@agentvault/agentvault 0.13.5 → 0.13.7

package/dist/gateway-send.d.ts

@@ -29,20 +29,6 @@ export interface GatewayStatusResult {
  * Never throws — returns `{ ok: false, error }` on failure.
  */
 export declare function sendToOwner(text: string, options?: GatewaySendOptions): Promise<GatewaySendResult>;
-export interface ActionReport {
-    action: string;
-    status: "completed" | "failed" | "partial";
-    room_id?: string;
-    detail?: string;
-    estimated_cost?: number;
-    decision_id?: string;
-}
-/**
- * Report an action (deploy, execute, etc.) via the gateway HTTP server.
- * Routes to sendActionConfirmationToRoom() (if room_id) or sendActionConfirmation().
- * Never throws — returns `{ ok: false, error }` on failure.
- */
-export declare function sendAction(report: ActionReport, options?: GatewaySendOptions): Promise<GatewaySendResult>;
 /**
  * Check gateway health / status.
  * Never throws — returns `{ ok: false, error }` on failure.

package/dist/gateway-send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-send.d.ts","sourceRoot":"","sources":["../src/gateway-send.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAuB5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAuB5B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAmB9B"}
+{"version":3,"file":"gateway-send.d.ts","sourceRoot":"","sources":["../src/gateway-send.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAuB5B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAmB9B"}

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { SecureChannelConfig, ChannelState, MessageMetadata, AttachmentData
 export { listAccountIds, resolveAccount } from "./account-config.js";
 export type { ResolvedAccount } from "./account-config.js";
 export { agentVaultPlugin, setOcRuntime, getActiveChannel } from "./openclaw-plugin.js";
-export { sendToOwner, sendAction, checkGateway } from "./gateway-send.js";
-export type { GatewaySendOptions, GatewaySendResult, GatewayStatusResult, ActionReport, } from "./gateway-send.js";
-export declare const VERSION = "0.12.0";
+export { sendToOwner, checkGateway } from "./gateway-send.js";
+export type { GatewaySendOptions, GatewaySendResult, GatewayStatusResult, } from "./gateway-send.js";
+export declare const VERSION = "0.13.7";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,cAAc,EACd,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,UAAU,EACV,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC1E,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,cAAc,EACd,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,UAAU,EACV,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO,WAAW,CAAC"}

package/dist/index.js

@@ -44880,7 +44880,6 @@ var DoubleRatchet = class _DoubleRatchet {
   serialize() {
     const s2 = this.state;
     return JSON.stringify({
-      version: 1,
       rootKey: libsodium_wrappers_default.to_hex(s2.rootKey),
       sendingChain: s2.sendingChain ? {
         chainKey: libsodium_wrappers_default.to_hex(s2.sendingChain.chainKey),
@@ -44908,59 +44907,33 @@ var DoubleRatchet = class _DoubleRatchet {
     });
   }
   static deserialize(json) {
-    let d2;
-    try {
-      d2 = JSON.parse(json);
-    } catch {
-      throw new Error("Ratchet state: corrupt JSON");
-    }
-    if (d2.version !== void 0 && d2.version !== 1) {
-      throw new Error(`Ratchet state version ${d2.version} not supported`);
-    }
-    if (typeof d2.rootKey !== "string") {
-      throw new Error("Ratchet state: missing required field rootKey");
-    }
-    const dhSend = d2.dhSendingKeypair;
-    if (!dhSend || typeof dhSend.publicKey !== "string" || typeof dhSend.privateKey !== "string") {
-      throw new Error("Ratchet state: missing required field dhSendingKeypair");
-    }
-    const idKp = d2.identityKeypair;
-    if (!idKp || typeof idKp.publicKey !== "string" || typeof idKp.privateKey !== "string") {
-      throw new Error("Ratchet state: missing required field identityKeypair");
-    }
-    try {
-      return new _DoubleRatchet({
-        rootKey: libsodium_wrappers_default.from_hex(d2.rootKey),
-        sendingChain: d2.sendingChain ? {
-          chainKey: libsodium_wrappers_default.from_hex(d2.sendingChain.chainKey),
-          messageNumber: d2.sendingChain.messageNumber
-        } : null,
-        receivingChain: d2.receivingChain ? {
-          chainKey: libsodium_wrappers_default.from_hex(d2.receivingChain.chainKey),
-          messageNumber: d2.receivingChain.messageNumber
-        } : null,
-        dhSendingKeypair: {
-          publicKey: libsodium_wrappers_default.from_hex(dhSend.publicKey),
-          privateKey: libsodium_wrappers_default.from_hex(dhSend.privateKey)
-        },
-        dhReceivingPublicKey: d2.dhReceivingPublicKey ? libsodium_wrappers_default.from_hex(d2.dhReceivingPublicKey) : null,
-        identityKeypair: {
-          publicKey: libsodium_wrappers_default.from_hex(idKp.publicKey),
-          privateKey: libsodium_wrappers_default.from_hex(idKp.privateKey)
-        },
-        previousSendingChainLength: d2.previousSendingChainLength,
-        skippedKeys: d2.skippedKeys.map((sk) => ({
-          dhPub: sk.dhPub,
-          n: sk.n,
-          messageKey: libsodium_wrappers_default.from_hex(sk.messageKey)
-        }))
-      });
-    } catch (err) {
-      if (err instanceof Error && err.message.startsWith("Ratchet state")) {
-        throw err;
-      }
-      throw new Error(`Ratchet state: corrupt hex data \u2014 ${err instanceof Error ? err.message : String(err)}`);
-    }
+    const d2 = JSON.parse(json);
+    return new _DoubleRatchet({
+      rootKey: libsodium_wrappers_default.from_hex(d2.rootKey),
+      sendingChain: d2.sendingChain ? {
+        chainKey: libsodium_wrappers_default.from_hex(d2.sendingChain.chainKey),
+        messageNumber: d2.sendingChain.messageNumber
+      } : null,
+      receivingChain: d2.receivingChain ? {
+        chainKey: libsodium_wrappers_default.from_hex(d2.receivingChain.chainKey),
+        messageNumber: d2.receivingChain.messageNumber
+      } : null,
+      dhSendingKeypair: {
+        publicKey: libsodium_wrappers_default.from_hex(d2.dhSendingKeypair.publicKey),
+        privateKey: libsodium_wrappers_default.from_hex(d2.dhSendingKeypair.privateKey)
+      },
+      dhReceivingPublicKey: d2.dhReceivingPublicKey ? libsodium_wrappers_default.from_hex(d2.dhReceivingPublicKey) : null,
+      identityKeypair: {
+        publicKey: libsodium_wrappers_default.from_hex(d2.identityKeypair.publicKey),
+        privateKey: libsodium_wrappers_default.from_hex(d2.identityKeypair.privateKey)
+      },
+      previousSendingChainLength: d2.previousSendingChainLength,
+      skippedKeys: d2.skippedKeys.map((sk) => ({
+        dhPub: sk.dhPub,
+        n: sk.n,
+        messageKey: libsodium_wrappers_default.from_hex(sk.messageKey)
+      }))
+    });
   }
 };
 
@@ -45470,7 +45443,7 @@ var TelemetryReporter = class {
 };
 
 // src/state.ts
-import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 var STATE_FILE = "agentvault.json";
 var LEGACY_STATE_FILE = "secure-channel.json";
@@ -45502,6 +45475,44 @@ async function loadState(dataDir) {
     return null;
   }
 }
+async function isStateValid(dataDir) {
+  try {
+    const filePath = join(dataDir, STATE_FILE);
+    const raw = await readFile(filePath, "utf-8");
+    const parsed = JSON.parse(raw);
+    return !!(parsed && parsed.deviceId && parsed.deviceJwt && parsed.sessions && Object.keys(parsed.sessions).length > 0);
+  } catch {
+    return false;
+  }
+}
+async function backupState(dataDir) {
+  const src = join(dataDir, STATE_FILE);
+  const bak = join(dataDir, `${STATE_FILE}.bak`);
+  const tmp = join(dataDir, `${STATE_FILE}.bak.tmp`);
+  try {
+    const data = await readFile(src, "utf-8");
+    await writeFile(tmp, data, "utf-8");
+    await rename(tmp, bak);
+  } catch {
+  }
+}
+async function restoreState(dataDir) {
+  const primaryValid = await isStateValid(dataDir);
+  if (primaryValid) return false;
+  const bak = join(dataDir, `${STATE_FILE}.bak`);
+  try {
+    const data = await readFile(bak, "utf-8");
+    const parsed = JSON.parse(data);
+    if (!parsed || !parsed.deviceId || !parsed.deviceJwt || !parsed.sessions || Object.keys(parsed.sessions).length === 0) {
+      return false;
+    }
+    await mkdir(dataDir, { recursive: true });
+    await writeFile(join(dataDir, STATE_FILE), data, "utf-8");
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function clearState(dataDir) {
   for (const filename of [STATE_FILE, LEGACY_STATE_FILE]) {
     try {
@@ -45656,6 +45667,7 @@ var SecureChannel = class _SecureChannel extends EventEmitter {
     await libsodium_wrappers_default.ready;
     const raw = await loadState(this.config.dataDir);
     if (raw) {
+      await backupState(this.config.dataDir);
       this._persisted = migratePersistedState(raw);
       if (!this._persisted.messageHistory) {
         this._persisted.messageHistory = [];
@@ -45679,6 +45691,30 @@ var SecureChannel = class _SecureChannel extends EventEmitter {
       this._connect();
       return;
     }
+    const restored = await restoreState(this.config.dataDir);
+    if (restored) {
+      console.log("[SecureChannel] Restored state from backup");
+      const restoredRaw = await loadState(this.config.dataDir);
+      if (restoredRaw) {
+        this._persisted = migratePersistedState(restoredRaw);
+        if (!this._persisted.messageHistory) this._persisted.messageHistory = [];
+        this._deviceId = this._persisted.deviceId;
+        this._deviceJwt = this._persisted.deviceJwt;
+        this._primaryConversationId = this._persisted.primaryConversationId;
+        this._fingerprint = this._persisted.fingerprint;
+        for (const [convId, sd] of Object.entries(this._persisted.sessions)) {
+          if (sd.ratchetState) {
+            this._sessions.set(convId, {
+              ownerDeviceId: sd.ownerDeviceId,
+              ratchet: DoubleRatchet.deserialize(sd.ratchetState),
+              activated: sd.activated ?? false
+            });
+          }
+        }
+        this._connect();
+        return;
+      }
+    }
     await this._enroll();
   }
   /**
@@ -48134,6 +48170,7 @@ ${messageText}`;
       };
     }
     await saveState(this.config.dataDir, this._persisted);
+    await backupState(this.config.dataDir);
   }
 };
 
@@ -48406,27 +48443,6 @@ async function sendToOwner(text, options) {
     return { ok: false, error: friendlyError(err) };
   }
 }
-async function sendAction(report, options) {
-  if (typeof report.action !== "string" || report.action.trim().length === 0) {
-    return { ok: false, error: "Action must be a non-empty string" };
-  }
-  try {
-    const base = resolveBaseUrl(options);
-    const res = await fetch(`${base}/action`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(report),
-      signal: options?.signal
-    });
-    if (!res.ok) {
-      const body = await res.text().catch(() => "");
-      return { ok: false, error: `HTTP ${res.status}${body ? `: ${body}` : ""}` };
-    }
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: friendlyError(err) };
-  }
-}
 async function checkGateway(options) {
   try {
     const base = resolveBaseUrl(options);
@@ -48447,7 +48463,7 @@ async function checkGateway(options) {
 }
 
 // src/index.ts
-var VERSION = "0.12.0";
+var VERSION = "0.13.7";
 export {
   SecureChannel,
   VERSION,
@@ -48456,7 +48472,6 @@ export {
   getActiveChannel,
   listAccountIds,
   resolveAccount,
-  sendAction,
   sendToOwner,
   setOcRuntime
 };