@alook/daemon 0.0.154 → 0.0.155

package/dist/cli/index.js

@@ -7,6 +7,7 @@ import { Command, CommanderError } from "commander";
 
 // src/cli/proxyServerApi.ts
 import * as fs from "fs";
+import * as path from "path";
 function proxyServerApiFromEnv(prefix = "ALOOK", env = process.env) {
   const proxyUrl = env[`${prefix}_PROXY_URL`];
   const tokenFile = env[`${prefix}_PROXY_TOKEN_FILE`];
@@ -37,6 +38,58 @@ function createProxyServerApi(config) {
     }
     return json;
   }
+  async function callUpload(req) {
+    const form = new FormData;
+    const blobType = req.file.contentType ?? "application/octet-stream";
+    const bytes = req.file.data instanceof Uint8Array ? new Blob([new Uint8Array(req.file.data)], { type: blobType }) : req.file.data;
+    form.append("file", bytes, req.file.filename);
+    const url = `${base}/api/attachmentUpload?target=${encodeURIComponent(req.target)}`;
+    const res = await fetchImpl(url, {
+      method: "POST",
+      headers: { authorization: `Bearer ${config.voucher}` },
+      body: form
+    });
+    const json = await res.json();
+    if (!res.ok) {
+      const e = new Error(json?.error ?? `proxy api/attachmentUpload failed (${res.status})`);
+      e.code = json?.code;
+      throw e;
+    }
+    return json;
+  }
+  async function callDownload(req) {
+    const res = await fetchImpl(`${base}/api/attachmentDownload`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${config.voucher}`
+      },
+      body: JSON.stringify({ id: req.id })
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      const e = new Error(body?.error ?? `proxy api/attachmentDownload failed (${res.status})`);
+      e.code = body?.code;
+      throw e;
+    }
+    const encoded = res.headers.get("x-alook-filename");
+    const filename = encoded ? decodeURIComponent(encoded) : path.basename(req.destPath);
+    const contentType = res.headers.get("content-type") || "application/octet-stream";
+    const size = Number(res.headers.get("content-length") ?? "0");
+    const buf = Buffer.from(await res.arrayBuffer());
+    fs.mkdirSync(path.dirname(req.destPath), { recursive: true });
+    const tmp = `${req.destPath}.tmp`;
+    try {
+      fs.writeFileSync(tmp, buf);
+      fs.renameSync(tmp, req.destPath);
+    } catch (err) {
+      try {
+        fs.rmSync(tmp, { force: true });
+      } catch {}
+      throw err;
+    }
+    return { path: req.destPath, filename, contentType, size: size || buf.byteLength };
+  }
   return {
     listServers: (r) => call("listServers", r),
     listChannels: (r) => call("listChannels", r),
@@ -47,13 +100,15 @@ function createProxyServerApi(config) {
     read: (r) => call("read", r),
     resolve: (r) => call("resolve", r),
     listMembers: (r) => call("listMembers", r),
-    joinServer: (r) => call("joinServer", r)
+    joinServer: (r) => call("joinServer", r),
+    attachmentUpload: callUpload,
+    attachmentDownload: callDownload
   };
 }
 
 // src/cli/daemonStart.ts
 import * as fs9 from "fs";
-import * as path10 from "path";
+import * as path11 from "path";
 import * as crypto2 from "crypto";
 import * as os3 from "os";
 import { homedir as homedir3 } from "os";
@@ -307,7 +362,7 @@ import * as fs2 from "fs";
 import * as http from "http";
 import * as https from "https";
 import * as os from "os";
-import * as path from "path";
+import * as path2 from "path";
 import { URL } from "url";
 var DEFAULT_HEADER_NAMES = {
   agentId: "X-Agent-Id",
@@ -335,15 +390,15 @@ class CredentialBroker {
     this.voucherPrefix = config.voucherPrefix ?? "vch_";
     this.clientLabel = config.clientLabel ?? "cli";
     this.headerNames = config.headerNames ?? DEFAULT_HEADER_NAMES;
-    this.voucherDir = config.voucherDir ?? path.join(os.tmpdir(), "agent-vouchers");
+    this.voucherDir = config.voucherDir ?? path2.join(os.tmpdir(), "agent-vouchers");
   }
   mint(agentId, launchId, capabilities, runnerKey) {
     if (!runnerKey)
       throw new Error("CredentialBroker.mint: runnerKey is required (per-agent tier-2 credential)");
     const voucher = randomVoucher(this.voucherPrefix);
-    const dir = path.join(this.voucherDir, sanitizeIdSegment(agentId));
+    const dir = path2.join(this.voucherDir, sanitizeIdSegment(agentId));
     fs2.mkdirSync(dir, { recursive: true });
-    const voucherFile = path.join(dir, `${sanitizeIdSegment(launchId)}.token`);
+    const voucherFile = path2.join(dir, `${sanitizeIdSegment(launchId)}.token`);
     fs2.writeFileSync(voucherFile, voucher, { mode: 384 });
     this.registrations.set(voucher, {
       agentId,
@@ -402,6 +457,8 @@ function parseBearer(authHeader) {
   return m ? m[1].trim() : null;
 }
 var DEFAULT_CAPABILITY_RESOLVER = (_method, pathname) => {
+  if (pathname.includes("/attachment"))
+    return "attach";
   if (pathname.includes("/send"))
     return "send";
   if (pathname.includes("/history") || pathname.includes("/search") || pathname.includes("/inbox"))
@@ -429,7 +486,7 @@ async function startCredentialProxy(broker, options = {}) {
       return;
     }
     const reg = verdict.reg;
-    const isInboxPull = onPull && pathname.endsWith("/inboxPull");
+    const isInboxPull = onPull && pathname === "/api/inboxPull";
     if (onProxyRequest) {
       try {
         onProxyRequest(reg.agentId, req.method ?? "GET", pathname);
@@ -1664,7 +1721,7 @@ class AgentRouter {
   }
 }
 // src/timeline/timeline.ts
-import { appendFileSync, readFileSync as readFileSync3, writeFileSync as writeFileSync3, renameSync, existsSync } from "fs";
+import { appendFileSync, readFileSync as readFileSync3, writeFileSync as writeFileSync4, renameSync as renameSync2, existsSync } from "fs";
 import { join as join2 } from "path";
 
 // src/timeline/filelock.ts
@@ -1790,10 +1847,10 @@ function appendOrMergeEntry(timelineDir, entry, now = new Date) {
         latest.messages = [...latest.messages, ...entry.messages];
         lines[lines.length - 1] = JSON.stringify(latest);
         const tmpPath = join2(timelineDir, `.${filename}.tmp`);
-        writeFileSync3(tmpPath, lines.join(`
+        writeFileSync4(tmpPath, lines.join(`
 `) + `
 `);
-        renameSync(tmpPath, filePath);
+        renameSync2(tmpPath, filePath);
         return true;
       }
     }
@@ -1830,10 +1887,10 @@ function updateLatestEntry(timelineDir, updater, opts = {}) {
       const entries = lines.map((l) => JSON.parse(l));
       updater(entries[entries.length - 1]);
       const tmpPath = join2(timelineDir, `.${filename}.tmp`);
-      writeFileSync3(tmpPath, entries.map((e) => JSON.stringify(e)).join(`
+      writeFileSync4(tmpPath, entries.map((e) => JSON.stringify(e)).join(`
 `) + `
 `);
-      renameSync(tmpPath, filePath);
+      renameSync2(tmpPath, filePath);
       return true;
     } catch {} finally {
       releaseLock(lockPath);
@@ -1861,7 +1918,7 @@ function findResumableSession(rows, provider) {
   return null;
 }
 // src/timeline/recorder.ts
-import { mkdirSync as mkdirSync3 } from "fs";
+import { mkdirSync as mkdirSync4 } from "fs";
 function createTimelineRecorder(opts) {
   const now = opts.now ?? (() => new Date);
   const dirFor = (agentId) => opts.timelineDirFor(agentId);
@@ -1873,7 +1930,7 @@ function createTimelineRecorder(opts) {
     appendEntryForAgent(agentId, messages) {
       const dir = dirFor(agentId);
       try {
-        mkdirSync3(dir, { recursive: true });
+        mkdirSync4(dir, { recursive: true });
       } catch {}
       appendOrMergeEntry(dir, createTimelineEntry({
         messages,
@@ -1891,13 +1948,13 @@ function createTimelineRecorder(opts) {
   };
 }
 // src/discovery.ts
-import * as path8 from "path";
+import * as path9 from "path";
 import * as fs8 from "fs";
 import { fileURLToPath } from "url";
 
 // src/drivers/cliTransport.ts
 import * as fs5 from "fs";
-import * as path3 from "path";
+import * as path4 from "path";
 
 // src/drivers/systemPrompt.ts
 var CLI = "alook";
@@ -1928,7 +1985,9 @@ function cliCommandsSection() {
     "### Messaging",
     "",
     `1. \`${CLI} inbox pull\` — fetch unread messages.`,
-    `2. \`${CLI} message send\` — send a message to a channel, DM, or thread.`,
+    `2. \`${CLI} message send\` — send a message to a channel, DM, or thread. ` + `Attach files with \`--attachment <id>\` (repeatable, order matters).`,
+    `3. \`${CLI} message attachment upload --target <ref> --file <path>\` — upload a local file; ` + `returns an id. Feed that id into \`message send --attachment <id>\`. ` + `The id is stable across the pending→persisted lifecycle.`,
+    `4. \`${CLI} message attachment download --id <id> [--out <path>]\` — download an attachment ` + `id from any message you have access to (or your own pending uploads).`,
     "",
     "### Servers",
     "",
@@ -2173,21 +2232,21 @@ function resolveLaunchFields(config) {
 
 // src/drivers/cliLink.ts
 import * as fs4 from "fs";
-import * as path2 from "path";
+import * as path3 from "path";
 function writeCliLink(stateDir, cliName, hostCliPath, platform = process.platform) {
-  const binDir = path2.join(stateDir, "bin");
+  const binDir = path3.join(stateDir, "bin");
   fs4.mkdirSync(binDir, { recursive: true });
   if (!hostCliPath)
     return binDir;
   if (platform === "win32") {
-    const cmdFile = path2.join(binDir, `${cliName}.cmd`);
+    const cmdFile = path3.join(binDir, `${cliName}.cmd`);
     const body = `@echo off\r
 "${hostCliPath}" %*\r
 `;
     fs4.writeFileSync(cmdFile, body);
     return binDir;
   }
-  const linkPath = path2.join(binDir, cliName);
+  const linkPath = path3.join(binDir, cliName);
   try {
     fs4.unlinkSync(linkPath);
   } catch (err) {
@@ -2251,7 +2310,7 @@ function runtimeContextEnv(prefix, rc) {
 
 // src/drivers/agentFile.ts
 import {
-  writeFileSync as writeFileSync5,
+  writeFileSync as writeFileSync6,
   readFileSync as readFileSync4,
   lstatSync,
   symlinkSync as symlinkSync2,
@@ -2319,7 +2378,7 @@ function writeAgentFile(workDir, systemPromptContent) {
   const filePath = join4(workDir, CANONICAL_FILE);
   const changed = hasContentChanged(filePath, systemPromptContent);
   if (changed) {
-    writeFileSync5(filePath, systemPromptContent, "utf-8");
+    writeFileSync6(filePath, systemPromptContent, "utf-8");
   }
   ensureSymlinks(workDir);
   return changed;
@@ -2342,13 +2401,13 @@ var DEFAULT_CLI_CONFIG = {
   stateDirName: ".alook"
 };
 function resolveStateHome(envPrefix) {
-  return process.env[`${envPrefix}_HOME`] || path3.join(process.env.HOME || process.env.USERPROFILE || ".", `.${envPrefix.toLowerCase()}`);
+  return process.env[`${envPrefix}_HOME`] || path4.join(process.env.HOME || process.env.USERPROFILE || ".", `.${envPrefix.toLowerCase()}`);
 }
 async function prepareCliTransport(ctx, extraEnv = {}, cli = DEFAULT_CLI_CONFIG, platform = process.platform) {
   const E = cli.envPrefix;
   const stateHome = resolveStateHome(E);
   const capabilities = cli.activeCapabilities ?? DEFAULT_ACTIVE_CAPABILITIES;
-  const stateDir = path3.join(ctx.workingDirectory, cli.stateDirName);
+  const stateDir = path4.join(ctx.workingDirectory, cli.stateDirName);
   await fs5.promises.mkdir(stateDir, { recursive: true });
   if (ctx.standingPrompt)
     writeAgentFile(ctx.workingDirectory, ctx.standingPrompt);
@@ -2360,7 +2419,7 @@ async function prepareCliTransport(ctx, extraEnv = {}, cli = DEFAULT_CLI_CONFIG,
   const reg = ctx.credentialProxy.broker.mint(ctx.agentId, ctx.launchId ?? "default", capabilities, ctx.credentialProxy.runnerKey);
   const tokenFile = reg.voucherFile;
   const resolved = resolveLaunchFieldsOrDefault(ctx.config.runtimeConfig);
-  const pathValue = [binDir, process.env.PATH ?? ""].filter(Boolean).join(path3.delimiter);
+  const pathValue = [binDir, process.env.PATH ?? ""].filter(Boolean).join(path4.delimiter);
   const layers = [
     { name: "hostStatic", precedence: 10, vars: cli.extraEnv ?? {} },
     { name: "userEnv", precedence: 20, vars: resolved.envVars },
@@ -2404,19 +2463,19 @@ function buildCliTransportSystemPrompt(config, opts) {
 
 // src/drivers/claudeProviderIsolation.ts
 import * as fs6 from "fs";
-import * as path4 from "path";
+import * as path5 from "path";
 function buildClaudeProviderIsolationEnv(ctx) {
   const hasCustomProvider = Boolean(process.env.ANTHROPIC_BASE_URL && process.env.ANTHROPIC_API_KEY);
   if (!hasCustomProvider)
     return {};
-  const root = path4.join(ctx.workingDirectory, ".alook", "claude-provider");
-  const home = path4.join(root, "home");
-  const configDir = path4.join(home, ".claude");
+  const root = path5.join(ctx.workingDirectory, ".alook", "claude-provider");
+  const home = path5.join(root, "home");
+  const configDir = path5.join(home, ".claude");
   fs6.mkdirSync(configDir, { recursive: true });
-  const hostClaude = path4.join(process.env.HOME || ".", ".claude");
+  const hostClaude = path5.join(process.env.HOME || ".", ".claude");
   for (const sub of ["skills", "commands"]) {
-    const target = path4.join(hostClaude, sub);
-    const link = path4.join(configDir, sub);
+    const target = path5.join(hostClaude, sub);
+    const link = path5.join(configDir, sub);
     try {
       if (fs6.existsSync(target) && !fs6.existsSync(link))
         fs6.symlinkSync(target, link);
@@ -2433,7 +2492,7 @@ function buildClaudeProviderIsolationEnv(ctx) {
 // src/drivers/probe.ts
 import { execFileSync } from "child_process";
 import * as fs7 from "fs";
-import * as path5 from "path";
+import * as path6 from "path";
 function resolveCommandOnPath(command, deps = {}) {
   if (deps.which)
     return deps.which(command);
@@ -2474,7 +2533,7 @@ function probeCommandVersion(command, args = [], deps = {}, platform = process.p
   }
 }
 function resolveHomePath(relativePath, deps = {}) {
-  return path5.join(deps.homeDir || process.env.HOME || ".", relativePath);
+  return path6.join(deps.homeDir || process.env.HOME || ".", relativePath);
 }
 function resolveSpawnSpec(command, args, deps = {}, platform = process.platform) {
   const resolved = resolveCommandOnPath(command, deps) ?? command;
@@ -2885,7 +2944,7 @@ class CodexEventNormalizer {
 
 // src/drivers/codexHome.ts
 import * as os2 from "os";
-import * as path6 from "path";
+import * as path7 from "path";
 function readConfiguredCodexHome(env) {
   const raw = env.CODEX_HOME;
   return typeof raw === "string" && raw.trim().length > 0 ? raw : null;
@@ -2893,8 +2952,8 @@ function readConfiguredCodexHome(env) {
 function resolveCodexHomeRootFromEnv(env = process.env, opts = {}) {
   const raw = readConfiguredCodexHome(env);
   if (raw)
-    return path6.resolve(opts.cwd ?? process.cwd(), raw);
-  return path6.join(opts.defaultHomeDir ?? os2.homedir(), ".codex");
+    return path7.resolve(opts.cwd ?? process.cwd(), raw);
+  return path7.join(opts.defaultHomeDir ?? os2.homedir(), ".codex");
 }
 
 // src/drivers/codex.ts
@@ -3557,8 +3616,8 @@ class KimiDriver {
 
 // src/drivers/pi.ts
 import { createRequire as createRequire2 } from "module";
-import { mkdirSync as mkdirSync6, existsSync as existsSync5, readFileSync as readFileSync5, realpathSync } from "fs";
-import * as path7 from "path";
+import { mkdirSync as mkdirSync7, existsSync as existsSync5, readFileSync as readFileSync5, realpathSync } from "fs";
+import * as path8 from "path";
 
 // src/runtime/sdkRuntimeSession.ts
 import { EventEmitter as EventEmitter3 } from "events";
@@ -3651,15 +3710,15 @@ function resolvePiSdkPackageDir(deps = {}) {
   if (!binPath)
     return;
   try {
-    let dir = path7.dirname(realpathSync(binPath));
+    let dir = path8.dirname(realpathSync(binPath));
     const MAX_DEPTH = 8;
     for (let i = 0;i < MAX_DEPTH; i++) {
-      if (isPiSdkPackageJson(path7.join(dir, "package.json")))
+      if (isPiSdkPackageJson(path8.join(dir, "package.json")))
         return dir;
-      const siblingDir = path7.join(dir, "node_modules", PI_SDK_PACKAGE_NAME);
-      if (isPiSdkPackageJson(path7.join(siblingDir, "package.json")))
+      const siblingDir = path8.join(dir, "node_modules", PI_SDK_PACKAGE_NAME);
+      if (isPiSdkPackageJson(path8.join(siblingDir, "package.json")))
         return siblingDir;
-      const parent = path7.dirname(dir);
+      const parent = path8.dirname(dir);
       if (parent === dir)
         break;
       dir = parent;
@@ -3672,7 +3731,7 @@ function resolvePiSdkVersionFromPath(deps = {}) {
   if (!dir)
     return;
   try {
-    const pkg = JSON.parse(readFileSync5(path7.join(dir, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync5(path8.join(dir, "package.json"), "utf-8"));
     return pkg.version;
   } catch {
     return;
@@ -3745,7 +3804,7 @@ class PiDriver {
   async createSession(ctx, deps) {
     const spawnEnv = await deps.buildSpawnEnv();
     if (ctx.standingPrompt) {
-      mkdirSync6(ctx.workingDirectory, { recursive: true });
+      mkdirSync7(ctx.workingDirectory, { recursive: true });
       writeAgentFile(ctx.workingDirectory, ctx.standingPrompt);
     }
     const f = resolveLaunchFieldsOrDefault(ctx.config.runtimeConfig);
@@ -3811,22 +3870,22 @@ function listRuntimeIds() {
 
 // src/discovery.ts
 function resolveAlookCliPath(moduleDir) {
-  const thisDir = moduleDir ?? path8.dirname(fileURLToPath(import.meta.url));
-  const target = path8.basename(thisDir) === "dist" ? path8.resolve(thisDir, "cli", "index.js") : path8.resolve(thisDir, "..", "scripts", "alook-shim.mjs");
+  const thisDir = moduleDir ?? path9.dirname(fileURLToPath(import.meta.url));
+  const target = path9.basename(thisDir) === "dist" ? path9.resolve(thisDir, "cli", "index.js") : path9.resolve(thisDir, "..", "scripts", "alook-shim.mjs");
   return fs8.existsSync(target) ? target : null;
 }
 function deriveCliFallbackCandidates(cliPath) {
   if (!cliPath)
     return [];
-  const normalized = cliPath.split(path8.sep).join("/");
+  const normalized = cliPath.split(path9.sep).join("/");
   const marker = "/node_modules/";
   const idx = normalized.indexOf(marker);
   if (idx === -1)
     return [];
   const globalRoot = cliPath.slice(0, idx + marker.length - 1);
-  const tail = path8.join("dist", "cli", "index.js");
+  const tail = path9.join("dist", "cli", "index.js");
   return [
-    path8.join(globalRoot, "@alook", "daemon", tail)
+    path9.join(globalRoot, "@alook", "daemon", tail)
   ].filter((candidate) => candidate !== cliPath);
 }
 function resolveAlookCliPathWithFallback(primary) {
@@ -3872,7 +3931,7 @@ async function detectRuntimes() {
 
 // src/drivers/piSdkDeps.ts
 import { readFileSync as readFileSync6 } from "fs";
-import * as path9 from "path";
+import * as path10 from "path";
 import { pathToFileURL } from "url";
 var PI_SDK_PACKAGE_NAME2 = "@earendil-works/pi-coding-agent";
 var cachedSdkPromise = null;
@@ -3881,9 +3940,9 @@ async function importPiSdkFromGlobalInstall() {
   if (!dir) {
     throw new Error(`${PI_SDK_PACKAGE_NAME2} not found — install it (e.g. \`npm install -g ${PI_SDK_PACKAGE_NAME2}\`) before launching a pi agent`);
   }
-  const pkg = JSON.parse(readFileSync6(path9.join(dir, "package.json"), "utf-8"));
+  const pkg = JSON.parse(readFileSync6(path10.join(dir, "package.json"), "utf-8"));
   const entry = pkg.exports?.["."]?.import ?? pkg.main ?? "./dist/index.js";
-  const entryPath = path9.join(dir, entry);
+  const entryPath = path10.join(dir, entry);
   return import(pathToFileURL(entryPath).href);
 }
 function loadPiSdkModule() {
@@ -4237,10 +4296,10 @@ function readDaemonVersion() {
     return "";
   }
 }
-var CAPABILITIES = ["send", "read", "mentions", "tasks", "reactions", "server", "channels", "knowledge"];
+var CAPABILITIES = ["send", "read", "mentions", "tasks", "reactions", "server", "channels", "knowledge", "attach"];
 function resolveDefaultBaseDir() {
-  const root = process.env.ALOOK_PROJECT_ROOT || path10.join(homedir3(), ".alook");
-  return path10.join(root, "daemon");
+  const root = process.env.ALOOK_PROJECT_ROOT || path11.join(homedir3(), ".alook");
+  return path11.join(root, "daemon");
 }
 var DEFAULT_BASE_DIR = resolveDefaultBaseDir();
 var log = createLogger({ header: "@alook/daemon" });
@@ -4248,10 +4307,10 @@ function keyHash(machineKey) {
   return crypto2.createHash("sha256").update(machineKey).digest("hex").slice(0, 12);
 }
 function daemonsDir(baseDir) {
-  return path10.join(baseDir, "daemons");
+  return path11.join(baseDir, "daemons");
 }
 function pidfilePath(baseDir, machineKey) {
-  return path10.join(daemonsDir(baseDir), `${keyHash(machineKey)}.pid`);
+  return path11.join(daemonsDir(baseDir), `${keyHash(machineKey)}.pid`);
 }
 function isProcessAlive(pid) {
   try {
@@ -4272,7 +4331,7 @@ function readPidFile(filePath) {
   return null;
 }
 function writePidFile(filePath, pid, machineKey) {
-  fs9.mkdirSync(path10.dirname(filePath), { recursive: true });
+  fs9.mkdirSync(path11.dirname(filePath), { recursive: true });
   fs9.writeFileSync(filePath, JSON.stringify({ pid, key: machineKey }));
 }
 function acquireLock2(baseDir, machineKey) {
@@ -4301,7 +4360,7 @@ function daemonList(opts) {
   const files = fs9.readdirSync(dir).filter((f) => f.endsWith(".pid"));
   const results = [];
   for (const file of files) {
-    const filePath = path10.join(dir, file);
+    const filePath = path11.join(dir, file);
     const data = readPidFile(filePath);
     if (!data)
       continue;
@@ -4353,7 +4412,7 @@ function daemonStop(opts) {
   } catch {}
 }
 function credentialFilePathByMachineId(baseDir, machineId) {
-  return path10.join(daemonsDir(baseDir), `${machineId}.credential.json`);
+  return path11.join(daemonsDir(baseDir), `${machineId}.credential.json`);
 }
 function credentialFilesDir(baseDir) {
   return daemonsDir(baseDir);
@@ -4370,7 +4429,7 @@ function readCredentialFile(filePath) {
   return null;
 }
 function writeCredentialFile(filePath, credential, machineId) {
-  fs9.mkdirSync(path10.dirname(filePath), { recursive: true });
+  fs9.mkdirSync(path11.dirname(filePath), { recursive: true });
   fs9.writeFileSync(filePath, JSON.stringify({ credential, machineId }), { mode: 384 });
 }
 function findExistingCredentialForBearer(baseDir, bearer) {
@@ -4380,7 +4439,7 @@ function findExistingCredentialForBearer(baseDir, bearer) {
   for (const file of fs9.readdirSync(dir)) {
     if (!file.endsWith(".credential.json"))
       continue;
-    const parsed = readCredentialFile(path10.join(dir, file));
+    const parsed = readCredentialFile(path11.join(dir, file));
     if (parsed && parsed.credential === bearer)
       return parsed;
   }
@@ -4549,6 +4608,50 @@ function agentId(opts) {
     throw new CliError("agent identity required — pass --agent <id> or set ALOOK_AGENT_ID");
   return id;
 }
+var CLIENT_MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+var CLIENT_ALLOWED_MIME_PREFIXES = [
+  "image/",
+  "video/",
+  "audio/",
+  "text/",
+  "application/pdf",
+  "application/json",
+  "application/zip",
+  "application/octet-stream"
+];
+function mimeAllowed(contentType) {
+  if (!contentType)
+    return false;
+  return CLIENT_ALLOWED_MIME_PREFIXES.some((entry) => entry.endsWith("/") ? contentType.startsWith(entry) : contentType === entry);
+}
+function contentTypeFromFilename(filename) {
+  const ext = filename.slice(filename.lastIndexOf(".") + 1).toLowerCase();
+  switch (ext) {
+    case "png":
+      return "image/png";
+    case "jpg":
+    case "jpeg":
+      return "image/jpeg";
+    case "gif":
+      return "image/gif";
+    case "webp":
+      return "image/webp";
+    case "svg":
+      return "image/svg+xml";
+    case "pdf":
+      return "application/pdf";
+    case "txt":
+    case "md":
+    case "log":
+      return "text/plain";
+    case "json":
+      return "application/json";
+    case "zip":
+      return "application/zip";
+    default:
+      return "application/octet-stream";
+  }
+}
 async function cmdMessageSend(opts) {
   const api = getApi();
   const agent = agentId(opts);
@@ -4566,15 +4669,81 @@ async function cmdMessageSend(opts) {
   } else if (typeof textFlag === "string") {
     text = textFlag;
   }
-  if (!text) {
-    throw new CliError("message send: --text <text> or --file <path> is required");
+  const attachmentIds = Array.isArray(opts.attachment) ? opts.attachment : [];
+  const hasText = typeof text === "string" && text.trim().length > 0;
+  if (!hasText && attachmentIds.length === 0) {
+    throw new CliError("message send: --text <text>, --file <path>, or --attachment <id> is required");
   }
-  const res = await api.send({ agentId: agent, channel, content: { text } });
+  const res = await api.send({
+    agentId: agent,
+    channel,
+    content: { text: text ?? "" },
+    attachments: attachmentIds.length > 0 ? attachmentIds : undefined
+  });
   if (res.state === "blocked") {
     throw new CliError(`channel not aligned: ${res.unreadCount} unread message(s) in ${channel} (latest #${res.latestSeq}). Run \`alook inbox pull\` to align, then resend.`);
   }
   return { sent: `${res.message.channel}${res.message.seq}` };
 }
+async function cmdAttachmentUpload(opts) {
+  const api = getApi();
+  const agent = agentId(opts);
+  const target = opts.target;
+  const filePath = opts.file;
+  if (!target)
+    throw new CliError("message attachment upload: --target <ref> is required");
+  if (!filePath)
+    throw new CliError("message attachment upload: --file <path> is required");
+  const fs10 = await import("fs/promises");
+  let bytes;
+  try {
+    bytes = await fs10.readFile(filePath);
+  } catch (err) {
+    throw new CliError(`message attachment upload: cannot read file: ${err.message}`);
+  }
+  if (bytes.byteLength > CLIENT_MAX_ATTACHMENT_BYTES) {
+    throw new CliError(`message attachment upload: file too large — ${bytes.byteLength} bytes, max ${CLIENT_MAX_ATTACHMENT_BYTES}`);
+  }
+  const pathMod = await import("path");
+  const filename = pathMod.basename(filePath);
+  const contentType = contentTypeFromFilename(filename);
+  if (!mimeAllowed(contentType)) {
+    throw new CliError(`message attachment upload: content type not allowed: ${contentType}`);
+  }
+  const result = await api.attachmentUpload({
+    agentId: agent,
+    target,
+    file: { data: new Uint8Array(bytes), filename, contentType }
+  });
+  return result;
+}
+async function cmdAttachmentDownload(opts) {
+  const api = getApi();
+  const agent = agentId(opts);
+  const id = opts.id;
+  if (!id)
+    throw new CliError("message attachment download: --id <id> is required");
+  const outFlag = opts.out;
+  const os4 = await import("os");
+  const pathMod = await import("path");
+  const destPath = outFlag ?? pathMod.join(os4.tmpdir(), "alook-attachments", agent, id, "file");
+  const result = await api.attachmentDownload({ agentId: agent, id, destPath });
+  if (!outFlag) {
+    const fs10 = await import("fs/promises");
+    const destDir = pathMod.dirname(destPath);
+    const safeName = pathMod.basename(result.filename) || "file";
+    const renamed = pathMod.join(destDir, safeName);
+    if (renamed !== destPath) {
+      try {
+        await fs10.rename(destPath, renamed);
+        return { ...result, path: renamed };
+      } catch {
+        return { ...result, path: destPath };
+      }
+    }
+  }
+  return result;
+}
 async function cmdInboxPull(opts) {
   const api = getApi();
   const agent = agentId(opts);
@@ -4654,12 +4823,26 @@ function buildProgram() {
   }).option("--agent <id>", "agent identity (or ALOOK_AGENT_ID env)");
   const message = program.command("message").description("message operations").exitOverride();
   message.configureOutput({ writeOut: () => {}, writeErr: () => {} });
-  message.command("send").description("send a message to a channel, DM, or thread").option("--target <ref>", "destination (path-style ref, e.g. /demo-workspace/general)").option("--text <text>", "inline message body (short messages)").option("--file <path>", "read message body from a file (long messages)").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+  message.command("send").description("send a message to a channel, DM, or thread").option("--target <ref>", "destination (path-style ref, e.g. /demo-workspace/general)").option("--text <text>", "inline message body (short messages)").option("--file <path>", "read message body from a file (long messages)").option("-a, --attachment <id>", "attach an uploaded file by id (repeatable — order = message order)", (v, prev = []) => [...prev, v], []).exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
     const localOpts = this.opts();
     const globalOpts = program.opts();
     const result = await cmdMessageSend({ ...globalOpts, ...localOpts });
     printEnvelope({ success: result });
   });
+  const attachment = message.command("attachment").description("attachment operations").exitOverride();
+  attachment.configureOutput({ writeOut: () => {}, writeErr: () => {} });
+  attachment.command("upload").description("upload a local file as a pending attachment for a future send").option("--target <ref>", "destination (channel, DM, or thread ref)").option("--file <path>", "local file to upload").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+    const localOpts = this.opts();
+    const globalOpts = program.opts();
+    const result = await cmdAttachmentUpload({ ...globalOpts, ...localOpts });
+    printEnvelope({ success: result });
+  });
+  attachment.command("download").description("download an attachment by id to disk").option("--id <id>", "attachment id (from inbox pull / send response)").option("--out <path>", "explicit output path (default: /tmp/alook-attachments/<agent>/<id>/<filename>)").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+    const localOpts = this.opts();
+    const globalOpts = program.opts();
+    const result = await cmdAttachmentDownload({ ...globalOpts, ...localOpts });
+    printEnvelope({ success: result });
+  });
   const inbox = program.command("inbox").description("inbox operations").exitOverride();
   inbox.configureOutput({ writeOut: () => {}, writeErr: () => {} });
   inbox.command("pull").description("fetch unread messages from all channels").option("--max <n>", "max messages to return").option("--no-ack", "do not advance read waterlines (peek only)").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {

package/dist/index.js

@@ -31,7 +31,9 @@ function cliCommandsSection() {
     "### Messaging",
     "",
     `1. \`${CLI} inbox pull\` — fetch unread messages.`,
-    `2. \`${CLI} message send\` — send a message to a channel, DM, or thread.`,
+    `2. \`${CLI} message send\` — send a message to a channel, DM, or thread. ` + `Attach files with \`--attachment <id>\` (repeatable, order matters).`,
+    `3. \`${CLI} message attachment upload --target <ref> --file <path>\` — upload a local file; ` + `returns an id. Feed that id into \`message send --attachment <id>\`. ` + `The id is stable across the pending→persisted lifecycle.`,
+    `4. \`${CLI} message attachment download --id <id> [--out <path>]\` — download an attachment ` + `id from any message you have access to (or your own pending uploads).`,
     "",
     "### Servers",
     "",
@@ -4093,6 +4095,8 @@ function parseBearer(authHeader) {
   return m ? m[1].trim() : null;
 }
 var DEFAULT_CAPABILITY_RESOLVER = (_method, pathname) => {
+  if (pathname.includes("/attachment"))
+    return "attach";
   if (pathname.includes("/send"))
     return "send";
   if (pathname.includes("/history") || pathname.includes("/search") || pathname.includes("/inbox"))
@@ -4120,7 +4124,7 @@ async function startCredentialProxy(broker, options = {}) {
       return;
     }
     const reg = verdict.reg;
-    const isInboxPull = onPull && pathname.endsWith("/inboxPull");
+    const isInboxPull = onPull && pathname === "/api/inboxPull";
     if (onProxyRequest) {
       try {
         onProxyRequest(reg.agentId, req.method ?? "GET", pathname);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alook/daemon",
-  "version": "0.0.154",
+  "version": "0.0.155",
   "description": "Alook agent daemon — host-side runtime backend, process manager, credential proxy, and control plane.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/alookai/alook#readme",