@agentvault/agentvault 0.20.24 → 0.20.26

package/dist/cli.js

@@ -62729,22 +62729,43 @@ function mlsFileName(groupId) {
 }
 async function hasPendingWelcome(dataDir2, groupId) {
   try {
-    const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
-    await readFile(filePath);
+    await readFile(pendingKpPath(dataDir2, groupId));
     return true;
   } catch {
     return false;
   }
 }
-async function setPendingWelcome(dataDir2, groupId) {
+async function savePendingKpBundle(dataDir2, groupId, kp) {
   await mkdir(dataDir2, { recursive: true, mode: DIR_MODE });
-  const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
-  await writeFile(filePath, (/* @__PURE__ */ new Date()).toISOString(), { encoding: "utf-8", mode: FILE_MODE });
+  const serialized = {
+    publicPackage: Buffer.from(kp.publicPackage).toString("base64"),
+    privatePackage: {
+      initPrivateKey: Buffer.from(kp.privatePackage.initPrivateKey).toString("base64"),
+      hpkePrivateKey: Buffer.from(kp.privatePackage.hpkePrivateKey).toString("base64"),
+      signaturePrivateKey: Buffer.from(kp.privatePackage.signaturePrivateKey).toString("base64")
+    }
+  };
+  await writeFile(pendingKpPath(dataDir2, groupId), JSON.stringify(serialized), { encoding: "utf-8", mode: FILE_MODE });
+}
+async function loadPendingKpBundle(dataDir2, groupId) {
+  try {
+    const raw = await readFile(pendingKpPath(dataDir2, groupId), "utf-8");
+    const parsed = JSON.parse(raw);
+    return {
+      publicPackage: new Uint8Array(Buffer.from(parsed.publicPackage, "base64")),
+      privatePackage: {
+        initPrivateKey: new Uint8Array(Buffer.from(parsed.privatePackage.initPrivateKey, "base64")),
+        hpkePrivateKey: new Uint8Array(Buffer.from(parsed.privatePackage.hpkePrivateKey, "base64")),
+        signaturePrivateKey: new Uint8Array(Buffer.from(parsed.privatePackage.signaturePrivateKey, "base64"))
+      }
+    };
+  } catch {
+    return null;
+  }
 }
 async function clearPendingWelcome(dataDir2, groupId) {
   try {
-    const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
-    await rm(filePath);
+    await rm(pendingKpPath(dataDir2, groupId));
   } catch {
   }
 }
@@ -62768,12 +62789,13 @@ async function deleteMlsState(dataDir2, groupId) {
   } catch {
   }
 }
-var FILE_MODE, DIR_MODE;
+var FILE_MODE, DIR_MODE, pendingKpPath;
 var init_mls_state = __esm({
   "src/mls-state.ts"() {
     "use strict";
     FILE_MODE = 384;
     DIR_MODE = 448;
+    pendingKpPath = (dataDir2, groupId) => join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.json`);
   }
 });
 
@@ -65259,11 +65281,11 @@ var init_channel = __esm({
                   console.log(`[SecureChannel] A2A ${chId.slice(0, 8)} sync fallback: skipping \u2014 Welcome already pending for group=${groupId.slice(0, 8)}`);
                   continue;
                 }
-                await setPendingWelcome(this.config.dataDir, groupId);
                 const mgr = new MLSGroupManager();
                 const identity = new TextEncoder().encode(this._persisted.deviceId);
                 const kp = await mgr.generateKeyPackage(identity);
                 this._pendingMlsKpBundle = kp;
+                await savePendingKpBundle(this.config.dataDir, groupId, kp);
                 const kpBytes = MLSGroupManager.serializeKeyPackage(kp.publicPackage);
                 await fetch(`${this.config.apiUrl}/api/v1/mls/key-packages`, {
                   method: "POST",
@@ -67127,12 +67149,14 @@ ${messageText}`;
       async _handleMlsWelcome(data) {
         const groupId = data.group_id;
         const conversationId = data.conversation_id;
-        const kpSource = this._pendingMlsKpBundle ? "pending" : this._mlsKeyPackage ? "connect" : "generated";
+        const persistedKpAvailable = await hasPendingWelcome(this.config.dataDir, groupId);
+        const kpSource = this._pendingMlsKpBundle ? "pending" : persistedKpAvailable ? "persisted" : this._mlsKeyPackage ? "connect" : "generated";
         console.log(`[SecureChannel] Received MLS welcome for group ${groupId?.slice(0, 8)}${conversationId ? ` conv=${conversationId.slice(0, 8)}` : ""} kpSource=${kpSource}`);
         try {
           const welcomeBytes = new Uint8Array(Buffer.from(data.payload, "hex"));
           const mgr = new MLSGroupManager();
-          const kp = this._pendingMlsKpBundle ?? this._mlsKeyPackage ?? await (async () => {
+          const persistedKp = await loadPendingKpBundle(this.config.dataDir, groupId);
+          const kp = this._pendingMlsKpBundle ?? persistedKp ?? this._mlsKeyPackage ?? await (async () => {
             const identity = new TextEncoder().encode(this._deviceId);
             return mgr.generateKeyPackage(identity);
           })();
@@ -88939,7 +88963,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.20.24" : "0.0.0-dev";
+    VERSION = true ? "0.20.26" : "0.0.0-dev";
   }
 });