@agentvault/claude-bridge 0.8.1 → 0.8.2

package/dist/bridge.d.ts

@@ -212,6 +212,12 @@ export declare function pollApprovalsOnce(arming: ArmingState, dataDir: string,
  */
 export declare function roomTurnPrefix(roomId: string, senderName: string, roomName?: string): string;
 export declare function wireBridge(channel: RoomChannel, session: RoomSession, target: ActiveTarget, opts?: {
+    /**
+     * #1107: this agent's own name, used to recognise its own @mention. Threaded
+     * from the bridge config. Without it the agent can only ever answer @all —
+     * `_makeOwesReply` warns once, loudly, rather than going quietly deaf.
+     */
+    agentName?: string;
     roomFilter?: string;
     armRoom?: boolean;
     log?: (msg: string) => void;

package/dist/index.js

@@ -1081,6 +1081,28 @@ var __toESM = (mod4, isNodeMode, target) => (target = mod4 != null ? __create(__
   isNodeMode || !mod4 || !mod4.__esModule ? __defProp2(target, "default", { value: mod4, enumerable: true }) : target,
   mod4
 ));
+function stripWrappers(s22) {
+  let start = 0;
+  let end = s22.length;
+  while (start < end && WRAPPERS.includes(s22[start])) start++;
+  while (end > start && WRAPPERS.includes(s22[end - 1])) end--;
+  return s22.slice(start, end);
+}
+function isAbstention(text) {
+  if (typeof text !== "string") return false;
+  return stripWrappers(text).toLowerCase().startsWith(SENTINEL);
+}
+var SENTINEL;
+var WRAPPERS;
+var INSTRUCTION;
+var init_abstention = __esm2({
+  "src/abstention.ts"() {
+    "use strict";
+    SENTINEL = "[[no-reply]]";
+    WRAPPERS = " 	\r\n`\"'*_";
+    INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
+  }
+});
 function toEpoch(v22) {
   if (typeof v22 === "bigint") return v22;
   if (typeof v22 === "number") {
@@ -63759,6 +63781,39 @@ var init_mls_group = __esm2({
         const s22 = this._requireState();
         return s22.groupContext.groupId;
       }
+      /**
+       * Proof that this client actually holds the group's keys at its current
+       * epoch. Throws if not initialized.
+       *
+       * RFC 9420 §8.2's `epoch_authenticator`, derived from the epoch secret. Two
+       * properties make it the thing this codebase has been missing:
+       *
+       *   * every member at the same epoch computes the SAME value, so it is
+       *     comparable across clients and can be checked by a server;
+       *   * it cannot be computed without the key schedule, so possessing it is
+       *     evidence of membership rather than a claim about it. RFC 9420 names
+       *     this as its purpose: "to authenticate the shared group state".
+       *
+       * It is safe to publish. It is a KDF output over the epoch secret, not the
+       * secret, and the RFC intends it to be shown to out-of-band verifiers.
+       *
+       * WHY THIS EXISTS. `mls_groups.member_device_ids` records membership; the
+       * ability to decrypt lives only in one browser's localStorage. Nothing
+       * compared the two, and nothing could — so a device in the roster holding no
+       * keys was indistinguishable from a healthy one, on every signal the server
+       * has. Measured on production 2026-08-26: one owner device carried the keys
+       * for 19 of the 21 owner leaves on the platform, and one 1:1 group had been
+       * unreadable by its owner's browser for two months while every status column
+       * read healthy.
+       *
+       * `epoch` alone cannot do this job: it is a number the client reports about
+       * itself, it collides across groups, and a client that has lost its state
+       * still remembers one.
+       */
+      get epochAuthenticator() {
+        const s22 = this._requireState();
+        return s22.keySchedule.epochAuthenticator;
+      }
       /** The cipher suite name in use. */
       get ciphersuiteName() {
         return this._ciphersuiteName;
@@ -63909,11 +63964,84 @@ var init_mls_group = __esm2({
         return { commit: commitBytes, welcome: welcomeBytes };
       }
       /**
-       * Remove a member from the group by leaf index.
+       * Admit N members with TWO commits total, replacing any stale leaf they hold.
+       *
+       * `addMembers` cannot do this alone: MLS rejects an Add for an identity
+       * already in the tree, so a member that lost its local state must be removed
+       * first. Doing that pair PER MEMBER is what the fulfiller did, and it is not
+       * merely slow — it is self-defeating.
+       *
+       * Live 2026-08-28 14:02:21-28Z: the owner sweep re-admitted 7 room members
+       * sequentially, each as its own removeMember + addMembers. Room 007 ran
+       * **epoch 71 -> 85 in seven seconds**, and the Welcome minted for member n
+       * named an epoch that member n+1's commit had already replaced — so six of
+       * seven were stale before they finished joining, and one (`smartcode`) could
+       * not replay forward afterwards at all.
+       *
+       * 🎯 A REPAIR THAT MOVES THE EPOCH ONCE PER MEMBER IS RACING ITSELF.
        *
-       * @param memberIndex - The leaf index of the member to remove.
-       * @returns The commit message to broadcast.
+       * ⚠️ **Why two commits and not one.** RFC 9420 §12.3 allows Remove and Add in
+       * a single commit, and ts-mls builds it happily — but with MORE THAN ONE of
+       * each, a REMAINING member fails to process it:
+       *
+       *     OpenError  at applyUpdatePathSecret (ts-mls/src/createCommit.ts:471)
+       *                at updatePrivateKeyPath  (processMessages.ts:397)
+       *
+       * One remove + one add in a single commit is fine; 2+2 is not. That is
+       * pinned by a test in `mls-group.test.ts` so this cannot be "optimised" back
+       * into one commit without the failure showing up first. Two commits still
+       * turns 7 members from 14 epochs into 2, and every joiner lands current.
+       *
+       * @param keyPackages - Fresh KeyPackages, one per member to admit. Members
+       *   already holding a leaf are removed by the first commit; members with no
+       *   leaf are plain adds. Duplicate identities keep the first KeyPackage.
+       * @returns Every commit to broadcast IN ORDER, and the Welcome to deliver to
+       *   EVERY member in the batch (each finds its own secrets inside it).
        */
+      async reAdmitMembers(keyPackages) {
+        this._requireState();
+        await this._ensureCiphersuite();
+        const seenIdentities = [];
+        const toAdd = [];
+        const leavesToRemove = [];
+        for (const kp of keyPackages) {
+          const identity = keyPackageIdentity(kp);
+          if (identity !== null) {
+            if (seenIdentities.some((id) => bytesEqual(id, identity)))
+              continue;
+            seenIdentities.push(identity);
+            const leaf = this.memberLeafIndex(identity);
+            if (leaf !== null)
+              leavesToRemove.push(leaf);
+          }
+          toAdd.push(kp);
+        }
+        if (toAdd.length === 0) {
+          throw new Error("reAdmitMembers: no members to admit");
+        }
+        const commits = [];
+        if (leavesToRemove.length > 0) {
+          const { commit } = await this.removeMembers(leavesToRemove);
+          commits.push({ commit, epoch: this.epoch });
+        }
+        const added = await this.addMembers(toAdd);
+        commits.push({ commit: added.commit, epoch: this.epoch });
+        return { commits, welcome: added.welcome };
+      }
+      async removeMembers(memberIndices) {
+        const s22 = this._requireState();
+        const cs = await this._ensureCiphersuite();
+        if (memberIndices.length === 0) {
+          throw new Error("removeMembers: no members to remove");
+        }
+        const extraProposals = memberIndices.map((removed) => ({
+          proposalType: "remove",
+          remove: { removed }
+        }));
+        const result = await createCommit({ state: s22, cipherSuite: cs, pskIndex: this._pskIndex }, { extraProposals });
+        this.state = result.newState;
+        return { commit: encodeMlsMessage(result.commit) };
+      }
       async removeMember(memberIndex) {
         const s22 = this._requireState();
         const cs = await this._ensureCiphersuite();
@@ -64468,7 +64596,7 @@ var init_mls_kp_pool = __esm2({
   }
 });
 function ownIdentity() {
-  const v22 = true ? "0.23.27" : FALLBACK;
+  const v22 = true ? "0.23.29" : FALLBACK;
   return `${PACKAGE}@${v22}`;
 }
 function buildClientVersion(override) {
@@ -65380,6 +65508,7 @@ var SecureChannel;
 var init_channel = __esm2({
   async "src/channel.ts"() {
     "use strict";
+    init_abstention();
     init_mls_commit_classify();
     await init_libsodium_wrappers();
     await init_dist();
@@ -65809,6 +65938,18 @@ var init_channel = __esm2({
       get ownHubAddress() {
         return this._persisted?.hubAddress ?? "";
       }
+      /** This agent's AgentVault hub_id. "" until enrolment persists it.
+       *
+       * Lives in the credential store, NOT in the channel config — which is where
+       * the memory-recall helper was reading it from. `channel.config.hubId` is
+       * unset for every agent enrolled through the normal flow, so
+       * `channel.config.hubId || ""` produced `/api/v1/agents//memory/search`, a
+       * 404 on every inbound message, swallowed by `if (!res.ok) return ""`.
+       * Memory recall was silently dead while the hub_id sat right here.
+       */
+      get ownHubId() {
+        return this._persisted?.hubId ?? "";
+      }
       /** Public best-effort trigger to (re)resolve this agent's display_name.
        * Called lazily from the 1:1 DM path when the name is still unknown, so a
        * resolve that failed at connect (or a fresh agent that hadn't registered
@@ -66197,6 +66338,7 @@ var init_channel = __esm2({
        * Each session gets the same plaintext encrypted independently.
        */
       async send(plaintext, options) {
+        if (isAbstention(plaintext)) return;
         if (this._state === "error" || this._state === "idle") {
           throw new Error("Channel is not ready");
         }
@@ -66525,7 +66667,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.27" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.29" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -66719,6 +66861,7 @@ var init_channel = __esm2({
        * Uses MLS (preferred) or pairwise fan-out as fallback.
        */
       async sendToRoom(roomId, plaintext, opts) {
+        if (isAbstention(plaintext)) return;
         if (!this._persisted?.rooms?.[roomId]) {
           throw new Error(`Room ${roomId} not found`);
         }
@@ -68462,7 +68605,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.27" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.29" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -68786,7 +68929,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.27" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.29" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -72930,6 +73073,45 @@ var init_gateway_send = __esm2({
     init_openclaw_compat();
   }
 });
+function parseMentions(text) {
+  const mentions = [];
+  const re22 = /@(\w[\w]*)/gi;
+  let match;
+  while ((match = re22.exec(text)) !== null) {
+    mentions.push(match[1].toLowerCase());
+  }
+  return mentions;
+}
+function owesRoomReply(plaintext, agentName, accountId, senderIsAgent, roomDisplayName, ownDisplayName, selfResolved = true) {
+  const mentions = parseMentions(plaintext);
+  if (mentions.length === 0) return false;
+  if (mentions.includes("all") || mentions.includes("everyone")) {
+    return senderIsAgent !== true;
+  }
+  const ownNames = ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName);
+  if (mentions.some((m22) => ownNames.has(m22))) return true;
+  if (!selfResolved) return true;
+  return false;
+}
+function ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName) {
+  const names = /* @__PURE__ */ new Set();
+  const add4 = (n22) => {
+    if (!n22) return;
+    const lower = n22.toLowerCase();
+    names.add(lower);
+    names.add(lower.split(/[\s(]/)[0]);
+  };
+  add4(agentName);
+  add4(accountId);
+  add4(roomDisplayName);
+  add4(ownDisplayName);
+  return names;
+}
+var init_room_protocol = __esm2({
+  "src/room-protocol.ts"() {
+    "use strict";
+  }
+});
 var init_llm_response_parser = __esm2({
   "src/llm-response-parser.ts"() {
     "use strict";
@@ -72963,6 +73145,7 @@ var isUsingManagedRoutes;
 var init_openclaw_entry = __esm2({
   "src/openclaw-entry.ts"() {
     "use strict";
+    init_room_protocol();
     init_account_config();
     init_fetch_interceptor();
     init_http_handlers();
@@ -99021,7 +99204,8 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.27" : "0.0.0-dev";
+    init_room_protocol();
+    VERSION = true ? "0.23.29" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -135189,9 +135373,32 @@ function roomTurnPrefix(roomId, senderName, roomName) {
   const room = roomName ? `"${roomName}"` : roomId.slice(0, 8);
   return `[room ${room} | ${senderName}]`;
 }
+function _makeOwesReply(agentName, channel, log) {
+  let warnedNoIdentity = false;
+  return (e7) => {
+    const own = agentName ?? "";
+    const hub = channel.ownDisplayName ?? "";
+    if (!own && !hub && !warnedNoIdentity) {
+      warnedNoIdentity = true;
+      log(
+        "WARNING: this bridge has no agentName and no hub display_name, so it cannot recognise its own @mention (#1107). It will answer @all and any @-addressed message (fail-open), but targeted replies will be unreliable. Set the agent name in the bridge config."
+      );
+    }
+    return owesRoomReply(
+      e7.plaintext,
+      own,
+      own,
+      e7.senderIsAgent,
+      void 0,
+      hub,
+      Boolean(own || hub)
+    );
+  };
+}
 function wireBridge(channel, session, target, opts = {}) {
   const log = opts.log ?? (() => {
   });
+  const _owesReply = _makeOwesReply(opts.agentName, channel, log);
   let workAllowed = false;
   const workAllowedGetter = () => workAllowed;
   opts.onWorkAllowed?.(workAllowedGetter);
@@ -135243,7 +135450,7 @@ function wireBridge(channel, session, target, opts = {}) {
     target.setRoom(e7.roomId);
     session.push(`${roomTurnPrefix(e7.roomId, e7.senderName, roomNames.get(e7.roomId))}: ${e7.plaintext}`, target.snapshotReply(channel, log), {
       autoReplyOnText: false,
-      replyExpected: e7.senderIsAgent === false,
+      replyExpected: _owesReply(e7),
       armed: () => arming.isArmed(e7.roomId)
     });
   });
@@ -135402,7 +135609,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.8.1" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.8.2" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {
@@ -135434,7 +135641,7 @@ async function main() {
     // its default would render "@agentvault/agentvault@0.7.x" — the wrong
     // package name attached to the bridge's version number, which is worse
     // than either alone.
-    clientVersion: `@agentvault/claude-bridge@${true ? "0.8.1" : "dev"}`
+    clientVersion: `@agentvault/claude-bridge@${true ? "0.8.2" : "dev"}`
   });
   const agentSystemPrompt = cfg.systemPrompt ?? `You are ${cfg.agentName}, an AI agent on AgentVault. You talk with your owner in 1:1 direct messages and collaborate with other agents in shared rooms. That is your identity \u2014 introduce yourself by that name and do not claim to be any other agent. To speak, call the say tool. In a 1:1 with your owner, reply to what they say. In a room you see every message \u2014 call say only when you have something worth adding, and otherwise stay silent. Keep messages concise.`;
   const deviceJwt = () => {
@@ -135514,6 +135721,9 @@ async function main() {
     {
       roomFilter: cfg.roomFilter,
       armRoom: cfg.armRoom,
+      // #1107: needed to recognise this agent's own @mention. Without it the
+      // agent can only answer @all.
+      agentName: cfg.agentName,
       log: (m6) => logLine("[bridge] " + m6),
       // Slice 2 Plan C (T11): live arm/disarm + local-approval poll + heartbeat.
       workspaceDir: cfg.workspaceDir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",