@agenticmail/enterprise 0.5.612 → 0.5.613

package/CHANGELOG.md

@@ -2,6 +2,44 @@
 
 All notable changes to AgenticMail Enterprise are documented here.
 
+## [0.5.613] - 2026-05-25
+
+### Fixed — Agents now always use a PERMANENT workspace, never /tmp
+
+Agents were saving files (e.g. email templates) under `/tmp/agents/<id>/media`,
+which the OS wipes on reboot — work silently lost. Now every agent has one
+canonical, permanent, cross-platform (mac/linux/windows) workspace and never
+falls back to /tmp.
+
+- New `src/agent-tools/workspace.ts`: `getAgentWorkspaceDir()` /
+  `ensureAgentWorkspace()` / `getAgentSubdir()`. Canonical path
+  `~/.agenticmail/workspaces/<agentId>/` (override via
+  `AGENTICMAIL_WORKSPACE_DIR`), built with `os.homedir()` + `path.join()` so it
+  works on every platform.
+- Neat, predictable layout created on init: `media/ files/ templates/ exports/
+  projects/ data/ tmp/` (+ a `WORKSPACE.md` describing it).
+- Removed every `/tmp/agents/...` and `os.tmpdir()` fallback in the
+  file/media paths: WhatsApp + Telegram inbound media, the messaging-poller,
+  the calendar joined-meetings state file, and WhatsApp auth/session creds
+  (now per-agent under `<workspace>/whatsapp`, was a shared dir).
+- `createAllTools` now derives + provisions the workspace from `agentId` when a
+  caller didn't pass one, so no code path can land in /tmp. Path-sandbox allowed
+  dirs are now cross-platform (`os.tmpdir()` + `os.homedir()` instead of
+  hardcoded `/tmp`, `/var/tmp`, `/root`).
+- On agent creation the workspace is provisioned and its location is written to
+  the agent's long-term memory; the path + layout are documented in the system
+  prompt and in generated `AGENTS.md` so the agent never forgets where to work.
+
+## [0.5.612] - 2026-05-25
+
+### Fixed — Packaging: stop shipping `logs/` in the npm tarball
+
+`0.5.611` accidentally bundled the working `logs/` directory (cloudflared
++ agent process logs) into the published package — these contained local
+`/Users/...` paths (no credentials). Added `logs/`, `*.log`, and
+`test-*.mjs` to `.npmignore`. `0.5.611` is deprecated; use `0.5.612`.
+This release is otherwise identical to `0.5.611`.
+
 ## [0.5.611] - 2026-05-20
 
 ### Fixed — Agents no longer "wake up dumb" after context compaction

package/dist/{agent-heartbeat-PHLWJ3HO.js → agent-heartbeat-HFDBZWMO.js}

@@ -515,7 +515,7 @@ var AgentHeartbeatManager = class {
       return;
     }
     try {
-      const { guardrails } = await import("./routes-VX5CXX4J.js");
+      const { guardrails } = await import("./routes-5PUCWC4N.js");
       const status = await guardrails.getStatus(ctx.agentId);
       if (status.paused || status.offDuty) {
         console.log(`[heartbeat] Skipping action dispatch \u2014 agent is ${status.offDuty ? "off duty" : "paused"}`);

package/dist/{agent-tools-KRMDJOCK.js → agent-tools-5LLIXV6A.js}

@@ -2,7 +2,7 @@ import {
   createBrowserTool,
   createMeetingTools,
   createMeetingVoiceTools
-} from "./chunk-CC4BHZHO.js";
+} from "./chunk-GAOEALTJ.js";
 import {
   detectCapabilities,
   getCapabilitySummary,
@@ -12,11 +12,11 @@ import {
 import {
   createTelegramTools,
   init_telegram
-} from "./chunk-REAJCMQE.js";
+} from "./chunk-T26AVIAQ.js";
 import {
   createWhatsAppTools,
   init_whatsapp
-} from "./chunk-BUKTZ35L.js";
+} from "./chunk-H3JXMBTG.js";
 import {
   MemorySearchIndex,
   init_text_search
@@ -14581,7 +14581,16 @@ function createVisualMemoryTools(options) {
 // src/agent-tools/index.ts
 init_environment();
 async function createAllTools(options) {
-  var defaultAllowedDirs = ["/tmp", "/var/tmp", process.env.HOME || "/root"];
+  if (options && options.agentId && !options.workspaceDir) {
+    try {
+      var { getAgentWorkspaceDir, ensureAgentWorkspace } = await import("./workspace-P5FCSG2D.js");
+      options.workspaceDir = getAgentWorkspaceDir(options.agentId);
+      ensureAgentWorkspace(options.agentId);
+    } catch {
+    }
+  }
+  var _os = await import("os");
+  var defaultAllowedDirs = [_os.tmpdir(), _os.homedir()].filter(Boolean);
   var configuredDirs = options?.security?.pathSandbox?.allowedDirs || [];
   var pathSandbox = options?.workspaceDir && options?.security?.pathSandbox?.enabled !== false ? createPathSandbox(options.workspaceDir, {
     allowedDirs: [...defaultAllowedDirs, ...configuredDirs],
@@ -14795,7 +14804,7 @@ async function createAllTools(options) {
   var integrationTools = [];
   if (options?.vault) {
     try {
-      var { createAllIntegrationTools } = await import("./integrations-4JDIOHQU.js");
+      var { createAllIntegrationTools } = await import("./integrations-UWDEQ7Z4.js");
       integrationTools = await createAllIntegrationTools({
         vault: options.vault,
         orgId: options?.orgId,
@@ -14855,7 +14864,8 @@ async function createAllTools(options) {
       }
     } catch {
     }
-    const dataDir = options?.workspaceDir ? (await import("path")).resolve(options.workspaceDir, "..") : process.cwd();
+    const _wsRoot = options?.agentId ? (await import("./workspace-P5FCSG2D.js")).getAgentWorkspaceDir(options.agentId) : options?.workspaceDir || process.cwd();
+    const dataDir = (await import("path")).join(_wsRoot, "whatsapp");
     const _rec = _outboundRecorder;
     messagingTools = messagingTools.concat(createWhatsAppTools({
       agentId: options?.agentId || "",
@@ -14866,6 +14876,7 @@ async function createAllTools(options) {
     if (telegramConfig.botToken) {
       messagingTools = messagingTools.concat(createTelegramTools({
         botToken: telegramConfig.botToken,
+        agentId: options?.agentId || "",
         onOutbound: _rec ? (chatId, text) => _rec("telegram", chatId, text) : void 0
       }));
     }

package/dist/{chunk-NMMTMHTA.js → chunk-GC77MDKW.js}

@@ -7,6 +7,12 @@ import {
   buildPolymarketPrompt,
   buildRemotonPrompt
 } from "./chunk-BBM4POWP.js";
+import {
+  WORKSPACE_SUBDIRS,
+  ensureAgentWorkspace,
+  getAgentWorkspaceDir,
+  init_workspace
+} from "./chunk-UETRFOSR.js";
 
 // src/runtime/index.ts
 import { nanoid as nanoid3 } from "nanoid";
@@ -436,7 +442,7 @@ function createRuntimeHooks(deps) {
       var injectedMessages = [...messages];
       if (deps.knowledgeBaseEnabled !== false) {
         try {
-          var { knowledgeBase } = await import("./routes-VX5CXX4J.js");
+          var { knowledgeBase } = await import("./routes-5PUCWC4N.js");
           var kbs = await knowledgeBase.listForAgent(agentId);
           if (kbs.length > 0) {
             var contextParts = [];
@@ -469,7 +475,7 @@ ${contextParts.join("\n\n")}`;
       }
       if (deps.memoryEnabled !== false) {
         try {
-          var { memoryManager } = await import("./routes-VX5CXX4J.js");
+          var { memoryManager } = await import("./routes-5PUCWC4N.js");
           var memories = await memoryManager.queryMemories({
             agentId,
             limit: 10,
@@ -490,7 +496,7 @@ ${memories.map(function(m) {
       }
       if (deps.policyEnabled !== false) {
         try {
-          var { policyEngine } = await import("./routes-VX5CXX4J.js");
+          var { policyEngine } = await import("./routes-5PUCWC4N.js");
           var policies = await policyEngine.getAgentPolicies(agentId, deps.orgId);
           if (policies.length > 0) {
             var policyText = policies.map(function(p) {
@@ -515,7 +521,7 @@ ${policyText}`;
     // ─── Budget Check ──────────────────────────────
     async checkBudget(agentId, _orgId, _estimatedTokens) {
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         var now = Date.now();
         var cacheKey = `budget_sync_${agentId}`;
         var lastSync = globalThis[cacheKey] || 0;
@@ -608,7 +614,7 @@ ${policyText}`;
     // ─── Record LLM Usage ──────────────────────────
     async recordLLMUsage(agentId, orgId, usage) {
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         console.log(`[hooks] recordLLMUsage: agent=${agentId}, input=${usage.inputTokens}, output=${usage.outputTokens}`);
         await lifecycle.recordLLMUsage(agentId, {
           inputTokens: usage.inputTokens,
@@ -619,7 +625,7 @@ ${policyText}`;
         console.log(`[hooks] recordLLMUsage error: ${recordErr.message}`);
       }
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -667,7 +673,7 @@ ${policyText}`;
         var cacheKey = `${ctx.agentId}:${ctx.toolName}`;
         var cached = getCachedPermission(cacheKey);
         if (cached) return cached;
-        var { permissionEngine } = await import("./routes-VX5CXX4J.js");
+        var { permissionEngine } = await import("./routes-5PUCWC4N.js");
         var permResult = await permissionEngine.checkPermission(ctx.agentId, ctx.toolName);
         var result = {
           allowed: permResult.allowed,
@@ -676,7 +682,7 @@ ${policyText}`;
         };
         if (result.allowed && deps.guardrailsEnabled !== false) {
           try {
-            var { guardrails } = await import("./routes-VX5CXX4J.js");
+            var { guardrails } = await import("./routes-5PUCWC4N.js");
             var status = await guardrails.getStatus(ctx.agentId);
             if (status.paused || status.offDuty) {
               result.allowed = false;
@@ -688,7 +694,7 @@ ${policyText}`;
         }
         if (result.allowed && deps.dlpEnabled !== false && ctx.parameters) {
           try {
-            var { dlp } = await import("./routes-VX5CXX4J.js");
+            var { dlp } = await import("./routes-5PUCWC4N.js");
             var dlpResult = await dlp.scanParameters({
               orgId: ctx.orgId,
               agentId: ctx.agentId,
@@ -708,7 +714,7 @@ ${policyText}`;
         }
         if (result.requiresApproval && result.allowed) {
           try {
-            var { approvals } = await import("./routes-VX5CXX4J.js");
+            var { approvals } = await import("./routes-5PUCWC4N.js");
             var approval = await approvals.createAndWait({
               agentId: ctx.agentId,
               orgId: ctx.orgId,
@@ -738,7 +744,7 @@ ${policyText}`;
     // ─── After Tool Call ────────────────────────────
     async afterToolCall(ctx, result) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId: ctx.agentId,
           orgId: ctx.orgId,
@@ -755,7 +761,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         await lifecycle.recordToolCall(ctx.agentId, {
           toolId: ctx.toolName,
           tokensUsed: 0,
@@ -767,7 +773,7 @@ ${policyText}`;
       }
       if (result.success && EXTERNAL_TOOLS.has(ctx.toolName)) {
         try {
-          var { journal } = await import("./routes-VX5CXX4J.js");
+          var { journal } = await import("./routes-5PUCWC4N.js");
           await journal.record({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -782,7 +788,7 @@ ${policyText}`;
       }
       if (result.success && COMMUNICATION_TOOLS.has(ctx.toolName)) {
         try {
-          var { commBus } = await import("./routes-VX5CXX4J.js");
+          var { commBus } = await import("./routes-5PUCWC4N.js");
           await commBus.observeMessage({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -796,7 +802,7 @@ ${policyText}`;
     // ─── Session Lifecycle ──────────────────────────
     async onSessionStart(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -809,7 +815,7 @@ ${policyText}`;
     },
     async onSessionEnd(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -824,7 +830,7 @@ ${policyText}`;
     async onCompactionStart(sessionId, agentId, tokenCount, contextWindowSize) {
       var pct = contextWindowSize > 0 ? Math.round(tokenCount / contextWindowSize * 100) : 0;
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId: deps.orgId,
@@ -851,7 +857,7 @@ ${policyText}`;
     // ─── Context Compaction ─────────────────────────
     async onContextCompaction(sessionId, agentId, summary) {
       try {
-        var { activity: activityTracker } = await import("./routes-VX5CXX4J.js");
+        var { activity: activityTracker } = await import("./routes-5PUCWC4N.js");
         await activityTracker.record({
           agentId,
           orgId: deps.orgId,
@@ -862,7 +868,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { memoryManager } = await import("./routes-VX5CXX4J.js");
+        var { memoryManager } = await import("./routes-5PUCWC4N.js");
         await memoryManager.createMemory({
           agentId,
           orgId: deps.orgId,
@@ -2956,7 +2962,7 @@ async function runAgentLoop(config, initialMessages, hooks, options) {
           console.log(`[agent-loop] \u2705 Tool ${toolCall.name} succeeded (${content.length} chars): ${content.slice(0, 300)}`);
         }
         try {
-          const { activity } = await import("./routes-VX5CXX4J.js");
+          const { activity } = await import("./routes-5PUCWC4N.js");
           activity.recordToolCallCompact({
             agentId: config.agentId,
             orgId: config.orgId,
@@ -4270,7 +4276,7 @@ function createRequestToolsTool(allTools, activeSets, _context, agentSkills) {
   };
 }
 async function createToolsForContext(options, context, opts) {
-  const { createAllTools } = await import("./agent-tools-KRMDJOCK.js");
+  const { createAllTools } = await import("./agent-tools-5LLIXV6A.js");
   if (context === "full") {
     return createAllTools(options);
   }
@@ -4881,9 +4887,7 @@ var FollowUpScheduler = class {
 };
 
 // src/runtime/index.ts
-import { homedir } from "os";
-import { join } from "path";
-import { mkdirSync } from "fs";
+init_workspace();
 var _remotionPrompt = buildRemotonPrompt();
 var DEFAULT_MODEL = {
   provider: "anthropic",
@@ -4934,9 +4938,9 @@ var AgentRuntime = class {
   /** Build tool options for a given agent, including OAuth email config if available */
   buildToolOptions(agentId, sessionId) {
     const self = this;
-    const agentWorkspace = join(homedir(), ".agenticmail", "workspaces", agentId);
+    const agentWorkspace = getAgentWorkspaceDir(agentId);
     try {
-      mkdirSync(agentWorkspace, { recursive: true });
+      ensureAgentWorkspace(agentId);
     } catch {
     }
     const base = {
@@ -5781,7 +5785,7 @@ function createAgentRuntime(config) {
   return new AgentRuntime(config);
 }
 function buildDefaultSystemPrompt(agentId, memoryContext, hierarchyContext, agentIdentity, dbConnections, agentConfig) {
-  const wsDir = join(homedir(), ".agenticmail", "workspaces", agentId);
+  const wsDir = getAgentWorkspaceDir(agentId);
   var base = `You are an AI agent managed by AgenticMail Enterprise (agent: ${agentId}).
 
 You have access to a comprehensive set of tools for completing tasks. Use them effectively.
@@ -5796,10 +5800,12 @@ Guidelines:
 - For long tasks, work systematically and report progress
 
 ## Your Workspace
-Your dedicated workspace directory is: ${wsDir}
-ALWAYS save files, deliverables, rendered videos, images, and outputs here \u2014 NEVER in /tmp.
-/tmp files are cleaned up by the OS and will be lost. Your workspace persists across sessions.
-Create subdirectories as needed (e.g. videos/, images/, projects/, exports/).
+Your permanent workspace directory is: ${wsDir}
+ALWAYS save files, deliverables, rendered videos, images, templates, and outputs here \u2014 NEVER in /tmp.
+/tmp files are cleaned up by the OS and WILL be lost. Your workspace persists across sessions, restarts, and reboots.
+Keep it neat \u2014 it already has these subfolders (use them, create more as needed):
+${Object.entries(WORKSPACE_SUBDIRS).map(([n, d]) => `  - ${n}/ \u2014 ${d}`).join("\n")}
+Examples: email/HTML templates \u2192 templates/ ; attachments & images \u2192 media/ ; finished deliverables \u2192 exports/ ; scratch \u2192 tmp/ (inside your workspace, NOT the OS /tmp).
 - ACTIVELY USE YOUR MEMORY: After corrections, lessons, or insights, call memory_reflect to record them
 - Before complex tasks, call memory_context to recall relevant knowledge
 - Your memory persists across conversations \u2014 it's how you grow as an expert

package/dist/{chunk-BUKTZ35L.js → chunk-H3JXMBTG.js}

@@ -137,12 +137,9 @@ async function getOrCreateConnection(config) {
               var buffer = await downloadMediaMessage(msg, "buffer", {});
               if (buffer && buffer.length > 0) {
                 var { join: join2 } = await import("path");
-                var { mkdirSync, writeFileSync } = await import("fs");
-                var mediaDir = join2(config.dataDir || `/tmp/agents/${config.agentId}`, "media");
-                try {
-                  mkdirSync(mediaDir, { recursive: true });
-                } catch {
-                }
+                var { writeFileSync } = await import("fs");
+                var { getAgentSubdir } = await import("./workspace-P5FCSG2D.js");
+                var mediaDir = getAgentSubdir(config.agentId, "media");
                 mediaType = msg.message?.imageMessage ? "photo" : msg.message?.videoMessage ? "video" : msg.message?.audioMessage ? "audio" : msg.message?.documentMessage ? "document" : msg.message?.stickerMessage ? "sticker" : "file";
                 var ext = mediaType === "photo" ? "jpg" : mediaType === "video" ? "mp4" : mediaType === "audio" ? "ogg" : mediaType === "sticker" ? "webp" : mediaMessage.fileName?.split(".").pop() || "bin";
                 var localName = mediaMessage.fileName || `${mediaType}-${Date.now()}.${ext}`;

package/dist/{chunk-I2T4HESC.js → chunk-IXAWHXMY.js}

@@ -11,7 +11,7 @@ import {
   init_config_bus,
   init_routes,
   routes_exports
-} from "./chunk-KQ5EU4IA.js";
+} from "./chunk-VWIDJRD4.js";
 import {
   init_transport_encryption,
   transportEncryptionMiddleware
@@ -1658,7 +1658,7 @@ function createAdminRoutes(db) {
   });
   api.get("/whatsapp/qr/:agentId", requireRole("admin"), async (c) => {
     try {
-      var { getWhatsAppQR, isWhatsAppConnected } = await import("./whatsapp-RAQUV6ZL.js");
+      var { getWhatsAppQR, isWhatsAppConnected } = await import("./whatsapp-TBOB7TDL.js");
       var agentId = c.req.param("agentId");
       if (isWhatsAppConnected(agentId)) {
         return c.json({ status: "connected" });
@@ -7746,7 +7746,7 @@ function createServer(config) {
   let engineInitialized = false;
   api.all("/engine/*", async (c, _next) => {
     try {
-      const { engineRoutes, setEngineDb } = await import("./routes-VX5CXX4J.js");
+      const { engineRoutes, setEngineDb } = await import("./routes-5PUCWC4N.js");
       const { EngineDatabase } = await import("./db-adapter-ARPQPQ6K.js");
       if (!engineInitialized) {
         engineInitialized = true;
@@ -7776,13 +7776,13 @@ function createServer(config) {
         engineInitialized = true;
         if (config.runtime?.enabled) {
           try {
-            const { createAgentRuntime } = await import("./runtime-RMLNHLAT.js");
-            const { mountRuntimeApp, setRuntime } = await import("./routes-VX5CXX4J.js");
+            const { createAgentRuntime } = await import("./runtime-GML2LXIN.js");
+            const { mountRuntimeApp, setRuntime } = await import("./routes-5PUCWC4N.js");
             let getEmailConfig;
             let onTokenRefresh;
             let agentMemoryMgr;
             try {
-              const { lifecycle: lc, memoryManager: mm } = await import("./routes-VX5CXX4J.js");
+              const { lifecycle: lc, memoryManager: mm } = await import("./routes-5PUCWC4N.js");
               agentMemoryMgr = mm;
               if (lc) {
                 getEmailConfig = (agentId) => {
@@ -7821,7 +7821,7 @@ function createServer(config) {
               }
             } catch {
             }
-            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-VX5CXX4J.js");
+            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-5PUCWC4N.js");
             const runtime = createAgentRuntime({
               engineDb,
               adminDb: config.db,
@@ -8071,7 +8071,7 @@ function createServer(config) {
                 }
               }
               try {
-                const routesMod = await import("./routes-VX5CXX4J.js");
+                const routesMod = await import("./routes-5PUCWC4N.js");
                 const kbEngine = routesMod.knowledgeBase;
                 kbEngine?.setApiKeys?.(decryptedKeys);
                 if (Object.keys(decryptedKeys).length > 0) {
@@ -8089,7 +8089,7 @@ function createServer(config) {
             });
             (async () => {
               try {
-                const { engineRoutes, setEngineDb } = await import("./routes-VX5CXX4J.js");
+                const { engineRoutes, setEngineDb } = await import("./routes-5PUCWC4N.js");
                 const { EngineDatabase } = await import("./db-adapter-ARPQPQ6K.js");
                 if (!engineInitialized) {
                   engineInitialized = true;
@@ -8113,13 +8113,13 @@ function createServer(config) {
                     await setEngineDb(engineDb, config.db);
                     if (config.runtime?.enabled) {
                       try {
-                        const { createAgentRuntime } = await import("./runtime-RMLNHLAT.js");
-                        const { mountRuntimeApp, setRuntime } = await import("./routes-VX5CXX4J.js");
+                        const { createAgentRuntime } = await import("./runtime-GML2LXIN.js");
+                        const { mountRuntimeApp, setRuntime } = await import("./routes-5PUCWC4N.js");
                         let getEmailConfig;
                         let onTokenRefresh;
                         let agentMemoryMgr;
                         try {
-                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-VX5CXX4J.js");
+                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-5PUCWC4N.js");
                           agentMemoryMgr = mm;
                           if (lc) {
                             getEmailConfig = (agentId) => {
@@ -8158,7 +8158,7 @@ function createServer(config) {
                           }
                         } catch {
                         }
-                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-VX5CXX4J.js");
+                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-5PUCWC4N.js");
                         const runtime = createAgentRuntime({
                           engineDb,
                           adminDb: config.db,
@@ -8170,7 +8170,7 @@ function createServer(config) {
                           agentMemoryManager: agentMemoryMgr,
                           vault: vaultRef2,
                           permissionEngine: permRef2,
-                          hierarchyManager: (await import("./routes-VX5CXX4J.js")).hierarchyManager ?? void 0,
+                          hierarchyManager: (await import("./routes-5PUCWC4N.js")).hierarchyManager ?? void 0,
                           databaseManager: dbMgr2
                         });
                         await runtime.start();
@@ -8184,7 +8184,7 @@ function createServer(config) {
                     }
                     console.log("[engine] Eagerly initialized");
                     try {
-                      const { lifecycle: lcRef } = await import("./routes-VX5CXX4J.js");
+                      const { lifecycle: lcRef } = await import("./routes-5PUCWC4N.js");
                       if (lcRef) {
                         const agents = Array.from(lcRef.agents?.values?.() || []);
                         const hasLocalPm2 = agents.some((a) => {
@@ -8193,7 +8193,7 @@ function createServer(config) {
                           return target === "local" && (!pm || pm === "pm2");
                         });
                         if (hasLocalPm2) {
-                          const { ensurePm2 } = await import("./deployer-BKBISKKF.js");
+                          const { ensurePm2 } = await import("./deployer-M4YHMATN.js");
                           const pm2 = await ensurePm2();
                           if (pm2.installed) {
                             console.log(`[startup] PM2 v${pm2.version} available for local deployments`);

package/dist/{chunk-5EMB2S53.js → chunk-MVD2DMAY.js}

@@ -1234,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-64K32C5T.js");
+    const { createServer: createServer2 } = await import("./server-R5SICPBI.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1601,7 +1601,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-64K32C5T.js");
+  const { createServer } = await import("./server-R5SICPBI.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{chunk-TBBVEXBH.js → chunk-QVZIW5HI.js}

@@ -1,3 +1,7 @@
+import {
+  WORKSPACE_SUBDIRS,
+  init_workspace
+} from "./chunk-UETRFOSR.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";
@@ -7,6 +11,7 @@ var AgentConfigGenerator;
 var init_agent_config = __esm({
   "src/engine/agent-config.ts"() {
     "use strict";
+    init_workspace();
     AgentConfigGenerator = class _AgentConfigGenerator {
       /**
        * Generate the complete workspace files for an agent
@@ -329,6 +334,15 @@ _Configure this from the admin dashboard._
 - Daily notes: memory/YYYY-MM-DD.md
 - Long-term: MEMORY.md
 
+## Files & Workspace
+You have ONE permanent workspace folder. ALWAYS work from it \u2014 NEVER write to /tmp
+(OS temp files get wiped and are lost). It persists across sessions and reboots.
+Location: \`~/.agenticmail/workspaces/<your-agent-id>/\` (also injected into your
+system prompt at runtime, and saved in your memory). Keep it neat:
+${Object.entries(WORKSPACE_SUBDIRS).map(([n, d]) => `- \`${n}/\` \u2014 ${d}`).join("\n")}
+Email/HTML templates \u2192 \`templates/\` \xB7 attachments & images \u2192 \`media/\` \xB7 finished
+deliverables \u2192 \`exports/\` \xB7 scratch \u2192 \`tmp/\` (inside your workspace, not the OS /tmp).
+
 ## Safety
 - Don't exfiltrate private data
 - Don't run destructive commands without asking

package/dist/{chunk-REAJCMQE.js → chunk-T26AVIAQ.js}

@@ -107,12 +107,9 @@ function createTelegramTools(config) {
         var resp = await fetch(downloadUrl);
         if (!resp.ok) throw new Error(`Download failed: ${resp.status}`);
         var { join } = await import("path");
-        var { mkdirSync, writeFileSync } = await import("fs");
-        var mediaDir = join("/tmp/agents/media");
-        try {
-          mkdirSync(mediaDir, { recursive: true });
-        } catch {
-        }
+        var { writeFileSync } = await import("fs");
+        var { getAgentSubdir } = await import("./workspace-P5FCSG2D.js");
+        var mediaDir = getAgentSubdir(config.agentId || "default", "media");
         var ext = fileData.file_path.split(".").pop() || "bin";
         var localName = input.fileName || `telegram-${Date.now()}.${ext}`;
         var localPath = join(mediaDir, localName);

package/dist/chunk-UETRFOSR.js

@@ -0,0 +1,80 @@
+import {
+  __esm
+} from "./chunk-KFQGP6VL.js";
+
+// src/agent-tools/workspace.ts
+import { homedir } from "os";
+import { join } from "path";
+import { mkdirSync, writeFileSync, existsSync } from "fs";
+function getWorkspaceBase() {
+  return process.env.AGENTICMAIL_WORKSPACE_DIR || join(homedir(), ".agenticmail", "workspaces");
+}
+function getAgentWorkspaceDir(agentId) {
+  return join(getWorkspaceBase(), agentId || "default");
+}
+function getAgentSubdir(agentId, name) {
+  const dir = join(getAgentWorkspaceDir(agentId), name);
+  try {
+    mkdirSync(dir, { recursive: true });
+  } catch {
+  }
+  return dir;
+}
+function ensureAgentWorkspace(agentId, displayName) {
+  const root = getAgentWorkspaceDir(agentId);
+  try {
+    mkdirSync(root, { recursive: true });
+    for (const sub of Object.keys(WORKSPACE_SUBDIRS)) {
+      mkdirSync(join(root, sub), { recursive: true });
+    }
+    const md = join(root, "WORKSPACE.md");
+    if (!existsSync(md)) writeFileSync(md, renderWorkspaceMarkdown(root, displayName));
+  } catch {
+  }
+  return root;
+}
+function renderWorkspaceMarkdown(root, displayName) {
+  const lines = [];
+  lines.push(`# WORKSPACE.md \u2014 ${displayName ? displayName + "'s" : "Your"} permanent workspace`);
+  lines.push("");
+  lines.push(`Your permanent working directory is:
+
+    ${root}
+`);
+  lines.push("ALWAYS work from here. NEVER write to /tmp \u2014 OS temp files are wiped and lost.");
+  lines.push("This folder persists across sessions, restarts, and reboots. Keep it tidy.");
+  lines.push("");
+  lines.push("## Folder layout");
+  lines.push("");
+  for (const [name, desc] of Object.entries(WORKSPACE_SUBDIRS)) {
+    lines.push(`- \`${name}/\` \u2014 ${desc}`);
+  }
+  lines.push("");
+  lines.push("Save email/HTML templates to `templates/`, attachments and images to `media/`,");
+  lines.push("finished deliverables to `exports/`, and use `tmp/` (inside the workspace) for scratch.");
+  return lines.join("\n") + "\n";
+}
+var WORKSPACE_SUBDIRS;
+var init_workspace = __esm({
+  "src/agent-tools/workspace.ts"() {
+    WORKSPACE_SUBDIRS = {
+      media: "Images, audio, video, and inbound/outbound message attachments",
+      files: "Documents and generated deliverables (reports, sheets, etc.)",
+      templates: "Reusable email / HTML / document templates",
+      exports: "Rendered final outputs (PDF, MP4, ZIP, etc.) ready to send",
+      projects: "Multi-file working projects (code, video projects, sites)",
+      data: "Local scratch databases and JSON/CSV working data",
+      tmp: "Scratch space \u2014 local & ephemeral, but NOT the OS /tmp (still under your workspace)"
+    };
+  }
+});
+
+export {
+  WORKSPACE_SUBDIRS,
+  getWorkspaceBase,
+  getAgentWorkspaceDir,
+  getAgentSubdir,
+  ensureAgentWorkspace,
+  renderWorkspaceMarkdown,
+  init_workspace
+};

package/dist/{chunk-KQ5EU4IA.js → chunk-VWIDJRD4.js}

@@ -1,3 +1,7 @@
+import {
+  AgentStatusTracker,
+  init_agent_status
+} from "./chunk-FQWJMPKW.js";
 import {
   DatabaseConnectionManager,
   init_connection_manager,
@@ -7,6 +11,12 @@ import {
   init_agent_tools,
   init_types
 } from "./chunk-TK55CSBH.js";
+import {
+  AgentConfigGenerator,
+  DeploymentEngine,
+  init_agent_config,
+  init_deployer
+} from "./chunk-QVZIW5HI.js";
 import {
   init_messaging_history,
   storeMessage
@@ -28,10 +38,6 @@ import {
   TaskQueueManager,
   init_task_queue
 } from "./chunk-ET6WZFPS.js";
-import {
-  AgentStatusTracker,
-  init_agent_status
-} from "./chunk-FQWJMPKW.js";
 import {
   BUILTIN_SKILLS,
   PRESET_PROFILES,
@@ -39,12 +45,6 @@ import {
   SKILL_SUITES,
   init_skills as init_skills2
 } from "./chunk-HGBLI5HF.js";
-import {
-  AgentConfigGenerator,
-  DeploymentEngine,
-  init_agent_config,
-  init_deployer
-} from "./chunk-TBBVEXBH.js";
 import {
   getConfig,
   init_transport_encryption,
@@ -760,6 +760,25 @@ var init_lifecycle = __esm({
         this.agents.set(agent.id, agent);
         await this.persistAgent(agent);
         this.emitEvent(agent, "created", { createdBy });
+        try {
+          const { ensureAgentWorkspace, renderWorkspaceMarkdown } = await import("./workspace-P5FCSG2D.js");
+          const displayName = config.identity?.displayName || config.displayName || config.name;
+          const wsRoot = ensureAgentWorkspace(agent.id, displayName);
+          try {
+            const { memoryManager: memoryManager2 } = await import("./routes-5PUCWC4N.js");
+            await memoryManager2.createMemory({
+              agentId: agent.id,
+              orgId,
+              category: "system_notice",
+              title: "My permanent workspace location",
+              content: renderWorkspaceMarkdown(wsRoot, displayName),
+              source: "system",
+              importance: "high"
+            });
+          } catch {
+          }
+        } catch {
+        }
         return agent;
       }
       /**
@@ -7055,7 +7074,7 @@ function createAgentRoutes(opts) {
   });
   router.post("/system/install-pm2", async (c) => {
     try {
-      const { ensurePm2 } = await import("./deployer-BKBISKKF.js");
+      const { ensurePm2 } = await import("./deployer-M4YHMATN.js");
       const result = await ensurePm2();
       if (result.installed) {
         return c.json({ success: true, message: `PM2 ${result.version} installed successfully` });
@@ -7311,7 +7330,7 @@ function createAgentRoutes(opts) {
       }
       const managedAgent = await lifecycle2.createAgent(orgId, config, actor);
       try {
-        const { knowledgeBase: kbEngine } = await import("./routes-VX5CXX4J.js");
+        const { knowledgeBase: kbEngine } = await import("./routes-5PUCWC4N.js");
         const allKbs = kbEngine.getAllKnowledgeBases();
         const clientOrgId = managedAgent?.clientOrgId || config?.clientOrgId || null;
         let kbAssigned = 0;
@@ -9256,7 +9275,7 @@ function createAgentRoutes(opts) {
     try {
       const body = await c.req.json().catch(() => ({}));
       const mode = body.mode || "";
-      const { createWhatsAppTools } = await import("./whatsapp-RAQUV6ZL.js");
+      const { createWhatsAppTools } = await import("./whatsapp-TBOB7TDL.js");
       const dataDir = process.env.DATA_DIR || "/tmp/agenticmail-data";
       const connId = mode === "business" ? `biz-${agentId}` : agentId;
       const connDir = mode === "business" ? `${dataDir}/agents/${agentId}/whatsapp-business` : `${dataDir}/agents/${agentId}/whatsapp`;
@@ -9273,7 +9292,7 @@ function createAgentRoutes(opts) {
     const agentId = c.req.param("id");
     const mode = c.req.query("mode") || "";
     try {
-      const { getConnectionStatus } = await import("./whatsapp-RAQUV6ZL.js");
+      const { getConnectionStatus } = await import("./whatsapp-TBOB7TDL.js");
       const connId = mode === "business" ? `biz-${agentId}` : agentId;
       return c.json(getConnectionStatus(connId));
     } catch {
@@ -9286,7 +9305,7 @@ function createAgentRoutes(opts) {
       const body = await c.req.json().catch(() => ({}));
       const mode = body.mode || "";
       const connId = mode === "business" ? `biz-${agentId}` : agentId;
-      const { sendTestMessage } = await import("./whatsapp-RAQUV6ZL.js");
+      const { sendTestMessage } = await import("./whatsapp-TBOB7TDL.js");
       const result = await sendTestMessage(connId, body.to);
       return c.json(result);
     } catch (err) {
@@ -9297,7 +9316,7 @@ function createAgentRoutes(opts) {
     const agentId = c.req.param("id");
     try {
       const body = await c.req.json();
-      const { getConnection } = await import("./whatsapp-RAQUV6ZL.js");
+      const { getConnection } = await import("./whatsapp-TBOB7TDL.js");
       const conn = getConnection(agentId);
       if (!conn?.connected) return c.json({ error: "Not connected" }, 503);
       const toJid = (to) => to?.includes("@") ? to : (to || "").replace(/[^0-9]/g, "") + "@s.whatsapp.net";
@@ -9341,7 +9360,7 @@ function createAgentRoutes(opts) {
     try {
       const body = await c.req.json().catch(() => ({}));
       const mode = body.mode || "";
-      const { createWhatsAppTools } = await import("./whatsapp-RAQUV6ZL.js");
+      const { createWhatsAppTools } = await import("./whatsapp-TBOB7TDL.js");
       const dataDir = process.env.DATA_DIR || "/tmp/agenticmail-data";
       const connId = mode === "business" ? `biz-${agentId}` : agentId;
       const connDir = mode === "business" ? `${dataDir}/agents/${agentId}/whatsapp-business` : `${dataDir}/agents/${agentId}/whatsapp`;
@@ -24422,15 +24441,16 @@ var init_messaging_poller = __esm({
           port: agents[0].port || 3100
         };
         if (this.config.getCapability("whatsapp")) {
-          var dataDir = process.env.DATA_DIR || "/tmp/agenticmail-data";
+          var { getAgentWorkspaceDir } = await import("./workspace-P5FCSG2D.js");
+          var { join: _join } = await import("path");
           var agentEndpoints = [];
           for (var ag of agents) {
             var ep = { id: ag.id, displayName: ag.displayName || ag.name || "Agent", host: ag.host || "localhost", port: ag.port || 3100 };
-            agentEndpoints.push({ id: ag.id, dataDir: `${dataDir}/agents/${ag.id}/whatsapp`, endpoint: ep });
+            agentEndpoints.push({ id: ag.id, dataDir: _join(getAgentWorkspaceDir(ag.id), "whatsapp"), endpoint: ep });
             await this.startWhatsApp(ep);
           }
           try {
-            var { autoStartConnections } = await import("./whatsapp-RAQUV6ZL.js");
+            var { autoStartConnections } = await import("./whatsapp-TBOB7TDL.js");
             await autoStartConnections(agentEndpoints.map((a) => ({ id: a.id, dataDir: a.dataDir })));
           } catch (err) {
             console.error("[messaging] WhatsApp auto-start failed:", err.message);
@@ -24544,7 +24564,7 @@ var init_messaging_poller = __esm({
       // ─── WhatsApp (event-driven — Baileys WebSocket) ──
       async startWhatsApp(agent) {
         try {
-          var { onWhatsAppMessage } = await import("./whatsapp-RAQUV6ZL.js");
+          var { onWhatsAppMessage } = await import("./whatsapp-TBOB7TDL.js");
           var unsub = onWhatsAppMessage(agent.id, (msg) => {
             var waMediaFiles;
             if (msg.mediaPath && msg.mediaType) {
@@ -24570,7 +24590,7 @@ var init_messaging_poller = __esm({
       }
       // ─── Telegram (webhook preferred, polling fallback) ─
       async startTelegram(botToken, agent) {
-        var { setTelegramWebhook, deleteTelegramWebhook, getTelegramWebhookInfo } = await import("./telegram-NG7PNNIN.js");
+        var { setTelegramWebhook, deleteTelegramWebhook, getTelegramWebhookInfo } = await import("./telegram-W765VRI5.js");
         var { randomBytes: randomBytes2 } = await import("crypto");
         var webhookSecret = randomBytes2(32).toString("hex");
         if (this.config.publicUrl && this.config.app) {
@@ -24649,7 +24669,7 @@ var init_messaging_poller = __esm({
           offset = await loadOffset();
           while (running && this.running) {
             try {
-              var { pollTelegramUpdates } = await import("./telegram-NG7PNNIN.js");
+              var { pollTelegramUpdates } = await import("./telegram-W765VRI5.js");
               var { updates, nextOffset } = await pollTelegramUpdates(botToken, offset, 25);
               if (nextOffset > offset) {
                 offset = nextOffset;
@@ -24766,13 +24786,10 @@ ${desc}` : desc;
           var downloadUrl = `https://api.telegram.org/file/bot${botToken}/${filePath}`;
           var response = await fetch(downloadUrl);
           if (!response.ok) return null;
-          var { join: join3, dirname: dirname3 } = await import("path");
-          var { mkdirSync, writeFileSync } = await import("fs");
-          var mediaDir = join3(agent.dataDir || `/tmp/agents/${agent.id}`, "media");
-          try {
-            mkdirSync(mediaDir, { recursive: true });
-          } catch {
-          }
+          var { join: join3 } = await import("path");
+          var { writeFileSync } = await import("fs");
+          var { getAgentSubdir } = await import("./workspace-P5FCSG2D.js");
+          var mediaDir = getAgentSubdir(agent.id, "media");
           var ext = filePath.split(".").pop() || (mediaType === "photo" ? "jpg" : "bin");
           var localName = fileName || `${mediaType}-${Date.now()}.${ext}`;
           var localPath = join3(mediaDir, localName);
@@ -25042,7 +25059,7 @@ ${desc}` : desc;
             var typingJson = await typingResp.json();
             console.log(`[messaging] Telegram typing sent to ${chatId}: ${JSON.stringify(typingJson)}`);
           } else if (ctx.source === "whatsapp") {
-            var { getConnection } = await import("./whatsapp-RAQUV6ZL.js");
+            var { getConnection } = await import("./whatsapp-TBOB7TDL.js");
             var conn = getConnection(agent.id);
             if (!conn?.connected) return;
             var jid = ctx.senderId.includes("@") ? ctx.senderId : ctx.senderId.replace(/[^0-9]/g, "") + "@s.whatsapp.net";
@@ -25057,7 +25074,7 @@ ${desc}` : desc;
       async sendDirectReply(agent, ctx, text) {
         try {
           if (ctx.source === "whatsapp") {
-            var { getConnection } = await import("./whatsapp-RAQUV6ZL.js");
+            var { getConnection } = await import("./whatsapp-TBOB7TDL.js");
             var conn = getConnection(agent.id);
             if (!conn?.connected) return;
             var jid = ctx.senderId.includes("@") ? ctx.senderId : ctx.senderId.replace(/[^0-9]/g, "") + "@s.whatsapp.net";

package/dist/{cli-agent-V7K6HZAG.js → cli-agent-AMA2R4PG.js}

@@ -2,13 +2,19 @@ import {
   TaskQueueManager,
   init_task_queue
 } from "./chunk-ET6WZFPS.js";
+import {
+  getAgentSubdir,
+  init_workspace
+} from "./chunk-UETRFOSR.js";
 import "./chunk-KFQGP6VL.js";
 
 // src/cli-agent.ts
+init_workspace();
 init_task_queue();
 import { Hono } from "hono";
 import { serve } from "@hono/node-server";
 import { existsSync, readFileSync, writeFileSync } from "fs";
+import { join as _joinPath } from "path";
 
 // src/engine/task-queue-before-spawn.ts
 function extractTaskMetadata(task) {
@@ -889,7 +895,7 @@ async function runAgent(_args) {
   const agent = agentRow[0];
   console.log(`   Agent: ${agent.display_name || agent.name}`);
   console.log(`   State: ${agent.state}`);
-  const routes = await import("./routes-VX5CXX4J.js");
+  const routes = await import("./routes-5PUCWC4N.js");
   await routes.lifecycle.setDb(engineDb);
   await routes.lifecycle.loadFromDb();
   routes.lifecycle.standaloneMode = true;
@@ -957,7 +963,7 @@ async function runAgent(_args) {
       }
       Object.assign(dbApiKeys, fresh);
       try {
-        const routesMod = await import("./routes-VX5CXX4J.js");
+        const routesMod = await import("./routes-5PUCWC4N.js");
         routesMod.knowledgeBase?.setApiKeys?.(dbApiKeys);
       } catch {
       }
@@ -998,10 +1004,10 @@ async function runAgent(_args) {
   setInterval(() => {
     void _loadProviderKeys();
   }, 3e4).unref();
-  const { createAgentRuntime } = await import("./runtime-RMLNHLAT.js");
+  const { createAgentRuntime } = await import("./runtime-GML2LXIN.js");
   let orgIntMgr = null;
   try {
-    const { orgIntegrations: oi } = await import("./routes-VX5CXX4J.js");
+    const { orgIntegrations: oi } = await import("./routes-5PUCWC4N.js");
     orgIntMgr = oi;
   } catch {
   }
@@ -1388,7 +1394,7 @@ Please complete this task now.`,
                     console.log(`[TaskPoller] Delivered recovery response to Telegram chat ${dc.chatId}`);
                   }
                 } else if (dc.channel === "whatsapp") {
-                  const { getOrCreateConnection, toJid } = await import("./whatsapp-RAQUV6ZL.js");
+                  const { getOrCreateConnection, toJid } = await import("./whatsapp-TBOB7TDL.js");
                   const conn = await getOrCreateConnection(agentId);
                   if (conn.connected && conn.sock) {
                     await conn.sock.sendMessage(toJid(dc.chatId), { text: lastText.trim() });
@@ -1590,7 +1596,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "permissions") {
         try {
-          const { permissionEngine } = await import("./routes-VX5CXX4J.js");
+          const { permissionEngine } = await import("./routes-5PUCWC4N.js");
           await permissionEngine.setDb(engineDb);
           reloaded.push("permissions");
         } catch {
@@ -1630,7 +1636,7 @@ Please complete this task now.`,
       }
       if (scope === "all" || scope === "guardrails") {
         try {
-          const { guardrails } = await import("./routes-VX5CXX4J.js");
+          const { guardrails } = await import("./routes-5PUCWC4N.js");
           await guardrails.loadFromDb?.();
           reloaded.push("guardrails");
         } catch {
@@ -1719,7 +1725,7 @@ Please complete this task now.`,
           });
         }
       } else if (ctx.source === "whatsapp") {
-        import("./whatsapp-RAQUV6ZL.js").then(({ getConnection }) => {
+        import("./whatsapp-TBOB7TDL.js").then(({ getConnection }) => {
           const conn = getConnection(AGENT_ID);
           if (!conn?.connected) return;
           const jid = ctx.senderEmail.includes("@") ? ctx.senderEmail : ctx.senderEmail.replace(/[^0-9]/g, "") + "@s.whatsapp.net";
@@ -2089,7 +2095,7 @@ ${ambientContext}` : ""
               if (isMessagingSource) {
                 if (ctx.source === "whatsapp") {
                   try {
-                    const { getOrCreateConnection, toJid } = await import("./whatsapp-RAQUV6ZL.js");
+                    const { getOrCreateConnection, toJid } = await import("./whatsapp-TBOB7TDL.js");
                     const conn = await getOrCreateConnection(AGENT_ID);
                     if (conn.connected && conn.sock) {
                       await conn.sock.sendMessage(toJid(ctx.senderEmail), { text: _stripMd(lastText) });
@@ -2343,7 +2349,7 @@ ${identity.personality.slice(0, 800)}` : "";
         if (defaultWaChat) waChatIds.add(String(defaultWaChat));
         if (waChatIds.size > 0) {
           try {
-            const { getConnection, toJid } = await import("./whatsapp-RAQUV6ZL.js");
+            const { getConnection, toJid } = await import("./whatsapp-TBOB7TDL.js");
             const conn = await getConnection(agentId);
             if (conn?.connected && conn?.sock) {
               for (const chatId of waChatIds) {
@@ -2832,7 +2838,7 @@ Available tools: ${providerType === "imap" ? "email_send (to, subject, body)" :
       console.log("[guardrails] Disabled via autonomy settings");
     }
     try {
-      const { AgentHeartbeatManager } = await import("./agent-heartbeat-PHLWJ3HO.js");
+      const { AgentHeartbeatManager } = await import("./agent-heartbeat-HFDBZWMO.js");
       const hbOrgRows = await engineDb.query(`SELECT org_id FROM managed_agents WHERE id = $1`, [AGENT_ID]);
       const hbOrgId = hbOrgRows?.[0]?.org_id || "";
       const hbManagerEmail = config.managerEmail || (config.manager?.type === "external" ? config.manager.email : null);
@@ -2917,7 +2923,7 @@ async function startCalendarPolling(agentId, config, runtime, _engineDb, _memory
   };
   const CALENDAR_POLL_INTERVAL = 5 * 6e4;
   const joinedMeetings = /* @__PURE__ */ new Set();
-  const joinedMeetingsFile = `/tmp/agenticmail-joined-meetings-${agentId}.json`;
+  const joinedMeetingsFile = _joinPath(getAgentSubdir(agentId, "data"), "joined-meetings.json");
   try {
     if (existsSync(joinedMeetingsFile)) {
       const data = JSON.parse(readFileSync(joinedMeetingsFile, "utf-8"));

package/dist/{cli-serve-T3W5RDO4.js → cli-serve-4NLB4RK2.js}

@@ -94,7 +94,7 @@ async function runServe(_args) {
     process.exit(1);
   }
   const { createAdapter, smartDbConfig } = await import("./factory-RUGZPU7W.js");
-  const { createServer } = await import("./server-64K32C5T.js");
+  const { createServer } = await import("./server-R5SICPBI.js");
   const db = await createAdapter(smartDbConfig(DATABASE_URL));
   await db.migrate();
   const server = createServer({
@@ -120,7 +120,7 @@ async function runServe(_args) {
       });
       setTimeout(async () => {
         try {
-          const routes = await import("./routes-VX5CXX4J.js");
+          const routes = await import("./routes-5PUCWC4N.js");
           setWatcherRuntime(
             () => routes.getRuntime?.() || null
           );

package/dist/cli.js

@@ -65,14 +65,14 @@ Skill Development:
     break;
   case "serve":
   case "start":
-    import("./cli-serve-T3W5RDO4.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
+    import("./cli-serve-4NLB4RK2.js").then((m) => m.runServe(args.slice(1))).catch(fatal);
     break;
   case "agent":
-    import("./cli-agent-V7K6HZAG.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
+    import("./cli-agent-AMA2R4PG.js").then((m) => m.runAgent(args.slice(1))).catch(fatal);
     break;
   case "setup":
   default:
-    import("./setup-7AQLYQBS.js").then((m) => m.runSetupWizard()).catch(fatal);
+    import("./setup-SLLV37YT.js").then((m) => m.runSetupWizard()).catch(fatal);
     break;
 }
 function fatal(err) {

package/dist/{deployer-BKBISKKF.js → deployer-M4YHMATN.js}

@@ -2,7 +2,8 @@ import {
   DeploymentEngine,
   ensurePm2,
   init_deployer
-} from "./chunk-TBBVEXBH.js";
+} from "./chunk-QVZIW5HI.js";
+import "./chunk-UETRFOSR.js";
 import "./chunk-KFQGP6VL.js";
 init_deployer();
 export {

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 import {
   provision,
   runSetupWizard
-} from "./chunk-5EMB2S53.js";
+} from "./chunk-MVD2DMAY.js";
 import {
   AgentRuntime,
   EmailChannel,
@@ -28,7 +28,7 @@ import {
   executeTool,
   runAgentLoop,
   toolsToDefinitions
-} from "./chunk-NMMTMHTA.js";
+} from "./chunk-GC77MDKW.js";
 import {
   ValidationError,
   auditLogger,
@@ -42,7 +42,7 @@ import {
   requireRole,
   securityHeaders,
   validate
-} from "./chunk-I2T4HESC.js";
+} from "./chunk-IXAWHXMY.js";
 import "./chunk-DJBCRQTD.js";
 import {
   PROVIDER_REGISTRY,
@@ -83,7 +83,8 @@ import {
   init_storage_manager,
   init_tenant,
   init_workforce
-} from "./chunk-KQ5EU4IA.js";
+} from "./chunk-VWIDJRD4.js";
+import "./chunk-FQWJMPKW.js";
 import "./chunk-K2GKUQSB.js";
 import "./chunk-TK55CSBH.js";
 import {
@@ -96,6 +97,12 @@ import {
   sqliteToMySQL,
   sqliteToPostgres
 } from "./chunk-CZPHXLRP.js";
+import {
+  AgentConfigGenerator,
+  DeploymentEngine,
+  init_agent_config,
+  init_deployer
+} from "./chunk-QVZIW5HI.js";
 import "./chunk-Z7NVD3OQ.js";
 import {
   AgentMemoryManager,
@@ -105,19 +112,13 @@ import "./chunk-AF3WSNVX.js";
 import "./chunk-V6QTSKGO.js";
 import "./chunk-74ZCQKYU.js";
 import "./chunk-ET6WZFPS.js";
-import "./chunk-FQWJMPKW.js";
+import "./chunk-UETRFOSR.js";
 import {
   BUILTIN_SKILLS,
   PRESET_PROFILES,
   PermissionEngine,
   init_skills
 } from "./chunk-HGBLI5HF.js";
-import {
-  AgentConfigGenerator,
-  DeploymentEngine,
-  init_agent_config,
-  init_deployer
-} from "./chunk-TBBVEXBH.js";
 import "./chunk-FLQ5FLHW.js";
 import "./chunk-GBW6SJPH.js";
 import "./chunk-X5IZUXDC.js";

package/dist/meetings-SPK24WE7.js

@@ -2,7 +2,7 @@ import {
   createMeetingTools,
   ensureBrowser,
   sendChatMessage
-} from "./chunk-CC4BHZHO.js";
+} from "./chunk-GAOEALTJ.js";
 import "./chunk-X5IZUXDC.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{routes-VX5CXX4J.js → routes-5PUCWC4N.js}

@@ -37,18 +37,19 @@ import {
   tenants,
   vault,
   workforce
-} from "./chunk-KQ5EU4IA.js";
+} from "./chunk-VWIDJRD4.js";
+import "./chunk-FQWJMPKW.js";
 import "./chunk-K2GKUQSB.js";
 import "./chunk-TK55CSBH.js";
+import "./chunk-QVZIW5HI.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
 import "./chunk-AF3WSNVX.js";
 import "./chunk-V6QTSKGO.js";
 import "./chunk-74ZCQKYU.js";
 import "./chunk-ET6WZFPS.js";
-import "./chunk-FQWJMPKW.js";
+import "./chunk-UETRFOSR.js";
 import "./chunk-HGBLI5HF.js";
-import "./chunk-TBBVEXBH.js";
 import "./chunk-FLQ5FLHW.js";
 import "./chunk-WUAWWKTN.js";
 import "./chunk-YDD5TC5Q.js";

package/dist/{runtime-RMLNHLAT.js → runtime-GML2LXIN.js}

@@ -16,7 +16,7 @@ import {
   runAgentLoop,
   toolsToDefinitions,
   truncateToolResults
-} from "./chunk-NMMTMHTA.js";
+} from "./chunk-GC77MDKW.js";
 import {
   PROVIDER_REGISTRY,
   listAllProviders,
@@ -24,6 +24,7 @@ import {
   resolveProvider
 } from "./chunk-FP7JCKYO.js";
 import "./chunk-BBM4POWP.js";
+import "./chunk-UETRFOSR.js";
 import "./chunk-KFQGP6VL.js";
 export {
   AgentRuntime,

package/dist/{server-64K32C5T.js → server-R5SICPBI.js}

@@ -1,20 +1,21 @@
 import {
   createServer
-} from "./chunk-I2T4HESC.js";
+} from "./chunk-IXAWHXMY.js";
 import "./chunk-DJBCRQTD.js";
 import "./chunk-FP7JCKYO.js";
-import "./chunk-KQ5EU4IA.js";
+import "./chunk-VWIDJRD4.js";
+import "./chunk-FQWJMPKW.js";
 import "./chunk-K2GKUQSB.js";
 import "./chunk-TK55CSBH.js";
+import "./chunk-QVZIW5HI.js";
 import "./chunk-Z7NVD3OQ.js";
 import "./chunk-VSBC4SWO.js";
 import "./chunk-AF3WSNVX.js";
 import "./chunk-V6QTSKGO.js";
 import "./chunk-74ZCQKYU.js";
 import "./chunk-ET6WZFPS.js";
-import "./chunk-FQWJMPKW.js";
+import "./chunk-UETRFOSR.js";
 import "./chunk-HGBLI5HF.js";
-import "./chunk-TBBVEXBH.js";
 import "./chunk-FLQ5FLHW.js";
 import "./chunk-GBW6SJPH.js";
 import "./chunk-X5IZUXDC.js";

package/dist/{setup-7AQLYQBS.js → setup-SLLV37YT.js}

@@ -6,7 +6,7 @@ import {
   promptRegistration,
   provision,
   runSetupWizard
-} from "./chunk-5EMB2S53.js";
+} from "./chunk-MVD2DMAY.js";
 import "./chunk-UQRQ2JN3.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{telegram-NG7PNNIN.js → telegram-W765VRI5.js}

@@ -5,7 +5,7 @@ import {
   init_telegram,
   pollTelegramUpdates,
   setTelegramWebhook
-} from "./chunk-REAJCMQE.js";
+} from "./chunk-T26AVIAQ.js";
 import "./chunk-KFQGP6VL.js";
 init_telegram();
 export {

package/dist/{whatsapp-RAQUV6ZL.js → whatsapp-TBOB7TDL.js}

@@ -12,7 +12,7 @@ import {
   onWhatsAppMessage,
   sendTestMessage,
   toJid
-} from "./chunk-BUKTZ35L.js";
+} from "./chunk-H3JXMBTG.js";
 import "./chunk-KFQGP6VL.js";
 init_whatsapp();
 export {

package/dist/workspace-P5FCSG2D.js

@@ -0,0 +1,19 @@
+import {
+  WORKSPACE_SUBDIRS,
+  ensureAgentWorkspace,
+  getAgentSubdir,
+  getAgentWorkspaceDir,
+  getWorkspaceBase,
+  init_workspace,
+  renderWorkspaceMarkdown
+} from "./chunk-UETRFOSR.js";
+import "./chunk-KFQGP6VL.js";
+init_workspace();
+export {
+  WORKSPACE_SUBDIRS,
+  ensureAgentWorkspace,
+  getAgentSubdir,
+  getAgentWorkspaceDir,
+  getWorkspaceBase,
+  renderWorkspaceMarkdown
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/enterprise",
-  "version": "0.5.612",
+  "version": "0.5.613",
   "description": "AgenticMail Enterprise — cloud-hosted AI agent identity, email, auth & compliance for organizations",
   "type": "module",
   "bin": {