meta-sovereign 0.52.0 → 0.53.1

package/README.hi.md

@@ -86,6 +86,7 @@ SPA server को इस क्रम में चुनता है ([`js/src
 
 - **Outreach, broadcast और ऑटोमेशन**: किसे, कब, किन शर्तों पर और किस पाठ से लिखना है; कौन क्या पाएगा इसका preview; डिफ़ॉल्ट रूप से सुरक्षित ड्राफ़्ट, या quiet hours, हर चैट का cooldown, दैनिक सीमा और opt-out सूची के साथ धीमी गति से स्वचालित भेजना। हर स्वचालित भेजना एक ही outbox से जाता है: अधिक से अधिक एक बार, और अस्पष्ट परिणाम अपने आप दोहराया नहीं जाता ([`docs/USER-GUIDE.hi.md`](docs/USER-GUIDE.hi.md), §11)।
 - **Operator कतार और उत्तर**: अपठित संदेश चैट-दर-चैट, आपके पिछले उत्तरों से सुझाव (Tab एक चुनता है), पैटर्न और उत्तर के रूप, मिलते संदेश पर auto-reply।
+- **कार्य खाते**: Upwork, Fiverr, PeoplePerHour और Wellfound के लिए अलग ब्राउज़र विंडो में मैन्युअल साइन-इन, स्थायी सत्र और स्थानीय प्रोफ़ाइल स्नैपशॉट Connections और Profile में उपलब्ध हैं। यह शुरुआती समर्थन है; [गाइड](docs/WORK-ACCOUNTS.md) देखें।
 - **व्यवसाय और community खाते**: VK community token Bots Long Poll चलाता है; Telegram Business के quick replies, स्वागत और अनुपस्थिति संदेश, कार्य-समय और chatbots।
 - **स्मृति**: बातचीत से निकाले गए `प्रश्न → उत्तर` तथ्य, चैट में जाँच के साथ।
 - **अभिवादन**: VK, Telegram, WhatsApp, Messenger, X और ईमेल पर "hi" या स्टिकर से बातचीत शुरू करें, [konard/vk-bot](https://github.com/konard/vk-bot) की तरह ([`docs/GREETINGS.hi.md`](docs/GREETINGS.hi.md))।

package/README.md

@@ -61,7 +61,7 @@ The hosted app is the default UI: `serve` prints its address, <https://link-foun
 
 On macOS, interactive `serve` now handles the full setup: it protects this installation’s TLS key with Secure Enclave, detects existing certificate trust, requests trust only when needed, and opens the GitHub Pages app. For a headless launch use `node js/bin/meta-sovereign.js serve --trust=true --open=true`. `--trust=false` and `--open=false` opt out. The Swift helper needs the macOS Command Line Tools; `--hardware-key=false` explicitly opts into a file key on unsupported Macs. Hardware protection applies to the key on disk; Node uses it in memory. See [local server setup and security](docs/LOCAL-SERVER-SECURITY.md) for the exact access rules and limits.
 
-Open conversations load first and show loading or retry status until their history is ready. All / Private / Groups / Channels filters remain available inside every Telegram folder. Drag the vertical dividers to resize columns; widths are remembered. Calls is in the main menu after Chat, and Telegram account editing is under Profile. The default dark controls use white line icons. The JS server keeps its store under your OS user: `~/Library/Application Support/Meta Sovereign/store` on macOS, `%APPDATA%/Meta Sovereign/store` on Windows, and `${XDG_CONFIG_HOME:-~/.config}/Meta Sovereign/store` on Linux. Starting `serve` from an older checkout migrates its `.meta-sovereign` store once, preserving messages, contacts, sessions, media and certificate; a compatibility link preserves old paths. Restarts and a different working directory reuse the same store. `--store` or `META_SOVEREIGN_STORE_DIR` override it. See [chat readiness and data storage](docs/CHAT-READINESS.md).
+Open conversations load first and show loading or retry status until their history is ready. Earlier history loads automatically on scroll in Chat and Operator. Message selection and menus work across the full row; unread cards use refreshed Telegram counters and retain cached data during connection failures. All / Private / Groups / Channels filters remain available inside every Telegram folder. Drag the vertical dividers to resize columns; widths are remembered. Calls is in the main menu after Chat, and Telegram account editing is under Profile. The default dark controls use white line icons. The JS server keeps its store under your OS user: `~/Library/Application Support/Meta Sovereign/store` on macOS, `%APPDATA%/Meta Sovereign/store` on Windows, and `${XDG_CONFIG_HOME:-~/.config}/Meta Sovereign/store` on Linux. Starting `serve` from an older checkout migrates its `.meta-sovereign` store once, preserving messages, contacts, sessions, media and certificate; a compatibility link preserves old paths. Restarts and a different working directory reuse the same store. `--store` or `META_SOVEREIGN_STORE_DIR` override it. See [chat readiness and data storage](docs/CHAT-READINESS.md).
 
 ## Connect the SPA to your server
 
@@ -85,6 +85,7 @@ The full user-facing flow — install nothing, install Rust server, install JS s
 - **Contact imports**: preview and import macOS Contacts (including synced iCloud accounts) or vCard exports from any platform; repeated imports keep stable identities. The directory updates during sync and includes people without messages. See [contact imports](docs/CONTACTS-IMPORT.md).
 
 - **Outreach, broadcasts and automations**: who to message, when, on what conditions and with which text; a preview of who gets what; safe drafts by default or paced auto-send with quiet hours, a per-chat cooldown, daily caps and an opt-out list. Every automated send goes through one outbox, so it happens at most once and an unclear result is never retried by itself ([`docs/USER-GUIDE.md` §11](docs/USER-GUIDE.md#11-automations-message-people-by-rule-safely)).
+- **Work accounts**: manual sign-in and saved profile snapshots for Upwork, Fiverr, PeoplePerHour and Wellfound in Connections and Profile. [Setup and initial support limits](docs/WORK-ACCOUNTS.md).
 - **Operator queue and replies**: walk unread messages chat by chat, reply suggestions from your own past answers (Tab takes one), patterns and reply variations, auto-replies on a matching message.
 - **Business and community accounts**: a VK community token runs the Bots Long Poll; Telegram Business quick replies, greeting and away messages, hours and chatbots.
 - **Memory**: structured `question → answer` facts captured from conversations, checked in the chat.

package/README.ru.md

@@ -86,6 +86,7 @@ SPA выбирает сервер в таком порядке ([`js/src/web/dis
 
 - **Рассылки, broadcast и автоматизации**: кому писать, когда, при каких условиях и каким текстом; предпросмотр, кто что получит; по умолчанию безопасные черновики или отправка с паузами, тихими часами, перерывом для каждого чата, дневными лимитами и списком отписавшихся. Каждая автоматическая отправка идёт через один outbox: не больше одного раза, а неясный результат сам не повторяется ([`docs/USER-GUIDE.ru.md`](docs/USER-GUIDE.ru.md), §11).
 - **Очередь оператора и ответы**: непрочитанные сообщения чат за чатом, подсказки ответов из ваших прошлых ответов (Tab берёт подсказку), паттерны и варианты ответов, автоответы на подходящее сообщение.
+- **Рабочие аккаунты**: ручной вход в Upwork, Fiverr, PeoplePerHour и Wellfound в отдельном окне браузера, сохранение сессии и локального снимка профиля в Подключениях и Профиле. Это начальная поддержка; см. [руководство](docs/WORK-ACCOUNTS.md).
 - **Аккаунты бизнеса и сообществ**: токен сообщества VK запускает Bots Long Poll; Telegram Business: быстрые ответы, приветствие и сообщение об отсутствии, часы работы, чат-боты.
 - **Память**: структурированные факты `вопрос → ответ` из разговоров, с проверкой прямо в чате.
 - **Приветствия**: начинать диалоги в VK, Telegram, WhatsApp, Messenger, X и почте с «привет» или стикера, как [konard/vk-bot](https://github.com/konard/vk-bot) ([`docs/GREETINGS.ru.md`](docs/GREETINGS.ru.md)).

package/README.zh.md

@@ -86,6 +86,7 @@ SPA 按以下顺序选择服务器（[`js/src/web/discover.js`](js/src/web/disco
 
 - **外联、群发与自动化**：给谁发、何时发、在什么条件下发、发什么内容；预览谁会收到什么；默认生成安全草稿，或按节奏自动发送，并有安静时段、每个聊天的冷却期、每日上限和退订名单。每次自动发送都经过同一个发件箱：最多发送一次，结果不明时不会自行重试（[`docs/USER-GUIDE.zh.md`](docs/USER-GUIDE.zh.md) 第 11 节）。
 - **Operator 队列与回复**：逐个聊天处理未读消息，根据您以往的回答给出回复建议（按 Tab 采用），模式与回复变体，对匹配消息自动回复。
+- **工作账户**：在 Connections 和 Profile 中打开独立浏览器窗口，手动登录 Upwork、Fiverr、PeoplePerHour 和 Wellfound，保留会话并保存本地资料快照。这是初步支持；见[指南](docs/WORK-ACCOUNTS.md)。
 - **企业与社区账号**：VK 社区令牌运行 Bots Long Poll；Telegram Business 的快捷回复、问候与离开消息、营业时间和聊天机器人。
 - **记忆**：从对话中提取结构化的 `问题 → 答案` 事实，并可在聊天中核对。
 - **问候**：像 [konard/vk-bot](https://github.com/konard/vk-bot) 一样，在 VK、Telegram、WhatsApp、Messenger、X 和电子邮件中用一句“你好”或问候贴纸开启对话（[`docs/GREETINGS.zh.md`](docs/GREETINGS.zh.md)）。

package/js/src/cli/trust-commands.js

@@ -25,6 +25,31 @@ export const TRUST_HELP = `  trust         [--store=<dir>] [--remove=true]
 const enabled = (value, fallback = true) =>
   value === undefined ? fallback : String(value) !== 'false';
 
+/** A locked device keeps its identity: retry only this temporary OS refusal. */
+export const waitForLocalCertificate = async (
+  create,
+  log,
+  pause = () => new Promise((resolve) => globalThis.setTimeout(resolve, 5000))
+) => {
+  let announced = false;
+  for (;;) {
+    try {
+      return await create();
+    } catch (error) {
+      if (error.code !== 'DEVICE_KEY_LOCKED') {
+        throw error;
+      }
+      if (!announced) {
+        log(
+          'Waiting for this Mac to be unlocked to access its protected TLS key…'
+        );
+        announced = true;
+      }
+      await pause();
+    }
+  }
+};
+
 /** Ask macOS to evaluate this exact leaf certificate for local TLS only. */
 export const certificateIsTrusted = (
   certPath,
@@ -64,11 +89,13 @@ export const setupLocalCertificate = async (args, log, options = {}) => {
     return null;
   }
   const storeDir = args.store ?? defaultStoreDir();
-  const protector =
-    enabled(args['hardware-key']) && platform === 'darwin'
-      ? await deviceProtector(storeDir)
-      : null;
-  const local = await load(storeDir, { protector });
+  const local = await waitForLocalCertificate(async () => {
+    const protector =
+      enabled(args['hardware-key']) && platform === 'darwin'
+        ? await deviceProtector(storeDir)
+        : null;
+    return load(storeDir, { protector });
+  }, log);
   log(`local TLS identity (SHA-256) → ${local.fingerprint}`);
   log(`local TLS key protection → ${local.protection}`);
   if (platform !== 'darwin' || trusted(local.certPath)) {

package/js/src/marketplaces/catalogue.js

@@ -0,0 +1,79 @@
+// Issue #42: initial sign-in/profile support, separate from messaging adapters.
+// Login and challenges are completed by the person in an app-owned browser.
+export const MARKETPLACES = Object.freeze({
+  upwork: {
+    label: 'Upwork',
+    hosts: ['www.upwork.com', 'upwork.com'],
+    loginUrl: 'https://www.upwork.com/ab/account-security/login',
+    profilePath: '^/(?:freelancers/(?:~[^/]+|settings/profile)|fl/[^/]+)/?$',
+    docsUrl:
+      'https://support.upwork.com/hc/en-us/articles/360016252373-How-to-build-your-freelancer-profile-the-essentials',
+  },
+  fiverr: {
+    label: 'Fiverr',
+    hosts: ['www.fiverr.com', 'fiverr.com'],
+    loginUrl: 'https://www.fiverr.com/login',
+    profilePath: '^/(?:[a-zA-Z0-9_]{2,32}|users/[a-zA-Z0-9_]{2,32})/?$',
+    docsUrl:
+      'https://help.fiverr.com/hc/en-us/articles/360010558598-Creating-editing-your-freelancer-profile',
+  },
+  peopleperhour: {
+    label: 'PeoplePerHour',
+    hosts: ['www.peopleperhour.com', 'peopleperhour.com'],
+    loginUrl: 'https://www.peopleperhour.com/site/login',
+    profilePath: '^/(?:freelancer|buyer|profile)/[^?#]+/?$',
+    docsUrl:
+      'https://support.peopleperhour.com/hc/en-us/articles/115016023568-Create-a-buyer-account',
+  },
+  wellfound: {
+    label: 'Wellfound',
+    hosts: ['wellfound.com', 'www.wellfound.com'],
+    loginUrl: 'https://wellfound.com/login',
+    profilePath: '^/(?:u/[^/]+|profile(?:/edit)?)/?$',
+    docsUrl: 'https://help.wellfound.com/article/758-profiles',
+  },
+});
+
+const NON_PROFILE = new Set([
+  'login',
+  'signup',
+  'join',
+  'search',
+  'categories',
+  'seller_dashboard',
+  'settings',
+  'users',
+  'dashboard',
+  'logout',
+  'contact',
+  'about',
+  'terms',
+  'privacy',
+]);
+
+/** Accept only an HTTPS profile URL on this service, never a redirect query. */
+export const marketplaceProfileUrl = (id, value) => {
+  const provider = MARKETPLACES[id];
+  try {
+    const url = new URL(value);
+    if (
+      !provider ||
+      url.protocol !== 'https:' ||
+      url.username ||
+      url.password ||
+      url.port ||
+      !provider.hosts.includes(url.hostname) ||
+      NON_PROFILE.has(url.pathname.replace(/^\/|\/$/g, '')) ||
+      !new RegExp(provider.profilePath).test(url.pathname)
+    ) {
+      return null;
+    }
+    url.search = '';
+    url.hash = '';
+    return url.href;
+  } catch {
+    return null;
+  }
+};
+
+export const marketplaceProfileId = (id) => `account:marketplace:${id}`;

package/js/src/marketplaces/profile-page.js

@@ -0,0 +1,118 @@
+// Runs only on the page the person explicitly chose to save as their profile.
+// Reads named profile fields, never cookies, storage, passwords or hidden inputs.
+export const captureProfilePage = () => {
+  const visible = (node) => {
+    if (
+      !node?.getClientRects().length ||
+      node.closest('[hidden], [aria-hidden="true"]')
+    ) {
+      return false;
+    }
+    const style = globalThis.getComputedStyle(node);
+    return style.visibility === 'visible' && style.opacity !== '0';
+  };
+  const text = (selectors) => {
+    for (const selector of selectors) {
+      const node = globalThis.document.querySelector(selector);
+      if (visible(node) && node.type !== 'password') {
+        const value = String(node.value ?? node.textContent ?? '').trim();
+        if (value) {
+          return value;
+        }
+      }
+    }
+    return '';
+  };
+  const nodes = [];
+  for (const script of globalThis.document.querySelectorAll(
+    'script[type="application/ld+json"]'
+  )) {
+    try {
+      const json = JSON.parse(script.textContent);
+      for (const item of Array.isArray(json) ? json : [json]) {
+        nodes.push(
+          item,
+          ...(Array.isArray(item?.['@graph']) ? item['@graph'] : [])
+        );
+      }
+    } catch {
+      /* A malformed unrelated script is not profile data. */
+    }
+  }
+  const findPerson = () => {
+    const type = (node, wanted) => [node?.['@type']].flat().includes(wanted);
+    const page = nodes.find((node) => type(node, 'ProfilePage'));
+    return page?.mainEntity && type(page.mainEntity, 'Person')
+      ? page.mainEntity
+      : nodes.find(
+          (node) =>
+            type(node, 'Person') &&
+            node.url &&
+            String(node.url).split(/[?#]/)[0].replace(/\/$/, '') ===
+              globalThis.location.href.split(/[?#]/)[0].replace(/\/$/, '')
+        );
+  };
+  const person = findPerson();
+  const name =
+    person?.name ||
+    text([
+      '[data-test="profile-name"]',
+      '[data-testid="profile-name"]',
+      '[data-testid="display-name"]',
+      '[data-qa="profile-name"]',
+      'main [itemprop="name"]',
+      '[itemprop="name"]',
+      'input[name="name"]',
+      'input[name="fullName"]',
+      'input[autocomplete="name"]',
+      'input[name="user[name]"]',
+      'h1',
+    ]);
+  const headline =
+    person?.jobTitle ||
+    text([
+      '[data-test="profile-title"]',
+      '[data-testid="profile-title"]',
+      '[itemprop="jobTitle"]',
+      '[data-test="headline"]',
+    ]);
+  const bio =
+    person?.description ||
+    text([
+      '[data-test="profile-description"]',
+      '[data-testid="profile-description"]',
+      '[itemprop="description"]',
+    ]);
+  const skills = [
+    ...globalThis.document.querySelectorAll(
+      '[data-test="skills"] li, [data-testid="skills"] li, [itemprop="skills"]'
+    ),
+  ]
+    .filter(visible)
+    .map((node) => node.textContent.trim());
+  // Positive evidence is recorded as an observation, never inferred from a URL.
+  const signInObserved = [
+    ...globalThis.document.querySelectorAll('a, button'),
+  ].some(
+    (node) =>
+      visible(node) &&
+      /^(?:sign out|log out|logout)$/i.test(node.textContent.trim())
+  );
+  return {
+    challenge:
+      /just a moment|attention required|access denied|verify.*human|security check/i.test(
+        globalThis.document.title
+      ) ||
+      [
+        ...globalThis.document.querySelectorAll(
+          '#challenge-running, #cf-challenge-running, #challenge-stage, #px-captcha'
+        ),
+      ].some(visible),
+    url: globalThis.location.href,
+    name,
+    headline,
+    bio,
+    skills,
+    signInObserved,
+  };
+};

package/js/src/marketplaces/sessions.js

@@ -0,0 +1,184 @@
+import path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { openBrowserSession } from '../cv/browser.js';
+import {
+  MARKETPLACES,
+  marketplaceProfileId,
+  marketplaceProfileUrl,
+} from './catalogue.js';
+import { captureProfilePage } from './profile-page.js';
+
+const failure = (code) => Object.assign(new Error(code), { code });
+const field = (value, length) =>
+  typeof value === 'string' ? value.trim().slice(0, length) : '';
+
+/** Whitelist stored/displayed identity fields, dropping all other page data. */
+export const cleanMarketplaceProfile = (id, data, now) => {
+  const url = marketplaceProfileUrl(id, data?.url);
+  const name = field(data?.name, 160).replace(/\s+/g, ' ');
+  if (
+    data?.challenge === true ||
+    !url ||
+    !name ||
+    /^(?:sign in|log in|login|welcome back|loading|verify|just a moment|your profile$|my profile$|profile$|edit profile$)/i.test(
+      name
+    )
+  ) {
+    throw failure('needs-profile');
+  }
+  return {
+    name,
+    url,
+    headline: field(data.headline, 300),
+    bio: field(data.bio, 5000),
+    skills: Array.isArray(data.skills)
+      ? data.skills
+          .slice(0, 64)
+          .map((skill) => field(skill, 100))
+          .filter(Boolean)
+      : [],
+    capturedAt: now.toISOString(),
+    signInObservedAt: data.signInObserved === true ? now.toISOString() : null,
+  };
+};
+
+export const createMarketplaceSessions = ({
+  store,
+  storeDir,
+  openSession = openBrowserSession,
+  clock = () => new Date(),
+}) => {
+  const sessions = new Map();
+  const opening = new Map();
+  let stopping = false;
+  const providerOf = (id) => {
+    if (!Object.hasOwn(MARKETPLACES, id)) {
+      throw failure('unknown-marketplace');
+    }
+    return MARKETPLACES[id];
+  };
+  const status = async (id) => {
+    const provider = providerOf(id);
+    const session = sessions.get(id);
+    const open = Boolean(session && !session.page.isClosed?.());
+    if (session && !open) {
+      sessions.delete(id);
+      await session.close().catch(() => {});
+    }
+    const saved = (await store.get(marketplaceProfileId(id)))?.profile;
+    let profile = null;
+    if (saved) {
+      try {
+        profile = cleanMarketplaceProfile(
+          id,
+          { ...saved, signInObserved: Boolean(saved.signInObservedAt) },
+          new Date(saved.capturedAt)
+        );
+      } catch {
+        /* Do not expose malformed or non-profile records. */
+      }
+    }
+    return {
+      id,
+      label: provider.label,
+      open,
+      opening: opening.has(id),
+      profile,
+    };
+  };
+  const launch = async (id) => {
+    const provider = providerOf(id);
+    const profileDir = path.join(storeDir, 'browser-profiles', id);
+    await fs.mkdir(profileDir, { recursive: true, mode: 0o700 });
+    const session = await openSession({
+      platform: id,
+      profileDir,
+      headless: false,
+      locale: 'en-US',
+    });
+    try {
+      const saved = (await store.get(marketplaceProfileId(id)))?.profile;
+      await session.page.goto(
+        marketplaceProfileUrl(id, saved?.url) ?? provider.loginUrl,
+        { waitUntil: 'domcontentloaded', timeout: 30_000 }
+      );
+      sessions.set(id, session);
+    } catch (error) {
+      await session.close().catch(() => {});
+      throw error;
+    }
+  };
+  const open = async (id) => {
+    providerOf(id);
+    if (stopping) {
+      throw failure('server-stopping');
+    }
+    if (opening.has(id)) {
+      await opening.get(id);
+      return status(id);
+    }
+    if ((await status(id)).open) {
+      await sessions.get(id)?.page.bringToFront?.();
+      return status(id);
+    }
+    // Recheck after the asynchronous status read: concurrent requests share it.
+    if (!opening.has(id)) {
+      const pending = launch(id);
+      opening.set(id, pending);
+    }
+    try {
+      await opening.get(id);
+    } finally {
+      opening.delete(id);
+    }
+    return status(id);
+  };
+  const close = async (id) => {
+    providerOf(id);
+    await opening.get(id)?.catch(() => {});
+    const session = sessions.get(id);
+    sessions.delete(id);
+    await session?.close();
+    return status(id);
+  };
+  const capture = async (id) => {
+    providerOf(id);
+    const session = sessions.get(id);
+    if (!session || session.page.isClosed?.()) {
+      throw failure('session-closed');
+    }
+    const before = marketplaceProfileUrl(id, session.page.url());
+    if (!before) {
+      throw failure('needs-profile');
+    }
+    const data = await session.page.evaluate(captureProfilePage);
+    if (
+      marketplaceProfileUrl(id, session.page.url()) !== before ||
+      marketplaceProfileUrl(id, data?.url) !== before
+    ) {
+      throw failure('page-changed');
+    }
+    const profile = cleanMarketplaceProfile(id, data, clock());
+    await store.put({
+      id: marketplaceProfileId(id),
+      kind: 'marketplace-profile',
+      source: id,
+      tokens: ['account', 'marketplace', id],
+      profile,
+    });
+    return status(id);
+  };
+  return {
+    status,
+    open,
+    close,
+    capture,
+    list: () => Promise.all(Object.keys(MARKETPLACES).map(status)),
+    stop: async () => {
+      stopping = true;
+      await Promise.allSettled(
+        [...new Set([...opening.keys(), ...sessions.keys()])].map(close)
+      );
+    },
+  };
+};

package/js/src/replies/reply-cache.js

@@ -289,30 +289,34 @@ export const createReplyCache = ({
  * none — three at most, as the strip shows them.
  */
 export const mergeSuggestions = (local, remote, { limit = 8 } = {}) => {
-  if (!local) {
-    return remote ?? { stage: 'none', suggestions: [] };
-  }
-  if (!remote?.suggestions?.length) {
-    return local;
-  }
-  const whole = (list) => list.filter((s) => s.kind !== 'word');
-  const shown = new Set(
-    whole(local.suggestions).map((s) => normalizeMessage(s.text))
-  );
-  const added = whole(remote.suggestions).filter(
-    (s) => !shown.has(normalizeMessage(s.text))
-  );
-  const wholes = [...whole(local.suggestions), ...added].slice(0, limit);
-  const taken = new Set(wholes.map((s) => normalizeMessage(s.text)));
-  const wordsOf = (result) =>
-    result.suggestions.filter(
-      (s) => s.kind === 'word' && !taken.has(normalizeMessage(s.text))
-    );
-  const known = wordsOf(local);
-  const words = (known.length > 0 ? known : wordsOf(remote)).slice(
-    0,
-    Math.min(3, limit - wholes.length)
-  );
-  const suggestions = [...wholes, ...words];
-  return { ...local, stage: suggestions[0]?.kind ?? 'none', suggestions };
+  const base = local ?? remote ?? { stage: 'none', suggestions: [] };
+  const seen = new Set();
+  const unique = (list) =>
+    list.filter((suggestion) => {
+      const key = normalizeMessage(suggestion.text);
+      if (!key || seen.has(key)) {
+        return false;
+      }
+      seen.add(key);
+      return true;
+    });
+  const localItems = local?.suggestions ?? [];
+  const remoteItems = remote?.suggestions ?? [];
+  const whole = unique(
+    [...localItems, ...remoteItems].filter((s) => s.kind !== 'word')
+  ).slice(0, limit);
+  const knownWords = localItems.filter((s) => s.kind === 'word');
+  const words = unique(
+    knownWords.length
+      ? knownWords
+      : remoteItems.filter((s) => s.kind === 'word')
+  ).slice(0, Math.min(3, limit - whole.length));
+  const suggestions = [...whole, ...words];
+  return {
+    ...base,
+    stage: suggestions.length
+      ? (suggestions[0]?.kind ?? base.stage ?? 'none')
+      : 'none',
+    suggestions,
+  };
 };

package/js/src/server/index.js

@@ -94,6 +94,7 @@ import { handleChatRoutes } from './routes-chat.js';
 import { createClinkReplyStore } from '../replies/reply-store-clink.js';
 import { handleAutoImportRoutes } from './routes-auto-import.js';
 import { handleWhatsAppRoutes } from './routes-whatsapp.js';
+import { handleMarketplaceRoutes } from './routes-marketplaces.js';
 import { profileDirIn } from '../sources/whatsapp-web-signin.js';
 import { handleTelegramRoutes } from './routes-telegram.js';
 import { handleMessageRoutes } from './routes-messages.js';
@@ -628,6 +629,7 @@ const routeOn = async (store, req, res, ctx, url, p) => {
     () => ctx.clientLog?.(req, res, p, ctx) ?? false,
     () => handleAutoImportRoutes(store, req, res, p, ctx),
     () => handleWhatsAppRoutes(store, req, res, p, ctx),
+    () => handleMarketplaceRoutes(store, req, res, p, ctx),
     () => handleArchiveUpload(store, req, res, p, ctx),
     () => handlePullRoutes(store, req, res, p, ctx),
     () => handleTelegramRoutes(req, res, p, ctx),
@@ -960,7 +962,10 @@ export const startServer = async ({
         bus?.close();
         ctx.replies.close().catch(() => {});
         ctx.closeAutomations().catch(() => {});
-        const jobsDone = ctx.stopJobs();
+        const jobsDone = Promise.allSettled([
+          ctx.stopJobs(),
+          ctx.marketplaceSessions?.stop(),
+        ]);
         ctx.chatIndex.close();
         stopAll(telegramAccount, ctx.telegramAccounts, ctx.telegramExtras);
         wsHandle?.close();

package/js/src/server/live-subset.js

@@ -0,0 +1,46 @@
+/** Keep a small derived set current without rescanning the entire archive. */
+export const createLiveSubset = (store, matches) => {
+  if (typeof store.subscribe !== 'function') {
+    return () => store.query(matches);
+  }
+  const records = new Map();
+  let pending = null;
+  let loaded = false;
+  let during = [];
+  const apply = (event) => {
+    if (event.type === 'delete') {
+      records.delete(event.id ?? event.link?.id);
+    }
+    if (event.type === 'put') {
+      if (matches(event.link)) {
+        records.set(event.link.id, event.link);
+      } else {
+        records.delete(event.link.id);
+      }
+    }
+  };
+  store.subscribe?.((event) => {
+    if (loaded) {
+      apply(event);
+    } else {
+      during.push(event);
+    }
+  });
+  return async () => {
+    if (!loaded) {
+      pending ??= Promise.resolve()
+        .then(() => store.query(matches))
+        .then((links) => {
+          links.forEach((link) => records.set(link.id, link));
+          during.forEach(apply);
+          during = [];
+          loaded = true;
+        })
+        .finally(() => {
+          pending = null;
+        });
+      await pending;
+    }
+    return [...records.values()];
+  };
+};

package/js/src/server/local-key.js

@@ -11,8 +11,19 @@ import { compileSwiftHelper } from './native-helper.js';
 const SOURCE = fileURLToPath(
   new URL('./local-key-enclave.swift', import.meta.url)
 );
-const failure = (message) =>
-  Object.assign(new Error(message), { code: 'DEVICE_KEY_UNAVAILABLE' });
+const failure = (message, code = 'DEVICE_KEY_UNAVAILABLE') =>
+  Object.assign(new Error(message), { code });
+
+/** OSStatus -25308 is a temporarily inaccessible key, not another device. */
+export const deviceKeyFailure = (stderr) =>
+  /OSStatus error -25308/.test(String(stderr))
+    ? failure(
+        'Unlock this Mac to access its device-protected TLS key.',
+        'DEVICE_KEY_LOCKED'
+      )
+    : failure(
+        'The TLS key cannot be unlocked by this Mac. Unlock the original device; copied keys cannot be used on another computer.'
+      );
 
 /** Compile our small CryptoKit helper locally, once per source revision. */
 const helper = async (storeDir, run) => {
@@ -47,9 +58,7 @@ export const createDeviceKeyProtector = async (
       maxBuffer: 64 * 1024,
     });
     if (result.status !== 0) {
-      throw failure(
-        'The TLS key cannot be unlocked by this Mac. Unlock the original device; copied keys cannot be used on another computer.'
-      );
+      throw deviceKeyFailure(result.stderr);
     }
     return JSON.parse(result.stdout);
   };