@securecoms/agent-bridge 0.32.0 → 0.33.0

package/dist/bridge-agent.d.ts

@@ -103,6 +103,13 @@ export declare const OWNER_DM_DEFAULT_READ_GRANTS: readonly BridgeToolGrant[];
  * it with ROOM_SAFE_READ_TOOLS (turn-loop.ts).
  */
 export declare const ROOM_DEFAULT_READ_GRANTS: readonly BridgeToolGrant[];
+/**
+ * ADR-0024 step 2a Task 18 (spec §2): the per-device capability tokens this build declares on every
+ * runtime-config report. `voice_channel_v1` is declared ONLY by a build that binds V: the server counts a device
+ * as voice-capable from this token, so a build that cannot bind V must never send it. A constant enum list,
+ * content-free by design (F-0 #1209).
+ */
+export declare const BRIDGE_CAPABILITIES: readonly ["voice_channel_v1"];
 /**
  * Voice fast-path privacy, P-5 (spec §9). The grants of a relayed owner voice turn (and, from Task 4, of every
  * voice-scoped owner turn). A constant of its own, frozen and written out, so a later change to
@@ -982,6 +989,13 @@ export declare class BridgeAgent {
     private readonly supersedeRefundable;
     /** M-1: channels this process has used as a FileSafe vault channel. */
     private readonly vaultChannelIds;
+    /**
+     * ADR-0024 step 2a Task 19 (spec §9): hidden voice channels V resolved to their conversation P, lookup back-off, and
+     * each V's binding verdict. In memory only: a restart re-resolves (one get_channel per V) and re-evaluates.
+     */
+    private readonly voiceChannels;
+    /** Fix M-3: channels a listing row marked channel_kind "voice"; never recorded as listed. */
+    private readonly listedAsVoice;
     /** Phase 3 F3: consecutive agent turns per channel. */
     private readonly agentHops;
     private readonly maxAgentHops;
@@ -1012,6 +1026,12 @@ export declare class BridgeAgent {
      * counter is incremented. Surfaced on health()/metrics().
      */
     private failedAttachments;
+    /** Task 20 R4: V frames dropped by the per-frame verdict (not bound, or not at the verdict's positions). A number only. */
+    private voiceFramesRefused;
+    /** Task 20: frames on a bound V the accept filter dropped (not R's voice frame, a greeting marker or a transcript). */
+    private voiceFramesFiltered;
+    /** Task 20: message id of an admitted V frame -> its P (B.8 keys). Bounded; an entry lives one ingest cycle in practice. */
+    private readonly voiceFrameParent;
     /** Files link: vault_ref bodies refused by R1 (strict parse) or R2 (enclave binding). */
     private refusedVaultRefs;
     /**
@@ -2155,8 +2175,91 @@ export declare class BridgeAgent {
     private fetchBounded;
     /** H-A rule 4 (audit r1 C2): GET /api/v1/channels/{id}; only 404 is "gone" (404, not 403, for non-members). */
     private probeChannelMembership;
+    /**
+     * Task 20's accessor: P's channel id ONLY while V is bound under the spec §9 rule at both groups' held positions as
+     * of the last evaluation (every receive cycle, before any frame is processed; or {@link voiceParentNow}); undefined
+     * for an unbound or refused V, and for any channel that is not a resolved V.
+     */
+    voiceParentOf(channelId: string): string | undefined;
+    /** True for a channel resolved as a V, bound or not. Such a channel is never processed as a normal channel. */
+    isKnownVoiceChannel(channelId: string): boolean;
+    /** Re-evaluates one V at the held positions now, then answers as {@link voiceParentOf}. */
+    private voiceParentNow;
+    /** A channel no listing has ever classified (in memory or persisted). V is hidden from the listing, so it is one. */
+    private isUnlistedChannel;
+    private voiceChannelGate;
+    /**
+     * Looks up one channel with get_channel (the voice arm, OQ-5 (a)). Only the classification is kept. Never throws; a
+     * failure is recorded and retried (30 s doubling to 10 min). Called only from {@link resolveUnlistedChannels}, which
+     * selects unlisted channels whose back-off allows.
+     */
+    private resolveVoiceChannel;
+    /**
+     * Looks up every unlisted channel among `channelIds` whose back-off allows. A channel is "unlisted" only after this
+     * cycle's listing: if any candidate remains and the cycle has not listed yet, one listing runs first, so a channel
+     * that is merely new (listed, not yet cached) is never looked up. Returns true when it ran that listing.
+     */
+    private resolveUnlistedChannels;
+    /** Final review M-c: V -> consecutive failed member-list reads for the binding, and when the last one ran. */
+    private readonly voiceRosterRetry;
+    /** The first retry after a failure is immediate (next cycle); then 30 s, doubling, capped at 10 min. */
+    private voiceRosterRetryDue;
+    private noteVoiceRosterRead;
+    /** Every resolved V, re-evaluated where a position or a roster moved. */
+    private reevaluateVoiceBindings;
+    /**
+     * The spec §9 binding rule over the bridge's OWN ratchet trees (never a server list of leaves), keyed by both
+     * groups' held (group, epoch) and both rosters' fetch times: a change in any of them re-evaluates. V's member list
+     * is read only for `is_relay`, and only when it is fresh at V's held position. Fail closed: a tree that moved while
+     * it was read, or any exception, leaves V unbound and is re-evaluated next time.
+     */
+    private reevaluateVoiceBinding;
+    /**
+     * Fix I-1 / Task 20 R1: P's held position for every resolved V, read before a receive so frames can be stamped. V's
+     * half is not stamped here: each frame carries the epoch that opened it (`openedAt`).
+     */
+    private voicePositionSnapshot;
+    /**
+     * Fix I-1, for Task 20: P for ONE frame on V, only when V is bound now AND neither P's nor V's held (group, epoch)
+     * moved between that frame's first receipt and the verdict. Otherwise undefined: the frame is dropped (acked, never
+     * held, never processed). A frame first received before V was resolved has no receipt positions and is refused.
+     */
+    voiceParentForFrame(channelId: string, messageId: string, openedAt?: {
+        groupId: string;
+        epoch: number;
+    } | null): string | undefined;
+    /** Stores a verdict; a change of verdict logs one content-free line. */
+    private noteVoiceBinding;
+    /**
+     * The receive-cycle gate, before any per-frame work. A resolved V is never a normal channel: a frame passes only when
+     * the per-frame verdict names P (bound now, its P stamp and its own opening epoch at the verdict's positions) AND the
+     * accept filter takes it (Task 20: R's voice frame or a P member's greeting marker; a call_transcript is acked, not a
+     * turn). Every other V frame is acked unprocessed and never recorded. A channel get_channel answered 404 is acked
+     * unprocessed (fail closed). An unlisted channel whose lookup errored or has not run is held: neither processed nor
+     * acked, so it is re-served once the lookup answers. Everything else passes unchanged.
+     */
+    private gateVoiceEntries;
+    /**
+     * Task 20: the per-frame verdict and the accept filter for one frame on a resolved V. True only for a model turn
+     * (R's voice frame, a P member's greeting marker), which is then keyed per B.8 through {@link voiceFrameParent}. A
+     * call_transcript is accepted but is not a turn (acked, nothing more, as step 1 on P). Counters are numbers only.
+     */
+    private admitVoiceFrame;
+    /**
+     * Task 20 (B.8): the key channel for metadata, audience, owner, manifest and caps. For an admitted V frame, its P;
+     * for any other frame, its own channel.
+     */
+    private keyChannelForFrame;
+    /**
+     * Task 20 (B.8 "per-room daily caps → P", the room rate floor): the channel a cap or floor counts against. A known V
+     * counts against its bound P; an unbound V against itself (no grant can be issued there, so nothing is widened).
+     */
+    private capChannelFor;
+    /** Phase 3 F1 pause, for a voice channel V also read on its P (a paused agent runs no inference on the call either). */
+    private pausedFor;
     /** §5.4: one conversation's turns, facts, notes and recall, inside the memory mutex, with every in-memory copy. */
     private purgeConversation;
+    private purgeOneConversation;
     /**
      * 7b Task 17: the purged conversation's recall cache and pending map
      * entries go too, inside the memory mutex. The purge already moved the
@@ -3220,7 +3323,7 @@ export declare class BridgeAgent {
     /** Spec §7.5: the room is capped today: cap 0, reached (by the runtime or the backstop), or at the cap. Fails closed. */
     private roomSearchCapped;
     /** Spec §7.5 (T-14c, M-4): the runtime reports an executed-call cap for a room. Never throws. */
-    noteRoomCapReached(channelId: string): void;
+    noteRoomCapReached(reported: string): void;
     /** K-14, once per room per UTC day; the flag is persisted only after the send resolves. Called only from noteRoomCapReached. */
     private noticeRoomSearchCap;
     private logRoomCap;
@@ -3490,6 +3593,14 @@ export declare class BridgeAgent {
         failed_attachments: number;
         /** Files link: vault_ref bodies refused by R1 (strict parse) or R2 (enclave binding), acked. */
         refused_vault_refs: number;
+        /** ADR-0024 step 2a Task 20 R4: frames on a voice channel V dropped by the per-frame verdict (number only). */
+        voice_frames_refused: number;
+        /** Task 20: frames on a bound V the accept filter dropped (number only). */
+        voice_frames_filtered: number;
+        /** Task 20 final review M-d: arrivals refused because the receipt map was full (number only). */
+        voice_receipt_cap_reached: number;
+        /** Task 20 final review: bound Vs whose relay is also a P leaf (pre-stamp shape; PR-F sunset signal). */
+        voice_relay_in_parent: number;
         /** Task 4 (self-hosted fast voice): cumulative fast-path replies actually sent. */
         fast_path_sent: number;
         /** Task 4 (self-hosted fast voice): cumulative fast-path attempts that errored (LLM call, normalization, or send) — fail-soft, never blocks the buffered turn. */