@agentvault/agentvault 0.23.13 → 0.23.15

package/dist/index.js

@@ -63965,6 +63965,24 @@ var init_channel = __esm({
       _pendingKpBundles = [];
       /** Pool target: keep this many unconsumed KeyPackages published; backend caps to match. */
       static _KP_POOL_TARGET = 10;
+      /**
+       * Local retention bound for `_pendingKpBundles` (#363). Deliberately ABOVE
+       * `_KP_POOL_TARGET`, because the two counts are in DIFFERENT UNITS: the backend
+       * keeps up to `_KP_POOL_TARGET` **unconsumed** KeyPackages, while this array
+       * holds every bundle published since the last join — consumed ones are removed
+       * only by `_removeKpFromPool` on a successful join.
+       *
+       * Capping local retention AT the backend's target therefore evicts bundles the
+       * backend can still serve, and their private material cannot be rebuilt (#341:
+       * `mls_rs_uniffi` exposes no KeyPackage repository), so any Welcome minted
+       * against an evicted bundle is PERMANENTLY unjoinable.
+       *
+       * Same defect and same remedy as #511, where the web store capped 6 against a
+       * backend pool of 10 and was raised to 12. Retaining extra bundles is cheap and
+       * purely protective — `_handleMlsWelcome` trial-decrypts against the whole pool,
+       * so a surplus only ever adds chances to match.
+       */
+      static _KP_POOL_RETENTION = 20;
       /** Reentrancy guard so concurrent pool top-ups don't double-publish past target. */
       _kpPoolFilling = false;
       /** Buffer for MLS commits received before Welcome (keyed by groupId, sorted by epoch). */
@@ -64628,7 +64646,9 @@ var init_channel = __esm({
         const pendingWsSends = [];
         const sentSharedGroupIds = /* @__PURE__ */ new Set();
         if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
+          const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
           for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
+            if (targetConvId && gid !== targetSharedGid) continue;
             if (!entry.mlsGroupId) continue;
             const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
             if (!mlsGroup?.isInitialized || Number(mlsGroup.epoch) <= 0) continue;
@@ -64829,7 +64849,7 @@ var init_channel = __esm({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.13" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.15" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -65174,13 +65194,18 @@ var init_channel = __esm({
        * entry, then persist.
        */
       async _handleServerError(payload) {
-        if (payload?.detail !== "conversation deleted") return;
+        const detail = payload?.detail;
+        if (detail !== "conversation deleted" && detail !== "unknown group") return;
         const mlsGroupId = payload.group_id;
         if (!mlsGroupId) return;
         const groups = this._persisted?.mlsGroups;
         if (!groups) return;
         const gid = Object.keys(groups).find((k2) => groups[k2]?.mlsGroupId === mlsGroupId);
         if (!gid) return;
+        if (detail === "unknown group") {
+          await this._reconcileConversationGroups(gid, mlsGroupId);
+          return;
+        }
         try {
           await deleteMlsState(this.config.dataDir, mlsGroupId);
         } catch {
@@ -65193,6 +65218,70 @@ var init_channel = __esm({
         );
         this.emit("dm_group_pruned", { conversationGroupId: gid, mlsGroupId });
       }
+      /**
+       * Re-resolve the conversation→group map from the server (#719).
+       *
+       * `_persisted.conversationGroupIds` and `_persisted.groupId` are built ONCE,
+       * in `_activate()`, from the activation response. `_activate` runs at
+       * enrollment and never again, so when the owner deletes a conversation and a
+       * new one is created the agent keeps addressing the OLD group forever.
+       * Nothing reconciled it — not restart (the stale map is reloaded from disk),
+       * not reconnect, not the heartbeat.
+       *
+       * wren, 2026-07-31: `groupId` 53798dd2 had no `mls_groups` row while three
+       * ACTIVE conversations sat on 99faf707. Inbound worked, every reply was
+       * refused `unknown group` and dropped. Silent since 2026-07-02 — the #460
+       * fan-out was spraying all 12 known groups, so a live one always got hit.
+       *
+       * Best-effort and conservative, mirroring `_refreshRoomRoster`: on any
+       * failure the existing map is kept. The prune is NARROW — only the group the
+       * server named, and only once the server has positively reported an active
+       * conversation on some other group. Absence of data is never treated as
+       * evidence of deletion.
+       */
+      async _reconcileConversationGroups(staleGid, staleMlsGroupId) {
+        const jwt2 = this._deviceJwt ?? this._persisted?.deviceJwt;
+        if (!jwt2 || !this._persisted) return;
+        let rows;
+        try {
+          const res = await fetch(`${this.config.apiUrl}/api/v1/conversations`, {
+            headers: { Authorization: `Bearer ${jwt2}` }
+          });
+          if (!res.ok) return;
+          rows = await res.json();
+        } catch (err) {
+          console.warn("[SecureChannel] Conversation re-resolve failed:", err);
+          return;
+        }
+        if (!Array.isArray(rows)) return;
+        const mine = rows.filter(
+          (r2) => r2?.agent_device_id === this._deviceId && r2?.status === "active" && typeof r2?.group_id === "string" && typeof r2?.id === "string"
+        );
+        if (mine.length === 0) return;
+        const before = this._persisted.groupId;
+        this._sessionGroupIds = new Map(mine.map((r2) => [r2.id, r2.group_id]));
+        this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+        const primary = mine.find((r2) => r2.id === this._persisted.primaryConversationId) ?? mine[0];
+        this._persisted.groupId = primary.group_id;
+        this._persisted.primaryConversationId = primary.id;
+        const liveGroupIds = new Set(mine.map((r2) => r2.group_id));
+        if (!liveGroupIds.has(staleGid)) {
+          try {
+            await deleteMlsState(this.config.dataDir, staleMlsGroupId);
+          } catch {
+          }
+          this._mlsGroups.delete(`1to1-group:${staleGid}`);
+          delete this._persisted.mlsGroups?.[staleGid];
+          this.emit("dm_group_pruned", {
+            conversationGroupId: staleGid,
+            mlsGroupId: staleMlsGroupId
+          });
+        }
+        await this._persistState();
+        console.log(
+          `[SecureChannel] Re-resolved conversation groups after 'unknown group' ${staleMlsGroupId.slice(0, 8)}: primary group ${String(before).slice(0, 8)} \u2192 ${this._persisted.groupId.slice(0, 8)} (${mine.length} active conversation(s))`
+        );
+      }
       /**
        * Return info for all joined rooms.
        */
@@ -66459,13 +66548,12 @@ var init_channel = __esm({
             sessions,
             messageHistory: this._persisted.messageHistory ?? []
           };
-          if (conversations.length > 0) {
-            const firstConv = conversations[0];
-            if (firstConv.group_id) {
-              this._persisted.groupId = firstConv.group_id;
+          if (primary) {
+            if (primary.group_id) {
+              this._persisted.groupId = primary.group_id;
             }
-            if (firstConv.default_topic_id) {
-              this._persisted.defaultTopicId = firstConv.default_topic_id;
+            if (primary.default_topic_id) {
+              this._persisted.defaultTopicId = primary.default_topic_id;
             }
           }
           this._sessionGroupIds = /* @__PURE__ */ new Map();
@@ -66568,7 +66656,7 @@ var init_channel = __esm({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.15" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -66886,7 +66974,7 @@ var init_channel = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.15" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -68549,7 +68637,7 @@ ${messageText}`;
         if (!this._pendingKpBundles.some((b2) => idOf(b2) === id)) {
           this._pendingKpBundles.push(kp);
         }
-        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_TARGET) {
+        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_RETENTION) {
           this._pendingKpBundles.shift();
         }
       }
@@ -97171,7 +97259,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.13" : "0.0.0-dev";
+    VERSION = true ? "0.23.15" : "0.0.0-dev";
   }
 });
 await init_index();