@tangle-network/agent-app 0.43.47 → 0.43.49

package/dist/{file-index-Bn6sitKb.d.ts → file-index-b26ee-_R.d.ts}

@@ -1,4 +1,4 @@
-import { F as FileMention } from './parts-1_3y2JmR.js';
+import { K as FileMention } from './parts-IB-Kbb7z.js';
 
 /**
  * `createSandboxFileIndexRoute` — server side of `@`-file-mentions

package/dist/harness/index.d.ts

@@ -23,7 +23,7 @@ export { modelProvider } from '@tangle-network/agent-interface';
 
 /** The known coding-agent backends. Mirrors `@tangle-network/sandbox`'s
  *  `BackendType`; kept structural so this module needs no sandbox dependency. */
-declare const KNOWN_HARNESSES: readonly ["opencode", "claude-code", "kimi-code", "codex", "amp", "factory-droids", "pi", "hermes", "forge", "openclaw", "acp", "cursor", "cli-base"];
+declare const KNOWN_HARNESSES: readonly ["opencode", "claude-code", "nanoclaw", "kimi-code", "codex", "amp", "factory-droids", "pi", "hermes", "forge", "openclaw", "acp", "cursor", "cli-base"];
 type Harness = (typeof KNOWN_HARNESSES)[number];
 declare const DEFAULT_HARNESS: Harness;
 declare function isHarness(value: unknown): value is Harness;

package/dist/harness/index.js

@@ -9,7 +9,7 @@ import {
   resolveSessionHarness,
   snapHarnessToModel,
   snapModelToHarness
-} from "../chunk-E7QYOOON.js";
+} from "../chunk-MCJSS6SM.js";
 export {
   DEFAULT_HARNESS,
   KNOWN_HARNESSES,

package/dist/index.d.ts

@@ -17,9 +17,10 @@ export { KeyCrypto, KeyProvisioner, PlanLimit, PlatformBalanceInfo, PlatformBala
 export { HttpHeadProbeConfig, PreflightProbe, PreflightProbeResult, PreflightProbeVerdict, PreflightReport, RouterChatProbeConfig, SandboxAuthProbeConfig, formatPreflightReport, httpHeadProbe, routerChatProbe, runPreflight, sandboxAuthProbe } from './preflight/index.js';
 export { ObjectBody, ObjectKeyParts, ObjectStore, PutObjectOptions, R2LikeBucket, R2LikeObjectBody, R2LikeObjectHead, SignObjectUrlArgs, VerifyObjectUrlResult, assertSafeKeySegment, createProxiedArtifactRoute, createR2ObjectStore, objectKey, signObjectUrl, verifyObjectUrl } from './object-store/index.js';
 export { B as BULK_DELETE_MAX_THREADS, C as ChatStoreInputError, t as threadTitleFromMessage } from './core-7qIM7svy.js';
-export { C as ChatFilePart, a as ChatImagePart, b as ChatInteractionPart, c as ChatMentionKind, d as ChatMentionPart, e as ChatMessagePart, f as ChatNoticePart, g as ChatPartTime, h as ChatPlanPart, i as ChatReasoningPart, j as ChatStepFinishPart, k as ChatStepStartPart, l as ChatSubtaskPart, m as ChatTextPart, n as ChatToolPart, o as ChatToolState, p as ChatToolStatus, q as ChatUsageTokens, S as StorableHarnessPartKind, r as isChatInteractionPart, s as isChatMentionPart, t as isChatPlanPart, u as isChatStepFinishPart, v as isChatTextPart, w as isChatToolPart, x as mentionInputToPart, y as mentionPartsFromMessageParts, z as toChatMessageParts } from './parts-1_3y2JmR.js';
+export { C as ChatAttachmentKind, a as ChatAttachmentPart, b as ChatFilePart, c as ChatImagePart, d as ChatInteractionPart, e as ChatMentionKind, f as ChatMentionPart, g as ChatMessagePart, h as ChatNoticePart, i as ChatPartTime, j as ChatPlanPart, k as ChatReasoningPart, l as ChatStepFinishPart, m as ChatStepStartPart, n as ChatSubtaskPart, o as ChatTextPart, p as ChatToolPart, q as ChatToolState, r as ChatToolStatus, s as ChatUsageTokens, D as DEFAULT_ATTACHMENT_PROMPT_HEADER, S as StorableHarnessPartKind, t as attachmentInputToPart, u as attachmentKindForMime, v as attachmentPartsFromMessageParts, w as buildAttachmentPromptBlock, x as historyContentWithAttachments, y as isChatAttachmentPart, z as isChatInteractionPart, A as isChatMentionPart, B as isChatPlanPart, E as isChatStepFinishPart, F as isChatTextPart, G as isChatToolPart, H as mentionInputToPart, I as mentionPartsFromMessageParts, J as toChatMessageParts } from './parts-IB-Kbb7z.js';
 export { DeriveKeyOptions, createFieldCrypto, decodeHexKey, decryptAesGcm, decryptBytes, decryptWithKey, deriveKey, encryptAesGcm, encryptBytes, encryptWithKey } from './crypto/index.js';
-export { JsonRecord, MISSING_TOOL_TERMINAL_ERROR, MISSING_TOOL_TERMINAL_REASON, PersistedChatMessageForTurn, ResolvedChatTurn, StreamEvent, asRecord, asString, attachmentPartKey, buildUserTextParts, collapseRedundantTextParts, encodeEvent, finalizeAssistantParts, finalizePendingInteractionParts, getPartKey, mergePersistedPart, messageHasTurnId, normalizeClientTurnId, normalizePersistedPart, normalizeTime, normalizeToolEvent, resolveChatTurn, resolveToolId, resolveToolName, terminalizeDanglingAssistantToolUpdates, terminalizeDanglingToolPart, terminalizeDanglingToolParts } from './stream/index.js';
+export { J as JsonRecord, M as MISSING_TOOL_TERMINAL_ERROR, a as MISSING_TOOL_TERMINAL_REASON, S as StreamEvent, b as asRecord, c as asString, d as attachmentPartKey, e as collapseRedundantTextParts, f as encodeEvent, g as finalizeAssistantParts, h as finalizePendingInteractionParts, i as getPartKey, m as mergePersistedPart, n as normalizePersistedPart, j as normalizeTime, k as normalizeToolEvent, r as resolveToolId, l as resolveToolName, t as terminalizeDanglingAssistantToolUpdates, o as terminalizeDanglingToolPart, p as terminalizeDanglingToolParts } from './stream-normalizer-DWvtmY6F.js';
+export { PersistedChatMessageForTurn, ResolvedChatTurn, buildUserTextParts, messageHasTurnId, normalizeClientTurnId, resolveChatTurn } from './stream/index.js';
 export { B as BufferedTurnEvent, a as BufferedTurnOptions, b as BufferedTurnTap, D as D1LikeForTurns, P as PumpBufferedTurnOptions, R as ReplayTurnEventsOptions, T as TURN_EVENTS_MIGRATION_SQL, c as TURN_STATUS_SCOPE_MIGRATION_SQL, d as TurnEventStore, e as TurnStatus, f as coalesceChatStreamEvents, g as coalesceDeltas, h as createBufferedTurnTap, i as createD1TurnEventStore, j as createMemoryTurnEventStore, p as pumpBufferedTurn, r as replayTurnEvents } from './turn-buffer-C9mEgoop.js';
 export { HubExecClient, HubExecClientOptions, HubExecErrorCode, HubExecResult, HubInvokeDeps, HubInvokeInput, HubInvokeOutcome, ParsedIntegrationAction, invokeIntegrationHub, resolveIntegrationAction } from './integrations/index.js';
 export { C as ChatInteraction, a as ChatInteractionField, b as ChatInteractionStatus, c as ChatSelectField, d as ComposerAnswerDelivery, I as INTERACTION_CANCEL_EVENT, e as INTERACTION_EVENT, f as INTERACTION_RESOLVED_EVENT, g as InteractionAnswerValue, h as InteractionAnswers, i as InteractionCancelData, j as InteractionPersistedPart, k as InteractionRequestWire, N as NoticeKind, l as NoticePersistedPart, P as ParseInteractionAnswersResult, m as ParseInteractionResult, n as canTransitionInteractionStatus, o as cancelStatusFor, p as composerAnswerData, q as composerAnswerDeliveries, r as dedupeQuestionInteractionsByContent, s as fieldAcceptsFreeText, t as interactionFromWireRequest, u as interactionPartKey, v as interactionToPersistedPart, w as isRenderableInteractionKind, x as isSafeInteractionFieldKey, y as isTerminalInteractionStatus, z as noticePart, A as noticePartKey, B as parseInteractionAnswers, D as parseInteractionCancel, E as parseInteractionRequest, F as persistedPartToInteraction, G as questionInteractionContentSignature, H as stampInteractionAnswers } from './contract-KfqJh_au.js';

package/dist/index.js

@@ -2,12 +2,68 @@ import "./chunk-UAKFCMWK.js";
 import {
   checkThemeContract
 } from "./chunk-NYATNLRK.js";
+import {
+  CANVAS_ELEMENT_KINDS,
+  CANVAS_MCP_TOOLS,
+  CANVAS_MCP_TOOL_NAMES,
+  DEFAULT_DESIGN_CANVAS_MCP_DESCRIPTION,
+  SCENE_OPERATION_TYPES,
+  applyBindingsToDocument,
+  buildDesignCanvasMcpServerEntry,
+  createDesignCanvasMcpHandler,
+  findCanvasMcpTool,
+  instantiateTemplate,
+  listTemplateSlots,
+  validateBindings
+} from "./chunk-WFMUDX5J.js";
 import {
   darkTheme,
   lightTheme,
   themeColor,
   themeToCssVars
 } from "./chunk-47C6PJCW.js";
+import {
+  CHANNEL_PRESETS,
+  EXPORT_PRESETS,
+  SCENE_ELEMENT_KINDS,
+  SCENE_SCHEMA_VERSION,
+  SIZE_PRESETS,
+  applySceneOperation,
+  applySceneOperations,
+  assertColor,
+  assertFinite,
+  assertPositiveFinite,
+  assertSceneMediaSrc,
+  bleedAwareExportBounds,
+  bleedAwareExportRect,
+  boundsIntersect,
+  collectSlots,
+  createEmptyDocument,
+  createPage,
+  elementAabb,
+  elementExtent,
+  estimateTextHeight,
+  findElement,
+  findPreset,
+  matchPreset,
+  requireChannelPreset,
+  requireElement,
+  requirePage,
+  scaleForPreset,
+  scalePageForChannelPreset,
+  storeApplyScenePlan,
+  validateSceneOperation,
+  validateSceneOperations,
+  validateSlotValue
+} from "./chunk-M2EBUDZ7.js";
+import {
+  DEFAULT_REDACTION_PATTERNS,
+  buildRedactedDocument,
+  detectSpans,
+  maskSpans,
+  redactForIngestion,
+  revealSpan
+} from "./chunk-5RMIUJDI.js";
 import {
   buildFlowTrace,
   childSpanContext,
@@ -85,68 +141,12 @@ import {
   snapshotFrame,
   trackIntervals
 } from "./chunk-ZYBWGSAZ.js";
-import {
-  CANVAS_ELEMENT_KINDS,
-  CANVAS_MCP_TOOLS,
-  CANVAS_MCP_TOOL_NAMES,
-  DEFAULT_DESIGN_CANVAS_MCP_DESCRIPTION,
-  SCENE_OPERATION_TYPES,
-  applyBindingsToDocument,
-  buildDesignCanvasMcpServerEntry,
-  createDesignCanvasMcpHandler,
-  findCanvasMcpTool,
-  instantiateTemplate,
-  listTemplateSlots,
-  validateBindings
-} from "./chunk-WFMUDX5J.js";
-import {
-  CHANNEL_PRESETS,
-  EXPORT_PRESETS,
-  SCENE_ELEMENT_KINDS,
-  SCENE_SCHEMA_VERSION,
-  SIZE_PRESETS,
-  applySceneOperation,
-  applySceneOperations,
-  assertColor,
-  assertFinite,
-  assertPositiveFinite,
-  assertSceneMediaSrc,
-  bleedAwareExportBounds,
-  bleedAwareExportRect,
-  boundsIntersect,
-  collectSlots,
-  createEmptyDocument,
-  createPage,
-  elementAabb,
-  elementExtent,
-  estimateTextHeight,
-  findElement,
-  findPreset,
-  matchPreset,
-  requireChannelPreset,
-  requireElement,
-  requirePage,
-  scaleForPreset,
-  scalePageForChannelPreset,
-  storeApplyScenePlan,
-  validateSceneOperation,
-  validateSceneOperations,
-  validateSlotValue
-} from "./chunk-M2EBUDZ7.js";
 import {
   composeMissionFlowTrace,
   delegationActivityToFlowSpans,
   loopTraceEventsToFlowSpans,
   stepActivityFlowTrace
 } from "./chunk-2QI7XV2T.js";
-import {
-  DEFAULT_REDACTION_PATTERNS,
-  buildRedactedDocument,
-  detectSpans,
-  maskSpans,
-  redactForIngestion,
-  revealSpan
-} from "./chunk-5RMIUJDI.js";
 import {
   HubExecClient,
   invokeIntegrationHub,
@@ -217,7 +217,18 @@ import {
   createPresetToolHandlers,
   createPresetWorkspaceKeyManager,
   createPresetWorkspaceKeyStore
-} from "./chunk-UHXQ3KNX.js";
+} from "./chunk-54GSK2KK.js";
+import {
+  createFieldCrypto,
+  decodeHexKey,
+  decryptAesGcm,
+  decryptBytes,
+  decryptWithKey,
+  deriveKey,
+  encryptAesGcm,
+  encryptBytes,
+  encryptWithKey
+} from "./chunk-TA5Q4I2K.js";
 import {
   createPlatformBalanceManager,
   createTcloudKeyProvisioner,
@@ -244,39 +255,31 @@ import {
   threadTitleFromMessage
 } from "./chunk-5EQCITY3.js";
 import {
-  MISSING_TOOL_TERMINAL_ERROR,
-  MISSING_TOOL_TERMINAL_REASON,
+  addSecurityHeaders,
+  assertMediaUrl,
+  checkRateLimit,
+  clearCookieHeader,
+  extractRequestContext,
+  parseJsonObjectBody,
+  readCookieValue,
+  requireString,
+  serializeCookie
+} from "./chunk-HFC4BTWJ.js";
+import {
   TURN_EVENTS_MIGRATION_SQL,
   TURN_STATUS_SCOPE_MIGRATION_SQL,
-  asRecord,
-  asString,
-  attachmentPartKey,
   buildUserTextParts,
   coalesceChatStreamEvents,
   coalesceDeltas,
-  collapseRedundantTextParts,
   createBufferedTurnTap,
   createD1TurnEventStore,
   createMemoryTurnEventStore,
-  encodeEvent,
-  finalizeAssistantParts,
-  finalizePendingInteractionParts,
-  getPartKey,
-  mergePersistedPart,
   messageHasTurnId,
   normalizeClientTurnId,
-  normalizePersistedPart,
-  normalizeTime,
-  normalizeToolEvent,
   pumpBufferedTurn,
   replayTurnEvents,
-  resolveChatTurn,
-  resolveToolId,
-  resolveToolName,
-  terminalizeDanglingAssistantToolUpdates,
-  terminalizeDanglingToolPart,
-  terminalizeDanglingToolParts
-} from "./chunk-4AUQIAYU.js";
+  resolveChatTurn
+} from "./chunk-23LUHHHN.js";
 import {
   createInteractionAnswerRoute,
   listSessionInteractions,
@@ -285,17 +288,13 @@ import {
   validateInteractionAnswerBody
 } from "./chunk-6KVH5SP5.js";
 import {
-  addSecurityHeaders,
-  assertMediaUrl,
-  checkRateLimit,
-  clearCookieHeader,
-  extractRequestContext,
-  parseJsonObjectBody,
-  readCookieValue,
-  requireString,
-  serializeCookie
-} from "./chunk-HFC4BTWJ.js";
-import {
+  DEFAULT_ATTACHMENT_PROMPT_HEADER,
+  attachmentInputToPart,
+  attachmentKindForMime,
+  attachmentPartsFromMessageParts,
+  buildAttachmentPromptBlock,
+  historyContentWithAttachments,
+  isChatAttachmentPart,
   isChatInteractionPart,
   isChatMentionPart,
   isChatPlanPart,
@@ -305,7 +304,28 @@ import {
   mentionInputToPart,
   mentionPartsFromMessageParts,
   toChatMessageParts
-} from "./chunk-6E2XJSCT.js";
+} from "./chunk-JGYOYY5D.js";
+import {
+  MISSING_TOOL_TERMINAL_ERROR,
+  MISSING_TOOL_TERMINAL_REASON,
+  asRecord,
+  asString,
+  attachmentPartKey,
+  collapseRedundantTextParts,
+  encodeEvent,
+  finalizeAssistantParts,
+  finalizePendingInteractionParts,
+  getPartKey,
+  mergePersistedPart,
+  normalizePersistedPart,
+  normalizeTime,
+  normalizeToolEvent,
+  resolveToolId,
+  resolveToolName,
+  terminalizeDanglingAssistantToolUpdates,
+  terminalizeDanglingToolPart,
+  terminalizeDanglingToolParts
+} from "./chunk-5MG74GVQ.js";
 import {
   INTERACTION_CANCEL_EVENT,
   INTERACTION_EVENT,
@@ -341,17 +361,6 @@ import {
   planRevisionKey,
   planToPersistedPart
 } from "./chunk-SIXYZ2FB.js";
-import {
-  createFieldCrypto,
-  decodeHexKey,
-  decryptAesGcm,
-  decryptBytes,
-  decryptWithKey,
-  deriveKey,
-  encryptAesGcm,
-  encryptBytes,
-  encryptWithKey
-} from "./chunk-TA5Q4I2K.js";
 import {
   createKnowledgeLoop,
   createReviewerDecider,
@@ -417,7 +426,7 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "./chunk-5RJNEEO2.js";
+} from "./chunk-HRJJH3RX.js";
 import {
   DEFAULT_HARNESS,
   KNOWN_HARNESSES,
@@ -429,7 +438,7 @@ import {
   resolveSessionHarness,
   snapHarnessToModel,
   snapModelToHarness
-} from "./chunk-E7QYOOON.js";
+} from "./chunk-MCJSS6SM.js";
 import {
   createCapabilityToken,
   createExpiringCapabilityToken,
@@ -524,6 +533,7 @@ export {
   ConversionMetricsSchema,
   CopyContentSchema,
   DEFAULT_APP_TOOL_PATHS,
+  DEFAULT_ATTACHMENT_PROMPT_HEADER,
   DEFAULT_DESIGN_CANVAS_MCP_DESCRIPTION,
   DEFAULT_HARNESS,
   DEFAULT_HEADER_NAMES,
@@ -604,7 +614,10 @@ export {
   assertSceneMediaSrc,
   assertSequenceMediaUrl,
   attachReasoningEffort,
+  attachmentInputToPart,
+  attachmentKindForMime,
   attachmentPartKey,
+  attachmentPartsFromMessageParts,
   authenticateToolRequest,
   bearerSubprotocolToken,
   bearerToken,
@@ -616,6 +629,7 @@ export {
   buildAppToolMcpServer,
   buildAppToolMcpServers,
   buildAppToolOpenAITools,
+  buildAttachmentPromptBlock,
   buildCaptionChunks,
   buildCatalog,
   buildConsentUrl,
@@ -755,6 +769,7 @@ export {
   getClient,
   getPartKey,
   handleAppToolRequest,
+  historyContentWithAttachments,
   httpHeadProbe,
   instantiateTemplate,
   interactionFromWireRequest,
@@ -762,6 +777,7 @@ export {
   interactionToPersistedPart,
   invokeIntegrationHub,
   isAppToolName,
+  isChatAttachmentPart,
   isChatInteractionPart,
   isChatMentionPart,
   isChatPlanPart,

package/dist/{parts-1_3y2JmR.d.ts → parts-IB-Kbb7z.d.ts}

@@ -29,6 +29,27 @@ interface ChatTurnFilePartInput {
     content?: string;
 }
 type ChatTurnPartInput = ChatTurnTextPartInput | ChatTurnFilePartInput;
+/** The image/file split an attachment is rendered and persisted under — the
+ *  same discriminant as {@link ChatMentionKind}, but a distinct name because an
+ *  attachment carries content the product uploaded (`ChatAttachmentInput`)
+ *  while a mention points at a file the box already has. Defined HERE (the
+ *  import-free layer) so `ChatAttachmentInput` can reference it and the client
+ *  composer imports it without pulling the persisted-part vocabulary;
+ *  `/chat-store`'s parts module re-exports it alongside the attachment helpers. */
+type ChatAttachmentKind = 'image' | 'file';
+/** `POST` turn-body entry describing a file already uploaded to the product's
+ *  store (vault/object-store) — distinct from an inline {@link
+ *  ChatTurnFilePartInput} (which carries bytes) and from a {@link FileMention}
+ *  (a sandbox path the box already holds). The route resolves this field with
+ *  {@link resolveChatAttachments}: every path is re-validated and every size is
+ *  re-derived from the stored body, so nothing here is trusted as sent. */
+interface ChatAttachmentInput {
+    path: string;
+    name: string;
+    size: number;
+    mediaType: string;
+    kind: ChatAttachmentKind;
+}
 /** POST body for the turn route. `content` may be empty when `parts` carry the
  *  message (an image-only send). Product routing fields (workspaceId etc.) ride
  *  alongside and are read by the product's `authorize` seam. */
@@ -45,6 +66,12 @@ interface ChatTurnRequestPayload {
      *  route validates this field with {@link parseFileMentions} and replaces it
      *  on the payload with the validated, deduped list. */
     mentions?: FileMention[];
+    /** Files uploaded to the product's store ahead of the turn — path
+     *  references, NOT inline bytes (those ride `parts`). Validated and
+     *  size-re-derived by {@link resolveChatAttachments} into persistable
+     *  attachment parts; a product whose `parts` field is spoken for by inline
+     *  uploads still sends store-backed files here. */
+    attachments?: ChatAttachmentInput[];
     model?: string;
     effort?: 'auto' | 'low' | 'medium' | 'high';
     harness?: string;
@@ -57,6 +84,41 @@ interface ChatTurnRequestPayload {
  *  parser. */
 declare function chatTurnRequestInit(payload: ChatTurnRequestPayload): RequestInit;
 declare const INLINE_PARTS_MAX_BYTES = 950000;
+/** Hard cap on the whole `/prompt` request body as it crosses the sandbox
+ *  proxy — smaller in practice than a raw-file write cap because a dispatch
+ *  carries several inline parts plus the flattened history in one request. */
+declare const DISPATCH_REQUEST_MAX_BYTES: number;
+/** Bytes reserved off the top of {@link DISPATCH_REQUEST_MAX_BYTES} for the
+ *  JSON structure around the parts array (keys, delimiters, per-part
+ *  `type`/`filename`/`mediaType` fields) that {@link base64WireLen} does not
+ *  account for — keeps the inline budget off the exact proxy cap where one
+ *  stray byte trips the 413. */
+declare const DISPATCH_STRUCTURAL_RESERVE_BYTES: number;
+/** Sidecar's hard cap on the `parts` array of one prompt request — a dispatch
+ *  must never assemble more parts than this or the whole turn 400s. */
+declare const DISPATCH_MAX_PARTS = 64;
+/** Product-side cap on media parts per dispatch (current turn + carried
+ *  history), well under {@link DISPATCH_MAX_PARTS}. History trimming that keeps
+ *  a transcript's native media under this is a PRODUCT concern (the pointer
+ *  block keeps trimmed media reachable); `buildDispatchParts` enforces only the
+ *  total {@link DISPATCH_MAX_PARTS} cap. */
+declare const DISPATCH_MAX_MEDIA_PARTS = 24;
+/** Size a base64-encoded string occupies on the wire given the raw
+ *  (pre-encoding) byte length: base64 packs 3 raw bytes into 4 output
+ *  characters, rounded up to the next multiple of 4. */
+declare function base64WireLen(byteLen: number): number;
+/**
+ * Render a raw byte count as a human-readable size (`512B`, `3KB`, `12MB
+ * 500KB`). Ported EXACTLY from gtm-agent's `attachment-limits.ts` — byte-
+ * identical implementation, not a reinterpretation — so `resolve-attachments`'s
+ * and `promote-file-part`'s error strings match gtm's wording verbatim. Lives
+ * in the import-free wire layer (not `resolve-attachments.ts` alone) because
+ * BOTH the aggregate-cap message here and the per-file oversize message in
+ * `promote-file-part.ts` need it; a browser composer wanting the same
+ * formatting for a client-side pre-check can also import it with no engine
+ * pulled in.
+ */
+declare function formatBytes(bytes: number): string;
 declare class ChatTurnInputError extends Error {
     readonly status: number;
     readonly code: string;
@@ -229,11 +291,15 @@ interface ChatToolPart {
     state: ChatToolState;
 }
 /** Union of the sidecar's legacy (path-based) and AI-SDK (url-based) file
- *  shapes; response-side every field besides `type` is optional. */
+ *  shapes; response-side every field besides `type` is optional. `name` is the
+ *  attachment-flavored display label an uploaded/promoted file carries (see
+ *  {@link ChatAttachmentPart}) — absent on a harness-emitted file part, which
+ *  uses `filename`. */
 interface ChatFilePart {
     type: 'file';
     id?: string;
     filename?: string;
+    name?: string;
     mediaType?: string;
     url?: string;
     path?: string;
@@ -242,6 +308,7 @@ interface ChatFilePart {
 interface ChatImagePart {
     type: 'image';
     filename?: string;
+    name?: string;
     mediaType?: string;
     url?: string;
     path?: string;
@@ -364,5 +431,82 @@ declare function mentionPartsFromMessageParts(parts: ReadonlyArray<Record<string
  *  than stored as `undefined`, so a stored row never carries a key that means
  *  nothing. */
 declare function mentionInputToPart(input: FileMention): ChatMentionPart;
+/** `image` for any `image/*` mime, `file` for everything else (including an
+ *  absent/empty mime) — the same split the composer and the persisted-part
+ *  discriminant both key on. */
+declare function attachmentKindForMime(mime?: string): ChatAttachmentKind;
+
+/**
+ * Persisted attachment part: structurally an attachment-flavored `ChatFilePart`
+ * / `ChatImagePart` (`path` + `name` promoted to required) rather than a
+ * separate union member — see the section note above. The index signature keeps
+ * it a `Record<string, unknown>` so it drops into the same untyped `parts`
+ * arrays every other stored part rides in, and lets the `type`-driven
+ * constructors below build it without union-discriminant gymnastics.
+ */
+interface ChatAttachmentPart {
+    type: ChatAttachmentKind;
+    path: string;
+    name: string;
+    size?: number;
+    mediaType?: string;
+    turnId?: string;
+    [key: string]: unknown;
+}
+/** True for any `image`/`file` part carrying a non-empty string `path`.
+ *  DELIBERATELY also matches a sidecar path-bearing file part (a mention-style
+ *  `file` part with only `path`) — the guard is a structural attachment shape,
+ *  not proof of provenance; a caller that needs to exclude those filters
+ *  upstream. The `path.length > 0` check diverges from gtm's original guard
+ *  (which only checked `typeof`), mirroring sibling {@link isChatMentionPart}:
+ *  read-side robustness against a stored `{type:'file', path:''}` row — which
+ *  would otherwise render a malformed `(vault: )` pointer line — justifies the
+ *  small divergence from byte-for-byte gtm parity here; no legitimate write
+ *  path ever produces an empty `path`. */
+declare function isChatAttachmentPart(part: unknown): part is ChatAttachmentPart;
+/** Drop absent/empty optional fields rather than persisting `undefined`/`''`
+ *  — keeps stored parts minimal. */
+declare function attachmentInputToPart(input: ChatAttachmentInput): ChatAttachmentPart;
+/** Every attachment part on one message's stored `parts`, in stored order. */
+declare function attachmentPartsFromMessageParts(parts: ReadonlyArray<Record<string, unknown>> | null | undefined): ChatAttachmentPart[];
+/** gtm's exact default header for {@link buildAttachmentPromptBlock} — kept
+ *  byte-identical because it feeds dispatched prompts (gtm-agent#618
+ *  reproduces the prompt bytes through this module). Override only with intent. */
+declare const DEFAULT_ATTACHMENT_PROMPT_HEADER = "Attached files (already saved to the workspace vault \u2014 read them from these paths):";
+/**
+ * The agent-facing pointer block appended to the dispatched prompt — never
+ * persisted in `message.content`. Empty array → `''` so callers can append
+ * unconditionally. The sole producer of this text: both the current turn's
+ * dispatch and history projection ({@link historyContentWithAttachments}) build
+ * it from here, so the two can never drift. `header` overrides the first line
+ * ({@link DEFAULT_ATTACHMENT_PROMPT_HEADER}); the per-file line format is fixed.
+ *
+ * Every interpolated `name`/`path` is swept for control characters first
+ * (newline/carriage-return/tab included) and each one replaced with a single
+ * space — a single-line-per-file guarantee. Without it, a control character
+ * riding through on a PERSISTED row (`historyContentWithAttachments` reads
+ * whatever is already stored; a legacy or hand-edited row was never re-checked
+ * against `resolveChatAttachments`) could inject extra lines — fabricated
+ * pointer entries or instructions — into a prompt the agent trusts verbatim.
+ * The wire-side validator is the primary control; this is the backstop for
+ * rows it never saw.
+ */
+declare function buildAttachmentPromptBlock(atts: ReadonlyArray<Pick<ChatAttachmentPart, 'name' | 'path'>>, header?: string): string;
+/**
+ * History projection for a persisted message: `content` unchanged when it
+ * carries no attachment parts, else the block is appended once. The
+ * no-double-annotation guarantee holds under the invariant that the block is
+ * never persisted INTO `message.content` — it is appended only at read time,
+ * by this function and the current turn's dispatch, both sourcing from
+ * `attachmentPartsFromMessageParts` — never by content inspection. This
+ * function does not (and cannot) detect an already-embedded block by scanning
+ * `content` for its text: a message whose stored `content` happens to already
+ * contain the block's bytes, alongside attachment parts, still gets the block
+ * appended a second time. See the pinned test for that boundary.
+ */
+declare function historyContentWithAttachments(message: {
+    content: string;
+    parts?: ReadonlyArray<Record<string, unknown>> | null;
+}, header?: string): string;
 
-export { type ChatTurnRequestPayload as A, type ChatTurnPartInput as B, type ChatFilePart as C, type ChatTurnFilePartInput as D, ChatTurnInputError as E, type FileMention as F, type ChatTurnTextPartInput as G, type FileMentionsToPartsOptions as H, INLINE_PARTS_MAX_BYTES as I, type SandboxMentionPathCheck as J, assertPromptPartsWithinCap as K, buildMentionPromptBlock as L, MENTION_MAX_COUNT as M, chatTurnRequestInit as N, fileMentionsToParts as O, mediaTypeForMentionPath as P, mentionKindForPath as Q, parseChatTurnParts as R, type StorableHarnessPartKind as S, parseFileMentions as T, promptPartsByteSize as U, validateSandboxMentionPath as V, type ChatImagePart as a, type ChatInteractionPart as b, type ChatMentionKind as c, type ChatMentionPart as d, type ChatMessagePart as e, type ChatNoticePart as f, type ChatPartTime as g, type ChatPlanPart as h, type ChatReasoningPart as i, type ChatStepFinishPart as j, type ChatStepStartPart as k, type ChatSubtaskPart as l, type ChatTextPart as m, type ChatToolPart as n, type ChatToolState as o, type ChatToolStatus as p, type ChatUsageTokens as q, isChatInteractionPart as r, isChatMentionPart as s, isChatPlanPart as t, isChatStepFinishPart as u, isChatTextPart as v, isChatToolPart as w, mentionInputToPart as x, mentionPartsFromMessageParts as y, toChatMessageParts as z };
+export { base64WireLen as $, isChatMentionPart as A, isChatPlanPart as B, type ChatAttachmentKind as C, DEFAULT_ATTACHMENT_PROMPT_HEADER as D, isChatStepFinishPart as E, isChatTextPart as F, isChatToolPart as G, mentionInputToPart as H, mentionPartsFromMessageParts as I, toChatMessageParts as J, type FileMention as K, type ChatTurnRequestPayload as L, type ChatTurnPartInput as M, type ChatTurnFilePartInput as N, type ChatAttachmentInput as O, ChatTurnInputError as P, type ChatTurnTextPartInput as Q, DISPATCH_MAX_MEDIA_PARTS as R, type StorableHarnessPartKind as S, DISPATCH_MAX_PARTS as T, DISPATCH_REQUEST_MAX_BYTES as U, DISPATCH_STRUCTURAL_RESERVE_BYTES as V, type FileMentionsToPartsOptions as W, INLINE_PARTS_MAX_BYTES as X, MENTION_MAX_COUNT as Y, type SandboxMentionPathCheck as Z, assertPromptPartsWithinCap as _, type ChatAttachmentPart as a, buildMentionPromptBlock as a0, chatTurnRequestInit as a1, fileMentionsToParts as a2, formatBytes as a3, mediaTypeForMentionPath as a4, mentionKindForPath as a5, parseChatTurnParts as a6, parseFileMentions as a7, promptPartsByteSize as a8, validateSandboxMentionPath as a9, type ChatFilePart as b, type ChatImagePart as c, type ChatInteractionPart as d, type ChatMentionKind as e, type ChatMentionPart as f, type ChatMessagePart as g, type ChatNoticePart as h, type ChatPartTime as i, type ChatPlanPart as j, type ChatReasoningPart as k, type ChatStepFinishPart as l, type ChatStepStartPart as m, type ChatSubtaskPart as n, type ChatTextPart as o, type ChatToolPart as p, type ChatToolState as q, type ChatToolStatus as r, type ChatUsageTokens as s, attachmentInputToPart as t, attachmentKindForMime as u, attachmentPartsFromMessageParts as v, buildAttachmentPromptBlock as w, historyContentWithAttachments as x, isChatAttachmentPart as y, isChatInteractionPart as z };

package/dist/preset-cloudflare/index.js

@@ -7,9 +7,9 @@ import {
   createPresetToolHandlers,
   createPresetWorkspaceKeyManager,
   createPresetWorkspaceKeyStore
-} from "../chunk-UHXQ3KNX.js";
-import "../chunk-G3HCU7TA.js";
+} from "../chunk-54GSK2KK.js";
 import "../chunk-TA5Q4I2K.js";
+import "../chunk-G3HCU7TA.js";
 export {
   PRESET_MIGRATION_SQL,
   PRESET_TABLES,

package/dist/profile/index.d.ts

@@ -1,8 +1,8 @@
-import { AgentProfileFileMount, AgentProfileMcpServer, AgentProfile } from '@tangle-network/sandbox';
+import { AgentProfileFileMount, AgentProfileResourceRef, AgentProfileMcpServer, AgentProfile } from '@tangle-network/sandbox';
 import { profile } from '@tangle-network/agent-eval';
 export { profile } from '@tangle-network/agent-eval';
 import { SkillEntry } from '../skills/index.js';
-export { ComposeShellResourcesInput, CorpusEntry, CorpusLoadResult, GlobModules, LoadCorpusOptions, composeShellResources, corpusSkills, loadMarkdownCorpus, registrySkills, skillMountPath } from '../skills/index.js';
+export { ComposeShellResourcesInput, ComposedSkills, CorpusEntry, CorpusLoadResult, GlobModules, LoadCorpusOptions, ParsedSkill, SkillDeliveryMode, SkillFrontmatter, assertSkillDeliveryDisjoint, composeShellResources, composeSkills, corpusSkills, loadMarkdownCorpus, mergeComposedSkills, parseCorpusSkills, parseSkillFrontmatter, registrySkills, renderInlineSkills, renderSkillIndex, skillEntryFromMarkdown, skillMountPath, skillRefs } from '../skills/index.js';
 
 /**
  * Profile composer + evolvable-section seam for agent products.
@@ -61,6 +61,17 @@ interface ProfileChannels {
     userSkills?: UserSkill[];
     /** Final skip filter applied to the composed mount list by mount `path`. */
     filesPredicate?: (mount: AgentProfileFileMount) => boolean;
+    /** Typed `resources.skills` channel — refs the platform materializer places
+     *  at the harness-native skill dir (see {@link skillRefs} and
+     *  `@tangle-network/agent-app/skills-placement`'s `composeSkillsForHarness`).
+     *  The successor to path-baked mounts: `registry`/`userSkills` above mount
+     *  files at the hardcoded claude-code path via {@link skillMountPath};
+     *  `skillRefs` instead rides the provider-neutral `resources.skills` field
+     *  the platform resolves per harness. */
+    skillRefs?: AgentProfileResourceRef[];
+    /** Tier passed to {@link registrySkills} for the `registry` channel.
+     *  Previously hardcoded `'free'`; default unchanged. */
+    registryTier?: string;
 }
 /** A per-user / per-workspace skill: an id and an inline `SKILL.md` body. The
  *  user-facing analogue of a registry {@link SkillEntry} with no tier gate —