palmier 1.0.7 → 1.0.10

package/README.md

@@ -79,6 +79,10 @@ Resources support MCP subscriptions — clients can subscribe via `resources/sub
 
 All device tools work while the Palmier Android app is in the background — they communicate via FCM data messages which wake the app's service even when it's not in the foreground. Each host has one **linked device**: the phone the host uses for SMS, contacts, location, and other device capabilities. Choose it at pair time (the "Link the host to this device" checkbox) or later from the drawer. Each capability must be enabled and its Android permission granted via toggles in the linked device's drawer.
 
+### Files in Agent Output
+
+Agents run with the task's run directory (`~/palmier/tasks/<task-id>/<run-id>/`) as their working directory and are instructed to link any file they produce with a relative markdown link, e.g. `[View report](report.md)` or `![Chart](chart.png)`. The app opens these links over whichever transport is in use (local, relay, or auto-LAN). It fetches the file through the `task.file` RPC in 512 KiB chunks, so large files fit within the relay's message size. Markdown files render in-app, with their own relative links and images resolved from the file's location. Text and images are previewed, and other file types are offered as a browser download. The host only serves files whose real path (after resolving symlinks) is inside that task's directory, up to 25 MB. A run whose output links an existing file triggers a "report ready" push notification.
+
 ### Architecture
 
 ```
@@ -158,7 +162,7 @@ Revoking the linked device also clears the host's linked-device record; device c
 
 Palmier can store website passwords and PINs like a browser's password manager so agents can sign in to sites without ever seeing the credentials. When an agent driving a browser (via the `playwright-cli` skill) reaches a login or PIN field, it calls the `fill-password` tool with the page URL, the username, and the field's element ref. Palmier matches the saved secret by **origin**, fills it directly into the live browser session, and presses Enter to submit the form in the same step — so the plaintext secret sits on the page for as little time as possible and never enters the agent's context. If nothing is saved for that `(origin, username)`, Palmier prompts you in the app with a masked dialog. The dialog has a "Save for next time" checkbox (on by default): leave it checked to store the secret for reuse, or uncheck it to fill it just this once without saving. Either way it is filled into the page. The plaintext secret is never returned to the agent and is never written to task history.
 
-Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the host:
+Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the app via **Manage saved passwords** in the side panel (lists origin and username only, with per-entry delete), or from the host CLI:
 
 ```bash
 # List saved passwords (origin and username only — never the password)

package/dist/agents/agent-instructions.md

@@ -2,10 +2,14 @@ You are an AI agent executing a task on behalf of the user. Follow these instruc
 
 All `[PALMIER_*]` markers below are control signals parsed by the host. They MUST be written to **stdout** (not stderr). Markers on stderr are ignored.
 
-## Reporting Output
-
-If you generate report or output files, print each file path on its own line to stdout using this exact format:
-[PALMIER_REPORT] <filename>
+## Linking Files
+
+The user reads your output on a different device and can only open files you link. When you refer to a file you created (report, image, data export, etc.):
+- Save it inside the current working directory (subdirectories are fine). Files anywhere else cannot be opened — copy them in first.
+- Link it with a markdown link whose target is a path relative to the current working directory, e.g. `[View report](report.md)` or `[Raw data](exports/results.csv)`. Never use absolute paths or `file://` URLs.
+- Embed images inline with `![description](chart.png)`.
+- Avoid spaces in file names; if unavoidable, percent-encode them (`my%20report.md`).
+- Inside markdown files you write, link other files relative to that markdown file.
 
 ## Completion
 

package/dist/agents/shared-prompt.d.ts

@@ -2,5 +2,4 @@ import type { ParsedTask } from "../types.js";
 export declare function getAgentInstructions(task: ParsedTask): string;
 export declare const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export declare const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export declare const TASK_REPORT_PREFIX = "[PALMIER_REPORT]";
 export declare const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";

package/dist/agents/shared-prompt.js

@@ -20,5 +20,4 @@ export function getAgentInstructions(task) {
 }
 export const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export const TASK_REPORT_PREFIX = "[PALMIER_REPORT]";
 export const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";

package/dist/commands/run.d.ts

@@ -1,7 +1,8 @@
 import type { TaskRunningState, RequiredPermission } from "../types.js";
 export declare function stripPalmierMarkers(output: string): string;
 export declare function runCommand(taskId: string): Promise<void>;
-export declare function parseReportFiles(output: string): string[];
+/** Only links to files that exist count, so example links echoed from the prompt are ignored. */
+export declare function listLinkedTaskFiles(taskDir: string, runId: string, output: string): string[];
 export declare function parsePermissions(output: string): RequiredPermission[];
 /** Falls back to "finished" if no success/failure marker is found. */
 export declare function parseTaskOutcome(output: string): TaskRunningState;

package/dist/commands/run.js

@@ -6,7 +6,8 @@ import { connectNats } from "../nats-client.js";
 import { parseTaskFile, getTaskDir, writeTaskFile, writeTaskStatus, readTaskStatus, appendHistory, createRunDir, appendRunMessage, readRunMessages, getRunDir, beginStreamingMessage } from "../task.js";
 import { getAgent } from "../agents/agent.js";
 import { getPlatform } from "../platform/index.js";
-import { TASK_SUCCESS_MARKER, TASK_FAILURE_MARKER, TASK_REPORT_PREFIX, TASK_PERMISSION_PREFIX } from "../agents/shared-prompt.js";
+import { TASK_SUCCESS_MARKER, TASK_FAILURE_MARKER, TASK_PERMISSION_PREFIX } from "../agents/shared-prompt.js";
+import { extractFileLinks, resolveTaskFile } from "../task-files.js";
 import { publishHostEvent } from "../events.js";
 /**
  * Invoke the agent CLI in a continuation loop to handle permission requests.
@@ -68,7 +69,7 @@ async function invokeAgentWithRetries(ctx, invokeTask) {
         if (notifyTimer)
             clearTimeout(notifyTimer);
         const outcome = result.exitCode !== 0 ? "failed" : parseTaskOutcome(result.output);
-        const reportFiles = parseReportFiles(result.output);
+        const linkedFiles = listLinkedTaskFiles(ctx.taskDir, ctx.runId, result.output);
         const requiredPermissions = parsePermissions(result.output);
         for (const stream of ["stdout", "stderr"]) {
             const trailing = lineBufs[stream];
@@ -80,19 +81,14 @@ async function invokeAgentWithRetries(ctx, invokeTask) {
             const permLines = requiredPermissions.map((p) => `- **${p.name}** ${p.description}`).join("\n");
             ensureWriter("stdout").write(`\n\n**Permissions requested:**\n${permLines}\n`);
         }
-        if (reportFiles.length > 0) {
-            ensureWriter("stdout").end(reportFiles);
-        }
-        else if (writer) {
-            writer.end();
-        }
+        writer?.end();
         await publishHostEvent(ctx.nc, ctx.config.hostId, ctx.taskId, { event_type: "result-updated", run_id: ctx.runId });
-        if (reportFiles.length > 0) {
+        if (linkedFiles.length > 0) {
             await publishHostEvent(ctx.nc, ctx.config.hostId, ctx.taskId, {
                 event_type: "report-generated",
                 run_id: ctx.runId,
                 name: ctx.task.frontmatter.name,
-                report_files: reportFiles,
+                report_files: linkedFiles,
             });
         }
         if (requiredPermissions.length > 0) {
@@ -357,22 +353,17 @@ async function requestConfirmation(config, task, taskDir) {
     });
     return confirmed;
 }
-const ALLOWED_REPORT_EXT = [".md", ".txt", ".png", ".jpg", ".jpeg", ".gif", ".svg", ".webp"];
-export function parseReportFiles(output) {
-    const regex = new RegExp(`^\\${TASK_REPORT_PREFIX}\\s+(.+)$`, "gm");
-    const files = [];
-    let match;
-    while ((match = regex.exec(output)) !== null) {
-        const name = match[1].trim();
-        // Skip placeholder examples echoed from the prompt (e.g. "<filename>").
-        if (!name || name.startsWith("<"))
-            continue;
-        const ext = name.lastIndexOf(".") >= 0 ? name.slice(name.lastIndexOf(".")).toLowerCase() : "";
-        if (!ALLOWED_REPORT_EXT.includes(ext))
-            continue;
-        files.push(name);
-    }
-    return files;
+/** Only links to files that exist count, so example links echoed from the prompt are ignored. */
+export function listLinkedTaskFiles(taskDir, runId, output) {
+    return extractFileLinks(output).filter((file) => {
+        try {
+            resolveTaskFile(taskDir, runId, file);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    });
 }
 export function parsePermissions(output) {
     const regex = new RegExp(`^\\${TASK_PERMISSION_PREFIX}\\s+(.+)$`, "gm");