openmates 0.18.0-alpha.3 → 0.18.0-alpha.4

package/dist/{chunk-65ZA6VF2.js → chunk-EKALVG2T.js}

@@ -1015,6 +1015,10 @@ var OpenMatesHttpClient = class {
   getCookieMap() {
     return Object.fromEntries(this.cookies.entries());
   }
+  replaceCookies(cookies) {
+    this.cookies.clear();
+    for (const [name, value] of Object.entries(cookies)) this.cookies.set(name, value);
+  }
   async get(path2, headers = {}) {
     return this.request("GET", path2, void 0, headers);
   }
@@ -1194,8 +1198,10 @@ import {
   readdirSync,
   readFileSync as readFileSync2,
   rmSync,
+  renameSync,
   writeFileSync
 } from "fs";
+import lockfile from "proper-lockfile";
 import { createHash as createHash4 } from "crypto";
 import { homedir as homedir2 } from "os";
 import { isAbsolute, join, resolve } from "path";
@@ -1483,7 +1489,55 @@ function saveAnonymousId(anonymousId) {
     createdAt: Math.floor(Date.now() / 1e3)
   });
 }
-function saveSession(session) {
+var SESSION_LOCK_STALE_MS = 3e4;
+var SESSION_LOCK_POLL_MS = 50;
+async function withSessionRefreshLock(operation) {
+  const path2 = join(ensureStateDir(), "session.json");
+  const release2 = await lockfile.lock(`${path2}.refresh`, {
+    realpath: false,
+    stale: SESSION_LOCK_STALE_MS,
+    retries: { retries: 600, factor: 1, minTimeout: SESSION_LOCK_POLL_MS, maxTimeout: SESSION_LOCK_POLL_MS }
+  });
+  try {
+    return await operation();
+  } finally {
+    await release2();
+  }
+}
+function saveSession(session, options = {}) {
+  const path2 = join(ensureStateDir(), "session.json");
+  let release2;
+  const waitCell = new Int32Array(new SharedArrayBuffer(4));
+  for (let attempt = 0; ; attempt++) {
+    try {
+      release2 = lockfile.lockSync(`${path2}.write`, { realpath: false, stale: SESSION_LOCK_STALE_MS });
+      break;
+    } catch (error) {
+      if (error.code !== "ELOCKED" || attempt >= 100) throw error;
+      Atomics.wait(waitCell, 0, 0, SESSION_LOCK_POLL_MS);
+    }
+  }
+  try {
+    const current = readJsonFile(path2);
+    if (current && !options.replace) {
+      if (current.sessionId !== session.sessionId || current.hashedEmail !== session.hashedEmail || current.apiUrl !== session.apiUrl) {
+        throw new Error("Login session changed in another process. Retry the command using the current profile.");
+      }
+      if (options.expectedRefreshToken !== void 0) {
+        if (current.cookies.auth_refresh_token !== options.expectedRefreshToken) {
+          throw new Error("Login credentials changed during refresh. Retry with the current profile.");
+        }
+      } else {
+        session.cookies = { ...current.cookies };
+        session.wsToken = current.wsToken;
+      }
+    }
+    writeSession(session);
+  } finally {
+    release2();
+  }
+}
+function writeSession(session) {
   const filePath = join(ensureStateDir(), "session.json");
   const result = storeMasterKey(session.masterKeyExportedB64, resolveKeyStorageId(session.hashedEmail));
   const onDisk = {
@@ -1516,7 +1570,13 @@ function saveSession(session) {
       onDisk.emailEncryptionKeyB64 = session.emailEncryptionKeyB64;
     }
   }
-  writeJsonFile(filePath, onDisk);
+  const temporary = `${filePath}.${process.pid}.tmp`;
+  try {
+    writeJsonFile(temporary, onDisk);
+    renameSync(temporary, filePath);
+  } finally {
+    rmSync(temporary, { force: true });
+  }
   if (result.type !== "plaintext") {
     process.stderr.write("Decrypting data...\n");
   }
@@ -7509,7 +7569,9 @@ var OpenMatesClient = class _OpenMatesClient {
   apiUrl;
   session;
   http;
+  explicitSession;
   constructor(options = {}) {
+    this.explicitSession = options.session !== void 0;
     const diskSession = options.session ?? this.getValidSessionFromDisk();
     this.apiUrl = (options.apiUrl ?? process.env.OPENMATES_API_URL ?? diskSession?.apiUrl ?? loadDefaultServerApiUrl() ?? DEFAULT_API_URL).replace(/\/$/, "");
     this.session = diskSession;
@@ -8570,31 +8632,34 @@ var OpenMatesClient = class _OpenMatesClient {
     };
     await this.hydrateEmailEncryptionKey(session);
     this.session = session;
-    saveSession(session);
+    saveSession(session, { replace: true });
   }
   async whoAmI() {
-    const session = this.requireSession();
-    const response = await this.http.post(
-      "/v1/auth/session",
-      { session_id: session.sessionId },
-      this.getCliRequestHeaders()
-    );
-    if (!response.ok || !response.data.success) {
-      if (response.status === 502 || response.status === 503 || response.status === 504) {
+    return this.withFreshStoredSession(async () => {
+      const session = this.requireSession();
+      const previousRefreshToken = session.cookies.auth_refresh_token;
+      const response = await this.http.post(
+        "/v1/auth/session",
+        { session_id: session.sessionId },
+        this.getCliRequestHeaders()
+      );
+      if (!response.ok || !response.data.success) {
+        if (response.status === 502 || response.status === 503 || response.status === 504) {
+          throw new Error(
+            `Session validation temporarily unavailable (HTTP ${response.status}). The API may be restarting; retry shortly.`
+          );
+        }
         throw new Error(
-          `Session validation temporarily unavailable (HTTP ${response.status}). The API may be restarting; retry shortly.`
+          `Session validation failed (HTTP ${response.status}): ${response.data.message ?? "invalid session"}${response.data.re_auth_reason ? ` (${response.data.re_auth_reason})` : ""}. Please run \`${this.loginRecoveryCommand()}\`.`
         );
       }
-      throw new Error(
-        `Session validation failed (HTTP ${response.status}): ${response.data.message ?? "invalid session"}${response.data.re_auth_reason ? ` (${response.data.re_auth_reason})` : ""}. Please run \`openmates login\`.`
-      );
-    }
-    if (response.data.ws_token) {
-      session.wsToken = response.data.ws_token;
-    }
-    session.cookies = this.http.getCookieMap();
-    saveSession(session);
-    return response.data.user ?? {};
+      if (response.data.ws_token) {
+        session.wsToken = response.data.ws_token;
+      }
+      session.cookies = this.http.getCookieMap();
+      saveSession(session, { expectedRefreshToken: previousRefreshToken });
+      return response.data.user ?? {};
+    });
   }
   async getTopicPreferences() {
     const user = await this.whoAmI();
@@ -8734,7 +8799,7 @@ var OpenMatesClient = class _OpenMatesClient {
       authorizerDeviceName: null,
       autoLogoutMinutes: null
     };
-    saveSession(session);
+    saveSession(session, { replace: true });
     this.session = session;
     return {
       success: true,
@@ -13974,8 +14039,9 @@ Required: ${schema.required.join(", ")}`
     const session = this.requireSession();
     const currentCookies = this.http.getCookieMap();
     if (JSON.stringify(session.cookies) !== JSON.stringify(currentCookies)) {
+      const previousRefreshToken = session.cookies.auth_refresh_token;
       session.cookies = currentCookies;
-      saveSession(session);
+      saveSession(session, { expectedRefreshToken: previousRefreshToken });
     }
     return session;
   }
@@ -14445,9 +14511,30 @@ Required: ${schema.required.join(", ")}`
       session.userEmailSalt
     );
   }
+  async withFreshStoredSession(operation) {
+    return withSessionRefreshLock(async () => {
+      const previous = this.requireSession();
+      const current = loadSession();
+      if (!current && !this.explicitSession) {
+        throw new Error("Login session was removed. Log in to the current profile before retrying.");
+      }
+      if (current && !this.explicitSession) {
+        if (current.hashedEmail !== previous.hashedEmail || current.apiUrl !== previous.apiUrl) {
+          throw new Error("Login account changed in another process. Retry using the current profile.");
+        }
+        this.session = current;
+        this.http.replaceCookies(current.cookies);
+      }
+      return operation();
+    });
+  }
+  loginRecoveryCommand() {
+    const profile = process.env.OPENMATES_PROFILE?.trim();
+    return profile ? `openmates --profile ${profile} login` : "openmates login";
+  }
   requireSession() {
     if (!this.session) {
-      throw new Error("Not logged in. Run `openmates login`.");
+      throw new Error(`Not logged in. Run \`${this.loginRecoveryCommand()}\`.`);
     }
     return this.session;
   }
@@ -14527,24 +14614,30 @@ Required: ${schema.required.join(", ")}`
    * This method fetches a fresh ws_token and captures any rotated cookies.
    */
   async refreshWsToken() {
-    const session = this.requireSession();
-    let res;
-    try {
-      res = await this.http.post("/v1/auth/session", { session_id: session.sessionId }, this.getCliRequestHeaders());
-    } catch {
-      return null;
-    }
-    if (!res.ok || res.data.success === false) {
-      purgeLocalPrivateData();
-      this.session = null;
-      throw new Error("Session expired or invalid. Please run `openmates login` to re-authenticate.");
-    }
-    if (res.data.ws_token) {
-      session.wsToken = res.data.ws_token;
-    }
-    session.cookies = this.http.getCookieMap();
-    saveSession(session);
-    return typeof res.data.user?.id === "string" ? res.data.user.id : typeof res.data.user?.user_id === "string" ? res.data.user.user_id : null;
+    return this.withFreshStoredSession(async () => {
+      const session = this.requireSession();
+      const previousRefreshToken = session.cookies.auth_refresh_token;
+      let res;
+      try {
+        res = await this.http.post("/v1/auth/session", { session_id: session.sessionId }, this.getCliRequestHeaders());
+      } catch {
+        return null;
+      }
+      if (res.status >= 500) {
+        throw new Error(`Session validation temporarily unavailable (HTTP ${res.status}). Retry shortly.`);
+      }
+      if (!res.ok || res.data.success === false) {
+        purgeLocalPrivateData();
+        this.session = null;
+        throw new Error(`Session expired or invalid. Please run \`${this.loginRecoveryCommand()}\` to re-authenticate.`);
+      }
+      if (res.data.ws_token) {
+        session.wsToken = res.data.ws_token;
+      }
+      session.cookies = this.http.getCookieMap();
+      saveSession(session, { expectedRefreshToken: previousRefreshToken });
+      return typeof res.data.user?.id === "string" ? res.data.user.id : typeof res.data.user?.user_id === "string" ? res.data.user.user_id : null;
+    });
   }
   /**
    * Ensure the local sync cache is up to date. If the cache is fresh,
@@ -27194,7 +27287,7 @@ function shouldAutoInstallRuntimeMonitoringServices(env) {
 
 // src/serverBackupArchive.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { chmodSync as chmodSync3, lstatSync, readdirSync as readdirSync3, renameSync, rmSync as rmSync4 } from "fs";
+import { chmodSync as chmodSync3, lstatSync, readdirSync as readdirSync3, renameSync as renameSync2, rmSync as rmSync4 } from "fs";
 import { randomUUID as randomUUID8 } from "crypto";
 function assertRegularBackupTree(path2) {
   const stat2 = lstatSync(path2);
@@ -27213,7 +27306,7 @@ function publishServerBackupArchive(sourceDir, archivePath, options = {}) {
   try {
     execFileSync3(options.tarCommand ?? "tar", ["-czf", temporaryArchivePath, "-C", sourceDir, "."], { stdio: "pipe" });
     chmodSync3(temporaryArchivePath, 384);
-    renameSync(temporaryArchivePath, archivePath);
+    renameSync2(temporaryArchivePath, archivePath);
     chmodSync3(archivePath, 384);
   } finally {
     process.umask(previousUmask);
@@ -27815,7 +27908,7 @@ function signRuntimeWebhookPayload(payload, secret, timestamp, eventId) {
 
 // src/serverUpdateState.ts
 import { randomBytes as randomBytes7 } from "crypto";
-import { chmodSync as chmodSync4, closeSync, existsSync as existsSync8, mkdirSync as mkdirSync5, openSync, readFileSync as readFileSync6, renameSync as renameSync2, rmSync as rmSync5, writeFileSync as writeFileSync4 } from "fs";
+import { chmodSync as chmodSync4, closeSync, existsSync as existsSync8, mkdirSync as mkdirSync5, openSync, readFileSync as readFileSync6, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname5, join as join6 } from "path";
 function serverUpdateStatusFile(installPath, role) {
   return join6(installPath, ".openmates", `${role}-update-status.json`);
@@ -27839,7 +27932,7 @@ function writeServerUpdateStatus(installPath, role, status) {
   const temporaryPath = `${filePath}.${process.pid}.${randomBytes7(4).toString("hex")}.tmp`;
   writeFileSync4(temporaryPath, `${JSON.stringify({ role, updated_at: (/* @__PURE__ */ new Date()).toISOString(), ...status }, null, 2)}
 `, { mode: 384 });
-  renameSync2(temporaryPath, filePath);
+  renameSync3(temporaryPath, filePath);
   chmodSync4(filePath, 384);
 }
 function acquireServerUpdateLock(installPath) {
@@ -74429,7 +74522,7 @@ function remoteErrorMessage(code) {
 
 // src/selfUpdate.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { readFileSync as readFileSync10, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8, renameSync as renameSync3 } from "fs";
+import { readFileSync as readFileSync10, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8, renameSync as renameSync4 } from "fs";
 import { homedir as homedir8 } from "os";
 import { dirname as dirname8, basename as basename3, join as join10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -74458,7 +74551,7 @@ function persistSelfUpdateChannel(plan) {
   mkdirSync8(dirname8(path2), { recursive: true, mode: 448 });
   const temporary = `${path2}.${process.pid}.tmp`;
   writeFileSync8(temporary, JSON.stringify({ channel: plan.channel }) + "\n", { mode: 384 });
-  renameSync3(temporary, path2);
+  renameSync4(temporary, path2);
 }
 function installedNpmPrefix(moduleUrl = import.meta.url, platform4 = process.platform) {
   const packageRoot = dirname8(dirname8(fileURLToPath2(moduleUrl)));
@@ -74603,7 +74696,7 @@ function commandName(name) {
 }
 
 // src/workRecovery.ts
-import { mkdirSync as mkdirSync9, renameSync as renameSync4, writeFileSync as writeFileSync9 } from "fs";
+import { mkdirSync as mkdirSync9, renameSync as renameSync5, writeFileSync as writeFileSync9 } from "fs";
 import { dirname as dirname9 } from "path";
 import { stringify } from "yaml";
 async function projectPlanAssumption(plan, masterKey, assumption) {
@@ -74786,7 +74879,7 @@ function writeWorkRecoveryAtomically(path2, document) {
   mkdirSync9(dirname9(path2), { recursive: true, mode: 448 });
   const temporaryPath = `${path2}.tmp`;
   writeFileSync9(temporaryPath, stringify(document, { sortMapEntries: true, lineWidth: 0 }), { encoding: "utf8", mode: 384 });
-  renameSync4(temporaryPath, path2);
+  renameSync5(temporaryPath, path2);
 }
 
 // src/revolutBusinessCertificate.ts
@@ -74944,6 +75037,15 @@ async function main() {
     assertTrustedAccountGuardEnvironment(parsed.flags);
     assertTrustedAccountCommandAllowed(command);
   }
+  if (parsed.flags.profile !== void 0) {
+    const profile = parsed.flags.profile;
+    if (typeof profile !== "string" || !profile) throw new Error("--profile requires a profile name");
+    resolveStateDir({ profile, stateDir: "" });
+    if (process.env.OPENMATES_STATE_DIR?.trim()) {
+      throw new Error("--profile cannot be combined with OPENMATES_STATE_DIR");
+    }
+    process.env.OPENMATES_PROFILE = profile;
+  }
   const client = OpenMatesClient.load({
     apiUrl: typeof parsed.flags["api-url"] === "string" ? parsed.flags["api-url"] : void 0
   });
@@ -75309,6 +75411,9 @@ function assertTrustedAccountCommandAllowed(command) {
   }
 }
 function assertTrustedAccountGuardEnvironment(flags, environment = process.env) {
+  if (flags.profile !== void 0 && flags.profile !== TRUST_GUARD_PROFILE) {
+    throw new Error(`Trusted OpenCode CLI commands cannot override profile ${TRUST_GUARD_PROFILE}.`);
+  }
   if (environment.OPENMATES_PROFILE !== TRUST_GUARD_PROFILE) {
     throw new Error(`Trusted OpenCode CLI commands require OPENMATES_PROFILE=${TRUST_GUARD_PROFILE}.`);
   }
@@ -85711,6 +85816,7 @@ Commands:
 
 Flags:
   --json          Output raw JSON instead of formatted output
+  --profile <name>        Use an isolated login profile (also OPENMATES_PROFILE)
   --api-url <url> Override API base URL (default: installed self-host server, then https://api.openmates.org)
   --api-key <key> Optional API key override (or set OPENMATES_API_KEY)
   --version       Show CLI version and update availability

package/dist/{cli-BMrmfKIF.d.ts → cli-BLFXUeuE.d.ts}

@@ -1734,6 +1734,7 @@ declare class OpenMatesClient {
     readonly apiUrl: string;
     private session;
     private readonly http;
+    private readonly explicitSession;
     constructor(options?: OpenMatesClientOptions);
     static load(options?: OpenMatesClientOptions): OpenMatesClient;
     hasSession(): boolean;
@@ -2741,6 +2742,8 @@ declare class OpenMatesClient {
     private downloadPaymentPdf;
     private ensureEmailEncryptionKey;
     private hydrateEmailEncryptionKey;
+    private withFreshStoredSession;
+    private loginRecoveryCommand;
     private requireSession;
     getMasterKeyBytes(): Uint8Array;
     private decryptTopicPreferences;

package/dist/cli.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export { aa as ImagesAiDetectionClassification, ab as ImagesAiDetectionSummary, aA as assertTrustedAccountCommandAllowed, aB as assertTrustedAccountGuardEnvironment, as as buildImagesAiDetectionSummary, aC as buildTravelConnectionsRequest, at as classifyImagesAiDetection, av as formatImagesAiDetectionLabel, aw as getExtForLang, aD as requireExactConfirmation, aE as resolveProjectContext, az as serializeToYaml, aF as shouldRequireTrustedAccountGuard } from './cli-BMrmfKIF.js';
+export { aa as ImagesAiDetectionClassification, ab as ImagesAiDetectionSummary, aA as assertTrustedAccountCommandAllowed, aB as assertTrustedAccountGuardEnvironment, as as buildImagesAiDetectionSummary, aC as buildTravelConnectionsRequest, at as classifyImagesAiDetection, av as formatImagesAiDetectionLabel, aw as getExtForLang, aD as requireExactConfirmation, aE as resolveProjectContext, az as serializeToYaml, aF as shouldRequireTrustedAccountGuard } from './cli-BLFXUeuE.js';

package/dist/cli.js

@@ -11,7 +11,7 @@ import {
   resolveProjectContext,
   serializeToYaml,
   shouldRequireTrustedAccountGuard
-} from "./chunk-65ZA6VF2.js";
+} from "./chunk-EKALVG2T.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";
 export {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { U as UserTaskStatus, a as UserTaskAssigneeType, b as UserTaskAssigneeIdentity, c as UserTaskRecord, d as UserTaskActivityRecord, e as UserPlanStatus, f as UserPlanRecord, g as UserPlanVerificationStatus, h as UserPlanLearningType, i as UserPlanLearningTargetKind, j as UserPlanLearningStatus, k as UserPlanLearningLevel, l as UserPlanLearningRecord, m as UserPlanCriterionRecord, n as UserPlanVerificationRecord, o as UserPlanCreateInput, p as UserPlanUpdateInput, P as ProjectItemRecord, q as UserPlanLearningCreateTasksInput, r as UserPlanLearningCreateTasksResult, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowInputStartParams, w as WorkflowInputSessionResult, x as WorkflowInputSessionDetail, y as WorkflowInputEvent, z as WorkflowGraph, A as WorkflowRunContentRetention, B as WorkflowRunDetail, C as WorkflowRunCancellationResult, D as WorkflowTemplateProjectionUpsertParams, E as WorkflowTemplateProjectionResult, F as PublicWorkflowTemplateProjection, G as WorkflowTemplateProjectionRevocationResult, H as WorkflowTemplateBindingCompletionParams, I as WorkflowTemplateBindingCompletionResult, J as WorkflowTemplateShortUrlParams, K as WorkflowTemplateShortUrlResult, S as ShortUrlRevokeResult, L as WorkflowTemplateImportPayload, M as ImportedWorkflowTemplate } from './cli-BMrmfKIF.js';
-export { N as AuthMethodsStatus, O as AuthoritativeChatReconciliation, Q as BackupCodesResult, R as BankTransferOrderDetails, T as BankTransferStatus, V as CachedChat, X as CachedNewChatSuggestion, Y as ChatListPage, Z as CliSignupResult, _ as DecryptedDraft, $ as DecryptedEmbed, a0 as DecryptedMemoryEntry, a1 as DecryptedMessage, a2 as DecryptedNewChatSuggestion, a3 as DocsFile, a4 as DocsFolder, a5 as DocsSearchResult, a6 as DocsTree, a7 as EncryptedDraft, a8 as GiftCardBankTransferStatus, a9 as INTEREST_TAG_IDS, aa as ImagesAiDetectionClassification, ab as ImagesAiDetectionSummary, ac as InterestTagId, ad as MATE_NAMES, ae as MEMORY_TYPE_REGISTRY, af as MemoryFieldDef, ag as MemoryTypeDef, ah as OpenMatesClient, ai as OpenMatesClientOptions, aj as OpenMatesSession, ak as SyncCache, al as TopicPreferencesPayload, am as TotpSetupStartResult, an as WorkflowEdge, ao as WorkflowNode, ap as WorkflowNodeRun, aq as WorkflowNodeType, ar as WorkflowRunContentStorage, as as buildImagesAiDetectionSummary, at as classifyImagesAiDetection, au as deriveAppUrl, av as formatImagesAiDetectionLabel, aw as getExtForLang, ax as normalizeInterestTagIds, ay as reconcileAuthoritativeChats, az as serializeToYaml } from './cli-BMrmfKIF.js';
+import { U as UserTaskStatus, a as UserTaskAssigneeType, b as UserTaskAssigneeIdentity, c as UserTaskRecord, d as UserTaskActivityRecord, e as UserPlanStatus, f as UserPlanRecord, g as UserPlanVerificationStatus, h as UserPlanLearningType, i as UserPlanLearningTargetKind, j as UserPlanLearningStatus, k as UserPlanLearningLevel, l as UserPlanLearningRecord, m as UserPlanCriterionRecord, n as UserPlanVerificationRecord, o as UserPlanCreateInput, p as UserPlanUpdateInput, P as ProjectItemRecord, q as UserPlanLearningCreateTasksInput, r as UserPlanLearningCreateTasksResult, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowInputStartParams, w as WorkflowInputSessionResult, x as WorkflowInputSessionDetail, y as WorkflowInputEvent, z as WorkflowGraph, A as WorkflowRunContentRetention, B as WorkflowRunDetail, C as WorkflowRunCancellationResult, D as WorkflowTemplateProjectionUpsertParams, E as WorkflowTemplateProjectionResult, F as PublicWorkflowTemplateProjection, G as WorkflowTemplateProjectionRevocationResult, H as WorkflowTemplateBindingCompletionParams, I as WorkflowTemplateBindingCompletionResult, J as WorkflowTemplateShortUrlParams, K as WorkflowTemplateShortUrlResult, S as ShortUrlRevokeResult, L as WorkflowTemplateImportPayload, M as ImportedWorkflowTemplate } from './cli-BLFXUeuE.js';
+export { N as AuthMethodsStatus, O as AuthoritativeChatReconciliation, Q as BackupCodesResult, R as BankTransferOrderDetails, T as BankTransferStatus, V as CachedChat, X as CachedNewChatSuggestion, Y as ChatListPage, Z as CliSignupResult, _ as DecryptedDraft, $ as DecryptedEmbed, a0 as DecryptedMemoryEntry, a1 as DecryptedMessage, a2 as DecryptedNewChatSuggestion, a3 as DocsFile, a4 as DocsFolder, a5 as DocsSearchResult, a6 as DocsTree, a7 as EncryptedDraft, a8 as GiftCardBankTransferStatus, a9 as INTEREST_TAG_IDS, aa as ImagesAiDetectionClassification, ab as ImagesAiDetectionSummary, ac as InterestTagId, ad as MATE_NAMES, ae as MEMORY_TYPE_REGISTRY, af as MemoryFieldDef, ag as MemoryTypeDef, ah as OpenMatesClient, ai as OpenMatesClientOptions, aj as OpenMatesSession, ak as SyncCache, al as TopicPreferencesPayload, am as TotpSetupStartResult, an as WorkflowEdge, ao as WorkflowNode, ap as WorkflowNodeRun, aq as WorkflowNodeType, ar as WorkflowRunContentStorage, as as buildImagesAiDetectionSummary, at as classifyImagesAiDetection, au as deriveAppUrl, av as formatImagesAiDetectionLabel, aw as getExtForLang, ax as normalizeInterestTagIds, ay as reconcileAuthoritativeChats, az as serializeToYaml } from './cli-BLFXUeuE.js';
 
 interface ProjectedAssistantSpeechSegment {
     sequence: number;

package/dist/index.js

@@ -42,7 +42,7 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-65ZA6VF2.js";
+} from "./chunk-EKALVG2T.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.18.0-alpha.3",
+  "version": "0.18.0-alpha.4",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",
@@ -73,6 +73,7 @@
     "@toon-format/toon": "2.3.1",
     "ahocorasick": "1.0.2",
     "jszip": "^3.10.1",
+    "proper-lockfile": "^4.1.2",
     "qrcode-terminal": "^0.12.0",
     "tweetnacl": "^1.0.3",
     "ws": "8.21.0",
@@ -81,6 +82,7 @@
   "devDependencies": {
     "@repo/eslint-config": "workspace:*",
     "@types/node": "^24.5.0",
+    "@types/proper-lockfile": "^4.1.4",
     "@types/qrcode-terminal": "^0.12.2",
     "@types/ws": "^8.18.1",
     "eslint": "^9.35.0",