@securecoms/agent-bridge 0.33.0 → 0.34.0

package/dist/memory/unified/item-book.d.ts

@@ -34,8 +34,11 @@ export interface ItemWriteRequest {
     capExempt?: true;
     /** Plan audit HIGH-2: embed nothing inline; every part goes pending to ItemReembed (Task 30's migration). */
     pendingOnly?: true;
-    /** Task 28 (pins): the caller's last W1/W2 re-check, evaluated FIRST inside the memory mutex; a veto writes nothing. */
-    precommit?: () => "mode" | "message" | null;
+    /**
+     * Task 28 (pins): the caller's last W1/W2 re-check, evaluated FIRST inside the memory mutex; a veto writes nothing.
+     * Bridge 0.33.1: the owner-voice writer on a voice channel V also vetoes here when P's receipt capture went stale.
+     */
+    precommit?: () => "mode" | "message" | "purged" | "room_cleared" | null;
 }
 export interface ItemBookDeps {
     store: Pick<SqliteMlsStateStore, "reserveItemIds" | "sealItemRecord" | "sealItemVec" | "insertItems" | "itemByOrigin" | "openItemRecord" | "evictBatch">;

package/dist/reply-credit.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The reply credit (weather/currency architect ruling OQ-P1, 2026-10-29; plan Task 17).
+ *
+ * A runtime that called weather_forecast flags its `send` frame with `credit: "weatherapi"`. The BRIDGE appends the
+ * WeatherAPI.com credit line (U-25, approved by Eric 2026-10-18) to the published text and records the UN-credited text
+ * to history, unified memory and the call buffer, so the line never feeds the next turn's context (P-1). The bridge
+ * declares REPLY_CREDIT_FEATURE in its hello; the runtime offers weather_forecast only behind a bridge that did.
+ * The bridge keeps its own copy of the line; capability-parity.test.ts pins it to the runtime's.
+ */
+export declare const REPLY_CREDIT_FEATURE = "reply_credit_v1";
+export declare const WEATHER_CREDIT_LINE = "Weather data: WeatherAPI.com. For general information only.";
+export type ReplyCredit = "weatherapi";
+/** The exact suffix a credited reply's published text carries. */
+export declare const WEATHER_CREDIT_SUFFIX = "\n\nWeather data: WeatherAPI.com. For general information only.";
+/** The closed set: anything else is not a credit (and a frame carrying it is refused). */
+export declare function isReplyCredit(v: unknown): v is ReplyCredit;
+/**
+ * Code review Q2: the exact credit suffix removed from the END of a text, once; anything else unchanged. Used where
+ * the agent's OWN published reply comes back as an inbound (another device of the same identity), so the credit line
+ * never enters history from that path either.
+ */
+export declare function stripCreditSuffix(text: string): string;

package/dist/reply-intent.d.ts

@@ -1,3 +1,4 @@
+import type { ReplyCredit } from "./reply-credit.js";
 /** The body of one reply part, as the intent stores it (sealed at rest). */
 export type ReplyBody = {
     kind: "text";
@@ -39,8 +40,12 @@ export declare function decodeReplyBody(bytes: Uint8Array): ReplyBody;
  * Keyed MAC binding a body to its reply id and channel. Compares retries
  * without storing a plain digest, and (PR #716 review LOW-6) makes a body moved
  * to another row, or a row whose channel was edited, fail verification.
+ *
+ * Weather/currency Task 17 (audit r2, adopted): an optional `credit` is bound too. Undefined keeps the MAC input
+ * byte-identical to the four-argument form, so every existing row and every uncredited reply verifies unchanged; a
+ * flipped or nulled reply_credit column, or a credited row read by an older bridge, fails verification.
  */
-export declare function replyBodyMac(key: Uint8Array, replyId: string, channelId: string, body: Uint8Array): string;
+export declare function replyBodyMac(key: Uint8Array, replyId: string, channelId: string, body: Uint8Array, credit?: ReplyCredit): string;
 /** The ordinal of an unkeyed reply part (`p:<n>`), or null for a keyed part. */
 export declare function partOrdinal(part: string): number | null;
 /**

package/dist/service/runtime-config-dir.d.ts

@@ -52,6 +52,8 @@ export interface LocalReport {
     has_llm_key: boolean;
     /** L-2 (spec §7.9): a readable key for an extract-capable provider. Only a real true counts; absent is false. */
     has_extract_provider: boolean;
+    /** Weather/currency L-1: a weather key the runtime's format check accepts. Only a real true counts; absent is false. */
+    has_weather_key: boolean;
     /** D39: the owner-DM daily search cap the runtime enforces; an integer in [0, 2000], otherwise undefined. */
     owner_dm_search_cap_effective?: number;
     legacy_memory: LegacyMemoryReport[];
@@ -81,6 +83,7 @@ export interface SecretPathsReport {
         postgres_url_file: number;
         search_key_file: number;
         sqlite?: number;
+        weather_key_file?: number;
     };
 }
 export type LegacyMemoryKind = "global-memory" | "conversation-history" | "captured-memory";

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.33.0";
+export declare const BRIDGE_VERSION = "0.34.0";

package/dist/ws-server.d.ts

@@ -51,7 +51,7 @@ export declare const MEMORY_UNIFIED_FEATURE = "memory_unified";
  * fake against this list at run time (7b gate fix: a member added here without
  * a fake made three tests throw "is not a function").
  */
-export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearManifestConsumer", "clearPerToolConsumer", "clearSearchProvidersSocket", "harnessGrantsWithheld", "signedSearchProvider", "isRuntimeMessageRetired", "noteConsumerCapability", "noteManifestConsumer", "noteRoomCapReached", "noteSearchProvidersSocket", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
+export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearManifestConsumer", "clearPerToolConsumer", "clearSearchProvidersSocket", "clearUtilityToolsSocket", "harnessGrantsWithheld", "signedSearchProvider", "isRuntimeMessageRetired", "noteConsumerCapability", "noteManifestConsumer", "noteRoomCapReached", "noteSearchProvidersSocket", "noteUtilityToolsSocket", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
 export type WsAgent = Pick<BridgeAgent, (typeof WS_AGENT_MEMBERS)[number]>;
 export declare function attachAgentWebSocket(server: HttpServer, agent: WsAgent, opts: AgentWebSocketOptions): {
     close(): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -50,7 +50,7 @@
     "ajv-formats": "^3.0.1",
     "libsodium-wrappers-sumo": "0.7.15",
     "ws": "^8.21.0",
-    "zod": "^3.23.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@agentvault/connect-core": "*",