@alook/cli 0.0.9 → 0.0.11

package/dist/index.js

@@ -15,7 +15,7 @@ var __export = (target, all) => {
 };
 
 // src/index.ts
-import { Command as Command9 } from "commander";
+import { Command as Command10 } from "commander";
 
 // commands/register.ts
 import { Command } from "commander";
@@ -13896,7 +13896,8 @@ var TaskApiBaseSchema = exports_external.object({
   error: exports_external.string().nullable(),
   created_at: exports_external.string(),
   type: exports_external.string(),
-  context_key: exports_external.string().nullable().optional()
+  context_key: exports_external.string().nullable().optional(),
+  context: exports_external.unknown().nullable().optional()
 });
 var TaskApiSchema = TaskApiBaseSchema.extend({
   agent: TaskAgentDataApiSchema.nullable().optional()
@@ -14015,6 +14016,64 @@ var CalendarEventApiSchema = exports_external.object({
 var AddWhitelistRequestSchema = exports_external.object({
   email: exports_external.string().email()
 });
+var RuntimeConfigSchema = exports_external.object({ model: exports_external.string().max(100).optional() }).passthrough().optional();
+var CreateAgentRequestSchema = exports_external.object({
+  name: exports_external.string().min(1, "name is required"),
+  description: exports_external.string().optional().default(""),
+  instructions: exports_external.string().optional().default(""),
+  runtime_id: exports_external.string().min(1, "runtime_id is required"),
+  runtime_config: RuntimeConfigSchema,
+  max_concurrent_tasks: exports_external.number().int().optional(),
+  email_handle: exports_external.string().optional()
+});
+var UpdateAgentRequestSchema = exports_external.object({
+  name: exports_external.string().min(1).optional(),
+  description: exports_external.string().optional(),
+  instructions: exports_external.string().optional(),
+  runtime_id: exports_external.string().min(1).optional(),
+  runtime_config: RuntimeConfigSchema
+}).refine((v) => v.name !== undefined || v.description !== undefined || v.instructions !== undefined || v.runtime_id !== undefined || v.runtime_config !== undefined, { message: "at least one field is required" });
+var CreateConversationRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1, "agent_id is required")
+});
+var CreateMessageRequestSchema = exports_external.object({
+  content: exports_external.string().min(1, "content is required")
+});
+var EmailAttachmentSchema = exports_external.object({
+  key: exports_external.string().min(1),
+  filename: exports_external.string().min(1),
+  size: exports_external.number().int().nonnegative().optional(),
+  contentType: exports_external.string().min(1)
+});
+var SendEmailRequestSchema = exports_external.object({
+  agentId: exports_external.string().min(1, "agentId is required"),
+  to: exports_external.string().min(1, "to is required"),
+  subject: exports_external.string().min(1, "subject is required"),
+  htmlBody: exports_external.string().default(""),
+  inReplyTo: exports_external.string().optional(),
+  references: exports_external.string().optional(),
+  attachments: exports_external.array(EmailAttachmentSchema).optional()
+});
+var UpdateEmailStatusRequestSchema = exports_external.object({
+  status: exports_external.enum(["unread", "read", "archived"])
+});
+var EmailNotifyRequestSchema = exports_external.object({
+  agentId: exports_external.string().min(1),
+  workspaceId: exports_external.string().min(1),
+  r2Key: exports_external.string().min(1),
+  from: exports_external.string().min(1),
+  to: exports_external.string().optional(),
+  subject: exports_external.string().min(1),
+  isWhitelisted: exports_external.boolean(),
+  forwarded: exports_external.boolean().optional().default(false),
+  messageId: exports_external.string().optional().default(""),
+  inReplyTo: exports_external.string().optional().default(""),
+  references: exports_external.string().optional().default("")
+});
+var CreateWorkspaceRequestSchema = exports_external.object({
+  name: exports_external.string().min(1, "name is required"),
+  slug: exports_external.string().min(1, "slug is required")
+});
 // ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudflare+workers-types@4.20260418.1_@opentelemetry+api@1.9.1_bun-types@1.3.12_kysely@0.28.16/node_modules/drizzle-orm/entity.js
 var entityKind = Symbol.for("drizzle:entityKind");
 var hasOwnEntityKind = Symbol.for("drizzle:hasOwnEntityKind");
@@ -15521,6 +15580,7 @@ var message = sqliteTable("message", {
   role: text("role").notNull(),
   content: text("content").notNull().default(""),
   taskId: text("task_id"),
+  attachmentIds: text("attachment_ids"),
   createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
 });
 var agentTaskQueue = sqliteTable("agent_task_queue", {
@@ -15605,6 +15665,24 @@ var calendarEvent = sqliteTable("calendar_event", {
     foreignColumns: [agent.id, agent.workspaceId]
   }).onDelete("cascade")
 ]);
+var artifact = sqliteTable("artifact", {
+  id: text("id").primaryKey().$defaultFn(() => "art_" + nanoid3()),
+  conversationId: text("conversation_id").notNull().references(() => conversation.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull(),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  filename: text("filename").notNull(),
+  contentType: text("content_type").notNull().default("application/octet-stream"),
+  size: integer2("size").notNull(),
+  r2Key: text("r2_key").notNull(),
+  source: text("source").notNull().default("agent"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_artifact_conversation").on(t.conversationId),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
 var machineToken = sqliteTable("machine_token", {
   id: text("id").primaryKey().$defaultFn(() => nanoid3()),
   userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
@@ -15701,6 +15779,16 @@ class DaemonClient {
       error: error48
     });
   }
+  async getArtifactMeta(token, artifactId, workspaceId) {
+    return this.request("GET", `/api/artifacts/${artifactId}?workspace_id=${encodeURIComponent(workspaceId)}`, token);
+  }
+  async downloadArtifact(token, artifactId, workspaceId) {
+    const res = await fetch(`${this.baseURL}/api/artifacts/${artifactId}/content?workspace_id=${encodeURIComponent(workspaceId)}`, { headers: { Authorization: `Bearer ${token}` } });
+    if (!res.ok) {
+      throw new Error(`artifact download failed: HTTP ${res.status}`);
+    }
+    return res.arrayBuffer();
+  }
   reportMessages(token, taskId, messages) {
     return this.request("POST", `/api/daemon/tasks/${taskId}/messages`, token, { messages });
   }
@@ -15735,6 +15823,10 @@ function pidFilePath(profile) {
   const name = profile ? `daemon_${profile}.pid` : "daemon.pid";
   return join3(configDir(), name);
 }
+function lastUpdateMarkerPath(profile) {
+  const name = profile ? `last_update_${profile}` : "last_update";
+  return join3(configDir(), name);
+}
 function daemonLogDir() {
   return join3(configDir(), "daemon", "logs");
 }
@@ -15871,6 +15963,7 @@ function fromApiTask(api2) {
     priority: api2.priority,
     type: api2.type,
     contextKey: api2.context_key ?? null,
+    context: api2.context ?? undefined,
     agent: api2.agent ? { name: api2.agent.name, instructions: api2.agent.instructions, emailHandle: api2.agent.email_handle ?? undefined, userEmail: api2.agent.user_email ?? undefined, runtimeConfig: api2.agent.runtime_config ?? undefined } : undefined,
     repos: undefined,
     createdAt: api2.created_at
@@ -16015,6 +16108,9 @@ function releaseDaemonPid(profile) {
   removePidFileIfMatches(process.pid, profile);
 }
 
+// daemon/update-handler.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, unlinkSync as unlinkSync2 } from "fs";
+
 // lib/update.ts
 import { spawn } from "child_process";
 function fetchLatestVersion() {
@@ -16049,16 +16145,39 @@ var MAX_RETRIES = 3;
 function isUpdating() {
   return updating;
 }
-async function handleCliUpdate(version3, onSuccess) {
+function readUpdateMarker(profile) {
+  try {
+    return readFileSync4(lastUpdateMarkerPath(profile), "utf-8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+function writeUpdateMarker(version3, profile) {
+  try {
+    writeFileSync3(lastUpdateMarkerPath(profile), version3, { mode: 384 });
+  } catch {}
+}
+function clearUpdateMarker(profile) {
+  try {
+    unlinkSync2(lastUpdateMarkerPath(profile));
+  } catch {}
+}
+async function handleCliUpdate(version3, onSuccess, profile) {
   if (updating)
     return;
   if (retryCount >= MAX_RETRIES)
     return;
+  const marker = readUpdateMarker(profile);
+  if (marker === version3) {
+    log.info(`Skipping update to v${version3} — already attempted (marker exists)`);
+    return;
+  }
   updating = true;
   try {
     log.info(`Updating CLI to v${version3}...`);
     const result = await runNpmUpdate(version3);
     if (result.success) {
+      writeUpdateMarker(version3, profile);
       log.info(`CLI updated to v${version3} — restarting`);
       onSuccess();
     } else {
@@ -16074,7 +16193,7 @@ async function handleCliUpdate(version3, onSuccess) {
 }
 
 // daemon/daemon.ts
-import { existsSync, mkdirSync as mkdirSync3, openSync, closeSync, renameSync, readdirSync, statSync, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync, mkdirSync as mkdirSync3, openSync, closeSync, renameSync, readdirSync, statSync, unlinkSync as unlinkSync3 } from "fs";
 import { execSync as execSync3, spawn as spawn2 } from "child_process";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname3, join as join4 } from "path";
@@ -16111,7 +16230,7 @@ function pruneSessionRunnerLogs() {
   withMtime.sort((a, b) => b.mtime - a.mtime);
   for (const entry of withMtime.slice(MAX_SESSION_RUNNER_LOGS)) {
     try {
-      unlinkSync2(join4(logDir, entry.name));
+      unlinkSync3(join4(logDir, entry.name));
     } catch {}
   }
 }
@@ -16131,6 +16250,11 @@ async function startDaemon(profile, serverUrl) {
   const config2 = loadDaemonConfig(profile);
   if (serverUrl)
     config2.serverURL = serverUrl;
+  const marker = readUpdateMarker(profile);
+  if (marker && marker === config2.cliVersion) {
+    clearUpdateMarker(profile);
+    log.info(`Cleared update marker — now running v${config2.cliVersion}`);
+  }
   const cliConfig = loadCLIConfigForProfile(profile);
   const workspaces = cliConfig.watched_workspaces || [];
   if (workspaces.length === 0) {
@@ -16271,8 +16395,8 @@ async function startDaemon(profile, serverUrl) {
           evictedIds.push(ws.workspaceId);
           continue;
         }
-        if (pending_update && !isUpdating()) {
-          handleCliUpdate(pending_update.version, () => requestRestart());
+        if (pending_update && !isUpdating() && pending_update.version !== config2.cliVersion) {
+          handleCliUpdate(pending_update.version, () => requestRestart(), profile);
         }
         for (const apiTask of apiTasks) {
           const task = fromApiTask(apiTask);
@@ -16541,7 +16665,7 @@ function configCommand() {
 
 // commands/email.ts
 import { Command as Command5 } from "commander";
-import { writeFileSync as writeFileSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
+import { writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
 import { basename, join as join5 } from "path";
 import PostalMime from "postal-mime";
 var VALID_STATUSES = ["unread", "read", "archived"];
@@ -16632,7 +16756,7 @@ function emailCommand() {
           references: email3.references || ""
         };
         const metadataPath = join5(emailDir, "metadata.json");
-        writeFileSync3(metadataPath, JSON.stringify(metadata, null, 2));
+        writeFileSync4(metadataPath, JSON.stringify(metadata, null, 2));
         downloadedPaths.push(metadataPath);
         let rawMime;
         try {
@@ -16648,12 +16772,12 @@ function emailCommand() {
         const parsed = await new PostalMime().parse(rawMime);
         if (parsed.text) {
           const bodyPath = join5(emailDir, "body.txt");
-          writeFileSync3(bodyPath, parsed.text);
+          writeFileSync4(bodyPath, parsed.text);
           downloadedPaths.push(bodyPath);
         }
         if (parsed.html) {
           const htmlPath = join5(emailDir, "body.html");
-          writeFileSync3(htmlPath, parsed.html);
+          writeFileSync4(htmlPath, parsed.html);
           downloadedPaths.push(htmlPath);
         }
         if (parsed.attachments && parsed.attachments.length > 0) {
@@ -16677,7 +16801,7 @@ function emailCommand() {
             } else {
               buf = Buffer.from(content);
             }
-            writeFileSync3(attPath, buf);
+            writeFileSync4(attPath, buf);
             downloadedPaths.push(attPath);
           }
         }
@@ -16716,7 +16840,7 @@ function emailCommand() {
     const client = new APIClient(serverUrl, token, workspaceId);
     let htmlBody;
     try {
-      htmlBody = readFileSync4(opts.bodyFile, "utf-8");
+      htmlBody = readFileSync5(opts.bodyFile, "utf-8");
     } catch (err) {
       console.error(`Error: cannot read body file "${opts.bodyFile}": ${err instanceof Error ? err.message : err}`);
       process.exit(1);
@@ -16732,7 +16856,7 @@ function emailCommand() {
         let bytes;
         let size;
         try {
-          bytes = readFileSync4(path);
+          bytes = readFileSync5(path);
           size = statSync2(path).size;
         } catch (err) {
           console.error(`Error: cannot read attachment "${path}": ${err instanceof Error ? err.message : err}`);
@@ -17034,8 +17158,83 @@ ${result.output}`);
   return cmd;
 }
 
+// commands/sync.ts
+import { Command as Command9 } from "commander";
+import { readFileSync as readFileSync6, statSync as statSync3 } from "fs";
+import { basename as basename2 } from "path";
+var MIME_BY_EXT2 = {
+  ".pdf": "application/pdf",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".txt": "text/plain",
+  ".html": "text/html",
+  ".json": "application/json",
+  ".csv": "text/csv",
+  ".md": "text/markdown",
+  ".ts": "text/typescript",
+  ".js": "text/javascript",
+  ".yaml": "text/yaml",
+  ".yml": "text/yaml",
+  ".svg": "image/svg+xml",
+  ".xml": "application/xml",
+  ".zip": "application/zip"
+};
+function guessContentType2(filename) {
+  const idx = filename.lastIndexOf(".");
+  if (idx < 0)
+    return "application/octet-stream";
+  const ext = filename.slice(idx).toLowerCase();
+  return MIME_BY_EXT2[ext] ?? "application/octet-stream";
+}
+function resolveClientOpts3(command, agentId) {
+  const parentOpts = command.parent?.parent?.opts() || {};
+  const profile = parentOpts.profile;
+  const cfg = loadCLIConfigForProfile(profile);
+  const serverUrl = parentOpts.server || cfg.server_url;
+  const workspaces = cfg.watched_workspaces || [];
+  const ws = workspaces.find((w) => w.agent_ids?.includes(agentId));
+  if (!ws || !ws.token) {
+    console.error(`Error: no registered workspace contains agent ${agentId}. Run '${cmdPrefix()} register --token <token>' first.`);
+    process.exit(1);
+  }
+  return { serverUrl, token: ws.token, workspaceId: ws.id };
+}
+function syncCommand() {
+  const cmd = new Command9("sync").description("File sync utilities");
+  cmd.command("upload-artifact").description("Upload a file artifact to a conversation").requiredOption("--agent_id <id>", "Agent ID").requiredOption("--conversation_id <id>", "Conversation ID").requiredOption("--file <path>", "Path to file to upload").action(async (opts, command) => {
+    const { serverUrl, token, workspaceId } = resolveClientOpts3(command, opts.agent_id);
+    const client = new APIClient(serverUrl, token, workspaceId);
+    let bytes;
+    let size;
+    try {
+      const stat = statSync3(opts.file);
+      size = stat.size;
+      bytes = readFileSync6(opts.file);
+    } catch (err) {
+      console.error(`Error: cannot read file "${opts.file}": ${err.message}`);
+      process.exit(1);
+    }
+    const filename = basename2(opts.file);
+    const contentType = guessContentType2(filename);
+    const form = new FormData;
+    form.append("file", new Blob([new Uint8Array(bytes)], { type: contentType }), filename);
+    form.append("agent_id", opts.agent_id);
+    form.append("conversation_id", opts.conversation_id);
+    try {
+      const result = await client.postMultipart("/api/artifacts/upload", form);
+      printJSON(result);
+    } catch (err) {
+      console.error(`Error uploading artifact: ${err.message}`);
+      process.exit(1);
+    }
+  });
+  return cmd;
+}
+
 // src/index.ts
-var program = new Command9;
+var program = new Command10;
 program.name("alook").description("Alook CLI").option("--server <url>", "Server URL").option("--profile <name>", "Profile name");
 program.addCommand(registerCommand());
 program.addCommand(statusCommand());
@@ -17045,4 +17244,5 @@ program.addCommand(calendarCommand());
 program.addCommand(configCommand());
 program.addCommand(versionCommand());
 program.addCommand(updateCommand());
+program.addCommand(syncCommand());
 program.parse();

package/dist/session-runner.js

@@ -15,6 +15,8 @@ var __export = (target, all) => {
 
 // daemon/session-runner.ts
 import { createWriteStream } from "fs";
+import { mkdir, writeFile, rm } from "fs/promises";
+import path from "path";
 
 // ../shared/src/constants.ts
 var TASK_TYPES = {
@@ -13612,7 +13614,8 @@ var TaskApiBaseSchema = exports_external.object({
   error: exports_external.string().nullable(),
   created_at: exports_external.string(),
   type: exports_external.string(),
-  context_key: exports_external.string().nullable().optional()
+  context_key: exports_external.string().nullable().optional(),
+  context: exports_external.unknown().nullable().optional()
 });
 var TaskApiSchema = TaskApiBaseSchema.extend({
   agent: TaskAgentDataApiSchema.nullable().optional()
@@ -13731,6 +13734,64 @@ var CalendarEventApiSchema = exports_external.object({
 var AddWhitelistRequestSchema = exports_external.object({
   email: exports_external.string().email()
 });
+var RuntimeConfigSchema = exports_external.object({ model: exports_external.string().max(100).optional() }).passthrough().optional();
+var CreateAgentRequestSchema = exports_external.object({
+  name: exports_external.string().min(1, "name is required"),
+  description: exports_external.string().optional().default(""),
+  instructions: exports_external.string().optional().default(""),
+  runtime_id: exports_external.string().min(1, "runtime_id is required"),
+  runtime_config: RuntimeConfigSchema,
+  max_concurrent_tasks: exports_external.number().int().optional(),
+  email_handle: exports_external.string().optional()
+});
+var UpdateAgentRequestSchema = exports_external.object({
+  name: exports_external.string().min(1).optional(),
+  description: exports_external.string().optional(),
+  instructions: exports_external.string().optional(),
+  runtime_id: exports_external.string().min(1).optional(),
+  runtime_config: RuntimeConfigSchema
+}).refine((v) => v.name !== undefined || v.description !== undefined || v.instructions !== undefined || v.runtime_id !== undefined || v.runtime_config !== undefined, { message: "at least one field is required" });
+var CreateConversationRequestSchema = exports_external.object({
+  agent_id: exports_external.string().min(1, "agent_id is required")
+});
+var CreateMessageRequestSchema = exports_external.object({
+  content: exports_external.string().min(1, "content is required")
+});
+var EmailAttachmentSchema = exports_external.object({
+  key: exports_external.string().min(1),
+  filename: exports_external.string().min(1),
+  size: exports_external.number().int().nonnegative().optional(),
+  contentType: exports_external.string().min(1)
+});
+var SendEmailRequestSchema = exports_external.object({
+  agentId: exports_external.string().min(1, "agentId is required"),
+  to: exports_external.string().min(1, "to is required"),
+  subject: exports_external.string().min(1, "subject is required"),
+  htmlBody: exports_external.string().default(""),
+  inReplyTo: exports_external.string().optional(),
+  references: exports_external.string().optional(),
+  attachments: exports_external.array(EmailAttachmentSchema).optional()
+});
+var UpdateEmailStatusRequestSchema = exports_external.object({
+  status: exports_external.enum(["unread", "read", "archived"])
+});
+var EmailNotifyRequestSchema = exports_external.object({
+  agentId: exports_external.string().min(1),
+  workspaceId: exports_external.string().min(1),
+  r2Key: exports_external.string().min(1),
+  from: exports_external.string().min(1),
+  to: exports_external.string().optional(),
+  subject: exports_external.string().min(1),
+  isWhitelisted: exports_external.boolean(),
+  forwarded: exports_external.boolean().optional().default(false),
+  messageId: exports_external.string().optional().default(""),
+  inReplyTo: exports_external.string().optional().default(""),
+  references: exports_external.string().optional().default("")
+});
+var CreateWorkspaceRequestSchema = exports_external.object({
+  name: exports_external.string().min(1, "name is required"),
+  slug: exports_external.string().min(1, "slug is required")
+});
 // ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudflare+workers-types@4.20260418.1_@opentelemetry+api@1.9.1_bun-types@1.3.12_kysely@0.28.16/node_modules/drizzle-orm/entity.js
 var entityKind = Symbol.for("drizzle:entityKind");
 var hasOwnEntityKind = Symbol.for("drizzle:hasOwnEntityKind");
@@ -15237,6 +15298,7 @@ var message = sqliteTable("message", {
   role: text("role").notNull(),
   content: text("content").notNull().default(""),
   taskId: text("task_id"),
+  attachmentIds: text("attachment_ids"),
   createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
 });
 var agentTaskQueue = sqliteTable("agent_task_queue", {
@@ -15321,6 +15383,24 @@ var calendarEvent = sqliteTable("calendar_event", {
     foreignColumns: [agent.id, agent.workspaceId]
   }).onDelete("cascade")
 ]);
+var artifact = sqliteTable("artifact", {
+  id: text("id").primaryKey().$defaultFn(() => "art_" + nanoid3()),
+  conversationId: text("conversation_id").notNull().references(() => conversation.id, { onDelete: "cascade" }),
+  agentId: text("agent_id").notNull(),
+  workspaceId: text("workspace_id").notNull().references(() => workspace.id, { onDelete: "cascade" }),
+  filename: text("filename").notNull(),
+  contentType: text("content_type").notNull().default("application/octet-stream"),
+  size: integer2("size").notNull(),
+  r2Key: text("r2_key").notNull(),
+  source: text("source").notNull().default("agent"),
+  createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString())
+}, (t) => [
+  index("idx_artifact_conversation").on(t.conversationId),
+  foreignKey({
+    columns: [t.agentId, t.workspaceId],
+    foreignColumns: [agent.id, agent.workspaceId]
+  }).onDelete("cascade")
+]);
 var machineToken = sqliteTable("machine_token", {
   id: text("id").primaryKey().$defaultFn(() => nanoid3()),
   userId: text("user_id").notNull().references(() => user.id, { onDelete: "cascade" }),
@@ -15406,6 +15486,16 @@ class DaemonClient {
       error: error48
     });
   }
+  async getArtifactMeta(token, artifactId, workspaceId) {
+    return this.request("GET", `/api/artifacts/${artifactId}?workspace_id=${encodeURIComponent(workspaceId)}`, token);
+  }
+  async downloadArtifact(token, artifactId, workspaceId) {
+    const res = await fetch(`${this.baseURL}/api/artifacts/${artifactId}/content?workspace_id=${encodeURIComponent(workspaceId)}`, { headers: { Authorization: `Bearer ${token}` } });
+    if (!res.ok) {
+      throw new Error(`artifact download failed: HTTP ${res.status}`);
+    }
+    return res.arrayBuffer();
+  }
   reportMessages(token, taskId, messages) {
     return this.request("POST", `/api/daemon/tasks/${taskId}/messages`, token, { messages });
   }
@@ -16442,6 +16532,19 @@ To reply to an email, add '--in-reply-to <EMAIL_ID>' to the send command. This s
 `;
   }
   content += `
+### Artifacts
+Upload files for your owner to review in the app.
+- Your current conversation id is available via env var: $ALOOK_CONVERSATION_ID
+- Run 'npx @alook/cli sync upload-artifact --agent_id ${task.agentId} --conversation_id $ALOOK_CONVERSATION_ID --file <PATH>'
+- Use this after generating plans, reports, or any file the owner should review.
+---
+
+### Attachments
+When your task includes attachments, their local paths are listed in the prompt JSON under "attachments".
+Use your Read tool to open them. Images and PDFs are read visually.
+---
+`;
+  content += `
 ### Calendar
 You have your own calendar to setup daily routines and reminders.
 Schedule future tasks for yourself. At the scheduled time, a new task is dispatched to you with the event as the prompt (task type 'calendar_event').
@@ -16848,17 +16951,65 @@ function prepare(config2, task) {
 }
 
 // daemon/prompt.ts
-function buildPrompt(task) {
-  return JSON.stringify({ type: task.type, instruction: task.prompt });
+function buildPrompt(task, attachments) {
+  const obj = { type: task.type, instruction: task.prompt };
+  if (attachments && attachments.length > 0) {
+    obj.attachments = attachments.map((a) => ({
+      path: a.path,
+      content_type: a.content_type,
+      filename: a.filename
+    }));
+  }
+  return JSON.stringify(obj);
 }
 
 // daemon/session-runner.ts
+var ATTACHMENTS_BASE = "/tmp/alook-attachments";
+function sanitizeFilename(name) {
+  return path.basename(name).replace(/[/\\]/g, "_").replace(/\.\./g, "_").slice(0, 255) || "file";
+}
+async function cleanupAttachments(taskId) {
+  try {
+    await rm(path.join(ATTACHMENTS_BASE, taskId), { recursive: true, force: true });
+  } catch {}
+}
+async function downloadAttachments(client, token, workspaceId, taskId, attachmentIds) {
+  const dir = path.join(ATTACHMENTS_BASE, taskId);
+  await mkdir(dir, { recursive: true });
+  const attachments = [];
+  for (const artId of attachmentIds) {
+    const meta3 = await client.getArtifactMeta(token, artId, workspaceId);
+    const content = await client.downloadArtifact(token, artId, workspaceId);
+    const filename = sanitizeFilename(meta3.filename);
+    const localPath = path.join(dir, `${artId}_${filename}`);
+    await writeFile(localPath, Buffer.from(content));
+    attachments.push({
+      path: localPath,
+      content_type: meta3.content_type,
+      filename: meta3.filename
+    });
+  }
+  return attachments;
+}
 async function runSession(input) {
   const { task, provider, cliPath, model, serverURL, token, workspacesRoot, agentTimeout } = input;
   const client = new DaemonClient(serverURL);
   const backend = createBackend(provider, cliPath);
-  const prompt = buildPrompt(task);
   const { workDir, logFile, timelineDir, env } = prepare({ workspacesRoot }, task);
+  const attachmentIds = task.context?.attachment_ids ?? [];
+  let attachments;
+  if (attachmentIds.length > 0) {
+    try {
+      attachments = await downloadAttachments(client, token, task.workspaceId, task.id, attachmentIds);
+    } catch (e) {
+      await cleanupAttachments(task.id);
+      const errMsg = `failed to download attachments: ${e}`;
+      log.error(`Task ${task.id} ${errMsg}`);
+      await client.failTask(token, task.id, errMsg);
+      return;
+    }
+  }
+  const prompt = buildPrompt(task, attachments);
   const resumeSessionId = task.contextKey ? findResumableSessionByContextKey(timelineDir, task.contextKey, provider) ?? undefined : undefined;
   if (resumeSessionId) {
     log.info(`Task ${task.id} resuming session ${resumeSessionId} (context_key: ${task.contextKey})`);
@@ -16917,6 +17068,7 @@ async function runSession(input) {
       await flushMessages();
     } catch {}
     logStream?.end();
+    await cleanupAttachments(task.id);
     updateEntry(timelineDir, task.id, (entry) => {
       entry.pid = null;
       entry.status = "killed";
@@ -16979,6 +17131,7 @@ async function runSession(input) {
   process.removeListener("SIGINT", onKill);
   if (killed)
     return;
+  await cleanupAttachments(task.id);
   if (result.status === "completed") {
     updateEntry(timelineDir, task.id, (entry) => {
       entry.session_id = result.sessionId || null;
@@ -17024,6 +17177,7 @@ async function main() {
     await runSession(input);
   } catch (e) {
     log.error(`session-runner: unhandled error for task ${input.task.id}`, e);
+    await cleanupAttachments(input.task.id);
     try {
       await client.failTask(input.token, input.task.id, `session-runner crash: ${e}`);
     } catch {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alook/cli",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "description": "Alook CLI — register and run always-on AI coding agents.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/alookai/alook#readme",