openmates 0.27.0-alpha.54 → 0.27.0-alpha.55

package/dist/{chunk-5HWC6OTW.js → chunk-5SFXCJJ4.js}

@@ -647,11 +647,6 @@ function clearSyncCache(teamId) {
     rmSync(filePath);
   }
 }
-function isSyncCacheFresh(maxAgeMs = 3e5, teamId) {
-  const cache = loadSyncCache(teamId);
-  if (!cache) return false;
-  return Date.now() - cache.syncedAt < (cache.pendingRecoveryOutputs ? Math.min(maxAgeMs, 6e4) : maxAgeMs);
-}
 function loadTrustedAccountId() {
   const trusted = readJsonFile(join(getStateDir(), TRUSTED_ACCOUNT_FILE));
   return typeof trusted?.accountId === "string" && trusted.accountId.trim() ? trusted.accountId.trim() : null;
@@ -1207,7 +1202,6 @@ export {
   saveSyncCache,
   loadSyncCache,
   clearSyncCache,
-  isSyncCacheFresh,
   loadTrustedAccountId,
   saveTrustedAccountId,
   assertTrustedAccountId,

package/dist/{chunk-W2VJSU3Q.js → chunk-6W3OFVOF.js}

@@ -7,7 +7,6 @@ import {
   ensurePrivacyDaemon,
   getCredentialStorageMode,
   installPrivacyModel,
-  isSyncCacheFresh,
   loadAnonymousId,
   loadLocalTeamKey,
   loadSession,
@@ -35,7 +34,7 @@ import {
   verifyInstalledModel,
   verifyPrivacyRuntime,
   withSessionRefreshLock
-} from "./chunk-5HWC6OTW.js";
+} from "./chunk-5SFXCJJ4.js";
 import {
   RemoteAccessReplayGuard,
   createRemoteAccessHandshake,
@@ -53,6 +52,7 @@ import {
   buildUpdateUserTaskInput,
   bytesToBase64,
   bytesToBase64Url,
+  createAesGcmCombinedDecryptor,
   createApiKeyCryptoMaterial,
   createPasswordMigrationMaterialV2,
   createRecoveryKeyMaterial,
@@ -101,7 +101,7 @@ import {
   unwrapApiKeyMasterKey,
   unwrapPasswordMasterKey,
   workflowProjectionDeleteGuidance
-} from "./chunk-FC27KZIW.js";
+} from "./chunk-F2U6KIMR.js";
 import {
   adoptUploadEmbedId,
   transcribeUploadedAudio,
@@ -13134,13 +13134,15 @@ var OpenMatesClient = class _OpenMatesClient {
       const markdown = !preview && typeof d.encrypted_draft_md === "string" ? await decryptWithAesGcmCombined(d.encrypted_draft_md, draftKey) : null;
       draftPreview = (preview || markdown)?.replace(/\s+/g, " ").trim().slice(0, 200) || null;
     }
-    const title = typeof d.encrypted_title === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(d.encrypted_title, chatKeyBytes) : null;
-    const summary = typeof d.encrypted_chat_summary === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(
-      d.encrypted_chat_summary,
-      chatKeyBytes
-    ) : null;
-    const category = typeof d.encrypted_category === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(d.encrypted_category, chatKeyBytes) : null;
-    const slug = typeof d.encrypted_slug === "string" && chatKeyBytes ? await decryptObjectSlug(d.encrypted_slug, chatKeyBytes) : null;
+    const decrypt = chatKeyBytes ? await createAesGcmCombinedDecryptor(chatKeyBytes) : async () => null;
+    const field3 = (name) => typeof d[name] === "string" ? decrypt(d[name]) : Promise.resolve(null);
+    const [title, summary, category, slugValue] = await Promise.all([
+      field3("encrypted_title"),
+      field3("encrypted_chat_summary"),
+      field3("encrypted_category"),
+      field3("encrypted_slug")
+    ]);
+    const slug = chatKeyBytes && typeof d.encrypted_slug === "string" ? slugValue ?? "" : null;
     return {
       id,
       shortId: id.slice(0, 8),
@@ -13284,7 +13286,7 @@ var OpenMatesClient = class _OpenMatesClient {
     const localTeamKey = teamId ? loadLocalTeamKey(this.requireSession().hashedEmail, teamId) : null;
     if (teamId && !localTeamKey) return null;
     const wrappingKey = localTeamKey ? base64ToBytes(localTeamKey) : masterKey;
-    return this.decryptChatListPage(cache, limit, page, options, teamId, masterKey, wrappingKey);
+    return this.decryptChatListPage(cache, limit, page, options, teamId, masterKey, wrappingKey, options.onCachedChats);
   }
   async listChats(limit = 10, page = 1, options = {}) {
     const teamId = this.resolveTeamContext(options);
@@ -13297,24 +13299,32 @@ var OpenMatesClient = class _OpenMatesClient {
     } : void 0, options.signal);
     return this.decryptChatListPage(cache, limit, page, options, teamId, masterKey);
   }
-  async decryptChatListPage(cache, limit, page, options, teamId, masterKey, cachedWrappingKey) {
+  async decryptChatListPage(cache, limit, page, options, teamId, masterKey, cachedWrappingKey, onCachedChats) {
+    const accountCurrent = this.captureTeamAccountOwner().isCurrent;
+    const current2 = () => {
+      if (!this.hasSession() || !accountCurrent() || teamId !== this.resolveTeamContext(options) || !masterKey.equals(Buffer.from(this.getMasterKeyBytes()))) throw new Error("Chat workspace changed");
+    };
     const wrappingKey = cachedWrappingKey ?? await this.getChatWrappingKey(teamId, masterKey);
     const total = cache.chats.length;
     const offset = (page - 1) * limit;
     const slice = cache.chats.slice(offset, offset + limit);
     const output = [];
-    for (const chat of slice) {
-      output.push(await this.decryptChatListItem(chat, wrappingKey, cache, teamId));
-    }
-    if (!this.hasSession() || teamId !== this.resolveTeamContext(options) || !masterKey.equals(Buffer.from(this.getMasterKeyBytes()))) throw new Error("Chat workspace changed");
-    return {
-      chats: output,
+    const result = () => ({
+      chats: output.slice(),
       pendingRecoveryOutputs: cache.pendingRecoveryOutputs ?? 0,
       total,
       page,
       limit,
-      hasMore: offset + limit < total
-    };
+      hasMore: offset + output.length < total
+    });
+    for (let start = 0; start < slice.length; start += 8) {
+      current2();
+      output.push(...await Promise.all(slice.slice(start, start + 8).map((chat) => this.decryptChatListItem(chat, wrappingKey, cache, teamId))));
+      current2();
+      if (onCachedChats && output.length === 32 && output.length < slice.length) onCachedChats(result());
+    }
+    current2();
+    return result();
   }
   async saveDraft(params) {
     const markdown = params.markdown.trim();
@@ -13881,49 +13891,61 @@ var OpenMatesClient = class _OpenMatesClient {
     if (!chatKey) throw new Error(`Chat '${chatId}' is missing locally decryptable key material.`);
     return { chatId, chatKey };
   }
+  /** Operation-local ciphertext index and nonextractable key; no persistent plaintext cache. */
+  async createRawChatMessageReader(chatItem, chatKeyBytes, embeds, current2 = () => {
+  }) {
+    const embedIdsByMessage = /* @__PURE__ */ new Map();
+    for (const embed of embeds) {
+      if (embed.parent_embed_id || typeof embed.hashed_message_id !== "string") continue;
+      const id = String(embed.embed_id ?? embed.id ?? "");
+      if (!id) continue;
+      const ids = embedIdsByMessage.get(embed.hashed_message_id) ?? [];
+      ids.push(id);
+      embedIdsByMessage.set(embed.hashed_message_id, ids);
+    }
+    const decrypt = chatKeyBytes ? await createAesGcmCombinedDecryptor(chatKeyBytes) : async () => null;
+    return async (rawMessages) => {
+      const messages = new Array(rawMessages.length);
+      let next = 0;
+      await Promise.all(Array.from({ length: Math.min(8, rawMessages.length) }, async () => {
+        while (next < rawMessages.length) {
+          current2();
+          const index = next++, raw = rawMessages[index];
+          const m = typeof raw === "string" ? JSON.parse(raw) : raw;
+          const field3 = (name) => typeof m[name] === "string" ? decrypt(m[name]) : Promise.resolve(null);
+          const [content, senderName, msgCategory, modelName, piiMappings] = await Promise.all([
+            field3("encrypted_content"),
+            field3("encrypted_sender_name"),
+            field3("encrypted_category"),
+            field3("encrypted_model_name"),
+            field3("encrypted_pii_mappings")
+          ]);
+          current2();
+          const clientMsgId = String(m.client_message_id ?? m.id ?? m.message_id ?? "");
+          const hashed = clientMsgId ? createHash13("sha256").update(clientMsgId).digest("hex") : "";
+          messages[index] = {
+            id: String(m.id ?? m.message_id ?? ""),
+            clientMessageId: clientMsgId,
+            chatId: String(m.chat_id ?? chatItem.id),
+            role: String(m.role ?? "unknown"),
+            content: content ?? "",
+            senderName,
+            hashedSenderUserId: typeof m.hashed_user_id === "string" ? m.hashed_user_id : null,
+            category: msgCategory,
+            modelName,
+            createdAt: typeof m.created_at === "number" ? m.created_at : 0,
+            embedIds: [...embedIdsByMessage.get(hashed) ?? []],
+            ...typeof m.encrypted_pii_mappings === "string" && chatKeyBytes ? { piiMappings: JSON.parse(piiMappings ?? "[]") } : {}
+          };
+        }
+      }));
+      current2();
+      messages.sort((a, b) => a.createdAt - b.createdAt);
+      return messages;
+    };
+  }
   async decryptRawChatMessages(rawMessages, chatItem, chatKeyBytes, embeds = []) {
-    const messages = [];
-    for (const raw of rawMessages) {
-      const m = typeof raw === "string" ? JSON.parse(raw) : raw;
-      const content = typeof m.encrypted_content === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(m.encrypted_content, chatKeyBytes) : null;
-      const senderName = typeof m.encrypted_sender_name === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(
-        m.encrypted_sender_name,
-        chatKeyBytes
-      ) : null;
-      const msgCategory = typeof m.encrypted_category === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(m.encrypted_category, chatKeyBytes) : null;
-      const modelName = typeof m.encrypted_model_name === "string" && chatKeyBytes ? await decryptWithAesGcmCombined(
-        m.encrypted_model_name,
-        chatKeyBytes
-      ) : null;
-      const clientMsgId = String(
-        m.client_message_id ?? m.id ?? m.message_id ?? ""
-      );
-      let msgEmbedIds = [];
-      if (clientMsgId && embeds.length > 0) {
-        const hashed = createHash13("sha256").update(clientMsgId).digest("hex");
-        msgEmbedIds = embeds.filter(
-          (e) => e.hashed_message_id === hashed && !e.parent_embed_id
-        ).map((e) => String(e.embed_id ?? e.id ?? "")).filter(Boolean);
-      }
-      messages.push({
-        id: String(m.id ?? m.message_id ?? ""),
-        clientMessageId: clientMsgId,
-        chatId: String(m.chat_id ?? chatItem.id),
-        role: String(m.role ?? "unknown"),
-        content: content ?? "",
-        senderName,
-        hashedSenderUserId: typeof m.hashed_user_id === "string" ? m.hashed_user_id : null,
-        category: msgCategory,
-        modelName,
-        createdAt: typeof m.created_at === "number" ? m.created_at : 0,
-        embedIds: msgEmbedIds,
-        ...typeof m.encrypted_pii_mappings === "string" && chatKeyBytes ? {
-          piiMappings: JSON.parse(await decryptWithAesGcmCombined(m.encrypted_pii_mappings, chatKeyBytes) ?? "[]")
-        } : {}
-      });
-    }
-    messages.sort((a, b) => a.createdAt - b.createdAt);
-    return coalesceMemoryRequestMessages(messages);
+    return coalesceMemoryRequestMessages(await (await this.createRawChatMessageReader(chatItem, chatKeyBytes, embeds))(rawMessages));
   }
   async resolveCachedChatForQuery(query, cache, wrappingKey, teamId) {
     const normalized = query.trim().toLowerCase();
@@ -13997,6 +14019,7 @@ var OpenMatesClient = class _OpenMatesClient {
   }
   /** Get decrypted messages for a chat resolved by UUID, prefix or title. */
   async getChatMessages(query, options = {}) {
+    const accountCurrent = this.captureTeamAccountOwner().isCurrent;
     const teamId = this.resolveTeamContext(options);
     const masterKey = Buffer.from(this.getMasterKeyBytes());
     const localCache = options.preferCache ? loadSyncCache(teamId) : null;
@@ -14009,8 +14032,10 @@ var OpenMatesClient = class _OpenMatesClient {
       embedKeys: []
     } : await this.ensureSynced(true, [], options));
     const current2 = () => {
-      if (!this.hasSession() || teamId !== this.resolveTeamContext(options) || !masterKey.equals(Buffer.from(this.getMasterKeyBytes()))) throw new Error("Chat workspace changed");
+      if (!this.hasSession() || !accountCurrent() || teamId !== this.resolveTeamContext(options) || !masterKey.equals(Buffer.from(this.getMasterKeyBytes()))) throw new Error("Chat workspace changed");
     };
+    current2();
+    options.signal?.throwIfAborted();
     const localTeamKey = options.preferCache && teamId ? loadLocalTeamKey(this.requireSession().hashedEmail, teamId) : null;
     if (options.preferCache && teamId && !localTeamKey) throw new Error("Team key unavailable offline. Reconnect to refresh Team access.");
     const wrappingKey = localTeamKey ? base64ToBytes(localTeamKey) : await this.getChatWrappingKey(teamId, masterKey);
@@ -14055,11 +14080,17 @@ var OpenMatesClient = class _OpenMatesClient {
       const merged = { ...latest, chats: row3 ? latest.chats.map((chat) => chat === row3 ? { ...row3, messages: messages2 } : chat) : [...latest.chats, { ...found, messages: messages2 }] };
       saveSyncCache(mergeConcurrentChatMessages(merged, latest), teamId);
     };
+    const readMessages = await this.createRawChatMessageReader(chatItem, chatKeyBytes, cache.embeds, () => {
+      current2();
+      options.signal?.throwIfAborted();
+    });
+    let decodedMessages;
     let rawMessages = found.messages;
     let historyIncomplete = rawMessages.length > 0 && Number(found.details.messages_v) > rawMessages.length;
     const hasServerMessages = typeof found.details.messages_v === "number" && found.details.messages_v > 0;
     if (rawMessages.length === 0 && (hasServerMessages || fetchedMetadata) && foundChatId) {
       const pages = [];
+      const decodedPages = [];
       let cursor = null;
       let hasMoreBefore = true;
       for (let page = 0; page < Math.max(1, Math.min(CLI_MESSAGE_HISTORY_MAX_PAGES, options.maxHistoryPages ?? CLI_MESSAGE_HISTORY_MAX_PAGES)) && hasMoreBefore; page += 1) {
@@ -14089,20 +14120,33 @@ var OpenMatesClient = class _OpenMatesClient {
         if (!response.ok) throw new Error(`Chat messages failed with HTTP ${response.status}`);
         const pageMessages = Array.isArray(response.data.messages) ? normalizeSyncedMessages(response.data.messages) : [];
         if (pageMessages.length === 0) break;
+        const decoded2 = await readMessages(pageMessages);
         if (page === 0 && options.onMessages) {
-          const latest = await this.decryptRawChatMessages(pageMessages, chatItem, chatKeyBytes, cache.embeds);
           current2();
           if (options.preferCache) persistMessages(pageMessages);
-          options.onMessages({ chat: chatItem, messages: latest });
+          options.onMessages({ chat: chatItem, messages: coalesceMemoryRequestMessages(decoded2) });
         }
+        decodedPages.unshift(decoded2);
         pages.unshift(pageMessages);
         cursor = response.data.start_cursor ?? null;
         hasMoreBefore = response.data.has_more_before === true && cursor !== null;
       }
       rawMessages = pages.flat();
+      decodedMessages = decodedPages.flat();
       historyIncomplete ||= hasMoreBefore;
     }
-    const messages = await this.decryptRawChatMessages(rawMessages, chatItem, chatKeyBytes, cache.embeds);
+    if (!decodedMessages && options.onMessages && rawMessages.length > CLI_MESSAGE_HISTORY_PAGE_LIMIT) {
+      const ordered = rawMessages.map((raw) => typeof raw === "string" ? JSON.parse(raw) : raw).sort((a, b) => (typeof a.created_at === "number" ? a.created_at : 0) - (typeof b.created_at === "number" ? b.created_at : 0));
+      const split = ordered.length - CLI_MESSAGE_HISTORY_PAGE_LIMIT;
+      const latest = await readMessages(ordered.slice(split));
+      current2();
+      options.onMessages({ chat: chatItem, messages: coalesceMemoryRequestMessages(latest) });
+      const older = await readMessages(ordered.slice(0, split));
+      decodedMessages = [...older, ...latest];
+    }
+    const decoded = decodedMessages ?? await readMessages(rawMessages);
+    decoded.sort((a, b) => a.createdAt - b.createdAt);
+    const messages = coalesceMemoryRequestMessages(decoded);
     current2();
     if (options.preferCache && rawMessages !== found.messages) persistMessages(rawMessages);
     return { chat: chatItem, messages, ...historyIncomplete ? { historyIncomplete: true } : {} };
@@ -18355,7 +18399,7 @@ var OpenMatesClient = class _OpenMatesClient {
     return documents;
   }
   async decryptTaskContextRecord(record10, options = {}) {
-    const { decryptUserTask: decryptUserTask2 } = await import("./tasksCli-S7PH7TWA.js");
+    const { decryptUserTask: decryptUserTask2 } = await import("./tasksCli-VEBWWQW4.js");
     const teamId = this.resolveTeamContext(options);
     if (!teamId || record10.source === "workflow_run") return decryptUserTask2(record10, this.getMasterKeyBytes());
     this.requireSession();
@@ -21258,11 +21302,9 @@ Required: ${schema.required.join(", ")}`
     const teamId = this.resolveTeamContext(options);
     const syncMasterKey = Buffer.from(this.getMasterKeyBytes());
     const refreshChatIdSet = new Set(refreshChatIds.filter(Boolean));
-    if (!forceRefresh && refreshChatIdSet.size === 0 && isSyncCacheFresh(3e5, teamId)) {
-      const cache2 = loadSyncCache(teamId);
-      if (cache2) return cache2;
-    }
     const existingCache = loadSyncCache(teamId);
+    const maxAgeMs = existingCache?.pendingRecoveryOutputs ? 6e4 : 3e5;
+    if (!forceRefresh && refreshChatIdSet.size === 0 && existingCache && Date.now() - existingCache.syncedAt < maxAgeMs) return existingCache;
     const clientChatVersions = {};
     const clientChatIds = [];
     const clientEmbedIds = [];
@@ -99395,7 +99437,12 @@ async function loadHomeData(state, client2, render) {
   state.homeChatsLoading = signedIn && homeChatItems(state).length === 0;
   if (signedIn && typeof client2.listCachedChats === "function") {
     try {
-      const cached = await client2.listCachedChats(Number.MAX_SAFE_INTEGER, 1);
+      const cached = await client2.listCachedChats(Number.MAX_SAFE_INTEGER, 1, { onCachedChats: (page) => {
+        if (!current2() || state.recentChats.length > 0) return;
+        updateHomeChats(state, page.chats);
+        state.homeChatsLoading = homeChatItems(state).length === 0;
+        render();
+      } });
       if (!current2()) return;
       if (cached) updateHomeChats(state, cached.chats);
     } catch {

package/dist/{chunk-FC27KZIW.js → chunk-F2U6KIMR.js}

@@ -524,37 +524,48 @@ async function unwrapApiKeyMasterKey(params) {
   }
 }
 async function decryptWithAesGcmCombined(encryptedWithIvB64, rawKeyBytes, associatedData) {
+  const decrypt = await createAesGcmCombinedDecryptor(rawKeyBytes);
+  return decrypt(encryptedWithIvB64, associatedData);
+}
+async function createAesGcmCombinedDecryptor(rawKeyBytes) {
+  let key;
   try {
-    const combined = base64ToBytes(encryptedWithIvB64);
-    if (combined.length <= AES_GCM_IV_LENGTH) {
-      return null;
-    }
-    let offset = 0;
-    if (combined.length > CIPHERTEXT_HEADER_LENGTH + AES_GCM_IV_LENGTH && combined[0] === CIPHERTEXT_MAGIC_0 && combined[1] === CIPHERTEXT_MAGIC_1) {
-      offset = CIPHERTEXT_HEADER_LENGTH;
-    }
-    const iv = combined.slice(offset, offset + AES_GCM_IV_LENGTH);
-    const ciphertext = combined.slice(offset + AES_GCM_IV_LENGTH);
-    const key = await cryptoApi.subtle.importKey(
+    key = await cryptoApi.subtle.importKey(
       "raw",
       toArrayBuffer(rawKeyBytes),
       { name: "AES-GCM" },
       false,
       ["decrypt"]
     );
-    const decrypted = await cryptoApi.subtle.decrypt(
-      {
-        name: "AES-GCM",
-        iv: toArrayBuffer(iv),
-        ...associatedData ? { additionalData: toArrayBuffer(new TextEncoder().encode(associatedData)) } : {}
-      },
-      key,
-      toArrayBuffer(ciphertext)
-    );
-    return new TextDecoder().decode(decrypted);
   } catch {
-    return null;
+    return async () => null;
   }
+  return async (encryptedWithIvB64, associatedData) => {
+    try {
+      const combined = base64ToBytes(encryptedWithIvB64);
+      if (combined.length <= AES_GCM_IV_LENGTH) {
+        return null;
+      }
+      let offset = 0;
+      if (combined.length > CIPHERTEXT_HEADER_LENGTH + AES_GCM_IV_LENGTH && combined[0] === CIPHERTEXT_MAGIC_0 && combined[1] === CIPHERTEXT_MAGIC_1) {
+        offset = CIPHERTEXT_HEADER_LENGTH;
+      }
+      const iv = combined.slice(offset, offset + AES_GCM_IV_LENGTH);
+      const ciphertext = combined.slice(offset + AES_GCM_IV_LENGTH);
+      const decrypted = await cryptoApi.subtle.decrypt(
+        {
+          name: "AES-GCM",
+          iv: toArrayBuffer(iv),
+          ...associatedData ? { additionalData: toArrayBuffer(new TextEncoder().encode(associatedData)) } : {}
+        },
+        key,
+        toArrayBuffer(ciphertext)
+      );
+      return new TextDecoder().decode(decrypted);
+    } catch {
+      return null;
+    }
+  };
 }
 async function deriveEmailEncryptionKeyB64(email, emailSaltB64) {
   const encoder = new TextEncoder();
@@ -1292,6 +1303,7 @@ export {
   createApiKeyCryptoMaterial,
   unwrapApiKeyMasterKey,
   decryptWithAesGcmCombined,
+  createAesGcmCombinedDecryptor,
   deriveEmailEncryptionKeyB64,
   decryptBytesWithAesGcm,
   deriveEmbedKeyFromChatKey,

package/dist/{cli-jvpep36C.d.ts → cli-D2oJ-ctT.d.ts}

@@ -2715,7 +2715,9 @@ declare class OpenMatesClient {
     /** Observe lifecycle metadata without claiming or collecting AI responses. */
     observeChatActivity(onChange: () => void): Promise<() => void>;
     /** Read encrypted local history without refreshing or opening a connection. */
-    listCachedChats(limit?: number, page?: number, options?: TeamContextOptions): Promise<ChatListPage | null>;
+    listCachedChats(limit?: number, page?: number, options?: TeamContextOptions & {
+        onCachedChats?: (page: ChatListPage) => void;
+    }): Promise<ChatListPage | null>;
     listChats(limit?: number, page?: number, options?: TeamContextOptions & {
         forceRefresh?: boolean;
         signal?: AbortSignal;
@@ -2773,6 +2775,8 @@ declare class OpenMatesClient {
         chatId: string;
         chatKey: Uint8Array;
     }>;
+    /** Operation-local ciphertext index and nonextractable key; no persistent plaintext cache. */
+    private createRawChatMessageReader;
     private decryptRawChatMessages;
     private resolveCachedChatForQuery;
     /**

package/dist/cli.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-jvpep36C.js';
+export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-D2oJ-ctT.js';

package/dist/cli.js

@@ -21,10 +21,10 @@ import {
   shouldRequireTrustedAccountGuard,
   waitForSafeE2ETotpWindow,
   waitForWorkflowRun
-} from "./chunk-W2VJSU3Q.js";
-import "./chunk-5HWC6OTW.js";
+} from "./chunk-6W3OFVOF.js";
+import "./chunk-5SFXCJJ4.js";
 import "./chunk-IWKP55ZB.js";
-import "./chunk-FC27KZIW.js";
+import "./chunk-F2U6KIMR.js";
 import "./chunk-TMYEFC7M.js";
 import "./chunk-V2QAI5ET.js";
 export {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-jvpep36C.js';
-export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-jvpep36C.js';
+import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-D2oJ-ctT.js';
+export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-D2oJ-ctT.js';
 
 type ChatModelSelection = "auto" | (string & {});
 interface ChatModelCatalogEntry {

package/dist/index.js

@@ -44,10 +44,10 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-W2VJSU3Q.js";
-import "./chunk-5HWC6OTW.js";
+} from "./chunk-6W3OFVOF.js";
+import "./chunk-5SFXCJJ4.js";
 import "./chunk-IWKP55ZB.js";
-import "./chunk-FC27KZIW.js";
+import "./chunk-F2U6KIMR.js";
 import "./chunk-TMYEFC7M.js";
 import "./chunk-V2QAI5ET.js";
 export {

package/dist/privacyDaemon.js

@@ -1,6 +1,6 @@
 import {
   runPrivacyDaemon
-} from "./chunk-5HWC6OTW.js";
+} from "./chunk-5SFXCJJ4.js";
 
 // src/privacyDaemon.ts
 void runPrivacyDaemon().catch(() => process.exit(1));

package/dist/{tasksCli-S7PH7TWA.js → tasksCli-VEBWWQW4.js}

@@ -30,7 +30,7 @@ import {
   taskLookupScopes,
   taskPriorityLevel,
   workflowProjectionDeleteGuidance
-} from "./chunk-FC27KZIW.js";
+} from "./chunk-F2U6KIMR.js";
 export {
   TASK_STATUSES,
   buildBlockUserTaskInput,

package/fixtures/privacy-runtime/linux-arm64/manifest.json

@@ -17,47 +17,47 @@
     {
       "name": "libggml-base.so",
       "bytes": 1110088,
-      "sha256": "590ee4bb44ace87ddbb5035527df40338adf3323fd401ae78f4c1884a312fda8"
+      "sha256": "6a206cb47287d4597fed24840955504398be4fdb92f1317e36621d7345b64e65"
     },
     {
       "name": "libggml-base.so.0",
       "bytes": 1110088,
-      "sha256": "590ee4bb44ace87ddbb5035527df40338adf3323fd401ae78f4c1884a312fda8"
+      "sha256": "6a206cb47287d4597fed24840955504398be4fdb92f1317e36621d7345b64e65"
     },
     {
       "name": "libggml-base.so.0.15.1",
       "bytes": 1110088,
-      "sha256": "590ee4bb44ace87ddbb5035527df40338adf3323fd401ae78f4c1884a312fda8"
+      "sha256": "6a206cb47287d4597fed24840955504398be4fdb92f1317e36621d7345b64e65"
     },
     {
       "name": "libggml-cpu.so",
       "bytes": 869800,
-      "sha256": "91be2f663b8b9d494dd066dfb36ca728f8694520d47cdd95501d9b2a1637da16"
+      "sha256": "50b85ca0cca21bff7709775869e608dcd1b8ce3cb5ba705fa5d8ddc0aa570376"
     },
     {
       "name": "libggml-cpu.so.0",
       "bytes": 869800,
-      "sha256": "91be2f663b8b9d494dd066dfb36ca728f8694520d47cdd95501d9b2a1637da16"
+      "sha256": "50b85ca0cca21bff7709775869e608dcd1b8ce3cb5ba705fa5d8ddc0aa570376"
     },
     {
       "name": "libggml-cpu.so.0.15.1",
       "bytes": 869800,
-      "sha256": "91be2f663b8b9d494dd066dfb36ca728f8694520d47cdd95501d9b2a1637da16"
+      "sha256": "50b85ca0cca21bff7709775869e608dcd1b8ce3cb5ba705fa5d8ddc0aa570376"
     },
     {
       "name": "libggml.so",
       "bytes": 1899104,
-      "sha256": "3e946f33296f102ecf524f7548d027864a19b34f0bb8888d7c5a3dd8e74baf1b"
+      "sha256": "483f0288f2565ff90cd171543ea0d02b11a10feed555917abdd76a54ac9a9f7d"
     },
     {
       "name": "libggml.so.0",
       "bytes": 1899104,
-      "sha256": "3e946f33296f102ecf524f7548d027864a19b34f0bb8888d7c5a3dd8e74baf1b"
+      "sha256": "483f0288f2565ff90cd171543ea0d02b11a10feed555917abdd76a54ac9a9f7d"
     },
     {
       "name": "libggml.so.0.15.1",
       "bytes": 1899104,
-      "sha256": "3e946f33296f102ecf524f7548d027864a19b34f0bb8888d7c5a3dd8e74baf1b"
+      "sha256": "483f0288f2565ff90cd171543ea0d02b11a10feed555917abdd76a54ac9a9f7d"
     },
     {
       "name": "openmates-pii-worker",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.27.0-alpha.54",
+  "version": "0.27.0-alpha.55",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",
@@ -53,7 +53,7 @@
     "test:unit:tui": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/tui.test.ts tests/tuiExampleContinuation.test.ts tests/tuiWorkflowInteraction.test.ts tests/tuiWorkspaceInteraction.test.ts tests/tuiLayout.test.ts tests/tuiTerminal.test.ts tests/tuiRenderCache.test.ts tests/tuiStreamingRender.test.ts tests/tuiStreamingSend.test.ts tests/tuiTerminalFrame.test.ts tests/tuiPrototypeBridge.test.ts tests/tuiStartup.test.ts tests/tuiTasksWorkspace.test.ts tests/tuiProjectsWorkspace.test.ts tests/tuiWorkflowWorkspace.test.ts tests/tuiAttachments.test.ts tests/tuiCancellation.test.ts tests/tuiWorkflowVersion.test.ts tests/tuiAppsWorkspace.test.ts tests/tuiHome.test.ts tests/tuiEmbeds.test.ts tests/tuiEmbedPreviews.test.ts tests/tuiMarkdown.test.ts tests/tuiResultsViews.test.ts tests/tuiRichChatInteraction.test.ts tests/tuiInteractiveQuestions.test.ts tests/tuiCachedWorkspaces.test.ts tests/tuiTaskList.test.ts tests/tuiWorkspaceCache.test.ts tests/tuiProjectCacheInteraction.test.ts tests/tuiChatSidebar.test.ts tests/tuiPointer.test.ts tests/tuiPointerWorkspaces.test.ts tests/tuiPointerChat.test.ts tests/tuiHeaderActions.test.ts tests/tuiSettings.test.ts tests/tuiTeamsSettings.test.ts tests/tuiTeamChat.test.ts tests/tuiChromeShell.test.ts tests/tuiModelSelector.test.ts tests/tuiModelSelectorShell.test.ts",
     "test:unit:connected-account-import": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/connectedAccountImport.test.ts",
     "test:unit:benchmark": "node --test --experimental-strip-types --loader ./tests/loader.mjs src/__tests__/benchmark.test.ts",
-    "test": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/wiki.test.ts tests/privacy.test.ts tests/crypto.test.ts tests/storage.test.ts tests/keychain.test.ts tests/mentions.test.ts tests/outputRedactor.test.ts tests/fileEmbed.test.ts tests/embedCreator.test.ts tests/shareEncryption.test.ts tests/server.test.ts tests/serverCaddyUpdate.test.ts tests/serverCaddyUpgrade.test.ts tests/serverQuickTest.test.ts tests/ws.test.ts tests/urlEmbed.test.ts tests/tui.test.ts tests/tuiTeamsSettings.test.ts tests/tuiTeamChat.test.ts tests/tuiExampleContinuation.test.ts tests/tuiWorkflowInteraction.test.ts tests/tuiWorkspaceInteraction.test.ts tests/tuiLayout.test.ts tests/tuiTerminal.test.ts tests/tuiRenderCache.test.ts tests/tuiStreamingRender.test.ts tests/tuiStreamingSend.test.ts tests/tuiTerminalFrame.test.ts tests/tuiPrototypeBridge.test.ts tests/tuiStartup.test.ts tests/tuiTasksWorkspace.test.ts tests/tuiProjectsWorkspace.test.ts tests/tuiWorkflowWorkspace.test.ts tests/tuiAttachments.test.ts tests/tuiCancellation.test.ts tests/tuiWorkflowVersion.test.ts tests/tuiAppsWorkspace.test.ts tests/tuiHome.test.ts tests/tuiEmbeds.test.ts tests/tuiEmbedPreviews.test.ts tests/tuiMarkdown.test.ts tests/tuiResultsViews.test.ts tests/tuiRichChatInteraction.test.ts tests/tuiInteractiveQuestions.test.ts tests/tuiCachedWorkspaces.test.ts tests/tuiTaskList.test.ts tests/tuiWorkspaceCache.test.ts tests/tuiProjectCacheInteraction.test.ts tests/tuiChatSidebar.test.ts tests/sdk-chat-sidebar.test.ts tests/workflows.test.ts tests/workflow-file.test.ts tests/sdk-workflows.test.ts tests/draft-sync.test.ts tests/sdk-draft-sync.test.ts tests/ideabucket.test.ts tests/teams-permissions.test.ts tests/sdk-teams.test.ts tests/team-ai-trigger.test.ts src/__tests__/benchmark.test.ts && node --test --experimental-strip-types --loader ./tests/loader.mjs tests/embedRenderers.test.ts tests/connectedAccountImport.test.ts && node --test --experimental-strip-types --loader ./tests/loader.mjs tests/cli.test.ts tests/loginTerminal.test.ts tests/imagesDetectAi.test.ts tests/uploadService.test.ts tests/billing.test.ts tests/account-delete.test.ts tests/signup.test.ts tests/security-setup.test.ts tests/e2e-provisioning.test.ts && npm run test:unit:session && npm run test:unit:task-sync && npm run test:unit:task-pagination",
+    "test": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/wiki.test.ts tests/privacy.test.ts tests/crypto.test.ts tests/cryptoBatch.test.ts tests/clientStartup.test.ts tests/storage.test.ts tests/keychain.test.ts tests/mentions.test.ts tests/outputRedactor.test.ts tests/fileEmbed.test.ts tests/embedCreator.test.ts tests/shareEncryption.test.ts tests/server.test.ts tests/serverCaddyUpdate.test.ts tests/serverCaddyUpgrade.test.ts tests/serverQuickTest.test.ts tests/ws.test.ts tests/urlEmbed.test.ts tests/tui.test.ts tests/tuiTeamsSettings.test.ts tests/tuiTeamChat.test.ts tests/tuiExampleContinuation.test.ts tests/tuiWorkflowInteraction.test.ts tests/tuiWorkspaceInteraction.test.ts tests/tuiLayout.test.ts tests/tuiTerminal.test.ts tests/tuiRenderCache.test.ts tests/tuiStreamingRender.test.ts tests/tuiStreamingSend.test.ts tests/tuiTerminalFrame.test.ts tests/tuiPrototypeBridge.test.ts tests/tuiStartup.test.ts tests/tuiTasksWorkspace.test.ts tests/tuiProjectsWorkspace.test.ts tests/tuiWorkflowWorkspace.test.ts tests/tuiAttachments.test.ts tests/tuiCancellation.test.ts tests/tuiWorkflowVersion.test.ts tests/tuiAppsWorkspace.test.ts tests/tuiHome.test.ts tests/tuiEmbeds.test.ts tests/tuiEmbedPreviews.test.ts tests/tuiMarkdown.test.ts tests/tuiResultsViews.test.ts tests/tuiRichChatInteraction.test.ts tests/tuiInteractiveQuestions.test.ts tests/tuiCachedWorkspaces.test.ts tests/tuiTaskList.test.ts tests/tuiWorkspaceCache.test.ts tests/tuiProjectCacheInteraction.test.ts tests/tuiChatSidebar.test.ts tests/sdk-chat-sidebar.test.ts tests/workflows.test.ts tests/workflow-file.test.ts tests/sdk-workflows.test.ts tests/draft-sync.test.ts tests/sdk-draft-sync.test.ts tests/ideabucket.test.ts tests/teams-permissions.test.ts tests/sdk-teams.test.ts tests/team-ai-trigger.test.ts src/__tests__/benchmark.test.ts && node --test --experimental-strip-types --loader ./tests/loader.mjs tests/embedRenderers.test.ts tests/connectedAccountImport.test.ts && node --test --experimental-strip-types --loader ./tests/loader.mjs tests/cli.test.ts tests/loginTerminal.test.ts tests/imagesDetectAi.test.ts tests/uploadService.test.ts tests/billing.test.ts tests/account-delete.test.ts tests/signup.test.ts tests/security-setup.test.ts tests/e2e-provisioning.test.ts && npm run test:unit:session && npm run test:unit:task-sync && npm run test:unit:task-pagination",
     "test:unit:session": "node --test --experimental-strip-types --loader ./tests/loader.mjs --test-name-pattern \"serializes refreshes|session refresh|rotated|gateway\" tests/client.test.ts",
     "test:unit:task-sync": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/projectTaskSync.test.ts tests/taskActivityDelivery.test.ts tests/taskCommandDelivery.test.ts tests/taskDelivery.test.ts tests/taskMutationDelivery.test.ts tests/claimConflict.test.ts tests/cliTaskQueue.test.ts tests/codexConnection.test.ts tests/remoteSources.test.ts tests/remoteAccess.test.ts tests/remoteAccessCrypto.test.ts",
     "test:unit:sdk-sidebar": "node --test --experimental-strip-types --loader ./tests/loader.mjs tests/sdk-chat-sidebar.test.ts",