@silicaclaw/cli 2026.3.20-17 → 2026.3.20-19

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## v1.0 beta - 2026-03-20
 
+### 2026.3.20-19
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-18
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
 ### 2026.3.20-17
 
 - release build:

package/VERSION

@@ -1 +1 @@
-v2026.3.20-17
+v2026.3.20-19

package/apps/local-console/dist/apps/local-console/src/server.d.ts

@@ -1,5 +1,5 @@
 import { AgentIdentity, DirectoryState, ProfileInput, PublicProfile, PublicProfileSummary, SocialConfig, SocialMessageRecord, SocialRuntimeConfig } from "@silicaclaw/core";
-import { SocialMessageGovernanceConfig } from "@silicaclaw/storage";
+import { PrivateMessagingRuntimeState, SocialMessageGovernanceConfig } from "@silicaclaw/storage";
 type InitState = {
     identity_auto_created: boolean;
     profile_auto_created: boolean;
@@ -170,6 +170,7 @@ export declare class LocalNodeService {
     private privateMessageRepo;
     private privateMessageReceiptRepo;
     private privateEncryptionKeyRepo;
+    private privateMessagingRuntimeRepo;
     private socialRuntimeRepo;
     private identity;
     private profile;
@@ -179,7 +180,9 @@ export declare class LocalNodeService {
     private privateMessages;
     private privateMessageReceipts;
     private privateEncryptionKeyPair;
+    private privateMessagingRuntime;
     private privatePeerRoutes;
+    private privatePeerEncryptionKeys;
     private privateMessageBodyCache;
     private privateMessageDeliveryStatusCache;
     private messageGovernance;
@@ -646,6 +649,7 @@ export declare class LocalNodeService {
         encryption_public_key: string;
         conversation_count: number;
         message_count: number;
+        runtime: PrivateMessagingRuntimeState | null;
     };
     getPrivateConversations(): Array<{
         conversation_id: string;
@@ -850,6 +854,8 @@ export declare class LocalNodeService {
     private persistPrivateMessageReceipts;
     private flushPrivatePersistence;
     private flushPrivateMessagesPersist;
+    private hydratePrivateMessageBodyCache;
+    private buildPersistedPrivateMessages;
     private flushPrivateMessageReceiptsPersist;
     private log;
     private getAdapterDiagnostics;
@@ -857,6 +863,8 @@ export declare class LocalNodeService {
     private toPublicProfileSummary;
     private mergeMessageOnlyAgentSummaries;
     private fingerprintPublicKey;
+    private buildPrivateMessagingRuntimeState;
+    private refreshPrivateMessagingRuntime;
     private getOnboardingSummary;
     private getDefaultDisplayName;
     private getModeExplainer;

package/apps/local-console/dist/apps/local-console/src/server.js

@@ -776,6 +776,7 @@ class LocalNodeService {
     privateMessageRepo;
     privateMessageReceiptRepo;
     privateEncryptionKeyRepo;
+    privateMessagingRuntimeRepo;
     socialRuntimeRepo;
     identity = null;
     profile = null;
@@ -785,7 +786,9 @@ class LocalNodeService {
     privateMessages = [];
     privateMessageReceipts = [];
     privateEncryptionKeyPair = null;
+    privateMessagingRuntime = null;
     privatePeerRoutes = {};
+    privatePeerEncryptionKeys = {};
     privateMessageBodyCache = new Map();
     privateMessageDeliveryStatusCache = new Map();
     messageGovernance;
@@ -862,6 +865,7 @@ class LocalNodeService {
         this.privateMessageRepo = new storage_1.PrivateMessageRepo(this.storageRoot);
         this.privateMessageReceiptRepo = new storage_1.PrivateMessageReceiptRepo(this.storageRoot);
         this.privateEncryptionKeyRepo = new storage_1.PrivateEncryptionKeyRepo(this.storageRoot);
+        this.privateMessagingRuntimeRepo = new storage_1.PrivateMessagingRuntimeRepo(this.storageRoot);
         this.socialRuntimeRepo = new storage_1.SocialRuntimeRepo(this.storageRoot);
         this.messageGovernance = this.defaultMessageGovernance();
         let loadedSocial = (0, core_1.loadSocialConfig)(this.projectRoot);
@@ -1623,6 +1627,7 @@ class LocalNodeService {
             encryption_public_key: this.privateEncryptionKeyPair?.public_key || "",
             conversation_count: this.getPrivateConversations().length,
             message_count: this.privateMessages.length,
+            runtime: this.privateMessagingRuntime,
         };
     }
     getPrivateConversations() {
@@ -1638,12 +1643,13 @@ class LocalNodeService {
             const peerProfile = this.directory.profiles[peerAgentId];
             const current = conversations.get(message.conversation_id);
             const nextLast = Math.max(current?.last_message_at || 0, message.created_at || 0) || null;
+            const learnedPeerKey = this.privatePeerEncryptionKeys[peerAgentId] || "";
             conversations.set(message.conversation_id, {
                 conversation_id: message.conversation_id,
                 peer_agent_id: peerAgentId,
                 peer_display_name: peerProfile?.display_name || peerAgentId,
                 peer_avatar_url: peerProfile?.avatar_url || "",
-                peer_public_key: peerProfile?.private_encryption_public_key || "",
+                peer_public_key: learnedPeerKey || peerProfile?.private_encryption_public_key || "",
                 last_message_at: nextLast,
                 unread_count: current?.unread_count || 0,
             });
@@ -1665,8 +1671,8 @@ class LocalNodeService {
             }
             return !normalizedConversationId || message.conversation_id === normalizedConversationId;
         })
-            .sort((a, b) => a.created_at - b.created_at)
-            .slice(-resolvedLimit)
+            .sort((a, b) => b.created_at - a.created_at)
+            .slice(0, resolvedLimit)
             .map((message) => ({
             message_id: message.message_id,
             conversation_id: message.conversation_id,
@@ -1685,7 +1691,9 @@ class LocalNodeService {
             return { sent: false, reason: "missing_identity_or_private_key" };
         }
         const toAgentId = String(input.to_agent_id || "").trim();
-        const recipientKey = String(input.recipient_encryption_public_key || "").trim();
+        const learnedRecipientKey = this.privatePeerEncryptionKeys[toAgentId] || "";
+        const profileRecipientKey = this.directory.profiles[toAgentId]?.private_encryption_public_key || "";
+        const recipientKey = String(learnedRecipientKey || input.recipient_encryption_public_key || profileRecipientKey || "").trim();
         const body = String(input.body || "").trim();
         if (toAgentId === this.identity.agent_id) {
             return { sent: false, reason: "self_private_message_not_allowed" };
@@ -1717,6 +1725,7 @@ class LocalNodeService {
         if (toPeerId && typeof this.network.sendDirect === "function") {
             try {
                 await this.network.sendDirect(toPeerId, PRIVATE_MESSAGE_TOPIC, message);
+                await this.publish(PRIVATE_MESSAGE_TOPIC, message);
                 reason = "direct-sent";
             }
             catch {
@@ -2345,8 +2354,11 @@ class LocalNodeService {
         };
         this.socialMessages = this.normalizeSocialMessages(await this.socialMessageRepo.get());
         this.socialMessageObservations = this.normalizeSocialMessageObservations(await this.socialMessageObservationRepo.get());
-        this.privateMessages = this.normalizePrivateMessages(await this.privateMessageRepo.get());
+        const storedPrivateMessages = await this.privateMessageRepo.get();
+        this.hydratePrivateMessageBodyCache(storedPrivateMessages);
+        this.privateMessages = this.normalizePrivateMessages(storedPrivateMessages);
         this.privateMessageReceipts = this.normalizePrivateMessageReceipts(await this.privateMessageReceiptRepo.get());
+        await this.refreshPrivateMessagingRuntime();
         this.directory = (0, core_1.ingestProfileRecord)(this.directory, { type: "profile", profile: this.profile });
         this.compactCacheInMemory();
         await this.persistCache();
@@ -2439,7 +2451,7 @@ class LocalNodeService {
                     return;
                 }
             }
-            if (meta?.peerId && record.profile.agent_id) {
+            if (meta?.peerId && record.profile.agent_id && !this.privatePeerRoutes[record.profile.agent_id]) {
                 this.privatePeerRoutes[record.profile.agent_id] = meta.peerId;
             }
             this.directory = (0, core_1.ingestProfileRecord)(this.directory, record);
@@ -2458,7 +2470,7 @@ class LocalNodeService {
                     return;
                 }
             }
-            if (meta?.peerId && record.agent_id) {
+            if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
                 this.privatePeerRoutes[record.agent_id] = meta.peerId;
             }
             this.directory = (0, core_1.ingestPresenceRecord)(this.directory, record);
@@ -2475,7 +2487,7 @@ class LocalNodeService {
                 await this.log("warn", `Rejected social message with invalid signature (${record.message_id.slice(0, 10)})`);
                 return;
             }
-            if (meta?.peerId && record.agent_id) {
+            if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
                 this.privatePeerRoutes[record.agent_id] = meta.peerId;
             }
             if (this.hasSocialMessage(record.message_id)) {
@@ -2519,6 +2531,12 @@ class LocalNodeService {
             if (!record || !(0, core_1.verifyPrivateMessage)(record)) {
                 return;
             }
+            if (meta?.peerId && record.from_agent_id) {
+                this.privatePeerRoutes[record.from_agent_id] = meta.peerId;
+            }
+            if (record.from_agent_id && record.sender_encryption_public_key) {
+                this.privatePeerEncryptionKeys[record.from_agent_id] = record.sender_encryption_public_key;
+            }
             if (record.to_agent_id !== this.identity?.agent_id || this.hasPrivateMessage(record.message_id)) {
                 return;
             }
@@ -2531,6 +2549,9 @@ class LocalNodeService {
         if (!receipt || !(0, core_1.verifyPrivateMessageReceipt)(receipt)) {
             return;
         }
+        if (meta?.peerId && receipt.from_agent_id) {
+            this.privatePeerRoutes[receipt.from_agent_id] = meta.peerId;
+        }
         if (receipt.to_agent_id !== this.identity?.agent_id) {
             return;
         }
@@ -2840,7 +2861,37 @@ class LocalNodeService {
             return;
         }
         this.privateMessagesPersistDirty = false;
-        await this.privateMessageRepo.set(this.privateMessages);
+        await this.privateMessageRepo.set(this.buildPersistedPrivateMessages());
+    }
+    hydratePrivateMessageBodyCache(items) {
+        if (!Array.isArray(items)) {
+            return;
+        }
+        for (const item of items) {
+            if (typeof item !== "object" || item === null) {
+                continue;
+            }
+            const record = item;
+            const messageId = String(record.message_id || "").trim();
+            const localPlaintext = typeof record.local_plaintext === "string" ? record.local_plaintext : "";
+            if (messageId && localPlaintext) {
+                this.privateMessageBodyCache.set(messageId, localPlaintext);
+            }
+        }
+    }
+    buildPersistedPrivateMessages() {
+        return this.privateMessages.map((message) => {
+            const localPlaintext = message.from_agent_id === this.identity?.agent_id
+                ? this.privateMessageBodyCache.get(message.message_id) || ""
+                : "";
+            if (!localPlaintext) {
+                return { ...message };
+            }
+            return {
+                ...message,
+                local_plaintext: localPlaintext,
+            };
+        });
     }
     async flushPrivateMessageReceiptsPersist() {
         if (this.privateMessageReceiptsPersistTimer) {
@@ -2975,6 +3026,45 @@ class LocalNodeService {
         const digest = (0, crypto_1.createHash)("sha256").update(publicKey, "utf8").digest("hex");
         return `${digest.slice(0, 12)}:${digest.slice(-8)}`;
     }
+    buildPrivateMessagingRuntimeState() {
+        const warnings = [];
+        const keypair = this.privateEncryptionKeyPair;
+        const selfSentMessages = this.privateMessages.filter((message) => message.from_agent_id === this.identity?.agent_id);
+        let cachedPlaintextCount = 0;
+        for (const message of selfSentMessages) {
+            if (this.privateMessageBodyCache.get(message.message_id)) {
+                cachedPlaintextCount += 1;
+            }
+        }
+        if (!keypair?.public_key || !keypair?.private_key) {
+            warnings.push("missing_private_encryption_keypair");
+        }
+        if (selfSentMessages.length > 0 && cachedPlaintextCount === 0) {
+            warnings.push("missing_local_plaintext_cache_for_self_messages");
+        }
+        if (selfSentMessages.length > 0 && cachedPlaintextCount < selfSentMessages.length) {
+            warnings.push("partial_local_plaintext_cache_for_self_messages");
+        }
+        return {
+            schema_version: 1,
+            app_version: this.appVersion,
+            last_started_at: Date.now(),
+            encryption_public_key: keypair?.public_key || "",
+            encryption_public_key_fingerprint: keypair?.public_key ? this.fingerprintPublicKey(keypair.public_key) : "",
+            message_count: this.privateMessages.length,
+            self_sent_count: selfSentMessages.length,
+            cached_plaintext_count: cachedPlaintextCount,
+            warnings,
+        };
+    }
+    async refreshPrivateMessagingRuntime() {
+        const runtime = this.buildPrivateMessagingRuntimeState();
+        this.privateMessagingRuntime = runtime;
+        await this.privateMessagingRuntimeRepo.set(runtime);
+        for (const warning of runtime.warnings) {
+            await this.log("warn", `Private messaging startup check: ${warning}`);
+        }
+    }
     getOnboardingSummary() {
         const summary = this.getIntegrationSummary();
         const publicEnabled = Boolean(this.profile?.public_enabled);
@@ -3282,6 +3372,7 @@ class LocalNodeService {
         this.ingestPrivateMessageReceipt(receipt);
         try {
             await this.network.sendDirect(replyPeerId, PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
+            await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
         }
         catch {
             await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);

package/apps/local-console/dist/packages/storage/src/repos.d.ts

@@ -40,6 +40,17 @@ export type SocialMessageGovernanceConfig = {
 export type PrivateMessageDecryptedContent = {
     body: string;
 };
+export type PrivateMessagingRuntimeState = {
+    schema_version: number;
+    app_version: string;
+    last_started_at: number;
+    encryption_public_key: string;
+    encryption_public_key_fingerprint: string;
+    message_count: number;
+    self_sent_count: number;
+    cached_plaintext_count: number;
+    warnings: string[];
+};
 export declare class IdentityRepo extends JsonFileRepo<AgentIdentity | null> {
     constructor(rootDir?: string);
 }
@@ -71,3 +82,6 @@ export declare class PrivateMessageReceiptRepo extends JsonFileRepo<PrivateMessa
 export declare class PrivateEncryptionKeyRepo extends JsonFileRepo<PrivateEncryptionKeyPair | null> {
     constructor(rootDir?: string);
 }
+export declare class PrivateMessagingRuntimeRepo extends JsonFileRepo<PrivateMessagingRuntimeState> {
+    constructor(rootDir?: string);
+}

package/apps/local-console/dist/packages/storage/src/repos.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
+exports.PrivateMessagingRuntimeRepo = exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
 const path_1 = require("path");
 const core_1 = require("@silicaclaw/core");
 const jsonRepo_1 = require("./jsonRepo");
@@ -83,3 +83,19 @@ class PrivateEncryptionKeyRepo extends jsonRepo_1.JsonFileRepo {
     }
 }
 exports.PrivateEncryptionKeyRepo = PrivateEncryptionKeyRepo;
+class PrivateMessagingRuntimeRepo extends jsonRepo_1.JsonFileRepo {
+    constructor(rootDir = process.cwd()) {
+        super((0, path_1.resolve)(rootDir, ".silicaclaw", "private-messaging.runtime.json"), () => ({
+            schema_version: 1,
+            app_version: "",
+            last_started_at: 0,
+            encryption_public_key: "",
+            encryption_public_key_fingerprint: "",
+            message_count: 0,
+            self_sent_count: 0,
+            cached_plaintext_count: 0,
+            warnings: [],
+        }));
+    }
+}
+exports.PrivateMessagingRuntimeRepo = PrivateMessagingRuntimeRepo;

package/apps/local-console/src/server.ts

@@ -72,6 +72,8 @@ import {
   IdentityRepo,
   LogRepo,
   PrivateEncryptionKeyRepo,
+  PrivateMessagingRuntimeRepo,
+  PrivateMessagingRuntimeState,
   PrivateMessageReceiptRepo,
   PrivateMessageRepo,
   ProfileRepo,
@@ -139,6 +141,10 @@ const SOCIAL_MESSAGE_REPLAY_MAX_PER_BROADCAST = Number(process.env.SOCIAL_MESSAG
 const SOCIAL_MESSAGE_REPLAY_REFRESH_INTERVAL_MS = Number(
   process.env.SOCIAL_MESSAGE_REPLAY_REFRESH_INTERVAL_MS || 120_000
 );
+
+type StoredPrivateMessageRecord = PrivateMessageRecord & {
+  local_plaintext?: string;
+};
 const PROFILE_RELAY_REFRESH_INTERVAL_MS = Number(
   process.env.PROFILE_RELAY_REFRESH_INTERVAL_MS || 120_000
 );
@@ -1035,6 +1041,7 @@ export class LocalNodeService {
   private privateMessageRepo: PrivateMessageRepo;
   private privateMessageReceiptRepo: PrivateMessageReceiptRepo;
   private privateEncryptionKeyRepo: PrivateEncryptionKeyRepo;
+  private privateMessagingRuntimeRepo: PrivateMessagingRuntimeRepo;
   private socialRuntimeRepo: SocialRuntimeRepo;
 
   private identity: AgentIdentity | null = null;
@@ -1045,7 +1052,9 @@ export class LocalNodeService {
   private privateMessages: PrivateMessageRecord[] = [];
   private privateMessageReceipts: PrivateMessageReceiptRecord[] = [];
   private privateEncryptionKeyPair: PrivateEncryptionKeyPair | null = null;
+  private privateMessagingRuntime: PrivateMessagingRuntimeState | null = null;
   private privatePeerRoutes: Record<string, string> = {};
+  private privatePeerEncryptionKeys: Record<string, string> = {};
   private privateMessageBodyCache = new Map<string, string>();
   private privateMessageDeliveryStatusCache = new Map<string, PrivateMessageView["delivery_status"]>();
   private messageGovernance: RuntimeMessageGovernance;
@@ -1129,6 +1138,7 @@ export class LocalNodeService {
     this.privateMessageRepo = new PrivateMessageRepo(this.storageRoot);
     this.privateMessageReceiptRepo = new PrivateMessageReceiptRepo(this.storageRoot);
     this.privateEncryptionKeyRepo = new PrivateEncryptionKeyRepo(this.storageRoot);
+    this.privateMessagingRuntimeRepo = new PrivateMessagingRuntimeRepo(this.storageRoot);
     this.socialRuntimeRepo = new SocialRuntimeRepo(this.storageRoot);
     this.messageGovernance = this.defaultMessageGovernance();
 
@@ -1955,6 +1965,7 @@ export class LocalNodeService {
       encryption_public_key: this.privateEncryptionKeyPair?.public_key || "",
       conversation_count: this.getPrivateConversations().length,
       message_count: this.privateMessages.length,
+      runtime: this.privateMessagingRuntime,
     };
   }
 
@@ -1987,12 +1998,13 @@ export class LocalNodeService {
       const peerProfile = this.directory.profiles[peerAgentId];
       const current = conversations.get(message.conversation_id);
       const nextLast = Math.max(current?.last_message_at || 0, message.created_at || 0) || null;
+      const learnedPeerKey = this.privatePeerEncryptionKeys[peerAgentId] || "";
       conversations.set(message.conversation_id, {
         conversation_id: message.conversation_id,
         peer_agent_id: peerAgentId,
         peer_display_name: peerProfile?.display_name || peerAgentId,
         peer_avatar_url: peerProfile?.avatar_url || "",
-        peer_public_key: peerProfile?.private_encryption_public_key || "",
+        peer_public_key: learnedPeerKey || peerProfile?.private_encryption_public_key || "",
         last_message_at: nextLast,
         unread_count: current?.unread_count || 0,
       });
@@ -2017,8 +2029,8 @@ export class LocalNodeService {
         }
         return !normalizedConversationId || message.conversation_id === normalizedConversationId;
       })
-      .sort((a, b) => a.created_at - b.created_at)
-      .slice(-resolvedLimit)
+      .sort((a, b) => b.created_at - a.created_at)
+      .slice(0, resolvedLimit)
       .map((message) => ({
         message_id: message.message_id,
         conversation_id: message.conversation_id,
@@ -2043,7 +2055,9 @@ export class LocalNodeService {
       return { sent: false, reason: "missing_identity_or_private_key" };
     }
     const toAgentId = String(input.to_agent_id || "").trim();
-    const recipientKey = String(input.recipient_encryption_public_key || "").trim();
+    const learnedRecipientKey = this.privatePeerEncryptionKeys[toAgentId] || "";
+    const profileRecipientKey = this.directory.profiles[toAgentId]?.private_encryption_public_key || "";
+    const recipientKey = String(learnedRecipientKey || input.recipient_encryption_public_key || profileRecipientKey || "").trim();
     const body = String(input.body || "").trim();
     if (toAgentId === this.identity.agent_id) {
       return { sent: false, reason: "self_private_message_not_allowed" };
@@ -2075,6 +2089,7 @@ export class LocalNodeService {
     if (toPeerId && typeof this.network.sendDirect === "function") {
       try {
         await this.network.sendDirect(toPeerId, PRIVATE_MESSAGE_TOPIC, message);
+        await this.publish(PRIVATE_MESSAGE_TOPIC, message);
         reason = "direct-sent";
       } catch {
         await this.publish(PRIVATE_MESSAGE_TOPIC, message);
@@ -2763,8 +2778,11 @@ export class LocalNodeService {
     };
     this.socialMessages = this.normalizeSocialMessages(await this.socialMessageRepo.get());
     this.socialMessageObservations = this.normalizeSocialMessageObservations(await this.socialMessageObservationRepo.get());
-    this.privateMessages = this.normalizePrivateMessages(await this.privateMessageRepo.get());
+    const storedPrivateMessages = await this.privateMessageRepo.get();
+    this.hydratePrivateMessageBodyCache(storedPrivateMessages);
+    this.privateMessages = this.normalizePrivateMessages(storedPrivateMessages);
     this.privateMessageReceipts = this.normalizePrivateMessageReceipts(await this.privateMessageReceiptRepo.get());
+    await this.refreshPrivateMessagingRuntime();
     this.directory = ingestProfileRecord(this.directory, { type: "profile", profile: this.profile });
     this.compactCacheInMemory();
     await this.persistCache();
@@ -2870,7 +2888,7 @@ export class LocalNodeService {
           return;
         }
       }
-      if (meta?.peerId && record.profile.agent_id) {
+      if (meta?.peerId && record.profile.agent_id && !this.privatePeerRoutes[record.profile.agent_id]) {
         this.privatePeerRoutes[record.profile.agent_id] = meta.peerId;
       }
 
@@ -2892,7 +2910,7 @@ export class LocalNodeService {
           return;
         }
       }
-      if (meta?.peerId && record.agent_id) {
+      if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
         this.privatePeerRoutes[record.agent_id] = meta.peerId;
       }
 
@@ -2911,7 +2929,7 @@ export class LocalNodeService {
         await this.log("warn", `Rejected social message with invalid signature (${record.message_id.slice(0, 10)})`);
         return;
       }
-      if (meta?.peerId && record.agent_id) {
+      if (meta?.peerId && record.agent_id && !this.privatePeerRoutes[record.agent_id]) {
         this.privatePeerRoutes[record.agent_id] = meta.peerId;
       }
       if (this.hasSocialMessage(record.message_id)) {
@@ -2962,6 +2980,12 @@ export class LocalNodeService {
       if (!record || !verifyPrivateMessage(record)) {
         return;
       }
+      if (meta?.peerId && record.from_agent_id) {
+        this.privatePeerRoutes[record.from_agent_id] = meta.peerId;
+      }
+      if (record.from_agent_id && record.sender_encryption_public_key) {
+        this.privatePeerEncryptionKeys[record.from_agent_id] = record.sender_encryption_public_key;
+      }
       if (record.to_agent_id !== this.identity?.agent_id || this.hasPrivateMessage(record.message_id)) {
         return;
       }
@@ -2975,6 +2999,9 @@ export class LocalNodeService {
     if (!receipt || !verifyPrivateMessageReceipt(receipt)) {
       return;
     }
+    if (meta?.peerId && receipt.from_agent_id) {
+      this.privatePeerRoutes[receipt.from_agent_id] = meta.peerId;
+    }
     if (receipt.to_agent_id !== this.identity?.agent_id) {
       return;
     }
@@ -3323,7 +3350,40 @@ export class LocalNodeService {
       return;
     }
     this.privateMessagesPersistDirty = false;
-    await this.privateMessageRepo.set(this.privateMessages);
+    await this.privateMessageRepo.set(this.buildPersistedPrivateMessages() as unknown as PrivateMessageRecord[]);
+  }
+
+  private hydratePrivateMessageBodyCache(items: unknown): void {
+    if (!Array.isArray(items)) {
+      return;
+    }
+    for (const item of items) {
+      if (typeof item !== "object" || item === null) {
+        continue;
+      }
+      const record = item as Partial<StoredPrivateMessageRecord>;
+      const messageId = String(record.message_id || "").trim();
+      const localPlaintext = typeof record.local_plaintext === "string" ? record.local_plaintext : "";
+      if (messageId && localPlaintext) {
+        this.privateMessageBodyCache.set(messageId, localPlaintext);
+      }
+    }
+  }
+
+  private buildPersistedPrivateMessages(): StoredPrivateMessageRecord[] {
+    return this.privateMessages.map((message) => {
+      const localPlaintext =
+        message.from_agent_id === this.identity?.agent_id
+          ? this.privateMessageBodyCache.get(message.message_id) || ""
+          : "";
+      if (!localPlaintext) {
+        return { ...message };
+      }
+      return {
+        ...message,
+        local_plaintext: localPlaintext,
+      };
+    });
   }
 
   private async flushPrivateMessageReceiptsPersist(): Promise<void> {
@@ -3482,6 +3542,47 @@ export class LocalNodeService {
     return `${digest.slice(0, 12)}:${digest.slice(-8)}`;
   }
 
+  private buildPrivateMessagingRuntimeState(): PrivateMessagingRuntimeState {
+    const warnings: string[] = [];
+    const keypair = this.privateEncryptionKeyPair;
+    const selfSentMessages = this.privateMessages.filter((message) => message.from_agent_id === this.identity?.agent_id);
+    let cachedPlaintextCount = 0;
+    for (const message of selfSentMessages) {
+      if (this.privateMessageBodyCache.get(message.message_id)) {
+        cachedPlaintextCount += 1;
+      }
+    }
+    if (!keypair?.public_key || !keypair?.private_key) {
+      warnings.push("missing_private_encryption_keypair");
+    }
+    if (selfSentMessages.length > 0 && cachedPlaintextCount === 0) {
+      warnings.push("missing_local_plaintext_cache_for_self_messages");
+    }
+    if (selfSentMessages.length > 0 && cachedPlaintextCount < selfSentMessages.length) {
+      warnings.push("partial_local_plaintext_cache_for_self_messages");
+    }
+    return {
+      schema_version: 1,
+      app_version: this.appVersion,
+      last_started_at: Date.now(),
+      encryption_public_key: keypair?.public_key || "",
+      encryption_public_key_fingerprint: keypair?.public_key ? this.fingerprintPublicKey(keypair.public_key) : "",
+      message_count: this.privateMessages.length,
+      self_sent_count: selfSentMessages.length,
+      cached_plaintext_count: cachedPlaintextCount,
+      warnings,
+    };
+  }
+
+  private async refreshPrivateMessagingRuntime(): Promise<void> {
+    const runtime = this.buildPrivateMessagingRuntimeState();
+    this.privateMessagingRuntime = runtime;
+    await this.privateMessagingRuntimeRepo.set(runtime);
+    for (const warning of runtime.warnings) {
+      await this.log("warn", `Private messaging startup check: ${warning}`);
+    }
+  }
+
   private getOnboardingSummary() {
     const summary = this.getIntegrationSummary();
     const publicEnabled = Boolean(this.profile?.public_enabled);
@@ -3823,6 +3924,7 @@ export class LocalNodeService {
     this.ingestPrivateMessageReceipt(receipt);
     try {
       await this.network.sendDirect(replyPeerId, PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
+      await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
     } catch {
       await this.publish(PRIVATE_MESSAGE_RECEIPT_TOPIC, receipt);
     }

package/node_modules/@silicaclaw/storage/dist/packages/storage/src/repos.d.ts

@@ -40,6 +40,17 @@ export type SocialMessageGovernanceConfig = {
 export type PrivateMessageDecryptedContent = {
     body: string;
 };
+export type PrivateMessagingRuntimeState = {
+    schema_version: number;
+    app_version: string;
+    last_started_at: number;
+    encryption_public_key: string;
+    encryption_public_key_fingerprint: string;
+    message_count: number;
+    self_sent_count: number;
+    cached_plaintext_count: number;
+    warnings: string[];
+};
 export declare class IdentityRepo extends JsonFileRepo<AgentIdentity | null> {
     constructor(rootDir?: string);
 }
@@ -71,3 +82,6 @@ export declare class PrivateMessageReceiptRepo extends JsonFileRepo<PrivateMessa
 export declare class PrivateEncryptionKeyRepo extends JsonFileRepo<PrivateEncryptionKeyPair | null> {
     constructor(rootDir?: string);
 }
+export declare class PrivateMessagingRuntimeRepo extends JsonFileRepo<PrivateMessagingRuntimeState> {
+    constructor(rootDir?: string);
+}

package/node_modules/@silicaclaw/storage/dist/packages/storage/src/repos.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
+exports.PrivateMessagingRuntimeRepo = exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
 const path_1 = require("path");
 const core_1 = require("@silicaclaw/core");
 const jsonRepo_1 = require("./jsonRepo");
@@ -83,3 +83,19 @@ class PrivateEncryptionKeyRepo extends jsonRepo_1.JsonFileRepo {
     }
 }
 exports.PrivateEncryptionKeyRepo = PrivateEncryptionKeyRepo;
+class PrivateMessagingRuntimeRepo extends jsonRepo_1.JsonFileRepo {
+    constructor(rootDir = process.cwd()) {
+        super((0, path_1.resolve)(rootDir, ".silicaclaw", "private-messaging.runtime.json"), () => ({
+            schema_version: 1,
+            app_version: "",
+            last_started_at: 0,
+            encryption_public_key: "",
+            encryption_public_key_fingerprint: "",
+            message_count: 0,
+            self_sent_count: 0,
+            cached_plaintext_count: 0,
+            warnings: [],
+        }));
+    }
+}
+exports.PrivateMessagingRuntimeRepo = PrivateMessagingRuntimeRepo;

package/node_modules/@silicaclaw/storage/src/repos.ts

@@ -55,6 +55,18 @@ export type PrivateMessageDecryptedContent = {
   body: string;
 };
 
+export type PrivateMessagingRuntimeState = {
+  schema_version: number;
+  app_version: string;
+  last_started_at: number;
+  encryption_public_key: string;
+  encryption_public_key_fingerprint: string;
+  message_count: number;
+  self_sent_count: number;
+  cached_plaintext_count: number;
+  warnings: string[];
+};
+
 export class IdentityRepo extends JsonFileRepo<AgentIdentity | null> {
   constructor(rootDir = process.cwd()) {
     super(resolve(rootDir, "data", "identity.json"), () => null);
@@ -134,3 +146,19 @@ export class PrivateEncryptionKeyRepo extends JsonFileRepo<PrivateEncryptionKeyP
     super(resolve(rootDir, "data", "private-encryption-keypair.json"), () => null);
   }
 }
+
+export class PrivateMessagingRuntimeRepo extends JsonFileRepo<PrivateMessagingRuntimeState> {
+  constructor(rootDir = process.cwd()) {
+    super(resolve(rootDir, ".silicaclaw", "private-messaging.runtime.json"), () => ({
+      schema_version: 1,
+      app_version: "",
+      last_started_at: 0,
+      encryption_public_key: "",
+      encryption_public_key_fingerprint: "",
+      message_count: 0,
+      self_sent_count: 0,
+      cached_plaintext_count: 0,
+      warnings: [],
+    }));
+  }
+}

package/openclaw-skills/silicaclaw-broadcast/VERSION

@@ -1 +1 @@
-2026.3.20-beta.17
+2026.3.20-beta.19

package/openclaw-skills/silicaclaw-broadcast/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "silicaclaw-broadcast",
-  "version": "2026.3.20-beta.17",
+  "version": "2026.3.20-beta.19",
   "display_name": "SilicaClaw Broadcast",
   "description": "Official OpenClaw skill for a bounded local SilicaClaw broadcast workflow: read public broadcasts, publish public broadcasts, and optionally forward owner-relevant summaries through OpenClaw's native channel.",
   "entrypoints": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@silicaclaw/cli",
-  "version": "2026.3.20-17",
+  "version": "2026.3.20-19",
   "private": false,
   "publishConfig": {
     "access": "public"

package/packages/storage/dist/packages/storage/src/repos.d.ts

@@ -40,6 +40,17 @@ export type SocialMessageGovernanceConfig = {
 export type PrivateMessageDecryptedContent = {
     body: string;
 };
+export type PrivateMessagingRuntimeState = {
+    schema_version: number;
+    app_version: string;
+    last_started_at: number;
+    encryption_public_key: string;
+    encryption_public_key_fingerprint: string;
+    message_count: number;
+    self_sent_count: number;
+    cached_plaintext_count: number;
+    warnings: string[];
+};
 export declare class IdentityRepo extends JsonFileRepo<AgentIdentity | null> {
     constructor(rootDir?: string);
 }
@@ -71,3 +82,6 @@ export declare class PrivateMessageReceiptRepo extends JsonFileRepo<PrivateMessa
 export declare class PrivateEncryptionKeyRepo extends JsonFileRepo<PrivateEncryptionKeyPair | null> {
     constructor(rootDir?: string);
 }
+export declare class PrivateMessagingRuntimeRepo extends JsonFileRepo<PrivateMessagingRuntimeState> {
+    constructor(rootDir?: string);
+}

package/packages/storage/dist/packages/storage/src/repos.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
+exports.PrivateMessagingRuntimeRepo = exports.PrivateEncryptionKeyRepo = exports.PrivateMessageReceiptRepo = exports.PrivateMessageRepo = exports.SocialMessageGovernanceRepo = exports.SocialMessageObservationRepo = exports.SocialMessageRepo = exports.LogRepo = exports.CacheRepo = exports.ProfileRepo = exports.IdentityRepo = void 0;
 const path_1 = require("path");
 const core_1 = require("@silicaclaw/core");
 const jsonRepo_1 = require("./jsonRepo");
@@ -83,3 +83,19 @@ class PrivateEncryptionKeyRepo extends jsonRepo_1.JsonFileRepo {
     }
 }
 exports.PrivateEncryptionKeyRepo = PrivateEncryptionKeyRepo;
+class PrivateMessagingRuntimeRepo extends jsonRepo_1.JsonFileRepo {
+    constructor(rootDir = process.cwd()) {
+        super((0, path_1.resolve)(rootDir, ".silicaclaw", "private-messaging.runtime.json"), () => ({
+            schema_version: 1,
+            app_version: "",
+            last_started_at: 0,
+            encryption_public_key: "",
+            encryption_public_key_fingerprint: "",
+            message_count: 0,
+            self_sent_count: 0,
+            cached_plaintext_count: 0,
+            warnings: [],
+        }));
+    }
+}
+exports.PrivateMessagingRuntimeRepo = PrivateMessagingRuntimeRepo;

package/packages/storage/src/repos.ts

@@ -55,6 +55,18 @@ export type PrivateMessageDecryptedContent = {
   body: string;
 };
 
+export type PrivateMessagingRuntimeState = {
+  schema_version: number;
+  app_version: string;
+  last_started_at: number;
+  encryption_public_key: string;
+  encryption_public_key_fingerprint: string;
+  message_count: number;
+  self_sent_count: number;
+  cached_plaintext_count: number;
+  warnings: string[];
+};
+
 export class IdentityRepo extends JsonFileRepo<AgentIdentity | null> {
   constructor(rootDir = process.cwd()) {
     super(resolve(rootDir, "data", "identity.json"), () => null);
@@ -134,3 +146,19 @@ export class PrivateEncryptionKeyRepo extends JsonFileRepo<PrivateEncryptionKeyP
     super(resolve(rootDir, "data", "private-encryption-keypair.json"), () => null);
   }
 }
+
+export class PrivateMessagingRuntimeRepo extends JsonFileRepo<PrivateMessagingRuntimeState> {
+  constructor(rootDir = process.cwd()) {
+    super(resolve(rootDir, ".silicaclaw", "private-messaging.runtime.json"), () => ({
+      schema_version: 1,
+      app_version: "",
+      last_started_at: 0,
+      encryption_public_key: "",
+      encryption_public_key_fingerprint: "",
+      message_count: 0,
+      self_sent_count: 0,
+      cached_plaintext_count: 0,
+      warnings: [],
+    }));
+  }
+}