@agentvault/agentvault 0.20.35 → 0.20.37

package/dist/index.js

@@ -64140,6 +64140,39 @@ var init_channel = __esm({
             console.error(`[SecureChannel] send() failed for conv ${convId.slice(0, 8)}...:`, err);
           }
         }
+        if (this._persisted?.mlsConversations && this._state === "ready" && this._ws) {
+          for (const [mlsConvId, entry] of Object.entries(this._persisted.mlsConversations)) {
+            if (targetConvId && mlsConvId !== targetConvId) continue;
+            if (this._sessions.has(mlsConvId)) continue;
+            if (roomConvIds.has(mlsConvId)) continue;
+            const mlsGroup = this._mlsGroups.get(`conv:${mlsConvId}`);
+            if (!mlsGroup?.isInitialized || !entry.mlsGroupId || Number(mlsGroup.epoch) <= 0) continue;
+            try {
+              const plaintextBytes = new TextEncoder().encode(plaintext);
+              const cipherBytes = await mlsGroup.encrypt(plaintextBytes);
+              await saveMlsState(this.config.dataDir, entry.mlsGroupId, JSON.stringify(mlsGroup.exportState()));
+              const payload = {
+                conversation_id: mlsConvId,
+                group_id: entry.mlsGroupId,
+                epoch: Number(mlsGroup.epoch),
+                payload: Buffer.from(cipherBytes).toString("hex"),
+                topic_id: topicId,
+                client_message_id: clientMessageId,
+                message_type: messageType,
+                priority,
+                parent_span_id: parentSpanId,
+                metadata: envelopeMetadata
+              };
+              if (this._persisted?.hubAddress) payload.hub_address = this._persisted.hubAddress;
+              if (this._persisted?.hubId) payload.sender_hub_id = this._persisted.hubId;
+              pendingWsSends.push(JSON.stringify({ event: "message_mls", data: payload }));
+              sentCount++;
+              console.log(`[SecureChannel] MLS-only send for conv ${mlsConvId.slice(0, 8)} (no DR session)`);
+            } catch (err) {
+              console.error(`[SecureChannel] MLS-only send failed for conv ${mlsConvId.slice(0, 8)}:`, err);
+            }
+          }
+        }
         if (sentCount === 0 && this._sessions.size > 0) {
           console.warn("[SecureChannel] send() delivered to 0 sessions (all skipped or failed)");
         }
@@ -67588,6 +67621,70 @@ ${messageText}`;
             } catch {
             }
           }
+          for (const [convId, convEntry] of Object.entries(this._persisted?.mlsConversations ?? {})) {
+            if (!convEntry.mlsGroupId) continue;
+            const mlsGroup = this._mlsGroups.get(`conv:${convId}`);
+            if (!mlsGroup?.isInitialized) continue;
+            try {
+              const pendingRes = await fetch(
+                `${this.config.apiUrl}/api/v1/mls/groups/${convEntry.mlsGroupId}/pending-welcomes`,
+                { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+              );
+              if (!pendingRes.ok) continue;
+              const pending = await pendingRes.json();
+              if (pending.length === 0) continue;
+              console.log(`[SecureChannel] ${pending.length} pending Welcome requests for conv ${convId.slice(0, 8)}`);
+              for (const req of pending) {
+                try {
+                  const kpRes = await fetch(
+                    `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${req.requesting_device_id}`,
+                    { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+                  );
+                  if (!kpRes.ok) continue;
+                  const kpData = await kpRes.json();
+                  const kpHex = kpData[req.requesting_device_id];
+                  if (!kpHex) continue;
+                  const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
+                  const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
+                  const { commit, welcome } = await mlsGroup.addMembers([memberKp]);
+                  if (this._ws) {
+                    this._ws.send(JSON.stringify({
+                      event: "mls_commit",
+                      data: {
+                        group_id: convEntry.mlsGroupId,
+                        epoch: Number(mlsGroup.epoch),
+                        payload: Buffer.from(commit).toString("hex")
+                      }
+                    }));
+                  }
+                  if (welcome && this._ws) {
+                    this._ws.send(JSON.stringify({
+                      event: "mls_welcome",
+                      data: {
+                        target_device_id: req.requesting_device_id,
+                        group_id: convEntry.mlsGroupId,
+                        conversation_id: convId,
+                        payload: Buffer.from(welcome).toString("hex")
+                      }
+                    }));
+                  }
+                  await fetch(
+                    `${this.config.apiUrl}/api/v1/mls/groups/${convEntry.mlsGroupId}/fulfill-welcome`,
+                    {
+                      method: "POST",
+                      headers: { Authorization: `Bearer ${this._deviceJwt}`, "Content-Type": "application/json" },
+                      body: JSON.stringify({ request_id: req.id })
+                    }
+                  );
+                  await saveMlsState(this.config.dataDir, convEntry.mlsGroupId, JSON.stringify(mlsGroup.exportState()));
+                  console.log(`[SecureChannel] Fulfilled Welcome for ${req.requesting_device_id.slice(0, 8)} in conv ${convId.slice(0, 8)}`);
+                } catch (fulfillErr) {
+                  console.warn(`[SecureChannel] Conv Welcome fulfill failed for ${req.requesting_device_id.slice(0, 8)}:`, fulfillErr);
+                }
+              }
+            } catch {
+            }
+          }
           for (const [chId, chState] of Object.entries(this._persisted?.a2aChannels ?? {})) {
             if (!chState.mlsGroupId && chState.role === "creator") {
               try {
@@ -95196,7 +95293,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.20.35" : "0.0.0-dev";
+    VERSION = true ? "0.20.37" : "0.0.0-dev";
   }
 });
 await init_index();