@agentvault/claude-bridge 0.7.2 → 0.7.4

package/dist/bridge.d.ts

@@ -43,6 +43,10 @@ export interface RoomHushed {
 }
 export interface RoomChannel {
     on(ev: "room_message", cb: (e: RoomMessage) => void): unknown;
+    on(ev: "room_joined", cb: (e: {
+        roomId: string;
+        name?: string;
+    }) => void): unknown;
     on(ev: "message", cb: (text: string, metadata: MessageMeta) => void): unknown;
     on(ev: "room_hushed", cb: (e: RoomHushed) => void): unknown;
     on(ev: "error", cb: (err: unknown) => void): unknown;
@@ -175,6 +179,26 @@ export declare function attachLifecycle(channel: LifecycleChannel, opts?: {
  * dropped (it usually means a mis-timed or duplicate approval).
  */
 export declare function pollApprovalsOnce(arming: ArmingState, dataDir: string, onArmed: () => void, log?: (msg: string) => void): void;
+/**
+ * How a ROOM turn is announced to the model (#366 / #499 Facet A).
+ *
+ * Reproduced live 2026-07-29: asked "what room are you in?" *in* a room, the
+ * agent answered "This is our 1:1 DM, so no room name to report." Everything
+ * beneath the model was correct — the bridge logged `inbound from chris in
+ * c6a2734d` then `said to room c6a2734d`, and the message is recorded against
+ * room "New Test" in the database. The turn was simply pushed as
+ * `[chris]: <text>`, which carries no channel context whatsoever, so the model
+ * had nothing to distinguish a room from a DM and defaulted to DM.
+ *
+ * The room NAME is best-effort (learned from `room_joined`), but the fact that
+ * this is a room is not: when the name is unknown we still say "room" and fall
+ * back to a short id. Getting "which room" wrong is a cosmetic answer; getting
+ * "am I in a room" wrong changes how the agent addresses everyone in it.
+ *
+ * A 1:1 DM is deliberately left unlabelled — that path is not broken, and an
+ * unmarked turn already reads as a DM, which is what the model assumes.
+ */
+export declare function roomTurnPrefix(roomId: string, senderName: string, roomName?: string): string;
 export declare function wireBridge(channel: RoomChannel, session: RoomSession, target: ActiveTarget, opts?: {
     roomFilter?: string;
     armRoom?: boolean;

package/dist/index.js

@@ -63525,6 +63525,34 @@ var init_owner_sync = __esm2({
     NONCE_BYTES2 = 24;
   }
 });
+function seqOf(m22) {
+  if (m22.seq === void 0 || m22.seq === null || m22.seq === "")
+    return null;
+  const n22 = Number(m22.seq);
+  return Number.isFinite(n22) ? n22 : null;
+}
+function createdAtOf(m22) {
+  const t22 = new Date(m22.created_at ?? 0).getTime();
+  return Number.isFinite(t22) ? t22 : 0;
+}
+function orderDeliveryBatch(messages) {
+  return [...messages].sort((a2, b22) => {
+    const aWelcome = a2.message_type === "welcome";
+    const bWelcome = b22.message_type === "welcome";
+    if (aWelcome !== bWelcome)
+      return aWelcome ? -1 : 1;
+    const as2 = seqOf(a2);
+    const bs2 = seqOf(b22);
+    if (as2 !== null && bs2 !== null && as2 !== bs2)
+      return as2 - bs2;
+    return createdAtOf(a2) - createdAtOf(b22);
+  });
+}
+var init_mls_delivery_order = __esm2({
+  "../crypto/dist/mls-delivery-order.js"() {
+    "use strict";
+  }
+});
 var dist_exports = {};
 __export2(dist_exports, {
   AV_CREDENTIAL_CONTEXT: () => AV_CREDENTIAL_CONTEXT,
@@ -63595,6 +63623,7 @@ __export2(dist_exports, {
   issueCredential: () => issueCredential,
   multibaseToPublicKey: () => multibaseToPublicKey,
   normalizeBackupCode: () => normalizeBackupCode,
+  orderDeliveryBatch: () => orderDeliveryBatch,
   parseTraceparent: () => parseTraceparent,
   performX3DH: () => performX3DH,
   presentCredentials: () => presentCredentials,
@@ -63632,6 +63661,7 @@ var init_dist = __esm2({
     await init_approval();
     init_mls_group();
     await init_owner_sync();
+    init_mls_delivery_order();
   }
 });
 function syncLockPath(dataDir, channelId) {
@@ -64592,6 +64622,7 @@ var init_channel = __esm2({
     "use strict";
     await init_libsodium_wrappers();
     await init_dist();
+    await init_dist();
     init_mls_state();
     await init_mls_kp_pool();
     init_credential_store();
@@ -64699,6 +64730,24 @@ var init_channel = __esm2({
       _pendingKpBundles = [];
       /** Pool target: keep this many unconsumed KeyPackages published; backend caps to match. */
       static _KP_POOL_TARGET = 10;
+      /**
+       * Local retention bound for `_pendingKpBundles` (#363). Deliberately ABOVE
+       * `_KP_POOL_TARGET`, because the two counts are in DIFFERENT UNITS: the backend
+       * keeps up to `_KP_POOL_TARGET` **unconsumed** KeyPackages, while this array
+       * holds every bundle published since the last join — consumed ones are removed
+       * only by `_removeKpFromPool` on a successful join.
+       *
+       * Capping local retention AT the backend's target therefore evicts bundles the
+       * backend can still serve, and their private material cannot be rebuilt (#341:
+       * `mls_rs_uniffi` exposes no KeyPackage repository), so any Welcome minted
+       * against an evicted bundle is PERMANENTLY unjoinable.
+       *
+       * Same defect and same remedy as #511, where the web store capped 6 against a
+       * backend pool of 10 and was raised to 12. Retaining extra bundles is cheap and
+       * purely protective — `_handleMlsWelcome` trial-decrypts against the whole pool,
+       * so a surplus only ever adds chances to match.
+       */
+      static _KP_POOL_RETENTION = 20;
       /** Reentrancy guard so concurrent pool top-ups don't double-publish past target. */
       _kpPoolFilling = false;
       /** Buffer for MLS commits received before Welcome (keyed by groupId, sorted by epoch). */
@@ -65362,7 +65411,9 @@ var init_channel = __esm2({
         const pendingWsSends = [];
         const sentSharedGroupIds = /* @__PURE__ */ new Set();
         if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
+          const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
           for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
+            if (targetConvId && gid !== targetSharedGid) continue;
             if (!entry.mlsGroupId) continue;
             const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
             if (!mlsGroup?.isInitialized || Number(mlsGroup.epoch) <= 0) continue;
@@ -65563,7 +65614,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.12" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.14" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67302,7 +67353,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.12" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.14" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67620,7 +67671,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.12" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.14" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69283,7 +69334,7 @@ ${messageText}`;
         if (!this._pendingKpBundles.some((b22) => idOf(b22) === id)) {
           this._pendingKpBundles.push(kp);
         }
-        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_TARGET) {
+        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_RETENTION) {
           this._pendingKpBundles.shift();
         }
       }
@@ -69538,16 +69589,10 @@ ${messageText}`;
             console.warn(`[SecureChannel] Delivery pull failed: ${res.status}`);
             return;
           }
-          const { messages } = await res.json();
+          let { messages } = await res.json();
           const hasMessages = messages && messages.length > 0;
           if (hasMessages) {
-            const order = { welcome: 0, commit: 1, application: 2 };
-            messages.sort((a2, b22) => {
-              const ao = order[a2.message_type] ?? 2;
-              const bo = order[b22.message_type] ?? 2;
-              if (ao !== bo) return ao - bo;
-              return new Date(a2.created_at).getTime() - new Date(b22.created_at).getTime();
-            });
+            messages = orderDeliveryBatch(messages);
             const ackedIds = [];
             const nackedIds = [];
             for (const msg of messages) {
@@ -97475,7 +97520,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.12" : "0.0.0-dev";
+    VERSION = true ? "0.23.14" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -133532,6 +133577,10 @@ function pollApprovalsOnce(arming, dataDir, onArmed, log = () => {
     }
   }
 }
+function roomTurnPrefix(roomId, senderName, roomName) {
+  const room = roomName ? `"${roomName}"` : roomId.slice(0, 8);
+  return `[room ${room} | ${senderName}]`;
+}
 function wireBridge(channel, session, target, opts = {}) {
   const log = opts.log ?? (() => {
   });
@@ -133566,6 +133615,10 @@ function wireBridge(channel, session, target, opts = {}) {
     );
   });
   let warnedMissingSenderIsAgent = false;
+  const roomNames = /* @__PURE__ */ new Map();
+  channel.on("room_joined", (e7) => {
+    if (e7?.roomId && e7.name) roomNames.set(e7.roomId, e7.name);
+  });
   channel.on("room_message", (e7) => {
     if (typeof e7.senderIsAgent !== "boolean" && !warnedMissingSenderIsAgent) {
       warnedMissingSenderIsAgent = true;
@@ -133580,7 +133633,7 @@ function wireBridge(channel, session, target, opts = {}) {
     }
     log(`inbound from ${e7.senderName} in ${e7.roomId.slice(0, 8)}`);
     target.setRoom(e7.roomId);
-    session.push(`[${e7.senderName}]: ${e7.plaintext}`, target.snapshotReply(channel, log), {
+    session.push(`${roomTurnPrefix(e7.roomId, e7.senderName, roomNames.get(e7.roomId))}: ${e7.plaintext}`, target.snapshotReply(channel, log), {
       autoReplyOnText: false,
       replyExpected: e7.senderIsAgent === false,
       armed: () => arming.isArmed(e7.roomId)
@@ -133731,7 +133784,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  console.error(`[bridge] version: ${true ? "0.7.2" : "dev"}`);
+  console.error(`[bridge] version: ${true ? "0.7.4" : "dev"}`);
   console.error(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   console.error(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "type": "module",
-  "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
+  "description": "AgentVault Claude Bridge \u2014 daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {