@voidly/agent-sdk 3.3.0 → 3.3.1

package/dist/index.d.ts

@@ -364,7 +364,11 @@ declare class VoidlyAgent {
         messageType?: string;
         unreadOnly?: boolean;
     }): Promise<DecryptedMessage[]>;
-    /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports) */
+    /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports)
+     * Returns decrypted messages AND IDs of messages that failed to decrypt.
+     * Failed messages should be marked as read on the relay — they are permanently
+     * undecryptable and will poison the queue if left unread (Signal-style handling).
+     */
     private _decryptMessages;
     /**
      * Delete a message by ID (must be sender or recipient).

package/dist/index.js

@@ -4220,6 +4220,7 @@ var VoidlyAgent = class _VoidlyAgent {
       } catch {
       }
     }
+    const effectiveConfig = !mlkemSk && config?.postQuantum !== false ? { ...config, postQuantum: false } : config;
     const agent = new _VoidlyAgent({
       did: creds.did,
       apiKey: creds.apiKey,
@@ -4230,7 +4231,7 @@ var VoidlyAgent = class _VoidlyAgent {
       },
       mlkemPublicKey: mlkemPk,
       mlkemSecretKey: mlkemSk
-    }, config);
+    }, effectiveConfig);
     if (creds.ratchetStates) {
       for (const [pairId, rs] of Object.entries(creds.ratchetStates)) {
         try {
@@ -4784,16 +4785,37 @@ var VoidlyAgent = class _VoidlyAgent {
       throw new Error(`Receive failed: ${err.error?.message || err.error || res.statusText}`);
     }
     const data = await res.json();
-    return this._decryptMessages(data.messages);
+    const { decrypted, failedIds } = await this._decryptMessages(data.messages);
+    if (failedIds.length > 0) {
+      try {
+        await this.markReadBatch(failedIds);
+      } catch {
+        for (const id of failedIds) {
+          try {
+            await this.markRead(id);
+          } catch {
+          }
+        }
+      }
+    }
+    return decrypted;
   }
-  /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports) */
+  /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports)
+   * Returns decrypted messages AND IDs of messages that failed to decrypt.
+   * Failed messages should be marked as read on the relay — they are permanently
+   * undecryptable and will poison the queue if left unread (Signal-style handling).
+   */
   async _decryptMessages(rawMessages) {
     const decrypted = [];
+    const failedIds = [];
     const resetPeers = /* @__PURE__ */ new Set();
     for (const msg of rawMessages) {
       try {
         if (this._seenMessageIds.has(msg.id)) continue;
-        if (resetPeers.has(msg.from)) continue;
+        if (resetPeers.has(msg.from)) {
+          failedIds.push(msg.id);
+          continue;
+        }
         let senderEncPub;
         let senderSignPubBytes = null;
         if (msg.sender_encryption_key) {
@@ -4929,6 +4951,7 @@ var VoidlyAgent = class _VoidlyAgent {
             const skip = targetStep - state.recvStep;
             if (skip > MAX_SKIP) {
               this._decryptFailCount++;
+              failedIds.push(msg.id);
               const peerForSkip = msg.from || "unknown";
               const prevSkipFails = this._peerDecryptFails.get(peerForSkip) || 0;
               this._peerDecryptFails.set(peerForSkip, prevSkipFails + 1);
@@ -4964,6 +4987,7 @@ var VoidlyAgent = class _VoidlyAgent {
         }
         if (!rawPlaintext) {
           this._decryptFailCount++;
+          failedIds.push(msg.id);
           const senderForFail = msg.from || "unknown";
           const prevFails = this._peerDecryptFails.get(senderForFail) || 0;
           this._peerDecryptFails.set(senderForFail, prevFails + 1);
@@ -5044,6 +5068,7 @@ var VoidlyAgent = class _VoidlyAgent {
         }
         if (this.requireSignatures && !signatureValid) {
           this._decryptFailCount++;
+          failedIds.push(msg.id);
           const peerForSig = msg.from || "unknown";
           const prevSigFails = this._peerDecryptFails.get(peerForSig) || 0;
           this._peerDecryptFails.set(peerForSig, prevSigFails + 1);
@@ -5073,6 +5098,7 @@ var VoidlyAgent = class _VoidlyAgent {
         });
       } catch {
         this._decryptFailCount++;
+        failedIds.push(msg.id);
         const peerForCatch = msg.from || "unknown";
         const prevCatchFails = this._peerDecryptFails.get(peerForCatch) || 0;
         this._peerDecryptFails.set(peerForCatch, prevCatchFails + 1);
@@ -5087,7 +5113,7 @@ var VoidlyAgent = class _VoidlyAgent {
       this._persistRatchetState().catch(() => {
       });
     }
-    return decrypted;
+    return { decrypted, failedIds };
   }
   // ─── Message Management ─────────────────────────────────────────────────────
   /**
@@ -6443,7 +6469,13 @@ var VoidlyAgent = class _VoidlyAgent {
                 if (eventType === "message" && dataStr) {
                   try {
                     const rawMsg = JSON.parse(dataStr);
-                    const decrypted = await this._decryptMessages([rawMsg]);
+                    const { decrypted, failedIds } = await this._decryptMessages([rawMsg]);
+                    for (const id of failedIds) {
+                      try {
+                        await this.markRead(id);
+                      } catch {
+                      }
+                    }
                     if (decrypted.length > 0) {
                       consecutiveEmpty = 0;
                       sseFailures = 0;

package/dist/index.mjs

@@ -4210,6 +4210,7 @@ var VoidlyAgent = class _VoidlyAgent {
       } catch {
       }
     }
+    const effectiveConfig = !mlkemSk && config?.postQuantum !== false ? { ...config, postQuantum: false } : config;
     const agent = new _VoidlyAgent({
       did: creds.did,
       apiKey: creds.apiKey,
@@ -4220,7 +4221,7 @@ var VoidlyAgent = class _VoidlyAgent {
       },
       mlkemPublicKey: mlkemPk,
       mlkemSecretKey: mlkemSk
-    }, config);
+    }, effectiveConfig);
     if (creds.ratchetStates) {
       for (const [pairId, rs] of Object.entries(creds.ratchetStates)) {
         try {
@@ -4774,16 +4775,37 @@ var VoidlyAgent = class _VoidlyAgent {
       throw new Error(`Receive failed: ${err.error?.message || err.error || res.statusText}`);
     }
     const data = await res.json();
-    return this._decryptMessages(data.messages);
+    const { decrypted, failedIds } = await this._decryptMessages(data.messages);
+    if (failedIds.length > 0) {
+      try {
+        await this.markReadBatch(failedIds);
+      } catch {
+        for (const id of failedIds) {
+          try {
+            await this.markRead(id);
+          } catch {
+          }
+        }
+      }
+    }
+    return decrypted;
   }
-  /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports) */
+  /** Decrypt raw message objects (shared by receive(), SSE, WebSocket transports)
+   * Returns decrypted messages AND IDs of messages that failed to decrypt.
+   * Failed messages should be marked as read on the relay — they are permanently
+   * undecryptable and will poison the queue if left unread (Signal-style handling).
+   */
   async _decryptMessages(rawMessages) {
     const decrypted = [];
+    const failedIds = [];
     const resetPeers = /* @__PURE__ */ new Set();
     for (const msg of rawMessages) {
       try {
         if (this._seenMessageIds.has(msg.id)) continue;
-        if (resetPeers.has(msg.from)) continue;
+        if (resetPeers.has(msg.from)) {
+          failedIds.push(msg.id);
+          continue;
+        }
         let senderEncPub;
         let senderSignPubBytes = null;
         if (msg.sender_encryption_key) {
@@ -4919,6 +4941,7 @@ var VoidlyAgent = class _VoidlyAgent {
             const skip = targetStep - state.recvStep;
             if (skip > MAX_SKIP) {
               this._decryptFailCount++;
+              failedIds.push(msg.id);
               const peerForSkip = msg.from || "unknown";
               const prevSkipFails = this._peerDecryptFails.get(peerForSkip) || 0;
               this._peerDecryptFails.set(peerForSkip, prevSkipFails + 1);
@@ -4954,6 +4977,7 @@ var VoidlyAgent = class _VoidlyAgent {
         }
         if (!rawPlaintext) {
           this._decryptFailCount++;
+          failedIds.push(msg.id);
           const senderForFail = msg.from || "unknown";
           const prevFails = this._peerDecryptFails.get(senderForFail) || 0;
           this._peerDecryptFails.set(senderForFail, prevFails + 1);
@@ -5034,6 +5058,7 @@ var VoidlyAgent = class _VoidlyAgent {
         }
         if (this.requireSignatures && !signatureValid) {
           this._decryptFailCount++;
+          failedIds.push(msg.id);
           const peerForSig = msg.from || "unknown";
           const prevSigFails = this._peerDecryptFails.get(peerForSig) || 0;
           this._peerDecryptFails.set(peerForSig, prevSigFails + 1);
@@ -5063,6 +5088,7 @@ var VoidlyAgent = class _VoidlyAgent {
         });
       } catch {
         this._decryptFailCount++;
+        failedIds.push(msg.id);
         const peerForCatch = msg.from || "unknown";
         const prevCatchFails = this._peerDecryptFails.get(peerForCatch) || 0;
         this._peerDecryptFails.set(peerForCatch, prevCatchFails + 1);
@@ -5077,7 +5103,7 @@ var VoidlyAgent = class _VoidlyAgent {
       this._persistRatchetState().catch(() => {
       });
     }
-    return decrypted;
+    return { decrypted, failedIds };
   }
   // ─── Message Management ─────────────────────────────────────────────────────
   /**
@@ -6433,7 +6459,13 @@ var VoidlyAgent = class _VoidlyAgent {
                 if (eventType === "message" && dataStr) {
                   try {
                     const rawMsg = JSON.parse(dataStr);
-                    const decrypted = await this._decryptMessages([rawMsg]);
+                    const { decrypted, failedIds } = await this._decryptMessages([rawMsg]);
+                    for (const id of failedIds) {
+                      try {
+                        await this.markRead(id);
+                      } catch {
+                      }
+                    }
                     if (decrypted.length > 0) {
                       consecutiveEmpty = 0;
                       sseFailures = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voidly/agent-sdk",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "description": "E2E encrypted agent-to-agent communication SDK — Double Ratchet, X3DH, deniable auth, ML-KEM-768 post-quantum, SSE streaming, ratchet persistence, multi-relay federation",
   "main": "dist/index.js",
   "module": "dist/index.mjs",