@agentvault/claude-bridge 0.6.1 → 0.6.3

package/dist/index.js

@@ -65555,7 +65555,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.8" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.9" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -65796,10 +65796,76 @@ var init_channel = __esm2({
           this._sessions.delete(convId);
           delete this._persisted.sessions[convId];
         }
+        if (room.mlsGroupId) {
+          try {
+            await deleteMlsState(this.config.dataDir, room.mlsGroupId);
+          } catch {
+          }
+        }
+        this._mlsGroups.delete(roomId);
         delete this._persisted.rooms[roomId];
         await this._persistState();
         this.emit("room_left", { roomId });
       }
+      /**
+       * #629 recurrence fix — reconcile local room state against the server on
+       * connect.
+       *
+       * On disband the server marks each member ``"left"`` and sets
+       * ``room.status="disbanded"`` but sends NO WS event to the agent's bridge, so a
+       * disbanded/left room lingers in local state and replays dead MLS commit
+       * history on every reconnect ("Desired gen in the past" / "invalid ghash tag").
+       * ``GET /rooms`` returns ONLY active rooms the caller is a member of, so any
+       * locally-persisted room ABSENT from it is terminal — prune its MLS state
+       * (file + in-memory group, keyed by roomId), its sessions, and the room entry.
+       *
+       * Fail-safe: a failed fetch / non-ok / non-array response prunes NOTHING, so a
+       * transient error can never over-prune a live room.
+       */
+      async _reconcileRoomsWithServer() {
+        const local = this._persisted?.rooms;
+        if (!local || Object.keys(local).length === 0) return;
+        if (!this._deviceJwt) return;
+        let activeIds;
+        try {
+          const res = await fetch(`${this.config.apiUrl}/api/v1/rooms`, {
+            headers: { Authorization: `Bearer ${this._deviceJwt}` }
+          });
+          if (!res.ok) return;
+          const list = await res.json();
+          if (!Array.isArray(list)) return;
+          activeIds = new Set(
+            list.map((r22) => r22?.id).filter((id) => !!id)
+          );
+        } catch (err) {
+          console.warn(
+            `[SecureChannel] room reconcile skipped (fetch failed, pruning nothing): ${err instanceof Error ? err.message : String(err)}`
+          );
+          return;
+        }
+        const stale = Object.keys(local).filter((rid) => !activeIds.has(rid));
+        if (stale.length === 0) return;
+        for (const rid of stale) {
+          const room = local[rid];
+          if (room?.mlsGroupId) {
+            try {
+              await deleteMlsState(this.config.dataDir, room.mlsGroupId);
+            } catch {
+            }
+          }
+          this._mlsGroups.delete(rid);
+          for (const convId of room?.conversationIds ?? []) {
+            this._sessions.delete(convId);
+            if (this._persisted?.sessions) delete this._persisted.sessions[convId];
+          }
+          delete local[rid];
+        }
+        await this._persistState();
+        console.log(
+          `[SecureChannel] Room reconcile: pruned ${stale.length} disbanded/left room(s) from local state (${stale.map((r22) => r22.slice(0, 8)).join(", ")})`
+        );
+        this.emit("rooms_reconciled", { pruned: stale });
+      }
       /**
        * Return info for all joined rooms.
        */
@@ -67150,6 +67216,9 @@ var init_channel = __esm2({
             await this._pullDrDeliveryQueue();
             await this._flushOutboundQueue();
             this._setState("ready");
+            void this._reconcileRoomsWithServer().catch(
+              (err) => console.warn(`[SecureChannel] room reconcile failed (ignored): ${err instanceof Error ? err.message : String(err)}`)
+            );
             if (this.config.enableScanning) {
               this._scanEngine = new ScanEngine();
               await this._fetchScanRules();
@@ -67172,7 +67241,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.8" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.9" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67490,7 +67559,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.8" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.9" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -97268,7 +97337,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.8" : "0.0.0-dev";
+    VERSION = true ? "0.23.9" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -132545,6 +132614,12 @@ var PersistentClaudeSession = class {
   currentReplyExpected = false;
   saidThisTurn = false;
   turnText = "";
+  /** #630 drop-probe: did a `result` event arrive for the CURRENT turn? Reset per
+   *  turn in input(), set in the result block. Distinguishes a turn that never
+   *  reached a result boundary (the silent-drop prime suspect) from a healthy
+   *  #416 fallback delivery (which delivers via `void reply(...)` WITHOUT setting
+   *  saidThisTurn, so !saidThisTurn alone would false-flag it). */
+  sawResultThisTurn = false;
   /** In-process room MCP server — hoisted so buildSdkOptions can reference it. */
   roomServer;
   /** AbortController for the in-flight query(); abort() triggers it (queue timeout). */
@@ -132613,6 +132688,7 @@ var PersistentClaudeSession = class {
       this.currentArmedGetter = item.armed ?? (() => false);
       this.saidThisTurn = false;
       this.turnText = "";
+      this.sawResultThisTurn = false;
       yield item.msg;
     }
   }
@@ -132732,20 +132808,35 @@ var PersistentClaudeSession = class {
       prompt: this.input(),
       options: sdkOptions
     });
-    for await (const m6 of q10) {
-      if (m6.type === "assistant") {
-        const blocks = m6.message?.content ?? [];
-        const text = blocks.filter((b5) => b5.type === "text").map((b5) => b5.text ?? "").join("");
-        if (text.trim()) {
-          this.turnText += text;
-          this.opts.onObserve?.(text);
-        }
-      } else if (m6.type === "result") {
-        const reply = this.activeReply;
-        if (this.currentReplyExpected && !this.saidThisTurn && this.turnText.trim() && reply) {
-          void reply(this.turnText);
+    try {
+      for await (const m6 of q10) {
+        if (m6.type === "assistant") {
+          const blocks = m6.message?.content ?? [];
+          const text = blocks.filter((b5) => b5.type === "text").map((b5) => b5.text ?? "").join("");
+          if (text.trim()) {
+            this.turnText += text;
+            this.opts.onObserve?.(text);
+          }
+        } else if (m6.type === "result") {
+          this.sawResultThisTurn = true;
+          const reply = this.activeReply;
+          if (this.currentReplyExpected && !this.saidThisTurn && this.turnText.trim()) {
+            if (reply) {
+              void reply(this.turnText);
+            } else {
+              console.error(
+                `[drop-probe] BLOCKED at result: composed ${this.turnText.length} chars, reply expected but activeReply unset \u2014 reply DROPPED`
+              );
+            }
+          }
         }
       }
+    } finally {
+      if (this.currentReplyExpected && !this.saidThisTurn && !this.sawResultThisTurn && this.turnText.trim()) {
+        console.error(
+          `[drop-probe] STREAM ENDED before result: composed ${this.turnText.length} chars, reply expected, said=false \u2014 reply DROPPED (no result event)`
+        );
+      }
     }
   }
 };
@@ -133281,7 +133372,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  console.error(`[bridge] version: ${true ? "0.6.1" : "dev"}`);
+  console.error(`[bridge] version: ${true ? "0.6.3" : "dev"}`);
   console.error(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   console.error(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {

package/dist/session.d.ts

@@ -137,6 +137,12 @@ export declare class PersistentClaudeSession {
     private currentReplyExpected;
     private saidThisTurn;
     private turnText;
+    /** #630 drop-probe: did a `result` event arrive for the CURRENT turn? Reset per
+     *  turn in input(), set in the result block. Distinguishes a turn that never
+     *  reached a result boundary (the silent-drop prime suspect) from a healthy
+     *  #416 fallback delivery (which delivers via `void reply(...)` WITHOUT setting
+     *  saidThisTurn, so !saidThisTurn alone would false-flag it). */
+    private sawResultThisTurn;
     /** In-process room MCP server — hoisted so buildSdkOptions can reference it. */
     private roomServer;
     /** AbortController for the in-flight query(); abort() triggers it (queue timeout). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",