@agentunion/fastaun-browser 0.4.10 → 0.4.12

package/dist/bundle.js

@@ -454,7 +454,7 @@ var init_indexeddb_store = __esm({
 });
 
 // src/version.ts
-var VERSION = "0.4.10";
+var VERSION = "0.4.12";
 
 // src/types.ts
 var ConnectionState = /* @__PURE__ */ ((ConnectionState2) => {
@@ -3710,6 +3710,53 @@ var ClientRuntime = class {
 var PUSHED_SEQS_LIMIT = 5e4;
 var PENDING_ORDERED_LIMIT = 5e4;
 var GROUP_RECALL_SEEN_LIMIT = 1e4;
+var APP_MESSAGE_ENVELOPE_KEYS = [
+  "module_id",
+  "message_id",
+  "id",
+  "seq",
+  "msg_seq",
+  "message_type",
+  "type",
+  "kind",
+  "version",
+  "from",
+  "from_aid",
+  "sender_aid",
+  "to",
+  "to_aid",
+  "group_id",
+  "timestamp",
+  "created_at",
+  "t_server",
+  "encrypted",
+  "status",
+  "delivery_mode",
+  "dispatch_mode",
+  "dispatch",
+  "device_id",
+  "slot_id"
+];
+var APP_GROUP_EVENT_ENVELOPE_KEYS = [
+  "module_id",
+  "event_id",
+  "event_seq",
+  "seq",
+  "event_type",
+  "action",
+  "group_id",
+  "actor_aid",
+  "sender_aid",
+  "member_aid",
+  "target_aid",
+  "operator_aid",
+  "created_at",
+  "timestamp",
+  "t_server",
+  "status",
+  "device_id",
+  "slot_id"
+];
 function formatDeliveryError(error) {
   return error instanceof Error ? error : String(error);
 }
@@ -3753,6 +3800,29 @@ var MessageDeliveryEngine = class {
       for (const oldSeq of drop) queue.delete(oldSeq);
     }
   }
+  isGroupEventNamespace(ns) {
+    return ns.startsWith("group_event:");
+  }
+  async publishOrderedQueueItem(ns, event, seq, payload) {
+    const client = this.runtime.client;
+    if (event === "group.changed" && this.isGroupEventNamespace(ns)) {
+      await this.publishOrderedGroupChanged(payload);
+      return;
+    }
+    await client._publishAppEvent(event, payload);
+  }
+  async publishOrderedGroupChanged(payload) {
+    const client = this.runtime.client;
+    if (isJsonObject(payload)) {
+      const eventPayload = payload;
+      client._groupState?.handleGroupChangedV2Membership?.(eventPayload);
+      if (eventPayload.action === "dissolved") {
+        const groupId = normalizeGroupId(String(eventPayload.group_id ?? "")) || String(eventPayload.group_id ?? "").trim();
+        if (groupId) client._cleanupDissolvedGroup?.(groupId);
+      }
+    }
+    await client._publishAppEvent("group.changed", payload);
+  }
   isInstanceScopedMessageEvent(event) {
     return event === "message.received" || event === "message.recalled" || event === "message.undecryptable" || event === "group.message_created" || event === "group.message_recalled" || event === "group.message_undecryptable";
   }
@@ -3769,8 +3839,46 @@ var MessageDeliveryEngine = class {
     return result;
   }
   normalizePublishedMessagePayload(event, payload) {
-    if (!this.isInstanceScopedMessageEvent(event)) return payload;
-    return this.stripInternalSenderDeviceFields(this.attachCurrentInstanceContext(payload));
+    if (this.isInstanceScopedMessageEvent(event)) {
+      return this.attachAppMessageEnvelope(this.stripInternalSenderDeviceFields(this.attachCurrentInstanceContext(payload)));
+    }
+    if (this.isGroupScopedEvent(event)) {
+      return this.attachAppGroupEventEnvelope(this.attachCurrentInstanceContext(payload));
+    }
+    return payload;
+  }
+  appMessageEnvelope(payload) {
+    if (!isJsonObject(payload)) return {};
+    const message = payload;
+    const envelope = {};
+    for (const key of APP_MESSAGE_ENVELOPE_KEYS) {
+      if (Object.prototype.hasOwnProperty.call(message, key)) envelope[key] = message[key];
+    }
+    return envelope;
+  }
+  isGroupScopedEvent(event) {
+    return event === "group.changed";
+  }
+  appGroupEventEnvelope(payload) {
+    if (!isJsonObject(payload)) return {};
+    const groupEvent = payload;
+    const envelope = {};
+    for (const key of APP_GROUP_EVENT_ENVELOPE_KEYS) {
+      if (Object.prototype.hasOwnProperty.call(groupEvent, key)) envelope[key] = groupEvent[key];
+    }
+    return envelope;
+  }
+  attachAppMessageEnvelope(payload) {
+    if (!isJsonObject(payload)) return payload;
+    const result = { ...payload };
+    result.envelope = this.appMessageEnvelope(result);
+    return result;
+  }
+  attachAppGroupEventEnvelope(payload) {
+    if (!isJsonObject(payload)) return payload;
+    const result = { ...payload };
+    result.envelope = this.appGroupEventEnvelope(result);
+    return result;
   }
   stripInternalSenderDeviceFields(payload) {
     if (!isJsonObject(payload)) return payload;
@@ -3790,6 +3898,11 @@ var MessageDeliveryEngine = class {
     const payloadType = String(payload.type ?? payload.kind ?? "").trim();
     if (msgType !== "message.recalled" && payloadType !== "message.recalled") return null;
     const event = { ...payload };
+    for (const key of APP_MESSAGE_ENVELOPE_KEYS) {
+      if (Object.prototype.hasOwnProperty.call(msg, key) && !(key in event)) {
+        event[key] = msg[key];
+      }
+    }
     const rawIds = event.message_ids;
     let messageIds = Array.isArray(rawIds) ? rawIds.map((item) => String(item ?? "").trim()).filter(Boolean) : [];
     if (messageIds.length === 0) {
@@ -3808,7 +3921,10 @@ var MessageDeliveryEngine = class {
     if (!("to" in event)) event.to = msg.to ?? msg.to_aid ?? "";
     if (!("timestamp" in event)) event.timestamp = msg.timestamp ?? msg.t_server ?? event.recalled_at ?? 0;
     if ("seq" in msg && !("seq" in event)) event.seq = msg.seq;
-    if ("message_id" in msg && !("tombstone_message_id" in event)) event.tombstone_message_id = msg.message_id;
+    if ("message_id" in msg) {
+      event.message_id = msg.message_id;
+      if (!("tombstone_message_id" in event)) event.tombstone_message_id = msg.message_id;
+    }
     if ("device_id" in msg && !("device_id" in event)) event.device_id = msg.device_id;
     if ("slot_id" in msg && !("slot_id" in event)) event.slot_id = msg.slot_id;
     return event;
@@ -3827,6 +3943,11 @@ var MessageDeliveryEngine = class {
     const payloadType = String(payload.type ?? payload.kind ?? "").trim();
     if (msgType !== "group.message_recalled" && payloadType !== "group.message_recalled") return null;
     const event = { ...payload };
+    for (const key of APP_MESSAGE_ENVELOPE_KEYS) {
+      if (Object.prototype.hasOwnProperty.call(msg, key) && !(key in event)) {
+        event[key] = msg[key];
+      }
+    }
     const rawIds = event.message_ids;
     let messageIds = Array.isArray(rawIds) ? rawIds.map((item) => String(item ?? "").trim()).filter(Boolean) : [];
     if (messageIds.length === 0) {
@@ -3844,7 +3965,10 @@ var MessageDeliveryEngine = class {
     if (!("group_id" in event)) event.group_id = msg.group_id ?? "";
     if (!("timestamp" in event)) event.timestamp = msg.timestamp ?? msg.t_server ?? event.recalled_at ?? 0;
     if ("seq" in msg) event.seq = msg.seq;
-    if ("message_id" in msg && !("tombstone_message_id" in event)) event.tombstone_message_id = msg.message_id;
+    if ("message_id" in msg) {
+      event.message_id = msg.message_id;
+      if (!("tombstone_message_id" in event)) event.tombstone_message_id = msg.message_id;
+    }
     return event;
   }
   groupRecallDedupKey(groupId, payload) {
@@ -4273,10 +4397,12 @@ var MessageDeliveryEngine = class {
           }
         }
         const eventSeqs = [];
+        let hasDissolvedEvent = false;
         for (const evt of eventObjects) {
           const eventSeq = Number(evt.event_seq ?? 0);
           if (Number.isFinite(eventSeq) && eventSeq > 0) eventSeqs.push(eventSeq);
           evt._from_gap_fill = true;
+          if (evt.action === "dissolved") hasDissolvedEvent = true;
           const et = String(evt.event_type ?? "");
           if (et === "group.message_created") continue;
           const cs = evt.client_signature;
@@ -4284,17 +4410,21 @@ var MessageDeliveryEngine = class {
             if (client._shouldSkipEventSignature(evt)) {
               delete evt.client_signature;
             } else {
-              evt._verified = await client._verifyEventSignature(evt, cs);
+              const verified = await client._verifyEventSignature(evt, cs);
+              evt._verified = client._isEventSignatureVerified(verified);
             }
           }
-          await client._dispatcher.publish("group.changed", evt);
+          if (Number.isFinite(eventSeq) && eventSeq > 0 && !client._pushedSeqs.get(ns)?.has(eventSeq)) {
+            this.enqueueOrderedMessage(ns, "group.changed", eventSeq, evt);
+          }
         }
-        const contig = client._seqTracker.getContiguousSeq(ns);
-        if (contig !== pageContigBefore) {
+        const ackContig = client._seqTracker.getContiguousSeq(ns);
+        await this.drainOrderedMessages(ns);
+        if (ackContig !== pageContigBefore && !hasDissolvedEvent) {
           this.saveSeqTrackerState();
         }
-        if (eventObjects.length > 0 && contig > 0 && contig !== pageContigBefore) {
-          const ackSeq = this.clampAckSeq("group.ack_events", "event_seq", ns, contig);
+        if (eventObjects.length > 0 && ackContig > 0 && ackContig !== pageContigBefore) {
+          const ackSeq = this.clampAckSeq("group.ack_events", "event_seq", ns, ackContig);
           client._transport.call("group.ack_events", {
             group_id: groupId,
             event_seq: ackSeq,
@@ -4318,20 +4448,59 @@ var MessageDeliveryEngine = class {
       this.runtime.delivery.setGapFillActive(false);
     }
   }
-  handleGroupChangedEventSeq(data, groupId) {
+  async handleGroupChangedEventSeq(data, groupId) {
     const client = this.runtime.client;
     let needPull = false;
     const rawEventSeq = data.event_seq;
-    if (rawEventSeq != null && groupId) {
-      const es = Number(rawEventSeq);
-      if (Number.isFinite(es) && es > 0) {
-        needPull = client._seqTracker.onMessageSeq(`group_event:${groupId}`, es);
+    const eventSeq = Number(rawEventSeq);
+    if (!groupId || !Number.isFinite(eventSeq) || !Number.isInteger(eventSeq) || eventSeq <= 0) {
+      await this.publishOrderedGroupChanged(data);
+      return;
+    }
+    const ns = `group_event:${groupId}`;
+    if (this.isSelfJoinGroupChanged(data)) {
+      const contig = client._seqTracker.getContiguousSeq(ns);
+      const maxSeen = client._seqTracker.getMaxSeenSeq(ns);
+      if (contig === 0 && maxSeen === 0 && eventSeq > 1) {
+        client._clientLog.debug(`group.changed self-join baseline: group=${groupId}, event_seq=${eventSeq}, baseline=${eventSeq - 1}`);
+        client._seqTracker.forceContiguousSeq(ns, eventSeq - 1);
       }
     }
+    const contigBefore = client._seqTracker.getContiguousSeq(ns);
+    if (eventSeq <= contigBefore || client._pushedSeqs.get(ns)?.has(eventSeq)) {
+      client._clientLog.debug(`group.changed skipped duplicate/stale: group=${groupId}, event_seq=${eventSeq}, contiguous=${contigBefore}`);
+      return;
+    }
+    this.enqueueOrderedMessage(ns, "group.changed", eventSeq, data);
+    needPull = client._seqTracker.onMessageSeq(ns, eventSeq);
+    const ackContig = client._seqTracker.getContiguousSeq(ns);
+    await this.drainOrderedMessages(ns);
+    if (ackContig > 0 && ackContig !== contigBefore) {
+      if (data.action !== "dissolved") this.saveSeqTrackerState();
+      const ackSeq = this.clampAckSeq("group.ack_events", "event_seq", ns, ackContig);
+      client._transport.call("group.ack_events", {
+        group_id: groupId,
+        event_seq: ackSeq,
+        device_id: client._deviceId,
+        slot_id: client._slotId
+      }).catch((e) => {
+        client._clientLog.warn("group event push auto-ack failed: group=" + groupId, e);
+      });
+    }
     if (needPull && groupId && !data._from_gap_fill) {
       client._safeAsync(this.fillGroupEventGap(groupId));
     }
   }
+  isSelfJoinGroupChanged(data) {
+    const action = String(data.action ?? "").trim();
+    if (!["member_added", "joined", "join_approved", "invite_code_used"].includes(action)) return false;
+    const selfAid = String(this.runtime.client._aid ?? "").trim();
+    if (!selfAid) return false;
+    const joinedAid = String(data.joined_aid ?? data.member_aid ?? data.aid ?? "").trim();
+    if (joinedAid === selfAid) return true;
+    const actorAid = String(data.actor_aid ?? "").trim();
+    return !joinedAid && ["joined", "invite_code_used"].includes(action) && actorAid === selfAid;
+  }
   enqueueOnlineUnreadHint(data) {
     const client = this.runtime.client;
     const groupId = String(data.group_id ?? "").trim();
@@ -4750,7 +4919,7 @@ var MessageDeliveryEngine = class {
       const item = queue.get(seq);
       queue.delete(seq);
       if (!item || client._pushedSeqs.get(ns)?.has(seq)) continue;
-      await client._publishAppEvent(item.event, item.payload);
+      await this.publishOrderedQueueItem(ns, item.event, seq, item.payload);
       this.markPublishedSeq(ns, seq);
     }
     if (queue.size === 0) client._pendingOrderedMsgs.delete(ns);
@@ -4759,7 +4928,7 @@ var MessageDeliveryEngine = class {
     const client = this.runtime.client;
     const seqNum = Number(seq);
     if (!Number.isFinite(seqNum) || !Number.isInteger(seqNum) || seqNum <= 0) {
-      await client._publishAppEvent(event, payload);
+      await this.publishOrderedQueueItem(ns, event, seqNum, payload);
       return true;
     }
     if (client._pushedSeqs.get(ns)?.has(seqNum)) {
@@ -4778,7 +4947,7 @@ var MessageDeliveryEngine = class {
     const queue = client._pendingOrderedMsgs.get(ns);
     queue?.delete(seqNum);
     if (queue && queue.size === 0) client._pendingOrderedMsgs.delete(ns);
-    await client._publishAppEvent(event, payload);
+    await this.publishOrderedQueueItem(ns, event, seqNum, payload);
     this.markPublishedSeq(ns, seqNum);
     await this.drainOrderedMessages(ns);
     return true;
@@ -5173,12 +5342,37 @@ var SIGNED_METHODS = /* @__PURE__ */ new Set([
   "message.thought.put",
   "group.set_settings",
   "group.resources.put",
+  "group.resources.create_folder",
+  "group.resources.rename",
+  "group.resources.move",
+  "group.resources.mount_object",
   "group.resources.update",
   "group.resources.delete",
+  "group.resources.cleanup_by_storage_ref",
   "group.resources.request_add",
+  "group.resources.request_mount_object",
   "group.resources.direct_add",
   "group.resources.approve_request",
   "group.resources.reject_request",
+  "group.resources.unmount",
+  "group.resources.get_access",
+  "group.resources.resolve_access_ticket",
+  "storage.put_object",
+  "storage.delete_object",
+  "storage.get_by_share",
+  "storage.create_share_link",
+  "storage.revoke_share_link",
+  "storage.create_upload_session",
+  "storage.complete_upload",
+  "storage.create_folder",
+  "storage.rename_folder",
+  "storage.move_folder",
+  "storage.delete_folder",
+  "storage.move_object",
+  "storage.copy_object",
+  "storage.batch_delete",
+  "storage.set_object_meta",
+  "storage.append_object",
   "group.commit_state",
   "group.ban",
   "group.unban",
@@ -5201,15 +5395,44 @@ var NON_IDEMPOTENT_METHODS = /* @__PURE__ */ new Set([
   "group.update_avatar",
   "group.update_announcement",
   "group.update_settings",
+  "storage.put_object",
+  "storage.delete_object",
+  "storage.create_share_link",
+  "storage.revoke_share_link",
+  "storage.get_by_share",
   "storage.create_upload_session",
   "storage.complete_upload",
-  "storage.delete_object",
+  "storage.create_folder",
+  "storage.rename_folder",
+  "storage.move_folder",
+  "storage.delete_folder",
+  "storage.move_object",
+  "storage.copy_object",
+  "storage.batch_delete",
+  "storage.set_object_meta",
+  "storage.append_object",
   "auth.create_aid",
   "auth.renew_cert",
   "auth.rekey",
   "message.thought.put",
   "group.thought.put",
-  "group.add_member"
+  "group.add_member",
+  "group.resources.put",
+  "group.resources.create_folder",
+  "group.resources.rename",
+  "group.resources.move",
+  "group.resources.mount_object",
+  "group.resources.update",
+  "group.resources.delete",
+  "group.resources.cleanup_by_storage_ref",
+  "group.resources.request_add",
+  "group.resources.request_mount_object",
+  "group.resources.direct_add",
+  "group.resources.approve_request",
+  "group.resources.reject_request",
+  "group.resources.unmount",
+  "group.resources.get_access",
+  "group.resources.resolve_access_ticket"
 ]);
 var RpcPipeline = class {
   constructor(runtime) {
@@ -5378,7 +5601,8 @@ var RpcPipeline = class {
     if (!client._instanceProtectedHeaders || !PROTECTED_HEADERS_METHODS.has(method)) {
       return;
     }
-    const existing = isJsonObject(params.protected_headers) ? params.protected_headers : {};
+    const existingValue = params.protected_headers ?? params.headers;
+    const existing = isJsonObject(existingValue) ? existingValue : {};
     params.protected_headers = { ...client._instanceProtectedHeaders, ...existing };
   }
   normalizeOutboundMessagePayload(params, method = "") {
@@ -8670,7 +8894,7 @@ function normalizeProtectedHeaders(headers, payload) {
     normalized["payload_type"] = payloadType;
   }
   normalized.sdk_lang = E2EE_SDK_LANG;
-  delete normalized.sdk_vesion;
+  delete normalized.sdk_version;
   normalized.sdk_version = VERSION;
   return normalized;
 }
@@ -9484,19 +9708,18 @@ var V2KeyStore = class _V2KeyStore {
       public_key: pubDer,
       created_at: Date.now()
     };
-    await new Promise((resolve, reject) => {
-      const req = this.store("readwrite").put(record);
-      req.onsuccess = () => resolve();
-      req.onerror = () => reject(req.error);
-    });
+    const aliasKeyId = await spkIdForPubDer(pubDer);
     const alias = {
       ...record,
-      key_id: await spkIdForPubDer(pubDer)
+      key_id: aliasKeyId
     };
     return new Promise((resolve, reject) => {
-      const req = this.store("readwrite").put(alias);
-      req.onsuccess = () => resolve();
-      req.onerror = () => reject(req.error);
+      const tx = this.db.transaction(V2_STORE_NAME, "readwrite");
+      const store = tx.objectStore(V2_STORE_NAME);
+      store.put(record);
+      store.put(alias);
+      tx.oncomplete = () => resolve();
+      tx.onerror = () => reject(tx.error);
     });
   }
   async loadIK(deviceId) {
@@ -9584,6 +9807,7 @@ var V2Session = class {
     __publicField(this, "_oldSPKMaxSeq", /* @__PURE__ */ new Map());
     __publicField(this, "_spkCache", /* @__PURE__ */ new Map());
     __publicField(this, "_nowFn", () => Date.now());
+    __publicField(this, "_registeringPromise", null);
     if (!ikPriv || !ikPubDer) {
       throw new Error("V2Session requires AID priv/pub keys (IK = AID identity)");
     }
@@ -9664,9 +9888,21 @@ var V2Session = class {
       spk_timestamp: spkTimestamp
     });
   }
-  /** 注册本设备 SPK 到服务端。IK = AID 长期密钥，无需注册。幂等。 */
+  /** 注册本设备 SPK 到服务端。IK = AID 长期密钥，无需注册。幂等，并发安全。 */
   async ensureRegistered(callFn) {
     if (this._registered) return;
+    if (this._registeringPromise) {
+      await this._registeringPromise;
+      return;
+    }
+    this._registeringPromise = this._doRegister(callFn);
+    try {
+      await this._registeringPromise;
+    } finally {
+      this._registeringPromise = null;
+    }
+  }
+  async _doRegister(callFn) {
     await this.ensureKeys();
     const uploadedSPKId = await this._store.loadLatestUploadedSPKId(this._storeDeviceId);
     if (uploadedSPKId) {
@@ -9777,8 +10013,8 @@ var V2Session = class {
       if (now - info.lastSeenAt < DESTROY_DELAY_MS) continue;
       if (recentKeep.has(spkId)) continue;
       try {
-        await this._store.deleteSPK(this._deviceId, spkId);
         await this._store.deleteSPK(this._storeDeviceId, spkId);
+        await this._store.deleteSPK(this._deviceId, spkId);
       } catch (err) {
         console.warn("[V2Session] deleteSPK failed", { spkId, err });
         continue;
@@ -9797,7 +10033,8 @@ var V2Session = class {
         try {
           await this._store.deleteSPK(this._storeDeviceId, spkId);
           await this._store.deleteSPK(this._deviceId, spkId);
-        } catch {
+        } catch (err) {
+          console.warn("[V2Session] deleteSPK (hard-limit) failed", { spkId, err });
           continue;
         }
         this._oldSPKMaxSeq.delete(spkId);
@@ -10214,7 +10451,7 @@ var V2E2EECoordinator = class {
     const gid = String(groupId ?? "").trim();
     if (!gid || !client._v2Session) return;
     const inflight = this.runtime.v2.groupSpkRegistrationInflight;
-    if (inflight.has(gid)) return;
+    if (inflight.has(gid) || this.runtime.v2.groupSpkRotationInflight.has(gid)) return;
     inflight.add(gid);
     client._safeAsync((async () => {
       try {
@@ -10232,7 +10469,7 @@ var V2E2EECoordinator = class {
     const gid = String(groupId ?? "").trim();
     if (!gid || !client._v2Session) return;
     const inflight = this.runtime.v2.groupSpkRotationInflight;
-    if (inflight.has(gid)) return;
+    if (inflight.has(gid) || this.runtime.v2.groupSpkRegistrationInflight.has(gid)) return;
     inflight.add(gid);
     client._safeAsync((async () => {
       try {
@@ -10352,6 +10589,13 @@ var V2E2EECoordinator = class {
         client._v2SenderIKPending.delete(key);
         if (plaintext === null) {
           client._clientLog.debug(`V2 sender IK pending retry failed: key=${key}`);
+          client.emit("message.undecryptable", {
+            from: entry.fromAid,
+            sender_device_id: entry.senderDeviceId,
+            group_id: entry.groupId || void 0,
+            seq: Number(entry.msg.seq ?? 0),
+            reason: "sender_ik_retry_failed"
+          });
           continue;
         }
         const seq = Number(entry.msg.seq ?? 0);
@@ -11787,11 +12031,11 @@ var GroupStateCoordinator = class {
           delete data.client_signature;
         } else {
           const verified = await client._verifyEventSignature(data, cs);
-          if (verified === false) {
+          if (!client._isEventSignatureVerified(verified)) {
             client._clientLog.warn(`state_committed committer signature verify failed group=%s${String(groupId)}`);
             return;
           }
-          data._verified = verified;
+          data._verified = true;
         }
       }
       const stateVersion = Number(data.state_version ?? 0);
@@ -15828,18 +16072,12 @@ var _AUNClient = class _AUNClient {
           if (this._shouldSkipEventSignature(d)) {
             delete d.client_signature;
           } else {
-            d._verified = await this._verifyEventSignature(d, cs);
+            const verified = await this._verifyEventSignature(d, cs);
+            d._verified = this._isEventSignatureVerified(verified);
           }
         }
-        await this._dispatcher.publish("group.changed", d);
         const groupId = d.group_id ?? "";
-        this._groupState.handleGroupChangedV2Membership(d);
-        this._delivery.handleGroupChangedEventSeq(d, groupId);
-        if (d.action === "dissolved") {
-          if (groupId) {
-            this._cleanupDissolvedGroup(groupId);
-          }
-        }
+        await this._delivery.handleGroupChangedEventSeq(d, groupId);
       } else {
         await this._dispatcher.publish("group.changed", data);
       }
@@ -15878,6 +16116,7 @@ var _AUNClient = class _AUNClient {
     this._pushedSeqs.delete(`group:${groupId}`);
     this._pushedSeqs.delete(`group_event:${groupId}`);
     this._pendingOrderedMsgs.delete(`group:${groupId}`);
+    this._pendingOrderedMsgs.delete(`group_event:${groupId}`);
     this._clientLog.info(`cleanup dissolved group ${groupId}  local state`);
   }
   async _verifyEventSignature(_event, cs) {
@@ -15926,6 +16165,9 @@ var _AUNClient = class _AUNClient {
       return false;
     }
   }
+  _isEventSignatureVerified(value) {
+    return value === true;
+  }
   _protectedHeadersFromParams(params) {
     const value = params.protected_headers ?? params.headers;
     if (value == null) return null;
@@ -16562,6 +16804,21 @@ var _AUNClient = class _AUNClient {
         if (!this._sessionParams) {
           throw new StateError("missing connect params for reconnect");
         }
+        {
+          const identity = this._identity;
+          if (identity) {
+            const cachedToken = String(identity.access_token ?? "");
+            const expiresAt = this._auth.getAccessTokenExpiry(identity);
+            if (cachedToken && (expiresAt === null || expiresAt > Date.now() / 1e3 + 30)) {
+              this._sessionParams.access_token = cachedToken;
+            } else {
+              this._clientLog.debug(`reconnect: cached token expired or missing for aid=${this._aid ?? ""}, clearing to trigger re-login`);
+              this._sessionParams.access_token = "";
+            }
+          } else {
+            this._sessionParams.access_token = "";
+          }
+        }
         await this._connectOnce(this._sessionParams, true);
         this._lastError = null;
         this._lastErrorCode = null;
@@ -19127,6 +19384,8 @@ var ServiceProxyClient = class {
     const stats = { connection_mode: mode, connections: 0, registered: 0, handled_requests: 0, wakeup_count: 0 };
     try {
       if (mode === "persistent") {
+        const maxReconnectDelay = 6e4;
+        let _delay = Math.max(0, opts.reconnectDelaySeconds ?? 1) * 1e3;
         while (this._running) {
           try {
             await this._autoRegisterServicesWithGateway();
@@ -19139,10 +19398,21 @@ var ServiceProxyClient = class {
             stats.connections = Number(stats.connections) + 1;
             stats.registered = Number(result.registered ?? stats.registered);
             stats.handled_requests = Number(stats.handled_requests) + Number(result.handled_requests ?? 0);
+            _delay = Math.max(0, opts.reconnectDelaySeconds ?? 1) * 1e3;
           } catch (exc) {
             if (!this._running) break;
-            this._logWarn(`persistent tunnel reconnect scheduled after error: ${formatError(exc)}`);
-            await sleep(Math.max(0, opts.reconnectDelaySeconds ?? 1) * 1e3);
+            if (exc instanceof AuthError) {
+              this._logWarn(`persistent tunnel auth error, re-authenticating: ${formatError(exc)}`);
+              try {
+                await this._authenticateForAccessToken();
+              } catch (reAuthExc) {
+                this._logWarn(`re-authentication failed: ${formatError(reAuthExc)}`);
+              }
+            } else {
+              this._logWarn(`persistent tunnel reconnect scheduled after error: ${formatError(exc)}`);
+            }
+            await sleep(_delay);
+            _delay = Math.min(_delay * 2, maxReconnectDelay);
           } finally {
             this._activeTunnel?.close();
             this._activeTunnel = null;

package/dist/client/delivery.d.ts

@@ -7,9 +7,17 @@ export declare class MessageDeliveryEngine {
     prunePushedSeqs(ns: string): void;
     markPublishedSeq(ns: string, seq: number): void;
     enqueueOrderedMessage(ns: string, event: string, seq: number, payload: EventPayload): void;
+    isGroupEventNamespace(ns: string): boolean;
+    publishOrderedQueueItem(ns: string, event: string, seq: number, payload: EventPayload): Promise<void>;
+    publishOrderedGroupChanged(payload: EventPayload): Promise<void>;
     isInstanceScopedMessageEvent(event: string): boolean;
     attachCurrentInstanceContext(payload: EventPayload): EventPayload;
     normalizePublishedMessagePayload(event: string, payload: EventPayload): EventPayload;
+    appMessageEnvelope(payload: EventPayload): JsonObject;
+    isGroupScopedEvent(event: string): boolean;
+    appGroupEventEnvelope(payload: EventPayload): JsonObject;
+    attachAppMessageEnvelope(payload: EventPayload): EventPayload;
+    attachAppGroupEventEnvelope(payload: EventPayload): EventPayload;
     stripInternalSenderDeviceFields(payload: EventPayload): EventPayload;
     recallEventFromMessage(message: EventPayload): JsonObject | null;
     p2pAppEventForMessage(message: EventPayload): {
@@ -30,7 +38,8 @@ export declare class MessageDeliveryEngine {
     fillP2pGap(): Promise<void>;
     fillGroupGap(groupId: string): Promise<void>;
     fillGroupEventGap(groupId: string): Promise<void>;
-    handleGroupChangedEventSeq(data: JsonObject, groupId: string): void;
+    handleGroupChangedEventSeq(data: JsonObject, groupId: string): Promise<void>;
+    isSelfJoinGroupChanged(data: JsonObject): boolean;
     enqueueOnlineUnreadHint(data: JsonObject): void;
     drainOnlineUnreadHints(): Promise<void>;
     onRawGroupV2MessageCreated(data: EventPayload): Promise<void>;