@inneranimalmedia/agentsam-sdk 2.6.4 → 2.6.5

package/registry/cms-rust-machine-20260928/migration.sql

@@ -0,0 +1,237 @@
+-- AgentSam CMS / Rust / machine product registry graduation.
+-- Idempotent: stable product slugs + unique relationship edges.
+-- Database: inneranimalmedia-business
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'cms',
+  'InnerAnimalMedia CMS',
+  'product',
+  'wired',
+  'Independent CMS product identity; portable editor/runtime surfaces inherit AgentSam capabilities.',
+  'github:samprimeaux/inneranimalmedia',
+  'src/core/agentsam/cms',
+  NULL,
+  NULL,
+  '["cms","product","installable"]',
+  '{"origin":"registry.cms-rust-machine-20260928","installable":true,"app_id":"client-cms-editor","install":{"command":"agentsam app scaffold client-cms-editor","paths":["/install/cms"]},"run_targets":["local","cloudflare","tauri"],"persistence":["sqlite","d1","localStorage_cache"],"cli_commands":[],"capabilities":["cms.editor","cms.pages","cms.sections","cms.components","cms.media"]}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'client-cms-editor',
+  'AgentSam CMS Editor',
+  'app',
+  'scaffolded',
+  'Canonical reusable CMS editor app; donor-quality remaster is in progress behind adapter boundaries.',
+  'github:samprimeaux/agentsam-sdk',
+  'apps/client-cms-editor',
+  '@inneranimalmedia/client-cms-editor',
+  '0.1.0',
+  '["cms","app","editor","installable"]',
+  '{"origin":"registry.cms-rust-machine-20260928","installable":true,"app_id":"client-cms-editor","product_id":"cms","legacy_slug":"iam-client-cms-editor","install":{"command":"agentsam app scaffold client-cms-editor","paths":["/install/cms","/install/client-cms-editor"]},"run_targets":["local","cloudflare","tauri"],"persistence":["sqlite","d1","localStorage_cache"],"cli_commands":[],"capabilities":["cms.editor","cms.pages","cms.sections","cms.components","cms.media"]}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'theme-inneranimals-site',
+  'Inner Animals Site Theme',
+  'theme',
+  'prototype',
+  'Harvested Inner Animals storefront/theme candidate awaiting canonical reusable theme graduation.',
+  NULL,
+  NULL,
+  NULL,
+  NULL,
+  '["cms","theme","harvest","candidate"]',
+  '{"origin":"registry.cms-rust-machine-20260928","installable":false,"candidate":true,"source":"harvest","capabilities":["cms.theme"]}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'asrust',
+  'AgentSam Rust/Wasm Edge Lab',
+  'service',
+  'wired',
+  'Live Rust/Wasm Worker capability lab at asrust.inneranimalmedia.com.',
+  NULL,
+  NULL,
+  NULL,
+  NULL,
+  '["rust","wasm","cloudflare","service"]',
+  '{"origin":"registry.cms-rust-machine-20260928","runtime":"rust-wasm","deployment":{"provider":"cloudflare","url":"https://asrust.inneranimalmedia.com","state":"live"},"run_targets":["cloudflare"],"cli_commands":[],"capabilities":["rust.wasm.worker"]}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'agentsam-machine',
+  'AgentSam Machine',
+  'service',
+  'prototype',
+  'Deterministic native inspect/catalog engine; native core is present while top-level agentsam machine dispatch remains pending.',
+  'github:samprimeaux/agentsam-sdk',
+  'native/agentsam-machine',
+  NULL,
+  '0.1.0',
+  '["rust","native","machine","inspect"]',
+  '{"origin":"registry.cms-rust-machine-20260928","installable":false,"runtime":"native-rust","run_targets":["local","tauri"],"cli_commands":[],"capabilities":["machine.inspect"],"dispatch":"pending"}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+INSERT INTO agentsam_products (
+  slug, name, kind, status, description,
+  repository_id, canonical_path, package_name, version, tags, metadata, updated_at
+) VALUES (
+  'agentsam-rapid-rust',
+  'AgentSam Rapid Rust',
+  'sdk-package',
+  'prototype',
+  'Rust/Wasm Worker scaffolding and local proof tooling shipped inside the AgentSam SDK.',
+  'github:samprimeaux/agentsam-sdk',
+  'packages/agentsam-rapid-rust',
+  '@inneranimalmedia/agentsam-sdk',
+  '0.1.0',
+  '["rust","wasm","sdk","cli","installable"]',
+  '{"origin":"registry.cms-rust-machine-20260928","installable":true,"bundled_in":"@inneranimalmedia/agentsam-sdk","run_targets":["local","cloudflare"],"persistence":[],"cli_commands":["agentsam rust","agentsam wasm"],"capabilities":["rust.scaffold","rust.check","rust.build","rust.dev","rust.deploy"]}',
+  unixepoch()
+)
+ON CONFLICT(slug) DO UPDATE SET
+  name=excluded.name,
+  kind=excluded.kind,
+  status=excluded.status,
+  description=excluded.description,
+  repository_id=COALESCE(excluded.repository_id,agentsam_products.repository_id),
+  canonical_path=excluded.canonical_path,
+  package_name=excluded.package_name,
+  version=excluded.version,
+  tags=excluded.tags,
+  metadata=excluded.metadata,
+  updated_at=excluded.updated_at;
+
+-- CMS product is packaged as the canonical editor app.
+INSERT INTO asset_relationships (
+  source_type, source_id, target_type, target_id, relationship_type, metadata
+)
+SELECT 'agentsam_product', cms.id, 'agentsam_product', editor.id, 'packaged_as',
+       '{"origin":"registry.cms-rust-machine-20260928","role":"editor_app"}'
+FROM agentsam_products cms, agentsam_products editor
+WHERE cms.slug='cms' AND editor.slug='client-cms-editor'
+ON CONFLICT(source_type,source_id,target_type,target_id,relationship_type)
+DO UPDATE SET metadata=excluded.metadata;
+
+-- Preserve the existing legacy product identity as an alias, not a second canonical editor.
+INSERT INTO asset_relationships (
+  source_type, source_id, target_type, target_id, relationship_type, metadata
+)
+SELECT 'agentsam_product', legacy.id, 'agentsam_product', editor.id, 'aliased_as',
+       '{"origin":"registry.cms-rust-machine-20260928","legacy_slug":"iam-client-cms-editor"}'
+FROM agentsam_products legacy, agentsam_products editor
+WHERE legacy.slug='iam-client-cms-editor' AND editor.slug='client-cms-editor'
+ON CONFLICT(source_type,source_id,target_type,target_id,relationship_type)
+DO UPDATE SET metadata=excluded.metadata;
+
+-- Harvested theme candidate belongs to the CMS product family.
+INSERT INTO asset_relationships (
+  source_type, source_id, target_type, target_id, relationship_type, metadata
+)
+SELECT 'agentsam_product', theme.id, 'agentsam_product', cms.id, 'depends_on',
+       '{"origin":"registry.cms-rust-machine-20260928","role":"cms_theme"}'
+FROM agentsam_products theme, agentsam_products cms
+WHERE theme.slug='theme-inneranimals-site' AND cms.slug='cms'
+ON CONFLICT(source_type,source_id,target_type,target_id,relationship_type)
+DO UPDATE SET metadata=excluded.metadata;
+
+-- Rapid Rust exposes the commands that are already mainline and tested.
+INSERT INTO asset_relationships (
+  source_type, source_id, target_type, target_id, relationship_type, metadata
+)
+SELECT 'agentsam_product', p.id, 'cli_command', 'agentsam:rust', 'exposes_command',
+       '{"origin":"registry.cms-rust-machine-20260928","command":"agentsam rust"}'
+FROM agentsam_products p
+WHERE p.slug='agentsam-rapid-rust'
+ON CONFLICT(source_type,source_id,target_type,target_id,relationship_type)
+DO UPDATE SET metadata=excluded.metadata;
+
+INSERT INTO asset_relationships (
+  source_type, source_id, target_type, target_id, relationship_type, metadata
+)
+SELECT 'agentsam_product', p.id, 'cli_command', 'agentsam:wasm', 'exposes_command',
+       '{"origin":"registry.cms-rust-machine-20260928","command":"agentsam wasm"}'
+FROM agentsam_products p
+WHERE p.slug='agentsam-rapid-rust'
+ON CONFLICT(source_type,source_id,target_type,target_id,relationship_type)
+DO UPDATE SET metadata=excluded.metadata;

package/registry/cms-rust-machine-20260928/receipt.json

@@ -0,0 +1,21 @@
+{
+  "schema": "agentsam.registry.receipt.v1",
+  "database": "inneranimalmedia-business",
+  "applied_at": "2026-09-28",
+  "validated": true,
+  "products": {
+    "cms": "wired",
+    "client-cms-editor": "scaffolded",
+    "theme-inneranimals-site": "prototype",
+    "asrust": "wired",
+    "agentsam-machine": "prototype",
+    "agentsam-rapid-rust": "prototype"
+  },
+  "relationships": [
+    ["cms", "packaged_as", "client-cms-editor"],
+    ["iam-client-cms-editor", "aliased_as", "client-cms-editor"],
+    ["theme-inneranimals-site", "depends_on", "cms"],
+    ["agentsam-rapid-rust", "exposes_command", "agentsam:rust"],
+    ["agentsam-rapid-rust", "exposes_command", "agentsam:wasm"]
+  ]
+}

package/registry/cms-rust-machine-20260928/receipt.sql

@@ -0,0 +1,27 @@
+SELECT slug,kind,status,canonical_path,package_name,
+       json_extract(metadata,'$.app_id') AS app_id,
+       json_extract(metadata,'$.legacy_slug') AS legacy_slug,
+       json_extract(metadata,'$.dispatch') AS dispatch
+FROM agentsam_products
+WHERE slug IN (
+  'cms',
+  'client-cms-editor',
+  'theme-inneranimals-site',
+  'asrust',
+  'agentsam-machine',
+  'agentsam-rapid-rust'
+)
+ORDER BY slug;
+
+SELECT p.slug AS source_slug,
+       ar.relationship_type,
+       CASE WHEN ar.target_type='agentsam_product' THEN tp.slug ELSE ar.target_id END AS target,
+       ar.target_type
+FROM asset_relationships ar
+JOIN agentsam_products p
+  ON ar.source_type='agentsam_product' AND ar.source_id=p.id
+LEFT JOIN agentsam_products tp
+  ON ar.target_type='agentsam_product' AND ar.target_id=tp.id
+WHERE p.slug IN ('cms','iam-client-cms-editor','theme-inneranimals-site','agentsam-rapid-rust')
+  AND ar.relationship_type IN ('packaged_as','aliased_as','depends_on','exposes_command')
+ORDER BY source_slug, ar.relationship_type, target;

package/scripts/build_rapid_rust_cli.py

@@ -0,0 +1,83 @@
+#!/usr/bin/env python3
+"""Build/install/smoke-test AgentSam Rapid Rust native CLI.
+
+Nothing here deploys a Worker. --bootstrap only installs local Rust/Wasm build
+prerequisites. --smoke scaffolds disposable projects and cargo-checks them.
+"""
+from __future__ import annotations
+import argparse, json, os, shutil, subprocess, sys, tempfile
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+MANIFEST = ROOT / "packages" / "agentsam-rapid-rust" / "Cargo.toml"
+BINARY = ROOT / "packages" / "agentsam-rapid-rust" / "target" / "release" / "agentsam-rapid-rust"
+WORKER_BUILD_VERSION = "0.8.7"
+TEMPLATES = ("api", "shared-core", "crypto-auth", "data-processor")
+
+def run(cmd, *, cwd=ROOT, check=True):
+    print("→", " ".join(map(str, cmd)))
+    return subprocess.run(list(map(str, cmd)), cwd=cwd, check=check)
+
+def have(cmd):
+    return shutil.which(cmd) is not None
+
+def bootstrap():
+    if not have("rustup") or not have("cargo"):
+        raise RuntimeError("Rust/rustup/cargo are required")
+    installed = subprocess.check_output(["rustup", "target", "list", "--installed"], text=True)
+    if "wasm32-unknown-unknown" not in installed.splitlines():
+        run(["rustup", "target", "add", "wasm32-unknown-unknown"])
+    if not have("worker-build"):
+        run(["cargo", "install", "worker-build", "--version", WORKER_BUILD_VERSION, "--locked"])
+
+def build():
+    run(["cargo", "fmt", "--manifest-path", MANIFEST, "--", "--check"])
+    run(["cargo", "test", "--manifest-path", MANIFEST])
+    run(["cargo", "build", "--release", "--manifest-path", MANIFEST])
+
+def install(dest: Path):
+    if not BINARY.exists():
+        build()
+    dest.mkdir(parents=True, exist_ok=True)
+    target = dest / "agentsam-rapid-rust-native"
+    tmp = dest / ".agentsam-rapid-rust-native.tmp"
+    shutil.copy2(BINARY, tmp)
+    tmp.chmod(0o755)
+    os.replace(tmp, target)
+    print("installed:", target)
+    return target
+
+def smoke(binary: Path):
+    bootstrap()
+    with tempfile.TemporaryDirectory(prefix="agentsam-rapid-rust-") as td:
+        root = Path(td)
+        for template in TEMPLATES:
+            name = "fixture-" + template
+            run([binary, "new", name, "--template", template, "--out", root])
+            project = root / name
+            run([binary, "check", "--cwd", project])
+
+def main():
+    ap=argparse.ArgumentParser(description=__doc__)
+    ap.add_argument("--bootstrap", action="store_true")
+    ap.add_argument("--build", action="store_true")
+    ap.add_argument("--install", action="store_true")
+    ap.add_argument("--install-dir", type=Path, default=Path.home()/".agentsam"/"bin")
+    ap.add_argument("--smoke", action="store_true")
+    ap.add_argument("--json", action="store_true")
+    args=ap.parse_args()
+    if not any((args.bootstrap,args.build,args.install,args.smoke)):
+        args.build=True
+    if args.bootstrap: bootstrap()
+    if args.build or args.install or args.smoke: build()
+    installed=None
+    if args.install: installed=install(args.install_dir.expanduser())
+    if args.smoke: smoke(installed or BINARY)
+    result={"ok":True,"binary":str(BINARY),"installed":str(installed) if installed else None,"smoke":args.smoke}
+    if args.json: print(json.dumps(result,indent=2))
+    return 0
+
+if __name__ == '__main__':
+    try: raise SystemExit(main())
+    except (RuntimeError, subprocess.CalledProcessError) as exc:
+        print("ERROR:", exc, file=sys.stderr); raise SystemExit(2)

package/src/attachments/index.js

@@ -0,0 +1,6 @@
+export {
+  intakeLocalPath,
+  extractAttachmentPathsFromText,
+  validateAttachmentModalities,
+  formatAttachmentChip,
+} from './intake.js';

package/src/attachments/intake.js

@@ -0,0 +1,235 @@
+/**
+ * Portable multimodal attachment intake (CLI + Local Studio).
+ * Authority: AgentAttachment references — never base64 in AgentInput.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+
+const IMAGE_EXT = new Set(['.png', '.jpg', '.jpeg', '.webp', '.gif', '.avif', '.heic', '.heif', '.svg']);
+
+function trySharp() {
+  try {
+    return require('sharp');
+  } catch {
+    return null;
+  }
+}
+
+function sha256Buffer(buf) {
+  return `sha256:${crypto.createHash('sha256').update(buf).digest('hex')}`;
+}
+
+function sniffMime(buf, filePath = '') {
+  if (buf?.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50) return 'image/png';
+  if (buf?.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) return 'image/jpeg';
+  if (buf?.length >= 12 && buf.toString('ascii', 0, 4) === 'RIFF' && buf.toString('ascii', 8, 12) === 'WEBP') {
+    return 'image/webp';
+  }
+  if (buf?.length >= 12 && buf.toString('ascii', 4, 8) === 'ftyp') return 'image/avif';
+  const ext = path.extname(filePath).toLowerCase();
+  if (ext === '.svg' || (buf && /<svg[\s>]/i.test(buf.toString('utf8', 0, 256)))) return 'image/svg+xml';
+  if (ext === '.gif') return 'image/gif';
+  if (ext === '.png') return 'image/png';
+  if (ext === '.jpg' || ext === '.jpeg') return 'image/jpeg';
+  if (ext === '.webp') return 'image/webp';
+  return 'application/octet-stream';
+}
+
+function kindFromMime(mime) {
+  if (String(mime).startsWith('image/')) return 'image';
+  if (String(mime).startsWith('audio/')) return 'audio';
+  if (String(mime).startsWith('video/')) return 'video';
+  if (String(mime).startsWith('text/')) return 'text';
+  return 'binary';
+}
+
+function nextTokenLabel(index) {
+  return `[Image #${index}]`;
+}
+
+/**
+ * Intake a local filesystem path into a structured AgentAttachment.
+ * Local-first: no Cloudflare required.
+ */
+export async function intakeLocalPath(filePath, {
+  lifetime = 'ephemeral',
+  workDir = path.join(os.tmpdir(), 'agentsam-attachments'),
+  maxPixels = 40_000_000,
+  inferenceLongEdge = 2048,
+  index = 1,
+} = {}) {
+  const abs = path.resolve(String(filePath).replace(/^@/, '').replace(/^['"]|['"]$/g, ''));
+  if (!fs.existsSync(abs)) {
+    const err = new Error(`attachment_missing:${abs}`);
+    err.code = 'attachment_missing';
+    throw err;
+  }
+  const buf = fs.readFileSync(abs);
+  const mimeType = sniffMime(buf, abs);
+  const kind = kindFromMime(mimeType);
+  const id = `att_${crypto.randomBytes(8).toString('hex')}`;
+  const sha256 = sha256Buffer(buf);
+  const name = path.basename(abs);
+
+  /** @type {import('../../agentsam-contracts/src/artifacts.ts').AgentAttachment} */
+  const attachment = {
+    id,
+    name,
+    mimeType,
+    size: buf.length,
+    kind,
+    source: { type: 'local_path', path: abs },
+    sha256,
+    lifetime,
+    metadata: {
+      token: kind === 'image' ? nextTokenLabel(index) : `[File #${index}]`,
+    },
+  };
+
+  if (kind === 'image' && mimeType !== 'image/svg+xml') {
+    const sharp = trySharp();
+    if (sharp) {
+      const meta = await sharp(buf, { failOn: 'none' }).metadata();
+      const width = meta.width || 0;
+      const height = meta.height || 0;
+      if (width * height > maxPixels) {
+        const err = new Error(`attachment_pixel_guard:${width}x${height}`);
+        err.code = 'attachment_pixel_guard';
+        throw err;
+      }
+      attachment.image = {
+        width,
+        height,
+        alpha: Boolean(meta.hasAlpha),
+        orientation: meta.orientation,
+      };
+
+      // Inference derivative — preserve original path as source
+      fs.mkdirSync(workDir, { recursive: true });
+      const inferPath = path.join(workDir, `${id}-inference.png`);
+      let pipeline = sharp(buf, { failOn: 'none' }).rotate();
+      const longEdge = Math.max(width, height);
+      if (longEdge > inferenceLongEdge) {
+        pipeline = pipeline.resize({
+          width: width >= height ? inferenceLongEdge : undefined,
+          height: height > width ? inferenceLongEdge : undefined,
+          fit: 'inside',
+          withoutEnlargement: true,
+        });
+      }
+      // Flatten transparent marks onto neutral for vision (keep original intact)
+      if (meta.hasAlpha) {
+        pipeline = pipeline.flatten({ background: { r: 32, g: 36, b: 44 } });
+      }
+      await pipeline.png().toFile(inferPath);
+      const inferStat = fs.statSync(inferPath);
+      const inferMeta = await sharp(inferPath).metadata();
+      attachment.inference = {
+        mimeType: 'image/png',
+        source: { type: 'local_path', path: inferPath },
+        width: inferMeta.width,
+        height: inferMeta.height,
+        bytes: inferStat.size,
+      };
+      attachment.preview = { localPath: inferPath };
+    } else {
+      attachment.metadata.capability_warning = {
+        status: 'blocked',
+        reason: 'capability_missing',
+        capability_id: 'image.raster.transform',
+        acceptable_backends: ['sharp', 'imagemagick'],
+      };
+    }
+  }
+
+  return attachment;
+}
+
+/**
+ * Parse CLI tokens for @path / absolute image paths dropped into the prompt.
+ * Returns { text, attachmentPaths }.
+ */
+export function extractAttachmentPathsFromText(text = '') {
+  const paths = [];
+  let cleaned = String(text || '');
+  // @./file or @/abs or @~/rel
+  cleaned = cleaned.replace(/(^|\s)@([^\s]+)/g, (full, lead, p) => {
+    const candidate = p.replace(/^['"]|['"]$/g, '');
+    const expanded = candidate.startsWith('~/')
+      ? path.join(os.homedir(), candidate.slice(2))
+      : path.resolve(candidate);
+    if (fs.existsSync(expanded) && IMAGE_EXT.has(path.extname(expanded).toLowerCase())) {
+      paths.push(expanded);
+      return `${lead}`;
+    }
+    return full;
+  });
+  // bare absolute/relative image path as sole token
+  cleaned = cleaned.replace(/(^|\s)(\/?[^\s]+\.(?:png|jpe?g|webp|gif|avif|heic|svg))\b/gi, (full, lead, p) => {
+    const expanded = p.startsWith('~/')
+      ? path.join(os.homedir(), p.slice(2))
+      : path.isAbsolute(p)
+        ? p
+        : path.resolve(p);
+    if (fs.existsSync(expanded)) {
+      paths.push(expanded);
+      return lead;
+    }
+    return full;
+  });
+  return {
+    text: cleaned.replace(/\s+/g, ' ').trim(),
+    attachmentPaths: [...new Set(paths)],
+  };
+}
+
+/**
+ * Validate selected model modalities against attachments.
+ * Fail closed — never silently swap models.
+ */
+export function validateAttachmentModalities({ attachments = [], model = {} } = {}) {
+  const modalities = new Set(model.input_modalities || model.inputModalities || ['text']);
+  const accepted = new Set(
+    model.attachment_policy?.accepted_mime_types
+      || model.acceptedMimeTypes
+      || (modalities.has('image') ? ['image/png', 'image/jpeg', 'image/webp', 'image/gif'] : []),
+  );
+  const images = attachments.filter((a) => a.kind === 'image' || String(a.mimeType || '').startsWith('image/'));
+  if (!images.length) return { ok: true, images: [] };
+  if (!modalities.has('image')) {
+    return {
+      ok: false,
+      code: 'model_rejects_image',
+      message: `${model.id || model.name || 'Selected model'} does not accept image input.`,
+      images,
+    };
+  }
+  for (const img of images) {
+    const mime = String(img.inference?.mimeType || img.mimeType || '');
+    if (accepted.size && mime && !accepted.has(mime) && !accepted.has(img.mimeType)) {
+      return {
+        ok: false,
+        code: 'mime_not_accepted',
+        message: `${model.id || 'Model'} does not accept ${mime || img.mimeType}.`,
+        images,
+      };
+    }
+  }
+  return { ok: true, images };
+}
+
+export function formatAttachmentChip(attachment) {
+  const token = attachment.metadata?.token || attachment.name;
+  const dims = attachment.image
+    ? `${attachment.image.width}×${attachment.image.height}`
+    : '—';
+  const kb = attachment.size < 1024
+    ? `${attachment.size} B`
+    : `${(attachment.size / 1024).toFixed(attachment.size >= 10240 ? 0 : 1)} KB`;
+  return `${token}  ${attachment.mimeType || 'unknown'} · ${dims} · ${kb}`;
+}

package/src/capabilities/repository-snapshot.js

@@ -4,7 +4,7 @@ import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 import { fileURLToPath } from 'node:url';
 import { createHash } from 'node:crypto';
-import { resolveGitContext } from '../../packages/agentsam-repository/src/git-context.js';
+import { tryResolveGitContext } from '../../packages/agentsam-repository/src/git-context.js';
 import { getRepositoryId, tryReadProjectConfig } from '../lib/project-config.js';
 import { buildMerkleTree } from '../../packages/agentsam-repository/src/merkle/index.js';
 import { gitIgnoredPaths } from '../../packages/agentsam-repository/src/merkle/git-ignore.js';
@@ -111,7 +111,23 @@ export async function repositorySnapshot({ cwd = process.cwd(), churnDays = 30 }
   if (!Number.isInteger(churnDays) || churnDays < 1 || churnDays > 3650) {
     throw new RangeError('churnDays must be an integer from 1..3650');
   }
-  const git = resolveGitContext({ cwd });
+  const requestedRoot = path.resolve(cwd);
+  if (!fs.existsSync(requestedRoot) || !fs.statSync(requestedRoot).isDirectory()) {
+    throw new Error(`repository_root_not_found:${requestedRoot}`);
+  }
+  const resolvedGit = tryResolveGitContext({ cwd: requestedRoot });
+  const git = resolvedGit || {
+    root: requestedRoot,
+    remoteUrl: '',
+    remoteHost: null,
+    repoFullName: null,
+    owner: null,
+    repo: null,
+    revisionSha: null,
+    branch: null,
+    detached: false,
+    dirty: null,
+  };
   const root = git.root;
   const ignored = await gitIgnoredPaths(root);
   const projectConfig = tryReadProjectConfig(root);
@@ -137,6 +153,7 @@ export async function repositorySnapshot({ cwd = process.cwd(), churnDays = 30 }
     repository: {
       repository_id: repositoryId,
       identity_source: projectRepositoryId ? 'project-config' : knowledge.repository_id ? 'knowledge-config' : portableRepositoryId ? 'git-remote' : 'unresolved',
+      source_kind: resolvedGit ? 'git' : 'filesystem',
       provider,
       full_name: git.repoFullName,
       remote_url: git.remoteUrl || null,