@securecoms/agent-bridge 0.27.0 → 0.28.0

package/README.md

@@ -781,6 +781,47 @@ upgraded again; the same holds for a 0.9.x runtime. Roll back the runtime and
 the bridge together, and restart both: the bridge decides once per process
 that a notes-reading runtime is present.
 
+## Semantic memory: model download and retention
+
+<!-- [COPY, NEW] the three paragraphs below, the log-line paragraph included (7b Task 19, spec §19 LOW; first sentence corrected in the 7b-2 final-review fix round). Gate: Eric sign-off before npm publish (release PR). -->
+
+Semantic memory downloads its model from downloads.securecoms.ai when the owner first messages the agent in their private chat after semantic memory is turned on, not when the setting is saved. On a machine that must make no such connection, set `memory.model_source` to `import_only` in the credential file and copy the model bundle in with `agent-bridge models import <dir>`.
+
+If you change the memory provider or turn off owner-DM defaults, semantic memory rows stay on the machine until their retention ends, but they are never used.
+
+The bridge logs `memory.model_download_enabled` (no fields) once per process
+when semantic memory is turned on with `model_source` `download`.
+
+<!-- [COPY, NEW] (7b Task 19 fix round 2). Gate: Eric sign-off before npm publish (release PR). -->
+
+If you embed the bridge as a library (`new BridgeAgent(cfg, deps)`), semantic recall stays inert unless you pass `hostMachine: true`: no model is downloaded or loaded, and no call heartbeat is written. The `agent-bridge` command passes it for you.
+
+---
+
+## Release notes: 0.28.0
+
+0.28.0 adds semantic memory in the owner's private chat. Install it together
+with `@securecoms/agent-runtime` 0.11.0 and restart both.
+
+- **Semantic memory.** The agent recalls sealed memory rows in the owner's
+  private chat only. See "Semantic memory: model download and retention"
+  above for the model download, retention and library-embedding paragraphs.
+- **Off switches.** The three switches under "Markdown notes (0.27.0)" apply
+  unchanged: `memory.provider: "none"`, `SECURECOMS_OWNER_DM_DEFAULT_GRANTS=off`,
+  and (notes only) `SECURECOMS_TOOL_DENY=memory_note`.
+- **`import_only`.** Set `memory.model_source` to `import_only` on a machine
+  that must make no model download.
+- **`models import`.** `agent-bridge models import <dir>` copies a model bundle
+  in for `import_only` machines. <!-- [COPY, NEW] the one-line CLI confirmation "imported <names>" printed by `models import` (src/bin.ts). Gate: Eric sign-off before npm publish (release PR). -->
+
+## Test commands
+
+```
+npx vitest run && npx tsc --noEmit -p .
+```
+
+The suite runs with a temporary HOME (`test-support/tmp-home.global-setup.ts`), so no test writes under your real `~/.securecoms`.
+
 ---
 
 ## Flags and environment

package/dist/bin.d.ts

@@ -11,7 +11,7 @@ export declare function nodeMajorOk(version: string): boolean;
  * diagnostics do not call this helper or expose even the hint.
  */
 export declare function tokenFingerprint(token: string): string;
-export declare function parseVerb(argv: string[]): "install" | "uninstall" | "status" | "wire" | "unwire" | null;
+export declare function parseVerb(argv: string[]): "install" | "uninstall" | "status" | "wire" | "unwire" | "models" | null;
 export declare function slugFromCredentialPath(credentialPath: string): string;
 export declare function chooseInstallExecPath(runningExecPath: string, override: string | undefined, deps: ResolveNodeDeps): string;
 export declare function realCopyConnector(srcDir: string, dstDir: string, harness: Harness): void;