car-runtime 0.50.0 → 0.51.0

package/index.d.ts

@@ -420,6 +420,24 @@ export class CarRuntime {
    * dispatches the chosen components.
    */
   planEvolutionLive(requestJson: string): Promise<string>;
+  /**
+   * `memory.set_admission_table` — install or clear the durable-state
+   * admission rules: `{ table?: OwnershipTable | null }` →
+   * `{ enabled, ungated_surfaces }`.
+   *
+   * A null or absent `table` turns the gate OFF, which is the default. Off is
+   * not the same as an empty table: an empty table is fail-closed and refuses
+   * every externally-authored fact.
+   */
+  memorySetAdmissionTable(requestJson: string): Promise<string>;
+  /**
+   * `memory.admission_table` — read back the installed admission rules: `{}` →
+   * `{ enabled, table, ungated_surfaces }`.
+   *
+   * `ungated_surfaces` names surfaces whose rule imposes no real constraint —
+   * worth checking after installing a table that only looks governed.
+   */
+  memoryAdmissionTable(requestJson: string): Promise<string>;
   /**
    * `supervision.subscribe` — register this connection as a supervisor of the
    * admission gate: `{ filter?: { tools?, sessions?, min_reversibility? } }`.
@@ -444,6 +462,14 @@ export class CarRuntime {
   syncStatus(requestJson: string): Promise<string>;
   /** `sync.append` — record an op on any surface: `{ surface, payload, scope? }` (B6). */
   syncAppend(requestJson: string): Promise<string>;
+  /** `agents.peers` — the agents this runtime can message, from the daemon's live connection table. */
+  agentsPeers(requestJson: string): Promise<string>;
+  /** `agents.message` — send text to one peer: `{ to, body, summary? }`. The sender is derived server-side. */
+  agentsMessage(requestJson: string): Promise<string>;
+  /** `agents.message.pending` — peer messages awaiting an operator decision. Host-only. */
+  agentsMessagePending(requestJson: string): Promise<string>;
+  /** `agents.message.approve` — release or drop one held message: `{ id, decision }`. Host-only. */
+  agentsMessageApprove(requestJson: string): Promise<string>;
   /** Store/load exact supervised-assistant checkpoints in the durable oplog. */
   syncAssistantCheckpointPut(requestJson: string): Promise<string>;
   syncAssistantCheckpointGet(requestJson: string): Promise<string>;
@@ -1029,6 +1055,37 @@ export class CarRuntime {
    */
   registerModel(schemaJson: string): Promise<string>;
 
+  /**
+   * `assistant.identity.get` — the name the flagship assistant answers to.
+   *
+   * Returns `{ name, spellings, aliases, user_name, brand, updated_at_unix }`.
+   * `aliases` is the derived match set (name and spellings crossed with
+   * "hey"/"ok"/…), longest first — hosts match wake phrases against it locally
+   * so their matcher works before the daemon answers.
+   *
+   * `brand` is the fixed product name and never changes; `name` is what this
+   * user calls the assistant. Both travel together: store copy uses the brand,
+   * addressing copy uses the name.
+   *
+   * Ungated — a name is not a credential. A malformed `identity.json` rejects
+   * rather than silently answering with the default name.
+   */
+  assistantIdentityGet(): Promise<string>;
+
+  /**
+   * `assistant.identity.set` — name the assistant. Host/local-auth gated on the
+   * daemon, because a rename repoints the voice wake word.
+   *
+   * `requestJson` is `{ name?, spellings?, user_name? }`. Every field is
+   * optional and unset fields are preserved, so a caller that only knows about
+   * the name cannot wipe spellings another surface wrote. Pass
+   * `user_name: null` to clear it.
+   *
+   * Returns the updated identity JSON, in the same shape as
+   * `assistantIdentityGet`.
+   */
+  assistantIdentitySet(requestJson: string): Promise<string>;
+
   /**
    * `messaging.config.get` — read the multi-channel approval-transport config
    * for one channel (enabled flag, allowlisted handles, whether a pairing is
@@ -1513,6 +1570,21 @@ export class CarRuntime {
   /** Close any persistent browser session attached to this runtime. */
   browserClose(): Promise<void>;
 
+  // `browserRun`/`browserClose` above are this runtime's OWN
+  // per-connection scripted browser. Separate from that: the browser
+  // DRAWER surface (`browser.view.*` / `browser.producer.*` /
+  // `agent.browser.*`), which watches and drives the ASSISTANT's
+  // browser (or the shared standing session) for a human at the
+  // Command Deck. It is WS-only — no method here — the same decision
+  // as `runs.subscribe` / `coder.subscribe`: `browser.view.*` requires
+  // the host-management client (`session.auth { host_token }`, stricter
+  // than `runs.subscribe`), so CarHost speaks it directly over the
+  // daemon's WS. `browser.producer.*` / `agent.browser.*` is the agent
+  // side of the same relay; today its only producer is the Rust
+  // `car-cli` binary, so it likewise has no binding here. Full wire
+  // contract: `docs/websocket-protocol.md` (`### browser`) and
+  // `docs/host-protocol.md` (`Live browser view`).
+
   /**
    * Register a tool with a full JSON-serialized `ToolSchema`.
    * `verifyProposal` validates `Action.parameters` against the schema's
@@ -2642,6 +2714,18 @@ export function equivalent(proposal1Json: string, proposal2Json: string): boolea
  */
 export function protocolVersion(): number;
 
+/**
+ * Version of THIS `car-runtime` npm package — the client library that talks to
+ * the daemon, and the number the version-skew notice compares against
+ * `car-server`.
+ *
+ * Not the same thing as `car --version`: on macOS `/usr/local/bin/car` is a
+ * symlink into `CarHost.app`, so that reports the bundled CLI. When the stale
+ * component is this package the CLI's version is the wrong one to check
+ * (Parslee-ai/car#1050).
+ */
+export function clientVersion(): string;
+
 /**
  * Check a proposal for transactional conflicts against the current shared
  * state (survey "Code as Agent Harness" §4.3/§5.2.4 — the shared

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "car-runtime",
-  "version": "0.50.0",
+  "version": "0.51.0",
   "description": "Common Agent Runtime — a deterministic execution layer for AI agents",
   "main": "index.js",
   "types": "index.d.ts",