@agenticmail/enterprise 0.5.612 → 0.5.614

package/CHANGELOG.md

@@ -2,6 +2,56 @@
 
 All notable changes to AgenticMail Enterprise are documented here.
 
+## [0.5.614] - 2026-05-25
+
+### Fixed — Telegram/WhatsApp "typing…" now stays on for the whole turn
+
+The agent sent the chat-action ONCE on inbound, so "typing…" showed for ~5s
+(Telegram's window) then vanished while the agent was still working — unlike
+the open-source bridge, which refreshes it. Added a self-refreshing typing
+indicator in the chat handler: pings every 4s and stops when the session turn
+completes (and on error / a 15-min safety cap). Keyed per-chat so follow-up
+messages don't stack multiple loops. Applies to both Telegram (`sendChatAction`)
+and WhatsApp (`composing` presence).
+
+## [0.5.613] - 2026-05-25
+
+### Fixed — Agents now always use a PERMANENT workspace, never /tmp
+
+Agents were saving files (e.g. email templates) under `/tmp/agents/<id>/media`,
+which the OS wipes on reboot — work silently lost. Now every agent has one
+canonical, permanent, cross-platform (mac/linux/windows) workspace and never
+falls back to /tmp.
+
+- New `src/agent-tools/workspace.ts`: `getAgentWorkspaceDir()` /
+  `ensureAgentWorkspace()` / `getAgentSubdir()`. Canonical path
+  `~/.agenticmail/workspaces/<agentId>/` (override via
+  `AGENTICMAIL_WORKSPACE_DIR`), built with `os.homedir()` + `path.join()` so it
+  works on every platform.
+- Neat, predictable layout created on init: `media/ files/ templates/ exports/
+  projects/ data/ tmp/` (+ a `WORKSPACE.md` describing it).
+- Removed every `/tmp/agents/...` and `os.tmpdir()` fallback in the
+  file/media paths: WhatsApp + Telegram inbound media, the messaging-poller,
+  the calendar joined-meetings state file, and WhatsApp auth/session creds
+  (now per-agent under `<workspace>/whatsapp`, was a shared dir).
+- `createAllTools` now derives + provisions the workspace from `agentId` when a
+  caller didn't pass one, so no code path can land in /tmp. Path-sandbox allowed
+  dirs are now cross-platform (`os.tmpdir()` + `os.homedir()` instead of
+  hardcoded `/tmp`, `/var/tmp`, `/root`).
+- On agent creation the workspace is provisioned and its location is written to
+  the agent's long-term memory; the path + layout are documented in the system
+  prompt and in generated `AGENTS.md` so the agent never forgets where to work.
+
+## [0.5.612] - 2026-05-25
+
+### Fixed — Packaging: stop shipping `logs/` in the npm tarball
+
+`0.5.611` accidentally bundled the working `logs/` directory (cloudflared
++ agent process logs) into the published package — these contained local
+`/Users/...` paths (no credentials). Added `logs/`, `*.log`, and
+`test-*.mjs` to `.npmignore`. `0.5.611` is deprecated; use `0.5.612`.
+This release is otherwise identical to `0.5.611`.
+
 ## [0.5.611] - 2026-05-20
 
 ### Fixed — Agents no longer "wake up dumb" after context compaction

package/dist/{agent-heartbeat-PHLWJ3HO.js → agent-heartbeat-HFDBZWMO.js}

@@ -515,7 +515,7 @@ var AgentHeartbeatManager = class {
       return;
     }
     try {
-      const { guardrails } = await import("./routes-VX5CXX4J.js");
+      const { guardrails } = await import("./routes-5PUCWC4N.js");
       const status = await guardrails.getStatus(ctx.agentId);
       if (status.paused || status.offDuty) {
         console.log(`[heartbeat] Skipping action dispatch \u2014 agent is ${status.offDuty ? "off duty" : "paused"}`);

package/dist/{agent-tools-KRMDJOCK.js → agent-tools-5LLIXV6A.js}

@@ -2,7 +2,7 @@ import {
   createBrowserTool,
   createMeetingTools,
   createMeetingVoiceTools
-} from "./chunk-CC4BHZHO.js";
+} from "./chunk-GAOEALTJ.js";
 import {
   detectCapabilities,
   getCapabilitySummary,
@@ -12,11 +12,11 @@ import {
 import {
   createTelegramTools,
   init_telegram
-} from "./chunk-REAJCMQE.js";
+} from "./chunk-T26AVIAQ.js";
 import {
   createWhatsAppTools,
   init_whatsapp
-} from "./chunk-BUKTZ35L.js";
+} from "./chunk-H3JXMBTG.js";
 import {
   MemorySearchIndex,
   init_text_search
@@ -14581,7 +14581,16 @@ function createVisualMemoryTools(options) {
 // src/agent-tools/index.ts
 init_environment();
 async function createAllTools(options) {
-  var defaultAllowedDirs = ["/tmp", "/var/tmp", process.env.HOME || "/root"];
+  if (options && options.agentId && !options.workspaceDir) {
+    try {
+      var { getAgentWorkspaceDir, ensureAgentWorkspace } = await import("./workspace-P5FCSG2D.js");
+      options.workspaceDir = getAgentWorkspaceDir(options.agentId);
+      ensureAgentWorkspace(options.agentId);
+    } catch {
+    }
+  }
+  var _os = await import("os");
+  var defaultAllowedDirs = [_os.tmpdir(), _os.homedir()].filter(Boolean);
   var configuredDirs = options?.security?.pathSandbox?.allowedDirs || [];
   var pathSandbox = options?.workspaceDir && options?.security?.pathSandbox?.enabled !== false ? createPathSandbox(options.workspaceDir, {
     allowedDirs: [...defaultAllowedDirs, ...configuredDirs],
@@ -14795,7 +14804,7 @@ async function createAllTools(options) {
   var integrationTools = [];
   if (options?.vault) {
     try {
-      var { createAllIntegrationTools } = await import("./integrations-4JDIOHQU.js");
+      var { createAllIntegrationTools } = await import("./integrations-UWDEQ7Z4.js");
       integrationTools = await createAllIntegrationTools({
         vault: options.vault,
         orgId: options?.orgId,
@@ -14855,7 +14864,8 @@ async function createAllTools(options) {
       }
     } catch {
     }
-    const dataDir = options?.workspaceDir ? (await import("path")).resolve(options.workspaceDir, "..") : process.cwd();
+    const _wsRoot = options?.agentId ? (await import("./workspace-P5FCSG2D.js")).getAgentWorkspaceDir(options.agentId) : options?.workspaceDir || process.cwd();
+    const dataDir = (await import("path")).join(_wsRoot, "whatsapp");
     const _rec = _outboundRecorder;
     messagingTools = messagingTools.concat(createWhatsAppTools({
       agentId: options?.agentId || "",
@@ -14866,6 +14876,7 @@ async function createAllTools(options) {
     if (telegramConfig.botToken) {
       messagingTools = messagingTools.concat(createTelegramTools({
         botToken: telegramConfig.botToken,
+        agentId: options?.agentId || "",
         onOutbound: _rec ? (chatId, text) => _rec("telegram", chatId, text) : void 0
       }));
     }

package/dist/{chunk-NMMTMHTA.js → chunk-GC77MDKW.js}

@@ -7,6 +7,12 @@ import {
   buildPolymarketPrompt,
   buildRemotonPrompt
 } from "./chunk-BBM4POWP.js";
+import {
+  WORKSPACE_SUBDIRS,
+  ensureAgentWorkspace,
+  getAgentWorkspaceDir,
+  init_workspace
+} from "./chunk-UETRFOSR.js";
 
 // src/runtime/index.ts
 import { nanoid as nanoid3 } from "nanoid";
@@ -436,7 +442,7 @@ function createRuntimeHooks(deps) {
       var injectedMessages = [...messages];
       if (deps.knowledgeBaseEnabled !== false) {
         try {
-          var { knowledgeBase } = await import("./routes-VX5CXX4J.js");
+          var { knowledgeBase } = await import("./routes-5PUCWC4N.js");
           var kbs = await knowledgeBase.listForAgent(agentId);
           if (kbs.length > 0) {
             var contextParts = [];
@@ -469,7 +475,7 @@ ${contextParts.join("\n\n")}`;
       }
       if (deps.memoryEnabled !== false) {
         try {
-          var { memoryManager } = await import("./routes-VX5CXX4J.js");
+          var { memoryManager } = await import("./routes-5PUCWC4N.js");
           var memories = await memoryManager.queryMemories({
             agentId,
             limit: 10,
@@ -490,7 +496,7 @@ ${memories.map(function(m) {
       }
       if (deps.policyEnabled !== false) {
         try {
-          var { policyEngine } = await import("./routes-VX5CXX4J.js");
+          var { policyEngine } = await import("./routes-5PUCWC4N.js");
           var policies = await policyEngine.getAgentPolicies(agentId, deps.orgId);
           if (policies.length > 0) {
             var policyText = policies.map(function(p) {
@@ -515,7 +521,7 @@ ${policyText}`;
     // ─── Budget Check ──────────────────────────────
     async checkBudget(agentId, _orgId, _estimatedTokens) {
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         var now = Date.now();
         var cacheKey = `budget_sync_${agentId}`;
         var lastSync = globalThis[cacheKey] || 0;
@@ -608,7 +614,7 @@ ${policyText}`;
     // ─── Record LLM Usage ──────────────────────────
     async recordLLMUsage(agentId, orgId, usage) {
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         console.log(`[hooks] recordLLMUsage: agent=${agentId}, input=${usage.inputTokens}, output=${usage.outputTokens}`);
         await lifecycle.recordLLMUsage(agentId, {
           inputTokens: usage.inputTokens,
@@ -619,7 +625,7 @@ ${policyText}`;
         console.log(`[hooks] recordLLMUsage error: ${recordErr.message}`);
       }
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -667,7 +673,7 @@ ${policyText}`;
         var cacheKey = `${ctx.agentId}:${ctx.toolName}`;
         var cached = getCachedPermission(cacheKey);
         if (cached) return cached;
-        var { permissionEngine } = await import("./routes-VX5CXX4J.js");
+        var { permissionEngine } = await import("./routes-5PUCWC4N.js");
         var permResult = await permissionEngine.checkPermission(ctx.agentId, ctx.toolName);
         var result = {
           allowed: permResult.allowed,
@@ -676,7 +682,7 @@ ${policyText}`;
         };
         if (result.allowed && deps.guardrailsEnabled !== false) {
           try {
-            var { guardrails } = await import("./routes-VX5CXX4J.js");
+            var { guardrails } = await import("./routes-5PUCWC4N.js");
             var status = await guardrails.getStatus(ctx.agentId);
             if (status.paused || status.offDuty) {
               result.allowed = false;
@@ -688,7 +694,7 @@ ${policyText}`;
         }
         if (result.allowed && deps.dlpEnabled !== false && ctx.parameters) {
           try {
-            var { dlp } = await import("./routes-VX5CXX4J.js");
+            var { dlp } = await import("./routes-5PUCWC4N.js");
             var dlpResult = await dlp.scanParameters({
               orgId: ctx.orgId,
               agentId: ctx.agentId,
@@ -708,7 +714,7 @@ ${policyText}`;
         }
         if (result.requiresApproval && result.allowed) {
           try {
-            var { approvals } = await import("./routes-VX5CXX4J.js");
+            var { approvals } = await import("./routes-5PUCWC4N.js");
             var approval = await approvals.createAndWait({
               agentId: ctx.agentId,
               orgId: ctx.orgId,
@@ -738,7 +744,7 @@ ${policyText}`;
     // ─── After Tool Call ────────────────────────────
     async afterToolCall(ctx, result) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId: ctx.agentId,
           orgId: ctx.orgId,
@@ -755,7 +761,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { lifecycle } = await import("./routes-VX5CXX4J.js");
+        var { lifecycle } = await import("./routes-5PUCWC4N.js");
         await lifecycle.recordToolCall(ctx.agentId, {
           toolId: ctx.toolName,
           tokensUsed: 0,
@@ -767,7 +773,7 @@ ${policyText}`;
       }
       if (result.success && EXTERNAL_TOOLS.has(ctx.toolName)) {
         try {
-          var { journal } = await import("./routes-VX5CXX4J.js");
+          var { journal } = await import("./routes-5PUCWC4N.js");
           await journal.record({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -782,7 +788,7 @@ ${policyText}`;
       }
       if (result.success && COMMUNICATION_TOOLS.has(ctx.toolName)) {
         try {
-          var { commBus } = await import("./routes-VX5CXX4J.js");
+          var { commBus } = await import("./routes-5PUCWC4N.js");
           await commBus.observeMessage({
             orgId: ctx.orgId,
             agentId: ctx.agentId,
@@ -796,7 +802,7 @@ ${policyText}`;
     // ─── Session Lifecycle ──────────────────────────
     async onSessionStart(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -809,7 +815,7 @@ ${policyText}`;
     },
     async onSessionEnd(sessionId, agentId, orgId) {
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId,
@@ -824,7 +830,7 @@ ${policyText}`;
     async onCompactionStart(sessionId, agentId, tokenCount, contextWindowSize) {
       var pct = contextWindowSize > 0 ? Math.round(tokenCount / contextWindowSize * 100) : 0;
       try {
-        var { activity } = await import("./routes-VX5CXX4J.js");
+        var { activity } = await import("./routes-5PUCWC4N.js");
         await activity.record({
           agentId,
           orgId: deps.orgId,
@@ -851,7 +857,7 @@ ${policyText}`;
     // ─── Context Compaction ─────────────────────────
     async onContextCompaction(sessionId, agentId, summary) {
       try {
-        var { activity: activityTracker } = await import("./routes-VX5CXX4J.js");
+        var { activity: activityTracker } = await import("./routes-5PUCWC4N.js");
         await activityTracker.record({
           agentId,
           orgId: deps.orgId,
@@ -862,7 +868,7 @@ ${policyText}`;
       } catch {
       }
       try {
-        var { memoryManager } = await import("./routes-VX5CXX4J.js");
+        var { memoryManager } = await import("./routes-5PUCWC4N.js");
         await memoryManager.createMemory({
           agentId,
           orgId: deps.orgId,
@@ -2956,7 +2962,7 @@ async function runAgentLoop(config, initialMessages, hooks, options) {
           console.log(`[agent-loop] \u2705 Tool ${toolCall.name} succeeded (${content.length} chars): ${content.slice(0, 300)}`);
         }
         try {
-          const { activity } = await import("./routes-VX5CXX4J.js");
+          const { activity } = await import("./routes-5PUCWC4N.js");
           activity.recordToolCallCompact({
             agentId: config.agentId,
             orgId: config.orgId,
@@ -4270,7 +4276,7 @@ function createRequestToolsTool(allTools, activeSets, _context, agentSkills) {
   };
 }
 async function createToolsForContext(options, context, opts) {
-  const { createAllTools } = await import("./agent-tools-KRMDJOCK.js");
+  const { createAllTools } = await import("./agent-tools-5LLIXV6A.js");
   if (context === "full") {
     return createAllTools(options);
   }
@@ -4881,9 +4887,7 @@ var FollowUpScheduler = class {
 };
 
 // src/runtime/index.ts
-import { homedir } from "os";
-import { join } from "path";
-import { mkdirSync } from "fs";
+init_workspace();
 var _remotionPrompt = buildRemotonPrompt();
 var DEFAULT_MODEL = {
   provider: "anthropic",
@@ -4934,9 +4938,9 @@ var AgentRuntime = class {
   /** Build tool options for a given agent, including OAuth email config if available */
   buildToolOptions(agentId, sessionId) {
     const self = this;
-    const agentWorkspace = join(homedir(), ".agenticmail", "workspaces", agentId);
+    const agentWorkspace = getAgentWorkspaceDir(agentId);
     try {
-      mkdirSync(agentWorkspace, { recursive: true });
+      ensureAgentWorkspace(agentId);
     } catch {
     }
     const base = {
@@ -5781,7 +5785,7 @@ function createAgentRuntime(config) {
   return new AgentRuntime(config);
 }
 function buildDefaultSystemPrompt(agentId, memoryContext, hierarchyContext, agentIdentity, dbConnections, agentConfig) {
-  const wsDir = join(homedir(), ".agenticmail", "workspaces", agentId);
+  const wsDir = getAgentWorkspaceDir(agentId);
   var base = `You are an AI agent managed by AgenticMail Enterprise (agent: ${agentId}).
 
 You have access to a comprehensive set of tools for completing tasks. Use them effectively.
@@ -5796,10 +5800,12 @@ Guidelines:
 - For long tasks, work systematically and report progress
 
 ## Your Workspace
-Your dedicated workspace directory is: ${wsDir}
-ALWAYS save files, deliverables, rendered videos, images, and outputs here \u2014 NEVER in /tmp.
-/tmp files are cleaned up by the OS and will be lost. Your workspace persists across sessions.
-Create subdirectories as needed (e.g. videos/, images/, projects/, exports/).
+Your permanent workspace directory is: ${wsDir}
+ALWAYS save files, deliverables, rendered videos, images, templates, and outputs here \u2014 NEVER in /tmp.
+/tmp files are cleaned up by the OS and WILL be lost. Your workspace persists across sessions, restarts, and reboots.
+Keep it neat \u2014 it already has these subfolders (use them, create more as needed):
+${Object.entries(WORKSPACE_SUBDIRS).map(([n, d]) => `  - ${n}/ \u2014 ${d}`).join("\n")}
+Examples: email/HTML templates \u2192 templates/ ; attachments & images \u2192 media/ ; finished deliverables \u2192 exports/ ; scratch \u2192 tmp/ (inside your workspace, NOT the OS /tmp).
 - ACTIVELY USE YOUR MEMORY: After corrections, lessons, or insights, call memory_reflect to record them
 - Before complex tasks, call memory_context to recall relevant knowledge
 - Your memory persists across conversations \u2014 it's how you grow as an expert

package/dist/{chunk-BUKTZ35L.js → chunk-H3JXMBTG.js}

@@ -137,12 +137,9 @@ async function getOrCreateConnection(config) {
               var buffer = await downloadMediaMessage(msg, "buffer", {});
               if (buffer && buffer.length > 0) {
                 var { join: join2 } = await import("path");
-                var { mkdirSync, writeFileSync } = await import("fs");
-                var mediaDir = join2(config.dataDir || `/tmp/agents/${config.agentId}`, "media");
-                try {
-                  mkdirSync(mediaDir, { recursive: true });
-                } catch {
-                }
+                var { writeFileSync } = await import("fs");
+                var { getAgentSubdir } = await import("./workspace-P5FCSG2D.js");
+                var mediaDir = getAgentSubdir(config.agentId, "media");
                 mediaType = msg.message?.imageMessage ? "photo" : msg.message?.videoMessage ? "video" : msg.message?.audioMessage ? "audio" : msg.message?.documentMessage ? "document" : msg.message?.stickerMessage ? "sticker" : "file";
                 var ext = mediaType === "photo" ? "jpg" : mediaType === "video" ? "mp4" : mediaType === "audio" ? "ogg" : mediaType === "sticker" ? "webp" : mediaMessage.fileName?.split(".").pop() || "bin";
                 var localName = mediaMessage.fileName || `${mediaType}-${Date.now()}.${ext}`;

package/dist/{chunk-I2T4HESC.js → chunk-IXAWHXMY.js}

@@ -11,7 +11,7 @@ import {
   init_config_bus,
   init_routes,
   routes_exports
-} from "./chunk-KQ5EU4IA.js";
+} from "./chunk-VWIDJRD4.js";
 import {
   init_transport_encryption,
   transportEncryptionMiddleware
@@ -1658,7 +1658,7 @@ function createAdminRoutes(db) {
   });
   api.get("/whatsapp/qr/:agentId", requireRole("admin"), async (c) => {
     try {
-      var { getWhatsAppQR, isWhatsAppConnected } = await import("./whatsapp-RAQUV6ZL.js");
+      var { getWhatsAppQR, isWhatsAppConnected } = await import("./whatsapp-TBOB7TDL.js");
       var agentId = c.req.param("agentId");
       if (isWhatsAppConnected(agentId)) {
         return c.json({ status: "connected" });
@@ -7746,7 +7746,7 @@ function createServer(config) {
   let engineInitialized = false;
   api.all("/engine/*", async (c, _next) => {
     try {
-      const { engineRoutes, setEngineDb } = await import("./routes-VX5CXX4J.js");
+      const { engineRoutes, setEngineDb } = await import("./routes-5PUCWC4N.js");
       const { EngineDatabase } = await import("./db-adapter-ARPQPQ6K.js");
       if (!engineInitialized) {
         engineInitialized = true;
@@ -7776,13 +7776,13 @@ function createServer(config) {
         engineInitialized = true;
         if (config.runtime?.enabled) {
           try {
-            const { createAgentRuntime } = await import("./runtime-RMLNHLAT.js");
-            const { mountRuntimeApp, setRuntime } = await import("./routes-VX5CXX4J.js");
+            const { createAgentRuntime } = await import("./runtime-GML2LXIN.js");
+            const { mountRuntimeApp, setRuntime } = await import("./routes-5PUCWC4N.js");
             let getEmailConfig;
             let onTokenRefresh;
             let agentMemoryMgr;
             try {
-              const { lifecycle: lc, memoryManager: mm } = await import("./routes-VX5CXX4J.js");
+              const { lifecycle: lc, memoryManager: mm } = await import("./routes-5PUCWC4N.js");
               agentMemoryMgr = mm;
               if (lc) {
                 getEmailConfig = (agentId) => {
@@ -7821,7 +7821,7 @@ function createServer(config) {
               }
             } catch {
             }
-            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-VX5CXX4J.js");
+            const { vault: vaultRef, permissionEngine: permRef, databaseManager: dbMgr } = await import("./routes-5PUCWC4N.js");
             const runtime = createAgentRuntime({
               engineDb,
               adminDb: config.db,
@@ -8071,7 +8071,7 @@ function createServer(config) {
                 }
               }
               try {
-                const routesMod = await import("./routes-VX5CXX4J.js");
+                const routesMod = await import("./routes-5PUCWC4N.js");
                 const kbEngine = routesMod.knowledgeBase;
                 kbEngine?.setApiKeys?.(decryptedKeys);
                 if (Object.keys(decryptedKeys).length > 0) {
@@ -8089,7 +8089,7 @@ function createServer(config) {
             });
             (async () => {
               try {
-                const { engineRoutes, setEngineDb } = await import("./routes-VX5CXX4J.js");
+                const { engineRoutes, setEngineDb } = await import("./routes-5PUCWC4N.js");
                 const { EngineDatabase } = await import("./db-adapter-ARPQPQ6K.js");
                 if (!engineInitialized) {
                   engineInitialized = true;
@@ -8113,13 +8113,13 @@ function createServer(config) {
                     await setEngineDb(engineDb, config.db);
                     if (config.runtime?.enabled) {
                       try {
-                        const { createAgentRuntime } = await import("./runtime-RMLNHLAT.js");
-                        const { mountRuntimeApp, setRuntime } = await import("./routes-VX5CXX4J.js");
+                        const { createAgentRuntime } = await import("./runtime-GML2LXIN.js");
+                        const { mountRuntimeApp, setRuntime } = await import("./routes-5PUCWC4N.js");
                         let getEmailConfig;
                         let onTokenRefresh;
                         let agentMemoryMgr;
                         try {
-                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-VX5CXX4J.js");
+                          const { lifecycle: lc, memoryManager: mm } = await import("./routes-5PUCWC4N.js");
                           agentMemoryMgr = mm;
                           if (lc) {
                             getEmailConfig = (agentId) => {
@@ -8158,7 +8158,7 @@ function createServer(config) {
                           }
                         } catch {
                         }
-                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-VX5CXX4J.js");
+                        const { vault: vaultRef2, permissionEngine: permRef2, databaseManager: dbMgr2 } = await import("./routes-5PUCWC4N.js");
                         const runtime = createAgentRuntime({
                           engineDb,
                           adminDb: config.db,
@@ -8170,7 +8170,7 @@ function createServer(config) {
                           agentMemoryManager: agentMemoryMgr,
                           vault: vaultRef2,
                           permissionEngine: permRef2,
-                          hierarchyManager: (await import("./routes-VX5CXX4J.js")).hierarchyManager ?? void 0,
+                          hierarchyManager: (await import("./routes-5PUCWC4N.js")).hierarchyManager ?? void 0,
                           databaseManager: dbMgr2
                         });
                         await runtime.start();
@@ -8184,7 +8184,7 @@ function createServer(config) {
                     }
                     console.log("[engine] Eagerly initialized");
                     try {
-                      const { lifecycle: lcRef } = await import("./routes-VX5CXX4J.js");
+                      const { lifecycle: lcRef } = await import("./routes-5PUCWC4N.js");
                       if (lcRef) {
                         const agents = Array.from(lcRef.agents?.values?.() || []);
                         const hasLocalPm2 = agents.some((a) => {
@@ -8193,7 +8193,7 @@ function createServer(config) {
                           return target === "local" && (!pm || pm === "pm2");
                         });
                         if (hasLocalPm2) {
-                          const { ensurePm2 } = await import("./deployer-BKBISKKF.js");
+                          const { ensurePm2 } = await import("./deployer-M4YHMATN.js");
                           const pm2 = await ensurePm2();
                           if (pm2.installed) {
                             console.log(`[startup] PM2 v${pm2.version} available for local deployments`);

package/dist/{chunk-5EMB2S53.js → chunk-MVD2DMAY.js}

@@ -1234,7 +1234,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
   const { deployTarget, company, database, domain, tunnel, cloud } = config;
   if (deployTarget === "cloudflare-tunnel" && tunnel) {
     spinner.start(`Starting local server on port ${tunnel.port}...`);
-    const { createServer: createServer2 } = await import("./server-64K32C5T.js");
+    const { createServer: createServer2 } = await import("./server-R5SICPBI.js");
     const server2 = createServer2({ port: tunnel.port, db, jwtSecret });
     const handle2 = await server2.start();
     spinner.succeed("Server running");
@@ -1601,7 +1601,7 @@ async function deploy(config, db, jwtSecret, vaultKey, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-64K32C5T.js");
+  const { createServer } = await import("./server-R5SICPBI.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");

package/dist/{chunk-TBBVEXBH.js → chunk-QVZIW5HI.js}

@@ -1,3 +1,7 @@
+import {
+  WORKSPACE_SUBDIRS,
+  init_workspace
+} from "./chunk-UETRFOSR.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";
@@ -7,6 +11,7 @@ var AgentConfigGenerator;
 var init_agent_config = __esm({
   "src/engine/agent-config.ts"() {
     "use strict";
+    init_workspace();
     AgentConfigGenerator = class _AgentConfigGenerator {
       /**
        * Generate the complete workspace files for an agent
@@ -329,6 +334,15 @@ _Configure this from the admin dashboard._
 - Daily notes: memory/YYYY-MM-DD.md
 - Long-term: MEMORY.md
 
+## Files & Workspace
+You have ONE permanent workspace folder. ALWAYS work from it \u2014 NEVER write to /tmp
+(OS temp files get wiped and are lost). It persists across sessions and reboots.
+Location: \`~/.agenticmail/workspaces/<your-agent-id>/\` (also injected into your
+system prompt at runtime, and saved in your memory). Keep it neat:
+${Object.entries(WORKSPACE_SUBDIRS).map(([n, d]) => `- \`${n}/\` \u2014 ${d}`).join("\n")}
+Email/HTML templates \u2192 \`templates/\` \xB7 attachments & images \u2192 \`media/\` \xB7 finished
+deliverables \u2192 \`exports/\` \xB7 scratch \u2192 \`tmp/\` (inside your workspace, not the OS /tmp).
+
 ## Safety
 - Don't exfiltrate private data
 - Don't run destructive commands without asking

package/dist/{chunk-REAJCMQE.js → chunk-T26AVIAQ.js}

@@ -107,12 +107,9 @@ function createTelegramTools(config) {
         var resp = await fetch(downloadUrl);
         if (!resp.ok) throw new Error(`Download failed: ${resp.status}`);
         var { join } = await import("path");
-        var { mkdirSync, writeFileSync } = await import("fs");
-        var mediaDir = join("/tmp/agents/media");
-        try {
-          mkdirSync(mediaDir, { recursive: true });
-        } catch {
-        }
+        var { writeFileSync } = await import("fs");
+        var { getAgentSubdir } = await import("./workspace-P5FCSG2D.js");
+        var mediaDir = getAgentSubdir(config.agentId || "default", "media");
         var ext = fileData.file_path.split(".").pop() || "bin";
         var localName = input.fileName || `telegram-${Date.now()}.${ext}`;
         var localPath = join(mediaDir, localName);