.of(ownerPin, ["pinned", "anomalous", "missing"]),
+      owner_row_is_agent_owner: ServiceLogEnum.of(ownerRowIsAgentOwner, ["true", "false", "absent"]),
+      sender_is_owner: ownerId !== void 0 && senderId === ownerId,
+      relay: sender?.is_relay === true,
+      relay_speaker_is_owner: ServiceLogEnum.of(speakerIsOwner, ["true", "false", "na"]),
+      is_dm: meta?.is_dm === true,
+      kill_switch: ServiceLogEnum.of(this.ownerDmDefaultGrants ? "on" : "off", ["on", "off"]),
+      meta_fresh: meta !== void 0,
+      roster_fresh: roster !== void 0
+    });
+  }
   /**
    * Task 8 (owner-attested Reset Secure Session): STRUCTURAL owner selection —
    * NEVER read the server's `role` field to pick the owner. In a DM the owner
@@ -33878,6 +33958,7 @@ var BridgeAgent = class _BridgeAgent {
       fast_path_skipped: this.fastPathSkipped,
       fast_path_deferred: this.fastPathDeferred,
       fast_path_intent_deferred: this.fastPathIntentDeferred,
+      fast_path_refusal_deferred: this.fastPathRefusalDeferred,
       fast_path_mode: this.cfg.voiceFastPathMode ?? "full",
       voice_settings_version: this.voiceSettingsVersion,
       voice_settings_source: this.voiceSettingsSource,

package/dist/bridge-agent.d.ts

@@ -800,6 +800,8 @@ export declare class BridgeAgent {
     private fastPathDeferred;
     /** Of those, `full`-mode turns the deterministic pre-check deferred without calling the fast model. */
     private fastPathIntentDeferred;
+    /** Of those, fast-model replies that voiced inability ("I can't check...") — never spoken; the ack is spoken instead. */
+    private fastPathRefusalDeferred;
     /**
      * Task 8: count of live AUTHENTICATED /v1/ws sessions, so a later `status`
      * verb can tell "bridge process up" (the app's green dot, which only
@@ -1967,6 +1969,24 @@ export declare class BridgeAgent {
      * Everything else gets the frozen empty list.
      */
     private authorizationFor;
+    /**
+     * One content-free INFO line per authorization decision (every call site of
+     * authorizationFor stages exactly one runtime turn). It says WHY a turn got
+     * the grants it got, without any identifier, name or text: every field is a
+     * boolean, a count, or a closed-set label.
+     *
+     *   owner_pin                pinned | anomalous | missing (channelOwner cache)
+     *   owner_row_is_agent_owner the pinned owner's roster row; `absent` when
+     *                            there is no pin or the row is not in the roster
+     *   sender_is_owner          sender identity == pinned owner identity
+     *   relay                    sender's roster row has is_relay
+     *   relay_speaker_is_owner   `na` unless a relay speaker was passed
+     *   kill_switch              SECURECOMS_OWNER_DM_DEFAULT_GRANTS as read at
+     *                            startup: `on` = default grants enabled
+     *   meta_fresh / roster_fresh whether the channel meta / roster caches were
+     *                            fresh (either stale forces audience=unknown)
+     */
+    private logAuthzDecision;
     /**
      * Task 8 (owner-attested Reset Secure Session): STRUCTURAL owner selection —
      * NEVER read the server's `role` field to pick the owner. In a DM the owner
@@ -2326,6 +2346,8 @@ export declare class BridgeAgent {
         fast_path_deferred: number;
         /** `full`-mode turns deferred by the deterministic pre-check (no fast model call). */
         fast_path_intent_deferred: number;
+        /** Fast-model replies that voiced inability/lack of tools: never spoken, deferred behind the canned ack instead. */
+        fast_path_refusal_deferred: number;
         /** Credential `voice_fast_path_mode`: "full" (default), "ack_only" or "off". */
         fast_path_mode: "full" | "ack_only" | "off";
         /** Plan 2026-09-06 (agent voice settings): version of the loaded backend

package/dist/index.js

@@ -27308,6 +27308,15 @@ var TokenBucketFloor = class {
 };
 
 // src/service-log.ts
+var ENUM_VALUE = /^[a-z][a-z_]{0,31}$/;
+var ServiceLogEnum = class _ServiceLogEnum {
+  constructor(value) {
+    this.value = value;
+  }
+  static of(value, allowed) {
+    return new _ServiceLogEnum(allowed.includes(value) && ENUM_VALUE.test(value) ? value : "invalid");
+  }
+};
 var TOKEN2 = /^[a-z][a-z0-9_.-]{0,63}$/;
 var CLASS2 = /^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/;
 function errorClass2(error) {
@@ -27337,6 +27346,7 @@ function formatServiceLog2(level3, event, fields = {}, error) {
     if (!TOKEN2.test(key)) continue;
     if (typeof value === "boolean") parts.push(`${key}=${value}`);
     else if (typeof value === "number" && Number.isFinite(value)) parts.push(`${key}=${value}`);
+    else if (value instanceof ServiceLogEnum && ENUM_VALUE.test(value.value)) parts.push(`${key}=${value.value}`);
   }
   if (error !== void 0) parts.push(`error_class=${errorClass2(error)}`);
   return parts.join(" ");
@@ -28278,11 +28288,26 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
   const marker = "\u2026";
   return content.slice(0, Math.max(0, max - marker.length)) + marker;
 }
+var FAST_DEFER_RULE = `Whenever you cannot answer completely from what is shown here, never say you can't, that you lack a tool, access or real-time data: reply with one short sentence like "Let me check that." and end with the exact token [[DEFER]] so the full agent answers next.`;
+var REFUSAL_PATTERNS = [
+  // "I can't / cannot / am unable to / am not able to <check|access|...>", optional adverb.
+  /\b(?:can't|cannot|can\s+not|unable\s+to|not\s+able\s+to)\s+(?:\w+ly\s+)?(?:check|access|look|see|browse|search|get|provide|give\s+you|find|retrieve|fetch|pull|know|help\s+with\s+(?:that|this)|do\s+that)\b/,
+  // "I don't / do not / doesn't have (a|any|the)? <tool|access|ability|real-time|live ...>".
+  /\b(?:don't|do\s+not|doesn't|does\s+not|lack)\s+(?:have\s+)?(?:a\s+|any\s+|the\s+)?(?:tool|tools|access|ability|capability|real[-\s]?time|live|current|internet|web|way\s+to)\b/,
+  /\bno\s+(?:access|tools?|internet|web\s+access|real[-\s]?time|live\s+data|way\s+to\s+(?:check|access|know|see))\b/,
+  /\bas\s+an\s+(?:ai|a\.i\.|language\s+model)\b/,
+  /\bbeyond\s+my\s+(?:capabilities|abilities|capability)\b/,
+  /\b(?:knowledge\s+cutoff|training\s+data)\b/
+];
+function isRefusal(reply) {
+  const t = reply.toLowerCase().replace(/[‘’]/g, "'");
+  return REFUSAL_PATTERNS.some((re) => re.test(t));
+}
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? FAST_RECENT_CHARS_CAP;
   const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
-  const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
+  const system = `${head} ${args2.guidance.trim()} ${FAST_DEFER_RULE} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
     role: t.role === "agent" ? "assistant" : "user",
     content: t.text
@@ -29542,6 +29567,8 @@ var BridgeAgent = class _BridgeAgent {
   fastPathDeferred = 0;
   /** Of those, `full`-mode turns the deterministic pre-check deferred without calling the fast model. */
   fastPathIntentDeferred = 0;
+  /** Of those, fast-model replies that voiced inability ("I can't check...") — never spoken; the ack is spoken instead. */
+  fastPathRefusalDeferred = 0;
   /**
    * Task 8: count of live AUTHENTICATED /v1/ws sessions, so a later `status`
    * verb can tell "bridge process up" (the app's green dot, which only
@@ -31819,11 +31846,15 @@ var BridgeAgent = class _BridgeAgent {
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const raw = await this.latency.time("voice.fast_llm", () => fastLlm.complete(messages));
-      const { reply, defer } = splitFastReply(raw, 200, maxSentences);
-      if (!reply) return "failed";
+      const split3 = splitFastReply(raw, 200, maxSentences);
+      if (!split3.reply) return "failed";
+      const refusal = !isGreeting && isRefusal(split3.reply);
+      const defer = split3.defer || refusal;
+      const reply = refusal ? deferAck(m.messageId) : split3.reply;
       await this.sendSpoken(m.channelId, reply, fastReplyId(this.replyIdKey, this.cfg.identityId, m.channelId, m.messageId));
       this.fastPathSent++;
       if (defer) this.fastPathDeferred++;
+      if (refusal) this.fastPathRefusalDeferred++;
       return defer ? "deferred" : "answered";
     } catch (e) {
       this.fastPathFailed++;
@@ -32192,6 +32223,7 @@ var BridgeAgent = class _BridgeAgent {
         if (ownerDirect || ownerRelayed) tool_grants = OWNER_DM_DEFAULT_READ_GRANTS;
       }
     }
+    this.logAuthzDecision(channelId, senderId, relaySpeakerId, audience, tool_grants.length);
     return Object.freeze({
       version: 1,
       audience,
@@ -32199,6 +32231,54 @@ var BridgeAgent = class _BridgeAgent {
       tool_grants
     });
   }
+  /**
+   * One content-free INFO line per authorization decision (every call site of
+   * authorizationFor stages exactly one runtime turn). It says WHY a turn got
+   * the grants it got, without any identifier, name or text: every field is a
+   * boolean, a count, or a closed-set label.
+   *
+   *   owner_pin                pinned | anomalous | missing (channelOwner cache)
+   *   owner_row_is_agent_owner the pinned owner's roster row; `absent` when
+   *                            there is no pin or the row is not in the roster
+   *   sender_is_owner          sender identity == pinned owner identity
+   *   relay                    sender's roster row has is_relay
+   *   relay_speaker_is_owner   `na` unless a relay speaker was passed
+   *   kill_switch              SECURECOMS_OWNER_DM_DEFAULT_GRANTS as read at
+   *                            startup: `on` = default grants enabled
+   *   meta_fresh / roster_fresh whether the channel meta / roster caches were
+   *                            fresh (either stale forces audience=unknown)
+   */
+  logAuthzDecision(channelId, senderId, relaySpeakerId, audience, grants) {
+    const meta = this.freshMeta(channelId);
+    const roster = this.freshRoster(channelId);
+    const sender = roster?.get(senderId);
+    const pinned = this.channelOwner.get(channelId);
+    const ownerId = pinned && pinned !== "anomalous" ? pinned.identityId : void 0;
+    const ownerRow = ownerId !== void 0 ? roster?.get(ownerId) : void 0;
+    const ownerPin = pinned === void 0 ? "missing" : pinned === "anomalous" ? "anomalous" : "pinned";
+    const ownerRowIsAgentOwner = ownerRow === void 0 ? "absent" : ownerRow.is_agent_owner ? "true" : "false";
+    const speakerIsOwner = relaySpeakerId === void 0 ? "na" : ownerId !== void 0 && relaySpeakerId === ownerId ? "true" : "false";
+    writeServiceLog2("info", "authz.decision", {
+      audience: ServiceLogEnum.of(audience, [
+        "owner_dm",
+        "other_human_dm",
+        "team_room",
+        "partner_room",
+        "agent_to_agent",
+        "unknown"
+      ]),
+      grants,
+      owner_pin: ServiceLogEnum.of(ownerPin, ["pinned", "anomalous", "missing"]),
+      owner_row_is_agent_owner: ServiceLogEnum.of(ownerRowIsAgentOwner, ["true", "false", "absent"]),
+      sender_is_owner: ownerId !== void 0 && senderId === ownerId,
+      relay: sender?.is_relay === true,
+      relay_speaker_is_owner: ServiceLogEnum.of(speakerIsOwner, ["true", "false", "na"]),
+      is_dm: meta?.is_dm === true,
+      kill_switch: ServiceLogEnum.of(this.ownerDmDefaultGrants ? "on" : "off", ["on", "off"]),
+      meta_fresh: meta !== void 0,
+      roster_fresh: roster !== void 0
+    });
+  }
   /**
    * Task 8 (owner-attested Reset Secure Session): STRUCTURAL owner selection —
    * NEVER read the server's `role` field to pick the owner. In a DM the owner
@@ -33726,6 +33806,7 @@ var BridgeAgent = class _BridgeAgent {
       fast_path_skipped: this.fastPathSkipped,
       fast_path_deferred: this.fastPathDeferred,
       fast_path_intent_deferred: this.fastPathIntentDeferred,
+      fast_path_refusal_deferred: this.fastPathRefusalDeferred,
       fast_path_mode: this.cfg.voiceFastPathMode ?? "full",
       voice_settings_version: this.voiceSettingsVersion,
       voice_settings_source: this.voiceSettingsSource,

package/dist/service-log.d.ts

@@ -1,5 +1,18 @@
 export type ServiceLogLevel = "debug" | "info" | "warn" | "error";
-export type ServiceLogFields = Readonly<Record<string, number | boolean>>;
+/**
+ * A closed-set label for a service-log field. The only way to build one is
+ * `ServiceLogEnum.of(value, allowed)`: a value outside `allowed`, or one that
+ * is not a short lowercase word, renders as `invalid`. Raw strings are still
+ * dropped by `formatServiceLog`, so an identifier, name or message text can
+ * never reach the log through a field. The privacy test requires `allowed` to
+ * be an inline array of string literals at every call site.
+ */
+export declare class ServiceLogEnum {
+    readonly value: string;
+    private constructor();
+    static of<T extends string>(value: T, allowed: readonly T[]): ServiceLogEnum;
+}
+export type ServiceLogFields = Readonly<Record<string, number | boolean | ServiceLogEnum>>;
 export type ServiceLog = (level: ServiceLogLevel, event: string, fields?: ServiceLogFields, error?: unknown) => void;
 /** Reduce a thrown value without reading its message, stack, or string form. */
 export declare function errorClass(error: unknown): string;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.26.2";
+export declare const BRIDGE_VERSION = "0.26.4";

package/dist/voice/fast-prompt.d.ts

@@ -29,6 +29,15 @@ export declare const MAX_MESSAGE_CHARS = 8000;
 export declare const FAST_PATH_MEMORY_TURNS = 10;
 export declare const FAST_RECENT_CHARS_CAP = 1500;
 export declare const FAST_FACTS_CHARS_CAP = 2000;
+/**
+ * Live bug 2026-10-02 (bridge 0.26.3): asked for Sydney's weather, the fast
+ * model said "I can't check the weather right now since I don't have a
+ * tool..." with no [[DEFER]], so the runtime (which has web_search) never got
+ * the turn. Placed last before the continuity clause so it is the final rule
+ * the model reads. Compiled in, never interpolated with peer data.
+ */
+export declare const FAST_DEFER_RULE: string;
+export declare function isRefusal(reply: string): boolean;
 export declare function buildFastMessages(args: {
     persona: VoicePersona;
     guidance: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "type": "module",
   "engines": {
     "node": ">=22.5.0"