openmates 0.27.0-alpha.46 → 0.27.0-alpha.48

package/dist/{chunk-B4UXKGH3.js → chunk-5HWC6OTW.js}

@@ -414,7 +414,7 @@ function loadSession() {
   switch (onDisk.masterKeyStorage) {
     case "keychain":
       masterKey = retrieveMasterKey("keychain", resolveKeyStorageId(onDisk.hashedEmail));
-      if (!masterKey) throw new Error("Existing OS keyring entry is unavailable; local session was preserved.");
+      if (!masterKey) throw new Error("Existing OS keyring entry is unavailable; local session was preserved. Unlock your OS keyring or run `openmates login` to pair again.");
       break;
     case "encrypted":
       masterKey = retrieveMasterKey(
@@ -437,6 +437,10 @@ function loadSession() {
   }
   return buildSession(onDisk, masterKey, getEmailEncryptionKeyFromDisk(onDisk));
 }
+function loadStoredSessionApiUrl() {
+  const onDisk = readJsonFile(join(getStateDir(), "session.json"));
+  return typeof onDisk?.apiUrl === "string" && onDisk.apiUrl ? onDisk.apiUrl : void 0;
+}
 function getCredentialStorageMode() {
   const onDisk = readJsonFile(join(getStateDir(), "session.json"));
   if (!onDisk) return "none";
@@ -531,7 +535,7 @@ function getEmailEncryptionKeyFromDisk(onDisk) {
   switch (onDisk.emailEncryptionKeyStorage) {
     case "keychain": {
       const key = retrieveMasterKey("keychain", resolveKeyStorageId(`${onDisk.hashedEmail}:email`));
-      if (!key) throw new Error("Existing email keyring entry is unavailable; local session was preserved.");
+      if (!key) throw new Error("Existing email keyring entry is unavailable; local session was preserved. Unlock your OS keyring or run `openmates login` to pair again.");
       return key;
     }
     case "encrypted":
@@ -1194,6 +1198,7 @@ export {
   saveSession,
   persistSessionRefreshCookie,
   loadSession,
+  loadStoredSessionApiUrl,
   getCredentialStorageMode,
   purgeLocalPrivateData,
   saveLocalTeamKey,

package/dist/{chunk-WCND4GFX.js → chunk-TYME6DVO.js}

@@ -11,6 +11,7 @@ import {
   loadAnonymousId,
   loadLocalTeamKey,
   loadSession,
+  loadStoredSessionApiUrl,
   loadSyncCache,
   loadTrustedAccountId,
   persistSessionRefreshCookie,
@@ -34,7 +35,7 @@ import {
   verifyInstalledModel,
   verifyPrivacyRuntime,
   withSessionRefreshLock
-} from "./chunk-B4UXKGH3.js";
+} from "./chunk-5HWC6OTW.js";
 import {
   RemoteAccessReplayGuard,
   createRemoteAccessHandshake,
@@ -2748,6 +2749,9 @@ async function requestProjectRemoteOperation(options) {
   if (options.source.status !== "connected") {
     throw new ProjectRequesterError("source_offline", "The selected Project source is offline.");
   }
+  if (options.operation === "search" && options.arguments.include_content === true && options.source.capabilities && !options.source.capabilities.includes("read")) {
+    throw new ProjectRequesterError("source_capability_denied", "This Project source does not allow file reads.");
+  }
   const timeoutMs = options.timeoutMs ?? REMOTE_PROTOCOL_TIMEOUT_MS;
   let sourceSessionId = stringField(options.source, "source_session_id");
   let keyEpoch = numberField(options.source, "key_epoch");
@@ -3071,11 +3075,16 @@ function createProjectFileJobExecutor(options) {
       }
       approved.delete(job.operation_id);
       const safeOutput = context.privacy ? await context.privacy.redactResult(output) : output;
+      const sourceId = context.sourceId !== void 0 ? context.sourceId : job.source_id ?? null;
+      const resultBody = safeOutput && typeof safeOutput === "object" && !Array.isArray(safeOutput) ? { ...safeOutput } : { value: safeOutput };
+      if (job.operation === "search" && job.arguments.include_content === true && Array.isArray(resultBody.contents)) {
+        resultBody.contents = resultBody.contents.map((item2) => item2 && typeof item2 === "object" && !Array.isArray(item2) ? { ...item2, source_id: sourceId } : item2);
+      }
       await result("completed", {
-        ...safeOutput && typeof safeOutput === "object" ? safeOutput : { value: safeOutput },
+        ...resultBody,
         // Preserve the resolver-selected source so a chat can reopen the
         // original remote file without uploading its contents as an embed.
-        source_id: context.sourceId !== void 0 ? context.sourceId : job.source_id ?? null,
+        source_id: sourceId,
         ...proposalCommitment ? { proposal_commitment: proposalCommitment } : {}
       });
       if (mutation) {
@@ -3119,6 +3128,9 @@ var PROJECT_SEARCH_DEFAULT_MAX_RESULTS = 20;
 var PROJECT_SEARCH_MAX_RESULTS = 100;
 var PROJECT_SEARCH_MAX_QUERY_CHARS = 2e3;
 var PROJECT_SEARCH_MAX_GLOB_CHARS = 512;
+var PROJECT_SEARCH_CONTENT_MAX_FILES = 8;
+var PROJECT_SEARCH_CONTENT_MAX_FILE_BYTES = 24 * 1024;
+var PROJECT_SEARCH_CONTENT_MAX_TOTAL_BYTES = 96 * 1024;
 var PROJECT_CREDENTIAL_GLOBS = [
   ".env",
   ".env.*",
@@ -3180,7 +3192,9 @@ function normalizeProjectSearchRequest(args) {
   const path2 = args.path ?? ".";
   const glob = args.glob;
   const maxResults = args.max_results ?? PROJECT_SEARCH_DEFAULT_MAX_RESULTS;
+  const includeContent = args.include_content ?? false;
   if (target !== "files" && target !== "content") fail2("invalid_search_target");
+  if (typeof includeContent !== "boolean" || includeContent && target !== "files") fail2("invalid_search_content_option");
   if (mode !== "literal" && mode !== "regex") fail2("invalid_search_mode");
   if (typeof query !== "string" || !query.trim() || query.length > PROJECT_SEARCH_MAX_QUERY_CHARS || hasControlCharacters(query)) fail2("invalid_search_query");
   if (typeof path2 !== "string") fail2("invalid_search_path");
@@ -3195,7 +3209,8 @@ function normalizeProjectSearchRequest(args) {
     query,
     path: normalizedPath,
     ...typeof glob === "string" ? { glob } : {},
-    maxResults
+    maxResults,
+    includeContent
   };
 }
 function matchesProjectSearchQuery(value, request) {
@@ -3593,17 +3608,43 @@ async function executeHostedProjectFileJob(adapter, job, mutation) {
       }
     }
     const matches2 = [];
+    const contents = [];
+    const contentOmissions = [];
+    let contentBytes = 0;
     const limit = search.maxResults;
     const byName = search.target === "files";
     let examined = 0;
     let omitted = 0;
     let incomplete = false;
-    for (const file of candidates.slice(0, 100)) {
+    for (const file of (search.includeContent ? candidates.sort((a, b) => a.path.localeCompare(b.path)) : candidates).slice(0, 100)) {
       examined++;
       if (byName) {
         if (matchesProjectSearchQuery(file.path, search)) {
-          if (matches2.length < limit) matches2.push({ path: file.path, embed_id: file.embedId });
-          else omitted++;
+          if (matches2.length < limit) {
+            const match = { path: file.path, embed_id: file.embedId };
+            matches2.push(match);
+            if (search.includeContent) {
+              let reason;
+              if (contents.length >= PROJECT_SEARCH_CONTENT_MAX_FILES) reason = "file_limit";
+              else {
+                try {
+                  const content2 = textContent(await adapter.readHead(file.embedId));
+                  const size = bytes(content2).length;
+                  if (size > PROJECT_SEARCH_CONTENT_MAX_FILE_BYTES) reason = "file_too_large";
+                  else if (contentBytes + size > PROJECT_SEARCH_CONTENT_MAX_TOTAL_BYTES) reason = "total_bytes_limit";
+                  else {
+                    const expectedBase = await projectFileContentHash(content2);
+                    match.expected_base = expectedBase;
+                    contents.push({ path: file.path, embed_id: file.embedId, content: content2, expected_base: expectedBase, size_bytes: size });
+                    contentBytes += size;
+                  }
+                } catch {
+                  reason = "unreadable_or_unsupported";
+                }
+              }
+              if (reason) contentOmissions.push({ path: file.path, reason });
+            }
+          } else omitted++;
         }
       } else {
         let content2;
@@ -3627,6 +3668,7 @@ async function executeHostedProjectFileJob(adapter, job, mutation) {
     }
     return {
       matches: matches2,
+      ...search.includeContent ? { contents, content_omissions: contentOmissions, content_incomplete: contentOmissions.length > 0 } : {},
       excluded,
       omitted,
       truncated: omitted > 0 || incomplete || candidates.length > examined
@@ -6291,7 +6333,13 @@ async function discoverCliProjectCandidates(client2, options) {
         typeof record10.encrypted_name === "string" ? decryptWithAesGcmCombined(record10.encrypted_name, key) : null,
         typeof record10.encrypted_description === "string" ? decryptWithAesGcmCombined(record10.encrypted_description, key) : null
       ]);
-      return name ? { project_id: record10.project_id, name: name.slice(0, 160), summary: (summary ?? "").slice(0, 640), auto_selection: settings.auto_selection !== false } : null;
+      return name ? {
+        project_id: record10.project_id,
+        name: name.slice(0, 160),
+        summary: (summary ?? "").slice(0, 640),
+        auto_selection: settings.auto_selection !== false,
+        focus_activation_policy: settings.focus_activation_policy === "immediate" || settings.focus_activation_policy === "approval" ? settings.focus_activation_policy : "delayed"
+      } : null;
     } catch {
       return null;
     }
@@ -10911,6 +10959,20 @@ function buildInferenceHistoryMessage(historyMessage, chatId) {
     category: historyMessage.role === "assistant" ? historyMessage.category : void 0
   };
 }
+function canonicalSavedChatMessageId(message) {
+  return message.clientMessageId || message.id;
+}
+function buildSavedChatMessageHistory(messages, chatId) {
+  return messages.map((message) => ({
+    message_id: canonicalSavedChatMessageId(message),
+    chat_id: chatId,
+    role: message.role,
+    sender_name: message.senderName ?? message.role,
+    content: message.content,
+    created_at: message.createdAt,
+    category: message.category
+  }));
+}
 var MATE_NAMES = {
   software_development: "Sophia",
   business_development: "Burton",
@@ -11161,8 +11223,8 @@ var OpenMatesClient = class _OpenMatesClient {
   explicitSession;
   constructor(options = {}) {
     this.explicitSession = options.session !== void 0;
-    const diskSession = options.session ?? this.getValidSessionFromDisk();
-    this.apiUrl = (options.apiUrl ?? process.env.OPENMATES_API_URL ?? diskSession?.apiUrl ?? loadDefaultServerApiUrl() ?? DEFAULT_API_URL).replace(/\/$/, "");
+    const diskSession = options.session ?? (options.loadStoredSession === false ? null : this.getValidSessionFromDisk());
+    this.apiUrl = (options.apiUrl ?? process.env.OPENMATES_API_URL ?? diskSession?.apiUrl ?? (options.loadStoredSession === false ? loadStoredSessionApiUrl() : void 0) ?? loadDefaultServerApiUrl() ?? DEFAULT_API_URL).replace(/\/$/, "");
     this.session = diskSession;
     this.http = new OpenMatesHttpClient({
       apiUrl: this.apiUrl,
@@ -15153,15 +15215,7 @@ var OpenMatesClient = class _OpenMatesClient {
     let messageHistoryForRequest = params.messageHistory;
     if (!params.incognito && !isNewChat && !messageHistoryForRequest) {
       const { messages } = savedPrivacyHistory;
-      messageHistoryForRequest = messages.map((message) => ({
-        message_id: message.id,
-        chat_id: chatId,
-        role: message.role,
-        sender_name: message.senderName ?? message.role,
-        content: message.content,
-        created_at: message.createdAt,
-        category: message.category
-      }));
+      messageHistoryForRequest = buildSavedChatMessageHistory(messages, chatId);
     }
     ws.send("set_active_chat", { chat_id: chatId, ...teamId ? { team_id: teamId } : {} });
     const connectedAccountDirectory = buildConnectedAccountDirectoryPayload(
@@ -15241,7 +15295,7 @@ var OpenMatesClient = class _OpenMatesClient {
       ws,
       chatId,
       chatKey: chatKeyBytes,
-      existingMessageIds: savedPrivacyHistory?.messages.map((message) => message.id) ?? [],
+      existingMessageIds: savedPrivacyHistory?.messages.map(canonicalSavedChatMessageId) ?? [],
       previousRulesSetKey: savedPrivacyHistory?.messages.filter((message) => message.role === "system").map((message) => parseChatContextContent(message.content)).filter((event) => event?.type === "rules_loaded").at(-1)?.set_key,
       onApplied: params.onChatContextApplied
     }) : null;
@@ -63395,6 +63449,12 @@ Only output the final Markdown table. Do NOT include explanations, notes, or any
       feature_notice: {
         text: "You are using free anonymous credits. File uploads, memories, chat sync, and some other features require creating an account."
       },
+      signup_now: {
+        text: "Signup now"
+      },
+      signup_benefits: {
+        text: "to unlock all features and to keep your chats and access them across your devices."
+      },
       daily_credits_exhausted: {
         text: "You used up your free daily credits. Sign up & buy credits to make full use of OpenMates."
       }
@@ -65407,6 +65467,20 @@ Only output the final Markdown table. Do NOT include explanations, notes, or any
     }
   },
   email: {
+    workflow_completion: {
+      subject: {
+        text: "Your scheduled Workflow completed"
+      },
+      heading: {
+        text: "Your scheduled Workflow completed"
+      },
+      detail: {
+        text: "Run {run_id} completed at {completed_time}."
+      },
+      view: {
+        text: "Open result"
+      }
+    },
     account_created: {
       text: "Account created"
     },
@@ -68457,6 +68531,9 @@ Only output the final Markdown table. Do NOT include explanations, notes, or any
         source_unavailable: {
           text: "Connected source is unavailable. Open it when the source is online."
         },
+        changed_since_answer: {
+          text: "This file changed since the answer. Showing the current version."
+        },
         preview_unavailable: {
           text: "A preview is unavailable for this file."
         },
@@ -68845,6 +68922,9 @@ Only output the final Markdown table. Do NOT include explanations, notes, or any
             text: "Selects the fastest AI model"
           }
         }
+      },
+      openmates_description: {
+        text: "Ask OpenMates to help"
       }
     },
     pii: {
@@ -75228,6 +75308,11 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       buy_credits: {
         text: "Buy Credits"
       }
+    },
+    workflow_run: {
+      completed: {
+        text: "Your scheduled Workflow completed"
+      }
     }
   },
   platforms: {
@@ -75272,7 +75357,22 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       text: "Manage Rule guides"
     },
     auto_selection_description: {
-      text: "Suggested Project work starts after a cancellable four-second countdown. When off, mention the Project to activate it yourself."
+      text: "When off, inferred Project mentions do not activate focus. A direct Project mention can still activate it."
+    },
+    focus_activation_policy_label: {
+      text: "Inferred Project focus"
+    },
+    focus_activation_policy_delayed: {
+      text: "After a four-second countdown"
+    },
+    focus_activation_policy_immediate: {
+      text: "Immediately"
+    },
+    focus_activation_policy_approval: {
+      text: "Ask me to approve"
+    },
+    focus_activation_policy_description: {
+      text: "Choose how a suggested Project focus starts. A direct Project mention activates it when you send the message."
     },
     auto_selection_saved: {
       text: "Project focus preference saved."
@@ -75298,6 +75398,12 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
     focus_access_grant: {
       text: "Grant access"
     },
+    focus_access_decline: {
+      text: "Decline"
+    },
+    focus_access_activating: {
+      text: "Activating\u2026"
+    },
     focus_access_failed: {
       text: "Access could not be activated. Check your connection or send a new request."
     },
@@ -78763,13 +78869,13 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
           text: "Saving..."
         },
         email_chat_how_it_works: {
-          text: "Chat emails are sent when you're away. Workflow runs are summarized in one daily email."
+          text: "Chat emails are sent when you're away. Successful scheduled Workflow runs get a completion email and a daily summary."
         },
         email_workflow_runs: {
           text: "Workflow runs"
         },
         email_workflow_runs_desc: {
-          text: "One daily email summarizing your workflow runs"
+          text: "Completion emails for successful scheduled Workflow runs, plus a daily summary"
         },
         email_include_content: {
           text: "Include titles and previews in email"
@@ -83621,6 +83727,9 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       },
       untitled_team: {
         text: "Untitled team"
+      },
+      chat_ai_reminder: {
+        text: "Mention @openmates or a specific Mate to involve AI in this conversation."
       }
     },
     watch_whisper: {
@@ -84918,9 +85027,6 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
     elapsed: {
       text: "{time} elapsed"
     },
-    remaining: {
-      text: "{time} left"
-    },
     visual: {
       text: "Call visual"
     },
@@ -86022,6 +86128,20 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
         text: "Too many changes are waiting for evaluation or delivery. The last successful version was kept."
       }
     },
+    completion: {
+      opening_message: {
+        text: "Opening the Workflow message\u2026"
+      },
+      message_unavailable: {
+        text: "This Workflow message is unavailable."
+      },
+      review_run_or: {
+        text: "You can review the run or"
+      },
+      retry_message: {
+        text: "retry opening the message"
+      }
+    },
     sidebar: {
       loading: {
         text: "Loading workflows..."
@@ -86298,6 +86418,9 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       content_unavailable: {
         text: "Saved inputs and results are no longer available. Run and step statuses remain visible."
       },
+      target_unavailable: {
+        text: "This Workflow run is unavailable."
+      },
       execution_failed: {
         text: "This run failed. Check the highlighted step before trying again."
       },
@@ -105645,6 +105768,14 @@ async function handleLiveRemoteAccessRequest(client2, ws, ownerId2, sourceSessio
           authorize
         });
       } else {
+        if (frame.operation === "search" && bootstrap.arguments.include_content === true) {
+          const context = binding.teamId ? { teamId: binding.teamId } : { personal: true };
+          const currentSources = await client2.listProjectSources(frame.project_id, context);
+          const currentSource = currentSources.find((source) => source.source_id === frame.source_id);
+          if (!currentSource?.capabilities?.includes("search") || !currentSource.capabilities.includes("read")) {
+            throw Object.assign(new Error("source_capability_denied"), { code: "source_capability_denied" });
+          }
+        }
         let approvedIgnoredPath = null;
         const requestedPath = typeof bootstrap.arguments.path === "string" ? bootstrap.arguments.path : ".";
         const ignoredReadContext = bootstrap.ignored_read_context;
@@ -105724,10 +105855,12 @@ async function executeRemoteAccessOperation(sourceRoot, operation, args, trusted
     priorityPath: args.priority_path,
     glob: typeof args.glob === "string" ? args.glob : void 0,
     maxResults: typeof args.max_results === "number" ? args.max_results : void 0,
+    includeContent: args.include_content,
     runRg: runRgCommand
   });
 }
 function remoteAccessOperationErrorCode(error) {
+  if (error?.code === "source_capability_denied") return "source_capability_denied";
   if (error instanceof RemoteFileMutationError) return error.code;
   if (error instanceof RemoteFileTransferError) return error.code;
   if (error instanceof ProjectSearchProtocolError) return error.code;
@@ -105816,7 +105949,8 @@ async function searchRemoteSource(options) {
     mode: options.mode,
     path: options.path,
     glob: options.glob,
-    max_results: options.maxResults
+    max_results: options.maxResults,
+    include_content: options.includeContent
   });
   const policy = loadProjectPathPolicy(sourceRoot, {
     trustedPrivatePaths: options.userProtectedPatterns,
@@ -105853,9 +105987,9 @@ async function searchRemoteSource(options) {
   try {
     if (request.target === "files") {
       if (metadataTruncated) {
-        return searchRemoteFileNamesWithoutRg(request, sourceRoot, targetPath2, policy, priorityPath, priorityAbsolute);
+        return includeRemoteSearchContent(searchRemoteFileNamesWithoutRg(request, sourceRoot, targetPath2, policy, priorityPath, priorityAbsolute), sourceRoot, request);
       }
-      return await searchRemoteFileNamesWithRg(options.runRg, sourceRoot, searchPath, request, policy, hardlinkExclusions, directories, priorityPath);
+      return includeRemoteSearchContent(await searchRemoteFileNamesWithRg(options.runRg, sourceRoot, searchPath, request, policy, hardlinkExclusions, directories, priorityPath), sourceRoot, request);
     }
     const output = await options.runRg(
       buildRgContentSearchArgs(request, searchPath, policy, hardlinkExclusions),
@@ -105867,11 +106001,45 @@ async function searchRemoteSource(options) {
     if (error.code !== "ENOENT") throw error;
     if (request.mode === "regex") throw new ProjectSearchProtocolError("regex_search_unavailable");
     if (request.target === "files") {
-      return searchRemoteFileNamesWithoutRg(request, sourceRoot, targetPath2, policy, priorityPath, priorityAbsolute);
+      return includeRemoteSearchContent(searchRemoteFileNamesWithoutRg(request, sourceRoot, targetPath2, policy, priorityPath, priorityAbsolute), sourceRoot, request);
     }
     return searchRemoteSourceWithoutRg(request, sourceRoot, targetPath2, policy);
   }
 }
+function includeRemoteSearchContent(result, sourceRoot, request) {
+  if (!request.includeContent) return result;
+  const contents = [];
+  const contentOmissions = [];
+  let totalBytes = 0;
+  for (const match of result.matches) {
+    let reason;
+    if (match.kind === "directory") reason = "directory";
+    else if (contents.length >= PROJECT_SEARCH_CONTENT_MAX_FILES) reason = "file_limit";
+    else if (isBinaryPath(match.path)) reason = "binary_or_unsupported";
+    else {
+      try {
+        const read = readRemoteAccessTextFile({
+          sourceRoot,
+          relativePath: match.path,
+          maxBytes: PROJECT_SEARCH_CONTENT_MAX_FILE_BYTES,
+          maxLines: DEFAULT_MAX_READ_LINES,
+          isIgnoredReadApproved: () => false
+        });
+        if (read.truncated || !read.expected_base) reason = "file_too_large_or_line_limit";
+        else if (totalBytes + read.sizeBytes > PROJECT_SEARCH_CONTENT_MAX_TOTAL_BYTES) reason = "total_bytes_limit";
+        else {
+          match.expected_base = read.expected_base;
+          contents.push({ path: match.path, content: read.content, expected_base: read.expected_base, size_bytes: read.sizeBytes });
+          totalBytes += read.sizeBytes;
+        }
+      } catch {
+        reason = "unreadable_or_unsupported";
+      }
+    }
+    if (reason) contentOmissions.push({ path: match.path, reason });
+  }
+  return { ...result, contents, content_omissions: contentOmissions, content_incomplete: contentOmissions.length > 0 };
+}
 function collectRgContentMatches(output, sourceRoot, request, policy) {
   const matches2 = [];
   let omitted = 0;
@@ -106830,7 +106998,9 @@ async function main() {
     }
     process.env.OPENMATES_PROFILE = profile;
   }
+  const sessionFree = parsed.flags.help === true || ["help", "version", "update", "upgrade", "login"].includes(command ?? "") || !command && parsed.flags.version !== void 0;
   const client2 = OpenMatesClient.load({
+    loadStoredSession: !sessionFree,
     apiUrl: typeof parsed.flags["api-url"] === "string" ? parsed.flags["api-url"] : void 0
   });
   if (accountGuardRequired && parsed.flags.help !== true && shouldRequireTrustedAccountGuard(command)) {
@@ -109569,25 +109739,31 @@ async function handleProjects(client2, subcommand, rest, flags, redactor) {
       else console.log(`Project focus activated for ${project.name} in chat ${chatId}.`);
       return;
     }
-    if (flags["write-policy"] === void 0 && flags["auto-selection"] === void 0) {
+    if (flags["write-policy"] === void 0 && flags["auto-selection"] === void 0 && flags["focus-activation"] === void 0) {
       const settings2 = await client2.getProjectSettings(project.projectId, context);
       if (flags.json === true) printJson2({ project_id: project.projectId, settings: settings2 });
       else console.log(`Write policy: ${settings2.write_mode ?? "selection required"}
-Automatic focus selection: ${settings2.auto_selection === false ? "off" : "on"}`);
+Automatic focus selection: ${settings2.auto_selection === false ? "off" : "on"}
+Focus activation: ${settings2.focus_activation_policy ?? "delayed"}`);
       return;
     }
     const autoSelectionFlag = flags["auto-selection"];
     if (autoSelectionFlag !== void 0 && autoSelectionFlag !== "on" && autoSelectionFlag !== "off") {
       throw new CliContractError("invalid_auto_selection", "--auto-selection must be on or off.");
     }
+    const focusActivationFlag = flags["focus-activation"];
+    if (focusActivationFlag !== void 0 && focusActivationFlag !== "delayed" && focusActivationFlag !== "immediate" && focusActivationFlag !== "approval") {
+      throw new CliContractError("invalid_focus_activation", "--focus-activation must be delayed, immediate, or approval.");
+    }
     const writeMode = flags["write-policy"] === void 0 ? void 0 : await resolveProjectWriteMode(flags, "Choose the Project write policy:");
     const settings = await client2.updateProjectSettings(project.projectId, {
       ...writeMode === void 0 ? {} : { write_mode: writeMode },
       ...autoSelectionFlag === void 0 ? {} : { auto_selection: autoSelectionFlag === "on" },
+      ...focusActivationFlag === void 0 ? {} : { focus_activation_policy: focusActivationFlag },
       updated_at: nowSeconds2()
     }, context);
     if (flags.json === true) printJson2({ project_id: project.projectId, settings });
-    else console.log(`Project settings saved. Write policy: ${settings.write_mode}; automatic focus selection: ${settings.auto_selection === false ? "off" : "on"}.`);
+    else console.log(`Project settings saved. Write policy: ${settings.write_mode}; automatic focus selection: ${settings.auto_selection === false ? "off" : "on"}; focus activation: ${settings.focus_activation_policy ?? "delayed"}.`);
     return;
   }
   if (["update", "archive", "unarchive"].includes(subcommand)) {
@@ -109757,6 +109933,9 @@ async function handleProjectFiles(client2, masterKey, rest, flags, context) {
   if (flags["include-ignored"] === true && action2 !== "read") {
     throw new CliContractError("include_ignored_read_only", "--include-ignored is allowed only for one exact file read.");
   }
+  if (flags["include-content"] === true && action2 !== "search") {
+    throw new CliContractError("include_content_search_only", "--include-content is allowed only for filename search.");
+  }
   const project = await requiredResolvedProject(client2, masterKey, requiredStringFlag(rest[1], "project"), flags, context);
   const sources = await client2.listProjectSources(project.projectId, context);
   const source = await selectProjectSource(sources, flags);
@@ -109771,7 +109950,7 @@ async function handleProjectFiles(client2, masterKey, rest, flags, context) {
     operation = "search";
     const query = requiredStringFlag(rest[2], "search query");
     if (Buffer.byteLength(query, "utf8") > 256) throw new CliContractError("query_too_large", "Search query exceeds 256 bytes.");
-    argumentsValue = { query, target: "files", mode: "literal", path: "." };
+    argumentsValue = { query, target: "files", mode: "literal", path: ".", include_content: flags["include-content"] === true };
   } else {
     operation = "read_text";
     argumentsValue = { path: safeRelativeProjectPath(requiredStringFlag(rest[2], "relative path")) };
@@ -119182,7 +119361,7 @@ function printProjectsHelp() {
   openmates projects show <project> [--personal|--team <team>] [--json]
   openmates projects open <project> [--personal|--team <team>] [--json]
   openmates projects create <name> [--write-policy apply_and_show|always_ask] [--description <text>] [--icon <name>] [--color <token>] [--pinned] [--personal|--team <team>] [--json]
-  openmates projects settings <project> [--write-policy apply_and_show|always_ask] [--auto-selection on|off] [--personal|--team <team>] [--json]
+  openmates projects settings <project> [--write-policy apply_and_show|always_ask] [--auto-selection on|off] [--focus-activation delayed|immediate|approval] [--personal|--team <team>] [--json]
   openmates projects settings <project> focus activate|deactivate --chat <chat-id> [--personal|--team <team>] [--json]
   openmates projects settings <project> command-presets list|enable|disable [<preset-id>] [--source <source-id>|--path <folder>] [--json]
   openmates projects settings <project> command-resources list [--source <source-id>|--path <folder>] [--json]

package/dist/{cli-D-jTGCjY.d.ts → cli-CNsuzfYG.d.ts}

@@ -633,6 +633,7 @@ interface CliJevContext {
         name: string;
         summary: string;
         auto_selection: boolean;
+        focus_activation_policy: "delayed" | "immediate" | "approval";
     }>;
     custom_memory_documents?: CustomRuleDocument[];
     /** Legacy input alias, never a personal consent bypass. */
@@ -1382,6 +1383,7 @@ interface ProjectSettingsRecord {
     encrypted_settings: string | null;
     updated_at: number | null;
     auto_selection?: boolean;
+    focus_activation_policy?: "delayed" | "immediate" | "approval";
 }
 interface ActiveProjectFocus {
     active: true;
@@ -2266,6 +2268,8 @@ interface DecryptedMemoryEntry {
 }
 interface OpenMatesClientOptions {
     apiUrl?: string;
+    /** Skip saved credentials for fresh pairing or session-free maintenance. */
+    loadStoredSession?: boolean;
     session?: OpenMatesSession;
 }
 interface InvoiceListItem {
@@ -3186,6 +3190,7 @@ declare class OpenMatesClient {
         encrypted_settings?: string;
         updated_at?: number;
         auto_selection?: boolean;
+        focus_activation_policy?: "delayed" | "immediate" | "approval";
     }, options?: TeamContextOptions): Promise<ProjectSettingsRecord>;
     activateProjectFocus(projectId: string, input: {
         chat_id: string;

package/dist/cli.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-D-jTGCjY.js';
+export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-CNsuzfYG.js';

package/dist/cli.js

@@ -21,8 +21,8 @@ import {
   shouldRequireTrustedAccountGuard,
   waitForSafeE2ETotpWindow,
   waitForWorkflowRun
-} from "./chunk-WCND4GFX.js";
-import "./chunk-B4UXKGH3.js";
+} from "./chunk-TYME6DVO.js";
+import "./chunk-5HWC6OTW.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-FC27KZIW.js";
 import "./chunk-TMYEFC7M.js";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-D-jTGCjY.js';
-export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-D-jTGCjY.js';
+import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-CNsuzfYG.js';
+export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-CNsuzfYG.js';
 
 type ChatModelSelection = "auto" | (string & {});
 interface ChatModelCatalogEntry {

package/dist/index.js

@@ -44,8 +44,8 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-WCND4GFX.js";
-import "./chunk-B4UXKGH3.js";
+} from "./chunk-TYME6DVO.js";
+import "./chunk-5HWC6OTW.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-FC27KZIW.js";
 import "./chunk-TMYEFC7M.js";

package/dist/privacyDaemon.js

@@ -1,6 +1,6 @@
 import {
   runPrivacyDaemon
-} from "./chunk-B4UXKGH3.js";
+} from "./chunk-5HWC6OTW.js";
 
 // src/privacyDaemon.ts
 void runPrivacyDaemon().catch(() => process.exit(1));

package/fixtures/privacy-runtime/linux-arm64/manifest.json

@@ -17,47 +17,47 @@
     {
       "name": "libggml-base.so",
       "bytes": 1110088,
-      "sha256": "3d3b5f5729c23afbd1ddae2e4dca2a37c010ad8b2f67227dff147a070cc35313"
+      "sha256": "b3410088aeb5fd4d3210e8d9969f8ee7322b464bb249615551fa166221050e68"
     },
     {
       "name": "libggml-base.so.0",
       "bytes": 1110088,
-      "sha256": "3d3b5f5729c23afbd1ddae2e4dca2a37c010ad8b2f67227dff147a070cc35313"
+      "sha256": "b3410088aeb5fd4d3210e8d9969f8ee7322b464bb249615551fa166221050e68"
     },
     {
       "name": "libggml-base.so.0.15.1",
       "bytes": 1110088,
-      "sha256": "3d3b5f5729c23afbd1ddae2e4dca2a37c010ad8b2f67227dff147a070cc35313"
+      "sha256": "b3410088aeb5fd4d3210e8d9969f8ee7322b464bb249615551fa166221050e68"
     },
     {
       "name": "libggml-cpu.so",
       "bytes": 869800,
-      "sha256": "f823b482cb87acd8e9ba3ec0272c3092a9fcb68cf93eecd20c2ab4c4d27889cf"
+      "sha256": "f4ace9a11f1642764f721f4772ede90acad6521b81329435553ed1a3c693957b"
     },
     {
       "name": "libggml-cpu.so.0",
       "bytes": 869800,
-      "sha256": "f823b482cb87acd8e9ba3ec0272c3092a9fcb68cf93eecd20c2ab4c4d27889cf"
+      "sha256": "f4ace9a11f1642764f721f4772ede90acad6521b81329435553ed1a3c693957b"
     },
     {
       "name": "libggml-cpu.so.0.15.1",
       "bytes": 869800,
-      "sha256": "f823b482cb87acd8e9ba3ec0272c3092a9fcb68cf93eecd20c2ab4c4d27889cf"
+      "sha256": "f4ace9a11f1642764f721f4772ede90acad6521b81329435553ed1a3c693957b"
     },
     {
       "name": "libggml.so",
       "bytes": 1899104,
-      "sha256": "b24c630710e35e68d38c99c8d3af584299269fd031807ee7efc5cebb1a51fa69"
+      "sha256": "07e384deb7dd55891c72c378e1d09aa8056f2f9d348708970cf44f1db09971b2"
     },
     {
       "name": "libggml.so.0",
       "bytes": 1899104,
-      "sha256": "b24c630710e35e68d38c99c8d3af584299269fd031807ee7efc5cebb1a51fa69"
+      "sha256": "07e384deb7dd55891c72c378e1d09aa8056f2f9d348708970cf44f1db09971b2"
     },
     {
       "name": "libggml.so.0.15.1",
       "bytes": 1899104,
-      "sha256": "b24c630710e35e68d38c99c8d3af584299269fd031807ee7efc5cebb1a51fa69"
+      "sha256": "07e384deb7dd55891c72c378e1d09aa8056f2f9d348708970cf44f1db09971b2"
     },
     {
       "name": "openmates-pii-worker",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.27.0-alpha.46",
+  "version": "0.27.0-alpha.48",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",