@rikaidev/yomi 0.6.0 → 0.6.1

package/dist/auth/credential-store.js

@@ -200,11 +200,12 @@ export class CredentialStore {
         this.filePath = fallbackFilePath;
         this.cache = new Map();
         this.loaded = false;
-        // Desktop background bridges are deliberately read-only.  They must use
-        // the user-isolated credential file and never invoke `security` to mutate
-        // the Keychain during a 15s poll (which causes repeated macOS prompts).
+        // The user-isolated credential file (0600 mode) is fast, reliable, and avoids
+        // triggering disruptive macOS SecurityAgent GUI prompts. Mutating the Keychain
+        // via `security` CLI is opt-in (via YOMI_USE_KEYCHAIN=1) rather than default.
         this.secureStorageEnabled =
             process.platform === 'darwin' &&
+                process.env.YOMI_USE_KEYCHAIN === '1' &&
                 process.env.YOMI_NO_KEYCHAIN !== '1' &&
                 process.env.YOMI_READ_ONLY_SESSION !== '1';
         this.keychainService = this.secureStorageEnabled
@@ -233,8 +234,12 @@ export class CredentialStore {
             }
         }
         catch { }
-        if (this.secureStorageEnabled && this.keychainService) {
-            const result = await this.keychainService.getCredential(this.keychainAccount);
+        const keychain = this.keychainService ??
+            (process.platform === 'darwin' && process.env.YOMI_NO_KEYCHAIN !== '1'
+                ? getKeychainService()
+                : null);
+        if (keychain) {
+            const result = await keychain.getCredential(this.keychainAccount);
             if (result.success && result.password) {
                 try {
                     const fs = await import('node:fs/promises');
@@ -247,7 +252,6 @@ export class CredentialStore {
                 catch { }
                 return result.password;
             }
-            return null;
         }
         return null;
     }

package/dist/mcp/integrator.js

@@ -79,19 +79,33 @@ description: Manage and interact with user's LINE account via Yomi E2EE MCP Serv
 
 # Yomi LINE Copilot Skill
 
-You have real-time access to the user's LINE account through the Yomi Letter-Sealing E2EE MCP Server.
+You have real-time access to the user's LINE account through the Yomi Letter-Sealing E2EE server. Discover the current tools and complete a scoped read before claiming that access; the names below describe expected capabilities, not proof they are connected.
 
-## Capabilities
-1. \`get_recent_messages\`: Retrieve recent decrypted messages.
-2. \`search_messages\`: Full-text search across conversations.
-3. \`list_contacts\`: Retrieve friends and group information.
-4. \`send_message\`: Send messages to chats with confirmation.
+## Reading
+1. \`list_conversations\`: List the chats the account can see.
+2. \`get_chat_messages\`: Read the recent decrypted messages of one chat.
+3. \`collect_messages\`: Collect messages across several chats.
+4. \`search_messages\`: Full-text search across conversations.
+5. \`get_unread_digest\`: Summarize what is unread.
+6. \`get_insight\`: Ask the account model for an insight about the messages.
+7. \`find_contact\` and \`list_contacts\`: Resolve a person or a group to its chat id.
+
+## Writing
+1. \`send_message\`: Send a text message to a chat.
+2. \`unsend_message\`: Recall a message the account sent.
+
+## Operating the server
+- The Model Context Protocol server speaks stdio and lives only while its stdin stays open. A command that closes stdin ends the server, so keep the pipe open for as long as the session needs it.
+- The \`yomi messages\` CLI reports an empty list; only the Model Context Protocol tools above return real messages.
+- \`unsend_message\` is irreversible, and LINE accepts a recall only within one hour of sending. A recall past that window is refused by LINE itself, not by the tool.
 
 ## Guidelines
 - Summarize conversations concisely and highlight action items or mentions needing attention.
-- When drafting a reply, ask the user for confirmation before executing \`send_message\`.
+- Drafting does not authorize sending. Require explicit sending authorization for the recipient and content; reuse that exact authorization when already given.
+- A recall writes to the conversation as well, so it needs the same explicit authorization as sending.
 `;
     const skillDirs = [
+        join(home, '.agents', 'skills', 'yomi-line-manager'),
         join(home, '.claude', 'skills', 'yomi-line-manager'),
         join(home, '.gemini', 'antigravity-cli', 'builtin', 'skills', 'yomi-line-manager'),
         join(home, '.codex', 'skills', 'yomi-line-manager'),

package/dist/version.js

@@ -4,4 +4,4 @@
  * virtual filesystem). MUST stay equal to the "version" field in
  * package.json — the test in version.test.ts enforces that.
  */
-export const YOMI_VERSION = '0.6.0';
+export const YOMI_VERSION = '0.6.1';

package/package.json

@@ -3,7 +3,7 @@
   "engines": {
     "node": ">=22.13.0 <23.0.0 || >=23.4.0"
   },
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Open-source personal LINE MCP server for AI agents. Read, reply, send images, and search LINE conversations locally with Letter-Sealing E2EE.",
   "type": "module",
   "license": "MIT",
@@ -67,7 +67,7 @@
     "desktop:windows:qc": "npm run typecheck && npm run lint && npm run lint:comments && cargo test --manifest-path desktop/Cargo.toml && npm run desktop:windows:lint",
     "desktop:windows:i18n": "node scripts/windows-i18n-harness.mjs",
     "desktop:windows:harness": "node scripts/windows-desktop-harness.mjs",
-    "version": "node scripts/sync-version.mjs && git add src/version.ts",
+    "version": "node scripts/sync-version.mjs && git add src/version.ts desktop/mac-native/Info.plist desktop/Cargo.toml",
     "prepublishOnly": "npm run build",
     "test:fixture-hygiene": "node scripts/test-fixture-hygiene.mjs",
     "desktop:install-local": "bash scripts/install-swift-desktop-local.sh"

package/run.mjs

@@ -268,6 +268,29 @@ switch (cmd) {
     }));
     process.exit(0);
   }
+  case 'unsend-message':
+  case 'unsend': {
+    const messageId = args[1];
+    if (!messageId) {
+      console.error(JSON.stringify({ error: 'messageId required' }));
+      process.exit(1);
+    }
+    const { LineProtocolService } = await load('line/core/service');
+    const service = new LineProtocolService();
+    if (!(await service.resumeSession())) process.exit(1);
+    try {
+      const res = await service.unsendMessage(messageId);
+      console.log(JSON.stringify({
+        unsent: true,
+        messageId,
+        ...res,
+      }));
+      process.exit(0);
+    } catch (err) {
+      console.error(JSON.stringify({ error: err.message || String(err) }));
+      process.exit(1);
+    }
+  }
   case 'send-image': {
     const chatId = args[1];
     const imagePath = args[2];
@@ -419,6 +442,7 @@ Usage:
   yomi                Start the MCP stdio server (default)
   yomi serve          Same as above, explicit
   yomi login [...]    Run the passwordless login flow in a terminal
+  yomi unsend <id>    Retract (unsend) a message sent within the last hour
   yomi help           Show this help
   yomi version        Print version