@agentvault/claude-bridge 0.7.13 → 0.7.15

package/dist/index.js

@@ -267,6 +267,11 @@ var init_launchd = __esm({
           this.deps.exec("sleep", ["0.25"]);
         }
       }
+      /** #837: restart in place. Same kickstart install ends with, WITHOUT
+       *  rewriting the plist — so env baked at the original install survives. */
+      restart(label) {
+        this.deps.exec("launchctl", ["kickstart", "-k", `${this.domain()}/${label}`]);
+      }
       uninstall(label) {
         this.deps.exec("launchctl", ["bootout", `${this.domain()}/${label}`]);
         const path2 = this.plistPath(label);
@@ -331,6 +336,11 @@ var init_systemd = __esm({
         this.deps.exec("systemctl", ["--user", "enable", `${spec.label}.service`]);
         this.deps.exec("systemctl", ["--user", "restart", `${spec.label}.service`]);
       }
+      /** #837: restart in place, without daemon-reload or rewriting the unit —
+       *  so env written at the original install survives. */
+      restart(label) {
+        this.deps.exec("systemctl", ["--user", "restart", `${label}.service`]);
+      }
       uninstall(label) {
         this.deps.exec("systemctl", ["--user", "disable", "--now", `${label}.service`]);
         this.deps.exec("loginctl", ["disable-linger", this.deps.user]);
@@ -389,12 +399,41 @@ var subcommand_exports = {};
 __export(subcommand_exports, {
   maybeRunServiceSubcommand: () => maybeRunServiceSubcommand
 });
+function requireAgentName(env) {
+  const name = env.AV_AGENT_NAME?.trim();
+  if (!name) {
+    throw new Error(
+      "AV_AGENT_NAME is required \u2014 it names WHICH agent's service to act on. Re-run as: AV_AGENT_NAME=<agent-name> agentvault-claude-bridge <subcommand>"
+    );
+  }
+  return name;
+}
 function labelFor(env) {
-  return `dev.agentvault.bridge-${slugify2(env.AV_AGENT_NAME ?? "claude")}`;
+  return `dev.agentvault.bridge-${slugify2(requireAgentName(env))}`;
+}
+function legacyLabelFor(env) {
+  return `com.agentvault.claude-bridge.${slugify2(requireAgentName(env))}`;
+}
+function resolveLabel(backend, env) {
+  const current = labelFor(env);
+  if (backend.status(current).loaded) return current;
+  const legacy = legacyLabelFor(env);
+  if (backend.status(legacy).loaded) return legacy;
+  return current;
 }
 function maybeRunServiceSubcommand(argv, env, deps) {
   const cmd = argv[2];
-  if (!cmd || !SERVICE_CMDS.has(cmd)) return false;
+  if (!cmd) return false;
+  if (!SERVICE_CMDS.has(cmd)) {
+    const looksLikeToken = cmd.startsWith("av_tok_");
+    const looksLikeFlag = cmd.startsWith("-");
+    if (!looksLikeToken && !looksLikeFlag) {
+      throw new Error(
+        `unknown subcommand: ${cmd} \u2014 expected one of ${[...SERVICE_CMDS].join(", ")}, an invite token, or no argument at all`
+      );
+    }
+    return false;
+  }
   const backend = deps?.backend ?? selectBackend(process.platform);
   const entrypoint = deps?.entrypoint ?? process.argv[1];
   const log = deps?.log ?? ((m6) => console.error("[bridge] " + m6));
@@ -416,17 +455,23 @@ function maybeRunServiceSubcommand(argv, env, deps) {
       });
       backend.install(spec);
       log(`installed service ${spec.label} \u2014 logs: ${spec.logOut}`);
-      log(`check it with: agentvault-claude-bridge status`);
+      log(
+        `check it with: AV_AGENT_NAME=${cfg.agentName} agentvault-claude-bridge status`
+      );
     } else if (cmd === "uninstall") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       backend.uninstall(label);
       log(`uninstalled service ${label}`);
+    } else if (cmd === "restart") {
+      const label = resolveLabel(backend, env);
+      backend.restart(label);
+      log(`restarted service ${label}`);
     } else if (cmd === "status") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       const st = backend.status(label);
       log(`${label}: ${st.loaded ? "loaded" : "not loaded"}`);
     } else if (cmd === "logs") {
-      const label = labelFor(env);
+      const label = resolveLabel(backend, env);
       log(`logs for ${label} are at <dataDir>/logs/bridge.log (tail -f it)`);
     }
   } catch (e7) {
@@ -442,7 +487,7 @@ var init_subcommand = __esm({
     init_config();
     init_spec();
     init_backend();
-    SERVICE_CMDS = /* @__PURE__ */ new Set(["install", "uninstall", "status", "logs"]);
+    SERVICE_CMDS = /* @__PURE__ */ new Set(["install", "uninstall", "restart", "status", "logs"]);
   }
 });
 
@@ -69927,7 +69972,8 @@ ${messageText}`;
           const candidateCount = candidates.filter(Boolean).length;
           const joined = await joinWithFirstMatchingKp(welcomeBytes, candidates);
           if (!joined) {
-            console.error(`[SecureChannel] No matching KeyPackage found for Welcome \u2014 cannot join group ${groupId?.slice(0, 8)}. The Welcome is encrypted to a published KP's public key; none of our ${candidateCount} candidate bundle(s) decrypted it. The existing Welcome recovery mechanism will re-request.`);
+            console.error(`[SecureChannel] No matching KeyPackage found for Welcome \u2014 cannot join group ${groupId?.slice(0, 8)}. The Welcome is encrypted to a published KP's public key; none of our ${candidateCount} candidate bundle(s) decrypted it. Requesting a re-Welcome with a fresh KeyPackage.`);
+            if (groupId) void this._requestWelcomeSelfHeal(groupId);
             return;
           }
           const mgr = joined.mgr;
@@ -134411,7 +134457,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.7.13" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.7.15" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {
@@ -134443,7 +134489,7 @@ async function main() {
     // its default would render "@agentvault/agentvault@0.7.x" — the wrong
     // package name attached to the bridge's version number, which is worse
     // than either alone.
-    clientVersion: `@agentvault/claude-bridge@${true ? "0.7.13" : "dev"}`
+    clientVersion: `@agentvault/claude-bridge@${true ? "0.7.15" : "dev"}`
   });
   const agentSystemPrompt = cfg.systemPrompt ?? `You are ${cfg.agentName}, an AI agent on AgentVault. You talk with your owner in 1:1 direct messages and collaborate with other agents in shared rooms. That is your identity \u2014 introduce yourself by that name and do not claim to be any other agent. To speak, call the say tool. In a 1:1 with your owner, reply to what they say. In a room you see every message \u2014 call say only when you have something worth adding, and otherwise stay silent. Keep messages concise.`;
   const deviceJwt = () => {

package/dist/service/backend.d.ts

@@ -2,6 +2,9 @@ import type { ServiceSpec } from "./spec.js";
 export interface ServiceBackend {
     install(spec: ServiceSpec): void;
     uninstall(label: string): void;
+    /** Restart an ALREADY-INSTALLED service without touching its spec (#837).
+     *  Distinct from install, which re-bakes the plist from the current shell. */
+    restart(label: string): void;
     status(label: string): {
         loaded: boolean;
         detail: string;

package/dist/service/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/service/backend.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC;AAED,wBAAgB,WAAW,IAAI,WAAW,CAoBzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,cAAc,CAU3F"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/service/backend.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;kFAC8E;IAC9E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC;AAED,wBAAgB,WAAW,IAAI,WAAW,CAoBzC;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,cAAc,CAU3F"}

package/dist/service/launchd.d.ts

@@ -9,6 +9,9 @@ export declare class LaunchdBackend implements ServiceBackend {
     private domain;
     install(spec: ServiceSpec): void;
     private waitUntilGone;
+    /** #837: restart in place. Same kickstart install ends with, WITHOUT
+     *  rewriting the plist — so env baked at the original install survives. */
+    restart(label: string): void;
     uninstall(label: string): void;
     status(label: string): {
         loaded: boolean;

package/dist/service/launchd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../../src/service/launchd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAUhE,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAkC5D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IA2BhC,OAAO,CAAC,aAAa;IAOrB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAI3D"}
+{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../../src/service/launchd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAUhE,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAkC5D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IA2BhC,OAAO,CAAC,aAAa;IAOrB;+EAC2E;IAC3E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI5B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAI3D"}

package/dist/service/subcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAQD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAkDT"}
+{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAuDD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAsFT"}

package/dist/service/systemd.d.ts

@@ -10,6 +10,9 @@ export declare class SystemdBackend implements ServiceBackend {
     constructor(deps: BackendDeps);
     private unitPath;
     install(spec: ServiceSpec): void;
+    /** #837: restart in place, without daemon-reload or rewriting the unit —
+     *  so env written at the original install survives. */
+    restart(label: string): void;
     uninstall(label: string): void;
     status(label: string): {
         loaded: boolean;

package/dist/service/systemd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemd.d.ts","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAmBhE;;;sFAGsF;AACtF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAsB3D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAoBhC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAQ9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAQ3D"}
+{"version":3,"file":"systemd.d.ts","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAmBhE;;;sFAGsF;AACtF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAsB3D;AAED,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAErC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAoBhC;2DACuD;IACvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI5B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAQ9B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAQ3D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.13",
+  "version": "0.7.15",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",
@@ -26,6 +26,7 @@
     "build": "npm --prefix ../plugin run build && tsc --emitDeclarationOnly && node build.mjs",
     "start": "node dist/index.js",
     "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.test.json",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {