@cmetech/otto 1.1.0 → 1.2.4

package/dist/resources/extensions/subagent/launch.js

@@ -1,21 +1,53 @@
 // OTTO + Subagent launch contract and child process safety helpers.
+import * as crypto from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { SessionManager } from "@otto/pi-coding-agent";
 export const SUBAGENT_CHILD_ENV_VAR = "OTTO_SUBAGENT_CHILD";
 export const SUBAGENT_CHILD_ENV_VALUE = "1";
+export const SUBAGENT_SCRATCHPAD_ENV_VAR = "OTTO_SUBAGENT_SCRATCHPAD";
+const MAX_SCRATCHPAD_AGENT_PART = 32;
+export function mintSubagentScratchpadName(agentName) {
+    const hex = crypto.randomBytes(3).toString("hex");
+    // Sanitize: NFKD + strip combining marks + lowercase + non-[a-z0-9] → '-' + collapse + trim.
+    let sanitized = agentName
+        .normalize("NFKD")
+        .replace(/[̀-ͯ]/g, "")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    if (sanitized.length > MAX_SCRATCHPAD_AGENT_PART) {
+        sanitized = sanitized.slice(0, MAX_SCRATCHPAD_AGENT_PART).replace(/-+$/, "");
+    }
+    if (!sanitized)
+        return `subagent-${hex}`;
+    return `subagent-${sanitized}-${hex}`;
+}
 export function isSubagentChildProcess(env = process.env) {
     return env[SUBAGENT_CHILD_ENV_VAR] === SUBAGENT_CHILD_ENV_VALUE;
 }
-export function buildSubagentProcessEnv(env = process.env) {
-    return {
+export function buildSubagentProcessEnv(env = process.env, scratchpadName) {
+    const next = {
         ...env,
         [SUBAGENT_CHILD_ENV_VAR]: SUBAGENT_CHILD_ENV_VALUE,
     };
+    if (scratchpadName) {
+        next[SUBAGENT_SCRATCHPAD_ENV_VAR] = scratchpadName;
+    }
+    return next;
 }
 export function buildShellEnvAssignments(env = process.env) {
-    const value = env[SUBAGENT_CHILD_ENV_VAR];
-    return value ? [`${SUBAGENT_CHILD_ENV_VAR}=${JSON.stringify(value)}`] : [];
+    const out = [];
+    const childValue = env[SUBAGENT_CHILD_ENV_VAR];
+    if (childValue) {
+        out.push(`${SUBAGENT_CHILD_ENV_VAR}=${JSON.stringify(childValue)}`);
+    }
+    const scratchpadValue = env[SUBAGENT_SCRATCHPAD_ENV_VAR];
+    if (scratchpadValue) {
+        out.push(`${SUBAGENT_SCRATCHPAD_ENV_VAR}=${JSON.stringify(scratchpadValue)}`);
+    }
+    return out;
 }
 export function buildSubagentProcessArgs(agent, task, tmpPromptPath, modelOverride, session = { mode: "fresh" }) {
     const args = ["--mode", "json", "-p"];
@@ -70,7 +102,7 @@ export function createSubagentLaunchPlan(input) {
     const session = input.session ?? resolveSubagentSessionArgs(input.contextMode ?? "fresh", input.parentSessionManager);
     return {
         args: buildSubagentProcessArgs(input.agent, input.task, input.tmpPromptPath, input.modelOverride, session),
-        env: buildSubagentProcessEnv(),
+        env: buildSubagentProcessEnv(process.env, input.scratchpadName),
         cwd: input.cwd ?? input.defaultCwd,
         session,
     };

package/dist/resources/extensions/subagent/run-store.js

@@ -131,6 +131,7 @@ export function createInitialRunRecord(input) {
             index,
             agent: child.agent,
             trackingName: child.trackingName,
+            scratchpadName: child.scratchpadName,
             task: child.task,
             cwd: child.cwd,
             status: "queued",

package/dist/resources/extensions/workflow/bootstrap/register-extension.js

@@ -19,6 +19,7 @@ import { logWarning } from "../workflow-logger.js";
 // session hook calling startAuto) would be silently dropped because Node's
 // EventEmitter does not buffer events for late subscribers.
 import { initCmuxEventListeners } from "../../cmux/index.js";
+import { registerPersonaCommands } from "../persona-status.js";
 import { BRAND } from "../strings.js";
 export { writeCrashLog } from "./crash-log.js";
 export function handleRecoverableExtensionProcessError(err) {
@@ -110,6 +111,7 @@ export function registerWorkflowExtension(pi) {
         ["memory-tools", () => registerMemoryTools(pi)],
         ["exec-tools", () => registerExecTools(pi)],
         ["schedule-wakeup-tool", () => registerScheduleWakeupTool(pi)],
+        ["persona-commands", () => registerPersonaCommands(pi)],
         ["shortcuts", () => registerShortcuts(pi)],
         // cmux is a library (no pi), so gsd sets up the event listeners on its
         // behalf using the shared event channel contract. Registration is

package/dist/resources/extensions/workflow/bootstrap/register-hooks.js

@@ -299,6 +299,15 @@ async function resetAskUserQuestionsTurnCache() {
     const { resetAskUserQuestionsCache } = await import("../../ask-user-questions.js");
     resetAskUserQuestionsCache();
 }
+async function initPersonaStatusChip(ctx) {
+    try {
+        const { initPersonaWidget } = await import("../persona-status.js");
+        await initPersonaWidget(ctx);
+    }
+    catch {
+        // Non-fatal: persona chip simply won't render if the registry is unavailable.
+    }
+}
 async function syncServiceTierStatus(ctx) {
     const { getEffectiveServiceTier, formatServiceTierFooterStatus } = await import("../service-tier.js");
     ctx.ui.setStatus("gsd-fast", formatServiceTierFooterStatus(getEffectiveServiceTier(), ctx.model?.id));
@@ -424,6 +433,7 @@ export function registerHooks(pi, ecosystemHandlers) {
         approvalQuestionAbortInFlight = false;
         clearDeferredApprovalGate();
         await resetAskUserQuestionsTurnCache();
+        await initPersonaStatusChip(ctx);
         await syncServiceTierStatus(ctx);
         await applyDisabledModelProviderPolicy(ctx);
         await applyCompactionThresholdOverride(ctx);

package/dist/resources/extensions/workflow/persona-status.js

@@ -0,0 +1,87 @@
+// Wires /persona slash commands + the persona status-bar chip into Otto.
+// Spec §2.5 + §5.2. Lives inside the src/resources extension boundary, so it
+// imports only the @otto/coworker-persona package (never src/ modules).
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { PersonaRegistry, handleList, handleCurrent, handleSwitch, handleReset, handleInstall, handleUninstall, } from "@otto/coworker-persona";
+// Sorts ahead of alphabetic extension status keys so the chip lands leftmost
+// in the footer's extension-status block.
+const STATUS_KEY = "00-persona";
+const SUBCOMMANDS = ["list", "current", "switch", "install", "uninstall", "reset"];
+function ottoHome() {
+    return process.env.OTTO_HOME || join(homedir(), ".otto");
+}
+function getRegistry() {
+    return new PersonaRegistry({ ottoHome: ottoHome() });
+}
+function formatPersonaChip(persona) {
+    const { icon, label } = persona.status_line;
+    return `${icon} ${label}`.trim();
+}
+async function refreshPersonaChip(ctx, registry) {
+    if (!ctx.hasUI)
+        return;
+    try {
+        const active = await registry.activeInWorkspace(ctx.cwd);
+        ctx.ui.setStatus(STATUS_KEY, formatPersonaChip(active));
+    }
+    catch {
+        ctx.ui.setStatus(STATUS_KEY, undefined);
+    }
+}
+// Called on session_start to seed the default persona and render the chip.
+export async function initPersonaWidget(ctx) {
+    const registry = getRegistry();
+    try {
+        await registry.ensureDefaultInstalled();
+    }
+    catch {
+        // Non-fatal: chip simply won't render if the default can't be installed.
+    }
+    await refreshPersonaChip(ctx, registry);
+}
+export function registerPersonaCommands(pi) {
+    pi.registerCommand("persona", {
+        description: "Manage Otto co-worker personas (list, current, switch, install, uninstall, reset)",
+        getArgumentCompletions: (prefix) => SUBCOMMANDS.filter((s) => s.startsWith(prefix)).map((s) => ({ value: s, label: s })),
+        handler: async (args, ctx) => {
+            const registry = getRegistry();
+            await registry.ensureDefaultInstalled();
+            const [sub, ...rest] = args.trim().split(/\s+/).filter(Boolean);
+            const ws = ctx.cwd;
+            try {
+                let lines;
+                switch (sub ?? "current") {
+                    case "list":
+                        lines = await handleList(registry, ws);
+                        break;
+                    case "current":
+                        lines = await handleCurrent(registry, ws);
+                        break;
+                    case "switch":
+                        lines = await handleSwitch(registry, ws, rest[0]);
+                        await refreshPersonaChip(ctx, registry);
+                        break;
+                    case "reset":
+                        lines = await handleReset(registry, ws);
+                        await refreshPersonaChip(ctx, registry);
+                        break;
+                    case "install":
+                        lines = await handleInstall(registry, rest[0]);
+                        break;
+                    case "uninstall":
+                        lines = await handleUninstall(registry, rest[0], [ws]);
+                        await refreshPersonaChip(ctx, registry);
+                        break;
+                    default:
+                        ctx.ui.notify(`Unknown subcommand: ${sub}. Try: ${SUBCOMMANDS.join(", ")}`, "warning");
+                        return;
+                }
+                ctx.ui.notify(lines.join("\n"), "info");
+            }
+            catch (err) {
+                ctx.ui.notify(err instanceof Error ? err.message : String(err), "error");
+            }
+        },
+    });
+}

package/dist/update-cmd.d.ts

@@ -2,5 +2,24 @@ interface RunUpdateOptions {
     agentDir?: string;
     skillsDir?: string;
 }
+/**
+ * Build the PowerShell bootstrap that runs the install in a detached, visible
+ * console window. Exported for tests. The script:
+ *   1. Writes an initial status file at `statusPath`.
+ *   2. Waits up to 30s for the parent otto.exe (parentPid) to exit so its
+ *      DLL handles release.
+ *   3. Runs the install command (`npm install -g …` or `bun add -g …`).
+ *   4. Sweeps any orphan `.otto-*` staging dirs npm left behind.
+ *   5. Updates the status file with completion details.
+ *   6. Prints a clear "Done" message and waits for a keypress.
+ */
+export declare function buildWindowsBootstrapScript(args: {
+    parentPid: number;
+    installCmd: string;
+    statusPath: string;
+    current: string;
+    latest: string;
+    startedAt: string;
+}): string;
 export declare function runUpdate(options?: RunUpdateOptions): Promise<void>;
 export {};

package/dist/update-cmd.js

@@ -1,15 +1,177 @@
-import { execSync } from 'node:child_process';
+import { execSync, spawn } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
 import { agentDir as defaultAgentDir } from './app-paths.js';
 import { initResources } from './resource-loader.js';
 import { compareSemver, fetchLatestVersionFromRegistry, resolveInstallCommand } from './update-check.js';
 const NPM_PACKAGE = '@cmetech/otto';
+function getStatusPath(agentDir) {
+    return join(agentDir, 'update-status.json');
+}
+function maybeShowPriorStatus(agentDir) {
+    const statusPath = getStatusPath(agentDir);
+    if (!existsSync(statusPath))
+        return;
+    try {
+        const status = JSON.parse(readFileSync(statusPath, 'utf-8'));
+        if (status.completedAt) {
+            const dim = '\x1b[2m';
+            const reset = '\x1b[0m';
+            const outcome = status.exitCode === 0 ? '✓ success' : `✗ exit ${status.exitCode}`;
+            process.stdout.write(`${dim}Last update: v${status.fromVersion} → v${status.toVersion} at ${status.completedAt} (${outcome})${reset}\n`);
+        }
+    }
+    catch {
+        // Ignore parse errors — file may be partial or corrupt.
+    }
+}
+/**
+ * Build the PowerShell bootstrap that runs the install in a detached, visible
+ * console window. Exported for tests. The script:
+ *   1. Writes an initial status file at `statusPath`.
+ *   2. Waits up to 30s for the parent otto.exe (parentPid) to exit so its
+ *      DLL handles release.
+ *   3. Runs the install command (`npm install -g …` or `bun add -g …`).
+ *   4. Sweeps any orphan `.otto-*` staging dirs npm left behind.
+ *   5. Updates the status file with completion details.
+ *   6. Prints a clear "Done" message and waits for a keypress.
+ */
+export function buildWindowsBootstrapScript(args) {
+    // PowerShell single-quoted strings are literal — backslashes and $ are not
+    // interpreted. Path values flow straight through.
+    const psQuote = (value) => `'${value.replace(/'/g, "''")}'`;
+    const status = psQuote(args.statusPath);
+    const current = psQuote(args.current);
+    const latest = psQuote(args.latest);
+    const startedAt = psQuote(args.startedAt);
+    const installCmd = args.installCmd; // run as-is — must be a valid PowerShell command line
+    return `# OTTO update bootstrap — auto-generated by otto update on Windows
+$ErrorActionPreference = 'Continue'
+$Host.UI.RawUI.WindowTitle = 'OTTO Updater'
+
+Write-Host 'OTTO Updater — please do not close this window' -ForegroundColor Cyan
+Write-Host '─────────────────────────────────────────────────'
+Write-Host ''
+
+# Write initial status
+$statusPath = ${status}
+$statusDir = Split-Path -Parent $statusPath
+if ($statusDir -and -not (Test-Path $statusDir)) {
+  New-Item -ItemType Directory -Path $statusDir -Force | Out-Null
+}
+@{
+  startedAt   = ${startedAt}
+  fromVersion = ${current}
+  toVersion   = ${latest}
+} | ConvertTo-Json | Set-Content -Path $statusPath -Encoding UTF8
+
+# Wait for parent otto.exe (pid ${args.parentPid}) to exit, max 30s
+Write-Host -NoNewline 'Waiting for OTTO to exit...'
+$deadline = (Get-Date).AddSeconds(30)
+while ((Get-Process -Id ${args.parentPid} -ErrorAction SilentlyContinue) -and ((Get-Date) -lt $deadline)) {
+  Start-Sleep -Milliseconds 300
+}
+if (Get-Process -Id ${args.parentPid} -ErrorAction SilentlyContinue) {
+  Write-Host ' timeout!' -ForegroundColor Yellow
+  Write-Host 'OTTO did not exit in 30s. To finish manually, run:' -ForegroundColor Yellow
+  Write-Host ('  ' + ${psQuote(installCmd)})
+  Write-Host ''
+  Write-Host 'Press any key to close this window.'
+  $null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
+  exit 1
+}
+Write-Host ' done.'
+Write-Host ''
+
+# Run the install
+Write-Host ('Running: ' + ${psQuote(installCmd)}) -ForegroundColor Cyan
+Write-Host ''
+${installCmd}
+$exitCode = $LASTEXITCODE
+
+# Sweep orphan .otto-* staging dirs npm couldn't clean up
+$stagingRoot = Join-Path $env:APPDATA 'npm\\node_modules\\@cmetech'
+if (Test-Path $stagingRoot) {
+  Get-ChildItem -Path $stagingRoot -Directory -Filter '.otto-*' -ErrorAction SilentlyContinue |
+    Remove-Item -Recurse -Force -ErrorAction SilentlyContinue
+}
+
+# Write final status
+@{
+  startedAt   = ${startedAt}
+  completedAt = (Get-Date -Format 'o')
+  fromVersion = ${current}
+  toVersion   = ${latest}
+  exitCode    = $exitCode
+} | ConvertTo-Json | Set-Content -Path $statusPath -Encoding UTF8
+
+Write-Host ''
+if ($exitCode -eq 0) {
+  Write-Host ('Done. OTTO v' + ${latest} + ' installed.') -ForegroundColor Green
+  Write-Host 'Open any terminal and run otto to use the new version.'
+} else {
+  Write-Host ('Install failed with exit code ' + $exitCode) -ForegroundColor Red
+  Write-Host ('Try manually: ' + ${psQuote(installCmd)})
+}
+Write-Host ''
+Write-Host 'Press any key to close this window.'
+$null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
+exit $exitCode
+`;
+}
+function runWindowsDetachedUpdate(current, latest, installCmd, agentDir) {
+    const tempDir = mkdtempSync(join(tmpdir(), 'otto-update-'));
+    const scriptPath = join(tempDir, 'update.ps1');
+    const statusPath = getStatusPath(agentDir);
+    const startedAt = new Date().toISOString();
+    if (!existsSync(agentDir)) {
+        mkdirSync(agentDir, { recursive: true });
+    }
+    const script = buildWindowsBootstrapScript({
+        parentPid: process.pid,
+        installCmd,
+        statusPath,
+        current,
+        latest,
+        startedAt,
+    });
+    writeFileSync(scriptPath, script, 'utf-8');
+    const bold = '\x1b[1m';
+    const dim = '\x1b[2m';
+    const reset = '\x1b[0m';
+    process.stdout.write(`${dim}Updating:${reset} v${current} → ${bold}v${latest}${reset}\n\n`);
+    process.stdout.write('Update is running in a new window — Windows cannot replace files while OTTO is open.\n');
+    process.stdout.write(`When the update window shows ${bold}"Done."${reset} run \`otto\` in any terminal to use v${latest}.\n\n`);
+    // `cmd.exe /c start "Title" powershell.exe -File <script>`
+    // Node quotes args that contain spaces, so `start OTTO Updater` becomes
+    // `start "OTTO Updater"`, which CMD's start builtin treats as the window
+    // title (longstanding CMD quirk).
+    const child = spawn('cmd.exe', [
+        '/c',
+        'start',
+        'OTTO Updater',
+        'powershell.exe',
+        '-NoProfile',
+        '-ExecutionPolicy',
+        'Bypass',
+        '-File',
+        scriptPath,
+    ], { detached: true, stdio: 'ignore', windowsHide: false });
+    child.unref();
+    // We MUST exit so the bootstrap's pid-wait loop unblocks and DLL handles
+    // release. Anything after this point is unreachable.
+    process.exit(0);
+}
 export async function runUpdate(options = {}) {
     const current = process.env.OTTO_VERSION || '0.0.0';
+    const agentDir = options.agentDir ?? defaultAgentDir;
     const bold = '\x1b[1m';
     const dim = '\x1b[2m';
     const green = '\x1b[32m';
     const yellow = '\x1b[33m';
     const reset = '\x1b[0m';
+    maybeShowPriorStatus(agentDir);
     process.stdout.write(`${dim}Current version:${reset} v${current}\n`);
     process.stdout.write(`${dim}Checking npm registry...${reset}\n`);
     const latest = await fetchLatestVersionFromRegistry();
@@ -20,15 +182,24 @@ export async function runUpdate(options = {}) {
     process.stdout.write(`${dim}Latest version:${reset}  v${latest}\n`);
     if (compareSemver(latest, current) <= 0) {
         process.stdout.write(`${green}Already up to date.${reset}\n`);
-        initResources(options.agentDir ?? defaultAgentDir, options.skillsDir);
+        initResources(agentDir, options.skillsDir);
         return;
     }
-    process.stdout.write(`${dim}Updating:${reset} v${current} → ${bold}v${latest}${reset}\n`);
     const installCmd = resolveInstallCommand(`${NPM_PACKAGE}@latest`);
+    // On Windows, run install in a detached, visible window. The current
+    // process holds locks on duckdb.dll, sharp.dll, otto_engine.win32-x64.node,
+    // and others — npm install would log EPERM warnings and leave orphan
+    // .otto-* staging dirs (issue surfaced by a v1.0.7 → v1.1.0 update on
+    // Windows). The bootstrap waits for this process to exit, runs npm install
+    // cleanly, sweeps the orphans, and reports completion via a status file
+    // that the next `otto update` invocation surfaces.
+    if (process.platform === 'win32') {
+        runWindowsDetachedUpdate(current, latest, installCmd, agentDir);
+        // unreachable
+    }
+    process.stdout.write(`${dim}Updating:${reset} v${current} → ${bold}v${latest}${reset}\n`);
     try {
-        execSync(installCmd, {
-            stdio: 'inherit',
-        });
+        execSync(installCmd, { stdio: 'inherit' });
         process.stdout.write(`\n${green}${bold}Updated to v${latest}${reset}\n`);
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmetech/otto",
-  "version": "1.1.0",
+  "version": "1.2.4",
   "description": "Terminal-based developer chat assistant. Permanent hard fork of gsd-pi with LangFlow flow triggers, a flow builder, and optional gateway routing for compliance environments.",
   "keywords": [
     "ai",
@@ -65,10 +65,18 @@
     "build:pi-coding-agent": "npm run build:contracts && npm run build -w @otto/pi-coding-agent",
     "build:native-pkg": "npm run build -w @otto/native",
     "build:contracts": "npm run build -w @otto-build/contracts",
+    "build:coworker-types": "npm run build -w @otto/coworker-types",
+    "build:coworker-utils": "npm run build -w @otto/coworker-utils",
+    "build:coworker-memory": "npm run build -w @otto/coworker-memory",
+    "build:coworker-vault": "npm run build -w @otto/coworker-vault",
+    "build:coworker-artifacts": "npm run build -w @otto/coworker-artifacts",
+    "build:coworker-scratchpad": "npm run build -w @otto/coworker-scratchpad",
+    "build:coworker-persona": "npm run build -w @otto/coworker-persona",
+    "build:coworker": "npm run build:coworker-types && npm run build:coworker-utils && npm run build:coworker-memory && npm run build:coworker-vault && npm run build:coworker-artifacts && npm run build:coworker-scratchpad && npm run build:coworker-persona",
     "build:rpc-client": "npm run build -w @otto-build/rpc-client",
     "build:pi": "npm run build:contracts && npm run build:native-pkg && npm run build:pi-tui && npm run build:pi-ai && npm run build:pi-agent-core && npm run build:pi-coding-agent",
     "build:mcp-server": "npm run build -w @otto-build/mcp-server",
-    "build:core": "npm run build:contracts && npm run build:pi && npm run build:rpc-client && npm run build:mcp-server && tsc && npm run copy-resources && npm run copy-themes && npm run copy-export-html",
+    "build:core": "npm run build:contracts && npm run build:coworker && npm run build:pi && npm run build:rpc-client && npm run build:mcp-server && tsc && npm run copy-resources && npm run copy-themes && npm run copy-export-html",
     "prebuild": "node scripts/sync-brand-colors.mjs && node scripts/sync-piconfig.mjs && node scripts/sync-release-notes.mjs && node scripts/generate-theme-const.mjs",
     "build": "npm run build:core",
     "sync-brand-colors": "node scripts/sync-brand-colors.mjs",
@@ -86,7 +94,7 @@
     "baseline:refactor:phase0": "npm run baseline:refactor:gate && node --import ./src/resources/extensions/workflow/tests/resolve-ts.mjs --experimental-strip-types --test src/resources/extensions/workflow/tests/derive-state-db.test.ts src/resources/extensions/workflow/tests/single-writer-invariant.test.ts src/resources/extensions/workflow/tests/auto-recovery.test.ts src/resources/extensions/workflow/tests/auto-worktree-registry.test.ts",
     "legacy:cleanup:gate": "node scripts/legacy-cleanup-gate.mjs",
     "legacy:cleanup:evidence": "node scripts/legacy-cleanup-evidence.mjs",
-    "test:unit:compiled": "node --import ./scripts/dist-test-resolve.mjs --experimental-test-isolation=process --test-reporter=./scripts/test-reporter-compact.mjs --test \"dist-test/src/tests/*.test.js\" \"dist-test/src/resources/extensions/workflow/tests/*.test.js\" \"dist-test/src/resources/extensions/workflow/tests/*.test.mjs\" \"dist-test/src/resources/extensions/shared/tests/*.test.js\" \"dist-test/src/resources/extensions/subagent/tests/*.test.js\" \"dist-test/src/resources/extensions/claude-code-cli/tests/*.test.js\" \"dist-test/src/resources/extensions/github-sync/tests/*.test.js\" \"dist-test/src/resources/extensions/universal-config/tests/*.test.js\" \"dist-test/src/resources/extensions/visual-brief/tests/*.test.js\" \"dist-test/src/resources/extensions/voice/tests/*.test.js\" \"dist-test/src/resources/extensions/mcp-client/tests/*.test.js\" \"dist-test/src/resources/extensions/remote-questions/tests/*.test.js\"",
+    "test:unit:compiled": "node --import ./scripts/dist-test-resolve.mjs --experimental-test-isolation=process --test-reporter=./scripts/test-reporter-compact.mjs --test \"dist-test/src/tests/*.test.js\" \"dist-test/src/resources/extensions/workflow/tests/*.test.js\" \"dist-test/src/resources/extensions/workflow/tests/*.test.mjs\" \"dist-test/src/resources/extensions/shared/tests/*.test.js\" \"dist-test/src/resources/extensions/subagent/tests/*.test.js\" \"dist-test/src/resources/extensions/claude-code-cli/tests/*.test.js\" \"dist-test/src/resources/extensions/github-sync/tests/*.test.js\" \"dist-test/src/resources/extensions/universal-config/tests/*.test.js\" \"dist-test/src/resources/extensions/visual-brief/tests/*.test.js\" \"dist-test/src/resources/extensions/voice/tests/*.test.js\" \"dist-test/src/resources/extensions/mcp-client/tests/*.test.js\" \"dist-test/src/resources/extensions/remote-questions/tests/*.test.js\" \"dist-test/src/resources/extensions/coworker-memory/*.test.js\" \"dist-test/src/resources/extensions/coworker-vault/*.test.js\" \"dist-test/src/resources/extensions/coworker-scratchpad/*.test.js\" \"dist-test/src/resources/extensions/coworker-artifacts/*.test.js\"",
     "test:unit": "npm run test:compile && npm run test:unit:compiled",
     "test:changed:src": "node scripts/verify-changed-src-tests.mjs",
     "test:packages": "npm run test:compile && npm run test:packages:compiled",
@@ -147,17 +155,22 @@
     "@sinclair/typebox": "^0.34.41",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
+    "axios": "^1.16.1",
     "chalk": "^5.6.2",
     "chokidar": "^5.0.0",
+    "date-fns": "^4.4.0",
     "diff": "^8.0.2",
     "echarts": "^5.6.0",
+    "exceljs": "^4.4.0",
     "extract-zip": "^2.0.1",
     "file-type": "^21.1.1",
     "glob": "^13.0.1",
     "hosted-git-info": "^9.0.2",
     "ignore": "^7.0.5",
+    "lodash": "^4.18.1",
     "marked": "^15.0.12",
     "minimatch": "^10.2.3",
+    "nodejs-polars": "^0.24.1",
     "openai": "^6.26.0",
     "picomatch": "^4.0.3",
     "playwright": "^1.58.2",
@@ -167,9 +180,11 @@
     "sql.js": "^1.14.1",
     "strip-ansi": "^7.1.0",
     "undici": "^7.24.2",
-    "yaml": "^2.8.2"
+    "yaml": "^2.8.2",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@types/lodash": "^4.17.24",
     "@types/node": "^24.12.0",
     "@types/picomatch": "^4.0.2",
     "@types/proper-lockfile": "^4.1.4",
@@ -181,13 +196,13 @@
   },
   "optionalDependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.2.83",
+    "@cmetech/otto-engine-darwin-arm64": "1.2.4",
+    "@cmetech/otto-engine-darwin-x64": "1.2.4",
+    "@cmetech/otto-engine-linux-arm64-gnu": "1.2.4",
+    "@cmetech/otto-engine-linux-x64-gnu": "1.2.4",
+    "@cmetech/otto-engine-win32-x64-msvc": "1.2.4",
     "fsevents": "~2.3.3",
-    "koffi": "^2.9.0",
-    "@cmetech/otto-engine-darwin-arm64": "1.1.0",
-    "@cmetech/otto-engine-darwin-x64": "1.1.0",
-    "@cmetech/otto-engine-linux-arm64-gnu": "1.1.0",
-    "@cmetech/otto-engine-linux-x64-gnu": "1.1.0",
-    "@cmetech/otto-engine-win32-x64-msvc": "1.1.0"
+    "koffi": "^2.9.0"
   },
   "overrides": {
     "gaxios": "7.1.4",

package/packages/contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@otto-build/contracts",
-  "version": "1.1.0",
+  "version": "1.2.4",
   "description": "Shared public contracts for OTTO workspace boundaries",
   "license": "MIT",
   "otto": {

package/packages/coworker-artifacts/dist/artifact-store.d.ts

@@ -0,0 +1,25 @@
+import type { ArtifactHandle, ArtifactKind, FileWrite, TurnEntry } from './types.js';
+export interface ArtifactStoreOptions {
+    workspaceDir: string;
+    now?: () => string;
+}
+export declare class ArtifactStore {
+    private readonly workspaceDir;
+    private readonly now;
+    constructor(opts: ArtifactStoreOptions);
+    private rootDir;
+    private existingSlugs;
+    private handleFor;
+    private atomicWrite;
+    private readMetadata;
+    private readProvenance;
+    private fileStats;
+    create(kind: ArtifactKind, name: string): Promise<ArtifactHandle>;
+    update(handle: ArtifactHandle, files: FileWrite[]): Promise<{
+        files_touched: string[];
+    }>;
+    recordTurn(handle: ArtifactHandle, entry: Omit<TurnEntry, '_schema' | 'ts'> & Partial<Pick<TurnEntry, 'ts'>>): Promise<void>;
+    list(): Promise<ArtifactHandle[]>;
+    get(slug: string): Promise<ArtifactHandle | null>;
+    remove(slug: string, confirm: true): Promise<void>;
+}