@agentvault/claude-bridge 0.7.3 → 0.7.4

package/dist/index.js

@@ -64730,6 +64730,24 @@ var init_channel = __esm2({
       _pendingKpBundles = [];
       /** Pool target: keep this many unconsumed KeyPackages published; backend caps to match. */
       static _KP_POOL_TARGET = 10;
+      /**
+       * Local retention bound for `_pendingKpBundles` (#363). Deliberately ABOVE
+       * `_KP_POOL_TARGET`, because the two counts are in DIFFERENT UNITS: the backend
+       * keeps up to `_KP_POOL_TARGET` **unconsumed** KeyPackages, while this array
+       * holds every bundle published since the last join — consumed ones are removed
+       * only by `_removeKpFromPool` on a successful join.
+       *
+       * Capping local retention AT the backend's target therefore evicts bundles the
+       * backend can still serve, and their private material cannot be rebuilt (#341:
+       * `mls_rs_uniffi` exposes no KeyPackage repository), so any Welcome minted
+       * against an evicted bundle is PERMANENTLY unjoinable.
+       *
+       * Same defect and same remedy as #511, where the web store capped 6 against a
+       * backend pool of 10 and was raised to 12. Retaining extra bundles is cheap and
+       * purely protective — `_handleMlsWelcome` trial-decrypts against the whole pool,
+       * so a surplus only ever adds chances to match.
+       */
+      static _KP_POOL_RETENTION = 20;
       /** Reentrancy guard so concurrent pool top-ups don't double-publish past target. */
       _kpPoolFilling = false;
       /** Buffer for MLS commits received before Welcome (keyed by groupId, sorted by epoch). */
@@ -65393,7 +65411,9 @@ var init_channel = __esm2({
         const pendingWsSends = [];
         const sentSharedGroupIds = /* @__PURE__ */ new Set();
         if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
+          const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
           for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
+            if (targetConvId && gid !== targetSharedGid) continue;
             if (!entry.mlsGroupId) continue;
             const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
             if (!mlsGroup?.isInitialized || Number(mlsGroup.epoch) <= 0) continue;
@@ -65594,7 +65614,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.13" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.14" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67333,7 +67353,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.14" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67651,7 +67671,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.13" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.14" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69314,7 +69334,7 @@ ${messageText}`;
         if (!this._pendingKpBundles.some((b22) => idOf(b22) === id)) {
           this._pendingKpBundles.push(kp);
         }
-        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_TARGET) {
+        while (this._pendingKpBundles.length > _SecureChannel._KP_POOL_RETENTION) {
           this._pendingKpBundles.shift();
         }
       }
@@ -97500,7 +97520,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.13" : "0.0.0-dev";
+    VERSION = true ? "0.23.14" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -133764,7 +133784,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  console.error(`[bridge] version: ${true ? "0.7.3" : "dev"}`);
+  console.error(`[bridge] version: ${true ? "0.7.4" : "dev"}`);
   console.error(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   console.error(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "type": "module",
-  "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
+  "description": "AgentVault Claude Bridge \u2014 daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {