@agentvault/agentvault 0.20.21 → 0.20.23

package/dist/index.js

@@ -63639,6 +63639,9 @@ var init_channel = __esm({
       _mlsKeyPackage = null;
       /** Pending KeyPackage bundle from request-Welcome flow (used by _handleMlsWelcome). */
       _pendingMlsKpBundle;
+      /** Channels that have already had their sync fallback KeyPackage published this connect cycle.
+       *  Prevents multiple agents from overwriting each other's KP for the same channel. */
+      _pendingWelcomeChannels = /* @__PURE__ */ new Set();
       /** In-memory credential store for renter-provided credentials (never persisted). */
       _credentialStore = new CredentialStore();
       /** Dedup buffer for A2A message IDs (prevents double-delivery via direct + Redis) */
@@ -65199,7 +65202,8 @@ var init_channel = __esm({
               }
             }
             const memberMlsGroup = chState.mlsGroupId ? this._mlsGroups.get(`a2a:${chId}`) : void 0;
-            if (chState.role === "member" && !memberMlsGroup?.isInitialized) {
+            if (chState.role === "member" && !memberMlsGroup?.isInitialized && !this._pendingWelcomeChannels.has(chId)) {
+              this._pendingWelcomeChannels.add(chId);
               try {
                 let groupId = chState.mlsGroupId;
                 let memberIds = [];
@@ -66111,6 +66115,7 @@ var init_channel = __esm({
             clearInterval(this._deliveryHeartbeat);
             this._deliveryHeartbeat = null;
           }
+          this._pendingWelcomeChannels.clear();
           if (this._stopped) return;
           this._setState("disconnected");
           this._scheduleReconnect();
@@ -67100,7 +67105,8 @@ ${messageText}`;
       async _handleMlsWelcome(data) {
         const groupId = data.group_id;
         const conversationId = data.conversation_id;
-        console.log(`[SecureChannel] Received MLS welcome for group ${groupId?.slice(0, 8)}${conversationId ? ` conv=${conversationId.slice(0, 8)}` : ""}`);
+        const kpSource = this._pendingMlsKpBundle ? "pending" : this._mlsKeyPackage ? "connect" : "generated";
+        console.log(`[SecureChannel] Received MLS welcome for group ${groupId?.slice(0, 8)}${conversationId ? ` conv=${conversationId.slice(0, 8)}` : ""} kpSource=${kpSource}`);
         try {
           const welcomeBytes = new Uint8Array(Buffer.from(data.payload, "hex"));
           const mgr = new MLSGroupManager();
@@ -67108,6 +67114,7 @@ ${messageText}`;
             const identity = new TextEncoder().encode(this._deviceId);
             return mgr.generateKeyPackage(identity);
           })();
+          console.log(`[SecureChannel] Welcome joinFromWelcome: group=${groupId?.slice(0, 8)} kpSource=${kpSource} welcomeLen=${welcomeBytes.length}`);
           await mgr.joinFromWelcome(welcomeBytes, kp);
           if (conversationId) {
             const key = `conv:${conversationId}`;
@@ -67140,6 +67147,8 @@ ${messageText}`;
               this._mlsGroups.set(`a2a:${channelId}`, mgr);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mgr.exportState()));
               await this._persistState();
+              this._pendingWelcomeChannels.delete(channelId);
+              this._pendingMlsKpBundle = void 0;
               console.log(`[SecureChannel] Joined MLS group for A2A ${channelId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
               if (this.config.onA2AChannelReady && entry.conversationId) {
                 const firstPeer = entry.participants?.find((p2) => p2.status === "active" || p2.status === "invited");
@@ -67174,7 +67183,8 @@ ${messageText}`;
           }
           console.warn(`[SecureChannel] MLS welcome for unmatched group ${groupId?.slice(0, 8)} (no room/A2A/conv match)`);
         } catch (err) {
-          console.error(`[SecureChannel] MLS welcome processing failed:`, err);
+          console.error(`[SecureChannel] MLS welcome processing failed (kpSource=${kpSource}):`, err);
+          throw err;
         }
       }
       /**
@@ -94804,7 +94814,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.20.21" : "0.0.0-dev";
+    VERSION = true ? "0.20.23" : "0.0.0-dev";
   }
 });
 await init_index();