@prismshadow/penguin-server 0.2.17 → 0.2.18

package/dist/api/types.d.ts

@@ -42,6 +42,27 @@ interface WorkbenchResponse {
      */
     stream?: AsyncIterable<Uint8Array | string>;
 }
+/**
+ * One AMSP record as `WorkbenchHost.subscribe` hands it over: the envelope every Trace line and
+ * every unnamed event of a Session's stream is. `type` is `session_meta`, `model_msg` or
+ * `event_msg`; `payload.type` names the record (`task_begin`, `partial_text`, `tool_call`,
+ * `task_end`, …; a `session_meta` payload has none); `origin` is the chain of child Session ids
+ * a subagent's record came through, outer to inner, and is absent on the main Session's own.
+ *
+ * Typed by its envelope rather than by every payload AMSP defines: a workbench keeps the types
+ * it was written against (`.harness/`), and a record type that grew with each new payload would
+ * stop fitting them.
+ */
+interface WorkbenchRecord {
+    /** ISO 8601 UTC. */
+    timestamp: string;
+    type: string;
+    payload: {
+        type?: string;
+        [key: string]: unknown;
+    };
+    origin?: string[];
+}
 /** How the Web App draws a contributed tab: a page of the workbench, or a renderer it carries. */
 type WorkbenchTabRenderer = {
     iframe: {
@@ -204,11 +225,11 @@ interface MeResponse {
      * "desktop" is the shell's own window (one-shot token); "setup" was claimed through the
      * first-login link on a server whose admin password has never been set. Both may set a
      * password without the old one (it is random and was never shown); only "desktop" opens
-     * desktop-only routes. "token" marks the local API token's authority, carried by a Bearer
-     * header or an exchanged Remote cookie; neither can perform writes requiring a person's
-     * sign-in.
+     * desktop-only routes. "remote" is the one-hour session Penguin Remote exchanged the local
+     * API token for; it counts as the person's sign-in. "token" marks the local API token itself,
+     * sent as a Bearer header; it cannot perform writes requiring a person's sign-in.
      */
-    sessionVia: "password" | "desktop" | "setup" | "token";
+    sessionVia: "password" | "desktop" | "setup" | "remote" | "token";
     /**
      * The upload limits currently in force, so the composer can refuse an oversize pick before
      * reading it and can name the real number in the message. They are admin-settable and ride
@@ -485,8 +506,97 @@ interface UiPrefs {
      * everywhere else.
      */
     browserBackend?: BrowserBackend;
+    /** Light / dark / follow the system. */
+    themeMode?: string | null;
+    /** Which theme renders the app (a theme id). */
+    themeId?: string | null;
+    /** The accent preset, or "neutral" for the theme's own. */
+    accent?: string | null;
+    /** The root text size step. */
+    textSize?: string | null;
+    /** The Latin face paired over the theme's own ("theme" = keep the theme's). */
+    fontLatin?: string | null;
+    /** The CJK face paired over the theme's own ("theme" = keep the theme's). */
+    fontCjk?: string | null;
+    /** Interface language: zh / en / system. */
+    lang?: string | null;
+    /** Display currency for prices. */
+    currency?: string | null;
+    /** The terminal's appearance: light / dark / follow the app. */
+    terminalTheme?: string | null;
+    /** Whether tool cards name the built-in tools by their short alias. */
+    toolAliases?: boolean | null;
+    /** Whether task-completion notifications were asked for (each browser still needs its own OS permission). */
+    notifications?: boolean | null;
+    /** Whether the floating dock launcher was put away. */
+    launcherHidden?: boolean | null;
+    /** Mid-run send mode: steer or queue as a follow-up. */
+    steerMode?: string | null;
+    /** The custom background's display settings; the image itself is GET|PUT /api/me/background-image. */
+    background?: BackgroundSettingsDto | null;
+    /**
+     * Which background image the account holds, as an opaque id that changes whenever the image
+     * does; absent or null when it holds none. Written only by PUT /api/me/background-image (PUT
+     * /api/me/prefs refuses it): a browser compares it with the image it has cached and fetches the
+     * image only when they differ.
+     */
+    backgroundImageId?: string | null;
     [key: string]: unknown;
 }
+/** The custom background's display settings, as the Web App stores them. */
+interface BackgroundSettingsDto {
+    /** 0–100: how much of the page colour shows through the image. */
+    transparency: number;
+    mode: string;
+    position: string;
+}
+/**
+ * The background image cap, in characters of the data URL: the same number the Web App encodes
+ * against, so the browser and the server cannot disagree about what "too large" means.
+ */
+declare const BACKGROUND_IMAGE_MAX_CHARS: number;
+/** GET /api/me/background-image. */
+interface BackgroundImageResponse {
+    /** A PNG / JPEG / WebP data URL, or null when the account holds no image. */
+    image: string | null;
+    imageId: string | null;
+}
+/** PUT /api/me/background-image: the image to keep, or null to remove it. */
+interface BackgroundImageRequest {
+    image: string | null;
+}
+/** PUT /api/me/background-image's answer: the id the image is now known by (null once removed). */
+interface BackgroundImagePutResponse {
+    imageId: string | null;
+}
+/**
+ * The kinds of draft the account keeps, as the first segment of a draft key
+ * (`<kind>:<id>`). The id names what the draft belongs to, so the server can drop it with that
+ * thing: `chat` — a Project's new-conversation draft (`chat:<projectId>`); `parked` — a
+ * Project's parked draft conversations (`parked:<projectId>`); `org` — a Project's
+ * create-organization form (`org:<projectId>`); `channel` — a company-mode channel's composer
+ * (`channel:<projectId>.<orgId>.<channelId>`); `session` — a Session's composer
+ * (`session:<sessionId>`); `a2ui` — a reply's form answers in progress
+ * (`a2ui:<sessionId>:<block>`).
+ */
+declare const DRAFT_KINDS: readonly ["chat", "parked", "org", "channel", "session", "a2ui"];
+type DraftKind = (typeof DRAFT_KINDS)[number];
+/** One draft's cap, in characters of its JSON text. */
+declare const DRAFT_VALUE_MAX_CHARS: number;
+/** Draft writes one PATCH may carry. */
+declare const DRAFTS_PATCH_MAX_ENTRIES = 50;
+/** GET /api/me/drafts: every draft the account keeps, by key, as the JSON each was written with. */
+interface DraftsResponse {
+    drafts: Record<string, unknown>;
+}
+/**
+ * PATCH /api/me/drafts: drafts to write, by key; `null` removes one. Applied together. When the
+ * account then holds more than its bound, its least recently written drafts outside this patch
+ * are dropped.
+ */
+interface DraftsPatchRequest {
+    drafts: Record<string, unknown>;
+}
 /** A group balance pinned beside the user name: which Project's key reads which group's balance. */
 interface PinnedBalance {
     projectId: string;
@@ -1269,6 +1379,38 @@ interface AgentCreateRequest {
 interface AgentCreateResponse {
     agent: AgentSummary;
 }
+/**
+ * Where a deleted Agent's files stand. The Agent itself is gone the moment DELETE answers: its
+ * folder was moved out of the Project's agents directory in one rename, and every list and route
+ * stopped seeing it. What follows is the removal of that folder's contents in the background,
+ * which this reports.
+ */
+interface AgentDeletionInfo {
+    /** Names this deletion (GET /api/projects/:projectId/agent-deletions/:deletionId). */
+    deletionId: string;
+    agentId: string;
+    /**
+     * `counting`: the folder is walked to learn how many entries it holds (`total` grows);
+     * `removing`: they are removed (`removed` grows towards `total`); `done`: nothing is left;
+     * `failed`: some entries could not be removed (`error` says why). What is left is tried again
+     * when the server next starts.
+     */
+    phase: "counting" | "removing" | "done" | "failed";
+    /** Entries found: so far while counting, then in all. Files and folders alike. */
+    total: number;
+    /** Entries removed so far. */
+    removed: number;
+    /** The first error the removal met, as the operating system worded it (`failed` only). */
+    error?: string;
+}
+/** DELETE /api/projects/:projectId/agents/:agentId (202). */
+interface AgentDeleteResponse {
+    deletion: AgentDeletionInfo;
+}
+/** GET /api/projects/:projectId/agent-deletions/:deletionId. */
+interface AgentDeletionResponse {
+    deletion: AgentDeletionInfo;
+}
 interface AgentModelConfigDto {
     maxTokens?: number;
     thinkingLevel?: ThinkingLevelName;
@@ -1898,6 +2040,12 @@ interface ArchivedSessionsQuery {
     /** One Project the user can open (404 `project_not_found` otherwise); absent = every Project they own or are a member of. */
     projectId?: string;
 }
+/**
+ * Which servers' groups GET /api/me/archived-sessions/groups answers with: `here` this server's
+ * alone, never waiting on a machine; `machines` the machines' alone. Absent: both, in one answer.
+ * The Web App asks the two apart, so a machine that answers nothing never holds this server's.
+ */
+type ArchivedSessionGroupServers = "here" | "machines";
 /** One group of the archive page: one Workspace of one Project, on this server or on one machine. */
 interface ArchivedSessionGroup {
     projectId: string;
@@ -4899,10 +5047,19 @@ interface RestartResponse {
 interface MachineSocketFact {
     /**
      * `connected` once the handshake completed, `dialling` while a dial is outstanding, `refused`
-     * when the machine answered the handshake with a status (a program predating the socket), and
-     * `failed` when the dial did not complete or a socket that was up closed.
-     */
-    state: "connected" | "dialling" | "refused" | "failed";
+     * when the machine answered the handshake with a status (a program predating the socket),
+     * `unanswered` when its server answers HTTP and never answered the handshake, and `failed` when
+     * the dial did not complete or a socket that was up closed.
+     *
+     * `unanswered` is a server PROCESS older than the socket: an update handed to a running server
+     * swaps its platform and never the process that takes the upgrade, so the machine reports the
+     * current build and still has no socket: it is not running this server's version, which a remote
+     * machine must. A restart of its server, and failing that an update or a reinstall, brings it
+     * there; the Machines page reads the state as needing a restart. It lasts until a handshake
+     * completes: a
+     * machine dialled again keeps it while the dial is outstanding, instead of reading `dialling`.
+     */
+    state: "connected" | "dialling" | "refused" | "unanswered" | "failed";
     /** When that state was entered (ISO). */
     since: string;
     /** The transport's own words where there are any: a refusal's status, a dial's error. */
@@ -5097,11 +5254,11 @@ interface MachineEnvOnly {
 }
 /**
  * A machine this server keeps connected, while it is being brought back. Attempts back off
- * from 5 s, doubling to a 5-minute cap, and stop after `maxAttempts` failures in a row (about a
- * quarter of an hour) — or after the first, when ssh refused in a way no retry fixes — until a
- * person asks for a Retry (`POST …/machines/:machineId/reconnect`). After three failures in a
- * row the connection check runs on its own, and its answer is what the page shows as the
- * explanation.
+ * from 15 s, doubling, and stop after `maxAttempts` failures in a row — or after the first, when
+ * ssh refused in a way no retry fixes, or when a person asks to stop
+ * (`POST …/machines/:machineId/stop-reconnecting`) — until a person asks for a Retry
+ * (`POST …/machines/:machineId/reconnect`). After three failures in a row the connection check
+ * runs on its own, and its answer is what the page shows as the explanation.
  */
 interface MachineReconnect {
     /** When this streak began: the moment the machine was found not connected, or the Retry that began it again. */
@@ -5116,9 +5273,11 @@ interface MachineReconnect {
      * The streak stopped, and nothing runs until a person asks for a Retry, which begins a new
      * one: `attempts` — `maxAttempts` failed in a row; `ssh` — ssh refused in a way retrying
      * cannot fix (a host key unknown or changed, an unusable key file, a key refused, a broken
-     * ssh config), said by `sshReason`.
+     * ssh config), said by `sshReason`; `cancelled` — a person stopped it. An attempt that was
+     * under way when it was stopped runs out: it may still connect the machine, and its failure
+     * is the `lastError`.
      */
-    gaveUp?: "attempts" | "ssh";
+    gaveUp?: "attempts" | "ssh" | "cancelled";
     /** The last attempt's failure in the far side's words; null before the first one fails. */
     lastError: string | null;
     /** Why ssh refused, when the last failure was ssh's own — for the page to say in its language. */
@@ -6682,7 +6841,12 @@ interface BrowserExtensionPairingResponse {
     code: string;
     /** ISO time the code stops working. */
     expiresAt: string;
-    /** The request's Origin, when it carried one: the address the browser reaches this server at. */
+    /**
+     * The address the browser reaches this server at, which the extension pairs with: the public
+     * origin (scheme, host and port; from the forwarded headers when the server trusts a proxy).
+     * Null only from an older server, which echoed the request's `Origin` and had none to echo for
+     * a call that carried no `Origin`.
+     */
     origin: string | null;
 }
 /** POST /api/builtin-browser/extension/pair (no cookie: the extension's own request). */
@@ -7117,4 +7281,4 @@ interface DesktopBrowserEventMessage {
     event: DesktopBrowserEvent;
 }
 
-export { API_SOCKET_PATH, type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftShortcut, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineEvent, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSocketFact, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingAccount, type MessagingAccountHolder, type MessagingAccountHoldersResponse, type MessagingAccountsResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type MessagingUnreachableMachine, type MessagingUnreachableReason, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkbenchInfo, type WorkbenchRequest, type WorkbenchResponse, type WorkbenchVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse, apiSocketPath, sessionKindPath };
+export { API_SOCKET_PATH, type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentDeleteResponse, type AgentDeletionInfo, type AgentDeletionResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupServers, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, BACKGROUND_IMAGE_MAX_CHARS, type BackgroundImagePutResponse, type BackgroundImageRequest, type BackgroundImageResponse, type BackgroundSettingsDto, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, DRAFTS_PATCH_MAX_ENTRIES, DRAFT_KINDS, DRAFT_VALUE_MAX_CHARS, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftKind, type DraftShortcut, type DraftsPatchRequest, type DraftsResponse, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineEvent, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSocketFact, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingAccount, type MessagingAccountHolder, type MessagingAccountHoldersResponse, type MessagingAccountsResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type MessagingUnreachableMachine, type MessagingUnreachableReason, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkbenchInfo, type WorkbenchRecord, type WorkbenchRequest, type WorkbenchResponse, type WorkbenchVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse, apiSocketPath, sessionKindPath };

package/dist/api/types.js

@@ -1,13 +1,21 @@
 import {
   API_SOCKET_PATH,
+  BACKGROUND_IMAGE_MAX_CHARS,
+  DRAFTS_PATCH_MAX_ENTRIES,
+  DRAFT_KINDS,
+  DRAFT_VALUE_MAX_CHARS,
   MACHINE_PHASES,
   TICKET_SLUG_PATTERN,
   apiSocketPath,
   sessionKindPath
-} from "../chunk-HDBZRVA5.js";
+} from "../chunk-BRMNPLU6.js";
 import "../chunk-B5IP37ZQ.js";
 export {
   API_SOCKET_PATH,
+  BACKGROUND_IMAGE_MAX_CHARS,
+  DRAFTS_PATCH_MAX_ENTRIES,
+  DRAFT_KINDS,
+  DRAFT_VALUE_MAX_CHARS,
   MACHINE_PHASES,
   TICKET_SLUG_PATTERN,
   apiSocketPath,

package/dist/auth-token.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-G7GY7PJU.js";
 import {
   openExistingDatabase
-} from "./chunk-HPOHMZCH.js";
+} from "./chunk-5YLLSHY3.js";
 import "./chunk-B5IP37ZQ.js";
 
 // src/auth-token.ts

package/dist/{chunk-HPOHMZCH.js → chunk-5YLLSHY3.js}

@@ -714,6 +714,47 @@ var machinesAdoptedAt = {
   }
 };
 
+// src/db/migrations/steps/2026-10-26-user-drafts.ts
+var userDrafts = {
+  name: "2026-10-26-user-drafts",
+  // Additive: two new tables and two indexes. A user's unsent drafts and the custom background
+  // image, which used to live only in the browser that made them. A predecessor build never
+  // reads either table, so a rollback survives it; its Web App then keeps drafts and the image
+  // in that browser alone, as it always did.
+  swapSafe: true,
+  up(db) {
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS user_drafts ( -- a user's unsent drafts (composer text, parked conversations, form answers), so they follow the account to another browser; bounded per user, dropped with the Session or Project they belong to
+        user_id    TEXT NOT NULL REFERENCES users(user_id) ON DELETE CASCADE,
+        draft_key  TEXT NOT NULL,
+        session_id TEXT,
+        project_id TEXT,
+        value_json TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        PRIMARY KEY (user_id, draft_key)
+      );
+      CREATE INDEX IF NOT EXISTS idx_user_drafts_session ON user_drafts(session_id);
+      CREATE INDEX IF NOT EXISTS idx_user_drafts_project ON user_drafts(project_id);
+      CREATE TABLE IF NOT EXISTS user_background_images ( -- the custom background image of a user's appearance settings, apart from ui_prefs so the megabyte it may hold is read only by the one route that serves it
+        user_id    TEXT PRIMARY KEY REFERENCES users(user_id) ON DELETE CASCADE,
+        image      TEXT NOT NULL,
+        image_id   TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      );
+    `);
+  },
+  // LOSES every draft and background image the accounts hold on the server. A browser that still
+  // caches them keeps showing its own copy; another browser starts without them.
+  down(db) {
+    db.exec(`
+      DROP INDEX IF EXISTS idx_user_drafts_project;
+      DROP INDEX IF EXISTS idx_user_drafts_session;
+      DROP TABLE IF EXISTS user_drafts;
+      DROP TABLE IF EXISTS user_background_images;
+    `);
+  }
+};
+
 // src/db/migrations/index.ts
 var MIGRATIONS = [
   messagingBindings,
@@ -735,7 +776,8 @@ var MIGRATIONS = [
   agentApiSessionSettings,
   agentApiConcurrency,
   machinesAdoptedAt,
-  modelTablesAdoption
+  modelTablesAdoption,
+  userDrafts
 ];
 function migrate2(db, options = {}) {
   return migrate(db, MIGRATIONS, options);
@@ -899,6 +941,23 @@ CREATE TABLE IF NOT EXISTS ui_prefs (
   user_id    TEXT PRIMARY KEY REFERENCES users(user_id) ON DELETE CASCADE,
   prefs_json TEXT NOT NULL                    -- {theme?, lastProjectId?, ...} free-form JSON
 );
+CREATE TABLE IF NOT EXISTS user_drafts ( -- a user's unsent drafts (composer text, parked conversations, form answers), so they follow the account to another browser; bounded per user, dropped with the Session or Project they belong to
+  user_id    TEXT NOT NULL REFERENCES users(user_id) ON DELETE CASCADE,
+  draft_key  TEXT NOT NULL,                   -- <kind>:<id> (api/types.ts DRAFT_KINDS)
+  session_id TEXT,                            -- the Session the key names (session / a2ui kinds); NULL otherwise
+  project_id TEXT,                            -- the Project the key names (chat / parked / org / channel kinds); NULL otherwise
+  value_json TEXT NOT NULL,                   -- the draft as the Web App wrote it
+  updated_at TEXT NOT NULL,                   -- last write (ISO); the oldest go first when the user's bound is exceeded
+  PRIMARY KEY (user_id, draft_key)
+);
+CREATE INDEX IF NOT EXISTS idx_user_drafts_session ON user_drafts(session_id);
+CREATE INDEX IF NOT EXISTS idx_user_drafts_project ON user_drafts(project_id);
+CREATE TABLE IF NOT EXISTS user_background_images ( -- the custom background image of a user's appearance settings, apart from ui_prefs so the megabyte it may hold is read only by the one route that serves it
+  user_id    TEXT PRIMARY KEY REFERENCES users(user_id) ON DELETE CASCADE,
+  image      TEXT NOT NULL,                   -- data URL (image/png|jpeg|webp, <= BACKGROUND_IMAGE_MAX_CHARS characters)
+  image_id   TEXT NOT NULL,                   -- content hash; mirrored into ui_prefs.backgroundImageId so a browser fetches the image only when it changed
+  updated_at TEXT NOT NULL
+);
 CREATE TABLE IF NOT EXISTS browser_extensions ( -- one row per Chrome paired to a user (builtin-browser/extension-pairing.ts): the PenguinHarness Browser extension's long-lived credential, stored only hashed; NOT rebuildable \u2014 a lost row means pairing that Chrome again
   extension_id TEXT PRIMARY KEY,              -- random id shown in the Web App's list
   user_id      TEXT NOT NULL REFERENCES users(user_id) ON DELETE CASCADE,
@@ -1133,4 +1192,4 @@ export {
   openDatabaseReadOnly,
   openDatabase
 };
-//# sourceMappingURL=chunk-HPOHMZCH.js.map
+//# sourceMappingURL=chunk-5YLLSHY3.js.map