@agentvault/grok-bridge 0.3.0 → 0.3.2

package/dist/index.js

@@ -490,8 +490,17 @@ var subcommand_exports = {};
 __export(subcommand_exports, {
   maybeRunServiceSubcommand: () => maybeRunServiceSubcommand
 });
+function requireAgentName(env) {
+  const name = env.AV_AGENT_NAME?.trim();
+  if (!name) {
+    throw new Error(
+      "AV_AGENT_NAME is required \u2014 it names WHICH agent's service to act on. Re-run as: AV_AGENT_NAME=<agent-name> agentvault-grok-bridge <subcommand>"
+    );
+  }
+  return name;
+}
 function labelFor(env) {
-  return `dev.agentvault.grok-${slugify2(env.AV_AGENT_NAME ?? "grok")}`;
+  return `dev.agentvault.grok-${slugify2(requireAgentName(env))}`;
 }
 function maybeRunServiceSubcommand(argv, env, deps) {
   const cmd = argv[2];
@@ -511,6 +520,7 @@ function maybeRunServiceSubcommand(argv, env, deps) {
   const log = deps?.log ?? ((m2) => logLine("[grok-bridge] " + m2));
   try {
     if (cmd === "install") {
+      requireAgentName(env);
       const cfg = loadConfig(env, []);
       const firstBoot = !hasPersistedCreds(cfg.dataDir) && !!cfg.inviteToken;
       if (firstBoot) {
@@ -530,7 +540,9 @@ function maybeRunServiceSubcommand(argv, env, deps) {
         log("now APPROVE the device in AgentVault \u2014 the service is waiting to enrol");
         log("if it does not connect within a minute, the log above says why");
       }
-      log(`check it with: agentvault-grok-bridge status`);
+      log(
+        `check it with: AV_AGENT_NAME=${cfg.agentName} agentvault-grok-bridge status`
+      );
     } else if (cmd === "uninstall") {
       const label = labelFor(env);
       backend.uninstall(label);
@@ -722,6 +734,25 @@ var __toESM = (mod4, isNodeMode, target) => (target = mod4 != null ? __create(__
   isNodeMode || !mod4 || !mod4.__esModule ? __defProp2(target, "default", { value: mod4, enumerable: true }) : target,
   mod4
 ));
+function toEpoch(v2) {
+  if (typeof v2 === "bigint") return v2;
+  if (typeof v2 === "number") {
+    return Number.isFinite(v2) ? BigInt(Math.trunc(v2)) : null;
+  }
+  if (typeof v2 === "string" && /^\d+$/.test(v2)) return BigInt(v2);
+  return null;
+}
+function classifyCommitFailure(messageEpoch, groupEpoch) {
+  const msg = toEpoch(messageEpoch);
+  const grp = toEpoch(groupEpoch);
+  if (msg === null || grp === null) return "count";
+  return msg < grp ? "already-applied" : "count";
+}
+var init_mls_commit_classify = __esm2({
+  "src/mls-commit-classify.ts"() {
+    "use strict";
+  }
+});
 var __filename;
 var __dirname;
 var url2;
@@ -64069,7 +64100,7 @@ var init_mls_kp_pool = __esm2({
   }
 });
 function ownIdentity() {
-  const v2 = true ? "0.23.22" : FALLBACK;
+  const v2 = true ? "0.23.23" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildClientVersion(override) {
@@ -64981,6 +65012,7 @@ var SecureChannel;
 var init_channel = __esm2({
   async "src/channel.ts"() {
     "use strict";
+    init_mls_commit_classify();
     await init_libsodium_wrappers();
     await init_dist();
     await init_dist();
@@ -66047,7 +66079,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.22" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.23" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67957,7 +67989,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.22" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.23" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -68281,7 +68313,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.22" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.23" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -69687,7 +69719,14 @@ ${messageText}`;
                 console.log(`[SecureChannel] MLS commit processed for room ${roomId.slice(0, 8)} (epoch=${mlsGroup.epoch})`);
                 this._mlsCommitFailCounts.delete(roomId);
               } catch (err) {
-                await this._onCommitFailure(roomId, groupId, err, `room ${roomId.slice(0, 8)}`);
+                await this._onCommitFailure(
+                  roomId,
+                  groupId,
+                  err,
+                  `room ${roomId.slice(0, 8)}`,
+                  data.epoch,
+                  mlsGroup.epoch
+                );
               }
             } else {
               this._bufferMlsCommit(groupId, epoch, data);
@@ -69707,7 +69746,14 @@ ${messageText}`;
                 console.log(`[SecureChannel] MLS commit processed for A2A ${chId.slice(0, 8)} (epoch=${mlsGroup.epoch})`);
                 this._mlsCommitFailCounts.delete(`a2a:${chId}`);
               } catch (err) {
-                await this._onCommitFailure(`a2a:${chId}`, groupId, err, `A2A ${chId.slice(0, 8)}`);
+                await this._onCommitFailure(
+                  `a2a:${chId}`,
+                  groupId,
+                  err,
+                  `A2A ${chId.slice(0, 8)}`,
+                  data.epoch,
+                  mlsGroup.epoch
+                );
               }
             } else {
               this._bufferMlsCommit(groupId, epoch, data);
@@ -69793,7 +69839,13 @@ ${messageText}`;
        * Never re-throws. The caller's only handler logs and drops, so throwing here
        * is indistinguishable from swallowing — it just moves the swallow one frame up.
        */
-      async _onCommitFailure(groupKey, mlsGroupId, err, label) {
+      async _onCommitFailure(groupKey, mlsGroupId, err, label, messageEpoch, groupEpoch) {
+        if (classifyCommitFailure(messageEpoch, groupEpoch) === "already-applied") {
+          console.debug(
+            `[SecureChannel] Skipping already-applied MLS commit for ${label} (commit epoch ${String(messageEpoch)} is behind group epoch ${String(groupEpoch)})`
+          );
+          return;
+        }
         const count = (this._mlsCommitFailCounts.get(groupKey) ?? 0) + 1;
         this._mlsCommitFailCounts.set(groupKey, count);
         console.error(
@@ -71691,7 +71743,7 @@ ${messageText}`;
           return;
         }
         this._authFailedThisSession = true;
-        const authReason = data?.reason ?? "device_revoked";
+        const authReason = data?.reason ?? "unknown";
         console.warn(
           `[SecureChannel] connection_rejected (reason=${data?.reason ?? "unknown"}, retryable=false) \u2014 terminal; surfacing auth_failed`
         );
@@ -98272,7 +98324,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.22" : "0.0.0-dev";
+    VERSION = true ? "0.23.23" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -99135,7 +99187,7 @@ async function main() {
   const info = parseInfoFlags(process.argv.slice(2));
   if (info.showVersion || info.showHelp) {
     const version2 = buildClientVersion2(
-      true ? "0.3.0" : void 0
+      true ? "0.3.2" : void 0
     );
     if (info.showVersion) printLine(version2);
     if (info.showHelp) {
@@ -99193,7 +99245,7 @@ async function main() {
     agentName: cfg.agentName,
     platform: "node",
     clientVersion: buildClientVersion2(
-      true ? "0.3.0" : void 0
+      true ? "0.3.2" : void 0
     )
   });
   channelRef = channel;

package/dist/service/subcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAQD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CA6GT"}
+{"version":3,"file":"subcommand.d.ts","sourceRoot":"","sources":["../../src/service/subcommand.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAiDD;;uFAEuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAqHT"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/grok-bridge",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "type": "module",
   "description": "AgentVault Grok Bridge — daemon bridging a Grok agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",