@securecoms/agent-bridge 0.33.1 → 0.35.0

package/dist/outbox.d.ts

@@ -0,0 +1,42 @@
+export declare const VAULT_OUTBOX_DIRNAME = "vault-outbox";
+export declare class PathOutsideOutboxError extends Error {
+    constructor();
+}
+/** The outbox as observed at start(); every read must still see exactly this directory. */
+export interface OutboxPin {
+    /** The configured path (what the authenticated GET /v1/vault-outbox reports). */
+    readonly dir: string;
+    /** realpath of the outbox at pin time; the open path is built from this. */
+    readonly real: string;
+    readonly dev: number;
+    readonly ino: number;
+}
+/** A file read from the outbox; `consumeOutboxFile` deletes exactly this inode. */
+export interface OutboxRead {
+    readonly bytes: Uint8Array;
+    readonly path: string;
+    readonly dev: number;
+    readonly ino: number;
+}
+/**
+ * Create the outbox 0700 if missing and pin it. An existing outbox owned by
+ * this uid is tightened to 0700; one that is a symlink, not a directory, or
+ * owned by another uid is refused.
+ */
+export declare function ensureOutbox(dir: string): OutboxPin;
+/**
+ * Read `callerPath` iff it is a regular file directly inside the pinned
+ * outbox. A relative `callerPath` resolves against the outbox. A null pin
+ * (no data dir, or the outbox could not be created at start) refuses every
+ * path: fail closed.
+ */
+export declare function readOutboxFile(pin: OutboxPin | null, callerPath: string): Promise<OutboxRead>;
+/**
+ * Delete an uploaded file from the outbox, but only if the outbox is still
+ * the pinned directory (same checks as a read) and the name still holds the
+ * inode that was read (a file swapped in after the read is left alone). The
+ * unlink goes through the pinned realpath. A window remains between these
+ * lstats and the unlink (Node has no unlinkat): narrowed, not closed.
+ * Returns whether it was deleted; never throws (the upload already happened).
+ */
+export declare function consumeOutboxFile(pin: OutboxPin, read: OutboxRead): Promise<boolean>;

package/dist/reply-credit.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The reply credit (weather/currency architect ruling OQ-P1, 2026-10-29; plan Task 17).
+ *
+ * A runtime that called weather_forecast flags its `send` frame with `credit: "weatherapi"`. The BRIDGE appends the
+ * WeatherAPI.com credit line (U-25, approved by Eric 2026-10-18) to the published text and records the UN-credited text
+ * to history, unified memory and the call buffer, so the line never feeds the next turn's context (P-1). The bridge
+ * declares REPLY_CREDIT_FEATURE in its hello; the runtime offers weather_forecast only behind a bridge that did.
+ * The bridge keeps its own copy of the line; capability-parity.test.ts pins it to the runtime's.
+ */
+export declare const REPLY_CREDIT_FEATURE = "reply_credit_v1";
+export declare const WEATHER_CREDIT_LINE = "Weather data: WeatherAPI.com. For general information only.";
+export type ReplyCredit = "weatherapi";
+/** The exact suffix a credited reply's published text carries. */
+export declare const WEATHER_CREDIT_SUFFIX = "\n\nWeather data: WeatherAPI.com. For general information only.";
+/** The closed set: anything else is not a credit (and a frame carrying it is refused). */
+export declare function isReplyCredit(v: unknown): v is ReplyCredit;
+/**
+ * Code review Q2: the exact credit suffix removed from the END of a text, once; anything else unchanged. Used where
+ * the agent's OWN published reply comes back as an inbound (another device of the same identity), so the credit line
+ * never enters history from that path either.
+ */
+export declare function stripCreditSuffix(text: string): string;

package/dist/reply-intent.d.ts

@@ -1,3 +1,4 @@
+import type { ReplyCredit } from "./reply-credit.js";
 /** The body of one reply part, as the intent stores it (sealed at rest). */
 export type ReplyBody = {
     kind: "text";
@@ -39,8 +40,12 @@ export declare function decodeReplyBody(bytes: Uint8Array): ReplyBody;
  * Keyed MAC binding a body to its reply id and channel. Compares retries
  * without storing a plain digest, and (PR #716 review LOW-6) makes a body moved
  * to another row, or a row whose channel was edited, fail verification.
+ *
+ * Weather/currency Task 17 (audit r2, adopted): an optional `credit` is bound too. Undefined keeps the MAC input
+ * byte-identical to the four-argument form, so every existing row and every uncredited reply verifies unchanged; a
+ * flipped or nulled reply_credit column, or a credited row read by an older bridge, fails verification.
  */
-export declare function replyBodyMac(key: Uint8Array, replyId: string, channelId: string, body: Uint8Array): string;
+export declare function replyBodyMac(key: Uint8Array, replyId: string, channelId: string, body: Uint8Array, credit?: ReplyCredit): string;
 /** The ordinal of an unkeyed reply part (`p:<n>`), or null for a keyed part. */
 export declare function partOrdinal(part: string): number | null;
 /**

package/dist/service/runtime-config-dir.d.ts

@@ -52,6 +52,8 @@ export interface LocalReport {
     has_llm_key: boolean;
     /** L-2 (spec §7.9): a readable key for an extract-capable provider. Only a real true counts; absent is false. */
     has_extract_provider: boolean;
+    /** Weather/currency L-1: a weather key the runtime's format check accepts. Only a real true counts; absent is false. */
+    has_weather_key: boolean;
     /** D39: the owner-DM daily search cap the runtime enforces; an integer in [0, 2000], otherwise undefined. */
     owner_dm_search_cap_effective?: number;
     legacy_memory: LegacyMemoryReport[];
@@ -81,6 +83,7 @@ export interface SecretPathsReport {
         postgres_url_file: number;
         search_key_file: number;
         sqlite?: number;
+        weather_key_file?: number;
     };
 }
 export type LegacyMemoryKind = "global-memory" | "conversation-history" | "captured-memory";

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.33.1";
+export declare const BRIDGE_VERSION = "0.35.0";

package/dist/ws-server.d.ts

@@ -51,7 +51,7 @@ export declare const MEMORY_UNIFIED_FEATURE = "memory_unified";
  * fake against this list at run time (7b gate fix: a member added here without
  * a fake made three tests throw "is not a function").
  */
-export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearManifestConsumer", "clearPerToolConsumer", "clearSearchProvidersSocket", "harnessGrantsWithheld", "signedSearchProvider", "isRuntimeMessageRetired", "noteConsumerCapability", "noteManifestConsumer", "noteRoomCapReached", "noteSearchProvidersSocket", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
+export declare const WS_AGENT_MEMBERS: readonly ["ackRuntimeMessages", "action", "admitRuntimeDelivery", "applyMemoryNote", "clearHarnessReport", "clearManifestConsumer", "clearPerToolConsumer", "clearSearchProvidersSocket", "clearUtilityToolsSocket", "harnessGrantsWithheld", "signedSearchProvider", "isRuntimeMessageRetired", "noteConsumerCapability", "noteManifestConsumer", "noteRoomCapReached", "noteSearchProvidersSocket", "noteUtilityToolsSocket", "noteNotesConsumer", "notePerToolConsumer", "noteRecallConsumer", "noteUnifiedConsumer", "noteSessionClose", "noteSessionEvicted", "noteSessionOpen", "notesAppliedGeneration", "notesForDelivery", "recallForDelivery", "unifiedFeatureOn", "unifiedForDelivery", "recordHarnessReport", "recordRuntimeReply", "reportStatusGated", "requeueFailedRuntimeDeliveries", "requeueFront", "runtimeReplyReceipt", "send", "sendA2A", "subscribe", "takeDeliverable", "wakeListeners"];
 export type WsAgent = Pick<BridgeAgent, (typeof WS_AGENT_MEMBERS)[number]>;
 export declare function attachAgentWebSocket(server: HttpServer, agent: WsAgent, opts: AgentWebSocketOptions): {
     close(): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.33.1",
+  "version": "0.35.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -50,7 +50,7 @@
     "ajv-formats": "^3.0.1",
     "libsodium-wrappers-sumo": "0.7.15",
     "ws": "^8.21.0",
-    "zod": "^3.23.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@agentvault/connect-core": "*",