palmier 1.0.8 → 1.0.11

package/README.md

@@ -55,8 +55,8 @@ Palmier exposes an [MCP](https://modelcontextprotocol.io) server at `http://loca
 | Tool | Description |
 |------|-------------|
 | `notify` | Send a push notification to the user's device |
-| `request-input` | Request input from the user (blocks until response) |
-| `request-confirmation` | Request confirmation from the user (blocks until response) |
+| `request-input` | Request input from the user (blocks until response; aborting the prompt aborts the task) |
+| `request-confirmation` | Request confirmation from the user (blocks until response; aborting aborts the task) |
 | `fill-password` | Fill a saved password or PIN into the active browser session and submit the form, prompting the user if unknown (the secret is never revealed to the agent) |
 | `device-geolocation` | Get GPS location of the user's mobile device |
 | `read-contacts` | Read the contact list from the user's device |
@@ -79,6 +79,10 @@ Resources support MCP subscriptions — clients can subscribe via `resources/sub
 
 All device tools work while the Palmier Android app is in the background — they communicate via FCM data messages which wake the app's service even when it's not in the foreground. Each host has one **linked device**: the phone the host uses for SMS, contacts, location, and other device capabilities. Choose it at pair time (the "Link the host to this device" checkbox) or later from the drawer. Each capability must be enabled and its Android permission granted via toggles in the linked device's drawer.
 
+### Files in Agent Output
+
+Agents run with the task's run directory (`~/palmier/tasks/<task-id>/<run-id>/`) as their working directory and are instructed to link any file they produce with a relative markdown link, e.g. `[View report](report.md)` or `![Chart](chart.png)`. The app opens these links over whichever transport is in use (local, relay, or auto-LAN). It fetches the file through the `task.file` RPC in 512 KiB chunks, so large files fit within the relay's message size. Markdown files render in-app, with their own relative links and images resolved from the file's location. Text and images are previewed, and other file types are offered as a browser download. The host only serves files whose real path (after resolving symlinks) is inside that task's directory, up to 25 MB. A run whose output links an existing file triggers a "report ready" push notification.
+
 ### Architecture
 
 ```

package/dist/agents/agent-instructions.md

@@ -2,10 +2,14 @@ You are an AI agent executing a task on behalf of the user. Follow these instruc
 
 All `[PALMIER_*]` markers below are control signals parsed by the host. They MUST be written to **stdout** (not stderr). Markers on stderr are ignored.
 
-## Reporting Output
-
-If you generate report or output files, print each file path on its own line to stdout using this exact format:
-[PALMIER_REPORT] <filename>
+## Linking Files
+
+The user reads your output on a different device and can only open files you link. When you refer to a file you created (report, image, data export, etc.):
+- Save it inside the current working directory (subdirectories are fine). Files anywhere else cannot be opened — copy them in first.
+- Link it with a markdown link whose target is a path relative to the current working directory, e.g. `[View report](report.md)` or `[Raw data](exports/results.csv)`. Never use absolute paths or `file://` URLs.
+- Embed images inline with `![description](chart.png)`.
+- Avoid spaces in file names; if unavoidable, percent-encode them (`my%20report.md`).
+- Inside markdown files you write, link other files relative to that markdown file.
 
 ## Completion
 

package/dist/agents/shared-prompt.d.ts

@@ -2,5 +2,4 @@ import type { ParsedTask } from "../types.js";
 export declare function getAgentInstructions(task: ParsedTask): string;
 export declare const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export declare const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export declare const TASK_REPORT_PREFIX = "[PALMIER_REPORT]";
 export declare const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";

package/dist/agents/shared-prompt.js

@@ -20,5 +20,4 @@ export function getAgentInstructions(task) {
 }
 export const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export const TASK_REPORT_PREFIX = "[PALMIER_REPORT]";
 export const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";

package/dist/commands/run.d.ts

@@ -1,7 +1,8 @@
 import type { TaskRunningState, RequiredPermission } from "../types.js";
 export declare function stripPalmierMarkers(output: string): string;
 export declare function runCommand(taskId: string): Promise<void>;
-export declare function parseReportFiles(output: string): string[];
+/** Only links to files that exist count, so example links echoed from the prompt are ignored. */
+export declare function listLinkedTaskFiles(taskDir: string, runId: string, output: string): string[];
 export declare function parsePermissions(output: string): RequiredPermission[];
 /** Falls back to "finished" if no success/failure marker is found. */
 export declare function parseTaskOutcome(output: string): TaskRunningState;

package/dist/commands/run.js

@@ -6,7 +6,8 @@ import { connectNats } from "../nats-client.js";
 import { parseTaskFile, getTaskDir, writeTaskFile, writeTaskStatus, readTaskStatus, appendHistory, createRunDir, appendRunMessage, readRunMessages, getRunDir, beginStreamingMessage } from "../task.js";
 import { getAgent } from "../agents/agent.js";
 import { getPlatform } from "../platform/index.js";
-import { TASK_SUCCESS_MARKER, TASK_FAILURE_MARKER, TASK_REPORT_PREFIX, TASK_PERMISSION_PREFIX } from "../agents/shared-prompt.js";
+import { TASK_SUCCESS_MARKER, TASK_FAILURE_MARKER, TASK_PERMISSION_PREFIX } from "../agents/shared-prompt.js";
+import { extractFileLinks, resolveTaskFile } from "../task-files.js";
 import { publishHostEvent } from "../events.js";
 /**
  * Invoke the agent CLI in a continuation loop to handle permission requests.
@@ -68,7 +69,7 @@ async function invokeAgentWithRetries(ctx, invokeTask) {
         if (notifyTimer)
             clearTimeout(notifyTimer);
         const outcome = result.exitCode !== 0 ? "failed" : parseTaskOutcome(result.output);
-        const reportFiles = parseReportFiles(result.output);
+        const linkedFiles = listLinkedTaskFiles(ctx.taskDir, ctx.runId, result.output);
         const requiredPermissions = parsePermissions(result.output);
         for (const stream of ["stdout", "stderr"]) {
             const trailing = lineBufs[stream];
@@ -80,19 +81,14 @@ async function invokeAgentWithRetries(ctx, invokeTask) {
             const permLines = requiredPermissions.map((p) => `- **${p.name}** ${p.description}`).join("\n");
             ensureWriter("stdout").write(`\n\n**Permissions requested:**\n${permLines}\n`);
         }
-        if (reportFiles.length > 0) {
-            ensureWriter("stdout").end(reportFiles);
-        }
-        else if (writer) {
-            writer.end();
-        }
+        writer?.end();
         await publishHostEvent(ctx.nc, ctx.config.hostId, ctx.taskId, { event_type: "result-updated", run_id: ctx.runId });
-        if (reportFiles.length > 0) {
+        if (linkedFiles.length > 0) {
             await publishHostEvent(ctx.nc, ctx.config.hostId, ctx.taskId, {
                 event_type: "report-generated",
                 run_id: ctx.runId,
                 name: ctx.task.frontmatter.name,
-                report_files: reportFiles,
+                report_files: linkedFiles,
             });
         }
         if (requiredPermissions.length > 0) {
@@ -357,22 +353,17 @@ async function requestConfirmation(config, task, taskDir) {
     });
     return confirmed;
 }
-const ALLOWED_REPORT_EXT = [".md", ".txt", ".png", ".jpg", ".jpeg", ".gif", ".svg", ".webp"];
-export function parseReportFiles(output) {
-    const regex = new RegExp(`^\\${TASK_REPORT_PREFIX}\\s+(.+)$`, "gm");
-    const files = [];
-    let match;
-    while ((match = regex.exec(output)) !== null) {
-        const name = match[1].trim();
-        // Skip placeholder examples echoed from the prompt (e.g. "<filename>").
-        if (!name || name.startsWith("<"))
-            continue;
-        const ext = name.lastIndexOf(".") >= 0 ? name.slice(name.lastIndexOf(".")).toLowerCase() : "";
-        if (!ALLOWED_REPORT_EXT.includes(ext))
-            continue;
-        files.push(name);
-    }
-    return files;
+/** Only links to files that exist count, so example links echoed from the prompt are ignored. */
+export function listLinkedTaskFiles(taskDir, runId, output) {
+    return extractFileLinks(output).filter((file) => {
+        try {
+            resolveTaskFile(taskDir, runId, file);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    });
 }
 export function parsePermissions(output) {
     const regex = new RegExp(`^\\${TASK_PERMISSION_PREFIX}\\s+(.+)$`, "gm");

package/dist/mcp-tools.d.ts

@@ -10,6 +10,7 @@ export interface ToolContext {
     publishEvent: (id: string, payload: Record<string, unknown>) => Promise<void>;
     sessionId: string;
     agentName?: string;
+    abortTask: (taskId: string) => Promise<void>;
 }
 export interface ToolDefinition {
     name: string;

package/dist/mcp-tools.js

@@ -95,6 +95,7 @@ const requestInputTool = {
                 event_type: "input-resolved", host_id: ctx.config.hostId,
                 session_id: ctx.sessionId, status: "aborted",
             });
+            await abortSessionTask(ctx);
             return { aborted: true };
         }
         await ctx.publishEvent("_input", {
@@ -123,7 +124,7 @@ function recordUserInputToRun(ctx, questions, response, aborted) {
     if (!runId)
         return;
     const content = aborted
-        ? "Cancel"
+        ? "Aborted"
         : questions.map((q, i) => `**${q}**\n\n${response[i] ?? ""}`).join("\n\n");
     try {
         spliceUserMessage(taskDir, runId, {
@@ -138,6 +139,13 @@ function recordUserInputToRun(ctx, questions, response, aborted) {
         // Run file missing or unwritable — best-effort, do not fail the tool call.
     }
 }
+/** No-op for pure MCP-protocol sessions, whose sessionId is a random UUID rather than a task. */
+async function abortSessionTask(ctx) {
+    const taskId = ctx.sessionId;
+    if (!taskId || !fs.existsSync(getTaskDir(ctx.config.projectRoot, taskId)))
+        return;
+    await ctx.abortTask(taskId);
+}
 const requestConfirmationTool = {
     name: "request-confirmation",
     description: [
@@ -176,6 +184,8 @@ const requestConfirmationTool = {
             session_id: ctx.sessionId,
             status: confirmed ? "confirmed" : "aborted",
         });
+        if (!confirmed)
+            await abortSessionTask(ctx);
         return { confirmed };
     },
 };
@@ -231,8 +241,10 @@ const fillPasswordTool = {
                 session_id: ctx.sessionId, status: aborted ? "aborted" : "provided",
             });
             // Never record the secret to the task run file (unlike request-input).
-            if (aborted)
+            if (aborted) {
+                await abortSessionTask(ctx);
                 return { aborted: true };
+            }
             password = response[0];
             // The PWA appends a "save"/"nosave" flag for password prompts; persist
             // unless the user opted out via the dialog's checkbox.