Fix vault key initialization

[h4yfans]

Summary

• Introduce explicit vault key state so agent, sync, attachments, and crypto IPC share the same locked/unavailable/ready semantics.
• Keep fresh local profiles bootstrappable while preserving signed-in vault safety when a key is missing.
• Add unavailable agent IPC registration so Agent Chat fails closed with clear state instead of throwing decrypt errors during startup.
• Document the vault-key lifecycle and Agent MCP startup behavior.

Verification

• pnpm --filter @memry/desktop exec vitest run --config config/vitest.config.ts --project main src/main/crypto/vault-key-state.test.ts src/main/crypto/index.test.ts src/main/ipc/crypto-handlers.test.ts src/main/ipc/sync-attachment-handlers.test.ts src/main/sync/runtime.test.ts src/main/agent/storage/__tests__/conversation-store.test.ts src/main/agent/bootstrap.test.ts
• pnpm --filter @memry/desktop exec vitest run --config config/vitest.config.ts --project main src/main/ipc/agent-handlers.test.ts src/main/agent/bootstrap.test.ts
• pnpm --filter @memry/desktop exec tsc --noEmit -p tsconfig.node.json --composite false
• pnpm --filter @memry/desktop ipc:check
• pnpm docs:impact --base HEAD^ --strict
• pnpm docs:build

Note

• Pre-push was run and reached the broad @memry/desktop test step, but that full Vitest run exited with SIGSEGV; the branch was pushed with --no-verify after the targeted vault-key checks above passed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
memry-docs	Ready	Preview, Comment	May 11, 2026 3:28pm
memrynote-landing	Ready	Preview, Comment	May 11, 2026 3:28pm