@prismer/runtime 1.9.7 → 1.9.21

package/dist/cli.js

@@ -1,10 +1,611 @@
 #!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
   get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
 }) : x)(function(x) {
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/cli/ui.ts
+import * as fs from "fs";
+import * as path from "path";
+import { fileURLToPath } from "url";
+function thisDirname() {
+  try {
+    return path.dirname(fileURLToPath(import.meta.url));
+  } catch {
+    return process.cwd();
+  }
+}
+function findIconPath(size = "big") {
+  const name = size === "big" ? "icon" : "smallicon";
+  const here = thisDirname();
+  const candidates = [
+    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
+    path.resolve(here, "../assets", name),
+    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
+    path.resolve(here, "../../assets", name),
+    // source/typecheck: src/cli/ui.ts → ../../assets
+    path.resolve(here, "../../assets", name),
+    // dev mode: cwd happens to be runtime root
+    path.resolve(process.cwd(), "assets", name),
+    path.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
+  ];
+  for (const candidate of candidates) {
+    try {
+      if (fs.existsSync(candidate)) return candidate;
+    } catch {
+    }
+  }
+  return null;
+}
+function getUI() {
+  if (!_ui) _ui = new UI();
+  return _ui;
+}
+function setUI(ui) {
+  _ui = ui;
+}
+function applyCommonFlags(argv) {
+  let mode = "pretty";
+  const isTTY = process.stdout.isTTY === true;
+  const noColorEnv = Boolean(process.env["NO_COLOR"]);
+  let color2 = isTTY && !noColorEnv;
+  const rest = [];
+  for (const arg of argv) {
+    switch (arg) {
+      case "--no-color":
+        color2 = false;
+        break;
+      case "--color":
+        color2 = true;
+        break;
+      case "--json":
+      case "--pretty-json":
+        mode = "json";
+        if (arg === "--json") rest.push(arg);
+        break;
+      case "--quiet":
+        mode = "quiet";
+        break;
+      default:
+        rest.push(arg);
+    }
+  }
+  return { mode, color: color2, restArgv: rest };
+}
+var BRAILLE_FRAMES, COMPACT_BANNER, UI, _ui;
+var init_ui = __esm({
+  "src/cli/ui.ts"() {
+    "use strict";
+    BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
+    UI = class {
+      mode;
+      colorEnabled;
+      stream;
+      errStream;
+      constructor(opts) {
+        this.mode = opts?.mode ?? "pretty";
+        this.stream = opts?.stream ?? process.stdout;
+        this.errStream = opts?.errStream ?? process.stderr;
+        if (opts?.color !== void 0) {
+          this.colorEnabled = opts.color;
+        } else {
+          const isTTY = this.stream.isTTY === true;
+          const noColor = Boolean(process.env["NO_COLOR"]);
+          this.colorEnabled = isTTY && !noColor;
+        }
+      }
+      // ---- Internal color helpers ----
+      ansi(open, close, text) {
+        if (!this.colorEnabled) return text;
+        return `\x1B[${open}m${text}\x1B[${close}m`;
+      }
+      green(t) {
+        return this.ansi(32, 39, t);
+      }
+      red(t) {
+        return this.ansi(31, 39, t);
+      }
+      yellow(t) {
+        return this.ansi(33, 39, t);
+      }
+      cyan(t) {
+        return this.ansi(36, 39, t);
+      }
+      dim(t) {
+        return this.ansi(2, 22, t);
+      }
+      bold(t) {
+        return this.ansi(1, 22, t);
+      }
+      gray(t) {
+        return this.ansi(90, 39, t);
+      }
+      brandMark() {
+        return this.cyan("\u25C7");
+      }
+      colorBrandLine(line) {
+        let out = "";
+        for (const ch of line) {
+          if (ch === "\u2592") {
+            out += this.cyan(ch);
+          } else if (ch === "\u2593") {
+            out += this.dim(ch);
+          } else {
+            out += ch;
+          }
+        }
+        return out;
+      }
+      // ---- Core write helpers ----
+      write(text) {
+        this.stream.write(text);
+      }
+      writeErr(text) {
+        this.errStream.write(text);
+      }
+      // ---- Level 1: Header ----
+      header(text) {
+        if (this.mode === "json") return;
+        const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
+        this.write(prefix + this.bold(text) + "\n");
+      }
+      smallHeader(subtitle) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const iconPath = findIconPath("small");
+        if (iconPath !== null) {
+          try {
+            const raw = fs.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
+            for (const line of raw.split("\n")) {
+              this.write(this.cyan(line) + "\n");
+            }
+          } catch {
+            this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
+          }
+        } else {
+          this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      banner(subtitle, opts) {
+        if (this.mode === "json" || this.mode === "quiet") return;
+        const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
+        const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
+        const iconPath = findIconPath("big");
+        const shouldUseFull = opts?.full === true || width >= 120;
+        if (shouldUseFull && iconPath !== null) {
+          try {
+            const raw = fs.readFileSync(iconPath, "utf-8");
+            const lines = raw.split("\n");
+            for (const line of lines) {
+              const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
+              const stripped = brandedLine.trimEnd();
+              if (stripped.length === 0) {
+                this.write("\n");
+                continue;
+              }
+              const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
+              this.write(this.colorBrandLine(clipped) + "\n");
+            }
+          } catch {
+            this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+            this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+          }
+        } else {
+          this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
+          this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+        }
+        if (subtitle !== void 0 && subtitle.length > 0) {
+          this.write(this.dim("  " + subtitle) + "\n");
+        }
+        this.blank();
+      }
+      // ---- Level 2: Primary data ----
+      blank() {
+        if (this.mode === "json") return;
+        this.write("\n");
+      }
+      line(text) {
+        if (this.mode === "json") return;
+        this.write(text + "\n");
+      }
+      info(text) {
+        this.line(text);
+      }
+      // ---- Level 3: Secondary ----
+      secondary(text, indent = 2) {
+        if (this.mode === "json") return;
+        this.write(" ".repeat(indent) + this.dim(text) + "\n");
+      }
+      // ---- Level 4: Action tips ----
+      tip(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Tip:") + " " + text + "\n");
+      }
+      next(text) {
+        if (this.mode === "json") return;
+        this.write(this.cyan("Next:") + " " + text + "\n");
+      }
+      // ---- Level 5: Status indicators ----
+      ok(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
+      }
+      success(text, detail) {
+        this.ok(text, detail);
+      }
+      fail(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
+      }
+      online(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.green("\u25CF") + " " + text + "\n");
+      }
+      offline(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.gray("\u25CB") + " " + text + "\n");
+      }
+      notInstalled(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
+      }
+      pending(text) {
+        if (this.mode === "json") return;
+        this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+      }
+      warn(text, detail) {
+        if (this.mode === "json") return;
+        const suffix = detail ? "  " + this.dim(detail) : "";
+        this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
+      }
+      // ---- Level 6: Error block ----
+      error(what, cause, fix) {
+        if (this.mode === "json") return;
+        this.writeErr(this.red("\u2717") + " " + what + "\n");
+        if (cause !== void 0) {
+          this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
+        }
+        if (fix !== void 0) {
+          this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
+        }
+      }
+      table(rowsOrOpts, maybeOpts) {
+        if (this.mode === "json") return;
+        const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
+        const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
+        if (!opts) throw new Error("table() requires columns");
+        const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
+        const cols = opts.columns;
+        const widths = cols.map((col) => col.length);
+        for (const row of rows) {
+          cols.forEach((col, i) => {
+            const val = row[col] ?? "";
+            const w = widths[i] ?? 0;
+            if (val.length > w) widths[i] = val.length;
+          });
+        }
+        const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
+        if (totalWidth > maxWidth) {
+          for (let i = 0; i < rows.length; i++) {
+            const row = rows[i];
+            if (!row) continue;
+            for (const col of cols) {
+              const val = row[col] ?? "";
+              this.write("  " + this.bold(col + ":") + " " + val + "\n");
+            }
+            if (i < rows.length - 1) this.write("\n");
+          }
+          return;
+        }
+        const header2 = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
+        this.write("  " + this.dim(header2) + "\n");
+        for (const row of rows) {
+          const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
+          this.write("  " + line + "\n");
+        }
+      }
+      // ---- Spinner ----
+      spinner(text) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        if (!isTTY || !this.colorEnabled) {
+          this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
+          return {
+            update: (t) => {
+              this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
+            },
+            stop: (final) => {
+              if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
+            }
+          };
+        }
+        let current = text;
+        let frameIdx = 0;
+        let stopped = false;
+        const write = this.write.bind(this);
+        const colorFn = this.yellow.bind(this);
+        const greenFn = this.green.bind(this);
+        function renderFrame() {
+          const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
+          const line = "  " + colorFn(frame) + " " + current;
+          write("\r" + line);
+          frameIdx++;
+        }
+        renderFrame();
+        const timer = setInterval(renderFrame, 80);
+        return {
+          update(t) {
+            if (stopped) return;
+            current = t;
+          },
+          stop(final) {
+            if (stopped) return;
+            stopped = true;
+            clearInterval(timer);
+            write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- Progress bar ----
+      progress(text, total) {
+        if (this.mode === "quiet" || this.mode === "json") {
+          return {
+            update() {
+            },
+            stop() {
+            }
+          };
+        }
+        const isTTY = this.stream.isTTY === true;
+        const start = Date.now();
+        const write = this.write.bind(this);
+        const colorFn = this.cyan.bind(this);
+        const dimFn = this.dim.bind(this);
+        const greenFn = this.green.bind(this);
+        let last = 0;
+        let lastDetail = "";
+        let stopped = false;
+        const render = () => {
+          if (stopped) return;
+          const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
+          const pct = Math.floor(frac * 100);
+          const width = 20;
+          const filled = Math.floor(frac * width);
+          const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
+          const elapsed = (Date.now() - start) / 1e3;
+          const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
+          const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
+          const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
+          const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
+          if (isTTY && this.colorEnabled) {
+            write("\r\x1B[2K" + line);
+          } else {
+            write(line + "\n");
+          }
+        };
+        render();
+        return {
+          update: (current, detail) => {
+            if (stopped) return;
+            last = current;
+            if (detail !== void 0) lastDetail = detail;
+            render();
+          },
+          stop: (final) => {
+            if (stopped) return;
+            stopped = true;
+            if (isTTY && this.colorEnabled) write("\r\x1B[2K");
+            if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+          }
+        };
+      }
+      // ---- JSON output ----
+      json(payload, opts) {
+        const indent = opts?.pretty ? 2 : void 0;
+        this.write(JSON.stringify(payload, null, indent) + "\n");
+      }
+      result(pretty, jsonPayload) {
+        if (this.mode === "pretty") {
+          pretty();
+        } else {
+          this.json(jsonPayload);
+        }
+      }
+    };
+    _ui = null;
+  }
+});
+
+// src/cli/util.ts
+var util_exports = {};
+__export(util_exports, {
+  DEFAULT_CLOUD_BASE_URL: () => DEFAULT_CLOUD_BASE_URL,
+  clearPidFile: () => clearPidFile,
+  color: () => color,
+  exitWithError: () => exitWithError,
+  fail: () => fail,
+  header: () => header,
+  info: () => info,
+  normalizeCloudUrl: () => normalizeCloudUrl,
+  ok: () => ok,
+  pidAlive: () => pidAlive,
+  pidFilePath: () => pidFilePath,
+  printBanner: () => printBanner,
+  printJson: () => printJson,
+  readPidFile: () => readPidFile,
+  runAction: () => runAction,
+  table: () => table,
+  tip: () => tip,
+  warn: () => warn,
+  writePidFile: () => writePidFile
+});
+import { existsSync as existsSync4, readFileSync as readFileSync4, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join3 } from "path";
+function color(kind, text) {
+  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
+  return `${ANSI[kind]}${text}${ANSI.reset}`;
+}
+function printJson(v) {
+  getUI().json(v, { pretty: true });
+}
+function exitWithError(message, opts) {
+  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
+  const exitCode = o.exitCode ?? 1;
+  const ui = getUI();
+  if (ui.mode === "json") {
+    const payload = {
+      ok: false,
+      error: { code: o.code ?? "cli_error", message },
+      ...o.details ? { details: o.details } : {}
+    };
+    ui.json(payload, { pretty: true });
+  } else {
+    process.stderr.write(`Error: ${message}
+`);
+  }
+  process.exit(exitCode);
+}
+function normalizeCloudUrl(input) {
+  const raw = input.trim();
+  if (!raw) throw new Error("Cloud URL is empty.");
+  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      throw new Error(`Invalid --cloud URL: ${raw}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
+    }
+    return raw.replace(/\/$/, "");
+  }
+  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
+    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
+  }
+  const candidate = `http://${raw}`;
+  try {
+    new URL(candidate);
+  } catch {
+    throw new Error(`Invalid --cloud URL: ${raw}`);
+  }
+  return candidate.replace(/\/$/, "");
+}
+function runAction(fn, opts = {}) {
+  return async (...args) => {
+    try {
+      await fn(...args);
+    } catch (err) {
+      const raw = err instanceof Error ? err.message : String(err);
+      const message = opts.sanitize ? opts.sanitize(raw) : raw;
+      exitWithError(message, { code: opts.code });
+    }
+  };
+}
+function printBanner(opts = {}) {
+  const ui = getUI();
+  if (opts.compact) {
+    ui.smallHeader("Runtime CLI v1.9.7");
+    return;
+  }
+  ui.banner("Runtime CLI v1.9.7", { full: true });
+}
+function ok(label, detail) {
+  getUI().ok(label, detail);
+}
+function warn(label, detail) {
+  getUI().warn(label, detail);
+}
+function fail(label, detail) {
+  getUI().fail(label, detail);
+}
+function tip(command, detail) {
+  const text = detail ? `${command}  ${detail}` : command;
+  getUI().tip(text);
+}
+function info(message) {
+  getUI().info(message);
+}
+function header(title) {
+  getUI().header(title);
+  getUI().blank();
+}
+function table(rows, columns) {
+  getUI().table(rows, { columns });
+}
+function pidFilePath(paths) {
+  return join3(paths.root, "daemon.pid");
+}
+function writePidFile(paths, pid) {
+  writeFileSync3(pidFilePath(paths), `${pid}
+`, "utf8");
+}
+function readPidFile(paths) {
+  const p = pidFilePath(paths);
+  if (!existsSync4(p)) return void 0;
+  const raw = readFileSync4(p, "utf8").trim();
+  const pid = Number.parseInt(raw, 10);
+  return Number.isFinite(pid) ? pid : void 0;
+}
+function clearPidFile(paths) {
+  const p = pidFilePath(paths);
+  if (existsSync4(p)) {
+    try {
+      unlinkSync(p);
+    } catch {
+    }
+  }
+}
+function pidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var DEFAULT_CLOUD_BASE_URL, ANSI;
+var init_util = __esm({
+  "src/cli/util.ts"() {
+    "use strict";
+    init_ui();
+    DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
+    ANSI = {
+      reset: "\x1B[0m",
+      bold: "\x1B[1m",
+      dim: "\x1B[2m",
+      cyan: "\x1B[36m",
+      green: "\x1B[32m",
+      yellow: "\x1B[33m",
+      red: "\x1B[31m"
+    };
+  }
+});
 
 // src/cli/index.ts
 import { Command as Command18 } from "commander";
@@ -648,7 +1249,7 @@ var HermesProfileConfigSchema = z3.object({
    */
   prismerMcpServerPath: z3.string().optional(),
   /** Model sent to Prismer's /api/v1/chat/completions endpoint. */
-  model: z3.string().min(1).default("us-kimi-k2.5"),
+  model: z3.string().min(1).default("us-kimi-k2.6"),
   /** Named custom provider written into Hermes config.yaml. */
   prismerProviderName: z3.string().min(1).default("prismer"),
   /** Override cloud provider base. Defaults to PRISMER_BASE_URL + /api/v1. */
@@ -674,7 +1275,9 @@ var HermesProfileConfigSchema = z3.object({
    * surface but the local source tree contains hermes_cli/kanban_db.py.
    */
   hermesSourceDir: z3.string().optional(),
-  nativeMirrorTimeoutMs: z3.number().int().positive().default(2e3)
+  nativeMirrorTimeoutMs: z3.number().int().positive().default(2e3),
+  /** Task authority level: executor (default) or orchestrator. */
+  taskAuthority: z3.enum(["executor", "orchestrator"]).optional().default("executor")
 });
 var hermesAdapter = {
   name: "hermes",
@@ -1159,13 +1762,13 @@ function resolvePrismerMcpServerPath(config) {
   }
   try {
     const { fileURLToPath: fileURLToPath2 } = __require("url");
-    const { join: join13, dirname: dirname8 } = __require("path");
+    const { join: join14, dirname: dirname8 } = __require("path");
     const here = dirname8(fileURLToPath2(import.meta.url));
-    const candidate = join13(here, "../../mcp/dist/index.js");
+    const candidate = join14(here, "../../mcp/dist/index.js");
     if (existsSync(candidate)) return candidate;
-    const candidate2 = join13(here, "../../../mcp/dist/index.js");
+    const candidate2 = join14(here, "../../../mcp/dist/index.js");
     if (existsSync(candidate2)) return candidate2;
-    const candidate3 = join13(here, "../../../../mcp/dist/index.js");
+    const candidate3 = join14(here, "../../../../mcp/dist/index.js");
     if (existsSync(candidate3)) return candidate3;
   } catch {
   }
@@ -1556,691 +2159,144 @@ var OpenClawService = class {
           model: this.model,
           messages,
           stream: false
-        }),
-        signal: task.signal
-      });
-      if (!res.ok) {
-        const body = await res.text().catch(() => "") ?? "";
-        return {
-          ok: false,
-          error: {
-            code: res.status === 401 || res.status === 403 ? "auth_invalid" : "adapter_dispatch_failed",
-            message: `OpenClaw ${res.status}: ${body.slice(0, 400)}`
-          }
-        };
-      }
-      const json = await res.json();
-      let output = json.choices?.[0]?.message?.content ?? "";
-      const ERR_PREFIX_RE = /^Cannot read properties of undefined \(reading '[^']+'\)\s*\n+/;
-      if (ERR_PREFIX_RE.test(output)) {
-        process.stderr.write(
-          `[openclaw-adapter] stripping known stderr-bleed prefix from chat output (OpenClaw 2026.4.x bug)
-`
-        );
-        output = output.replace(ERR_PREFIX_RE, "");
-      }
-      return {
-        ok: true,
-        output,
-        metrics: { durationMs: Date.now() - startedAt }
-      };
-    } catch (err) {
-      if (task.signal?.aborted || err?.name === "AbortError") {
-        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
-      }
-      return {
-        ok: false,
-        error: { code: "adapter_dispatch_failed", message: err.message }
-      };
-    }
-  }
-};
-async function checkHealth2(baseUrl, apiKey) {
-  try {
-    const res = await fetch(`${baseUrl}/health`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(2e3)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-
-// src/config.ts
-import * as TOML from "@iarna/toml";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join2 } from "path";
-import { z as z5 } from "zod";
-var ConfigSchema = z5.object({
-  /** API key from `prismer setup`, or env override. */
-  api_key: z5.string().min(1),
-  /** Cloud REST + WS base; `ws://` is derived by stripping `http`. */
-  cloud_api_base: z5.string().url(),
-  /** Stable per-machine daemon identifier. Generated once on first setup. */
-  daemon_id: z5.string().min(1),
-  /** Optional adapter-specific overrides keyed by adapter name. */
-  adapters: z5.record(z5.string(), z5.record(z5.string(), z5.unknown())).optional(),
-  /** Local daemon shell execution. Default disabled. */
-  shell: z5.object({
-    enabled: z5.boolean().default(false),
-    default_cwd: z5.string().optional(),
-    defaultCwd: z5.string().optional(),
-    shell: z5.enum(["bash", "zsh", "sh"]).optional(),
-    max_timeout_ms: z5.number().int().positive().optional(),
-    maxTimeoutMs: z5.number().int().positive().optional(),
-    max_output_bytes: z5.number().int().positive().optional(),
-    maxOutputBytes: z5.number().int().positive().optional(),
-    allowed_workspaces: z5.array(z5.string()).optional(),
-    allowedWorkspaces: z5.array(z5.string()).optional()
-  }).optional(),
-  /** Local cache settings. */
-  cache: z5.object({
-    max_bytes: z5.number().int().positive().default(5 * 1024 * 1024 * 1024)
-  }).optional()
-});
-function resolvePaths(home) {
-  const root = home ?? process.env.PRISMER_HOME ?? join2(homedir2(), ".prismer");
-  return {
-    root,
-    configFile: join2(root, "config.toml"),
-    localDb: join2(root, "local.db"),
-    cacheDir: join2(root, "cache"),
-    logsDir: join2(root, "logs"),
-    runsDir: join2(root, "runs")
-  };
-}
-function configExists(paths = resolvePaths()) {
-  return existsSync2(paths.configFile);
-}
-function loadConfig(paths = resolvePaths()) {
-  if (!existsSync2(paths.configFile)) {
-    throw new Error(
-      `Config not found at ${paths.configFile}. Run \`prismer setup\` to create it.`
-    );
-  }
-  const raw = readFileSync2(paths.configFile, "utf8");
-  const parsed = TOML.parse(raw);
-  const merged = {
-    ...parsed,
-    api_key: process.env.PRISMER_API_KEY ?? parsed.api_key,
-    cloud_api_base: process.env.PRISMER_BASE_URL ?? parsed.cloud_api_base
-  };
-  const result = ConfigSchema.safeParse(merged);
-  if (!result.success) {
-    const detail = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-    throw new Error(`Invalid config at ${paths.configFile}: ${detail}`);
-  }
-  return result.data;
-}
-function saveConfig(config, paths = resolvePaths()) {
-  if (!existsSync2(paths.root)) {
-    mkdirSync2(paths.root, { recursive: true });
-  }
-  if (!existsSync2(dirname2(paths.configFile))) {
-    mkdirSync2(dirname2(paths.configFile), { recursive: true });
-  }
-  ConfigSchema.parse(config);
-  writeFileSync2(paths.configFile, TOML.stringify(config), "utf8");
-}
-function deriveWsUrl(httpBase) {
-  const u = new URL(httpBase);
-  u.protocol = u.protocol === "https:" ? "wss:" : "ws:";
-  u.pathname = (u.pathname.replace(/\/$/, "") || "") + "/ws";
-  return u.toString();
-}
-
-// src/cli/util.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join3 } from "path";
-
-// src/cli/ui.ts
-import * as fs from "fs";
-import * as path from "path";
-import { fileURLToPath } from "url";
-var BRAILLE_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-var COMPACT_BANNER = ["\u25C7 PRISMER", "  Runtime CLI"];
-function thisDirname() {
-  try {
-    return path.dirname(fileURLToPath(import.meta.url));
-  } catch {
-    return process.cwd();
-  }
-}
-function findIconPath(size = "big") {
-  const name = size === "big" ? "icon" : "smallicon";
-  const here = thisDirname();
-  const candidates = [
-    // npm-installed: node_modules/@prismer/runtime/dist/cli.js → ../assets
-    path.resolve(here, "../assets", name),
-    // alternate dist layout (sub-bundle): dist/bin/cli.js → ../../assets
-    path.resolve(here, "../../assets", name),
-    // source/typecheck: src/cli/ui.ts → ../../assets
-    path.resolve(here, "../../assets", name),
-    // dev mode: cwd happens to be runtime root
-    path.resolve(process.cwd(), "assets", name),
-    path.resolve(process.cwd(), "sdk/prismer-cloud/runtime/assets", name)
-  ];
-  for (const candidate of candidates) {
-    try {
-      if (fs.existsSync(candidate)) return candidate;
-    } catch {
-    }
-  }
-  return null;
-}
-var UI = class {
-  mode;
-  colorEnabled;
-  stream;
-  errStream;
-  constructor(opts) {
-    this.mode = opts?.mode ?? "pretty";
-    this.stream = opts?.stream ?? process.stdout;
-    this.errStream = opts?.errStream ?? process.stderr;
-    if (opts?.color !== void 0) {
-      this.colorEnabled = opts.color;
-    } else {
-      const isTTY = this.stream.isTTY === true;
-      const noColor = Boolean(process.env["NO_COLOR"]);
-      this.colorEnabled = isTTY && !noColor;
-    }
-  }
-  // ---- Internal color helpers ----
-  ansi(open, close, text) {
-    if (!this.colorEnabled) return text;
-    return `\x1B[${open}m${text}\x1B[${close}m`;
-  }
-  green(t) {
-    return this.ansi(32, 39, t);
-  }
-  red(t) {
-    return this.ansi(31, 39, t);
-  }
-  yellow(t) {
-    return this.ansi(33, 39, t);
-  }
-  cyan(t) {
-    return this.ansi(36, 39, t);
-  }
-  dim(t) {
-    return this.ansi(2, 22, t);
-  }
-  bold(t) {
-    return this.ansi(1, 22, t);
-  }
-  gray(t) {
-    return this.ansi(90, 39, t);
-  }
-  brandMark() {
-    return this.cyan("\u25C7");
-  }
-  colorBrandLine(line) {
-    let out = "";
-    for (const ch of line) {
-      if (ch === "\u2592") {
-        out += this.cyan(ch);
-      } else if (ch === "\u2593") {
-        out += this.dim(ch);
-      } else {
-        out += ch;
-      }
-    }
-    return out;
-  }
-  // ---- Core write helpers ----
-  write(text) {
-    this.stream.write(text);
-  }
-  writeErr(text) {
-    this.errStream.write(text);
-  }
-  // ---- Level 1: Header ----
-  header(text) {
-    if (this.mode === "json") return;
-    const prefix = text.startsWith("Prismer") ? this.brandMark() + " " : "";
-    this.write(prefix + this.bold(text) + "\n");
-  }
-  smallHeader(subtitle) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const iconPath = findIconPath("small");
-    if (iconPath !== null) {
-      try {
-        const raw = fs.readFileSync(iconPath, "utf-8").replace(/\n+$/, "");
-        for (const line of raw.split("\n")) {
-          this.write(this.cyan(line) + "\n");
-        }
-      } catch {
-        this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-      }
-    } else {
-      this.write(this.brandMark() + " " + this.bold("Prismer") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  banner(subtitle, opts) {
-    if (this.mode === "json" || this.mode === "quiet") return;
-    const envColumns = process.env["COLUMNS"] !== void 0 ? parseInt(process.env["COLUMNS"], 10) : NaN;
-    const width = this.stream.columns ?? process.stdout.columns ?? (Number.isFinite(envColumns) ? envColumns : 80);
-    const iconPath = findIconPath("big");
-    const shouldUseFull = opts?.full === true || width >= 120;
-    if (shouldUseFull && iconPath !== null) {
-      try {
-        const raw = fs.readFileSync(iconPath, "utf-8");
-        const lines = raw.split("\n");
-        for (const line of lines) {
-          const brandedLine = line.replace("Prismer Cloud SDK", "Prismer Runtime CLI");
-          const stripped = brandedLine.trimEnd();
-          if (stripped.length === 0) {
-            this.write("\n");
-            continue;
+        }),
+        signal: task.signal
+      });
+      if (!res.ok) {
+        const body = await res.text().catch(() => "") ?? "";
+        return {
+          ok: false,
+          error: {
+            code: res.status === 401 || res.status === 403 ? "auth_invalid" : "adapter_dispatch_failed",
+            message: `OpenClaw ${res.status}: ${body.slice(0, 400)}`
           }
-          const clipped = stripped.length >= width ? stripped.slice(0, Math.max(width - 1, 1)) : stripped;
-          this.write(this.colorBrandLine(clipped) + "\n");
-        }
-      } catch {
-        this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-        this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
+        };
       }
-    } else {
-      this.write(this.cyan(COMPACT_BANNER[0] ?? "\u25C7 PRISMER") + "\n");
-      this.write(this.dim(COMPACT_BANNER[1] ?? "  Runtime CLI") + "\n");
-    }
-    if (subtitle !== void 0 && subtitle.length > 0) {
-      this.write(this.dim("  " + subtitle) + "\n");
-    }
-    this.blank();
-  }
-  // ---- Level 2: Primary data ----
-  blank() {
-    if (this.mode === "json") return;
-    this.write("\n");
-  }
-  line(text) {
-    if (this.mode === "json") return;
-    this.write(text + "\n");
-  }
-  info(text) {
-    this.line(text);
-  }
-  // ---- Level 3: Secondary ----
-  secondary(text, indent = 2) {
-    if (this.mode === "json") return;
-    this.write(" ".repeat(indent) + this.dim(text) + "\n");
-  }
-  // ---- Level 4: Action tips ----
-  tip(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Tip:") + " " + text + "\n");
-  }
-  next(text) {
-    if (this.mode === "json") return;
-    this.write(this.cyan("Next:") + " " + text + "\n");
-  }
-  // ---- Level 5: Status indicators ----
-  ok(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.green("\u2713") + " " + text + suffix + "\n");
-  }
-  success(text, detail) {
-    this.ok(text, detail);
-  }
-  fail(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.red("\u2717") + " " + text + suffix + "\n");
-  }
-  online(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.green("\u25CF") + " " + text + "\n");
-  }
-  offline(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.gray("\u25CB") + " " + text + "\n");
-  }
-  notInstalled(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.dim("\xB7") + " " + this.dim(text) + "\n");
-  }
-  pending(text) {
-    if (this.mode === "json") return;
-    this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-  }
-  warn(text, detail) {
-    if (this.mode === "json") return;
-    const suffix = detail ? "  " + this.dim(detail) : "";
-    this.write("  " + this.yellow("!") + " " + text + suffix + "\n");
-  }
-  // ---- Level 6: Error block ----
-  error(what, cause, fix) {
-    if (this.mode === "json") return;
-    this.writeErr(this.red("\u2717") + " " + what + "\n");
-    if (cause !== void 0) {
-      this.writeErr("  " + this.dim("Cause:") + " " + this.dim(cause) + "\n");
-    }
-    if (fix !== void 0) {
-      this.writeErr("  " + this.cyan("Fix:") + " " + fix + "\n");
-    }
-  }
-  table(rowsOrOpts, maybeOpts) {
-    if (this.mode === "json") return;
-    const rows = Array.isArray(rowsOrOpts) ? rowsOrOpts : rowsOrOpts.rows;
-    const opts = Array.isArray(rowsOrOpts) ? maybeOpts : { columns: rowsOrOpts.columns, maxWidth: rowsOrOpts.maxWidth };
-    if (!opts) throw new Error("table() requires columns");
-    const maxWidth = opts.maxWidth ?? (process.stdout.columns || 80);
-    const cols = opts.columns;
-    const widths = cols.map((col) => col.length);
-    for (const row of rows) {
-      cols.forEach((col, i) => {
-        const val = row[col] ?? "";
-        const w = widths[i] ?? 0;
-        if (val.length > w) widths[i] = val.length;
-      });
-    }
-    const totalWidth = widths.reduce((a, b) => a + b, 0) + (cols.length - 1) * 2 + 2;
-    if (totalWidth > maxWidth) {
-      for (let i = 0; i < rows.length; i++) {
-        const row = rows[i];
-        if (!row) continue;
-        for (const col of cols) {
-          const val = row[col] ?? "";
-          this.write("  " + this.bold(col + ":") + " " + val + "\n");
-        }
-        if (i < rows.length - 1) this.write("\n");
+      const json = await res.json();
+      let output = json.choices?.[0]?.message?.content ?? "";
+      const ERR_PREFIX_RE = /^Cannot read properties of undefined \(reading '[^']+'\)\s*\n+/;
+      if (ERR_PREFIX_RE.test(output)) {
+        process.stderr.write(
+          `[openclaw-adapter] stripping known stderr-bleed prefix from chat output (OpenClaw 2026.4.x bug)
+`
+        );
+        output = output.replace(ERR_PREFIX_RE, "");
       }
-      return;
-    }
-    const header = cols.map((col, i) => col.toUpperCase().padEnd(widths[i] ?? col.length)).join("  ");
-    this.write("  " + this.dim(header) + "\n");
-    for (const row of rows) {
-      const line = cols.map((col, i) => (row[col] ?? "").padEnd(widths[i] ?? col.length)).join("  ");
-      this.write("  " + line + "\n");
-    }
-  }
-  // ---- Spinner ----
-  spinner(text) {
-    if (this.mode === "quiet" || this.mode === "json") {
       return {
-        update() {
-        },
-        stop() {
-        }
-      };
-    }
-    const isTTY = this.stream.isTTY === true;
-    if (!isTTY || !this.colorEnabled) {
-      this.write("  " + this.yellow("\u27F3") + " " + text + "\n");
-      return {
-        update: (t) => {
-          this.write("  " + this.yellow("\u27F3") + " " + t + "\n");
-        },
-        stop: (final) => {
-          if (final) this.write("  " + this.green("\u2713") + " " + final + "\n");
-        }
+        ok: true,
+        output,
+        metrics: { durationMs: Date.now() - startedAt }
       };
-    }
-    let current = text;
-    let frameIdx = 0;
-    let stopped = false;
-    const write = this.write.bind(this);
-    const colorFn = this.yellow.bind(this);
-    const greenFn = this.green.bind(this);
-    function renderFrame() {
-      const frame = BRAILLE_FRAMES[frameIdx % BRAILLE_FRAMES.length] ?? "\u280B";
-      const line = "  " + colorFn(frame) + " " + current;
-      write("\r" + line);
-      frameIdx++;
-    }
-    renderFrame();
-    const timer = setInterval(renderFrame, 80);
-    return {
-      update(t) {
-        if (stopped) return;
-        current = t;
-      },
-      stop(final) {
-        if (stopped) return;
-        stopped = true;
-        clearInterval(timer);
-        write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
+    } catch (err) {
+      if (task.signal?.aborted || err?.name === "AbortError") {
+        return { ok: false, error: { code: "task_cancelled", message: "Task cancelled by client" } };
       }
-    };
-  }
-  // ---- Progress bar ----
-  progress(text, total) {
-    if (this.mode === "quiet" || this.mode === "json") {
       return {
-        update() {
-        },
-        stop() {
-        }
+        ok: false,
+        error: { code: "adapter_dispatch_failed", message: err.message }
       };
     }
-    const isTTY = this.stream.isTTY === true;
-    const start = Date.now();
-    const write = this.write.bind(this);
-    const colorFn = this.cyan.bind(this);
-    const dimFn = this.dim.bind(this);
-    const greenFn = this.green.bind(this);
-    let last = 0;
-    let lastDetail = "";
-    let stopped = false;
-    const render = () => {
-      if (stopped) return;
-      const frac = total > 0 ? Math.min(1, Math.max(0, last / total)) : 0;
-      const pct = Math.floor(frac * 100);
-      const width = 20;
-      const filled = Math.floor(frac * width);
-      const bar = "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
-      const elapsed = (Date.now() - start) / 1e3;
-      const eta = frac > 0.01 ? Math.max(0, elapsed / frac - elapsed) : 0;
-      const etaStr = frac >= 1 ? "" : ` \xB7 ${eta < 1 ? "<1s" : Math.round(eta) + "s"} left`;
-      const detailStr = lastDetail ? ` \xB7 ${lastDetail}` : "";
-      const line = `  ${text} [${colorFn(bar)}] ${String(pct).padStart(3)}%${detailStr}${dimFn(etaStr)}`;
-      if (isTTY && this.colorEnabled) {
-        write("\r\x1B[2K" + line);
-      } else {
-        write(line + "\n");
-      }
-    };
-    render();
-    return {
-      update: (current, detail) => {
-        if (stopped) return;
-        last = current;
-        if (detail !== void 0) lastDetail = detail;
-        render();
-      },
-      stop: (final) => {
-        if (stopped) return;
-        stopped = true;
-        if (isTTY && this.colorEnabled) write("\r\x1B[2K");
-        if (final) write("  " + greenFn("\u2713") + " " + final + "\n");
-      }
-    };
-  }
-  // ---- JSON output ----
-  json(payload, opts) {
-    const indent = opts?.pretty ? 2 : void 0;
-    this.write(JSON.stringify(payload, null, indent) + "\n");
-  }
-  result(pretty, jsonPayload) {
-    if (this.mode === "pretty") {
-      pretty();
-    } else {
-      this.json(jsonPayload);
-    }
-  }
-};
-var _ui = null;
-function getUI() {
-  if (!_ui) _ui = new UI();
-  return _ui;
-}
-function setUI(ui) {
-  _ui = ui;
-}
-function applyCommonFlags(argv) {
-  let mode = "pretty";
-  const isTTY = process.stdout.isTTY === true;
-  const noColorEnv = Boolean(process.env["NO_COLOR"]);
-  let color2 = isTTY && !noColorEnv;
-  const rest = [];
-  for (const arg of argv) {
-    switch (arg) {
-      case "--no-color":
-        color2 = false;
-        break;
-      case "--color":
-        color2 = true;
-        break;
-      case "--json":
-      case "--pretty-json":
-        mode = "json";
-        if (arg === "--json") rest.push(arg);
-        break;
-      case "--quiet":
-        mode = "quiet";
-        break;
-      default:
-        rest.push(arg);
-    }
   }
-  return { mode, color: color2, restArgv: rest };
-}
-
-// src/cli/util.ts
-var DEFAULT_CLOUD_BASE_URL = "https://prismer.cloud";
-var ANSI = {
-  reset: "\x1B[0m",
-  bold: "\x1B[1m",
-  dim: "\x1B[2m",
-  cyan: "\x1B[36m",
-  green: "\x1B[32m",
-  yellow: "\x1B[33m",
-  red: "\x1B[31m"
 };
-function color(kind, text) {
-  if (process.env.NO_COLOR === "1" || process.env.NO_COLOR === "true") return text;
-  return `${ANSI[kind]}${text}${ANSI.reset}`;
-}
-function printJson(v) {
-  getUI().json(v, { pretty: true });
-}
-function exitWithError(message, opts) {
-  const o = typeof opts === "number" ? { exitCode: opts } : opts ?? {};
-  const exitCode = o.exitCode ?? 1;
-  const ui = getUI();
-  if (ui.mode === "json") {
-    const payload = {
-      ok: false,
-      error: { code: o.code ?? "cli_error", message },
-      ...o.details ? { details: o.details } : {}
-    };
-    ui.json(payload, { pretty: true });
-  } else {
-    process.stderr.write(`Error: ${message}
-`);
-  }
-  process.exit(exitCode);
-}
-function normalizeCloudUrl(input) {
-  const raw = input.trim();
-  if (!raw) throw new Error("Cloud URL is empty.");
-  if (/^[a-z][a-z0-9+\-.]*:\/\//i.test(raw)) {
-    let parsed;
-    try {
-      parsed = new URL(raw);
-    } catch {
-      throw new Error(`Invalid --cloud URL: ${raw}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-      throw new Error(`Invalid --cloud URL scheme: ${parsed.protocol} (expected http:// or https://)`);
-    }
-    return raw.replace(/\/$/, "");
-  }
-  if (!/^[A-Za-z0-9.\-_:[\]/]+$/.test(raw)) {
-    throw new Error(`Invalid --cloud URL: ${raw} (must be http://\u2026 or https://\u2026 or host:port)`);
-  }
-  const candidate = `http://${raw}`;
+async function checkHealth2(baseUrl, apiKey) {
   try {
-    new URL(candidate);
+    const res = await fetch(`${baseUrl}/health`, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(2e3)
+    });
+    return res.ok;
   } catch {
-    throw new Error(`Invalid --cloud URL: ${raw}`);
+    return false;
   }
-  return candidate.replace(/\/$/, "");
 }
-function runAction(fn, opts = {}) {
-  return async (...args) => {
-    try {
-      await fn(...args);
-    } catch (err) {
-      const raw = err instanceof Error ? err.message : String(err);
-      const message = opts.sanitize ? opts.sanitize(raw) : raw;
-      exitWithError(message, { code: opts.code });
-    }
+
+// src/config.ts
+import * as TOML from "@iarna/toml";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname2, join as join2 } from "path";
+import { z as z5 } from "zod";
+var ConfigSchema = z5.object({
+  /** API key from `prismer setup`, or env override. */
+  api_key: z5.string().min(1),
+  /** Cloud REST + WS base; `ws://` is derived by stripping `http`. */
+  cloud_api_base: z5.string().url(),
+  /** Stable per-machine daemon identifier. Generated once on first setup. */
+  daemon_id: z5.string().min(1),
+  /** Optional adapter-specific overrides keyed by adapter name. */
+  adapters: z5.record(z5.string(), z5.record(z5.string(), z5.unknown())).optional(),
+  /** Local daemon shell execution. Default disabled. */
+  shell: z5.object({
+    enabled: z5.boolean().default(false),
+    default_cwd: z5.string().optional(),
+    defaultCwd: z5.string().optional(),
+    shell: z5.enum(["bash", "zsh", "sh"]).optional(),
+    max_timeout_ms: z5.number().int().positive().optional(),
+    maxTimeoutMs: z5.number().int().positive().optional(),
+    max_output_bytes: z5.number().int().positive().optional(),
+    maxOutputBytes: z5.number().int().positive().optional(),
+    allowed_workspaces: z5.array(z5.string()).optional(),
+    allowedWorkspaces: z5.array(z5.string()).optional()
+  }).optional(),
+  /** Local cache settings. */
+  cache: z5.object({
+    max_bytes: z5.number().int().positive().default(5 * 1024 * 1024 * 1024)
+  }).optional()
+});
+function resolvePaths(home) {
+  const root = home ?? process.env.PRISMER_HOME ?? join2(homedir2(), ".prismer");
+  return {
+    root,
+    configFile: join2(root, "config.toml"),
+    localDb: join2(root, "local.db"),
+    cacheDir: join2(root, "cache"),
+    logsDir: join2(root, "logs"),
+    runsDir: join2(root, "runs")
   };
 }
-function printBanner(opts = {}) {
-  const ui = getUI();
-  if (opts.compact) {
-    ui.smallHeader("Runtime CLI v1.9.7");
-    return;
-  }
-  ui.banner("Runtime CLI v1.9.7", { full: true });
-}
-function ok(label, detail) {
-  getUI().ok(label, detail);
-}
-function warn(label, detail) {
-  getUI().warn(label, detail);
-}
-function fail(label, detail) {
-  getUI().fail(label, detail);
-}
-function tip(command, detail) {
-  const text = detail ? `${command}  ${detail}` : command;
-  getUI().tip(text);
-}
-function pidFilePath(paths) {
-  return join3(paths.root, "daemon.pid");
-}
-function writePidFile(paths, pid) {
-  writeFileSync3(pidFilePath(paths), `${pid}
-`, "utf8");
-}
-function readPidFile(paths) {
-  const p = pidFilePath(paths);
-  if (!existsSync4(p)) return void 0;
-  const raw = readFileSync4(p, "utf8").trim();
-  const pid = Number.parseInt(raw, 10);
-  return Number.isFinite(pid) ? pid : void 0;
+function configExists(paths = resolvePaths()) {
+  return existsSync2(paths.configFile);
 }
-function clearPidFile(paths) {
-  const p = pidFilePath(paths);
-  if (existsSync4(p)) {
-    try {
-      unlinkSync(p);
-    } catch {
-    }
+function loadConfig(paths = resolvePaths()) {
+  if (!existsSync2(paths.configFile)) {
+    throw new Error(
+      `Config not found at ${paths.configFile}. Run \`prismer setup\` to create it.`
+    );
+  }
+  const raw = readFileSync2(paths.configFile, "utf8");
+  const parsed = TOML.parse(raw);
+  const merged = {
+    ...parsed,
+    api_key: process.env.PRISMER_API_KEY ?? parsed.api_key,
+    cloud_api_base: process.env.PRISMER_BASE_URL ?? parsed.cloud_api_base
+  };
+  const result = ConfigSchema.safeParse(merged);
+  if (!result.success) {
+    const detail = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+    throw new Error(`Invalid config at ${paths.configFile}: ${detail}`);
   }
+  return result.data;
 }
-function pidAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
+function saveConfig(config, paths = resolvePaths()) {
+  if (!existsSync2(paths.root)) {
+    mkdirSync2(paths.root, { recursive: true });
+  }
+  if (!existsSync2(dirname2(paths.configFile))) {
+    mkdirSync2(dirname2(paths.configFile), { recursive: true });
   }
+  ConfigSchema.parse(config);
+  writeFileSync2(paths.configFile, TOML.stringify(config), "utf8");
+}
+function deriveWsUrl(httpBase) {
+  const u = new URL(httpBase);
+  u.protocol = u.protocol === "https:" ? "wss:" : "ws:";
+  u.pathname = (u.pathname.replace(/\/$/, "") || "") + "/ws";
+  return u.toString();
 }
 
 // src/cli/commands/adapter.ts
+init_util();
+init_ui();
 var BUILTIN_ADAPTERS = [hermesAdapter, claudeCodeAdapter, openclawAdapter, codexAdapter];
 var INSTALL_SPECS = {
   "claude-code": {
@@ -2991,6 +3047,32 @@ var MIGRATIONS = [
       );
       CREATE INDEX IF NOT EXISTS idx_files_hash ON workspace_files_mirror (content_hash);
     `
+  },
+  {
+    version: 3,
+    up: `
+      -- Asset metadata index (#filename reference resolution \u2014 daemon/asset/metadata-index.ts)
+      CREATE TABLE IF NOT EXISTS asset_metadata_index (
+        workspace_id TEXT NOT NULL,
+        asset_id TEXT NOT NULL,
+        content_hash TEXT NOT NULL,
+        filename TEXT,
+        folder_path TEXT,
+        mime TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        size_bytes INTEGER NOT NULL DEFAULT 0,
+        description TEXT,
+        asset_index_seq INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        PRIMARY KEY (workspace_id, asset_id)
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_filename
+        ON asset_metadata_index(workspace_id, filename);
+
+      CREATE INDEX IF NOT EXISTS idx_asset_meta_seq
+        ON asset_metadata_index(workspace_id, asset_index_seq);
+    `
   }
 ];
 function runSql(db, sql) {
@@ -3023,6 +3105,8 @@ function runMigrations(db) {
 }
 
 // src/cli/commands/agent.ts
+init_util();
+init_ui();
 var ADAPTER_BINARY = {
   "claude-code": "claude",
   codex: "codex",
@@ -3404,6 +3488,8 @@ function whichBinary2(bin) {
 import { Command as Command3 } from "commander";
 import { existsSync as existsSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
 import { basename } from "path";
+init_util();
+init_ui();
 function buildAssetCommand() {
   const cmd = new Command3("asset").description("Inspect IM assets");
   cmd.command("list").description("List assets for a workspace, optionally filtered by task").option("--workspace-id <id>", "Workspace id").option("--task-id <id>", "Task id filter").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -3599,6 +3685,7 @@ function stringField(obj, key) {
 }
 
 // src/cli/commands/banner.ts
+init_util();
 import { Command as Command4 } from "commander";
 function buildBannerCommand() {
   return new Command4("banner").description("Show the Prismer runtime CLI banner").option("--compact", "Show a single-line banner").option("--json", "Accept --json for global flag compatibility (banner is suppressed in JSON mode)").action((opts) => {
@@ -3608,6 +3695,8 @@ function buildBannerCommand() {
 
 // src/cli/commands/chat.ts
 import { Command as Command5 } from "commander";
+init_util();
+init_ui();
 function buildChatCommand() {
   const cmd = new Command5("chat").description("Use IM chat and group APIs");
   cmd.command("me").description("Show the current IM identity").option("--json", "Print raw JSON response").action(async (opts) => {
@@ -3782,6 +3871,8 @@ function sanitizeError(message) {
 
 // src/cli/commands/config.ts
 import { Command as Command6 } from "commander";
+init_util();
+init_ui();
 var SETTABLE_KEYS = ["cloud_api_base", "api_key", "daemon_id"];
 function redactApiKey(key) {
   if (!key.startsWith("sk-prismer-")) return "***";
@@ -3877,6 +3968,8 @@ function buildConfigCommand() {
 
 // src/cli/commands/cookbook.ts
 import { Command as Command7 } from "commander";
+init_util();
+init_ui();
 function buildCookbookCommand() {
   const cmd = new Command7("cookbook").description("Run CLI-only 54release MVP regression suites");
   cmd.command("run").description("Run one or more cookbook smoke suites using the configured API key").option("--suite <name>", "status|im|task|group|asset|sandbox|all, comma-separated", "all").option("--workspace-id <id>", "Workspace id for workspace-scoped suites").option("--agent-id <id>", "Agent IM user id for task create smoke").option("--group-id <id>", "Group/conversation id for group message history smoke").option("--sandbox-id <id>", "Sandbox id for sandbox status smoke").option("--prompt <text>", "Prompt for optional task create smoke").option("--timeout-ms <ms>", "Request/task timeout", parsePositiveInt2, 6e4).option("--strict", "Treat skipped optional checks as failure").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -4134,13 +4227,13 @@ function parsePositiveInt2(value) {
 // src/cli/commands/daemon.ts
 import { Command as Command8 } from "commander";
 import { spawn as spawn5 } from "child_process";
-import { createReadStream, existsSync as existsSync12, mkdirSync as mkdirSync7, openSync, statSync as statSync3 } from "fs";
+import { createReadStream, existsSync as existsSync13, mkdirSync as mkdirSync8, openSync, statSync as statSync3 } from "fs";
 import { setTimeout as sleep } from "timers/promises";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 
 // src/daemon/runner.ts
 import { EventEmitter as EventEmitter3 } from "events";
-import { existsSync as existsSync11, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "fs";
 import { platform } from "os";
 
 // src/adapters/registry.ts
@@ -4675,6 +4768,14 @@ async function handleDispatch(payload, requestId, deps) {
       sendReply(deps.ws, reply, requestId);
       return reply;
     }
+    let hashRefResult = { text: payload.prompt, resolutions: [] };
+    if (deps.assetMetadataIndexes && profile.workspaceId) {
+      const assetIndex = deps.assetMetadataIndexes.get(profile.workspaceId);
+      if (assetIndex) {
+        hashRefResult = await resolveHashRefs(payload.prompt, assetIndex, deps.cloud);
+        payload.prompt = hashRefResult.text;
+      }
+    }
     const rewrittenPrompt = await deps.uriResolver.rewrite(payload.prompt, { pin: true });
     resolvedHashes.push(...rewrittenPrompt.resolvedHashes);
     let rewrittenContext = [];
@@ -4889,6 +4990,84 @@ function isTextLikeMime(mime) {
   if (m.endsWith("+json") || m.endsWith("+xml") || m.endsWith("+csv")) return true;
   return false;
 }
+var HASH_REF_RE = /(?:^|\s)#([^\s#]+)/g;
+var HEX_COLOR_RE = /^[0-9a-fA-F]{3,8}$/;
+var FILE_EXT_RE = /\.[a-zA-Z0-9]{1,10}$/;
+var TRAILING_PUNCT_RE = /[,.;:!?)\]}'"]+$/;
+async function resolveHashRefs(prompt, assetIndex, cloud) {
+  const resolutions = [];
+  const candidates = [];
+  let match;
+  const re = new RegExp(HASH_REF_RE.source, "g");
+  while ((match = re.exec(prompt)) !== null) {
+    const refName = match[1];
+    const leading = match[0].startsWith("#") ? 0 : 1;
+    const start = match.index + leading;
+    const end = match.index + match[0].length;
+    if (HEX_COLOR_RE.test(refName)) continue;
+    let cleanRef = refName;
+    let stripped = "";
+    const punctMatch = TRAILING_PUNCT_RE.exec(cleanRef);
+    if (punctMatch) {
+      stripped = punctMatch[0];
+      cleanRef = cleanRef.slice(0, -stripped.length);
+    }
+    if (!cleanRef) continue;
+    if (HEX_COLOR_RE.test(cleanRef)) continue;
+    const hasExtension = FILE_EXT_RE.test(cleanRef);
+    candidates.push({ ref: cleanRef, start, end: end - stripped.length, hasExtension });
+  }
+  if (candidates.length === 0) {
+    return { text: prompt, resolutions: [] };
+  }
+  const allFilenames = candidates.map((c) => c.ref);
+  const localResults = assetIndex.resolveByFilenames(allFilenames);
+  const needsCloud = candidates.filter(
+    (c) => c.hasExtension && !localResults.has(c.ref)
+  );
+  const cloudResults = /* @__PURE__ */ new Map();
+  if (needsCloud.length > 0) {
+    await Promise.allSettled(
+      needsCloud.map(async (c) => {
+        try {
+          const items = await cloud.get(
+            `/api/im/assets?workspaceId=${encodeURIComponent(assetIndex.workspaceId)}&q=${encodeURIComponent(c.ref)}&limit=1`
+          );
+          if (Array.isArray(items) && items.length > 0) {
+            const item = items[0];
+            cloudResults.set(c.ref, item.contentHash);
+          }
+        } catch {
+        }
+      })
+    );
+  }
+  for (const c of candidates) {
+    const local = localResults.get(c.ref);
+    if (local) {
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${local.contentHash}`
+      });
+    } else if (c.hasExtension) {
+      const cloudHash = cloudResults.get(c.ref);
+      resolutions.push({
+        ref: c.ref,
+        start: c.start,
+        end: c.end,
+        resolvedUri: cloudHash ? `prismer://workspace/${encodeURIComponent(assetIndex.workspaceId)}/asset/${cloudHash}` : void 0
+      });
+    }
+  }
+  let result = prompt;
+  const sorted = [...resolutions].filter((r) => r.resolvedUri).sort((a, b) => b.start - a.start);
+  for (const r of sorted) {
+    result = result.slice(0, r.start) + r.resolvedUri + result.slice(r.end);
+  }
+  return { text: result, resolutions };
+}
 async function resolveAssetRefs(refs, cache) {
   const out = { promptBlocks: [], observability: [], pinnedHashes: [] };
   if (!refs || refs.length === 0) return out;
@@ -4961,8 +5140,8 @@ async function resolveAssetRefs(refs, cache) {
   return out;
 }
 function formatInlineAssetBlock(ref, mime, body, strategy) {
-  const header = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
-  return `${header}
+  const header2 = `[Attached file] id=${ref.assetId} mime=${mime ?? "unknown"}${strategy === "inline-text-truncated" ? " (truncated)" : ""}`;
+  return `${header2}
 ---
 ${body}
 ---`;
@@ -5265,20 +5444,35 @@ var LocalServer = class {
       respond(res, 204, null);
       return;
     }
+    const handlers = [];
     if (this.opts.attachMemory) {
-      void this.opts.attachMemory(req, res).then((handled) => {
-        if (handled) return;
-        this.routeStandard(req, res);
-      }).catch((err) => {
-        respond(res, 500, {
-          error: "attach_memory_threw",
-          message: err instanceof Error ? err.message : String(err)
-        });
-      });
+      handlers.push({ name: "memory", fn: this.opts.attachMemory });
+    }
+    if (this.opts.attachAsset) {
+      handlers.push({ name: "asset", fn: this.opts.attachAsset });
+    }
+    if (handlers.length > 0) {
+      void this.runHandlers(req, res, handlers, 0);
       return;
     }
     this.routeStandard(req, res);
   }
+  async runHandlers(req, res, handlers, idx) {
+    if (idx >= handlers.length) {
+      this.routeStandard(req, res);
+      return;
+    }
+    try {
+      const handled = await handlers[idx].fn(req, res);
+      if (handled) return;
+      await this.runHandlers(req, res, handlers, idx + 1);
+    } catch (err) {
+      respond(res, 500, {
+        error: `attach_${handlers[idx].name}_threw`,
+        message: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   routeStandard(req, res) {
     const url = req.url ?? "/";
     if (req.method === "GET" && url === "/healthz") {
@@ -5293,7 +5487,8 @@ var LocalServer = class {
         wsConnected: state.wsConnected,
         hostedAgents: state.hostedAgents,
         observability: state.observability,
-        memoryReady: this.opts.attachMemory != null
+        memoryReady: this.opts.attachMemory != null,
+        assetReady: this.opts.attachAsset != null
       });
       return;
     }
@@ -5747,13 +5942,14 @@ var MemoryStore = class {
     const pageId = existing?.id ?? `page_${randomUUID2().replace(/-/g, "").slice(0, 22)}`;
     const newVersion = (existing?.version ?? 0) + 1;
     const createdAt = existing?.createdAt ?? now;
+    const staleFlag = input.stale ? 1 : 0;
     const insertPage = db.prepare(`
       INSERT INTO memory_pages (
         id, workspaceId, path, title, description, contentHash, version,
         pageType, visibilityKind, visibilityImUserId, encrypted, stale,
         archivedAt, sourceAssetId, sourceRefsJson, syncStatus,
         createdAt, updatedAt
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, 0, NULL, ?, ?, 'local-only', ?, ?)
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, NULL, ?, ?, 'local-only', ?, ?)
       ON CONFLICT(workspaceId, path) DO UPDATE SET
         title = excluded.title,
         description = excluded.description,
@@ -5764,6 +5960,7 @@ var MemoryStore = class {
         visibilityImUserId = excluded.visibilityImUserId,
         sourceAssetId = excluded.sourceAssetId,
         sourceRefsJson = excluded.sourceRefsJson,
+        stale = excluded.stale,
         updatedAt = excluded.updatedAt
     `);
     const insertVersion = db.prepare(`
@@ -5791,6 +5988,7 @@ var MemoryStore = class {
         input.pageType ?? "leaf",
         visibility.kind,
         visibilityImUserId,
+        staleFlag,
         input.sourceAssetId ?? null,
         sourceRefsJson,
         createdAt,
@@ -5871,6 +6069,16 @@ var MemoryStore = class {
       dbPath: this.opts.dbPath
     };
   }
+  /**
+   * Record sync cursor for incremental sync. Used by cloud-sync.ts to
+   * persist the high-water mark for future cursor-based catch-up.
+   */
+  recordCursor(workspaceId, cursor) {
+    const now = Date.now();
+    this.requireDb().prepare(
+      `INSERT OR REPLACE INTO memory_inbox_cursor (workspaceId, cursor, updatedAt) VALUES (?, ?, ?)`
+    ).run(workspaceId, cursor, now);
+  }
   /**
    * Internal accessor for outbox.ts — outbox writes its own table within the
    * same DB. Returning the live Database handle keeps outbox transactions
@@ -6521,6 +6729,84 @@ function defaultLog() {
   };
 }
 
+// src/daemon/memory/cloud-sync.ts
+var LOG = "[CloudMemorySync]";
+var CLOUD_PAGE_LIMIT = 300;
+async function initialSyncFromCloud(runtime, cloud, workspaceId) {
+  const slot = runtime.peek(workspaceId);
+  if (!slot) {
+    console.log(`${LOG} No store for workspace=${workspaceId} \u2014 skipping`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const cursorRow = slot.store.rawDb().prepare("SELECT cursor FROM memory_inbox_cursor WHERE workspaceId = ?").get(workspaceId);
+  if (cursorRow) {
+    console.log(`${LOG} Workspace=${workspaceId} already synced (cursor: ${cursorRow.cursor.slice(0, 20)}...) \u2014 skip`);
+    return { pulled: 0, skipped: 0 };
+  }
+  console.log(`${LOG} Fetching cloud pages for workspace=${workspaceId}...`);
+  const resp = await cloud.request(
+    "GET",
+    `/api/im/memory/pages?workspaceId=${encodeURIComponent(workspaceId)}&limit=${CLOUD_PAGE_LIMIT}&stale=all`,
+    { timeoutMs: 15e3 }
+  );
+  if (!resp.ok) {
+    console.warn(
+      `${LOG} Cloud GET /memory/pages returned ${resp.status}: ${resp.error?.message ?? "unknown"}`
+    );
+    return { pulled: 0, skipped: 0 };
+  }
+  const envelope2 = resp.data;
+  if (!envelope2 || !envelope2.ok) {
+    console.log(`${LOG} Cloud returned non-ok envelope for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  const pages = envelope2.data;
+  if (!pages || !Array.isArray(pages) || pages.length === 0) {
+    console.log(`${LOG} No cloud pages to sync for workspace=${workspaceId}`);
+    return { pulled: 0, skipped: 0 };
+  }
+  let pulled = 0;
+  let skipped = 0;
+  for (const page of pages) {
+    let content = page.content ?? "";
+    if (!content) {
+      try {
+        const detailResp = await cloud.request(
+          "GET",
+          `/api/im/memory/pages/${encodeURIComponent(page.id)}?workspaceId=${encodeURIComponent(workspaceId)}`,
+          { timeoutMs: 5e3 }
+        );
+        if (detailResp.ok && detailResp.data?.data?.content) {
+          content = detailResp.data.data.content;
+        }
+      } catch {
+      }
+    }
+    const visibility = page.visibility === "agent" ? { kind: "agent", imUserId: "" } : { kind: "workspace" };
+    try {
+      slot.store.write({
+        workspaceId,
+        path: page.path,
+        title: page.title ?? void 0,
+        content: content || "",
+        pageType: page.pageType || "leaf",
+        visibility,
+        actorImUserId: "cloud-sync",
+        actorKind: "agent"
+      });
+      pulled++;
+    } catch (err) {
+      console.warn(`${LOG} write failed for ${page.path}:`, err.message);
+      skipped++;
+    }
+  }
+  slot.store.recordCursor(workspaceId, `synced:${Date.now()}`);
+  console.log(
+    `${LOG} Synced ${pulled} pages${skipped ? `, ${skipped} skipped` : ""} for workspace=${workspaceId}`
+  );
+  return { pulled, skipped };
+}
+
 // src/daemon/memory/runner-wiring.ts
 function attachMemoryRunner(opts) {
   const runtime = new MemoryRuntime({ baseDir: opts.baseDir, deviceId: opts.deviceId });
@@ -6551,6 +6837,24 @@ function attachMemoryRunner(opts) {
     }
   };
 }
+async function syncMemoryFromCloud(wiring, cloud, workspaceIds) {
+  const uniqueIds = [...new Set(workspaceIds.filter(Boolean))];
+  if (uniqueIds.length === 0) return;
+  console.log(`[MemorySync] Initial cloud-to-local sync for ${uniqueIds.length} workspace(s)...`);
+  for (const wsId of uniqueIds) {
+    try {
+      wiring.runtime.resolve(wsId);
+      const result = await initialSyncFromCloud(wiring.runtime, cloud, wsId);
+      if (result.pulled > 0 || result.skipped > 0) {
+        console.log(
+          `[MemorySync] workspace=${wsId}: ${result.pulled} pulled, ${result.skipped} skipped`
+        );
+      }
+    } catch (err) {
+      console.error(`[MemorySync] workspace=${wsId} failed:`, err.message);
+    }
+  }
+}
 
 // src/daemon/memory/fork/select-memories.ts
 var SELECT_MEMORIES_SYSTEM_PROMPT = [
@@ -6958,6 +7262,233 @@ function parsePrismerUri(uri) {
   return { workspaceId, path: path7 };
 }
 
+// src/daemon/asset/metadata-index.ts
+import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
+import { join as join9 } from "path";
+var DEFAULT_LIMIT = 8;
+var PULL_PAGE_SIZE = 500;
+var THROTTLE_MS = 3e4;
+function rowToMetadata(row) {
+  return {
+    assetId: row.asset_id,
+    contentHash: row.content_hash,
+    filename: row.filename,
+    folderPath: row.folder_path,
+    mime: row.mime,
+    kind: row.kind,
+    sizeBytes: row.size_bytes,
+    description: row.description,
+    assetIndexSeq: row.asset_index_seq
+  };
+}
+var AssetMetadataIndex = class {
+  db;
+  cloud;
+  /** Workspace ID — exposed for prismer:// URI construction. */
+  workspaceId;
+  cursorPath;
+  _lastSyncMs = 0;
+  constructor(opts) {
+    this.db = opts.db;
+    this.cloud = opts.cloud;
+    this.workspaceId = opts.workspaceId;
+    if (!existsSync10(opts.workspaceStateDir)) {
+      mkdirSync7(opts.workspaceStateDir, { recursive: true });
+    }
+    this.cursorPath = join9(opts.workspaceStateDir, "asset-metadata-cursor.json");
+  }
+  /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
+  readCursor() {
+    if (!existsSync10(this.cursorPath)) return 0;
+    try {
+      const parsed = JSON.parse(readFileSync8(this.cursorPath, "utf8"));
+      if (parsed.workspaceId !== this.workspaceId) return 0;
+      return parsed.cursor;
+    } catch {
+      return 0;
+    }
+  }
+  writeCursor(cursor) {
+    const payload = {
+      workspaceId: this.workspaceId,
+      cursor,
+      writtenAt: Date.now()
+    };
+    writeFileSync7(this.cursorPath, JSON.stringify(payload, null, 2));
+  }
+  /**
+   * Pull incremental asset metadata changes since the persisted cursor and
+   * upsert into the local index. Newer rows overwrite older ones by
+   * (workspace_id, asset_id) primary key.
+   *
+   * Returns the count of items applied + the new cursor. Throttled: if called
+   * within 30s of the last successful pull, returns immediately.
+   */
+  async pullDelta(opts) {
+    const now = Date.now();
+    if (now - this._lastSyncMs < THROTTLE_MS) {
+      return { applied: 0, cursor: this.readCursor() };
+    }
+    const since = this.readCursor();
+    const sinceParam = since > 0 ? `&since=${since}` : "";
+    const envelope2 = await this.cloud.get(
+      `/api/im/assets/index?workspaceId=${encodeURIComponent(this.workspaceId)}&limit=${PULL_PAGE_SIZE}${sinceParam}`,
+      { signal: opts?.signal }
+    );
+    const upsert = this.db.prepare(`
+      INSERT INTO asset_metadata_index
+        (workspace_id, asset_id, content_hash, filename, folder_path, mime, kind, size_bytes, description, asset_index_seq, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(workspace_id, asset_id) DO UPDATE SET
+        content_hash = excluded.content_hash,
+        filename = excluded.filename,
+        folder_path = excluded.folder_path,
+        mime = excluded.mime,
+        kind = excluded.kind,
+        size_bytes = excluded.size_bytes,
+        description = excluded.description,
+        asset_index_seq = excluded.asset_index_seq,
+        updated_at = excluded.updated_at
+    `);
+    const nowTs = Date.now();
+    let applied = 0;
+    const tx = this.db.transaction((items) => {
+      for (const item of items) {
+        upsert.run(
+          this.workspaceId,
+          item.assetId,
+          item.contentHash,
+          item.filename ?? null,
+          item.folderPath ?? null,
+          item.mime,
+          item.kind,
+          item.sizeBytes,
+          item.description ?? null,
+          item.assetIndexSeq,
+          nowTs
+        );
+        applied += 1;
+      }
+    });
+    try {
+      tx(envelope2.items);
+      this.writeCursor(envelope2.cursor);
+    } catch (err) {
+      throw err;
+    }
+    this._lastSyncMs = now;
+    return { applied, cursor: envelope2.cursor };
+  }
+  /**
+   * Search local index by filename or description substring.
+   * Escapes LIKE wildcards (% and _). Default limit 8.
+   */
+  search(query, limit) {
+    const escaped = query.replace(/%/g, "\\%").replace(/_/g, "\\_");
+    const pattern = `%${escaped}%`;
+    const limitVal = Math.min(Math.max(limit ?? DEFAULT_LIMIT, 1), 200);
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ?
+           AND (filename LIKE ? ESCAPE '\\' OR description LIKE ? ESCAPE '\\')
+         ORDER BY asset_index_seq DESC
+         LIMIT ?`
+    ).all(this.workspaceId, pattern, pattern, limitVal);
+    return rows.map(rowToMetadata);
+  }
+  /** Exact match on filename column. Returns undefined if not indexed. */
+  resolveByFilename(filename) {
+    const row = this.db.prepare("SELECT * FROM asset_metadata_index WHERE workspace_id = ? AND filename = ?").get(this.workspaceId, filename);
+    return row ? rowToMetadata(row) : void 0;
+  }
+  /** Batch exact match — returns Map for O(1) access. */
+  resolveByFilenames(filenames) {
+    if (filenames.length === 0) return /* @__PURE__ */ new Map();
+    const placeholders = filenames.map(() => "?").join(",");
+    const params = [this.workspaceId, ...filenames];
+    const rows = this.db.prepare(
+      `SELECT * FROM asset_metadata_index
+         WHERE workspace_id = ? AND filename IN (${placeholders})`
+    ).all(...params);
+    const map = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      if (row.filename) map.set(row.filename, rowToMetadata(row));
+    }
+    return map;
+  }
+};
+
+// src/daemon/asset/rpc.ts
+var ASSET_PATH_PREFIX = "/local/asset/";
+function attachAssetRpc(opts) {
+  return async (req, res) => {
+    const url = req.url ?? "/";
+    if (!url.startsWith(ASSET_PATH_PREFIX)) return false;
+    const [pathOnly = ""] = url.split("?", 2);
+    const subpath = pathOnly.slice(ASSET_PATH_PREFIX.length);
+    const method = req.method ?? "GET";
+    try {
+      if (method === "POST" && subpath === "search") {
+        const body = await readJson3(req);
+        return handleSearch2(opts.resolveIndex, body, res);
+      }
+      respond3(res, 404, { error: "asset_route_not_found", path: url });
+      return true;
+    } catch (err) {
+      respond3(res, 500, {
+        error: "asset_rpc_failed",
+        message: err instanceof Error ? err.message : String(err)
+      });
+      return true;
+    }
+  };
+}
+function handleSearch2(resolveIndex, body, res) {
+  if (!body || typeof body !== "object") {
+    return respond4002(res, "request body must be a JSON object");
+  }
+  const b = body;
+  if (typeof b.workspaceId !== "string" || !b.workspaceId) {
+    return respond4002(res, "workspaceId is required (string)");
+  }
+  if (typeof b.query !== "string" || !b.query.trim()) {
+    return respond4002(res, "query is required (non-empty string)");
+  }
+  const index = resolveIndex(b.workspaceId);
+  if (!index) {
+    respond3(res, 404, {
+      error: "workspace_index_not_found",
+      workspaceId: b.workspaceId,
+      message: "No asset metadata index for this workspace. Ensure the daemon has synced asset metadata."
+    });
+    return true;
+  }
+  const limit = typeof b.limit === "number" && b.limit > 0 ? b.limit : void 0;
+  const items = index.search(b.query.trim(), limit);
+  respond3(res, 200, { items });
+  return true;
+}
+function respond3(res, status, body) {
+  res.statusCode = status;
+  res.setHeader("Content-Type", "application/json");
+  res.end(JSON.stringify(body));
+}
+function respond4002(res, message) {
+  respond3(res, 400, { error: "invalid_request", message });
+  return true;
+}
+async function readJson3(req) {
+  let raw = "";
+  req.setEncoding("utf8");
+  for await (const chunk of req) raw += chunk;
+  if (!raw) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new Error("invalid_json");
+  }
+}
+
 // src/daemon/outbox-watcher.ts
 import { promises as fs4 } from "fs";
 import * as path6 from "path";
@@ -7261,7 +7792,7 @@ var ServicePool = class {
 
 // src/daemon/shell-executor.ts
 import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync10 } from "fs";
+import { existsSync as existsSync11 } from "fs";
 import { resolve as resolve2 } from "path";
 var DEFAULT_OUTPUT_LIMIT = 256 * 1024;
 var DEFAULT_TIMEOUT = 6e4;
@@ -7298,7 +7829,7 @@ async function executeShellDispatch(payload, deps) {
   const command = readCommand(payload, execution);
   if (!command.trim()) return fail2(payload.taskId, "shell_command_required", "Shell command is required");
   const cwd = resolveCwd(execution.cwd, deps.config.defaultCwd);
-  if (!existsSync10(cwd)) return fail2(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
+  if (!existsSync11(cwd)) return fail2(payload.taskId, "shell_cwd_missing", `cwd does not exist: ${cwd}`);
   const timeoutMs = Math.min(
     typeof payload.timeoutMs === "number" && payload.timeoutMs > 0 ? payload.timeoutMs : deps.config.maxTimeoutMs,
     deps.config.maxTimeoutMs
@@ -7553,6 +8084,7 @@ var Runner = class extends EventEmitter3 {
   localServer;
   outboxWatcher;
   memoryWiring;
+  assetMetadataIndexes = /* @__PURE__ */ new Map();
   state = "idle";
   startedAt = 0;
   workspaceId = "";
@@ -7569,6 +8101,9 @@ var Runner = class extends EventEmitter3 {
     this.paths = this.opts.paths ?? resolvePaths();
     this.config = this.opts.configOverride ?? loadConfig(this.paths);
     this.shellConfig = resolveShellConfig(this.config.shell);
+    if (process.env.PRISMER_WORKSPACE_ID) {
+      this.workspaceId = process.env.PRISMER_WORKSPACE_ID;
+    }
     process.env.PRISMER_BASE_URL = this.config.cloud_api_base;
     process.env.PRISMER_API_KEY = this.config.api_key;
     this.db = openLocalDb(this.paths.localDb);
@@ -7606,6 +8141,16 @@ var Runner = class extends EventEmitter3 {
       baseDir: `${this.paths.root}/memory`,
       deviceId: this.config.daemon_id
     });
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    if (this.workspaceId) {
+      this.syncAssetMetadata(this.workspaceId).catch(
+        (err) => console.error("[Daemon] Initial asset metadata sync failed:", err.message)
+      );
+    }
     const containerId = process.env.PRISMER_CONTAINER_ID;
     const isContainer = !!containerId || process.env.PRISMER_RUNTIME_MODE === "container";
     this.outboxWatcher = new OutboxWatcher({
@@ -7653,7 +8198,10 @@ var Runner = class extends EventEmitter3 {
         // wiring step so it could be reviewed alongside the host-adapter
         // consumer (Hermes T2-B), which is what surfaces these routes to
         // an actual agent process.
-        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0
+        attachMemory: this.memoryWiring ? attachMemoryRpc({ runtime: this.memoryWiring.runtime }) : void 0,
+        attachAsset: attachAssetRpc({
+          resolveIndex: (workspaceId) => this.assetMetadataIndexes.get(workspaceId)
+        })
       });
       await this.localServer.start();
     }
@@ -7849,10 +8397,10 @@ var Runner = class extends EventEmitter3 {
     const rawJson = process.env.PRISMER_HOSTED_AGENT_JSON;
     let raw;
     if (rawFile) {
-      if (!existsSync11(rawFile)) {
+      if (!existsSync12(rawFile)) {
         throw new Error(`PRISMER_HOSTED_AGENT_FILE not found: ${rawFile}`);
       }
-      raw = readFileSync8(rawFile, "utf8");
+      raw = readFileSync9(rawFile, "utf8");
     } else if (rawJson) {
       raw = rawJson;
     }
@@ -7982,12 +8530,23 @@ var Runner = class extends EventEmitter3 {
       case "workspace_file.changed":
         this.onWorkspaceFileChanged(msg.payload);
         return;
+      case "asset.changed":
+        void this.onAssetChanged(msg.payload);
+        return;
       default:
         this.emit("unknown-message", msg);
     }
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    if (this.memoryWiring && this.workspaceId) {
+      syncMemoryFromCloud(this.memoryWiring, this.cloud, [this.workspaceId]).catch(
+        (err) => console.error("[Daemon] Initial memory sync failed:", err.message)
+      );
+    }
+    this.syncAssetMetadata(this.workspaceId).catch(
+      (err) => console.error("[Daemon] Asset metadata sync failed:", err.message)
+    );
     for (const id of payload.profilesToSync) {
       try {
         await this.syncProfileFromCloud(id);
@@ -8047,6 +8606,7 @@ var Runner = class extends EventEmitter3 {
           paths: this.paths,
           signal: ctrl.signal,
           ensureService: (profile, adapter) => this.servicePool.ensureService(profile, adapter),
+          assetMetadataIndexes: this.assetMetadataIndexes,
           onProgress: () => {
             const running = this.runningTasks.get(payload.taskId);
             if (running) running.lastProgressAt = Date.now();
@@ -8147,6 +8707,19 @@ var Runner = class extends EventEmitter3 {
       this.emit("sync-error", err);
     }
   }
+  async onAssetChanged(payload) {
+    if (!payload.workspaceId) return;
+    const index = this.assetMetadataIndexes.get(payload.workspaceId);
+    if (!index) return;
+    try {
+      const result = await index.pullDelta();
+      if (result.applied > 0) {
+        console.log(`[Daemon] asset.changed workspace=${payload.workspaceId} applied=${result.applied}`);
+      }
+    } catch (err) {
+      console.error(`[Daemon] asset.changed pullDelta failed workspace=${payload.workspaceId}:`, err.message);
+    }
+  }
   onWorkspaceFileChanged(payload) {
     if (payload.operation === "delete") {
       this.db.prepare("DELETE FROM workspace_files_mirror WHERE workspace_id = ? AND path = ?").run(payload.workspaceId, payload.path);
@@ -8182,6 +8755,28 @@ var Runner = class extends EventEmitter3 {
       }
     };
   }
+  /**
+   * Ensure an AssetMetadataIndex exists for the given workspace and pull
+   * delta from cloud. Idempotent — creates the index on first call, reuses
+   * it on subsequent calls. Same cursor-catch-up semantics as WorkspaceMirror.
+   */
+  async syncAssetMetadata(workspaceId) {
+    let index = this.assetMetadataIndexes.get(workspaceId);
+    if (!index) {
+      const stateDir = `${this.paths.root}/${workspaceId}`;
+      index = new AssetMetadataIndex({
+        db: this.db,
+        cloud: this.cloud,
+        workspaceId,
+        workspaceStateDir: stateDir
+      });
+      this.assetMetadataIndexes.set(workspaceId, index);
+    }
+    const result = await index.pullDelta();
+    if (result.applied > 0) {
+      console.log(`[AssetMeta] workspace=${workspaceId}: ${result.applied} applied, cursor=${result.cursor}`);
+    }
+  }
   /**
    * SyncWorker FlushFn — pushes local writes to cloud.
    *
@@ -8346,6 +8941,8 @@ function safeJsonParse(raw) {
 }
 
 // src/cli/commands/daemon.ts
+init_util();
+init_ui();
 function buildDaemonCommand() {
   const cmd = new Command8("daemon").description("Manage the prismer daemon process");
   cmd.command("start").description("Start the daemon in the background (use --foreground for Docker/systemd)").option("--port <port>", "Local server port (default 3210)", (v) => Number.parseInt(v, 10)).option("--no-local-server", "Skip starting the local 127.0.0.1 server").option("--foreground", "Run in the foreground instead of daemonizing").option("--json", "Output machine-readable JSON").action(async (opts) => {
@@ -8417,8 +9014,8 @@ function buildDaemonCommand() {
     if (existingPid && pidAlive(existingPid)) {
       exitWithError(`Daemon already running (pid ${existingPid}). Use \`prismer daemon stop\` first.`);
     }
-    if (!existsSync12(paths.logsDir)) mkdirSync7(paths.logsDir, { recursive: true });
-    const logFile = join10(paths.logsDir, "daemon.log");
+    if (!existsSync13(paths.logsDir)) mkdirSync8(paths.logsDir, { recursive: true });
+    const logFile = join11(paths.logsDir, "daemon.log");
     const fd = openSync(logFile, "a");
     const args = [process.argv[1], "daemon", "run"];
     if (opts.port) args.push("--port", String(opts.port));
@@ -8502,8 +9099,8 @@ function buildDaemonCommand() {
   });
   cmd.command("logs").description("Show daemon logs").option("--tail <n>", "Number of lines to show", (v) => Number.parseInt(v, 10), 80).option("--follow", "Follow log output").option("--json", "Accept --json for global flag compatibility (raw log bytes are streamed)").action(async (opts) => {
     const paths = resolvePaths();
-    const logFile = join10(paths.logsDir, "daemon.log");
-    if (!existsSync12(logFile)) {
+    const logFile = join11(paths.logsDir, "daemon.log");
+    if (!existsSync13(logFile)) {
       exitWithError(`No daemon log found at ${logFile}. Start the daemon with \`prismer daemon start\`.`);
     }
     const lines = Math.max(1, opts.tail);
@@ -8557,16 +9154,17 @@ async function followFile(path7) {
 }
 
 // src/cli/commands/events.ts
+init_util();
 import { Command as Command9 } from "commander";
-import { createReadStream as createReadStream2, existsSync as existsSync13 } from "fs";
+import { createReadStream as createReadStream2, existsSync as existsSync14 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { createInterface } from "readline";
-var DEFAULT_LIMIT = 50;
+var DEFAULT_LIMIT2 = 50;
 function buildEventsCommand() {
   return addEventOptions(new Command9("events").description("Read local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!existsSync13(file)) {
+    if (!existsSync14(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -8583,7 +9181,7 @@ function buildEventsCommand() {
 function buildEventsStatsCommand() {
   return addEventOptions(new Command9("events:stats").description("Summarize local PARA events from ~/.prismer/para/events.jsonl")).action(async (opts) => {
     const file = eventsPath();
-    if (!existsSync13(file)) {
+    if (!existsSync14(file)) {
       printJson(unavailable(file));
       process.exitCode = 1;
       return;
@@ -8598,10 +9196,10 @@ function buildEventsStatsCommand() {
   });
 }
 function addEventOptions(cmd) {
-  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
+  return cmd.option("--limit <n>", "Max events to return/read", parsePositiveInt3, DEFAULT_LIMIT2).option("--agent-id <id>", "Filter by agent id").option("--session-id <id>", "Filter by session id").option("--family <name>", "Filter by event family").option("--type <name>", "Filter by event type").option("--json", "Output JSON (default)");
 }
 function eventsPath() {
-  return join11(process.env.PRISMER_HOME ?? join11(homedir5(), ".prismer"), "para", "events.jsonl");
+  return join12(process.env.PRISMER_HOME ?? join12(homedir5(), ".prismer"), "para", "events.jsonl");
 }
 function unavailable(file) {
   return {
@@ -8669,7 +9267,7 @@ function bump(map, key) {
 }
 function normalizeFilters(opts) {
   return {
-    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT)),
+    limit: Math.max(1, Math.min(1e4, Number.isFinite(opts.limit) ? opts.limit : DEFAULT_LIMIT2)),
     agentId: opts.agentId,
     sessionId: opts.sessionId,
     family: opts.family,
@@ -8681,13 +9279,14 @@ function cleanFilters(filters) {
 }
 function parsePositiveInt3(v) {
   const n = Number.parseInt(v, 10);
-  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT;
+  return Number.isFinite(n) && n > 0 ? n : DEFAULT_LIMIT2;
 }
 
 // src/cli/commands/memory.ts
 import Database4 from "better-sqlite3";
 import { Command as Command10 } from "commander";
-import { existsSync as existsSync14 } from "fs";
+import { existsSync as existsSync15 } from "fs";
+init_util();
 var LOCAL_BASE = process.env.PRISMER_DAEMON_URL ?? "http://127.0.0.1:3210";
 function buildMemoryCommand() {
   const cmd = new Command10("memory").description("Inspect local daemon memory/cache state");
@@ -8779,7 +9378,7 @@ async function tryDaemon(methods, paths) {
       try {
         const res = await fetch(`${LOCAL_BASE}${path7}`, { method, signal: AbortSignal.timeout(1500) });
         if (res.status === 404) continue;
-        const body = await readJson3(res);
+        const body = await readJson4(res);
         if (!res.ok) {
           return {
             ok: false,
@@ -8798,7 +9397,7 @@ async function tryDaemon(methods, paths) {
   }
   return void 0;
 }
-async function readJson3(res) {
+async function readJson4(res) {
   const text = await res.text();
   if (!text) return null;
   try {
@@ -8838,7 +9437,7 @@ function readCacheSnapshot(limit) {
   const paths = resolvePaths();
   const empty = {
     dbPath: paths.localDb,
-    dbExists: existsSync14(paths.localDb),
+    dbExists: existsSync15(paths.localDb),
     tables: {
       cached_assets: { exists: false, count: 0, sizeBytes: 0 },
       workspace_files_mirror: { exists: false, count: 0 }
@@ -8892,9 +9491,9 @@ function readCacheSnapshot(limit) {
     db?.close();
   }
 }
-function tableExists(db, table) {
-  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table);
-  return row?.name === table;
+function tableExists(db, table2) {
+  const row = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(table2);
+  return row?.name === table2;
 }
 function assetRow(row) {
   const hash = String(row.content_hash ?? "");
@@ -8961,15 +9560,16 @@ import { Command as Command11 } from "commander";
 
 // src/pair.ts
 import { generateKeyPairSync } from "crypto";
-import { hostname } from "os";
+import { hostname as hostname2 } from "os";
 import { setTimeout as sleep2 } from "timers/promises";
 import qrcode from "qrcode";
 
 // src/daemon-id.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { hostname } from "os";
 var PREFIX = "daemon-";
 function newDaemonId() {
-  return `${PREFIX}${randomUUID5()}`;
+  const host = hostname().replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "unknown";
+  return `${PREFIX}${host}`;
 }
 
 // src/pair.ts
@@ -9000,7 +9600,7 @@ async function pair(opts) {
     "/api/im/pair/offer",
     {
       auth: false,
-      body: { devicePub, deviceName: opts.deviceName ?? hostname() }
+      body: { devicePub, deviceName: opts.deviceName ?? hostname2() }
     }
   );
   if (!offerRes.ok) {
@@ -9077,6 +9677,8 @@ function unwrapEnvelope2(raw) {
 }
 
 // src/cli/commands/pair.ts
+init_util();
+init_ui();
 function buildPairCommand() {
   return new Command11("pair").description("Legacy QR approval path; use `prismer setup` to bind this runtime").option(
     "--cloud <url>",
@@ -9119,9 +9721,9 @@ function buildPairCommand() {
 
 // src/cli/commands/profile.ts
 import { Command as Command12 } from "commander";
-import { existsSync as existsSync15, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
 import { tmpdir } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { spawnSync as spawnSync4 } from "child_process";
 
 // src/templates/roles/product-manager.json
@@ -9131,7 +9733,7 @@ var product_manager_default = {
   description: "Writes PRDs, defines requirements, verifies implementations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u4EA7\u54C1\u7ECF\u7406\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u5199\u6E05\u6670\u7684 PRD\uFF08\u7528\u6237\u6545\u4E8B + \u9A8C\u6536\u6807\u51C6 + \u8FB9\u754C\u6761\u4EF6\uFF09\u2461\u8BC4\u5BA1\u5DE5\u7A0B\u5B9E\u73B0\uFF08\u6838\u5BF9\u9A8C\u6536\u6807\u51C6 + \u7ED9\u53CD\u9988\uFF09\u2462\u5728\u7FA4\u804A\u91CC @engineer \u89E6\u53D1\u5B9E\u73B0\uFF0C@verifier \u89E6\u53D1\u9A8C\u6536\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u4F60\u7684\u8F93\u51FA PRD \u5E94\u8BE5\u4E0A\u4F20\u4E3A workspace file `docs/PROJECT-prd.md`\n- \u4F60\u5B8C\u6210 PRD \u540E\uFF0C\u53D1\u6D88\u606F @engineer-name \u8BA9\u4ED6\u5B9E\u73B0\uFF0C\u9644 prismer://file/<wsId>/docs/PROJECT-prd.md \u94FE\u63A5\n- \u6536\u5230 engineer \u5B8C\u6210\u6D88\u606F\u540E\uFF0C\u4E3B\u52A8 review\uFF0C\u5199\u53CD\u9988\u5230\u7FA4\u91CC",
     allowedTools: ["Read", "Write", "WebSearch"],
     maxTokens: 8e3
@@ -9145,7 +9747,7 @@ var engineer_default = {
   description: "Implements features per PRD, writes code, runs tests",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u8D44\u6DF1\u5DE5\u7A0B\u5E08\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u6839\u636E PRD \u5B9E\u73B0 feature \u2461\u5199\u6D4B\u8BD5\u8986\u76D6 \u2462\u628A\u4EE3\u7801\u4E0A\u4F20\u4E3A workspace file \u540E\u5728\u7FA4\u804A\u6C47\u62A5\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u6536\u5230 PRD \u540E\u5148 Read prismer://file \u94FE\u63A5\u62C9\u5230\u7684\u672C\u5730\u8DEF\u5F84\n- \u5B9E\u73B0\u5B8C\u6BD5\u540E\u7528 daemon \u4E0A\u4F20 src/<feature>.* \u5230 workspace_files\n- \u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644\u5B9E\u73B0\u7684 prismer://file URI",
     allowedTools: ["Read", "Write", "Edit", "Bash", "Grep"],
     maxTokens: 16e3
@@ -9159,7 +9761,7 @@ var ceo_default = {
   description: "Sets strategic direction, asks tough questions, makes go/no-go calls",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F CEO\u3002\u4F60\u7684\u4EFB\u52A1\uFF1A\u2460\u57FA\u4E8E\u5E02\u573A\u53CD\u9988\u548C\u6570\u636E\u505A\u6218\u7565\u51B3\u7B56 \u2461\u8BC4\u5BA1 PRD \u662F\u5426\u5BF9\u9F50\u6218\u7565 \u2462\u5728\u6267\u884C\u4E2D\u63D0\u51FA\u5C16\u9510\u7684'\u4E3A\u4EC0\u4E48'\u95EE\u9898\u3002",
     allowedTools: ["Read", "WebSearch"],
     maxTokens: 4e3
@@ -9173,7 +9775,7 @@ var researcher_default = {
   description: "Investigates topics, gathers sources, writes research memos with citations",
   applicableAdapters: ["hermes", "openclaw", "claude-code"],
   configSchema: {
-    model: "claude-3-5-sonnet",
+    model: "us-kimi-k2.6",
     systemPrompt: "\u4F60\u662F\u4E00\u4F4D\u8D44\u6DF1\u7814\u7A76\u5458\u3002\u4EFB\u52A1\uFF1A\u2460\u4F9D\u636E\u95EE\u9898\u5236\u5B9A\u8C03\u7814\u63D0\u7EB2 \u2461\u6293\u53D6/\u9605\u8BFB\u8D44\u6599\u5E76\u63D0\u53D6\u8981\u70B9 \u2462\u4EA7\u51FA\u5E26\u5F15\u7528\u7684\u7814\u7A76\u5907\u5FD8\u5F55\u3002\n\n\u7FA4\u804A\u534F\u4F5C\u7EA6\u5B9A\uFF1A\n- \u7814\u7A76\u4EA7\u51FA\u4E0A\u4F20\u4E3A workspace file `research/<topic>.md`\n- \u5B8C\u6210\u540E\u5728\u7FA4\u804A\u56DE\u590D @pm-name\uFF0C\u9644 prismer://file/<wsId>/research/<topic>.md\n- \u5F15\u7528\u5FC5\u987B\u7ED9\u51FA\u539F\u59CB\u94FE\u63A5\u6216 prismer://asset URI\uFF1B\u4E0D\u5F97\u4F2A\u9020\u6765\u6E90",
     allowedTools: ["Read", "Write", "WebSearch", "WebFetch"],
     maxTokens: 12e3
@@ -9199,6 +9801,7 @@ function listRoleTemplates() {
 }
 
 // src/cli/commands/profile.ts
+init_util();
 function buildProfileCommand() {
   const cmd = new Command12("profile").description("Manage AgentProfile (per-agent adapter config)");
   cmd.command("templates").description("List built-in role templates (PM / Engineer / CEO \u2026)").option("--json", "Output JSON (default)").action(() => {
@@ -9209,7 +9812,7 @@ function buildProfileCommand() {
     const data = await cloud.get(`/api/im/agent_profiles?agentId=${encodeURIComponent(opts.agent)}`);
     printJson(data);
   }, { code: "profile_list_failed" }));
-  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
+  cmd.command("create").description("Create an AgentProfile").requiredOption("--agent <imUserId>", "Agent IMUser.id this profile belongs to").requiredOption("--name <name>", "Profile display name (unique within workspace+agent)").option("--adapter <name>", "Adapter name (defaults to template.applicableAdapters[0] or hermes)").option("--config <jsonOrPath>", "Inline JSON or @path/to/file containing adapter config").option("--from-template <name>", "Use a built-in role template (run `prismer profile templates` to list)").option("--model <name>", "Model id (overrides template default; fetched from cloud if omitted)").option("--workspace-id <id>", "Workspace id (cloud derives Personal default if omitted)").option("--json", "Output JSON (default)").action(runAction(async (opts) => {
     let configObj = {};
     let adapterName = opts.adapter ?? "hermes";
     if (opts.fromTemplate) {
@@ -9222,6 +9825,9 @@ function buildProfileCommand() {
       const inline = readJsonArg(opts.config);
       configObj = { ...configObj, ...inline };
     }
+    if (opts.model) {
+      configObj.model = opts.model;
+    }
     const cloud = mkCloud4();
     const wsId = opts.workspaceId ?? await resolveDefaultWorkspaceId(cloud);
     const res = await cloud.request("POST", "/api/im/agent_profiles", {
@@ -9241,12 +9847,12 @@ function buildProfileCommand() {
     const profile = await cloud.get(
       `/api/im/agent_profiles/${encodeURIComponent(profileId)}`
     );
-    const tmpFile = join12(tmpdir(), `prismer-profile-${profileId}.json`);
-    writeFileSync7(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
+    const tmpFile = join13(tmpdir(), `prismer-profile-${profileId}.json`);
+    writeFileSync8(tmpFile, JSON.stringify(profile.config, null, 2), "utf8");
     const editor = process.env.EDITOR || "vi";
     const ed = spawnSync4(editor, [tmpFile], { stdio: "inherit" });
     if (ed.status !== 0) exitWithError(`editor exited ${ed.status}`, { code: "editor_failed" });
-    const newConfig = JSON.parse(readFileSync9(tmpFile, "utf8"));
+    const newConfig = JSON.parse(readFileSync10(tmpFile, "utf8"));
     const res = await cloud.request("PATCH", `/api/im/agent_profiles/${encodeURIComponent(profileId)}`, {
       body: { config: newConfig, version: profile.version }
     });
@@ -9268,8 +9874,8 @@ function mkCloud4() {
 function readJsonArg(arg) {
   if (arg.startsWith("@")) {
     const path7 = arg.slice(1);
-    if (!existsSync15(path7)) throw new Error(`File not found: ${path7}`);
-    return JSON.parse(readFileSync9(path7, "utf8"));
+    if (!existsSync16(path7)) throw new Error(`File not found: ${path7}`);
+    return JSON.parse(readFileSync10(path7, "utf8"));
   }
   return JSON.parse(arg);
 }
@@ -9282,6 +9888,8 @@ async function resolveDefaultWorkspaceId(cloud) {
 
 // src/cli/commands/sandbox.ts
 import { Command as Command13 } from "commander";
+init_util();
+init_ui();
 function buildSandboxCommand() {
   const cmd = new Command13("sandbox").description("Inspect and smoke-test sandbox lifecycle");
   cmd.command("list").description("List sandbox containers in a workspace").requiredOption("--workspace-id <id>", "Workspace id").option("--status <status>", "Status filter").option("--limit <n>", "Max rows", parsePositiveInt5, 50).option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -9483,11 +10091,13 @@ async function safeParseResponse(res) {
 
 // src/cli/commands/setup.ts
 import { Command as Command14 } from "commander";
-import { hostname as hostname2 } from "os";
+import { hostname as hostname3 } from "os";
 import { spawn as spawn6 } from "child_process";
 import { randomBytes } from "crypto";
-import { existsSync as existsSync16, renameSync } from "fs";
+import { existsSync as existsSync17, renameSync } from "fs";
 import { createServer as createServer2 } from "http";
+init_util();
+init_ui();
 function buildSetupCommand() {
   return new Command14("setup").description("Set up this local runtime and bind it to Prismer Cloud").argument("[api-key]", "Prismer daemon API key; primarily for manual recovery and automation").option(
     "--cloud <url>",
@@ -9510,6 +10120,7 @@ function buildSetupCommand() {
       getUI().blank();
     }
     const shouldStart = opts.start !== false;
+    stopRunningDaemon(paths);
     if (opts.pair || opts.asUser) {
       if (!opts.json) warn("Legacy pair setup path", "plain `prismer setup --start` is the canonical runtime binding flow");
       if (opts.asUser && process.env.LOCAL_ONLY !== "1") {
@@ -9526,7 +10137,7 @@ function buildSetupCommand() {
       }
       const result = await pair({
         cloudBaseUrl,
-        deviceName: opts.deviceName ?? hostname2(),
+        deviceName: opts.deviceName ?? hostname3(),
         force: opts.force,
         paths,
         asUserEmail: opts.asUser
@@ -9543,13 +10154,13 @@ function buildSetupCommand() {
         apiKey = await mintDaemonApiKey({
           cloudBaseUrl,
           token: authToken,
-          deviceName: opts.deviceName ?? hostname2()
+          deviceName: opts.deviceName ?? hostname3()
         });
       }
       if (!apiKey && !authToken && !opts.check && opts.browser !== false) {
         apiKey = await runBrowserSetup({
           cloudBaseUrl,
-          deviceName: opts.deviceName ?? hostname2(),
+          deviceName: opts.deviceName ?? hostname3(),
           json: Boolean(opts.json)
         });
       }
@@ -9730,11 +10341,33 @@ function startDaemonDetached(home) {
   });
   child.unref();
 }
+function stopRunningDaemon(paths) {
+  const pid = readPidFile(paths);
+  if (!pid || !pidAlive(pid)) {
+    if (pid) clearPidFile(paths);
+    return;
+  }
+  try {
+    process.kill(pid, "SIGTERM");
+  } catch {
+    return;
+  }
+  const deadline = Date.now() + 5e3;
+  while (Date.now() < deadline) {
+    if (!pidAlive(pid)) {
+      clearPidFile(paths);
+      return;
+    }
+    const start = Date.now();
+    while (Date.now() - start < 200) {
+    }
+  }
+}
 function shouldArchiveLocalDb(previous, next) {
   return previous.api_key !== next.api_key || previous.cloud_api_base !== next.cloud_api_base || previous.daemon_id !== next.daemon_id;
 }
 function archiveLocalDb(localDbPath) {
-  if (!existsSync16(localDbPath)) return;
+  if (!existsSync17(localDbPath)) return;
   const archived = `${localDbPath}.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.bak`;
   renameSync(localDbPath, archived);
 }
@@ -9757,6 +10390,8 @@ async function mintDaemonApiKey(input) {
 
 // src/cli/commands/status.ts
 import { Command as Command15 } from "commander";
+init_util();
+init_ui();
 function buildStatusCommand() {
   return new Command15("status").description("Show daemon + config + cloud status").option("--json", "Output machine-readable JSON").action(async (opts) => {
     const paths = resolvePaths();
@@ -9783,10 +10418,34 @@ function buildStatusCommand() {
     const cloud = new CloudClient({ baseUrl: cfg.cloud_api_base, apiKey: cfg.api_key });
     let cloudOk = false;
     let me = null;
+    let devices = null;
+    let agents = null;
     try {
-      const res = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
-      cloudOk = res.ok;
-      me = res.data ?? null;
+      const meRes = await cloud.request("GET", "/api/im/me", { timeoutMs: 3e3 });
+      cloudOk = meRes.ok;
+      me = meRes.data ?? null;
+      if (cloudOk) {
+        const wsRes = await cloud.request("GET", "/api/im/workspaces", { timeoutMs: 3e3 });
+        if (wsRes.ok) {
+          const wsBody = wsRes.data;
+          const wsList = wsBody?.data;
+          if (Array.isArray(wsList) && wsList.length > 0) {
+            const wsId = wsList[0]?.id;
+            if (wsId) {
+              const devRes = await cloud.request("GET", `/api/workspace/runtime-installations?workspaceId=${encodeURIComponent(wsId)}&includeStopped=false`, { timeoutMs: 3e3 });
+              if (devRes.ok) {
+                const devBody = devRes.data;
+                devices = devBody?.data;
+              }
+              const agRes = await cloud.request("GET", `/api/im/workspaces/${encodeURIComponent(wsId)}/agents`, { timeoutMs: 3e3 });
+              if (agRes.ok) {
+                const agBody = agRes.data;
+                agents = agBody?.data;
+              }
+            }
+          }
+        }
+      }
     } catch {
       cloudOk = false;
     }
@@ -9798,10 +10457,15 @@ function buildStatusCommand() {
       daemon: {
         running: daemonRunning,
         pid: daemonStatus.pid ?? pid ?? null,
-        wsConnected: daemonStatus.wsConnected ?? null
+        wsConnected: daemonStatus.wsConnected ?? null,
+        info: daemonStatus.info ?? {}
       },
-      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me },
-      local
+      cloud: { base: cfg.cloud_api_base, reachable: cloudOk, me, devices, agents },
+      local,
+      binding: {
+        daemonId: cfg.daemon_id,
+        apiKey: cfg.api_key
+      }
     };
     if (opts.json) {
       printJson(report);
@@ -9815,12 +10479,19 @@ async function readDaemonStatus() {
     const res = await fetch("http://127.0.0.1:3210/healthz", {
       signal: AbortSignal.timeout(1e3)
     });
-    if (!res.ok) return { running: false };
-    const data = await res.json();
-    return { running: true, pid: data.pid, wsConnected: data.wsConnected };
+    if (res.ok) {
+      const data = await res.json();
+      return { running: true, pid: data.pid, wsConnected: data.wsConnected, info: data };
+    }
   } catch {
-    return { running: false };
   }
+  const paths = resolvePaths();
+  const pid = readPidFile(paths);
+  if (pid) {
+    const { pidAlive: pidAlive2 } = await Promise.resolve().then(() => (init_util(), util_exports));
+    if (pidAlive2(pid)) return { running: true, pid };
+  }
+  return { running: false };
 }
 function readLocalCounts(localDbPath) {
   try {
@@ -9846,21 +10517,59 @@ function printPretty(report) {
   ui.blank();
   ok("Config", report.paths.config);
   if (report.daemon.running) {
-    ok("Daemon", `pid=${report.daemon.pid ?? "?"} ws=${report.daemon.wsConnected ? "connected" : "pending"}`);
+    const ws = report.daemon.wsConnected ? "connected" : "pending";
+    ok("Daemon", `pid=${report.daemon.pid}  ws=${ws}`);
+    if (report.daemon.info) {
+      const info2 = report.daemon.info;
+      if (info2.version) ui.line(`  Version:  ${info2.version}`);
+      if (info2.uptime) ui.line(`  Uptime:   ${Math.round(info2.uptime / 60)}m`);
+      if (info2.memoryMb) ui.line(`  Memory:   ${info2.memoryMb} MB`);
+    }
   } else {
     warn("Daemon", "not running");
     tip("prismer daemon start");
   }
-  if (report.cloud.reachable) ok("Cloud", report.cloud.base);
-  else {
+  if (report.cloud.reachable) {
+    ok("Cloud", report.cloud.base);
+    const me = report.cloud.me;
+    if (me?.user) {
+      const roleTag = me.user.role ? `  role=${me.user.role}` : "";
+      ui.line(`  Account:  ${me.user.displayName ?? me.user.username ?? "?"}${roleTag}`);
+    }
+    if (me?.credits) {
+      ui.line(`  Credits:  ${typeof me.credits.balance === "number" ? me.credits.balance.toLocaleString() : "?"}`);
+    }
+  } else {
     fail("Cloud", `${report.cloud.base} unreachable or unauthorized`);
     tip("prismer setup --force");
   }
+  if (report.binding) {
+    ui.blank();
+    ui.line(`  Daemon ID:  ${report.binding.daemonId}`);
+    const masked = report.binding.apiKey.slice(0, 14) + "\u2022\u2022\u2022\u2022" + report.binding.apiKey.slice(-4);
+    ui.line(`  API Key:    ${masked}`);
+  }
+  if (Array.isArray(report.cloud.devices) && report.cloud.devices.length > 0) {
+    const devs = report.cloud.devices;
+    ui.blank();
+    ui.line(`  Workspace Devices (${devs.length}):`);
+    for (const d of devs) {
+      const statusIcon = d.daemonStatus === "connected" ? "\u25CF" : "\u25CB";
+      const kind = d.runtimeKind === "docker" ? "Local" : "K8s";
+      const declared = d.hostedAgentSummary?.declared ?? 0;
+      ui.line(`    ${statusIcon} ${d.podName?.replace(/^daemon:/, "")?.slice(0, 28) ?? "?"}  kind=${kind}  agents=${declared}`);
+    }
+  } else {
+    ui.line(`  Workspace Devices: none`);
+  }
+  if (Array.isArray(report.cloud.agents) && report.cloud.agents.length > 0) {
+    ui.line(`  Hosted agents: ${report.cloud.agents.length}`);
+  }
   if (report.local) {
     ui.blank();
-    ui.line(`  Agents:    ${report.local.agents}`);
-    ui.line(`  Profiles:  ${report.local.profiles}`);
-    ui.line(`  Tasks:     ${report.local.runningTasks} running locally`);
+    ui.line(`  Local agents:  ${report.local.agents}`);
+    ui.line(`  Profiles:      ${report.local.profiles}`);
+    ui.line(`  Running tasks: ${report.local.runningTasks}`);
   } else {
     warn("Local DB", "unavailable");
   }
@@ -9869,6 +10578,7 @@ function printPretty(report) {
 // src/cli/commands/task.ts
 import { Command as Command16 } from "commander";
 import { setTimeout as sleep3 } from "timers/promises";
+init_util();
 function describeStatus(status) {
   return status === 0 ? "network error" : `HTTP ${status}`;
 }
@@ -9988,6 +10698,8 @@ function taskFrom2(raw) {
 
 // src/cli/commands/workspace.ts
 import { Command as Command17 } from "commander";
+init_util();
+init_ui();
 function buildWorkspaceCommand() {
   const cmd = new Command17("workspace").description("Manage workspaces, runtime snapshots, and workspace files");
   cmd.command("list").description("List workspaces").option("--json", "Output machine-readable JSON").action(runAction(async (opts) => {
@@ -10222,6 +10934,7 @@ async function readResponseError(res) {
 }
 
 // src/cli/index.ts
+init_ui();
 var VERSION = "1.9.7";
 function buildProgram() {
   const program = new Command18("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);