@mindstudio-ai/remy 0.1.251 → 0.1.252

package/dist/headless.js

@@ -828,6 +828,10 @@ Current date: ${now}
   {{compiled/media-cdn.md}}
   </media_cdn>
 
+  <app_files>
+  {{compiled/files.md}}
+  </app_files>
+
   <interfaces>
   {{compiled/interfaces.md}}
   </interfaces>
@@ -2002,6 +2006,7 @@ var compactConversationTool = {
 // src/tools/code/readFile.ts
 import fs12 from "fs/promises";
 var DEFAULT_WINDOW = 500;
+var MAX_BYTES = 64 * 1024;
 function isBinary(buffer) {
   const sample = buffer.subarray(0, 8192);
   for (let i = 0; i < sample.length; i++) {
@@ -2015,7 +2020,7 @@ var readFileTool = {
   clearable: true,
   definition: {
     name: "readFile",
-    description: "Read a file's contents with line numbers. Always read a file before editing it \u2014 never guess at contents. By default returns the first 500 lines. To read a specific range, pass startLine and endLine (1-indexed, inclusive) \u2014 e.g. to read lines 253\u2013343, pass startLine: 253, endLine: 343. To read the end of a file or log, pass tail (the number of lines from the end). Line numbers in the output correspond to what editFile expects. For a large file, locate the relevant section first (symbols or grep), then read just that range.",
+    description: "Read a file's contents with line numbers. Always read a file before editing it \u2014 never guess at contents. By default returns the first 500 lines, and at most 64KB \u2014 a file with very wide lines (a CSV, a minified bundle) comes back short of 500 lines, so read a narrower range or grep rather than paging through it. To read a specific range, pass startLine and endLine (1-indexed, inclusive) \u2014 e.g. to read lines 253\u2013343, pass startLine: 253, endLine: 343. To read the end of a file or log, pass tail (the number of lines from the end). Line numbers in the output correspond to what editFile expects. For a large file, locate the relevant section first (symbols or grep), then read just that range.",
     inputSchema: {
       type: "object",
       properties: {
@@ -2072,12 +2077,35 @@ var readFileTool = {
           endIdxExclusive = Math.min(startIdx + DEFAULT_WINDOW, totalLines);
         }
       }
-      const sliced = allLines.slice(startIdx, endIdxExclusive);
-      const numbered = sliced.map((line, i) => `${String(startIdx + i + 1).padStart(4)} ${line}`).join("\n");
-      let result = numbered;
+      const numberedLines = allLines.slice(startIdx, endIdxExclusive).map((line, i) => `${String(startIdx + i + 1).padStart(4)} ${line}`);
+      let kept = numberedLines;
+      let byteTruncated = false;
+      if (Buffer.byteLength(numberedLines.join("\n"), "utf-8") > MAX_BYTES) {
+        byteTruncated = true;
+        kept = [];
+        let used = 0;
+        for (const line of numberedLines) {
+          const cost = Buffer.byteLength(line, "utf-8") + (kept.length > 0 ? 1 : 0);
+          if (used + cost > MAX_BYTES) {
+            break;
+          }
+          kept.push(line);
+          used += cost;
+        }
+        if (kept.length === 0) {
+          kept = [
+            Buffer.from(numberedLines[0], "utf-8").subarray(0, MAX_BYTES).toString("utf-8")
+          ];
+        }
+      }
+      let result = kept.join("\n");
       const displayStart = startIdx + 1;
-      const displayEnd = startIdx + sliced.length;
-      if (displayStart > 1 || displayEnd < totalLines) {
+      const displayEnd = startIdx + kept.length;
+      if (byteTruncated) {
+        result += `
+
+(showing lines ${displayStart}\u2013${displayEnd} of ${totalLines}, truncated at ${(MAX_BYTES / 1024).toFixed(0)}KB \u2014 this file's lines are wide. Read a narrower range with startLine/endLine, or grep for what you need, instead of paging through it.)`;
+      } else if (displayStart > 1 || displayEnd < totalLines) {
         result += `
 
 (showing lines ${displayStart}\u2013${displayEnd} of ${totalLines} \u2014 pass startLine/endLine to read a different range)`;
@@ -6800,13 +6828,16 @@ async function runExtraction(apiConfig, model) {
   log11.info("Brand persisted", { inputHash });
   return brand;
 }
-function isBrandRelevant(filePath) {
-  if (filePath === path12.join("src", "app.md")) {
+function isDedicatedBrandFile(filePath) {
+  if (filePath.split(path12.sep).includes("@brand")) {
     return true;
   }
   const { type } = parseFrontmatter3(filePath);
   return type.startsWith("design/color") || type.startsWith("design/typography");
 }
+function isBrandRelevant(filePath) {
+  return filePath === path12.join("src", "app.md") || isDedicatedBrandFile(filePath);
+}
 function computeInputHash() {
   const entries = [];
   for (const filePath of walkMdFiles3("src")) {
@@ -6814,7 +6845,7 @@ function computeInputHash() {
       entries.push({ path: filePath, content: readSafe(filePath) });
     }
   }
-  const manifest = readSafe("mindstudio.json");
+  const manifest = readBrandManifest();
   if (manifest) {
     entries.push({ path: "mindstudio.json", content: manifest });
   }
@@ -6832,6 +6863,24 @@ function readSafe(filePath) {
     return "";
   }
 }
+function readBrandManifest() {
+  const raw = readSafe("mindstudio.json");
+  if (!raw) {
+    return "";
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    const projected = {};
+    for (const key of ["name", "description", "iconUrl"]) {
+      if (parsed[key] !== void 0) {
+        projected[key] = parsed[key];
+      }
+    }
+    return Object.keys(projected).length > 0 ? JSON.stringify(projected, null, 2) : "";
+  } catch {
+    return "";
+  }
+}
 function walkMdFiles3(dir) {
   const results = [];
   try {
@@ -6913,6 +6962,7 @@ async function extractBrand(apiConfig, model) {
   }
   return validateBrand(parsed);
 }
+var HEAD_SLICE_CHARS = 2e3;
 var BRAND_CORPUS_CHAR_LIMIT = 24e5;
 function buildCorpus() {
   const all = walkMdFiles3("src");
@@ -6921,14 +6971,17 @@ function buildCorpus() {
     ...all.filter((f) => !isBrandRelevant(f))
   ];
   const files = [];
-  const manifest = readSafe("mindstudio.json");
+  const manifest = readBrandManifest();
   if (manifest) {
     files.push({ path: "mindstudio.json", content: manifest });
   }
   for (const filePath of ordered) {
     const content = readSafe(filePath);
     if (content) {
-      files.push({ path: filePath, content });
+      files.push({
+        path: filePath,
+        content: isDedicatedBrandFile(filePath) ? content : headSlice(content)
+      });
     }
   }
   const sep = "\n\n---\n\n";
@@ -6950,6 +7003,14 @@ ${content}`;
   }
   return sections.join(sep);
 }
+function headSlice(content) {
+  if (content.length <= HEAD_SLICE_CHARS) {
+    return content;
+  }
+  return content.slice(0, HEAD_SLICE_CHARS) + `
+
+(head slice of a ${(content.length / 1024).toFixed(0)}KB spec \u2014 not a dedicated brand file, so only its opening is included)`;
+}
 function parseJsonResponse(text) {
   const trimmed = text.trim();
   const fenceMatch = trimmed.match(/^```(?:json)?\s*\n([\s\S]*?)\n```\s*$/);

package/dist/index.js

@@ -2755,16 +2755,17 @@ function isBinary(buffer) {
   }
   return false;
 }
-var DEFAULT_WINDOW, readFileTool;
+var DEFAULT_WINDOW, MAX_BYTES, readFileTool;
 var init_readFile = __esm({
   "src/tools/code/readFile.ts"() {
     "use strict";
     DEFAULT_WINDOW = 500;
+    MAX_BYTES = 64 * 1024;
     readFileTool = {
       clearable: true,
       definition: {
         name: "readFile",
-        description: "Read a file's contents with line numbers. Always read a file before editing it \u2014 never guess at contents. By default returns the first 500 lines. To read a specific range, pass startLine and endLine (1-indexed, inclusive) \u2014 e.g. to read lines 253\u2013343, pass startLine: 253, endLine: 343. To read the end of a file or log, pass tail (the number of lines from the end). Line numbers in the output correspond to what editFile expects. For a large file, locate the relevant section first (symbols or grep), then read just that range.",
+        description: "Read a file's contents with line numbers. Always read a file before editing it \u2014 never guess at contents. By default returns the first 500 lines, and at most 64KB \u2014 a file with very wide lines (a CSV, a minified bundle) comes back short of 500 lines, so read a narrower range or grep rather than paging through it. To read a specific range, pass startLine and endLine (1-indexed, inclusive) \u2014 e.g. to read lines 253\u2013343, pass startLine: 253, endLine: 343. To read the end of a file or log, pass tail (the number of lines from the end). Line numbers in the output correspond to what editFile expects. For a large file, locate the relevant section first (symbols or grep), then read just that range.",
         inputSchema: {
           type: "object",
           properties: {
@@ -2821,12 +2822,35 @@ var init_readFile = __esm({
               endIdxExclusive = Math.min(startIdx + DEFAULT_WINDOW, totalLines);
             }
           }
-          const sliced = allLines.slice(startIdx, endIdxExclusive);
-          const numbered = sliced.map((line, i) => `${String(startIdx + i + 1).padStart(4)} ${line}`).join("\n");
-          let result = numbered;
+          const numberedLines = allLines.slice(startIdx, endIdxExclusive).map((line, i) => `${String(startIdx + i + 1).padStart(4)} ${line}`);
+          let kept = numberedLines;
+          let byteTruncated = false;
+          if (Buffer.byteLength(numberedLines.join("\n"), "utf-8") > MAX_BYTES) {
+            byteTruncated = true;
+            kept = [];
+            let used = 0;
+            for (const line of numberedLines) {
+              const cost = Buffer.byteLength(line, "utf-8") + (kept.length > 0 ? 1 : 0);
+              if (used + cost > MAX_BYTES) {
+                break;
+              }
+              kept.push(line);
+              used += cost;
+            }
+            if (kept.length === 0) {
+              kept = [
+                Buffer.from(numberedLines[0], "utf-8").subarray(0, MAX_BYTES).toString("utf-8")
+              ];
+            }
+          }
+          let result = kept.join("\n");
           const displayStart = startIdx + 1;
-          const displayEnd = startIdx + sliced.length;
-          if (displayStart > 1 || displayEnd < totalLines) {
+          const displayEnd = startIdx + kept.length;
+          if (byteTruncated) {
+            result += `
+
+(showing lines ${displayStart}\u2013${displayEnd} of ${totalLines}, truncated at ${(MAX_BYTES / 1024).toFixed(0)}KB \u2014 this file's lines are wide. Read a narrower range with startLine/endLine, or grep for what you need, instead of paging through it.)`;
+          } else if (displayStart > 1 || displayEnd < totalLines) {
             result += `
 
 (showing lines ${displayStart}\u2013${displayEnd} of ${totalLines} \u2014 pass startLine/endLine to read a different range)`;
@@ -7445,13 +7469,16 @@ async function runExtraction(apiConfig, model) {
   log10.info("Brand persisted", { inputHash });
   return brand;
 }
-function isBrandRelevant(filePath) {
-  if (filePath === path10.join("src", "app.md")) {
+function isDedicatedBrandFile(filePath) {
+  if (filePath.split(path10.sep).includes("@brand")) {
     return true;
   }
   const { type } = parseFrontmatter2(filePath);
   return type.startsWith("design/color") || type.startsWith("design/typography");
 }
+function isBrandRelevant(filePath) {
+  return filePath === path10.join("src", "app.md") || isDedicatedBrandFile(filePath);
+}
 function computeInputHash() {
   const entries = [];
   for (const filePath of walkMdFiles2("src")) {
@@ -7459,7 +7486,7 @@ function computeInputHash() {
       entries.push({ path: filePath, content: readSafe(filePath) });
     }
   }
-  const manifest = readSafe("mindstudio.json");
+  const manifest = readBrandManifest();
   if (manifest) {
     entries.push({ path: "mindstudio.json", content: manifest });
   }
@@ -7477,6 +7504,24 @@ function readSafe(filePath) {
     return "";
   }
 }
+function readBrandManifest() {
+  const raw = readSafe("mindstudio.json");
+  if (!raw) {
+    return "";
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    const projected = {};
+    for (const key of ["name", "description", "iconUrl"]) {
+      if (parsed[key] !== void 0) {
+        projected[key] = parsed[key];
+      }
+    }
+    return Object.keys(projected).length > 0 ? JSON.stringify(projected, null, 2) : "";
+  } catch {
+    return "";
+  }
+}
 function walkMdFiles2(dir) {
   const results = [];
   try {
@@ -7565,14 +7610,17 @@ function buildCorpus() {
     ...all.filter((f) => !isBrandRelevant(f))
   ];
   const files = [];
-  const manifest = readSafe("mindstudio.json");
+  const manifest = readBrandManifest();
   if (manifest) {
     files.push({ path: "mindstudio.json", content: manifest });
   }
   for (const filePath of ordered) {
     const content = readSafe(filePath);
     if (content) {
-      files.push({ path: filePath, content });
+      files.push({
+        path: filePath,
+        content: isDedicatedBrandFile(filePath) ? content : headSlice(content)
+      });
     }
   }
   const sep = "\n\n---\n\n";
@@ -7594,6 +7642,14 @@ ${content}`;
   }
   return sections.join(sep);
 }
+function headSlice(content) {
+  if (content.length <= HEAD_SLICE_CHARS) {
+    return content;
+  }
+  return content.slice(0, HEAD_SLICE_CHARS) + `
+
+(head slice of a ${(content.length / 1024).toFixed(0)}KB spec \u2014 not a dedicated brand file, so only its opening is included)`;
+}
 function parseJsonResponse(text) {
   const trimmed = text.trim();
   const fenceMatch = trimmed.match(/^```(?:json)?\s*\n([\s\S]*?)\n```\s*$/);
@@ -7709,7 +7765,7 @@ function readCache() {
     return null;
   }
 }
-var log10, EXTRACT_PROMPT, BRAND_FILE, CACHE_FILE, BRAND_CORPUS_CHAR_LIMIT;
+var log10, EXTRACT_PROMPT, BRAND_FILE, CACHE_FILE, HEAD_SLICE_CHARS, BRAND_CORPUS_CHAR_LIMIT;
 var init_brandExtraction = __esm({
   "src/brandExtraction/index.ts"() {
     "use strict";
@@ -7721,6 +7777,7 @@ var init_brandExtraction = __esm({
     EXTRACT_PROMPT = readAsset("brandExtraction", "extract.md");
     BRAND_FILE = ".remy-brand.json";
     CACHE_FILE = ".remy-brand.cache.json";
+    HEAD_SLICE_CHARS = 2e3;
     BRAND_CORPUS_CHAR_LIMIT = 24e5;
   }
 });
@@ -8600,6 +8657,10 @@ Current date: ${now}
   {{compiled/media-cdn.md}}
   </media_cdn>
 
+  <app_files>
+  {{compiled/files.md}}
+  </app_files>
+
   <interfaces>
   {{compiled/interfaces.md}}
   </interfaces>

package/dist/prompt/compiled/files.md

@@ -0,0 +1,95 @@
+# Files & Storage
+
+Per-app blob storage — the twin of `db` (`db` stores rows; `files` stores files: user uploads,
+generated documents, images, marketing assets). **Private by default.** Files serve on the app's own
+domain.
+
+**File stores are always live — there is no dev copy.** Every `put`/`delete`/overwrite hits
+production storage immediately and irreversibly. And unlike the database, **scenarios never reset file
+stores** — a scenario truncates DB tables but leaves files untouched, so files are not a "clean slate"
+you can re-seed, and orphaned files accumulate across runs. Delete deliberately.
+
+## Defining a store
+
+Like `db.defineTable`, define at module scope and import into methods. Access is pinned at define
+time.
+
+```typescript
+import { files } from '@mindstudio-ai/agent';
+
+export const Uploads = files.defineStore('uploads');                       // private (default)
+export const Assets  = files.defineStore('assets', { access: 'public' });  // world-readable + CDN
+// optional upload policy: files.defineStore('uploads', { maxSize, contentTypes })
+```
+
+Store names: lowercase `[a-z0-9_-]`, ≤ 64 chars. Keys are paths within the store (`reports/q1.pdf`).
+
+## Backend (`@mindstudio-ai/agent`)
+
+```typescript
+import { Uploads } from './files/uploads';
+
+// Store bytes the backend produced; hand file.url to the frontend.
+const file = await Reports.put(pdfBuffer, { contentType: 'application/pdf', filename: 'q1.pdf' });
+file.url;   // stable, on-domain URL for <img>/<a>/fetch (private → app-session-authed)
+
+const bytes = await Uploads.get(key);          // Buffer — backend-side read (parse it, feed a model)
+await Uploads.head(key);                        // metadata; .exists(key) → boolean
+const { files, cursor } = await Uploads.list({ prefix: 'reports/', limit: 100 });
+await Uploads.delete(key);
+```
+
+- `put(content, { key?, contentType?, filename?, contentAddressed? })` → `StoredFile`
+  (`{ key, url, size?, contentType?, updatedAt?, shareUrl() }`). Omit `key` → UUID;
+  `contentAddressed: true` → a `<sha256>.<ext>` key (immutable/idempotent, for baked-in public assets).
+- **`file.url`** is a plain relative string — don't await it. To display a user *their own* file, hand
+  them `file.url`; don't `get()` the bytes and stream them yourself.
+- **`await file.shareUrl({ expiresIn })`** → an absolute signed link that works with **no session**
+  (email / cross-site embed). Private stores only; default 24h.
+
+## User uploads (client-direct — bytes never go through the backend)
+
+Backend mints a token; the browser uploads straight to storage:
+
+```typescript
+// backend method
+export async function getUploadSlot(input: { filename: string; contentType: string }) {
+  return Uploads.createUploadToken({ contentType: input.contentType, maxSize: 25 * 1024 * 1024 });
+}
+```
+```typescript
+// frontend (@mindstudio-ai/interface)
+import { createClient, platform } from '@mindstudio-ai/interface';
+const api = createClient();
+const token = await api.getUploadSlot({ filename: file.name, contentType: file.type });
+const { key, url } = await platform.upload(token, file, { onProgress: (f) => setProgress(f) });
+```
+
+## Public assets + image resizing
+
+Public files are world-readable, on the app's domain, and **images resize via query params**
+(`?w=&h=&fit=&crop=&fm=&dpr=&q=&blur=&sharpen=` — same vocabulary as the image CDN; set `dpr=2/3` for
+retina). Request the size you need rather than CSS-scaling a full-res original.
+
+Lightweight-config pattern: a public store + a stable `key` is a file the frontend can `fetch` with no
+DB hit and the backend can overwrite (`Config.put(json, { key: 'config/latest.json' })`).
+
+## Build-time / marketing assets
+
+Need an image on the site (hero, logo, OG image)? **Never commit binaries to the repo** — it bloats
+git. Upload once and embed the returned URL:
+
+```bash
+mindstudio-prod files put --public ./hero.jpg   # → { url, key } — content-addressed, immutable
+```
+Write that URL into your JSX/HTML. Also: `files list`, `files rm --store … --key …` (`--help` for flags).
+
+## When public vs private
+
+- **Private (default):** user uploads, generated docs, anything not world-readable. Reads are authed
+  (the app session) or a short-lived `shareUrl`.
+- **Public:** marketing images, resizable media, config the frontend reads. Deliberate `access:
+  'public'`.
+
+Per-user access is the app's job — key files per user (`{userId}/…`) and hand each user only their own
+URLs; the platform authorizes at the app level, not per file.

package/dist/subagents/codeSanityCheck/prompt.md

@@ -88,6 +88,8 @@ When a plan includes multiple screens/API calls, always note this item for the d
 
 - **Hardcoded credentials.** If the plan or code contains API keys, tokens, or connection strings inline, flag it — these should be `process.env` secrets managed via the dashboard. Also flag if the plan uses `process.env` for something the MindStudio SDK already handles (AI model keys, email/SMS sending, etc.).
 
+- **Don't use `agent.uploadFile()` from @mindstudio-ai/agent SDK** — that's the legacy v1 public CDN. Use `files`.
+
 ### Other things to note
 
 If you get a whiff of any of the following, make a note for the developer:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindstudio-ai/remy",
-  "version": "0.1.251",
+  "version": "0.1.252",
   "description": "Remy coding agent",
   "repository": {
     "type": "git",