@withbuddi/buddi 0.1.0-pre.19 → 0.1.0-pre.21

package/node_modules/imapflow/dist/esm/jp-decoder.js

@@ -31,7 +31,7 @@ export class JPDecoder extends Transform {
             chunk = Buffer.from(chunk, encoding);
         }
         if (this.chunklen + chunk.length > this.maxBytes) {
-            chunk = chunk.slice(0, Math.max(0, this.maxBytes - this.chunklen));
+            chunk = chunk.subarray(0, Math.max(0, this.maxBytes - this.chunklen));
         }
         if (chunk.length) {
             this.chunks.push(chunk);

package/node_modules/imapflow/dist/esm/package-info.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "imapflow";
-export declare const version = "2.0.7";
+export declare const version = "2.1.0";
 export declare const homepage = "https://imapflow.com/";

package/node_modules/imapflow/dist/esm/package-info.js

@@ -1,4 +1,4 @@
 // Generated by scripts/build.js from package.json. Do not edit by hand.
-export const name = 'imapflow';
-export const version = '2.0.7';
-export const homepage = 'https://imapflow.com/';
+export const name = "imapflow";
+export const version = "2.1.0";
+export const homepage = "https://imapflow.com/";

package/node_modules/imapflow/dist/esm/search-compiler.js

@@ -403,21 +403,14 @@ export const searchCompiler = (connection, query) => {
                          * @returns Binary tree structure
                          */
                         let genOrTree = (list) => {
-                            let group = false;
                             let groups = [];
                             // Group items in pairs
-                            list.forEach((entry, i) => {
-                                if (i % 2 === 0) {
-                                    group = [entry];
-                                }
-                                else {
-                                    group.push(entry);
-                                    groups.push(group);
-                                    group = false;
-                                }
-                            });
+                            for (let i = 0; i + 1 < list.length; i += 2) {
+                                groups.push([list[i], list[i + 1]]);
+                            }
                             // Handle odd number of items
-                            if (group && group.length) {
+                            if (list.length % 2) {
+                                let group = [list[list.length - 1]];
                                 while (group.length === 1 && Array.isArray(group[0])) {
                                     group = group[0];
                                 }

package/node_modules/imapflow/dist/esm/tools.d.ts

@@ -1,8 +1,8 @@
 import type { Transform } from 'node:stream';
 import type { ImapFlow } from './imap-flow.js';
-import type { ConnectionErrorSite, ImapFlowError } from './errors.js';
+import { type ConnectionErrorSite, type ImapFlowError } from './errors.js';
 import type { ImapAttributeList, ImapAttributeNode, ImapResponse } from './handler/types.js';
-import type { FetchMessageObject, ListResponse, ListTreeResponse, MailboxObject, MessageEnvelopeObject, MessageStructureObject, StatusQuery } from './types.js';
+import type { FetchMessageObject, ListResponse, ListTreeResponse, MailboxObject, MessageEnvelopeObject, MessageStructureObject, ImapFlowEvents, StatusQuery } from './types.js';
 export { AuthenticationFailure } from './errors.js';
 export declare const EXPANDED_RANGE_LIMIT = 16777216;
 export declare const MAX_UINT32_DIGITS = 10;
@@ -80,6 +80,13 @@ export declare function guardedPromise<T>(executor: (resolve: (value: T | Promis
  * @returns Rejected promise, with its rejection already observed
  */
 export declare function guardedReject(error: Error): Promise<never>;
+/**
+ * Clears a timer that may already have been dropped. `clearTimeout()` accepts undefined but not
+ * null, and the connection nulls its timer fields once cleared, so every site clears through here.
+ *
+ * @param timer - Timer handle returned by setTimeout, or null/undefined when none is armed
+ */
+export declare function clearTimer(timer: NodeJS.Timeout | null | undefined): void;
 /**
  * Detaches a background timer from the event loop, so it cannot keep the process alive on its
  * own. Applied to every background timer (auto-IDLE, IDLE restart, fallback polling, throttle
@@ -89,13 +96,6 @@ export declare function guardedReject(error: Error): Promise<never>;
  * @param timer - Timer handle returned by setTimeout
  * @returns The same timer handle
  */
-/**
- * Clears a timer that may already have been dropped. `clearTimeout()` accepts undefined but not
- * null, and the connection nulls its timer fields once cleared, so every site clears through here.
- *
- * @param timer - Timer handle returned by setTimeout, or null/undefined when none is armed
- */
-export declare function clearTimer(timer: NodeJS.Timeout | null | undefined): void;
 export declare function unrefTimer<T extends NodeJS.Timeout | null | undefined>(timer: T): T;
 /**
  * Logs a failure from background connection work at the level its cause deserves.
@@ -200,6 +200,25 @@ export declare function updateCapabilities(list: ImapAttributeList | null | unde
  * @returns Uppercase status code string, or false if not found
  */
 export declare function getStatusCode(response: ImapResponse | string | false | undefined): string | false;
+/**
+ * Emits a state-change event from inside the command pipeline. A listener that throws must not
+ * abort the code that emitted it: select() emits before it releases the response, so the throw
+ * would leave the reader loop waiting forever, and close() would never get to emit 'close'. The
+ * error is logged instead, the same contract untagged handlers and the 'response' event get.
+ *
+ * @param connection - IMAP connection instance
+ * @param event - Event name
+ * @param args - Event arguments
+ */
+export declare function emitSafe<K extends keyof ImapFlowEvents>(connection: ImapFlow, event: K, ...args: ImapFlowEvents[K]): void;
+/**
+ * Collects the values of the TEXT tokens of a parsed response (the human-readable
+ * part of a status response, a greeting or a BYE).
+ *
+ * @param attributes - Attributes of a parsed IMAP response
+ * @returns Values of the TEXT tokens, in order
+ */
+export declare function getTextValues(attributes: ImapAttributeList | undefined): string[];
 /**
  * Compiles an IMAP response object back into a human-readable string.
  *
@@ -214,6 +233,28 @@ export declare function getErrorText(response: ImapResponse | string | false | u
  * @returns The enhanced error with `serverResponseCode` and string `response`
  */
 export declare function enhanceCommandError(err: ImapFlowError): Promise<ImapFlowError>;
+/**
+ * Enhances a failed command's error (see enhanceCommandError()) and logs it, the shared first
+ * step of every command's failure path. The caller decides whether to throw or return.
+ *
+ * @param connection - IMAP connection instance
+ * @param err - The command error
+ */
+export declare function reportCommandError(connection: ImapFlow, err: ImapFlowError): Promise<void>;
+/**
+ * Whether the session is authenticated, that is in the AUTHENTICATED or SELECTED state, which
+ * every mailbox-level command requires.
+ *
+ * @param connection - IMAP connection instance
+ */
+export declare function isAuthenticatedState(connection: ImapFlow): boolean;
+/**
+ * Returns the selected mailbox, or false when the connection is not in the SELECTED state.
+ * Message-level commands use it as their precondition, which also narrows the mailbox type.
+ *
+ * @param connection - IMAP connection instance
+ */
+export declare function getSelectedMailbox(connection: ImapFlow): MailboxObject | false;
 /**
  * Converts a flat list of mailbox folders into a tree structure.
  *
@@ -305,14 +346,14 @@ export declare function toValidDate(value: unknown): Date | null;
  * @param value - Date to format
  * @returns Formatted date string, or undefined if invalid
  */
-export declare function formatDate(value: Date | string | null | undefined): string | undefined;
+export declare function formatDate(value: unknown): string | undefined;
 /**
  * Formats a date value into IMAP date-time format (DD-Mon-YYYY HH:MM:SS +0000).
  *
  * @param value - Date to format
  * @returns Formatted date-time string, or undefined if invalid
  */
-export declare function formatDateTime(value: Date | string | null | undefined): string | undefined;
+export declare function formatDateTime(value: unknown): string | undefined;
 /**
  * Normalizes a flag string. Returns false for non-settable flags (e.g. \Recent),
  * and capitalizes system flags properly.

package/node_modules/imapflow/dist/esm/tools.js

@@ -5,10 +5,11 @@ import { compiler } from './handler/imap-handler.js';
 import { createHash } from 'node:crypto';
 import { JPDecoder } from './jp-decoder.js';
 import iconv from 'iconv-lite';
+import { ImapFlowErrorCode } from './errors.js';
 export { AuthenticationFailure } from './errors.js';
 const FLAG_COLORS = ['red', 'orange', 'yellow', 'green', 'blue', 'purple', 'grey'];
 // Error codes that only mean the connection is no longer usable. See logConnectionError().
-const CONNECTION_GONE_CODES = new Set(['NoConnection', 'EConnectionClosed', 'StateLogout']);
+const CONNECTION_GONE_CODES = new Set([ImapFlowErrorCode.NoConnection, ImapFlowErrorCode.EConnectionClosed, ImapFlowErrorCode.StateLogout]);
 // Upper bound for expanding server-supplied sequence ranges (see expandRange). 2^24
 // entries in total is far beyond any legitimate mailbox while keeping the worst-case
 // expansion of a hostile range set bounded.
@@ -158,15 +159,6 @@ export function guardedReject(error) {
     promise.catch(noop);
     return promise;
 }
-/**
- * Detaches a background timer from the event loop, so it cannot keep the process alive on its
- * own. Applied to every background timer (auto-IDLE, IDLE restart, fallback polling, throttle
- * back-off, held-lock diagnostics); connection and greeting deadlines are deliberately left
- * attached, because a caller is waiting for connect() to settle.
- *
- * @param timer - Timer handle returned by setTimeout
- * @returns The same timer handle
- */
 /**
  * Clears a timer that may already have been dropped. `clearTimeout()` accepts undefined but not
  * null, and the connection nulls its timer fields once cleared, so every site clears through here.
@@ -178,6 +170,15 @@ export function clearTimer(timer) {
         clearTimeout(timer);
     }
 }
+/**
+ * Detaches a background timer from the event loop, so it cannot keep the process alive on its
+ * own. Applied to every background timer (auto-IDLE, IDLE restart, fallback polling, throttle
+ * back-off, held-lock diagnostics); connection and greeting deadlines are deliberately left
+ * attached, because a caller is waiting for connect() to settle.
+ *
+ * @param timer - Timer handle returned by setTimeout
+ * @returns The same timer handle
+ */
 export function unrefTimer(timer) {
     /* c8 ignore next 3 */ // node timers always expose unref(); the guard covers replaced globals in tests
     if (timer && typeof timer.unref === 'function') {
@@ -393,7 +394,7 @@ export function updateCapabilities(list) {
             }
             if (capability.startsWith('APPENDLIMIT=')) {
                 let splitPos = capability.indexOf('=');
-                map.set('APPENDLIMIT', parseUintValue(capability.substr(splitPos + 1)) || 0);
+                map.set('APPENDLIMIT', parseUintValue(capability.slice(splitPos + 1)) || 0);
                 return;
             }
             map.set(capability, true);
@@ -419,6 +420,34 @@ export function getStatusCode(response) {
         ? response.attributes[0].section[0].value.toUpperCase().trim()
         : false;
 }
+/**
+ * Emits a state-change event from inside the command pipeline. A listener that throws must not
+ * abort the code that emitted it: select() emits before it releases the response, so the throw
+ * would leave the reader loop waiting forever, and close() would never get to emit 'close'. The
+ * error is logged instead, the same contract untagged handlers and the 'response' event get.
+ *
+ * @param connection - IMAP connection instance
+ * @param event - Event name
+ * @param args - Event arguments
+ */
+export function emitSafe(connection, event, ...args) {
+    try {
+        connection.emit(event, ...args);
+    }
+    catch (err) {
+        connection.log.warn({ msg: 'Event listener failed', event, err, cid: connection.id });
+    }
+}
+/**
+ * Collects the values of the TEXT tokens of a parsed response (the human-readable
+ * part of a status response, a greeting or a BYE).
+ *
+ * @param attributes - Attributes of a parsed IMAP response
+ * @returns Values of the TEXT tokens, in order
+ */
+export function getTextValues(attributes) {
+    return (attributes || []).filter(attr => attr?.type === 'TEXT').map(attr => String(attr?.value ?? ''));
+}
 /**
  * Compiles an IMAP response object back into a human-readable string.
  *
@@ -456,6 +485,35 @@ export async function enhanceCommandError(err) {
     err.response = await getErrorText(err.response);
     return err;
 }
+/**
+ * Enhances a failed command's error (see enhanceCommandError()) and logs it, the shared first
+ * step of every command's failure path. The caller decides whether to throw or return.
+ *
+ * @param connection - IMAP connection instance
+ * @param err - The command error
+ */
+export async function reportCommandError(connection, err) {
+    await enhanceCommandError(err);
+    connection.log.warn({ err, cid: connection.id });
+}
+/**
+ * Whether the session is authenticated, that is in the AUTHENTICATED or SELECTED state, which
+ * every mailbox-level command requires.
+ *
+ * @param connection - IMAP connection instance
+ */
+export function isAuthenticatedState(connection) {
+    return connection.state === connection.states.AUTHENTICATED || connection.state === connection.states.SELECTED;
+}
+/**
+ * Returns the selected mailbox, or false when the connection is not in the SELECTED state.
+ * Message-level commands use it as their precondition, which also narrows the mailbox type.
+ *
+ * @param connection - IMAP connection instance
+ */
+export function getSelectedMailbox(connection) {
+    return connection.state === connection.states.SELECTED && connection.mailbox ? connection.mailbox : false;
+}
 /**
  * Converts a flat list of mailbox folders into a tree structure.
  *
@@ -943,7 +1001,7 @@ export function getStructuredParams(arr) {
             // nothing to do here, does not seem like a continuation param
             return;
         }
-        actualKey = key.substr(0, match.index).toLowerCase();
+        actualKey = key.substring(0, match.index).toLowerCase();
         nr = Number(match[2]) || 0;
         if (isUnsafeKey(actualKey)) {
             // A continuation key like "__proto__*0*" would group under "__proto__":
@@ -1035,7 +1093,7 @@ export function parseBodystructure(entry) {
             curNode.type = 'multipart/' + ((node[i++] || {}).value || '').toString().toLowerCase();
             // extension data (not available for BODY requests)
             // body parameter parenthesized list
-            if (i < node.length - 1) {
+            if (i < node.length) {
                 if (node[i]) {
                     curNode.parameters = getStructuredParams(node[i]);
                 }
@@ -1117,7 +1175,7 @@ export function parseBodystructure(entry) {
             }
             // extension data (not available for BODY requests)
             // md5
-            if (i < node.length - 1) {
+            if (i < node.length) {
                 if (node[i]) {
                     curNode.md5 = (node[i].value || '').toString().toLowerCase();
                 }
@@ -1127,7 +1185,7 @@ export function parseBodystructure(entry) {
         // the following are shared extension values (for both multipart and non-multipart parts)
         // not available for BODY requests
         // body disposition
-        if (i < node.length - 1) {
+        if (i < node.length) {
             let disposition = node[i];
             if (Array.isArray(disposition) && disposition.length) {
                 curNode.disposition = ((disposition[0] && disposition[0].value) || '').toString().toLowerCase();
@@ -1138,7 +1196,7 @@ export function parseBodystructure(entry) {
             i++;
         }
         // body language
-        if (i < node.length - 1) {
+        if (i < node.length) {
             if (node[i]) {
                 /* c8 ignore next */ // node[i] is truthy inside this guard, so the [] fallback is unreachable
                 curNode.language = [].concat(node[i] || []).map(val => ((val && val.value) || '').toString().toLowerCase());
@@ -1148,7 +1206,7 @@ export function parseBodystructure(entry) {
         // body location
         // NB! defined as a "string list" in RFC3501 but replaced in errata document with "string"
         // Errata: http://www.rfc-editor.org/errata_search.php?rfc=3501
-        if (i < node.length - 1) {
+        if (i < node.length) {
             if (node[i]) {
                 curNode.location = (node[i].value || '').toString();
             }
@@ -1195,7 +1253,7 @@ export function formatDate(value) {
     if (!date) {
         return;
     }
-    let dateParts = date.toISOString().substr(0, 10).split('-');
+    let dateParts = date.toISOString().substring(0, 10).split('-');
     dateParts.reverse();
     let months = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
     dateParts[1] = months[Number(dateParts[1]) - 1];
@@ -1213,7 +1271,7 @@ export function formatDateTime(value) {
         return;
     }
     let dateStr = formatDate(date).replace(/^0/, ' '); //starts with date-day-fixed with leading 0 replaced by SP
-    let timeStr = date.toISOString().substr(11, 8);
+    let timeStr = date.toISOString().substring(11, 19);
     return `${dateStr} ${timeStr} +0000`;
 }
 /**
@@ -1367,8 +1425,8 @@ export function expandRange(range) {
             }
             continue;
         }
-        let first = Number(entry.substr(0, colon));
-        let second = Number(entry.substr(colon + 1));
+        let first = Number(entry.substring(0, colon));
+        let second = Number(entry.slice(colon + 1));
         if (!isValidSequenceValue(first) || !isValidSequenceValue(second)) {
             continue;
         }

package/node_modules/imapflow/dist/esm/types.d.ts

@@ -207,26 +207,32 @@ export interface IdInfoObject {
     'support-url'?: string | false | undefined;
     /** Date program was released */
     date?: Date | string | false | undefined;
-    [key: string]: any;
+    /** Any other field, sent as its string form */
+    [key: string]: unknown;
+}
+/**
+ * Usage and limit of one quota resource. The `storage` values are bytes (the wire format is
+ * kilobytes), the other resources are counts
+ */
+export interface QuotaResource {
+    /** Current usage, missing when the server did not send a usable number */
+    usage?: number | undefined;
+    /** The limit, missing when the server did not send a usable number */
+    limit?: number | undefined;
+    /** Usage as a percentage of the limit, e.g. "50%", set once a limit above zero is known */
+    status?: string | undefined;
 }
 export interface QuotaResponse {
     /** Mailbox path this quota applies to */
     path: string;
-    /** Storage quota if provided by server */
-    storage?: {
-        /** Used storage in bytes */
-        used: number;
-        /** Total storage available */
-        limit: number;
-    } | undefined;
-    /** Message count quota if provided by server */
-    messages?: {
-        /** Stored messages */
-        used: number;
-        /** Maximum messages allowed */
-        limit: number;
-    } | undefined;
-    [resource: string]: any;
+    /** The quota root the server reported for the mailbox, if any */
+    quotaRoot?: string | undefined;
+    /** The STORAGE resource, if the server reports one */
+    storage?: QuotaResource | undefined;
+    /** The MESSAGE resource, if the server reports one */
+    message?: QuotaResource | undefined;
+    /** Any other resource the server reports, under its lowercased name (e.g. "mailbox") */
+    [resource: string]: QuotaResource | string | undefined;
 }
 /**
  * Status data items to request with `status()` or the `statusQuery` listing option
@@ -616,6 +622,14 @@ export interface DownloadObject {
     /** Streamed content */
     content: Readable;
 }
+/**
+ * What `download()` resolves with when there is nothing to download: no mailbox is selected, or
+ * the message or part was not found. Check `content` before using the result.
+ */
+export interface DownloadNotFound {
+    meta?: undefined;
+    content?: undefined;
+}
 export interface DownloadOptions {
     /** If true then uses UID number instead of sequence number for `range` */
     uid?: boolean | undefined;

package/node_modules/imapflow/package.json

@@ -1,6 +1,6 @@
 {
     "name": "imapflow",
-    "version": "2.0.7",
+    "version": "2.1.0",
     "description": "IMAP Client for Node",
     "type": "module",
     "main": "./dist/cjs/imap-flow.js",
@@ -47,7 +47,7 @@
         "test:rev2": "bash test/integration/run-rev2-tests.sh",
         "format": "prettier --write \"**/*.{js,cjs,ts,json,md,yml,yaml}\"",
         "format:check": "prettier --check \"**/*.{js,cjs,ts,json,md,yml,yaml}\"",
-        "lint": "eslint . && npm run typecheck",
+        "lint": "npm run typecheck && eslint .",
         "lint:fix": "eslint . --fix",
         "prepare": "npm run build",
         "update": "rm -rf node_modules package-lock.json && ncu -u && npm install"
@@ -73,12 +73,12 @@
         "eslint": "10.11.0",
         "eslint-config-prettier": "10.1.8",
         "globals": "17.12.0",
-        "prettier": "3.9.8",
+        "prettier": "3.9.9",
         "tsx": "4.23.15",
         "types-node-legacy": "npm:@types/node@20.0.0",
         "typescript": "6.0.3",
         "typescript-eslint": "8.70.1",
-        "wrangler": "4.136.3"
+        "wrangler": "4.142.0"
     },
     "dependencies": {
         "@zone-eu/mailsplit": "5.4.17",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withbuddi/buddi",
-  "version": "0.1.0-pre.19",
+  "version": "0.1.0-pre.21",
   "type": "module",
   "description": "Your personal agents, on your computer",
   "repository": {
@@ -17,7 +17,7 @@
     "buddi": "packages/install/dist/launcher.js"
   },
   "buddi": {
-    "notes": "### Added\n\n- `buddi uninstall` removes buddi from the machine: the background service, the data directory with its bundled Postgres, the secrets in the keychain (the file vault on Linux), the dashboard app, the extension pairing and the Telegram menu. It prints every path first and removes nothing until you type yes (or pass `--yes`). It takes one last backup and moves it to `~/buddi-backups`, where it stays; `--no-backup` skips it and `--keep-data` keeps the data directory and its secrets for a reinstall. In a source checkout it removes the service and the keychain entries, stops the Docker Postgres, and leaves the repository and `.env` alone.\n- [docs/dashboard.md](docs/dashboard.md): the dashboard place by place, with one thing to try in each. The docs index has a new group, \"Where you talk to buddi\": the dashboard, Telegram (now with example exchanges), the command line (now opening with what it is for and five examples), Claude Code and notifications.\n- `secret.list` tells an agent which of your secrets the browser may fill, by name, and where each may go, so it no longer asks you for the names. It never returns a value.\n- A goal can watch a number you report yourself, like your weight. When no plugin measures it, the agent creates the metric as it proposes the goal and takes the number you just said as the start; the card says \"measured by you, when you tell buddi\", and `goal.metrics` lists these metrics with the source `owner`.\n- `goal.record` writes down a number you tell any agent (\"285 this morning\", \"ran today\"), names the goal or the metric rather than whose goal it is, and answers with where the goal stands in one sentence. A number more than half away from the last one, or of the other sign, is asked about before it is kept.\n- When a week (or a day, for a daily goal) passes without you telling buddi the number, the goal's agent says so once, in the end-of-day message: \"You have not told me your weight this week.\" A watcher finding can ask for this with `notify: { urgency: 'today' }`.\n- Frequency goals: \"run three times a week\". A goal can count how many times you tell buddi something in each week (Monday to Sunday, your timezone) or month. The card says \"3 times a week\"; a week that closes short is said once, a streak milestone (\"4 weeks in a row\") once, and at the deadline the goal is met when more weeks met the count than fell short.\n- The Goals page shows the numbers you told buddi for a goal you measure, and a frequency goal's weeks as met, short or partial. In chat, `goal.status` draws your own values, or the count for each week, against the target.\n- Settings → Notifications has a Telegram panel: save or replace the bot token, see the phones you paired and unpair one, and pair another with the same QR code first run shows. Telegram appears in \"Where buddi reaches you\" as soon as the bot starts, without a restart.\n- On Telegram, the files a run saved arrive after its answer: pictures as photos, everything else as documents under their own names. A file over Telegram's 50 MB limit is named in one sentence that points to the Files page.\n- On Telegram, a table an agent draws arrives as monospace text when it fits one message, and as a CSV named after the table when it does not. A chart or another view answers with one line, and the dashboard link when a public address is set.\n- On Telegram, the answer streams into one message as the model writes it, updated at most every 1.5 seconds; the last update is the whole answer.\n- A new learning proposal (a skill, a rule for a plugin, a change to an agent's file) is a notification that waits for the end of your day and keeps quiet hours. On Telegram it arrives as a card with Keep and Discard; a tap decides it exactly as the Proposals page does, and a plain \"yes\" in the chat decides nothing.\n- [docs/telegram.md](docs/telegram.md): what the Telegram surface is and is not, pairing, what arrives on the phone, what you can send, the commands, the limits and what leaves this computer.\n- Three read-only Telegram commands: `/missions` lists the next five scheduled missions with their times and agents, `/goals` each open goal with its number and whether it is on track, behind or ahead, and `/where` the dashboard address when your phone can reach it.\n\n### Changed\n\n- The Claude and ChatGPT subscription pages ([anthropic-oauth.md](docs/anthropic-oauth.md), [codex-accounts.md](docs/codex-accounts.md)) are rewritten as reference: setup as the dashboard shows it, what it costs, what buddi keeps, what leaves the machine, limits and how to turn the sign-ins off. Across the docs, the packaged install comes first, `buddi init` and other checkout commands appear only as the source checkout path, and migration numbers and dated test notes are gone.\n- When a site mails a one-time code, an agent with the email tools reads it from your inbox before asking you: the newest message from that site, from the last ten minutes. The code is never stored or reused. The browser's guidance, `email.search` and the first assistant's \"How you work\" say so.\n- Every browser observation says when it was taken (\"Observed 12:04:35 UTC.\", and `observedAt` on the observation), and the agent observes once more after a click that submits or navigates before it says whether it worked, judging from the newest observation only. A sign-in that succeeded is no longer reported as failed from an older page.\n- A browser binding for a secret can name a wildcard origin, like `*.wikimedia.org`, so one binding covers a site's sign-in host and its pages. `*.` stands for the leftmost part only and may not sit on a public suffix such as `*.com` or `*.github.io`; the card and the use log still name the real site. A form data binding's origin is read the same way as a field binding's.\n- A secret's browser binding takes the site as you type it: a bare host becomes its https origin, a full address is cut to its origin, and anything else is refused with an example.\n- On Telegram a browser screenshot's caption no longer counts steps; the count appears only when five or fewer are left.\n- Signing in with Claude from the first run starts the account on the model catalogue's default for Claude, rather than a fixed Sonnet 5; Sonnet 5 is used only when the catalogue names none.\n- A goal that stays off track wakes its agent at most once per cadence for the same drift: once a week for a weekly goal, once a day for a daily one. The first drift still wakes it at once. A watcher's finding can set its own `cooldownMs`.\n- On Telegram, an answer longer than 4,096 characters keeps its first part in the message that said \"Working on it\" and sends the rest after it, split between paragraphs, instead of deleting that message.\n- The model list knows Claude Opus 5.5 (`claude-opus-5-5`, $4 and $20 a million tokens) and Fable 5.1; Sonnet 5 stays the default, at half the price. The context table knows Fable 5.1, Opus 5.5 and Sonnet 5 hold a million tokens.\n- Signing in with Claude from the first run opens the consent page itself; the button stays for a browser that blocks the window.\n- Signing in with a Claude or ChatGPT subscription is offered by default; `BUDDI_SUBSCRIPTION_SIGNINS=off` hides both. The setup wizard shows the Claude card first, with a line on the plan's monthly Agent SDK credits. `buddi doctor` says whether the sign-ins are offered or hidden.\n\n### Deprecated\n\n- `BUDDI_ANTHROPIC_OAUTH_EXPERIMENT` and `BUDDI_CODEX_EXPERIMENT` are no longer needed. For one release, setting either to `0` still hides that one sign-in, and `buddi doctor` names the new variable.\n\n### Fixed\n\n- A model account imported from an environment variable no longer writes a refused use to the Keys and secrets log on every reload: its key answers from the vault directly, as the docs say.\n- When you are looking at the tab an agent wants to act or fill in, the agent now asks you once to switch to another tab or window, instead of failing twice and retrying.\n- `secret.fill` fills a username. A secret bound to a site as a browser field now goes into any field on that site, not only a password field, and the card names the field.\n\n…"
+    "notes": "### Changed\n\n- Recording in the composer is now a clear Listening state with a live waveform, a ✓ to transcribe and a × to discard, with Enter and Escape doing the same.\n- The dot on Settings, which means a newer buddi is ready, now shows on the System entry too, so it leads to the Version panel instead of pointing at nothing.\n\n- Asking an agent to open an app you have not allowed for computer control now asks you with a card, Once or Always, instead of sending you to Settings. Always adds the app to the list.\n- Plugin pages can show a progress bar; the Speech page uses it for the model downloads.\n- Settings → Speech asks which languages you speak instead of one language hint, so a French note and an English one are both heard right on this computer, and it lists the models your account offers instead of asking you to type one.\n- Plugin pages can offer a select that takes several choices (`multiple: true`).\n- Settings → Speech: a play button beside the voice speaks a short sample in the browser with the chosen service and voice; nothing is saved. The old Test that wrote a file to Files is gone.\n- Plugin pages can play a sound a tool returns (`play: { mime, data }`), and a select can carry a small button of its own (`action`) that runs a tool with the form's unsaved values.\n- Choosing several things on a plugin page, the languages you speak for example, is done with chips and an Add list instead of a scrolling box.\n- A voice note on Telegram tells the agent which language you spoke in, so it answers in it.\n- Settings → Speech: with Kokoro, you choose a voice for each language you speak, English and French each with their own, and a reply picks the voice of its language.\n- Plugin page forms can lay fields out three to a row; Settings → Speech uses it for the speaking voices.\n- Voice on Telegram: a voice note is no longer echoed back as text; `/voice` chooses when to speak (spoken, always, off) and what to send (the voice note alone, or with the text), also on Settings → Speech. What is spoken is rewritten for the ear first: handles read as names, dates and amounts as words, links as their site, no markdown.\n\n### Added\n\n- First run and Add account offer Gemini: paste a Google AI key and buddi connects through Google's OpenAI-compatible endpoint, lists the models and picks the newest Pro. Gemini's context window and prices are known to the usage view.\n- Kokoro on this computer now speaks French, Spanish, Italian, Portuguese and Hindi with its own voices for those languages (espeak-ng, fetched with the model, does the pronunciation); a reply in one of them picks the matching voice. Japanese and Chinese still need a cloud speaker.\n- Home has a composer: write to your front desk straight from the first page, by keyboard or voice, and the conversation opens with the answer. `/` focuses the composer anywhere.\n- On the dashboard, a microphone in the composer turns what you say into text (Shift to send at once), and a speaker toggle reads each reply aloud, through the listening and speaking you chose in Settings → Speech.\n- Prompt caching: buddi marks the tool list, the instructions and the earlier conversation for Anthropic's cache and keys OpenAI's automatic cache by conversation, so a long conversation's repeated prompt is billed at the cached rate. Usage shows cached tokens separately and the cost estimate prices them.\n- Voice on Telegram: a voice note is transcribed and answered, spoken back as a voice note when you spoke (`/voice` chooses spoken, always or off). Listening and speaking can run on this computer: Settings → Speech installs Whisper and Kokoro (about 250 MB and 90 MB) with one button or `buddi speech install`; nothing leaves the machine then.\n- A speech plugin: agents can listen to an audio file (`speech.transcribe`) and answer with a voice (`speech.say`) through an OpenAI or OpenAI-compatible account chosen on Settings → Speech, with daily caps.\n- Under each reply, Copy and Read aloud. buddi's front desk can now make an audio file on request (`speech.say`), and an audio file in a conversation shows as a small player with a download link.\n\n### Fixed\n\n- Local Whisper and Kokoro now run in their own thread. A long reply read aloud used to freeze the whole of buddi, dashboard and Telegram included, until it finished.\n- Computer control: an app name with a typo now gets the close matches back (\"Did you mean Vocito?\"), and when your own window pushed the agent's app behind, the agent brings it forward again itself instead of asking you to."
   },
   "files": [
     "packages",