@agentvault/muse-bridge 0.1.6 → 0.1.7

package/dist/index.js

@@ -11465,11 +11465,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.31" : FALLBACK;
+  const v2 = true ? "0.23.32" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "3e1243a-dirty" : "";
+  const raw = true ? "564f8b1-dirty" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -68283,6 +68283,8 @@ var init_dist = __esm({
                   continue;
                 seenIdentities.push(identity);
                 const leaf = this.memberLeafIndex(identity);
+                if (leaf !== null && leaf === this.ownLeafIndex())
+                  continue;
                 if (leaf !== null)
                   leavesToRemove.push(leaf);
               }
@@ -68338,6 +68340,20 @@ var init_dist = __esm({
            * then re-adds it with a fresh KeyPackage so it gets a Welcome at the
            * current epoch it can actually apply.
            */
+          /**
+           * The leaf index THIS manager occupies — the leaf whose private key it holds.
+           *
+           * Read from `privatePath.leafIndex`, which is the same value ts-mls uses to
+           * decide whether a commit removes its own committer, so a caller checking
+           * against this cannot disagree with the library about who "we" are.
+           *
+           * Exists so a fulfiller can tell a request from ANOTHER device apart from one
+           * from itself (#1147) without any "who am I" plumbing: the manager already
+           * knows, and a guard that reads it here cannot be forgotten by a call site.
+           */
+          ownLeafIndex() {
+            return this._requireState().privatePath.leafIndex;
+          }
           memberLeafIndex(identity) {
             const s2 = this._requireState();
             const tree = s2.ratchetTree;
@@ -70148,7 +70164,7 @@ var init_dist = __esm({
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.31" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.32" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -72086,7 +72102,7 @@ var init_dist = __esm({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.31" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.32" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -72410,7 +72426,7 @@ var init_dist = __esm({
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.31" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.32" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -73213,7 +73229,8 @@ ${baseText}`;
           async _downloadAndDecryptAttachment(info) {
             const attachDir = join42(this.config.dataDir, "attachments");
             await mkdir3(attachDir, { recursive: true });
-            const url22 = `${this.config.apiUrl}${info.blobUrl}`;
+            const sep2 = info.blobUrl.includes("?") ? "&" : "?";
+            const url22 = `${this.config.apiUrl}${info.blobUrl}${sep2}device_id=${encodeURIComponent(this._deviceId ?? "")}`;
             const res = await fetch(url22, {
               headers: { Authorization: `Bearer ${this._deviceJwt}` }
             });
@@ -73765,10 +73782,12 @@ ${baseText}`;
               const rawPlaintext = new TextDecoder().decode(result.plaintext);
               let messageText;
               let messageType;
+              let roomAttachment = null;
               try {
                 const parsed = JSON.parse(rawPlaintext);
                 messageType = parsed.type || "message";
                 messageText = parsed.text || rawPlaintext;
+                if (parsed.attachment) roomAttachment = parsed.attachment;
               } catch {
                 messageType = "message";
                 messageText = rawPlaintext;
@@ -73808,6 +73827,9 @@ ${baseText}`;
                   await this._refreshRoomRoster(resolvedRoomId);
                 }
               }
+              if (roomAttachment) {
+                messageText = await this._augmentWithAttachment(roomAttachment, messageText);
+              }
               const roomMembers = this._persisted?.rooms?.[resolvedRoomId]?.members ?? [];
               const senderMember = roomMembers.find((m2) => m2.deviceId === senderDeviceId);
               const senderIsAgent = senderMember?.entityType === "agent";
@@ -97717,7 +97739,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.31" : "0.0.0-dev";
+        VERSION = true ? "0.23.32" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -99093,7 +99115,7 @@ function mkdir700(path2) {
   chmodSync5(path2, 448);
 }
 function packageVersion() {
-  return true ? "0.1.6" : void 0;
+  return true ? "0.1.7" : void 0;
 }
 function helpText(version2) {
   return [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/muse-bridge",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "type": "module",
   "description": "AgentVault Muse Bridge — daemon bridging a Muse agent into E2E-encrypted AgentVault direct messages and rooms.",
   "main": "dist/index.js",