@agentvault/agentvault 0.23.35 → 0.23.36

package/dist/index.js

@@ -63261,11 +63261,11 @@ var init_mls_kp_pool = __esm({
 
 // src/client-version.ts
 function ownIdentity() {
-  const v2 = true ? "0.23.35" : FALLBACK;
+  const v2 = true ? "0.23.36" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "0160bbb-dirty" : "";
+  const raw = true ? "56c615c-dirty" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -65476,7 +65476,7 @@ var init_channel = __esm({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.35" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.36" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67414,7 +67414,7 @@ var init_channel = __esm({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.35" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.36" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67738,7 +67738,7 @@ var init_channel = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.35" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.36" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69512,6 +69512,7 @@ ${baseText}`;
           return 0;
         }
         const snapshot = mlsGroup.exportState();
+        let parent2 = await this._readGroupHeadDigest(mlsGroupId);
         const { commits, welcome } = await mlsGroup.reAdmitMembers(targets.map((t2) => t2.keyPackage));
         let sentCommits = 0;
         for (const c2 of commits) {
@@ -69523,12 +69524,14 @@ ${baseText}`;
                 // The epoch this commit PRODUCED. After two commits the manager
                 // only knows the last one, which is why the result carries them.
                 epoch: Number(c2.epoch),
-                payload: Buffer.from(c2.commit).toString("hex")
+                payload: Buffer.from(c2.commit).toString("hex"),
+                ...parent2 ? { parent_digest: parent2 } : {}
               }
             },
             `${label} commit ${sentCommits + 1}/${commits.length}`
           );
           if (!ok) break;
+          parent2 = this._commitDigest(c2.commit);
           sentCommits++;
         }
         if (sentCommits === 0) {
@@ -69615,6 +69618,32 @@ ${baseText}`;
       _wsIsOpen() {
         return this._ws?.readyState === 1;
       }
+      /** SHA-256 hex of a commit's bytes — its identity on the server (#1175/#1177). */
+      _commitDigest(bytes) {
+        return createHash("sha256").update(bytes).digest("hex");
+      }
+      /**
+       * #1177: the digest of the commit at the server's head, or undefined.
+       *
+       * Undefined covers "no head yet", "older backend", AND "could not read" —
+       * deliberately the same value. The commit is sent either way: the server
+       * skips the parent check for an ABSENT field and refuses a MALFORMED one,
+       * so a read failure must degrade to "unchecked", never to "blocked" (a
+       * rescue that cannot run is the 2026-09-04 lockout) and never to `null`.
+       */
+      async _readGroupHeadDigest(groupId) {
+        try {
+          const res = await fetch(`${this.config.apiUrl}/api/v1/mls/groups/${groupId}`, {
+            headers: { Authorization: `Bearer ${this._deviceJwt}` }
+          });
+          if (!res.ok) return void 0;
+          const head = await res.json();
+          const d2 = head?.last_commit_digest;
+          return typeof d2 === "string" && /^[0-9a-f]{64}$/.test(d2) ? d2 : void 0;
+        } catch {
+          return void 0;
+        }
+      }
       /**
        * #1015: write one frame and report whether the socket took it.
        *
@@ -70511,6 +70540,7 @@ ${baseText}`;
                   const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
                   const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
                   console.log(`[SecureChannel] A2A addMembers for ${req.requesting_device_id.slice(0, 8)} group=${chState.mlsGroupId.slice(0, 8)} epoch=${mlsGroup.epoch}`);
+                  let parentDigest = await this._readGroupHeadDigest(chState.mlsGroupId);
                   let commit;
                   let welcome;
                   try {
@@ -70541,12 +70571,14 @@ ${baseText}`;
                                 group_id: chState.mlsGroupId,
                                 device_id: this._deviceId,
                                 commit: Buffer.from(removeResult.commit).toString("hex"),
-                                commit_epoch: Number(mlsGroup.epoch)
+                                commit_epoch: Number(mlsGroup.epoch),
+                                ...parentDigest ? { parent_digest: parentDigest } : {}
                               })
                             }
                           );
                           if (removeResp.ok) {
                             removeCommitPublished = true;
+                            parentDigest = this._commitDigest(removeResult.commit);
                           } else {
                             const detail = await removeResp.text().catch(() => "");
                             console.warn(`[SecureChannel] A2A remove-commit distribute failed (${removeResp.status}): ${detail}`);
@@ -70614,7 +70646,8 @@ ${baseText}`;
                           commit: commitHex,
                           commit_epoch: Number(mlsGroup.epoch),
                           welcomes: [{ target_device_id: req.requesting_device_id, payload: welcomeHex }],
-                          member_device_ids: updatedMembers
+                          member_device_ids: updatedMembers,
+                          ...parentDigest ? { parent_digest: parentDigest } : {}
                         })
                       }
                     );
@@ -70631,7 +70664,12 @@ ${baseText}`;
                     const a2aLabel = `A2A ${chId.slice(0, 8)}`;
                     const commitSent = await this._sendFrameConfirmed({
                       event: "mls_commit",
-                      data: { group_id: chState.mlsGroupId, epoch: Number(mlsGroup.epoch), payload: commitHex }
+                      data: {
+                        group_id: chState.mlsGroupId,
+                        epoch: Number(mlsGroup.epoch),
+                        payload: commitHex,
+                        ...parentDigest ? { parent_digest: parentDigest } : {}
+                      }
                     }, `${a2aLabel} commit`);
                     const welcomeSent = commitSent && await this._sendFrameConfirmed({
                       event: "mls_welcome",
@@ -98600,7 +98638,7 @@ var init_index = __esm({
     await init_skill_telemetry();
     await init_policy_enforcer();
     init_room_protocol();
-    VERSION = true ? "0.23.35" : "0.0.0-dev";
+    VERSION = true ? "0.23.36" : "0.0.0-dev";
   }
 });
 await init_index();