@rikaidev/yomi 0.6.0 → 0.6.2

package/dist/auth/credential-store.js

@@ -200,11 +200,12 @@ export class CredentialStore {
         this.filePath = fallbackFilePath;
         this.cache = new Map();
         this.loaded = false;
-        // Desktop background bridges are deliberately read-only.  They must use
-        // the user-isolated credential file and never invoke `security` to mutate
-        // the Keychain during a 15s poll (which causes repeated macOS prompts).
+        // The user-isolated credential file (0600 mode) is fast, reliable, and avoids
+        // triggering disruptive macOS SecurityAgent GUI prompts. Mutating the Keychain
+        // via `security` CLI is opt-in (via YOMI_USE_KEYCHAIN=1) rather than default.
         this.secureStorageEnabled =
             process.platform === 'darwin' &&
+                process.env.YOMI_USE_KEYCHAIN === '1' &&
                 process.env.YOMI_NO_KEYCHAIN !== '1' &&
                 process.env.YOMI_READ_ONLY_SESSION !== '1';
         this.keychainService = this.secureStorageEnabled
@@ -233,8 +234,12 @@ export class CredentialStore {
             }
         }
         catch { }
-        if (this.secureStorageEnabled && this.keychainService) {
-            const result = await this.keychainService.getCredential(this.keychainAccount);
+        const keychain = this.keychainService ??
+            (process.platform === 'darwin' && process.env.YOMI_NO_KEYCHAIN !== '1'
+                ? getKeychainService()
+                : null);
+        if (keychain) {
+            const result = await keychain.getCredential(this.keychainAccount);
             if (result.success && result.password) {
                 try {
                     const fs = await import('node:fs/promises');
@@ -247,7 +252,6 @@ export class CredentialStore {
                 catch { }
                 return result.password;
             }
-            return null;
         }
         return null;
     }

package/dist/line/core/message-box-recency.js

@@ -0,0 +1,27 @@
+function messageTimestamp(message) {
+    return Number(message?.deliveredTime || message?.createdTime || 0);
+}
+/** Newest activity time of one message box, in epoch milliseconds. */
+export function boxActivity(box) {
+    const cursorTime = Number(box?.lastDeliveredMessageId?.deliveredTime || 0);
+    const lastTimes = Array.isArray(box?.lastMessages)
+        ? box.lastMessages.map(messageTimestamp)
+        : [];
+    return Math.max(cursorTime, ...lastTimes, 0);
+}
+/**
+ * Every message box, most recently active first.
+ *
+ * LINE returns message boxes in chat-MID order (`c…` groups, then `m…`, then
+ * `u…` 1:1 chats) and one page holds only the requested count, so a single
+ * `getMessageBoxes` call is neither recent nor complete: it silently drops
+ * every chat whose MID sorts past the page. Page through all of them, then
+ * order by activity so a caller-supplied limit keeps the newest chats.
+ */
+export async function listBoxesByRecency(service, options) {
+    const result = await service.client.getAllMessageBoxes({
+        lastMessagesPerMessageBoxCount: 1,
+        withUnreadCount: options.withUnreadCount,
+    });
+    return [...(result.messageBoxes || [])].sort((a, b) => boxActivity(b) - boxActivity(a));
+}

package/dist/mcp/handlers/conversations.js

@@ -1,4 +1,5 @@
 import { isSquareChatMid } from '../../line/client/square-service/client.js';
+import { listBoxesByRecency } from '../../line/core/message-box-recency.js';
 import { sanitizeMessagePreview } from '../../line/core/message-preview.js';
 import { decryptLineMessage } from '../../line/core/message-query-service.js';
 import { getExcludedChatIds } from '../../search/scope.js';
@@ -34,12 +35,7 @@ export async function handleListConversations(service, args) {
         }
     }
     catch { }
-    const result = await service.client.getMessageBoxes({
-        lastMessagesPerMessageBoxCount: 1,
-        messageBoxCountLimit: args.limit ?? 20,
-        withUnreadCount: true,
-    });
-    const boxes = result.messageBoxes || [];
+    const boxes = (await listBoxesByRecency(service, { withUnreadCount: true })).slice(0, args.limit ?? 20);
     const names = await resolveConversationNames(service, boxes.map((box) => box.id).filter(Boolean));
     // The last message embedded in getMessageBoxes is E2EE-wrapped for most
     // chats; run it through the same local decrypt path get_chat_messages
@@ -237,13 +233,9 @@ export async function handleMarkRead(service, args) {
  * @returns MCP tool result.
  */
 export async function handleGetUnreadDigest(service, args) {
-    const result = await service.client.getMessageBoxes({
-        lastMessagesPerMessageBoxCount: 1,
-        messageBoxCountLimit: args.limit ?? 20,
-        withUnreadCount: true,
-    });
     const excluded = getExcludedChatIds();
-    const unreadBoxes = (result.messageBoxes || []).filter((box) => (box.unreadCount ?? 0) > 0 && box.id && !excluded.has(box.id));
+    const allUnread = (await listBoxesByRecency(service, { withUnreadCount: true })).filter((box) => (box.unreadCount ?? 0) > 0 && box.id && !excluded.has(box.id));
+    const unreadBoxes = args.limit && args.limit > 0 ? allUnread.slice(0, args.limit) : allUnread;
     const names = await resolveConversationNames(service, unreadBoxes.map((box) => box.id));
     const perChat = args.perChat ?? 10;
     const acc = createPhiAccumulator();
@@ -267,6 +259,12 @@ export async function handleGetUnreadDigest(service, args) {
         };
     }));
     const content = [{ type: 'text', text: toonText(digest) }];
+    if (unreadBoxes.length < allUnread.length) {
+        content.push({
+            type: 'text',
+            text: `Showing the ${unreadBoxes.length} most recently active of ${allUnread.length} unread conversations (limit=${args.limit}). Omit limit to list all.`,
+        });
+    }
     const note = phiNote(acc);
     if (note)
         content.push(note);

package/dist/mcp/integrator.js

@@ -79,19 +79,33 @@ description: Manage and interact with user's LINE account via Yomi E2EE MCP Serv
 
 # Yomi LINE Copilot Skill
 
-You have real-time access to the user's LINE account through the Yomi Letter-Sealing E2EE MCP Server.
+You have real-time access to the user's LINE account through the Yomi Letter-Sealing E2EE server. Discover the current tools and complete a scoped read before claiming that access; the names below describe expected capabilities, not proof they are connected.
 
-## Capabilities
-1. \`get_recent_messages\`: Retrieve recent decrypted messages.
-2. \`search_messages\`: Full-text search across conversations.
-3. \`list_contacts\`: Retrieve friends and group information.
-4. \`send_message\`: Send messages to chats with confirmation.
+## Reading
+1. \`list_conversations\`: List the chats the account can see.
+2. \`get_chat_messages\`: Read the recent decrypted messages of one chat.
+3. \`collect_messages\`: Collect messages across several chats.
+4. \`search_messages\`: Full-text search across conversations.
+5. \`get_unread_digest\`: Summarize what is unread.
+6. \`get_insight\`: Ask the account model for an insight about the messages.
+7. \`find_contact\` and \`list_contacts\`: Resolve a person or a group to its chat id.
+
+## Writing
+1. \`send_message\`: Send a text message to a chat.
+2. \`unsend_message\`: Recall a message the account sent.
+
+## Operating the server
+- The Model Context Protocol server speaks stdio and lives only while its stdin stays open. A command that closes stdin ends the server, so keep the pipe open for as long as the session needs it.
+- The \`yomi messages\` CLI reports an empty list; only the Model Context Protocol tools above return real messages.
+- \`unsend_message\` is irreversible, and LINE accepts a recall only within one hour of sending. A recall past that window is refused by LINE itself, not by the tool.
 
 ## Guidelines
 - Summarize conversations concisely and highlight action items or mentions needing attention.
-- When drafting a reply, ask the user for confirmation before executing \`send_message\`.
+- Drafting does not authorize sending. Require explicit sending authorization for the recipient and content; reuse that exact authorization when already given.
+- A recall writes to the conversation as well, so it needs the same explicit authorization as sending.
 `;
     const skillDirs = [
+        join(home, '.agents', 'skills', 'yomi-line-manager'),
         join(home, '.claude', 'skills', 'yomi-line-manager'),
         join(home, '.gemini', 'antigravity-cli', 'builtin', 'skills', 'yomi-line-manager'),
         join(home, '.codex', 'skills', 'yomi-line-manager'),

package/dist/mcp/tools.js

@@ -115,7 +115,7 @@ export const TOOLS = [
         name: 'get_message_media',
     },
     {
-        description: 'One-shot unread digest: every LINE conversation with unread messages, each with its most recent messages (default 10), E2EE-decrypted, with resolved sender names. Saves calling list_conversations then get_chat_messages per chat. Read-only: never marks anything read, never touches the search index; denylist-excluded conversations are omitted. Returns an empty list when nothing is unread — never fabricated.',
+        description: 'One-shot unread digest: every LINE conversation with unread messages (all pages of the inbox, newest activity first), each with its most recent messages (default 10), E2EE-decrypted, with resolved sender names. Saves calling list_conversations then get_chat_messages per chat. Read-only: never marks anything read, never touches the search index; denylist-excluded conversations are omitted. Returns an empty list when nothing is unread — never fabricated.',
         inputSchema: {
             type: 'object',
             properties: {
@@ -125,7 +125,7 @@ export const TOOLS = [
                 },
                 limit: {
                     type: 'number',
-                    description: 'Maximum number of conversations to scan for unread (default 20).',
+                    description: 'Maximum number of unread conversations to return, most recently active first (default: all of them).',
                 },
             },
         },

package/dist/search/collector.js

@@ -26,6 +26,7 @@
  * messages + bigram search_text are always stored regardless of whether
  * embedding succeeded, so keyword search keeps working either way.
  */
+import { listBoxesByRecency } from '../line/core/message-box-recency.js';
 import { resolveConversationNames, resolveSenderNames } from '../mcp/names.js';
 import { createCliLogger } from '../util/log.js';
 import { getExcludedChatIds } from './scope.js';
@@ -46,12 +47,7 @@ async function resolveTargetChats(service, chatIds) {
     if (chatIds && chatIds.length > 0) {
         return resolveConversationNames(service, chatIds);
     }
-    const result = await service.client.getMessageBoxes({
-        lastMessagesPerMessageBoxCount: 1,
-        messageBoxCountLimit: DEFAULT_CHAT_LIMIT,
-        withUnreadCount: false,
-    });
-    const boxes = result.messageBoxes || [];
+    const boxes = (await listBoxesByRecency(service, { withUnreadCount: false })).slice(0, DEFAULT_CHAT_LIMIT);
     const ids = boxes.map((box) => box.id).filter(Boolean);
     return resolveConversationNames(service, ids);
 }

package/dist/version.js

@@ -4,4 +4,4 @@
  * virtual filesystem). MUST stay equal to the "version" field in
  * package.json — the test in version.test.ts enforces that.
  */
-export const YOMI_VERSION = '0.6.0';
+export const YOMI_VERSION = '0.6.2';

package/package.json

@@ -3,7 +3,7 @@
   "engines": {
     "node": ">=22.13.0 <23.0.0 || >=23.4.0"
   },
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Open-source personal LINE MCP server for AI agents. Read, reply, send images, and search LINE conversations locally with Letter-Sealing E2EE.",
   "type": "module",
   "license": "MIT",
@@ -67,7 +67,7 @@
     "desktop:windows:qc": "npm run typecheck && npm run lint && npm run lint:comments && cargo test --manifest-path desktop/Cargo.toml && npm run desktop:windows:lint",
     "desktop:windows:i18n": "node scripts/windows-i18n-harness.mjs",
     "desktop:windows:harness": "node scripts/windows-desktop-harness.mjs",
-    "version": "node scripts/sync-version.mjs && git add src/version.ts",
+    "version": "node scripts/sync-version.mjs && git add src/version.ts desktop/mac-native/Info.plist desktop/Cargo.toml",
     "prepublishOnly": "npm run build",
     "test:fixture-hygiene": "node scripts/test-fixture-hygiene.mjs",
     "desktop:install-local": "bash scripts/install-swift-desktop-local.sh"

package/run.mjs

@@ -268,6 +268,29 @@ switch (cmd) {
     }));
     process.exit(0);
   }
+  case 'unsend-message':
+  case 'unsend': {
+    const messageId = args[1];
+    if (!messageId) {
+      console.error(JSON.stringify({ error: 'messageId required' }));
+      process.exit(1);
+    }
+    const { LineProtocolService } = await load('line/core/service');
+    const service = new LineProtocolService();
+    if (!(await service.resumeSession())) process.exit(1);
+    try {
+      const res = await service.unsendMessage(messageId);
+      console.log(JSON.stringify({
+        unsent: true,
+        messageId,
+        ...res,
+      }));
+      process.exit(0);
+    } catch (err) {
+      console.error(JSON.stringify({ error: err.message || String(err) }));
+      process.exit(1);
+    }
+  }
   case 'send-image': {
     const chatId = args[1];
     const imagePath = args[2];
@@ -419,6 +442,7 @@ Usage:
   yomi                Start the MCP stdio server (default)
   yomi serve          Same as above, explicit
   yomi login [...]    Run the passwordless login flow in a terminal
+  yomi unsend <id>    Retract (unsend) a message sent within the last hour
   yomi help           Show this help
   yomi version        Print version