@hasna/contacts 0.5.2 → 0.6.0

package/dist/index.js

@@ -543,6 +543,41 @@ var init_database = __esm(() => {
     created_at TEXT NOT NULL DEFAULT (datetime('now')),
     updated_at TEXT NOT NULL DEFAULT (datetime('now'))
   );
+  `,
+    `
+  ALTER TABLE contacts ADD COLUMN sensitivity TEXT NOT NULL DEFAULT 'normal' CHECK(sensitivity IN ('normal','confidential','restricted'));
+
+  CREATE TABLE IF NOT EXISTS contact_documents (
+    id TEXT PRIMARY KEY,
+    contact_id TEXT NOT NULL REFERENCES contacts(id) ON DELETE CASCADE,
+    doc_type TEXT NOT NULL,
+    label TEXT,
+    encrypted_value TEXT NOT NULL,
+    iv TEXT NOT NULL,
+    encrypted_file_path TEXT,
+    metadata TEXT NOT NULL DEFAULT '{}',
+    expires_at TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS contact_health (
+    id TEXT PRIMARY KEY,
+    contact_id TEXT NOT NULL UNIQUE REFERENCES contacts(id) ON DELETE CASCADE,
+    blood_type TEXT,
+    allergies TEXT NOT NULL DEFAULT '[]',
+    medical_conditions TEXT NOT NULL DEFAULT '[]',
+    medications TEXT NOT NULL DEFAULT '[]',
+    emergency_contacts TEXT NOT NULL DEFAULT '[]',
+    health_insurance_provider TEXT,
+    health_insurance_id TEXT,
+    primary_physician TEXT,
+    primary_physician_phone TEXT,
+    organ_donor INTEGER NOT NULL DEFAULT 0,
+    notes TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
   `
   ];
 });
@@ -647,6 +682,7 @@ function rowToContact(row) {
     follow_up_at: row.follow_up_at ?? null,
     archived: !!row.archived,
     project_id: row.project_id ?? null,
+    sensitivity: row.sensitivity ?? "normal",
     do_not_contact: !!row.do_not_contact,
     priority: row.priority ?? 3,
     timezone: row.timezone ?? null
@@ -734,8 +770,8 @@ function createContact(input, db) {
   const firstName = input.first_name ?? "";
   const lastName = input.last_name ?? "";
   const displayName = input.display_name ?? (firstName || lastName ? `${firstName} ${lastName}`.trim() : "Unnamed Contact");
-  d.run(`INSERT INTO contacts (id, first_name, last_name, display_name, nickname, avatar_url, notes, birthday, company_id, job_title, source, custom_fields, last_contacted_at, website, preferred_contact_method, status, follow_up_at, project_id, do_not_contact, priority, timezone, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+  d.run(`INSERT INTO contacts (id, first_name, last_name, display_name, nickname, avatar_url, notes, birthday, company_id, job_title, source, custom_fields, last_contacted_at, website, preferred_contact_method, status, follow_up_at, project_id, sensitivity, do_not_contact, priority, timezone, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
     firstName,
     lastName,
@@ -754,6 +790,7 @@ function createContact(input, db) {
     input.status ?? "active",
     input.follow_up_at ?? null,
     input.project_id ?? null,
+    input.sensitivity ?? "normal",
     input.do_not_contact ? 1 : 0,
     input.priority ?? 3,
     input.timezone ?? null,
@@ -802,6 +839,7 @@ function listContacts(opts = {}, db) {
     order_by = "display_name",
     order_dir = "asc",
     include_dnc = false,
+    include_restricted = false,
     priority_min,
     updated_since
   } = opts;
@@ -812,6 +850,9 @@ function listContacts(opts = {}, db) {
   if (!include_dnc) {
     conditions.push("c.do_not_contact = 0");
   }
+  if (!include_restricted) {
+    conditions.push("c.sensitivity != 'restricted'");
+  }
   if (company_id) {
     conditions.push("c.company_id = ?");
     params.push(company_id);
@@ -940,6 +981,10 @@ function updateContact(id, input, db) {
     setClauses.push("project_id = ?");
     params.push(input.project_id);
   }
+  if (input.sensitivity !== undefined) {
+    setClauses.push("sensitivity = ?");
+    params.push(input.sensitivity);
+  }
   if (input.do_not_contact !== undefined) {
     setClauses.push("do_not_contact = ?");
     params.push(input.do_not_contact ? 1 : 0);
@@ -987,26 +1032,26 @@ function searchContacts(query, db) {
   const ftsRows = d.query(`
     SELECT c.* FROM contacts c
     JOIN contacts_fts fts ON fts.id = c.id
-    WHERE contacts_fts MATCH ? AND c.archived = 0
+    WHERE contacts_fts MATCH ? AND c.archived = 0 AND c.sensitivity != 'restricted'
     ORDER BY rank
     LIMIT 50
   `).all(`"${query.replace(/"/g, '""')}"*`);
   const emailRows = d.query(`
     SELECT DISTINCT c.* FROM contacts c
     JOIN emails e ON e.contact_id = c.id
-    WHERE e.address LIKE ? AND c.archived = 0
+    WHERE e.address LIKE ? AND c.archived = 0 AND c.sensitivity != 'restricted'
     LIMIT 20
   `).all(`%${query}%`);
   const phoneRows = d.query(`
     SELECT DISTINCT c.* FROM contacts c
     JOIN phones p ON p.contact_id = c.id
-    WHERE p.number LIKE ? AND c.archived = 0
+    WHERE p.number LIKE ? AND c.archived = 0 AND c.sensitivity != 'restricted'
     LIMIT 20
   `).all(`%${query}%`);
   const companyRows = d.query(`
     SELECT DISTINCT c.* FROM contacts c
     JOIN companies co ON co.id = c.company_id
-    WHERE co.name LIKE ? AND c.archived = 0
+    WHERE co.name LIKE ? AND c.archived = 0 AND c.sensitivity != 'restricted'
     LIMIT 20
   `).all(`%${query}%`);
   const seen = new Set;
@@ -1572,6 +1617,7 @@ function listCompanyEmployees(companyId, db) {
     follow_up_at: r.follow_up_at ?? null,
     archived: !!r.archived,
     project_id: r.project_id ?? null,
+    sensitivity: r.sensitivity ?? "normal",
     do_not_contact: !!r.do_not_contact,
     priority: r.priority ?? 3,
     timezone: r.timezone ?? null
@@ -1702,6 +1748,7 @@ function listContactsByTag(tagId, db) {
     follow_up_at: r.follow_up_at ?? null,
     archived: !!r.archived,
     project_id: r.project_id ?? null,
+    sensitivity: r.sensitivity ?? "normal",
     do_not_contact: !!r.do_not_contact,
     priority: r.priority ?? 3,
     timezone: r.timezone ?? null
@@ -4376,6 +4423,451 @@ async function ingestMeetingParticipants(event, db) {
 
 // src/index.ts
 init_contacts();
+
+// src/lib/images.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, copyFileSync, unlinkSync, readdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { join as join3, extname, basename } from "path";
+var IMAGES_DIR = join3(process.env["HOME"] || "~", ".contacts", "images");
+function ensureImagesDir() {
+  if (!existsSync3(IMAGES_DIR))
+    mkdirSync2(IMAGES_DIR, { recursive: true });
+}
+function getImagesDir() {
+  ensureImagesDir();
+  return IMAGES_DIR;
+}
+function saveImage(entityId, source, options) {
+  ensureImagesDir();
+  deleteImage(entityId);
+  const base64Match = source.match(/^data:image\/(\w+);base64,(.+)$/s);
+  if (base64Match) {
+    const ext2 = base64Match[1] === "jpeg" ? "jpg" : base64Match[1];
+    const data = Buffer.from(base64Match[2], "base64");
+    const filename2 = `${entityId}.${ext2}`;
+    writeFileSync(join3(IMAGES_DIR, filename2), data);
+    return filename2;
+  }
+  if (!existsSync3(source) && /^[A-Za-z0-9+/=\n\r]+$/.test(source.trim()) && source.length > 100) {
+    const ext2 = options?.format || "jpg";
+    const data = Buffer.from(source.trim(), "base64");
+    const filename2 = `${entityId}.${ext2}`;
+    writeFileSync(join3(IMAGES_DIR, filename2), data);
+    return filename2;
+  }
+  if (!existsSync3(source)) {
+    throw new Error(`Image file not found: ${source}`);
+  }
+  const ext = extname(source).slice(1).toLowerCase() || "jpg";
+  const validExts = ["jpg", "jpeg", "png", "gif", "webp", "svg", "avif", "ico"];
+  if (!validExts.includes(ext)) {
+    throw new Error(`Unsupported image format: ${ext}. Supported: ${validExts.join(", ")}`);
+  }
+  const filename = `${entityId}.${ext === "jpeg" ? "jpg" : ext}`;
+  copyFileSync(source, join3(IMAGES_DIR, filename));
+  return filename;
+}
+function getImagePath(entityId) {
+  ensureImagesDir();
+  const files = readdirSync(IMAGES_DIR);
+  const match = files.find((f) => f.startsWith(`${entityId}.`));
+  return match ? join3(IMAGES_DIR, match) : null;
+}
+function getImageAsBase64(entityId) {
+  const path = getImagePath(entityId);
+  if (!path)
+    return null;
+  const ext = extname(path).slice(1);
+  const mime = ext === "jpg" ? "image/jpeg" : ext === "svg" ? "image/svg+xml" : `image/${ext}`;
+  const data = readFileSync2(path);
+  return `data:${mime};base64,${data.toString("base64")}`;
+}
+function deleteImage(entityId) {
+  ensureImagesDir();
+  const files = readdirSync(IMAGES_DIR);
+  let deleted = false;
+  for (const f of files) {
+    if (f.startsWith(`${entityId}.`)) {
+      unlinkSync(join3(IMAGES_DIR, f));
+      deleted = true;
+    }
+  }
+  return deleted;
+}
+function listImages() {
+  ensureImagesDir();
+  const files = readdirSync(IMAGES_DIR).filter((f) => !f.startsWith("."));
+  return files.map((f) => ({
+    entity_id: basename(f, extname(f)),
+    filename: f,
+    path: join3(IMAGES_DIR, f)
+  }));
+}
+// src/lib/vault.ts
+import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3 } from "fs";
+import { join as join4 } from "path";
+import { createCipheriv, createDecipheriv, randomBytes, pbkdf2Sync, createHash } from "crypto";
+var VAULT_DIR = join4(process.env["HOME"] || "~", ".contacts");
+var VAULT_CONFIG = join4(VAULT_DIR, "vault.json");
+var DOCUMENTS_DIR = join4(VAULT_DIR, "documents");
+var _derivedKey = null;
+function deriveKey(passphrase, salt) {
+  return pbkdf2Sync(passphrase, salt, 1e5, 32, "sha512");
+}
+function initVault(passphrase) {
+  if (!existsSync4(VAULT_DIR))
+    mkdirSync3(VAULT_DIR, { recursive: true });
+  if (!existsSync4(DOCUMENTS_DIR))
+    mkdirSync3(DOCUMENTS_DIR, { recursive: true });
+  const salt = randomBytes(32);
+  const key = deriveKey(passphrase, salt);
+  const keyHash = createHash("sha256").update(key).digest("hex");
+  const config = { salt: salt.toString("hex"), key_hash: keyHash, created_at: new Date().toISOString() };
+  writeFileSync2(VAULT_CONFIG, JSON.stringify(config, null, 2));
+  _derivedKey = key;
+}
+function isVaultInitialized() {
+  return existsSync4(VAULT_CONFIG);
+}
+function unlockVault(passphrase) {
+  if (!existsSync4(VAULT_CONFIG))
+    throw new Error("Vault not initialized. Run 'contacts vault init' first.");
+  const config = JSON.parse(readFileSync3(VAULT_CONFIG, "utf-8"));
+  const salt = Buffer.from(config.salt, "hex");
+  const key = deriveKey(passphrase, salt);
+  const keyHash = createHash("sha256").update(key).digest("hex");
+  if (keyHash !== config.key_hash)
+    return false;
+  _derivedKey = key;
+  return true;
+}
+function lockVault() {
+  _derivedKey = null;
+}
+function isVaultUnlocked() {
+  return _derivedKey !== null;
+}
+function requireVault() {
+  if (!_derivedKey)
+    throw new Error("Vault is locked. Unlock with 'contacts vault unlock' or vault_unlock MCP tool first.");
+  return _derivedKey;
+}
+function encrypt(plaintext) {
+  const key = requireVault();
+  const iv = randomBytes(16);
+  const cipher = createCipheriv("aes-256-gcm", key, iv);
+  let encrypted = cipher.update(plaintext, "utf8", "hex");
+  encrypted += cipher.final("hex");
+  const authTag = cipher.getAuthTag().toString("hex");
+  return { ciphertext: encrypted + ":" + authTag, iv: iv.toString("hex") };
+}
+function decrypt(ciphertext, iv) {
+  const key = requireVault();
+  const [encData, authTag] = ciphertext.split(":");
+  if (!encData || !authTag)
+    throw new Error("Invalid ciphertext format");
+  const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(iv, "hex"));
+  decipher.setAuthTag(Buffer.from(authTag, "hex"));
+  let decrypted = decipher.update(encData, "hex", "utf8");
+  decrypted += decipher.final("utf8");
+  return decrypted;
+}
+function encryptFile(sourcePath, entityId) {
+  const key = requireVault();
+  if (!existsSync4(DOCUMENTS_DIR))
+    mkdirSync3(DOCUMENTS_DIR, { recursive: true });
+  const data = readFileSync3(sourcePath);
+  const iv = randomBytes(16);
+  const cipher = createCipheriv("aes-256-gcm", key, iv);
+  const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+  const authTag = cipher.getAuthTag();
+  const destPath = join4(DOCUMENTS_DIR, `${entityId}.enc`);
+  const output = Buffer.concat([iv, authTag, encrypted]);
+  writeFileSync2(destPath, output);
+  return destPath;
+}
+function decryptFile(encPath) {
+  const key = requireVault();
+  const data = readFileSync3(encPath);
+  const iv = data.subarray(0, 16);
+  const authTag = data.subarray(16, 32);
+  const encrypted = data.subarray(32);
+  const decipher = createDecipheriv("aes-256-gcm", key, iv);
+  decipher.setAuthTag(authTag);
+  return Buffer.concat([decipher.update(encrypted), decipher.final()]);
+}
+function getDocumentsDir() {
+  if (!existsSync4(DOCUMENTS_DIR))
+    mkdirSync3(DOCUMENTS_DIR, { recursive: true });
+  return DOCUMENTS_DIR;
+}
+// src/db/documents.ts
+init_database();
+import { existsSync as existsSync5, unlinkSync as unlinkSync2 } from "fs";
+var DOCUMENT_TYPES = [
+  "passport",
+  "national_id",
+  "tax_id",
+  "ssn",
+  "drivers_license",
+  "bank_account",
+  "visa",
+  "insurance",
+  "contract",
+  "certificate",
+  "medical_record",
+  "prescription",
+  "allergy_list",
+  "vaccination",
+  "blood_type",
+  "health_insurance",
+  "medical_condition",
+  "emergency_contact_medical",
+  "other"
+];
+function addDocument(input, db) {
+  requireVault();
+  const _db2 = db || getDatabase();
+  const id = uuid();
+  const { ciphertext, iv } = encrypt(input.value);
+  let encFilePath = null;
+  if (input.file_path) {
+    encFilePath = encryptFile(input.file_path, id);
+  }
+  _db2.query(`INSERT INTO contact_documents (id, contact_id, doc_type, label, encrypted_value, iv, encrypted_file_path, metadata, expires_at, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)`).run(id, input.contact_id, input.doc_type, input.label ?? null, ciphertext, iv, encFilePath, JSON.stringify(input.metadata || {}), input.expires_at ?? null, now(), now());
+  return getDocument(id, _db2);
+}
+function getDocument(id, db) {
+  requireVault();
+  const _db2 = db || getDatabase();
+  const row = _db2.query(`SELECT * FROM contact_documents WHERE id = ?`).get(id);
+  if (!row)
+    throw new Error(`Document not found: ${id}`);
+  return rowToDoc(row);
+}
+function listDocuments(contactId, db) {
+  const _db2 = db || getDatabase();
+  const rows = _db2.query(`SELECT id, doc_type, label, encrypted_file_path, expires_at, created_at FROM contact_documents WHERE contact_id = ? ORDER BY created_at DESC`).all(contactId);
+  return rows.map((r) => ({
+    id: r.id,
+    doc_type: r.doc_type,
+    label: r.label,
+    has_file: !!r.encrypted_file_path,
+    expires_at: r.expires_at,
+    created_at: r.created_at
+  }));
+}
+function deleteDocument(id, db) {
+  const _db2 = db || getDatabase();
+  const row = _db2.query(`SELECT encrypted_file_path FROM contact_documents WHERE id = ?`).get(id);
+  if (row?.encrypted_file_path && existsSync5(row.encrypted_file_path)) {
+    try {
+      unlinkSync2(row.encrypted_file_path);
+    } catch {}
+  }
+  _db2.query(`DELETE FROM contact_documents WHERE id = ?`).run(id);
+}
+function rowToDoc(row) {
+  return {
+    id: row.id,
+    contact_id: row.contact_id,
+    doc_type: row.doc_type,
+    label: row.label,
+    value: decrypt(row.encrypted_value, row.iv),
+    has_file: !!row.encrypted_file_path,
+    metadata: JSON.parse(row.metadata || "{}"),
+    expires_at: row.expires_at,
+    created_at: row.created_at,
+    updated_at: row.updated_at
+  };
+}
+// src/db/health.ts
+init_database();
+function setHealthData(contactId, input, db) {
+  requireVault();
+  const _db2 = db || getDatabase();
+  const existing = _db2.query(`SELECT id FROM contact_health WHERE contact_id = ?`).get(contactId);
+  if (existing) {
+    const sets = [];
+    const params = [];
+    if (input.blood_type !== undefined) {
+      sets.push("blood_type = ?");
+      params.push(input.blood_type);
+    }
+    if (input.allergies !== undefined) {
+      sets.push("allergies = ?");
+      params.push(JSON.stringify(input.allergies));
+    }
+    if (input.medical_conditions !== undefined) {
+      sets.push("medical_conditions = ?");
+      params.push(JSON.stringify(input.medical_conditions));
+    }
+    if (input.medications !== undefined) {
+      sets.push("medications = ?");
+      params.push(JSON.stringify(input.medications));
+    }
+    if (input.emergency_contacts !== undefined) {
+      sets.push("emergency_contacts = ?");
+      params.push(JSON.stringify(input.emergency_contacts));
+    }
+    if (input.health_insurance_provider !== undefined) {
+      sets.push("health_insurance_provider = ?");
+      params.push(input.health_insurance_provider);
+    }
+    if (input.health_insurance_id !== undefined) {
+      sets.push("health_insurance_id = ?");
+      params.push(input.health_insurance_id);
+    }
+    if (input.primary_physician !== undefined) {
+      sets.push("primary_physician = ?");
+      params.push(input.primary_physician);
+    }
+    if (input.primary_physician_phone !== undefined) {
+      sets.push("primary_physician_phone = ?");
+      params.push(input.primary_physician_phone);
+    }
+    if (input.organ_donor !== undefined) {
+      sets.push("organ_donor = ?");
+      params.push(input.organ_donor ? 1 : 0);
+    }
+    if (input.notes !== undefined) {
+      sets.push("notes = ?");
+      params.push(input.notes);
+    }
+    if (sets.length) {
+      sets.push("updated_at = ?");
+      params.push(now());
+      params.push(contactId);
+      _db2.query(`UPDATE contact_health SET ${sets.join(", ")} WHERE contact_id = ?`).run(...params);
+    }
+  } else {
+    const id = uuid();
+    _db2.query(`INSERT INTO contact_health (id, contact_id, blood_type, allergies, medical_conditions, medications, emergency_contacts, health_insurance_provider, health_insurance_id, primary_physician, primary_physician_phone, organ_donor, notes, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.blood_type ?? null, JSON.stringify(input.allergies || []), JSON.stringify(input.medical_conditions || []), JSON.stringify(input.medications || []), JSON.stringify(input.emergency_contacts || []), input.health_insurance_provider ?? null, input.health_insurance_id ?? null, input.primary_physician ?? null, input.primary_physician_phone ?? null, input.organ_donor ? 1 : 0, input.notes ?? null, now(), now());
+  }
+  return getHealthData(contactId, _db2);
+}
+function getHealthData(contactId, db) {
+  requireVault();
+  const _db2 = db || getDatabase();
+  const row = _db2.query(`SELECT * FROM contact_health WHERE contact_id = ?`).get(contactId);
+  if (!row)
+    return null;
+  return {
+    id: row.id,
+    contact_id: row.contact_id,
+    blood_type: row.blood_type,
+    allergies: JSON.parse(row.allergies || "[]"),
+    medical_conditions: JSON.parse(row.medical_conditions || "[]"),
+    medications: JSON.parse(row.medications || "[]"),
+    emergency_contacts: JSON.parse(row.emergency_contacts || "[]"),
+    health_insurance_provider: row.health_insurance_provider,
+    health_insurance_id: row.health_insurance_id,
+    primary_physician: row.primary_physician,
+    primary_physician_phone: row.primary_physician_phone,
+    organ_donor: !!row.organ_donor,
+    notes: row.notes,
+    created_at: row.created_at,
+    updated_at: row.updated_at
+  };
+}
+function deleteHealthData(contactId, db) {
+  const _db2 = db || getDatabase();
+  _db2.query(`DELETE FROM contact_health WHERE contact_id = ?`).run(contactId);
+}
+// src/lib/document-scanner.ts
+import { readFileSync as readFileSync4, existsSync as existsSync6 } from "fs";
+import { extname as extname2 } from "path";
+async function scanDocument(imageSource, docType) {
+  const apiKey = process.env["OPENAI_API_KEY"];
+  if (!apiKey) {
+    throw new Error("OPENAI_API_KEY not set. Set it in ~/.secrets or environment to use document scanning.");
+  }
+  let imageData;
+  if (imageSource.startsWith("data:image/")) {
+    imageData = imageSource;
+  } else if (existsSync6(imageSource)) {
+    const buffer = readFileSync4(imageSource);
+    const ext = extname2(imageSource).slice(1).toLowerCase();
+    const mime = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : ext === "gif" ? "image/gif" : "image/jpeg";
+    imageData = `data:${mime};base64,${buffer.toString("base64")}`;
+  } else if (/^[A-Za-z0-9+/=\n\r]+$/.test(imageSource.trim()) && imageSource.length > 100) {
+    imageData = `data:image/jpeg;base64,${imageSource.trim()}`;
+  } else {
+    throw new Error(`Image source not found or invalid: ${imageSource.slice(0, 50)}...`);
+  }
+  const typeHint = docType ? ` This is a ${docType} document.` : "";
+  const prompt = `Extract all text and structured data from this document image.${typeHint} Return a JSON object with these fields:
+- document_type: detected type (passport, national_id, drivers_license, tax_document, medical_record, prescription, insurance_card, bank_statement, visa, certificate, contract, other)
+- full_name: full name as shown
+- date_of_birth: in YYYY-MM-DD format if visible
+- document_number: main ID/document number
+- issuing_country: country code or name
+- issue_date: in YYYY-MM-DD format if visible
+- expiry_date: in YYYY-MM-DD format if visible
+- address: full address if visible
+- nationality: if visible
+- gender: if visible
+- mrz_code: Machine Readable Zone text if this is a passport/ID with MRZ
+- phone: any phone numbers visible
+- email: any email addresses visible
+- additional_fields: object with any other visible structured data
+- raw_text: all visible text transcribed
+
+Only include fields that are actually visible in the document. Return valid JSON only.`;
+  const response = await fetch("https://api.openai.com/v1/chat/completions", {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${apiKey}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      model: "gpt-4o",
+      messages: [
+        {
+          role: "user",
+          content: [
+            { type: "text", text: prompt },
+            { type: "image_url", image_url: { url: imageData, detail: "high" } }
+          ]
+        }
+      ],
+      max_tokens: 2000,
+      temperature: 0
+    })
+  });
+  if (!response.ok) {
+    const err = await response.text();
+    throw new Error(`OpenAI API error: ${response.status} \u2014 ${err}`);
+  }
+  const data = await response.json();
+  const content = data.choices?.[0]?.message?.content || "";
+  const jsonMatch = content.match(/```json\s*([\s\S]*?)```/) || content.match(/\{[\s\S]*\}/);
+  if (!jsonMatch) {
+    return { fields: {}, raw_text: content, document_type: docType || "unknown", confidence: 0.3 };
+  }
+  try {
+    const parsed = JSON.parse(jsonMatch[1] || jsonMatch[0]);
+    const { document_type, raw_text, additional_fields, ...mainFields } = parsed;
+    const fields = {};
+    for (const [k, v] of Object.entries(mainFields)) {
+      if (v && typeof v === "string")
+        fields[k] = v;
+    }
+    if (additional_fields && typeof additional_fields === "object") {
+      for (const [k, v] of Object.entries(additional_fields)) {
+        if (v && typeof v === "string")
+          fields[k] = v;
+      }
+    }
+    return {
+      fields,
+      raw_text: raw_text || content,
+      document_type: document_type || docType || "unknown",
+      confidence: Object.keys(fields).length > 3 ? 0.9 : Object.keys(fields).length > 0 ? 0.7 : 0.3
+    };
+  } catch {
+    return { fields: {}, raw_text: content, document_type: docType || "unknown", confidence: 0.3 };
+  }
+}
 export {
   updateVendorCommunication,
   updateTag,
@@ -4386,19 +4878,24 @@ export {
   updateContact,
   updateCompany,
   updateApplication,
+  unlockVault,
   unarchiveContact,
   unarchiveCompany,
+  setHealthData,
   setDealContactRole,
   semanticSearch,
   searchLearnings,
   searchGoogleContacts,
   searchContacts,
   searchCompanies,
+  scanDocument,
   saveLearning,
+  saveImage,
   runConnector,
   resolveIdentity,
   resolveByPartial,
   resetDatabase,
+  requireVault,
   removeTagFromContact,
   removeTagFromCompany,
   removeOrgMember,
@@ -4421,6 +4918,7 @@ export {
   logEvent,
   logAgentActivity,
   logActivity,
+  lockVault,
   listVendorCommunications,
   listTags,
   listRelationships,
@@ -4435,12 +4933,14 @@ export {
   listNotesForContactAtCompany,
   listNotes,
   listMissingInvoices,
+  listImages,
   listGroupsForContact,
   listGroupsForCompany,
   listGroups,
   listGoogleContacts,
   listFollowUpDue,
   listEvents,
+  listDocuments,
   listDeals,
   listContactsInGroup,
   listContactsByTag,
@@ -4454,6 +4954,9 @@ export {
   listColdContacts,
   listApplications,
   listActivity,
+  isVaultUnlocked,
+  isVaultInitialized,
+  initVault,
   ingestMeetingParticipants,
   importToApple,
   importFromCsv,
@@ -4472,13 +4975,19 @@ export {
   getNetworkStats,
   getLearnings,
   getJobHistory,
+  getImagesDir,
+  getImagePath,
+  getImageAsBase64,
   getIdentities,
+  getHealthData,
   getGroup,
   getGhostContacts,
   getFreshnessScore,
   getFieldHistory,
   getEvent,
   getEntityTeam,
+  getDocumentsDir,
+  getDocument,
   getDealsByStage,
   getDealTeam,
   getDeal,
@@ -4505,6 +5014,8 @@ export {
   extractContactsFromEmailThread,
   exportFromApple,
   exportContacts,
+  encryptFile,
+  encrypt,
   embedContact,
   embedAllContacts,
   domainToCompany,
@@ -4514,14 +5025,19 @@ export {
   deleteRelationship,
   deleteNote,
   deleteLearning,
+  deleteImage,
+  deleteHealthData,
   deleteGroup,
   deleteEvent,
+  deleteDocument,
   deleteDeal,
   deleteContactTask,
   deleteContact,
   deleteCompanyRelationship,
   deleteCompany,
   deleteApplication,
+  decryptFile,
+  decrypt,
   decayLearnings,
   createTag,
   createRelationship,
@@ -4553,11 +5069,13 @@ export {
   addJobEntry,
   addIdentity,
   addEmailToContact,
+  addDocument,
   addContactToGroup,
   addCompanyToGroup,
   acquireLock,
   TagNotFoundError,
   DuplicateTagNameError,
+  DOCUMENT_TYPES,
   ContactNotFoundError,
   ConnectorNotInstalledError,
   ConnectorAuthError,