@agentvault/claude-bridge 0.8.4 → 0.8.5

package/dist/index.js

@@ -64011,6 +64011,8 @@ var init_mls_group = __esm2({
               continue;
             seenIdentities.push(identity);
             const leaf = this.memberLeafIndex(identity);
+            if (leaf !== null && leaf === this.ownLeafIndex())
+              continue;
             if (leaf !== null)
               leavesToRemove.push(leaf);
           }
@@ -64066,6 +64068,20 @@ var init_mls_group = __esm2({
        * then re-adds it with a fresh KeyPackage so it gets a Welcome at the
        * current epoch it can actually apply.
        */
+      /**
+       * The leaf index THIS manager occupies — the leaf whose private key it holds.
+       *
+       * Read from `privatePath.leafIndex`, which is the same value ts-mls uses to
+       * decide whether a commit removes its own committer, so a caller checking
+       * against this cannot disagree with the library about who "we" are.
+       *
+       * Exists so a fulfiller can tell a request from ANOTHER device apart from one
+       * from itself (#1147) without any "who am I" plumbing: the manager already
+       * knows, and a guard that reads it here cannot be forgotten by a call site.
+       */
+      ownLeafIndex() {
+        return this._requireState().privatePath.leafIndex;
+      }
       memberLeafIndex(identity) {
         const s22 = this._requireState();
         const tree = s22.ratchetTree;
@@ -64596,11 +64612,11 @@ var init_mls_kp_pool = __esm2({
   }
 });
 function ownIdentity() {
-  const v22 = true ? "0.23.31" : FALLBACK;
+  const v22 = true ? "0.23.32" : FALLBACK;
   return `${PACKAGE}@${v22}`;
 }
 function buildSha() {
-  const raw = true ? "3e1243a-dirty" : "";
+  const raw = true ? "564f8b1-dirty" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -66794,7 +66810,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.31" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.32" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -68732,7 +68748,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.31" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.32" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -69056,7 +69072,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.31" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.32" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69859,7 +69875,8 @@ ${baseText}`;
       async _downloadAndDecryptAttachment(info) {
         const attachDir = join4(this.config.dataDir, "attachments");
         await mkdir3(attachDir, { recursive: true });
-        const url22 = `${this.config.apiUrl}${info.blobUrl}`;
+        const sep3 = info.blobUrl.includes("?") ? "&" : "?";
+        const url22 = `${this.config.apiUrl}${info.blobUrl}${sep3}device_id=${encodeURIComponent(this._deviceId ?? "")}`;
         const res = await fetch(url22, {
           headers: { Authorization: `Bearer ${this._deviceJwt}` }
         });
@@ -70411,10 +70428,12 @@ ${baseText}`;
           const rawPlaintext = new TextDecoder().decode(result.plaintext);
           let messageText;
           let messageType;
+          let roomAttachment = null;
           try {
             const parsed = JSON.parse(rawPlaintext);
             messageType = parsed.type || "message";
             messageText = parsed.text || rawPlaintext;
+            if (parsed.attachment) roomAttachment = parsed.attachment;
           } catch {
             messageType = "message";
             messageText = rawPlaintext;
@@ -70454,6 +70473,9 @@ ${baseText}`;
               await this._refreshRoomRoster(resolvedRoomId);
             }
           }
+          if (roomAttachment) {
+            messageText = await this._augmentWithAttachment(roomAttachment, messageText);
+          }
           const roomMembers = this._persisted?.rooms?.[resolvedRoomId]?.members ?? [];
           const senderMember = roomMembers.find((m22) => m22.deviceId === senderDeviceId);
           const senderIsAgent = senderMember?.entityType === "agent";
@@ -99410,7 +99432,7 @@ var init_index = __esm2({
     await init_skill_telemetry();
     await init_policy_enforcer();
     init_room_protocol();
-    VERSION = true ? "0.23.31" : "0.0.0-dev";
+    VERSION = true ? "0.23.32" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -135814,7 +135836,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  logLine(`[bridge] version: ${true ? "0.8.4" : "dev"}`);
+  logLine(`[bridge] version: ${true ? "0.8.5" : "dev"}`);
   logLine(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   logLine(`[bridge] workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);
   if (cfg.armRoom) {
@@ -135846,7 +135868,7 @@ async function main() {
     // its default would render "@agentvault/agentvault@0.7.x" — the wrong
     // package name attached to the bridge's version number, which is worse
     // than either alone.
-    clientVersion: `@agentvault/claude-bridge@${true ? "0.8.4" : "dev"}`
+    clientVersion: `@agentvault/claude-bridge@${true ? "0.8.5" : "dev"}`
   });
   const agentSystemPrompt = cfg.systemPrompt ?? `You are ${cfg.agentName}, an AI agent on AgentVault. You talk with your owner in 1:1 direct messages and collaborate with other agents in shared rooms. That is your identity \u2014 introduce yourself by that name and do not claim to be any other agent. To speak, call the say tool. In a 1:1 with your owner, reply to what they say. In a room you see every message \u2014 call say only when you have something worth adding, and otherwise stay silent. Keep messages concise.`;
   const deviceJwt = () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",