@anuma/sdk 4.1.0 → 4.2.1

package/dist/react/index.cjs

@@ -276,14 +276,11 @@ function notifyKeyAvailable(address) {
     }
   }
 }
-function getStoredKey(address) {
-  const keys = encryptionKeyStore.get(address);
-  return keys?.current ?? null;
-}
 function getStoredKeyByVersion(address, version) {
   const keys = encryptionKeyStore.get(address);
   if (!keys) return null;
-  return version === "v2" ? keys.legacy : keys.current;
+  const value = version === "v2" ? keys.legacy : keys.current;
+  return value ?? null;
 }
 function setStoredKey(address, keys) {
   encryptionKeyStore.set(address, keys);
@@ -292,6 +289,8 @@ function clearEncryptionKey(address) {
   encryptionKeyStore.delete(address);
   cryptoKeyCache.delete(`${address}:v2`);
   cryptoKeyCache.delete(`${address}:v3`);
+  refreshCandidatesByAddress.delete(address);
+  divergentDeriveAddresses.delete(address);
 }
 function clearAllEncryptionState() {
   sessionEpoch += 1;
@@ -299,6 +298,9 @@ function clearAllEncryptionState() {
   cryptoKeyCache.clear();
   keyAvailableCallbacks.clear();
   pendingKeyRequests.clear();
+  pendingCandidateDerives.clear();
+  refreshCandidatesByAddress.clear();
+  divergentDeriveAddresses.clear();
   clearAllKeyPairs();
   for (const cb of clearAllEncryptionStateCallbacks) {
     try {
@@ -482,9 +484,7 @@ async function getEncryptionKey(address, version = "v3") {
   }
   const keyHex = getStoredKeyByVersion(address, version);
   if (!keyHex) {
-    throw new Error(
-      "Encryption key not found. Please sign a message to generate your encryption key."
-    );
+    throw new EncryptionKeyMissingError(address, version);
   }
   const keyBytes = hexToBytes(keyHex);
   const cryptoKey = await crypto.subtle.importKey(
@@ -548,8 +548,42 @@ async function decryptDataBytesFromBytes(encrypted, address, version = "v3") {
   );
   return new Uint8Array(decryptedData);
 }
-function hasEncryptionKey(address) {
-  return getStoredKey(address) !== null;
+function hasEncryptionKey(address, version) {
+  return getStoredKeyByVersion(address, version ?? "v3") !== null;
+}
+function seedEncryptionKeys(address, keys) {
+  if (!isValidWalletAddress(address)) {
+    throw new Error(
+      `Invalid wallet address: ${address}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
+    );
+  }
+  if (!keys.legacy && !keys.current) {
+    throw new Error("seedEncryptionKeys: at least one of legacy or current is required");
+  }
+  if (keys.legacy !== void 0) {
+    assertAes256KeyHex("legacy", keys.legacy);
+  }
+  if (keys.current !== void 0) {
+    assertAes256KeyHex("current", keys.current);
+  }
+  const existing = encryptionKeyStore.get(address);
+  const next = {
+    legacy: keys.legacy ?? existing?.legacy,
+    current: keys.current ?? existing?.current
+  };
+  setStoredKey(address, next);
+  if (keys.legacy !== void 0) cryptoKeyCache.delete(`${address}:v2`);
+  if (keys.current !== void 0) cryptoKeyCache.delete(`${address}:v3`);
+  refreshCandidatesByAddress.delete(address);
+  divergentDeriveAddresses.delete(address);
+  notifyKeyAvailable(address);
+}
+function assertAes256KeyHex(field10, value) {
+  if (!AES_256_KEY_HEX.test(value)) {
+    throw new Error(
+      `seedEncryptionKeys: ${field10} must be 64 hex characters (32-byte AES key), got length ${value.length}`
+    );
+  }
 }
 async function encryptBytesWithKey(plaintext, key) {
   const plaintextBytes = typeof plaintext === "string" ? SHARED_TEXT_ENCODER.encode(plaintext) : plaintext;
@@ -598,20 +632,23 @@ async function decryptDataBatch(encryptedValues, address) {
   const key = await getEncryptionKey(address);
   return Promise.all(encryptedValues.map((value) => decryptDataWithKey(value, key)));
 }
-async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSigner) {
+async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSigner, options) {
   if (!isValidWalletAddress(walletAddress)) {
     throw new Error(
       `Invalid wallet address: ${walletAddress}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
     );
   }
-  const existingKey = getStoredKey(walletAddress);
-  if (existingKey) {
-    return;
+  if (!options?.force && getStoredKeyByVersion(walletAddress, "v3") && getStoredKeyByVersion(walletAddress, "v2")) {
+    return true;
   }
-  const pending = pendingKeyRequests.get(walletAddress);
-  if (pending) {
-    await pending;
-    return;
+  if (!options?.force && divergentDeriveAddresses.has(walletAddress)) {
+    return false;
+  }
+  if (!options?.force) {
+    const pending = pendingKeyRequests.get(walletAddress);
+    if (pending) {
+      return pending;
+    }
   }
   const startEpoch = sessionEpoch;
   const promise = (async () => {
@@ -639,20 +676,143 @@ async function requestEncryptionKey(walletAddress, signMessage, embeddedWalletSi
       deriveKeyFromSignatureV3(signature)
     ]);
     if (sessionEpoch !== startEpoch) {
-      return;
+      return false;
+    }
+    const existing = encryptionKeyStore.get(walletAddress);
+    if (!options?.force && existing && (existing.legacy || existing.current)) {
+      const matchesCurrent = Boolean(existing.current && existing.current === currentKey);
+      const matchesLegacy = Boolean(existing.legacy && existing.legacy === legacyKey);
+      if (!matchesCurrent && !matchesLegacy) {
+        getLogger().warn(
+          "requestEncryptionKey: derived keys do not match existing store; leaving unchanged"
+        );
+        divergentDeriveAddresses.add(walletAddress);
+        return false;
+      }
+      setStoredKey(walletAddress, {
+        legacy: existing.legacy ?? legacyKey,
+        current: existing.current ?? currentKey
+      });
+    } else {
+      setStoredKey(walletAddress, { legacy: legacyKey, current: currentKey });
     }
-    setStoredKey(walletAddress, { legacy: legacyKey, current: currentKey });
+    cryptoKeyCache.delete(`${walletAddress}:v2`);
+    cryptoKeyCache.delete(`${walletAddress}:v3`);
+    refreshCandidatesByAddress.delete(walletAddress);
+    divergentDeriveAddresses.delete(walletAddress);
     notifyKeyAvailable(walletAddress);
+    return true;
   })();
   pendingKeyRequests.set(walletAddress, promise);
   try {
-    await promise;
+    return await promise;
   } finally {
     if (pendingKeyRequests.get(walletAddress) === promise) {
       pendingKeyRequests.delete(walletAddress);
     }
   }
 }
+async function refreshEncryptionKeyIfMatches(walletAddress, probeCiphertext, signMessage, embeddedWalletSigner) {
+  if (!isValidWalletAddress(walletAddress)) {
+    throw new Error(
+      `Invalid wallet address: ${walletAddress}. Address must start with 0x and be 42 characters (0x + 40 hex characters).`
+    );
+  }
+  const parsed = parsePrefixedCiphertext(probeCiphertext);
+  if (!parsed) {
+    return false;
+  }
+  const cached = refreshCandidatesByAddress.get(walletAddress);
+  if (cached) {
+    return tryCommitCandidatesIfProbeMatches(walletAddress, parsed, cached);
+  }
+  let derivePromise = pendingCandidateDerives.get(walletAddress);
+  if (!derivePromise) {
+    derivePromise = (async () => {
+      const candidates2 = await deriveRefreshCandidates(signMessage, embeddedWalletSigner);
+      if (candidates2) {
+        refreshCandidatesByAddress.set(walletAddress, candidates2);
+      }
+      return candidates2;
+    })().finally(() => {
+      if (pendingCandidateDerives.get(walletAddress) === derivePromise) {
+        pendingCandidateDerives.delete(walletAddress);
+      }
+    });
+    pendingCandidateDerives.set(walletAddress, derivePromise);
+  }
+  const candidates = await derivePromise;
+  if (!candidates) {
+    return false;
+  }
+  return tryCommitCandidatesIfProbeMatches(walletAddress, parsed, candidates);
+}
+function parsePrefixedCiphertext(probeCiphertext) {
+  const version = probeCiphertext.startsWith("enc:v3:") ? "v3" : probeCiphertext.startsWith("enc:v2:") ? "v2" : null;
+  if (!version) return null;
+  const encryptedData = probeCiphertext.slice(
+    version === "v3" ? "enc:v3:".length : "enc:v2:".length
+  );
+  if (encryptedData.length < 56 || !/^[0-9a-f]+$/i.test(encryptedData)) {
+    return null;
+  }
+  return { version, encryptedData };
+}
+async function deriveRefreshCandidates(signMessage, embeddedWalletSigner) {
+  const startEpoch = sessionEpoch;
+  const signOptions = { showWalletUIs: false };
+  let signature;
+  try {
+    if (embeddedWalletSigner) {
+      signature = await embeddedWalletSigner(SIGN_MESSAGE, signOptions);
+    } else {
+      signature = await signMessage(SIGN_MESSAGE, signOptions);
+    }
+  } catch (error) {
+    if (embeddedWalletSigner && error instanceof Error) {
+      getLogger().warn(
+        "Embedded wallet signing failed during key refresh, falling back to standard signMessage:",
+        error.message
+      );
+      signature = await signMessage(SIGN_MESSAGE, signOptions);
+    } else {
+      throw error;
+    }
+  }
+  const [legacyKey, currentKey] = await Promise.all([
+    deriveKeyFromSignature(signature),
+    deriveKeyFromSignatureV3(signature)
+  ]);
+  if (sessionEpoch !== startEpoch) {
+    return null;
+  }
+  return { legacy: legacyKey, current: currentKey };
+}
+async function tryCommitCandidatesIfProbeMatches(walletAddress, parsed, candidates) {
+  const candidateHex = parsed.version === "v2" ? candidates.legacy : candidates.current;
+  const keyBytes = hexToBytes(candidateHex);
+  const candidateCryptoKey = await crypto.subtle.importKey(
+    "raw",
+    keyBytes.buffer,
+    { name: "AES-GCM" },
+    false,
+    ["encrypt", "decrypt"]
+  );
+  try {
+    await decryptDataWithKey(parsed.encryptedData, candidateCryptoKey);
+  } catch {
+    getLogger().warn(
+      "refreshEncryptionKeyIfMatches: candidate keys failed to decrypt probe; leaving store unchanged"
+    );
+    return false;
+  }
+  setStoredKey(walletAddress, { legacy: candidates.legacy, current: candidates.current });
+  cryptoKeyCache.delete(`${walletAddress}:v2`);
+  cryptoKeyCache.delete(`${walletAddress}:v3`);
+  divergentDeriveAddresses.delete(walletAddress);
+  notifyKeyAvailable(walletAddress);
+  return true;
+}
 async function persistKeyPair(address, startEpoch) {
   if (typeof window === "undefined") {
     return;
@@ -886,15 +1046,28 @@ function useEncryption(signMessage, embeddedWalletSigner) {
     clearKeyPair: (walletAddress) => clearKeyPair(walletAddress)
   };
 }
-var SIGN_MESSAGE, encryptionKeyStore, pendingKeyRequests, sessionEpoch, cryptoKeyCache, keyAvailableCallbacks, clearAllEncryptionStateCallbacks, keyPairStore, SHARED_TEXT_ENCODER, SHARED_TEXT_DECODER, KEYPAIR_STORAGE_PREFIX;
+var SIGN_MESSAGE, EncryptionKeyMissingError, encryptionKeyStore, pendingKeyRequests, pendingCandidateDerives, refreshCandidatesByAddress, divergentDeriveAddresses, sessionEpoch, cryptoKeyCache, keyAvailableCallbacks, clearAllEncryptionStateCallbacks, keyPairStore, SHARED_TEXT_ENCODER, SHARED_TEXT_DECODER, AES_256_KEY_HEX, KEYPAIR_STORAGE_PREFIX;
 var init_useEncryption = __esm({
   "src/react/useEncryption.ts"() {
     "use strict";
     "use client";
     init_logger();
     SIGN_MESSAGE = "The app is asking you to sign this message to generate a key, which will be used to encrypt data.";
+    EncryptionKeyMissingError = class extends Error {
+      constructor(address, version) {
+        super(
+          `Encryption key (${version}) not found for ${address}. Please sign a message to generate your encryption key.`
+        );
+        this.name = "EncryptionKeyMissingError";
+        this.address = address;
+        this.version = version;
+      }
+    };
     encryptionKeyStore = /* @__PURE__ */ new Map();
     pendingKeyRequests = /* @__PURE__ */ new Map();
+    pendingCandidateDerives = /* @__PURE__ */ new Map();
+    refreshCandidatesByAddress = /* @__PURE__ */ new Map();
+    divergentDeriveAddresses = /* @__PURE__ */ new Set();
     sessionEpoch = 0;
     cryptoKeyCache = /* @__PURE__ */ new Map();
     keyAvailableCallbacks = /* @__PURE__ */ new Map();
@@ -902,6 +1075,7 @@ var init_useEncryption = __esm({
     keyPairStore = /* @__PURE__ */ new Map();
     SHARED_TEXT_ENCODER = new TextEncoder();
     SHARED_TEXT_DECODER = new TextDecoder();
+    AES_256_KEY_HEX = /^[0-9a-fA-F]{64}$/;
     KEYPAIR_STORAGE_PREFIX = "ecdh_keypair_";
   }
 });
@@ -954,20 +1128,29 @@ async function encryptField(value, address, signMessage, embeddedWalletSigner, s
   const encrypted = await encryptData(value, address);
   return `${ENCRYPTION_PREFIX}${encrypted}`;
 }
-async function decryptField(value, address) {
-  if (!value) return value;
+async function decryptFieldDetailed(value, address) {
+  if (!value) return { status: "plaintext", value };
   const detected = detectEncryptionVersion(value);
-  if (!detected) return value;
+  if (!detected) return { status: "plaintext", value };
   if (detected.encryptedData.length < 56 || !/^[0-9a-f]+$/i.test(detected.encryptedData)) {
-    return value;
+    return { status: "invalid_payload", value, version: detected.version };
   }
   try {
-    return await decryptData(detected.encryptedData, address, detected.version);
+    const plaintext = await decryptData(detected.encryptedData, address, detected.version);
+    return { status: "ok", value: plaintext, version: detected.version };
   } catch (error) {
-    getLogger().warn("Failed to decrypt field, returning as-is:", error);
-    return value;
+    if (error instanceof EncryptionKeyMissingError) {
+      getLogger().warn("Failed to decrypt field (key missing for version):", error.message);
+      return { status: "key_missing", value, version: detected.version };
+    }
+    getLogger().warn("Failed to decrypt field (auth mismatch or crypto error):", error);
+    return { status: "auth_mismatch", value, version: detected.version };
   }
 }
+async function decryptField(value, address) {
+  const result = await decryptFieldDetailed(value, address);
+  return result.value;
+}
 async function encryptJsonField(value, address, signMessage, embeddedWalletSigner, skipKeyRequest) {
   if (!value) return void 0;
   const jsonString = JSON.stringify(value);
@@ -1084,20 +1267,40 @@ async function encryptMessageFields(message, address, signMessage, embeddedWalle
     throw error;
   }
 }
-async function decryptMaybeJsonField(value, address) {
-  if (value === void 0) return void 0;
-  if (value === null) return value;
+async function decryptMaybeJsonFieldDetailed(value, address) {
+  if (value === void 0) return { value: void 0, status: "plaintext" };
+  if (value === null) return { value, status: "plaintext" };
   if (typeof value === "string") {
     if (isEncrypted(value)) {
-      return await decryptJsonField(value, address);
+      const detailed = await decryptFieldDetailed(value, address);
+      if (detailed.status !== "ok") {
+        return { value: void 0, status: detailed.status, probe: value };
+      }
+      try {
+        return { value: JSON.parse(detailed.value), status: "ok" };
+      } catch (error) {
+        getLogger().warn("Failed to parse decrypted JSON field:", error);
+        return { value: void 0, status: "invalid_payload", probe: value };
+      }
     }
     try {
-      return JSON.parse(value);
+      return { value: JSON.parse(value), status: "plaintext" };
     } catch {
-      return void 0;
+      return { value: void 0, status: "plaintext" };
     }
   }
-  return value;
+  return { value, status: "plaintext" };
+}
+function worseDecryptStatus(a, b) {
+  if (b === "ok" || b === "plaintext") return a;
+  if (!a || a === "ok" || a === "plaintext") return b;
+  const rank = (s) => {
+    if (s === "auth_mismatch") return 3;
+    if (s === "key_missing") return 2;
+    if (s === "invalid_payload") return 1;
+    return 0;
+  };
+  return rank(b) >= rank(a) ? b : a;
 }
 async function decryptMessageFields(message, address, signMessage, embeddedWalletSigner) {
   if (!address) {
@@ -1110,33 +1313,82 @@ async function decryptMessageFields(message, address, signMessage, embeddedWalle
       getLogger().warn("Failed to request encryption key for decryption:", error);
     }
   }
-  const decryptedContent = await decryptField(message.content, address);
-  const decryptedThinking = message.thinking ? await decryptField(message.thinking, address) : message.thinking;
-  const decryptedVector = await decryptMaybeJsonField(
+  let assembled = await assembleDecryptedMessage(message, address);
+  const needsRefresh = assembled.decryptionStatus === "auth_mismatch" || assembled.decryptionStatus === "key_missing";
+  if (needsRefresh && signMessage && assembled.refreshProbe) {
+    try {
+      const refreshed = await refreshEncryptionKeyIfMatches(
+        address,
+        assembled.refreshProbe,
+        signMessage,
+        embeddedWalletSigner
+      );
+      if (refreshed) {
+        assembled = await assembleDecryptedMessage(message, address);
+      }
+    } catch (error) {
+      getLogger().warn("Failed to refresh encryption key after decrypt failure:", error);
+    }
+  }
+  const { refreshProbe: _probe, ...result } = assembled;
+  return result;
+}
+async function assembleDecryptedMessage(message, address) {
+  const contentResult = await decryptFieldDetailed(message.content, address);
+  const thinkingResult = message.thinking ? await decryptFieldDetailed(message.thinking, address) : null;
+  const vectorResult = await decryptMaybeJsonFieldDetailed(
     message.vector,
     address
   );
-  const decryptedChunks = await decryptMaybeJsonField(
+  const chunksResult = await decryptMaybeJsonFieldDetailed(
     message.chunks,
     address
   );
-  const decryptedSources = await decryptMaybeJsonField(
+  const sourcesResult = await decryptMaybeJsonFieldDetailed(
     message.sources,
     address
   );
-  const decryptedThoughtProcess = await decryptMaybeJsonField(
+  const thoughtProcessResult = await decryptMaybeJsonFieldDetailed(
     message.thoughtProcess,
     address
   );
-  return {
+  let decryptionStatus;
+  let refreshProbe;
+  const consider = (status, probe) => {
+    decryptionStatus = worseDecryptStatus(decryptionStatus, status);
+    if (!refreshProbe && probe && (status === "auth_mismatch" || status === "key_missing")) {
+      refreshProbe = probe;
+    }
+  };
+  consider(contentResult.status, isEncrypted(message.content) ? message.content : void 0);
+  if (thinkingResult && message.thinking && typeof message.thinking === "string") {
+    consider(thinkingResult.status, isEncrypted(message.thinking) ? message.thinking : void 0);
+  }
+  if (vectorResult.probe) consider(vectorResult.status, vectorResult.probe);
+  if (chunksResult.probe) consider(chunksResult.status, chunksResult.probe);
+  if (sourcesResult.probe) consider(sourcesResult.status, sourcesResult.probe);
+  if (thoughtProcessResult.probe) {
+    consider(thoughtProcessResult.status, thoughtProcessResult.probe);
+  }
+  const statusForConsumer = decryptionStatus === "ok" || decryptionStatus === "plaintext" || !decryptionStatus ? void 0 : decryptionStatus;
+  const result = {
     ...message,
-    content: decryptedContent,
-    thinking: decryptedThinking,
-    vector: decryptedVector,
-    chunks: decryptedChunks,
-    sources: decryptedSources,
-    thoughtProcess: decryptedThoughtProcess
+    content: contentResult.value,
+    thinking: thinkingResult ? thinkingResult.value : message.thinking,
+    vector: vectorResult.value,
+    chunks: chunksResult.value,
+    sources: sourcesResult.value,
+    thoughtProcess: thoughtProcessResult.value
   };
+  if (statusForConsumer) {
+    result.decryptionStatus = statusForConsumer;
+  } else {
+    delete result.decryptionStatus;
+  }
+  if (refreshProbe) {
+    result.refreshProbe = refreshProbe;
+  }
+  return result;
 }
 var init_encryption = __esm({
   "src/lib/db/chat/encryption.ts"() {
@@ -8938,6 +9190,7 @@ __export(index_exports, {
   DropboxAuthProvider: () => DropboxAuthProvider,
   ENTITY_FANOUT: () => ENTITY_FANOUT,
   ENTITY_KINDS: () => ENTITY_KINDS,
+  EncryptionKeyMissingError: () => EncryptionKeyMissingError,
   EntityModel: () => Entity,
   ExcelProcessor: () => ExcelProcessor,
   FILE_PLACEHOLDER_PREFIX: () => FILE_PLACEHOLDER_PREFIX,
@@ -9228,6 +9481,7 @@ __export(index_exports, {
   reflect: () => reflect,
   refreshCalendarToken: () => refreshCalendarToken,
   refreshDriveToken: () => refreshDriveToken,
+  refreshEncryptionKeyIfMatches: () => refreshEncryptionKeyIfMatches,
   refreshGithubToken: () => refreshGithubToken,
   refreshNotionToken: () => refreshNotionToken,
   relinkMemoryTopicsOp: () => relinkMemoryTopicsOp,
@@ -9259,6 +9513,7 @@ __export(index_exports, {
   searchMediaOp: () => searchMediaOp,
   searchMessagesOp: () => searchMessagesOp,
   searchVaultMemories: () => searchVaultMemories,
+  seedEncryptionKeys: () => seedEncryptionKeys,
   selectServerToolsForPrompt: () => selectServerToolsForPrompt,
   serializeJsx: () => serializeJsx,
   setLogger: () => setLogger,
@@ -18174,21 +18429,63 @@ var DEFAULT_PROFILE_FACETS = [
     guidance: "Summarize what the person has been up to lately in one line, favoring the most recently reinforced facts. Frame it as current/ongoing (e.g. 'Lately: training for a first half-marathon and learning Portuguese'). Omit if nothing recent stands out."
   }
 ];
+var NEARBY_MAX_OCCUPATION_CODEPOINTS = 80;
+var NEARBY_MAX_INTERESTS = 12;
+var NEARBY_MAX_INTEREST_CODEPOINTS = 40;
+var MAX_RAW_INTERESTS = NEARBY_MAX_INTERESTS * 2;
+function codePointLength(value) {
+  return [...value].length;
+}
+var FACET_BASE_PROPERTIES = {
+  summary: {
+    type: "string",
+    description: "The synthesized section prose. Empty string if the memories don't cover it."
+  },
+  hasEvidence: {
+    type: "boolean",
+    description: "False when the supplied memories don't support any claim for this facet."
+  }
+};
 var FACET_RESPONSE_SCHEMA = {
+  type: "object",
+  properties: FACET_BASE_PROPERTIES,
+  required: ["summary", "hasEvidence"],
+  additionalProperties: false
+};
+var WORK_ROLE_RESPONSE_SCHEMA = {
   type: "object",
   properties: {
-    summary: {
+    ...FACET_BASE_PROPERTIES,
+    occupation: {
       type: "string",
-      description: "The synthesized section prose. Empty string if the memories don't cover it."
-    },
-    hasEvidence: {
-      type: "boolean",
-      description: "False when the supplied memories don't support any claim for this facet."
+      description: `The same role as a standalone phrase for a profile field, at most ${NEARBY_MAX_OCCUPATION_CODEPOINTS} characters (e.g. "Backend engineer, fintech"). Empty string when hasEvidence is false.`
     }
   },
-  required: ["summary", "hasEvidence"],
+  required: ["summary", "hasEvidence", "occupation"],
   additionalProperties: false
 };
+var INTERESTS_RESPONSE_SCHEMA = {
+  type: "object",
+  properties: {
+    ...FACET_BASE_PROPERTIES,
+    interests: {
+      type: "array",
+      items: { type: "string" },
+      description: `The same interests as discrete strings \u2014 at most ${NEARBY_MAX_INTERESTS} items, each at most ${NEARBY_MAX_INTEREST_CODEPOINTS} characters (e.g. ["trail running", "film photography"]). Empty array when hasEvidence is false.`
+    }
+  },
+  required: ["summary", "hasEvidence", "interests"],
+  additionalProperties: false
+};
+function facetResponseSchema(key) {
+  if (key === "work_role") return WORK_ROLE_RESPONSE_SCHEMA;
+  if (key === "interests") return INTERESTS_RESPONSE_SCHEMA;
+  return FACET_RESPONSE_SCHEMA;
+}
+var FACET_STRUCTURED_RESPONSE_HINT = {
+  work_role: `, "occupation": <the role as a standalone phrase of at most ${NEARBY_MAX_OCCUPATION_CODEPOINTS} characters, e.g. "Backend engineer, fintech", or "">`,
+  interests: `, "interests": <the same interests as an array of at most ${NEARBY_MAX_INTERESTS} strings of at most ${NEARBY_MAX_INTEREST_CODEPOINTS} characters each, e.g. ["trail running", "film photography"], or []>`
+};
 async function synthesizeProfile(ctx, options = {}) {
   if (!ctx.vaultCtx) {
     throw new Error("synthesizeProfile requires ctx.vaultCtx (vault-backed facts).");
@@ -18284,7 +18581,7 @@ function reviewedMemoryIdsSignature(ids) {
   return [...new Set(ids)].sort().join("\n");
 }
 function facetsSignature(facets) {
-  return facets.map((f) => JSON.stringify([f.key, f.label, f.query, f.guidance])).sort().join("\n");
+  return facets.map((f) => JSON.stringify([f.key, f.label, f.query, f.guidance, facetResponseSchema(f.key)])).sort().join("\n");
 }
 function trendsEqual(a, b) {
   if (!a) return false;
@@ -18432,7 +18729,7 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
     systemPrompt: buildFacetSystemPrompt(facet),
-    responseSchema: FACET_RESPONSE_SCHEMA,
+    responseSchema: facetResponseSchema(facet.key),
     memories
   });
   const noEvidence = result.basedOn.memoryIds.length === 0;
@@ -18455,6 +18752,25 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     const redacted = await options.redactor.redactTextAsync(text12);
     section.text = redacted.text;
   }
+  if (!legitimateEmpty && !noEvidence) {
+    const values = extractStructuredValues(facet.key, result.structuredOutput);
+    if (options.redactor) {
+      if (values.occupation) {
+        values.occupation = (await options.redactor.redactTextAsync(values.occupation)).text;
+      }
+      if (values.interests) {
+        const gated = [];
+        for (const interest of values.interests) {
+          gated.push((await options.redactor.redactTextAsync(interest)).text);
+        }
+        values.interests = gated;
+      }
+    }
+    const occupation = normalizeOccupation(values.occupation);
+    if (occupation !== void 0) section.occupation = occupation;
+    const interests = normalizeInterests(values.interests);
+    if (interests !== void 0) section.interests = interests;
+  }
   return section;
 }
 function fallbackSection(facet, prior) {
@@ -18471,6 +18787,7 @@ function fallbackSection(facet, prior) {
   };
 }
 function buildFacetSystemPrompt(facet) {
+  const structuredField = FACET_STRUCTURED_RESPONSE_HINT[facet.key] ?? "";
   return `You are writing the "${facet.label}" section of a person's shareable profile, using their private memories (supplied as evidence) as the only source of truth.
 
 Task for this section:
@@ -18481,7 +18798,7 @@ Rules:
 - If the memories don't cover this section, return an empty summary with hasEvidence=false. Do not pad or guess.
 - Write in third person about the person, in a natural voice suitable for a public profile (no "I"/"you", no name repetition).
 - Be concise and specific; no preamble, hedging, or meta-commentary.
-- Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false> }.`;
+- Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false>${structuredField} }.`;
 }
 function extractFacetText(structured) {
   if (structured && typeof structured === "object") {
@@ -18492,6 +18809,73 @@ function extractFacetText(structured) {
   }
   return { text: "", legitimateEmpty: false };
 }
+function extractStructuredValues(key, structured) {
+  if (!structured || typeof structured !== "object") return {};
+  const obj = structured;
+  if (key === "work_role") {
+    return typeof obj.occupation === "string" ? { occupation: obj.occupation } : {};
+  }
+  if (key === "interests") {
+    const list = coerceInterestList(obj.interests);
+    if (list) return { interests: list.slice(0, MAX_RAW_INTERESTS) };
+  }
+  return {};
+}
+function coerceInterestList(value) {
+  if (Array.isArray(value)) return value.filter((i) => typeof i === "string");
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  if (trimmed.startsWith("[")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (Array.isArray(parsed)) return parsed.filter((i) => typeof i === "string");
+    } catch {
+      if (trimmed.endsWith("]")) return splitInterestFragments(trimmed.slice(1, -1));
+    }
+  }
+  return splitInterestFragments(trimmed);
+}
+function splitInterestFragments(source) {
+  return source.split(",").map((fragment) => {
+    let entry = fragment.trim();
+    if (entry.startsWith("[")) entry = entry.slice(1);
+    if (entry.endsWith("]")) entry = entry.slice(0, -1);
+    entry = entry.trim();
+    const quote = entry[0];
+    if ((quote === '"' || quote === "'") && entry.endsWith(quote)) entry = entry.slice(1, -1);
+    return entry;
+  });
+}
+function normalizeOccupation(value) {
+  if (value === void 0) return void 0;
+  const trimmed = value.trim();
+  if (!trimmed) return void 0;
+  const length = codePointLength(trimmed);
+  if (length > NEARBY_MAX_OCCUPATION_CODEPOINTS) {
+    getLogger().warn(
+      "[memory/synthesizeProfile] occupation exceeded the publishable length; dropping it",
+      { length, max: NEARBY_MAX_OCCUPATION_CODEPOINTS }
+    );
+    return void 0;
+  }
+  return trimmed;
+}
+function normalizeInterests(values) {
+  if (values === void 0) return void 0;
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const value of values) {
+    const trimmed = value.trim();
+    if (!trimmed) continue;
+    if (codePointLength(trimmed) > NEARBY_MAX_INTEREST_CODEPOINTS) continue;
+    const key = trimmed.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(trimmed);
+    if (out.length === NEARBY_MAX_INTERESTS) break;
+  }
+  return out.length > 0 ? out : void 0;
+}
 
 // src/lib/memory/topicExtract.ts
 init_operations2();
@@ -33769,6 +34153,7 @@ function renderAnumaJsx(jsx3) {
   DropboxAuthProvider,
   ENTITY_FANOUT,
   ENTITY_KINDS,
+  EncryptionKeyMissingError,
   EntityModel,
   ExcelProcessor,
   FILE_PLACEHOLDER_PREFIX,
@@ -34059,6 +34444,7 @@ function renderAnumaJsx(jsx3) {
   reflect,
   refreshCalendarToken,
   refreshDriveToken,
+  refreshEncryptionKeyIfMatches,
   refreshGithubToken,
   refreshNotionToken,
   relinkMemoryTopicsOp,
@@ -34090,6 +34476,7 @@ function renderAnumaJsx(jsx3) {
   searchMediaOp,
   searchMessagesOp,
   searchVaultMemories,
+  seedEncryptionKeys,
   selectServerToolsForPrompt,
   serializeJsx,
   setLogger,