@rudderhq/cli 0.2.10-canary.9 → 0.2.10

package/dist/index.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 };
 
 // ../packages/shared/dist/constants.js
-var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_LEVELS, GOAL_STATUSES, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
+var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_LEVELS, GOAL_STATUSES, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, ORGANIZATION_RESOURCE_SOURCE_TYPES, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
 var init_constants = __esm({
   "../packages/shared/dist/constants.js"() {
     "use strict";
@@ -150,6 +150,10 @@ var init_constants = __esm({
       "url",
       "connector_object"
     ];
+    ORGANIZATION_RESOURCE_SOURCE_TYPES = [
+      "external",
+      "library"
+    ];
     PROJECT_RESOURCE_ATTACHMENT_ROLES = [
       "working_set",
       "reference",
@@ -511,7 +515,7 @@ var init_budget = __esm({
 
 // ../packages/shared/dist/validators/organization.js
 import { z as z3 } from "zod";
-var logoAssetIdSchema, brandColorSchema, createOrganizationSchema, updateOrganizationSchema, updateOrganizationBrandingSchema, updateOrganizationWorkspaceFileSchema;
+var logoAssetIdSchema, brandColorSchema, createOrganizationSchema, updateOrganizationSchema, updateOrganizationBrandingSchema, updateOrganizationWorkspaceFileSchema, createOrganizationWorkspaceFileSchema, createOrganizationWorkspaceDirectorySchema, renameOrganizationWorkspaceEntrySchema, moveOrganizationWorkspaceEntrySchema;
 var init_organization = __esm({
   "../packages/shared/dist/validators/organization.js"() {
     "use strict";
@@ -543,6 +547,19 @@ var init_organization = __esm({
     updateOrganizationWorkspaceFileSchema = z3.object({
       content: z3.string()
     });
+    createOrganizationWorkspaceFileSchema = z3.object({
+      filePath: z3.string().trim().min(1).max(1e3),
+      content: z3.string().optional().default("")
+    });
+    createOrganizationWorkspaceDirectorySchema = z3.object({
+      directoryPath: z3.string().trim().min(1).max(1e3)
+    });
+    renameOrganizationWorkspaceEntrySchema = z3.object({
+      name: z3.string().trim().min(1).max(255)
+    });
+    moveOrganizationWorkspaceEntrySchema = z3.object({
+      destinationDirectoryPath: z3.string().trim().max(1e3).default("")
+    });
   }
 });
 
@@ -706,27 +723,67 @@ var init_organization_intelligence_profile = __esm({
 
 // ../packages/shared/dist/validators/resource.js
 import { z as z7 } from "zod";
-var organizationResourceKindSchema, projectResourceAttachmentRoleSchema, createOrganizationResourceSchema, updateOrganizationResourceSchema, projectResourceAttachmentInputSchema, updateProjectResourceAttachmentSchema, createProjectInlineResourceSchema;
+function isValidLibraryProjectPath(locator, kind) {
+  const trimmed = locator.trim();
+  if (!trimmed)
+    return false;
+  if (LIBRARY_PATH_SCHEME_RE.test(trimmed))
+    return false;
+  if (trimmed.startsWith("/") || trimmed.startsWith("\\") || trimmed.startsWith("~"))
+    return false;
+  if (trimmed.includes("\\"))
+    return false;
+  const parts = trimmed.split("/");
+  if (!parts.every((part) => part.length > 0 && part !== "." && part !== ".."))
+    return false;
+  if (parts[0] !== "projects")
+    return false;
+  return kind === "directory" ? parts.length >= 2 : parts.length >= 3;
+}
+function validateLibraryResourceContract(value, ctx) {
+  if (value.sourceType !== "library")
+    return;
+  if (value.kind !== void 0 && value.kind !== "file" && value.kind !== "directory") {
+    ctx.addIssue({
+      code: z7.ZodIssueCode.custom,
+      message: "Library resources must be file or directory resources.",
+      path: ["kind"]
+    });
+  }
+  if (value.locator !== void 0 && !isValidLibraryProjectPath(value.locator, value.kind)) {
+    ctx.addIssue({
+      code: z7.ZodIssueCode.custom,
+      message: "Library resource locator must be a normalized project Library path.",
+      path: ["locator"]
+    });
+  }
+}
+var organizationResourceKindSchema, organizationResourceSourceTypeSchema, projectResourceAttachmentRoleSchema, LIBRARY_PATH_SCHEME_RE, createOrganizationResourceBaseSchema, createOrganizationResourceSchema, updateOrganizationResourceSchema, projectResourceAttachmentInputSchema, updateProjectResourceAttachmentSchema, createProjectInlineResourceSchema;
 var init_resource = __esm({
   "../packages/shared/dist/validators/resource.js"() {
     "use strict";
     init_constants();
     organizationResourceKindSchema = z7.enum(ORGANIZATION_RESOURCE_KINDS);
+    organizationResourceSourceTypeSchema = z7.enum(ORGANIZATION_RESOURCE_SOURCE_TYPES);
     projectResourceAttachmentRoleSchema = z7.enum(PROJECT_RESOURCE_ATTACHMENT_ROLES);
-    createOrganizationResourceSchema = z7.object({
+    LIBRARY_PATH_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
+    createOrganizationResourceBaseSchema = z7.object({
       name: z7.string().min(1),
       kind: organizationResourceKindSchema,
+      sourceType: organizationResourceSourceTypeSchema.optional().default("external"),
       locator: z7.string().min(1),
       description: z7.string().optional().nullable(),
       metadata: z7.record(z7.unknown()).optional().nullable()
     });
+    createOrganizationResourceSchema = createOrganizationResourceBaseSchema.superRefine(validateLibraryResourceContract);
     updateOrganizationResourceSchema = z7.object({
       name: z7.string().min(1).optional(),
       kind: organizationResourceKindSchema.optional(),
+      sourceType: organizationResourceSourceTypeSchema.optional(),
       locator: z7.string().min(1).optional(),
       description: z7.string().optional().nullable(),
       metadata: z7.record(z7.unknown()).optional().nullable()
-    }).strict();
+    }).strict().superRefine(validateLibraryResourceContract);
     projectResourceAttachmentInputSchema = z7.object({
       resourceId: z7.string().uuid(),
       role: projectResourceAttachmentRoleSchema.optional(),
@@ -738,11 +795,11 @@ var init_resource = __esm({
       note: z7.string().optional().nullable(),
       sortOrder: z7.number().int().nonnegative().optional()
     }).strict();
-    createProjectInlineResourceSchema = createOrganizationResourceSchema.extend({
+    createProjectInlineResourceSchema = createOrganizationResourceBaseSchema.extend({
       role: projectResourceAttachmentRoleSchema.optional(),
       note: z7.string().optional().nullable(),
       sortOrder: z7.number().int().nonnegative().optional()
-    }).strict();
+    }).strict().superRefine(validateLibraryResourceContract);
   }
 });
 
@@ -863,7 +920,7 @@ var init_chat = __esm({
       status: z8.enum(AUTOMATION_STATUSES).optional().default("active"),
       concurrencyPolicy: z8.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
       catchUpPolicy: z8.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
-      outputMode: z8.enum(AUTOMATION_OUTPUT_MODES).optional().default("chat_output"),
+      outputMode: z8.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
       schedule: z8.object({
         cronExpression: z8.string().trim().min(1),
         timezone: z8.string().trim().min(1),
@@ -1589,7 +1646,7 @@ var init_project = __esm({
 
 // ../packages/shared/dist/validators/issue.js
 import { z as z14 } from "zod";
-var executionWorkspaceStrategySchema2, issueExecutionWorkspaceSettingsSchema, issueAssigneeAdapterOverridesSchema, createIssueSchema, createIssueLabelSchema, updateIssueLabelSchema, updateIssueSchema, reorderIssueSchema, checkoutIssueSchema, addIssueCommentSchema, reportIssueCommitSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, createIssueWorkspaceAttachmentSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, issueDocumentKeySchema, upsertIssueDocumentSchema;
+var executionWorkspaceStrategySchema2, issueExecutionWorkspaceSettingsSchema, issueAssigneeAdapterOverridesSchema, createIssueSchema, createIssueLabelSchema, updateIssueLabelSchema, updateIssueSchema, reorderIssueSchema, checkoutIssueSchema, addIssueCommentSchema, reportIssueCommitSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, createIssueWorkspaceAttachmentSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, issueDocumentKeySchema, upsertIssueDocumentSchema, createLibraryDocumentSchema, updateLibraryDocumentSchema, restoreLibraryDocumentRevisionSchema;
 var init_issue = __esm({
   "../packages/shared/dist/validators/issue.js"() {
     "use strict";
@@ -1698,6 +1755,22 @@ var init_issue = __esm({
       changeSummary: z14.string().trim().max(500).nullable().optional(),
       baseRevisionId: z14.string().uuid().nullable().optional()
     });
+    createLibraryDocumentSchema = z14.object({
+      title: z14.string().trim().max(200).nullable().optional(),
+      format: issueDocumentFormatSchema.optional().default("markdown"),
+      body: z14.string().max(524288).optional().default(""),
+      changeSummary: z14.string().trim().max(500).nullable().optional()
+    });
+    updateLibraryDocumentSchema = z14.object({
+      title: z14.string().trim().max(200).nullable().optional(),
+      format: issueDocumentFormatSchema.optional().default("markdown"),
+      body: z14.string().max(524288),
+      changeSummary: z14.string().trim().max(500).nullable().optional(),
+      baseRevisionId: z14.string().uuid().nullable().optional()
+    });
+    restoreLibraryDocumentRevisionSchema = z14.object({
+      changeSummary: z14.string().trim().max(500).nullable().optional()
+    });
   }
 });
 
@@ -1860,7 +1933,7 @@ var init_automation = __esm({
       status: z20.enum(AUTOMATION_STATUSES).optional().default("active"),
       concurrencyPolicy: z20.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
       catchUpPolicy: z20.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
-      outputMode: z20.enum(AUTOMATION_OUTPUT_MODES).optional().default("chat_output"),
+      outputMode: z20.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
       chatConversationId: z20.string().uuid().optional().nullable().default(null)
     });
     createAutomationSchema = automationBodySchema.superRefine((value, ctx) => {
@@ -2628,12 +2701,16 @@ var init_organization_skill_reference = __esm({
 });
 
 // ../packages/shared/dist/project-mentions.js
-var PROJECT_COLOR_VALUES;
+var AGENT_AVATAR_UUID_RE, AGENT_ASSET_ICON_RE, AGENT_DICEBEAR_NOTIONISTS_ICON_RE, PROJECT_COLOR_VALUES, AGENT_AVATAR_BACKGROUND_VALUES;
 var init_project_mentions = __esm({
   "../packages/shared/dist/project-mentions.js"() {
     "use strict";
     init_constants();
+    AGENT_AVATAR_UUID_RE = "[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}";
+    AGENT_ASSET_ICON_RE = new RegExp(`^asset:${AGENT_AVATAR_UUID_RE}(?:\\?bg=([a-z0-9-]+))?$`, "i");
+    AGENT_DICEBEAR_NOTIONISTS_ICON_RE = new RegExp(`^${AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX}${AGENT_AVATAR_UUID_RE}(?:\\?bg=([a-z0-9-]+))?$`, "i");
     PROJECT_COLOR_VALUES = new Set(PROJECT_COLORS);
+    AGENT_AVATAR_BACKGROUND_VALUES = new Set(AGENT_AVATAR_BACKGROUND_PRESET_IDS);
   }
 });
 
@@ -4215,10 +4292,10 @@ var init_install = __esm({
     init_home();
     RUNTIME_NPM_PACKAGE_NAME = "@rudderhq/server";
     RUNTIME_METADATA_FILE = "runtime.json";
-    DEFAULT_RUNTIME_CACHE_MAX_ENTRIES = 5;
+    DEFAULT_RUNTIME_CACHE_MAX_ENTRIES = 2;
     DEFAULT_RUNTIME_CACHE_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
     DEFAULT_RUNTIME_CACHE_MAX_BYTES = 2 * 1024 * 1024 * 1024;
-    DEFAULT_RUNTIME_CACHE_KEEP_PREVIOUS = 1;
+    DEFAULT_RUNTIME_CACHE_KEEP_PREVIOUS = 0;
     RUNTIME_NPM_INSTALL_FLAGS = ["--omit=dev", "--include=optional", "--no-audit", "--no-fund"];
     RuntimeInstallError = class extends Error {
       cacheDir;
@@ -6470,7 +6547,7 @@ init_install();
 import { spawn, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash } from "node:crypto";
 import { constants as fsConstants, createWriteStream, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
-import { access, chmod, copyFile, cp, mkdtemp, mkdir as mkdir2, readFile as readFile2, readdir as readdir2, rm as rm2, writeFile as writeFile2 } from "node:fs/promises";
+import { access, chmod, copyFile, cp, mkdtemp, mkdir as mkdir2, readFile as readFile2, readdir as readdir2, rm as rm2, stat as stat2, utimes, writeFile as writeFile2 } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import path11 from "node:path";
 import { Readable, Transform } from "node:stream";
@@ -6601,6 +6678,10 @@ var DESKTOP_METADATA_FILE = ".rudder-desktop-install.json";
 var DESKTOP_CHECKSUM_ASSET_NAME = "SHASUMS256.txt";
 var DESKTOP_ASSET_CACHE_DIR = "desktop-assets";
 var GITHUB_ASSET_DOWNLOAD_ACCEPT = "application/octet-stream";
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_ENTRIES = 2;
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_BYTES = 768 * 1024 * 1024;
+var DEFAULT_DESKTOP_ASSET_CACHE_KEEP_PREVIOUS = 1;
 function normalizeProgressTotal(totalBytes) {
   return typeof totalBytes === "number" && Number.isFinite(totalBytes) && totalBytes > 0 ? totalBytes : null;
 }
@@ -7065,12 +7146,158 @@ function resolveDesktopAssetCacheDir(assetChecksum, homeDir = resolveRudderHomeD
 function resolveDesktopCachedAssetPath(assetName, assetChecksum, homeDir = resolveRudderHomeDir()) {
   return path11.join(resolveDesktopAssetCacheDir(assetChecksum, homeDir), path11.basename(assetName));
 }
+async function pruneDesktopAssetCache(options = {}) {
+  const homeDir = options.homeDir ?? resolveRudderHomeDir();
+  const entries = await scanDesktopAssetCacheEntries(homeDir);
+  const protectedChecksums = resolveProtectedDesktopAssetChecksums(entries, {
+    protectedChecksums: options.protectedChecksums ?? [],
+    keepPreviousEntries: options.keepPreviousEntries ?? DEFAULT_DESKTOP_ASSET_CACHE_KEEP_PREVIOUS
+  });
+  const protectedSet = new Set(protectedChecksums);
+  const deletions = planDesktopAssetCacheDeletions(entries, {
+    nowMs: (options.now ?? /* @__PURE__ */ new Date()).getTime(),
+    protectedChecksums: protectedSet,
+    maxEntries: options.maxEntries ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_ENTRIES,
+    maxAgeMs: options.maxAgeMs ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_AGE_MS,
+    maxTotalBytes: options.maxTotalBytes ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_BYTES
+  });
+  const deleted = [];
+  const warnings = [];
+  for (const entry of deletions) {
+    try {
+      await rm2(entry.cacheDir, { recursive: true, force: true });
+      deleted.push({
+        cacheDir: entry.cacheDir,
+        checksum: entry.checksum,
+        sizeBytes: entry.sizeBytes
+      });
+    } catch (error) {
+      warnings.push(
+        `Failed to remove Desktop asset cache ${entry.cacheDir}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
+  return {
+    scanned: entries.length,
+    deleted,
+    protectedChecksums,
+    freedBytes: deleted.reduce((total, entry) => total + entry.sizeBytes, 0),
+    warnings
+  };
+}
+async function maybePruneDesktopAssetCache(options) {
+  const result = await pruneDesktopAssetCache(options);
+  return result.deleted.length > 0 || result.warnings.length > 0 ? result : null;
+}
+async function scanDesktopAssetCacheEntries(homeDir) {
+  const cacheRoot = path11.join(homeDir, DESKTOP_ASSET_CACHE_DIR);
+  const dirents = await readdir2(cacheRoot, { withFileTypes: true }).catch(() => null);
+  if (!dirents) return [];
+  const entries = [];
+  for (const dirent of dirents) {
+    if (!dirent.isDirectory()) continue;
+    let checksum;
+    try {
+      checksum = normalizeDesktopAssetChecksum(dirent.name);
+    } catch {
+      continue;
+    }
+    const cacheDir = path11.join(cacheRoot, dirent.name);
+    const stats = await desktopCacheDirectoryStats(cacheDir);
+    entries.push({
+      cacheDir,
+      checksum,
+      lastUsedAtMs: stats.lastUsedAtMs,
+      sizeBytes: stats.sizeBytes
+    });
+  }
+  return entries;
+}
+async function desktopCacheDirectoryStats(targetPath) {
+  const fallbackStat = await stat2(targetPath).catch(() => null);
+  const dirents = await readdir2(targetPath, { withFileTypes: true }).catch(() => null);
+  if (!dirents) {
+    return {
+      sizeBytes: 0,
+      lastUsedAtMs: Number(fallbackStat?.mtimeMs ?? 0)
+    };
+  }
+  let sizeBytes = 0;
+  let lastUsedAtMs = Number(fallbackStat?.mtimeMs ?? 0);
+  for (const dirent of dirents) {
+    if (dirent.isSymbolicLink()) continue;
+    const entryPath = path11.join(targetPath, dirent.name);
+    const entryStat = await stat2(entryPath).catch(() => null);
+    if (!entryStat) continue;
+    lastUsedAtMs = Math.max(lastUsedAtMs, Number(entryStat.mtimeMs ?? 0));
+    if (dirent.isDirectory()) {
+      const nested = await desktopCacheDirectoryStats(entryPath);
+      sizeBytes += nested.sizeBytes;
+      lastUsedAtMs = Math.max(lastUsedAtMs, nested.lastUsedAtMs);
+      continue;
+    }
+    sizeBytes += Number(entryStat.size ?? 0);
+  }
+  return { sizeBytes, lastUsedAtMs };
+}
+function resolveProtectedDesktopAssetChecksums(entries, options) {
+  const protectedChecksums = /* @__PURE__ */ new Set();
+  for (const checksum of options.protectedChecksums) {
+    try {
+      protectedChecksums.add(normalizeDesktopAssetChecksum(checksum));
+    } catch {
+      continue;
+    }
+  }
+  const previousEntries = [...entries].filter((entry) => !protectedChecksums.has(entry.checksum)).sort((a, b) => b.lastUsedAtMs - a.lastUsedAtMs);
+  for (const entry of previousEntries.slice(0, Math.max(0, options.keepPreviousEntries))) {
+    protectedChecksums.add(entry.checksum);
+  }
+  return [...protectedChecksums].sort();
+}
+function planDesktopAssetCacheDeletions(entries, options) {
+  const deletions = /* @__PURE__ */ new Set();
+  const oldestFirst = [...entries].sort((a, b) => a.lastUsedAtMs - b.lastUsedAtMs);
+  const canDelete = (entry) => !options.protectedChecksums.has(entry.checksum) && !deletions.has(entry.cacheDir);
+  const mark = (entry) => {
+    if (canDelete(entry)) deletions.add(entry.cacheDir);
+  };
+  if (options.maxAgeMs >= 0) {
+    for (const entry of oldestFirst) {
+      if (options.nowMs - entry.lastUsedAtMs > options.maxAgeMs) mark(entry);
+    }
+  }
+  if (options.maxEntries > 0) {
+    for (const entry of oldestFirst) {
+      if (entries.length - deletions.size <= options.maxEntries) break;
+      mark(entry);
+    }
+  }
+  if (options.maxTotalBytes > 0) {
+    let remainingBytes = entries.reduce((total, entry) => total + entry.sizeBytes, 0) - [...deletions].reduce((total, cacheDir) => total + (entries.find((entry) => entry.cacheDir === cacheDir)?.sizeBytes ?? 0), 0);
+    for (const entry of oldestFirst) {
+      if (remainingBytes <= options.maxTotalBytes) break;
+      if (!canDelete(entry)) continue;
+      deletions.add(entry.cacheDir);
+      remainingBytes -= entry.sizeBytes;
+    }
+  }
+  return entries.filter((entry) => deletions.has(entry.cacheDir));
+}
+async function touchDesktopCachedAsset(cachePath) {
+  try {
+    const now = /* @__PURE__ */ new Date();
+    await utimes(cachePath, now, now);
+  } catch {
+  }
+}
 async function downloadDesktopAssetWithCache(asset, expectedChecksum, options = {}) {
   const normalizedChecksum = normalizeDesktopAssetChecksum(expectedChecksum);
   const cachePath = resolveDesktopCachedAssetPath(asset.name, normalizedChecksum, options.homeDir);
   if (await pathExists(cachePath)) {
     try {
       const checksum = assertChecksumMatch(cachePath, normalizedChecksum);
+      await touchDesktopCachedAsset(cachePath);
       return { path: cachePath, checksum, cacheStatus: "hit" };
     } catch {
       await rm2(cachePath, { force: true });
@@ -7677,6 +7904,17 @@ async function startCommand(opts) {
       );
       await writeInstallMetadata(installPaths, releaseTag, selectedAsset.name, checksum, selectedAssetKind);
     }
+    const desktopAssetPrune = await maybePruneDesktopAssetCache({
+      protectedChecksums: [expectedChecksum]
+    });
+    if (desktopAssetPrune) {
+      if (desktopAssetPrune.deleted.length > 0) {
+        p13.log.success(
+          `Pruned ${desktopAssetPrune.deleted.length} old Desktop asset cache(s), freed ${formatBytes(desktopAssetPrune.freedBytes)}.`
+        );
+      }
+      for (const warning of desktopAssetPrune.warnings) p13.log.warn(warning);
+    }
     if (opts.open !== false) {
       await runStartPhase(
         "Launching Rudder Desktop...",
@@ -8148,41 +8386,41 @@ var RudderApiClient = class {
     this.runId = opts.runId?.trim() || void 0;
     this.recoverAuth = opts.recoverAuth;
   }
-  get(path22, opts) {
-    return this.request(path22, { method: "GET" }, opts);
+  get(path23, opts) {
+    return this.request(path23, { method: "GET" }, opts);
   }
-  post(path22, body, opts) {
-    return this.request(path22, {
+  post(path23, body, opts) {
+    return this.request(path23, {
       method: "POST",
       body: body === void 0 ? void 0 : JSON.stringify(body)
     }, opts);
   }
-  postForm(path22, form, opts) {
-    return this.request(path22, {
+  postForm(path23, form, opts) {
+    return this.request(path23, {
       method: "POST",
       body: form
     }, opts);
   }
-  patch(path22, body, opts) {
-    return this.request(path22, {
+  patch(path23, body, opts) {
+    return this.request(path23, {
       method: "PATCH",
       body: body === void 0 ? void 0 : JSON.stringify(body)
     }, opts);
   }
-  put(path22, body, opts) {
-    return this.request(path22, {
+  put(path23, body, opts) {
+    return this.request(path23, {
       method: "PUT",
       body: body === void 0 ? void 0 : JSON.stringify(body)
     }, opts);
   }
-  delete(path22, opts) {
-    return this.request(path22, { method: "DELETE" }, opts);
+  delete(path23, opts) {
+    return this.request(path23, { method: "DELETE" }, opts);
   }
   setApiKey(apiKey) {
     this.apiKey = apiKey?.trim() || void 0;
   }
-  async request(path22, init, opts, hasRetriedAuth = false) {
-    const url = buildUrl(this.apiBase, path22);
+  async request(path23, init, opts, hasRetriedAuth = false) {
+    const url = buildUrl(this.apiBase, path23);
     const headers = {
       accept: "application/json",
       ...toStringRecord(init.headers)
@@ -8212,13 +8450,13 @@ var RudderApiClient = class {
       const apiError = await toApiError(response);
       if (!hasRetriedAuth && this.recoverAuth) {
         const recoveredToken = await this.recoverAuth({
-          path: path22,
+          path: path23,
           method: String(init.method ?? "GET").toUpperCase(),
           error: apiError
         });
         if (recoveredToken) {
           this.setApiKey(recoveredToken);
-          return this.request(path22, init, opts, true);
+          return this.request(path23, init, opts, true);
         }
       }
       throw apiError;
@@ -8237,8 +8475,8 @@ function shouldAttachAgentContext(method) {
   const normalized = String(method ?? "GET").toUpperCase();
   return normalized !== "GET" && normalized !== "HEAD";
 }
-function buildUrl(apiBase, path22) {
-  const normalizedPath = path22.startsWith("/") ? path22 : `/${path22}`;
+function buildUrl(apiBase, path23) {
+  const normalizedPath = path23.startsWith("/") ? path23 : `/${path23}`;
   const [pathname, query] = normalizedPath.split("?");
   const url = new URL2(apiBase);
   url.pathname = `${url.pathname.replace(/\/+$/, "")}${pathname}`;
@@ -8782,7 +9020,7 @@ function registerContextCommands(program) {
 }
 
 // src/commands/client/company.ts
-import { mkdir as mkdir3, readdir as readdir3, readFile as readFile3, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir3, readdir as readdir3, readFile as readFile3, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
 import path15 from "node:path";
 import * as p15 from "@clack/prompts";
 import pc14 from "picocolors";
@@ -9009,13 +9247,13 @@ function buildImportSelectionCatalog(preview) {
       files: Array.from(organizationFiles).sort((left, right) => left.localeCompare(right))
     },
     projects: preview.manifest.projects.map((project) => {
-      const projectPath = normalizePortablePath(project.path);
-      const projectDir = projectPath.includes("/") ? projectPath.slice(0, projectPath.lastIndexOf("/")) : "";
+      const projectPath2 = normalizePortablePath(project.path);
+      const projectDir = projectPath2.includes("/") ? projectPath2.slice(0, projectPath2.lastIndexOf("/")) : "";
       return {
         key: project.slug,
         label: project.name,
         hint: project.slug,
-        files: collectEntityFiles(preview.files, projectPath, {
+        files: collectEntityFiles(preview.files, projectPath2, {
           excludePrefixes: projectDir ? [`${projectDir}/issues`] : []
         })
       };
@@ -9517,7 +9755,7 @@ function normalizeGithubImportSource(input, refOverride) {
 }
 async function pathExists2(inputPath) {
   try {
-    await stat2(path15.resolve(inputPath));
+    await stat3(path15.resolve(inputPath));
     return true;
   } catch {
     return false;
@@ -9540,7 +9778,7 @@ async function collectPackageFiles(root, current, files) {
 }
 async function resolveInlineSourceFromPath(inputPath) {
   const resolved = path15.resolve(inputPath);
-  const resolvedStat = await stat2(resolved);
+  const resolvedStat = await stat3(resolved);
   if (resolvedStat.isFile() && path15.extname(resolved).toLowerCase() === ".zip") {
     const archive = await readZipArchive(await readFile3(resolved));
     const filteredFiles = Object.fromEntries(
@@ -9576,7 +9814,7 @@ async function writeExportToFolder(outDir, exported) {
 }
 async function confirmOverwriteExportDirectory(outDir) {
   const root = path15.resolve(outDir);
-  const stats = await stat2(root).catch(() => null);
+  const stats = await stat3(root).catch(() => null);
   if (!stats) return;
   if (!stats.isDirectory()) {
     throw new Error(`Export output path ${root} exists and is not a directory.`);
@@ -10003,7 +10241,7 @@ ${organizationUrl}`);
 
 // src/commands/client/issue.ts
 init_dist();
-import { readFile as readFile4, stat as stat3 } from "node:fs/promises";
+import { readFile as readFile4, stat as stat4 } from "node:fs/promises";
 import path16 from "node:path";
 
 // src/agent-v1-registry.ts
@@ -10068,6 +10306,18 @@ var AGENT_CLI_CAPABILITIES = [
     requiresRunId: false,
     attachesRunIdWhenAvailable: false
   },
+  {
+    id: "agent.update",
+    command: "rudder agent update [agent-id] [--title <title>] [--description <text>]",
+    category: "agent",
+    description: "Update an agent's control-plane identity fields; defaults to the authenticated agent.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: true
+  },
   {
     id: "agent.skills.create",
     command: "rudder agent skills create [agent-id] --name <name> [--enable]",
@@ -10360,9 +10610,9 @@ var AGENT_CLI_CAPABILITIES = [
     id: "issue.documents.put",
     command: "rudder issue documents put <issue> <key> --body-file <path>",
     category: "issue",
-    description: "Create or update an issue document.",
+    description: "Legacy create or update of a DB-backed issue document; prefer `rudder library file put` for durable project files.",
     mutating: true,
-    contract: "agent-v1",
+    contract: "compat",
     requiresOrgId: false,
     requiresAgentId: false,
     requiresRunId: false,
@@ -10380,6 +10630,90 @@ var AGENT_CLI_CAPABILITIES = [
     requiresRunId: false,
     attachesRunIdWhenAvailable: false
   },
+  {
+    id: "project.list",
+    command: "rudder project list --org-id <id>",
+    category: "project",
+    description: "List projects in an organization.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "project.get",
+    command: "rudder project get <project-id-or-shortname> [--org-id <id>]",
+    category: "project",
+    description: "Read one project by ID or shortname.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "project.create",
+    command: "rudder project create --org-id <id> --name <name>",
+    category: "project",
+    description: "Create a project in the organization.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: true
+  },
+  {
+    id: "project.update",
+    command: "rudder project update <project-id-or-shortname> [--org-id <id>]",
+    category: "project",
+    description: "Update mutable project fields such as name, description, status, goals, lead agent, target date, color, or archivedAt.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: true
+  },
+  {
+    id: "library.file.list",
+    command: "rudder library file list [directory]",
+    category: "library",
+    description: "List path-based Library files and folders.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "library.file.get",
+    command: "rudder library file get <path>",
+    category: "library",
+    description: "Read one path-based Library file.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "library.file.put",
+    command: "rudder library file put <path> --body-file <path>",
+    category: "library",
+    description: "Create or update one path-based Library file.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: false,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: true
+  },
   {
     id: "issue.create",
     command: "rudder issue create --org-id <id> ... [--label-id <id> ...] [--label <name> ...]",
@@ -10540,8 +10874,10 @@ var AGENT_CLI_CAPABILITIES = [
 var CATEGORY_TITLES = {
   agent: "Agent",
   issue: "Issue",
+  project: "Project",
   approval: "Approval",
-  skill: "Skill"
+  skill: "Skill",
+  library: "Library"
 };
 function getAgentCliCapabilities() {
   return AGENT_CLI_CAPABILITIES.map((entry) => ({ ...entry }));
@@ -11037,7 +11373,7 @@ ${imageBlock}` : imageBlock;
 }
 async function uploadIssueCommentImage(ctx, issue, imagePath) {
   const resolvedPath = path16.resolve(process.cwd(), imagePath);
-  const stats = await stat3(resolvedPath).catch((err) => {
+  const stats = await stat4(resolvedPath).catch((err) => {
     throw new Error(`Unable to read image ${imagePath}: ${err instanceof Error ? err.message : String(err)}`);
   });
   if (!stats.isFile()) {
@@ -11161,6 +11497,96 @@ function formatIssueSearchMatch(match) {
   return `${match.field}${commentSuffix}: ${match.snippet}`;
 }
 
+// src/commands/client/project.ts
+init_dist();
+function registerProjectCommands(program) {
+  const project = program.command("project").description("Project operations");
+  addCommonClientOptions(
+    project.command("list").description(getAgentCliCapabilityById("project.list").description).option("-O, --org-id <id>", "Organization ID").action(async (opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const rows = await ctx.api.get(`/api/orgs/${ctx.orgId}/projects`) ?? [];
+        printOutput(rows, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: false }
+  );
+  addCommonClientOptions(
+    project.command("get").description(getAgentCliCapabilityById("project.get").description).argument("<projectIdOrShortname>", "Project ID or shortname").option("-O, --org-id <id>", "Organization ID for shortname resolution").action(async (projectRef, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const row = await ctx.api.get(projectPath(projectRef, ctx.orgId));
+        printOutput(row, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: false }
+  );
+  addCommonClientOptions(
+    project.command("create").description(getAgentCliCapabilityById("project.create").description).option("-O, --org-id <id>", "Organization ID").requiredOption("--name <name>", "Project name").option("--description <text>", "Project description").option("--status <status>", "Project status").option("--goal-id <id>", "Primary goal ID").option("--goal-ids <csv>", "Comma-separated goal IDs").option("--lead-agent-id <id>", "Lead agent ID").option("--target-date <date>", "Target date").option("--color <value>", "Project color or supported gradient token").action(async (opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const payload = createProjectSchema.parse({
+          name: opts.name,
+          description: opts.description,
+          status: opts.status,
+          goalId: opts.goalId,
+          goalIds: parseCsv2(opts.goalIds),
+          leadAgentId: opts.leadAgentId,
+          targetDate: opts.targetDate,
+          color: opts.color
+        });
+        const created = await ctx.api.post(`/api/orgs/${ctx.orgId}/projects`, payload);
+        printOutput(created, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: false }
+  );
+  addCommonClientOptions(
+    project.command("update").description(getAgentCliCapabilityById("project.update").description).argument("<projectIdOrShortname>", "Project ID or shortname").option("-O, --org-id <id>", "Organization ID for shortname resolution").option("--name <name>", "Project name").option("--description <text>", "Project description").option("--status <status>", "Project status").option("--goal-id <id>", "Primary goal ID").option("--goal-ids <csv>", "Comma-separated goal IDs").option("--lead-agent-id <id>", "Lead agent ID").option("--target-date <date>", "Target date").option("--color <value>", "Project color or supported gradient token").option("--archived-at <iso8601|null>", "Set archivedAt timestamp or literal 'null'").action(async (projectRef, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const payload = updateProjectSchema.parse({
+          name: opts.name,
+          description: opts.description,
+          status: opts.status,
+          goalId: opts.goalId,
+          goalIds: parseCsv2(opts.goalIds),
+          leadAgentId: opts.leadAgentId,
+          targetDate: opts.targetDate,
+          color: opts.color,
+          archivedAt: parseNullableOption(opts.archivedAt)
+        });
+        const updated = await ctx.api.patch(projectPath(projectRef, ctx.orgId), payload);
+        printOutput(updated, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: false }
+  );
+}
+function parseCsv2(value) {
+  if (!value) return void 0;
+  const items = value.split(",").map((item) => item.trim()).filter(Boolean);
+  return items.length > 0 ? items : void 0;
+}
+function parseNullableOption(value) {
+  if (value === void 0) return void 0;
+  return value === "null" ? null : value;
+}
+function projectPath(projectRef, orgId) {
+  const params = new URLSearchParams();
+  if (orgId) params.set("orgId", orgId);
+  const query = params.toString();
+  return `/api/projects/${encodeURIComponent(projectRef)}${query ? `?${query}` : ""}`;
+}
+
 // src/commands/client/agent.ts
 init_dist();
 
@@ -11194,12 +11620,12 @@ var RUDDER_AGENT_OPERATING_CONTRACT = [
   "- Personal skills live under `$AGENT_HOME/skills`.",
   "- Shared organization workspace root lives under `$RUDDER_ORG_WORKSPACE_ROOT`.",
   "- Shared organization skills live under `$RUDDER_ORG_SKILLS_DIR`.",
-  "- Shared organization plans live under `$RUDDER_ORG_PLANS_DIR`.",
-  "- Shared organization artifacts live under `$RUDDER_ORG_ARTIFACTS_DIR`.",
-  "- Durable generated outputs such as screenshots, images, mockups, reports, CSVs, handoff logs, and other user-visible files should be written under `$RUDDER_ORG_ARTIFACTS_DIR` when available.",
-  "- Use `/tmp` only for transient scratch files and temporary verification artifacts; do not put durable work product there.",
+  '- Library-backed project resources use `sourceType: "library"`; their `locator` points into `library:projects/<project-name>/`.',
+  "- Project Context is explicit operator-curated context, not the whole knowledge boundary. When it is insufficient, inspect broader Library and org workspace know-how before concluding context is missing.",
+  "- Durable generated project work files should be written under `library:projects/<project-name>/`.",
+  "- When you create or update a durable Library file, always include a user-visible Markdown link to that file in your final chat reply or issue comment. Use `library-file://file?p=<url-encoded-relative-path>&t=<url-encoded-title>` for Library file links.",
+  "- Use `/tmp` only for transient scratch files and temporary verification files; do not put durable work product there.",
   "- Local trusted runtimes may expose the host operator home as `$RUDDER_OPERATOR_HOME`; use it only when a local skill or script intentionally needs operator-owned desktop app or CLI state. Do not replace `$HOME` with it.",
-  "- Durable shared work output should prefer these managed workspace paths instead of ad-hoc top-level `projects/` folders.",
   "",
   "When you create or copy a skill under `$AGENT_HOME/skills/<slug>/`, check the agent's Skills snapshot before claiming it will load in future runs. If it is installed but not enabled, say exactly that future runs will not load it until enabled, and offer to enable it with `rudder agent skills enable <agent-id> <selection-ref>` when you have permission.",
   "",
@@ -11209,9 +11635,9 @@ var RUDDER_AGENT_OPERATING_CONTRACT = [
   "",
   "When an issue comment, done comment, or blocker comment cites visual evidence from a local screenshot/image path, attach the image with the Rudder CLI `--image <path>` option instead of leaving only the filesystem path in the text.",
   "",
-  "## Memory and Planning",
+  "## Memory and Shared Work Notes",
   "",
-  "You MUST use the `para-memory-files` skill for all memory operations: storing facts, writing daily notes, creating entities, running weekly synthesis, recalling past context, and managing plans. The skill defines your three-layer memory system (knowledge graph, daily notes, tacit knowledge), the PARA folder structure, atomic fact schemas, memory decay rules, and recall/planning conventions.",
+  "You MUST use the `para-memory-files` skill for all memory operations: storing facts, writing daily notes, creating entities, running weekly synthesis, recalling past context, and managing shared work notes. The skill defines your three-layer memory system (knowledge graph, daily notes, tacit knowledge), the PARA folder structure, atomic fact schemas, memory decay rules, and recall conventions.",
   "",
   "Keep stable preferences and operating lessons in `$AGENT_HOME/instructions/MEMORY.md`. Use `$AGENT_HOME/memory/YYYY-MM-DD.md` for daily notes and `$AGENT_HOME/life/` for structured long-term memory; those files are not auto-loaded.",
   "",
@@ -11610,7 +12036,7 @@ function registerAgentCommands(program) {
       try {
         const ctx = resolveCommandContext(opts);
         const snapshot = await ctx.api.post(`/api/agents/${agentId}/skills/sync`, {
-          desiredSkills: parseCsv2(opts.desiredSkills)
+          desiredSkills: parseCsv3(opts.desiredSkills)
         });
         printOutput(snapshot, { json: ctx.json });
       } catch (err) {
@@ -11633,6 +12059,32 @@ function registerAgentCommands(program) {
       }
     })
   );
+  addCommonClientOptions(
+    agent.command("update").description(getAgentCliCapabilityById("agent.update").description).argument("[agentId]", "Agent ID or shortname/url-key; defaults to RUDDER_AGENT_ID").option("-O, --org-id <id>", "Organization ID").option("--name <name>", "Agent display name").option("--role <role>", "Agent organization role").option("--title <title>", "Agent title shown in mentions and agent labels").option("--clear-title", "Clear the agent title").option("--capabilities <text>", "Agent capabilities/description text").option("--capabilities-file <path>", "Read agent capabilities/description from a local file").option("--description <text>", "Alias for --capabilities").option("--description-file <path>", "Alias for --capabilities-file").option("--clear-capabilities", "Clear the agent capabilities/description").option("--clear-description", "Alias for --clear-capabilities").option("--reports-to <agent-id>", "Manager agent ID").option("--clear-reports-to", "Clear the manager relationship").action(async (agentIdArg, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const agentId = agentIdArg?.trim() || ctx.agentId;
+        if (!agentId) {
+          throw new Error("Agent ID is required. Pass [agent-id] or set RUDDER_AGENT_ID.");
+        }
+        const patch = await buildAgentUpdatePatch(opts);
+        if (Object.keys(patch).length === 0) {
+          throw new Error(
+            "No agent fields to update. Pass --name, --role, --title, --capabilities, --description, or --reports-to."
+          );
+        }
+        const query = new URLSearchParams();
+        if (ctx.orgId) query.set("orgId", ctx.orgId);
+        const updated = await ctx.api.patch(
+          `/api/agents/${encodeURIComponent(agentId)}${query.size > 0 ? `?${query.toString()}` : ""}`,
+          patch
+        );
+        printOutput(updated, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    })
+  );
   addCommonClientOptions(
     agent.command("hire").description(getAgentCliCapabilityById("agent.hire").description).option("-O, --org-id <id>", "Organization ID").requiredOption("--payload <json>", "Hire payload as JSON object").action(async (opts) => {
       try {
@@ -11732,7 +12184,47 @@ function registerAgentCommands(program) {
     { includeCompany: false }
   );
 }
-function parseCsv2(value) {
+async function buildAgentUpdatePatch(opts) {
+  const rawPatch = {};
+  if (opts.name !== void 0) rawPatch.name = opts.name;
+  if (opts.role !== void 0) rawPatch.role = opts.role;
+  if (opts.title !== void 0 && opts.clearTitle) {
+    throw new Error("Pass only one of --title or --clear-title.");
+  }
+  if (opts.title !== void 0) rawPatch.title = opts.title;
+  if (opts.clearTitle) rawPatch.title = null;
+  if (opts.reportsTo !== void 0 && opts.clearReportsTo) {
+    throw new Error("Pass only one of --reports-to or --clear-reports-to.");
+  }
+  if (opts.reportsTo !== void 0) rawPatch.reportsTo = opts.reportsTo;
+  if (opts.clearReportsTo) rawPatch.reportsTo = null;
+  const capabilitiesInputs = [
+    opts.capabilities !== void 0 ? "--capabilities" : null,
+    opts.capabilitiesFile !== void 0 ? "--capabilities-file" : null,
+    opts.description !== void 0 ? "--description" : null,
+    opts.descriptionFile !== void 0 ? "--description-file" : null
+  ].filter(Boolean);
+  const clearCapabilities = opts.clearCapabilities || opts.clearDescription;
+  if (capabilitiesInputs.length > 1) {
+    throw new Error(
+      "Pass only one of --capabilities, --capabilities-file, --description, or --description-file."
+    );
+  }
+  if (capabilitiesInputs.length > 0 && clearCapabilities) {
+    throw new Error("Pass either capabilities/description input or a clear flag, not both.");
+  }
+  if (opts.capabilities !== void 0) rawPatch.capabilities = opts.capabilities;
+  if (opts.description !== void 0) rawPatch.capabilities = opts.description;
+  if (opts.capabilitiesFile !== void 0) {
+    rawPatch.capabilities = await fs14.readFile(path18.resolve(opts.capabilitiesFile), "utf8");
+  }
+  if (opts.descriptionFile !== void 0) {
+    rawPatch.capabilities = await fs14.readFile(path18.resolve(opts.descriptionFile), "utf8");
+  }
+  if (clearCapabilities) rawPatch.capabilities = null;
+  return updateAgentSchema.parse(rawPatch);
+}
+function parseCsv3(value) {
   if (!value) return [];
   return value.split(",").map((entry) => entry.trim()).filter(Boolean);
 }
@@ -11818,7 +12310,7 @@ function registerApprovalCommands(program) {
           type: opts.type,
           payload: payloadJson,
           requestedByAgentId: opts.requestedByAgentId,
-          issueIds: parseCsv3(opts.issueIds)
+          issueIds: parseCsv4(opts.issueIds)
         });
         const created = await ctx.api.post(`/api/orgs/${ctx.orgId}/approvals`, payload);
         printOutput(created, { json: ctx.json });
@@ -11924,7 +12416,7 @@ async function readStdinText2() {
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-function parseCsv3(value) {
+function parseCsv4(value) {
   if (!value) return void 0;
   const rows = value.split(",").map((v) => v.trim()).filter(Boolean);
   return rows.length > 0 ? rows : void 0;
@@ -11953,8 +12445,8 @@ function registerActivityCommands(program) {
         if (opts.entityType) params.set("entityType", opts.entityType);
         if (opts.entityId) params.set("entityId", opts.entityId);
         const query = params.toString();
-        const path22 = `/api/orgs/${ctx.orgId}/activity${query ? `?${query}` : ""}`;
-        const rows = await ctx.api.get(path22) ?? [];
+        const path23 = `/api/orgs/${ctx.orgId}/activity${query ? `?${query}` : ""}`;
+        const rows = await ctx.api.get(path23) ?? [];
         if (ctx.json) {
           printOutput(rows, { json: true });
           return;
@@ -12082,7 +12574,7 @@ function registerSkillCommands(program) {
       try {
         const ctx = resolveCommandContext(opts, { requireCompany: true });
         const payload = organizationSkillLocalScanRequestSchema.parse({
-          roots: parseCsv4(opts.roots)
+          roots: parseCsv5(opts.roots)
         });
         const result = await ctx.api.post(
           `/api/orgs/${ctx.orgId}/skills/scan-local`,
@@ -12100,8 +12592,8 @@ function registerSkillCommands(program) {
       try {
         const ctx = resolveCommandContext(opts, { requireCompany: true });
         const payload = organizationSkillProjectScanRequestSchema.parse({
-          projectIds: parseCsv4(opts.projectIds),
-          workspaceIds: parseCsv4(opts.workspaceIds)
+          projectIds: parseCsv5(opts.projectIds),
+          workspaceIds: parseCsv5(opts.workspaceIds)
         });
         const result = await ctx.api.post(
           `/api/orgs/${ctx.orgId}/skills/scan-projects`,
@@ -12115,19 +12607,111 @@ function registerSkillCommands(program) {
     { includeCompany: false }
   );
 }
-function parseCsv4(value) {
+function parseCsv5(value) {
   if (!value) return void 0;
   const rows = value.split(",").map((entry) => entry.trim()).filter(Boolean);
   return rows.length > 0 ? rows : void 0;
 }
 
+// src/commands/client/library.ts
+import { readFile as readFile6 } from "node:fs/promises";
+import path20 from "node:path";
+function registerLibraryCommands(program) {
+  const library = program.command("library").description("Library file operations");
+  const file = library.command("file").description("Path-based Library file operations");
+  addCommonClientOptions(
+    file.command("list").description(getAgentCliCapabilityById("library.file.list").description).argument("[directoryPath]", "Library directory path", "projects").action(async (directoryPath, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const search = new URLSearchParams();
+        const normalizedPath = directoryPath.trim();
+        if (normalizedPath) search.set("path", normalizedPath);
+        const query = search.toString();
+        const result = await ctx.api.get(
+          `/api/orgs/${ctx.orgId}/workspace/files${query ? `?${query}` : ""}`
+        );
+        printOutput(result, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: true }
+  );
+  addCommonClientOptions(
+    file.command("get").description(getAgentCliCapabilityById("library.file.get").description).argument("<filePath>", "Library file path").action(async (filePath, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const search = new URLSearchParams();
+        search.set("path", filePath.trim());
+        const result = await ctx.api.get(
+          `/api/orgs/${ctx.orgId}/workspace/file?${search.toString()}`
+        );
+        printOutput(result, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: true }
+  );
+  addCommonClientOptions(
+    file.command("put").description(getAgentCliCapabilityById("library.file.put").description).argument("<filePath>", "Library file path").option("--body-file <path>", "Read file content from a file, or '-' for stdin").action(async (filePath, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        const body = await resolveBodyFileInput(opts.bodyFile);
+        const search = new URLSearchParams();
+        search.set("path", filePath.trim());
+        const updatePath = `/api/orgs/${ctx.orgId}/workspace/file?${search.toString()}`;
+        const updated = await ctx.api.patch(
+          updatePath,
+          { content: body },
+          { ignoreNotFound: true }
+        );
+        if (updated) {
+          printOutput(updated, { json: ctx.json });
+          return;
+        }
+        const created = await ctx.api.post(
+          `/api/orgs/${ctx.orgId}/workspace/file`,
+          { filePath: filePath.trim(), content: body }
+        );
+        printOutput(created, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: true }
+  );
+}
+async function resolveBodyFileInput(inputPath) {
+  if (process.argv.includes("--body")) {
+    throw new Error("--body was removed; write the body to a file and use --body-file <path> or --body-file - for stdin");
+  }
+  if (inputPath === void 0) {
+    throw new Error("Provide --body-file <path>; use --body-file - for stdin");
+  }
+  if (inputPath === "-") {
+    return readStdinText3();
+  }
+  const resolvedPath = path20.resolve(process.cwd(), inputPath);
+  return readFile6(resolvedPath, "utf8").catch((err) => {
+    throw new Error(`Unable to read --body-file ${inputPath}: ${err instanceof Error ? err.message : String(err)}`);
+  });
+}
+async function readStdinText3() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+
 // src/config/data-dir.ts
 init_home();
-import path20 from "node:path";
+import path21 from "node:path";
 function applyDataDirOverride(options, support = {}) {
   const rawDataDir = options.dataDir?.trim();
   if (!rawDataDir) return null;
-  const resolvedDataDir = path20.resolve(expandHomePrefix(rawDataDir));
+  const resolvedDataDir = path21.resolve(expandHomePrefix(rawDataDir));
   process.env.RUDDER_HOME = resolvedDataDir;
   if (support.hasConfigOption) {
     const hasConfigOverride = Boolean(options.config?.trim()) || Boolean(process.env.RUDDER_CONFIG?.trim());
@@ -12151,16 +12735,16 @@ init_env();
 init_local_env();
 
 // src/commands/client/plugin.ts
-import path21 from "node:path";
+import path22 from "node:path";
 import pc15 from "picocolors";
 function resolvePackageArg(packageArg, isLocal) {
   if (!isLocal) return packageArg;
-  if (path21.isAbsolute(packageArg)) return packageArg;
+  if (path22.isAbsolute(packageArg)) return packageArg;
   if (packageArg.startsWith("~")) {
     const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-    return path21.resolve(home, packageArg.slice(1).replace(/^[\\/]/, ""));
+    return path22.resolve(home, packageArg.slice(1).replace(/^[\\/]/, ""));
   }
-  return path21.resolve(process.cwd(), packageArg);
+  return path22.resolve(process.cwd(), packageArg);
 }
 function formatPlugin(p16) {
   const statusColor = p16.status === "ready" ? pc15.green(p16.status) : p16.status === "error" ? pc15.red(p16.status) : p16.status === "disabled" ? pc15.dim(p16.status) : pc15.yellow(p16.status);
@@ -12494,11 +13078,13 @@ function createProgram() {
   registerContextCommands(program);
   registerCompanyCommands(program);
   registerIssueCommands(program);
+  registerProjectCommands(program);
   registerAgentCommands(program);
   registerApprovalCommands(program);
   registerActivityCommands(program);
   registerDashboardCommands(program);
   registerSkillCommands(program);
+  registerLibraryCommands(program);
   registerLazyWorktreeCommands(program);
   registerPluginCommands(program);
   registerLazyBenchmarkCommands(program);