@prismer/runtime 1.9.7 → 1.9.9

package/dist/index.d.cts

@@ -28,6 +28,11 @@ interface AdapterDef {
     workspaceSchema: z.ZodSchema;
     /** Long-running: ensure the underlying service is reachable. May spawn or just connect. */
     ensureService?(profile: AgentProfile): Promise<AdapterService>;
+    /**
+     * Optional preflight called when the daemon syncs a profile. This should
+     * prepare local profile files/config without starting a long-running service.
+     */
+    prepareProfile?(profile: AgentProfile): Promise<void>;
     /** Interactive: one-shot dispatch (spawn-per-task). */
     dispatch?(profile: AgentProfile, task: TaskInput): Promise<TaskResult>;
     /** Validate config before persisting `AgentProfile.config`. */
@@ -208,6 +213,48 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
      */
     hermesSourceDir: z.ZodOptional<z.ZodString>;
     nativeMirrorTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    /** Task authority level: executor (default) or orchestrator. */
+    taskAuthority: z.ZodDefault<z.ZodOptional<z.ZodEnum<["executor", "orchestrator"]>>>;
+    /** Human approval escalation policy. Enforcement is currently prompt/cloud-side. */
+    approvalPolicy: z.ZodDefault<z.ZodOptional<z.ZodEnum<["strict", "auto-low-risk", "autonomous"]>>>;
+    /** Agent-level MCP tool allowlist. Empty/null means all tools. Supports exact names and trailing * wildcards. */
+    mcpAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+    /** Agent-level operating principles injected through /v1/runs instructions. */
+    operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    /**
+     * Role-template snapshot carried in AgentProfile.config by cloud ACP.
+     * Expected fields used here:
+     *   - roleTemplate.mcpServers[].toolsAllowlist
+     *   - roleTemplate.operatingPrinciples
+     */
+    roleTemplate: z.ZodOptional<z.ZodObject<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
     port: number;
     apiKey: string;
@@ -221,10 +268,24 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
     mirrorNativeKanban: boolean;
     mirrorNativeGoals: boolean;
     nativeMirrorTimeoutMs: number;
+    taskAuthority: "executor" | "orchestrator";
+    approvalPolicy: "strict" | "auto-low-risk" | "autonomous";
     hermesProfileName?: string | undefined;
     prismerMcpServerPath?: string | undefined;
     prismerProviderBaseUrl?: string | undefined;
     hermesSourceDir?: string | undefined;
+    mcpAllowlist?: string[] | null | undefined;
+    operatingPrinciples?: string | Record<string, string> | undefined;
+    roleTemplate?: z.objectOutputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
     apiKey: string;
     hermesProfileName?: string | undefined;
@@ -242,6 +303,20 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
     mirrorNativeGoals?: boolean | undefined;
     hermesSourceDir?: string | undefined;
     nativeMirrorTimeoutMs?: number | undefined;
+    taskAuthority?: "executor" | "orchestrator" | undefined;
+    approvalPolicy?: "strict" | "auto-low-risk" | "autonomous" | undefined;
+    mcpAllowlist?: string[] | null | undefined;
+    operatingPrinciples?: string | Record<string, string> | undefined;
+    roleTemplate?: z.objectInputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }>;
 type HermesProfileConfig = z.infer<typeof HermesProfileConfigSchema>;
 declare const hermesAdapter: AdapterDef;
@@ -306,7 +381,7 @@ type LocalDb = Database.Database;
 declare function openLocalDb(path: string): LocalDb;
 declare function runMigrations(db: LocalDb): void;
 declare function currentSchemaVersion(db: LocalDb): number;
-declare const TARGET_SCHEMA_VERSION = 2;
+declare const TARGET_SCHEMA_VERSION = 3;
 
 type SyncResourceType = 'workspace' | 'agent' | 'agent_profile';
 type SyncOperation = 'create' | 'update' | 'delete';
@@ -883,6 +958,9 @@ interface HostAckedPayload {
         [key: string]: number;
     };
     profilesToSync: string[];
+    /** Profile IDs the daemon declared but that no longer exist on the cloud
+     *  (soft-deleted). The daemon should remove these from its local store. */
+    profilesToDelete: string[];
 }
 interface AgentStatusChangedPayload {
     agentImUserId: string;
@@ -1160,6 +1238,71 @@ declare class OutboxWatcher {
     private upload;
 }
 
+interface AssetMetadataRow {
+    assetId: string;
+    contentHash: string;
+    filename: string | null;
+    folderPath: string | null;
+    mime: string;
+    kind: string;
+    sizeBytes: number;
+    description: string | null;
+    assetIndexSeq: number;
+}
+interface AssetMetadataIndexOptions {
+    db: LocalDb;
+    cloud: CloudClient;
+    workspaceId: string;
+    /**
+     * Per-workspace state dir. Caller should pass ~/.prismer/<wid>/ so different
+     * paired workspaces don't race on the cursor file.
+     */
+    workspaceStateDir: string;
+}
+/**
+ * AssetMetadataIndex mirrors cloud-side asset metadata into SQLite for fast
+ * local `#filename` lookup. The cursor file is the only piece of state that
+ * must survive daemon restart; the SQLite mirror is incremental between restarts
+ * (cursor catch-up). Idempotent — safe to retry pullDelta() on errors.
+ */
+declare class AssetMetadataIndex {
+    private readonly db;
+    private readonly cloud;
+    /** Workspace ID — exposed for prismer:// URI construction. */
+    readonly workspaceId: string;
+    private readonly cursorPath;
+    private _lastSyncMs;
+    constructor(opts: AssetMetadataIndexOptions);
+    /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
+    readCursor(): number;
+    private writeCursor;
+    /**
+     * Pull incremental asset metadata changes since the persisted cursor and
+     * upsert into the local index. Newer rows overwrite older ones by
+     * (workspace_id, asset_id) primary key.
+     *
+     * Returns the count of items applied + the new cursor. Throttled: if called
+     * within 30s of the last successful pull, returns immediately.
+     */
+    pullDelta(opts?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        applied: number;
+        cursor: number;
+    }>;
+    /**
+     * Search local index by filename or description substring.
+     * Escapes LIKE wildcards (% and _). Default limit 8.
+     */
+    search(query: string, limit?: number): AssetMetadataRow[];
+    /** Exact match on filename column. Returns undefined if not indexed. */
+    resolveByFilename(filename: string): AssetMetadataRow | undefined;
+    resolveByAssetId(assetId: string): AssetMetadataRow | undefined;
+    resolveByContentHash(contentHash: string): AssetMetadataRow | undefined;
+    /** Batch exact match — returns Map for O(1) access. */
+    resolveByFilenames(filenames: string[]): Map<string, AssetMetadataRow>;
+}
+
 interface DispatchDeps {
     registry: AdapterRegistry;
     cloud: CloudClient;
@@ -1183,6 +1326,11 @@ interface DispatchDeps {
     outboxWatcher?: OutboxWatcher;
     /** Daemon paths — used to derive the per-task outbox dir. */
     paths?: ConfigPaths;
+    /**
+     * Multi-workspace asset metadata indexes for #filename resolution.
+     * Keyed by workspaceId. If absent, #ref resolution is skipped entirely.
+     */
+    assetMetadataIndexes?: Map<string, AssetMetadataIndex>;
 }
 declare function handleDispatch(payload: TaskDispatchRequestPayload, requestId: string | undefined, deps: DispatchDeps): Promise<TaskDispatchReplyPayload>;
 /**
@@ -1250,6 +1398,14 @@ interface LocalServerOptions {
      * Sink receives the parsed JSON body and returns a structured result.
      */
     onAssetWrite?: (body: unknown) => Promise<AssetWriteHandlerResult>;
+    /**
+     * Optional handler for `/local/asset/*` routes. Returns true if the request
+     * was handled (response written); false to let the normal route table fall
+     * through. Wired by the daemon runner from `attachAssetRpc()` in
+     * `daemon/asset/rpc.ts` when asset metadata index is enabled.
+     * When set, /healthz reports `assetReady: true`.
+     */
+    attachAsset?: (req: IncomingMessage, res: ServerResponse) => Promise<boolean>;
 }
 interface AssetWriteHandlerResult {
     status: 200 | 400 | 502;
@@ -1320,6 +1476,7 @@ interface LocalServerState {
     runningTaskIds: string[];
     observability?: {
         adapters?: Record<string, unknown>;
+        assetSync?: Record<string, unknown>;
         lastTaskError?: {
             taskId: string;
             message: string;
@@ -1334,6 +1491,7 @@ declare class LocalServer {
     start(): Promise<void>;
     stop(): Promise<void>;
     private route;
+    private runHandlers;
     private routeStandard;
     /**
      * POST /v1/agents/install — cloud/controller installs one hosted agent on
@@ -1405,6 +1563,16 @@ declare class Runner extends EventEmitter {
     private localServer?;
     private outboxWatcher?;
     private memoryWiring?;
+    private assetMetadataIndexes;
+    private workspaceMirrors;
+    private assetOriginOutbox?;
+    private dropFolderAdapter?;
+    private dropFolderUploadRunner?;
+    private dropFolderTimer?;
+    private dropFolderWorkspaceId;
+    private dropFolderWorkspaceDir;
+    private dropFolderTickInFlight;
+    private readonly dropFolderStable;
     private state;
     private startedAt;
     private workspaceId;
@@ -1431,6 +1599,7 @@ declare class Runner extends EventEmitter {
      * `agent_profiles` table (filled by host.acked sync).
      */
     loadAgentsFromDb(): void;
+    private prepareLocalProfiles;
     /**
      * Register an in-process AgentProfile snapshot (called by agent CLI / sync layer).
      * Used to populate the `agents` list in agent.host.declare.
@@ -1458,8 +1627,34 @@ declare class Runner extends EventEmitter {
     private syncProfileFromCloud;
     private resolveOwnedAgent;
     private onWorkspaceChanged;
+    private onAssetChanged;
     private onWorkspaceFileChanged;
     private snapshotAdapterObservability;
+    private snapshotAssetSyncObservability;
+    /**
+     * Ensure an AssetMetadataIndex exists for the given workspace and pull
+     * delta from cloud. Idempotent — creates the index on first call, reuses
+     * it on subsequent calls. Same cursor-catch-up semantics as WorkspaceMirror.
+     */
+    private syncAssetMetadata;
+    /**
+     * Ensure a WorkspaceMirror exists for the workspace and pull path→asset
+     * bindings from cloud. Cold-start daemons previously only had this table
+     * populated by WS push or per-path URI fallback, so local asset state looked
+     * empty even though cloud files existed.
+     */
+    private syncWorkspaceFiles;
+    private syncAssetState;
+    /**
+     * Desktop asset ingress: watch a user-visible local asset folder
+     * and upload new files as IMAssets, preserving nested relative dirs in
+     * IMAsset.folderPath. The lower-level adapter/outbox/uploader already
+     * existed; this method wires them into the real daemon lifecycle.
+     */
+    private ensureDropFolderRuntime;
+    private stopDropFolderRuntime;
+    private runDropFolderTick;
+    private isDropFolderObservationStable;
     /**
      * SyncWorker FlushFn — pushes local writes to cloud.
      *
@@ -1557,29 +1752,29 @@ declare const CCConfigSchema: z.ZodObject<{
     cwd: string;
     maxTurns: number;
     route: "default" | "prismer" | "omniroute";
-    systemPrompt?: string | undefined;
-    allowedTools?: string[] | undefined;
-    envVars?: Record<string, string> | undefined;
     mcpServers?: {
         name: string;
         command: string;
         env?: Record<string, string> | undefined;
         args?: string[] | undefined;
     }[] | undefined;
+    systemPrompt?: string | undefined;
+    allowedTools?: string[] | undefined;
+    envVars?: Record<string, string> | undefined;
     baseURL?: string | undefined;
     apiKeyRef?: string | undefined;
 }, {
     cwd: string;
     model?: string | undefined;
-    systemPrompt?: string | undefined;
-    allowedTools?: string[] | undefined;
-    envVars?: Record<string, string> | undefined;
     mcpServers?: {
         name: string;
         command: string;
         env?: Record<string, string> | undefined;
         args?: string[] | undefined;
     }[] | undefined;
+    systemPrompt?: string | undefined;
+    allowedTools?: string[] | undefined;
+    envVars?: Record<string, string> | undefined;
     maxTurns?: number | undefined;
     baseURL?: string | undefined;
     apiKeyRef?: string | undefined;

package/dist/index.d.ts

@@ -28,6 +28,11 @@ interface AdapterDef {
     workspaceSchema: z.ZodSchema;
     /** Long-running: ensure the underlying service is reachable. May spawn or just connect. */
     ensureService?(profile: AgentProfile): Promise<AdapterService>;
+    /**
+     * Optional preflight called when the daemon syncs a profile. This should
+     * prepare local profile files/config without starting a long-running service.
+     */
+    prepareProfile?(profile: AgentProfile): Promise<void>;
     /** Interactive: one-shot dispatch (spawn-per-task). */
     dispatch?(profile: AgentProfile, task: TaskInput): Promise<TaskResult>;
     /** Validate config before persisting `AgentProfile.config`. */
@@ -208,6 +213,48 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
      */
     hermesSourceDir: z.ZodOptional<z.ZodString>;
     nativeMirrorTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    /** Task authority level: executor (default) or orchestrator. */
+    taskAuthority: z.ZodDefault<z.ZodOptional<z.ZodEnum<["executor", "orchestrator"]>>>;
+    /** Human approval escalation policy. Enforcement is currently prompt/cloud-side. */
+    approvalPolicy: z.ZodDefault<z.ZodOptional<z.ZodEnum<["strict", "auto-low-risk", "autonomous"]>>>;
+    /** Agent-level MCP tool allowlist. Empty/null means all tools. Supports exact names and trailing * wildcards. */
+    mcpAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+    /** Agent-level operating principles injected through /v1/runs instructions. */
+    operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    /**
+     * Role-template snapshot carried in AgentProfile.config by cloud ACP.
+     * Expected fields used here:
+     *   - roleTemplate.mcpServers[].toolsAllowlist
+     *   - roleTemplate.operatingPrinciples
+     */
+    roleTemplate: z.ZodOptional<z.ZodObject<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
     port: number;
     apiKey: string;
@@ -221,10 +268,24 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
     mirrorNativeKanban: boolean;
     mirrorNativeGoals: boolean;
     nativeMirrorTimeoutMs: number;
+    taskAuthority: "executor" | "orchestrator";
+    approvalPolicy: "strict" | "auto-low-risk" | "autonomous";
     hermesProfileName?: string | undefined;
     prismerMcpServerPath?: string | undefined;
     prismerProviderBaseUrl?: string | undefined;
     hermesSourceDir?: string | undefined;
+    mcpAllowlist?: string[] | null | undefined;
+    operatingPrinciples?: string | Record<string, string> | undefined;
+    roleTemplate?: z.objectOutputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
     apiKey: string;
     hermesProfileName?: string | undefined;
@@ -242,6 +303,20 @@ declare const HermesProfileConfigSchema: z.ZodObject<{
     mirrorNativeGoals?: boolean | undefined;
     hermesSourceDir?: string | undefined;
     nativeMirrorTimeoutMs?: number | undefined;
+    taskAuthority?: "executor" | "orchestrator" | undefined;
+    approvalPolicy?: "strict" | "auto-low-risk" | "autonomous" | undefined;
+    mcpAllowlist?: string[] | null | undefined;
+    operatingPrinciples?: string | Record<string, string> | undefined;
+    roleTemplate?: z.objectInputType<{
+        mcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            toolsAllowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, z.ZodTypeAny, "passthrough">>, "many">>;
+        operatingPrinciples: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
 }>;
 type HermesProfileConfig = z.infer<typeof HermesProfileConfigSchema>;
 declare const hermesAdapter: AdapterDef;
@@ -306,7 +381,7 @@ type LocalDb = Database.Database;
 declare function openLocalDb(path: string): LocalDb;
 declare function runMigrations(db: LocalDb): void;
 declare function currentSchemaVersion(db: LocalDb): number;
-declare const TARGET_SCHEMA_VERSION = 2;
+declare const TARGET_SCHEMA_VERSION = 3;
 
 type SyncResourceType = 'workspace' | 'agent' | 'agent_profile';
 type SyncOperation = 'create' | 'update' | 'delete';
@@ -883,6 +958,9 @@ interface HostAckedPayload {
         [key: string]: number;
     };
     profilesToSync: string[];
+    /** Profile IDs the daemon declared but that no longer exist on the cloud
+     *  (soft-deleted). The daemon should remove these from its local store. */
+    profilesToDelete: string[];
 }
 interface AgentStatusChangedPayload {
     agentImUserId: string;
@@ -1160,6 +1238,71 @@ declare class OutboxWatcher {
     private upload;
 }
 
+interface AssetMetadataRow {
+    assetId: string;
+    contentHash: string;
+    filename: string | null;
+    folderPath: string | null;
+    mime: string;
+    kind: string;
+    sizeBytes: number;
+    description: string | null;
+    assetIndexSeq: number;
+}
+interface AssetMetadataIndexOptions {
+    db: LocalDb;
+    cloud: CloudClient;
+    workspaceId: string;
+    /**
+     * Per-workspace state dir. Caller should pass ~/.prismer/<wid>/ so different
+     * paired workspaces don't race on the cursor file.
+     */
+    workspaceStateDir: string;
+}
+/**
+ * AssetMetadataIndex mirrors cloud-side asset metadata into SQLite for fast
+ * local `#filename` lookup. The cursor file is the only piece of state that
+ * must survive daemon restart; the SQLite mirror is incremental between restarts
+ * (cursor catch-up). Idempotent — safe to retry pullDelta() on errors.
+ */
+declare class AssetMetadataIndex {
+    private readonly db;
+    private readonly cloud;
+    /** Workspace ID — exposed for prismer:// URI construction. */
+    readonly workspaceId: string;
+    private readonly cursorPath;
+    private _lastSyncMs;
+    constructor(opts: AssetMetadataIndexOptions);
+    /** Persisted cursor for this workspace, or 0 on first run / corrupted file. */
+    readCursor(): number;
+    private writeCursor;
+    /**
+     * Pull incremental asset metadata changes since the persisted cursor and
+     * upsert into the local index. Newer rows overwrite older ones by
+     * (workspace_id, asset_id) primary key.
+     *
+     * Returns the count of items applied + the new cursor. Throttled: if called
+     * within 30s of the last successful pull, returns immediately.
+     */
+    pullDelta(opts?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        applied: number;
+        cursor: number;
+    }>;
+    /**
+     * Search local index by filename or description substring.
+     * Escapes LIKE wildcards (% and _). Default limit 8.
+     */
+    search(query: string, limit?: number): AssetMetadataRow[];
+    /** Exact match on filename column. Returns undefined if not indexed. */
+    resolveByFilename(filename: string): AssetMetadataRow | undefined;
+    resolveByAssetId(assetId: string): AssetMetadataRow | undefined;
+    resolveByContentHash(contentHash: string): AssetMetadataRow | undefined;
+    /** Batch exact match — returns Map for O(1) access. */
+    resolveByFilenames(filenames: string[]): Map<string, AssetMetadataRow>;
+}
+
 interface DispatchDeps {
     registry: AdapterRegistry;
     cloud: CloudClient;
@@ -1183,6 +1326,11 @@ interface DispatchDeps {
     outboxWatcher?: OutboxWatcher;
     /** Daemon paths — used to derive the per-task outbox dir. */
     paths?: ConfigPaths;
+    /**
+     * Multi-workspace asset metadata indexes for #filename resolution.
+     * Keyed by workspaceId. If absent, #ref resolution is skipped entirely.
+     */
+    assetMetadataIndexes?: Map<string, AssetMetadataIndex>;
 }
 declare function handleDispatch(payload: TaskDispatchRequestPayload, requestId: string | undefined, deps: DispatchDeps): Promise<TaskDispatchReplyPayload>;
 /**
@@ -1250,6 +1398,14 @@ interface LocalServerOptions {
      * Sink receives the parsed JSON body and returns a structured result.
      */
     onAssetWrite?: (body: unknown) => Promise<AssetWriteHandlerResult>;
+    /**
+     * Optional handler for `/local/asset/*` routes. Returns true if the request
+     * was handled (response written); false to let the normal route table fall
+     * through. Wired by the daemon runner from `attachAssetRpc()` in
+     * `daemon/asset/rpc.ts` when asset metadata index is enabled.
+     * When set, /healthz reports `assetReady: true`.
+     */
+    attachAsset?: (req: IncomingMessage, res: ServerResponse) => Promise<boolean>;
 }
 interface AssetWriteHandlerResult {
     status: 200 | 400 | 502;
@@ -1320,6 +1476,7 @@ interface LocalServerState {
     runningTaskIds: string[];
     observability?: {
         adapters?: Record<string, unknown>;
+        assetSync?: Record<string, unknown>;
         lastTaskError?: {
             taskId: string;
             message: string;
@@ -1334,6 +1491,7 @@ declare class LocalServer {
     start(): Promise<void>;
     stop(): Promise<void>;
     private route;
+    private runHandlers;
     private routeStandard;
     /**
      * POST /v1/agents/install — cloud/controller installs one hosted agent on
@@ -1405,6 +1563,16 @@ declare class Runner extends EventEmitter {
     private localServer?;
     private outboxWatcher?;
     private memoryWiring?;
+    private assetMetadataIndexes;
+    private workspaceMirrors;
+    private assetOriginOutbox?;
+    private dropFolderAdapter?;
+    private dropFolderUploadRunner?;
+    private dropFolderTimer?;
+    private dropFolderWorkspaceId;
+    private dropFolderWorkspaceDir;
+    private dropFolderTickInFlight;
+    private readonly dropFolderStable;
     private state;
     private startedAt;
     private workspaceId;
@@ -1431,6 +1599,7 @@ declare class Runner extends EventEmitter {
      * `agent_profiles` table (filled by host.acked sync).
      */
     loadAgentsFromDb(): void;
+    private prepareLocalProfiles;
     /**
      * Register an in-process AgentProfile snapshot (called by agent CLI / sync layer).
      * Used to populate the `agents` list in agent.host.declare.
@@ -1458,8 +1627,34 @@ declare class Runner extends EventEmitter {
     private syncProfileFromCloud;
     private resolveOwnedAgent;
     private onWorkspaceChanged;
+    private onAssetChanged;
     private onWorkspaceFileChanged;
     private snapshotAdapterObservability;
+    private snapshotAssetSyncObservability;
+    /**
+     * Ensure an AssetMetadataIndex exists for the given workspace and pull
+     * delta from cloud. Idempotent — creates the index on first call, reuses
+     * it on subsequent calls. Same cursor-catch-up semantics as WorkspaceMirror.
+     */
+    private syncAssetMetadata;
+    /**
+     * Ensure a WorkspaceMirror exists for the workspace and pull path→asset
+     * bindings from cloud. Cold-start daemons previously only had this table
+     * populated by WS push or per-path URI fallback, so local asset state looked
+     * empty even though cloud files existed.
+     */
+    private syncWorkspaceFiles;
+    private syncAssetState;
+    /**
+     * Desktop asset ingress: watch a user-visible local asset folder
+     * and upload new files as IMAssets, preserving nested relative dirs in
+     * IMAsset.folderPath. The lower-level adapter/outbox/uploader already
+     * existed; this method wires them into the real daemon lifecycle.
+     */
+    private ensureDropFolderRuntime;
+    private stopDropFolderRuntime;
+    private runDropFolderTick;
+    private isDropFolderObservationStable;
     /**
      * SyncWorker FlushFn — pushes local writes to cloud.
      *
@@ -1557,29 +1752,29 @@ declare const CCConfigSchema: z.ZodObject<{
     cwd: string;
     maxTurns: number;
     route: "default" | "prismer" | "omniroute";
-    systemPrompt?: string | undefined;
-    allowedTools?: string[] | undefined;
-    envVars?: Record<string, string> | undefined;
     mcpServers?: {
         name: string;
         command: string;
         env?: Record<string, string> | undefined;
         args?: string[] | undefined;
     }[] | undefined;
+    systemPrompt?: string | undefined;
+    allowedTools?: string[] | undefined;
+    envVars?: Record<string, string> | undefined;
     baseURL?: string | undefined;
     apiKeyRef?: string | undefined;
 }, {
     cwd: string;
     model?: string | undefined;
-    systemPrompt?: string | undefined;
-    allowedTools?: string[] | undefined;
-    envVars?: Record<string, string> | undefined;
     mcpServers?: {
         name: string;
         command: string;
         env?: Record<string, string> | undefined;
         args?: string[] | undefined;
     }[] | undefined;
+    systemPrompt?: string | undefined;
+    allowedTools?: string[] | undefined;
+    envVars?: Record<string, string> | undefined;
     maxTurns?: number | undefined;
     baseURL?: string | undefined;
     apiKeyRef?: string | undefined;