openmates 0.27.0-alpha.11 → 0.27.0-alpha.13

package/dist/{chunk-PKI7ESDV.js → chunk-4QNMHHIN.js}

@@ -14453,6 +14453,7 @@ var OpenMatesClient = class _OpenMatesClient {
     let activeFocusId = null;
     let encryptedChatKey = null;
     let chatSlugLookupKey = null;
+    let focusPhaseState = {};
     let baselineMessagesV = 0;
     let notificationTitle = null;
     let terminalExpectedMessagesV = 1;
@@ -14489,6 +14490,12 @@ var OpenMatesClient = class _OpenMatesClient {
               } catch {
               }
             }
+            const encryptedPhaseState = chat.details.encrypted_focus_phase_state;
+            if (typeof encryptedPhaseState === "string" && encryptedPhaseState) {
+              const phaseText = await decryptWithAesGcmCombined(encryptedPhaseState, chatKeyBytes);
+              if (!phaseText) throw new Error("Could not decrypt focus phase progress. Sync before sending again.");
+              focusPhaseState = JSON.parse(phaseText);
+            }
             const encryptedFocusId = chat.details.encrypted_active_focus_id;
             if (typeof encryptedFocusId === "string" && encryptedFocusId) {
               activeFocusId = await decryptWithAesGcmCombined(encryptedFocusId, chatKeyBytes);
@@ -14508,6 +14515,7 @@ var OpenMatesClient = class _OpenMatesClient {
     ws.onMessageType("focus_mode_activated", (event) => {
       if (event.chat_id !== chatId || !event.focus_id || !chatKeyBytes || params.incognito) return;
       const focusId = event.focus_id;
+      if (!focusId.startsWith("project-")) delete focusPhaseState[focusId];
       const key = chatKeyBytes;
       focusPersistence = focusPersistence.then(async () => {
         const encryptedFocusId = await encryptWithAesGcmCombined(focusId, key);
@@ -14519,6 +14527,51 @@ var OpenMatesClient = class _OpenMatesClient {
         focusPersistenceError = error;
       });
     });
+    ws.onMessageType("focus_phases_updated", (event) => {
+      if (event.chat_id !== chatId || !event.states || !chatKeyBytes || params.incognito) return;
+      const key = chatKeyBytes;
+      const states = event.states;
+      focusPersistence = focusPersistence.then(async () => {
+        for (const [focusId, phase] of Object.entries(states)) {
+          if (phase.schema_version !== 1 || phase.chat_id !== chatId || phase.focus_id !== focusId || !Number.isSafeInteger(phase.version) || phase.version < 0 || !Array.isArray(phase.transitions) || phase.transitions.length > 32) {
+            throw new Error("Invalid focus phase state received");
+          }
+          if (focusPhaseState[focusId]?.run_id === phase.run_id && focusPhaseState[focusId].version > phase.version) states[focusId] = focusPhaseState[focusId];
+        }
+        focusPhaseState = states;
+        const encryptedState = await encryptWithAesGcmCombined(JSON.stringify(states), key);
+        const persisted = ws.waitForMessage(
+          "encrypted_metadata_stored",
+          (payload) => payload.chat_id === chatId,
+          2e4
+        );
+        await ws.sendAsync("encrypted_chat_metadata", {
+          chat_id: chatId,
+          ...teamId ? { team_id: teamId } : {},
+          encrypted_focus_phase_state: encryptedState
+        });
+        await persisted;
+        const eventIds = /* @__PURE__ */ new Set();
+        for (const phase of Object.values(states)) for (const transition of phase.transitions) {
+          if (transition.chat_id !== chatId || transition.focus_id !== phase.focus_id || !transition.event_id || eventIds.has(transition.event_id)) continue;
+          eventIds.add(transition.event_id);
+          const content = JSON.stringify(transition);
+          await ws.sendAsync("chat_system_message_added", {
+            chat_id: chatId,
+            message: {
+              message_id: transition.event_id,
+              role: "system",
+              status: "synced",
+              encrypted_content: await encryptWithAesGcmCombined(content, key),
+              created_at: transition.created_at
+            }
+          });
+        }
+        clearSyncCache(teamId);
+      }).catch((error) => {
+        focusPersistenceError = error;
+      });
+    });
     const clientCapabilities = taskUpdateJobsEnabled ? ["task_update_jobs"] : [];
     if (!params.incognito && chatKeyBytes) {
       registerCliProjectFileExecutor({
@@ -14541,6 +14594,7 @@ var OpenMatesClient = class _OpenMatesClient {
       client_capabilities: clientCapabilities,
       // Only decrypted current metadata restores focus; history is never authority.
       active_focus_id: activeFocusId,
+      focus_phase_state: focusPhaseState,
       is_incognito: Boolean(params.incognito),
       message: {
         message_id: messageId,
@@ -68976,6 +69030,23 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       }
     }
   },
+  focus_phases: {
+    phases: {
+      text: "Phases"
+    },
+    requirements: {
+      text: "Requirements"
+    },
+    confirmation: {
+      text: "Your confirmation is required"
+    },
+    switched: {
+      text: "Focus phase:"
+    },
+    returned: {
+      text: "Returned to focus phase:"
+    }
+  },
   footer: {
     language_selector: {
       label: {
@@ -70826,6 +70897,15 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
         },
         user_data_backups: {
           text: "**User data backups:** 60 days via S3 lifecycle; backups contain only ciphertext encrypted with your own key"
+        },
+        content_history_v1: {
+          text: "Content: Current records are retained until you delete them or close the account, subject to backup cycles. Earlier database revision and activity records can remain after current records are deleted, as described separately below."
+        },
+        historical_directus_history: {
+          text: "Historical database records: Earlier generic revision and activity rows may retain account-profile fields or encrypted chat and artifact snapshots after deletion of current records. They currently have no enforced automatic expiry. The 60-day encrypted-backup lifecycle does not apply to this history."
+        },
+        compliance_logs_history_v1: {
+          text: "Compliance logs: Security and accountability logs can remain for their purposes. Historical database revision and activity records have no enforced automatic two-year expiry today. Financial compliance records retain their separate applicable tax and commercial-law periods."
         }
       },
       legal_basis: {
@@ -71106,6 +71186,11 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
           answer: {
             text: "Audio travels over TLS through the OpenMates backend hosted by Hetzner and is sent to Mistral for transcription. Realtime audio is streamed; uploaded recordings are encrypted by our upload service before durable storage and decrypted only in server memory for transcription. The raw transcript is then sent to Google Gemini to correct obvious transcription errors and create a title. Audio and raw transcripts do not receive the placeholder substitution used for eligible typed chat messages. OpenMates stores recordings and transcripts as encrypted account content, but Mistral and Google may retain API request data under their own policies."
           }
+        },
+        deletion_history_v1: {
+          answer: {
+            text: "When you delete chats or your account, OpenMates deletes the current records under that deletion\u2019s authority. Account deletion also destroys account-controlled encryption keys, making data protected solely by those keys unreadable. Earlier database revision and activity records may still contain account-profile fields or encrypted chat and artifact snapshots after current records are deleted. Those historical records are separate from short-lived encrypted backups and have no enforced automatic expiry today. Invoices, payment records, security logs and provider-held data may also remain for their applicable purposes."
+          }
         }
       },
       protection: {
@@ -71318,6 +71403,9 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
           },
           description: {
             text: "Authentication and data-access audit logs are retained for 2 years under BSI \xA734 BDSG (German security audit obligations). These logs contain timestamp, user identifier, event type, and status \u2014 no content."
+          },
+          description_history_v1: {
+            text: "Authentication and data-access audit logs can contain timestamps, user identifiers, event types and status. No enforced automatic two-year expiry for historical database revision and activity records exists today. Generic history with earlier record snapshots is described separately below; no general two-year statutory duty is claimed."
           }
         },
         third_party_ai_logs: {
@@ -71351,6 +71439,17 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
           description: {
             text: "AI providers retain request logs under their own policies, independently of OpenMates, and we cannot delete data from their systems. Retention is provider-specific; for example, Mistral states 30 rolling days for ordinary API input and output unless zero-data retention is active, while Google's current Gemini abuse-monitoring documentation states 55 days for logged prompts, context, and outputs. Eligible typed chat uses client-side placeholder substitution, which reduces exposure but may miss data and does not cover voice audio, raw transcripts, uploaded or reference files, connected-account content, or structured skill inputs unless a feature explicitly says otherwise."
           }
+        },
+        intro_history_v1: {
+          text: "When you delete your account, we destroy account-controlled encryption keys and remove current account records. Earlier database revision and activity records may remain after those records are deleted. Other data retained for security, financial, provider or backup purposes is listed separately below:"
+        },
+        historical_directus_history: {
+          heading: {
+            text: "Historical database revisions and activity"
+          },
+          description: {
+            text: "Historical database revision and activity records created before a chat or account is deleted can retain earlier account-profile fields or encrypted chat and artifact snapshots. Deleting the current records does not automatically purge or irreversibly neutralize those historical rows. They currently have no enforced automatic expiry and are separate from the 60-day encrypted-backup lifecycle and dedicated security or financial records."
+          }
         }
       },
       training_policies: {

package/dist/cli.js

@@ -19,7 +19,7 @@ import {
   serializeToYaml,
   shouldRequireTrustedAccountGuard,
   waitForWorkflowRun
-} from "./chunk-PKI7ESDV.js";
+} from "./chunk-4QNMHHIN.js";
 import "./chunk-FRNW5Q2V.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";

package/dist/index.js

@@ -43,7 +43,7 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-PKI7ESDV.js";
+} from "./chunk-4QNMHHIN.js";
 import "./chunk-FRNW5Q2V.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";

package/fixtures/privacy-runtime/linux-arm64/manifest.json

@@ -17,47 +17,47 @@
     {
       "name": "libggml-base.so",
       "bytes": 1110088,
-      "sha256": "767a302e323fb0d19f43ea7486852f926d7f137a66da3460cf47f9a6af7f3f2f"
+      "sha256": "c64d722fab0e4fead54199164443a207cd3ad3eee8b42ad2388540068c19314a"
     },
     {
       "name": "libggml-base.so.0",
       "bytes": 1110088,
-      "sha256": "767a302e323fb0d19f43ea7486852f926d7f137a66da3460cf47f9a6af7f3f2f"
+      "sha256": "c64d722fab0e4fead54199164443a207cd3ad3eee8b42ad2388540068c19314a"
     },
     {
       "name": "libggml-base.so.0.15.1",
       "bytes": 1110088,
-      "sha256": "767a302e323fb0d19f43ea7486852f926d7f137a66da3460cf47f9a6af7f3f2f"
+      "sha256": "c64d722fab0e4fead54199164443a207cd3ad3eee8b42ad2388540068c19314a"
     },
     {
       "name": "libggml-cpu.so",
       "bytes": 869800,
-      "sha256": "067910539a5d1837aae4836c8a0d5c7be36b486c4e0f81d7a3be36faccaed58c"
+      "sha256": "5d92fb1742ee59a038123138fa46d0d5e6a1c3f03ddfc250dcf715332b86372f"
     },
     {
       "name": "libggml-cpu.so.0",
       "bytes": 869800,
-      "sha256": "067910539a5d1837aae4836c8a0d5c7be36b486c4e0f81d7a3be36faccaed58c"
+      "sha256": "5d92fb1742ee59a038123138fa46d0d5e6a1c3f03ddfc250dcf715332b86372f"
     },
     {
       "name": "libggml-cpu.so.0.15.1",
       "bytes": 869800,
-      "sha256": "067910539a5d1837aae4836c8a0d5c7be36b486c4e0f81d7a3be36faccaed58c"
+      "sha256": "5d92fb1742ee59a038123138fa46d0d5e6a1c3f03ddfc250dcf715332b86372f"
     },
     {
       "name": "libggml.so",
       "bytes": 1899104,
-      "sha256": "6701ad0f790af998cc3a77e9b8b60d2017b55c19a91b11c8f86d525bc3bed22f"
+      "sha256": "ff3318374e6087592081d85ced75c8dd600eec54e9d14621e494d8f379533fb5"
     },
     {
       "name": "libggml.so.0",
       "bytes": 1899104,
-      "sha256": "6701ad0f790af998cc3a77e9b8b60d2017b55c19a91b11c8f86d525bc3bed22f"
+      "sha256": "ff3318374e6087592081d85ced75c8dd600eec54e9d14621e494d8f379533fb5"
     },
     {
       "name": "libggml.so.0.15.1",
       "bytes": 1899104,
-      "sha256": "6701ad0f790af998cc3a77e9b8b60d2017b55c19a91b11c8f86d525bc3bed22f"
+      "sha256": "ff3318374e6087592081d85ced75c8dd600eec54e9d14621e494d8f379533fb5"
     },
     {
       "name": "openmates-pii-worker",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.27.0-alpha.11",
+  "version": "0.27.0-alpha.13",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",