@prismer/runtime 1.9.6 → 1.9.21

package/dist/index.cjs

@@ -5,6 +5,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
@@ -27,118 +30,711 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/index.ts
-var src_exports = {};
-__export(src_exports, {
-  AdapterRegistry: () => AdapterRegistry,
-  AssetCache: () => AssetCache,
-  BUILTIN_ROLE_TEMPLATES: () => BUILTIN_ROLE_TEMPLATES,
-  CloudClient: () => CloudClient,
-  CloudError: () => CloudError,
-  ConfigSchema: () => ConfigSchema,
-  LocalServer: () => LocalServer,
-  ParseClaimController: () => ParseClaimController,
-  Runner: () => Runner,
-  ServicePool: () => ServicePool,
-  SyncQueue: () => SyncQueue,
-  SyncWorker: () => SyncWorker,
-  TARGET_SCHEMA_VERSION: () => TARGET_SCHEMA_VERSION,
-  UriResolver: () => UriResolver,
-  WS_CLOSE: () => WS_CLOSE,
-  WorkspaceMirror: () => WorkspaceMirror,
-  WsClient: () => WsClient,
-  buildProgram: () => buildProgram,
-  claudeCodeAdapter: () => claudeCodeAdapter,
-  codexAdapter: () => codexAdapter,
-  composePrompt: () => composePrompt,
-  configExists: () => configExists,
-  currentSchemaVersion: () => currentSchemaVersion,
-  deriveWsUrl: () => deriveWsUrl,
-  envelope: () => envelope,
-  getRoleTemplate: () => getRoleTemplate,
-  handleDispatch: () => handleDispatch,
-  hermesAdapter: () => hermesAdapter,
-  isDaemonId: () => isDaemonId,
-  listRoleTemplates: () => listRoleTemplates,
-  loadConfig: () => loadConfig,
-  newDaemonId: () => newDaemonId,
-  nextBackoffMs: () => nextBackoffMs,
-  openLocalDb: () => openLocalDb,
-  pair: () => pair,
-  parseCodexOutput: () => parseCodexOutput,
-  parseUris: () => parseUris,
-  resolvePaths: () => resolvePaths,
-  runCli: () => runCli,
-  runMigrations: () => runMigrations,
-  saveConfig: () => saveConfig
-});
-module.exports = __toCommonJS(src_exports);
-
-// src/adapters/registry.ts
-var AdapterRegistry = class {
-  adapters = /* @__PURE__ */ new Map();
-  register(adapter) {
-    if (!adapter.name || typeof adapter.name !== "string") {
-      throw new Error("AdapterRegistry.register: adapter.name required");
-    }
-    const hasDispatch = typeof adapter.dispatch === "function";
-    const hasEnsureService = typeof adapter.ensureService === "function";
-    if (!hasDispatch && !hasEnsureService) {
-      throw new Error(
-        `AdapterRegistry.register: adapter "${adapter.name}" must implement dispatch() (interactive) or ensureService() (long-running)`
-      );
-    }
-    this.adapters.set(adapter.name, adapter);
-  }
-  unregister(name) {
-    return this.adapters.delete(name);
-  }
-  has(name) {
-    return this.adapters.has(name);
-  }
-  get(name) {
-    return this.adapters.get(name);
+// src/cli/ui.ts
+function thisDirname() {
+  try {
+    return path6.dirname((0, import_node_url.fileURLToPath)(import_meta2.url));
+  } catch {
+    return process.cwd();
   }
-  list() {
-    return Array.from(this.adapters.values());
+}
+function findIconPath(size = "big") {
+  const name = size === "big" ? "icon" : "smallicon";
+  const here = thisDirname();
+  const candidates = [
+    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
+    path6.resolve(here, "../assets", name),
+    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
+    path6.resolve(here, "../../assets", name),
+    // source/typecheck: src/cli/ui.ts → ../../assets
+    path6.resolve(here, "../../assets", name),
+    // dev mode: cwd happens to be runtime root
+    path6.resolve(process.cwd(), "assets", name),
+    path6.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
+  ];
+  for (const candidate of candidates) {
+    try {
+      if (fs4.existsSync(candidate)) return candidate;
+    } catch {
+    }
   }
-  size() {
-    return this.adapters.size;
+  return null;
+}
+function getUI() {
+  if (!_ui) _ui = new UI();
+  return _ui;
+}
+function setUI(ui) {
+  _ui = ui;
+}
+function applyCommonFlags(argv) {
+  let mode = "pretty";
+  const isTTY = process.stdout.isTTY === true;
+  const noColorEnv = Boolean(process.env["NO_COLOR"]);
+  let color2 = isTTY && !noColorEnv;
+  const rest = [];
+  for (const arg of argv) {
+    switch (arg) {
+      case "--no-color":
+        color2 = false;
+        break;
+      case "--color":
+        color2 = true;
+        break;
+      case "--json":
+      case "--pretty-json":
+        mode = "json";
+        if (arg === "--json") rest.push(arg);
+        break;
+      case "--quiet":
+        mode = "quiet";
+        break;
+      default:
+        rest.push(arg);
+    }
   }
-  /**
-   * Find adapters that satisfy a capability tag.
-   *
-   * Match rules (deterministic, sorted by name):
-   * - exact: adapter declared the tag verbatim
-   * - wildcard: adapter declared `code.*` → matches `code.write`
-   */
-  findByCapability(capability) {
-    const matches2 = [];
-    for (const adapter of this.adapters.values()) {
-      if (adapter.capabilities.includes(capability)) {
-        matches2.push(adapter);
-        continue;
+  return { mode, color: color2, restArgv: rest };
+}
+var fs4, path6, import_node_url, import_meta2, BRAILLE_FRAMES, COMPACT_BANNER, UI, _ui;
+var init_ui = __esm({
+  "src/cli/ui.ts"() {
+    "use strict";
+    fs4 = __toESM(require("fs"), 1);
+    path6 = __toESM(require("path"), 1);
+    import_node_url = require("url");
+    import_meta2 = {};
+    BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
+    UI = class {
+      mode;
+      colorEnabled;
+      stream;
+      errStream;
+      constructor(opts) {
+        this.mode = opts?.mode ?? "pretty";
+        this.stream = opts?.stream ?? process.stdout;
+        this.errStream = opts?.errStream ?? process.stderr;
+        if (opts?.color !== void 0) {
+          this.colorEnabled = opts.color;
+        } else {
+          const isTTY = this.stream.isTTY === true;
+          const noColor = Boolean(process.env["NO_COLOR"]);
+          this.colorEnabled = isTTY && !noColor;
+        }
       }
-      if (adapter.capabilities.some(
-        (tag) => tag.endsWith(".*") && capability.startsWith(tag.slice(0, -1))
-      )) {
-        matches2.push(adapter);
+      // ---- Internal color helpers ----
+      ansi(open, close, text) {
+        if (!this.colorEnabled) return text;
+        return `\x1B[${open}m${text}\x1B[${close}m`;
       }
-    }
-    matches2.sort((a, b) => a.name.localeCompare(b.name));
-    return matches2;
+      green(t) {
+        return this.ansi(32, 39, t);
+      }
+      red(t) {
+        return this.ansi(31, 39, t);
+      }
+      yellow(t) {
+        return this.ansi(33, 39, t);
+      }
+      cyan(t) {
+        return this.ansi(36, 39, t);
+      }
+      dim(t) {
+        return this.ansi(2, 22, t);
+      }
+      bold(t) {
+        return this.ansi(1, 22, t);
+      }
+      gray(t) {
+        return this.ansi(90, 39, t);
+      }
+      brandMark() {
+        return this.cyan("\u25C7");
+      }
+      colorBrandLine(line) {
+        let out = "";
+        for (const ch of line) {
+          if (ch === "\u2592") {
+            out += this.cyan(ch);
+          } else if (ch === "\u2593") {
+            out += this.dim(ch);
+          } else {
+            out += ch;
+          }
+        }
+        return out;
+      }
+      // ---- Core write helpers ----
+      write(text) {
+        this.stream.write(text);
+      }
+      writeErr(text) {
+        this.errStream.write(text);
+      }
+      // ---- Level 1: Header ----
+      header(text) {
+        if (this.mode === "json") return;
+        const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
+        this.write(prefix + this.bold(text) + "\n");
+      }
+      smallHeader(subtitle) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const iconPath = findIconPath("small");
+        if (iconPath !== null) {
+          try {
+            const raw = fs4.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
+            for (const line of raw.split("\n")) {
+              this.write(this.cyan(line) + "\n");
+            }
+          } catch {
+            this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
+          }
+        } else {
+          this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      banner(subtitle, opts) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
+        const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
+        const iconPath = findIconPath("big");
+        const shouldUseFull = opts?.full === true || width >= 120;
+        if (shouldUseFull && iconPath !== null) {
+          try {
+            const raw = fs4.readFileSync(iconPath, "utf-8");
+            const lines = raw.split("\n");
+            for (const line of lines) {
+              const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
+              const stripped = brandedLine.trimEnd();
+              if (stripped.length === 0) {
+                this.write("\n");
+                continue;
+              }
+              const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
+              this.write(this.colorBrandLine(clipped) + "\n");
+            }
+          } catch {
+            this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+            this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+          }
+        } else {
+          this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+          this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      // ---- Level 2: Primary data ----
+      blank() {
+        if (this.mode === "json") return;
+        this.write("\n");
+      }
+      line(text) {
+        if (this.mode === "json") return;
+        this.write(text + "\n");
+      }
+      info(text) {
+        this.line(text);
+      }
+      // ---- Level 3: Secondary ----
+      secondary(text, indent = 2) {
+        if (this.mode === "json") return;
+        this.write(" ".repeat(indent) + this.dim(text) + "\n");
+      }
+      // ---- Level 4: Action tips ----
+      tip(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Tip:") + " " + text + "\n");
+      }
+      next(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Next:") + " " + text + "\n");
+      }
+      // ---- Level 5: Status indicators ----
+      ok(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
+      }
+      success(text, detail) {
+        this.ok(text, detail);
+      }
+      fail(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
+      }
+      online(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.green("\u25CF") + " " + text + "\n");
+      }
+      offline(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.gray("\u25CB") + " " + text + "\n");
+      }
+      notInstalled(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
+      }
+      pending(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+      }
+      warn(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
+      }
+      // ---- Level 6: Error block ----
+      error(what, cause, fix) {
+        if (this.mode === "json") return;
+        this.writeErr(this.red("\u2717") + " " + what + "\n");
+        if (cause !== void 0) {
+          this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
+        }
+        if (fix !== void 0) {
+          this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
+        }
+      }
+      table(rowsOrOpts, maybeOpts) {
+        if (this.mode === "json") return;
+        const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
+        const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
+        if (!opts) throw new Error("table() requires columns");
+        const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
+        const cols = opts.columns;
+        const widths = cols.map((col) => col.length);
+        for (const row of rows) {
+          cols.forEach((col, i) => {
+            const val = row[col] ?? "";
+            const w = widths[i] ?? 0;
+            if (val.length > w) widths[i] = val.length;
+          });
+        }
+        const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
+        if (totalWidth > maxWidth) {
+          for (let i = 0; i < rows.length; i++) {
+            const row = rows[i];
+            if (!row) continue;
+            for (const col of cols) {
+              const val = row[col] ?? "";
+              this.write("  " + this.bold(col + ":") + " " + val + "\n");
+            }
+            if (i < rows.length - 1) this.write("\n");
+          }
+          return;
+        }
+        const header2 = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
+        this.write("  " + this.dim(header2) + "\n");
+        for (const row of rows) {
+          const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
+          this.write("  " + line + "\n");
+        }
+      }
+      // ---- Spinner ----
+      spinner(text) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        if (!isTTY || !this.colorEnabled) {
+          this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+          return {
+            update: (t) => {
+              this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
+            },
+            stop: (final) => {
+              if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
+            }
+          };
+        }
+        let current = text;
+        let frameIdx = 0;
+        let stopped = false;
+        const write = this.write.bind(this);
+        const colorFn = this.yellow.bind(this);
+        const greenFn = this.green.bind(this);
+        function renderFrame() {
+          const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
+          const line = "  " + colorFn(frame) + " " + current;
+          write("\r" + line);
+          frameIdx++;
+        }
+        renderFrame();
+        const timer = setInterval(renderFrame, 80);
+        return {
+          update(t) {
+            if (stopped) return;
+            current = t;
+          },
+          stop(final) {
+            if (stopped) return;
+            stopped = true;
+            clearInterval(timer);
+            write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- Progress bar ----
+      progress(text, total) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        const start = Date.now();
+        const write = this.write.bind(this);
+        const colorFn = this.cyan.bind(this);
+        const dimFn = this.dim.bind(this);
+        const greenFn = this.green.bind(this);
+        let last = 0;
+        let lastDetail = "";
+        let stopped = false;
+        const render = () => {
+          if (stopped) return;
+          const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
+          const pct = Math.floor(frac * 100);
+          const width = 20;
+          const filled = Math.floor(frac * width);
+          const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
+          const elapsed = (Date.now() - start) / 1e3;
+          const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
+          const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
+          const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
+          const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
+          if (isTTY && this.colorEnabled) {
+            write("\r\x1B[2K" + line);
+          } else {
+            write(line + "\n");
+          }
+        };
+        render();
+        return {
+          update: (current, detail) => {
+            if (stopped) return;
+            last = current;
+            if (detail !== void 0) lastDetail = detail;
+            render();
+          },
+          stop: (final) => {
+            if (stopped) return;
+            stopped = true;
+            if (isTTY && this.colorEnabled) write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- JSON output ----
+      json(payload, opts) {
+        const indent = opts?.pretty ? 2 : void 0;
+        this.write(JSON.stringify(payload, null, indent) + "\n");
+      }
+      result(pretty, jsonPayload) {
+        if (this.mode === "pretty") {
+          pretty();
+        } else {
+          this.json(jsonPayload);
+        }
+      }
+    };
+    _ui = null;
   }
-};
+});
 
-// src/adapters/hermes/index.ts
-var import_node_child_process = require("child_process");
-var import_node_fs = require("fs");
-var import_node_os = require("os");
-var import_node_path = require("path");
-var import_better_sqlite3 = __toESM(require("better-sqlite3"), 1);
-var YAML = __toESM(require("yaml"), 1);
-var import_zod = require("zod");
-var import_meta = {};
+// src/cli/util.ts
+var util_exports = {};
+__export(util_exports, {
+  DEFAULT_CLOUD_BASE_URL: () => DEFAULT_CLOUD_BASE_URL,
+  clearPidFile: () => clearPidFile,
+  color: () => color,
+  exitWithError: () => exitWithError,
+  fail: () => fail2,
+  header: () => header,
+  info: () => info,
+  normalizeCloudUrl: () => normalizeCloudUrl,
+  ok: () => ok,
+  pidAlive: () => pidAlive,
+  pidFilePath: () => pidFilePath,
+  printBanner: () => printBanner,
+  printJson: () => printJson,
+  readPidFile: () => readPidFile,
+  runAction: () => runAction,
+  table: () => table,
+  tip: () => tip,
+  warn: () => warn,
+  writePidFile: () => writePidFile
+});
+function color(kind, text) {
+  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
+  return `${ANSI[kind]}${text}${ANSI.reset}`;
+}
+function printJson(v) {
+  getUI().json(v, { pretty: true });
+}
+function exitWithError(message, opts) {
+  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
+  const exitCode = o.exitCode ?? 1;
+  const ui = getUI();
+  if (ui.mode === "json") {
+    const payload = {
+      ok: false,
+      error: { code: o.code ?? "cli_error", message },
+      ...o.details ? { details: o.details } : {}
+    };
+    ui.json(payload, { pretty: true });
+  } else {
+    process.stderr.write(`Error: ${message}
+`);
+  }
+  process.exit(exitCode);
+}
+function normalizeCloudUrl(input) {
+  const raw = input.trim();
+  if (!raw) throw new Error("Cloud URL is empty.");
+  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      throw new Error(`Invalid --cloud URL: ${raw}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
+    }
+    return raw.replace(/\/$/, "");
+  }
+  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
+    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
+  }
+  const candidate = `http://${raw}`;
+  try {
+    new URL(candidate);
+  } catch {
+    throw new Error(`Invalid --cloud URL: ${raw}`);
+  }
+  return candidate.replace(/\/$/, "");
+}
+function runAction(fn, opts = {}) {
+  return async (...args) => {
+    try {
+      await fn(...args);
+    } catch (err) {
+      const raw = err instanceof Error ? err.message : String(err);
+      const message = opts.sanitize ? opts.sanitize(raw) : raw;
+      exitWithError(message, { code: opts.code });
+    }
+  };
+}
+function printBanner(opts = {}) {
+  const ui = getUI();
+  if (opts.compact) {
+    ui.smallHeader("Runtime CLI v1.9.7");
+    return;
+  }
+  ui.banner("Runtime CLI v1.9.7", { full: true });
+}
+function ok(label, detail) {
+  getUI().ok(label, detail);
+}
+function warn(label, detail) {
+  getUI().warn(label, detail);
+}
+function fail2(label, detail) {
+  getUI().fail(label, detail);
+}
+function tip(command, detail) {
+  const text = detail ? `${command}  ${detail}` : command;
+  getUI().tip(text);
+}
+function info(message) {
+  getUI().info(message);
+}
+function header(title) {
+  getUI().header(title);
+  getUI().blank();
+}
+function table(rows, columns) {
+  getUI().table(rows, { columns });
+}
+function pidFilePath(paths) {
+  return (0, import_node_path8.join)(paths.root, "daemon.pid");
+}
+function writePidFile(paths, pid) {
+  (0, import_node_fs12.writeFileSync)(pidFilePath(paths), `${pid}
+`, "utf8");
+}
+function readPidFile(paths) {
+  const p = pidFilePath(paths);
+  if (!(0, import_node_fs12.existsSync)(p)) return void 0;
+  const raw = (0, import_node_fs12.readFileSync)(p, "utf8").trim();
+  const pid = Number.parseInt(raw, 10);
+  return Number.isFinite(pid) ? pid : void 0;
+}
+function clearPidFile(paths) {
+  const p = pidFilePath(paths);
+  if ((0, import_node_fs12.existsSync)(p)) {
+    try {
+      (0, import_node_fs12.unlinkSync)(p);
+    } catch {
+    }
+  }
+}
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_node_fs12, import_node_path8, DEFAULT_CLOUD_BASE_URL, ANSI;
+var init_util = __esm({
+  "src/cli/util.ts"() {
+    "use strict";
+    import_node_fs12 = require("fs");
+    import_node_path8 = require("path");
+    init_ui();
+    DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
+    ANSI = {
+      reset: "\x1B[0m",
+      bold: "\x1B[1m",
+      dim: "\x1B[2m",
+      cyan: "\x1B[36m",
+      green: "\x1B[32m",
+      yellow: "\x1B[33m",
+      red: "\x1B[31m"
+    };
+  }
+});
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  AdapterRegistry: () => AdapterRegistry,
+  AssetCache: () => AssetCache,
+  BUILTIN_ROLE_TEMPLATES: () => BUILTIN_ROLE_TEMPLATES,
+  CloudClient: () => CloudClient,
+  CloudError: () => CloudError,
+  ConfigSchema: () => ConfigSchema,
+  LocalServer: () => LocalServer,
+  ParseClaimController: () => ParseClaimController,
+  Runner: () => Runner,
+  ServicePool: () => ServicePool,
+  SyncQueue: () => SyncQueue,
+  SyncWorker: () => SyncWorker,
+  TARGET_SCHEMA_VERSION: () => TARGET_SCHEMA_VERSION,
+  UriResolver: () => UriResolver,
+  WS_CLOSE: () => WS_CLOSE,
+  WorkspaceMirror: () => WorkspaceMirror,
+  WsClient: () => WsClient,
+  buildProgram: () => buildProgram,
+  claudeCodeAdapter: () => claudeCodeAdapter,
+  codexAdapter: () => codexAdapter,
+  composePrompt: () => composePrompt,
+  configExists: () => configExists,
+  currentSchemaVersion: () => currentSchemaVersion,
+  deriveWsUrl: () => deriveWsUrl,
+  envelope: () => envelope,
+  getRoleTemplate: () => getRoleTemplate,
+  handleDispatch: () => handleDispatch,
+  hermesAdapter: () => hermesAdapter,
+  isDaemonId: () => isDaemonId,
+  listRoleTemplates: () => listRoleTemplates,
+  loadConfig: () => loadConfig,
+  newDaemonId: () => newDaemonId,
+  nextBackoffMs: () => nextBackoffMs,
+  openLocalDb: () => openLocalDb,
+  pair: () => pair,
+  parseCodexOutput: () => parseCodexOutput,
+  parseUris: () => parseUris,
+  resolvePaths: () => resolvePaths,
+  runCli: () => runCli,
+  runMigrations: () => runMigrations,
+  saveConfig: () => saveConfig
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/adapters/registry.ts
+var AdapterRegistry = class {
+  adapters = /* @__PURE__ */ new Map();
+  register(adapter) {
+    if (!adapter.name || typeof adapter.name !== "string") {
+      throw new Error("AdapterRegistry.register: adapter.name required");
+    }
+    const hasDispatch = typeof adapter.dispatch === "function";
+    const hasEnsureService = typeof adapter.ensureService === "function";
+    if (!hasDispatch && !hasEnsureService) {
+      throw new Error(
+        `AdapterRegistry.register: adapter "${adapter.name}" must implement dispatch() (interactive) or ensureService() (long-running)`
+      );
+    }
+    this.adapters.set(adapter.name, adapter);
+  }
+  unregister(name) {
+    return this.adapters.delete(name);
+  }
+  has(name) {
+    return this.adapters.has(name);
+  }
+  get(name) {
+    return this.adapters.get(name);
+  }
+  list() {
+    return Array.from(this.adapters.values());
+  }
+  size() {
+    return this.adapters.size;
+  }
+  /**
+   * Find adapters that satisfy a capability tag.
+   *
+   * Match rules (deterministic, sorted by name):
+   * - exact: adapter declared the tag verbatim
+   * - wildcard: adapter declared `code.*` → matches `code.write`
+   */
+  findByCapability(capability) {
+    const matches2 = [];
+    for (const adapter of this.adapters.values()) {
+      if (adapter.capabilities.includes(capability)) {
+        matches2.push(adapter);
+        continue;
+      }
+      if (adapter.capabilities.some(
+        (tag) => tag.endsWith(".*") && capability.startsWith(tag.slice(0, -1))
+      )) {
+        matches2.push(adapter);
+      }
+    }
+    matches2.sort((a, b) => a.name.localeCompare(b.name));
+    return matches2;
+  }
+};
+
+// src/adapters/hermes/index.ts
+var import_node_child_process = require("child_process");
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path = require("path");
+var import_better_sqlite3 = __toESM(require("better-sqlite3"), 1);
+var YAML = __toESM(require("yaml"), 1);
+var import_zod = require("zod");
+var import_meta = {};
 var PRISMER_IM_SKILL_NAME = "prismer-im-collab";
 var PRISMER_IM_SKILL_CONTENT = `# Prismer IM Collaboration
 
@@ -242,7 +838,7 @@ var HermesProfileConfigSchema = import_zod.z.object({
    */
   prismerMcpServerPath: import_zod.z.string().optional(),
   /** Model sent to Prismer's /api/v1/chat/completions endpoint. */
-  model: import_zod.z.string().min(1).default("us-kimi-k2.5"),
+  model: import_zod.z.string().min(1).default("us-kimi-k2.6"),
   /** Named custom provider written into Hermes config.yaml. */
   prismerProviderName: import_zod.z.string().min(1).default("prismer"),
   /** Override cloud provider base. Defaults to PRISMER_BASE_URL + /api/v1. */
@@ -268,7 +864,9 @@ var HermesProfileConfigSchema = import_zod.z.object({
    * surface but the local source tree contains hermes_cli/kanban_db.py.
    */
   hermesSourceDir: import_zod.z.string().optional(),
-  nativeMirrorTimeoutMs: import_zod.z.number().int().positive().default(2e3)
+  nativeMirrorTimeoutMs: import_zod.z.number().int().positive().default(2e3),
+  /** Task authority level: executor (default) or orchestrator. */
+  taskAuthority: import_zod.z.enum(["executor", "orchestrator"]).optional().default("executor")
 });
 var hermesAdapter = {
   name: "hermes",
@@ -753,13 +1351,13 @@ function resolvePrismerMcpServerPath(config) {
   }
   try {
     const { fileURLToPath: fileURLToPath2 } = require("url");
-    const { join: join14, dirname: dirname8 } = require("path");
+    const { join: join15, dirname: dirname8 } = require("path");
     const here = dirname8(fileURLToPath2(import_meta.url));
-    const candidate = join14(here, "../../mcp/dist/index.js");
+    const candidate = join15(here, "../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate)) return candidate;
-    const candidate2 = join14(here, "../../../mcp/dist/index.js");
+    const candidate2 = join15(here, "../../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate2)) return candidate2;
-    const candidate3 = join14(here, "../../../../mcp/dist/index.js");
+    const candidate3 = join15(here, "../../../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate3)) return candidate3;
   } catch {
   }
@@ -1181,7 +1779,7 @@ var WsClient = class extends import_node_events.EventEmitter {
 var import_better_sqlite32 = __toESM(require("better-sqlite3"), 1);
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
-var SCHEMA_VERSION = 2;
+var SCHEMA_VERSION = 3;
 var MIGRATIONS = [
   {
     version: 1,
@@ -1281,6 +1879,32 @@ var MIGRATIONS = [
       );
       CREATE INDEX IF NOT EXISTS idx_files_hash ON workspace_files_mirror (content_hash);
     `
+  },
+  {
+    version: 3,
+    up: `
+      -- Asset metadata index (#filename reference resolution \u2014 daemon/asset/metadata-index.ts)
+      CREATE TABLE IF NOT EXISTS asset_metadata_index (
+        workspace_id TEXT NOT NULL,
+        asset_id TEXT NOT NULL,
+        content_hash TEXT NOT NULL,
+        filename TEXT,
+        folder_path TEXT,
+        mime TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        size_bytes INTEGER NOT NULL DEFAULT 0,
+        description TEXT,
+        asset_index_seq INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        PRIMARY KEY (workspace_id, asset_id)
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_filename
+        ON asset_metadata_index(workspace_id, filename);
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_seq
+        ON asset_metadata_index(workspace_id, asset_index_seq);
+    `
   }
 ];
 function runSql(db, sql) {
@@ -1456,7 +2080,7 @@ var product_manager_default = {
   description: "Writes PRDs, defines requirements, verifies implementations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u4EA7\u54C1\u7ECF\u7406\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u5199\u6E05\u6670\u7684 PRD\uFF08\u7528\u6237\u6545\u4E8B + \u9A8C\u6536\u6807\u51C6 + \u8FB9\u754C\u6761\u4EF6\uFF09\u2461\u8BC4\u5BA1\u5DE5\u7A0B\u5B9E\u73B0\uFF08\u6838\u5BF9\u9A8C\u6536\u6807\u51C6 + \u7ED9\u53CD\u9988\uFF09\u2462\u5728\u7FA4\u804A\u91CC @engineer \u89E6\u53D1\u5B9E\u73B0\uFF0C@verifier \u89E6\u53D1\u9A8C\u6536\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u4F60\u7684\u8F93\u51FA PRD \u5E94\u8BE5\u4E0A\u4F20\u4E3A workspace file `docs/PROJECT-prd.md`\n- \u4F60\u5B8C\u6210 PRD \u540E\uFF0C\u53D1\u6D88\u606F @engineer-name \u8BA9\u4ED6\u5B9E\u73B0\uFF0C\u9644 prismer://file/<wsId>/docs/PROJECT-prd.md \u94FE\u63A5\n- \u6536\u5230 engineer \u5B8C\u6210\u6D88\u606F\u540E\uFF0C\u4E3B\u52A8 review\uFF0C\u5199\u53CD\u9988\u5230\u7FA4\u91CC",
     allowedTools: ["Read", "Write", "WebSearch"],
     maxTokens: 8e3
@@ -1470,7 +2094,7 @@ var engineer_default = {
   description: "Implements features per PRD, writes code, runs tests",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u8D44\u6DF1\u5DE5\u7A0B\u5E08\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u6839\u636E PRD \u5B9E\u73B0 feature \u2461\u5199\u6D4B\u8BD5\u8986\u76D6 \u2462\u628A\u4EE3\u7801\u4E0A\u4F20\u4E3A workspace file \u540E\u5728\u7FA4\u804A\u6C47\u62A5\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u6536\u5230 PRD \u540E\u5148 Read prismer://file \u94FE\u63A5\u62C9\u5230\u7684\u672C\u5730\u8DEF\u5F84\n- \u5B9E\u73B0\u5B8C\u6BD5\u540E\u7528 daemon \u4E0A\u4F20 src/<feature>.* \u5230 workspace_files\n- \u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644\u5B9E\u73B0\u7684 prismer://file URI",
     allowedTools: ["Read", "Write", "Edit", "Bash", "Grep"],
     maxTokens: 16e3
@@ -1484,7 +2108,7 @@ var ceo_default = {
   description: "Sets strategic direction, asks tough questions, makes go/no-go calls",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F CEO\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u57FA\u4E8E\u5E02\u573A\u53CD\u9988\u548C\u6570\u636E\u505A\u6218\u7565\u51B3\u7B56 \u2461\u8BC4\u5BA1 PRD \u662F\u5426\u5BF9\u9F50\u6218\u7565 \u2462\u5728\u6267\u884C\u4E2D\u63D0\u51FA\u5C16\u9510\u7684'\u4E3A\u4EC0\u4E48'\u95EE\u9898\u3002",
     allowedTools: ["Read", "WebSearch"],
     maxTokens: 4e3
@@ -1498,7 +2122,7 @@ var researcher_default = {
   description: "Investigates topics, gathers sources, writes research memos with citations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u7814\u7A76\u5458\u3002\u4EFB\u52A1\uFF1A\u2460\u4F9D\u636E\u95EE\u9898\u5236\u5B9A\u8C03\u7814\u63D0\u7EB2 \u2461\u6293\u53D6/\u9605\u8BFB\u8D44\u6599\u5E76\u63D0\u53D6\u8981\u70B9 \u2462\u4EA7\u51FA\u5E26\u5F15\u7528\u7684\u7814\u7A76\u5907\u5FD8\u5F55\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u7814\u7A76\u4EA7\u51FA\u4E0A\u4F20\u4E3A workspace file `research/<topic>.md`\n- \u5B8C\u6210\u540E\u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644 prismer://file/<wsId>/research/<topic>.md\n- \u5F15\u7528\u5FC5\u987B\u7ED9\u51FA\u539F\u59CB\u94FE\u63A5\u6216 prismer://asset URI\uFF1B\u4E0D\u5F97\u4F2A\u9020\u6765\u6E90",
     allowedTools: ["Read", "Write", "WebSearch", "WebFetch"],
     maxTokens: 12e3
@@ -1608,10 +2232,11 @@ function deriveWsUrl(httpBase) {
 }
 
 // src/daemon-id.ts
-var import_node_crypto = require("crypto");
+var import_node_os3 = require("os");
 var PREFIX = "daemon-";
 function newDaemonId() {
-  return `${PREFIX}${(0, import_node_crypto.randomUUID)()}`;
+  const host = (0, import_node_os3.hostname)().replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "unknown";
+  return `${PREFIX}${host}`;
 }
 function isDaemonId(s) {
   return s.startsWith(PREFIX) && s.length > PREFIX.length;
@@ -2332,6 +2957,14 @@ async function handleDispatch(payload, requestId, deps) {
       sendReply(deps.ws, reply, requestId);
       return reply;
     }
+    let hashRefResult = { text: payload.prompt, resolutions: [] };
+    if (deps.assetMetadataIndexes && profile.workspaceId) {
+      const assetIndex = deps.assetMetadataIndexes.get(profile.workspaceId);
+      if (assetIndex) {
+        hashRefResult = await resolveHashRefs(payload.prompt, assetIndex, deps.cloud);
+        payload.prompt = hashRefResult.text;
+      }
+    }
     const rewrittenPrompt = await deps.uriResolver.rewrite(payload.prompt, { pin: true });
     resolvedHashes.push(...rewrittenPrompt.resolvedHashes);
     let rewrittenContext = [];
@@ -2546,6 +3179,84 @@ function isTextLikeMime(mime) {
   if (m.endsWith("+json") || m.endsWith("+xml") || m.endsWith("+csv")) return true;
   return false;
 }
+var HASH_REF_RE = /(?:^|\s)#([^\s#]+)/g;
+var HEX_COLOR_RE = /^[0-9a-fA-F]{3,8}$/;
+var FILE_EXT_RE = /\.[a-zA-Z0-9]{1,10}$/;
+var TRAILING_PUNCT_RE = /[,.;:!?)\]}'"]+$/;
+async function resolveHashRefs(prompt, assetIndex, cloud) {
+  const resolutions = [];
+  const candidates = [];
+  let match;
+  const re = new RegExp(HASH_REF_RE.source, "g");
+  while ((match = re.exec(prompt)) !== null) {
+    const refName = match[1];
+    const leading = match[0].startsWith("#") ? 0 : 1;
+    const start = match.index + leading;
+    const end = match.index + match[0].length;
+    if (HEX_COLOR_RE.test(refName)) continue;
+    let cleanRef = refName;
+    let stripped = "";
+    const punctMatch = TRAILING_PUNCT_RE.exec(cleanRef);
+    if (punctMatch) {
+      stripped = punctMatch[0];
+      cleanRef = cleanRef.slice(0, -stripped.length);
+    }
+    if (!cleanRef) continue;
+    if (HEX_COLOR_RE.test(cleanRef)) continue;
+    const hasExtension = FILE_EXT_RE.test(cleanRef);
+    candidates.push({ ref: cleanRef, start, end: end - stripped.length, hasExtension });
+  }
+  if (candidates.length === 0) {
+    return { text: prompt, resolutions: [] };
+  }
+  const allFilenames = candidates.map((c) => c.ref);
+  const localResults = assetIndex.resolveByFilenames(allFilenames);
+  const needsCloud = candidates.filter(
+    (c) => c.hasExtension && !localResults.has(c.ref)
+  );
+  const cloudResults = /* @__PURE__ */ new Map();
+  if (needsCloud.length > 0) {
+    await Promise.allSettled(
+      needsCloud.map(async (c) => {
+        try {
+          const items = await cloud.get(
+            `/api/im/assets?workspaceId=${encodeURIComponent(assetIndex.workspaceId)}&q=${encodeURIComponent(c.ref)}&limit=1`
+          );
+          if (Array.isArray(items) && items.length > 0) {
+            const item = items[0];
+            cloudResults.set(c.ref, item.contentHash);
+          }
+        } catch {
+        }
+      })
+    );
+  }
+  for (const c of candidates) {
+    const local = localResults.get(c.ref);
+    if (local) {
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${local.contentHash}`
+      });
+    } else if (c.hasExtension) {
+      const cloudHash = cloudResults.get(c.ref);
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: cloudHash ? `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${cloudHash}` : void 0
+      });
+    }
+  }
+  let result = prompt;
+  const sorted = [...resolutions].filter((r) => r.resolvedUri).sort((a, b) => b.start - a.start);
+  for (const r of sorted) {
+    result = result.slice(0, r.start) + r.resolvedUri + result.slice(r.end);
+  }
+  return { text: result, resolutions };
+}
 async function resolveAssetRefs(refs, cache) {
   const out = { promptBlocks: [], observability: [], pinnedHashes: [] };
   if (!refs || refs.length === 0) return out;
@@ -2618,8 +3329,8 @@ async function resolveAssetRefs(refs, cache) {
   return out;
 }
 function formatInlineAssetBlock(ref, mime, body, strategy) {
-  const header = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
-  return `${header}
+  const header2 = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
+  return `${header2}
 ---
 ${body}
 ---`;
@@ -2934,7 +3645,7 @@ var ServicePool = class {
 
 // src/daemon/local-server.ts
 var import_node_http = require("http");
-var import_node_crypto2 = require("crypto");
+var import_node_crypto = require("crypto");
 var import_node_fs7 = require("fs");
 var path2 = __toESM(require("path"), 1);
 var LocalServer = class {
@@ -2968,20 +3679,35 @@ var LocalServer = class {
       respond(res, 204, null);
       return;
     }
+    const handlers = [];
     if (this.opts.attachMemory) {
-      void this.opts.attachMemory(req, res).then((handled) => {
-        if (handled) return;
-        this.routeStandard(req, res);
-      }).catch((err) => {
-        respond(res, 500, {
-          error: "attach_memory_threw",
-          message: err instanceof Error ? err.message : String(err)
-        });
-      });
+      handlers.push({ name: "memory", fn: this.opts.attachMemory });
+    }
+    if (this.opts.attachAsset) {
+      handlers.push({ name: "asset", fn: this.opts.attachAsset });
+    }
+    if (handlers.length > 0) {
+      void this.runHandlers(req, res, handlers, 0);
       return;
     }
     this.routeStandard(req, res);
   }
+  async runHandlers(req, res, handlers, idx) {
+    if (idx >= handlers.length) {
+      this.routeStandard(req, res);
+      return;
+    }
+    try {
+      const handled = await handlers[idx].fn(req, res);
+      if (handled) return;
+      await this.runHandlers(req, res, handlers, idx + 1);
+    } catch (err) {
+      respond(res, 500, {
+        error: `attach_${handlers[idx].name}_threw`,
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   routeStandard(req, res) {
     const url = req.url ?? "/";
     if (req.method === "GET" && url === "/healthz") {
@@ -2996,7 +3722,8 @@ var LocalServer = class {
         wsConnected: state.wsConnected,
         hostedAgents: state.hostedAgents,
         observability: state.observability,
-        memoryReady: this.opts.attachMemory != null
+        memoryReady: this.opts.attachMemory != null,
+        assetReady: this.opts.attachAsset != null
       });
       return;
     }
@@ -3148,7 +3875,7 @@ var LocalServer = class {
       respond(res, 400, { error: "missing_taskId" });
       return;
     }
-    const runId = (0, import_node_crypto2.randomUUID)();
+    const runId = (0, import_node_crypto.randomUUID)();
     try {
       this.opts.onDispatch?.(payload, runId);
     } catch (err) {
@@ -3226,7 +3953,7 @@ async function walkAndDigest(root, current) {
     }
     if (!st.isFile()) continue;
     const buf = await import_node_fs7.promises.readFile(full);
-    const sha2562 = (0, import_node_crypto2.createHash)("sha256").update(buf).digest("hex");
+    const sha2562 = (0, import_node_crypto.createHash)("sha256").update(buf).digest("hex");
     out.push({
       path: rel,
       sha256: sha2562,
@@ -3239,8 +3966,8 @@ async function walkAndDigest(root, current) {
 
 // src/daemon/runner.ts
 var import_node_events3 = require("events");
-var import_node_fs10 = require("fs");
-var import_node_os3 = require("os");
+var import_node_fs11 = require("fs");
+var import_node_os4 = require("os");
 
 // src/adapters/claude-code/index.ts
 var import_node_child_process2 = require("child_process");
@@ -3891,7 +4618,7 @@ var path4 = __toESM(require("path"), 1);
 var import_better_sqlite33 = __toESM(require("better-sqlite3"), 1);
 var fs2 = __toESM(require("fs"), 1);
 var path3 = __toESM(require("path"), 1);
-var import_node_crypto3 = require("crypto");
+var import_node_crypto2 = require("crypto");
 
 // src/daemon/memory/crypto.ts
 function sealPlaintext(content) {
@@ -4093,16 +4820,17 @@ var MemoryStore = class {
     const existing = db.prepare(
       "SELECT id, version, createdAt FROM memory_pages WHERE workspaceId = ? AND path = ?"
     ).get(this.opts.workspaceId, input.path);
-    const pageId = existing?.id ?? `page_${(0, import_node_crypto3.randomUUID)().replace(/-/g, "").slice(0, 22)}`;
+    const pageId = existing?.id ?? `page_${(0, import_node_crypto2.randomUUID)().replace(/-/g, "").slice(0, 22)}`;
     const newVersion = (existing?.version ?? 0) + 1;
     const createdAt = existing?.createdAt ?? now;
+    const staleFlag = input.stale ? 1 : 0;
     const insertPage = db.prepare(`
       INSERT INTO memory_pages (
         id, workspaceId, path, title, description, contentHash, version,
         pageType, visibilityKind, visibilityImUserId, encrypted, stale,
         archivedAt, sourceAssetId, sourceRefsJson, syncStatus,
         createdAt, updatedAt
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, 0, NULL, ?, ?, 'local-only', ?, ?)
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, NULL, ?, ?, 'local-only', ?, ?)
       ON CONFLICT(workspaceId, path) DO UPDATE SET
         title = excluded.title,
         description = excluded.description,
@@ -4113,6 +4841,7 @@ var MemoryStore = class {
         visibilityImUserId = excluded.visibilityImUserId,
         sourceAssetId = excluded.sourceAssetId,
         sourceRefsJson = excluded.sourceRefsJson,
+        stale = excluded.stale,
         updatedAt = excluded.updatedAt
     `);
     const insertVersion = db.prepare(`
@@ -4140,6 +4869,7 @@ var MemoryStore = class {
         input.pageType ?? "leaf",
         visibility.kind,
         visibilityImUserId,
+        staleFlag,
         input.sourceAssetId ?? null,
         sourceRefsJson,
         createdAt,
@@ -4220,6 +4950,16 @@ var MemoryStore = class {
       dbPath: this.opts.dbPath
     };
   }
+  /**
+   * Record sync cursor for incremental sync. Used by cloud-sync.ts to
+   * persist the high-water mark for future cursor-based catch-up.
+   */
+  recordCursor(workspaceId, cursor) {
+    const now = Date.now();
+    this.requireDb().prepare(
+      `INSERT OR REPLACE INTO memory_inbox_cursor (workspaceId, cursor, updatedAt) VALUES (?, ?, ?)`
+    ).run(workspaceId, cursor, now);
+  }
   /**
    * Internal accessor for outbox.ts — outbox writes its own table within the
    * same DB. Returning the live Database handle keeps outbox transactions
@@ -4264,7 +5004,7 @@ var MemoryStore = class {
   }
 };
 function sha256(s) {
-  return (0, import_node_crypto3.createHash)("sha256").update(s, "utf8").digest("hex");
+  return (0, import_node_crypto2.createHash)("sha256").update(s, "utf8").digest("hex");
 }
 
 // src/daemon/memory/search.ts
@@ -4370,7 +5110,7 @@ function clamp(n, lo, hi) {
 }
 
 // src/daemon/memory/outbox.ts
-var import_node_crypto4 = require("crypto");
+var import_node_crypto3 = require("crypto");
 
 // src/daemon/memory/envelope.ts
 var import_zod6 = require("zod");
@@ -4503,7 +5243,7 @@ var MemoryOutbox = class {
     const now = Date.now();
     const parsed = MemoryOutboxEnvelope.safeParse(event);
     if (!parsed.success) {
-      const dlId = `dl_${(0, import_node_crypto4.randomUUID)()}`;
+      const dlId = `dl_${(0, import_node_crypto3.randomUUID)()}`;
       db.prepare(
         `INSERT INTO memory_outbox_dead_letter (id, eventType, rawJson, errorJson, createdAt)
          VALUES (?, ?, ?, ?, ?)`
@@ -4520,7 +5260,7 @@ var MemoryOutbox = class {
     if (validated.eventType === "memory.feedback") {
       const check = validateFeedbackTarget(validated);
       if (!check.ok) {
-        const dlId = `dl_${(0, import_node_crypto4.randomUUID)()}`;
+        const dlId = `dl_${(0, import_node_crypto3.randomUUID)()}`;
         db.prepare(
           `INSERT INTO memory_outbox_dead_letter (id, eventType, rawJson, errorJson, createdAt)
            VALUES (?, ?, ?, ?, ?)`
@@ -4534,7 +5274,7 @@ var MemoryOutbox = class {
         return { id: dlId, deadLetter: true };
       }
     }
-    const rowId = `out_${(0, import_node_crypto4.randomUUID)()}`;
+    const rowId = `out_${(0, import_node_crypto3.randomUUID)()}`;
     try {
       db.prepare(
         `INSERT INTO memory_outbox (id, eventType, envelopeJson, idempotencyKey, status, createdAt)
@@ -4870,6 +5610,84 @@ function defaultLog() {
   };
 }
 
+// src/daemon/memory/cloud-sync.ts
+var LOG = "[CloudMemorySync]";
+var CLOUD_PAGE_LIMIT = 300;
+async function initialSyncFromCloud(runtime, cloud, workspaceId) {
+  const slot = runtime.peek(workspaceId);
+  if (!slot) {
+    console.log(`${LOG} No store for workspace=${workspaceId} \u2014 skipping`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const cursorRow = slot.store.rawDb().prepare("SELECT cursor FROM memory_inbox_cursor WHERE workspaceId = ?").get(workspaceId);
+  if (cursorRow) {
+    console.log(`${LOG} Workspace=${workspaceId} already synced (cursor: ${cursorRow.cursor.slice(0, 20)}...) \u2014 skip`);
+    return { pulled: 0, skipped: 0 };
+  }
+  console.log(`${LOG} Fetching cloud pages for workspace=${workspaceId}...`);
+  const resp = await cloud.request(
+    "GET",
+    `/api/im/memory/pages?workspaceId=${encodeURIComponent(workspaceId)}&limit=${CLOUD_PAGE_LIMIT}&stale=all`,
+    { timeoutMs: 15e3 }
+  );
+  if (!resp.ok) {
+    console.warn(
+      `${LOG} Cloud GET /memory/pages returned ${resp.status}: ${resp.error?.message ?? "unknown"}`
+    );
+    return { pulled: 0, skipped: 0 };
+  }
+  const envelope2 = resp.data;
+  if (!envelope2 || !envelope2.ok) {
+    console.log(`${LOG} Cloud returned non-ok envelope for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const pages = envelope2.data;
+  if (!pages || !Array.isArray(pages) || pages.length === 0) {
+    console.log(`${LOG} No cloud pages to sync for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  let pulled = 0;
+  let skipped = 0;
+  for (const page of pages) {
+    let content = page.content ?? "";
+    if (!content) {
+      try {
+        const detailResp = await cloud.request(
+          "GET",
+          `/api/im/memory/pages/${encodeURIComponent(page.id)}?workspaceId=${encodeURIComponent(workspaceId)}`,
+          { timeoutMs: 5e3 }
+        );
+        if (detailResp.ok && detailResp.data?.data?.content) {
+          content = detailResp.data.data.content;
+        }
+      } catch {
+      }
+    }
+    const visibility = page.visibility === "agent" ? { kind: "agent", imUserId: "" } : { kind: "workspace" };
+    try {
+      slot.store.write({
+        workspaceId,
+        path: page.path,
+        title: page.title ?? void 0,
+        content: content || "",
+        pageType: page.pageType || "leaf",
+        visibility,
+        actorImUserId: "cloud-sync",
+        actorKind: "agent"
+      });
+      pulled++;
+    } catch (err) {
+      console.warn(`${LOG} write failed for ${page.path}:`, err.message);
+      skipped++;
+    }
+  }
+  slot.store.recordCursor(workspaceId, `synced:${Date.now()}`);
+  console.log(
+    `${LOG} Synced ${pulled} pages${skipped ? `, ${skipped} skipped` : ""} for workspace=${workspaceId}`
+  );
+  return { pulled, skipped };
+}
+
 // src/daemon/memory/runner-wiring.ts
 function attachMemoryRunner(opts) {
   const runtime = new MemoryRuntime({ baseDir: opts.baseDir, deviceId: opts.deviceId });
@@ -4900,6 +5718,24 @@ function attachMemoryRunner(opts) {
     }
   };
 }
+async function syncMemoryFromCloud(wiring, cloud, workspaceIds) {
+  const uniqueIds = [...new Set(workspaceIds.filter(Boolean))];
+  if (uniqueIds.length === 0) return;
+  console.log(`[MemorySync] Initial cloud-to-local sync for ${uniqueIds.length} workspace(s)...`);
+  for (const wsId of uniqueIds) {
+    try {
+      wiring.runtime.resolve(wsId);
+      const result = await initialSyncFromCloud(wiring.runtime, cloud, wsId);
+      if (result.pulled > 0 || result.skipped > 0) {
+        console.log(
+          `[MemorySync] workspace=${wsId}: ${result.pulled} pulled, ${result.skipped} skipped`
+        );
+      }
+    } catch (err) {
+      console.error(`[MemorySync] workspace=${wsId} failed:`, err.message);
+    }
+  }
+}
 
 // src/daemon/memory/fork/select-memories.ts
 var SELECT_MEMORIES_SYSTEM_PROMPT = [
@@ -5018,7 +5854,7 @@ function clamp2(n, lo, hi) {
 }
 
 // src/daemon/memory/fork/tracing.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto4 = require("crypto");
 
 // src/daemon/memory/fork/runner.ts
 var DEFAULT_SNIPPET_MAX_BYTES = 500;
@@ -5307,8 +6143,235 @@ function parsePrismerUri(uri) {
   return { workspaceId, path: path7 };
 }
 
-// src/daemon/outbox-watcher.ts
+// src/daemon/asset/metadata-index.ts
 var import_node_fs8 = require("fs");
+var import_node_path6 = require("path");
+var DEFAULT_LIMIT = 8;
+var PULL_PAGE_SIZE = 500;
+var THROTTLE_MS = 3e4;
+function rowToMetadata(row) {
+  return {
+    assetId: row.asset_id,
+    contentHash: row.content_hash,
+    filename: row.filename,
+    folderPath: row.folder_path,
+    mime: row.mime,
+    kind: row.kind,
+    sizeBytes: row.size_bytes,
+    description: row.description,
+    assetIndexSeq: row.asset_index_seq
+  };
+}
+var AssetMetadataIndex = class {
+  db;
+  cloud;
+  /** Workspace ID — exposed for prismer:// URI construction. */
+  workspaceId;
+  cursorPath;
+  _lastSyncMs = 0;
+  constructor(opts) {
+    this.db = opts.db;
+    this.cloud = opts.cloud;
+    this.workspaceId = opts.workspaceId;
+    if (!(0, import_node_fs8.existsSync)(opts.workspaceStateDir)) {
+      (0, import_node_fs8.mkdirSync)(opts.workspaceStateDir, { recursive: true });
+    }
+    this.cursorPath = (0, import_node_path6.join)(opts.workspaceStateDir, "asset-metadata-cursor.json");
+  }
+  /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
+  readCursor() {
+    if (!(0, import_node_fs8.existsSync)(this.cursorPath)) return 0;
+    try {
+      const parsed = JSON.parse((0, import_node_fs8.readFileSync)(this.cursorPath, "utf8"));
+      if (parsed.workspaceId !== this.workspaceId) return 0;
+      return parsed.cursor;
+    } catch {
+      return 0;
+    }
+  }
+  writeCursor(cursor) {
+    const payload = {
+      workspaceId: this.workspaceId,
+      cursor,
+      writtenAt: Date.now()
+    };
+    (0, import_node_fs8.writeFileSync)(this.cursorPath, JSON.stringify(payload, null, 2));
+  }
+  /**
+   * Pull incremental asset metadata changes since the persisted cursor and
+   * upsert into the local index. Newer rows overwrite older ones by
+   * (workspace_id, asset_id) primary key.
+   *
+   * Returns the count of items applied + the new cursor. Throttled: if called
+   * within 30s of the last successful pull, returns immediately.
+   */
+  async pullDelta(opts) {
+    const now = Date.now();
+    if (now - this._lastSyncMs < THROTTLE_MS) {
+      return { applied: 0, cursor: this.readCursor() };
+    }
+    const since = this.readCursor();
+    const sinceParam = since > 0 ? `&since=${since}` : "";
+    const envelope2 = await this.cloud.get(
+      `/api/im/assets/index?workspaceId=${encodeURIComponent(this.workspaceId)}&limit=${PULL_PAGE_SIZE}${sinceParam}`,
+      { signal: opts?.signal }
+    );
+    const upsert = this.db.prepare(`
+      INSERT INTO asset_metadata_index
+        (workspace_id, asset_id, content_hash, filename, folder_path, mime, kind, size_bytes, description, asset_index_seq, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(workspace_id, asset_id) DO UPDATE SET
+        content_hash = excluded.content_hash,
+        filename = excluded.filename,
+        folder_path = excluded.folder_path,
+        mime = excluded.mime,
+        kind = excluded.kind,
+        size_bytes = excluded.size_bytes,
+        description = excluded.description,
+        asset_index_seq = excluded.asset_index_seq,
+        updated_at = excluded.updated_at
+    `);
+    const nowTs = Date.now();
+    let applied = 0;
+    const tx = this.db.transaction((items) => {
+      for (const item of items) {
+        upsert.run(
+          this.workspaceId,
+          item.assetId,
+          item.contentHash,
+          item.filename ?? null,
+          item.folderPath ?? null,
+          item.mime,
+          item.kind,
+          item.sizeBytes,
+          item.description ?? null,
+          item.assetIndexSeq,
+          nowTs
+        );
+        applied += 1;
+      }
+    });
+    try {
+      tx(envelope2.items);
+      this.writeCursor(envelope2.cursor);
+    } catch (err) {
+      throw err;
+    }
+    this._lastSyncMs = now;
+    return { applied, cursor: envelope2.cursor };
+  }
+  /**
+   * Search local index by filename or description substring.
+   * Escapes LIKE wildcards (% and _). Default limit 8.
+   */
+  search(query, limit) {
+    const escaped = query.replace(/%/g, "\\%").replace(/_/g, "\\_");
+    const pattern = `%${escaped}%`;
+    const limitVal = Math.min(Math.max(limit ?? DEFAULT_LIMIT, 1), 200);
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ?
+           AND (filename LIKE ? ESCAPE '\\' OR description LIKE ? ESCAPE '\\')
+         ORDER BY asset_index_seq DESC
+         LIMIT ?`
+    ).all(this.workspaceId, pattern, pattern, limitVal);
+    return rows.map(rowToMetadata);
+  }
+  /** Exact match on filename column. Returns undefined if not indexed. */
+  resolveByFilename(filename) {
+    const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND filename = ?").get(this.workspaceId, filename);
+    return row ? rowToMetadata(row) : void 0;
+  }
+  /** Batch exact match — returns Map for O(1) access. */
+  resolveByFilenames(filenames) {
+    if (filenames.length === 0) return /* @__PURE__ */ new Map();
+    const placeholders = filenames.map(() => "?").join(",");
+    const params = [this.workspaceId, ...filenames];
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ? AND filename IN (${placeholders})`
+    ).all(...params);
+    const map = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      if (row.filename) map.set(row.filename, rowToMetadata(row));
+    }
+    return map;
+  }
+};
+
+// src/daemon/asset/rpc.ts
+var ASSET_PATH_PREFIX = "/local/asset/";
+function attachAssetRpc(opts) {
+  return async (req, res) => {
+    const url = req.url ?? "/";
+    if (!url.startsWith(ASSET_PATH_PREFIX)) return false;
+    const [pathOnly = ""] = url.split("?", 2);
+    const subpath = pathOnly.slice(ASSET_PATH_PREFIX.length);
+    const method = req.method ?? "GET";
+    try {
+      if (method === "POST" && subpath === "search") {
+        const body = await readJson3(req);
+        return handleSearch2(opts.resolveIndex, body, res);
+      }
+      respond3(res, 404, { error: "asset_route_not_found", path: url });
+      return true;
+    } catch (err) {
+      respond3(res, 500, {
+        error: "asset_rpc_failed",
+        message: err instanceof Error ? err.message : String(err)
+      });
+      return true;
+    }
+  };
+}
+function handleSearch2(resolveIndex, body, res) {
+  if (!body || typeof body !== "object") {
+    return respond4002(res, "request body must be a JSON object");
+  }
+  const b = body;
+  if (typeof b.workspaceId !== "string" || !b.workspaceId) {
+    return respond4002(res, "workspaceId is required (string)");
+  }
+  if (typeof b.query !== "string" || !b.query.trim()) {
+    return respond4002(res, "query is required (non-empty string)");
+  }
+  const index = resolveIndex(b.workspaceId);
+  if (!index) {
+    respond3(res, 404, {
+      error: "workspace_index_not_found",
+      workspaceId: b.workspaceId,
+      message: "No asset metadata index for this workspace. Ensure the daemon has synced asset metadata."
+    });
+    return true;
+  }
+  const limit = typeof b.limit === "number" && b.limit > 0 ? b.limit : void 0;
+  const items = index.search(b.query.trim(), limit);
+  respond3(res, 200, { items });
+  return true;
+}
+function respond3(res, status, body) {
+  res.statusCode = status;
+  res.setHeader("Content-Type", "application/json");
+  res.end(JSON.stringify(body));
+}
+function respond4002(res, message) {
+  respond3(res, 400, { error: "invalid_request", message });
+  return true;
+}
+async function readJson3(req) {
+  let raw = "";
+  req.setEncoding("utf8");
+  for await (const chunk of req) raw += chunk;
+  if (!raw) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error("invalid_json");
+  }
+}
+
+// src/daemon/outbox-watcher.ts
+var import_node_fs9 = require("fs");
 var path5 = __toESM(require("path"), 1);
 var DEFAULT_INTERVAL_MS = 2e3;
 var RESERVED_SUBDIR = "_uploaded";
@@ -5476,7 +6539,7 @@ var OutboxWatcher = class {
   async scanDir(dir, kind, task) {
     let entries = [];
     try {
-      entries = await import_node_fs8.promises.readdir(dir);
+      entries = await import_node_fs9.promises.readdir(dir);
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return;
@@ -5489,7 +6552,7 @@ var OutboxWatcher = class {
       const full = path5.join(dir, name);
       let st;
       try {
-        st = await import_node_fs8.promises.stat(full);
+        st = await import_node_fs9.promises.stat(full);
       } catch {
         continue;
       }
@@ -5514,7 +6577,7 @@ var OutboxWatcher = class {
       this.log("warn", `skip ${filePath}: no active taskId (no dispatch/handoff received yet)`);
       return;
     }
-    const bytes = await import_node_fs8.promises.readFile(filePath);
+    const bytes = await import_node_fs9.promises.readFile(filePath);
     const fileName = path5.basename(filePath);
     const blob = new Blob([new Uint8Array(bytes)]);
     const form = new FormData();
@@ -5564,8 +6627,8 @@ var OutboxWatcher = class {
 
 // src/daemon/shell-executor.ts
 var import_node_child_process4 = require("child_process");
-var import_node_fs9 = require("fs");
-var import_node_path6 = require("path");
+var import_node_fs10 = require("fs");
+var import_node_path7 = require("path");
 var DEFAULT_OUTPUT_LIMIT = 256 * 1024;
 var DEFAULT_TIMEOUT = 6e4;
 var HARD_MAX_TIMEOUT = 30 * 6e4;
@@ -5601,7 +6664,7 @@ async function executeShellDispatch(payload, deps) {
   const command = readCommand(payload, execution);
   if (!command.trim()) return fail(payload.taskId, "shell_command_required", "Shell command is required");
   const cwd = resolveCwd(execution.cwd, deps.config.defaultCwd);
-  if (!(0, import_node_fs9.existsSync)(cwd)) return fail(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
+  if (!(0, import_node_fs10.existsSync)(cwd)) return fail(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
   const timeoutMs = Math.min(
     typeof payload.timeoutMs === "number" && payload.timeoutMs > 0 ? payload.timeoutMs : deps.config.maxTimeoutMs,
     deps.config.maxTimeoutMs
@@ -5703,8 +6766,8 @@ function readCommand(payload, execution) {
   return payload.prompt;
 }
 function resolveCwd(raw, fallback) {
-  if (typeof raw !== "string" || raw.trim() === "") return (0, import_node_path6.resolve)(fallback);
-  return (0, import_node_path6.resolve)(raw);
+  if (typeof raw !== "string" || raw.trim() === "") return (0, import_node_path7.resolve)(fallback);
+  return (0, import_node_path7.resolve)(raw);
 }
 function clampNumber(value, fallback, min, max) {
   const n = typeof value === "number" ? value : typeof value === "string" ? Number(value) : NaN;
@@ -5753,6 +6816,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   localServer;
   outboxWatcher;
   memoryWiring;
+  assetMetadataIndexes = /* @__PURE__ */ new Map();
   state = "idle";
   startedAt = 0;
   workspaceId = "";
@@ -5769,6 +6833,9 @@ var Runner = class extends import_node_events3.EventEmitter {
     this.paths = this.opts.paths ?? resolvePaths();
     this.config = this.opts.configOverride ?? loadConfig(this.paths);
     this.shellConfig = resolveShellConfig(this.config.shell);
+    if (process.env.PRISMER_WORKSPACE_ID) {
+      this.workspaceId = process.env.PRISMER_WORKSPACE_ID;
+    }
     process.env.PRISMER_BASE_URL = this.config.cloud_api_base;
     process.env.PRISMER_API_KEY = this.config.api_key;
     this.db = openLocalDb(this.paths.localDb);
@@ -5806,6 +6873,16 @@ var Runner = class extends import_node_events3.EventEmitter {
       baseDir: `${this.paths.root}/memory`,
       deviceId: this.config.daemon_id
     });
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    if (this.workspaceId) {
+      this.syncAssetMetadata(this.workspaceId).catch(
+        (err) => console.error("[Daemon] Initial asset metadata sync failed:", err.message)
+      );
+    }
     const containerId = process.env.PRISMER_CONTAINER_ID;
     const isContainer = !!containerId || process.env.PRISMER_RUNTIME_MODE === "container";
     this.outboxWatcher = new OutboxWatcher({
@@ -5853,7 +6930,10 @@ var Runner = class extends import_node_events3.EventEmitter {
         // wiring step so it could be reviewed alongside the host-adapter
         // consumer (Hermes T2-B), which is what surfaces these routes to
         // an actual agent process.
-        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0
+        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0,
+        attachAsset: attachAssetRpc({
+          resolveIndex: (workspaceId) => this.assetMetadataIndexes.get(workspaceId)
+        })
       });
       await this.localServer.start();
     }
@@ -6049,10 +7129,10 @@ var Runner = class extends import_node_events3.EventEmitter {
     const rawJson = process.env.PRISMER_HOSTED_AGENT_JSON;
     let raw;
     if (rawFile) {
-      if (!(0, import_node_fs10.existsSync)(rawFile)) {
+      if (!(0, import_node_fs11.existsSync)(rawFile)) {
         throw new Error(`PRISMER_HOSTED_AGENT_FILE not found: ${rawFile}`);
       }
-      raw = (0, import_node_fs10.readFileSync)(rawFile, "utf8");
+      raw = (0, import_node_fs11.readFileSync)(rawFile, "utf8");
     } else if (rawJson) {
       raw = rawJson;
     }
@@ -6148,7 +7228,7 @@ var Runner = class extends import_node_events3.EventEmitter {
     const payload = {
       daemonId: this.config.daemon_id,
       daemonVersion: this.opts.daemonVersion ?? "0.0.0",
-      platform: (0, import_node_os3.platform)() === "win32" ? "win32" : (0, import_node_os3.platform)() === "linux" ? "linux" : "darwin",
+      platform: (0, import_node_os4.platform)() === "win32" ? "win32" : (0, import_node_os4.platform)() === "linux" ? "linux" : "darwin",
       agents: Array.from(this.hostedAgents.values()).map((a) => ({
         imUserId: a.imUserId,
         name: a.name,
@@ -6182,12 +7262,23 @@ var Runner = class extends import_node_events3.EventEmitter {
       case "workspace_file.changed":
         this.onWorkspaceFileChanged(msg.payload);
         return;
+      case "asset.changed":
+        void this.onAssetChanged(msg.payload);
+        return;
       default:
         this.emit("unknown-message", msg);
     }
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    this.syncAssetMetadata(this.workspaceId).catch(
+      (err) => console.error("[Daemon] Asset metadata sync failed:", err.message)
+    );
     for (const id of payload.profilesToSync) {
       try {
         await this.syncProfileFromCloud(id);
@@ -6247,6 +7338,7 @@ var Runner = class extends import_node_events3.EventEmitter {
           paths: this.paths,
           signal: ctrl.signal,
           ensureService: (profile, adapter) => this.servicePool.ensureService(profile, adapter),
+          assetMetadataIndexes: this.assetMetadataIndexes,
           onProgress: () => {
             const running = this.runningTasks.get(payload.taskId);
             if (running) running.lastProgressAt = Date.now();
@@ -6347,6 +7439,19 @@ var Runner = class extends import_node_events3.EventEmitter {
       this.emit("sync-error", err);
     }
   }
+  async onAssetChanged(payload) {
+    if (!payload.workspaceId) return;
+    const index = this.assetMetadataIndexes.get(payload.workspaceId);
+    if (!index) return;
+    try {
+      const result = await index.pullDelta();
+      if (result.applied > 0) {
+        console.log(`[Daemon] asset.changed workspace=${payload.workspaceId} applied=${result.applied}`);
+      }
+    } catch (err) {
+      console.error(`[Daemon] asset.changed pullDelta failed workspace=${payload.workspaceId}:`, err.message);
+    }
+  }
   onWorkspaceFileChanged(payload) {
     if (payload.operation === "delete") {
       this.db.prepare("DELETE FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?").run(payload.workspaceId, payload.path);
@@ -6382,6 +7487,28 @@ var Runner = class extends import_node_events3.EventEmitter {
       }
     };
   }
+  /**
+   * Ensure an AssetMetadataIndex exists for the given workspace and pull
+   * delta from cloud. Idempotent — creates the index on first call, reuses
+   * it on subsequent calls. Same cursor-catch-up semantics as WorkspaceMirror.
+   */
+  async syncAssetMetadata(workspaceId) {
+    let index = this.assetMetadataIndexes.get(workspaceId);
+    if (!index) {
+      const stateDir = `${this.paths.root}/${workspaceId}`;
+      index = new AssetMetadataIndex({
+        db: this.db,
+        cloud: this.cloud,
+        workspaceId,
+        workspaceStateDir: stateDir
+      });
+      this.assetMetadataIndexes.set(workspaceId, index);
+    }
+    const result = await index.pullDelta();
+    if (result.applied > 0) {
+      console.log(`[AssetMeta] workspace=${workspaceId}: ${result.applied} applied, cursor=${result.cursor}`);
+    }
+  }
   /**
    * SyncWorker FlushFn — pushes local writes to cloud.
    *
@@ -6505,715 +7632,165 @@ function validateStaticHostedAgent(raw) {
   if (!raw || typeof raw !== "object") throw new Error("binding must be a JSON object");
   const obj = raw;
   const profile = obj.profile;
-  const capabilities = obj.capabilities;
-  if (typeof obj.workspaceId !== "string" || obj.workspaceId.length === 0) throw new Error("workspaceId is required");
-  if (typeof obj.imUserId !== "string" || obj.imUserId.length === 0) throw new Error("imUserId is required");
-  if (typeof obj.name !== "string" || obj.name.length === 0) throw new Error("name is required");
-  if (typeof obj.adapterName !== "string" || obj.adapterName.length === 0) throw new Error("adapterName is required");
-  if (!Array.isArray(capabilities) || capabilities.some((v) => typeof v !== "string")) {
-    throw new Error("capabilities must be a string array");
-  }
-  if (!profile || typeof profile !== "object") throw new Error("profile is required");
-  if (typeof profile.id !== "string" || profile.id.length === 0) throw new Error("profile.id is required");
-  if (typeof profile.name !== "string" || profile.name.length === 0) throw new Error("profile.name is required");
-  if (typeof profile.adapterName !== "string" || profile.adapterName.length === 0) {
-    throw new Error("profile.adapterName is required");
-  }
-  if (profile.config !== void 0 && (!profile.config || typeof profile.config !== "object" || Array.isArray(profile.config))) {
-    throw new Error("profile.config must be a JSON object");
-  }
-  return {
-    workspaceId: obj.workspaceId,
-    imUserId: obj.imUserId,
-    name: obj.name,
-    adapterName: obj.adapterName,
-    capabilities,
-    profile: {
-      id: profile.id,
-      name: profile.name,
-      adapterName: profile.adapterName,
-      config: profile.config ?? {},
-      version: typeof profile.version === "number" && Number.isFinite(profile.version) ? profile.version : 1
-    }
-  };
-}
-function safeJsonParse(raw) {
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return raw;
-  }
-}
-
-// src/pair.ts
-var import_node_crypto6 = require("crypto");
-var import_node_os4 = require("os");
-var import_promises = require("timers/promises");
-var import_qrcode = __toESM(require("qrcode"), 1);
-async function pair(opts) {
-  const paths = opts.paths ?? resolvePaths();
-  if (configExists(paths) && !opts.force) {
-    throw new Error(
-      `Config already exists at ${paths.configFile}. Pass --force to overwrite, or run \`prismer status\` to inspect.`
-    );
-  }
-  const isLocalOnly = opts.isLocalOnly ?? (() => process.env.LOCAL_ONLY === "1");
-  const localOnlyMode = !!opts.asUserEmail;
-  if (localOnlyMode && !isLocalOnly()) {
-    throw new Error(
-      "pair: --as-user requires LOCAL_ONLY=1. Without that gate, this would skip mobile approval and silently mint a key for the named user."
-    );
-  }
-  const { publicKey } = (0, import_node_crypto6.generateKeyPairSync)("ed25519");
-  const devicePub = publicKey.export({ format: "der", type: "spki" }).toString("base64");
-  const cloud = new CloudClient({
-    baseUrl: opts.cloudBaseUrl,
-    apiKey: "pending",
-    // not used: we pass auth:false
-    fetchImpl: opts.fetchImpl
-  });
-  const offerRes = await cloud.request(
-    "POST",
-    "/api/im/pair/offer",
-    {
-      auth: false,
-      body: { devicePub, deviceName: opts.deviceName ?? (0, import_node_os4.hostname)() }
-    }
-  );
-  if (!offerRes.ok) {
-    throw new Error(`pair: offer failed (${offerRes.status}): ${offerRes.error?.message}`);
-  }
-  const offer = unwrapEnvelope(offerRes.data);
-  if (!offer.nonce || !offer.qrUrl) {
-    throw new Error("pair: cloud returned no nonce/qrUrl");
-  }
-  if (localOnlyMode) {
-    const approveRes = await cloud.request(
-      "POST",
-      "/api/im/pair/local-only-approve",
-      {
-        auth: false,
-        body: { nonce: offer.nonce, asUserEmail: opts.asUserEmail }
-      }
-    );
-    if (!approveRes.ok) {
-      throw new Error(
-        `pair: local-only-approve failed (${approveRes.status}): ${approveRes.error?.message ?? "unknown"}`
-      );
-    }
-    process.stdout.write(`[pair] LOCAL_ONLY approved as ${opts.asUserEmail} \u2014 no QR shown
-`);
-  } else {
-    const qrAscii = await import_qrcode.default.toString(offer.qrUrl, { type: "terminal", small: true });
-    process.stdout.write(qrAscii);
-    process.stdout.write(`
-Scan with Lumin to approve, or open: ${offer.qrUrl}
-
-`);
-    opts.onQrReady?.(offer.qrUrl);
-  }
-  const pollPath = `/api/im/pair/poll/${encodeURIComponent(offer.nonce)}?devicePub=${encodeURIComponent(devicePub)}`;
-  const maxAttempts = opts.maxPollAttempts ?? 60;
-  const pollIntervalMs = opts.pollIntervalMs ?? 5e3;
-  for (let i = 0; i < maxAttempts; i += 1) {
-    if (i > 0 || !localOnlyMode) {
-      await (0, import_promises.setTimeout)(pollIntervalMs);
-    }
-    const res = await cloud.request(
-      "GET",
-      pollPath,
-      { auth: false }
-    );
-    if (res.ok) {
-      const body = unwrapEnvelope(res.data);
-      if (body.apiKey) {
-        const config = {
-          api_key: body.apiKey,
-          cloud_api_base: opts.cloudBaseUrl,
-          daemon_id: newDaemonId()
-        };
-        saveConfig(config, paths);
-        return { config, paths };
-      }
-    }
-    if (res.status === 404 || res.status === 202) {
-      continue;
-    }
-    if (res.status >= 400 && res.status !== 404) {
-      throw new Error(`pair: poll failed (${res.status}): ${res.error?.message}`);
-    }
-  }
-  throw new Error("pair: timed out waiting for approval (5 min)");
-}
-function unwrapEnvelope(raw) {
-  if (raw && typeof raw === "object" && "ok" in raw) {
-    const env = raw;
-    if (env.ok && env.data) return env.data;
-  }
-  return raw;
-}
-
-// src/cli/index.ts
-var import_commander18 = require("commander");
-
-// src/cli/commands/adapter.ts
-var import_node_child_process5 = require("child_process");
-var import_node_fs12 = require("fs");
-var import_node_os5 = require("os");
-var import_node_path8 = require("path");
-var import_commander = require("commander");
-
-// src/cli/util.ts
-var import_node_fs11 = require("fs");
-var import_node_path7 = require("path");
-
-// src/cli/ui.ts
-var fs4 = __toESM(require("fs"), 1);
-var path6 = __toESM(require("path"), 1);
-var import_node_url = require("url");
-var import_meta2 = {};
-var BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-var COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
-function thisDirname() {
-  try {
-    return path6.dirname((0, import_node_url.fileURLToPath)(import_meta2.url));
-  } catch {
-    return process.cwd();
-  }
-}
-function findIconPath(size = "big") {
-  const name = size === "big" ? "icon" : "smallicon";
-  const here = thisDirname();
-  const candidates = [
-    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
-    path6.resolve(here, "../assets", name),
-    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
-    path6.resolve(here, "../../assets", name),
-    // source/typecheck: src/cli/ui.ts → ../../assets
-    path6.resolve(here, "../../assets", name),
-    // dev mode: cwd happens to be runtime root
-    path6.resolve(process.cwd(), "assets", name),
-    path6.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
-  ];
-  for (const candidate of candidates) {
-    try {
-      if (fs4.existsSync(candidate)) return candidate;
-    } catch {
-    }
-  }
-  return null;
-}
-var UI = class {
-  mode;
-  colorEnabled;
-  stream;
-  errStream;
-  constructor(opts) {
-    this.mode = opts?.mode ?? "pretty";
-    this.stream = opts?.stream ?? process.stdout;
-    this.errStream = opts?.errStream ?? process.stderr;
-    if (opts?.color !== void 0) {
-      this.colorEnabled = opts.color;
-    } else {
-      const isTTY = this.stream.isTTY === true;
-      const noColor = Boolean(process.env["NO_COLOR"]);
-      this.colorEnabled = isTTY && !noColor;
-    }
-  }
-  // ---- Internal color helpers ----
-  ansi(open, close, text) {
-    if (!this.colorEnabled) return text;
-    return `\x1B[${open}m${text}\x1B[${close}m`;
-  }
-  green(t) {
-    return this.ansi(32, 39, t);
-  }
-  red(t) {
-    return this.ansi(31, 39, t);
-  }
-  yellow(t) {
-    return this.ansi(33, 39, t);
-  }
-  cyan(t) {
-    return this.ansi(36, 39, t);
-  }
-  dim(t) {
-    return this.ansi(2, 22, t);
-  }
-  bold(t) {
-    return this.ansi(1, 22, t);
-  }
-  gray(t) {
-    return this.ansi(90, 39, t);
-  }
-  brandMark() {
-    return this.cyan("\u25C7");
-  }
-  colorBrandLine(line) {
-    let out = "";
-    for (const ch of line) {
-      if (ch === "\u2592") {
-        out += this.cyan(ch);
-      } else if (ch === "\u2593") {
-        out += this.dim(ch);
-      } else {
-        out += ch;
-      }
-    }
-    return out;
-  }
-  // ---- Core write helpers ----
-  write(text) {
-    this.stream.write(text);
-  }
-  writeErr(text) {
-    this.errStream.write(text);
-  }
-  // ---- Level 1: Header ----
-  header(text) {
-    if (this.mode === "json") return;
-    const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
-    this.write(prefix + this.bold(text) + "\n");
-  }
-  smallHeader(subtitle) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const iconPath = findIconPath("small");
-    if (iconPath !== null) {
-      try {
-        const raw = fs4.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
-        for (const line of raw.split("\n")) {
-          this.write(this.cyan(line) + "\n");
-        }
-      } catch {
-        this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-      }
-    } else {
-      this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  banner(subtitle, opts) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
-    const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
-    const iconPath = findIconPath("big");
-    const shouldUseFull = opts?.full === true || width >= 120;
-    if (shouldUseFull && iconPath !== null) {
-      try {
-        const raw = fs4.readFileSync(iconPath, "utf-8");
-        const lines = raw.split("\n");
-        for (const line of lines) {
-          const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
-          const stripped = brandedLine.trimEnd();
-          if (stripped.length === 0) {
-            this.write("\n");
-            continue;
-          }
-          const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
-          this.write(this.colorBrandLine(clipped) + "\n");
-        }
-      } catch {
-        this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-        this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
-      }
-    } else {
-      this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-      this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  // ---- Level 2: Primary data ----
-  blank() {
-    if (this.mode === "json") return;
-    this.write("\n");
-  }
-  line(text) {
-    if (this.mode === "json") return;
-    this.write(text + "\n");
-  }
-  info(text) {
-    this.line(text);
-  }
-  // ---- Level 3: Secondary ----
-  secondary(text, indent = 2) {
-    if (this.mode === "json") return;
-    this.write(" ".repeat(indent) + this.dim(text) + "\n");
-  }
-  // ---- Level 4: Action tips ----
-  tip(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Tip:") + " " + text + "\n");
-  }
-  next(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Next:") + " " + text + "\n");
-  }
-  // ---- Level 5: Status indicators ----
-  ok(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
-  }
-  success(text, detail) {
-    this.ok(text, detail);
-  }
-  fail(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
-  }
-  online(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.green("\u25CF") + " " + text + "\n");
-  }
-  offline(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.gray("\u25CB") + " " + text + "\n");
-  }
-  notInstalled(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
-  }
-  pending(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-  }
-  warn(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
-  }
-  // ---- Level 6: Error block ----
-  error(what, cause, fix) {
-    if (this.mode === "json") return;
-    this.writeErr(this.red("\u2717") + " " + what + "\n");
-    if (cause !== void 0) {
-      this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
-    }
-    if (fix !== void 0) {
-      this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
-    }
-  }
-  table(rowsOrOpts, maybeOpts) {
-    if (this.mode === "json") return;
-    const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
-    const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
-    if (!opts) throw new Error("table() requires columns");
-    const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
-    const cols = opts.columns;
-    const widths = cols.map((col) => col.length);
-    for (const row of rows) {
-      cols.forEach((col, i) => {
-        const val = row[col] ?? "";
-        const w = widths[i] ?? 0;
-        if (val.length > w) widths[i] = val.length;
-      });
-    }
-    const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
-    if (totalWidth > maxWidth) {
-      for (let i = 0; i < rows.length; i++) {
-        const row = rows[i];
-        if (!row) continue;
-        for (const col of cols) {
-          const val = row[col] ?? "";
-          this.write("  " + this.bold(col + ":") + " " + val + "\n");
-        }
-        if (i < rows.length - 1) this.write("\n");
-      }
-      return;
-    }
-    const header = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
-    this.write("  " + this.dim(header) + "\n");
-    for (const row of rows) {
-      const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
-      this.write("  " + line + "\n");
-    }
-  }
-  // ---- Spinner ----
-  spinner(text) {
-    if (this.mode === "quiet" || this.mode === "json") {
-      return {
-        update() {
-        },
-        stop() {
-        }
-      };
-    }
-    const isTTY = this.stream.isTTY === true;
-    if (!isTTY || !this.colorEnabled) {
-      this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-      return {
-        update: (t) => {
-          this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
-        },
-        stop: (final) => {
-          if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
-        }
-      };
-    }
-    let current = text;
-    let frameIdx = 0;
-    let stopped = false;
-    const write = this.write.bind(this);
-    const colorFn = this.yellow.bind(this);
-    const greenFn = this.green.bind(this);
-    function renderFrame() {
-      const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
-      const line = "  " + colorFn(frame) + " " + current;
-      write("\r" + line);
-      frameIdx++;
-    }
-    renderFrame();
-    const timer = setInterval(renderFrame, 80);
-    return {
-      update(t) {
-        if (stopped) return;
-        current = t;
-      },
-      stop(final) {
-        if (stopped) return;
-        stopped = true;
-        clearInterval(timer);
-        write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
-      }
-    };
-  }
-  // ---- Progress bar ----
-  progress(text, total) {
-    if (this.mode === "quiet" || this.mode === "json") {
-      return {
-        update() {
-        },
-        stop() {
-        }
-      };
-    }
-    const isTTY = this.stream.isTTY === true;
-    const start = Date.now();
-    const write = this.write.bind(this);
-    const colorFn = this.cyan.bind(this);
-    const dimFn = this.dim.bind(this);
-    const greenFn = this.green.bind(this);
-    let last = 0;
-    let lastDetail = "";
-    let stopped = false;
-    const render = () => {
-      if (stopped) return;
-      const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
-      const pct = Math.floor(frac * 100);
-      const width = 20;
-      const filled = Math.floor(frac * width);
-      const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
-      const elapsed = (Date.now() - start) / 1e3;
-      const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
-      const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
-      const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
-      const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
-      if (isTTY && this.colorEnabled) {
-        write("\r\x1B[2K" + line);
-      } else {
-        write(line + "\n");
-      }
-    };
-    render();
-    return {
-      update: (current, detail) => {
-        if (stopped) return;
-        last = current;
-        if (detail !== void 0) lastDetail = detail;
-        render();
-      },
-      stop: (final) => {
-        if (stopped) return;
-        stopped = true;
-        if (isTTY && this.colorEnabled) write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
-      }
-    };
-  }
-  // ---- JSON output ----
-  json(payload, opts) {
-    const indent = opts?.pretty ? 2 : void 0;
-    this.write(JSON.stringify(payload, null, indent) + "\n");
-  }
-  result(pretty, jsonPayload) {
-    if (this.mode === "pretty") {
-      pretty();
-    } else {
-      this.json(jsonPayload);
-    }
-  }
-};
-var _ui = null;
-function getUI() {
-  if (!_ui) _ui = new UI();
-  return _ui;
-}
-function setUI(ui) {
-  _ui = ui;
-}
-function applyCommonFlags(argv) {
-  let mode = "pretty";
-  const isTTY = process.stdout.isTTY === true;
-  const noColorEnv = Boolean(process.env["NO_COLOR"]);
-  let color2 = isTTY && !noColorEnv;
-  const rest = [];
-  for (const arg of argv) {
-    switch (arg) {
-      case "--no-color":
-        color2 = false;
-        break;
-      case "--color":
-        color2 = true;
-        break;
-      case "--json":
-      case "--pretty-json":
-        mode = "json";
-        if (arg === "--json") rest.push(arg);
-        break;
-      case "--quiet":
-        mode = "quiet";
-        break;
-      default:
-        rest.push(arg);
-    }
-  }
-  return { mode, color: color2, restArgv: rest };
-}
-
-// src/cli/util.ts
-var DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
-var ANSI = {
-  reset: "\x1B[0m",
-  bold: "\x1B[1m",
-  dim: "\x1B[2m",
-  cyan: "\x1B[36m",
-  green: "\x1B[32m",
-  yellow: "\x1B[33m",
-  red: "\x1B[31m"
-};
-function color(kind, text) {
-  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
-  return `${ANSI[kind]}${text}${ANSI.reset}`;
-}
-function printJson(v) {
-  getUI().json(v, { pretty: true });
-}
-function exitWithError(message, opts) {
-  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
-  const exitCode = o.exitCode ?? 1;
-  const ui = getUI();
-  if (ui.mode === "json") {
-    const payload = {
-      ok: false,
-      error: { code: o.code ?? "cli_error", message },
-      ...o.details ? { details: o.details } : {}
-    };
-    ui.json(payload, { pretty: true });
-  } else {
-    process.stderr.write(`Error: ${message}
-`);
-  }
-  process.exit(exitCode);
-}
-function normalizeCloudUrl(input) {
-  const raw = input.trim();
-  if (!raw) throw new Error("Cloud URL is empty.");
-  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
-    let parsed;
-    try {
-      parsed = new URL(raw);
-    } catch {
-      throw new Error(`Invalid --cloud URL: ${raw}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
-    }
-    return raw.replace(/\/$/, "");
+  const capabilities = obj.capabilities;
+  if (typeof obj.workspaceId !== "string" || obj.workspaceId.length === 0) throw new Error("workspaceId is required");
+  if (typeof obj.imUserId !== "string" || obj.imUserId.length === 0) throw new Error("imUserId is required");
+  if (typeof obj.name !== "string" || obj.name.length === 0) throw new Error("name is required");
+  if (typeof obj.adapterName !== "string" || obj.adapterName.length === 0) throw new Error("adapterName is required");
+  if (!Array.isArray(capabilities) || capabilities.some((v) => typeof v !== "string")) {
+    throw new Error("capabilities must be a string array");
   }
-  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
-    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
+  if (!profile || typeof profile !== "object") throw new Error("profile is required");
+  if (typeof profile.id !== "string" || profile.id.length === 0) throw new Error("profile.id is required");
+  if (typeof profile.name !== "string" || profile.name.length === 0) throw new Error("profile.name is required");
+  if (typeof profile.adapterName !== "string" || profile.adapterName.length === 0) {
+    throw new Error("profile.adapterName is required");
   }
-  const candidate = `http://${raw}`;
-  try {
-    new URL(candidate);
-  } catch {
-    throw new Error(`Invalid --cloud URL: ${raw}`);
+  if (profile.config !== void 0 && (!profile.config || typeof profile.config !== "object" || Array.isArray(profile.config))) {
+    throw new Error("profile.config must be a JSON object");
   }
-  return candidate.replace(/\/$/, "");
-}
-function runAction(fn, opts = {}) {
-  return async (...args) => {
-    try {
-      await fn(...args);
-    } catch (err) {
-      const raw = err instanceof Error ? err.message : String(err);
-      const message = opts.sanitize ? opts.sanitize(raw) : raw;
-      exitWithError(message, { code: opts.code });
+  return {
+    workspaceId: obj.workspaceId,
+    imUserId: obj.imUserId,
+    name: obj.name,
+    adapterName: obj.adapterName,
+    capabilities,
+    profile: {
+      id: profile.id,
+      name: profile.name,
+      adapterName: profile.adapterName,
+      config: profile.config ?? {},
+      version: typeof profile.version === "number" && Number.isFinite(profile.version) ? profile.version : 1
     }
   };
 }
-function printBanner(opts = {}) {
-  const ui = getUI();
-  if (opts.compact) {
-    ui.smallHeader("Runtime CLI v1.9.3");
-    return;
+function safeJsonParse(raw) {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return raw;
   }
-  ui.banner("Runtime CLI v1.9.3", { full: true });
-}
-function ok(label, detail) {
-  getUI().ok(label, detail);
-}
-function warn(label, detail) {
-  getUI().warn(label, detail);
-}
-function fail2(label, detail) {
-  getUI().fail(label, detail);
-}
-function tip(command, detail) {
-  const text = detail ? `${command}  ${detail}` : command;
-  getUI().tip(text);
-}
-function pidFilePath(paths) {
-  return (0, import_node_path7.join)(paths.root, "daemon.pid");
-}
-function writePidFile(paths, pid) {
-  (0, import_node_fs11.writeFileSync)(pidFilePath(paths), `${pid}
-`, "utf8");
-}
-function readPidFile(paths) {
-  const p = pidFilePath(paths);
-  if (!(0, import_node_fs11.existsSync)(p)) return void 0;
-  const raw = (0, import_node_fs11.readFileSync)(p, "utf8").trim();
-  const pid = Number.parseInt(raw, 10);
-  return Number.isFinite(pid) ? pid : void 0;
 }
-function clearPidFile(paths) {
-  const p = pidFilePath(paths);
-  if ((0, import_node_fs11.existsSync)(p)) {
-    try {
-      (0, import_node_fs11.unlinkSync)(p);
-    } catch {
+
+// src/pair.ts
+var import_node_crypto5 = require("crypto");
+var import_node_os5 = require("os");
+var import_promises = require("timers/promises");
+var import_qrcode = __toESM(require("qrcode"), 1);
+async function pair(opts) {
+  const paths = opts.paths ?? resolvePaths();
+  if (configExists(paths) && !opts.force) {
+    throw new Error(
+      `Config already exists at ${paths.configFile}. Pass --force to overwrite, or run \`prismer status\` to inspect.`
+    );
+  }
+  const isLocalOnly = opts.isLocalOnly ?? (() => process.env.LOCAL_ONLY === "1");
+  const localOnlyMode = !!opts.asUserEmail;
+  if (localOnlyMode && !isLocalOnly()) {
+    throw new Error(
+      "pair: --as-user requires LOCAL_ONLY=1. Without that gate, this would skip mobile approval and silently mint a key for the named user."
+    );
+  }
+  const { publicKey } = (0, import_node_crypto5.generateKeyPairSync)("ed25519");
+  const devicePub = publicKey.export({ format: "der", type: "spki" }).toString("base64");
+  const cloud = new CloudClient({
+    baseUrl: opts.cloudBaseUrl,
+    apiKey: "pending",
+    // not used: we pass auth:false
+    fetchImpl: opts.fetchImpl
+  });
+  const offerRes = await cloud.request(
+    "POST",
+    "/api/im/pair/offer",
+    {
+      auth: false,
+      body: { devicePub, deviceName: opts.deviceName ?? (0, import_node_os5.hostname)() }
+    }
+  );
+  if (!offerRes.ok) {
+    throw new Error(`pair: offer failed (${offerRes.status}): ${offerRes.error?.message}`);
+  }
+  const offer = unwrapEnvelope(offerRes.data);
+  if (!offer.nonce || !offer.qrUrl) {
+    throw new Error("pair: cloud returned no nonce/qrUrl");
+  }
+  if (localOnlyMode) {
+    const approveRes = await cloud.request(
+      "POST",
+      "/api/im/pair/local-only-approve",
+      {
+        auth: false,
+        body: { nonce: offer.nonce, asUserEmail: opts.asUserEmail }
+      }
+    );
+    if (!approveRes.ok) {
+      throw new Error(
+        `pair: local-only-approve failed (${approveRes.status}): ${approveRes.error?.message ?? "unknown"}`
+      );
+    }
+    process.stdout.write(`[pair] LOCAL_ONLY approved as ${opts.asUserEmail} \u2014 no QR shown
+`);
+  } else {
+    const qrAscii = await import_qrcode.default.toString(offer.qrUrl, { type: "terminal", small: true });
+    process.stdout.write(qrAscii);
+    process.stdout.write(`
+Scan with Lumin to approve, or open: ${offer.qrUrl}
+
+`);
+    opts.onQrReady?.(offer.qrUrl);
+  }
+  const pollPath = `/api/im/pair/poll/${encodeURIComponent(offer.nonce)}?devicePub=${encodeURIComponent(devicePub)}`;
+  const maxAttempts = opts.maxPollAttempts ?? 60;
+  const pollIntervalMs = opts.pollIntervalMs ?? 5e3;
+  for (let i = 0; i < maxAttempts; i += 1) {
+    if (i > 0 || !localOnlyMode) {
+      await (0, import_promises.setTimeout)(pollIntervalMs);
+    }
+    const res = await cloud.request(
+      "GET",
+      pollPath,
+      { auth: false }
+    );
+    if (res.ok) {
+      const body = unwrapEnvelope(res.data);
+      if (body.apiKey) {
+        const config = {
+          api_key: body.apiKey,
+          cloud_api_base: opts.cloudBaseUrl,
+          daemon_id: newDaemonId()
+        };
+        saveConfig(config, paths);
+        return { config, paths };
+      }
+    }
+    if (res.status === 404 || res.status === 202) {
+      continue;
+    }
+    if (res.status >= 400 && res.status !== 404) {
+      throw new Error(`pair: poll failed (${res.status}): ${res.error?.message}`);
     }
   }
+  throw new Error("pair: timed out waiting for approval (5 min)");
 }
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
+function unwrapEnvelope(raw) {
+  if (raw && typeof raw === "object" && "ok" in raw) {
+    const env = raw;
+    if (env.ok && env.data) return env.data;
   }
+  return raw;
 }
 
+// src/cli/index.ts
+var import_commander18 = require("commander");
+
 // src/cli/commands/adapter.ts
+var import_node_child_process5 = require("child_process");
+var import_node_fs13 = require("fs");
+var import_node_os6 = require("os");
+var import_node_path9 = require("path");
+var import_commander = require("commander");
+init_util();
+init_ui();
 var BUILTIN_ADAPTERS = [hermesAdapter, claudeCodeAdapter, openclawAdapter, codexAdapter];
 var INSTALL_SPECS = {
   "claude-code": {
@@ -7223,7 +7800,7 @@ var INSTALL_SPECS = {
     binary: "claude",
     hint: "Set ANTHROPIC_API_KEY in your shell profile, or rely on Claude Code OAuth login. Run `claude login` to sign in.",
     authHints: ["ANTHROPIC_API_KEY or Claude Code OAuth login (`claude login`)"],
-    hookTarget: { path: (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".claude", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".claude", "hooks.json"), kind: "json-file" }
   },
   openclaw: {
     name: "openclaw",
@@ -7232,7 +7809,7 @@ var INSTALL_SPECS = {
     binary: "openclaw",
     hint: "OpenClaw runs as a gateway. Configure ~/.openclaw/openclaw.json and start it with `openclaw gateway` before tasks dispatch.",
     authHints: ["~/.openclaw/openclaw.json gateway.auth.bearerTokens", "Prismer daemon api_key"],
-    hookTarget: { path: (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".openclaw", "hooks"), kind: "directory" }
+    hookTarget: { path: (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".openclaw", "hooks"), kind: "directory" }
   },
   codex: {
     name: "codex",
@@ -7241,7 +7818,7 @@ var INSTALL_SPECS = {
     binary: "codex",
     hint: "Set OPENAI_API_KEY in your shell profile. Verify with `codex --help`.",
     authHints: ["OPENAI_API_KEY or Codex CLI account login"],
-    hookTarget: { path: (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".codex", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".codex", "hooks.json"), kind: "json-file" }
   },
   hermes: {
     name: "hermes",
@@ -7250,7 +7827,7 @@ var INSTALL_SPECS = {
     binary: "hermes",
     hint: "Hermes runs as a long-lived HTTP gateway in your own Python venv. Start with `hermes -p <profile> gateway` after configuring ~/.hermes/.env.",
     authHints: ["~/.hermes/.env API_SERVER_KEY", "Hermes profile provider credentials"],
-    hookTarget: { path: (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".hermes", "hooks.json"), kind: "json-file" }
+    hookTarget: { path: (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".hermes", "hooks.json"), kind: "json-file" }
   }
 };
 function buildAdapterCommand() {
@@ -7465,15 +8042,15 @@ function runHooks(spec, opts) {
   }
   let backup;
   if (planned.kind === "directory") {
-    (0, import_node_fs12.mkdirSync)(planned.path, { recursive: true });
-    const markerPath = (0, import_node_path8.join)(planned.path, "prismer.json");
+    (0, import_node_fs13.mkdirSync)(planned.path, { recursive: true });
+    const markerPath = (0, import_node_path9.join)(planned.path, "prismer.json");
     backup = backupIfExists(markerPath);
-    (0, import_node_fs12.writeFileSync)(markerPath, JSON.stringify(prismerHookMarker(spec), null, 2) + "\n", "utf8");
+    (0, import_node_fs13.writeFileSync)(markerPath, JSON.stringify(prismerHookMarker(spec), null, 2) + "\n", "utf8");
   } else {
-    (0, import_node_fs12.mkdirSync)((0, import_node_path8.dirname)(planned.path), { recursive: true });
+    (0, import_node_fs13.mkdirSync)((0, import_node_path9.dirname)(planned.path), { recursive: true });
     backup = backupIfExists(planned.path);
     const merged = mergeHookJson(planned.path, spec);
-    (0, import_node_fs12.writeFileSync)(planned.path, JSON.stringify(merged, null, 2) + "\n", "utf8");
+    (0, import_node_fs13.writeFileSync)(planned.path, JSON.stringify(merged, null, 2) + "\n", "utf8");
   }
   return {
     ok: true,
@@ -7540,23 +8117,23 @@ function inspectAuthEnv(spec) {
         hints: spec.authHints ?? []
       };
     case "hermes": {
-      const envFile = (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".hermes", ".env");
+      const envFile = (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".hermes", ".env");
       return {
-        ok: (0, import_node_fs12.existsSync)(envFile) || Boolean(process.env.HERMES_API_KEY || process.env.API_SERVER_KEY),
+        ok: (0, import_node_fs13.existsSync)(envFile) || Boolean(process.env.HERMES_API_KEY || process.env.API_SERVER_KEY),
         present: [
           ...["HERMES_API_KEY", "API_SERVER_KEY"].filter((k) => Boolean(process.env[k])),
-          ...(0, import_node_fs12.existsSync)(envFile) ? [envFile] : []
+          ...(0, import_node_fs13.existsSync)(envFile) ? [envFile] : []
         ],
         hints: spec.authHints ?? []
       };
     }
     case "openclaw": {
-      const cfgFile = (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".openclaw", "openclaw.json");
+      const cfgFile = (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".openclaw", "openclaw.json");
       return {
-        ok: (0, import_node_fs12.existsSync)(cfgFile) || Boolean(process.env.OPENCLAW_API_KEY),
+        ok: (0, import_node_fs13.existsSync)(cfgFile) || Boolean(process.env.OPENCLAW_API_KEY),
         present: [
           ...["OPENCLAW_API_KEY"].filter((k) => Boolean(process.env[k])),
-          ...(0, import_node_fs12.existsSync)(cfgFile) ? [cfgFile] : []
+          ...(0, import_node_fs13.existsSync)(cfgFile) ? [cfgFile] : []
         ],
         hints: spec.authHints ?? []
       };
@@ -7571,32 +8148,32 @@ function inspectHook(spec) {
     return { supported: false, markerPresent: false };
   }
   if (spec.name === "openclaw") {
-    const jsonPath = (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".openclaw", "hooks.json");
-    const markerPath = (0, import_node_path8.join)(target.path, "prismer.json");
-    const jsonMarkerPresent = (0, import_node_fs12.existsSync)(jsonPath) && fileContainsPrismerMarker(jsonPath);
-    const dirMarkerPresent = (0, import_node_fs12.existsSync)(markerPath) && fileContainsPrismerMarker(markerPath);
+    const jsonPath = (0, import_node_path9.join)((0, import_node_os6.homedir)(), ".openclaw", "hooks.json");
+    const markerPath = (0, import_node_path9.join)(target.path, "prismer.json");
+    const jsonMarkerPresent = (0, import_node_fs13.existsSync)(jsonPath) && fileContainsPrismerMarker(jsonPath);
+    const dirMarkerPresent = (0, import_node_fs13.existsSync)(markerPath) && fileContainsPrismerMarker(markerPath);
     return {
       supported: true,
       kind: "json-file-or-directory",
       path: target.path,
       jsonPath,
-      exists: (0, import_node_fs12.existsSync)(target.path) || (0, import_node_fs12.existsSync)(jsonPath),
+      exists: (0, import_node_fs13.existsSync)(target.path) || (0, import_node_fs13.existsSync)(jsonPath),
       markerPath,
       markerPresent: jsonMarkerPresent || dirMarkerPresent
     };
   }
   if (target.kind === "directory") {
-    const markerPath = (0, import_node_path8.join)(target.path, "prismer.json");
+    const markerPath = (0, import_node_path9.join)(target.path, "prismer.json");
     return {
       supported: true,
       kind: target.kind,
       path: target.path,
-      exists: (0, import_node_fs12.existsSync)(target.path),
+      exists: (0, import_node_fs13.existsSync)(target.path),
       markerPath,
-      markerPresent: (0, import_node_fs12.existsSync)(markerPath) && fileContainsPrismerMarker(markerPath)
+      markerPresent: (0, import_node_fs13.existsSync)(markerPath) && fileContainsPrismerMarker(markerPath)
     };
   }
-  const exists = (0, import_node_fs12.existsSync)(target.path);
+  const exists = (0, import_node_fs13.existsSync)(target.path);
   if (!exists) {
     return {
       supported: true,
@@ -7632,14 +8209,14 @@ function prismerHookMarker(spec) {
 }
 function mergeHookJson(path7, spec) {
   const marker = prismerHookMarker(spec);
-  if (!(0, import_node_fs12.existsSync)(path7)) {
+  if (!(0, import_node_fs13.existsSync)(path7)) {
     return {
       prismer: marker
     };
   }
   let parsed;
   try {
-    parsed = JSON.parse((0, import_node_fs12.readFileSync)(path7, "utf8"));
+    parsed = JSON.parse((0, import_node_fs13.readFileSync)(path7, "utf8"));
   } catch (err) {
     throw new Error(`Cannot parse ${path7} as JSON: ${err.message}`);
   }
@@ -7663,17 +8240,17 @@ function mergeHookJson(path7, spec) {
   return next;
 }
 function backupIfExists(path7) {
-  if (!(0, import_node_fs12.existsSync)(path7)) return null;
+  if (!(0, import_node_fs13.existsSync)(path7)) return null;
   const suffix = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const backup = `${path7}.bak.${suffix}`;
-  const stat = (0, import_node_fs12.statSync)(path7);
+  const stat = (0, import_node_fs13.statSync)(path7);
   if (stat.isDirectory()) return null;
-  (0, import_node_fs12.copyFileSync)(path7, backup);
+  (0, import_node_fs13.copyFileSync)(path7, backup);
   return backup;
 }
 function fileContainsPrismerMarker(path7) {
   try {
-    return (0, import_node_fs12.readFileSync)(path7, "utf8").includes("prismer-daemon-runtime");
+    return (0, import_node_fs13.readFileSync)(path7, "utf8").includes("prismer-daemon-runtime");
   } catch {
     return false;
   }
@@ -7736,6 +8313,8 @@ function clearInstallInConfig(name) {
 // src/cli/commands/agent.ts
 var import_commander2 = require("commander");
 var import_node_child_process6 = require("child_process");
+init_util();
+init_ui();
 var ADAPTER_BINARY = {
   "claude-code": "claude",
   codex: "codex",
@@ -8115,8 +8694,10 @@ function whichBinary2(bin) {
 
 // src/cli/commands/asset.ts
 var import_commander3 = require("commander");
-var import_node_fs13 = require("fs");
-var import_node_path9 = require("path");
+var import_node_fs14 = require("fs");
+var import_node_path10 = require("path");
+init_util();
+init_ui();
 function buildAssetCommand() {
   const cmd = new import_commander3.Command("asset").description("Inspect IM assets");
   cmd.command("list").description("List assets for a workspace, optionally filtered by task").option("--workspace-id <id>", "Workspace id").option("--task-id <id>", "Task id filter").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -8187,9 +8768,9 @@ function mkCloud() {
   return new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
 }
 async function uploadAsset(file, opts) {
-  if (!(0, import_node_fs13.existsSync)(file)) exitWithError(`file not found: ${file}`);
+  if (!(0, import_node_fs14.existsSync)(file)) exitWithError(`file not found: ${file}`);
   const cfg = loadConfig(resolvePaths());
-  const bytes = (0, import_node_fs13.readFileSync)(file);
+  const bytes = (0, import_node_fs14.readFileSync)(file);
   const metadata = parseMetadata(opts.metadata);
   if (opts.taskId && metadata.taskId === void 0) metadata.taskId = opts.taskId;
   if (opts.containerId && metadata.containerId === void 0) metadata.containerId = opts.containerId;
@@ -8199,7 +8780,7 @@ async function uploadAsset(file, opts) {
   if (opts.agentId) form.set("sourceAgentImUserId", opts.agentId);
   if (opts.taskId) form.set("sourceTaskId", opts.taskId);
   if (Object.keys(metadata).length > 0) form.set("metadata", JSON.stringify(metadata));
-  form.set("file", new Blob([bytes], { type: opts.mime ?? "application/octet-stream" }), (0, import_node_path9.basename)(file));
+  form.set("file", new Blob([bytes], { type: opts.mime ?? "application/octet-stream" }), (0, import_node_path10.basename)(file));
   const url = `${cfg.cloud_api_base.replace(/\/$/, "")}/api/im/assets`;
   let res;
   try {
@@ -8225,7 +8806,7 @@ async function downloadAsset(assetId, outPath) {
     exitWithError(`asset download failed (${res.status}): ${errorMessage(body)}`);
   }
   const bytes = Buffer.from(await res.arrayBuffer());
-  (0, import_node_fs13.writeFileSync)(outPath, bytes);
+  (0, import_node_fs14.writeFileSync)(outPath, bytes);
 }
 function parseMetadata(raw) {
   if (!raw) return {};
@@ -8313,6 +8894,7 @@ function stringField(obj, key) {
 
 // src/cli/commands/banner.ts
 var import_commander4 = require("commander");
+init_util();
 function buildBannerCommand() {
   return new import_commander4.Command("banner").description("Show the Prismer runtime CLI banner").option("--compact", "Show a single-line banner").option("--json", "Accept --json for global flag compatibility (banner is suppressed in JSON mode)").action((opts) => {
     printBanner({ compact: opts.compact });
@@ -8321,6 +8903,8 @@ function buildBannerCommand() {
 
 // src/cli/commands/chat.ts
 var import_commander5 = require("commander");
+init_util();
+init_ui();
 function buildChatCommand() {
   const cmd = new import_commander5.Command("chat").description("Use IM chat and group APIs");
   cmd.command("me").description("Show the current IM identity").option("--json", "Print raw JSON response").action(async (opts) => {
@@ -8495,6 +9079,8 @@ function sanitizeError(message) {
 
 // src/cli/commands/config.ts
 var import_commander6 = require("commander");
+init_util();
+init_ui();
 var SETTABLE_KEYS = ["cloud_api_base", "api_key", "daemon_id"];
 function redactApiKey(key) {
   if (!key.startsWith("sk-prismer-")) return "***";
@@ -8590,6 +9176,8 @@ function buildConfigCommand() {
 
 // src/cli/commands/cookbook.ts
 var import_commander7 = require("commander");
+init_util();
+init_ui();
 function buildCookbookCommand() {
   const cmd = new import_commander7.Command("cookbook").description("Run CLI-only 54release MVP regression suites");
   cmd.command("run").description("Run one or more cookbook smoke suites using the configured API key").option("--suite <name>", "status|im|task|group|asset|sandbox|all, comma-separated", "all").option("--workspace-id <id>", "Workspace id for workspace-scoped suites").option("--agent-id <id>", "Agent IM user id for task create smoke").option("--group-id <id>", "Group/conversation id for group message history smoke").option("--sandbox-id <id>", "Sandbox id for sandbox status smoke").option("--prompt <text>", "Prompt for optional task create smoke").option("--timeout-ms <ms>", "Request/task timeout", parsePositiveInt2, 6e4).option("--strict", "Treat skipped optional checks as failure").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -8847,9 +9435,11 @@ function parsePositiveInt2(value) {
 // src/cli/commands/daemon.ts
 var import_commander8 = require("commander");
 var import_node_child_process7 = require("child_process");
-var import_node_fs14 = require("fs");
+var import_node_fs15 = require("fs");
 var import_promises2 = require("timers/promises");
-var import_node_path10 = require("path");
+var import_node_path11 = require("path");
+init_util();
+init_ui();
 function buildDaemonCommand() {
   const cmd = new import_commander8.Command("daemon").description("Manage the prismer daemon process");
   cmd.command("start").description("Start the daemon in the background (use --foreground for Docker/systemd)").option("--port <port>", "Local server port (default 3210)", (v) => Number.parseInt(v, 10)).option("--no-local-server", "Skip starting the local 127.0.0.1 server").option("--foreground", "Run in the foreground instead of daemonizing").option("--json", "Output machine-readable JSON").action(async (opts) => {
@@ -8921,9 +9511,9 @@ function buildDaemonCommand() {
     if (existingPid && pidAlive(existingPid)) {
       exitWithError(`Daemon already running (pid ${existingPid}). Use \`prismer daemon stop\` first.`);
     }
-    if (!(0, import_node_fs14.existsSync)(paths.logsDir)) (0, import_node_fs14.mkdirSync)(paths.logsDir, { recursive: true });
-    const logFile = (0, import_node_path10.join)(paths.logsDir, "daemon.log");
-    const fd = (0, import_node_fs14.openSync)(logFile, "a");
+    if (!(0, import_node_fs15.existsSync)(paths.logsDir)) (0, import_node_fs15.mkdirSync)(paths.logsDir, { recursive: true });
+    const logFile = (0, import_node_path11.join)(paths.logsDir, "daemon.log");
+    const fd = (0, import_node_fs15.openSync)(logFile, "a");
     const args = [process.argv[1], "daemon", "run"];
     if (opts.port) args.push("--port", String(opts.port));
     if (opts.localServer === false) args.push("--no-local-server");
@@ -9006,8 +9596,8 @@ function buildDaemonCommand() {
   });
   cmd.command("logs").description("Show daemon logs").option("--tail <n>", "Number of lines to show", (v) => Number.parseInt(v, 10), 80).option("--follow", "Follow log output").option("--json", "Accept --json for global flag compatibility (raw log bytes are streamed)").action(async (opts) => {
     const paths = resolvePaths();
-    const logFile = (0, import_node_path10.join)(paths.logsDir, "daemon.log");
-    if (!(0, import_node_fs14.existsSync)(logFile)) {
+    const logFile = (0, import_node_path11.join)(paths.logsDir, "daemon.log");
+    if (!(0, import_node_fs15.existsSync)(logFile)) {
       exitWithError(`No daemon log found at ${logFile}. Start the daemon with \`prismer daemon start\`.`);
     }
     const lines = Math.max(1, opts.tail);
@@ -9048,13 +9638,13 @@ async function tailFromEnd(path7, lines) {
   }
 }
 async function followFile(path7) {
-  let offset = (0, import_node_fs14.statSync)(path7).size;
+  let offset = (0, import_node_fs15.statSync)(path7).size;
   for (; ; ) {
     await (0, import_promises2.setTimeout)(1e3);
-    const size = (0, import_node_fs14.statSync)(path7).size;
+    const size = (0, import_node_fs15.statSync)(path7).size;
     if (size < offset) offset = 0;
     if (size === offset) continue;
-    const stream = (0, import_node_fs14.createReadStream)(path7, { start: offset, end: size - 1, encoding: "utf8" });
+    const stream = (0, import_node_fs15.createReadStream)(path7, { start: offset, end: size - 1, encoding: "utf8" });
     for await (const chunk of stream) process.stdout.write(chunk);
     offset = size;
   }
@@ -9062,15 +9652,16 @@ async function followFile(path7) {
 
 // src/cli/commands/events.ts
 var import_commander9 = require("commander");
-var import_node_fs15 = require("fs");
-var import_node_os6 = require("os");
-var import_node_path11 = require("path");
+var import_node_fs16 = require("fs");
+var import_node_os7 = require("os");
+var import_node_path12 = require("path");
 var import_node_readline = require("readline");
-var DEFAULT_LIMIT = 50;
+init_util();
+var DEFAULT_LIMIT2 = 50;
 function buildEventsCommand() {
   return addEventOptions(new import_commander9.Command("events").description("Read local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!(0, import_node_fs15.existsSync)(file)) {
+    if (!(0, import_node_fs16.existsSync)(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -9087,7 +9678,7 @@ function buildEventsCommand() {
 function buildEventsStatsCommand() {
   return addEventOptions(new import_commander9.Command("events:stats").description("Summarize local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!(0, import_node_fs15.existsSync)(file)) {
+    if (!(0, import_node_fs16.existsSync)(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -9102,10 +9693,10 @@ function buildEventsStatsCommand() {
   });
 }
 function addEventOptions(cmd) {
-  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
+  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT2).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
 }
 function eventsPath() {
-  return (0, import_node_path11.join)(process.env.PRISMER_HOME ?? (0, import_node_path11.join)((0, import_node_os6.homedir)(), ".prismer"), "para", "events.jsonl");
+  return (0, import_node_path12.join)(process.env.PRISMER_HOME ?? (0, import_node_path12.join)((0, import_node_os7.homedir)(), ".prismer"), "para", "events.jsonl");
 }
 function unavailable(file) {
   return {
@@ -9121,7 +9712,7 @@ function unavailable(file) {
 async function readEvents(file, filters) {
   const out = [];
   const rl = (0, import_node_readline.createInterface)({
-    input: (0, import_node_fs15.createReadStream)(file, { encoding: "utf8" }),
+    input: (0, import_node_fs16.createReadStream)(file, { encoding: "utf8" }),
     crlfDelay: Infinity
   });
   for await (const line of rl) {
@@ -9173,7 +9764,7 @@ function bump(map, key) {
 }
 function normalizeFilters(opts) {
   return {
-    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT)),
+    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT2)),
     agentId: opts.agentId,
     sessionId: opts.sessionId,
     family: opts.family,
@@ -9185,13 +9776,14 @@ function cleanFilters(filters) {
 }
 function parsePositiveInt3(v) {
   const n = Number.parseInt(v, 10);
-  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT;
+  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT2;
 }
 
 // src/cli/commands/memory.ts
 var import_better_sqlite34 = __toESM(require("better-sqlite3"), 1);
 var import_commander10 = require("commander");
-var import_node_fs16 = require("fs");
+var import_node_fs17 = require("fs");
+init_util();
 var LOCAL_BASE = process.env.PRISMER_DAEMON_URL ?? "http://127.0.0.1:3210";
 function buildMemoryCommand() {
   const cmd = new import_commander10.Command("memory").description("Inspect local daemon memory/cache state");
@@ -9283,7 +9875,7 @@ async function tryDaemon(methods, paths) {
       try {
         const res = await fetch(`${LOCAL_BASE}${path7}`, { method, signal: AbortSignal.timeout(1500) });
         if (res.status === 404) continue;
-        const body = await readJson3(res);
+        const body = await readJson4(res);
         if (!res.ok) {
           return {
             ok: false,
@@ -9302,7 +9894,7 @@ async function tryDaemon(methods, paths) {
   }
   return void 0;
 }
-async function readJson3(res) {
+async function readJson4(res) {
   const text = await res.text();
   if (!text) return null;
   try {
@@ -9342,7 +9934,7 @@ function readCacheSnapshot(limit) {
   const paths = resolvePaths();
   const empty = {
     dbPath: paths.localDb,
-    dbExists: (0, import_node_fs16.existsSync)(paths.localDb),
+    dbExists: (0, import_node_fs17.existsSync)(paths.localDb),
     tables: {
       cached_assets: { exists: false, count: 0, sizeBytes: 0 },
       workspace_files_mirror: { exists: false, count: 0 }
@@ -9396,9 +9988,9 @@ function readCacheSnapshot(limit) {
     db?.close();
   }
 }
-function tableExists(db, table) {
-  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table);
-  return row?.name === table;
+function tableExists(db, table2) {
+  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table2);
+  return row?.name === table2;
 }
 function assetRow(row) {
   const hash = String(row.content_hash ?? "");
@@ -9462,6 +10054,8 @@ function messageFromBody(body) {
 
 // src/cli/commands/pair.ts
 var import_commander11 = require("commander");
+init_util();
+init_ui();
 function buildPairCommand() {
   return new import_commander11.Command("pair").description("Legacy QR approval path; use `prismer setup` to bind this runtime").option(
     "--cloud <url>",
@@ -9504,10 +10098,11 @@ function buildPairCommand() {
 
 // src/cli/commands/profile.ts
 var import_commander12 = require("commander");
-var import_node_fs17 = require("fs");
-var import_node_os7 = require("os");
-var import_node_path12 = require("path");
+var import_node_fs18 = require("fs");
+var import_node_os8 = require("os");
+var import_node_path13 = require("path");
 var import_node_child_process8 = require("child_process");
+init_util();
 function buildProfileCommand() {
   const cmd = new import_commander12.Command("profile").description("Manage AgentProfile (per-agent adapter config)");
   cmd.command("templates").description("List built-in role templates (PM / Engineer / CEO \u2026)").option("--json", "Output JSON (default)").action(() => {
@@ -9518,7 +10113,7 @@ function buildProfileCommand() {
     const data = await cloud.get(`/api/im/agent_profiles?agentId=${encodeURIComponent(opts.agent)}`);
     printJson(data);
   }, { code: "profile_list_failed" }));
-  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
+  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--model <name>", "Model id (overrides template default; fetched from cloud if omitted)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
     let configObj = {};
     let adapterName = opts.adapter ?? "hermes";
     if (opts.fromTemplate) {
@@ -9531,6 +10126,9 @@ function buildProfileCommand() {
       const inline = readJsonArg(opts.config);
       configObj = { ...configObj, ...inline };
     }
+    if (opts.model) {
+      configObj.model = opts.model;
+    }
     const cloud = mkCloud4();
     const wsId = opts.workspaceId ?? await resolveDefaultWorkspaceId(cloud);
     const res = await cloud.request("POST", "/api/im/agent_profiles", {
@@ -9550,12 +10148,12 @@ function buildProfileCommand() {
     const profile = await cloud.get(
       `/api/im/agent_profiles/${encodeURIComponent(profileId)}`
     );
-    const tmpFile = (0, import_node_path12.join)((0, import_node_os7.tmpdir)(), `prismer-profile-${profileId}.json`);
-    (0, import_node_fs17.writeFileSync)(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
+    const tmpFile = (0, import_node_path13.join)((0, import_node_os8.tmpdir)(), `prismer-profile-${profileId}.json`);
+    (0, import_node_fs18.writeFileSync)(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
     const editor = process.env.EDITOR || "vi";
     const ed = (0, import_node_child_process8.spawnSync)(editor, [tmpFile], { stdio: "inherit" });
     if (ed.status !== 0) exitWithError(`editor exited ${ed.status}`, { code: "editor_failed" });
-    const newConfig = JSON.parse((0, import_node_fs17.readFileSync)(tmpFile, "utf8"));
+    const newConfig = JSON.parse((0, import_node_fs18.readFileSync)(tmpFile, "utf8"));
     const res = await cloud.request("PATCH", `/api/im/agent_profiles/${encodeURIComponent(profileId)}`, {
       body: { config: newConfig, version: profile.version }
     });
@@ -9577,8 +10175,8 @@ function mkCloud4() {
 function readJsonArg(arg) {
   if (arg.startsWith("@")) {
     const path7 = arg.slice(1);
-    if (!(0, import_node_fs17.existsSync)(path7)) throw new Error(`File not found: ${path7}`);
-    return JSON.parse((0, import_node_fs17.readFileSync)(path7, "utf8"));
+    if (!(0, import_node_fs18.existsSync)(path7)) throw new Error(`File not found: ${path7}`);
+    return JSON.parse((0, import_node_fs18.readFileSync)(path7, "utf8"));
   }
   return JSON.parse(arg);
 }
@@ -9591,6 +10189,8 @@ async function resolveDefaultWorkspaceId(cloud) {
 
 // src/cli/commands/sandbox.ts
 var import_commander13 = require("commander");
+init_util();
+init_ui();
 function buildSandboxCommand() {
   const cmd = new import_commander13.Command("sandbox").description("Inspect and smoke-test sandbox lifecycle");
   cmd.command("list").description("List sandbox containers in a workspace").requiredOption("--workspace-id <id>", "Workspace id").option("--status <status>", "Status filter").option("--limit <n>", "Max rows", parsePositiveInt5, 50).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -9792,11 +10392,13 @@ async function safeParseResponse(res) {
 
 // src/cli/commands/setup.ts
 var import_commander14 = require("commander");
-var import_node_os8 = require("os");
+var import_node_os9 = require("os");
 var import_node_child_process9 = require("child_process");
-var import_node_crypto7 = require("crypto");
-var import_node_fs18 = require("fs");
+var import_node_crypto6 = require("crypto");
+var import_node_fs19 = require("fs");
 var import_node_http2 = require("http");
+init_util();
+init_ui();
 function buildSetupCommand() {
   return new import_commander14.Command("setup").description("Set up this local runtime and bind it to Prismer Cloud").argument("[api-key]", "Prismer daemon API key; primarily for manual recovery and automation").option(
     "--cloud <url>",
@@ -9819,6 +10421,7 @@ function buildSetupCommand() {
       getUI().blank();
     }
     const shouldStart = opts.start !== false;
+    stopRunningDaemon(paths);
     if (opts.pair || opts.asUser) {
       if (!opts.json) warn("Legacy pair setup path", "plain `prismer setup --start` is the canonical runtime binding flow");
       if (opts.asUser && process.env.LOCAL_ONLY !== "1") {
@@ -9835,7 +10438,7 @@ function buildSetupCommand() {
       }
       const result = await pair({
         cloudBaseUrl,
-        deviceName: opts.deviceName ?? (0, import_node_os8.hostname)(),
+        deviceName: opts.deviceName ?? (0, import_node_os9.hostname)(),
         force: opts.force,
         paths,
         asUserEmail: opts.asUser
@@ -9852,13 +10455,13 @@ function buildSetupCommand() {
         apiKey = await mintDaemonApiKey({
           cloudBaseUrl,
           token: authToken,
-          deviceName: opts.deviceName ?? (0, import_node_os8.hostname)()
+          deviceName: opts.deviceName ?? (0, import_node_os9.hostname)()
         });
       }
       if (!apiKey && !authToken && !opts.check && opts.browser !== false) {
         apiKey = await runBrowserSetup({
           cloudBaseUrl,
-          deviceName: opts.deviceName ?? (0, import_node_os8.hostname)(),
+          deviceName: opts.deviceName ?? (0, import_node_os9.hostname)(),
           json: Boolean(opts.json)
         });
       }
@@ -9897,9 +10500,13 @@ function buildSetupCommand() {
       if (configExists(paths) && !opts.force) {
         const cfg = loadConfig(paths);
         if (opts.json) {
-          printJson({ ok: true, alreadyConfigured: true, config: paths.configFile, daemonId: cfg.daemon_id });
+          printJson({ ok: true, alreadyConfigured: true, config: paths.configFile, daemonId: cfg.daemon_id, daemonStartRequested: shouldStart });
         } else {
           warn("Already configured", paths.configFile);
+          if (shouldStart) {
+            startDaemonDetached(paths.root);
+            ok("Daemon start requested");
+          }
           tip("prismer setup --force <api-key>", "overwrite config");
         }
         return;
@@ -9938,7 +10545,7 @@ function buildSetupCommand() {
   }, { code: "setup_failed" }));
 }
 async function runBrowserSetup(input) {
-  const state = (0, import_node_crypto7.randomBytes)(18).toString("base64url");
+  const state = (0, import_node_crypto6.randomBytes)(18).toString("base64url");
   const server = (0, import_node_http2.createServer)();
   const apiKeyPromise = waitForSetupCallback(server, state);
   await new Promise((resolve3, reject) => {
@@ -9982,14 +10589,15 @@ function waitForSetupCallback(server, expectedState) {
         }
         const state = url.searchParams.get("state");
         const key = url.searchParams.get("key");
+        const PAGE = '<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Prismer Setup</title><style>body{background:#0a0a0a;color:#e5e5e5;font-family:system-ui,-apple-system,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;text-align:center}div{max-width:480px;padding:40px}h1{font-size:28px;margin-bottom:16px}p{font-size:15px;color:#888;line-height:1.6}.check{color:#4ade80;font-size:48px;margin-bottom:16px}.cross{color:#ef4444;font-size:48px;margin-bottom:16px}</style></head><body><div>';
         if (state !== expectedState || !key || !/^sk-prismer-/.test(key)) {
           res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
-          res.end("<h1>Prismer setup failed</h1><p>Invalid setup callback. You can close this tab and retry.</p>");
+          res.end(`${PAGE}<div class="cross">&#10007;</div><h1>Prismer setup failed</h1><p>Invalid setup callback. You can close this tab and retry.</p></div></body></html>`);
           reject(new Error("setup: invalid browser callback"));
           return;
         }
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-        res.end("<h1>Prismer setup complete</h1><p>You can close this tab and return to your terminal.</p>");
+        res.end(`${PAGE}<div class="check">&#10003;</div><h1>Prismer setup complete</h1><p>You can close this tab and return to your terminal.</p></div></body></html>`);
         resolve3(key);
       } catch (err) {
         reject(err);
@@ -10034,13 +10642,35 @@ function startDaemonDetached(home) {
   });
   child.unref();
 }
+function stopRunningDaemon(paths) {
+  const pid = readPidFile(paths);
+  if (!pid || !pidAlive(pid)) {
+    if (pid) clearPidFile(paths);
+    return;
+  }
+  try {
+    process.kill(pid, "SIGTERM");
+  } catch {
+    return;
+  }
+  const deadline = Date.now() + 5e3;
+  while (Date.now() < deadline) {
+    if (!pidAlive(pid)) {
+      clearPidFile(paths);
+      return;
+    }
+    const start = Date.now();
+    while (Date.now() - start < 200) {
+    }
+  }
+}
 function shouldArchiveLocalDb(previous, next) {
   return previous.api_key !== next.api_key || previous.cloud_api_base !== next.cloud_api_base || previous.daemon_id !== next.daemon_id;
 }
 function archiveLocalDb(localDbPath) {
-  if (!(0, import_node_fs18.existsSync)(localDbPath)) return;
+  if (!(0, import_node_fs19.existsSync)(localDbPath)) return;
   const archived = `${localDbPath}.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.bak`;
-  (0, import_node_fs18.renameSync)(localDbPath, archived);
+  (0, import_node_fs19.renameSync)(localDbPath, archived);
 }
 async function mintDaemonApiKey(input) {
   const label = `Daemon: ${input.deviceName} ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
@@ -10061,6 +10691,8 @@ async function mintDaemonApiKey(input) {
 
 // src/cli/commands/status.ts
 var import_commander15 = require("commander");
+init_util();
+init_ui();
 function buildStatusCommand() {
   return new import_commander15.Command("status").description("Show daemon + config + cloud status").option("--json", "Output machine-readable JSON").action(async (opts) => {
     const paths = resolvePaths();
@@ -10087,10 +10719,34 @@ function buildStatusCommand() {
     const cloud = new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
     let cloudOk = false;
     let me = null;
+    let devices = null;
+    let agents = null;
     try {
-      const res = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
-      cloudOk = res.ok;
-      me = res.data ?? null;
+      const meRes = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
+      cloudOk = meRes.ok;
+      me = meRes.data ?? null;
+      if (cloudOk) {
+        const wsRes = await cloud.request("GET", "/api/im/workspaces", { timeoutMs: 3e3 });
+        if (wsRes.ok) {
+          const wsBody = wsRes.data;
+          const wsList = wsBody?.data;
+          if (Array.isArray(wsList) && wsList.length > 0) {
+            const wsId = wsList[0]?.id;
+            if (wsId) {
+              const devRes = await cloud.request("GET", `/api/workspace/runtime-installations?workspaceId=${encodeURIComponent(wsId)}&includeStopped=false`, { timeoutMs: 3e3 });
+              if (devRes.ok) {
+                const devBody = devRes.data;
+                devices = devBody?.data;
+              }
+              const agRes = await cloud.request("GET", `/api/im/workspaces/${encodeURIComponent(wsId)}/agents`, { timeoutMs: 3e3 });
+              if (agRes.ok) {
+                const agBody = agRes.data;
+                agents = agBody?.data;
+              }
+            }
+          }
+        }
+      }
     } catch {
       cloudOk = false;
     }
@@ -10102,10 +10758,15 @@ function buildStatusCommand() {
       daemon: {
         running: daemonRunning,
         pid: daemonStatus.pid ?? pid ?? null,
-        wsConnected: daemonStatus.wsConnected ?? null
+        wsConnected: daemonStatus.wsConnected ?? null,
+        info: daemonStatus.info ?? {}
       },
-      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me },
-      local
+      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me, devices, agents },
+      local,
+      binding: {
+        daemonId: cfg.daemon_id,
+        apiKey: cfg.api_key
+      }
     };
     if (opts.json) {
       printJson(report);
@@ -10119,12 +10780,19 @@ async function readDaemonStatus() {
     const res = await fetch("http://127.0.0.1:3210/healthz", {
       signal: AbortSignal.timeout(1e3)
     });
-    if (!res.ok) return { running: false };
-    const data = await res.json();
-    return { running: true, pid: data.pid, wsConnected: data.wsConnected };
+    if (res.ok) {
+      const data = await res.json();
+      return { running: true, pid: data.pid, wsConnected: data.wsConnected, info: data };
+    }
   } catch {
-    return { running: false };
   }
+  const paths = resolvePaths();
+  const pid = readPidFile(paths);
+  if (pid) {
+    const { pidAlive: pidAlive2 } = await Promise.resolve().then(() => (init_util(), util_exports));
+    if (pidAlive2(pid)) return { running: true, pid };
+  }
+  return { running: false };
 }
 function readLocalCounts(localDbPath) {
   try {
@@ -10150,21 +10818,59 @@ function printPretty(report) {
   ui.blank();
   ok("Config", report.paths.config);
   if (report.daemon.running) {
-    ok("Daemon", `pid=${report.daemon.pid ?? "?"} ws=${report.daemon.wsConnected ? "connected" : "pending"}`);
+    const ws = report.daemon.wsConnected ? "connected" : "pending";
+    ok("Daemon", `pid=${report.daemon.pid}  ws=${ws}`);
+    if (report.daemon.info) {
+      const info2 = report.daemon.info;
+      if (info2.version) ui.line(`  Version:  ${info2.version}`);
+      if (info2.uptime) ui.line(`  Uptime:   ${Math.round(info2.uptime / 60)}m`);
+      if (info2.memoryMb) ui.line(`  Memory:   ${info2.memoryMb} MB`);
+    }
   } else {
     warn("Daemon", "not running");
     tip("prismer daemon start");
   }
-  if (report.cloud.reachable) ok("Cloud", report.cloud.base);
-  else {
+  if (report.cloud.reachable) {
+    ok("Cloud", report.cloud.base);
+    const me = report.cloud.me;
+    if (me?.user) {
+      const roleTag = me.user.role ? `  role=${me.user.role}` : "";
+      ui.line(`  Account:  ${me.user.displayName ?? me.user.username ?? "?"}${roleTag}`);
+    }
+    if (me?.credits) {
+      ui.line(`  Credits:  ${typeof me.credits.balance === "number" ? me.credits.balance.toLocaleString() : "?"}`);
+    }
+  } else {
     fail2("Cloud", `${report.cloud.base} unreachable or unauthorized`);
     tip("prismer setup --force");
   }
+  if (report.binding) {
+    ui.blank();
+    ui.line(`  Daemon ID:  ${report.binding.daemonId}`);
+    const masked = report.binding.apiKey.slice(0, 14) + "\u2022\u2022\u2022\u2022" + report.binding.apiKey.slice(-4);
+    ui.line(`  API Key:    ${masked}`);
+  }
+  if (Array.isArray(report.cloud.devices) && report.cloud.devices.length > 0) {
+    const devs = report.cloud.devices;
+    ui.blank();
+    ui.line(`  Workspace Devices (${devs.length}):`);
+    for (const d of devs) {
+      const statusIcon = d.daemonStatus === "connected" ? "\u25CF" : "\u25CB";
+      const kind = d.runtimeKind === "docker" ? "Local" : "K8s";
+      const declared = d.hostedAgentSummary?.declared ?? 0;
+      ui.line(`    ${statusIcon} ${d.podName?.replace(/^daemon:/, "")?.slice(0, 28) ?? "?"}  kind=${kind}  agents=${declared}`);
+    }
+  } else {
+    ui.line(`  Workspace Devices: none`);
+  }
+  if (Array.isArray(report.cloud.agents) && report.cloud.agents.length > 0) {
+    ui.line(`  Hosted agents: ${report.cloud.agents.length}`);
+  }
   if (report.local) {
     ui.blank();
-    ui.line(`  Agents:    ${report.local.agents}`);
-    ui.line(`  Profiles:  ${report.local.profiles}`);
-    ui.line(`  Tasks:     ${report.local.runningTasks} running locally`);
+    ui.line(`  Local agents:  ${report.local.agents}`);
+    ui.line(`  Profiles:      ${report.local.profiles}`);
+    ui.line(`  Running tasks: ${report.local.runningTasks}`);
   } else {
     warn("Local DB", "unavailable");
   }
@@ -10173,6 +10879,7 @@ function printPretty(report) {
 // src/cli/commands/task.ts
 var import_commander16 = require("commander");
 var import_promises3 = require("timers/promises");
+init_util();
 function describeStatus(status) {
   return status === 0 ? "network error" : `HTTP ${status}`;
 }
@@ -10292,6 +10999,8 @@ function taskFrom2(raw) {
 
 // src/cli/commands/workspace.ts
 var import_commander17 = require("commander");
+init_util();
+init_ui();
 function buildWorkspaceCommand() {
   const cmd = new import_commander17.Command("workspace").description("Manage workspaces, runtime snapshots, and workspace files");
   cmd.command("list").description("List workspaces").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -10526,7 +11235,8 @@ async function readResponseError(res) {
 }
 
 // src/cli/index.ts
-var VERSION = "1.9.3";
+init_ui();
+var VERSION = "1.9.7";
 function buildProgram() {
   const program = new import_commander18.Command("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
   program.addCommand(buildBannerCommand());