@securecoms/agent-bridge 0.29.0 → 0.30.0

package/dist/grants/pin.d.ts

@@ -0,0 +1,35 @@
+export declare const PIN_FILE_NAME = "owner-signing-key.json";
+export declare const PIN_STATES: readonly ["ok", "no_pin", "pin_conflict", "malformed", "unsupported_algo", "symlink_refused", "unreadable", "server_owner_mismatch"];
+export type PinState = (typeof PIN_STATES)[number];
+export interface OwnerGrantPin {
+    readonly ownerIdentityId: string;
+    readonly keyAlgo: "ed25519";
+    readonly publicKey: Uint8Array;
+    readonly publicKeyB64: string;
+}
+export interface OwnerGrantPinResult {
+    readonly state: Exclude<PinState, "server_owner_mismatch">;
+    readonly pin: OwnerGrantPin | null;
+}
+/** Canonical base64 of exactly `len` bytes: decode, re-encode, compare. */
+export declare function canonicalBase64Bytes(v: unknown, len: number): Uint8Array | null;
+export declare function parsePinObject(v: unknown): {
+    ok: true;
+    pin: OwnerGrantPin;
+} | {
+    ok: false;
+    state: "malformed" | "unsupported_algo";
+};
+export interface PinFs {
+    lstat(path: string): {
+        isSymbolicLink(): boolean;
+        mode: number;
+    };
+    readFile(path: string): string;
+}
+/** Spec §6.5. A symlinked pin file is `symlink_refused` whatever the credential holds. */
+export declare function loadOwnerGrantPin(opts: {
+    credentialPath: string;
+    credentialJson: Record<string, unknown>;
+    fs?: PinFs;
+}): OwnerGrantPinResult;

package/dist/grants/room-search-cap.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Owner grants plan 4, Task 12 (spec §7.5, OQ-2, audit r1 L-3): the bridge's copy of the runtime's
+ * operator-cap parser (connect-agent-runtime/src/room-search-cap.ts). The two packages share no
+ * dependency; bridge-agent.room-search-cap.test.ts pins them equal on every listed input.
+ */
+export declare const ROOM_SEARCH_DAILY_CAP = 50;
+export declare const ROOM_SEARCH_CAP_ENV = "SECURECOMS_ROOM_SEARCH_DAILY_CAP";
+/** /^\d+$/ and <= 50 is used (0 = no room search); anything else is 50 with one warning. Never a widening. */
+export declare function parseRoomSearchCap(v: string | undefined, warn?: () => void): number;
+/** Review M-3 (ERIC APPROVALS 3): the per-agent total across rooms, the runtime's parser copied (parity-tested). */
+export declare const AGENT_ROOM_SEARCH_DAILY_CAP = 200;
+export declare const AGENT_ROOM_SEARCH_CAP_ENV = "SECURECOMS_AGENT_ROOM_SEARCH_DAILY_CAP";
+export declare function parseAgentRoomSearchCap(v: string | undefined, warn?: () => void): number;
+/** The store row that holds the per-agent total (never a channel id: channel ids are UUIDs). */
+export declare const AGENT_TOTAL_KEY = "agent-total";

package/dist/grants/voice-fence.d.ts

@@ -0,0 +1,53 @@
+/** "untrusted" (review H-3): an agent reply whose turn saw a relay-class line, or that could not be attributed. */
+export type LineOrigin = "fast_path" | "reply" | "untrusted";
+/** 2026-09-07T00:00:00Z: before this the deterministic fast-reply id did not exist (`date -u -r 1788739200`). */
+export declare const FAST_ID_EPOCH_MS = 1788739200000;
+/**
+ * The unkeyed fastReplyId of e1369a7c (2026-09-06) to 60365953 (2026-09-25): SHA-256 of `fast:<messageId>`, first 16
+ * bytes, RFC 4122 version and variant nibbles, as a hyphenated UUID. Rows of that period carry this form.
+ */
+export declare function legacyFastReplyId(messageId: string): string;
+export interface AgentLine {
+    readonly origin?: LineOrigin;
+    readonly modality?: string;
+    readonly messageId?: string;
+    readonly ts?: number;
+}
+/** `fastIds`: the keyed AND the legacy fast-reply id of every peer row of the conversation (not the 50-row window). */
+export interface FenceContext {
+    readonly fastIds: ReadonlySet<string>;
+}
+/** Rule 4, history. */
+export declare function classifyAgentLine(line: AgentLine, ctx: FenceContext): LineOrigin;
+export interface UnifiedItemFacts {
+    readonly channelId: string;
+    readonly source: string;
+    readonly originId: string;
+    readonly role?: "peer" | "agent";
+    readonly origin?: LineOrigin;
+    readonly sourceRef?: string;
+}
+export type TraceRow = ({
+    readonly role: "peer" | "agent";
+    readonly peerId?: string;
+} & AgentLine) | null;
+/**
+ * Review H-3 (ruling): a peer line is relay-class when its authenticated sender is not the pinned owner identity
+ * (the relay, incl. owner-speaker voice transcripts) or its modality is voice.
+ */
+export declare function isRelayClassPeer(line: {
+    readonly peerId?: string;
+    readonly modality?: string;
+}, ownerId: string): boolean;
+export type Trace = (conversationId: string, at: {
+    seq?: number;
+    messageId?: string;
+}) => TraceRow;
+/**
+ * Rule 4, unified. `strict` (review H-3): a turn that holds a manifest grant, which also excludes owner-voice items
+ * and imported peer lines that trace to a relay-class row (or cannot be traced).
+ */
+export declare function classifyUnifiedItem(item: UnifiedItemFacts, trace: Trace, ctx: FenceContext, strict?: {
+    readonly ownerId: string;
+    readonly turnChannelId?: string;
+}, keepUntrusted?: boolean): "keep" | "exclude";

package/dist/http-server.d.ts

@@ -25,6 +25,7 @@ export declare function writeSse(res: {
 export declare function deliverSseBatch(res: Parameters<typeof writeSse>[0], batch: BridgeMessage[], agent: {
     ackRuntimeMessages(ids: string[]): void;
     requeueFront(msgs: BridgeMessage[]): void;
+    harnessGrantsWithheld(): boolean;
 }, onWriteError?: (error: unknown) => void): void;
 /**
  * Once-per-connection write-failure reporter (#335). A throwing `res.write`