@agentvault/grok-bridge 0.4.1 → 0.4.2

package/dist/bridge.d.ts

@@ -9,9 +9,6 @@
  * Those are Claude-shaped; Grok's gate is the pre_tool_use hook and arrives with
  * the tools-on posture.
  */
-/** `RoomSession` is declared ONCE in this package, by grok-session.ts. The Claude
- *  bridge declares its own in its bridge.ts; that declaration was NOT copied.
- *  Type-only, so this cannot create a runtime import cycle. */
 import type { RoomSession } from "./grok-session.js";
 export interface RoomMessage {
     roomId: string;
@@ -167,6 +164,12 @@ export declare function attachLifecycle(channel: LifecycleChannel, opts?: {
  */
 export declare function roomTurnPrefix(roomId: string, senderName: string, roomName?: string): string;
 export declare function wireBridge(channel: RoomChannel, session: RoomSession, target: ActiveTarget, opts?: {
+    /**
+     * #1107: this agent's own name, used to recognise its own @mention. Threaded
+     * from the bridge config. Without it the agent can only ever answer @all —
+     * `_makeOwesReply` warns once, loudly, rather than going quietly deaf.
+     */
+    agentName?: string;
     roomFilter?: string;
     log?: (msg: string) => void;
 }): void;

package/dist/index.js

@@ -1074,6 +1074,28 @@ var __toESM = (mod4, isNodeMode, target) => (target = mod4 != null ? __create(__
   isNodeMode || !mod4 || !mod4.__esModule ? __defProp2(target, "default", { value: mod4, enumerable: true }) : target,
   mod4
 ));
+function stripWrappers(s2) {
+  let start = 0;
+  let end = s2.length;
+  while (start < end && WRAPPERS.includes(s2[start])) start++;
+  while (end > start && WRAPPERS.includes(s2[end - 1])) end--;
+  return s2.slice(start, end);
+}
+function isAbstention(text) {
+  if (typeof text !== "string") return false;
+  return stripWrappers(text).toLowerCase().startsWith(SENTINEL);
+}
+var SENTINEL;
+var WRAPPERS;
+var INSTRUCTION;
+var init_abstention = __esm2({
+  "src/abstention.ts"() {
+    "use strict";
+    SENTINEL = "[[no-reply]]";
+    WRAPPERS = " 	\r\n`\"'*_";
+    INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
+  }
+});
 function toEpoch(v2) {
   if (typeof v2 === "bigint") return v2;
   if (typeof v2 === "number") {
@@ -63752,6 +63774,39 @@ var init_mls_group = __esm2({
         const s2 = this._requireState();
         return s2.groupContext.groupId;
       }
+      /**
+       * Proof that this client actually holds the group's keys at its current
+       * epoch. Throws if not initialized.
+       *
+       * RFC 9420 §8.2's `epoch_authenticator`, derived from the epoch secret. Two
+       * properties make it the thing this codebase has been missing:
+       *
+       *   * every member at the same epoch computes the SAME value, so it is
+       *     comparable across clients and can be checked by a server;
+       *   * it cannot be computed without the key schedule, so possessing it is
+       *     evidence of membership rather than a claim about it. RFC 9420 names
+       *     this as its purpose: "to authenticate the shared group state".
+       *
+       * It is safe to publish. It is a KDF output over the epoch secret, not the
+       * secret, and the RFC intends it to be shown to out-of-band verifiers.
+       *
+       * WHY THIS EXISTS. `mls_groups.member_device_ids` records membership; the
+       * ability to decrypt lives only in one browser's localStorage. Nothing
+       * compared the two, and nothing could — so a device in the roster holding no
+       * keys was indistinguishable from a healthy one, on every signal the server
+       * has. Measured on production 2026-08-26: one owner device carried the keys
+       * for 19 of the 21 owner leaves on the platform, and one 1:1 group had been
+       * unreadable by its owner's browser for two months while every status column
+       * read healthy.
+       *
+       * `epoch` alone cannot do this job: it is a number the client reports about
+       * itself, it collides across groups, and a client that has lost its state
+       * still remembers one.
+       */
+      get epochAuthenticator() {
+        const s2 = this._requireState();
+        return s2.keySchedule.epochAuthenticator;
+      }
       /** The cipher suite name in use. */
       get ciphersuiteName() {
         return this._ciphersuiteName;
@@ -63902,11 +63957,84 @@ var init_mls_group = __esm2({
         return { commit: commitBytes, welcome: welcomeBytes };
       }
       /**
-       * Remove a member from the group by leaf index.
+       * Admit N members with TWO commits total, replacing any stale leaf they hold.
+       *
+       * `addMembers` cannot do this alone: MLS rejects an Add for an identity
+       * already in the tree, so a member that lost its local state must be removed
+       * first. Doing that pair PER MEMBER is what the fulfiller did, and it is not
+       * merely slow — it is self-defeating.
+       *
+       * Live 2026-08-28 14:02:21-28Z: the owner sweep re-admitted 7 room members
+       * sequentially, each as its own removeMember + addMembers. Room 007 ran
+       * **epoch 71 -> 85 in seven seconds**, and the Welcome minted for member n
+       * named an epoch that member n+1's commit had already replaced — so six of
+       * seven were stale before they finished joining, and one (`smartcode`) could
+       * not replay forward afterwards at all.
        *
-       * @param memberIndex - The leaf index of the member to remove.
-       * @returns The commit message to broadcast.
+       * 🎯 A REPAIR THAT MOVES THE EPOCH ONCE PER MEMBER IS RACING ITSELF.
+       *
+       * ⚠️ **Why two commits and not one.** RFC 9420 §12.3 allows Remove and Add in
+       * a single commit, and ts-mls builds it happily — but with MORE THAN ONE of
+       * each, a REMAINING member fails to process it:
+       *
+       *     OpenError  at applyUpdatePathSecret (ts-mls/src/createCommit.ts:471)
+       *                at updatePrivateKeyPath  (processMessages.ts:397)
+       *
+       * One remove + one add in a single commit is fine; 2+2 is not. That is
+       * pinned by a test in `mls-group.test.ts` so this cannot be "optimised" back
+       * into one commit without the failure showing up first. Two commits still
+       * turns 7 members from 14 epochs into 2, and every joiner lands current.
+       *
+       * @param keyPackages - Fresh KeyPackages, one per member to admit. Members
+       *   already holding a leaf are removed by the first commit; members with no
+       *   leaf are plain adds. Duplicate identities keep the first KeyPackage.
+       * @returns Every commit to broadcast IN ORDER, and the Welcome to deliver to
+       *   EVERY member in the batch (each finds its own secrets inside it).
        */
+      async reAdmitMembers(keyPackages) {
+        this._requireState();
+        await this._ensureCiphersuite();
+        const seenIdentities = [];
+        const toAdd = [];
+        const leavesToRemove = [];
+        for (const kp of keyPackages) {
+          const identity = keyPackageIdentity(kp);
+          if (identity !== null) {
+            if (seenIdentities.some((id) => bytesEqual(id, identity)))
+              continue;
+            seenIdentities.push(identity);
+            const leaf = this.memberLeafIndex(identity);
+            if (leaf !== null)
+              leavesToRemove.push(leaf);
+          }
+          toAdd.push(kp);
+        }
+        if (toAdd.length === 0) {
+          throw new Error("reAdmitMembers: no members to admit");
+        }
+        const commits = [];
+        if (leavesToRemove.length > 0) {
+          const { commit } = await this.removeMembers(leavesToRemove);
+          commits.push({ commit, epoch: this.epoch });
+        }
+        const added = await this.addMembers(toAdd);
+        commits.push({ commit: added.commit, epoch: this.epoch });
+        return { commits, welcome: added.welcome };
+      }
+      async removeMembers(memberIndices) {
+        const s2 = this._requireState();
+        const cs = await this._ensureCiphersuite();
+        if (memberIndices.length === 0) {
+          throw new Error("removeMembers: no members to remove");
+        }
+        const extraProposals = memberIndices.map((removed) => ({
+          proposalType: "remove",
+          remove: { removed }
+        }));
+        const result = await createCommit({ state: s2, cipherSuite: cs, pskIndex: this._pskIndex }, { extraProposals });
+        this.state = result.newState;
+        return { commit: encodeMlsMessage(result.commit) };
+      }
       async removeMember(memberIndex) {
         const s2 = this._requireState();
         const cs = await this._ensureCiphersuite();
@@ -64461,7 +64589,7 @@ var init_mls_kp_pool = __esm2({
   }
 });
 function ownIdentity() {
-  const v2 = true ? "0.23.27" : FALLBACK;
+  const v2 = true ? "0.23.29" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildClientVersion(override) {
@@ -65373,6 +65501,7 @@ var SecureChannel;
 var init_channel = __esm2({
   async "src/channel.ts"() {
     "use strict";
+    init_abstention();
     init_mls_commit_classify();
     await init_libsodium_wrappers();
     await init_dist();
@@ -65802,6 +65931,18 @@ var init_channel = __esm2({
       get ownHubAddress() {
         return this._persisted?.hubAddress ?? "";
       }
+      /** This agent's AgentVault hub_id. "" until enrolment persists it.
+       *
+       * Lives in the credential store, NOT in the channel config — which is where
+       * the memory-recall helper was reading it from. `channel.config.hubId` is
+       * unset for every agent enrolled through the normal flow, so
+       * `channel.config.hubId || ""` produced `/api/v1/agents//memory/search`, a
+       * 404 on every inbound message, swallowed by `if (!res.ok) return ""`.
+       * Memory recall was silently dead while the hub_id sat right here.
+       */
+      get ownHubId() {
+        return this._persisted?.hubId ?? "";
+      }
       /** Public best-effort trigger to (re)resolve this agent's display_name.
        * Called lazily from the 1:1 DM path when the name is still unknown, so a
        * resolve that failed at connect (or a fresh agent that hadn't registered
@@ -66190,6 +66331,7 @@ var init_channel = __esm2({
        * Each session gets the same plaintext encrypted independently.
        */
       async send(plaintext, options) {
+        if (isAbstention(plaintext)) return;
         if (this._state === "error" || this._state === "idle") {
           throw new Error("Channel is not ready");
         }
@@ -66518,7 +66660,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-        const pluginVersion = true ? "0.23.27" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.29" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -66712,6 +66854,7 @@ var init_channel = __esm2({
        * Uses MLS (preferred) or pairwise fan-out as fallback.
        */
       async sendToRoom(roomId, plaintext, opts) {
+        if (isAbstention(plaintext)) return;
         if (!this._persisted?.rooms?.[roomId]) {
           throw new Error(`Room ${roomId} not found`);
         }
@@ -68455,7 +68598,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.27" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.29" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -68779,7 +68922,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.27" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.29" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -72923,6 +73066,45 @@ var init_gateway_send = __esm2({
     init_openclaw_compat();
   }
 });
+function parseMentions(text) {
+  const mentions = [];
+  const re2 = /@(\w[\w]*)/gi;
+  let match;
+  while ((match = re2.exec(text)) !== null) {
+    mentions.push(match[1].toLowerCase());
+  }
+  return mentions;
+}
+function owesRoomReply(plaintext, agentName, accountId, senderIsAgent, roomDisplayName, ownDisplayName, selfResolved = true) {
+  const mentions = parseMentions(plaintext);
+  if (mentions.length === 0) return false;
+  if (mentions.includes("all") || mentions.includes("everyone")) {
+    return senderIsAgent !== true;
+  }
+  const ownNames = ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName);
+  if (mentions.some((m2) => ownNames.has(m2))) return true;
+  if (!selfResolved) return true;
+  return false;
+}
+function ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName) {
+  const names = /* @__PURE__ */ new Set();
+  const add4 = (n2) => {
+    if (!n2) return;
+    const lower = n2.toLowerCase();
+    names.add(lower);
+    names.add(lower.split(/[\s(]/)[0]);
+  };
+  add4(agentName);
+  add4(accountId);
+  add4(roomDisplayName);
+  add4(ownDisplayName);
+  return names;
+}
+var init_room_protocol = __esm2({
+  "src/room-protocol.ts"() {
+    "use strict";
+  }
+});
 var init_llm_response_parser = __esm2({
   "src/llm-response-parser.ts"() {
     "use strict";
@@ -72956,6 +73138,7 @@ var isUsingManagedRoutes;
 var init_openclaw_entry = __esm2({
   "src/openclaw-entry.ts"() {
     "use strict";
+    init_room_protocol();
     init_account_config();
     init_fetch_interceptor();
     init_http_handlers();
@@ -99014,7 +99197,8 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.27" : "0.0.0-dev";
+    init_room_protocol();
+    VERSION = true ? "0.23.29" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -99767,9 +99951,32 @@ function roomTurnPrefix(roomId, senderName, roomName) {
   const room = roomName ? `"${roomName}"` : roomId.slice(0, 8);
   return `[room ${room} | ${senderName}]`;
 }
+function _makeOwesReply(agentName, channel, log) {
+  let warnedNoIdentity = false;
+  return (e) => {
+    const own = agentName ?? "";
+    const hub = channel.ownDisplayName ?? "";
+    if (!own && !hub && !warnedNoIdentity) {
+      warnedNoIdentity = true;
+      log(
+        "WARNING: this bridge has no agentName and no hub display_name, so it cannot recognise its own @mention (#1107). It will answer @all and any @-addressed message (fail-open), but targeted replies will be unreliable. Set the agent name in the bridge config."
+      );
+    }
+    return owesRoomReply(
+      e.plaintext,
+      own,
+      own,
+      e.senderIsAgent,
+      void 0,
+      hub,
+      Boolean(own || hub)
+    );
+  };
+}
 function wireBridge(channel, session, target, opts = {}) {
   const log = opts.log ?? (() => {
   });
+  const _owesReply = _makeOwesReply(opts.agentName, channel, log);
   channel.on("error", (err) => {
     const msg = err instanceof Error ? err.message : String(err);
     log(`channel error (non-fatal, not a reconnect trigger): ${msg}`);
@@ -99808,7 +100015,7 @@ function wireBridge(channel, session, target, opts = {}) {
     target.setRoom(e.roomId);
     session.push(`${roomTurnPrefix(e.roomId, e.senderName, roomNames.get(e.roomId))}: ${e.plaintext}`, target.snapshotReply(channel, log), {
       autoReplyOnText: false,
-      replyExpected: e.senderIsAgent === false
+      replyExpected: _owesReply(e)
     });
   });
   channel.on("message", (text, metadata) => {
@@ -99917,7 +100124,7 @@ async function main() {
   const info = parseInfoFlags(process.argv.slice(2));
   if (info.showVersion || info.showHelp) {
     const version2 = buildClientVersion2(
-      true ? "0.4.1" : void 0
+      true ? "0.4.2" : void 0
     );
     if (info.showVersion) printLine(version2);
     if (info.showHelp) {
@@ -99970,7 +100177,7 @@ async function main() {
     agentName: cfg.agentName,
     platform: "node",
     clientVersion: buildClientVersion2(
-      true ? "0.4.1" : void 0
+      true ? "0.4.2" : void 0
     )
   });
   channelRef = channel;
@@ -100050,6 +100257,9 @@ async function main() {
   const target = new ActiveTarget();
   wireBridge(channel, session, target, {
     roomFilter: cfg.roomFilter,
+    // #1107: needed to recognise this agent's own @mention. Without it the
+    // agent can only answer @all.
+    agentName: cfg.agentName,
     log: (m2) => logLine("[grok-bridge] " + m2)
   });
   attachLifecycle2(channel, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/grok-bridge",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "type": "module",
   "description": "AgentVault Grok Bridge — daemon bridging a Grok agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",