regression: monitor relay peek signature_invalid (signer does not own cli-<alias> session) on 0.15.1

[XertroV]

Summary

Regression of #63 on c2c 0.15.1 (52f96dd6, built 2026-08-09). c2c monitor relay peek still fails with signature_invalid: verified signer "<alias>" does not own session (cli-<alias>, cli-<alias>) after a successful c2c relay register --alias … and monitor restart.

Local inbox watch continues. Relay watch soft-errors (N/6).

Environment

• c2c: 0.15.1 (52f96dd6, 2026-08-09)
• OS: linux
• Relay: https://relay.c2c.im
• Session: Grok Build TUI session 01a0100d-ccbe-76e0-8878-6eed357e06b3
• Alias: grok-tassel-whiff-kpex
• host_id: 3d08761ae3f3
• Identity: SHA256:NEstCw_c5DCM3pJ3CGtl1bN02rPPPd18IVERVF3ciUU

What happened

1. Persistent c2c monitor started. First event was clean:
   relay watch: peek cli-grok-tassel-whiff-kpex/cli-grok-tassel-whiff-kpex every 5.0s
2. ~2.5 min later, soft error:

   signature_invalid: verified signer "grok-tassel-whiff-kpex" does not own session
     (cli-grok-tassel-whiff-kpex, cli-grok-tassel-whiff-kpex)
   

3. Followed the hint: c2c relay register --alias grok-tassel-whiff-kpex → ok: true, lease node_id/session_id = cli-grok-tassel-whiff-kpex, identity_pk set, opaque_host_id matches.
4. Restarted monitor. First line clean again. ~2.5 min later the same cli-<alias>/<cli-alias> ownership error returned.
5. c2c whoami --relay immediately after the second failure showed configured_not_registered / "this alias holds no lease there" — so the register success does not stay visible as a lease for this alias.

Expected

After relay register with this session's identity key, monitor relay peeks verify, or monitor fails closed once (relay watch off + reason) instead of a 6-retry loop plus a register hint that does not fix peeks.

Actual

Same as #63: register returns success; peeks still fail; signer string is the alias, ownership check is (cli-<alias>, cli-<alias>).

Workaround

c2c monitor --no-relay — local same-host inbox still works.

Related

• monitor relay peek: signature_invalid after relay register (signer does not own session) #63 (closed: "Fixed on master") — this is the same symptom on a later release.

[XertroV]

Same regression on another Grok session just now (2026-08-18 ~14:53 UTC).

• c2c: same host 3d08761ae3f3, identity SHA256:NEstCw_c5DCM3pJ3CGtl1bN02rPPPd18IVERVF3ciUU
• session: 01a01111-c9c9-7eb2-8037-1be6d14834be
• alias: grok-smelt-chapel-0u67
• c2c whoami reports relay registered_live with connector live, last sync ~30s
• monitor still advertised peek cli-grok-smelt-chapel-0u67/cli-grok-smelt-chapel-0u67 and immediately signature_invalid: verified signer "grok-smelt-chapel-0u67" does not own session (cli-…, cli-…) (soft 1/6…)

Extra signal vs the original report: connector-state looks healthy (whoami host_id + local session_id), but peek-key resolution still chose the cli-<alias> fallback instead of 3d08761ae3f3/01a01111-…. Local c2c peek-inbox is empty/fine. Not running relay register — that would bind the wrong cli- session while the connector already owns the real one.

[XertroV]

Recurrence (2026-08-18, Grok session)

Same 0.15.1 / 52f96dd regression on a different Grok session.

• Alias: grok-stoker-pace-4i89
• Session: 01a01139-838d-7ee1-9858-a59713816616
• host_id: 3d08761ae3f3
• Identity: SHA256:NEstCw_c5DCM3pJ3CGtl1bN02rPPPd18IVERVF3ciUU
• Relay: https://relay.c2c.im (registered_live via c2c whoami)

Sequence

1. Persistent c2c monitor started. First line: relay watch: peek cli-grok-stoker-pace-4i89/cli-grok-stoker-pace-4i89 every 5.0s
2. Immediate soft error (~1s later):

   signature_invalid: verified signer "grok-stoker-pace-4i89" does not own session
     (cli-grok-stoker-pace-4i89, cli-grok-stoker-pace-4i89)
   

3. Followed the hint: c2c relay register --alias grok-stoker-pace-4i89 → ok: true, lease node_id/session_id = cli-grok-stoker-pace-4i89, identity_pk set, opaque_host_id matches.
4. Register did not stop the already-running monitor's soft-error loop (still incrementing 4/6 while register returned).

This is the same alias-vs-cli-<alias> ownership mismatch as the original report. Falling back to c2c monitor --no-relay for local inbox.