car-runtime 0.49.0 → 0.51.0

package/index.d.ts

@@ -23,7 +23,6 @@
  * - `openSession`, `closeSession`, `registerPolicy(sessionId)` — use
  *   `session.open` / `session.close` JSON-RPC methods
  * - `stateSnapshot`, `stateKeys` — daemon-side endpoints pending
- * - `removeModel` — daemon owns models_dir / models.json
  *
  * (`registerModel` was re-exposed in #39 — it now proxies to the
  *  daemon's `models.register` JSON-RPC. See its docstring for
@@ -421,6 +420,24 @@ export class CarRuntime {
    * dispatches the chosen components.
    */
   planEvolutionLive(requestJson: string): Promise<string>;
+  /**
+   * `memory.set_admission_table` — install or clear the durable-state
+   * admission rules: `{ table?: OwnershipTable | null }` →
+   * `{ enabled, ungated_surfaces }`.
+   *
+   * A null or absent `table` turns the gate OFF, which is the default. Off is
+   * not the same as an empty table: an empty table is fail-closed and refuses
+   * every externally-authored fact.
+   */
+  memorySetAdmissionTable(requestJson: string): Promise<string>;
+  /**
+   * `memory.admission_table` — read back the installed admission rules: `{}` →
+   * `{ enabled, table, ungated_surfaces }`.
+   *
+   * `ungated_surfaces` names surfaces whose rule imposes no real constraint —
+   * worth checking after installing a table that only looks governed.
+   */
+  memoryAdmissionTable(requestJson: string): Promise<string>;
   /**
    * `supervision.subscribe` — register this connection as a supervisor of the
    * admission gate: `{ filter?: { tools?, sessions?, min_reversibility? } }`.
@@ -445,6 +462,20 @@ export class CarRuntime {
   syncStatus(requestJson: string): Promise<string>;
   /** `sync.append` — record an op on any surface: `{ surface, payload, scope? }` (B6). */
   syncAppend(requestJson: string): Promise<string>;
+  /** `agents.peers` — the agents this runtime can message, from the daemon's live connection table. */
+  agentsPeers(requestJson: string): Promise<string>;
+  /** `agents.message` — send text to one peer: `{ to, body, summary? }`. The sender is derived server-side. */
+  agentsMessage(requestJson: string): Promise<string>;
+  /** `agents.message.pending` — peer messages awaiting an operator decision. Host-only. */
+  agentsMessagePending(requestJson: string): Promise<string>;
+  /** `agents.message.approve` — release or drop one held message: `{ id, decision }`. Host-only. */
+  agentsMessageApprove(requestJson: string): Promise<string>;
+  /** Store/load exact supervised-assistant checkpoints in the durable oplog. */
+  syncAssistantCheckpointPut(requestJson: string): Promise<string>;
+  syncAssistantCheckpointGet(requestJson: string): Promise<string>;
+  /** Append/load monotone supervised-action lifecycle records. */
+  syncAssistantActionPut(requestJson: string): Promise<string>;
+  syncAssistantActionGet(requestJson: string): Promise<string>;
   /** `sync.record_turn` — route a conversation turn through the oplog so `syncResume` is real (B6). */
   syncRecordTurn(requestJson: string): Promise<string>;
   /** `sync.record_intent` — write the leased-execution intent ledger; feeds the fence oracle (B6). */
@@ -943,14 +974,28 @@ export class CarRuntime {
   /** Download a model. Returns its local path. */
   pullModel(name: string): Promise<string>;
 
-  /** Remove a downloaded model. */
-  removeModel(name: string): void;
+  /** Remove only a receipt-backed CAR-managed artifact. Returns result JSON. */
+  removeModel(modelId: string): Promise<string>;
+
+  /** Adopt an already-usable local artifact into CAR ownership. */
+  adoptModel(modelId: string): Promise<string>;
+
+  /** Read the saved local-model resource policy and evaluated budget. */
+  modelResourcePolicyGet(): Promise<string>;
+
+  /** Persist an exact resource-policy JSON object. */
+  modelResourcePolicySet(policyJson: string): Promise<string>;
+
+  /** Evaluate one local model without downloading or loading it. */
+  modelPreflight(modelId: string, contextTokens?: number): Promise<string>;
 
   /**
    * Unified registry (local + remote). Returns JSON array of
    * `{ id, name, provider, capabilities, param_count, size_mb,
-   *   context_length, available, is_local, weights_ready, downloads_weights,
-   *   max_output_tokens, public_benchmarks, cost }`. `available` means CAR
+   *   context_length, available, is_local, operator_managed_external_runtime,
+   *   weights_ready, downloads_weights,
+   *   max_output_tokens, public_benchmarks, cost, car_enabled, can_remove,
+   *   in_use, management_evidence }`. `available` means CAR
    * can use the model
    * here — for a local MLX entry with a declared `hf_repo` it is `true`
    * before a byte is fetched, because it lazy-downloads on first use —
@@ -958,13 +1003,17 @@ export class CarRuntime {
    * models, having none to install, report `true`). Older daemons omit
    * `weights_ready`; it defaults to `false` rather than failing.
    * `downloads_weights` is `true` only for entries whose weights CAR fetches
-   * before use (GGUF, MLX, whisper.cpp); when it is `false` — OS-provided
-   * models such as `windows/speech-synthesis:os` and
-   * `apple/foundation:default`, server-backed local models such as
-   * `vllm-mlx/*` and Ollama, and every remote entry — there is nothing to
+   * before use (GGUF, MLX, whisper.cpp, and CAR-owned managed vLLM-MLX).
+   * When it is `false` — OS-provided models such as
+   * `windows/speech-synthesis:os` and `apple/foundation:default`,
+   * operator-managed servers such as raw vLLM-MLX and Ollama, and every
+   * remote entry — there is nothing to
    * install, so `weights_ready` is meaningless and the CLI renders
-   * `INSTALLED` as `-`. Do not substitute `is_local`: those first four are
-   * all local and all download nothing. Older daemons omit
+   * `INSTALLED` as `-`. Do not substitute `is_local`: OS-provided models are
+   * local but download nothing. A raw external vLLM-MLX row instead
+   * sets `operator_managed_external_runtime=true` and is not local, even for
+   * a loopback endpoint; only CAR-owned managed vLLM-MLX is charged and
+   * supervised as local. Older daemons omit
    * `downloads_weights`; it defaults to `false` rather than failing.
    * `max_output_tokens` is the registry-declared
    *   per-model output ceiling (`null` when the entry omits it; callers
@@ -1006,6 +1055,37 @@ export class CarRuntime {
    */
   registerModel(schemaJson: string): Promise<string>;
 
+  /**
+   * `assistant.identity.get` — the name the flagship assistant answers to.
+   *
+   * Returns `{ name, spellings, aliases, user_name, brand, updated_at_unix }`.
+   * `aliases` is the derived match set (name and spellings crossed with
+   * "hey"/"ok"/…), longest first — hosts match wake phrases against it locally
+   * so their matcher works before the daemon answers.
+   *
+   * `brand` is the fixed product name and never changes; `name` is what this
+   * user calls the assistant. Both travel together: store copy uses the brand,
+   * addressing copy uses the name.
+   *
+   * Ungated — a name is not a credential. A malformed `identity.json` rejects
+   * rather than silently answering with the default name.
+   */
+  assistantIdentityGet(): Promise<string>;
+
+  /**
+   * `assistant.identity.set` — name the assistant. Host/local-auth gated on the
+   * daemon, because a rename repoints the voice wake word.
+   *
+   * `requestJson` is `{ name?, spellings?, user_name? }`. Every field is
+   * optional and unset fields are preserved, so a caller that only knows about
+   * the name cannot wipe spellings another surface wrote. Pass
+   * `user_name: null` to clear it.
+   *
+   * Returns the updated identity JSON, in the same shape as
+   * `assistantIdentityGet`.
+   */
+  assistantIdentitySet(requestJson: string): Promise<string>;
+
   /**
    * `messaging.config.get` — read the multi-channel approval-transport config
    * for one channel (enabled flag, allowlisted handles, whether a pairing is
@@ -1490,6 +1570,21 @@ export class CarRuntime {
   /** Close any persistent browser session attached to this runtime. */
   browserClose(): Promise<void>;
 
+  // `browserRun`/`browserClose` above are this runtime's OWN
+  // per-connection scripted browser. Separate from that: the browser
+  // DRAWER surface (`browser.view.*` / `browser.producer.*` /
+  // `agent.browser.*`), which watches and drives the ASSISTANT's
+  // browser (or the shared standing session) for a human at the
+  // Command Deck. It is WS-only — no method here — the same decision
+  // as `runs.subscribe` / `coder.subscribe`: `browser.view.*` requires
+  // the host-management client (`session.auth { host_token }`, stricter
+  // than `runs.subscribe`), so CarHost speaks it directly over the
+  // daemon's WS. `browser.producer.*` / `agent.browser.*` is the agent
+  // side of the same relay; today its only producer is the Rust
+  // `car-cli` binary, so it likewise has no binding here. Full wire
+  // contract: `docs/websocket-protocol.md` (`### browser`) and
+  // `docs/host-protocol.md` (`Live browser view`).
+
   /**
    * Register a tool with a full JSON-serialized `ToolSchema`.
    * `verifyProposal` validates `Action.parameters` against the schema's
@@ -2619,6 +2714,18 @@ export function equivalent(proposal1Json: string, proposal2Json: string): boolea
  */
 export function protocolVersion(): number;
 
+/**
+ * Version of THIS `car-runtime` npm package — the client library that talks to
+ * the daemon, and the number the version-skew notice compares against
+ * `car-server`.
+ *
+ * Not the same thing as `car --version`: on macOS `/usr/local/bin/car` is a
+ * symlink into `CarHost.app`, so that reports the bundled CLI. When the stale
+ * component is this package the CLI's version is the wrong one to check
+ * (Parslee-ai/car#1050).
+ */
+export function clientVersion(): string;
+
 /**
  * Check a proposal for transactional conflicts against the current shared
  * state (survey "Code as Agent Harness" §4.3/§5.2.4 — the shared

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "car-runtime",
-  "version": "0.49.0",
+  "version": "0.51.0",
   "description": "Common Agent Runtime — a deterministic execution layer for AI agents",
   "main": "index.js",
   "types": "index.d.ts",