@agentvault/claude-bridge 0.7.9 → 0.7.11

package/dist/index.js

@@ -63791,6 +63791,35 @@ async function deleteMlsState(dataDir, groupId) {
   } catch {
   }
 }
+async function quarantineOrphanedMlsState(dataDir, isStillMember, opts = {}) {
+  const max = opts.max ?? 20;
+  const quarantined = [];
+  let names;
+  try {
+    names = await readdir(dataDir);
+  } catch {
+    return quarantined;
+  }
+  for (const name of names) {
+    if (quarantined.length >= max) break;
+    const m22 = /^mls-(?!kp-pending-)([A-Za-z0-9_-]+)\.json$/.exec(name);
+    if (!m22) continue;
+    const groupId = m22[1];
+    let member;
+    try {
+      member = await isStillMember(groupId);
+    } catch {
+      continue;
+    }
+    if (member === null || member === true) continue;
+    try {
+      await rename(join(dataDir, name), join(dataDir, `${name}.orphaned`));
+      quarantined.push(groupId);
+    } catch {
+    }
+  }
+  return quarantined;
+}
 var SYNC_LOCK_STALE_MS;
 var pendingKpPath;
 var init_mls_state = __esm2({
@@ -64124,6 +64153,41 @@ var init_transport2 = __esm2({
     "use strict";
   }
 });
+function a2aChannelSignature(channels) {
+  return JSON.stringify(
+    channels.map((c22) => ({
+      id: c22.channelId?.slice(0, 8),
+      status: c22.status,
+      participants: c22.participant_count
+    })).sort((a2, b22) => (a2.id ?? "").localeCompare(b22.id ?? ""))
+  );
+}
+var A2ALogGate;
+var init_a2a_log_gate = __esm2({
+  "src/a2a-log-gate.ts"() {
+    "use strict";
+    A2ALogGate = class {
+      last = null;
+      /** True when this state differs from the last reported one. Records it. */
+      shouldReport(channels) {
+        const sig = a2aChannelSignature(channels);
+        if (sig === this.last) return false;
+        this.last = sig;
+        return true;
+      }
+    };
+  }
+});
+function mlsMembershipFromStatus(status) {
+  if (status === 200) return true;
+  if (status === 403 || status === 404) return false;
+  return null;
+}
+var init_mls_membership_probe = __esm2({
+  "src/mls-membership-probe.ts"() {
+    "use strict";
+  }
+});
 var openclaw_compat_exports = {};
 __export2(openclaw_compat_exports, {
   AGENT_EVENT_CANDIDATES: () => AGENT_EVENT_CANDIDATES,
@@ -64683,6 +64747,8 @@ var init_channel = __esm2({
     await init_crypto_helpers();
     await init_state();
     init_transport2();
+    init_a2a_log_gate();
+    init_mls_membership_probe();
     ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
       "message",
       "text",
@@ -64748,6 +64814,11 @@ var init_channel = __esm2({
       _heartbeatTimer = null;
       _heartbeatCallback = null;
       _heartbeatIntervalSeconds = 0;
+      /** #798: report the A2A channel set only when it CHANGES. This line polls
+       *  every 30s and produced 90.2% of bridge.log (90,841/100,702 lines) and a
+       *  27.9MB gateway.log on wren, every one reading `channels=0`. Not deleted —
+       *  #794's A2A watch needs the transitions. */
+      _a2aLogGate = new A2ALogGate();
       _wakeDetectorTimer = null;
       _lastWakeTick = Date.now();
       _trustToken = null;
@@ -66041,6 +66112,47 @@ var init_channel = __esm2({
         );
         this.emit("rooms_reconciled", { pruned: stale });
       }
+      /**
+       * #629 — quarantine MLS state for groups this device is no longer in.
+       *
+       * `_reconcileRoomsWithServer` above covers ROOMS: anything absent from
+       * `GET /rooms` is pruned. It cannot see a group that was never a room — a 1:1
+       * conversation group or an A2A channel group — so that state lingered with
+       * nothing to reconcile it. Measured on loopita 2026-08-08: one group-state
+       * file whose group had no server-side row at all.
+       *
+       * `quarantineOrphanedMlsState` was written for exactly this and shipped with
+       * 11 passing tests, but nothing ever called it. This is that call site.
+       *
+       * Runs AFTER the room reconcile so rooms are already gone and this only sees
+       * genuine non-room orphans.
+       *
+       * Quarantine RENAMES to `.orphaned` rather than deleting: if the verdict is
+       * ever wrong the state is recoverable by hand, which deletion would not be.
+       */
+      async _quarantineOrphanedMlsGroups() {
+        if (!this._deviceJwt) return;
+        const quarantined = await quarantineOrphanedMlsState(
+          this.config.dataDir,
+          async (groupId) => {
+            try {
+              const res = await fetch(
+                `${this.config.apiUrl}/api/v1/mls/groups/${encodeURIComponent(groupId)}`,
+                { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+              );
+              return mlsMembershipFromStatus(res.status);
+            } catch {
+              return null;
+            }
+          }
+        );
+        if (quarantined.length > 0) {
+          console.log(
+            `[SecureChannel] Quarantined ${quarantined.length} orphaned MLS group state file(s): ` + quarantined.map((g22) => g22.slice(0, 8)).join(", ")
+          );
+          this.emit("mls_state_quarantined", { groupIds: quarantined });
+        }
+      }
       /**
        * Handle an in-band `{event:"error"}` frame from the server.
        *
@@ -67201,7 +67313,9 @@ var init_channel = __esm2({
           }
           const myHub = this._persisted.hubAddress || "";
           const myHubId = this._persisted.hubId || "";
-          console.log(`[listA2AChannels] myHub=${myHub}, channels=${channels.length}, raw=${JSON.stringify(channels.map((c22) => ({ id: c22.channelId?.slice(0, 8), status: c22.status, participants: c22.participant_count })))}`);
+          if (this._a2aLogGate.shouldReport(channels)) {
+            console.log(`[listA2AChannels] myHub=${myHub}, channels=${channels.length}, raw=${JSON.stringify(channels.map((c22) => ({ id: c22.channelId?.slice(0, 8), status: c22.status, participants: c22.participant_count })))}`);
+          }
           for (const ch2 of channels) {
             if (ch2.status === "active" || ch2.status === "approved") {
               const myParticipant = ch2.participants?.find(
@@ -67563,6 +67677,8 @@ var init_channel = __esm2({
             this._setState("ready");
             void this._reconcileRoomsWithServer().catch(
               (err) => console.warn(`[SecureChannel] room reconcile failed (ignored): ${err instanceof Error ? err.message : String(err)}`)
+            ).then(() => this._quarantineOrphanedMlsGroups()).catch(
+              (err) => console.warn(`[SecureChannel] MLS orphan quarantine failed (ignored): ${err instanceof Error ? err.message : String(err)}`)
             );
             if (this.config.enableScanning) {
               this._scanEngine = new ScanEngine();
@@ -133430,13 +133546,17 @@ var PersistentClaudeSession = class {
           const r7 = m6;
           const num = (k2) => typeof r7[k2] === "number" ? r7[k2] : void 0;
           const str = (k2) => typeof r7[k2] === "string" ? r7[k2] : void 0;
+          const usage = r7.usage ?? {};
+          const unum = (k2) => typeof usage[k2] === "number" ? usage[k2] : void 0;
           this.resultTelemetry = {
             durationMs: num("duration_ms"),
             durationApiMs: num("duration_api_ms"),
             numTurns: num("num_turns"),
             subtype: str("subtype"),
             stopReason: str("stop_reason"),
-            apiErrorStatus: num("api_error_status")
+            apiErrorStatus: num("api_error_status"),
+            cacheReadTokens: unum("cache_read_input_tokens"),
+            cacheCreationTokens: unum("cache_creation_input_tokens")
           };
           const reply = this.activeReply;
           if (this.currentReplyExpected && !this.saidThisTurn && this.turnText.trim()) {
@@ -134148,7 +134268,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.7.9" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.7.11" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {

package/dist/session.d.ts

@@ -213,6 +213,8 @@ export declare class PersistentClaudeSession {
         subtype?: string;
         stopReason?: string;
         apiErrorStatus?: number;
+        cacheReadTokens?: number;
+        cacheCreationTokens?: number;
     };
     private input;
     /**

package/dist/worker-queue.d.ts

@@ -82,6 +82,12 @@ export type WorkerIncident = {
         subtype?: string;
         stopReason?: string;
         apiErrorStatus?: number;
+        /** Prompt-cache state — `cacheReadTokens === 0` with a large
+         *  `cacheCreationTokens` marks a COLD turn, which costs ~2x a warm one for
+         *  reasons unrelated to the code under test. Without it, a latency figure
+         *  in this file cannot be read honestly. */
+        cacheReadTokens?: number;
+        cacheCreationTokens?: number;
     };
 };
 export interface WorkerQueueDeps {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.7.9",
+  "version": "0.7.11",
   "type": "module",
   "description": "AgentVault Claude Bridge \u2014 daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",