@agentvault/agentvault 0.23.19 → 0.23.21

package/dist/index.js

@@ -63011,6 +63011,35 @@ async function deleteMlsState(dataDir, groupId) {
   } catch {
   }
 }
+async function quarantineOrphanedMlsState(dataDir, isStillMember, opts = {}) {
+  const max = opts.max ?? 20;
+  const quarantined = [];
+  let names;
+  try {
+    names = await readdir(dataDir);
+  } catch {
+    return quarantined;
+  }
+  for (const name of names) {
+    if (quarantined.length >= max) break;
+    const m2 = /^mls-(?!kp-pending-)([A-Za-z0-9_-]+)\.json$/.exec(name);
+    if (!m2) continue;
+    const groupId = m2[1];
+    let member;
+    try {
+      member = await isStillMember(groupId);
+    } catch {
+      continue;
+    }
+    if (member === null || member === true) continue;
+    try {
+      await rename(join(dataDir, name), join(dataDir, `${name}.orphaned`));
+      quarantined.push(groupId);
+    } catch {
+    }
+  }
+  return quarantined;
+}
 var SYNC_LOCK_STALE_MS, pendingKpPath;
 var init_mls_state = __esm({
   "src/mls-state.ts"() {
@@ -63355,6 +63384,45 @@ var init_transport2 = __esm({
   }
 });
 
+// src/a2a-log-gate.ts
+function a2aChannelSignature(channels) {
+  return JSON.stringify(
+    channels.map((c2) => ({
+      id: c2.channelId?.slice(0, 8),
+      status: c2.status,
+      participants: c2.participant_count
+    })).sort((a2, b2) => (a2.id ?? "").localeCompare(b2.id ?? ""))
+  );
+}
+var A2ALogGate;
+var init_a2a_log_gate = __esm({
+  "src/a2a-log-gate.ts"() {
+    "use strict";
+    A2ALogGate = class {
+      last = null;
+      /** True when this state differs from the last reported one. Records it. */
+      shouldReport(channels) {
+        const sig = a2aChannelSignature(channels);
+        if (sig === this.last) return false;
+        this.last = sig;
+        return true;
+      }
+    };
+  }
+});
+
+// src/mls-membership-probe.ts
+function mlsMembershipFromStatus(status) {
+  if (status === 200) return true;
+  if (status === 403 || status === 404) return false;
+  return null;
+}
+var init_mls_membership_probe = __esm({
+  "src/mls-membership-probe.ts"() {
+    "use strict";
+  }
+});
+
 // src/openclaw-compat.ts
 var openclaw_compat_exports = {};
 __export(openclaw_compat_exports, {
@@ -63917,6 +63985,8 @@ var init_channel = __esm({
     await init_crypto_helpers();
     await init_state();
     init_transport2();
+    init_a2a_log_gate();
+    init_mls_membership_probe();
     ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
       "message",
       "text",
@@ -63982,6 +64052,11 @@ var init_channel = __esm({
       _heartbeatTimer = null;
       _heartbeatCallback = null;
       _heartbeatIntervalSeconds = 0;
+      /** #798: report the A2A channel set only when it CHANGES. This line polls
+       *  every 30s and produced 90.2% of bridge.log (90,841/100,702 lines) and a
+       *  27.9MB gateway.log on wren, every one reading `channels=0`. Not deleted —
+       *  #794's A2A watch needs the transitions. */
+      _a2aLogGate = new A2ALogGate();
       _wakeDetectorTimer = null;
       _lastWakeTick = Date.now();
       _trustToken = null;
@@ -63991,6 +64066,17 @@ var init_channel = __esm({
       _pendingPollTimer = null;
       _syncMessageIds = null;
       _deliveryHeartbeat = null;
+      /**
+       * How often to re-check the KeyPackage pool against the server (#826).
+       *
+       * KeyPackages expire after 7 days and, before this, only a reconnect
+       * republished them — so an agent that simply stayed up ran to zero usable
+       * and silently stopped accepting new MLS 1:1 conversations while looking
+       * perfectly healthy. 6h gives ~28 attempts inside one lifetime, so a run of
+       * transient failures cannot age the pool out. Cost is one GET per interval.
+       */
+      static _KP_REPLENISH_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+      _kpReplenishTimer = null;
       _a2aReconcileTimer = null;
       _deliveryPulling = false;
       _drDeliveryPulling = false;
@@ -64955,7 +65041,7 @@ var init_channel = __esm({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.19" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.21" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -65275,6 +65361,47 @@ var init_channel = __esm({
         );
         this.emit("rooms_reconciled", { pruned: stale });
       }
+      /**
+       * #629 — quarantine MLS state for groups this device is no longer in.
+       *
+       * `_reconcileRoomsWithServer` above covers ROOMS: anything absent from
+       * `GET /rooms` is pruned. It cannot see a group that was never a room — a 1:1
+       * conversation group or an A2A channel group — so that state lingered with
+       * nothing to reconcile it. Measured on loopita 2026-08-08: one group-state
+       * file whose group had no server-side row at all.
+       *
+       * `quarantineOrphanedMlsState` was written for exactly this and shipped with
+       * 11 passing tests, but nothing ever called it. This is that call site.
+       *
+       * Runs AFTER the room reconcile so rooms are already gone and this only sees
+       * genuine non-room orphans.
+       *
+       * Quarantine RENAMES to `.orphaned` rather than deleting: if the verdict is
+       * ever wrong the state is recoverable by hand, which deletion would not be.
+       */
+      async _quarantineOrphanedMlsGroups() {
+        if (!this._deviceJwt) return;
+        const quarantined = await quarantineOrphanedMlsState(
+          this.config.dataDir,
+          async (groupId) => {
+            try {
+              const res = await fetch(
+                `${this.config.apiUrl}/api/v1/mls/groups/${encodeURIComponent(groupId)}`,
+                { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+              );
+              return mlsMembershipFromStatus(res.status);
+            } catch {
+              return null;
+            }
+          }
+        );
+        if (quarantined.length > 0) {
+          console.log(
+            `[SecureChannel] Quarantined ${quarantined.length} orphaned MLS group state file(s): ` + quarantined.map((g2) => g2.slice(0, 8)).join(", ")
+          );
+          this.emit("mls_state_quarantined", { groupIds: quarantined });
+        }
+      }
       /**
        * Handle an in-band `{event:"error"}` frame from the server.
        *
@@ -66435,7 +66562,9 @@ var init_channel = __esm({
           }
           const myHub = this._persisted.hubAddress || "";
           const myHubId = this._persisted.hubId || "";
-          console.log(`[listA2AChannels] myHub=${myHub}, channels=${channels.length}, raw=${JSON.stringify(channels.map((c2) => ({ id: c2.channelId?.slice(0, 8), status: c2.status, participants: c2.participant_count })))}`);
+          if (this._a2aLogGate.shouldReport(channels)) {
+            console.log(`[listA2AChannels] myHub=${myHub}, channels=${channels.length}, raw=${JSON.stringify(channels.map((c2) => ({ id: c2.channelId?.slice(0, 8), status: c2.status, participants: c2.participant_count })))}`);
+          }
           for (const ch of channels) {
             if (ch.status === "active" || ch.status === "approved") {
               const myParticipant = ch.participants?.find(
@@ -66797,6 +66926,8 @@ var init_channel = __esm({
             this._setState("ready");
             void this._reconcileRoomsWithServer().catch(
               (err) => console.warn(`[SecureChannel] room reconcile failed (ignored): ${err instanceof Error ? err.message : String(err)}`)
+            ).then(() => this._quarantineOrphanedMlsGroups()).catch(
+              (err) => console.warn(`[SecureChannel] MLS orphan quarantine failed (ignored): ${err instanceof Error ? err.message : String(err)}`)
             );
             if (this.config.enableScanning) {
               this._scanEngine = new ScanEngine();
@@ -66820,7 +66951,7 @@ var init_channel = __esm({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.19" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.21" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -66829,6 +66960,7 @@ var init_channel = __esm({
               console.warn("[SecureChannel] A2A channel sync on connect failed:", err);
             });
             await this._ensureKpPoolPublished();
+            this._startKpReplenishTimer();
             this._pullDeliveryQueue().catch((err) => {
               console.warn("[SecureChannel] Initial delivery pull failed:", err);
             });
@@ -67143,7 +67275,7 @@ var init_channel = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.19" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.21" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -67486,6 +67618,7 @@ var init_channel = __esm({
             this._deliveryHeartbeat = null;
           }
           this._stopA2aReconcileTimer();
+          this._stopKpReplenishTimer();
           if (this._stopped) return;
           this._setState("disconnected");
           this._scheduleReconnect();
@@ -68879,6 +69012,103 @@ ${messageText}`;
           this._kpPoolFilling = false;
         }
       }
+      /** Start the periodic KeyPackage replenish (#826). Idempotent. */
+      _startKpReplenishTimer() {
+        this._stopKpReplenishTimer();
+        this._kpReplenishTimer = setInterval(() => {
+          void this._replenishKpPoolFromServer();
+        }, _SecureChannel._KP_REPLENISH_INTERVAL_MS);
+      }
+      _stopKpReplenishTimer() {
+        if (this._kpReplenishTimer) {
+          clearInterval(this._kpReplenishTimer);
+          this._kpReplenishTimer = null;
+        }
+      }
+      /**
+       * The server's EXPIRY-AWARE usable KeyPackage count, or null when unknown.
+       *
+       * `count_unconsumed` filters `expires_at > utcnow()`, which is the only count
+       * that reflects what a peer can actually fetch. Returns null (not 0) on any
+       * failure so callers can tell "server says empty" from "we could not ask" —
+       * guessing 0 here would publish a fresh pool on every transient 503.
+       */
+      async _fetchServerKpCount() {
+        try {
+          const res = await fetch(
+            `${this.config.apiUrl}/api/v1/mls/key-packages/count?device_id=${this._deviceId}`,
+            { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+          );
+          if (!res.ok) return null;
+          const body = await res.json();
+          const n2 = body?.count;
+          return typeof n2 === "number" && Number.isFinite(n2) ? n2 : null;
+        } catch {
+          return null;
+        }
+      }
+      /**
+       * Top the pool up against the SERVER's count (#826).
+       *
+       * ⚠️ DO NOT replace this with a periodic call to `_ensureKpPoolPublished()`.
+       * That function early-returns on `_pendingKpBundles.length >= _KP_POOL_TARGET`,
+       * and that array holds PRIVATE bundles which never expire locally — so on an
+       * agent that has been connected longer than the KeyPackage lifetime it is
+       * still full while the server has zero usable. Measured on prod 2026-08-09:
+       * cortina and eclaude were online and green with 10 unconsumed / 0 usable,
+       * unable to accept any new MLS 1:1. A timer over the local guard would have
+       * run forever and changed nothing.
+       *
+       * Publishes only the shortfall, and never throws — this runs on a timer and
+       * must not be able to take the channel down.
+       */
+      async _replenishKpPoolFromServer() {
+        try {
+          if (this._kpPoolFilling) return;
+          const usable = await this._fetchServerKpCount();
+          if (usable === null) return;
+          const shortfall = _SecureChannel._KP_POOL_TARGET - usable;
+          if (shortfall <= 0) return;
+          this._kpPoolFilling = true;
+          try {
+            const identity = new TextEncoder().encode(this._deviceId);
+            let published = 0;
+            for (let i2 = 0; i2 < shortfall; i2++) {
+              const mlsMgr = new MLSGroupManager();
+              const kp = await mlsMgr.generateKeyPackage(identity);
+              const kpHex = Buffer.from(
+                MLSGroupManager.serializeKeyPackage(kp.publicPackage)
+              ).toString("hex");
+              const res = await fetch(`${this.config.apiUrl}/api/v1/mls/key-packages`, {
+                method: "POST",
+                headers: {
+                  Authorization: `Bearer ${this._deviceJwt}`,
+                  "Content-Type": "application/json"
+                },
+                body: JSON.stringify({ key_package: kpHex })
+              });
+              if (!res.ok) {
+                console.warn(
+                  `[SecureChannel] KeyPackage replenish rejected (status ${res.status}) after ${published}/${shortfall}`
+                );
+                break;
+              }
+              this._recordPublishedKp(kp);
+              if (!this._mlsKeyPackage) this._mlsKeyPackage = kp;
+              published++;
+            }
+            if (published > 0) {
+              console.log(
+                `[SecureChannel] MLS KeyPackage pool replenished (${published} new; server had ${usable}/${_SecureChannel._KP_POOL_TARGET} usable)`
+              );
+            }
+          } finally {
+            this._kpPoolFilling = false;
+          }
+        } catch (err) {
+          console.warn("[SecureChannel] KeyPackage replenish failed:", err);
+        }
+      }
       async _handleMlsWelcome(data) {
         const groupId = data.group_id;
         const conversationId = data.conversation_id;
@@ -97472,7 +97702,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.19" : "0.0.0-dev";
+    VERSION = true ? "0.23.21" : "0.0.0-dev";
   }
 });
 await init_index();