npm - forge-openclaw-plugin - Versions diffs - 0.2.73 → 0.2.80 - Mend

forge-openclaw-plugin 0.2.73 → 0.2.80

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (17) hide show

package/dist/assets/{board-B0TuXl4u.js → board-DKxKOwax.js} +1 -1
package/dist/assets/index-Chc9CWm5.css +1 -0
package/dist/assets/{index-clNilMKr.js → index-DEoJdpz5.js} +56 -56
package/dist/assets/{motion-Dmjq6HPm.js → motion-CM4AfIqo.js} +1 -1
package/dist/assets/{table-CKKimYN1.js → table-BUeQ9wzR.js} +1 -1
package/dist/assets/{ui-JBdCP1Qb.js → ui-3Wd4pVaA.js} +1 -1
package/dist/assets/{vendor-fiXu5f59.js → vendor-BVU0cZC9.js} +243 -240
package/dist/index.html +7 -7
package/dist/server/server/src/app.js +69 -19
package/dist/server/server/src/health.js +254 -9
package/dist/server/server/src/openapi.js +12 -0
package/dist/server/server/src/services/devrage.js +20 -6
package/openclaw.plugin.json +1 -1
package/package.json +1 -1
package/skills/forge-openclaw/SKILL.md +3 -2
package/skills/forge-openclaw/entity_conversation_playbooks.md +29 -17
package/dist/assets/index-DtT3Y-Bj.css +0 -1

package/dist/index.html CHANGED Viewed

@@ -13,14 +13,14 @@
     />
     <link rel="icon" type="image/png" href="/forge/assets/favicon-BCHm9dUV.ico" />
     <link rel="alternate icon" href="/forge/assets/favicon-BCHm9dUV.ico" />
-    <script type="module" crossorigin src="/forge/assets/index-clNilMKr.js"></script>
-    <link rel="modulepreload" crossorigin href="/forge/assets/vendor-fiXu5f59.js">
-    <link rel="modulepreload" crossorigin href="/forge/assets/board-B0TuXl4u.js">
-    <link rel="modulepreload" crossorigin href="/forge/assets/ui-JBdCP1Qb.js">
-    <link rel="modulepreload" crossorigin href="/forge/assets/motion-Dmjq6HPm.js">
-    <link rel="modulepreload" crossorigin href="/forge/assets/table-CKKimYN1.js">
+    <script type="module" crossorigin src="/forge/assets/index-DEoJdpz5.js"></script>
+    <link rel="modulepreload" crossorigin href="/forge/assets/vendor-BVU0cZC9.js">
+    <link rel="modulepreload" crossorigin href="/forge/assets/board-DKxKOwax.js">
+    <link rel="modulepreload" crossorigin href="/forge/assets/ui-3Wd4pVaA.js">
+    <link rel="modulepreload" crossorigin href="/forge/assets/motion-CM4AfIqo.js">
+    <link rel="modulepreload" crossorigin href="/forge/assets/table-BUeQ9wzR.js">
     <link rel="stylesheet" crossorigin href="/forge/assets/vendor-B-Lq_OG3.css">
-    <link rel="stylesheet" crossorigin href="/forge/assets/index-DtT3Y-Bj.css">
+    <link rel="stylesheet" crossorigin href="/forge/assets/index-Chc9CWm5.css">
   </head>
   <body class="bg-canvas text-ink antialiased">
     <div id="root"></div>

package/dist/server/server/src/app.js CHANGED Viewed

@@ -2895,7 +2895,7 @@ const AGENT_ONBOARDING_ENTITY_CATALOG = [
         searchHints: [
             "Clarify whether the user wants flow discovery, editing, execution, published output, run inspection, or node-level output before choosing the route.",
             "Distinguish flow contract, published output, run history, latest-node-output, and chat follow-up questions before reaching for a route.",
-            "If the user is still deciding how to run or edit a flow, read flow detail or the box catalog before asking them for payload structure."
+            "If the user is still deciding how to run or edit a flow, read flow detail or the box catalog before asking them for structured input details."
         ],
         fieldGuide: []
     }),
@@ -2969,7 +2969,7 @@ const AGENT_ONBOARDING_CONVERSATION_RULES = [
     "Do not minimize functional analysis, trigger chains, behavior patterns, modes, beliefs, or schema themes. After at least one concrete example is clear, offer one careful interpretive hypothesis when it would help the user understand what the reaction may be protecting, predicting, relieving, or costing.",
     "Phrase Psyche interpretive hypotheses as collaborative and testable, not as verdicts. Ask whether the hypothesis lands or needs correction before turning it into a saved belief, pattern, mode, trigger report, or note.",
     "Once the Movement, Life Force, or Workbench job is clear, speak in product nouns such as timeline, overlay, weekday template, published output, run detail, or node result instead of generic record language.",
-    "If the next answer would not change the route, wording, timing, or write payload in a meaningful way, stop asking and act.",
+    "If the next answer would not change the route, wording, timing, or write shape in a meaningful way, stop asking and act.",
     "Before saving, briefly summarize the working formulation in the user's own language when that would reduce ambiguity.",
     "Once the record is clear enough to name, stop exploring broadly and ask only for the last structural detail that still matters.",
     "If the record is already clear enough to save, save it instead of performing a ceremonial extra question.",
@@ -2980,7 +2980,7 @@ const AGENT_ONBOARDING_CONVERSATION_RULES = [
     "When the user already named a precise correction or review target, do not widen back out into a meta lane question. Confirm only the missing route-selecting detail and then act.",
     "Once the route family is clear, say it plainly enough that another agent could follow the same path without guessing.",
     "For Movement specifically, treat missing-data corrections as user-defined overlay boxes unless the user is editing an already-recorded stay or trip. When the user already gave a clear instruction like 'that missing block was home', act after only the last ambiguity is resolved.",
-    "For action workflows such as task_run, work_adjustment, questionnaire_run, preference_judgment, preference_signal, and self_observation, keep the question focused on the missing action payload and do not downgrade the request into generic batch CRUD.",
+    "For action workflows such as task_run, work_adjustment, questionnaire_run, preference_judgment, preference_signal, and self_observation, keep the question focused on the missing action detail and do not downgrade the request into generic batch CRUD.",
     "For read-model-only health surfaces such as sleep_overview and sports_overview, use the dedicated overview reads first when the user wants review, pattern interpretation, recovery context, or training-load context. Move to sleep_session or workout_session writes only after one specific stored session needs enrichment.",
     "For normal stored Preferences and questionnaire records, use batch CRUD by default; switch to dedicated action routes only for judgments, signals, run answers, clone/draft/publish lifecycle, or visual comparison gameplay.",
     "When the user wants to remember a book, article, paper, source, concept, person, conversation, project reference, recurring explanation, or personal manual, consider wiki_page before note or self_observation.",
@@ -3344,26 +3344,28 @@ const AGENT_ONBOARDING_ENTITY_CONVERSATION_PLAYBOOKS = [
     },
     {
         focus: "questionnaire_instrument",
-        openingQuestion: "What would this questionnaire help someone notice or track?",
-        coachingGoal: "Clarify whether the user is authoring a reusable questionnaire and what the instrument is for.",
+        openingQuestion: "What honest moment or decision should this questionnaire help someone notice or track?",
+        coachingGoal: "Clarify whether the user is authoring a reusable questionnaire and what honest moment, pattern, or decision the instrument should help someone notice.",
         askSequence: [
-            "Ask what the questionnaire is meant to measure or surface.",
+            "Ask what honest moment, pattern, or decision the questionnaire should help someone notice.",
             "Ask who it is for and when it should be used.",
-            "Ask what kind of honest moment or decision it should help someone answer before getting into item wording.",
-            "Reflect the practical use case back in plain language.",
+            "Ask what the respondent should understand after answering that they might otherwise miss.",
+            "Reflect the practical use case back in plain language before asking for item wording.",
             "Ask what would make the instrument distinct instead of redundant if a near-duplicate risk is visible.",
+            "Ask about item shape, response scale, scoring, or provenance only after the purpose and use context are steady.",
             "Use batch CRUD for ordinary questionnaire instrument create or update work; use clone, draft, and publish actions only for version lifecycle.",
             "Move to draft creation once the purpose is clear."
         ]
     },
     {
         focus: "questionnaire_run",
-        openingQuestion: "Do you want to start, continue, review, or finish a questionnaire run?",
-        coachingGoal: "Clarify whether the user wants to start, continue, or complete one answer session.",
+        openingQuestion: "What do you want from this questionnaire run right now: start, continue, review, or finish it?",
+        coachingGoal: "Clarify whether the user wants to start, continue, review, or complete one answer session without turning the run into a mechanical form fill.",
         askSequence: [
             "Ask what the user wants from the run right now: start, continue, review, or finish.",
             "Ask which questionnaire or existing run this is about.",
             "If the user wants to continue or finish, ask what feels most stuck, unfinished, or important before asking for more content.",
+            "If the user is reviewing answers, ask what the run should help them understand before proposing edits or completion.",
             "Use the dedicated questionnaire run start, read, update, and complete routes instead of generic entity CRUD.",
             "If answering is still in progress, ask only for the next answer or note that matters."
         ]
@@ -3427,7 +3429,7 @@ const AGENT_ONBOARDING_ENTITY_CONVERSATION_PLAYBOOKS = [
             "If the user wants to send a follow-up into a saved flow chat, confirm the saved flow and what the message should accomplish instead of treating it as a new run or note.",
             "If the user already named the flow and action clearly, skip the meta lane question and ask only for the missing run, node, or output scope.",
             "If the user wants a stable public input contract or published output, prefer those dedicated reads instead of detouring through run history first.",
-            "If the user is still shaping a payload or edit, prefer flow detail or box catalog reads before asking for structured inputs.",
+            "If the user is still shaping one-off inputs or an edit, prefer flow detail or box catalog reads before asking for structured inputs.",
             "If the user is debugging one failed run, ask whether the useful artifact is the run summary, one node result, the latest node output, or the published output before you start asking for edits.",
             "Prefer flow detail or published-output reads for stable contracts, and use run or node-result routes only when the user is asking about execution history or debugging.",
             "Route to the dedicated workbench route family once the execution lane is clear."
@@ -4474,7 +4476,7 @@ function buildAgentOnboardingPayload(request) {
             taskTimebox: "A planned or live calendar slot tied to a task. Timeboxes can be suggested in advance or created automatically from active task runs.",
             workAdjustment: "A work adjustment is a truthful signed minute correction on an existing task or project when real work happened but no live run was active.",
             movement: "Forge Movement is the first-class mobility surface. It is a timeline of stays and trips: stays capture time spent in the same place, and trips capture travel between places. Use it for time-in-place questions, travel-history review, specific stay or trip edits, selected-span aggregates, known places, and links to other Forge records rather than pretending stays and trips are normal batch CRUD entities.",
-            lifeForce: "Life Force is Forge's energy-budget and fatigue model. Read it through the dedicated life-force payload and update it through focused profile, weekday-template, and fatigue-signal routes rather than generic entity CRUD.",
+            lifeForce: "Life Force is Forge's energy-budget and fatigue model. Read it through the dedicated life-force state and update it through focused profile, weekday-template, and fatigue-signal routes rather than generic entity CRUD.",
             workbench: "Workbench is Forge's graph-flow execution system. Treat flows, runs, published outputs, node results, and latest-node-output reads as a dedicated API family instead of a normal entity-batch surface.",
             psyche: "Forge Psyche is the reflective domain for values, patterns, behaviors, beliefs, modes, flashcards, and trigger reports. It is sensitive and should be handled deliberately."
         },
@@ -4491,7 +4493,10 @@ function buildAgentOnboardingPayload(request) {
             emotionDefinition: "An emotion definition is reusable emotion vocabulary for trigger reports. Reports can either reference one or fall back to raw labels.",
             triggerReport: "A trigger report is the one-episode incident chain: situation, emotions, thoughts, behaviors, consequences, extra mode labels, schema themes, and next moves."
         },
-        psycheCoachingPlaybooks: AGENT_ONBOARDING_PSYCHE_PLAYBOOKS.map(enrichConversationPlaybookWithRouteInfo),
+        psycheCoachingPlaybooks: AGENT_ONBOARDING_PSYCHE_PLAYBOOKS.map((playbook) => enrichConversationPlaybookWithRouteInfo({
+            ...playbook,
+            openingQuestion: playbook.exampleQuestions[0] ?? playbook.askSequence[0] ?? ""
+        })),
         conversationRules: AGENT_ONBOARDING_CONVERSATION_RULES,
         entityConversationPlaybooks: AGENT_ONBOARDING_ENTITY_CONVERSATION_PLAYBOOKS.map(enrichConversationPlaybookWithRouteInfo),
         relationshipModel: [
@@ -4637,6 +4642,31 @@ function buildAgentOnboardingPayload(request) {
                     classification: "specialized_domain_surface",
                     aliases: ["movement", "Movement"],
                     summary: "Dedicated movement workspace API. Use these routes for stays, trips, time-in-place questions, visited places, trip detail, selection aggregates, user-defined overlays, and repair actions on already-recorded movement data.",
+                    routeKeys: [
+                        "day",
+                        "month",
+                        "allTime",
+                        "timeline",
+                        "places",
+                        "boxDetail",
+                        "tripDetail",
+                        "selection",
+                        "settings",
+                        "settingsUpdate",
+                        "placeCreate",
+                        "placeUpdate",
+                        "userBoxCreate",
+                        "userBoxPreflight",
+                        "userBoxUpdate",
+                        "userBoxDelete",
+                        "automaticBoxInvalidate",
+                        "stayUpdate",
+                        "stayDelete",
+                        "tripUpdate",
+                        "tripDelete",
+                        "tripPointUpdate",
+                        "tripPointDelete"
+                    ],
                     routeSelectionQuestions: [
                         "Is the user asking for a day, month, all-time, timeline, place, trip detail, selected-span, or settings answer?",
                         "Is this a missing-gap overlay, a saved-overlay repair, or an edit to one already-recorded stay, trip, or trip point?",
@@ -4709,6 +4739,7 @@ function buildAgentOnboardingPayload(request) {
                     classification: "specialized_domain_surface",
                     aliases: ["life_force", "life-force", "Life Force"],
                     summary: "Dedicated life-force API. Use it to read the current energy budget, drains, recommendations, and warnings, then patch only the parts that are meant to be user-controlled.",
+                    routeKeys: ["overview", "profile", "weekdayTemplate", "fatigueSignal"],
                     routeSelectionQuestions: [
                         "Is the user trying to understand the overview, change durable profile assumptions, change a weekday curve, or log a right-now fatigue signal?",
                         "Are they describing a repeatable weekly shape or a one-off current state?",
@@ -4742,6 +4773,7 @@ function buildAgentOnboardingPayload(request) {
                     classification: "specialized_domain_surface",
                     aliases: ["lifeForce", "life-force", "Life Force"],
                     summary: "Alias for the dedicated Life Force API keyed to the entity-style name `life_force`. Use the same overview, profile, weekday-template, and fatigue-signal routes as `lifeForce`.",
+                    routeKeys: ["overview", "profile", "weekdayTemplate", "fatigueSignal"],
                     routeSelectionQuestions: [
                         "Is the user trying to understand the overview, change durable profile assumptions, change a weekday curve, or log a right-now fatigue signal?",
                         "Are they describing a repeatable weekly shape or a one-off current state?",
@@ -4776,6 +4808,24 @@ function buildAgentOnboardingPayload(request) {
                     classification: "specialized_domain_surface",
                     aliases: ["workbench", "Workbench"],
                     summary: "Dedicated graph-flow API. Use it for flow catalog reads, flow CRUD, execution, run history, published outputs, node results, and latest successful node outputs.",
+                    routeKeys: [
+                        "listFlows",
+                        "flowById",
+                        "flowBySlug",
+                        "publishedOutput",
+                        "runs",
+                        "runDetail",
+                        "runNodes",
+                        "nodeResult",
+                        "latestNodeOutput",
+                        "boxCatalog",
+                        "createFlow",
+                        "updateFlow",
+                        "deleteFlow",
+                        "runFlow",
+                        "runByPayload",
+                        "chatFlow"
+                    ],
                     routeSelectionQuestions: [
                         "Is the job flow discovery, flow creation, flow editing, flow deletion, execution, run history, published output, run detail, node result, latest node output, or flow chat follow-up?",
                         "Does the user need a stable public contract or one execution artifact?",
@@ -4825,8 +4875,8 @@ function buildAgentOnboardingPayload(request) {
                         "Workbench is a dedicated execution surface, not a batch CRUD entity family.",
                         "Route-selection questions are internal. User-facing questions should ask whether the user needs the saved flow, its input contract, one run, one node, or the public result instead of reciting Workbench route keys.",
                         "Use the flow routes when the agent needs stable public input contracts, published outputs, node-level results, or reusable execution history.",
-                        "If the user is still figuring out inputs or editable structure, read flow detail or box catalog before asking them to author a payload from memory.",
-                        "For flow creation, clarify what the flow should reliably produce, which input contract it should accept, and which first node or box anchors the flow before asking for structured payload details.",
+                        "If the user is still figuring out inputs or editable structure, read flow detail or box catalog before asking them to reconstruct structured inputs from memory.",
+                        "For flow creation, clarify what the flow should reliably produce, which input contract it should accept, and which first node or box anchors the flow before asking for structured input details.",
                         "For flow edits, ask what behavior should change while preserving the public contract unless the user explicitly wants the contract changed.",
                         "For flow deletion, confirm the saved flow and whether published outputs or run history need preservation elsewhere before using the delete route.",
                         "For saved flow chat follow-ups, use POST /api/v1/workbench/flows/:id/chat only when the user wants to continue a flow-specific conversation. Do not turn that into a new run, note, or generic entity update unless the user asks.",
@@ -4891,8 +4941,8 @@ function buildAgentOnboardingPayload(request) {
                 ],
                 verifyCommands: [
                     `curl -s ${origin}/api/v1/health`,
-                    "openclaw plugins install ./projects/forge/openclaw-plugin",
-                    "openclaw plugins info forge-openclaw-plugin",
+                    "openclaw plugins install --link --dangerously-force-unsafe-install ./projects/forge/openclaw-plugin",
+                    "openclaw plugins inspect forge-openclaw-plugin --runtime",
                     "openclaw gateway restart",
                     "openclaw forge onboarding",
                     "openclaw forge health"
@@ -4900,7 +4950,7 @@ function buildAgentOnboardingPayload(request) {
                 configNotes: [
                     "Localhost and Tailscale targets can usually use the operator-session path without a long-lived token.",
                     "The operator-session route is /api/v1/auth/operator-session, so trusted local OpenClaw onboarding does not need a browser confirmation step.",
-                    "If your current OpenClaw build blocks the repo-local install because of the package scanner, keep the repo folder on plugins.load.paths and verify that plugins info still points at the local Forge source path before continuing.",
+                    "If your current OpenClaw build blocks the repo-local install because of the package scanner, keep the repo folder on plugins.load.paths and verify that plugins inspect --runtime still points at the local Forge source path before continuing.",
                     "Use a distinct actor label such as Albert (claw) so OpenClaw-originated work stays obvious in Forge provenance.",
                     "Create each agent as a Forge bot user, then use userId or userIds in tool inputs whenever the agent should focus on one human, one bot, or a specific collaboration slice.",
                     "If you genuinely need a durable managed token, create it through /api/v1/settings/tokens instead of sending the operator into the Settings UI."
@@ -7620,7 +7670,7 @@ export async function buildServer(options = {}) {
     app.post("/api/v1/mobile/healthkit/sync-sessions", async (request) => ({
         upload: startMobileHealthSyncSession(mobileHealthSyncSessionStartSchema.parse(request.body ?? {}))
     }));
-    app.post("/api/v1/mobile/healthkit/sync-sessions/:id/chunks", { bodyLimit: 1_600_000 }, async (request) => {
+    app.post("/api/v1/mobile/healthkit/sync-sessions/:id/chunks", { bodyLimit: 40_000_000 }, async (request) => {
         const { id } = request.params;
         const rawPayloadJson = JSON.stringify((request.body ?? {}).payload ?? {});
         return {

package/dist/server/server/src/health.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { createHash, randomUUID } from "node:crypto";
+import { inflateSync } from "node:zlib";
 import { z } from "zod";
 import { getDatabase, runInTransaction } from "./db.js";
 import { HttpError } from "./errors.js";
@@ -260,11 +261,13 @@ export const mobileHealthSyncSchema = z.object({
     screenTime: screenTimeSyncPayloadSchema.default({})
 });
 const HEALTH_MOBILE_SYNC_SCHEMA_VERSION = "healthkit-sync-v2";
-const HEALTH_MOBILE_SYNC_CHUNK_TARGET_BYTES = 512_000;
-const HEALTH_MOBILE_SYNC_CHUNK_MAX_BYTES = 1_000_000;
+const HEALTH_MOBILE_SYNC_CHUNK_TARGET_BYTES = 12_000_000;
+const HEALTH_MOBILE_SYNC_CHUNK_MAX_BYTES = 24_000_000;
 const HEALTH_MOBILE_SYNC_CHUNK_PAYLOAD_ENCODING = "payload_json_base64";
+const HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING = "payload_json_deflate_base64";
 const HEALTH_MOBILE_SYNC_ACCEPTED_CHUNK_PAYLOAD_ENCODINGS = [
     HEALTH_MOBILE_SYNC_CHUNK_PAYLOAD_ENCODING,
+    HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING,
     "legacy_payload_object"
 ];
 const HEALTH_MOBILE_SYNC_SESSION_TTL_MS = 1000 * 60 * 60 * 24;
@@ -343,7 +346,9 @@ export const mobileHealthSyncChunkSchema = z.object({
     family: mobileHealthSyncFamilySchema,
     recordCount: z.number().int().nonnegative().default(0),
     byteCount: z.number().int().nonnegative().default(0),
+    compressedByteCount: z.number().int().nonnegative().optional(),
     checksumSha256: z.string().trim().min(1),
+    payloadJsonDeflateBase64: z.string().trim().min(1).optional(),
     payloadJsonBase64: z.string().trim().min(1).optional(),
     payload: mobileHealthSyncChunkPayloadSchema.default({})
 });
@@ -2691,6 +2696,13 @@ function chunkPayloadJson(payload) {
 function chunkPayloadChecksum(payloadJson) {
     return createHash("sha256").update(payloadJson).digest("hex");
 }
+function normalizedChunkChecksum(checksum) {
+    const normalized = checksum.trim().toLowerCase();
+    if (!/^[a-f0-9]{64}$/.test(normalized)) {
+        throw new HttpError(400, "invalid_chunk_checksum", "The HealthKit sync chunk checksum is invalid.");
+    }
+    return normalized;
+}
 function parseBase64ChunkPayload(payloadJsonBase64, context) {
     const compactBase64 = payloadJsonBase64.replace(/\s/g, "");
     if (compactBase64.length === 0 ||
@@ -2724,10 +2736,71 @@ function parseBase64ChunkPayload(payloadJsonBase64, context) {
         payload: parsedPayload,
         payloadJson,
         byteCount: decoded.length,
+        compressedByteCount: undefined,
         mode: "payload_json_base64"
     };
 }
+function parseDeflateBase64ChunkPayload(payloadJsonDeflateBase64, context) {
+    const compactBase64 = payloadJsonDeflateBase64.replace(/\s/g, "");
+    if (compactBase64.length === 0 ||
+        compactBase64.length % 4 === 1 ||
+        !/^[A-Za-z0-9+/]*={0,2}$/.test(compactBase64)) {
+        throw new HttpError(400, "invalid_chunk_payload", "The HealthKit sync compressed payload encoding is invalid.", { mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING });
+    }
+    const compressed = Buffer.from(compactBase64, "base64");
+    const recoded = compressed.toString("base64").replace(/=+$/g, "");
+    if (recoded !== compactBase64.replace(/=+$/g, "")) {
+        throw new HttpError(400, "invalid_chunk_payload", "The HealthKit sync compressed payload encoding is invalid.", { mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING });
+    }
+    let decoded;
+    try {
+        decoded = inflateSync(compressed);
+    }
+    catch (error) {
+        console.warn("[healthkit-sync] invalid compressed chunk payload", {
+            syncSessionId: context.syncSessionId,
+            chunkId: context.chunkId,
+            family: context.family,
+            mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING,
+            compressedBytes: compressed.length,
+            error: error instanceof Error ? error.message : String(error)
+        });
+        throw new HttpError(400, "invalid_chunk_payload", "The HealthKit sync compressed payload cannot be decompressed.", { mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING });
+    }
+    const payloadJson = decoded.toString("utf8");
+    let rawPayload;
+    try {
+        rawPayload = JSON.parse(payloadJson);
+    }
+    catch (error) {
+        console.warn("[healthkit-sync] invalid compressed chunk JSON payload", {
+            syncSessionId: context.syncSessionId,
+            chunkId: context.chunkId,
+            family: context.family,
+            mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING,
+            bytes: decoded.length,
+            compressedBytes: compressed.length,
+            error: error instanceof Error ? error.message : String(error)
+        });
+        throw new HttpError(400, "invalid_chunk_payload", "The HealthKit sync compressed payload is not valid JSON.", { mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING });
+    }
+    const parsedPayload = mobileHealthSyncChunkPayloadSchema.parse(rawPayload);
+    return {
+        payload: parsedPayload,
+        payloadJson,
+        byteCount: decoded.length,
+        compressedByteCount: compressed.length,
+        mode: HEALTH_MOBILE_SYNC_COMPRESSED_CHUNK_PAYLOAD_ENCODING
+    };
+}
 function resolveChunkWirePayload(parsed, syncSessionId, rawPayloadJson) {
+    if (parsed.payloadJsonDeflateBase64) {
+        return parseDeflateBase64ChunkPayload(parsed.payloadJsonDeflateBase64, {
+            syncSessionId,
+            chunkId: parsed.chunkId,
+            family: parsed.family
+        });
+    }
     if (parsed.payloadJsonBase64) {
         return parseBase64ChunkPayload(parsed.payloadJsonBase64, {
             syncSessionId,
@@ -2740,6 +2813,7 @@ function resolveChunkWirePayload(parsed, syncSessionId, rawPayloadJson) {
         payload: parsed.payload,
         payloadJson,
         byteCount: Buffer.byteLength(payloadJson, "utf8"),
+        compressedByteCount: undefined,
         mode: "legacy_payload_object"
     };
 }
@@ -2779,6 +2853,76 @@ function summarizeChunkPayload(family, payload) {
             };
     }
 }
+function mobileSyncSessionPairing(session) {
+    const pairing = getDatabase()
+        .prepare(`SELECT * FROM companion_pairing_sessions WHERE id = ?`)
+        .get(session.pairing_session_id);
+    if (!pairing) {
+        throw new HttpError(404, "pairing_invalid", "The sync pairing no longer exists.");
+    }
+    return pairing;
+}
+function mobileSyncSessionMetadata(session) {
+    return safeJsonParse(session.source_metadata_json, {});
+}
+function applyWorkoutSummaryChunkImmediately(session, workouts) {
+    if (workouts.length === 0) {
+        return;
+    }
+    const pairing = mobileSyncSessionPairing(session);
+    const metadata = mobileSyncSessionMetadata(session);
+    const device = metadata.device ?? {
+        name: pairing.device_name ?? "iPhone",
+        platform: pairing.platform ?? "ios",
+        appVersion: pairing.app_version ?? "",
+        sourceDevice: pairing.device_name ?? "iPhone"
+    };
+    runInTransaction(() => {
+        const now = nowIso();
+        const runId = `hir_${randomUUID().replaceAll("-", "").slice(0, 10)}`;
+        let createdCount = 0;
+        let updatedCount = 0;
+        let mergedCount = 0;
+        getDatabase()
+            .prepare(`INSERT INTO health_import_runs (
+           id, pairing_session_id, user_id, source, source_device, status, payload_summary_json,
+           imported_count, created_count, updated_count, merged_count, imported_at, created_at, updated_at
+         )
+         VALUES (?, ?, ?, 'ios_companion', ?, 'running', '{}', 0, 0, 0, 0, ?, ?, ?)`)
+            .run(runId, pairing.id, pairing.user_id, device.sourceDevice, now, now, now);
+        for (const workout of workouts) {
+            const result = insertOrUpdateWorkoutSession(pairing, workout);
+            if (result.mode === "created") {
+                createdCount += 1;
+            }
+            else if (result.mode === "merged") {
+                mergedCount += 1;
+            }
+            else {
+                updatedCount += 1;
+            }
+            summarizeUserHealthDay(pairing.user_id, dayKey(workout.startedAt));
+        }
+        getDatabase()
+            .prepare(`UPDATE companion_pairing_sessions
+         SET status = 'healthy', device_name = ?, platform = ?, app_version = ?,
+             last_seen_at = ?, last_sync_at = ?, last_sync_error = NULL,
+             paired_at = COALESCE(paired_at, ?), updated_at = ?
+         WHERE id = ?`)
+            .run(device.name, device.platform, device.appVersion, now, now, now, now, pairing.id);
+        getDatabase()
+            .prepare(`UPDATE health_import_runs
+         SET source_device = ?, status = 'completed', payload_summary_json = ?,
+             imported_count = ?, created_count = ?, updated_count = ?, merged_count = ?,
+             imported_at = ?, updated_at = ?
+         WHERE id = ?`)
+            .run(device.sourceDevice, JSON.stringify({
+            progressiveChunk: true,
+            syncSessionId: session.id,
+            workouts: workouts.length
+        }), workouts.length, createdCount, updatedCount, mergedCount, now, now, runId);
+    });
+}
 function updateMobileSyncSessionProgress(syncSessionId) {
     const chunks = getDatabase()
         .prepare(`SELECT family, record_count, byte_count
@@ -2837,7 +2981,7 @@ export function startMobileHealthSyncSession(payload) {
                 chunkMaxBytes: HEALTH_MOBILE_SYNC_CHUNK_MAX_BYTES,
                 chunkPayloadEncoding: HEALTH_MOBILE_SYNC_CHUNK_PAYLOAD_ENCODING,
                 acceptedPayloadEncodings: HEALTH_MOBILE_SYNC_ACCEPTED_CHUNK_PAYLOAD_ENCODINGS,
-                supportsCompression: false,
+                supportsCompression: true,
                 acceptedFamilies: safeJsonParse(existing.requested_families_json, parsed.requestedFamilies),
                 receivedChunkIds
             };
@@ -2866,13 +3010,14 @@ export function startMobileHealthSyncSession(payload) {
         chunkMaxBytes: HEALTH_MOBILE_SYNC_CHUNK_MAX_BYTES,
         chunkPayloadEncoding: HEALTH_MOBILE_SYNC_CHUNK_PAYLOAD_ENCODING,
         acceptedPayloadEncodings: HEALTH_MOBILE_SYNC_ACCEPTED_CHUNK_PAYLOAD_ENCODINGS,
-        supportsCompression: false,
+        supportsCompression: true,
         acceptedFamilies: parsed.requestedFamilies,
         receivedChunkIds: []
     };
 }
 export function ingestMobileHealthSyncChunk(syncSessionId, payload, rawPayloadJson) {
     const parsed = mobileHealthSyncChunkSchema.parse(payload);
+    const clientChecksum = normalizedChunkChecksum(parsed.checksumSha256);
     const session = ensureRunningMobileSyncSession(syncSessionId);
     const requestedFamilies = safeJsonParse(session.requested_families_json, []);
     if (requestedFamilies.length > 0 &&
@@ -2884,7 +3029,7 @@ export function ingestMobileHealthSyncChunk(syncSessionId, payload, rawPayloadJs
        WHERE sync_session_id = ? AND chunk_id = ?`)
         .get(syncSessionId, parsed.chunkId);
     if (existing) {
-        if (existing.checksum_sha256 !== parsed.checksumSha256) {
+        if (existing.checksum_sha256 !== clientChecksum) {
             throw new HttpError(409, "chunk_checksum_mismatch", "A chunk with the same id was already accepted with different content.");
         }
         const progress = updateMobileSyncSessionProgress(syncSessionId);
@@ -2905,14 +3050,52 @@ export function ingestMobileHealthSyncChunk(syncSessionId, payload, rawPayloadJs
             actualBytes: actualByteCount
         });
     }
+    if (wirePayload.mode !== "legacy_payload_object" && parsed.byteCount !== actualByteCount) {
+        console.warn("[healthkit-sync] chunk byte count mismatch", {
+            syncSessionId,
+            chunkId: parsed.chunkId,
+            family: parsed.family,
+            mode: wirePayload.mode,
+            clientByteCount: parsed.byteCount,
+            actualByteCount
+        });
+        throw new HttpError(409, "chunk_byte_count_mismatch", "The HealthKit sync chunk byte count does not match its decoded payload.", {
+            syncSessionId,
+            chunkId: parsed.chunkId,
+            family: parsed.family,
+            actualBytes: actualByteCount,
+            clientBytes: parsed.byteCount,
+            mode: wirePayload.mode
+        });
+    }
+    if (wirePayload.compressedByteCount !== undefined &&
+        parsed.compressedByteCount !== undefined &&
+        parsed.compressedByteCount !== wirePayload.compressedByteCount) {
+        console.warn("[healthkit-sync] chunk compressed byte count mismatch", {
+            syncSessionId,
+            chunkId: parsed.chunkId,
+            family: parsed.family,
+            mode: wirePayload.mode,
+            clientCompressedByteCount: parsed.compressedByteCount,
+            actualCompressedByteCount: wirePayload.compressedByteCount
+        });
+        throw new HttpError(409, "chunk_compressed_byte_count_mismatch", "The HealthKit sync chunk compressed byte count does not match its decoded payload.", {
+            syncSessionId,
+            chunkId: parsed.chunkId,
+            family: parsed.family,
+            actualCompressedBytes: wirePayload.compressedByteCount,
+            clientCompressedBytes: parsed.compressedByteCount,
+            mode: wirePayload.mode
+        });
+    }
     const serverChecksum = chunkPayloadChecksum(payloadJson);
-    if (parsed.checksumSha256 !== serverChecksum) {
+    if (clientChecksum !== serverChecksum) {
         console.warn("[healthkit-sync] chunk checksum mismatch", {
             syncSessionId,
             chunkId: parsed.chunkId,
             family: parsed.family,
             mode: wirePayload.mode,
-            clientChecksum: parsed.checksumSha256.slice(0, 12),
+            clientChecksum: clientChecksum.slice(0, 12),
             serverChecksum: serverChecksum.slice(0, 12),
             clientByteCount: parsed.byteCount,
             actualByteCount
@@ -2923,7 +3106,7 @@ export function ingestMobileHealthSyncChunk(syncSessionId, payload, rawPayloadJs
             family: parsed.family,
             actualBytes: actualByteCount,
             clientBytes: parsed.byteCount,
-            clientChecksumPrefix: parsed.checksumSha256.slice(0, 12),
+            clientChecksumPrefix: clientChecksum.slice(0, 12),
             serverChecksumPrefix: serverChecksum.slice(0, 12),
             mode: wirePayload.mode
         });
@@ -2936,13 +3119,17 @@ export function ingestMobileHealthSyncChunk(syncSessionId, payload, rawPayloadJs
          received_at, applied_at, created_at, updated_at
        )
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
-        .run(mobileSyncChunkRecordId(), syncSessionId, parsed.chunkId, parsed.sequence, parsed.family, serverChecksum, parsed.recordCount, parsed.byteCount || actualByteCount, payloadJson, JSON.stringify({
+        .run(mobileSyncChunkRecordId(), syncSessionId, parsed.chunkId, parsed.sequence, parsed.family, serverChecksum, parsed.recordCount, actualByteCount, payloadJson, JSON.stringify({
         ...summarizeChunkPayload(parsed.family, wirePayload.payload),
         clientByteCount: parsed.byteCount,
         actualByteCount,
+        compressedByteCount: wirePayload.compressedByteCount ?? null,
         serverChecksum,
         mode: wirePayload.mode
     }), now, now, now, now);
+    if (parsed.family === "workout_summaries") {
+        applyWorkoutSummaryChunkImmediately(session, wirePayload.payload.workouts ?? []);
+    }
     const progress = updateMobileSyncSessionProgress(syncSessionId);
     return {
         accepted: true,
@@ -3569,8 +3756,64 @@ export function getSleepViewData(userIds) {
         sessions: recentDisplay
     };
 }
+function pickVitalMetricValue(metrics, candidates) {
+    for (const key of candidates) {
+        const metric = metrics[key];
+        if (!metric) {
+            continue;
+        }
+        const value = vitalMetricPrimaryValue({
+            aggregation: metric.aggregation,
+            latest: metric.latest ?? null,
+            average: metric.average ?? null,
+            total: metric.total ?? null,
+            maximum: metric.maximum ?? null
+        });
+        if (typeof value === "number" && Number.isFinite(value)) {
+            return value;
+        }
+    }
+    return null;
+}
+function buildFitnessVitalsTrend(rows) {
+    const byDate = new Map();
+    for (const row of rows) {
+        const metrics = safeJsonParse(row.metrics_json, {});
+        const bucket = byDate.get(row.date_key) ?? {
+            restingHeartRate: [],
+            vo2Max: []
+        };
+        const restingHeartRate = pickVitalMetricValue(metrics, [
+            "restingHeartRate",
+            "resting_heart_rate"
+        ]);
+        const vo2Max = pickVitalMetricValue(metrics, [
+            "vo2Max",
+            "vo2max",
+            "vo2_max"
+        ]);
+        if (restingHeartRate != null) {
+            bucket.restingHeartRate.push(restingHeartRate);
+        }
+        if (vo2Max != null) {
+            bucket.vo2Max.push(vo2Max);
+        }
+        byDate.set(row.date_key, bucket);
+    }
+    return [...byDate.entries()]
+        .sort((left, right) => left[0].localeCompare(right[0]))
+        .slice(-90)
+        .map(([dateKey, values]) => ({
+        dateKey,
+        restingHeartRate: values.restingHeartRate.length > 0
+            ? round(average(values.restingHeartRate), 1)
+            : null,
+        vo2Max: values.vo2Max.length > 0 ? round(average(values.vo2Max), 2) : null
+    }));
+}
 export function getFitnessViewData(userIds) {
     const workouts = listWorkoutRows(userIds).map(mapWorkoutSession);
+    const vitalsTrend = buildFitnessVitalsTrend(listDailySummaryRows("vitals", userIds));
     const recent = workouts.slice(0, 40);
     const weekly = recent.filter((session) => Date.now() - Date.parse(session.startedAt) <= 7 * 24 * 60 * 60 * 1000);
     const weeklyVolumeSeconds = weekly.reduce((sum, session) => sum + session.durationSeconds, 0);
@@ -3684,6 +3927,8 @@ export function getFitnessViewData(userIds) {
             totalMinutes: metrics.totalMinutes,
             energyKcal: metrics.energyKcal
         })),
+        vitalsTrend,
+        analysisSessions: workouts,
         sessions: recent
     };
 }