@agentvault/agentvault 0.23.9 → 0.23.11

package/dist/index.js

@@ -64792,7 +64792,7 @@ var init_channel = __esm({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.9" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.11" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -64826,7 +64826,16 @@ var init_channel = __esm({
         this._ws.send(
           JSON.stringify({
             event: "worker_heartbeat",
-            data: { worker_capable: h2.workerCapable, armed_rooms: h2.armedRooms }
+            data: {
+              worker_capable: h2.workerCapable,
+              armed_rooms: h2.armedRooms,
+              // #20: OPTIONAL on the way in so an older bridge against a newer
+              // plugin still emits a shape the backend can read. `=== true` means
+              // absent/malformed becomes false — the fail-closed direction, and it
+              // never emits `undefined` (which would drop the key entirely).
+              host_trusted: h2.hostTrusted === true,
+              gates_effective: h2.gatesEffective === true
+            }
           })
         );
       }
@@ -65103,6 +65112,50 @@ var init_channel = __esm({
         );
         this.emit("rooms_reconciled", { pruned: stale });
       }
+      /**
+       * Handle an in-band `{event:"error"}` frame from the server.
+       *
+       * This is an APPLICATION-level error about one resource — it is NOT a
+       * transport fault, and must never be treated as one. When the error names a
+       * dead resource, the correct response is to PRUNE that resource; recycling
+       * the connection would just replay the same doomed write.
+       *
+       * `conversation deleted` (#460/#481) is the server refusing a write to a
+       * shared 1:1 MLS group whose conversations are all closed/deleted. It carries
+       * `group_id` for exactly this purpose. Without the prune, `_persisted.mlsGroups`
+       * is append-only and the 1:1 send path fans out to every entry, so the dead
+       * group takes a rejected write on every message for the life of the agent
+       * (loopita: group c1b1e11a, closed 2026-07-22, still bouncing 3 days later).
+       *
+       * Deliberately NARROW — it prunes only on this exact detail AND only when
+       * `group_id` matches a persisted shared 1:1 group. Unknown ids and other
+       * details prune nothing, so a server-side wording change or a room/A2A group
+       * can never cost us live MLS state. Safe because `closed`/`deleted` are
+       * terminal server-side, and a genuinely new group re-arrives via Welcome.
+       *
+       * Mirrors the #629 room prune: MLS state file, in-memory group, persisted
+       * entry, then persist.
+       */
+      async _handleServerError(payload) {
+        if (payload?.detail !== "conversation deleted") return;
+        const mlsGroupId = payload.group_id;
+        if (!mlsGroupId) return;
+        const groups = this._persisted?.mlsGroups;
+        if (!groups) return;
+        const gid = Object.keys(groups).find((k2) => groups[k2]?.mlsGroupId === mlsGroupId);
+        if (!gid) return;
+        try {
+          await deleteMlsState(this.config.dataDir, mlsGroupId);
+        } catch {
+        }
+        this._mlsGroups.delete(`1to1-group:${gid}`);
+        delete groups[gid];
+        await this._persistState();
+        console.log(
+          `[SecureChannel] Pruned dead shared 1:1 group ${gid.slice(0, 8)} (${mlsGroupId.slice(0, 8)}) \u2014 server reports its conversation deleted`
+        );
+        this.emit("dm_group_pruned", { conversationGroupId: gid, mlsGroupId });
+      }
       /**
        * Return info for all joined rooms.
        */
@@ -66478,7 +66531,7 @@ var init_channel = __esm({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.9" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.11" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -66796,7 +66849,7 @@ var init_channel = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.9" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.11" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -67106,6 +67159,7 @@ var init_channel = __esm({
             if (data.event === "error") {
               const detail = data.data?.detail || data.detail || "Unknown server error";
               console.error(`[SecureChannel] Server error: ${detail}`);
+              await this._handleServerError(data.data || data);
               this.emit("error", new Error(`Server: ${detail}`));
             }
             if (data.event === "a2a_message_mls") {
@@ -97010,7 +97064,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.9" : "0.0.0-dev";
+    VERSION = true ? "0.23.11" : "0.0.0-dev";
   }
 });
 await init_index();