@agentvault/agentvault 0.19.35 → 0.19.36

package/dist/cli.js

@@ -47189,7 +47189,8 @@ var init_channel = __esm({
               this._sessions.set(convId, {
                 ownerDeviceId: sessionData.ownerDeviceId,
                 ratchet,
-                activated: sessionData.activated ?? false
+                activated: sessionData.activated ?? false,
+                epoch: sessionData.epoch
               });
             }
           }
@@ -47228,7 +47229,8 @@ var init_channel = __esm({
                 this._sessions.set(convId, {
                   ownerDeviceId: sd.ownerDeviceId,
                   ratchet: DoubleRatchet.deserialize(sd.ratchetState),
-                  activated: sd.activated ?? false
+                  activated: sd.activated ?? false,
+                  epoch: sd.epoch
                 });
               }
             }
@@ -47568,13 +47570,15 @@ var init_channel = __esm({
           this._sessions.set(conv.id, {
             ownerDeviceId: otherDeviceId,
             ratchet,
-            activated: isInitiator
+            activated: isInitiator,
             // initiator can send immediately
+            epoch: 1
           });
           this._persisted.sessions[conv.id] = {
             ownerDeviceId: otherDeviceId,
             ratchetState: ratchet.serialize(),
-            activated: isInitiator
+            activated: isInitiator,
+            epoch: 1
           };
           conversationIds.push(conv.id);
           console.log(
@@ -48669,12 +48673,14 @@ var init_channel = __esm({
             this._sessions.set(conv.conversation_id, {
               ownerDeviceId: conv.owner_device_id,
               ratchet,
-              activated: false
+              activated: false,
               // Wait for owner's first message before sending to this session
+              epoch: 1
             });
             sessions[conv.conversation_id] = {
               ownerDeviceId: conv.owner_device_id,
-              ratchetState: ratchet.serialize()
+              ratchetState: ratchet.serialize(),
+              epoch: 1
             };
             console.log(
               `[SecureChannel] Session initialized for conv ${conv.conversation_id.slice(0, 8)}... (owner ${conv.owner_device_id.slice(0, 8)}..., primary=${conv.is_primary})`
@@ -49173,8 +49179,9 @@ var init_channel = __esm({
                     ownerDeviceId: "",
                     // A2A sessions don't have an owner device
                     ratchetState: ratchet.serialize(),
-                    activated: activatedRole === "initiator"
+                    activated: activatedRole === "initiator",
                     // initiator can send immediately
+                    epoch: 1
                   };
                   channelEntry.role = activatedRole;
                   if (convId) channelEntry.conversationId = convId;
@@ -49359,7 +49366,8 @@ var init_channel = __esm({
                   conversation_id: convId,
                   reason: "no_session",
                   identity_public_key: this._persisted.identityKeypair.publicKey,
-                  ephemeral_public_key: this._persisted.ephemeralKeypair.publicKey
+                  ephemeral_public_key: this._persisted.ephemeralKeypair.publicKey,
+                  epoch: this._persisted.sessions[convId]?.epoch
                 }
               })
             );
@@ -49398,7 +49406,8 @@ var init_channel = __esm({
                   conversation_id: convId,
                   reason: "decrypt_failure",
                   identity_public_key: idPubHex,
-                  ephemeral_public_key: ephPubHex
+                  ephemeral_public_key: ephPubHex,
+                  epoch: this._persisted?.sessions[convId]?.epoch
                 }
               })
             );
@@ -49832,13 +49841,15 @@ ${messageText}`;
           this._sessions.set(event.conversation_id, {
             ownerDeviceId: event.owner_device_id,
             ratchet,
-            activated: false
+            activated: false,
             // Wait for owner's first message
+            epoch: 1
           });
           this._persisted.sessions[event.conversation_id] = {
             ownerDeviceId: event.owner_device_id,
             ratchetState: ratchet.serialize(),
-            activated: false
+            activated: false,
+            epoch: 1
           };
           if (event.owner_hub_id) {
             this._persisted.ownerHubId = event.owner_hub_id;
@@ -49885,17 +49896,21 @@ ${messageText}`;
             keyType: "ed25519"
           }, hexToBytes(data.identity_public_key));
           const existingSession = this._sessions.get(convId);
+          const existingPersisted = this._persisted.sessions[convId];
           const ownerDeviceId = data.sender_device_id ?? existingSession?.ownerDeviceId ?? "";
+          const newEpoch = (existingPersisted?.epoch ?? existingSession?.epoch ?? 0) + 1;
           this._sessions.set(convId, {
             ownerDeviceId,
             ratchet,
-            activated: false
+            activated: false,
             // Wait for owner's encrypted session_init
+            epoch: newEpoch
           });
           this._persisted.sessions[convId] = {
             ownerDeviceId,
             ratchetState: ratchet.serialize(),
-            activated: false
+            activated: false,
+            epoch: newEpoch
           };
           await this._persistState();
           if (this._ws) {
@@ -49905,7 +49920,8 @@ ${messageText}`;
                 data: {
                   conversation_id: convId,
                   identity_public_key: identity.publicKey,
-                  ephemeral_public_key: ephemeral.publicKey
+                  ephemeral_public_key: ephemeral.publicKey,
+                  epoch: newEpoch
                 }
               })
             );
@@ -49919,6 +49935,32 @@ ${messageText}`;
           this.emit("error", err);
         }
       }
+      /**
+       * Send a resync_request for a room conversation if the cooldown has elapsed.
+       * Shared by all room ratchet failure paths to avoid code duplication.
+       */
+      _sendRoomResyncIfCooled(convId, reason, session) {
+        const RESYNC_COOLDOWN_MS = 5 * 60 * 1e3;
+        const lastResync = this._lastResyncRequest.get(convId) ?? 0;
+        if (Date.now() - lastResync > RESYNC_COOLDOWN_MS && this._ws && this._persisted) {
+          this._lastResyncRequest.set(convId, Date.now());
+          this._ws.send(
+            JSON.stringify({
+              event: "resync_request",
+              data: {
+                conversation_id: convId,
+                reason,
+                identity_public_key: this._persisted.identityKeypair.publicKey,
+                ephemeral_public_key: this._persisted.ephemeralKeypair.publicKey,
+                epoch: session?.epoch
+              }
+            })
+          );
+          console.log(
+            `[SecureChannel] Room resync requested for conv ${convId.slice(0, 8)} (${reason})`
+          );
+        }
+      }
       /**
        * Handle an incoming room message. Finds the pairwise conversation
        * for the sender, decrypts, and emits a room_message event.
@@ -50055,12 +50097,14 @@ ${messageText}`;
                   `[SecureChannel] Room re-init retry failed for conv ${convId.slice(0, 8)} (msgNum=${incomingMsgNum}):`,
                   retryErr
                 );
+                this._sendRoomResyncIfCooled(convId, "room_reinit_retry_failed", session);
                 return;
               }
             } else {
               console.log(
                 `[SecureChannel] Room re-init: skipping message with msgNum=${incomingMsgNum} for conv ${convId.slice(0, 8)} (too far ahead for fresh ratchet)`
               );
+              this._sendRoomResyncIfCooled(convId, "room_message_skip");
               return;
             }
           } catch (reinitErr) {
@@ -50068,6 +50112,7 @@ ${messageText}`;
               `[SecureChannel] Room ratchet re-init failed for conv ${convId.slice(0, 8)}...:`,
               reinitErr
             );
+            this._sendRoomResyncIfCooled(convId, "room_reinit_failed");
             return;
           }
         }