@securecoms/agent-bridge 0.8.0 → 0.10.0

package/dist/bridge-agent.d.ts

@@ -674,6 +674,58 @@ export declare class BridgeAgent {
      * the other enclaves in the set.
      */
     private refreshChannelMeta;
+    /** Cache for the server-side enclave enumeration (see enclavesToCover). */
+    private enclaveEnumCache;
+    /** Enclaves whose channel listing failed on the NEWEST sweep (audit HIGH:
+     * skip-one deleted the sweep's partial-coverage signal — observations_stale
+     * is a global max, so one healthy enclave masked a failed one). Surfaced on
+     * health() so partial coverage is never silent. */
+    private sweepEnclavesFailed;
+    /** Enclave ids whose channel listing has EVER succeeded this process, seeded
+     * with HOME (home is always expected to list; without the seed, a home
+     * failure right after a restart would read as "never succeeded" and slip
+     * through the expected-gap branch — weaker than the old abort-on-failure).
+     * A failure of a member of this set is a REGRESSION and degrades health; a
+     * failure of a never-succeeded enclave (partner: tenant-scoped 404, permanent
+     * pending backend authz) is an EXPECTED gap — reported, not degrading, or
+     * every federated agent would peg degraded forever. */
+    private readonly enclaveListEverSucceeded;
+    /** Warn-once-per-failure-streak, keyed by enclave id (cleared on success):
+     * a permanently-404ing partner enclave must not log 1440 lines a day. */
+    private readonly enclaveListWarned;
+    private static readonly ENCLAVE_ENUM_TTL_MS;
+    private enclaveEnumWarned;
+    /**
+     * C1 (split-brain Task 3): every enclave this agent must COVER — for the
+     * self-heal sweep and for channel-meta refresh alike. ONE helper on purpose:
+     * these two call sites had drifted (refreshChannelMeta looped home+learned,
+     * selfHealSweep looped nothing), and the drift is exactly what left both
+     * production agents with zero recovery coverage in their second enclave.
+     *
+     * The set is SERVER enumeration ∪ home ∪ store-learned:
+     *
+     *  - SERVER (`GET /api/v1/enclaves`, membership-scoped, federated included)
+     *    is the authoritative source. The store CANNOT be: channel_meta's only
+     *    writers are listChannels itself (circular — you learn enclave B by
+     *    having already listed B) and the receive pump's successfully-decrypted
+     *    loop, and a FORKED agent decrypts nothing, so the agent that most needs
+     *    sweeping in enclave B is precisely the one whose store never learned B.
+     *  - home + learned stay in the union as the degraded-mode floor: if the
+     *    enumeration endpoint is down, we sweep what we can rather than nothing,
+     *    and we warn (once) so the gap is diagnosable.
+     *
+     * The server result is cached for ENCLAVE_ENUM_TTL_MS so per-ingest-cycle
+     * callers (refreshChannelMeta) do not add an HTTP round-trip per cycle;
+     * membership changes are picked up within one TTL, which matches the sweep
+     * cadence this exists to serve.
+     *
+     * ⚠️ Residual gap, stated: the enumeration RETURNS cross-tenant partner
+     * enclaves, but `list_channels_in_enclave` is tenant-scoped and 404s them
+     * under this agent's bearer — so a partner enclave in this set still yields
+     * no channels. Callers must treat a per-enclave listing failure as skip-one,
+     * never abort-all. Closing that needs backend authz work, not daemon work.
+     */
+    private enclavesToCover;
     /** A live roster for a channel, or undefined if missing OR expired past the TTL. */
     private freshRoster;
     /**
@@ -836,12 +888,22 @@ export declare class BridgeAgent {
         degraded: boolean;
         /** M6: per-channel observations, newest sweep. Read from cache; no I/O. */
         channels: ChannelObservation[];
+        /** C1: enclaves whose channel listing failed on the newest sweep. Non-empty
+         * means partial coverage — those enclaves' channels were NOT probed. A
+         * PREVIOUSLY-SUCCEEDING (or home) entry also flips `degraded`; a
+         * never-succeeded entry (partner enclave, tenant-scoped 404) is reported
+         * here without degrading. */
+        sweep_enclaves_failed: string[];
         /** Optional memory-adapter counters (e.g. Hermes provider); present only when the active provider exposes stats(). */
         hermes_no_session?: number;
         hermes_skipped?: number;
         hermes_write_failed?: number;
         openclaw_no_session?: number;
         openclaw_read_failed?: number;
+        openclaw_facts_missing?: number;
+        openclaw_facts_read_failed?: number;
+        openclaw_facts_truncated?: number;
+        openclaw_facts_chars?: number;
     };
     /**
      * Loopback observability snapshot served at GET /v1/metrics.

package/dist/config.d.ts

@@ -23,6 +23,10 @@ export interface BridgeConfig {
     memoryBaseDir?: string;
     /** For memoryProvider="openclaw": the OpenClaw agent dir slug, e.g. "cortina" (→ <base_dir>/agents/<agent>/). */
     memoryAgent?: string;
+    /** For memoryProvider="openclaw": explicit workspace dir override; wins over openclaw.json (spec D4 rung 1). */
+    memoryWorkspaceDir?: string;
+    /** For memoryProvider="openclaw": total facts cap in UTF-16 code units. 0 = facts kill switch (preserved via ?? downstream, never ||). Absent/junk → provider default 8000. */
+    memoryFactsCharBudget?: number;
 }
 export declare const REQUIRED: readonly ["api_key", "identity_id", "device_id", "signing_private_key", "enclave_id", "api_base"];
 export declare function loadConfig(opts: {

package/dist/http-server.d.ts

@@ -34,7 +34,7 @@ export declare const memoryRecordSchema: z.ZodEffects<z.ZodObject<{
     message_id: z.ZodOptional<z.ZodString>;
     idempotency_key: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    role: "peer" | "agent";
+    role: "agent" | "peer";
     text: string;
     conversation_id: string;
     modality: "text" | "voice";
@@ -42,7 +42,7 @@ export declare const memoryRecordSchema: z.ZodEffects<z.ZodObject<{
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }, {
-    role: "peer" | "agent";
+    role: "agent" | "peer";
     text: string;
     conversation_id: string;
     modality: "text" | "voice";
@@ -50,7 +50,7 @@ export declare const memoryRecordSchema: z.ZodEffects<z.ZodObject<{
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }>, {
-    role: "peer" | "agent";
+    role: "agent" | "peer";
     text: string;
     conversation_id: string;
     modality: "text" | "voice";
@@ -58,7 +58,7 @@ export declare const memoryRecordSchema: z.ZodEffects<z.ZodObject<{
     idempotency_key?: string | undefined;
     peer_id?: string | undefined;
 }, {
-    role: "peer" | "agent";
+    role: "agent" | "peer";
     text: string;
     conversation_id: string;
     modality: "text" | "voice";