@securecoms/agent-bridge 0.31.0 → 0.32.0

package/README.md

@@ -767,6 +767,38 @@ including its key). Each proxied call is metered server-side
 `fast_voice_tokens_in`, `fast_voice_tokens_out`), capped at
 `VOICE_FAST_CALLS_PER_MINUTE` (default 60) per agent.
 
+### Calling your own provider directly (`route: "direct"`)
+
+To keep the fast-path call off the SecureComs proxy entirely, add
+`"route": "direct"` to the credential file's `fast_path` block:
+
+```json
+"fast_path": { "enabled": true, "route": "direct", "base_url": "https://api.openai.com/v1",
+               "model": "gpt-4o-mini", "api_key_env": "SECURECOMS_VOICE_LLM_KEY" }
+```
+
+- With `route: "direct"` the daemon calls `base_url` with the file's own
+  `api_key`/`api_key_env`, and never calls `POST /api/v1/voice/fast-complete`,
+  even when the settings fetch succeeds. The backend voice settings (persona,
+  dials, voice, pace) still apply; only the fast-path provider and key come from
+  the file. A later `voice_settings_changed` refetch keeps the direct route.
+- Opt-in lives only in this file. There is no web or backend setting for it,
+  and only the exact value `"direct"` counts: a block without `route` (or with
+  any other value) behaves as described above, so an old `fast_path` block does
+  not switch to direct on upgrade.
+- If the direct provider fails (timeout, HTTP error, bad response), nothing is
+  spoken by the fast path and your full agent answers the turn. The daemon never
+  retries through the SecureComs proxy.
+- `route: "direct"` without a resolvable key is a configuration error: the
+  daemon logs `voice.fast_path_direct_no_key` once at start and runs with no
+  fast path (full agent only). It does not fall back to the proxy.
+- The prompt sent to your provider is the same call-scoped prompt the proxy
+  would get: the call's own spoken turns only, no typed chat, notes or memory.
+  The `x-securecoms-bridge-caps` header is never sent to your provider.
+- Call summaries use the same client: with `route: "direct"` they are also
+  generated by your provider, never the SecureComs proxy. With no usable key,
+  call summaries are unavailable (as is the fast path).
+
 ---
 
 ## Unified memory (0.29.0)
@@ -931,6 +963,17 @@ copied after the owner's next typed message.
 
 ---
 
+## Release notes: 0.32.0
+
+<!-- [COPY, approved by Eric 2026-10-20 ("Notes ok")] -->
+
+- Privacy: the agent no longer sends its memory file, persona file text or old memory text to the SecureComs server. It sends only the persona file names and sizes. The server already removed the text it had stored.
+- Optional: an agent's quick spoken replies on calls can go straight from the agent's machine to the owner's own model provider, using a key in the agent's credential file (`voice.fast_path.route: "direct"`). It is off unless you turn it on; with it on, call summaries also use your provider, and without a usable key they are not available.
+
+Upgrade: `npm install -g @securecoms/agent-bridge@0.32.0`, then restart the agent.
+
+---
+
 ## Release notes: 0.31.0
 
 <!-- [COPY, approved by Eric 2026-10-18 (voice-scope release notes)] -->

package/dist/bin.js

@@ -7765,6 +7765,8 @@ var schema = z2.object({
     model: z2.string().min(1),
     api_key: z2.string().min(1).optional(),
     api_key_env: z2.string().min(1).optional(),
+    // E.2: only the exact string "direct" opts in; any other value is ignored (today's proxy behavior), never an error.
+    route: z2.unknown().optional(),
     timeout_ms: z2.number().int().min(500).max(1e4).default(2500),
     max_tokens: z2.number().int().min(16).max(400).default(80)
   })
@@ -7789,7 +7791,8 @@ function parseVoiceConfig(raw, env) {
       model: v.fast_path.model,
       apiKey,
       timeoutMs: v.fast_path.timeout_ms,
-      maxTokens: v.fast_path.max_tokens
+      maxTokens: v.fast_path.max_tokens,
+      ...v.fast_path.route === "direct" ? { route: "direct" } : {}
     }
   };
 }
@@ -34662,6 +34665,7 @@ function lineHash(line) {
   return createHash5("sha256").update(line.trim(), "utf8").digest("hex");
 }
 var LOCAL_REPORT_FILE = "local-config.json";
+var LOCAL_PERSONA_FILE_NAMES = ["IDENTITY.md", "SOUL.md", "AGENTS.md"];
 var SECRET_PATH_COUNT_MAX = 1e4;
 var isCount = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0 && v <= SECRET_PATH_COUNT_MAX;
 function parseSecretPathsReport(raw) {
@@ -34743,18 +34747,23 @@ function readLocalReport(home, identityId) {
   const hasSearchKey = doc.has_search_key === true;
   const hasLlmKey = doc.has_llm_key === true;
   const raw = doc.persona;
-  const persona = raw && typeof raw === "object" && !Array.isArray(raw) ? Object.fromEntries(
-    Object.entries(raw).filter(([, v]) => typeof v === "string")
-  ) : {};
+  const persona = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const personaFiles = [];
+  for (const name of LOCAL_PERSONA_FILE_NAMES) {
+    const text = persona[name];
+    if (typeof text === "string" && text.trim() !== "") {
+      personaFiles.push({ name, bytes: Buffer.byteLength(text, "utf8") });
+    }
+  }
   const capRaw = doc.owner_dm_search_cap_effective;
   const ownerDmCap = typeof capRaw === "number" && Number.isInteger(capRaw) && capRaw >= 0 && capRaw <= OWNER_DM_SEARCH_DAILY_CAP_MAX ? capRaw : void 0;
   return {
-    persona,
+    local_persona_files: personaFiles,
     has_search_key: hasSearchKey,
     has_llm_key: hasLlmKey,
     has_extract_provider: doc.has_extract_provider === true,
     ...ownerDmCap !== void 0 ? { owner_dm_search_cap_effective: ownerDmCap } : {},
-    legacy_memory: localLegacySources(doc).map(({ path: _path, ...source }) => source),
+    legacy_memory: localLegacySources(doc).map(({ path: _path, content: _content, ...source }) => source),
     secret_paths: parseSecretPathsReport(doc.secret_paths)
   };
 }
@@ -34839,16 +34848,6 @@ async function applyLegacyMemoryFactDecisions(home, identityId, rawDecisions, re
   }
   return { sourcesDeleted, factsAssigned };
 }
-function readManagedMemory(home, identityId) {
-  const p = join18(runtimeConfigDir(home, identityId), MEMORY_FILE);
-  if (!existsSync4(p)) return null;
-  try {
-    const body = readFileSync10(p, "utf8").trim();
-    return body || null;
-  } catch {
-    return null;
-  }
-}
 function pruneManagedMemory(home, identityId, hashes, deps = REAL_FS) {
   const dir = runtimeConfigDir(home, identityId);
   const path = join18(dir, MEMORY_FILE);
@@ -36057,6 +36056,9 @@ var BridgeAgent = class _BridgeAgent {
     this.injectedFastLlm = !!deps.fastLlm;
     this.fileVoiceConfig = cfg.voice;
     this.fastLlm = deps.fastLlm ?? (cfg.voice?.fastPath.enabled ? new FastLlmClient(cfg.voice.fastPath, this.fetchImpl) : void 0);
+    if (this.fileVoiceConfig?.fastPath.route === "direct" && !this.fileVoiceConfig.fastPath.apiKey) {
+      writeServiceLog("warn", "voice.fast_path_direct_no_key");
+    }
     this.voiceSettingsSource = cfg.voice ? "file" : "none";
     this.latency = deps.latency ?? new LatencyRecorder();
     this.voiceCoalesceWindowMs = Math.max(0, deps.voiceCoalesceWindowMs ?? voiceCoalesceWindowFromEnv());
@@ -36856,6 +36858,7 @@ var BridgeAgent = class _BridgeAgent {
       const s = parseVoiceSettings(await res.json());
       if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
+      const direct = this.fileVoiceConfig?.fastPath.route === "direct" ? this.fileVoiceConfig.fastPath : void 0;
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
           ...s,
@@ -36864,16 +36867,16 @@ var BridgeAgent = class _BridgeAgent {
           quirks: this.fileVoiceConfig.persona.quirks
         };
         this.voiceSettings = merged;
-        this.cfg.voice = { persona: this.fileVoiceConfig.persona, fastPath: proxy.fastPath, settings: merged };
+        this.cfg.voice = { persona: this.fileVoiceConfig.persona, fastPath: direct ?? proxy.fastPath, settings: merged };
         this.voiceSettingsVersion = 0;
         this.voiceSettingsSource = "file";
       } else {
         this.voiceSettings = s;
-        this.cfg.voice = proxy;
+        this.cfg.voice = direct ? { ...proxy, fastPath: direct } : proxy;
         this.voiceSettingsVersion = s.version;
         this.voiceSettingsSource = "backend";
       }
-      if (!this.injectedFastLlm) {
+      if (!this.injectedFastLlm && !direct) {
         this.fastLlm = new FastLlmClient(this.cfg.voice.fastPath, this.fetchImpl);
       }
       writeServiceLog("info", "voice.settings_loaded", {
@@ -37102,12 +37105,10 @@ var BridgeAgent = class _BridgeAgent {
     const report = {
       applied_version: version,
       paths: checkConfiguredPaths(skillsJson),
-      // Read AFTER the prunes above, so the owner's next view of memory is
-      // the file as it now stands, not the one they just pruned from.
-      memory: readManagedMemory(this.home, this.cfg.identityId),
-      // E13: pass through what the runtime reported. The daemon does not
-      // interpret any of it.
-      local_persona: local?.persona ?? null,
+      // F-0 (G-5): the report carries no content. No MEMORY.md text, no persona text, no legacy
+      // text. E13 needs only to know which of the runtime's own persona files hold something, so
+      // this is [{name, bytes}] for each non-blank file and nothing else.
+      local_persona_files: local?.local_persona_files ?? [],
       // Only the runtime knows whether a search key file is configured — it
       // is an environment value on that process, invisible to the daemon and
       // to the backend. The backend needs it to generate a truthful tool
@@ -37140,9 +37141,9 @@ var BridgeAgent = class _BridgeAgent {
       ...this.reportedClearGeneration(),
       // 7b spec §9.2 (Task 19): capability versus state. Read-only: the report never starts the embedder.
       ...this.reportedRecall(),
-      // Inert legacy files only. `readLocalReport` revalidates the current
-      // regular-file bytes and strips every local path before this leaves the
-      // machine.
+      // Inert legacy files only, metadata only. `readLocalReport` revalidates the current
+      // regular-file bytes and strips every local path and every `content` before this
+      // leaves the machine.
       legacy_memory: local?.legacy_memory ?? [],
       // §B.4: counts of server-named secret paths inside / allowlisted /
       // outside the secrets directory, and the runtime's mode. Numbers and

package/dist/index.js

@@ -33659,6 +33659,8 @@ var schema = z2.object({
     model: z2.string().min(1),
     api_key: z2.string().min(1).optional(),
     api_key_env: z2.string().min(1).optional(),
+    // E.2: only the exact string "direct" opts in; any other value is ignored (today's proxy behavior), never an error.
+    route: z2.unknown().optional(),
     timeout_ms: z2.number().int().min(500).max(1e4).default(2500),
     max_tokens: z2.number().int().min(16).max(400).default(80)
   })
@@ -33683,7 +33685,8 @@ function parseVoiceConfig(raw, env) {
       model: v.fast_path.model,
       apiKey,
       timeoutMs: v.fast_path.timeout_ms,
-      maxTokens: v.fast_path.max_tokens
+      maxTokens: v.fast_path.max_tokens,
+      ...v.fast_path.route === "direct" ? { route: "direct" } : {}
     }
   };
 }
@@ -34297,6 +34300,7 @@ function lineHash(line) {
   return createHash5("sha256").update(line.trim(), "utf8").digest("hex");
 }
 var LOCAL_REPORT_FILE = "local-config.json";
+var LOCAL_PERSONA_FILE_NAMES = ["IDENTITY.md", "SOUL.md", "AGENTS.md"];
 var SECRET_PATH_COUNT_MAX = 1e4;
 var isCount = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0 && v <= SECRET_PATH_COUNT_MAX;
 function parseSecretPathsReport(raw) {
@@ -34378,18 +34382,23 @@ function readLocalReport(home, identityId) {
   const hasSearchKey = doc.has_search_key === true;
   const hasLlmKey = doc.has_llm_key === true;
   const raw = doc.persona;
-  const persona = raw && typeof raw === "object" && !Array.isArray(raw) ? Object.fromEntries(
-    Object.entries(raw).filter(([, v]) => typeof v === "string")
-  ) : {};
+  const persona = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const personaFiles = [];
+  for (const name of LOCAL_PERSONA_FILE_NAMES) {
+    const text = persona[name];
+    if (typeof text === "string" && text.trim() !== "") {
+      personaFiles.push({ name, bytes: Buffer.byteLength(text, "utf8") });
+    }
+  }
   const capRaw = doc.owner_dm_search_cap_effective;
   const ownerDmCap = typeof capRaw === "number" && Number.isInteger(capRaw) && capRaw >= 0 && capRaw <= OWNER_DM_SEARCH_DAILY_CAP_MAX ? capRaw : void 0;
   return {
-    persona,
+    local_persona_files: personaFiles,
     has_search_key: hasSearchKey,
     has_llm_key: hasLlmKey,
     has_extract_provider: doc.has_extract_provider === true,
     ...ownerDmCap !== void 0 ? { owner_dm_search_cap_effective: ownerDmCap } : {},
-    legacy_memory: localLegacySources(doc).map(({ path: _path, ...source }) => source),
+    legacy_memory: localLegacySources(doc).map(({ path: _path, content: _content, ...source }) => source),
     secret_paths: parseSecretPathsReport(doc.secret_paths)
   };
 }
@@ -34474,16 +34483,6 @@ async function applyLegacyMemoryFactDecisions(home, identityId, rawDecisions, re
   }
   return { sourcesDeleted, factsAssigned };
 }
-function readManagedMemory(home, identityId) {
-  const p = join15(runtimeConfigDir(home, identityId), MEMORY_FILE);
-  if (!existsSync4(p)) return null;
-  try {
-    const body = readFileSync8(p, "utf8").trim();
-    return body || null;
-  } catch {
-    return null;
-  }
-}
 function pruneManagedMemory(home, identityId, hashes, deps = REAL_FS) {
   const dir = runtimeConfigDir(home, identityId);
   const path = join15(dir, MEMORY_FILE);
@@ -35773,6 +35772,9 @@ var BridgeAgent = class _BridgeAgent {
     this.injectedFastLlm = !!deps.fastLlm;
     this.fileVoiceConfig = cfg.voice;
     this.fastLlm = deps.fastLlm ?? (cfg.voice?.fastPath.enabled ? new FastLlmClient(cfg.voice.fastPath, this.fetchImpl) : void 0);
+    if (this.fileVoiceConfig?.fastPath.route === "direct" && !this.fileVoiceConfig.fastPath.apiKey) {
+      writeServiceLog2("warn", "voice.fast_path_direct_no_key");
+    }
     this.voiceSettingsSource = cfg.voice ? "file" : "none";
     this.latency = deps.latency ?? new LatencyRecorder();
     this.voiceCoalesceWindowMs = Math.max(0, deps.voiceCoalesceWindowMs ?? voiceCoalesceWindowFromEnv());
@@ -36572,6 +36574,7 @@ var BridgeAgent = class _BridgeAgent {
       const s = parseVoiceSettings(await res.json());
       if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
+      const direct = this.fileVoiceConfig?.fastPath.route === "direct" ? this.fileVoiceConfig.fastPath : void 0;
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
           ...s,
@@ -36580,16 +36583,16 @@ var BridgeAgent = class _BridgeAgent {
           quirks: this.fileVoiceConfig.persona.quirks
         };
         this.voiceSettings = merged;
-        this.cfg.voice = { persona: this.fileVoiceConfig.persona, fastPath: proxy.fastPath, settings: merged };
+        this.cfg.voice = { persona: this.fileVoiceConfig.persona, fastPath: direct ?? proxy.fastPath, settings: merged };
         this.voiceSettingsVersion = 0;
         this.voiceSettingsSource = "file";
       } else {
         this.voiceSettings = s;
-        this.cfg.voice = proxy;
+        this.cfg.voice = direct ? { ...proxy, fastPath: direct } : proxy;
         this.voiceSettingsVersion = s.version;
         this.voiceSettingsSource = "backend";
       }
-      if (!this.injectedFastLlm) {
+      if (!this.injectedFastLlm && !direct) {
         this.fastLlm = new FastLlmClient(this.cfg.voice.fastPath, this.fetchImpl);
       }
       writeServiceLog2("info", "voice.settings_loaded", {
@@ -36818,12 +36821,10 @@ var BridgeAgent = class _BridgeAgent {
     const report = {
       applied_version: version,
       paths: checkConfiguredPaths(skillsJson),
-      // Read AFTER the prunes above, so the owner's next view of memory is
-      // the file as it now stands, not the one they just pruned from.
-      memory: readManagedMemory(this.home, this.cfg.identityId),
-      // E13: pass through what the runtime reported. The daemon does not
-      // interpret any of it.
-      local_persona: local?.persona ?? null,
+      // F-0 (G-5): the report carries no content. No MEMORY.md text, no persona text, no legacy
+      // text. E13 needs only to know which of the runtime's own persona files hold something, so
+      // this is [{name, bytes}] for each non-blank file and nothing else.
+      local_persona_files: local?.local_persona_files ?? [],
       // Only the runtime knows whether a search key file is configured — it
       // is an environment value on that process, invisible to the daemon and
       // to the backend. The backend needs it to generate a truthful tool
@@ -36856,9 +36857,9 @@ var BridgeAgent = class _BridgeAgent {
       ...this.reportedClearGeneration(),
       // 7b spec §9.2 (Task 19): capability versus state. Read-only: the report never starts the embedder.
       ...this.reportedRecall(),
-      // Inert legacy files only. `readLocalReport` revalidates the current
-      // regular-file bytes and strips every local path before this leaves the
-      // machine.
+      // Inert legacy files only, metadata only. `readLocalReport` revalidates the current
+      // regular-file bytes and strips every local path and every `content` before this
+      // leaves the machine.
       legacy_memory: local?.legacy_memory ?? [],
       // §B.4: counts of server-named secret paths inside / allowlisted /
       // outside the secrets directory, and the runtime's mode. Numbers and

package/dist/service/runtime-config-dir.d.ts

@@ -46,7 +46,8 @@ export declare const LOCAL_REPORT_FILE = "local-config.json";
  * and it never affects which file the runtime actually reads.
  */
 export interface LocalReport {
-    persona: Record<string, string>;
+    /** F-0 (spec D-3): name and UTF-8 size of each non-blank persona file. The text never leaves readLocalReport. */
+    local_persona_files: LocalPersonaFileReport[];
     has_search_key: boolean;
     has_llm_key: boolean;
     /** L-2 (spec §7.9): a readable key for an extract-capable provider. Only a real true counts; absent is false. */
@@ -64,6 +65,11 @@ export interface LocalReport {
  * so no path (the owner's `allowed_secret_paths` sits in the same file) can
  * ride along to the backend.
  */
+export declare const LOCAL_PERSONA_FILE_NAMES: readonly ["IDENTITY.md", "SOUL.md", "AGENTS.md"];
+export interface LocalPersonaFileReport {
+    name: (typeof LOCAL_PERSONA_FILE_NAMES)[number];
+    bytes: number;
+}
 export interface SecretPathsReport {
     mode: "report" | "enforce";
     inside: number;
@@ -80,11 +86,11 @@ export interface SecretPathsReport {
 export type LegacyMemoryKind = "global-memory" | "conversation-history" | "captured-memory";
 export declare const LEGACY_MEMORY_FACT_MAX_BYTES = 1024;
 export declare const LEGACY_MEMORY_FACT_DECISION_MAX = 500;
+/** What leaves the machine for one legacy source: metadata only (F-0 G-5). Never `content`, never `path`. */
 export interface LegacyMemoryReport {
     id: string;
     kind: LegacyMemoryKind;
     channel_id?: string;
-    content: string | null;
     bytes: number;
     exportable: boolean;
 }

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.31.0";
+export declare const BRIDGE_VERSION = "0.32.0";

package/dist/voice/persona.d.ts

@@ -28,6 +28,10 @@ export interface FastPathConfig {
     maxTokens: number;
     /** Extra request headers. Set only by settingsToVoiceConfig (the SecureComs proxy); never by parseVoiceConfig. */
     headers?: Readonly<Record<string, string>>;
+    /** E.2 (spec §6, OQ-4): the credential file's explicit opt-in to call this provider directly from the agent's
+     *  machine. Set only by parseVoiceConfig, only for `route: "direct"`; a backend settings fetch then never replaces
+     *  this config with the SecureComs proxy's. */
+    route?: "direct";
 }
 export interface VoiceConfig {
     persona: VoicePersona;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "type": "module",
   "engines": {
     "node": ">=24"