@agentvault/grok-bridge 0.4.27 → 0.4.28

package/dist/index.js

@@ -11718,11 +11718,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.60" : FALLBACK;
+  const v2 = true ? "0.23.61" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "9599d8e" : "";
+  const raw = true ? "129e537" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12540,6 +12540,10 @@ function buildToolInvokeSpan(report) {
     "tool.duration_ms": durationMs
   };
   if (isError) attributes["tool.error_kind"] = safeErrorKind(report.errorKind);
+  const resets = report.limitResetsAt;
+  if (attributes["tool.error_kind"] === "plan_limit_reached" && typeof resets === "number" && Number.isInteger(resets) && resets > 0 && resets < 1e11) {
+    attributes["av.limit_resets_at"] = resets;
+  }
   if (kind !== "unknown" && typeof conv.id === "string" && conv.id) {
     attributes["av.conversation_id"] = conv.id.slice(0, 64);
   }
@@ -70780,6 +70784,11 @@ var init_dist = __esm({
           "ambiguous_target",
           "no_receipt",
           "invalid_request",
+          // #1467: the owner's own AI plan refused the turn (a bridge on a subscription).
+          "plan_limit_reached",
+          // #1467: a Muse turn failed — Meta answered 429, or anything else.
+          "model_rate_limited",
+          "model_error",
           UNCLASSIFIED_ERROR
         ];
         KNOWN_CODES = new Set(KNOWN_TOOL_ERROR_CODES);
@@ -70991,6 +71000,17 @@ var init_dist = __esm({
            *  self-heal rather than be logged and dropped. */
           _mlsCommitFailCounts = /* @__PURE__ */ new Map();
           static MAX_MLS_DECRYPT_FAILS = 3;
+          /**
+           * #1518: ids of MLS application frames this process has already decrypted
+           * (server-assigned `mls_messages.id`, the same on the live delivery pull and
+           * on a `/sync` / reconnect replay). A replayed frame cannot be decrypted a
+           * second time — forward secrecy deleted its key — so without this every
+           * reconnect after a backend deploy fed already-read messages into the
+           * decrypt-failure counter and re-admitted the agent (+2 epochs). Insertion
+           * ordered; the oldest ids fall out past DECRYPTED_ID_CAP.
+           */
+          _decryptedMessageIds = /* @__PURE__ */ new Map();
+          static DECRYPTED_ID_CAP = 5e3;
           /**
            * #1084: consecutive resyncs that found NOTHING to apply, per group.
            *
@@ -73196,7 +73216,7 @@ ${text}`,
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.60" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.61" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -75406,7 +75426,7 @@ ${text}`,
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.60" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.61" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75738,7 +75758,7 @@ ${text}`,
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.60" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.61" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -76174,9 +76194,14 @@ ${text}`,
               if (groupId) void this._requestWelcomeSelfHeal(groupId);
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS 1:1 frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const cipherBytes = new Uint8Array(Buffer.from(data.payload, "hex"));
               const result = await mgr.decrypt(cipherBytes);
+              this._rememberDecrypted(data.message_id);
               if (mgrKey) this._mlsDecryptFailCounts.delete(mgrKey);
               const mlsGroupId = (convGroupId ? this._persisted?.mlsGroups?.[convGroupId]?.mlsGroupId : null) ?? this._persisted?.mlsConversations?.[convId]?.mlsGroupId ?? groupId;
               if (mlsGroupId) {
@@ -77199,9 +77224,14 @@ ${baseText}`;
               }
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS room frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const ciphertext = Buffer.from(data.payload, "hex");
               const result = await mlsGroup.decrypt(new Uint8Array(ciphertext));
+              this._rememberDecrypted(data.message_id);
               this._mlsDecryptFailCounts.delete(resolvedRoomId);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mlsGroup.exportState()));
               if (result.isHandshake || !result.plaintext) {
@@ -78379,16 +78409,57 @@ ${baseText}`;
             }
             return await mlsGroup.encrypt(plaintextBytes);
           }
+          /** #1518: is the server answering at all? Bounded; any failure is "no". */
+          async _serverReachable() {
+            try {
+              const res = await fetch(`${this.config.apiUrl}/health`, { signal: AbortSignal.timeout(5e3) });
+              return res.ok;
+            } catch {
+              return false;
+            }
+          }
+          /** #1518: the server is down — don't re-key (that needs the same server).
+           *  Clear the run so the next failures ask again. Reported as handled. */
+          _deferResync(groupKey, groupId, why) {
+            this._mlsDecryptFailCounts.delete(groupKey);
+            console.warn(
+              `[SecureChannel] Resync for ${groupId.slice(0, 8)}: server unreachable (${why}) \u2014 NOT re-keying; will retry (#1518)`
+            );
+            return true;
+          }
+          /** #1518: has this process already decrypted the frame with this id? */
+          _alreadyDecrypted(messageId) {
+            return typeof messageId === "string" && messageId !== "" && this._decryptedMessageIds.has(messageId);
+          }
+          /** #1518: remember a decrypted frame's id (bounded; oldest dropped). */
+          _rememberDecrypted(messageId) {
+            if (typeof messageId !== "string" || messageId === "") return;
+            this._decryptedMessageIds.set(messageId, true);
+            if (this._decryptedMessageIds.size > _SecureChannel.DECRYPTED_ID_CAP) {
+              const oldest = this._decryptedMessageIds.keys().next().value;
+              if (oldest !== void 0) this._decryptedMessageIds.delete(oldest);
+            }
+          }
           async _resyncOnDivergence(groupKey, groupId) {
             const mgr = this._mlsGroups.get(groupKey);
             if (!mgr?.isInitialized) return false;
             const fromEpoch = Number(mgr.epoch);
             try {
-              const res = await fetch(
-                `${this.config.apiUrl}/api/v1/mls/groups/${groupId}/sync?last_epoch=${fromEpoch}`,
-                { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
-              );
+              let res;
+              try {
+                res = await fetch(
+                  `${this.config.apiUrl}/api/v1/mls/groups/${groupId}/sync?last_epoch=${fromEpoch}`,
+                  { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+                );
+              } catch (netErr) {
+                if (!await this._serverReachable()) return this._deferResync(groupKey, groupId, String(netErr));
+                console.warn(`[SecureChannel] Resync-on-divergence failed for ${groupId.slice(0, 8)}:`, netErr);
+                return false;
+              }
               if (!res.ok) {
+                if ((res.status >= 500 || res.status === 429) && !await this._serverReachable()) {
+                  return this._deferResync(groupKey, groupId, `HTTP ${res.status}`);
+                }
                 console.warn(`[SecureChannel] Resync /sync failed for ${groupId.slice(0, 8)}: ${res.status}`);
                 return false;
               }
@@ -79503,9 +79574,14 @@ ${baseText}`;
               console.warn(`[SecureChannel] MLS group not loaded for A2A ${a2aChannelId.slice(0, 8)}`);
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS A2A frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const ciphertext = new Uint8Array(Buffer.from(data.payload, "hex"));
               const result = await mlsGroup.decrypt(ciphertext);
+              this._rememberDecrypted(data.message_id);
               this._mlsDecryptFailCounts.delete(`a2a:${a2aChannelId}`);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mlsGroup.exportState()));
               if (result.isHandshake || !result.plaintext) {
@@ -102156,7 +102232,7 @@ data:
         await init_policy_enforcer();
         init_room_protocol();
         init_tool_telemetry();
-        VERSION = true ? "0.23.60" : "0.0.0-dev";
+        VERSION = true ? "0.23.61" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -104427,7 +104503,7 @@ async function main() {
   const info = parseInfoFlags(process.argv.slice(2));
   if (info.showVersion || info.showHelp) {
     const version2 = buildClientVersion2(
-      true ? "0.4.27" : void 0
+      true ? "0.4.28" : void 0
     );
     if (info.showVersion) printLine(version2);
     if (info.showHelp) {
@@ -104466,7 +104542,7 @@ async function main() {
     process.exit(0);
   }
   const cfg = loadConfig(process.env, process.argv.slice(2));
-  logLine(`[grok-bridge] version: ${true ? "0.4.27" : "dev"}`);
+  logLine(`[grok-bridge] version: ${true ? "0.4.28" : "dev"}`);
   mkdirSync7(cfg.workspaceDir, { recursive: true });
   mkdirSync7(cfg.fenceHome, { recursive: true });
   seedFenceCredential({
@@ -104481,7 +104557,7 @@ async function main() {
     agentName: cfg.agentName,
     platform: "node",
     clientVersion: buildClientVersion2(
-      true ? "0.4.27" : void 0
+      true ? "0.4.28" : void 0
     )
   });
   channelRef = channel;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/grok-bridge",
-  "version": "0.4.27",
+  "version": "0.4.28",
   "type": "module",
   "description": "AgentVault Grok Bridge — daemon bridging a Grok agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",