openmates 0.27.0-alpha.63 → 0.27.0-alpha.65

package/dist/{chunk-D6TL3ILK.js → chunk-VRRTQJWZ.js}

@@ -17201,7 +17201,15 @@ var OpenMatesClient = class _OpenMatesClient {
             } catch (error) {
               if (error instanceof WebSocketProtocolError) {
                 if (error.code === "version_conflict") {
-                  const latestCache = await this.ensureSynced(true, [chatId], { teamId });
+                  const latestCache = await this.ensureSynced(
+                    true,
+                    [chatId],
+                    { teamId },
+                    false,
+                    void 0,
+                    void 0,
+                    { skipTypedRecoveryOutputReplay: true }
+                  );
                   const latestChat = latestCache.chats.find(
                     (chat) => String(chat.details.id ?? "") === chatId
                   );
@@ -17710,10 +17718,47 @@ var OpenMatesClient = class _OpenMatesClient {
       if (Array.isArray(embed.version_history_rows)) {
         for (const row3 of embed.version_history_rows) {
           if (!row3.embed_id || typeof row3.version_number !== "number") continue;
+          if (row3.embed_id !== embed.embed_id) {
+            throw new Error(`Embed ${embed.embed_id} history row has a different embed identity.`);
+          }
+          if (row3.version_number === 1) {
+            const query = new URLSearchParams({ capability: "bounded-v1", chat_id: params.chatId });
+            if (params.teamId) query.set("team_id", params.teamId);
+            const existing = await this.http.get(
+              `/v1/embeds/${encodeURIComponent(embed.embed_id)}/versions/1?${query}`,
+              this.getCliRequestHeaders()
+            );
+            if (existing.ok) {
+              const rows2 = existing.data?.rows;
+              if (existing.data?.embed_id !== embed.embed_id || existing.data.version_number !== 1 || !Array.isArray(rows2) || rows2.length !== 1 || rows2[0].version_number !== 1 || typeof rows2[0].encrypted_snapshot !== "string" || rows2[0].encrypted_patch != null || typeof row3.snapshot !== "string" || typeof row3.patch === "string") {
+                throw new Error(`Canonical embed ${embed.embed_id} v1 history is invalid.`);
+              }
+              const canonicalSnapshot = await decryptWithAesGcmCombined(rows2[0].encrypted_snapshot, embedKey);
+              if (canonicalSnapshot !== row3.snapshot) {
+                throw new Error(`Existing canonical embed ${embed.embed_id} v1 does not match streamed source.`);
+              }
+              continue;
+            }
+            if (existing.status !== 404) {
+              throw new Error(`Canonical embed ${embed.embed_id} v1 read failed (HTTP ${existing.status}).`);
+            }
+          }
           const encryptedSnapshot = typeof row3.snapshot === "string" ? await encryptWithAesGcmCombined(row3.snapshot, embedKey) : void 0;
           const encryptedPatch = typeof row3.patch === "string" ? await encryptWithAesGcmCombined(row3.patch, embedKey) : void 0;
           if (!encryptedSnapshot && !encryptedPatch) continue;
+          const diffRequestId = randomUUID9();
+          const diffConfirmed = params.ws.waitForMessage(
+            "store_embed_diff_confirmed",
+            (payload) => {
+              const p = payload;
+              return p.request_id === diffRequestId && p.embed_id === row3.embed_id && p.version_number === row3.version_number;
+            },
+            3e4
+          );
+          void diffConfirmed.catch(() => {
+          });
           await params.ws.sendAsync("store_embed_diff", {
+            request_id: diffRequestId,
             embed_id: row3.embed_id,
             version_number: row3.version_number,
             encrypted_snapshot: encryptedSnapshot ?? null,
@@ -17721,6 +17766,11 @@ var OpenMatesClient = class _OpenMatesClient {
             hashed_user_id: hashedUserId,
             created_at: normalizeUnixSeconds(row3.created_at, now)
           });
+          const diffReceipt = (await diffConfirmed).payload;
+          const expectedDigest = computeSHA256(JSON.stringify([encryptedSnapshot ?? null, encryptedPatch ?? null]));
+          if (diffReceipt.canonical_source !== "version_row" || diffReceipt.canonical_digest !== expectedDigest) {
+            throw new Error(`Embed ${embed.embed_id} v${row3.version_number} durable receipt did not match the stored source.`);
+          }
         }
       }
     };
@@ -21974,7 +22024,7 @@ Required: ${schema.required.join(", ")}`
    * The sync cache stores encrypted data — decryption is always on-demand.
    * SECURITY: decrypted user content is NEVER written to disk.
    */
-  async ensureSynced(forceRefresh = false, refreshChatIds = [], options = {}, includeMessageContentRefresh = false, onSyncedCache, signal) {
+  async ensureSynced(forceRefresh = false, refreshChatIds = [], options = {}, includeMessageContentRefresh = false, onSyncedCache, signal, syncBehavior = {}) {
     signal?.throwIfAborted();
     const teamId = this.resolveTeamContext(options);
     const syncMasterKey = Buffer.from(this.getMasterKeyBytes());
@@ -22211,7 +22261,7 @@ Required: ${schema.required.join(", ")}`
       await ws.waitForRecoveryOutputDiscovery();
       signal?.throwIfAborted();
       const pages = ws.drainAvailableRecoveryOutputPages();
-      if (pages.length > 0) {
+      if (pages.length > 0 && !syncBehavior.skipTypedRecoveryOutputReplay) {
         if (!ownerId2) throw new Error("Authenticated owner identity is required for recovery output replay.");
         const currentCache = {
           syncedAt: Date.now(),
@@ -22255,7 +22305,15 @@ Required: ${schema.required.join(", ")}`
     signal?.throwIfAborted();
     if (persistedTaskJobIds.size > 0 || persistedWorkflowDeliveryCount > 0 || recoveredOutputCount > 0) {
       this.invalidateSyncedHistory(teamId);
-      return this.ensureSynced(true, refreshChatIds, { teamId }, includeMessageContentRefresh, onSyncedCache, signal);
+      return this.ensureSynced(
+        true,
+        refreshChatIds,
+        { teamId },
+        includeMessageContentRefresh,
+        onSyncedCache,
+        signal,
+        syncBehavior
+      );
     }
     const cache = {
       syncedAt: Date.now(),

package/dist/{cli-bEgF9_RV.d.ts → cli-B0wAUh-J.d.ts}

@@ -3828,7 +3828,9 @@ declare class OpenMatesClient {
      * The sync cache stores encrypted data — decryption is always on-demand.
      * SECURITY: decrypted user content is NEVER written to disk.
      */
-    ensureSynced(forceRefresh?: boolean, refreshChatIds?: string[], options?: TeamContextOptions, includeMessageContentRefresh?: boolean, onSyncedCache?: (cache: SyncCache) => Promise<void>, signal?: AbortSignal): Promise<SyncCache>;
+    ensureSynced(forceRefresh?: boolean, refreshChatIds?: string[], options?: TeamContextOptions, includeMessageContentRefresh?: boolean, onSyncedCache?: (cache: SyncCache) => Promise<void>, signal?: AbortSignal, syncBehavior?: {
+        skipTypedRecoveryOutputReplay?: boolean;
+    }): Promise<SyncCache>;
     /**
      * Claim and finish reconnect workflow deliveries using only normal client
      * ciphertext. A fenced server transaction persists chat/message/selected

package/dist/cli.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-bEgF9_RV.js';
+export { ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, aK as assertTrustedAccountCommandAllowed, aL as assertTrustedAccountGuardEnvironment, aC as buildImagesAiDetectionSummary, aM as buildProjectDefaultFocus, aN as buildTravelConnectionsRequest, aD as classifyImagesAiDetection, aO as extractExplicitProjectMentions, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aP as handleWiki, aQ as printWhoAmI, aR as readRootProjectInstructions, aS as renderProjectReadApprovalRequest, aT as renderProjectWriteApprovalRequest, aU as renderRemoteCommandEvent, aV as requireExactConfirmation, aW as resolveProjectContext, aJ as serializeToYaml, aX as shouldRequireTrustedAccountGuard, aY as waitForSafeE2ETotpWindow, aZ as waitForWorkflowRun } from './cli-B0wAUh-J.js';
 import '@repo/pairing-crypto/direct-chat';

package/dist/cli.js

@@ -21,7 +21,7 @@ import {
   shouldRequireTrustedAccountGuard,
   waitForSafeE2ETotpWindow,
   waitForWorkflowRun
-} from "./chunk-D6TL3ILK.js";
+} from "./chunk-VRRTQJWZ.js";
 import "./chunk-Q6PGA2B3.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-F2U6KIMR.js";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-bEgF9_RV.js';
-export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-bEgF9_RV.js';
+import { O as OpenMatesSession, U as UserPlanStatus, a as UserPlanRecord, b as UserPlanVerificationStatus, c as UserPlanLearningType, d as UserPlanLearningTargetKind, e as UserPlanLearningStatus, f as UserPlanLearningLevel, g as UserPlanLearningRecord, h as UserPlanCriterionRecord, i as UserPlanVerificationRecord, j as UserPlanCreateInput, k as UserPlanUpdateInput, B as BuyerAddress, P as ProjectItemRecord, T as TaskCreateOptions, l as TaskUpdateOptions, m as UserPlanLearningCreateTasksInput, n as UserPlanLearningCreateTasksResult, o as UserTaskStatus, E as ExternalChatContext, p as TaskPriorityLevel, D as DecryptedUserTask, q as DecryptedTaskActivityEntry, r as TaskActivityCreateOptions, s as UserTaskReorderInput, W as WorkflowSummary, t as WorkflowCapability, u as WorkflowDetail, v as WorkflowAuthoringWarning, w as WorkflowInputStartParams, x as WorkflowInputSessionResult, y as WorkflowInputSessionDetail, z as WorkflowInputEvent, A as WorkflowGraph, C as WorkflowRunContentRetention, F as WorkflowRunOnceOptions, G as WorkflowRunDetail, H as WorkflowRunOptions, I as WorkflowNode, J as WorkflowRunCancellationResult, K as WorkflowTemplateProjectionUpsertParams, L as WorkflowTemplateProjectionResult, M as PublicWorkflowTemplateProjection, N as WorkflowTemplateProjectionRevocationResult, Q as WorkflowTemplateBindingCompletionParams, R as WorkflowTemplateBindingCompletionResult, S as WorkflowTemplateShortUrlParams, V as WorkflowTemplateShortUrlResult, X as ShortUrlRevokeResult, Y as WorkflowTemplateImportPayload, Z as ImportedWorkflowTemplate, _ as WikipediaLearningBundle } from './cli-B0wAUh-J.js';
+export { $ as AuthMethodsStatus, a0 as AuthoritativeChatReconciliation, a1 as BackupCodesResult, a2 as BankTransferOrderDetails, a3 as BankTransferStatus, a4 as CachedChat, a5 as CachedNewChatSuggestion, a6 as ChatListPage, a7 as CliSignupResult, a8 as DecryptedDraft, a9 as DecryptedEmbed, aa as DecryptedMemoryEntry, ab as DecryptedMessage, ac as DecryptedNewChatSuggestion, ad as DocsFile, ae as DocsFolder, af as DocsSearchResult, ag as DocsTree, ah as EncryptedDraft, ai as GiftCardBankTransferStatus, aj as INTEREST_TAG_IDS, ak as ImagesAiDetectionClassification, al as ImagesAiDetectionSummary, am as InterestTagId, an as MATE_NAMES, ao as MEMORY_TYPE_REGISTRY, ap as MemoryFieldDef, aq as MemoryTypeDef, ar as OpenMatesClient, as as OpenMatesClientOptions, at as SyncCache, au as TopicPreferencesPayload, av as TotpSetupStartResult, aw as WorkflowEdge, ax as WorkflowNodeRun, ay as WorkflowNodeType, az as WorkflowReturnedOutputReference, aA as WorkflowRunContentStorage, aB as WorkflowRunRouting, aC as buildImagesAiDetectionSummary, aD as classifyImagesAiDetection, aE as deriveAppUrl, aF as formatImagesAiDetectionLabel, aG as getExtForLang, aH as normalizeInterestTagIds, aI as reconcileAuthoritativeChats, aJ as serializeToYaml } from './cli-B0wAUh-J.js';
 import { DirectChatKeyPair } from '@repo/pairing-crypto/direct-chat';
 
 type ChatModelSelection = "auto" | (string & {});

package/dist/index.js

@@ -44,7 +44,7 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-D6TL3ILK.js";
+} from "./chunk-VRRTQJWZ.js";
 import "./chunk-Q6PGA2B3.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-F2U6KIMR.js";

package/fixtures/privacy-runtime/linux-arm64/manifest.json

@@ -17,47 +17,47 @@
     {
       "name": "libggml-base.so",
       "bytes": 1110088,
-      "sha256": "bdb1a65cc110d622ca0ca0a9274b9a9f0949d86e0f6136b8b5d159a685096c44"
+      "sha256": "104a3ba6bea2068f8c336daeb02b1034abaea3d4adff4efa65cecb4c82058553"
     },
     {
       "name": "libggml-base.so.0",
       "bytes": 1110088,
-      "sha256": "bdb1a65cc110d622ca0ca0a9274b9a9f0949d86e0f6136b8b5d159a685096c44"
+      "sha256": "104a3ba6bea2068f8c336daeb02b1034abaea3d4adff4efa65cecb4c82058553"
     },
     {
       "name": "libggml-base.so.0.15.1",
       "bytes": 1110088,
-      "sha256": "bdb1a65cc110d622ca0ca0a9274b9a9f0949d86e0f6136b8b5d159a685096c44"
+      "sha256": "104a3ba6bea2068f8c336daeb02b1034abaea3d4adff4efa65cecb4c82058553"
     },
     {
       "name": "libggml-cpu.so",
       "bytes": 869800,
-      "sha256": "fc1ed2b090628912eee7d6618014efe0be9bec527adf108677873c796a22eb7d"
+      "sha256": "b85fde7ee4ae941a206b58c885827ed0b50a0ddf291e58afe2b84bfbbe21359a"
     },
     {
       "name": "libggml-cpu.so.0",
       "bytes": 869800,
-      "sha256": "fc1ed2b090628912eee7d6618014efe0be9bec527adf108677873c796a22eb7d"
+      "sha256": "b85fde7ee4ae941a206b58c885827ed0b50a0ddf291e58afe2b84bfbbe21359a"
     },
     {
       "name": "libggml-cpu.so.0.15.1",
       "bytes": 869800,
-      "sha256": "fc1ed2b090628912eee7d6618014efe0be9bec527adf108677873c796a22eb7d"
+      "sha256": "b85fde7ee4ae941a206b58c885827ed0b50a0ddf291e58afe2b84bfbbe21359a"
     },
     {
       "name": "libggml.so",
       "bytes": 1899104,
-      "sha256": "53aac984ca4703e965c1cbc9cbb49aa21126558f566695c441d932c18a03a3fd"
+      "sha256": "4428f75f410d7b6b4dba98ee0f2502c428ef9b7b8159a1a6efa71f38b7fc8e77"
     },
     {
       "name": "libggml.so.0",
       "bytes": 1899104,
-      "sha256": "53aac984ca4703e965c1cbc9cbb49aa21126558f566695c441d932c18a03a3fd"
+      "sha256": "4428f75f410d7b6b4dba98ee0f2502c428ef9b7b8159a1a6efa71f38b7fc8e77"
     },
     {
       "name": "libggml.so.0.15.1",
       "bytes": 1899104,
-      "sha256": "53aac984ca4703e965c1cbc9cbb49aa21126558f566695c441d932c18a03a3fd"
+      "sha256": "4428f75f410d7b6b4dba98ee0f2502c428ef9b7b8159a1a6efa71f38b7fc8e77"
     },
     {
       "name": "openmates-pii-worker",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.27.0-alpha.63",
+  "version": "0.27.0-alpha.65",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",