@agentvault/agentvault 0.20.32 → 0.20.34

package/dist/cli.js

@@ -63715,6 +63715,7 @@ var init_channel = __esm({
       _syncMessageIds = null;
       _deliveryHeartbeat = null;
       _deliveryPulling = false;
+      _drDeliveryPulling = false;
       /** MLS group managers per room/conversation (roomId or conv:conversationId -> MLSGroupManager) */
       _mlsGroups = /* @__PURE__ */ new Map();
       /** Cached MLS KeyPackage bundle for this device (regenerated on each connect). */
@@ -64060,7 +64061,7 @@ var init_channel = __esm({
           try {
             const mlsGroup = this._mlsGroups.get(`conv:${convId}`);
             const mlsGroupId = this._persisted?.mlsConversations?.[convId]?.mlsGroupId;
-            if (mlsGroup?.isInitialized && mlsGroupId && this._state === "ready" && this._ws) {
+            if (mlsGroup?.isInitialized && mlsGroupId && Number(mlsGroup.epoch) > 0 && this._state === "ready" && this._ws) {
               const plaintextBytes = new TextEncoder().encode(plaintext);
               const cipherBytes = await mlsGroup.encrypt(plaintextBytes);
               await saveMlsState(this.config.dataDir, mlsGroupId, JSON.stringify(mlsGroup.exportState()));
@@ -65598,6 +65599,7 @@ var init_channel = __esm({
             this._startWakeDetector();
             this._startPendingPoll();
             await this._syncMissedMessages();
+            await this._pullDrDeliveryQueue();
             await this._flushOutboundQueue();
             this._setState("ready");
             if (this.config.enableScanning) {
@@ -65827,6 +65829,11 @@ var init_channel = __esm({
                 console.warn("[SecureChannel] Delivery pull on ping failed:", err);
               });
             }
+            if (data.event === "dr_delivery") {
+              this._pullDrDeliveryQueue().catch((err) => {
+                console.warn("[SecureChannel] DR delivery pull on ping failed:", err);
+              });
+            }
             if (data.event === "mls_welcome_requested") {
               console.log(`[SecureChannel] mls_welcome_requested for group ${(data.data?.group_id || "").slice(0, 8)} \u2014 pulling deliveries`);
               this._pullDeliveryQueue().catch((err) => {
@@ -67764,6 +67771,165 @@ ${messageText}`;
           this._deliveryPulling = false;
         }
       }
+      /**
+       * Pull pending DR (Double Ratchet) messages from the delivery queue.
+       * Signal-model queue-first: called on WS connect and on dr_delivery ping.
+       */
+      async _pullDrDeliveryQueue() {
+        if (!this._deviceId || !this._deviceJwt || this._drDeliveryPulling) return;
+        this._drDeliveryPulling = true;
+        try {
+          const res = await fetch(
+            `${this.config.apiUrl}/api/v1/dr/delivery?device_id=${this._deviceId}`,
+            { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+          );
+          if (!res.ok) {
+            console.warn(`[SecureChannel] DR delivery pull failed: ${res.status}`);
+            return;
+          }
+          const { messages } = await res.json();
+          if (!messages || messages.length === 0) return;
+          const ackedIds = [];
+          const nackedIds = [];
+          for (const msg of messages) {
+            try {
+              if (msg.sender_device_id === this._deviceId) {
+                ackedIds.push(msg.queue_id);
+                continue;
+              }
+              if (msg.message_id && this._seenMessageIds.has(msg.message_id)) {
+                ackedIds.push(msg.queue_id);
+                continue;
+              }
+              let isRoom = false;
+              if (this._persisted?.rooms) {
+                for (const room of Object.values(this._persisted.rooms)) {
+                  if (room.conversationIds?.includes(msg.conversation_id)) {
+                    isRoom = true;
+                    break;
+                  }
+                }
+              }
+              if (isRoom) {
+                ackedIds.push(msg.queue_id);
+                continue;
+              }
+              if (!msg.header_blob || !msg.ciphertext) {
+                ackedIds.push(msg.queue_id);
+                continue;
+              }
+              const session = this._sessions.get(msg.conversation_id);
+              if (!session) {
+                console.warn(`[SecureChannel] DR delivery: no session for conv ${msg.conversation_id.slice(0, 8)}, skipping`);
+                continue;
+              }
+              const encrypted = transportToEncryptedMessage({
+                header_blob: msg.header_blob,
+                ciphertext: msg.ciphertext
+              });
+              const ratchetSnapshot = session.ratchet.serialize();
+              let plaintext;
+              try {
+                plaintext = session.ratchet.decrypt(encrypted);
+              } catch (decryptErr) {
+                console.error(`[SecureChannel] DR delivery decrypt failed for conv ${msg.conversation_id.slice(0, 8)} \u2014 restoring ratchet:`, decryptErr);
+                try {
+                  session.ratchet = DoubleRatchet.deserialize(ratchetSnapshot);
+                } catch {
+                }
+                nackedIds.push(msg.queue_id);
+                continue;
+              }
+              if (msg.message_id) {
+                this._seenMessageIds.add(msg.message_id);
+                if (this._seenMessageIds.size > _SecureChannel.SEEN_MSG_MAX) {
+                  const first = this._seenMessageIds.values().next().value;
+                  if (first) this._seenMessageIds.delete(first);
+                }
+              }
+              this._sendAck(msg.message_id);
+              if (!session.activated) {
+                session.activated = true;
+                console.log(`[SecureChannel] Session ${msg.conversation_id.slice(0, 8)}... activated via DR delivery`);
+                if (this._persisted?.sessions[msg.conversation_id]) {
+                  this._persisted.sessions[msg.conversation_id].activated = true;
+                }
+                this._activateSiblings(msg.conversation_id);
+                await this._persistState();
+              }
+              let messageText;
+              let messageType;
+              try {
+                const parsed = JSON.parse(plaintext);
+                messageType = parsed.type || "message";
+                messageText = parsed.text || plaintext;
+              } catch {
+                messageType = "message";
+                messageText = plaintext;
+              }
+              if (messageType === "session_init") {
+                console.log(`[SecureChannel] session_init received via DR delivery for ${msg.conversation_id.slice(0, 8)}...`);
+                await this._replayHistoryToSession(msg.conversation_id);
+                await this._persistState();
+                ackedIds.push(msg.queue_id);
+                continue;
+              }
+              if (messageType === "message") {
+                const topicId = msg.topic_id;
+                this._appendHistory("owner", messageText, topicId);
+                const metadata = {
+                  messageId: msg.message_id,
+                  conversationId: msg.conversation_id,
+                  timestamp: msg.created_at,
+                  topicId
+                };
+                this.emit("message", messageText, metadata);
+                Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
+                  console.error("[SecureChannel] onMessage callback error:", err);
+                });
+              }
+              this._persisted.lastMessageTimestamp = msg.created_at;
+              ackedIds.push(msg.queue_id);
+            } catch (err) {
+              console.warn(`[SecureChannel] DR delivery processing failed for ${msg.message_id?.slice(0, 8)}:`, err);
+              nackedIds.push(msg.queue_id);
+            }
+          }
+          await this._persistState();
+          if (nackedIds.length > 0) {
+            try {
+              await fetch(`${this.config.apiUrl}/api/v1/dr/delivery/nack`, {
+                method: "POST",
+                headers: {
+                  Authorization: `Bearer ${this._deviceJwt}`,
+                  "Content-Type": "application/json"
+                },
+                body: JSON.stringify({ queue_ids: nackedIds })
+              });
+            } catch {
+            }
+          }
+          if (ackedIds.length > 0) {
+            try {
+              await fetch(`${this.config.apiUrl}/api/v1/dr/delivery/ack`, {
+                method: "POST",
+                headers: {
+                  Authorization: `Bearer ${this._deviceJwt}`,
+                  "Content-Type": "application/json"
+                },
+                body: JSON.stringify({ queue_ids: ackedIds, device_id: this._deviceId })
+              });
+              console.log(`[SecureChannel] DR delivery acked ${ackedIds.length}/${messages.length}`);
+            } catch (ackErr) {
+              console.warn("[SecureChannel] DR delivery ack failed:", ackErr);
+            }
+          }
+        } catch (err) {
+          console.warn("[SecureChannel] DR delivery pull error:", err);
+        } finally {
+          this._drDeliveryPulling = false;
+        }
+      }
       async _handleMlsSyncResponse(data) {
         const action = data.action;
         const groupId = data.group_id;
@@ -89123,7 +89289,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.20.32" : "0.0.0-dev";
+    VERSION = true ? "0.20.34" : "0.0.0-dev";
   }
 });