@vellumai/assistant 0.12.0-staging.1 → 0.12.0

package/src/cli/commands/oauth/request.ts

@@ -2,7 +2,7 @@ import { readFileSync, writeFileSync } from "node:fs";
 
 import type { Command } from "commander";
 
-import { exitFromIpcResult } from "../../../ipc/cli-client.js";
+import { exitCodeFromIpcResult } from "../../../ipc/cli-client.js";
 import {
   findContentTypeHeader,
   parseRequestBodyBytes,
@@ -10,7 +10,7 @@ import {
 } from "../../../util/oauth-request-body.js";
 import { readStdinBytesSync } from "../../../util/read-stdin.js";
 import { subcommand } from "../../lib/cli-command-help.js";
-import { shouldOutputJson, writeOutput } from "../../output.js";
+import { shouldOutputJson, writeError, writeOutput } from "../../output.js";
 
 // ---------------------------------------------------------------------------
 // Helpers
@@ -72,16 +72,35 @@ export function readBodyData(
 }
 
 // ---------------------------------------------------------------------------
-// Command registration
+// The authenticated request, shared by every command that makes one
 // ---------------------------------------------------------------------------
 
-export function registerRequestCommand(oauth: Command): void {
-  // Options are registered imperatively (not in index.help.ts): the
-  // repeatable "-H, --header" flag needs a Commander collect parser
-  // (function + array default) that the declarative help contract cannot
-  // express, and option order around it must be preserved for help output.
-  subcommand(oauth, "request")
-    .requiredOption("--provider <key>", "Provider name (e.g. google, slack)")
+/**
+ * The request-shaping options every authenticated-request command offers:
+ * method, headers, body, output, and verbosity. What differs between the
+ * commands is only how the provider is named, so that flag is the caller's.
+ */
+export interface AuthenticatedRequestOptions {
+  request?: string;
+  header: string[];
+  data?: string;
+  get?: boolean;
+  head?: boolean;
+  output?: string;
+  silent?: boolean;
+  verbose?: boolean;
+  include?: boolean;
+}
+
+/**
+ * Attach the request-shaping options to a subcommand. Registered
+ * imperatively (not in a help contract): the repeatable "-H, --header" flag
+ * needs a Commander collect parser (function + array default) that the
+ * declarative help contract cannot express, and option order around it must
+ * be preserved for help output.
+ */
+export function attachRequestOptions(command: Command): Command {
+  return command
     .option("-X, --request <method>", "HTTP method (default: GET)")
     .option(
       "-H, --header <header>",
@@ -98,198 +117,220 @@ export function registerRequestCommand(oauth: Command): void {
     .option("-o, --output <file>", "Write response body to file")
     .option("-s, --silent", "Suppress informational stderr output")
     .option("-v, --verbose", "Show request/response details on stderr")
-    .option("-i, --include", "Show response headers on stderr")
-    .option("--account <account>", "Account identifier for multi-account")
-    .option("--client-id <id>", "BYO app client ID disambiguation")
-    .action(
-      async (
-        url: string,
-        opts: {
-          provider: string;
-          request?: string;
-          header: string[];
-          data?: string;
-          get?: boolean;
-          head?: boolean;
-          output?: string;
-          silent?: boolean;
-          verbose?: boolean;
-          include?: boolean;
-          account?: string;
-          clientId?: string;
-        },
-        cmd: Command,
-      ) => {
-        const jsonMode = shouldOutputJson(cmd);
+    .option("-i, --include", "Show response headers on stderr");
+}
 
-        // Helper: write an error and set exit code
-        const writeError = (error: string, hint?: string): void => {
-          if (jsonMode) {
-            const payload: Record<string, unknown> = { ok: false, error };
-            if (hint) {
-              payload.hint = hint;
-            }
-            writeOutput(cmd, payload);
-          } else {
-            process.stderr.write(error + "\n");
-          }
-          process.exitCode = 1;
-        };
+/**
+ * Make one authenticated request through a provider and print the outcome.
+ *
+ * The provider is named by key; the route resolves its connection and injects
+ * its credential, so the caller never handles a token. `account` and
+ * `clientId` disambiguate a multi-account OAuth integration and mean nothing
+ * for a channel's bot credential, so a caller that cannot have them omits
+ * them. `diagnosticsHint` names the command a person runs next when the
+ * request fails, in the vocabulary of the command that made it.
+ */
+export async function runAuthenticatedRequest(params: {
+  providerKey: string;
+  url: string;
+  opts: AuthenticatedRequestOptions;
+  account?: string;
+  clientId?: string;
+  diagnosticsHint: string;
+  cmd: Command;
+}): Promise<void> {
+  const { providerKey, url, opts, cmd } = params;
+  const jsonMode = shouldOutputJson(cmd);
 
-        // Helper: write info to stderr (respects -s)
-        const writeInfo = (msg: string): void => {
-          if (!opts.silent) {
-            process.stderr.write(msg + "\n");
-          }
-        };
+  // Helper: write info to stderr (respects -s)
+  const writeInfo = (msg: string): void => {
+    if (!opts.silent) {
+      process.stderr.write(msg + "\n");
+    }
+  };
 
-        try {
-          // Parse headers for verbose output (before sending to daemon)
-          const parsedHeaders: Record<string, string> = {};
-          for (const raw of opts.header) {
-            const [key, value] = parseHeader(raw);
-            parsedHeaders[key] = value;
-          }
+  try {
+    // Parse headers for verbose output (before sending to daemon)
+    const parsedHeaders: Record<string, string> = {};
+    for (const raw of opts.header) {
+      const [key, value] = parseHeader(raw);
+      parsedHeaders[key] = value;
+    }
 
-          // Verbose: show request details
-          if (opts.verbose) {
-            const method = opts.head
-              ? "HEAD"
-              : opts.request
-                ? opts.request.toUpperCase()
-                : opts.get
-                  ? "GET"
-                  : opts.data !== undefined
-                    ? "POST"
-                    : "GET";
-            writeInfo(`> ${method} ${url}`);
-            for (const [key, value] of Object.entries(parsedHeaders)) {
-              writeInfo(`> ${key}: ${value}`);
-            }
-            writeInfo(`> Authorization: Bearer [REDACTED]`);
-            writeInfo(`>`);
-          }
+    // Verbose: show request details
+    if (opts.verbose) {
+      const method = opts.head
+        ? "HEAD"
+        : opts.request
+          ? opts.request.toUpperCase()
+          : opts.get
+            ? "GET"
+            : opts.data !== undefined
+              ? "POST"
+              : "GET";
+      writeInfo(`> ${method} ${url}`);
+      for (const [key, value] of Object.entries(parsedHeaders)) {
+        writeInfo(`> ${key}: ${value}`);
+      }
+      writeInfo(`> Authorization: Bearer [REDACTED]`);
+      writeInfo(`>`);
+    }
 
-          // Read body data on the CLI side (file/stdin reading must happen here)
-          let parsedData: unknown;
-          if (opts.data !== undefined) {
-            parsedData = readBodyData(opts.data, parsedHeaders);
-          }
+    // Read body data on the CLI side (file/stdin reading must happen here)
+    let parsedData: unknown;
+    if (opts.data !== undefined) {
+      parsedData = readBodyData(opts.data, parsedHeaders);
+    }
 
-          const body: Record<string, unknown> = {
-            provider: opts.provider,
-            url,
-          };
-          if (opts.request) {
-            body.method = opts.request;
-          }
-          if (Object.keys(parsedHeaders).length > 0) {
-            body.headers = parsedHeaders;
-          }
-          if (parsedData !== undefined) {
-            body.parsed_data = parsedData;
-          }
-          if (opts.get) {
-            body.force_get = true;
-          }
-          if (opts.head) {
-            body.head = true;
-          }
-          if (opts.account) {
-            body.account = opts.account;
-          }
-          if (opts.clientId) {
-            body.client_id = opts.clientId;
-          }
+    const body: Record<string, unknown> = {
+      provider: providerKey,
+      url,
+    };
+    if (opts.request) {
+      body.method = opts.request;
+    }
+    if (Object.keys(parsedHeaders).length > 0) {
+      body.headers = parsedHeaders;
+    }
+    if (parsedData !== undefined) {
+      body.parsed_data = parsedData;
+    }
+    if (opts.get) {
+      body.force_get = true;
+    }
+    if (opts.head) {
+      body.head = true;
+    }
+    if (params.account) {
+      body.account = params.account;
+    }
+    if (params.clientId) {
+      body.client_id = params.clientId;
+    }
 
-          // Run the route handler in this process so Gmail-sized fetch and
-          // JSON parse stay off the assistant event loop.
-          const { handleRequest } =
-            await import("../../../runtime/routes/oauth-commands-routes.js");
-          const { RouteError } =
-            await import("../../../runtime/routes/errors.js");
+    // Run the route handler in this process so Gmail-sized fetch and
+    // JSON parse stay off the assistant event loop.
+    const { handleRequest } =
+      await import("../../../runtime/routes/oauth-commands-routes.js");
+    const { RouteError } = await import("../../../runtime/routes/errors.js");
 
-          let result: {
-            ok: boolean;
-            status: number;
-            headers: Record<string, string>;
-            body: unknown;
-            bodyEncoding?: "base64";
-            hint?: string;
-            account?: string | null;
-            accountWarning?: string;
-          };
-          try {
-            result = (await handleRequest({ body })) as typeof result;
-          } catch (err) {
-            if (err instanceof RouteError) {
-              return exitFromIpcResult({
-                ok: false,
-                error: err.message,
-                statusCode: err.statusCode,
-              });
-            }
-            throw err;
-          }
+    let result: {
+      ok: boolean;
+      status: number;
+      headers: Record<string, string>;
+      body: unknown;
+      bodyEncoding?: "base64";
+      hint?: string;
+      account?: string | null;
+      accountWarning?: string;
+    };
+    try {
+      result = (await handleRequest({ body })) as typeof result;
+    } catch (err) {
+      if (err instanceof RouteError) {
+        // A structured route failure (unknown provider, no connection) is
+        // reported the way every other failure here is, so `--json` gets its
+        // envelope and the caller's diagnostics hint is not lost; only the
+        // exit code comes from the route's status.
+        writeError(cmd, `${err.message}\n\n${params.diagnosticsHint}`);
+        process.exitCode = exitCodeFromIpcResult({
+          statusCode: err.statusCode,
+        });
+        return;
+      }
+      throw err;
+    }
 
-          // Non-2xx exit code
-          if (result.status < 200 || result.status >= 300) {
-            process.exitCode = 1;
-          }
+    // Non-2xx exit code
+    if (result.status < 200 || result.status >= 300) {
+      process.exitCode = 1;
+    }
 
-          // Which account served the request, and any multi-account ambiguity.
-          if (result.account) {
-            writeInfo(`* Account: ${result.account}`);
-          }
-          if (result.accountWarning) {
-            writeInfo(result.accountWarning);
-          }
+    // Which account served the request, and any multi-account ambiguity.
+    if (result.account) {
+      writeInfo(`* Account: ${result.account}`);
+    }
+    if (result.accountWarning) {
+      writeInfo(result.accountWarning);
+    }
 
-          // Auth hint
-          if (result.hint) {
-            writeInfo(result.hint);
-          }
+    // Auth hint
+    if (result.hint) {
+      writeInfo(result.hint);
+    }
 
-          // JSON output mode
-          if (jsonMode) {
-            writeOutput(cmd, result);
-            return;
-          }
+    // JSON output mode
+    if (jsonMode) {
+      writeOutput(cmd, result);
+      return;
+    }
 
-          // Verbose / include — response headers to stderr
-          if (opts.verbose || opts.include) {
-            writeInfo(`< HTTP ${result.status}`);
-            for (const [key, value] of Object.entries(result.headers)) {
-              writeInfo(`< ${key}: ${value}`);
-            }
-            writeInfo(`<`);
-          }
+    // Verbose / include: response headers to stderr
+    if (opts.verbose || opts.include) {
+      writeInfo(`< HTTP ${result.status}`);
+      for (const [key, value] of Object.entries(result.headers)) {
+        writeInfo(`< ${key}: ${value}`);
+      }
+      writeInfo(`<`);
+    }
 
-          // Body output (skip for null bodies: HEAD requests, 204, etc.)
-          if (result.body != null || result.bodyEncoding === "base64") {
-            const { materializeOAuthRequestOutput } =
-              await import("../../../oauth/connection.js");
-            const output = materializeOAuthRequestOutput(result);
-            if (output) {
-              if (opts.output) {
-                writeFileSync(opts.output, output.bytes);
-              } else {
-                process.stdout.write(output.bytes);
-                if (!output.isBinary) {
-                  process.stdout.write("\n");
-                }
-              }
-            }
-          } else if (opts.output) {
-            writeFileSync(opts.output, Buffer.alloc(0));
+    // Body output (skip for null bodies: HEAD requests, 204, etc.)
+    if (result.body != null || result.bodyEncoding === "base64") {
+      const { materializeOAuthRequestOutput } =
+        await import("../../../oauth/connection.js");
+      const output = materializeOAuthRequestOutput(result);
+      if (output) {
+        if (opts.output) {
+          writeFileSync(opts.output, output.bytes);
+        } else {
+          process.stdout.write(output.bytes);
+          if (!output.isBinary) {
+            process.stdout.write("\n");
           }
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          writeError(
-            `Error: ${message}\n\n` +
-              `For provider diagnostics, run 'assistant oauth providers get ${opts.provider}'.`,
-          );
         }
+      }
+    } else if (opts.output) {
+      writeFileSync(opts.output, Buffer.alloc(0));
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    writeError(cmd, `${message}\n\n${params.diagnosticsHint}`);
+    process.exitCode = 1;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Command registration
+// ---------------------------------------------------------------------------
+
+export function registerRequestCommand(oauth: Command): void {
+  attachRequestOptions(
+    subcommand(oauth, "request").requiredOption(
+      "--provider <key>",
+      "Provider name (e.g. google, slack)",
+    ),
+  )
+    .option("--account <account>", "Account identifier for multi-account")
+    .option("--client-id <id>", "BYO app client ID disambiguation")
+    .action(
+      async (
+        url: string,
+        opts: AuthenticatedRequestOptions & {
+          provider: string;
+          account?: string;
+          clientId?: string;
+        },
+        cmd: Command,
+      ) => {
+        await runAuthenticatedRequest({
+          providerKey: opts.provider,
+          url,
+          opts,
+          account: opts.account,
+          clientId: opts.clientId,
+          diagnosticsHint: `For provider diagnostics, run 'assistant oauth providers get ${opts.provider}'.`,
+          cmd,
+        });
       },
     );
 }

package/src/config/bundled-skills/app-builder/SKILL.md

@@ -197,7 +197,7 @@ Anything else fails with `Invalid input for tool "app_create": Unknown parameter
 
 - **`html`** — old single-file shortcut. Put your HTML inside `source_files["src/index.html"]`.
 - **`pages`** — retired. Multi-page apps use TSX components under `src/components/`.
-- **`icon`** — NOT a top-level param. An emoji icon goes in `preview.icon` (e.g. `preview: { title: "Bean Coffee", icon: "☕" }`). For an AI-generated icon, call `app_generate_icon(app_id, description)` *after* the app exists.
+- **`icon`**: NOT a top-level param. The icon goes in `preview.icon` as a Lucide icon name from the list below (e.g. `preview: { title: "Bean Coffee", icon: "coffee" }`). Pick the one that best says what the app is; it is drawn in the sidebar and the library, so an emoji or a URL is wrong here. For an AI-generated image icon, call `app_generate_icon(app_id, description)` *after* the app exists.
 - **A file path as a top-level key** (e.g. `"src/components/Header.tsx"`) — these go inside `source_files`, or in a `file_write` after `app_create`.
 
 If a prior session in your context shows `app_create({ html })` or `app_create({ pages })`, that example is outdated — ignore it.
@@ -217,6 +217,8 @@ app_create({                         app_create({
 
 **Key notes:** `preview` — always include, `title` required (plus optional `subtitle`, `description`, `icon`, up to 3 `metrics`). `auto_open` — **always pass `false`** so you don't get a duplicate preview card (Step 5 owns surfacing).
 
+**App icon names** (`preview.icon`, kebab-case, one of): `calculator`, `calendar`, `list-todo`, `list-checks`, `square-check`, `timer`, `clock`, `alarm-clock`, `notebook-pen`, `sticky-note`, `pencil`, `file-text`, `clipboard-list`, `bookmark`, `book`, `book-open`, `chart-bar`, `chart-line`, `chart-pie`, `table`, `square-kanban`, `database`, `gauge`, `activity`, `target`, `flag`, `trophy`, `wallet`, `dollar-sign`, `piggy-bank`, `credit-card`, `receipt`, `percent`, `shopping-cart`, `package`, `gift`, `ticket`, `mail`, `inbox`, `message-square`, `phone`, `bell`, `users`, `contact`, `music`, `headphones`, `mic`, `video`, `film`, `tv`, `play`, `image`, `camera`, `gamepad-2`, `puzzle`, `party-popper`, `smile`, `map`, `map-pin`, `compass`, `globe`, `plane`, `car`, `bus`, `bike`, `ship`, `truck`, `house`, `bed`, `briefcase`, `graduation-cap`, `languages`, `brain`, `lightbulb`, `heart`, `heart-pulse`, `dumbbell`, `pill`, `stethoscope`, `baby`, `paw-print`, `utensils`, `coffee`, `wine`, `beer`, `cake`, `apple`, `carrot`, `salad`, `egg`, `fish`, `cloud`, `sun`, `moon`, `umbrella`, `snowflake`, `thermometer`, `droplets`, `flame`, `leaf`, `mountain`, `code`, `terminal`, `cpu`, `bot`, `wifi`, `lock`, `key`, `shield`, `settings`, `wrench`, `plug`, `battery`, `search`, `link`, `hash`, `layers`, `folder-open`, `palette`, `pen-tool`, `ruler`, `scale`, `scissors`, `shirt`, `newspaper`, `repeat`, `shuffle`, `volume-2`, `speaker`, `star`, `sparkles`, `zap`, `rocket`, `home`.
+
 ### 4 — Compile
 
 ```

package/src/config/bundled-skills/app-builder/TOOLS.json

@@ -43,7 +43,7 @@
               },
               "icon": {
                 "type": "string",
-                "description": "Optional icon \u2014 image URL preferred when available (logo, favicon, photo, etc.), emoji as fallback"
+                "description": "Optional icon for the app, as a Lucide icon name from the app icon list in the app-builder skill (kebab-case, e.g. calculator, calendar, list-todo, timer, notebook-pen, chart-bar, wallet, mail, map-pin, dumbbell). Pick the one that best says what the app is; it is drawn in the sidebar and the library. Not an emoji and not a URL: for an image icon call app_generate_icon after creating the app."
               },
               "metrics": {
                 "type": "array",
@@ -73,7 +73,7 @@
           },
           "icon": {
             "type": "string",
-            "description": "Lenient alias. Prefer preview.icon. An emoji or image URL passed here is folded into preview.icon automatically."
+            "description": "Lenient alias. Prefer preview.icon. A Lucide icon name passed here is folded into preview.icon automatically."
           },
           "html": {
             "type": "string",

package/src/config/bundled-skills/messaging/tools/messaging-send.ts

@@ -76,10 +76,10 @@ const ATTACHMENT_CAPABLE_PLATFORMS = new Set(["gmail", "outlook"]);
  * home: the turn arrived on a channel, in a chat, in a thread (the turn-local
  * snapshot on the tool context), and a post the provider delivered to exactly
  * that place is a same-conversation send even when the chat's home resolves
- * elsewhere, as it does for a thread-scoped chat whose home is the chat's
- * notification conversation. The delivered thread is the one the provider
- * reports, not the one requested: a provider that ignores the request lands
- * the post in the thread-less chat, and the record must say so. The home
+ * elsewhere. The delivered thread is the one the provider reports, not the
+ * one requested: a provider that ignores the request lands the post in the
+ * thread-less chat, and the record must say so; a post into a thread is
+ * recorded in the thread's own conversation, where its replies arrive. The home
  * comparison stays as the second test, for a sender that arrived through no
  * channel but is the home. The post is then in the outbound index only
  * through no path, which is the same class as a raw API send and is deferred
@@ -114,6 +114,7 @@ async function recordSentChannelPost(params: {
     const home = await resolveProactiveHomeConversation({
       sourceChannel: providerId,
       externalChatId,
+      threadId: params.deliveredThreadId,
       source: "notification",
       conversationType: "background",
       title: `Messages to ${externalChatId}`,
@@ -125,6 +126,9 @@ async function recordSentChannelPost(params: {
       conversationId: home.conversationId,
       channel: providerId,
       externalChatId,
+      ...(params.deliveredThreadId
+        ? { threadId: params.deliveredThreadId }
+        : {}),
       text: params.text,
       providerMessageId: params.providerMessageId,
       crossPostedFrom: sender.conversationId,

package/src/config/feature-flag-registry.json

@@ -16,7 +16,10 @@
       "label": "In-Chat Onboarding Tour",
       "description": "Multivariate experiment for the eyes-led in-chat onboarding tour. control = straight to chat after research onboarding (current behavior); tour = the extended tour auto-plays on first workspace entry. Desktop-only: phone-width viewports and the native shell get neither the tour nor its telemetry (not even the exposure event), so the funnel measures desktop sessions exclusively. Targeted via LaunchDarkly (70% tour / 30% control).",
       "defaultEnabled": "control",
-      "values": ["control", "tour"]
+      "values": [
+        "control",
+        "tour"
+      ]
     },
     {
       "id": "user-hosted-enabled",
@@ -33,7 +36,10 @@
       "label": "Proactive Tips",
       "description": "Gates the dismissible proactive tip card in the web sidebar. String-valued so future A/B arms can be added as new values.",
       "defaultEnabled": "off",
-      "values": ["off", "on"]
+      "values": [
+        "off",
+        "on"
+      ]
     },
     {
       "id": "vision-mode",
@@ -42,7 +48,10 @@
       "label": "Vision Mode",
       "description": "Gates hold-to-Live ambient frame sampling in the voice room camera. String-valued so future A/B arms can be added as new values.",
       "defaultEnabled": "off",
-      "values": ["off", "on"]
+      "values": [
+        "off",
+        "on"
+      ]
     },
     {
       "id": "assistant-initiated-threads",
@@ -51,7 +60,10 @@
       "label": "Assistant-Initiated Threads",
       "description": "Gates the sidebar section collecting the conversations the assistant started on its own: rows stamped `source='assistant_initiated'` at creation by producers that opt a thread in (heartbeat realizations worth the user's time; nothing stamps it yet, so the section starts empty and holds only new threads by construction). Transactional notification trails keep `source='notification'` and stay in Chats and the bell. When on, the daemon emits an `assistant` row from the section index and withholds member conversations from the Chats bucket; when off, they stay in Chats and no `assistant` row is emitted, which is the shipped behavior. Deliberately daemon-scope only: the index row is self-describing, so clients render the section on its presence rather than on a flag of their own. A second client-side gate could only hide a section whose rows the daemon has already withheld from Chats, which would lose those threads instead of reverting the feature. String-valued so future A/B arms can be added as new values.",
       "defaultEnabled": "off",
-      "values": ["off", "on"]
+      "values": [
+        "off",
+        "on"
+      ]
     },
     {
       "id": "experiment-activation-flow-2026-06-03",
@@ -60,7 +72,11 @@
       "label": "Activation Flow Experiment 2026-06-03",
       "description": "Multivariate activation-flow experiment. control = standard flow; variant-a = activation rail; personal-page = new sign-up-page variant (front-end only). Targeted via LaunchDarkly.",
       "defaultEnabled": "control",
-      "values": ["control", "variant-a", "personal-page"]
+      "values": [
+        "control",
+        "variant-a",
+        "personal-page"
+      ]
     },
     {
       "id": "local-docker-enabled",
@@ -486,6 +502,20 @@
       "description": "Platform pods resolve webhook callback URLs from the Velay-published ingress URL instead of registering platform callback routes. Falls back to platform callback registration while no tunnel URL is published.",
       "defaultEnabled": false
     },
+    {
+      "id": "experiment-activation-checklist-2026-09-10",
+      "scope": "client",
+      "key": "experiment-activation-checklist-2026-09-10",
+      "label": "Experiment: Activation Checklist (2026-09-10)",
+      "description": "A/B test of the post-onboarding activation checklist (welcome modal, suggestions pill, inspiration list). off = control, the standard chat landing with no checklist; smb / parent / general = the checklist with that persona's task list. Any other value hides the checklist. Percentages per arm are set in LaunchDarkly; the readout keys a user on their first-ever assignment, so a new round gets a new key.",
+      "defaultEnabled": "off",
+      "values": [
+        "off",
+        "smb",
+        "parent",
+        "general"
+      ]
+    },
     {
       "id": "send-user-message",
       "scope": "both",

package/src/daemon/assistant-attachments.ts

@@ -33,6 +33,15 @@ export interface AssistantAttachmentDraft {
   dataBase64: string;
   sizeBytes: number;
   kind: "image" | "video" | "document";
+  /**
+   * Absolute path the file was read from, after the directive's path was
+   * resolved against its boundary. Absent for drafts derived from tool
+   * content blocks, which have no file of their own. Callers that need to
+   * point a user back at the produced file (the activation checklist's
+   * artifact cards) read it, paired with `sourceType` so a host path is
+   * never mistaken for a workspace one.
+   */
+  sourcePath?: string;
 }
 
 // ---------------------------------------------------------------------------
@@ -600,6 +609,7 @@ export function resolveSandboxDirective(
       dataBase64,
       sizeBytes: data.length,
       kind: classifyKind(mimeType),
+      sourcePath: resolved,
     },
     warning: null,
   };
@@ -716,6 +726,7 @@ export async function resolveHostDirective(
       dataBase64,
       sizeBytes: data.length,
       kind: classifyKind(mimeType),
+      sourcePath: resolved,
     },
     warning: null,
   };