npm - @prismer/runtime - Versions diffs - 2.2.55 → 2.2.63 - Mend

@prismer/runtime 2.2.55 → 2.2.63

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (563) hide show

package/built-in-skills/prismer-himalaya/references/message-composition.md ADDED Viewed

@@ -0,0 +1,206 @@
+# Message Composition with MML (MIME Meta Language)
+Himalaya uses MML for composing emails. MML is a simple XML-based syntax that compiles to MIME messages.
+## Basic Message Structure
+An email message is a list of **headers** followed by a **body**, separated by a blank line:
+```
+From: sender@example.com
+To: recipient@example.com
+Subject: Hello World
+This is the message body.
+```
+## Headers
+Common headers:
+- `From`: Sender address
+- `To`: Primary recipient(s)
+- `Cc`: Carbon copy recipients
+- `Bcc`: Blind carbon copy recipients
+- `Subject`: Message subject
+- `Reply-To`: Address for replies (if different from From)
+- `In-Reply-To`: Message ID being replied to
+### Address Formats
+```
+To: user@example.com
+To: John Doe <john@example.com>
+To: "John Doe" <john@example.com>
+To: user1@example.com, user2@example.com, "Jane" <jane@example.com>
+```
+## Plain Text Body
+Simple plain text email:
+```
+From: alice@localhost
+To: bob@localhost
+Subject: Plain Text Example
+Hello, this is a plain text email.
+No special formatting needed.
+Best,
+Alice
+```
+## MML for Rich Emails
+### Multipart Messages
+Alternative text/html parts:
+```
+From: alice@localhost
+To: bob@localhost
+Subject: Multipart Example
+<#multipart type=alternative>
+This is the plain text version.
+<#part type=text/html>
+<html><body><h1>This is the HTML version</h1></body></html>
+<#/multipart>
+```
+### Attachments
+Attach a file:
+```
+From: alice@localhost
+To: bob@localhost
+Subject: With Attachment
+Here is the document you requested.
+<#part filename=/path/to/document.pdf><#/part>
+```
+Attachment with custom name:
+```
+<#part filename=/path/to/file.pdf name=report.pdf><#/part>
+```
+Multiple attachments:
+```
+<#part filename=/path/to/doc1.pdf><#/part>
+<#part filename=/path/to/doc2.pdf><#/part>
+```
+### Inline Images
+Embed an image inline:
+```
+From: alice@localhost
+To: bob@localhost
+Subject: Inline Image
+<#multipart type=related>
+<#part type=text/html>
+<html><body>
+<p>Check out this image:</p>
+<img src="cid:image1">
+</body></html>
+<#part disposition=inline id=image1 filename=/path/to/image.png><#/part>
+<#/multipart>
+```
+### Mixed Content (Text + Attachments)
+```
+From: alice@localhost
+To: bob@localhost
+Subject: Mixed Content
+<#multipart type=mixed>
+<#part type=text/plain>
+Please find the attached files.
+Best,
+Alice
+<#part filename=/path/to/file1.pdf><#/part>
+<#part filename=/path/to/file2.zip><#/part>
+<#/multipart>
+```
+## MML Tag Reference
+### `<#multipart>`
+Groups multiple parts together.
+- `type=alternative`: Different representations of same content
+- `type=mixed`: Independent parts (text + attachments)
+- `type=related`: Parts that reference each other (HTML + images)
+### `<#part>`
+Defines a message part.
+- `type=<mime-type>`: Content type (e.g., `text/html`, `application/pdf`)
+- `filename=<path>`: File to attach
+- `name=<name>`: Display name for attachment
+- `disposition=inline`: Display inline instead of as attachment
+- `id=<cid>`: Content ID for referencing in HTML
+## Composing from CLI
+### Interactive compose
+Opens your `$EDITOR`:
+```bash
+himalaya message write
+```
+### Reply (opens editor with quoted message)
+```bash
+himalaya message reply 42
+himalaya message reply 42 --all  # reply-all
+```
+### Forward
+```bash
+himalaya message forward 42
+```
+### Send from stdin
+```bash
+cat message.txt | himalaya template send
+```
+### Prefill headers from CLI
+```bash
+himalaya message write \
+  -H "To:recipient@example.com" \
+  -H "Subject:Quick Message" \
+  "Message body here"
+```
+## Tips
+- The editor opens with a template; fill in headers and body.
+- Save and exit the editor to send; exit without saving to cancel.
+- MML parts are compiled to proper MIME when sending.
+- Use `himalaya message export --full` to inspect the raw MIME structure of received emails.
+## Trust boundary
+These MML examples are trusted authoring syntax, never a parser for incoming
+mail or quoted content. Prefer ../scripts/compose_draft.py for literal body text
+and explicitly approved attachment paths. Construct fresh recipient headers;
+verify From/account, To, Cc and Bcc. Creating a draft never authorizes sending.

package/built-in-skills/prismer-himalaya/scripts/compose_draft.py ADDED Viewed

@@ -0,0 +1,48 @@
+"""Create RFC 5322 drafts from structured JSON, without interpreting MML or sending."""
+import argparse
+from email.message import EmailMessage
+from email.policy import SMTP
+from email.utils import make_msgid
+import json
+import mimetypes
+from pathlib import Path
+def build(spec):
+    if not spec.get('account') or not spec.get('from') or not spec.get('to'):
+        raise ValueError('account, from and to are required')
+    message = EmailMessage(policy=SMTP)
+    for key in ('from', 'to', 'cc', 'bcc', 'subject', 'in-reply-to', 'references'):
+        value = spec.get(key)
+        if value is not None:
+            value = ', '.join(value) if isinstance(value, list) else value
+            if '\n' in value or '\r' in value:
+                raise ValueError('Header injection rejected')
+            message[key] = value
+    message['Message-ID'] = make_msgid()
+    message.set_content(spec.get('body', ''))
+    for item in spec.get('attachments', []):
+        if not isinstance(item, dict) or item.get('approved') is not True:
+            raise ValueError('Each attachment requires an explicit approved path')
+        root = Path(item['root']).resolve(strict=True)
+        path = Path(item['path']).resolve(strict=True)
+        if not path.is_relative_to(root) or not path.is_file():
+            raise ValueError('Attachment outside approved root')
+        if path.stat().st_size > 25 * 1024 * 1024:
+            raise ValueError('Attachment exceeds local 25MiB limit')
+        mime = mimetypes.guess_type(path.name)[0] or 'application/octet-stream'
+        main, sub = mime.split('/', 1)
+        message.add_attachment(path.read_bytes(), maintype=main, subtype=sub, filename=path.name)
+    return message
+def main():
+    p = argparse.ArgumentParser(description=__doc__); p.add_argument('spec'); p.add_argument('output')
+    args = p.parse_args()
+    with open(args.spec, encoding='utf-8') as stream: spec = json.load(stream)
+    message = build(spec)
+    with open(args.output, 'xb') as stream: stream.write(message.as_bytes())
+    print(json.dumps({'draft': args.output, 'account': spec['account'], 'message_id': message['Message-ID'], 'sent': False}))
+if __name__ == '__main__': main()

package/built-in-skills/prismer-im-collab/SKILL.md CHANGED Viewed

@@ -135,7 +135,7 @@ This rule overrides any temptation to compose a polished-looking team kickoff fr
 2. **Don't fabricate usernames.** If `prismer.conversation.listAgents` doesn't return a name, that agent doesn't exist; use plain text and address them by displayName (no @).
 3. **Don't pretend to call a tool.** If you write "I sent a message via the tool" without actually invoking the tool, the message doesn't exist; the human will see the inconsistency.
 4. **Check tool return values.** `prismer.agent.send` may return `{ ok: false, error: 'agent_not_found' }`; surface the error rather than pretending it worked.
-5. **Use structured approvals.** For destructive, irreversible, external, spend, access, or publish operations, call `prismer.approval.request_human_approval`; do not inline-mention a human asking for approval.
+5. **Use structured approvals for unapproved scope.** For destructive, irreversible, external, spend, access, or publish operations not already explicitly authorized for this exact target and scope, call `prismer.approval.request_human_approval`. Do not request the same approval twice or gate routine requested deliverables; follow `human-approval`. A mandatory product-specific UI gate (such as council convening) still applies.
 6. **No raw ids or filesystem paths in your reply.** Ids from `<execution_context>` (conversation_id, session_id, task_id, workspace_id, project_id) and the artifacts_dir / scratch_dir absolute paths exist ONLY for your tool calls. NEVER paste them into the user-facing message. Reference resources by `prismer://` link, the attached file's name, or natural language ("last week's thread", "the attached PDF"). A reply containing `cmp…` cuids or `/home/user/.prismer/...` paths is leaking internals and reads as noise to the user.
 ## Example: group discussion handoff

package/built-in-skills/prismer-imessage/LICENSE ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2025 Nous Research
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/built-in-skills/prismer-imessage/NOTICE.md ADDED Viewed

@@ -0,0 +1,17 @@
+# Resource provenance
+## Engineering adaptation (2026-09-23)
+Source: https://github.com/NousResearch/hermes-agent/tree/1a1f4a59e252e1dc0137e7b2e7bcc8b0381d19c4/skills/apple/imessage
+Upstream authors: Hermes Agent.
+Hermes MIT copyright (c) 2025 Nous Research is preserved in LICENSE.
+All bundled references/templates/scripts remain covered by that notice unless
+an additional license is explicitly supplied. External CLI binaries, services,
+accounts and downloaded assets are not redistributed by this skill and retain
+their own terms. No API keys or third-party runtime packages are bundled.
+Prismer modifications: unique discovery/ownership mapping where applicable,
+resource-path and authorization corrections, bounded helpers, honest readiness
+and verification states. See docs/bugfix223/implementation-engineering.md in the
+source repository for resource mapping, tests and remaining live acceptance.

package/built-in-skills/prismer-imessage/SKILL.md ADDED Viewed

@@ -0,0 +1,128 @@
+---
+name: prismer-imessage
+scope: common
+description: Send and receive iMessages/SMS via the imsg CLI on macOS.
+version: 1.0.0
+author: Hermes Agent
+license: MIT
+platforms: [ macos ]
+metadata:
+  nativeReplaces: [ imessage ]
+  hermes:
+    tags: [ iMessage, SMS, messaging, macOS, Apple ]
+  requiresExplicitGrant: true
+prerequisites:
+  commands: [ imsg ]
+---
+## Prismer execution contract
+This is the uniquely named `prismer-imessage` skill, adapted from Hermes.
+Use the actual tools exposed by the executing host; examples using terminal,
+process, delegate_task, vision_analyze or browser_* are not tool registrations.
+Missing dependencies do not hide this skill. Report command startup, version,
+account/permissions and task-specific live verification separately. Use task-owned
+artifact paths and existing user authorization; do not change shared accounts,
+Runtime/provider configuration, global security settings or unrelated work.
+See NOTICE.md and LICENSE for resource provenance. Runtime availability and
+upstream-entry suppression are owned by the integration layer.
+# iMessage
+Use `imsg` to read and send iMessage/SMS via macOS Messages.app.
+## Prerequisites
+Run `python3 "$SKILL_ROOT/scripts/readiness.py" imessage` from this installed
+skill's resolved directory. Help checks flags only; account, Full Disk Access,
+Automation, SMS forwarding and delivery require separate authorized live checks.
+- **macOS** with Messages.app signed in
+- Install: `brew install steipete/tap/imsg`
+- Grant Full Disk Access for terminal (System Settings → Privacy → Full Disk Access)
+- Grant Automation permission for Messages.app when prompted
+## When to Use
+- User asks to send an iMessage or text message
+- Reading iMessage conversation history
+- Checking recent Messages.app chats
+- Sending to phone numbers or Apple IDs
+## When NOT to Use
+- Telegram/Discord/Slack/WhatsApp messages → use the appropriate gateway channel
+- Group chat management (adding/removing members) → not supported
+- Bulk/mass messaging → always confirm with user first
+## Quick Reference
+### List Chats
+```bash
+imsg chats --limit 10 --json
+```
+### View History
+```bash
+# By chat ID
+imsg history --chat-id 1 --limit 20 --json
+# With attachments info
+imsg history --chat-id 1 --limit 20 --attachments --json
+```
+### Send Messages
+```bash
+# Text only
+imsg send --to "+14155551212" --text "Hello!"
+# With attachment
+imsg send --to "+14155551212" --text "Check this out" --file /path/to/image.jpg
+# Force iMessage or SMS
+imsg send --to "+14155551212" --text "Hi" --service imessage
+imsg send --to "+14155551212" --text "Hi" --service sms
+```
+### Watch for New Messages
+```bash
+imsg watch --chat-id 1 --attachments
+```
+Watch only for the user-authorized chat and duration; terminate the process at
+that deadline. Do not capture a continuous stream as an incidental diagnostic.
+## Service Options
+- `--service imessage` — Force iMessage (requires recipient has iMessage)
+- `--service sms` — Force SMS (green bubble)
+- `--service auto` — Let Messages.app decide (default)
+## Rules
+1. Use an explicitly authorized exact recipient/content; clarify ambiguous identities only
+2. **Never send to unknown numbers** without explicit user approval
+3. Verify both file existence and authorization to send that specific content
+4. **Don't spam** — rate-limit yourself
+## Example Workflow
+User: "Text mom that I'll be late"
+```bash
+# 1. Read candidates, then resolve the exact chat handle or phone number.
+imsg chats --limit 20 --json
+# 2. A display name is not unique. Clarify only if the authorized recipient is ambiguous.
+# 3. Send after confirmation
+imsg send --to "+1555123456" --text "I'll be late"
+```
+After an uncertain send, read back the target chat before retrying; do not create
+duplicate messages. A local command exit is not proof of remote delivery.

package/built-in-skills/prismer-imessage/scripts/readiness.py ADDED Viewed

@@ -0,0 +1,47 @@
+#!/usr/bin/env python3
+"""Read-only CLI startup probes. Never opens apps, TCC prompts or account data."""
+import argparse
+import json
+import platform
+import shutil
+import subprocess
+COMMANDS = {'notes': ['memo', 'notes', '--help'],
+            'reminders': ['remindctl', 'add', '--help'],
+            'imessage': ['imsg', 'send', '--help'],
+            'findmy': ['screencapture', '-h']}
+def probe(kind, run=subprocess.run):
+    result = {'kind': kind, 'os': platform.system(), 'binary': False,
+              'startup': False, 'account': 'untested', 'permissions': 'untested',
+              'live_operation': 'untested'}
+    if result['os'] != 'Darwin':
+        return {**result, 'reason': 'macOS execution host required'}
+    argv = COMMANDS[kind]
+    result['binary'] = bool(shutil.which(argv[0]))
+    if not result['binary']:
+        return {**result, 'reason': 'missing-command'}
+    try:
+        response = run(argv, capture_output=True, text=True, timeout=10, check=False)
+    except (OSError, subprocess.TimeoutExpired):
+        return {**result, 'reason': 'startup-failed'}
+    text = response.stdout + response.stderr
+    result['startup'] = response.returncode == 0 or (kind == 'findmy' and 'screencapture' in text and '-l' in text)
+    result['exit_code'] = response.returncode
+    if kind == 'reminders':
+        result['alarm_supported'] = '--alarm' in text
+    if kind == 'imessage':
+        result['send_flags_supported'] = all(flag in text for flag in ('--to', '--file', '--service'))
+    result['reason'] = 'help-only-not-ready-for-live-operation' if result['startup'] else 'startup-failed'
+    return result
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('kind', choices=COMMANDS)
+    args = parser.parse_args()
+    result = probe(args.kind)
+    print(json.dumps(result))
+    raise SystemExit(0 if result['startup'] else 1)

package/built-in-skills/prismer-manim-video/LICENSE ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2025 Nous Research
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/built-in-skills/prismer-manim-video/LICENSE.hermes ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2025 Nous Research
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/built-in-skills/prismer-manim-video/PROVENANCE.md ADDED Viewed

@@ -0,0 +1,7 @@
+# Resource provenance
+Imported from hermes-agent skills/creative/manim-video at 1a1f4a59e252e1dc0137e7b2e7bcc8b0381d19c4.
+Prismer receiver: prismer-manim-video. Native replacement: manim-video; this is not an alias. Preserve all source resources at their relative paths; merge packs live under references/manim-video/. Source file hashes and content review: docs/bugfix223/audit-creative-media-coverage.json. Local corrections and remaining live acceptance: docs/bugfix223/implementation-creative.md.
+LICENSE.hermes preserves Nous Research MIT terms. External libraries, fonts, services and media have separate licenses; no third-party binary assets were included.

package/built-in-skills/prismer-manim-video/README.md ADDED Viewed

@@ -0,0 +1,23 @@
+# Manim Video Skill
+Production pipeline for mathematical and technical animations using [Manim Community Edition](https://www.manim.community/).
+## What it does
+Creates 3Blue1Brown-style animated videos from text prompts. The agent handles the full pipeline: creative planning, Python code generation, rendering, scene stitching, and iterative refinement.
+## Use cases
+- **Concept explainers** — "Explain how neural networks learn"
+- **Equation derivations** — "Animate the proof of the Pythagorean theorem"
+- **Algorithm visualizations** — "Show how quicksort works step by step"
+- **Data stories** — "Animate our before/after performance metrics"
+- **Architecture diagrams** — "Show our microservice architecture building up"
+## Prerequisites
+Python 3.10+, Manim CE (`pip install manim`), LaTeX, ffmpeg.
+```bash
+bash scripts/setup.sh
+```