@mindstudio-ai/remy 0.1.316 → 0.1.318

package/dist/headless.d.ts

@@ -137,6 +137,7 @@ declare class HeadlessSession {
      */
     private runForcedCompactionIfNeeded;
     private onBackgroundComplete;
+    private awaitExternalToolResult;
     private resolveExternalTool;
     private onEvent;
     /**
@@ -149,6 +150,21 @@ declare class HeadlessSession {
      * filename de-dup set is per-call, so parallel calls race on names.
      */
     private persistEntryAttachments;
+    /**
+     * promptUser `file` answers arrive as private-upload descriptors
+     * ({url, key, filename, extractedTextUrl}) — the same shape as a chat
+     * attachment. Download them to src/.user-uploads/ and rewrite each answer to
+     * the local path(s) BEFORE the result settles, so the model, the tool block,
+     * the saved session and the frontend transcript all see paths and never a
+     * signed url that dies in an hour. Non-file answers, dismissals and anything
+     * unparseable pass through untouched.
+     *
+     * Runs while the turn is blocked on this tool, so it can't overlap the
+     * turn's own persistEntryAttachments; the ASAP/queue persist paths only run
+     * after the tool batch settles. One prompt is open at a time, so two results
+     * can't race either.
+     */
+    private persistPromptUserUploads;
     /**
      * Stable id for a queued chain step, so the frontend can address one (to
      * discard a paused pipeline) rather than waiting for drainQueueLoop to

package/dist/headless.js

@@ -525,6 +525,8 @@ var TEXT_MODELS = {
   "grok-4.6": { forceCompactAt: 4e5 },
   // 500K window
   "glm-5.2": { forceCompactAt: 85e4 },
+  "glm-5.3": { forceCompactAt: 85e4 },
+  "glm-5.3-flash": { forceCompactAt: 85e4 },
   "muse-spark-1.1": { forceCompactAt: 85e4 },
   "muse-spark-1.2": { forceCompactAt: 85e4 },
   "muse-spark-1.3": { forceCompactAt: 85e4 },
@@ -1590,7 +1592,7 @@ var promptUserTool = {
               type: {
                 type: "string",
                 enum: ["select", "checklist", "text", "file"],
-                description: 'select: pick one from a list. checklist: pick one or more from a list. The user can always provide a custom "Other" answer for select and checklist questions, so there is no need to include an "Other" option. text: free-form input. file: file/image upload, returns CDN URL(s) that can be referenced directly or curled onto disk.'
+                description: 'select: pick one from a list. checklist: pick one or more from a list. The user can always provide a custom "Other" answer for select and checklist questions, so there is no need to include an "Other" option. text: free-form input. file: file/image upload. The answer is the local path (string) under src/.user-uploads/ \u2014 the file is already downloaded to disk. Documents may have an extracted-text sidecar at <path>.txt. Reference the path directly; pass image paths straight to analyzeImage / screenshot tools.'
               },
               helpText: {
                 type: "string",
@@ -1625,7 +1627,7 @@ var promptUserTool = {
               },
               multiple: {
                 type: "boolean",
-                description: "For file type: allow multiple uploads (returns array of URLs). Defaults to false."
+                description: "For file type: allow multiple uploads (the answer is an array of local paths). Defaults to false."
               },
               format: {
                 type: "string",
@@ -9601,10 +9603,10 @@ function isImageAttachment(att) {
   const name = att.filename || filenameFromUrl(att.url);
   return IMAGE_EXTENSIONS.has(extname3(name).toLowerCase());
 }
-async function persistAttachments(attachments) {
+async function persistAttachmentList(attachments) {
   const nonVoice = attachments.filter((a) => !a.isVoice);
   if (nonVoice.length === 0) {
-    return { documents: [], images: [] };
+    return [];
   }
   mkdirSync(UPLOADS_DIR, { recursive: true });
   const claimed = /* @__PURE__ */ new Set();
@@ -9655,8 +9657,13 @@ async function persistAttachments(attachments) {
       };
     })
   );
-  const settled = results.map((r, i) => ({
-    result: r.status === "fulfilled" ? r.value : null,
+  return results.map((r) => r.status === "fulfilled" ? r.value : null);
+}
+async function persistAttachments(attachments) {
+  const nonVoice = attachments.filter((a) => !a.isVoice);
+  const results = await persistAttachmentList(nonVoice);
+  const settled = results.map((result, i) => ({
+    result,
     isImage: isImageAttachment(nonVoice[i])
   }));
   return {
@@ -10345,7 +10352,7 @@ var HeadlessSession = class {
   //////////////////////////////////////////////////////////////////////////////
   // External tool bridge
   //////////////////////////////////////////////////////////////////////////////
-  resolveExternalTool = (id, name, _input) => {
+  awaitExternalToolResult = (id, name) => {
     const early = this.earlyResults.get(id);
     if (early !== void 0) {
       this.earlyResults.delete(id);
@@ -10369,6 +10376,13 @@ var HeadlessSession = class {
       });
     });
   };
+  // promptUser answers carry private-upload descriptors for `file` questions;
+  // persist them to disk and hand the model local paths (see
+  // persistPromptUserUploads). Every other external tool passes through.
+  resolveExternalTool = (id, name, input) => {
+    const result = this.awaitExternalToolResult(id, name);
+    return name === "promptUser" ? result.then((raw) => this.persistPromptUserUploads(input, raw)) : result;
+  };
   //////////////////////////////////////////////////////////////////////////////
   // AgentEvent → wire protocol translation
   //////////////////////////////////////////////////////////////////////////////
@@ -10574,6 +10588,87 @@ var HeadlessSession = class {
       return void 0;
     }
   }
+  /**
+   * promptUser `file` answers arrive as private-upload descriptors
+   * ({url, key, filename, extractedTextUrl}) — the same shape as a chat
+   * attachment. Download them to src/.user-uploads/ and rewrite each answer to
+   * the local path(s) BEFORE the result settles, so the model, the tool block,
+   * the saved session and the frontend transcript all see paths and never a
+   * signed url that dies in an hour. Non-file answers, dismissals and anything
+   * unparseable pass through untouched.
+   *
+   * Runs while the turn is blocked on this tool, so it can't overlap the
+   * turn's own persistEntryAttachments; the ASAP/queue persist paths only run
+   * after the tool batch settles. One prompt is open at a time, so two results
+   * can't race either.
+   */
+  async persistPromptUserUploads(input, raw) {
+    let answers;
+    try {
+      answers = JSON.parse(raw);
+    } catch {
+      return raw;
+    }
+    if (!answers || typeof answers !== "object" || Array.isArray(answers) || answers._dismissed) {
+      return raw;
+    }
+    const isDescriptor = (d) => !!d && typeof d === "object" && typeof d.url === "string";
+    const questions = Array.isArray(input?.questions) ? input.questions : [];
+    const batch = [];
+    const slots = [];
+    for (const q of questions) {
+      if (q?.type !== "file" || typeof q.id !== "string") {
+        continue;
+      }
+      const val = answers[q.id];
+      const items = (Array.isArray(val) ? val : [val]).filter(isDescriptor);
+      if (items.length === 0) {
+        continue;
+      }
+      slots.push({
+        id: q.id,
+        isArray: Array.isArray(val),
+        count: items.length
+      });
+      for (const d of items) {
+        batch.push({
+          url: d.url,
+          key: d.key,
+          filename: d.filename,
+          extractedTextUrl: d.extractedTextUrl ?? void 0
+        });
+      }
+    }
+    if (batch.length === 0) {
+      return raw;
+    }
+    let results;
+    try {
+      results = await persistAttachmentList(batch);
+    } catch (err) {
+      log17.warn("promptUser upload persistence failed", {
+        error: err.message
+      });
+      results = batch.map(() => null);
+    }
+    let cursor = 0;
+    for (const slot of slots) {
+      const paths = results.slice(cursor, cursor + slot.count).map((r, i) => {
+        if (r) {
+          return r.localPath;
+        }
+        const att = batch[cursor + i];
+        log17.warn("promptUser upload not persisted; falling back to url", {
+          filename: att.filename
+        });
+        return att.url;
+      });
+      cursor += slot.count;
+      answers[slot.id] = slot.isArray ? paths : paths[0];
+    }
+    log17.info("promptUser uploads persisted", { count: batch.length });
+    return JSON.stringify(answers);
+  }
   /**
    * Stable id for a queued chain step, so the frontend can address one (to
    * discard a paused pipeline) rather than waiting for drainQueueLoop to

package/dist/index.js

@@ -1064,7 +1064,7 @@ var init_promptUser = __esm({
                   type: {
                     type: "string",
                     enum: ["select", "checklist", "text", "file"],
-                    description: 'select: pick one from a list. checklist: pick one or more from a list. The user can always provide a custom "Other" answer for select and checklist questions, so there is no need to include an "Other" option. text: free-form input. file: file/image upload, returns CDN URL(s) that can be referenced directly or curled onto disk.'
+                    description: 'select: pick one from a list. checklist: pick one or more from a list. The user can always provide a custom "Other" answer for select and checklist questions, so there is no need to include an "Other" option. text: free-form input. file: file/image upload. The answer is the local path (string) under src/.user-uploads/ \u2014 the file is already downloaded to disk. Documents may have an extracted-text sidecar at <path>.txt. Reference the path directly; pass image paths straight to analyzeImage / screenshot tools.'
                   },
                   helpText: {
                     type: "string",
@@ -1099,7 +1099,7 @@ var init_promptUser = __esm({
                   },
                   multiple: {
                     type: "boolean",
-                    description: "For file type: allow multiple uploads (returns array of URLs). Defaults to false."
+                    description: "For file type: allow multiple uploads (the answer is an array of local paths). Defaults to false."
                   },
                   format: {
                     type: "string",
@@ -2142,6 +2142,8 @@ var init_surfaces = __esm({
       "grok-4.6": { forceCompactAt: 4e5 },
       // 500K window
       "glm-5.2": { forceCompactAt: 85e4 },
+      "glm-5.3": { forceCompactAt: 85e4 },
+      "glm-5.3-flash": { forceCompactAt: 85e4 },
       "muse-spark-1.1": { forceCompactAt: 85e4 },
       "muse-spark-1.2": { forceCompactAt: 85e4 },
       "muse-spark-1.3": { forceCompactAt: 85e4 },
@@ -10552,10 +10554,10 @@ function isImageAttachment(att) {
   const name = att.filename || filenameFromUrl(att.url);
   return IMAGE_EXTENSIONS.has(extname3(name).toLowerCase());
 }
-async function persistAttachments(attachments) {
+async function persistAttachmentList(attachments) {
   const nonVoice = attachments.filter((a) => !a.isVoice);
   if (nonVoice.length === 0) {
-    return { documents: [], images: [] };
+    return [];
   }
   mkdirSync(UPLOADS_DIR, { recursive: true });
   const claimed = /* @__PURE__ */ new Set();
@@ -10606,8 +10608,13 @@ async function persistAttachments(attachments) {
       };
     })
   );
-  const settled = results.map((r, i) => ({
-    result: r.status === "fulfilled" ? r.value : null,
+  return results.map((r) => r.status === "fulfilled" ? r.value : null);
+}
+async function persistAttachments(attachments) {
+  const nonVoice = attachments.filter((a) => !a.isVoice);
+  const results = await persistAttachmentList(nonVoice);
+  const settled = results.map((result, i) => ({
+    result,
     isImage: isImageAttachment(nonVoice[i])
   }));
   return {
@@ -11353,7 +11360,7 @@ var init_headless = __esm({
       //////////////////////////////////////////////////////////////////////////////
       // External tool bridge
       //////////////////////////////////////////////////////////////////////////////
-      resolveExternalTool = (id, name, _input) => {
+      awaitExternalToolResult = (id, name) => {
         const early = this.earlyResults.get(id);
         if (early !== void 0) {
           this.earlyResults.delete(id);
@@ -11377,6 +11384,13 @@ var init_headless = __esm({
           });
         });
       };
+      // promptUser answers carry private-upload descriptors for `file` questions;
+      // persist them to disk and hand the model local paths (see
+      // persistPromptUserUploads). Every other external tool passes through.
+      resolveExternalTool = (id, name, input) => {
+        const result = this.awaitExternalToolResult(id, name);
+        return name === "promptUser" ? result.then((raw) => this.persistPromptUserUploads(input, raw)) : result;
+      };
       //////////////////////////////////////////////////////////////////////////////
       // AgentEvent → wire protocol translation
       //////////////////////////////////////////////////////////////////////////////
@@ -11582,6 +11596,87 @@ var init_headless = __esm({
           return void 0;
         }
       }
+      /**
+       * promptUser `file` answers arrive as private-upload descriptors
+       * ({url, key, filename, extractedTextUrl}) — the same shape as a chat
+       * attachment. Download them to src/.user-uploads/ and rewrite each answer to
+       * the local path(s) BEFORE the result settles, so the model, the tool block,
+       * the saved session and the frontend transcript all see paths and never a
+       * signed url that dies in an hour. Non-file answers, dismissals and anything
+       * unparseable pass through untouched.
+       *
+       * Runs while the turn is blocked on this tool, so it can't overlap the
+       * turn's own persistEntryAttachments; the ASAP/queue persist paths only run
+       * after the tool batch settles. One prompt is open at a time, so two results
+       * can't race either.
+       */
+      async persistPromptUserUploads(input, raw) {
+        let answers;
+        try {
+          answers = JSON.parse(raw);
+        } catch {
+          return raw;
+        }
+        if (!answers || typeof answers !== "object" || Array.isArray(answers) || answers._dismissed) {
+          return raw;
+        }
+        const isDescriptor = (d) => !!d && typeof d === "object" && typeof d.url === "string";
+        const questions = Array.isArray(input?.questions) ? input.questions : [];
+        const batch = [];
+        const slots = [];
+        for (const q of questions) {
+          if (q?.type !== "file" || typeof q.id !== "string") {
+            continue;
+          }
+          const val = answers[q.id];
+          const items = (Array.isArray(val) ? val : [val]).filter(isDescriptor);
+          if (items.length === 0) {
+            continue;
+          }
+          slots.push({
+            id: q.id,
+            isArray: Array.isArray(val),
+            count: items.length
+          });
+          for (const d of items) {
+            batch.push({
+              url: d.url,
+              key: d.key,
+              filename: d.filename,
+              extractedTextUrl: d.extractedTextUrl ?? void 0
+            });
+          }
+        }
+        if (batch.length === 0) {
+          return raw;
+        }
+        let results;
+        try {
+          results = await persistAttachmentList(batch);
+        } catch (err) {
+          log17.warn("promptUser upload persistence failed", {
+            error: err.message
+          });
+          results = batch.map(() => null);
+        }
+        let cursor = 0;
+        for (const slot of slots) {
+          const paths = results.slice(cursor, cursor + slot.count).map((r, i) => {
+            if (r) {
+              return r.localPath;
+            }
+            const att = batch[cursor + i];
+            log17.warn("promptUser upload not persisted; falling back to url", {
+              filename: att.filename
+            });
+            return att.url;
+          });
+          cursor += slot.count;
+          answers[slot.id] = slot.isArray ? paths : paths[0];
+        }
+        log17.info("promptUser uploads persisted", { count: batch.length });
+        return JSON.stringify(answers);
+      }
       /**
        * Stable id for a queued chain step, so the frontend can address one (to
        * discard a paused pipeline) rather than waiting for drainQueueLoop to

package/dist/prompt/compiled/tables.md

@@ -216,6 +216,8 @@ const rows = await db.sql<{ questionId: string; n: number }>(
 
 `SELECT`/`WITH` only — writes throw; use Table methods for writes. Positional `?` bind params. Lazy and batchable via `db.batch()`. Raw rows come back close to how SQLite stores them and may not exactly match the typed API's representations.
 
+Every read, typed or raw, returns at most 100,000 rows or 64MB of JSON; past either limit the query fails with `result_too_large`. Paginate, select fewer columns, or use an aggregate instead.
+
 ### Updating Records
 
 ```typescript

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindstudio-ai/remy",
-  "version": "0.1.316",
+  "version": "0.1.318",
   "description": "Remy coding agent",
   "repository": {
     "type": "git",