@agentvault/claude-bridge 0.7.11 → 0.7.13

package/dist/index.js

@@ -63854,6 +63854,35 @@ var init_mls_kp_pool = __esm2({
     await init_dist();
   }
 });
+function ownIdentity() {
+  const v22 = true ? "0.23.22" : FALLBACK;
+  return `${PACKAGE}@${v22}`;
+}
+function buildClientVersion(override) {
+  try {
+    const candidate = (override ?? "").trim();
+    if (candidate) {
+      const cleaned = candidate.replace(DISALLOWED, "").slice(0, MAX_LEN);
+      if (cleaned && !cleaned.includes("..")) return cleaned;
+    }
+    return ownIdentity().replace(DISALLOWED, "").slice(0, MAX_LEN);
+  } catch {
+    return FALLBACK;
+  }
+}
+var PACKAGE;
+var FALLBACK;
+var MAX_LEN;
+var DISALLOWED;
+var init_client_version = __esm2({
+  "src/client-version.ts"() {
+    "use strict";
+    PACKAGE = "@agentvault/agentvault";
+    FALLBACK = "0.0.0-dev";
+    MAX_LEN = 64;
+    DISALLOWED = /[^A-Za-z0-9._@/+-]/g;
+  }
+});
 var CredentialStore;
 var init_credential_store = __esm2({
   "src/credential-store.ts"() {
@@ -64743,6 +64772,7 @@ var init_channel = __esm2({
     await init_dist();
     init_mls_state();
     await init_mls_kp_pool();
+    init_client_version();
     init_credential_store();
     await init_crypto_helpers();
     await init_state();
@@ -64828,6 +64858,17 @@ var init_channel = __esm2({
       _pendingPollTimer = null;
       _syncMessageIds = null;
       _deliveryHeartbeat = null;
+      /**
+       * How often to re-check the KeyPackage pool against the server (#826).
+       *
+       * KeyPackages expire after 7 days and, before this, only a reconnect
+       * republished them — so an agent that simply stayed up ran to zero usable
+       * and silently stopped accepting new MLS 1:1 conversations while looking
+       * perfectly healthy. 6h gives ~28 attempts inside one lifetime, so a run of
+       * transient failures cannot age the pool out. Cost is one GET per interval.
+       */
+      static _KP_REPLENISH_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+      _kpReplenishTimer = null;
       _a2aReconcileTimer = null;
       _deliveryPulling = false;
       _drDeliveryPulling = false;
@@ -65792,7 +65833,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.19" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.22" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67661,7 +67702,7 @@ var init_channel = __esm2({
           return;
         }
         const wsUrl = this.config.apiUrl.replace(/^http/, "ws");
-        const url22 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}`;
+        const url22 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}&client_version=${encodeURIComponent(buildClientVersion(this.config.clientVersion))}`;
         const ws = new WebSocket2(url22);
         this._ws = ws;
         ws.on("open", async () => {
@@ -67702,7 +67743,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.19" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.22" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67711,6 +67752,7 @@ var init_channel = __esm2({
               console.warn("[SecureChannel] A2A channel sync on connect failed:", err);
             });
             await this._ensureKpPoolPublished();
+            this._startKpReplenishTimer();
             this._pullDeliveryQueue().catch((err) => {
               console.warn("[SecureChannel] Initial delivery pull failed:", err);
             });
@@ -68025,7 +68067,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.19" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.22" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -68368,6 +68410,7 @@ var init_channel = __esm2({
             this._deliveryHeartbeat = null;
           }
           this._stopA2aReconcileTimer();
+          this._stopKpReplenishTimer();
           if (this._stopped) return;
           this._setState("disconnected");
           this._scheduleReconnect();
@@ -69761,6 +69804,106 @@ ${messageText}`;
           this._kpPoolFilling = false;
         }
       }
+      /** Start the periodic KeyPackage replenish (#826). Idempotent. */
+      _startKpReplenishTimer() {
+        this._stopKpReplenishTimer();
+        this._kpReplenishTimer = setInterval(() => {
+          void this._replenishKpPoolFromServer();
+        }, _SecureChannel._KP_REPLENISH_INTERVAL_MS);
+      }
+      _stopKpReplenishTimer() {
+        if (this._kpReplenishTimer) {
+          clearInterval(this._kpReplenishTimer);
+          this._kpReplenishTimer = null;
+        }
+      }
+      /**
+       * The server's EXPIRY-AWARE usable KeyPackage count, or null when unknown.
+       *
+       * `count_unconsumed` filters `expires_at > utcnow()`, which is the only count
+       * that reflects what a peer can actually fetch. Returns null (not 0) on any
+       * failure so callers can tell "server says empty" from "we could not ask" —
+       * guessing 0 here would publish a fresh pool on every transient 503.
+       */
+      async _fetchServerKpCount() {
+        try {
+          const horizonSeconds = Math.floor(
+            _SecureChannel._KP_REPLENISH_INTERVAL_MS * 2 / 1e3
+          );
+          const res = await fetch(
+            `${this.config.apiUrl}/api/v1/mls/key-packages/count?device_id=${this._deviceId}&renew_within_seconds=${horizonSeconds}`,
+            { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+          );
+          if (!res.ok) return null;
+          const body = await res.json();
+          const n22 = body?.count;
+          return typeof n22 === "number" && Number.isFinite(n22) ? n22 : null;
+        } catch {
+          return null;
+        }
+      }
+      /**
+       * Top the pool up against the SERVER's count (#826).
+       *
+       * ⚠️ DO NOT replace this with a periodic call to `_ensureKpPoolPublished()`.
+       * That function early-returns on `_pendingKpBundles.length >= _KP_POOL_TARGET`,
+       * and that array holds PRIVATE bundles which never expire locally — so on an
+       * agent that has been connected longer than the KeyPackage lifetime it is
+       * still full while the server has zero usable. Measured on prod 2026-08-09:
+       * cortina and eclaude were online and green with 10 unconsumed / 0 usable,
+       * unable to accept any new MLS 1:1. A timer over the local guard would have
+       * run forever and changed nothing.
+       *
+       * Publishes only the shortfall, and never throws — this runs on a timer and
+       * must not be able to take the channel down.
+       */
+      async _replenishKpPoolFromServer() {
+        try {
+          if (this._kpPoolFilling) return;
+          const usable = await this._fetchServerKpCount();
+          if (usable === null) return;
+          const shortfall = _SecureChannel._KP_POOL_TARGET - usable;
+          if (shortfall <= 0) return;
+          this._kpPoolFilling = true;
+          try {
+            const identity = new TextEncoder().encode(this._deviceId);
+            let published = 0;
+            for (let i2 = 0; i2 < shortfall; i2++) {
+              const mlsMgr = new MLSGroupManager();
+              const kp = await mlsMgr.generateKeyPackage(identity);
+              const kpHex = Buffer.from(
+                MLSGroupManager.serializeKeyPackage(kp.publicPackage)
+              ).toString("hex");
+              const res = await fetch(`${this.config.apiUrl}/api/v1/mls/key-packages`, {
+                method: "POST",
+                headers: {
+                  Authorization: `Bearer ${this._deviceJwt}`,
+                  "Content-Type": "application/json"
+                },
+                body: JSON.stringify({ key_package: kpHex })
+              });
+              if (!res.ok) {
+                console.warn(
+                  `[SecureChannel] KeyPackage replenish rejected (status ${res.status}) after ${published}/${shortfall}`
+                );
+                break;
+              }
+              this._recordPublishedKp(kp);
+              if (!this._mlsKeyPackage) this._mlsKeyPackage = kp;
+              published++;
+            }
+            if (published > 0) {
+              console.log(
+                `[SecureChannel] MLS KeyPackage pool replenished (${published} new; server had ${usable}/${_SecureChannel._KP_POOL_TARGET} usable)`
+              );
+            }
+          } finally {
+            this._kpPoolFilling = false;
+          }
+        } catch (err) {
+          console.warn("[SecureChannel] KeyPackage replenish failed:", err);
+        }
+      }
       async _handleMlsWelcome(data) {
         const groupId = data.group_id;
         const conversationId = data.conversation_id;
@@ -97914,7 +98057,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.19" : "0.0.0-dev";
+    VERSION = true ? "0.23.22" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -134268,7 +134411,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.7.11" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.7.13" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {
@@ -134290,7 +134433,17 @@ async function main() {
     dataDir: cfg.dataDir,
     apiUrl: cfg.apiUrl,
     agentName: cfg.agentName,
-    platform: "node"
+    platform: "node",
+    // #836: identify the BRIDGE, not the plugin it vendors. Two reasons this
+    // must be explicit. Operators install and upgrade the bridge, so the bridge
+    // build is the one they can act on — reporting the inner plugin version is
+    // the exact confusion #836 was opened about (a bridge on 0.3.2 read as
+    // "same bug, didn't restart"). And because this build BUNDLES the plugin,
+    // the plugin's own `__AV_VERSION__` resolves to OUR package.json here, so
+    // its default would render "@agentvault/agentvault@0.7.x" — the wrong
+    // package name attached to the bridge's version number, which is worse
+    // than either alone.
+    clientVersion: `@agentvault/claude-bridge@${true ? "0.7.13" : "dev"}`
   });
   const agentSystemPrompt = cfg.systemPrompt ?? `You are ${cfg.agentName}, an AI agent on AgentVault. You talk with your owner in 1:1 direct messages and collaborate with other agents in shared rooms. That is your identity \u2014 introduce yourself by that name and do not claim to be any other agent. To speak, call the say tool. In a 1:1 with your owner, reply to what they say. In a room you see every message \u2014 call say only when you have something worth adding, and otherwise stay silent. Keep messages concise.`;
   const deviceJwt = () => {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.11",
+  "version": "0.7.13",
   "type": "module",
-  "description": "AgentVault Claude Bridge \u2014 daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
+  "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {