@agentvault/claude-bridge 0.7.12 → 0.7.14

package/dist/index.js

@@ -267,6 +267,11 @@ var init_launchd = __esm({
           this.deps.exec("sleep", ["0.25"]);
         }
       }
+      /** #837: restart in place. Same kickstart install ends with, WITHOUT
+       *  rewriting the plist — so env baked at the original install survives. */
+      restart(label) {
+        this.deps.exec("launchctl", ["kickstart", "-k", `${this.domain()}/${label}`]);
+      }
       uninstall(label) {
         this.deps.exec("launchctl", ["bootout", `${this.domain()}/${label}`]);
         const path2 = this.plistPath(label);
@@ -331,6 +336,11 @@ var init_systemd = __esm({
         this.deps.exec("systemctl", ["--user", "enable", `${spec.label}.service`]);
         this.deps.exec("systemctl", ["--user", "restart", `${spec.label}.service`]);
       }
+      /** #837: restart in place, without daemon-reload or rewriting the unit —
+       *  so env written at the original install survives. */
+      restart(label) {
+        this.deps.exec("systemctl", ["--user", "restart", `${label}.service`]);
+      }
       uninstall(label) {
         this.deps.exec("systemctl", ["--user", "disable", "--now", `${label}.service`]);
         this.deps.exec("loginctl", ["disable-linger", this.deps.user]);
@@ -392,6 +402,16 @@ __export(subcommand_exports, {
 function labelFor(env) {
   return `dev.agentvault.bridge-${slugify2(env.AV_AGENT_NAME ?? "claude")}`;
 }
+function legacyLabelFor(env) {
+  return `com.agentvault.claude-bridge.${slugify2(env.AV_AGENT_NAME ?? "claude")}`;
+}
+function resolveLabel(backend, env) {
+  const current = labelFor(env);
+  if (backend.status(current).loaded) return current;
+  const legacy = legacyLabelFor(env);
+  if (backend.status(legacy).loaded) return legacy;
+  return current;
+}
 function maybeRunServiceSubcommand(argv, env, deps) {
   const cmd = argv[2];
   if (!cmd || !SERVICE_CMDS.has(cmd)) return false;
@@ -418,15 +438,19 @@ function maybeRunServiceSubcommand(argv, env, deps) {
       log(`installed service ${spec.label} \u2014 logs: ${spec.logOut}`);
       log(`check it with: agentvault-claude-bridge status`);
     } else if (cmd === "uninstall") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       backend.uninstall(label);
       log(`uninstalled service ${label}`);
+    } else if (cmd === "restart") {
+      const label = resolveLabel(backend, env);
+      backend.restart(label);
+      log(`restarted service ${label}`);
     } else if (cmd === "status") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       const st = backend.status(label);
       log(`${label}: ${st.loaded ? "loaded" : "not loaded"}`);
     } else if (cmd === "logs") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       log(`logs for ${label} are at <dataDir>/logs/bridge.log (tail -f it)`);
     }
   } catch (e7) {
@@ -442,7 +466,7 @@ var init_subcommand = __esm({
     init_config();
     init_spec();
     init_backend();
-    SERVICE_CMDS = /* @__PURE__ */ new Set(["install", "uninstall", "status", "logs"]);
+    SERVICE_CMDS = /* @__PURE__ */ new Set(["install", "uninstall", "restart", "status", "logs"]);
   }
 });
 
@@ -63854,6 +63878,35 @@ var init_mls_kp_pool = __esm2({
     await init_dist();
   }
 });
+function ownIdentity() {
+  const v22 = true ? "0.23.22" : FALLBACK;
+  return `${PACKAGE}@${v22}`;
+}
+function buildClientVersion(override) {
+  try {
+    const candidate = (override ?? "").trim();
+    if (candidate) {
+      const cleaned = candidate.replace(DISALLOWED, "").slice(0, MAX_LEN);
+      if (cleaned && !cleaned.includes("..")) return cleaned;
+    }
+    return ownIdentity().replace(DISALLOWED, "").slice(0, MAX_LEN);
+  } catch {
+    return FALLBACK;
+  }
+}
+var PACKAGE;
+var FALLBACK;
+var MAX_LEN;
+var DISALLOWED;
+var init_client_version = __esm2({
+  "src/client-version.ts"() {
+    "use strict";
+    PACKAGE = "@agentvault/agentvault";
+    FALLBACK = "0.0.0-dev";
+    MAX_LEN = 64;
+    DISALLOWED = /[^A-Za-z0-9._@/+-]/g;
+  }
+});
 var CredentialStore;
 var init_credential_store = __esm2({
   "src/credential-store.ts"() {
@@ -64743,6 +64796,7 @@ var init_channel = __esm2({
     await init_dist();
     init_mls_state();
     await init_mls_kp_pool();
+    init_client_version();
     init_credential_store();
     await init_crypto_helpers();
     await init_state();
@@ -65803,7 +65857,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.21" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.22" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67672,7 +67726,7 @@ var init_channel = __esm2({
           return;
         }
         const wsUrl = this.config.apiUrl.replace(/^http/, "ws");
-        const url22 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}`;
+        const url22 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}&client_version=${encodeURIComponent(buildClientVersion(this.config.clientVersion))}`;
         const ws = new WebSocket2(url22);
         this._ws = ws;
         ws.on("open", async () => {
@@ -67713,7 +67767,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.21" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.22" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -68037,7 +68091,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.21" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.22" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69797,8 +69851,11 @@ ${messageText}`;
        */
       async _fetchServerKpCount() {
         try {
+          const horizonSeconds = Math.floor(
+            _SecureChannel._KP_REPLENISH_INTERVAL_MS * 2 / 1e3
+          );
           const res = await fetch(
-            `${this.config.apiUrl}/api/v1/mls/key-packages/count?device_id=${this._deviceId}`,
+            `${this.config.apiUrl}/api/v1/mls/key-packages/count?device_id=${this._deviceId}&renew_within_seconds=${horizonSeconds}`,
             { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
           );
           if (!res.ok) return null;
@@ -98024,7 +98081,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.21" : "0.0.0-dev";
+    VERSION = true ? "0.23.22" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -134378,7 +134435,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.7.12" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.7.14" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {
@@ -134400,7 +134457,17 @@ async function main() {
     dataDir: cfg.dataDir,
     apiUrl: cfg.apiUrl,
     agentName: cfg.agentName,
-    platform: "node"
+    platform: "node",
+    // #836: identify the BRIDGE, not the plugin it vendors. Two reasons this
+    // must be explicit. Operators install and upgrade the bridge, so the bridge
+    // build is the one they can act on — reporting the inner plugin version is
+    // the exact confusion #836 was opened about (a bridge on 0.3.2 read as
+    // "same bug, didn't restart"). And because this build BUNDLES the plugin,
+    // the plugin's own `__AV_VERSION__` resolves to OUR package.json here, so
+    // its default would render "@agentvault/agentvault@0.7.x" — the wrong
+    // package name attached to the bridge's version number, which is worse
+    // than either alone.
+    clientVersion: `@agentvault/claude-bridge@${true ? "0.7.14" : "dev"}`
   });
   const agentSystemPrompt = cfg.systemPrompt ?? `You are ${cfg.agentName}, an AI agent on AgentVault. You talk with your owner in 1:1 direct messages and collaborate with other agents in shared rooms. That is your identity \u2014 introduce yourself by that name and do not claim to be any other agent. To speak, call the say tool. In a 1:1 with your owner, reply to what they say. In a room you see every message \u2014 call say only when you have something worth adding, and otherwise stay silent. Keep messages concise.`;
   const deviceJwt = () => {

package/dist/service/backend.d.ts

@@ -2,6 +2,9 @@ import type { ServiceSpec } from "./spec.js";
 export interface ServiceBackend {
     install(spec: ServiceSpec): void;
     uninstall(label: string): void;
+    /** Restart an ALREADY-INSTALLED service without touching its spec (#837).
+     *  Distinct from install, which re-bakes the plist from the current shell. */
+    restart(label: string): void;
     status(label: string): {
         loaded: boolean;
         detail: string;

package/dist/service/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/service/backend.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC;AAED,wBAAgB,WAAW,IAAI,WAAW,CAoBzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,cAAc,CAU3F"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/service/backend.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;kFAC8E;IAC9E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC;AAED,wBAAgB,WAAW,IAAI,WAAW,CAoBzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,cAAc,CAU3F"}

package/dist/service/launchd.d.ts

@@ -9,6 +9,9 @@ export declare class LaunchdBackend implements ServiceBackend {
     private domain;
     install(spec: ServiceSpec): void;
     private waitUntilGone;
+    /** #837: restart in place. Same kickstart install ends with, WITHOUT
+     *  rewriting the plist — so env baked at the original install survives. */
+    restart(label: string): void;
     uninstall(label: string): void;
     status(label: string): {
         loaded: boolean;

package/dist/service/launchd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../../src/service/launchd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAUhE,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAkC5D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IA2BhC,OAAO,CAAC,aAAa;IAOrB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAI3D"}
+{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../../src/service/launchd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAUhE,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAkC5D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IA2BhC,OAAO,CAAC,aAAa;IAOrB;+EAC2E;IAC3E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI5B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAI3D"}

package/dist/service/subcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAQD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAkDT"}
+{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAiCD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CA4DT"}

package/dist/service/systemd.d.ts

@@ -10,6 +10,9 @@ export declare class SystemdBackend implements ServiceBackend {
     constructor(deps: BackendDeps);
     private unitPath;
     install(spec: ServiceSpec): void;
+    /** #837: restart in place, without daemon-reload or rewriting the unit —
+     *  so env written at the original install survives. */
+    restart(label: string): void;
     uninstall(label: string): void;
     status(label: string): {
         loaded: boolean;

package/dist/service/systemd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemd.d.ts","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAmBhE;;;sFAGsF;AACtF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAsB3D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAoBhC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAQ9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAQ3D"}
+{"version":3,"file":"systemd.d.ts","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAmBhE;;;sFAGsF;AACtF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAsB3D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAoBhC;2DACuD;IACvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI5B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAQ9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAQ3D"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.12",
+  "version": "0.7.14",
   "type": "module",
-  "description": "AgentVault Claude Bridge \u2014 daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
+  "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {