@prismer/runtime 1.9.7 → 1.9.21

package/dist/cli.cjs

@@ -6,6 +6,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -23,190 +30,783 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/cli/index.ts
-var import_commander18 = require("commander");
-
-// src/cli/commands/adapter.ts
-var import_node_child_process4 = require("child_process");
-var import_node_fs4 = require("fs");
-var import_node_os3 = require("os");
-var import_node_path4 = require("path");
-var import_commander = require("commander");
-
-// src/adapters/claude-code/index.ts
-var import_node_child_process = require("child_process");
-var import_zod = require("zod");
-
-// src/adapters/claude-code/output-parser.ts
-var MAX_OUTPUT_CHARS = 64 * 1024;
-function parseHeadlessOutput(stdout) {
-  let out = "";
-  let toolCalls = 0;
-  for (const line of stdout.split("\n")) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    if (trimmed.startsWith("{") && trimmed.endsWith("}")) {
-      try {
-        const obj = JSON.parse(trimmed);
-        if (obj.event === "tool_call" || obj.tool) {
-          toolCalls += 1;
-          continue;
-        }
-        if (typeof obj.text === "string") {
-          out += obj.text;
-          continue;
-        }
-      } catch {
-      }
-    }
-    out += line + "\n";
+// src/cli/ui.ts
+function thisDirname() {
+  try {
+    return path.dirname((0, import_node_url.fileURLToPath)(import_meta2.url));
+  } catch {
+    return process.cwd();
   }
-  const truncated = out.length > MAX_OUTPUT_CHARS;
-  if (truncated) out = out.slice(0, MAX_OUTPUT_CHARS) + "\n\u2026[truncated]";
-  return { output: out.trim(), toolCalls, truncated };
 }
-
-// src/adapters/claude-code/index.ts
-var McpServerSchema = import_zod.z.object({
-  name: import_zod.z.string(),
-  command: import_zod.z.string(),
-  args: import_zod.z.array(import_zod.z.string()).optional(),
-  env: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).optional()
-});
-var CCConfigSchema = import_zod.z.object({
-  cwd: import_zod.z.string().min(1),
-  // claude 2.x accepts aliases ('sonnet', 'haiku', 'opus') and full ids
-  // (e.g. 'claude-sonnet-4-6'). The 1.x default 'claude-3-5-sonnet' is no
-  // longer a valid model id under the current CLI.
-  model: import_zod.z.string().default("sonnet"),
-  systemPrompt: import_zod.z.string().optional(),
-  envVars: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).optional(),
-  mcpServers: import_zod.z.array(McpServerSchema).optional(),
-  allowedTools: import_zod.z.array(import_zod.z.string()).optional(),
-  maxTurns: import_zod.z.number().int().positive().default(20),
-  // External-model route (1.9.x extension — optional, no breaking change)
-  baseURL: import_zod.z.string().url().optional(),
-  apiKeyRef: import_zod.z.string().regex(/^(env|keychain):[A-Za-z0-9_][A-Za-z0-9_.\-]*$/).optional(),
-  // informational tag — dispatch does not branch on this value yet
-  route: import_zod.z.enum(["default", "prismer", "omniroute"]).default("default")
-});
-var claudeCodeAdapter = {
-  name: "claude-code",
-  kind: "interactive",
-  capabilities: ["shell", "code", "mcp", "edit"],
-  workspaceSchema: CCConfigSchema,
-  validate(config) {
-    const r = CCConfigSchema.safeParse(config);
-    if (r.success) return { ok: true };
-    return {
-      ok: false,
-      errors: r.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`)
-    };
-  },
-  async dispatch(profile, task) {
-    const config = CCConfigSchema.parse(profile.config);
-    const args = ["--print"];
-    if (config.model) {
-      args.push("--model", config.model);
-    }
-    if (config.allowedTools && config.allowedTools.length > 0) {
-      args.push("--allowed-tools", config.allowedTools.join(","));
-    }
-    if (config.systemPrompt) {
-      args.push("--system-prompt", config.systemPrompt);
-    }
-    args.push(task.prompt);
-    const startedAt = Date.now();
-    const env = { ...process.env, ...config.envVars ?? {} };
-    if (config.baseURL) {
-      env.ANTHROPIC_API_BASE = config.baseURL;
+function findIconPath(size = "big") {
+  const name = size === "big" ? "icon" : "smallicon";
+  const here = thisDirname();
+  const candidates = [
+    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
+    path.resolve(here, "../assets", name),
+    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
+    path.resolve(here, "../../assets", name),
+    // source/typecheck: src/cli/ui.ts → ../../assets
+    path.resolve(here, "../../assets", name),
+    // dev mode: cwd happens to be runtime root
+    path.resolve(process.cwd(), "assets", name),
+    path.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
+  ];
+  for (const candidate of candidates) {
+    try {
+      if (fs.existsSync(candidate)) return candidate;
+    } catch {
     }
-    const outboxDir = typeof task.metadata?.prismerOutboxDir === "string" ? task.metadata.prismerOutboxDir : void 0;
-    if (outboxDir) {
-      env.PRISMER_OUTBOX_DIR = outboxDir;
+  }
+  return null;
+}
+function getUI() {
+  if (!_ui) _ui = new UI();
+  return _ui;
+}
+function setUI(ui) {
+  _ui = ui;
+}
+function applyCommonFlags(argv) {
+  let mode = "pretty";
+  const isTTY = process.stdout.isTTY === true;
+  const noColorEnv = Boolean(process.env["NO_COLOR"]);
+  let color2 = isTTY && !noColorEnv;
+  const rest = [];
+  for (const arg of argv) {
+    switch (arg) {
+      case "--no-color":
+        color2 = false;
+        break;
+      case "--color":
+        color2 = true;
+        break;
+      case "--json":
+      case "--pretty-json":
+        mode = "json";
+        if (arg === "--json") rest.push(arg);
+        break;
+      case "--quiet":
+        mode = "quiet";
+        break;
+      default:
+        rest.push(arg);
     }
-    if (config.apiKeyRef) {
-      const resolved = resolveKeyRef(config.apiKeyRef);
-      if (resolved) {
-        env.ANTHROPIC_API_KEY = resolved;
-      } else {
-        const platformHint = config.apiKeyRef.startsWith("keychain:") && process.platform !== "darwin" ? " (keychain: scheme requires darwin)" : "";
-        process.stderr.write(
-          `[claude-code] warning: apiKeyRef "${config.apiKeyRef}" could not be resolved${platformHint}; ANTHROPIC_API_KEY will not be injected
-`
-        );
+  }
+  return { mode, color: color2, restArgv: rest };
+}
+var fs, path, import_node_url, import_meta2, BRAILLE_FRAMES, COMPACT_BANNER, UI, _ui;
+var init_ui = __esm({
+  "src/cli/ui.ts"() {
+    "use strict";
+    fs = __toESM(require("fs"), 1);
+    path = __toESM(require("path"), 1);
+    import_node_url = require("url");
+    import_meta2 = {};
+    BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
+    UI = class {
+      mode;
+      colorEnabled;
+      stream;
+      errStream;
+      constructor(opts) {
+        this.mode = opts?.mode ?? "pretty";
+        this.stream = opts?.stream ?? process.stdout;
+        this.errStream = opts?.errStream ?? process.stderr;
+        if (opts?.color !== void 0) {
+          this.colorEnabled = opts.color;
+        } else {
+          const isTTY = this.stream.isTTY === true;
+          const noColor = Boolean(process.env["NO_COLOR"]);
+          this.colorEnabled = isTTY && !noColor;
+        }
       }
-    }
-    const child = (0, import_node_child_process.spawn)("claude", args, {
-      cwd: config.cwd,
-      env,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stdout = "";
-    let stderr = "";
-    child.stdout.on("data", (d) => {
-      stdout += d.toString();
-    });
-    child.stderr.on("data", (d) => {
-      stderr += d.toString();
-    });
-    const onAbort = () => {
-      try {
-        child.kill("SIGTERM");
-      } catch {
+      // ---- Internal color helpers ----
+      ansi(open, close, text) {
+        if (!this.colorEnabled) return text;
+        return `\x1B[${open}m${text}\x1B[${close}m`;
       }
-    };
-    if (task.signal) {
-      if (task.signal.aborted) onAbort();
-      else task.signal.addEventListener("abort", onAbort, { once: true });
-    }
-    let timeoutHandle;
-    if (task.timeoutMs && task.timeoutMs > 0) {
-      timeoutHandle = setTimeout(() => {
-        try {
-          child.kill("SIGTERM");
-        } catch {
+      green(t) {
+        return this.ansi(32, 39, t);
+      }
+      red(t) {
+        return this.ansi(31, 39, t);
+      }
+      yellow(t) {
+        return this.ansi(33, 39, t);
+      }
+      cyan(t) {
+        return this.ansi(36, 39, t);
+      }
+      dim(t) {
+        return this.ansi(2, 22, t);
+      }
+      bold(t) {
+        return this.ansi(1, 22, t);
+      }
+      gray(t) {
+        return this.ansi(90, 39, t);
+      }
+      brandMark() {
+        return this.cyan("\u25C7");
+      }
+      colorBrandLine(line) {
+        let out = "";
+        for (const ch of line) {
+          if (ch === "\u2592") {
+            out += this.cyan(ch);
+          } else if (ch === "\u2593") {
+            out += this.dim(ch);
+          } else {
+            out += ch;
+          }
         }
-      }, task.timeoutMs);
-    }
-    const exitCode = await new Promise((resolve3) => {
-      child.on("exit", (code) => resolve3(code));
-      child.on("error", () => resolve3(-1));
-    });
-    if (timeoutHandle) clearTimeout(timeoutHandle);
-    const durationMs = Date.now() - startedAt;
-    if (task.signal?.aborted) {
-      return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
-    }
-    if (exitCode !== 0) {
-      return {
-        ok: false,
-        error: {
-          code: exitCode === null ? "adapter_dispatch_failed" : "adapter_dispatch_failed",
-          message: `claude exit ${exitCode}: ${stderr.slice(0, 1024) || "<no stderr>"}`
-        },
-        metrics: { durationMs }
-      };
-    }
-    const parsed = parseHeadlessOutput(stdout);
-    return {
-      ok: true,
-      output: parsed.output,
-      metrics: { durationMs }
-    };
-  },
-  async health() {
-    return new Promise((resolve3) => {
-      const proc = (0, import_node_child_process.spawn)("claude", ["--version"], { stdio: "ignore" });
-      proc.on(
-        "exit",
-        (code) => resolve3(
-          code === 0 ? { available: true } : {
-            available: false,
-            reason: "claude CLI not in PATH",
-            hint: "npm install -g @anthropic-ai/claude-code"
+        return out;
+      }
+      // ---- Core write helpers ----
+      write(text) {
+        this.stream.write(text);
+      }
+      writeErr(text) {
+        this.errStream.write(text);
+      }
+      // ---- Level 1: Header ----
+      header(text) {
+        if (this.mode === "json") return;
+        const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
+        this.write(prefix + this.bold(text) + "\n");
+      }
+      smallHeader(subtitle) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const iconPath = findIconPath("small");
+        if (iconPath !== null) {
+          try {
+            const raw = fs.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
+            for (const line of raw.split("\n")) {
+              this.write(this.cyan(line) + "\n");
+            }
+          } catch {
+            this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
           }
-        )
+        } else {
+          this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      banner(subtitle, opts) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
+        const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
+        const iconPath = findIconPath("big");
+        const shouldUseFull = opts?.full === true || width >= 120;
+        if (shouldUseFull && iconPath !== null) {
+          try {
+            const raw = fs.readFileSync(iconPath, "utf-8");
+            const lines = raw.split("\n");
+            for (const line of lines) {
+              const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
+              const stripped = brandedLine.trimEnd();
+              if (stripped.length === 0) {
+                this.write("\n");
+                continue;
+              }
+              const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
+              this.write(this.colorBrandLine(clipped) + "\n");
+            }
+          } catch {
+            this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+            this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+          }
+        } else {
+          this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+          this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      // ---- Level 2: Primary data ----
+      blank() {
+        if (this.mode === "json") return;
+        this.write("\n");
+      }
+      line(text) {
+        if (this.mode === "json") return;
+        this.write(text + "\n");
+      }
+      info(text) {
+        this.line(text);
+      }
+      // ---- Level 3: Secondary ----
+      secondary(text, indent = 2) {
+        if (this.mode === "json") return;
+        this.write(" ".repeat(indent) + this.dim(text) + "\n");
+      }
+      // ---- Level 4: Action tips ----
+      tip(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Tip:") + " " + text + "\n");
+      }
+      next(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Next:") + " " + text + "\n");
+      }
+      // ---- Level 5: Status indicators ----
+      ok(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
+      }
+      success(text, detail) {
+        this.ok(text, detail);
+      }
+      fail(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
+      }
+      online(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.green("\u25CF") + " " + text + "\n");
+      }
+      offline(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.gray("\u25CB") + " " + text + "\n");
+      }
+      notInstalled(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
+      }
+      pending(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+      }
+      warn(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
+      }
+      // ---- Level 6: Error block ----
+      error(what, cause, fix) {
+        if (this.mode === "json") return;
+        this.writeErr(this.red("\u2717") + " " + what + "\n");
+        if (cause !== void 0) {
+          this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
+        }
+        if (fix !== void 0) {
+          this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
+        }
+      }
+      table(rowsOrOpts, maybeOpts) {
+        if (this.mode === "json") return;
+        const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
+        const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
+        if (!opts) throw new Error("table() requires columns");
+        const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
+        const cols = opts.columns;
+        const widths = cols.map((col) => col.length);
+        for (const row of rows) {
+          cols.forEach((col, i) => {
+            const val = row[col] ?? "";
+            const w = widths[i] ?? 0;
+            if (val.length > w) widths[i] = val.length;
+          });
+        }
+        const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
+        if (totalWidth > maxWidth) {
+          for (let i = 0; i < rows.length; i++) {
+            const row = rows[i];
+            if (!row) continue;
+            for (const col of cols) {
+              const val = row[col] ?? "";
+              this.write("  " + this.bold(col + ":") + " " + val + "\n");
+            }
+            if (i < rows.length - 1) this.write("\n");
+          }
+          return;
+        }
+        const header2 = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
+        this.write("  " + this.dim(header2) + "\n");
+        for (const row of rows) {
+          const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
+          this.write("  " + line + "\n");
+        }
+      }
+      // ---- Spinner ----
+      spinner(text) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        if (!isTTY || !this.colorEnabled) {
+          this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+          return {
+            update: (t) => {
+              this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
+            },
+            stop: (final) => {
+              if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
+            }
+          };
+        }
+        let current = text;
+        let frameIdx = 0;
+        let stopped = false;
+        const write = this.write.bind(this);
+        const colorFn = this.yellow.bind(this);
+        const greenFn = this.green.bind(this);
+        function renderFrame() {
+          const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
+          const line = "  " + colorFn(frame) + " " + current;
+          write("\r" + line);
+          frameIdx++;
+        }
+        renderFrame();
+        const timer = setInterval(renderFrame, 80);
+        return {
+          update(t) {
+            if (stopped) return;
+            current = t;
+          },
+          stop(final) {
+            if (stopped) return;
+            stopped = true;
+            clearInterval(timer);
+            write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- Progress bar ----
+      progress(text, total) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        const start = Date.now();
+        const write = this.write.bind(this);
+        const colorFn = this.cyan.bind(this);
+        const dimFn = this.dim.bind(this);
+        const greenFn = this.green.bind(this);
+        let last = 0;
+        let lastDetail = "";
+        let stopped = false;
+        const render = () => {
+          if (stopped) return;
+          const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
+          const pct = Math.floor(frac * 100);
+          const width = 20;
+          const filled = Math.floor(frac * width);
+          const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
+          const elapsed = (Date.now() - start) / 1e3;
+          const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
+          const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
+          const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
+          const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
+          if (isTTY && this.colorEnabled) {
+            write("\r\x1B[2K" + line);
+          } else {
+            write(line + "\n");
+          }
+        };
+        render();
+        return {
+          update: (current, detail) => {
+            if (stopped) return;
+            last = current;
+            if (detail !== void 0) lastDetail = detail;
+            render();
+          },
+          stop: (final) => {
+            if (stopped) return;
+            stopped = true;
+            if (isTTY && this.colorEnabled) write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- JSON output ----
+      json(payload, opts) {
+        const indent = opts?.pretty ? 2 : void 0;
+        this.write(JSON.stringify(payload, null, indent) + "\n");
+      }
+      result(pretty, jsonPayload) {
+        if (this.mode === "pretty") {
+          pretty();
+        } else {
+          this.json(jsonPayload);
+        }
+      }
+    };
+    _ui = null;
+  }
+});
+
+// src/cli/util.ts
+var util_exports = {};
+__export(util_exports, {
+  DEFAULT_CLOUD_BASE_URL: () => DEFAULT_CLOUD_BASE_URL,
+  clearPidFile: () => clearPidFile,
+  color: () => color,
+  exitWithError: () => exitWithError,
+  fail: () => fail,
+  header: () => header,
+  info: () => info,
+  normalizeCloudUrl: () => normalizeCloudUrl,
+  ok: () => ok,
+  pidAlive: () => pidAlive,
+  pidFilePath: () => pidFilePath,
+  printBanner: () => printBanner,
+  printJson: () => printJson,
+  readPidFile: () => readPidFile,
+  runAction: () => runAction,
+  table: () => table,
+  tip: () => tip,
+  warn: () => warn,
+  writePidFile: () => writePidFile
+});
+function color(kind, text) {
+  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
+  return `${ANSI[kind]}${text}${ANSI.reset}`;
+}
+function printJson(v) {
+  getUI().json(v, { pretty: true });
+}
+function exitWithError(message, opts) {
+  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
+  const exitCode = o.exitCode ?? 1;
+  const ui = getUI();
+  if (ui.mode === "json") {
+    const payload = {
+      ok: false,
+      error: { code: o.code ?? "cli_error", message },
+      ...o.details ? { details: o.details } : {}
+    };
+    ui.json(payload, { pretty: true });
+  } else {
+    process.stderr.write(`Error: ${message}
+`);
+  }
+  process.exit(exitCode);
+}
+function normalizeCloudUrl(input) {
+  const raw = input.trim();
+  if (!raw) throw new Error("Cloud URL is empty.");
+  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      throw new Error(`Invalid --cloud URL: ${raw}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
+    }
+    return raw.replace(/\/$/, "");
+  }
+  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
+    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
+  }
+  const candidate = `http://${raw}`;
+  try {
+    new URL(candidate);
+  } catch {
+    throw new Error(`Invalid --cloud URL: ${raw}`);
+  }
+  return candidate.replace(/\/$/, "");
+}
+function runAction(fn, opts = {}) {
+  return async (...args) => {
+    try {
+      await fn(...args);
+    } catch (err) {
+      const raw = err instanceof Error ? err.message : String(err);
+      const message = opts.sanitize ? opts.sanitize(raw) : raw;
+      exitWithError(message, { code: opts.code });
+    }
+  };
+}
+function printBanner(opts = {}) {
+  const ui = getUI();
+  if (opts.compact) {
+    ui.smallHeader("Runtime CLI v1.9.7");
+    return;
+  }
+  ui.banner("Runtime CLI v1.9.7", { full: true });
+}
+function ok(label, detail) {
+  getUI().ok(label, detail);
+}
+function warn(label, detail) {
+  getUI().warn(label, detail);
+}
+function fail(label, detail) {
+  getUI().fail(label, detail);
+}
+function tip(command, detail) {
+  const text = detail ? `${command}  ${detail}` : command;
+  getUI().tip(text);
+}
+function info(message) {
+  getUI().info(message);
+}
+function header(title) {
+  getUI().header(title);
+  getUI().blank();
+}
+function table(rows, columns) {
+  getUI().table(rows, { columns });
+}
+function pidFilePath(paths) {
+  return (0, import_node_path3.join)(paths.root, "daemon.pid");
+}
+function writePidFile(paths, pid) {
+  (0, import_node_fs3.writeFileSync)(pidFilePath(paths), `${pid}
+`, "utf8");
+}
+function readPidFile(paths) {
+  const p = pidFilePath(paths);
+  if (!(0, import_node_fs3.existsSync)(p)) return void 0;
+  const raw = (0, import_node_fs3.readFileSync)(p, "utf8").trim();
+  const pid = Number.parseInt(raw, 10);
+  return Number.isFinite(pid) ? pid : void 0;
+}
+function clearPidFile(paths) {
+  const p = pidFilePath(paths);
+  if ((0, import_node_fs3.existsSync)(p)) {
+    try {
+      (0, import_node_fs3.unlinkSync)(p);
+    } catch {
+    }
+  }
+}
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_node_fs3, import_node_path3, DEFAULT_CLOUD_BASE_URL, ANSI;
+var init_util = __esm({
+  "src/cli/util.ts"() {
+    "use strict";
+    import_node_fs3 = require("fs");
+    import_node_path3 = require("path");
+    init_ui();
+    DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
+    ANSI = {
+      reset: "\x1B[0m",
+      bold: "\x1B[1m",
+      dim: "\x1B[2m",
+      cyan: "\x1B[36m",
+      green: "\x1B[32m",
+      yellow: "\x1B[33m",
+      red: "\x1B[31m"
+    };
+  }
+});
+
+// src/cli/index.ts
+var import_commander18 = require("commander");
+
+// src/cli/commands/adapter.ts
+var import_node_child_process4 = require("child_process");
+var import_node_fs4 = require("fs");
+var import_node_os3 = require("os");
+var import_node_path4 = require("path");
+var import_commander = require("commander");
+
+// src/adapters/claude-code/index.ts
+var import_node_child_process = require("child_process");
+var import_zod = require("zod");
+
+// src/adapters/claude-code/output-parser.ts
+var MAX_OUTPUT_CHARS = 64 * 1024;
+function parseHeadlessOutput(stdout) {
+  let out = "";
+  let toolCalls = 0;
+  for (const line of stdout.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    if (trimmed.startsWith("{") && trimmed.endsWith("}")) {
+      try {
+        const obj = JSON.parse(trimmed);
+        if (obj.event === "tool_call" || obj.tool) {
+          toolCalls += 1;
+          continue;
+        }
+        if (typeof obj.text === "string") {
+          out += obj.text;
+          continue;
+        }
+      } catch {
+      }
+    }
+    out += line + "\n";
+  }
+  const truncated = out.length > MAX_OUTPUT_CHARS;
+  if (truncated) out = out.slice(0, MAX_OUTPUT_CHARS) + "\n\u2026[truncated]";
+  return { output: out.trim(), toolCalls, truncated };
+}
+
+// src/adapters/claude-code/index.ts
+var McpServerSchema = import_zod.z.object({
+  name: import_zod.z.string(),
+  command: import_zod.z.string(),
+  args: import_zod.z.array(import_zod.z.string()).optional(),
+  env: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).optional()
+});
+var CCConfigSchema = import_zod.z.object({
+  cwd: import_zod.z.string().min(1),
+  // claude 2.x accepts aliases ('sonnet', 'haiku', 'opus') and full ids
+  // (e.g. 'claude-sonnet-4-6'). The 1.x default 'claude-3-5-sonnet' is no
+  // longer a valid model id under the current CLI.
+  model: import_zod.z.string().default("sonnet"),
+  systemPrompt: import_zod.z.string().optional(),
+  envVars: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).optional(),
+  mcpServers: import_zod.z.array(McpServerSchema).optional(),
+  allowedTools: import_zod.z.array(import_zod.z.string()).optional(),
+  maxTurns: import_zod.z.number().int().positive().default(20),
+  // External-model route (1.9.x extension — optional, no breaking change)
+  baseURL: import_zod.z.string().url().optional(),
+  apiKeyRef: import_zod.z.string().regex(/^(env|keychain):[A-Za-z0-9_][A-Za-z0-9_.\-]*$/).optional(),
+  // informational tag — dispatch does not branch on this value yet
+  route: import_zod.z.enum(["default", "prismer", "omniroute"]).default("default")
+});
+var claudeCodeAdapter = {
+  name: "claude-code",
+  kind: "interactive",
+  capabilities: ["shell", "code", "mcp", "edit"],
+  workspaceSchema: CCConfigSchema,
+  validate(config) {
+    const r = CCConfigSchema.safeParse(config);
+    if (r.success) return { ok: true };
+    return {
+      ok: false,
+      errors: r.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`)
+    };
+  },
+  async dispatch(profile, task) {
+    const config = CCConfigSchema.parse(profile.config);
+    const args = ["--print"];
+    if (config.model) {
+      args.push("--model", config.model);
+    }
+    if (config.allowedTools && config.allowedTools.length > 0) {
+      args.push("--allowed-tools", config.allowedTools.join(","));
+    }
+    if (config.systemPrompt) {
+      args.push("--system-prompt", config.systemPrompt);
+    }
+    args.push(task.prompt);
+    const startedAt = Date.now();
+    const env = { ...process.env, ...config.envVars ?? {} };
+    if (config.baseURL) {
+      env.ANTHROPIC_API_BASE = config.baseURL;
+    }
+    const outboxDir = typeof task.metadata?.prismerOutboxDir === "string" ? task.metadata.prismerOutboxDir : void 0;
+    if (outboxDir) {
+      env.PRISMER_OUTBOX_DIR = outboxDir;
+    }
+    if (config.apiKeyRef) {
+      const resolved = resolveKeyRef(config.apiKeyRef);
+      if (resolved) {
+        env.ANTHROPIC_API_KEY = resolved;
+      } else {
+        const platformHint = config.apiKeyRef.startsWith("keychain:") && process.platform !== "darwin" ? " (keychain: scheme requires darwin)" : "";
+        process.stderr.write(
+          `[claude-code] warning: apiKeyRef "${config.apiKeyRef}" could not be resolved${platformHint}; ANTHROPIC_API_KEY will not be injected
+`
+        );
+      }
+    }
+    const child = (0, import_node_child_process.spawn)("claude", args, {
+      cwd: config.cwd,
+      env,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    child.stdout.on("data", (d) => {
+      stdout += d.toString();
+    });
+    child.stderr.on("data", (d) => {
+      stderr += d.toString();
+    });
+    const onAbort = () => {
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+    };
+    if (task.signal) {
+      if (task.signal.aborted) onAbort();
+      else task.signal.addEventListener("abort", onAbort, { once: true });
+    }
+    let timeoutHandle;
+    if (task.timeoutMs && task.timeoutMs > 0) {
+      timeoutHandle = setTimeout(() => {
+        try {
+          child.kill("SIGTERM");
+        } catch {
+        }
+      }, task.timeoutMs);
+    }
+    const exitCode = await new Promise((resolve3) => {
+      child.on("exit", (code) => resolve3(code));
+      child.on("error", () => resolve3(-1));
+    });
+    if (timeoutHandle) clearTimeout(timeoutHandle);
+    const durationMs = Date.now() - startedAt;
+    if (task.signal?.aborted) {
+      return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
+    }
+    if (exitCode !== 0) {
+      return {
+        ok: false,
+        error: {
+          code: exitCode === null ? "adapter_dispatch_failed" : "adapter_dispatch_failed",
+          message: `claude exit ${exitCode}: ${stderr.slice(0, 1024) || "<no stderr>"}`
+        },
+        metrics: { durationMs }
+      };
+    }
+    const parsed = parseHeadlessOutput(stdout);
+    return {
+      ok: true,
+      output: parsed.output,
+      metrics: { durationMs }
+    };
+  },
+  async health() {
+    return new Promise((resolve3) => {
+      const proc = (0, import_node_child_process.spawn)("claude", ["--version"], { stdio: "ignore" });
+      proc.on(
+        "exit",
+        (code) => resolve3(
+          code === 0 ? { available: true } : {
+            available: false,
+            reason: "claude CLI not in PATH",
+            hint: "npm install -g @anthropic-ai/claude-code"
+          }
+        )
       );
       proc.on(
         "error",
@@ -659,7 +1259,7 @@ var HermesProfileConfigSchema = import_zod3.z.object({
    */
   prismerMcpServerPath: import_zod3.z.string().optional(),
   /** Model sent to Prismer's /api/v1/chat/completions endpoint. */
-  model: import_zod3.z.string().min(1).default("us-kimi-k2.5"),
+  model: import_zod3.z.string().min(1).default("us-kimi-k2.6"),
   /** Named custom provider written into Hermes config.yaml. */
   prismerProviderName: import_zod3.z.string().min(1).default("prismer"),
   /** Override cloud provider base. Defaults to PRISMER_BASE_URL + /api/v1. */
@@ -685,7 +1285,9 @@ var HermesProfileConfigSchema = import_zod3.z.object({
    * surface but the local source tree contains hermes_cli/kanban_db.py.
    */
   hermesSourceDir: import_zod3.z.string().optional(),
-  nativeMirrorTimeoutMs: import_zod3.z.number().int().positive().default(2e3)
+  nativeMirrorTimeoutMs: import_zod3.z.number().int().positive().default(2e3),
+  /** Task authority level: executor (default) or orchestrator. */
+  taskAuthority: import_zod3.z.enum(["executor", "orchestrator"]).optional().default("executor")
 });
 var hermesAdapter = {
   name: "hermes",
@@ -1170,13 +1772,13 @@ function resolvePrismerMcpServerPath(config) {
   }
   try {
     const { fileURLToPath: fileURLToPath2 } = require("url");
-    const { join: join13, dirname: dirname8 } = require("path");
+    const { join: join14, dirname: dirname8 } = require("path");
     const here = dirname8(fileURLToPath2(import_meta.url));
-    const candidate = join13(here, "../../mcp/dist/index.js");
+    const candidate = join14(here, "../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate)) return candidate;
-    const candidate2 = join13(here, "../../../mcp/dist/index.js");
+    const candidate2 = join14(here, "../../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate2)) return candidate2;
-    const candidate3 = join13(here, "../../../../mcp/dist/index.js");
+    const candidate3 = join14(here, "../../../../mcp/dist/index.js");
     if ((0, import_node_fs.existsSync)(candidate3)) return candidate3;
   } catch {
   }
@@ -1586,673 +2188,125 @@ var OpenClawService = class {
       if (ERR_PREFIX_RE.test(output)) {
         process.stderr.write(
           `[openclaw-adapter] stripping known stderr-bleed prefix from chat output (OpenClaw 2026.4.x bug)
-`
-        );
-        output = output.replace(ERR_PREFIX_RE, "");
-      }
-      return {
-        ok: true,
-        output,
-        metrics: { durationMs: Date.now() - startedAt }
-      };
-    } catch (err) {
-      if (task.signal?.aborted || err?.name === "AbortError") {
-        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
-      }
-      return {
-        ok: false,
-        error: { code: "adapter_dispatch_failed", message: err.message }
-      };
-    }
-  }
-};
-async function checkHealth2(baseUrl, apiKey) {
-  try {
-    const res = await fetch(`${baseUrl}/health`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(2e3)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-
-// src/config.ts
-var TOML = __toESM(require("@iarna/toml"), 1);
-var import_node_fs2 = require("fs");
-var import_node_os2 = require("os");
-var import_node_path2 = require("path");
-var import_zod5 = require("zod");
-var ConfigSchema = import_zod5.z.object({
-  /** API key from `prismer setup`, or env override. */
-  api_key: import_zod5.z.string().min(1),
-  /** Cloud REST + WS base; `ws://` is derived by stripping `http`. */
-  cloud_api_base: import_zod5.z.string().url(),
-  /** Stable per-machine daemon identifier. Generated once on first setup. */
-  daemon_id: import_zod5.z.string().min(1),
-  /** Optional adapter-specific overrides keyed by adapter name. */
-  adapters: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown())).optional(),
-  /** Local daemon shell execution. Default disabled. */
-  shell: import_zod5.z.object({
-    enabled: import_zod5.z.boolean().default(false),
-    default_cwd: import_zod5.z.string().optional(),
-    defaultCwd: import_zod5.z.string().optional(),
-    shell: import_zod5.z.enum(["bash", "zsh", "sh"]).optional(),
-    max_timeout_ms: import_zod5.z.number().int().positive().optional(),
-    maxTimeoutMs: import_zod5.z.number().int().positive().optional(),
-    max_output_bytes: import_zod5.z.number().int().positive().optional(),
-    maxOutputBytes: import_zod5.z.number().int().positive().optional(),
-    allowed_workspaces: import_zod5.z.array(import_zod5.z.string()).optional(),
-    allowedWorkspaces: import_zod5.z.array(import_zod5.z.string()).optional()
-  }).optional(),
-  /** Local cache settings. */
-  cache: import_zod5.z.object({
-    max_bytes: import_zod5.z.number().int().positive().default(5 * 1024 * 1024 * 1024)
-  }).optional()
-});
-function resolvePaths(home) {
-  const root = home ?? process.env.PRISMER_HOME ?? (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".prismer");
-  return {
-    root,
-    configFile: (0, import_node_path2.join)(root, "config.toml"),
-    localDb: (0, import_node_path2.join)(root, "local.db"),
-    cacheDir: (0, import_node_path2.join)(root, "cache"),
-    logsDir: (0, import_node_path2.join)(root, "logs"),
-    runsDir: (0, import_node_path2.join)(root, "runs")
-  };
-}
-function configExists(paths = resolvePaths()) {
-  return (0, import_node_fs2.existsSync)(paths.configFile);
-}
-function loadConfig(paths = resolvePaths()) {
-  if (!(0, import_node_fs2.existsSync)(paths.configFile)) {
-    throw new Error(
-      `Config not found at ${paths.configFile}. Run \`prismer setup\` to create it.`
-    );
-  }
-  const raw = (0, import_node_fs2.readFileSync)(paths.configFile, "utf8");
-  const parsed = TOML.parse(raw);
-  const merged = {
-    ...parsed,
-    api_key: process.env.PRISMER_API_KEY ?? parsed.api_key,
-    cloud_api_base: process.env.PRISMER_BASE_URL ?? parsed.cloud_api_base
-  };
-  const result = ConfigSchema.safeParse(merged);
-  if (!result.success) {
-    const detail = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-    throw new Error(`Invalid config at ${paths.configFile}: ${detail}`);
-  }
-  return result.data;
-}
-function saveConfig(config, paths = resolvePaths()) {
-  if (!(0, import_node_fs2.existsSync)(paths.root)) {
-    (0, import_node_fs2.mkdirSync)(paths.root, { recursive: true });
-  }
-  if (!(0, import_node_fs2.existsSync)((0, import_node_path2.dirname)(paths.configFile))) {
-    (0, import_node_fs2.mkdirSync)((0, import_node_path2.dirname)(paths.configFile), { recursive: true });
-  }
-  ConfigSchema.parse(config);
-  (0, import_node_fs2.writeFileSync)(paths.configFile, TOML.stringify(config), "utf8");
-}
-function deriveWsUrl(httpBase) {
-  const u = new URL(httpBase);
-  u.protocol = u.protocol === "https:" ? "wss:" : "ws:";
-  u.pathname = (u.pathname.replace(/\/$/, "") || "") + "/ws";
-  return u.toString();
-}
-
-// src/cli/util.ts
-var import_node_fs3 = require("fs");
-var import_node_path3 = require("path");
-
-// src/cli/ui.ts
-var fs = __toESM(require("fs"), 1);
-var path = __toESM(require("path"), 1);
-var import_node_url = require("url");
-var import_meta2 = {};
-var BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-var COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
-function thisDirname() {
-  try {
-    return path.dirname((0, import_node_url.fileURLToPath)(import_meta2.url));
-  } catch {
-    return process.cwd();
-  }
-}
-function findIconPath(size = "big") {
-  const name = size === "big" ? "icon" : "smallicon";
-  const here = thisDirname();
-  const candidates = [
-    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
-    path.resolve(here, "../assets", name),
-    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
-    path.resolve(here, "../../assets", name),
-    // source/typecheck: src/cli/ui.ts → ../../assets
-    path.resolve(here, "../../assets", name),
-    // dev mode: cwd happens to be runtime root
-    path.resolve(process.cwd(), "assets", name),
-    path.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
-  ];
-  for (const candidate of candidates) {
-    try {
-      if (fs.existsSync(candidate)) return candidate;
-    } catch {
-    }
-  }
-  return null;
-}
-var UI = class {
-  mode;
-  colorEnabled;
-  stream;
-  errStream;
-  constructor(opts) {
-    this.mode = opts?.mode ?? "pretty";
-    this.stream = opts?.stream ?? process.stdout;
-    this.errStream = opts?.errStream ?? process.stderr;
-    if (opts?.color !== void 0) {
-      this.colorEnabled = opts.color;
-    } else {
-      const isTTY = this.stream.isTTY === true;
-      const noColor = Boolean(process.env["NO_COLOR"]);
-      this.colorEnabled = isTTY && !noColor;
-    }
-  }
-  // ---- Internal color helpers ----
-  ansi(open, close, text) {
-    if (!this.colorEnabled) return text;
-    return `\x1B[${open}m${text}\x1B[${close}m`;
-  }
-  green(t) {
-    return this.ansi(32, 39, t);
-  }
-  red(t) {
-    return this.ansi(31, 39, t);
-  }
-  yellow(t) {
-    return this.ansi(33, 39, t);
-  }
-  cyan(t) {
-    return this.ansi(36, 39, t);
-  }
-  dim(t) {
-    return this.ansi(2, 22, t);
-  }
-  bold(t) {
-    return this.ansi(1, 22, t);
-  }
-  gray(t) {
-    return this.ansi(90, 39, t);
-  }
-  brandMark() {
-    return this.cyan("\u25C7");
-  }
-  colorBrandLine(line) {
-    let out = "";
-    for (const ch of line) {
-      if (ch === "\u2592") {
-        out += this.cyan(ch);
-      } else if (ch === "\u2593") {
-        out += this.dim(ch);
-      } else {
-        out += ch;
-      }
-    }
-    return out;
-  }
-  // ---- Core write helpers ----
-  write(text) {
-    this.stream.write(text);
-  }
-  writeErr(text) {
-    this.errStream.write(text);
-  }
-  // ---- Level 1: Header ----
-  header(text) {
-    if (this.mode === "json") return;
-    const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
-    this.write(prefix + this.bold(text) + "\n");
-  }
-  smallHeader(subtitle) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const iconPath = findIconPath("small");
-    if (iconPath !== null) {
-      try {
-        const raw = fs.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
-        for (const line of raw.split("\n")) {
-          this.write(this.cyan(line) + "\n");
-        }
-      } catch {
-        this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-      }
-    } else {
-      this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  banner(subtitle, opts) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
-    const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
-    const iconPath = findIconPath("big");
-    const shouldUseFull = opts?.full === true || width >= 120;
-    if (shouldUseFull && iconPath !== null) {
-      try {
-        const raw = fs.readFileSync(iconPath, "utf-8");
-        const lines = raw.split("\n");
-        for (const line of lines) {
-          const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
-          const stripped = brandedLine.trimEnd();
-          if (stripped.length === 0) {
-            this.write("\n");
-            continue;
-          }
-          const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
-          this.write(this.colorBrandLine(clipped) + "\n");
-        }
-      } catch {
-        this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-        this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
-      }
-    } else {
-      this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-      this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  // ---- Level 2: Primary data ----
-  blank() {
-    if (this.mode === "json") return;
-    this.write("\n");
-  }
-  line(text) {
-    if (this.mode === "json") return;
-    this.write(text + "\n");
-  }
-  info(text) {
-    this.line(text);
-  }
-  // ---- Level 3: Secondary ----
-  secondary(text, indent = 2) {
-    if (this.mode === "json") return;
-    this.write(" ".repeat(indent) + this.dim(text) + "\n");
-  }
-  // ---- Level 4: Action tips ----
-  tip(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Tip:") + " " + text + "\n");
-  }
-  next(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Next:") + " " + text + "\n");
-  }
-  // ---- Level 5: Status indicators ----
-  ok(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
-  }
-  success(text, detail) {
-    this.ok(text, detail);
-  }
-  fail(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
-  }
-  online(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.green("\u25CF") + " " + text + "\n");
-  }
-  offline(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.gray("\u25CB") + " " + text + "\n");
-  }
-  notInstalled(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
-  }
-  pending(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-  }
-  warn(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
-  }
-  // ---- Level 6: Error block ----
-  error(what, cause, fix) {
-    if (this.mode === "json") return;
-    this.writeErr(this.red("\u2717") + " " + what + "\n");
-    if (cause !== void 0) {
-      this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
-    }
-    if (fix !== void 0) {
-      this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
-    }
-  }
-  table(rowsOrOpts, maybeOpts) {
-    if (this.mode === "json") return;
-    const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
-    const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
-    if (!opts) throw new Error("table() requires columns");
-    const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
-    const cols = opts.columns;
-    const widths = cols.map((col) => col.length);
-    for (const row of rows) {
-      cols.forEach((col, i) => {
-        const val = row[col] ?? "";
-        const w = widths[i] ?? 0;
-        if (val.length > w) widths[i] = val.length;
-      });
-    }
-    const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
-    if (totalWidth > maxWidth) {
-      for (let i = 0; i < rows.length; i++) {
-        const row = rows[i];
-        if (!row) continue;
-        for (const col of cols) {
-          const val = row[col] ?? "";
-          this.write("  " + this.bold(col + ":") + " " + val + "\n");
-        }
-        if (i < rows.length - 1) this.write("\n");
+`
+        );
+        output = output.replace(ERR_PREFIX_RE, "");
       }
-      return;
-    }
-    const header = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
-    this.write("  " + this.dim(header) + "\n");
-    for (const row of rows) {
-      const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
-      this.write("  " + line + "\n");
-    }
-  }
-  // ---- Spinner ----
-  spinner(text) {
-    if (this.mode === "quiet" || this.mode === "json") {
       return {
-        update() {
-        },
-        stop() {
-        }
-      };
-    }
-    const isTTY = this.stream.isTTY === true;
-    if (!isTTY || !this.colorEnabled) {
-      this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-      return {
-        update: (t) => {
-          this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
-        },
-        stop: (final) => {
-          if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
-        }
+        ok: true,
+        output,
+        metrics: { durationMs: Date.now() - startedAt }
       };
-    }
-    let current = text;
-    let frameIdx = 0;
-    let stopped = false;
-    const write = this.write.bind(this);
-    const colorFn = this.yellow.bind(this);
-    const greenFn = this.green.bind(this);
-    function renderFrame() {
-      const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
-      const line = "  " + colorFn(frame) + " " + current;
-      write("\r" + line);
-      frameIdx++;
-    }
-    renderFrame();
-    const timer = setInterval(renderFrame, 80);
-    return {
-      update(t) {
-        if (stopped) return;
-        current = t;
-      },
-      stop(final) {
-        if (stopped) return;
-        stopped = true;
-        clearInterval(timer);
-        write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+    } catch (err) {
+      if (task.signal?.aborted || err?.name === "AbortError") {
+        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
       }
-    };
-  }
-  // ---- Progress bar ----
-  progress(text, total) {
-    if (this.mode === "quiet" || this.mode === "json") {
       return {
-        update() {
-        },
-        stop() {
-        }
+        ok: false,
+        error: { code: "adapter_dispatch_failed", message: err.message }
       };
     }
-    const isTTY = this.stream.isTTY === true;
-    const start = Date.now();
-    const write = this.write.bind(this);
-    const colorFn = this.cyan.bind(this);
-    const dimFn = this.dim.bind(this);
-    const greenFn = this.green.bind(this);
-    let last = 0;
-    let lastDetail = "";
-    let stopped = false;
-    const render = () => {
-      if (stopped) return;
-      const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
-      const pct = Math.floor(frac * 100);
-      const width = 20;
-      const filled = Math.floor(frac * width);
-      const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
-      const elapsed = (Date.now() - start) / 1e3;
-      const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
-      const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
-      const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
-      const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
-      if (isTTY && this.colorEnabled) {
-        write("\r\x1B[2K" + line);
-      } else {
-        write(line + "\n");
-      }
-    };
-    render();
-    return {
-      update: (current, detail) => {
-        if (stopped) return;
-        last = current;
-        if (detail !== void 0) lastDetail = detail;
-        render();
-      },
-      stop: (final) => {
-        if (stopped) return;
-        stopped = true;
-        if (isTTY && this.colorEnabled) write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
-      }
-    };
-  }
-  // ---- JSON output ----
-  json(payload, opts) {
-    const indent = opts?.pretty ? 2 : void 0;
-    this.write(JSON.stringify(payload, null, indent) + "\n");
-  }
-  result(pretty, jsonPayload) {
-    if (this.mode === "pretty") {
-      pretty();
-    } else {
-      this.json(jsonPayload);
-    }
   }
 };
-var _ui = null;
-function getUI() {
-  if (!_ui) _ui = new UI();
-  return _ui;
-}
-function setUI(ui) {
-  _ui = ui;
-}
-function applyCommonFlags(argv) {
-  let mode = "pretty";
-  const isTTY = process.stdout.isTTY === true;
-  const noColorEnv = Boolean(process.env["NO_COLOR"]);
-  let color2 = isTTY && !noColorEnv;
-  const rest = [];
-  for (const arg of argv) {
-    switch (arg) {
-      case "--no-color":
-        color2 = false;
-        break;
-      case "--color":
-        color2 = true;
-        break;
-      case "--json":
-      case "--pretty-json":
-        mode = "json";
-        if (arg === "--json") rest.push(arg);
-        break;
-      case "--quiet":
-        mode = "quiet";
-        break;
-      default:
-        rest.push(arg);
-    }
+async function checkHealth2(baseUrl, apiKey) {
+  try {
+    const res = await fetch(`${baseUrl}/health`, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(2e3)
+    });
+    return res.ok;
+  } catch {
+    return false;
   }
-  return { mode, color: color2, restArgv: rest };
 }
 
-// src/cli/util.ts
-var DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
-var ANSI = {
-  reset: "\x1B[0m",
-  bold: "\x1B[1m",
-  dim: "\x1B[2m",
-  cyan: "\x1B[36m",
-  green: "\x1B[32m",
-  yellow: "\x1B[33m",
-  red: "\x1B[31m"
-};
-function color(kind, text) {
-  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
-  return `${ANSI[kind]}${text}${ANSI.reset}`;
-}
-function printJson(v) {
-  getUI().json(v, { pretty: true });
+// src/config.ts
+var TOML = __toESM(require("@iarna/toml"), 1);
+var import_node_fs2 = require("fs");
+var import_node_os2 = require("os");
+var import_node_path2 = require("path");
+var import_zod5 = require("zod");
+var ConfigSchema = import_zod5.z.object({
+  /** API key from `prismer setup`, or env override. */
+  api_key: import_zod5.z.string().min(1),
+  /** Cloud REST + WS base; `ws://` is derived by stripping `http`. */
+  cloud_api_base: import_zod5.z.string().url(),
+  /** Stable per-machine daemon identifier. Generated once on first setup. */
+  daemon_id: import_zod5.z.string().min(1),
+  /** Optional adapter-specific overrides keyed by adapter name. */
+  adapters: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown())).optional(),
+  /** Local daemon shell execution. Default disabled. */
+  shell: import_zod5.z.object({
+    enabled: import_zod5.z.boolean().default(false),
+    default_cwd: import_zod5.z.string().optional(),
+    defaultCwd: import_zod5.z.string().optional(),
+    shell: import_zod5.z.enum(["bash", "zsh", "sh"]).optional(),
+    max_timeout_ms: import_zod5.z.number().int().positive().optional(),
+    maxTimeoutMs: import_zod5.z.number().int().positive().optional(),
+    max_output_bytes: import_zod5.z.number().int().positive().optional(),
+    maxOutputBytes: import_zod5.z.number().int().positive().optional(),
+    allowed_workspaces: import_zod5.z.array(import_zod5.z.string()).optional(),
+    allowedWorkspaces: import_zod5.z.array(import_zod5.z.string()).optional()
+  }).optional(),
+  /** Local cache settings. */
+  cache: import_zod5.z.object({
+    max_bytes: import_zod5.z.number().int().positive().default(5 * 1024 * 1024 * 1024)
+  }).optional()
+});
+function resolvePaths(home) {
+  const root = home ?? process.env.PRISMER_HOME ?? (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".prismer");
+  return {
+    root,
+    configFile: (0, import_node_path2.join)(root, "config.toml"),
+    localDb: (0, import_node_path2.join)(root, "local.db"),
+    cacheDir: (0, import_node_path2.join)(root, "cache"),
+    logsDir: (0, import_node_path2.join)(root, "logs"),
+    runsDir: (0, import_node_path2.join)(root, "runs")
+  };
 }
-function exitWithError(message, opts) {
-  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
-  const exitCode = o.exitCode ?? 1;
-  const ui = getUI();
-  if (ui.mode === "json") {
-    const payload = {
-      ok: false,
-      error: { code: o.code ?? "cli_error", message },
-      ...o.details ? { details: o.details } : {}
-    };
-    ui.json(payload, { pretty: true });
-  } else {
-    process.stderr.write(`Error: ${message}
-`);
-  }
-  process.exit(exitCode);
+function configExists(paths = resolvePaths()) {
+  return (0, import_node_fs2.existsSync)(paths.configFile);
 }
-function normalizeCloudUrl(input) {
-  const raw = input.trim();
-  if (!raw) throw new Error("Cloud URL is empty.");
-  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
-    let parsed;
-    try {
-      parsed = new URL(raw);
-    } catch {
-      throw new Error(`Invalid --cloud URL: ${raw}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
-    }
-    return raw.replace(/\/$/, "");
-  }
-  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
-    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
-  }
-  const candidate = `http://${raw}`;
-  try {
-    new URL(candidate);
-  } catch {
-    throw new Error(`Invalid --cloud URL: ${raw}`);
+function loadConfig(paths = resolvePaths()) {
+  if (!(0, import_node_fs2.existsSync)(paths.configFile)) {
+    throw new Error(
+      `Config not found at ${paths.configFile}. Run \`prismer setup\` to create it.`
+    );
   }
-  return candidate.replace(/\/$/, "");
-}
-function runAction(fn, opts = {}) {
-  return async (...args) => {
-    try {
-      await fn(...args);
-    } catch (err) {
-      const raw = err instanceof Error ? err.message : String(err);
-      const message = opts.sanitize ? opts.sanitize(raw) : raw;
-      exitWithError(message, { code: opts.code });
-    }
+  const raw = (0, import_node_fs2.readFileSync)(paths.configFile, "utf8");
+  const parsed = TOML.parse(raw);
+  const merged = {
+    ...parsed,
+    api_key: process.env.PRISMER_API_KEY ?? parsed.api_key,
+    cloud_api_base: process.env.PRISMER_BASE_URL ?? parsed.cloud_api_base
   };
-}
-function printBanner(opts = {}) {
-  const ui = getUI();
-  if (opts.compact) {
-    ui.smallHeader("Runtime CLI v1.9.7");
-    return;
+  const result = ConfigSchema.safeParse(merged);
+  if (!result.success) {
+    const detail = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+    throw new Error(`Invalid config at ${paths.configFile}: ${detail}`);
   }
-  ui.banner("Runtime CLI v1.9.7", { full: true });
-}
-function ok(label, detail) {
-  getUI().ok(label, detail);
-}
-function warn(label, detail) {
-  getUI().warn(label, detail);
-}
-function fail(label, detail) {
-  getUI().fail(label, detail);
-}
-function tip(command, detail) {
-  const text = detail ? `${command}  ${detail}` : command;
-  getUI().tip(text);
-}
-function pidFilePath(paths) {
-  return (0, import_node_path3.join)(paths.root, "daemon.pid");
-}
-function writePidFile(paths, pid) {
-  (0, import_node_fs3.writeFileSync)(pidFilePath(paths), `${pid}
-`, "utf8");
-}
-function readPidFile(paths) {
-  const p = pidFilePath(paths);
-  if (!(0, import_node_fs3.existsSync)(p)) return void 0;
-  const raw = (0, import_node_fs3.readFileSync)(p, "utf8").trim();
-  const pid = Number.parseInt(raw, 10);
-  return Number.isFinite(pid) ? pid : void 0;
+  return result.data;
 }
-function clearPidFile(paths) {
-  const p = pidFilePath(paths);
-  if ((0, import_node_fs3.existsSync)(p)) {
-    try {
-      (0, import_node_fs3.unlinkSync)(p);
-    } catch {
-    }
+function saveConfig(config, paths = resolvePaths()) {
+  if (!(0, import_node_fs2.existsSync)(paths.root)) {
+    (0, import_node_fs2.mkdirSync)(paths.root, { recursive: true });
   }
-}
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
+  if (!(0, import_node_fs2.existsSync)((0, import_node_path2.dirname)(paths.configFile))) {
+    (0, import_node_fs2.mkdirSync)((0, import_node_path2.dirname)(paths.configFile), { recursive: true });
   }
+  ConfigSchema.parse(config);
+  (0, import_node_fs2.writeFileSync)(paths.configFile, TOML.stringify(config), "utf8");
+}
+function deriveWsUrl(httpBase) {
+  const u = new URL(httpBase);
+  u.protocol = u.protocol === "https:" ? "wss:" : "ws:";
+  u.pathname = (u.pathname.replace(/\/$/, "") || "") + "/ws";
+  return u.toString();
 }
 
 // src/cli/commands/adapter.ts
+init_util();
+init_ui();
 var BUILTIN_ADAPTERS = [hermesAdapter, claudeCodeAdapter, openclawAdapter, codexAdapter];
 var INSTALL_SPECS = {
   "claude-code": {
@@ -3003,6 +3057,32 @@ var MIGRATIONS = [
       );
       CREATE INDEX IF NOT EXISTS idx_files_hash ON workspace_files_mirror (content_hash);
     `
+  },
+  {
+    version: 3,
+    up: `
+      -- Asset metadata index (#filename reference resolution \u2014 daemon/asset/metadata-index.ts)
+      CREATE TABLE IF NOT EXISTS asset_metadata_index (
+        workspace_id TEXT NOT NULL,
+        asset_id TEXT NOT NULL,
+        content_hash TEXT NOT NULL,
+        filename TEXT,
+        folder_path TEXT,
+        mime TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        size_bytes INTEGER NOT NULL DEFAULT 0,
+        description TEXT,
+        asset_index_seq INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        PRIMARY KEY (workspace_id, asset_id)
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_filename
+        ON asset_metadata_index(workspace_id, filename);
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_seq
+        ON asset_metadata_index(workspace_id, asset_index_seq);
+    `
   }
 ];
 function runSql(db, sql) {
@@ -3035,6 +3115,8 @@ function runMigrations(db) {
 }
 
 // src/cli/commands/agent.ts
+init_util();
+init_ui();
 var ADAPTER_BINARY = {
   "claude-code": "claude",
   codex: "codex",
@@ -3416,6 +3498,8 @@ function whichBinary2(bin) {
 var import_commander3 = require("commander");
 var import_node_fs6 = require("fs");
 var import_node_path6 = require("path");
+init_util();
+init_ui();
 function buildAssetCommand() {
   const cmd = new import_commander3.Command("asset").description("Inspect IM assets");
   cmd.command("list").description("List assets for a workspace, optionally filtered by task").option("--workspace-id <id>", "Workspace id").option("--task-id <id>", "Task id filter").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -3612,6 +3696,7 @@ function stringField(obj, key) {
 
 // src/cli/commands/banner.ts
 var import_commander4 = require("commander");
+init_util();
 function buildBannerCommand() {
   return new import_commander4.Command("banner").description("Show the Prismer runtime CLI banner").option("--compact", "Show a single-line banner").option("--json", "Accept --json for global flag compatibility (banner is suppressed in JSON mode)").action((opts) => {
     printBanner({ compact: opts.compact });
@@ -3620,6 +3705,8 @@ function buildBannerCommand() {
 
 // src/cli/commands/chat.ts
 var import_commander5 = require("commander");
+init_util();
+init_ui();
 function buildChatCommand() {
   const cmd = new import_commander5.Command("chat").description("Use IM chat and group APIs");
   cmd.command("me").description("Show the current IM identity").option("--json", "Print raw JSON response").action(async (opts) => {
@@ -3794,6 +3881,8 @@ function sanitizeError(message) {
 
 // src/cli/commands/config.ts
 var import_commander6 = require("commander");
+init_util();
+init_ui();
 var SETTABLE_KEYS = ["cloud_api_base", "api_key", "daemon_id"];
 function redactApiKey(key) {
   if (!key.startsWith("sk-prismer-")) return "***";
@@ -3889,6 +3978,8 @@ function buildConfigCommand() {
 
 // src/cli/commands/cookbook.ts
 var import_commander7 = require("commander");
+init_util();
+init_ui();
 function buildCookbookCommand() {
   const cmd = new import_commander7.Command("cookbook").description("Run CLI-only 54release MVP regression suites");
   cmd.command("run").description("Run one or more cookbook smoke suites using the configured API key").option("--suite <name>", "status|im|task|group|asset|sandbox|all, comma-separated", "all").option("--workspace-id <id>", "Workspace id for workspace-scoped suites").option("--agent-id <id>", "Agent IM user id for task create smoke").option("--group-id <id>", "Group/conversation id for group message history smoke").option("--sandbox-id <id>", "Sandbox id for sandbox status smoke").option("--prompt <text>", "Prompt for optional task create smoke").option("--timeout-ms <ms>", "Request/task timeout", parsePositiveInt2, 6e4).option("--strict", "Treat skipped optional checks as failure").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -4146,13 +4237,13 @@ function parsePositiveInt2(value) {
 // src/cli/commands/daemon.ts
 var import_commander8 = require("commander");
 var import_node_child_process7 = require("child_process");
-var import_node_fs13 = require("fs");
+var import_node_fs14 = require("fs");
 var import_promises = require("timers/promises");
-var import_node_path9 = require("path");
+var import_node_path10 = require("path");
 
 // src/daemon/runner.ts
 var import_node_events3 = require("events");
-var import_node_fs12 = require("fs");
+var import_node_fs13 = require("fs");
 var import_node_os4 = require("os");
 
 // src/adapters/registry.ts
@@ -4687,6 +4778,14 @@ async function handleDispatch(payload, requestId, deps) {
       sendReply(deps.ws, reply, requestId);
       return reply;
     }
+    let hashRefResult = { text: payload.prompt, resolutions: [] };
+    if (deps.assetMetadataIndexes && profile.workspaceId) {
+      const assetIndex = deps.assetMetadataIndexes.get(profile.workspaceId);
+      if (assetIndex) {
+        hashRefResult = await resolveHashRefs(payload.prompt, assetIndex, deps.cloud);
+        payload.prompt = hashRefResult.text;
+      }
+    }
     const rewrittenPrompt = await deps.uriResolver.rewrite(payload.prompt, { pin: true });
     resolvedHashes.push(...rewrittenPrompt.resolvedHashes);
     let rewrittenContext = [];
@@ -4901,6 +5000,84 @@ function isTextLikeMime(mime) {
   if (m.endsWith("+json") || m.endsWith("+xml") || m.endsWith("+csv")) return true;
   return false;
 }
+var HASH_REF_RE = /(?:^|\s)#([^\s#]+)/g;
+var HEX_COLOR_RE = /^[0-9a-fA-F]{3,8}$/;
+var FILE_EXT_RE = /\.[a-zA-Z0-9]{1,10}$/;
+var TRAILING_PUNCT_RE = /[,.;:!?)\]}'"]+$/;
+async function resolveHashRefs(prompt, assetIndex, cloud) {
+  const resolutions = [];
+  const candidates = [];
+  let match;
+  const re = new RegExp(HASH_REF_RE.source, "g");
+  while ((match = re.exec(prompt)) !== null) {
+    const refName = match[1];
+    const leading = match[0].startsWith("#") ? 0 : 1;
+    const start = match.index + leading;
+    const end = match.index + match[0].length;
+    if (HEX_COLOR_RE.test(refName)) continue;
+    let cleanRef = refName;
+    let stripped = "";
+    const punctMatch = TRAILING_PUNCT_RE.exec(cleanRef);
+    if (punctMatch) {
+      stripped = punctMatch[0];
+      cleanRef = cleanRef.slice(0, -stripped.length);
+    }
+    if (!cleanRef) continue;
+    if (HEX_COLOR_RE.test(cleanRef)) continue;
+    const hasExtension = FILE_EXT_RE.test(cleanRef);
+    candidates.push({ ref: cleanRef, start, end: end - stripped.length, hasExtension });
+  }
+  if (candidates.length === 0) {
+    return { text: prompt, resolutions: [] };
+  }
+  const allFilenames = candidates.map((c) => c.ref);
+  const localResults = assetIndex.resolveByFilenames(allFilenames);
+  const needsCloud = candidates.filter(
+    (c) => c.hasExtension && !localResults.has(c.ref)
+  );
+  const cloudResults = /* @__PURE__ */ new Map();
+  if (needsCloud.length > 0) {
+    await Promise.allSettled(
+      needsCloud.map(async (c) => {
+        try {
+          const items = await cloud.get(
+            `/api/im/assets?workspaceId=${encodeURIComponent(assetIndex.workspaceId)}&q=${encodeURIComponent(c.ref)}&limit=1`
+          );
+          if (Array.isArray(items) && items.length > 0) {
+            const item = items[0];
+            cloudResults.set(c.ref, item.contentHash);
+          }
+        } catch {
+        }
+      })
+    );
+  }
+  for (const c of candidates) {
+    const local = localResults.get(c.ref);
+    if (local) {
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${local.contentHash}`
+      });
+    } else if (c.hasExtension) {
+      const cloudHash = cloudResults.get(c.ref);
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: cloudHash ? `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${cloudHash}` : void 0
+      });
+    }
+  }
+  let result = prompt;
+  const sorted = [...resolutions].filter((r) => r.resolvedUri).sort((a, b) => b.start - a.start);
+  for (const r of sorted) {
+    result = result.slice(0, r.start) + r.resolvedUri + result.slice(r.end);
+  }
+  return { text: result, resolutions };
+}
 async function resolveAssetRefs(refs, cache) {
   const out = { promptBlocks: [], observability: [], pinnedHashes: [] };
   if (!refs || refs.length === 0) return out;
@@ -4973,8 +5150,8 @@ async function resolveAssetRefs(refs, cache) {
   return out;
 }
 function formatInlineAssetBlock(ref, mime, body, strategy) {
-  const header = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
-  return `${header}
+  const header2 = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
+  return `${header2}
 ---
 ${body}
 ---`;
@@ -5277,20 +5454,35 @@ var LocalServer = class {
       respond(res, 204, null);
       return;
     }
+    const handlers = [];
     if (this.opts.attachMemory) {
-      void this.opts.attachMemory(req, res).then((handled) => {
-        if (handled) return;
-        this.routeStandard(req, res);
-      }).catch((err) => {
-        respond(res, 500, {
-          error: "attach_memory_threw",
-          message: err instanceof Error ? err.message : String(err)
-        });
-      });
+      handlers.push({ name: "memory", fn: this.opts.attachMemory });
+    }
+    if (this.opts.attachAsset) {
+      handlers.push({ name: "asset", fn: this.opts.attachAsset });
+    }
+    if (handlers.length > 0) {
+      void this.runHandlers(req, res, handlers, 0);
       return;
     }
     this.routeStandard(req, res);
   }
+  async runHandlers(req, res, handlers, idx) {
+    if (idx >= handlers.length) {
+      this.routeStandard(req, res);
+      return;
+    }
+    try {
+      const handled = await handlers[idx].fn(req, res);
+      if (handled) return;
+      await this.runHandlers(req, res, handlers, idx + 1);
+    } catch (err) {
+      respond(res, 500, {
+        error: `attach_${handlers[idx].name}_threw`,
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   routeStandard(req, res) {
     const url = req.url ?? "/";
     if (req.method === "GET" && url === "/healthz") {
@@ -5305,7 +5497,8 @@ var LocalServer = class {
         wsConnected: state.wsConnected,
         hostedAgents: state.hostedAgents,
         observability: state.observability,
-        memoryReady: this.opts.attachMemory != null
+        memoryReady: this.opts.attachMemory != null,
+        assetReady: this.opts.attachAsset != null
       });
       return;
     }
@@ -5759,13 +5952,14 @@ var MemoryStore = class {
     const pageId = existing?.id ?? `page_${(0, import_node_crypto2.randomUUID)().replace(/-/g, "").slice(0, 22)}`;
     const newVersion = (existing?.version ?? 0) + 1;
     const createdAt = existing?.createdAt ?? now;
+    const staleFlag = input.stale ? 1 : 0;
     const insertPage = db.prepare(`
       INSERT INTO memory_pages (
         id, workspaceId, path, title, description, contentHash, version,
         pageType, visibilityKind, visibilityImUserId, encrypted, stale,
         archivedAt, sourceAssetId, sourceRefsJson, syncStatus,
         createdAt, updatedAt
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, 0, NULL, ?, ?, 'local-only', ?, ?)
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, NULL, ?, ?, 'local-only', ?, ?)
       ON CONFLICT(workspaceId, path) DO UPDATE SET
         title = excluded.title,
         description = excluded.description,
@@ -5776,6 +5970,7 @@ var MemoryStore = class {
         visibilityImUserId = excluded.visibilityImUserId,
         sourceAssetId = excluded.sourceAssetId,
         sourceRefsJson = excluded.sourceRefsJson,
+        stale = excluded.stale,
         updatedAt = excluded.updatedAt
     `);
     const insertVersion = db.prepare(`
@@ -5803,6 +5998,7 @@ var MemoryStore = class {
         input.pageType ?? "leaf",
         visibility.kind,
         visibilityImUserId,
+        staleFlag,
         input.sourceAssetId ?? null,
         sourceRefsJson,
         createdAt,
@@ -5883,6 +6079,16 @@ var MemoryStore = class {
       dbPath: this.opts.dbPath
     };
   }
+  /**
+   * Record sync cursor for incremental sync. Used by cloud-sync.ts to
+   * persist the high-water mark for future cursor-based catch-up.
+   */
+  recordCursor(workspaceId, cursor) {
+    const now = Date.now();
+    this.requireDb().prepare(
+      `INSERT OR REPLACE INTO memory_inbox_cursor (workspaceId, cursor, updatedAt) VALUES (?, ?, ?)`
+    ).run(workspaceId, cursor, now);
+  }
   /**
    * Internal accessor for outbox.ts — outbox writes its own table within the
    * same DB. Returning the live Database handle keeps outbox transactions
@@ -6533,6 +6739,84 @@ function defaultLog() {
   };
 }
 
+// src/daemon/memory/cloud-sync.ts
+var LOG = "[CloudMemorySync]";
+var CLOUD_PAGE_LIMIT = 300;
+async function initialSyncFromCloud(runtime, cloud, workspaceId) {
+  const slot = runtime.peek(workspaceId);
+  if (!slot) {
+    console.log(`${LOG} No store for workspace=${workspaceId} \u2014 skipping`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const cursorRow = slot.store.rawDb().prepare("SELECT cursor FROM memory_inbox_cursor WHERE workspaceId = ?").get(workspaceId);
+  if (cursorRow) {
+    console.log(`${LOG} Workspace=${workspaceId} already synced (cursor: ${cursorRow.cursor.slice(0, 20)}...) \u2014 skip`);
+    return { pulled: 0, skipped: 0 };
+  }
+  console.log(`${LOG} Fetching cloud pages for workspace=${workspaceId}...`);
+  const resp = await cloud.request(
+    "GET",
+    `/api/im/memory/pages?workspaceId=${encodeURIComponent(workspaceId)}&limit=${CLOUD_PAGE_LIMIT}&stale=all`,
+    { timeoutMs: 15e3 }
+  );
+  if (!resp.ok) {
+    console.warn(
+      `${LOG} Cloud GET /memory/pages returned ${resp.status}: ${resp.error?.message ?? "unknown"}`
+    );
+    return { pulled: 0, skipped: 0 };
+  }
+  const envelope2 = resp.data;
+  if (!envelope2 || !envelope2.ok) {
+    console.log(`${LOG} Cloud returned non-ok envelope for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const pages = envelope2.data;
+  if (!pages || !Array.isArray(pages) || pages.length === 0) {
+    console.log(`${LOG} No cloud pages to sync for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  let pulled = 0;
+  let skipped = 0;
+  for (const page of pages) {
+    let content = page.content ?? "";
+    if (!content) {
+      try {
+        const detailResp = await cloud.request(
+          "GET",
+          `/api/im/memory/pages/${encodeURIComponent(page.id)}?workspaceId=${encodeURIComponent(workspaceId)}`,
+          { timeoutMs: 5e3 }
+        );
+        if (detailResp.ok && detailResp.data?.data?.content) {
+          content = detailResp.data.data.content;
+        }
+      } catch {
+      }
+    }
+    const visibility = page.visibility === "agent" ? { kind: "agent", imUserId: "" } : { kind: "workspace" };
+    try {
+      slot.store.write({
+        workspaceId,
+        path: page.path,
+        title: page.title ?? void 0,
+        content: content || "",
+        pageType: page.pageType || "leaf",
+        visibility,
+        actorImUserId: "cloud-sync",
+        actorKind: "agent"
+      });
+      pulled++;
+    } catch (err) {
+      console.warn(`${LOG} write failed for ${page.path}:`, err.message);
+      skipped++;
+    }
+  }
+  slot.store.recordCursor(workspaceId, `synced:${Date.now()}`);
+  console.log(
+    `${LOG} Synced ${pulled} pages${skipped ? `, ${skipped} skipped` : ""} for workspace=${workspaceId}`
+  );
+  return { pulled, skipped };
+}
+
 // src/daemon/memory/runner-wiring.ts
 function attachMemoryRunner(opts) {
   const runtime = new MemoryRuntime({ baseDir: opts.baseDir, deviceId: opts.deviceId });
@@ -6563,6 +6847,24 @@ function attachMemoryRunner(opts) {
     }
   };
 }
+async function syncMemoryFromCloud(wiring, cloud, workspaceIds) {
+  const uniqueIds = [...new Set(workspaceIds.filter(Boolean))];
+  if (uniqueIds.length === 0) return;
+  console.log(`[MemorySync] Initial cloud-to-local sync for ${uniqueIds.length} workspace(s)...`);
+  for (const wsId of uniqueIds) {
+    try {
+      wiring.runtime.resolve(wsId);
+      const result = await initialSyncFromCloud(wiring.runtime, cloud, wsId);
+      if (result.pulled > 0 || result.skipped > 0) {
+        console.log(
+          `[MemorySync] workspace=${wsId}: ${result.pulled} pulled, ${result.skipped} skipped`
+        );
+      }
+    } catch (err) {
+      console.error(`[MemorySync] workspace=${wsId} failed:`, err.message);
+    }
+  }
+}
 
 // src/daemon/memory/fork/select-memories.ts
 var SELECT_MEMORIES_SYSTEM_PROMPT = [
@@ -6970,8 +7272,235 @@ function parsePrismerUri(uri) {
   return { workspaceId, path: path7 };
 }
 
-// src/daemon/outbox-watcher.ts
+// src/daemon/asset/metadata-index.ts
 var import_node_fs10 = require("fs");
+var import_node_path8 = require("path");
+var DEFAULT_LIMIT = 8;
+var PULL_PAGE_SIZE = 500;
+var THROTTLE_MS = 3e4;
+function rowToMetadata(row) {
+  return {
+    assetId: row.asset_id,
+    contentHash: row.content_hash,
+    filename: row.filename,
+    folderPath: row.folder_path,
+    mime: row.mime,
+    kind: row.kind,
+    sizeBytes: row.size_bytes,
+    description: row.description,
+    assetIndexSeq: row.asset_index_seq
+  };
+}
+var AssetMetadataIndex = class {
+  db;
+  cloud;
+  /** Workspace ID — exposed for prismer:// URI construction. */
+  workspaceId;
+  cursorPath;
+  _lastSyncMs = 0;
+  constructor(opts) {
+    this.db = opts.db;
+    this.cloud = opts.cloud;
+    this.workspaceId = opts.workspaceId;
+    if (!(0, import_node_fs10.existsSync)(opts.workspaceStateDir)) {
+      (0, import_node_fs10.mkdirSync)(opts.workspaceStateDir, { recursive: true });
+    }
+    this.cursorPath = (0, import_node_path8.join)(opts.workspaceStateDir, "asset-metadata-cursor.json");
+  }
+  /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
+  readCursor() {
+    if (!(0, import_node_fs10.existsSync)(this.cursorPath)) return 0;
+    try {
+      const parsed = JSON.parse((0, import_node_fs10.readFileSync)(this.cursorPath, "utf8"));
+      if (parsed.workspaceId !== this.workspaceId) return 0;
+      return parsed.cursor;
+    } catch {
+      return 0;
+    }
+  }
+  writeCursor(cursor) {
+    const payload = {
+      workspaceId: this.workspaceId,
+      cursor,
+      writtenAt: Date.now()
+    };
+    (0, import_node_fs10.writeFileSync)(this.cursorPath, JSON.stringify(payload, null, 2));
+  }
+  /**
+   * Pull incremental asset metadata changes since the persisted cursor and
+   * upsert into the local index. Newer rows overwrite older ones by
+   * (workspace_id, asset_id) primary key.
+   *
+   * Returns the count of items applied + the new cursor. Throttled: if called
+   * within 30s of the last successful pull, returns immediately.
+   */
+  async pullDelta(opts) {
+    const now = Date.now();
+    if (now - this._lastSyncMs < THROTTLE_MS) {
+      return { applied: 0, cursor: this.readCursor() };
+    }
+    const since = this.readCursor();
+    const sinceParam = since > 0 ? `&since=${since}` : "";
+    const envelope2 = await this.cloud.get(
+      `/api/im/assets/index?workspaceId=${encodeURIComponent(this.workspaceId)}&limit=${PULL_PAGE_SIZE}${sinceParam}`,
+      { signal: opts?.signal }
+    );
+    const upsert = this.db.prepare(`
+      INSERT INTO asset_metadata_index
+        (workspace_id, asset_id, content_hash, filename, folder_path, mime, kind, size_bytes, description, asset_index_seq, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(workspace_id, asset_id) DO UPDATE SET
+        content_hash = excluded.content_hash,
+        filename = excluded.filename,
+        folder_path = excluded.folder_path,
+        mime = excluded.mime,
+        kind = excluded.kind,
+        size_bytes = excluded.size_bytes,
+        description = excluded.description,
+        asset_index_seq = excluded.asset_index_seq,
+        updated_at = excluded.updated_at
+    `);
+    const nowTs = Date.now();
+    let applied = 0;
+    const tx = this.db.transaction((items) => {
+      for (const item of items) {
+        upsert.run(
+          this.workspaceId,
+          item.assetId,
+          item.contentHash,
+          item.filename ?? null,
+          item.folderPath ?? null,
+          item.mime,
+          item.kind,
+          item.sizeBytes,
+          item.description ?? null,
+          item.assetIndexSeq,
+          nowTs
+        );
+        applied += 1;
+      }
+    });
+    try {
+      tx(envelope2.items);
+      this.writeCursor(envelope2.cursor);
+    } catch (err) {
+      throw err;
+    }
+    this._lastSyncMs = now;
+    return { applied, cursor: envelope2.cursor };
+  }
+  /**
+   * Search local index by filename or description substring.
+   * Escapes LIKE wildcards (% and _). Default limit 8.
+   */
+  search(query, limit) {
+    const escaped = query.replace(/%/g, "\\%").replace(/_/g, "\\_");
+    const pattern = `%${escaped}%`;
+    const limitVal = Math.min(Math.max(limit ?? DEFAULT_LIMIT, 1), 200);
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ?
+           AND (filename LIKE ? ESCAPE '\\' OR description LIKE ? ESCAPE '\\')
+         ORDER BY asset_index_seq DESC
+         LIMIT ?`
+    ).all(this.workspaceId, pattern, pattern, limitVal);
+    return rows.map(rowToMetadata);
+  }
+  /** Exact match on filename column. Returns undefined if not indexed. */
+  resolveByFilename(filename) {
+    const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND filename = ?").get(this.workspaceId, filename);
+    return row ? rowToMetadata(row) : void 0;
+  }
+  /** Batch exact match — returns Map for O(1) access. */
+  resolveByFilenames(filenames) {
+    if (filenames.length === 0) return /* @__PURE__ */ new Map();
+    const placeholders = filenames.map(() => "?").join(",");
+    const params = [this.workspaceId, ...filenames];
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ? AND filename IN (${placeholders})`
+    ).all(...params);
+    const map = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      if (row.filename) map.set(row.filename, rowToMetadata(row));
+    }
+    return map;
+  }
+};
+
+// src/daemon/asset/rpc.ts
+var ASSET_PATH_PREFIX = "/local/asset/";
+function attachAssetRpc(opts) {
+  return async (req, res) => {
+    const url = req.url ?? "/";
+    if (!url.startsWith(ASSET_PATH_PREFIX)) return false;
+    const [pathOnly = ""] = url.split("?", 2);
+    const subpath = pathOnly.slice(ASSET_PATH_PREFIX.length);
+    const method = req.method ?? "GET";
+    try {
+      if (method === "POST" && subpath === "search") {
+        const body = await readJson3(req);
+        return handleSearch2(opts.resolveIndex, body, res);
+      }
+      respond3(res, 404, { error: "asset_route_not_found", path: url });
+      return true;
+    } catch (err) {
+      respond3(res, 500, {
+        error: "asset_rpc_failed",
+        message: err instanceof Error ? err.message : String(err)
+      });
+      return true;
+    }
+  };
+}
+function handleSearch2(resolveIndex, body, res) {
+  if (!body || typeof body !== "object") {
+    return respond4002(res, "request body must be a JSON object");
+  }
+  const b = body;
+  if (typeof b.workspaceId !== "string" || !b.workspaceId) {
+    return respond4002(res, "workspaceId is required (string)");
+  }
+  if (typeof b.query !== "string" || !b.query.trim()) {
+    return respond4002(res, "query is required (non-empty string)");
+  }
+  const index = resolveIndex(b.workspaceId);
+  if (!index) {
+    respond3(res, 404, {
+      error: "workspace_index_not_found",
+      workspaceId: b.workspaceId,
+      message: "No asset metadata index for this workspace. Ensure the daemon has synced asset metadata."
+    });
+    return true;
+  }
+  const limit = typeof b.limit === "number" && b.limit > 0 ? b.limit : void 0;
+  const items = index.search(b.query.trim(), limit);
+  respond3(res, 200, { items });
+  return true;
+}
+function respond3(res, status, body) {
+  res.statusCode = status;
+  res.setHeader("Content-Type", "application/json");
+  res.end(JSON.stringify(body));
+}
+function respond4002(res, message) {
+  respond3(res, 400, { error: "invalid_request", message });
+  return true;
+}
+async function readJson3(req) {
+  let raw = "";
+  req.setEncoding("utf8");
+  for await (const chunk of req) raw += chunk;
+  if (!raw) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error("invalid_json");
+  }
+}
+
+// src/daemon/outbox-watcher.ts
+var import_node_fs11 = require("fs");
 var path6 = __toESM(require("path"), 1);
 var DEFAULT_INTERVAL_MS = 2e3;
 var RESERVED_SUBDIR = "_uploaded";
@@ -7139,7 +7668,7 @@ var OutboxWatcher = class {
   async scanDir(dir, kind, task) {
     let entries = [];
     try {
-      entries = await import_node_fs10.promises.readdir(dir);
+      entries = await import_node_fs11.promises.readdir(dir);
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") return;
@@ -7152,7 +7681,7 @@ var OutboxWatcher = class {
       const full = path6.join(dir, name);
       let st;
       try {
-        st = await import_node_fs10.promises.stat(full);
+        st = await import_node_fs11.promises.stat(full);
       } catch {
         continue;
       }
@@ -7177,7 +7706,7 @@ var OutboxWatcher = class {
       this.log("warn", `skip ${filePath}: no active taskId (no dispatch/handoff received yet)`);
       return;
     }
-    const bytes = await import_node_fs10.promises.readFile(filePath);
+    const bytes = await import_node_fs11.promises.readFile(filePath);
     const fileName = path6.basename(filePath);
     const blob = new Blob([new Uint8Array(bytes)]);
     const form = new FormData();
@@ -7273,8 +7802,8 @@ var ServicePool = class {
 
 // src/daemon/shell-executor.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs11 = require("fs");
-var import_node_path8 = require("path");
+var import_node_fs12 = require("fs");
+var import_node_path9 = require("path");
 var DEFAULT_OUTPUT_LIMIT = 256 * 1024;
 var DEFAULT_TIMEOUT = 6e4;
 var HARD_MAX_TIMEOUT = 30 * 6e4;
@@ -7310,7 +7839,7 @@ async function executeShellDispatch(payload, deps) {
   const command = readCommand(payload, execution);
   if (!command.trim()) return fail2(payload.taskId, "shell_command_required", "Shell command is required");
   const cwd = resolveCwd(execution.cwd, deps.config.defaultCwd);
-  if (!(0, import_node_fs11.existsSync)(cwd)) return fail2(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
+  if (!(0, import_node_fs12.existsSync)(cwd)) return fail2(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
   const timeoutMs = Math.min(
     typeof payload.timeoutMs === "number" && payload.timeoutMs > 0 ? payload.timeoutMs : deps.config.maxTimeoutMs,
     deps.config.maxTimeoutMs
@@ -7412,8 +7941,8 @@ function readCommand(payload, execution) {
   return payload.prompt;
 }
 function resolveCwd(raw, fallback) {
-  if (typeof raw !== "string" || raw.trim() === "") return (0, import_node_path8.resolve)(fallback);
-  return (0, import_node_path8.resolve)(raw);
+  if (typeof raw !== "string" || raw.trim() === "") return (0, import_node_path9.resolve)(fallback);
+  return (0, import_node_path9.resolve)(raw);
 }
 function clampNumber(value, fallback, min, max) {
   const n = typeof value === "number" ? value : typeof value === "string" ? Number(value) : NaN;
@@ -7565,6 +8094,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   localServer;
   outboxWatcher;
   memoryWiring;
+  assetMetadataIndexes = /* @__PURE__ */ new Map();
   state = "idle";
   startedAt = 0;
   workspaceId = "";
@@ -7581,6 +8111,9 @@ var Runner = class extends import_node_events3.EventEmitter {
     this.paths = this.opts.paths ?? resolvePaths();
     this.config = this.opts.configOverride ?? loadConfig(this.paths);
     this.shellConfig = resolveShellConfig(this.config.shell);
+    if (process.env.PRISMER_WORKSPACE_ID) {
+      this.workspaceId = process.env.PRISMER_WORKSPACE_ID;
+    }
     process.env.PRISMER_BASE_URL = this.config.cloud_api_base;
     process.env.PRISMER_API_KEY = this.config.api_key;
     this.db = openLocalDb(this.paths.localDb);
@@ -7618,6 +8151,16 @@ var Runner = class extends import_node_events3.EventEmitter {
       baseDir: `${this.paths.root}/memory`,
       deviceId: this.config.daemon_id
     });
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    if (this.workspaceId) {
+      this.syncAssetMetadata(this.workspaceId).catch(
+        (err) => console.error("[Daemon] Initial asset metadata sync failed:", err.message)
+      );
+    }
     const containerId = process.env.PRISMER_CONTAINER_ID;
     const isContainer = !!containerId || process.env.PRISMER_RUNTIME_MODE === "container";
     this.outboxWatcher = new OutboxWatcher({
@@ -7665,7 +8208,10 @@ var Runner = class extends import_node_events3.EventEmitter {
         // wiring step so it could be reviewed alongside the host-adapter
         // consumer (Hermes T2-B), which is what surfaces these routes to
         // an actual agent process.
-        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0
+        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0,
+        attachAsset: attachAssetRpc({
+          resolveIndex: (workspaceId) => this.assetMetadataIndexes.get(workspaceId)
+        })
       });
       await this.localServer.start();
     }
@@ -7861,10 +8407,10 @@ var Runner = class extends import_node_events3.EventEmitter {
     const rawJson = process.env.PRISMER_HOSTED_AGENT_JSON;
     let raw;
     if (rawFile) {
-      if (!(0, import_node_fs12.existsSync)(rawFile)) {
+      if (!(0, import_node_fs13.existsSync)(rawFile)) {
         throw new Error(`PRISMER_HOSTED_AGENT_FILE not found: ${rawFile}`);
       }
-      raw = (0, import_node_fs12.readFileSync)(rawFile, "utf8");
+      raw = (0, import_node_fs13.readFileSync)(rawFile, "utf8");
     } else if (rawJson) {
       raw = rawJson;
     }
@@ -7994,12 +8540,23 @@ var Runner = class extends import_node_events3.EventEmitter {
       case "workspace_file.changed":
         this.onWorkspaceFileChanged(msg.payload);
         return;
+      case "asset.changed":
+        void this.onAssetChanged(msg.payload);
+        return;
       default:
         this.emit("unknown-message", msg);
     }
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    this.syncAssetMetadata(this.workspaceId).catch(
+      (err) => console.error("[Daemon] Asset metadata sync failed:", err.message)
+    );
     for (const id of payload.profilesToSync) {
       try {
         await this.syncProfileFromCloud(id);
@@ -8059,6 +8616,7 @@ var Runner = class extends import_node_events3.EventEmitter {
           paths: this.paths,
           signal: ctrl.signal,
           ensureService: (profile, adapter) => this.servicePool.ensureService(profile, adapter),
+          assetMetadataIndexes: this.assetMetadataIndexes,
           onProgress: () => {
             const running = this.runningTasks.get(payload.taskId);
             if (running) running.lastProgressAt = Date.now();
@@ -8159,6 +8717,19 @@ var Runner = class extends import_node_events3.EventEmitter {
       this.emit("sync-error", err);
     }
   }
+  async onAssetChanged(payload) {
+    if (!payload.workspaceId) return;
+    const index = this.assetMetadataIndexes.get(payload.workspaceId);
+    if (!index) return;
+    try {
+      const result = await index.pullDelta();
+      if (result.applied > 0) {
+        console.log(`[Daemon] asset.changed workspace=${payload.workspaceId} applied=${result.applied}`);
+      }
+    } catch (err) {
+      console.error(`[Daemon] asset.changed pullDelta failed workspace=${payload.workspaceId}:`, err.message);
+    }
+  }
   onWorkspaceFileChanged(payload) {
     if (payload.operation === "delete") {
       this.db.prepare("DELETE FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?").run(payload.workspaceId, payload.path);
@@ -8194,6 +8765,28 @@ var Runner = class extends import_node_events3.EventEmitter {
       }
     };
   }
+  /**
+   * Ensure an AssetMetadataIndex exists for the given workspace and pull
+   * delta from cloud. Idempotent — creates the index on first call, reuses
+   * it on subsequent calls. Same cursor-catch-up semantics as WorkspaceMirror.
+   */
+  async syncAssetMetadata(workspaceId) {
+    let index = this.assetMetadataIndexes.get(workspaceId);
+    if (!index) {
+      const stateDir = `${this.paths.root}/${workspaceId}`;
+      index = new AssetMetadataIndex({
+        db: this.db,
+        cloud: this.cloud,
+        workspaceId,
+        workspaceStateDir: stateDir
+      });
+      this.assetMetadataIndexes.set(workspaceId, index);
+    }
+    const result = await index.pullDelta();
+    if (result.applied > 0) {
+      console.log(`[AssetMeta] workspace=${workspaceId}: ${result.applied} applied, cursor=${result.cursor}`);
+    }
+  }
   /**
    * SyncWorker FlushFn — pushes local writes to cloud.
    *
@@ -8358,6 +8951,8 @@ function safeJsonParse(raw) {
 }
 
 // src/cli/commands/daemon.ts
+init_util();
+init_ui();
 function buildDaemonCommand() {
   const cmd = new import_commander8.Command("daemon").description("Manage the prismer daemon process");
   cmd.command("start").description("Start the daemon in the background (use --foreground for Docker/systemd)").option("--port <port>", "Local server port (default 3210)", (v) => Number.parseInt(v, 10)).option("--no-local-server", "Skip starting the local 127.0.0.1 server").option("--foreground", "Run in the foreground instead of daemonizing").option("--json", "Output machine-readable JSON").action(async (opts) => {
@@ -8429,9 +9024,9 @@ function buildDaemonCommand() {
     if (existingPid && pidAlive(existingPid)) {
       exitWithError(`Daemon already running (pid ${existingPid}). Use \`prismer daemon stop\` first.`);
     }
-    if (!(0, import_node_fs13.existsSync)(paths.logsDir)) (0, import_node_fs13.mkdirSync)(paths.logsDir, { recursive: true });
-    const logFile = (0, import_node_path9.join)(paths.logsDir, "daemon.log");
-    const fd = (0, import_node_fs13.openSync)(logFile, "a");
+    if (!(0, import_node_fs14.existsSync)(paths.logsDir)) (0, import_node_fs14.mkdirSync)(paths.logsDir, { recursive: true });
+    const logFile = (0, import_node_path10.join)(paths.logsDir, "daemon.log");
+    const fd = (0, import_node_fs14.openSync)(logFile, "a");
     const args = [process.argv[1], "daemon", "run"];
     if (opts.port) args.push("--port", String(opts.port));
     if (opts.localServer === false) args.push("--no-local-server");
@@ -8514,8 +9109,8 @@ function buildDaemonCommand() {
   });
   cmd.command("logs").description("Show daemon logs").option("--tail <n>", "Number of lines to show", (v) => Number.parseInt(v, 10), 80).option("--follow", "Follow log output").option("--json", "Accept --json for global flag compatibility (raw log bytes are streamed)").action(async (opts) => {
     const paths = resolvePaths();
-    const logFile = (0, import_node_path9.join)(paths.logsDir, "daemon.log");
-    if (!(0, import_node_fs13.existsSync)(logFile)) {
+    const logFile = (0, import_node_path10.join)(paths.logsDir, "daemon.log");
+    if (!(0, import_node_fs14.existsSync)(logFile)) {
       exitWithError(`No daemon log found at ${logFile}. Start the daemon with \`prismer daemon start\`.`);
     }
     const lines = Math.max(1, opts.tail);
@@ -8556,13 +9151,13 @@ async function tailFromEnd(path7, lines) {
   }
 }
 async function followFile(path7) {
-  let offset = (0, import_node_fs13.statSync)(path7).size;
+  let offset = (0, import_node_fs14.statSync)(path7).size;
   for (; ; ) {
     await (0, import_promises.setTimeout)(1e3);
-    const size = (0, import_node_fs13.statSync)(path7).size;
+    const size = (0, import_node_fs14.statSync)(path7).size;
     if (size < offset) offset = 0;
     if (size === offset) continue;
-    const stream = (0, import_node_fs13.createReadStream)(path7, { start: offset, end: size - 1, encoding: "utf8" });
+    const stream = (0, import_node_fs14.createReadStream)(path7, { start: offset, end: size - 1, encoding: "utf8" });
     for await (const chunk of stream) process.stdout.write(chunk);
     offset = size;
   }
@@ -8570,15 +9165,16 @@ async function followFile(path7) {
 
 // src/cli/commands/events.ts
 var import_commander9 = require("commander");
-var import_node_fs14 = require("fs");
+var import_node_fs15 = require("fs");
 var import_node_os5 = require("os");
-var import_node_path10 = require("path");
+var import_node_path11 = require("path");
 var import_node_readline = require("readline");
-var DEFAULT_LIMIT = 50;
+init_util();
+var DEFAULT_LIMIT2 = 50;
 function buildEventsCommand() {
   return addEventOptions(new import_commander9.Command("events").description("Read local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!(0, import_node_fs14.existsSync)(file)) {
+    if (!(0, import_node_fs15.existsSync)(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -8595,7 +9191,7 @@ function buildEventsCommand() {
 function buildEventsStatsCommand() {
   return addEventOptions(new import_commander9.Command("events:stats").description("Summarize local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!(0, import_node_fs14.existsSync)(file)) {
+    if (!(0, import_node_fs15.existsSync)(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -8610,10 +9206,10 @@ function buildEventsStatsCommand() {
   });
 }
 function addEventOptions(cmd) {
-  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
+  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT2).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
 }
 function eventsPath() {
-  return (0, import_node_path10.join)(process.env.PRISMER_HOME ?? (0, import_node_path10.join)((0, import_node_os5.homedir)(), ".prismer"), "para", "events.jsonl");
+  return (0, import_node_path11.join)(process.env.PRISMER_HOME ?? (0, import_node_path11.join)((0, import_node_os5.homedir)(), ".prismer"), "para", "events.jsonl");
 }
 function unavailable(file) {
   return {
@@ -8629,7 +9225,7 @@ function unavailable(file) {
 async function readEvents(file, filters) {
   const out = [];
   const rl = (0, import_node_readline.createInterface)({
-    input: (0, import_node_fs14.createReadStream)(file, { encoding: "utf8" }),
+    input: (0, import_node_fs15.createReadStream)(file, { encoding: "utf8" }),
     crlfDelay: Infinity
   });
   for await (const line of rl) {
@@ -8681,7 +9277,7 @@ function bump(map, key) {
 }
 function normalizeFilters(opts) {
   return {
-    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT)),
+    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT2)),
     agentId: opts.agentId,
     sessionId: opts.sessionId,
     family: opts.family,
@@ -8693,13 +9289,14 @@ function cleanFilters(filters) {
 }
 function parsePositiveInt3(v) {
   const n = Number.parseInt(v, 10);
-  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT;
+  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT2;
 }
 
 // src/cli/commands/memory.ts
 var import_better_sqlite34 = __toESM(require("better-sqlite3"), 1);
 var import_commander10 = require("commander");
-var import_node_fs15 = require("fs");
+var import_node_fs16 = require("fs");
+init_util();
 var LOCAL_BASE = process.env.PRISMER_DAEMON_URL ?? "http://127.0.0.1:3210";
 function buildMemoryCommand() {
   const cmd = new import_commander10.Command("memory").description("Inspect local daemon memory/cache state");
@@ -8791,7 +9388,7 @@ async function tryDaemon(methods, paths) {
       try {
         const res = await fetch(`${LOCAL_BASE}${path7}`, { method, signal: AbortSignal.timeout(1500) });
         if (res.status === 404) continue;
-        const body = await readJson3(res);
+        const body = await readJson4(res);
         if (!res.ok) {
           return {
             ok: false,
@@ -8810,7 +9407,7 @@ async function tryDaemon(methods, paths) {
   }
   return void 0;
 }
-async function readJson3(res) {
+async function readJson4(res) {
   const text = await res.text();
   if (!text) return null;
   try {
@@ -8850,7 +9447,7 @@ function readCacheSnapshot(limit) {
   const paths = resolvePaths();
   const empty = {
     dbPath: paths.localDb,
-    dbExists: (0, import_node_fs15.existsSync)(paths.localDb),
+    dbExists: (0, import_node_fs16.existsSync)(paths.localDb),
     tables: {
       cached_assets: { exists: false, count: 0, sizeBytes: 0 },
       workspace_files_mirror: { exists: false, count: 0 }
@@ -8904,9 +9501,9 @@ function readCacheSnapshot(limit) {
     db?.close();
   }
 }
-function tableExists(db, table) {
-  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table);
-  return row?.name === table;
+function tableExists(db, table2) {
+  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table2);
+  return row?.name === table2;
 }
 function assetRow(row) {
   const hash = String(row.content_hash ?? "");
@@ -8972,16 +9569,17 @@ function messageFromBody(body) {
 var import_commander11 = require("commander");
 
 // src/pair.ts
-var import_node_crypto6 = require("crypto");
-var import_node_os6 = require("os");
+var import_node_crypto5 = require("crypto");
+var import_node_os7 = require("os");
 var import_promises2 = require("timers/promises");
 var import_qrcode = __toESM(require("qrcode"), 1);
 
 // src/daemon-id.ts
-var import_node_crypto5 = require("crypto");
+var import_node_os6 = require("os");
 var PREFIX = "daemon-";
 function newDaemonId() {
-  return `${PREFIX}${(0, import_node_crypto5.randomUUID)()}`;
+  const host = (0, import_node_os6.hostname)().replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "unknown";
+  return `${PREFIX}${host}`;
 }
 
 // src/pair.ts
@@ -8999,7 +9597,7 @@ async function pair(opts) {
       "pair: --as-user requires LOCAL_ONLY=1. Without that gate, this would skip mobile approval and silently mint a key for the named user."
     );
   }
-  const { publicKey } = (0, import_node_crypto6.generateKeyPairSync)("ed25519");
+  const { publicKey } = (0, import_node_crypto5.generateKeyPairSync)("ed25519");
   const devicePub = publicKey.export({ format: "der", type: "spki" }).toString("base64");
   const cloud = new CloudClient({
     baseUrl: opts.cloudBaseUrl,
@@ -9012,7 +9610,7 @@ async function pair(opts) {
     "/api/im/pair/offer",
     {
       auth: false,
-      body: { devicePub, deviceName: opts.deviceName ?? (0, import_node_os6.hostname)() }
+      body: { devicePub, deviceName: opts.deviceName ?? (0, import_node_os7.hostname)() }
     }
   );
   if (!offerRes.ok) {
@@ -9089,6 +9687,8 @@ function unwrapEnvelope2(raw) {
 }
 
 // src/cli/commands/pair.ts
+init_util();
+init_ui();
 function buildPairCommand() {
   return new import_commander11.Command("pair").description("Legacy QR approval path; use `prismer setup` to bind this runtime").option(
     "--cloud <url>",
@@ -9131,9 +9731,9 @@ function buildPairCommand() {
 
 // src/cli/commands/profile.ts
 var import_commander12 = require("commander");
-var import_node_fs16 = require("fs");
-var import_node_os7 = require("os");
-var import_node_path11 = require("path");
+var import_node_fs17 = require("fs");
+var import_node_os8 = require("os");
+var import_node_path12 = require("path");
 var import_node_child_process8 = require("child_process");
 
 // src/templates/roles/product-manager.json
@@ -9143,7 +9743,7 @@ var product_manager_default = {
   description: "Writes PRDs, defines requirements, verifies implementations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u4EA7\u54C1\u7ECF\u7406\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u5199\u6E05\u6670\u7684 PRD\uFF08\u7528\u6237\u6545\u4E8B + \u9A8C\u6536\u6807\u51C6 + \u8FB9\u754C\u6761\u4EF6\uFF09\u2461\u8BC4\u5BA1\u5DE5\u7A0B\u5B9E\u73B0\uFF08\u6838\u5BF9\u9A8C\u6536\u6807\u51C6 + \u7ED9\u53CD\u9988\uFF09\u2462\u5728\u7FA4\u804A\u91CC @engineer \u89E6\u53D1\u5B9E\u73B0\uFF0C@verifier \u89E6\u53D1\u9A8C\u6536\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u4F60\u7684\u8F93\u51FA PRD \u5E94\u8BE5\u4E0A\u4F20\u4E3A workspace file `docs/PROJECT-prd.md`\n- \u4F60\u5B8C\u6210 PRD \u540E\uFF0C\u53D1\u6D88\u606F @engineer-name \u8BA9\u4ED6\u5B9E\u73B0\uFF0C\u9644 prismer://file/<wsId>/docs/PROJECT-prd.md \u94FE\u63A5\n- \u6536\u5230 engineer \u5B8C\u6210\u6D88\u606F\u540E\uFF0C\u4E3B\u52A8 review\uFF0C\u5199\u53CD\u9988\u5230\u7FA4\u91CC",
     allowedTools: ["Read", "Write", "WebSearch"],
     maxTokens: 8e3
@@ -9157,7 +9757,7 @@ var engineer_default = {
   description: "Implements features per PRD, writes code, runs tests",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u8D44\u6DF1\u5DE5\u7A0B\u5E08\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u6839\u636E PRD \u5B9E\u73B0 feature \u2461\u5199\u6D4B\u8BD5\u8986\u76D6 \u2462\u628A\u4EE3\u7801\u4E0A\u4F20\u4E3A workspace file \u540E\u5728\u7FA4\u804A\u6C47\u62A5\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u6536\u5230 PRD \u540E\u5148 Read prismer://file \u94FE\u63A5\u62C9\u5230\u7684\u672C\u5730\u8DEF\u5F84\n- \u5B9E\u73B0\u5B8C\u6BD5\u540E\u7528 daemon \u4E0A\u4F20 src/<feature>.* \u5230 workspace_files\n- \u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644\u5B9E\u73B0\u7684 prismer://file URI",
     allowedTools: ["Read", "Write", "Edit", "Bash", "Grep"],
     maxTokens: 16e3
@@ -9171,7 +9771,7 @@ var ceo_default = {
   description: "Sets strategic direction, asks tough questions, makes go/no-go calls",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F CEO\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u57FA\u4E8E\u5E02\u573A\u53CD\u9988\u548C\u6570\u636E\u505A\u6218\u7565\u51B3\u7B56 \u2461\u8BC4\u5BA1 PRD \u662F\u5426\u5BF9\u9F50\u6218\u7565 \u2462\u5728\u6267\u884C\u4E2D\u63D0\u51FA\u5C16\u9510\u7684'\u4E3A\u4EC0\u4E48'\u95EE\u9898\u3002",
     allowedTools: ["Read", "WebSearch"],
     maxTokens: 4e3
@@ -9185,7 +9785,7 @@ var researcher_default = {
   description: "Investigates topics, gathers sources, writes research memos with citations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u7814\u7A76\u5458\u3002\u4EFB\u52A1\uFF1A\u2460\u4F9D\u636E\u95EE\u9898\u5236\u5B9A\u8C03\u7814\u63D0\u7EB2 \u2461\u6293\u53D6/\u9605\u8BFB\u8D44\u6599\u5E76\u63D0\u53D6\u8981\u70B9 \u2462\u4EA7\u51FA\u5E26\u5F15\u7528\u7684\u7814\u7A76\u5907\u5FD8\u5F55\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u7814\u7A76\u4EA7\u51FA\u4E0A\u4F20\u4E3A workspace file `research/<topic>.md`\n- \u5B8C\u6210\u540E\u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644 prismer://file/<wsId>/research/<topic>.md\n- \u5F15\u7528\u5FC5\u987B\u7ED9\u51FA\u539F\u59CB\u94FE\u63A5\u6216 prismer://asset URI\uFF1B\u4E0D\u5F97\u4F2A\u9020\u6765\u6E90",
     allowedTools: ["Read", "Write", "WebSearch", "WebFetch"],
     maxTokens: 12e3
@@ -9211,6 +9811,7 @@ function listRoleTemplates() {
 }
 
 // src/cli/commands/profile.ts
+init_util();
 function buildProfileCommand() {
   const cmd = new import_commander12.Command("profile").description("Manage AgentProfile (per-agent adapter config)");
   cmd.command("templates").description("List built-in role templates (PM / Engineer / CEO \u2026)").option("--json", "Output JSON (default)").action(() => {
@@ -9221,7 +9822,7 @@ function buildProfileCommand() {
     const data = await cloud.get(`/api/im/agent_profiles?agentId=${encodeURIComponent(opts.agent)}`);
     printJson(data);
   }, { code: "profile_list_failed" }));
-  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
+  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--model <name>", "Model id (overrides template default; fetched from cloud if omitted)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
     let configObj = {};
     let adapterName = opts.adapter ?? "hermes";
     if (opts.fromTemplate) {
@@ -9234,6 +9835,9 @@ function buildProfileCommand() {
       const inline = readJsonArg(opts.config);
       configObj = { ...configObj, ...inline };
     }
+    if (opts.model) {
+      configObj.model = opts.model;
+    }
     const cloud = mkCloud4();
     const wsId = opts.workspaceId ?? await resolveDefaultWorkspaceId(cloud);
     const res = await cloud.request("POST", "/api/im/agent_profiles", {
@@ -9253,12 +9857,12 @@ function buildProfileCommand() {
     const profile = await cloud.get(
       `/api/im/agent_profiles/${encodeURIComponent(profileId)}`
     );
-    const tmpFile = (0, import_node_path11.join)((0, import_node_os7.tmpdir)(), `prismer-profile-${profileId}.json`);
-    (0, import_node_fs16.writeFileSync)(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
+    const tmpFile = (0, import_node_path12.join)((0, import_node_os8.tmpdir)(), `prismer-profile-${profileId}.json`);
+    (0, import_node_fs17.writeFileSync)(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
     const editor = process.env.EDITOR || "vi";
     const ed = (0, import_node_child_process8.spawnSync)(editor, [tmpFile], { stdio: "inherit" });
     if (ed.status !== 0) exitWithError(`editor exited ${ed.status}`, { code: "editor_failed" });
-    const newConfig = JSON.parse((0, import_node_fs16.readFileSync)(tmpFile, "utf8"));
+    const newConfig = JSON.parse((0, import_node_fs17.readFileSync)(tmpFile, "utf8"));
     const res = await cloud.request("PATCH", `/api/im/agent_profiles/${encodeURIComponent(profileId)}`, {
       body: { config: newConfig, version: profile.version }
     });
@@ -9280,8 +9884,8 @@ function mkCloud4() {
 function readJsonArg(arg) {
   if (arg.startsWith("@")) {
     const path7 = arg.slice(1);
-    if (!(0, import_node_fs16.existsSync)(path7)) throw new Error(`File not found: ${path7}`);
-    return JSON.parse((0, import_node_fs16.readFileSync)(path7, "utf8"));
+    if (!(0, import_node_fs17.existsSync)(path7)) throw new Error(`File not found: ${path7}`);
+    return JSON.parse((0, import_node_fs17.readFileSync)(path7, "utf8"));
   }
   return JSON.parse(arg);
 }
@@ -9294,6 +9898,8 @@ async function resolveDefaultWorkspaceId(cloud) {
 
 // src/cli/commands/sandbox.ts
 var import_commander13 = require("commander");
+init_util();
+init_ui();
 function buildSandboxCommand() {
   const cmd = new import_commander13.Command("sandbox").description("Inspect and smoke-test sandbox lifecycle");
   cmd.command("list").description("List sandbox containers in a workspace").requiredOption("--workspace-id <id>", "Workspace id").option("--status <status>", "Status filter").option("--limit <n>", "Max rows", parsePositiveInt5, 50).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -9495,11 +10101,13 @@ async function safeParseResponse(res) {
 
 // src/cli/commands/setup.ts
 var import_commander14 = require("commander");
-var import_node_os8 = require("os");
+var import_node_os9 = require("os");
 var import_node_child_process9 = require("child_process");
-var import_node_crypto7 = require("crypto");
-var import_node_fs17 = require("fs");
+var import_node_crypto6 = require("crypto");
+var import_node_fs18 = require("fs");
 var import_node_http2 = require("http");
+init_util();
+init_ui();
 function buildSetupCommand() {
   return new import_commander14.Command("setup").description("Set up this local runtime and bind it to Prismer Cloud").argument("[api-key]", "Prismer daemon API key; primarily for manual recovery and automation").option(
     "--cloud <url>",
@@ -9522,6 +10130,7 @@ function buildSetupCommand() {
       getUI().blank();
     }
     const shouldStart = opts.start !== false;
+    stopRunningDaemon(paths);
     if (opts.pair || opts.asUser) {
       if (!opts.json) warn("Legacy pair setup path", "plain `prismer setup --start` is the canonical runtime binding flow");
       if (opts.asUser && process.env.LOCAL_ONLY !== "1") {
@@ -9538,7 +10147,7 @@ function buildSetupCommand() {
       }
       const result = await pair({
         cloudBaseUrl,
-        deviceName: opts.deviceName ?? (0, import_node_os8.hostname)(),
+        deviceName: opts.deviceName ?? (0, import_node_os9.hostname)(),
         force: opts.force,
         paths,
         asUserEmail: opts.asUser
@@ -9555,13 +10164,13 @@ function buildSetupCommand() {
         apiKey = await mintDaemonApiKey({
           cloudBaseUrl,
           token: authToken,
-          deviceName: opts.deviceName ?? (0, import_node_os8.hostname)()
+          deviceName: opts.deviceName ?? (0, import_node_os9.hostname)()
         });
       }
       if (!apiKey && !authToken && !opts.check && opts.browser !== false) {
         apiKey = await runBrowserSetup({
           cloudBaseUrl,
-          deviceName: opts.deviceName ?? (0, import_node_os8.hostname)(),
+          deviceName: opts.deviceName ?? (0, import_node_os9.hostname)(),
           json: Boolean(opts.json)
         });
       }
@@ -9645,7 +10254,7 @@ function buildSetupCommand() {
   }, { code: "setup_failed" }));
 }
 async function runBrowserSetup(input) {
-  const state = (0, import_node_crypto7.randomBytes)(18).toString("base64url");
+  const state = (0, import_node_crypto6.randomBytes)(18).toString("base64url");
   const server = (0, import_node_http2.createServer)();
   const apiKeyPromise = waitForSetupCallback(server, state);
   await new Promise((resolve3, reject) => {
@@ -9742,13 +10351,35 @@ function startDaemonDetached(home) {
   });
   child.unref();
 }
+function stopRunningDaemon(paths) {
+  const pid = readPidFile(paths);
+  if (!pid || !pidAlive(pid)) {
+    if (pid) clearPidFile(paths);
+    return;
+  }
+  try {
+    process.kill(pid, "SIGTERM");
+  } catch {
+    return;
+  }
+  const deadline = Date.now() + 5e3;
+  while (Date.now() < deadline) {
+    if (!pidAlive(pid)) {
+      clearPidFile(paths);
+      return;
+    }
+    const start = Date.now();
+    while (Date.now() - start < 200) {
+    }
+  }
+}
 function shouldArchiveLocalDb(previous, next) {
   return previous.api_key !== next.api_key || previous.cloud_api_base !== next.cloud_api_base || previous.daemon_id !== next.daemon_id;
 }
 function archiveLocalDb(localDbPath) {
-  if (!(0, import_node_fs17.existsSync)(localDbPath)) return;
+  if (!(0, import_node_fs18.existsSync)(localDbPath)) return;
   const archived = `${localDbPath}.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.bak`;
-  (0, import_node_fs17.renameSync)(localDbPath, archived);
+  (0, import_node_fs18.renameSync)(localDbPath, archived);
 }
 async function mintDaemonApiKey(input) {
   const label = `Daemon: ${input.deviceName} ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`;
@@ -9769,6 +10400,8 @@ async function mintDaemonApiKey(input) {
 
 // src/cli/commands/status.ts
 var import_commander15 = require("commander");
+init_util();
+init_ui();
 function buildStatusCommand() {
   return new import_commander15.Command("status").description("Show daemon + config + cloud status").option("--json", "Output machine-readable JSON").action(async (opts) => {
     const paths = resolvePaths();
@@ -9795,10 +10428,34 @@ function buildStatusCommand() {
     const cloud = new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
     let cloudOk = false;
     let me = null;
+    let devices = null;
+    let agents = null;
     try {
-      const res = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
-      cloudOk = res.ok;
-      me = res.data ?? null;
+      const meRes = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
+      cloudOk = meRes.ok;
+      me = meRes.data ?? null;
+      if (cloudOk) {
+        const wsRes = await cloud.request("GET", "/api/im/workspaces", { timeoutMs: 3e3 });
+        if (wsRes.ok) {
+          const wsBody = wsRes.data;
+          const wsList = wsBody?.data;
+          if (Array.isArray(wsList) && wsList.length > 0) {
+            const wsId = wsList[0]?.id;
+            if (wsId) {
+              const devRes = await cloud.request("GET", `/api/workspace/runtime-installations?workspaceId=${encodeURIComponent(wsId)}&includeStopped=false`, { timeoutMs: 3e3 });
+              if (devRes.ok) {
+                const devBody = devRes.data;
+                devices = devBody?.data;
+              }
+              const agRes = await cloud.request("GET", `/api/im/workspaces/${encodeURIComponent(wsId)}/agents`, { timeoutMs: 3e3 });
+              if (agRes.ok) {
+                const agBody = agRes.data;
+                agents = agBody?.data;
+              }
+            }
+          }
+        }
+      }
     } catch {
       cloudOk = false;
     }
@@ -9810,10 +10467,15 @@ function buildStatusCommand() {
       daemon: {
         running: daemonRunning,
         pid: daemonStatus.pid ?? pid ?? null,
-        wsConnected: daemonStatus.wsConnected ?? null
+        wsConnected: daemonStatus.wsConnected ?? null,
+        info: daemonStatus.info ?? {}
       },
-      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me },
-      local
+      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me, devices, agents },
+      local,
+      binding: {
+        daemonId: cfg.daemon_id,
+        apiKey: cfg.api_key
+      }
     };
     if (opts.json) {
       printJson(report);
@@ -9827,12 +10489,19 @@ async function readDaemonStatus() {
     const res = await fetch("http://127.0.0.1:3210/healthz", {
       signal: AbortSignal.timeout(1e3)
     });
-    if (!res.ok) return { running: false };
-    const data = await res.json();
-    return { running: true, pid: data.pid, wsConnected: data.wsConnected };
+    if (res.ok) {
+      const data = await res.json();
+      return { running: true, pid: data.pid, wsConnected: data.wsConnected, info: data };
+    }
   } catch {
-    return { running: false };
   }
+  const paths = resolvePaths();
+  const pid = readPidFile(paths);
+  if (pid) {
+    const { pidAlive: pidAlive2 } = await Promise.resolve().then(() => (init_util(), util_exports));
+    if (pidAlive2(pid)) return { running: true, pid };
+  }
+  return { running: false };
 }
 function readLocalCounts(localDbPath) {
   try {
@@ -9858,21 +10527,59 @@ function printPretty(report) {
   ui.blank();
   ok("Config", report.paths.config);
   if (report.daemon.running) {
-    ok("Daemon", `pid=${report.daemon.pid ?? "?"} ws=${report.daemon.wsConnected ? "connected" : "pending"}`);
+    const ws = report.daemon.wsConnected ? "connected" : "pending";
+    ok("Daemon", `pid=${report.daemon.pid}  ws=${ws}`);
+    if (report.daemon.info) {
+      const info2 = report.daemon.info;
+      if (info2.version) ui.line(`  Version:  ${info2.version}`);
+      if (info2.uptime) ui.line(`  Uptime:   ${Math.round(info2.uptime / 60)}m`);
+      if (info2.memoryMb) ui.line(`  Memory:   ${info2.memoryMb} MB`);
+    }
   } else {
     warn("Daemon", "not running");
     tip("prismer daemon start");
   }
-  if (report.cloud.reachable) ok("Cloud", report.cloud.base);
-  else {
+  if (report.cloud.reachable) {
+    ok("Cloud", report.cloud.base);
+    const me = report.cloud.me;
+    if (me?.user) {
+      const roleTag = me.user.role ? `  role=${me.user.role}` : "";
+      ui.line(`  Account:  ${me.user.displayName ?? me.user.username ?? "?"}${roleTag}`);
+    }
+    if (me?.credits) {
+      ui.line(`  Credits:  ${typeof me.credits.balance === "number" ? me.credits.balance.toLocaleString() : "?"}`);
+    }
+  } else {
     fail("Cloud", `${report.cloud.base} unreachable or unauthorized`);
     tip("prismer setup --force");
   }
+  if (report.binding) {
+    ui.blank();
+    ui.line(`  Daemon ID:  ${report.binding.daemonId}`);
+    const masked = report.binding.apiKey.slice(0, 14) + "\u2022\u2022\u2022\u2022" + report.binding.apiKey.slice(-4);
+    ui.line(`  API Key:    ${masked}`);
+  }
+  if (Array.isArray(report.cloud.devices) && report.cloud.devices.length > 0) {
+    const devs = report.cloud.devices;
+    ui.blank();
+    ui.line(`  Workspace Devices (${devs.length}):`);
+    for (const d of devs) {
+      const statusIcon = d.daemonStatus === "connected" ? "\u25CF" : "\u25CB";
+      const kind = d.runtimeKind === "docker" ? "Local" : "K8s";
+      const declared = d.hostedAgentSummary?.declared ?? 0;
+      ui.line(`    ${statusIcon} ${d.podName?.replace(/^daemon:/, "")?.slice(0, 28) ?? "?"}  kind=${kind}  agents=${declared}`);
+    }
+  } else {
+    ui.line(`  Workspace Devices: none`);
+  }
+  if (Array.isArray(report.cloud.agents) && report.cloud.agents.length > 0) {
+    ui.line(`  Hosted agents: ${report.cloud.agents.length}`);
+  }
   if (report.local) {
     ui.blank();
-    ui.line(`  Agents:    ${report.local.agents}`);
-    ui.line(`  Profiles:  ${report.local.profiles}`);
-    ui.line(`  Tasks:     ${report.local.runningTasks} running locally`);
+    ui.line(`  Local agents:  ${report.local.agents}`);
+    ui.line(`  Profiles:      ${report.local.profiles}`);
+    ui.line(`  Running tasks: ${report.local.runningTasks}`);
   } else {
     warn("Local DB", "unavailable");
   }
@@ -9881,6 +10588,7 @@ function printPretty(report) {
 // src/cli/commands/task.ts
 var import_commander16 = require("commander");
 var import_promises3 = require("timers/promises");
+init_util();
 function describeStatus(status) {
   return status === 0 ? "network error" : `HTTP ${status}`;
 }
@@ -10000,6 +10708,8 @@ function taskFrom2(raw) {
 
 // src/cli/commands/workspace.ts
 var import_commander17 = require("commander");
+init_util();
+init_ui();
 function buildWorkspaceCommand() {
   const cmd = new import_commander17.Command("workspace").description("Manage workspaces, runtime snapshots, and workspace files");
   cmd.command("list").description("List workspaces").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -10234,6 +10944,7 @@ async function readResponseError(res) {
 }
 
 // src/cli/index.ts
+init_ui();
 var VERSION = "1.9.7";
 function buildProgram() {
   const program = new import_commander18.Command("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);