@agentvault/agentvault 0.23.13 → 0.23.14

package/dist/index.js

@@ -63965,6 +63965,24 @@ var init_channel = __esm({
       _pendingKpBundles = [];
       /** Pool target: keep this many unconsumed KeyPackages published; backend caps to match. */
       static _KP_POOL_TARGET = 10;
+      /**
+       * Local retention bound for `_pendingKpBundles` (#363). Deliberately ABOVE
+       * `_KP_POOL_TARGET`, because the two counts are in DIFFERENT UNITS: the backend
+       * keeps up to `_KP_POOL_TARGET` **unconsumed** KeyPackages, while this array
+       * holds every bundle published since the last join — consumed ones are removed
+       * only by `_removeKpFromPool` on a successful join.
+       *
+       * Capping local retention AT the backend's target therefore evicts bundles the
+       * backend can still serve, and their private material cannot be rebuilt (#341:
+       * `mls_rs_uniffi` exposes no KeyPackage repository), so any Welcome minted
+       * against an evicted bundle is PERMANENTLY unjoinable.
+       *
+       * Same defect and same remedy as #511, where the web store capped 6 against a
+       * backend pool of 10 and was raised to 12. Retaining extra bundles is cheap and
+       * purely protective — `_handleMlsWelcome` trial-decrypts against the whole pool,
+       * so a surplus only ever adds chances to match.
+       */
+      static _KP_POOL_RETENTION = 20;
       /** Reentrancy guard so concurrent pool top-ups don't double-publish past target. */
       _kpPoolFilling = false;
       /** Buffer for MLS commits received before Welcome (keyed by groupId, sorted by epoch). */
@@ -64628,7 +64646,9 @@ var init_channel = __esm({
         const pendingWsSends = [];
         const sentSharedGroupIds = /* @__PURE__ */ new Set();
         if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
+          const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
           for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
+            if (targetConvId && gid !== targetSharedGid) continue;
             if (!entry.mlsGroupId) continue;
             const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
             if (!mlsGroup?.isInitialized || Number(mlsGroup.epoch) <= 0) continue;
@@ -64829,7 +64849,7 @@ var init_channel = __esm({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.13" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.14" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -66568,7 +66588,7 @@ var init_channel = __esm({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.14" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -66886,7 +66906,7 @@ var init_channel = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.14" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -68549,7 +68569,7 @@ ${messageText}`;
         if (!this._pendingKpBundles.some((b2) => idOf(b2) === id)) {
           this._pendingKpBundles.push(kp);
         }
-        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_TARGET) {
+        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_RETENTION) {
           this._pendingKpBundles.shift();
         }
       }
@@ -97171,7 +97191,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.13" : "0.0.0-dev";
+    VERSION = true ? "0.23.14" : "0.0.0-dev";
   }
 });
 await init_index();