@anuma/sdk 4.1.0 → 4.2.1

package/dist/expo/index.cjs

@@ -112,14 +112,11 @@ function notifyKeyAvailable(address) {
     }
   }
 }
-function getStoredKey(address) {
-  const keys = encryptionKeyStore.get(address);
-  return keys?.current ?? null;
-}
 function getStoredKeyByVersion(address, version) {
   const keys = encryptionKeyStore.get(address);
   if (!keys) return null;
-  return version === "v2" ? keys.legacy : keys.current;
+  const value = version === "v2" ? keys.legacy : keys.current;
+  return value ?? null;
 }
 function setStoredKey(address, keys) {
   encryptionKeyStore.set(address, keys);
@@ -128,6 +125,8 @@ function clearEncryptionKey(address) {
   encryptionKeyStore.delete(address);
   cryptoKeyCache.delete(`${address}:v2`);
   cryptoKeyCache.delete(`${address}:v3`);
+  refreshCandidatesByAddress.delete(address);
+  divergentDeriveAddresses.delete(address);
 }
 function clearAllEncryptionState() {
   sessionEpoch += 1;
@@ -135,6 +134,9 @@ function clearAllEncryptionState() {
   cryptoKeyCache.clear();
   keyAvailableCallbacks.clear();
   pendingKeyRequests.clear();
+  pendingCandidateDerives.clear();
+  refreshCandidatesByAddress.clear();
+  divergentDeriveAddresses.clear();
   clearAllKeyPairs();
   for (const cb of clearAllEncryptionStateCallbacks) {
     try {
@@ -318,9 +320,7 @@ async function getEncryptionKey(address, version = "v3") {
   }
   const keyHex = getStoredKeyByVersion(address, version);
   if (!keyHex) {
-    throw new Error(
-      "Encryption key not found. Please sign a message to generate your encryption key."
-    );
+    throw new EncryptionKeyMissingError(address, version);
   }
   const keyBytes = hexToBytes(keyHex);
   const cryptoKey = await crypto.subtle.importKey(
@@ -346,8 +346,42 @@ async function decryptData(encryptedHex, address, version = "v3") {
   const key = await getEncryptionKey(address, version);
   return decryptDataWithKey(encryptedHex, key);
 }
-function hasEncryptionKey(address) {
-  return getStoredKey(address) !== null;
+function hasEncryptionKey(address, version) {
+  return getStoredKeyByVersion(address, version ?? "v3") !== null;
+}
+function seedEncryptionKeys(address, keys) {
+  if (!isValidWalletAddress(address)) {
+    throw new Error(
+      `Invalid wallet address: ${address}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
+    );
+  }
+  if (!keys.legacy && !keys.current) {
+    throw new Error("seedEncryptionKeys: at least one of legacy or current is required");
+  }
+  if (keys.legacy !== void 0) {
+    assertAes256KeyHex("legacy", keys.legacy);
+  }
+  if (keys.current !== void 0) {
+    assertAes256KeyHex("current", keys.current);
+  }
+  const existing = encryptionKeyStore.get(address);
+  const next = {
+    legacy: keys.legacy ?? existing?.legacy,
+    current: keys.current ?? existing?.current
+  };
+  setStoredKey(address, next);
+  if (keys.legacy !== void 0) cryptoKeyCache.delete(`${address}:v2`);
+  if (keys.current !== void 0) cryptoKeyCache.delete(`${address}:v3`);
+  refreshCandidatesByAddress.delete(address);
+  divergentDeriveAddresses.delete(address);
+  notifyKeyAvailable(address);
+}
+function assertAes256KeyHex(field10, value) {
+  if (!AES_256_KEY_HEX.test(value)) {
+    throw new Error(
+      `seedEncryptionKeys: ${field10} must be 64 hex characters (32-byte AES key), got length ${value.length}`
+    );
+  }
 }
 async function encryptBytesWithKey(plaintext, key) {
   const plaintextBytes = typeof plaintext === "string" ? SHARED_TEXT_ENCODER.encode(plaintext) : plaintext;
@@ -383,20 +417,23 @@ async function decryptDataWithKey(encryptedHex, key) {
   );
   return SHARED_TEXT_DECODER.decode(decryptedData);
 }
-async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSigner) {
+async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSigner, options) {
   if (!isValidWalletAddress(walletAddress)) {
     throw new Error(
       `Invalid wallet address: ${walletAddress}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
     );
   }
-  const existingKey = getStoredKey(walletAddress);
-  if (existingKey) {
-    return;
+  if (!options?.force && getStoredKeyByVersion(walletAddress, "v3") && getStoredKeyByVersion(walletAddress, "v2")) {
+    return true;
   }
-  const pending = pendingKeyRequests.get(walletAddress);
-  if (pending) {
-    await pending;
-    return;
+  if (!options?.force && divergentDeriveAddresses.has(walletAddress)) {
+    return false;
+  }
+  if (!options?.force) {
+    const pending = pendingKeyRequests.get(walletAddress);
+    if (pending) {
+      return pending;
+    }
   }
   const startEpoch = sessionEpoch;
   const promise = (async () => {
@@ -424,20 +461,143 @@ async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSi
       deriveKeyFromSignatureV3(signature)
     ]);
     if (sessionEpoch !== startEpoch) {
-      return;
+      return false;
     }
-    setStoredKey(walletAddress, { legacy: legacyKey, current: currentKey });
+    const existing = encryptionKeyStore.get(walletAddress);
+    if (!options?.force && existing && (existing.legacy || existing.current)) {
+      const matchesCurrent = Boolean(existing.current && existing.current === currentKey);
+      const matchesLegacy = Boolean(existing.legacy && existing.legacy === legacyKey);
+      if (!matchesCurrent && !matchesLegacy) {
+        getLogger().warn(
+          "requestEncryptionKey: derived keys do not match existing store; leaving unchanged"
+        );
+        divergentDeriveAddresses.add(walletAddress);
+        return false;
+      }
+      setStoredKey(walletAddress, {
+        legacy: existing.legacy ?? legacyKey,
+        current: existing.current ?? currentKey
+      });
+    } else {
+      setStoredKey(walletAddress, { legacy: legacyKey, current: currentKey });
+    }
+    cryptoKeyCache.delete(`${walletAddress}:v2`);
+    cryptoKeyCache.delete(`${walletAddress}:v3`);
+    refreshCandidatesByAddress.delete(walletAddress);
+    divergentDeriveAddresses.delete(walletAddress);
     notifyKeyAvailable(walletAddress);
+    return true;
   })();
   pendingKeyRequests.set(walletAddress, promise);
   try {
-    await promise;
+    return await promise;
   } finally {
     if (pendingKeyRequests.get(walletAddress) === promise) {
       pendingKeyRequests.delete(walletAddress);
     }
   }
 }
+async function refreshEncryptionKeyIfMatches(walletAddress, probeCiphertext, signMessage, embeddedWalletSigner) {
+  if (!isValidWalletAddress(walletAddress)) {
+    throw new Error(
+      `Invalid wallet address: ${walletAddress}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
+    );
+  }
+  const parsed = parsePrefixedCiphertext(probeCiphertext);
+  if (!parsed) {
+    return false;
+  }
+  const cached = refreshCandidatesByAddress.get(walletAddress);
+  if (cached) {
+    return tryCommitCandidatesIfProbeMatches(walletAddress, parsed, cached);
+  }
+  let derivePromise = pendingCandidateDerives.get(walletAddress);
+  if (!derivePromise) {
+    derivePromise = (async () => {
+      const candidates2 = await deriveRefreshCandidates(signMessage, embeddedWalletSigner);
+      if (candidates2) {
+        refreshCandidatesByAddress.set(walletAddress, candidates2);
+      }
+      return candidates2;
+    })().finally(() => {
+      if (pendingCandidateDerives.get(walletAddress) === derivePromise) {
+        pendingCandidateDerives.delete(walletAddress);
+      }
+    });
+    pendingCandidateDerives.set(walletAddress, derivePromise);
+  }
+  const candidates = await derivePromise;
+  if (!candidates) {
+    return false;
+  }
+  return tryCommitCandidatesIfProbeMatches(walletAddress, parsed, candidates);
+}
+function parsePrefixedCiphertext(probeCiphertext) {
+  const version = probeCiphertext.startsWith("enc:v3:") ? "v3" : probeCiphertext.startsWith("enc:v2:") ? "v2" : null;
+  if (!version) return null;
+  const encryptedData = probeCiphertext.slice(
+    version === "v3" ? "enc:v3:".length : "enc:v2:".length
+  );
+  if (encryptedData.length < 56 || !/^[0-9a-f]+$/i.test(encryptedData)) {
+    return null;
+  }
+  return { version, encryptedData };
+}
+async function deriveRefreshCandidates(signMessage, embeddedWalletSigner) {
+  const startEpoch = sessionEpoch;
+  const signOptions = { showWalletUIs: false };
+  let signature;
+  try {
+    if (embeddedWalletSigner) {
+      signature = await embeddedWalletSigner(SIGN_MESSAGE, signOptions);
+    } else {
+      signature = await signMessage(SIGN_MESSAGE, signOptions);
+    }
+  } catch (error) {
+    if (embeddedWalletSigner && error instanceof Error) {
+      getLogger().warn(
+        "Embedded wallet signing failed during key refresh, falling back to standard signMessage:",
+        error.message
+      );
+      signature = await signMessage(SIGN_MESSAGE, signOptions);
+    } else {
+      throw error;
+    }
+  }
+  const [legacyKey, currentKey] = await Promise.all([
+    deriveKeyFromSignature(signature),
+    deriveKeyFromSignatureV3(signature)
+  ]);
+  if (sessionEpoch !== startEpoch) {
+    return null;
+  }
+  return { legacy: legacyKey, current: currentKey };
+}
+async function tryCommitCandidatesIfProbeMatches(walletAddress, parsed, candidates) {
+  const candidateHex = parsed.version === "v2" ? candidates.legacy : candidates.current;
+  const keyBytes = hexToBytes(candidateHex);
+  const candidateCryptoKey = await crypto.subtle.importKey(
+    "raw",
+    keyBytes.buffer,
+    { name: "AES-GCM" },
+    false,
+    ["encrypt", "decrypt"]
+  );
+  try {
+    await decryptDataWithKey(parsed.encryptedData, candidateCryptoKey);
+  } catch {
+    getLogger().warn(
+      "refreshEncryptionKeyIfMatches: candidate keys failed to decrypt probe; leaving store unchanged"
+    );
+    return false;
+  }
+  setStoredKey(walletAddress, { legacy: candidates.legacy, current: candidates.current });
+  cryptoKeyCache.delete(`${walletAddress}:v2`);
+  cryptoKeyCache.delete(`${walletAddress}:v3`);
+  divergentDeriveAddresses.delete(walletAddress);
+  notifyKeyAvailable(walletAddress);
+  return true;
+}
 async function persistKeyPair(address, startEpoch) {
   if (typeof window === "undefined") {
     return;
@@ -671,15 +831,28 @@ function useEncryption(signMessage, embeddedWalletSigner) {
     clearKeyPair: (walletAddress) => clearKeyPair(walletAddress)
   };
 }
-var SIGN_MESSAGE, encryptionKeyStore, pendingKeyRequests, sessionEpoch, cryptoKeyCache, keyAvailableCallbacks, clearAllEncryptionStateCallbacks, keyPairStore, SHARED_TEXT_ENCODER, SHARED_TEXT_DECODER, KEYPAIR_STORAGE_PREFIX;
+var SIGN_MESSAGE, EncryptionKeyMissingError, encryptionKeyStore, pendingKeyRequests, pendingCandidateDerives, refreshCandidatesByAddress, divergentDeriveAddresses, sessionEpoch, cryptoKeyCache, keyAvailableCallbacks, clearAllEncryptionStateCallbacks, keyPairStore, SHARED_TEXT_ENCODER, SHARED_TEXT_DECODER, AES_256_KEY_HEX, KEYPAIR_STORAGE_PREFIX;
 var init_useEncryption = __esm({
   "src/react/useEncryption.ts"() {
     "use strict";
     "use client";
     init_logger();
     SIGN_MESSAGE = "The app is asking you to sign this message to generate a key, which will be used to encrypt data.";
+    EncryptionKeyMissingError = class extends Error {
+      constructor(address, version) {
+        super(
+          `Encryption key (${version}) not found for ${address}. Please sign a message to generate your encryption key.`
+        );
+        this.name = "EncryptionKeyMissingError";
+        this.address = address;
+        this.version = version;
+      }
+    };
     encryptionKeyStore = /* @__PURE__ */ new Map();
     pendingKeyRequests = /* @__PURE__ */ new Map();
+    pendingCandidateDerives = /* @__PURE__ */ new Map();
+    refreshCandidatesByAddress = /* @__PURE__ */ new Map();
+    divergentDeriveAddresses = /* @__PURE__ */ new Set();
     sessionEpoch = 0;
     cryptoKeyCache = /* @__PURE__ */ new Map();
     keyAvailableCallbacks = /* @__PURE__ */ new Map();
@@ -687,6 +860,7 @@ var init_useEncryption = __esm({
     keyPairStore = /* @__PURE__ */ new Map();
     SHARED_TEXT_ENCODER = new TextEncoder();
     SHARED_TEXT_DECODER = new TextDecoder();
+    AES_256_KEY_HEX = /^[0-9a-fA-F]{64}$/;
     KEYPAIR_STORAGE_PREFIX = "ecdh_keypair_";
   }
 });
@@ -739,20 +913,29 @@ async function encryptField(value, address, signMessage, embeddedWalletSigner, s
   const encrypted = await encryptData(value, address);
   return `${ENCRYPTION_PREFIX}${encrypted}`;
 }
-async function decryptField(value, address) {
-  if (!value) return value;
+async function decryptFieldDetailed(value, address) {
+  if (!value) return { status: "plaintext", value };
   const detected = detectEncryptionVersion(value);
-  if (!detected) return value;
+  if (!detected) return { status: "plaintext", value };
   if (detected.encryptedData.length < 56 || !/^[0-9a-f]+$/i.test(detected.encryptedData)) {
-    return value;
+    return { status: "invalid_payload", value, version: detected.version };
   }
   try {
-    return await decryptData(detected.encryptedData, address, detected.version);
+    const plaintext = await decryptData(detected.encryptedData, address, detected.version);
+    return { status: "ok", value: plaintext, version: detected.version };
   } catch (error) {
-    getLogger().warn("Failed to decrypt field, returning as-is:", error);
-    return value;
+    if (error instanceof EncryptionKeyMissingError) {
+      getLogger().warn("Failed to decrypt field (key missing for version):", error.message);
+      return { status: "key_missing", value, version: detected.version };
+    }
+    getLogger().warn("Failed to decrypt field (auth mismatch or crypto error):", error);
+    return { status: "auth_mismatch", value, version: detected.version };
   }
 }
+async function decryptField(value, address) {
+  const result = await decryptFieldDetailed(value, address);
+  return result.value;
+}
 async function encryptJsonField(value, address, signMessage, embeddedWalletSigner, skipKeyRequest) {
   if (!value) return void 0;
   const jsonString = JSON.stringify(value);
@@ -869,20 +1052,40 @@ async function encryptMessageFields(message, address, signMessage, embeddedWalle
     throw error;
   }
 }
-async function decryptMaybeJsonField(value, address) {
-  if (value === void 0) return void 0;
-  if (value === null) return value;
+async function decryptMaybeJsonFieldDetailed(value, address) {
+  if (value === void 0) return { value: void 0, status: "plaintext" };
+  if (value === null) return { value, status: "plaintext" };
   if (typeof value === "string") {
     if (isEncrypted(value)) {
-      return await decryptJsonField(value, address);
+      const detailed = await decryptFieldDetailed(value, address);
+      if (detailed.status !== "ok") {
+        return { value: void 0, status: detailed.status, probe: value };
+      }
+      try {
+        return { value: JSON.parse(detailed.value), status: "ok" };
+      } catch (error) {
+        getLogger().warn("Failed to parse decrypted JSON field:", error);
+        return { value: void 0, status: "invalid_payload", probe: value };
+      }
     }
     try {
-      return JSON.parse(value);
+      return { value: JSON.parse(value), status: "plaintext" };
     } catch {
-      return void 0;
+      return { value: void 0, status: "plaintext" };
     }
   }
-  return value;
+  return { value, status: "plaintext" };
+}
+function worseDecryptStatus(a, b) {
+  if (b === "ok" || b === "plaintext") return a;
+  if (!a || a === "ok" || a === "plaintext") return b;
+  const rank = (s) => {
+    if (s === "auth_mismatch") return 3;
+    if (s === "key_missing") return 2;
+    if (s === "invalid_payload") return 1;
+    return 0;
+  };
+  return rank(b) >= rank(a) ? b : a;
 }
 async function decryptMessageFields(message, address, signMessage, embeddedWalletSigner) {
   if (!address) {
@@ -895,33 +1098,82 @@ async function decryptMessageFields(message, address, signMessage, embeddedWalle
       getLogger().warn("Failed to request encryption key for decryption:", error);
     }
   }
-  const decryptedContent = await decryptField(message.content, address);
-  const decryptedThinking = message.thinking ? await decryptField(message.thinking, address) : message.thinking;
-  const decryptedVector = await decryptMaybeJsonField(
+  let assembled = await assembleDecryptedMessage(message, address);
+  const needsRefresh = assembled.decryptionStatus === "auth_mismatch" || assembled.decryptionStatus === "key_missing";
+  if (needsRefresh && signMessage && assembled.refreshProbe) {
+    try {
+      const refreshed = await refreshEncryptionKeyIfMatches(
+        address,
+        assembled.refreshProbe,
+        signMessage,
+        embeddedWalletSigner
+      );
+      if (refreshed) {
+        assembled = await assembleDecryptedMessage(message, address);
+      }
+    } catch (error) {
+      getLogger().warn("Failed to refresh encryption key after decrypt failure:", error);
+    }
+  }
+  const { refreshProbe: _probe, ...result } = assembled;
+  return result;
+}
+async function assembleDecryptedMessage(message, address) {
+  const contentResult = await decryptFieldDetailed(message.content, address);
+  const thinkingResult = message.thinking ? await decryptFieldDetailed(message.thinking, address) : null;
+  const vectorResult = await decryptMaybeJsonFieldDetailed(
     message.vector,
     address
   );
-  const decryptedChunks = await decryptMaybeJsonField(
+  const chunksResult = await decryptMaybeJsonFieldDetailed(
     message.chunks,
     address
   );
-  const decryptedSources = await decryptMaybeJsonField(
+  const sourcesResult = await decryptMaybeJsonFieldDetailed(
     message.sources,
     address
   );
-  const decryptedThoughtProcess = await decryptMaybeJsonField(
+  const thoughtProcessResult = await decryptMaybeJsonFieldDetailed(
     message.thoughtProcess,
     address
   );
-  return {
+  let decryptionStatus;
+  let refreshProbe;
+  const consider = (status, probe) => {
+    decryptionStatus = worseDecryptStatus(decryptionStatus, status);
+    if (!refreshProbe && probe && (status === "auth_mismatch" || status === "key_missing")) {
+      refreshProbe = probe;
+    }
+  };
+  consider(contentResult.status, isEncrypted(message.content) ? message.content : void 0);
+  if (thinkingResult && message.thinking && typeof message.thinking === "string") {
+    consider(thinkingResult.status, isEncrypted(message.thinking) ? message.thinking : void 0);
+  }
+  if (vectorResult.probe) consider(vectorResult.status, vectorResult.probe);
+  if (chunksResult.probe) consider(chunksResult.status, chunksResult.probe);
+  if (sourcesResult.probe) consider(sourcesResult.status, sourcesResult.probe);
+  if (thoughtProcessResult.probe) {
+    consider(thoughtProcessResult.status, thoughtProcessResult.probe);
+  }
+  const statusForConsumer = decryptionStatus === "ok" || decryptionStatus === "plaintext" || !decryptionStatus ? void 0 : decryptionStatus;
+  const result = {
     ...message,
-    content: decryptedContent,
-    thinking: decryptedThinking,
-    vector: decryptedVector,
-    chunks: decryptedChunks,
-    sources: decryptedSources,
-    thoughtProcess: decryptedThoughtProcess
+    content: contentResult.value,
+    thinking: thinkingResult ? thinkingResult.value : message.thinking,
+    vector: vectorResult.value,
+    chunks: chunksResult.value,
+    sources: sourcesResult.value,
+    thoughtProcess: thoughtProcessResult.value
   };
+  if (statusForConsumer) {
+    result.decryptionStatus = statusForConsumer;
+  } else {
+    delete result.decryptionStatus;
+  }
+  if (refreshProbe) {
+    result.refreshProbe = refreshProbe;
+  }
+  return result;
 }
 var init_encryption = __esm({
   "src/lib/db/chat/encryption.ts"() {
@@ -8627,6 +8879,7 @@ __export(index_exports, {
   DEFAULT_VAULT_CACHE_SIZE: () => DEFAULT_VAULT_CACHE_SIZE,
   DatabaseManager: () => DatabaseManager,
   ENTITY_FANOUT: () => ENTITY_FANOUT,
+  EncryptionKeyMissingError: () => EncryptionKeyMissingError,
   HARD_DELETE_WINDOW_MS: () => HARD_DELETE_WINDOW_MS,
   INFERENCE_ID_HEADER: () => INFERENCE_ID_HEADER,
   LoggerProvider: () => LoggerProvider,
@@ -8753,6 +9006,7 @@ __export(index_exports, {
   rankProfileCandidates: () => rankProfileCandidates,
   recall: () => recall,
   reflect: () => reflect,
+  refreshEncryptionKeyIfMatches: () => refreshEncryptionKeyIfMatches,
   refreshNotionAccessToken: () => refreshNotionAccessToken,
   registerNotionClient: () => registerNotionClient,
   relinkMemoryTopicsOp: () => relinkMemoryTopicsOp,
@@ -8767,6 +9021,7 @@ __export(index_exports, {
   sdkModelClasses: () => sdkModelClasses,
   sdkSchema: () => sdkSchema,
   searchVaultMemories: () => searchVaultMemories,
+  seedEncryptionKeys: () => seedEncryptionKeys,
   setLogger: () => setLogger,
   setMemoryVisibilityOp: () => setMemoryVisibilityOp,
   shouldChunkMessage: () => shouldChunkMessage,
@@ -16875,21 +17130,63 @@ var DEFAULT_PROFILE_FACETS = [
     guidance: "Summarize what the person has been up to lately in one line, favoring the most recently reinforced facts. Frame it as current/ongoing (e.g. 'Lately: training for a first half-marathon and learning Portuguese'). Omit if nothing recent stands out."
   }
 ];
+var NEARBY_MAX_OCCUPATION_CODEPOINTS = 80;
+var NEARBY_MAX_INTERESTS = 12;
+var NEARBY_MAX_INTEREST_CODEPOINTS = 40;
+var MAX_RAW_INTERESTS = NEARBY_MAX_INTERESTS * 2;
+function codePointLength(value) {
+  return [...value].length;
+}
+var FACET_BASE_PROPERTIES = {
+  summary: {
+    type: "string",
+    description: "The synthesized section prose. Empty string if the memories don't cover it."
+  },
+  hasEvidence: {
+    type: "boolean",
+    description: "False when the supplied memories don't support any claim for this facet."
+  }
+};
 var FACET_RESPONSE_SCHEMA = {
+  type: "object",
+  properties: FACET_BASE_PROPERTIES,
+  required: ["summary", "hasEvidence"],
+  additionalProperties: false
+};
+var WORK_ROLE_RESPONSE_SCHEMA = {
   type: "object",
   properties: {
-    summary: {
+    ...FACET_BASE_PROPERTIES,
+    occupation: {
       type: "string",
-      description: "The synthesized section prose. Empty string if the memories don't cover it."
-    },
-    hasEvidence: {
-      type: "boolean",
-      description: "False when the supplied memories don't support any claim for this facet."
+      description: `The same role as a standalone phrase for a profile field, at most ${NEARBY_MAX_OCCUPATION_CODEPOINTS} characters (e.g. "Backend engineer, fintech"). Empty string when hasEvidence is false.`
     }
   },
-  required: ["summary", "hasEvidence"],
+  required: ["summary", "hasEvidence", "occupation"],
   additionalProperties: false
 };
+var INTERESTS_RESPONSE_SCHEMA = {
+  type: "object",
+  properties: {
+    ...FACET_BASE_PROPERTIES,
+    interests: {
+      type: "array",
+      items: { type: "string" },
+      description: `The same interests as discrete strings \u2014 at most ${NEARBY_MAX_INTERESTS} items, each at most ${NEARBY_MAX_INTEREST_CODEPOINTS} characters (e.g. ["trail running", "film photography"]). Empty array when hasEvidence is false.`
+    }
+  },
+  required: ["summary", "hasEvidence", "interests"],
+  additionalProperties: false
+};
+function facetResponseSchema(key) {
+  if (key === "work_role") return WORK_ROLE_RESPONSE_SCHEMA;
+  if (key === "interests") return INTERESTS_RESPONSE_SCHEMA;
+  return FACET_RESPONSE_SCHEMA;
+}
+var FACET_STRUCTURED_RESPONSE_HINT = {
+  work_role: `, "occupation": <the role as a standalone phrase of at most ${NEARBY_MAX_OCCUPATION_CODEPOINTS} characters, e.g. "Backend engineer, fintech", or "">`,
+  interests: `, "interests": <the same interests as an array of at most ${NEARBY_MAX_INTERESTS} strings of at most ${NEARBY_MAX_INTEREST_CODEPOINTS} characters each, e.g. ["trail running", "film photography"], or []>`
+};
 async function synthesizeProfile(ctx, options = {}) {
   if (!ctx.vaultCtx) {
     throw new Error("synthesizeProfile requires ctx.vaultCtx (vault-backed facts).");
@@ -16985,7 +17282,7 @@ function reviewedMemoryIdsSignature(ids) {
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
-  return facets.map((f) => JSON.stringify([f.key, f.label, f.query, f.guidance])).sort().join("\n");
+  return facets.map((f) => JSON.stringify([f.key, f.label, f.query, f.guidance, facetResponseSchema(f.key)])).sort().join("\n");
 }
 function trendsEqual(a, b) {
   if (!a) return false;
@@ -17133,7 +17430,7 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
     systemPrompt: buildFacetSystemPrompt(facet),
-    responseSchema: FACET_RESPONSE_SCHEMA,
+    responseSchema: facetResponseSchema(facet.key),
     memories
   });
   const noEvidence = result.basedOn.memoryIds.length === 0;
@@ -17156,6 +17453,25 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     const redacted = await options.redactor.redactTextAsync(text12);
     section.text = redacted.text;
   }
+  if (!legitimateEmpty && !noEvidence) {
+    const values = extractStructuredValues(facet.key, result.structuredOutput);
+    if (options.redactor) {
+      if (values.occupation) {
+        values.occupation = (await options.redactor.redactTextAsync(values.occupation)).text;
+      }
+      if (values.interests) {
+        const gated = [];
+        for (const interest of values.interests) {
+          gated.push((await options.redactor.redactTextAsync(interest)).text);
+        }
+        values.interests = gated;
+      }
+    }
+    const occupation = normalizeOccupation(values.occupation);
+    if (occupation !== void 0) section.occupation = occupation;
+    const interests = normalizeInterests(values.interests);
+    if (interests !== void 0) section.interests = interests;
+  }
   return section;
 }
 function fallbackSection(facet, prior) {
@@ -17172,6 +17488,7 @@ function fallbackSection(facet, prior) {
   };
 }
 function buildFacetSystemPrompt(facet) {
+  const structuredField = FACET_STRUCTURED_RESPONSE_HINT[facet.key] ?? "";
   return `You are writing the "${facet.label}" section of a person's shareable profile, using their private memories (supplied as evidence) as the only source of truth.
 
 Task for this section:
@@ -17182,7 +17499,7 @@ Rules:
 - If the memories don't cover this section, return an empty summary with hasEvidence=false. Do not pad or guess.
 - Write in third person about the person, in a natural voice suitable for a public profile (no "I"/"you", no name repetition).
 - Be concise and specific; no preamble, hedging, or meta-commentary.
-- Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false> }.`;
+- Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false>${structuredField} }.`;
 }
 function extractFacetText(structured) {
   if (structured && typeof structured === "object") {
@@ -17193,6 +17510,73 @@ function extractFacetText(structured) {
   }
   return { text: "", legitimateEmpty: false };
 }
+function extractStructuredValues(key, structured) {
+  if (!structured || typeof structured !== "object") return {};
+  const obj = structured;
+  if (key === "work_role") {
+    return typeof obj.occupation === "string" ? { occupation: obj.occupation } : {};
+  }
+  if (key === "interests") {
+    const list = coerceInterestList(obj.interests);
+    if (list) return { interests: list.slice(0, MAX_RAW_INTERESTS) };
+  }
+  return {};
+}
+function coerceInterestList(value) {
+  if (Array.isArray(value)) return value.filter((i) => typeof i === "string");
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  if (trimmed.startsWith("[")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (Array.isArray(parsed)) return parsed.filter((i) => typeof i === "string");
+    } catch {
+      if (trimmed.endsWith("]")) return splitInterestFragments(trimmed.slice(1, -1));
+    }
+  }
+  return splitInterestFragments(trimmed);
+}
+function splitInterestFragments(source) {
+  return source.split(",").map((fragment) => {
+    let entry = fragment.trim();
+    if (entry.startsWith("[")) entry = entry.slice(1);
+    if (entry.endsWith("]")) entry = entry.slice(0, -1);
+    entry = entry.trim();
+    const quote = entry[0];
+    if ((quote === '"' || quote === "'") && entry.endsWith(quote)) entry = entry.slice(1, -1);
+    return entry;
+  });
+}
+function normalizeOccupation(value) {
+  if (value === void 0) return void 0;
+  const trimmed = value.trim();
+  if (!trimmed) return void 0;
+  const length = codePointLength(trimmed);
+  if (length > NEARBY_MAX_OCCUPATION_CODEPOINTS) {
+    getLogger().warn(
+      "[memory/synthesizeProfile] occupation exceeded the publishable length; dropping it",
+      { length, max: NEARBY_MAX_OCCUPATION_CODEPOINTS }
+    );
+    return void 0;
+  }
+  return trimmed;
+}
+function normalizeInterests(values) {
+  if (values === void 0) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const value of values) {
+    const trimmed = value.trim();
+    if (!trimmed) continue;
+    if (codePointLength(trimmed) > NEARBY_MAX_INTEREST_CODEPOINTS) continue;
+    const key = trimmed.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(trimmed);
+    if (out.length === NEARBY_MAX_INTERESTS) break;
+  }
+  return out.length > 0 ? out : void 0;
+}
 
 // src/lib/memory/topicExtract.ts
 init_operations2();
@@ -22903,6 +23287,7 @@ function createNotionTools(getAccessToken, requestNotionAccess) {
   DEFAULT_VAULT_CACHE_SIZE,
   DatabaseManager,
   ENTITY_FANOUT,
+  EncryptionKeyMissingError,
   HARD_DELETE_WINDOW_MS,
   INFERENCE_ID_HEADER,
   LoggerProvider,
@@ -23029,6 +23414,7 @@ function createNotionTools(getAccessToken, requestNotionAccess) {
   rankProfileCandidates,
   recall,
   reflect,
+  refreshEncryptionKeyIfMatches,
   refreshNotionAccessToken,
   registerNotionClient,
   relinkMemoryTopicsOp,
@@ -23043,6 +23429,7 @@ function createNotionTools(getAccessToken, requestNotionAccess) {
   sdkModelClasses,
   sdkSchema,
   searchVaultMemories,
+  seedEncryptionKeys,
   setLogger,
   setMemoryVisibilityOp,
   shouldChunkMessage,