@prismer/sdk 2.0.7 → 2.0.8

package/dist/cli.js

@@ -163,7 +163,7 @@ var RealtimeWSClient = class extends TypedEmitter {
     if (this._state === "connected" || this._state === "connecting") return;
     this._state = "connecting";
     this.intentionalClose = false;
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       try {
         this.ws = new this.WS(this.wsUrl);
       } catch (err) {
@@ -185,7 +185,7 @@ var RealtimeWSClient = class extends TypedEmitter {
             this.emit("connected", void 0);
             this.ws.removeEventListener("message", onFirstMessage);
             this.ws.addEventListener("message", this.handleMessage);
-            resolve5();
+            resolve6();
           }
         } catch (_) {
         }
@@ -257,12 +257,12 @@ var RealtimeWSClient = class extends TypedEmitter {
   }
   ping() {
     const requestId = `ping-${++this.pingCounter}`;
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       const timer = setTimeout(() => {
         this.pendingPings.delete(requestId);
         reject(new Error("Ping timeout"));
       }, 1e4);
-      this.pendingPings.set(requestId, { resolve: resolve5, timer });
+      this.pendingPings.set(requestId, { resolve: resolve6, timer });
       this.sendRaw({ type: "ping", payload: { requestId } });
     });
   }
@@ -3868,6 +3868,19 @@ var FilesClient = class {
    */
   async sendFile(conversationId, input, opts) {
     const uploaded = await this.upload(input, opts);
+    const outboxDir = process.env.PRISMER_OUTBOX_DIR;
+    if (outboxDir) {
+      try {
+        const fsMod = await import("fs");
+        const pathMod = await import("path");
+        const srcPath = typeof input === "string" ? input : input.path;
+        if (srcPath && typeof srcPath === "string") {
+          await fsMod.promises.mkdir(outboxDir, { recursive: true });
+          fsMod.cpSync(srcPath, pathMod.join(outboxDir, pathMod.basename(srcPath)));
+        }
+      } catch {
+      }
+    }
     const msgRes = await this._r("POST", `/api/im/messages/${conversationId}`, {
       content: opts?.content || uploaded.fileName,
       type: "file",
@@ -4184,6 +4197,7 @@ var PrismerClient = class {
     this.timeout = config.timeout || 3e4;
     this.fetchFn = config.fetch || fetch;
     this.imAgent = config.imAgent;
+    this.imWorkspace = config.imWorkspace;
     if (config.identity) {
       if (config.identity === "auto" && this.apiKey) {
         this._identityReady = import_aip_sdk.AIPIdentity.fromApiKey(this.apiKey).then((id) => {
@@ -4280,6 +4294,7 @@ var PrismerClient = class {
     const headers = {};
     if (this.apiKey) headers["Authorization"] = `Bearer ${this.apiKey}`;
     if (this.imAgent) headers["X-IM-Agent"] = this.imAgent;
+    if (this.imWorkspace) headers["X-IM-Workspace"] = this.imWorkspace;
     return headers;
   }
   /**
@@ -4346,6 +4361,9 @@ var PrismerClient = class {
       if (this.imAgent) {
         headers["X-IM-Agent"] = this.imAgent;
       }
+      if (this.imWorkspace) {
+        headers["X-IM-Workspace"] = this.imWorkspace;
+      }
       if (opts?.headers) {
         for (const [k, v] of Object.entries(opts.headers)) headers[k] = v;
       }
@@ -5714,7 +5732,7 @@ function register3(parent, getIMClient2, _getAPIClient) {
       const maxIterations = 30;
       let lastStatus;
       for (let i = 0; i < maxIterations; i++) {
-        await new Promise((resolve5) => setTimeout(resolve5, 2e3));
+        await new Promise((resolve6) => setTimeout(resolve6, 2e3));
         if (!opts.json) process.stdout.write(".");
         const statusRes = await client.im.evolution.getReportStatus(traceId);
         if (!statusRes.ok) break;
@@ -6098,11 +6116,94 @@ function register3(parent, getIMClient2, _getAPIClient) {
 
 // src/commands/task.ts
 var import_node_fs = require("fs");
-var import_node_path = require("path");
+var import_node_path2 = require("path");
 var import_node_crypto = require("crypto");
+
+// src/commands/deliver-proxy.ts
+var import_node_path = require("path");
+function detectDeliverProxy(opts) {
+  const taskId = (opts?.taskId || opts?.runId || "").trim() || process.env.PRISMER_TASK_ID || process.env.PRISMER_RUN_ID || "";
+  if (!taskId) return null;
+  const port = (opts?.daemonPort || "").trim() || (process.env.PRISMER_DAEMON_PORT ?? "3210").trim() || "3210";
+  const ctx = {
+    daemonUrl: `http://127.0.0.1:${port}`,
+    taskId
+  };
+  const agentUsername = process.env.PRISMER_AGENT_USERNAME;
+  if (agentUsername) ctx.agentUsername = agentUsername;
+  const conversationId = (opts?.conversationId || "").trim() || process.env.PRISMER_CONVERSATION_ID;
+  if (conversationId) ctx.conversationId = conversationId;
+  return ctx;
+}
+async function proxyDeliver(ctx, filePath, mode, conversationId, messageId) {
+  const abs = (0, import_node_path.resolve)(filePath);
+  const body = {
+    taskId: ctx.taskId,
+    path: abs,
+    mode
+  };
+  const conv = conversationId ?? ctx.conversationId;
+  if (mode === "send") {
+    if (!conv) {
+      return { ok: false, status: 400, error: "conversationId is required for send mode" };
+    }
+    body.conversationId = conv;
+  }
+  if (mode === "message-attach") {
+    if (!conv) {
+      return { ok: false, status: 400, error: "conversationId is required for message-attach mode" };
+    }
+    if (!messageId) {
+      return { ok: false, status: 400, error: "messageId is required for message-attach mode" };
+    }
+    body.conversationId = conv;
+    body.messageId = messageId;
+  }
+  if (ctx.agentUsername) body.agentUsername = ctx.agentUsername;
+  let res;
+  try {
+    res = await fetch(`${ctx.daemonUrl}/local/deliver`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+  } catch (err) {
+    return {
+      ok: false,
+      status: 0,
+      error: `daemon unreachable at ${ctx.daemonUrl}/local/deliver: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  let parsed = {};
+  try {
+    parsed = await res.json();
+  } catch {
+  }
+  if (res.ok && parsed.ok) {
+    const out = { ok: true, status: res.status };
+    if (parsed.assetId) out.assetId = parsed.assetId;
+    return out;
+  }
+  return {
+    ok: false,
+    status: res.status,
+    error: parsed.error ?? `daemon returned ${res.status}`
+  };
+}
+
+// src/commands/task.ts
 var TASK_STATUSES = /* @__PURE__ */ new Set(["pending", "assigned", "running", "review", "completed", "failed", "cancelled"]);
 var TASK_PRIORITIES = /* @__PURE__ */ new Set(["low", "medium", "high", "urgent"]);
 var TASK_KINDS = /* @__PURE__ */ new Set(["work_item", "goal"]);
+function assertNotRunId(id) {
+  if (typeof id === "string" && id.startsWith("run_")) {
+    process.stderr.write(
+      `Error: '${id}' is a run id (run_\u2026); a chat reply doesn't need 'cloud task' ops \u2014 the platform closes the turn from your reply.
+`
+    );
+    process.exit(1);
+  }
+}
 function parseTaskStatus(raw) {
   if (!raw) return void 0;
   if (TASK_STATUSES.has(raw)) return raw;
@@ -6325,6 +6426,7 @@ ${tasks.length} task(s) listed.
     }
   });
   task.command("move-project <task-id> [project-id]").description("Move a task to a project, or use --unscoped to return it to workspace-level").option("--unscoped", "set projectId to null", false).option("--json", "output raw JSON response").action(async (taskId, projectId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       if (!opts.unscoped && !projectId) {
@@ -6351,6 +6453,7 @@ ${tasks.length} task(s) listed.
     }
   });
   task.command("get <task-id>").description("Get task details and logs").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.get(taskId);
@@ -6415,6 +6518,7 @@ Logs (${logs.length}):
     }
   });
   task.command("claim <task-id>").description("Claim a pending task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.claim(taskId);
@@ -6445,6 +6549,7 @@ Logs (${logs.length}):
     }
   });
   task.command("update <task-id>").description("Update a task").option("--title <title>", "new title").option("--description <description>", "new description").option("--status <status>", "new status").option("--progress <progress>", "progress (0.0 to 1.0)", parseFloat).option("--status-message <statusMessage>", "status message").option("--skip-checkpoint", "bypass local daemon checkpoint when transitioning to review (release201/09 \xA79.4a.7)", false).option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       if (opts.status === "review" && !opts.skipCheckpoint) {
@@ -6452,7 +6557,7 @@ Logs (${logs.length}):
         if (!checkpoint.ok) {
           if (checkpoint.pendingFiles && checkpoint.pendingFiles.length > 0) {
             process.stderr.write(
-              `[checkpoint] result/ \u542B ${checkpoint.pendingFiles.length} \u4E2A\u672A attach \u6587\u4EF6:
+              `[checkpoint] artifacts/ \u542B ${checkpoint.pendingFiles.length} \u4E2A\u672A attach \u6587\u4EF6:
 `
             );
             for (const f of checkpoint.pendingFiles) {
@@ -6513,6 +6618,7 @@ Logs (${logs.length}):
     }
   });
   task.command("complete <task-id>").description("Mark a task as complete").option("--result <result>", "result or output of the task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.complete(taskId, {
@@ -6547,6 +6653,7 @@ Logs (${logs.length}):
     }
   });
   task.command("fail <task-id>").description("Mark a task as failed").requiredOption("--error <error>", "error message describing why the task failed").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.fail(taskId, opts.error);
@@ -6579,6 +6686,7 @@ Logs (${logs.length}):
     }
   });
   task.command("approve <task-id>").description("Approve a completed task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.approve(taskId);
@@ -6609,6 +6717,7 @@ Logs (${logs.length}):
     }
   });
   task.command("reject <task-id>").description("Reject a task").requiredOption("--reason <reason>", "reason for rejection").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.reject(taskId, opts.reason);
@@ -6638,14 +6747,34 @@ Logs (${logs.length}):
       process.exit(1);
     }
   });
-  task.command("attach <path>").description("Attach a file to a task as a user-deliverable (release201/09 \xA79.4a.5)").option("--task <taskId>", "target task id; defaults to PRISMER_TASK_ID env").option("--name <displayName>", "override the display filename; defaults to basename(path)").option("--json", "output raw JSON response").action(async (filePath, opts) => {
-    const client = getIMClient2();
-    try {
-      const targetTaskId = opts.task ?? process.env.PRISMER_TASK_ID;
-      if (!targetTaskId) {
-        process.stderr.write("Error: --task is required (or set PRISMER_TASK_ID env)\n");
+  task.command("attach <path>").description("Attach a file to a task as a user-deliverable (release201/09 \xA79.4a.5)").option("--task <taskId>", "target task id; defaults to PRISMER_TASK_ID env").option("--name <displayName>", "override the display filename; defaults to basename(path)").option("--run-id <id>", "dispatch task id (alias for --task; from <execution_context>; env fallback PRISMER_TASK_ID)").option("--daemon-port <port>", "daemon local-server port (env fallback PRISMER_DAEMON_PORT, default 3210)").option("--json", "output raw JSON response").action(async (filePath, opts) => {
+    const targetTaskId = opts.task ?? opts.runId ?? process.env.PRISMER_TASK_ID;
+    if (!targetTaskId) {
+      process.stderr.write("Error: --task is required (or set PRISMER_TASK_ID env)\n");
+      process.exit(1);
+    }
+    assertNotRunId(targetTaskId);
+    const proxy = detectDeliverProxy({
+      taskId: targetTaskId,
+      daemonPort: opts.daemonPort
+    });
+    if (proxy) {
+      const result = await proxyDeliver(proxy, filePath, "task-attach");
+      if (!result.ok) {
+        process.stderr.write(`Error: ${result.error ?? "task attach failed"}
+`);
         process.exit(1);
       }
+      if (opts.json) {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return;
+      }
+      process.stdout.write(`Attached to task ${targetTaskId} (assetId: ${result.assetId ?? "-"})
+`);
+      return;
+    }
+    const client = getIMClient2();
+    try {
       const getRes = await client.im.tasks.get(targetTaskId);
       if (!getRes.ok || !getRes.data) {
         process.stderr.write(`Error: task ${targetTaskId} not found: ${getRes.error?.message ?? "unknown"}
@@ -6667,7 +6796,7 @@ Logs (${logs.length}):
         process.exit(1);
       }
       const contentHash = (0, import_node_crypto.createHash)("sha256").update(bytes).digest("hex");
-      const displayName = opts.name ?? (0, import_node_path.basename)(filePath);
+      const displayName = opts.name ?? (0, import_node_path2.basename)(filePath);
       const uploadRes = await client.im.assets.upload(bytes, {
         workspaceId: wsId,
         sourceTaskId: targetTaskId,
@@ -6716,6 +6845,7 @@ Logs (${logs.length}):
     }
   });
   task.command("cancel <task-id>").description("Cancel a task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.cancel(taskId);
@@ -6746,6 +6876,7 @@ Logs (${logs.length}):
     }
   });
   task.command("spec-set <task-id>").description("Owner writes / updates SPEC.md for a task").option("-f, --file <path>", "read SPEC.md content from a file").option("-m, --markdown <markdown>", "inline SPEC.md content").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       let md = "";
@@ -6776,6 +6907,7 @@ Logs (${logs.length}):
     }
   });
   task.command("spec-show <task-id>").description("Print SPEC.md content for a task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.spec.get(taskId);
@@ -6800,6 +6932,7 @@ Logs (${logs.length}):
     }
   });
   task.command("todo-add <task-id> <text...>").description("Append an item to the task TODO.md (assignee)").option("--depth <n>", "nesting depth (0..3)", (v) => parseInt(v, 10), 0).option("--json", "output raw JSON response").action(async (taskId, text, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.todo.add(taskId, {
@@ -6825,6 +6958,7 @@ Logs (${logs.length}):
     }
   });
   task.command("todo-done <task-id> <index>").description("Mark a TODO item as done").option("--json", "output raw JSON response").action(async (taskId, indexRaw, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const idx = parseInt(indexRaw, 10);
@@ -6851,6 +6985,7 @@ Logs (${logs.length}):
     }
   });
   task.command("todo-uncheck <task-id> <index>").description("Un-tick a TODO item").option("--json", "output raw JSON response").action(async (taskId, indexRaw, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const idx = parseInt(indexRaw, 10);
@@ -6875,6 +7010,7 @@ Logs (${logs.length}):
     }
   });
   task.command("todo-show <task-id>").description("Render TODO.md checklist + progress for a task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.todo.list(taskId);
@@ -6905,6 +7041,7 @@ Logs (${logs.length}):
     }
   });
   task.command("acceptance <task-id>").description("Show acceptance criteria + rolled-up status for a task").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.getAcceptance(taskId);
@@ -6937,6 +7074,7 @@ Logs (${logs.length}):
     "--mode <mode>",
     "verifyMode: qualitative | quantitative | agent-self-check | manual"
   ).requiredOption("--expectation <markdown>", "markdown describing what done looks like").option("--verifier-agent <agentId>", "verifier agent id (default = creator)").option("--weight <n>", "weight (numeric, default 1)", parseFloat).option("--optional", "mark this criterion optional (default required)").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const VALID = ["qualitative", "quantitative", "agent-self-check", "manual"];
@@ -6971,6 +7109,7 @@ Logs (${logs.length}):
   task.command("verify <task-id>").description(
     "Assignee self-check: list all agent-self-check criteria + mark them passed (run before status=review)"
   ).option("--note <note>", "note to attach to each self-check", "agent self-check via `cloud task verify`").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const view = await client.im.tasks.getAcceptance(taskId);
@@ -7015,6 +7154,7 @@ Logs (${logs.length}):
   task.command("verify-criterion <task-id> <criterion-id>").description(
     "Report verify outcome for one criterion. Used by reviewers (manual), verifier agents, and assignees (self-check)."
   ).requiredOption("--outcome <outcome>", "passed | failed | n/a | waived").option("--note <note>", "free-form markdown: method + result + repro steps").option("--evidence <ref...>", "evidence refs (repeatable; e.g. asset:<id>, url:..., taskRun:<id>)").option("--waive-reason <reason>", "required when --outcome waived").option("--json", "output raw JSON response").action(async (taskId, criterionId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const VALID = ["passed", "failed", "n/a", "waived"];
@@ -7049,6 +7189,7 @@ Logs (${logs.length}):
     }
   });
   task.command("apply-template <task-id>").description("Apply an acceptance criteria template to a task").requiredOption("--template <templateId>", "template id to apply").option("--json", "output raw JSON response").action(async (taskId, opts) => {
+    assertNotRunId(taskId);
     const client = getIMClient2();
     try {
       const res = await client.im.tasks.applyTemplate(taskId, opts.template);
@@ -8092,7 +8233,9 @@ function register9(parent, _getIMClient, _getAPIClient) {
 // src/commands/files.ts
 function register10(parent, getIMClient2, _getAPIClient) {
   const file = parent.command("file").description("File upload, transfer, quota, and type management");
-  file.command("upload <path>").description("Upload a file and get its upload ID and CDN URL").option("--mime <type>", "Override MIME type (e.g. image/png)").option("--json", "Output raw JSON response").action(async (filePath, opts) => {
+  file.command("upload <path>").description(
+    "Upload bytes only \u2192 returns an upload ID + CDN URL. NOT a delivery: nothing reaches the user. To deliver an artifact use `cloud deliver <path>`."
+  ).option("--mime <type>", "Override MIME type (e.g. image/png)").option("--json", "Output raw JSON response").action(async (filePath, opts) => {
     const client = getIMClient2();
     try {
       const uploadOpts = {};
@@ -8112,13 +8255,39 @@ function register10(parent, getIMClient2, _getAPIClient) {
 `);
       process.stdout.write(`MIME:      ${res.mimeType}
 `);
+      process.stdout.write(
+        "Note: this only uploaded bytes \u2014 nothing was delivered to the user. To deliver an artifact, run `cloud deliver <abs-path>`.\n"
+      );
     } catch (err) {
       process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}
 `);
       process.exit(1);
     }
   });
-  file.command("send <conversation-id> <path>").description("Upload a file and send it as a message in a conversation").option("-c, --content <text>", "Optional text caption to accompany the file").option("--mime <type>", "Override MIME type").option("--json", "Output raw JSON response").action(async (conversationId, filePath, opts) => {
+  file.command("send <conversation-id> <path>").description(
+    "Send a file as its OWN standalone message (ad-hoc sharing). For a final deliverable use `cloud deliver` instead \u2014 do not run both on the same file (double-delivery)."
+  ).option("-c, --content <text>", "Optional text caption to accompany the file").option("--mime <type>", "Override MIME type").option("--run-id <id>", "dispatch run/task id (from <execution_context>; env fallback PRISMER_TASK_ID/RUN_ID)").option("--conversation-id <id>", "conversation id (alternative source; positional <conversation-id> takes precedence)").option("--daemon-port <port>", "daemon local-server port (env fallback PRISMER_DAEMON_PORT, default 3210)").option("--json", "Output raw JSON response").action(async (conversationIdArg, filePath, opts) => {
+    const conversationId = conversationIdArg || opts.conversationId || "";
+    const proxy = detectDeliverProxy({
+      runId: opts.runId,
+      conversationId,
+      daemonPort: opts.daemonPort
+    });
+    if (proxy) {
+      const result = await proxyDeliver(proxy, filePath, "send", conversationId);
+      if (!result.ok) {
+        process.stderr.write(`Error: ${result.error ?? "delivery failed"}
+`);
+        process.exit(1);
+      }
+      if (opts.json) {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return;
+      }
+      process.stdout.write(`File sent to conversation ${conversationId} (assetId: ${result.assetId ?? "-"})
+`);
+      return;
+    }
     const client = getIMClient2();
     try {
       const sendOpts = {};
@@ -9482,13 +9651,13 @@ function parseIntOpt2(value) {
 var import_node_crypto2 = require("crypto");
 var import_node_fs3 = require("fs");
 var import_node_os = require("os");
-var import_node_path2 = require("path");
+var import_node_path3 = require("path");
 var import_node_child_process = require("child_process");
 function resolvePrismerRoot() {
-  return process.env.PRISMER_HOME ? (0, import_node_path2.resolve)(process.env.PRISMER_HOME) : (0, import_node_path2.join)((0, import_node_os.homedir)(), ".prismer");
+  return process.env.PRISMER_HOME ? (0, import_node_path3.resolve)(process.env.PRISMER_HOME) : (0, import_node_path3.join)((0, import_node_os.homedir)(), ".prismer");
 }
 function readDaemonConfig() {
-  const path6 = (0, import_node_path2.join)(resolvePrismerRoot(), "config.toml");
+  const path6 = (0, import_node_path3.join)(resolvePrismerRoot(), "config.toml");
   if (!(0, import_node_fs3.existsSync)(path6)) {
     throw new Error(`${path6} not found. Run \`prismer setup\` first.`);
   }
@@ -9501,7 +9670,7 @@ function readDaemonConfig() {
   return { daemonId: idMatch[1], apiKey: keyMatch[1] };
 }
 function resolveAgentDir(daemonId, agentId) {
-  return (0, import_node_path2.join)(resolvePrismerRoot(), "devices", daemonId, "agents", agentId);
+  return (0, import_node_path3.join)(resolvePrismerRoot(), "devices", daemonId, "agents", agentId);
 }
 function collectFiles(root, excludeBasenames) {
   const out = [];
@@ -9514,7 +9683,7 @@ function collectFiles(root, excludeBasenames) {
     }
     for (const name of entries) {
       if (excludeBasenames.has(name)) continue;
-      const full = (0, import_node_path2.join)(dir, name);
+      const full = (0, import_node_path3.join)(dir, name);
       let st;
       try {
         st = (0, import_node_fs3.statSync)(full);
@@ -9526,7 +9695,7 @@ function collectFiles(root, excludeBasenames) {
         const buf = (0, import_node_fs3.readFileSync)(full);
         const sha = (0, import_node_crypto2.createHash)("sha256").update(buf).digest("hex");
         out.push({
-          rel: (0, import_node_path2.relative)(root, full).split(import_node_path2.sep).join("/"),
+          rel: (0, import_node_path3.relative)(root, full).split(import_node_path3.sep).join("/"),
           sha,
           size: buf.byteLength
         });
@@ -9652,11 +9821,11 @@ function register17(parent, getIMClient2, _getAPIClient) {
       sha256,
       signature
     };
-    (0, import_node_fs3.writeFileSync)((0, import_node_path2.join)(agentDir, "transfer-manifest.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
-    const parentOfAgents = (0, import_node_path2.join)(resolvePrismerRoot(), "devices", daemonId);
-    const outputAbs = (0, import_node_path2.resolve)(opts.output);
+    (0, import_node_fs3.writeFileSync)((0, import_node_path3.join)(agentDir, "transfer-manifest.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+    const parentOfAgents = (0, import_node_path3.join)(resolvePrismerRoot(), "devices", daemonId);
+    const outputAbs = (0, import_node_path3.resolve)(opts.output);
     try {
-      (0, import_node_child_process.execFileSync)("tar", ["-czf", outputAbs, "-C", parentOfAgents, (0, import_node_path2.join)("agents", agentId)], { stdio: "inherit" });
+      (0, import_node_child_process.execFileSync)("tar", ["-czf", outputAbs, "-C", parentOfAgents, (0, import_node_path3.join)("agents", agentId)], { stdio: "inherit" });
     } catch (err) {
       process.stderr.write(`Error: tar failed: ${err.message}
 `);
@@ -9686,14 +9855,14 @@ function register17(parent, getIMClient2, _getAPIClient) {
     }
   });
   agent.command("import <tar-file>").description("release201/09 \xA79.7 \u2014 extract + rebind an agent transferred from another device").option("--json", "Output raw JSON result").action(async (tarFile, opts) => {
-    const tarAbs = (0, import_node_path2.resolve)(tarFile);
+    const tarAbs = (0, import_node_path3.resolve)(tarFile);
     if (!(0, import_node_fs3.existsSync)(tarAbs)) {
       process.stderr.write(`Error: tar file not found: ${tarAbs}
 `);
       process.exit(1);
     }
     const { daemonId: toDaemonId, apiKey } = readDaemonConfig();
-    const tmpRoot = (0, import_node_path2.join)(resolvePrismerRoot(), ".transfer-staging", `${Date.now()}`);
+    const tmpRoot = (0, import_node_path3.join)(resolvePrismerRoot(), ".transfer-staging", `${Date.now()}`);
     (0, import_node_fs3.mkdirSync)(tmpRoot, { recursive: true });
     try {
       (0, import_node_child_process.execFileSync)("tar", ["-xzf", tarAbs, "-C", tmpRoot], { stdio: "inherit" });
@@ -9703,7 +9872,7 @@ function register17(parent, getIMClient2, _getAPIClient) {
 `);
       process.exit(1);
     }
-    const agentsRoot = (0, import_node_path2.join)(tmpRoot, "agents");
+    const agentsRoot = (0, import_node_path3.join)(tmpRoot, "agents");
     if (!(0, import_node_fs3.existsSync)(agentsRoot)) {
       (0, import_node_fs3.rmSync)(tmpRoot, { recursive: true, force: true });
       process.stderr.write("Error: tar layout invalid \u2014 no agents/ root inside archive\n");
@@ -9717,8 +9886,8 @@ function register17(parent, getIMClient2, _getAPIClient) {
       process.exit(1);
     }
     const agentId = entries[0];
-    const stagedAgentDir = (0, import_node_path2.join)(agentsRoot, agentId);
-    const manifestPath = (0, import_node_path2.join)(stagedAgentDir, "transfer-manifest.json");
+    const stagedAgentDir = (0, import_node_path3.join)(agentsRoot, agentId);
+    const manifestPath = (0, import_node_path3.join)(stagedAgentDir, "transfer-manifest.json");
     if (!(0, import_node_fs3.existsSync)(manifestPath)) {
       (0, import_node_fs3.rmSync)(tmpRoot, { recursive: true, force: true });
       process.stderr.write("Error: transfer-manifest.json missing from archive\n");
@@ -9766,7 +9935,7 @@ function register17(parent, getIMClient2, _getAPIClient) {
       );
       process.exit(1);
     }
-    (0, import_node_fs3.mkdirSync)((0, import_node_path2.join)(resolvePrismerRoot(), "devices", toDaemonId, "agents"), { recursive: true });
+    (0, import_node_fs3.mkdirSync)((0, import_node_path3.join)(resolvePrismerRoot(), "devices", toDaemonId, "agents"), { recursive: true });
     try {
       (0, import_node_child_process.execFileSync)("mv", [stagedAgentDir, targetAgentDir]);
     } catch {
@@ -9817,7 +9986,7 @@ function register17(parent, getIMClient2, _getAPIClient) {
   });
   agent.command("cleanup-orphan").description("release201/09 \xA79.7.3 \u2014 list devices/*/agents/* dirs whose cloud binding points elsewhere").option("--delete", "Actually remove orphan dirs (default: dry-run)").option("--json", "Output raw JSON list").action(async (opts) => {
     const { daemonId } = readDaemonConfig();
-    const devicesRoot = (0, import_node_path2.join)(resolvePrismerRoot(), "devices");
+    const devicesRoot = (0, import_node_path3.join)(resolvePrismerRoot(), "devices");
     if (!(0, import_node_fs3.existsSync)(devicesRoot)) {
       if (opts.json) process.stdout.write("[]\n");
       else console.log("No devices/ dir yet.");
@@ -9826,10 +9995,10 @@ function register17(parent, getIMClient2, _getAPIClient) {
     const orphans = [];
     for (const did of (0, import_node_fs3.readdirSync)(devicesRoot)) {
       if (did === daemonId) continue;
-      const agentsRoot = (0, import_node_path2.join)(devicesRoot, did, "agents");
+      const agentsRoot = (0, import_node_path3.join)(devicesRoot, did, "agents");
       if (!(0, import_node_fs3.existsSync)(agentsRoot)) continue;
       for (const aid of (0, import_node_fs3.readdirSync)(agentsRoot)) {
-        const dir = (0, import_node_path2.join)(agentsRoot, aid);
+        const dir = (0, import_node_path3.join)(agentsRoot, aid);
         try {
           const st = (0, import_node_fs3.statSync)(dir);
           if (!st.isDirectory()) continue;
@@ -10578,16 +10747,32 @@ function getIMClient() {
   const cfg = readConfig();
   const env = cfg?.default?.environment || "production";
   const baseUrl = cfg?.default?.base_url || "";
+  const agentUsername = process.env.PRISMER_AGENT_USERNAME;
+  const imAgentOpt = agentUsername ? { imAgent: agentUsername } : {};
+  const workspaceId = process.env.PRISMER_WORKSPACE_ID;
+  const imWorkspaceOpt = workspaceId ? { imWorkspace: workspaceId } : {};
   const imToken = cfg?.auth?.im_token;
   if (imToken) {
-    return new PrismerClient({ apiKey: imToken, environment: env, ...baseUrl ? { baseUrl } : {} });
+    return new PrismerClient({
+      apiKey: imToken,
+      environment: env,
+      ...baseUrl ? { baseUrl } : {},
+      ...imAgentOpt,
+      ...imWorkspaceOpt
+    });
   }
   const apiKey = cfg?.default?.api_key;
   if (!apiKey) {
     errorLine('No credentials. Run "cloud setup" first (or "cloud setup --agent" / "cloud register <username>" for IM-JWT path).');
     process.exit(1);
   }
-  return new PrismerClient({ apiKey, environment: env, ...baseUrl ? { baseUrl } : {} });
+  return new PrismerClient({
+    apiKey,
+    environment: env,
+    ...baseUrl ? { baseUrl } : {},
+    ...imAgentOpt,
+    ...imWorkspaceOpt
+  });
 }
 function getAPIClient() {
   const cfg = readConfig();
@@ -10598,7 +10783,11 @@ function getAPIClient() {
   }
   const env = cfg?.default?.environment || "production";
   const baseUrl = cfg?.default?.base_url || "";
-  return new PrismerClient({ apiKey, environment: env, ...baseUrl ? { baseUrl } : {} });
+  const agentUsername = process.env.PRISMER_AGENT_USERNAME;
+  const imAgentOpt = agentUsername ? { imAgent: agentUsername } : {};
+  const workspaceId = process.env.PRISMER_WORKSPACE_ID;
+  const imWorkspaceOpt = workspaceId ? { imWorkspace: workspaceId } : {};
+  return new PrismerClient({ apiKey, environment: env, ...baseUrl ? { baseUrl } : {}, ...imAgentOpt, ...imWorkspaceOpt });
 }
 var program = new import_commander.Command();
 program.name("cloud").description("Prismer Cloud SDK CLI").version(cliVersion);
@@ -10997,6 +11186,59 @@ program.command("send").description("Send a direct message (shortcut for: im sen
   }
   success(`Message sent (conversation: ${res.data?.conversationId})`);
 });
+program.command("deliver <path>").description("Attach a file you wrote to your current reply (in-container explicit delivery)").option("--run-id <id>", "dispatch run/task id (from <execution_context>; env fallback PRISMER_TASK_ID/RUN_ID)").option("--conversation-id <id>", "conversation id (from <execution_context>; env fallback PRISMER_CONVERSATION_ID)").option("--daemon-port <port>", "daemon local-server port (env fallback PRISMER_DAEMON_PORT, default 3210)").option("--json", "JSON output").action(async (filePath, opts) => {
+  const proxy = detectDeliverProxy({
+    runId: opts.runId,
+    conversationId: opts.conversationId,
+    daemonPort: opts.daemonPort
+  });
+  if (!proxy) {
+    errorLine(
+      "cloud deliver only works inside a daemon dispatch (no PRISMER_TASK_ID/PRISMER_RUN_ID, and no --run-id flag). On hermes, pass --run-id <id> (and --conversation-id <id>) copied from <execution_context>. Outside a dispatch, use `cloud file send <conversationId> <path>`."
+    );
+    process.exit(1);
+  }
+  const result = await proxyDeliver(proxy, filePath, "attach");
+  if (!result.ok) {
+    errorLine(`Delivery failed: ${result.error ?? `daemon returned ${result.status}`}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  success(`Attached to your reply (assetId: ${result.assetId ?? "-"})`);
+});
+program.command("attach <messageId> <path>").description("Attach a file to a message you ALREADY sent (by its messageId)").option("--run-id <id>", "dispatch run/task id (from <execution_context>; env fallback PRISMER_TASK_ID/RUN_ID)").option("--conversation-id <id>", "conversation id of the target message (from <execution_context>; env fallback PRISMER_CONVERSATION_ID)").option("--daemon-port <port>", "daemon local-server port (env fallback PRISMER_DAEMON_PORT, default 3210)").option("--json", "JSON output").action(async (messageId, filePath, opts) => {
+  const proxy = detectDeliverProxy({
+    runId: opts.runId,
+    conversationId: opts.conversationId,
+    daemonPort: opts.daemonPort
+  });
+  if (!proxy) {
+    errorLine(
+      "cloud attach only works inside a daemon dispatch (no PRISMER_TASK_ID/PRISMER_RUN_ID, and no --run-id flag). On hermes, pass --run-id <id> and --conversation-id <id> copied from <execution_context>."
+    );
+    process.exit(1);
+  }
+  const conversationId = (opts.conversationId || proxy.conversationId || "").trim();
+  if (!conversationId) {
+    errorLine(
+      "cloud attach needs the conversation id of the target message. Set PRISMER_CONVERSATION_ID or pass --conversation-id <id> (copy it from <execution_context>)."
+    );
+    process.exit(1);
+  }
+  const result = await proxyDeliver(proxy, filePath, "message-attach", conversationId, messageId);
+  if (!result.ok) {
+    errorLine(`Attach failed: ${result.error ?? `daemon returned ${result.status}`}`);
+    process.exit(1);
+  }
+  if (opts.json) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  success(`Attached to message ${messageId} (assetId: ${result.assetId ?? "-"})`);
+});
 program.command("emit <namespace.name>").description("Emit a metric event (shortcut for: metric emit)").option("--value <value>", "metric value (number or string)").option("--dim <k=v>", "dimension (repeatable; workspaceId is required)", (val, prev = []) => {
   prev.push(val);
   return prev;

package/dist/index.d.mts

@@ -258,6 +258,13 @@ interface PrismerConfig {
     fetch?: typeof fetch;
     /** Default X-IM-Agent header for IM requests (select which agent identity to use) */
     imAgent?: string;
+    /**
+     * Default X-IM-Workspace header for IM requests (release202/09 §3.6 B).
+     * Lets the cloud agent-proxy reach its workspace-scoped fallback when the
+     * owner `userId`/`numericId` bridge can't resolve the agent. Optional —
+     * absent header preserves legacy behavior.
+     */
+    imWorkspace?: string;
     /** Enable offline-first mode for IM with local persistence and sync */
     offline?: OfflineConfig;
     /**
@@ -5284,6 +5291,7 @@ declare class PrismerClient {
     private readonly timeout;
     private readonly fetchFn;
     private readonly imAgent?;
+    private readonly imWorkspace?;
     private _offlineManager;
     /** AIP identity for auto-signing (v1.8.0 S1) */
     private _identity;

package/dist/index.d.ts

@@ -258,6 +258,13 @@ interface PrismerConfig {
     fetch?: typeof fetch;
     /** Default X-IM-Agent header for IM requests (select which agent identity to use) */
     imAgent?: string;
+    /**
+     * Default X-IM-Workspace header for IM requests (release202/09 §3.6 B).
+     * Lets the cloud agent-proxy reach its workspace-scoped fallback when the
+     * owner `userId`/`numericId` bridge can't resolve the agent. Optional —
+     * absent header preserves legacy behavior.
+     */
+    imWorkspace?: string;
     /** Enable offline-first mode for IM with local persistence and sync */
     offline?: OfflineConfig;
     /**
@@ -5284,6 +5291,7 @@ declare class PrismerClient {
     private readonly timeout;
     private readonly fetchFn;
     private readonly imAgent?;
+    private readonly imWorkspace?;
     private _offlineManager;
     /** AIP identity for auto-signing (v1.8.0 S1) */
     private _identity;

package/dist/index.js

@@ -5579,6 +5579,19 @@ var FilesClient = class {
    */
   async sendFile(conversationId, input, opts) {
     const uploaded = await this.upload(input, opts);
+    const outboxDir = process.env.PRISMER_OUTBOX_DIR;
+    if (outboxDir) {
+      try {
+        const fsMod = await import("fs");
+        const pathMod = await import("path");
+        const srcPath = typeof input === "string" ? input : input.path;
+        if (srcPath && typeof srcPath === "string") {
+          await fsMod.promises.mkdir(outboxDir, { recursive: true });
+          fsMod.cpSync(srcPath, pathMod.join(outboxDir, pathMod.basename(srcPath)));
+        }
+      } catch {
+      }
+    }
     const msgRes = await this._r("POST", `/api/im/messages/${conversationId}`, {
       content: opts?.content || uploaded.fileName,
       type: "file",
@@ -5895,6 +5908,7 @@ var PrismerClient = class {
     this.timeout = config.timeout || 3e4;
     this.fetchFn = config.fetch || fetch;
     this.imAgent = config.imAgent;
+    this.imWorkspace = config.imWorkspace;
     if (config.identity) {
       if (config.identity === "auto" && this.apiKey) {
         this._identityReady = import_aip_sdk.AIPIdentity.fromApiKey(this.apiKey).then((id) => {
@@ -5991,6 +6005,7 @@ var PrismerClient = class {
     const headers = {};
     if (this.apiKey) headers["Authorization"] = `Bearer ${this.apiKey}`;
     if (this.imAgent) headers["X-IM-Agent"] = this.imAgent;
+    if (this.imWorkspace) headers["X-IM-Workspace"] = this.imWorkspace;
     return headers;
   }
   /**
@@ -6057,6 +6072,9 @@ var PrismerClient = class {
       if (this.imAgent) {
         headers["X-IM-Agent"] = this.imAgent;
       }
+      if (this.imWorkspace) {
+        headers["X-IM-Workspace"] = this.imWorkspace;
+      }
       if (opts?.headers) {
         for (const [k, v] of Object.entries(opts.headers)) headers[k] = v;
       }

package/dist/index.mjs

@@ -5497,6 +5497,19 @@ var FilesClient = class {
    */
   async sendFile(conversationId, input, opts) {
     const uploaded = await this.upload(input, opts);
+    const outboxDir = process.env.PRISMER_OUTBOX_DIR;
+    if (outboxDir) {
+      try {
+        const fsMod = await import("fs");
+        const pathMod = await import("path");
+        const srcPath = typeof input === "string" ? input : input.path;
+        if (srcPath && typeof srcPath === "string") {
+          await fsMod.promises.mkdir(outboxDir, { recursive: true });
+          fsMod.cpSync(srcPath, pathMod.join(outboxDir, pathMod.basename(srcPath)));
+        }
+      } catch {
+      }
+    }
     const msgRes = await this._r("POST", `/api/im/messages/${conversationId}`, {
       content: opts?.content || uploaded.fileName,
       type: "file",
@@ -5813,6 +5826,7 @@ var PrismerClient = class {
     this.timeout = config.timeout || 3e4;
     this.fetchFn = config.fetch || fetch;
     this.imAgent = config.imAgent;
+    this.imWorkspace = config.imWorkspace;
     if (config.identity) {
       if (config.identity === "auto" && this.apiKey) {
         this._identityReady = AIPIdentity.fromApiKey(this.apiKey).then((id) => {
@@ -5909,6 +5923,7 @@ var PrismerClient = class {
     const headers = {};
     if (this.apiKey) headers["Authorization"] = `Bearer ${this.apiKey}`;
     if (this.imAgent) headers["X-IM-Agent"] = this.imAgent;
+    if (this.imWorkspace) headers["X-IM-Workspace"] = this.imWorkspace;
     return headers;
   }
   /**
@@ -5975,6 +5990,9 @@ var PrismerClient = class {
       if (this.imAgent) {
         headers["X-IM-Agent"] = this.imAgent;
       }
+      if (this.imWorkspace) {
+        headers["X-IM-Workspace"] = this.imWorkspace;
+      }
       if (opts?.headers) {
         for (const [k, v] of Object.entries(opts.headers)) headers[k] = v;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prismer/sdk",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Official TypeScript SDK for Prismer Cloud API",
   "main": "dist/index.js",
   "module": "dist/index.mjs",