@securecoms/agent-bridge 0.29.0 → 0.30.0

package/dist/memory/unified/item-book.d.ts

@@ -23,6 +23,9 @@ export interface ItemWriteRequest {
     sourceRef?: string;
     vec?: Float32Array | null;
     vecModelId?: string | null;
+    /** Owner grants plan 4 Task 16 (T-30): who wrote the line and, for an agent line, its origin (sealed in the record). */
+    role?: "peer" | "agent";
+    origin?: "fast_path" | "reply" | "untrusted";
     /** Pins and migrated notes: one item, never chunked. */
     noChunk?: true;
     /** Task 30: a migrated source row changed since the marker: replace the item with the same source_ref, same trust. */

package/dist/memory/unified/migrate.d.ts

@@ -12,6 +12,7 @@
  * marker to just past the clear in the store's clear transaction (fix round 1), so no later run re-imports pre-clear
  * history (a clear keeps history, section 14.4). After a disable or a purge the markers stay, so a later run resumes.
  */
+import { type LineOrigin } from "../../grants/voice-fence.js";
 import { type SqliteMlsStateStore } from "@agentvault/connect-mls-store";
 import { type ServiceLog } from "../../service-log.js";
 import type { ItemBook } from "./item-book.js";
@@ -35,6 +36,16 @@ export interface MigrationDeps {
      * never migrated, never retried, holds nothing); "unknown" when it cannot be classified now (retried on a later run).
      */
     classify: (conversationId: string) => MigrationClass;
+    /**
+     * Owner grants plan 4 Task 16 (T-30): the origin of an agent history row, so a fast-path line migrated from 0.30.0 on
+     * is marked. Absent: the row's own origin, else the pure rule with no fast-id knowledge (classifyAgentLine).
+     */
+    classifyHistoryOrigin?: (conversationId: string, row: {
+        messageId: string | null;
+        modality: string;
+        origin?: LineOrigin;
+        recordedAt: number;
+    }) => LineOrigin;
     /** Called after a conversation's notes committed pins (the bridge empties its pin cache under the memory mutex, as Task 28 does). */
     pinsChanged?: () => Promise<void>;
     /**

package/dist/memory/unified/read-book.d.ts

@@ -8,6 +8,7 @@
 import { type SqliteMlsStateStore } from "@agentvault/connect-mls-store";
 import type { Embedder } from "../embedder/client.js";
 import type { RankingClient } from "./ranking-client.js";
+import type { OpenedItem } from "./worker-protocol.js";
 export interface UnifiedFrameItem {
     block: "pinned" | "owner" | "reference";
     id: number;
@@ -63,7 +64,7 @@ export declare class UnifiedReadBook {
         kind: "text" | "voice";
     }): Promise<void>;
     /** ws flush (synchronous): the entry's own channel and owner scope, its capture still current (H-4, U11). */
-    deliverable(messageId: string, channelId: string, scopeIdNow: string): {
+    deliverable(messageId: string, channelId: string, scopeIdNow: string, keep?: (i: OpenedItem) => boolean): {
         items: UnifiedFrameItem[];
         pinnedMore: number;
     } | undefined;

package/dist/memory/unified/worker-protocol.d.ts

@@ -38,6 +38,10 @@ export interface OpenedItem {
     source: ItemSource;
     trust: ItemTrust;
     text: string;
+    /** Owner grants plan 4 Task 16 (voice fence, OQ-9): text only, from the sealed record and the row's clear source_ref. */
+    role?: "peer" | "agent";
+    origin?: "fast_path" | "reply" | "untrusted";
+    sourceRef?: string;
 }
 export type ToWorker = {
     type: "query";

package/dist/memory-taps.d.ts

@@ -15,5 +15,5 @@ interface MemorySink {
 export declare function recordInboundMemory(sink: MemorySink, channelId: string, senderId: string, text: string, messageId: string, modality?: "text" | "voice", expectPurgeEpoch?: number): Promise<void>;
 /** Record the agent's own outbound reply. Best-effort. `modality` is "voice"
  *  for a line the voice fast path spoke (H1), else "text". */
-export declare function recordOutboundMemory(sink: MemorySink, channelId: string, text: string, messageId: string, modality?: "text" | "voice", expectPurgeEpoch?: number): Promise<void>;
+export declare function recordOutboundMemory(sink: MemorySink, channelId: string, text: string, messageId: string, modality?: "text" | "voice", expectPurgeEpoch?: number, origin?: "fast_path" | "reply" | "untrusted"): Promise<void>;
 export {};

package/dist/memory-worker.js

@@ -150,7 +150,7 @@ function decodeItemRecord(b) {
   }
   if (!o || typeof o !== "object" || Array.isArray(o))
     return null;
-  const { v, t, s, tr, sr, c } = o;
+  const { v, t, s, tr, sr, c, ro, or } = o;
   if (v !== 1 || typeof t !== "string" || typeof s !== "string" || !ITEM_SOURCES.includes(s))
     return null;
   if (tr !== "owner" && tr !== "reference")
@@ -161,7 +161,19 @@ function decodeItemRecord(b) {
     return null;
   if (c !== void 0 && (typeof c !== "number" || !Number.isSafeInteger(c) || c < 1))
     return null;
-  return { text: t, source: s, trust: tr, ...sr !== void 0 ? { sourceRef: sr } : {}, ...c !== void 0 ? { chunks: c } : {} };
+  if (ro !== void 0 && ro !== "peer" && ro !== "agent")
+    return null;
+  if (or !== void 0 && or !== "fast_path" && or !== "reply" && or !== "untrusted")
+    return null;
+  return {
+    text: t,
+    source: s,
+    trust: tr,
+    ...sr !== void 0 ? { sourceRef: sr } : {},
+    ...c !== void 0 ? { chunks: c } : {},
+    ...ro !== void 0 ? { role: ro } : {},
+    ...or !== void 0 ? { origin: or } : {}
+  };
 }
 
 // src/memory/unified/ranking-core.ts
@@ -422,7 +434,10 @@ var RankingCore = class {
       originAt: Number(r.origin_at),
       source: rec.source,
       trust: rec.trust,
-      text: rec.text
+      text: rec.text,
+      ...rec.role !== void 0 ? { role: rec.role } : {},
+      ...rec.origin !== void 0 ? { origin: rec.origin } : {},
+      ...rec.sourceRef !== void 0 ? { sourceRef: rec.sourceRef } : {}
     };
   }
   /** H-7: one batched statement, LIMIT 5,001 per MAC inside the allowed scopes; a MAC that fills its limit is skipped. */

package/dist/service/runtime-config-dir.d.ts

@@ -13,6 +13,21 @@ export interface FsDeps {
     unlink: (p: string) => void;
 }
 export declare function runtimeConfigDir(home: string, identityId: string): string;
+/** Owner grants (spec §7.8): the runtime honours a manifest-marked grant only for a tool listed here. */
+export declare const MANIFEST_POLICY_FILE = "manifest-policy.json";
+export interface ManifestPolicyDoc {
+    readonly v: 1;
+    readonly manifest_tools: readonly string[];
+    readonly secret_path_mode: "enforce";
+}
+/**
+ * Owner grants review H-2: under a manifest whose config signs no llm, a managed llm-source.json (written before the
+ * manifest, by an unsigned config) must not stay in force. The one deletion in this directory, by name, bridge-only.
+ * ENOENT is success; any other error throws.
+ */
+export declare function removeManagedLlmSource(home: string, identityId: string, deps?: FsDeps): void;
+/** The bridge's own writer for manifest-policy.json (writeManagedFiles refuses the name). Atomic, 0600. Throws. */
+export declare function writeManifestPolicy(home: string, identityId: string, policy: ManifestPolicyDoc, deps?: FsDeps): void;
 export declare function writeManagedFiles(home: string, identityId: string, files: Record<string, string>, deps?: FsDeps): void;
 /** Every path skills.json names, checked on disk. Contents are never read. */
 export declare function checkConfiguredPaths(skillsJson: Record<string, unknown>, statFn?: (p: string) => {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.29.0";
+export declare const BRIDGE_VERSION = "0.30.0";

package/dist/ws-server.d.ts

@@ -48,7 +48,7 @@ export declare const MEMORY_UNIFIED_FEATURE = "memory_unified";
  * fake against this list at run time (7b gate fix: a member added here without
  * a fake made three tests throw "is not a function").
  */
-export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearPerToolConsumer", "isRuntimeMessageRetired", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
+export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearManifestConsumer", "clearPerToolConsumer", "harnessGrantsWithheld", "isRuntimeMessageRetired", "noteConsumerCapability", "noteManifestConsumer", "noteRoomCapReached", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
 export type WsAgent = Pick<BridgeAgent, (typeof WS_AGENT_MEMBERS)[number]>;
 export declare function attachAgentWebSocket(server: HttpServer, agent: WsAgent, opts: AgentWebSocketOptions): {
     close(): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "type": "module",
   "engines": {
     "node": ">=22.5.0"