@xopcai/xopc 0.0.232 → 0.0.233

package/dist/gateway/static/root/index.html

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-B2OJSXX9.js"></script>
+    <script type="module" crossorigin src="/assets/index-BGf-TiZj.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -25,13 +25,13 @@
     <link rel="modulepreload" crossorigin href="/assets/download-Dk-ZjtO6.js">
     <link rel="modulepreload" crossorigin href="/assets/plus-Q2yW6OE7.js">
     <link rel="modulepreload" crossorigin href="/assets/x-B_N4OPjy.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-Dp1OxSKt.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-DLwVxS3V.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-D4qOHT4D.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-D_dq_0LV.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-zIBW3wiV.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-tRr-7IxY.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-B-BHEcNd.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-CPkBOY3h.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-DqPZM2MH2.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
@@ -46,7 +46,7 @@
     <link rel="modulepreload" crossorigin href="/assets/eye-off-DEAzt3g1.js">
     <link rel="modulepreload" crossorigin href="/assets/eye-CABVeTq0.js">
     <link rel="modulepreload" crossorigin href="/assets/globe-DSSGFWFn.js">
-    <link rel="modulepreload" crossorigin href="/assets/notes-api-DEdNKw0I.js">
+    <link rel="modulepreload" crossorigin href="/assets/notes-api-BWSfTP1w.js">
     <link rel="modulepreload" crossorigin href="/assets/loader-circle-CifKLtgG.js">
     <link rel="modulepreload" crossorigin href="/assets/rotate-cw-LIg3Am9S.js">
     <link rel="modulepreload" crossorigin href="/assets/search-DA7gz22f.js">
@@ -54,20 +54,20 @@
     <link rel="modulepreload" crossorigin href="/assets/files-Dp8_uGTO.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-R8V9l6nk.js">
     <link rel="modulepreload" crossorigin href="/assets/button-CSEbl4zT.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-D2Rnh9fX.js">
-    <link rel="modulepreload" crossorigin href="/assets/registry-api-Cvr4Qm7N.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-Dnrl91pU.js">
+    <link rel="modulepreload" crossorigin href="/assets/registry-api-BeVzfRvs.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-BGQn8duh.js">
-    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-C8zjqmIv.js">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-YyZJKvFf.js">
+    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-C5y2gzMU.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-DH5wF8X8.js">
-    <link rel="modulepreload" crossorigin href="/assets/oauth-api-BNCO2YK5.js">
+    <link rel="modulepreload" crossorigin href="/assets/oauth-api-DnanEBsf.js">
     <link rel="modulepreload" crossorigin href="/assets/form-field-width-DJw_jULe.js">
     <link rel="modulepreload" crossorigin href="/assets/interaction-BmQogeqz.js">
     <link rel="modulepreload" crossorigin href="/assets/is-masked-secret-DOkL5b_X.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-VXCWz43N.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-Cpd3Gd5R.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-DQ5L3PTi.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-Bud54q9e.js">
     <link rel="stylesheet" crossorigin href="/assets/markdown-view-B1bGSQqt.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-rHjAElxG.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-BTUuTnc9.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.232";
+var version = "0.0.233";
 //#endregion
 export { version };

package/dist/packages/endpoint-tools-protocol/src/index.js

@@ -18,6 +18,7 @@ const endpointResultKindSchema = z.enum([
 	"json",
 	"file"
 ]);
+const endpointSensitivitySchema = z.enum(["public", "personal"]);
 const identifierSchema = z.string().min(1).max(160);
 const turnTokenSchema = z.string().min(32).max(160).regex(/^[A-Za-z0-9_-]+$/);
 const turnOriginSchema = z.discriminatedUnion("type", [
@@ -49,6 +50,9 @@ const endpointToolDescriptorSchema = z.strictObject({
 	title: z.string().min(1).max(120),
 	description: z.string().min(1).max(2e3),
 	inputSchema: jsonObjectSchema,
+	outputSchema: jsonObjectSchema,
+	policyId: z.string().regex(/^[a-z][a-z0-9_.-]+$/).max(120),
+	sensitivity: endpointSensitivitySchema,
 	effect: endpointEffectSchema,
 	confirmation: endpointConfirmationSchema,
 	requiresForeground: z.boolean(),
@@ -66,6 +70,42 @@ const endpointPrincipalRegistrationSchema = z.strictObject({
 	platform: z.string().min(1).max(80),
 	publicKey: z.string().min(32).max(2048)
 });
+const endpointSessionBindingRequestSchema = z.strictObject({ endpointId: identifierSchema });
+const backgroundCapabilitySchema = z.string().regex(/^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*)+$/).max(120);
+z.strictObject({
+	jobId: z.uuid(),
+	endpointId: identifierSchema,
+	capability: backgroundCapabilitySchema,
+	input: jsonObjectSchema,
+	idempotencyKey: identifierSchema,
+	consentGrantId: identifierSchema,
+	createdAt: timestampSchema,
+	expiresAt: timestampSchema
+});
+z.strictObject({
+	jobId: z.uuid(),
+	status: z.enum([
+		"queued",
+		"running",
+		"succeeded",
+		"failed",
+		"cancelled"
+	]),
+	updatedAt: timestampSchema,
+	output: jsonObjectSchema.optional(),
+	error: z.strictObject({
+		code: identifierSchema,
+		message: z.string().min(1).max(2e3)
+	}).optional()
+});
+z.strictObject({
+	eventId: z.uuid(),
+	endpointId: identifierSchema,
+	subscriptionId: identifierSchema,
+	eventType: backgroundCapabilitySchema,
+	data: jsonObjectSchema,
+	occurredAt: timestampSchema
+});
 const endpointHelloPayloadSchema = z.strictObject({
 	principalId: identifierSchema,
 	endpointId: identifierSchema,
@@ -135,7 +175,7 @@ const endpointToolErrorCodeSchema = z.enum([
 	"PROTOCOL_ERROR"
 ]);
 const envelope = (type, payload) => z.strictObject({
-	protocolVersion: z.literal(1),
+	protocolVersion: z.literal(2),
 	messageId: messageIdSchema,
 	type: z.literal(type),
 	sentAt: timestampSchema,
@@ -162,6 +202,126 @@ const clientEndpointMessageSchema = z.discriminatedUnion("type", [
 	envelope("tool.cancelled", invocationPayloadSchema)
 ]);
 const serverEndpointMessageSchema = z.discriminatedUnion("type", [envelope("tool.invoke", toolInvokePayloadSchema), envelope("tool.cancel", toolCancelPayloadSchema)]);
+const ENDPOINT_TEXT_OUTPUT_SCHEMA = {
+	type: "array",
+	minItems: 1,
+	maxItems: 20,
+	items: {
+		type: "object",
+		additionalProperties: false,
+		required: ["type", "text"],
+		properties: {
+			type: { const: "text" },
+			text: {
+				type: "string",
+				maxLength: 256 * 1024
+			}
+		}
+	}
+};
+const ENDPOINT_FILE_OUTPUT_SCHEMA = {
+	type: "array",
+	minItems: 1,
+	maxItems: 20,
+	items: {
+		type: "object",
+		additionalProperties: false,
+		required: [
+			"type",
+			"fileId",
+			"name",
+			"mimeType",
+			"size",
+			"sha256"
+		],
+		properties: {
+			type: { const: "file" },
+			fileId: {
+				type: "string",
+				minLength: 1,
+				maxLength: 160
+			},
+			name: {
+				type: "string",
+				minLength: 1,
+				maxLength: 255
+			},
+			mimeType: {
+				type: "string",
+				minLength: 1,
+				maxLength: 255
+			},
+			size: {
+				type: "integer",
+				minimum: 0
+			},
+			sha256: {
+				type: "string",
+				pattern: "^[a-f0-9]{64}$"
+			}
+		}
+	}
+};
+const ENDPOINT_CONTACT_RECORD_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: [
+		"id",
+		"name",
+		"phones",
+		"emails"
+	],
+	properties: {
+		id: {
+			type: "string",
+			minLength: 1,
+			maxLength: 512
+		},
+		name: {
+			type: "string",
+			minLength: 1,
+			maxLength: 500
+		},
+		phones: {
+			type: "array",
+			maxItems: 20,
+			items: {
+				type: "string",
+				maxLength: 100
+			}
+		},
+		emails: {
+			type: "array",
+			maxItems: 20,
+			items: {
+				type: "string",
+				maxLength: 320
+			}
+		}
+	}
+};
+function contactOutputSchema(multiple) {
+	return {
+		type: "array",
+		minItems: 1,
+		maxItems: 1,
+		items: {
+			type: "object",
+			additionalProperties: false,
+			required: ["type", "value"],
+			properties: {
+				type: { const: "json" },
+				value: multiple ? {
+					type: "array",
+					maxItems: 20,
+					items: ENDPOINT_CONTACT_RECORD_SCHEMA
+				} : ENDPOINT_CONTACT_RECORD_SCHEMA
+			}
+		}
+	};
+}
+const ENDPOINT_CONTACT_OUTPUT_SCHEMA = contactOutputSchema(false);
+const ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA = contactOutputSchema(true);
 function canonicalJson(value) {
 	if (value === null) return "null";
 	if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
@@ -181,4 +341,4 @@ function endpointHelloSigningPayload(payload) {
 	return canonicalJson(unsigned);
 }
 //#endregion
-export { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, ENDPOINT_MAX_FILE_BYTES, canonicalJson, clientEndpointMessageSchema, endpointHelloPayloadSchema, endpointHelloSigningPayload, endpointPrincipalRegistrationSchema, endpointTurnClaimSchema, serverEndpointMessageSchema, turnOriginSchema };
+export { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, ENDPOINT_MAX_FILE_BYTES, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson, clientEndpointMessageSchema, endpointHelloPayloadSchema, endpointHelloSigningPayload, endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema, endpointTurnClaimSchema, serverEndpointMessageSchema, turnOriginSchema };

package/dist/packages/gateway-contract/src/product-delivery.js

@@ -41,12 +41,16 @@ const ProductDeliveryOperationSchema = z.enum([
 	"completed",
 	"failed"
 ]);
-z.object({
+const ProductDeliveryEnvelopeSchema = z.object({
 	version: z.literal(1),
 	operation: ProductDeliveryOperationSchema,
 	primary: ProductReferenceSchema.optional(),
 	related: z.array(ProductReferenceSchema).optional()
 });
+function parseProductDeliveryEnvelope(value) {
+	const parsed = ProductDeliveryEnvelopeSchema.safeParse(value);
+	return parsed.success ? parsed.data : null;
+}
 const PRODUCT_DELIVERY_TEXT_PREFIX = "xopc-product-delivery:";
 function appendProductDeliveryText(text, delivery) {
 	if (!delivery) return text;
@@ -59,4 +63,4 @@ function productReferenceDeepLink(reference) {
 	}).toString()}`;
 }
 //#endregion
-export { appendProductDeliveryText };
+export { appendProductDeliveryText, parseProductDeliveryEnvelope };

package/dist/packages/gateway-contract/src/turn-outcome.js

@@ -106,9 +106,85 @@ const TurnOutcomeSchema = z.object({
 	evidence: z.array(TurnOutcomeEvidenceSchema),
 	createdAt: z.string()
 });
+const FILE_RESOURCE_ARTIFACT_URI_PREFIX = "xopc-file:";
+function fileResourceArtifactUri(fileResourceId) {
+	return `${FILE_RESOURCE_ARTIFACT_URI_PREFIX}${encodeURIComponent(fileResourceId)}`;
+}
+function turnOutcomeKindFromFileName(fileName) {
+	const extension = fileName.toLowerCase().split(".").pop() ?? "";
+	if (extension === "xlsx" || extension === "xls" || extension === "csv" || extension === "tsv") return "spreadsheet";
+	if (extension === "pptx" || extension === "ppt") return "presentation";
+	if (extension === "pdf") return "pdf";
+	if ([
+		"doc",
+		"docx",
+		"md",
+		"rtf",
+		"txt"
+	].includes(extension)) return "document";
+	if ([
+		"png",
+		"jpg",
+		"jpeg",
+		"gif",
+		"webp",
+		"svg",
+		"bmp"
+	].includes(extension)) return "image";
+	if ([
+		"mp4",
+		"mov",
+		"webm"
+	].includes(extension)) return "video";
+	if ([
+		"mp3",
+		"wav",
+		"ogg",
+		"m4a"
+	].includes(extension)) return "audio";
+	if ([
+		"zip",
+		"tar",
+		"gz",
+		"tgz"
+	].includes(extension)) return "archive";
+	if (extension === "html" || extension === "htm") return "site";
+	return "file";
+}
+function turnOutcomeMimeTypeFromFileName(fileName) {
+	return {
+		xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+		xls: "application/vnd.ms-excel",
+		csv: "text/csv",
+		tsv: "text/tab-separated-values",
+		pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+		ppt: "application/vnd.ms-powerpoint",
+		docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+		doc: "application/msword",
+		pdf: "application/pdf",
+		md: "text/markdown",
+		txt: "text/plain",
+		html: "text/html",
+		htm: "text/html",
+		png: "image/png",
+		jpg: "image/jpeg",
+		jpeg: "image/jpeg",
+		gif: "image/gif",
+		webp: "image/webp",
+		svg: "image/svg+xml",
+		mp4: "video/mp4",
+		mov: "video/quicktime",
+		webm: "video/webm",
+		mp3: "audio/mpeg",
+		wav: "audio/wav",
+		ogg: "audio/ogg",
+		m4a: "audio/mp4",
+		zip: "application/zip"
+	}[fileName.toLowerCase().split(".").pop() ?? ""];
+}
 function parseTurnOutcome(value) {
 	const parsed = TurnOutcomeSchema.safeParse(value);
 	return parsed.success ? parsed.data : null;
 }
 //#endregion
-export { TurnOutcomeDeliverableSchema, parseTurnOutcome };
+export { TurnOutcomeDeliverableSchema, fileResourceArtifactUri, parseTurnOutcome, turnOutcomeKindFromFileName, turnOutcomeMimeTypeFromFileName };

package/dist/src/agent/capabilities/definitions.d.ts

@@ -156,7 +156,7 @@ export declare const AGENT_CAPABILITY_DEFINITIONS: readonly [{
     readonly label: "Data analysis";
     readonly description: "Analyze local structured data and produce derived tables, summaries, or artifacts.";
     readonly category: "analysis";
-    readonly tools: readonly ["read_file", "write_file", "list_dir", "grep", "find"];
+    readonly tools: readonly ["read_file", "write_file", "list_dir", "grep", "find", "publish_artifacts"];
     readonly activation: {
         readonly mode: "explicit";
         readonly ttl: "session";

package/dist/src/agent/capabilities/definitions.js

@@ -159,7 +159,8 @@ const AGENT_CAPABILITY_DEFINITIONS = [
 			"write_file",
 			"list_dir",
 			"grep",
-			"find"
+			"find",
+			"publish_artifacts"
 		],
 		activation: {
 			mode: "explicit",

package/dist/src/agent/external-tools/endpoint-provider.js

@@ -66,13 +66,17 @@ var EndpointToolProvider = class {
 			details: {
 				endpointId: resolved.endpointId,
 				endpointToolName: resolved.tool.descriptor.name,
+				endpointSensitivity: resolved.tool.descriptor.sensitivity,
 				...result.details ?? {},
 				...files.length === 0 ? {} : { endpointFiles: files }
 			}
 		};
 	}
 	currentEndpoint() {
-		const origin = this.deps.getCurrentContext()?.origin;
+		const context = this.deps.getCurrentContext();
+		if (!context) return void 0;
+		if (this.deps.runtime.bindings.get(context.sessionKey)) return this.deps.runtime.bindings.resolve(context.sessionKey);
+		const origin = context.origin;
 		if (origin?.type !== "endpoint") return void 0;
 		return this.deps.runtime.registry.get(origin.endpointId);
 	}

package/dist/src/agent/prompt/sections/tooling.js

@@ -14,6 +14,7 @@ const CORE_TOOL_ORDER = [
 	"browser_use",
 	"send_message",
 	"send_media",
+	"publish_artifacts",
 	"memory_search",
 	"memory_get",
 	"session_recall",
@@ -51,6 +52,7 @@ const CORE_TOOL_SUMMARIES = {
 	browser_use: "Control the configured browser",
 	send_message: "Send messages to the current conversation or an explicit configured channel",
 	send_media: "Send media attachments to the current channel",
+	publish_artifacts: "Publish final generated files as durable chat deliverables",
 	memory_search: "Semantic search over indexed memory sources",
 	memory_get: "Read specific lines from memory sources returned by search",
 	session_recall: "Search exact raw turns in the current session, including compacted history",
@@ -117,6 +119,7 @@ function buildToolingSection(params) {
 	const hasFind = availableTools.has("find");
 	const hasExec = availableTools.has("exec_command");
 	const hasPlan = availableTools.has("update_plan");
+	const hasPublishArtifacts = availableTools.has("publish_artifacts");
 	const orchestrationLines = [];
 	if (hasDelegate) orchestrationLines.push("- Sub-agent delegation → use `delegate_task(goal, context?, toolset?)` for focused parallel work; results return to you automatically.");
 	if (hasWorkflow) orchestrationLines.push("- Multi-phase workflows → use `workflow` to start persisted runs with subagents when a script defines phases.");
@@ -131,6 +134,8 @@ function buildToolingSection(params) {
 		hasWrite ? `Use \`${writeToolName}\` only for new files or intentional complete rewrites.` : "",
 		hasGrep || hasFind ? `Use ${[hasGrep ? `\`${grepToolName}\`` : "", hasFind ? `\`${findToolName}\`` : ""].filter(Boolean).join(" and ")} for text/file discovery; use code graph or symbol tools when available for definitions and call relationships.` : "",
 		hasExec ? `Use \`${execToolName}\` for verification and safe inspection, not routine file editing.` : "",
+		hasWrite || hasExec ? "When delivering a user-facing workspace file, include a clickable Markdown link in the final response using `xopc://workspace/file?path=<workspace-relative-path>`; URL-encode spaces and special characters, and do not invent an HTTP or `file://` URL." : "",
+		hasPublishArtifacts ? "After a command or runtime creates final user-facing files such as spreadsheets, presentations, PDFs, documents, media, or archives, call `publish_artifacts` once with all final paths. Do not publish temporary files, code edits, or build intermediates." : "",
 		hasPlan ? `Use \`${planToolName}\` for multi-step coding work: keep exactly one active step when work is in progress, and update it after meaningful progress or review.` : "",
 		hasToolManual ? "Some complex tools have built-in manuals. Use `tool_manual(tool)` before non-trivial use." : "",
 		hasDelegate ? "If a task is complex or long-running, delegate it. Completion is push-based: the sub-agent result returns when done." : "",

package/dist/src/agent/tools/create-share-tool.js

@@ -1,4 +1,5 @@
 import { resolvePathUnderWorkspace } from "./tool-paths.js";
+import { turnOutcomeKindFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { resolveShareConfig } from "../../share/share-config.js";
 import { mergeWithDefaults } from "../../share/site-share-config.js";
@@ -231,7 +232,7 @@ function successResult(locale, payload) {
 			artifacts: [{
 				artifactId: `share:${String(payload.shareUrl ?? "")}`,
 				title: String(payload.title ?? "Shared result"),
-				kind: payload.kind === "site" ? "site" : payload.kind === "zip" ? "archive" : "file",
+				kind: payload.kind === "site" ? "site" : payload.kind === "zip" ? "archive" : turnOutcomeKindFromFileName(String(payload.title ?? "Shared result")),
 				availability: "available",
 				location: "artifact_store",
 				capabilities: payload.kind === "site" ? ["preview", "share"] : ["download", "share"],

package/dist/src/agent/tools/exec-command.js

@@ -94,7 +94,8 @@ function createExecCommandTool(workspaceCwd, options) {
 		description: [
 			"Run shell commands for code inspection, builds, tests, type checks, and verification.",
 			"Use apply_patch for file edits; do not edit files by shell redirection unless explicitly necessary.",
-			"Relative cwd values resolve under the current agent workspace."
+			"Relative cwd values resolve under the current agent workspace.",
+			"When the command creates final user-facing files, call publish_artifacts afterward with all final paths."
 		].join(" "),
 		parameters: ExecCommandSchema,
 		label: "Run Command",

package/dist/src/agent/tools/factory.js

@@ -22,6 +22,7 @@ import { createWebFetchTool, createWebSearchTool } from "./web.js";
 import { createWebExtractTool } from "./web-extract.js";
 import { createMessageTool } from "./communication.js";
 import { createSendMediaTool } from "./send-media.js";
+import { createPublishArtifactsTool } from "./publish-artifacts.js";
 import { createReadMediaTool } from "./media-read-tool.js";
 import { createCreateShareTool, isShareToolAvailable } from "./create-share-tool.js";
 import { createTodoTool } from "./todo-tool.js";
@@ -280,6 +281,7 @@ var AgentToolsFactory = class {
 				getConfig: () => this.deps.getConfig?.()
 			})] : [],
 			createSendMediaTool(workspace, bus, () => this.deps.getCurrentContext()),
+			createPublishArtifactsTool(workspace),
 			createReadMediaTool(),
 			...isShareToolAvailable(cfg) ? [createCreateShareTool({
 				workspace,

package/dist/src/agent/tools/index.d.ts

@@ -14,6 +14,7 @@ export { createWebSearchTool, createWebFetchTool } from './web.js';
 export { createWebExtractTool, stripHtmlBoilerplate, DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, } from './web-extract.js';
 export { createMessageTool } from './communication.js';
 export { createSendMediaTool } from './send-media.js';
+export { createPublishArtifactsTool } from './publish-artifacts.js';
 export { createReadMediaTool } from './media-read-tool.js';
 export { createCreateShareTool, isShareToolAvailable, type CreateShareToolDeps, } from './create-share-tool.js';
 export { createTodoTool, TodoStore, type TodoItem, type TodoStatus } from './todo-tool.js';

package/dist/src/agent/tools/index.js

@@ -16,6 +16,7 @@ import { createWebFetchTool, createWebSearchTool } from "./web.js";
 import { DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, createWebExtractTool, stripHtmlBoilerplate } from "./web-extract.js";
 import { createMessageTool } from "./communication.js";
 import { createSendMediaTool } from "./send-media.js";
+import { createPublishArtifactsTool } from "./publish-artifacts.js";
 import { createReadMediaTool } from "./media-read-tool.js";
 import { createCreateShareTool, isShareToolAvailable } from "./create-share-tool.js";
 import { TodoStore, createTodoTool } from "./todo-tool.js";
@@ -42,4 +43,4 @@ import { createManagedJobTool } from "./managed-job-tool.js";
 import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
 import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
-export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, buildSandboxToolMap, createApplyPatchTool, createAutomationTool, createBrowserRecipeTool, createClarifyTool, createCreateShareTool, createDelegateTool, createDesktopPetTool, createDreamingTool, createExecCommandTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createManagedJobTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionRecallTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_TOOL_METADATA, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, ToolConcurrencyController, assertBrowserUrlAllowed, buildSandboxToolMap, createApplyPatchTool, createAutomationTool, createBrowserRecipeTool, createClarifyTool, createCreateShareTool, createDelegateTool, createDesktopPetTool, createDreamingTool, createExecCommandTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createManagedJobTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createPublishArtifactsTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionRecallTool, createSessionSearchTool, createSessionStatusTool, createSkillInstallTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createSkillsMarketplaceSearchTool, createTodoTool, createToolManualTool, createUpdatePlanTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, createXopcUseTool, findTool, formatSize, fuzzyFindText, generateDiffString, getToolMetadata, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, resolveToolLockMode, restoreLineEndings, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/tools/publish-artifacts.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+export declare function createPublishArtifactsTool(workspace: string): AgentTool;

package/dist/src/agent/tools/publish-artifacts.js

@@ -0,0 +1,82 @@
+import { checkFileSafety } from "../prompt/safety.js";
+import { resolvePathUnderWorkspace } from "./tool-paths.js";
+import { turnOutcomeKindFromFileName, turnOutcomeMimeTypeFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
+import { persistToolMedia } from "./tool-media.js";
+import { basename, isAbsolute } from "node:path";
+import { readFile } from "node:fs/promises";
+import { Type } from "@sinclair/typebox";
+//#region src/agent/tools/publish-artifacts.ts
+const PublishArtifactsSchema = Type.Object({ paths: Type.Array(Type.String({ minLength: 1 }), {
+	minItems: 1,
+	maxItems: 50,
+	description: "Files to publish. Relative paths resolve under the current agent workspace."
+}) });
+function createPublishArtifactsTool(workspace) {
+	return {
+		name: "publish_artifacts",
+		label: "Publish Artifacts",
+		description: "Publish completed user-facing files into durable chat artifacts. Call this after exec_command or another runtime creates spreadsheets, presentations, PDFs, documents, archives, or other files. Pass every final deliverable together; do not publish temporary or source files.",
+		parameters: PublishArtifactsSchema,
+		mutationScope: "none",
+		supportsParallel: false,
+		idempotent: false,
+		async execute(toolCallId, params) {
+			const paths = [...new Set(params.paths.map((value) => value.trim()).filter(Boolean))];
+			if (paths.length === 0) throw new Error("At least one artifact path is required");
+			const artifacts = [];
+			const publishedPaths = /* @__PURE__ */ new Set();
+			for (const [index, inputPath] of paths.entries()) {
+				const resolved = resolvePathUnderWorkspace(inputPath, workspace);
+				if (publishedPaths.has(resolved)) continue;
+				publishedPaths.add(resolved);
+				try {
+					const safety = checkFileSafety("read", resolved);
+					if (!safety.allowed) throw new Error(safety.message);
+					const media = await persistToolMedia({
+						buffer: await readFile(resolved),
+						filePath: resolved
+					});
+					const kind = turnOutcomeKindFromFileName(media.name);
+					artifacts.push({
+						artifactId: media.id,
+						title: media.name,
+						kind,
+						mimeType: media.mimeType,
+						sizeBytes: media.size,
+						availability: "available",
+						location: "artifact_store",
+						capabilities: kind === "archive" || kind === "file" ? ["download"] : ["preview", "download"],
+						uri: media.uri
+					});
+				} catch {
+					const title = basename(resolved);
+					const mimeType = turnOutcomeMimeTypeFromFileName(title);
+					artifacts.push({
+						artifactId: `publish-failed:${toolCallId}:${index}`,
+						title,
+						kind: turnOutcomeKindFromFileName(title),
+						...mimeType ? { mimeType } : {},
+						availability: "failed",
+						location: isAbsolute(inputPath) ? "external_host" : "workspace",
+						capabilities: ["regenerate"]
+					});
+				}
+			}
+			const publishedCount = artifacts.filter((item) => item.availability === "available").length;
+			const failedCount = artifacts.length - publishedCount;
+			return {
+				content: [{
+					type: "text",
+					text: [
+						`${publishedCount} artifact${publishedCount === 1 ? "" : "s"} published`,
+						failedCount > 0 ? `${failedCount} failed` : "",
+						artifacts.map((item) => item.title).join(", ")
+					].filter(Boolean).join(": ")
+				}],
+				details: { artifacts }
+			};
+		}
+	};
+}
+//#endregion
+export { createPublishArtifactsTool };

package/dist/src/agent/tools/send-media.js

@@ -1,5 +1,6 @@
 import { checkFileSafety } from "../prompt/safety.js";
 import { resolvePathUnderWorkspace } from "./tool-paths.js";
+import { turnOutcomeKindFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { persistToolMedia } from "./tool-media.js";
 import { basename } from "node:path";
 import { readFile } from "fs/promises";
@@ -67,7 +68,7 @@ function createSendMediaTool(workspace, bus, getContext) {
 						artifacts: [{
 							artifactId: media.id,
 							title: media.name,
-							kind: media.type === "photo" ? "image" : media.type === "video" ? "video" : media.type === "audio" ? "audio" : media.mimeType === "application/pdf" ? "pdf" : "file",
+							kind: media.type === "photo" ? "image" : media.type === "video" ? "video" : media.type === "audio" ? "audio" : turnOutcomeKindFromFileName(media.name),
 							mimeType: media.mimeType,
 							sizeBytes: media.size,
 							availability: "available",

package/dist/src/cli/command-catalog.js

@@ -44,6 +44,10 @@ const cliCommandCatalog = [
 		commandPath: ["doctor"],
 		policy: { loadExtensions: "never" }
 	},
+	{
+		commandPath: ["support"],
+		policy: { loadExtensions: "never" }
+	},
 	{
 		commandPath: ["models"],
 		policy: { loadExtensions: "never" }

package/dist/src/cli/command-loaders.js

@@ -16,6 +16,7 @@ const REGISTRY_COMMAND_MODULES = {
 	project: () => import("./commands/project.js"),
 	config: () => import("./commands/config.js"),
 	doctor: () => import("./commands/doctor/index.js"),
+	support: () => import("./commands/support.js"),
 	runtime: () => import("./commands/runtime.js"),
 	image: () => import("./commands/image.js"),
 	channels: () => import("./commands/channels.js"),