@elizaos/plugin-agent-orchestrator 0.4.1 → 0.4.3

package/dist/actions/coding-task-helpers.d.ts

@@ -9,8 +9,14 @@
  */
 import { type HandlerCallback, type IAgentRuntime } from "@elizaos/core";
 import type { PTYService } from "../services/pty-service.js";
-/** Create a scratch sandbox directory for non-repo tasks */
-export declare function createScratchDir(): string;
+/**
+ * Create a scratch sandbox directory for non-repo tasks.
+ *
+ * When `PARALLAX_CODING_DIRECTORY` is set (e.g. `~/Projects`), creates a
+ * named subdir like `~/Projects/todo-app/` derived from the task label.
+ * Otherwise falls back to `~/.milady/workspaces/{uuid}`.
+ */
+export declare function createScratchDir(runtime?: IAgentRuntime, label?: string): string;
 /**
  * Generate a short semantic label from repo URL and/or task description.
  * e.g. "git-workspace-service-testbed/hello-mima" or "scratch/react-research"

package/dist/actions/coding-task-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-task-helpers.d.ts","sourceRoot":"","sources":["../../src/actions/coding-task-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D,4DAA4D;AAC5D,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CA4BR;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,QAAQ,CAAC,EAAE,eAAe,EAC1B,iBAAiB,UAAQ,GACxB,IAAI,CA6DN"}
+{"version":3,"file":"coding-task-helpers.d.ts","sourceRoot":"","sources":["../../src/actions/coding-task-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AA+B7D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,CAAC,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE,MAAM,GACb,MAAM,CA0BR;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CA4BR;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,QAAQ,CAAC,EAAE,eAAe,EAC1B,iBAAiB,UAAQ,GACxB,IAAI,CAsEN"}

package/dist/index.js

@@ -3241,6 +3241,7 @@ import * as os from "os";
 import * as path2 from "path";
 var MAX_ENTRIES = 150;
 var TRUNCATE_TO = 100;
+var MAX_FILE_SIZE_BYTES = 1048576;
 
 class WriteMutex {
   queue = [];
@@ -3280,6 +3281,13 @@ class SwarmHistory {
       await fs.appendFile(this.filePath, `${JSON.stringify(entry)}
 `, "utf-8");
       this.appendCount++;
+      try {
+        const stat2 = await fs.stat(this.filePath);
+        if (stat2.size > MAX_FILE_SIZE_BYTES) {
+          await this.truncateInner(TRUNCATE_TO);
+          return;
+        }
+      } catch {}
       if (this.appendCount >= MAX_ENTRIES - TRUNCATE_TO) {
         const content = await fs.readFile(this.filePath, "utf-8");
         const lineCount = content.split(`
@@ -3339,10 +3347,16 @@ class SwarmHistory {
         return;
       }
     }
-    const kept = entries.slice(-maxEntries);
-    const content = kept.map((e) => JSON.stringify(e)).join(`
+    let kept = entries.slice(-maxEntries);
+    let content = kept.map((e) => JSON.stringify(e)).join(`
+`) + `
+`;
+    while (Buffer.byteLength(content, "utf-8") > MAX_FILE_SIZE_BYTES && kept.length > 1) {
+      kept = kept.slice(Math.max(1, Math.floor(kept.length * 0.2)));
+      content = kept.map((e) => JSON.stringify(e)).join(`
 `) + `
 `;
+    }
     await fs.writeFile(this.filePath, content, "utf-8");
     this.appendCount = 0;
   }
@@ -3586,9 +3600,30 @@ class SwarmCoordinator {
   constructor(runtime) {
     this.runtime = runtime;
   }
+  scratchDecisionWired = false;
   setChatCallback(cb) {
     this.chatCallback = cb;
     this.log("Chat callback wired");
+    this.wireScratchDecisionCallback();
+  }
+  wireScratchDecisionCallback() {
+    if (this.scratchDecisionWired || !this.chatCallback)
+      return;
+    const wsService = this.runtime.getService("CODING_WORKSPACE_SERVICE");
+    if (wsService?.setScratchDecisionCallback) {
+      const chatCb = this.chatCallback;
+      wsService.setScratchDecisionCallback(async (record) => {
+        const ttlNote = record.expiresAt ? (() => {
+          const remainMs = record.expiresAt - Date.now();
+          const hours = Math.round(remainMs / (60 * 60 * 1000));
+          return hours >= 1 ? `It will be automatically cleaned up in ~${hours} hour${hours === 1 ? "" : "s"}.` : `It will be automatically cleaned up shortly.`;
+        })() : "It will be automatically cleaned up after the configured retention period.";
+        await chatCb(`Task "${record.label}" finished. Code is at \`${record.path}\`.
+` + `${ttlNote} To keep it, say "keep the workspace" or manage it in Settings → Coding Agents.`, "coding-agent");
+      });
+      this.scratchDecisionWired = true;
+      this.log("Scratch decision callback wired");
+    }
   }
   setWsBroadcast(cb) {
     this.wsBroadcast = cb;
@@ -3897,6 +3932,9 @@ class SwarmCoordinator {
     } catch {}
   }
   async handleSessionEvent(sessionId, event, data) {
+    if (!this.scratchDecisionWired) {
+      this.wireScratchDecisionCallback();
+    }
     const tsMatch = sessionId.match(/^pty-(\d+)-/);
     if (tsMatch) {
       const sessionCreatedAt = Number(tsMatch[1]);
@@ -5270,15 +5308,55 @@ function formatAge(timestamp) {
 // src/actions/coding-task-helpers.ts
 import { randomUUID } from "node:crypto";
 import * as fs2 from "node:fs";
-import * as os3 from "node:os";
-import * as path4 from "node:path";
+import * as os4 from "node:os";
+import * as path5 from "node:path";
 import {
   logger as logger5
 } from "@elizaos/core";
-function createScratchDir() {
-  const baseDir = path4.join(os3.homedir(), ".milady", "workspaces");
+
+// src/services/config-env.ts
+import { readFileSync } from "node:fs";
+import * as os3 from "node:os";
+import * as path4 from "node:path";
+function readConfigEnvKey(key) {
+  try {
+    const configPath = path4.join(process.env.MILADY_STATE_DIR ?? process.env.ELIZA_STATE_DIR ?? path4.join(os3.homedir(), ".milady"), process.env.ELIZA_NAMESPACE === "milady" || !process.env.ELIZA_NAMESPACE ? "milady.json" : `${process.env.ELIZA_NAMESPACE}.json`);
+    const raw = readFileSync(configPath, "utf-8");
+    const config = JSON.parse(raw);
+    const val = config?.env?.[key];
+    return typeof val === "string" ? val : undefined;
+  } catch {
+    return;
+  }
+}
+
+// src/actions/coding-task-helpers.ts
+function sanitizeDirName(label) {
+  return label.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-{2,}/g, "-").replace(/^-|-$/g, "").slice(0, 60) || "scratch";
+}
+function resolveNonColliding(baseDir, name) {
+  let candidate = path5.join(baseDir, name);
+  if (!fs2.existsSync(candidate))
+    return candidate;
+  for (let i = 2;i < 100; i++) {
+    candidate = path5.join(baseDir, `${name}-${i}`);
+    if (!fs2.existsSync(candidate))
+      return candidate;
+  }
+  return path5.join(baseDir, `${name}-${randomUUID().slice(0, 8)}`);
+}
+function createScratchDir(runtime, label) {
+  const codingDir = runtime?.getSetting("PARALLAX_CODING_DIRECTORY") ?? readConfigEnvKey("PARALLAX_CODING_DIRECTORY") ?? process.env.PARALLAX_CODING_DIRECTORY;
+  if (codingDir?.trim()) {
+    const resolved = codingDir.startsWith("~") ? path5.join(os4.homedir(), codingDir.slice(1)) : path5.resolve(codingDir);
+    const dirName = label ? sanitizeDirName(label) : `scratch-${randomUUID().slice(0, 8)}`;
+    const scratchDir2 = resolveNonColliding(resolved, dirName);
+    fs2.mkdirSync(scratchDir2, { recursive: true });
+    return scratchDir2;
+  }
+  const baseDir = path5.join(os4.homedir(), ".milady", "workspaces");
   const scratchId = randomUUID();
-  const scratchDir = path4.join(baseDir, scratchId);
+  const scratchDir = path5.join(baseDir, scratchId);
   fs2.mkdirSync(scratchDir, { recursive: true });
   return scratchDir;
 }
@@ -5298,6 +5376,7 @@ function generateLabel(repo, task) {
   return parts.join("/");
 }
 function registerSessionEvents(ptyService, runtime, sessionId, label, scratchDir, callback, coordinatorActive = false) {
+  let scratchRegistered = false;
   ptyService.onSessionEvent((sid, event, data) => {
     if (sid !== sessionId)
       return;
@@ -5327,10 +5406,15 @@ ${preview}` : `Agent "${label}" completed the task.`
         });
       }
     }
-    if ((event === "stopped" || event === "task_complete" || event === "error") && scratchDir) {
+    if ((event === "stopped" || event === "task_complete" || event === "error") && scratchDir && !scratchRegistered) {
+      logger5.info(`[scratch-lifecycle] Terminal event "${event}" for "${label}" — registering scratch workspace at ${scratchDir}`);
       const wsService = runtime.getService("CODING_WORKSPACE_SERVICE");
-      if (wsService) {
-        wsService.registerScratchWorkspace(sessionId, scratchDir, label, event).catch((err) => {
+      if (!wsService) {
+        logger5.warn(`[scratch-lifecycle] CODING_WORKSPACE_SERVICE not found — cannot register scratch workspace`);
+      } else {
+        wsService.registerScratchWorkspace(sessionId, scratchDir, label, event).then(() => {
+          scratchRegistered = true;
+        }).catch((err) => {
           logger5.warn(`[START_CODING_TASK] Failed to register scratch workspace for "${label}": ${err}`);
         });
       }
@@ -5509,7 +5593,7 @@ async function handleMultiAgent(ctx, agentsParam) {
         branch = workspace.branch;
         wsService.setLabel(workspace.id, specLabel);
       } else {
-        workdir = createScratchDir();
+        workdir = createScratchDir(runtime, specLabel);
       }
       if (specAgentType !== "shell" && specAgentType !== "pi") {
         const [preflight] = await ptyService.checkAvailableAgents([
@@ -6177,7 +6261,7 @@ var activeWorkspaceContextProvider = {
       try {
         sessions = await Promise.race([
           ptyService.listSessions(),
-          new Promise((resolve3) => setTimeout(() => resolve3([]), 2000))
+          new Promise((resolve4) => setTimeout(() => resolve4([]), 2000))
         ]);
       } catch {
         sessions = [];
@@ -6261,8 +6345,8 @@ var activeWorkspaceContextProvider = {
 };
 
 // src/services/workspace-service.ts
-import * as os4 from "node:os";
-import * as path6 from "node:path";
+import * as os6 from "node:os";
+import * as path7 from "node:path";
 import * as fs4 from "node:fs/promises";
 import {
   CredentialService,
@@ -6477,12 +6561,18 @@ async function createPR(workspaceService, workspace, workspaceId, options, log)
 
 // src/services/workspace-lifecycle.ts
 import * as fs3 from "node:fs";
-import * as path5 from "node:path";
-async function removeScratchDir(dirPath, baseDir, log) {
-  const resolved = path5.resolve(dirPath);
-  const resolvedBase = path5.resolve(baseDir) + path5.sep;
-  if (!resolved.startsWith(resolvedBase) && resolved !== path5.resolve(baseDir)) {
-    console.warn(`[CodingWorkspaceService] Refusing to remove dir outside base: ${resolved}`);
+import * as os5 from "node:os";
+import * as path6 from "node:path";
+async function removeScratchDir(dirPath, baseDir, log, allowedDirs) {
+  const resolved = path6.resolve(dirPath);
+  const expandTilde = (p) => p.startsWith("~") ? path6.join(os5.homedir(), p.slice(1)) : p;
+  const allAllowed = [baseDir, ...allowedDirs ?? []];
+  const isAllowed = allAllowed.some((dir) => {
+    const resolvedDir = path6.resolve(expandTilde(dir)) + path6.sep;
+    return resolved.startsWith(resolvedDir) || resolved === path6.resolve(expandTilde(dir));
+  });
+  if (!isAllowed) {
+    console.warn(`[CodingWorkspaceService] Refusing to remove dir outside allowed paths: ${resolved}`);
     return;
   }
   try {
@@ -6513,7 +6603,7 @@ async function gcOrphanedWorkspaces(baseDir, workspaceTtlMs, trackedWorkspaceIds
       skipped++;
       continue;
     }
-    const dirPath = path5.join(baseDir, entry.name);
+    const dirPath = path6.join(baseDir, entry.name);
     try {
       const stat2 = await fs3.promises.stat(dirPath);
       const age = now - stat2.mtimeMs;
@@ -6549,10 +6639,11 @@ class CodingWorkspaceService {
   scratchCleanupTimers = new Map;
   eventCallbacks = [];
   authPromptCallback = null;
+  scratchDecisionCallback = null;
   constructor(runtime, config = {}) {
     this.runtime = runtime;
     this.serviceConfig = {
-      baseDir: config.baseDir ?? path6.join(os4.homedir(), ".milady", "workspaces"),
+      baseDir: config.baseDir ?? path7.join(os6.homedir(), ".milady", "workspaces"),
       branchPrefix: config.branchPrefix ?? "milady",
       debug: config.debug ?? false,
       workspaceTtlMs: config.workspaceTtlMs ?? 24 * 60 * 60 * 1000
@@ -6747,6 +6838,9 @@ class CodingWorkspaceService {
   setAuthPromptCallback(callback) {
     this.authPromptCallback = callback;
   }
+  setScratchDecisionCallback(callback) {
+    this.scratchDecisionCallback = callback;
+  }
   async createIssue(repo, options) {
     return createIssue(this.getGitHubContext(), repo, options);
   }
@@ -6805,7 +6899,10 @@ class CodingWorkspaceService {
     }
   }
   async removeScratchDir(dirPath) {
-    return removeScratchDir(dirPath, this.serviceConfig.baseDir, (msg) => this.log(msg));
+    const rawCodingDir = this.runtime.getSetting("PARALLAX_CODING_DIRECTORY") ?? this.readConfigEnvKey("PARALLAX_CODING_DIRECTORY") ?? process.env.PARALLAX_CODING_DIRECTORY;
+    const codingDir = rawCodingDir?.trim() ? rawCodingDir.trim().startsWith("~") ? path7.join(os6.homedir(), rawCodingDir.trim().slice(1)) : path7.resolve(rawCodingDir.trim()) : undefined;
+    const allowedDirs = codingDir ? [codingDir] : undefined;
+    return removeScratchDir(dirPath, this.serviceConfig.baseDir, (msg) => this.log(msg), allowedDirs);
   }
   listScratchWorkspaces() {
     return Array.from(this.scratchBySession.values()).sort((a, b) => b.terminalAt - a.terminalAt);
@@ -6823,6 +6920,7 @@ class CodingWorkspaceService {
       status: "pending_decision"
     };
     const policy = this.getScratchRetentionPolicy();
+    this.log(`Scratch retention policy: "${policy}" for "${label}"`);
     if (policy === "ephemeral") {
       await this.removeScratchDir(dirPath);
       this.scratchBySession.delete(sessionId);
@@ -6843,6 +6941,14 @@ class CodingWorkspaceService {
       const ttlMs = this.getScratchDecisionTtlMs();
       record.expiresAt = now + ttlMs;
       this.scheduleScratchCleanup(sessionId, ttlMs);
+      if (this.scratchDecisionCallback) {
+        this.log(`Firing scratch decision prompt for "${label}" at ${dirPath}`);
+        this.scratchDecisionCallback(record).catch((err) => {
+          console.warn(`[workspace] Failed to send scratch decision prompt: ${err}`);
+        });
+      } else {
+        this.log(`No scratch decision callback wired — skipping prompt for "${label}"`);
+      }
     } else {
       this.clearScratchCleanupTimer(sessionId);
     }
@@ -6898,14 +7004,22 @@ class CodingWorkspaceService {
       console.log(`[CodingWorkspaceService] ${message}`);
     }
   }
+  readConfigEnvKey(key) {
+    return readConfigEnvKey(key);
+  }
   getScratchRetentionPolicy() {
-    const setting = this.runtime.getSetting("PARALLAX_SCRATCH_RETENTION") ?? process.env.PARALLAX_SCRATCH_RETENTION;
+    const setting = this.runtime.getSetting("PARALLAX_SCRATCH_RETENTION") ?? this.readConfigEnvKey("PARALLAX_SCRATCH_RETENTION") ?? process.env.PARALLAX_SCRATCH_RETENTION;
     const normalized = setting?.trim().toLowerCase();
     if (normalized === "ephemeral")
       return "ephemeral";
     if (normalized === "persistent" || normalized === "keep") {
       return "persistent";
     }
+    if (!normalized) {
+      const codingDir = this.runtime.getSetting("PARALLAX_CODING_DIRECTORY") ?? this.readConfigEnvKey("PARALLAX_CODING_DIRECTORY") ?? process.env.PARALLAX_CODING_DIRECTORY;
+      if (codingDir?.trim())
+        return "persistent";
+    }
     return "pending_decision";
   }
   getScratchDecisionTtlMs() {
@@ -6951,11 +7065,11 @@ class CodingWorkspaceService {
     return compact || `scratch-${Date.now().toString(36)}`;
   }
   async allocatePromotedPath(baseDir, baseName) {
-    const baseResolved = path6.resolve(baseDir);
+    const baseResolved = path7.resolve(baseDir);
     for (let i = 0;i < 1000; i++) {
       const candidateName = i === 0 ? baseName : `${baseName}-${i}`;
-      const candidate = path6.resolve(baseResolved, candidateName);
-      if (candidate !== baseResolved && !candidate.startsWith(`${baseResolved}${path6.sep}`)) {
+      const candidate = path7.resolve(baseResolved, candidateName);
+      if (candidate !== baseResolved && !candidate.startsWith(`${baseResolved}${path7.sep}`)) {
         continue;
       }
       try {
@@ -6970,8 +7084,8 @@ class CodingWorkspaceService {
 // src/api/agent-routes.ts
 import { access as access2, readFile as readFile4, realpath, rm as rm2 } from "node:fs/promises";
 import { createHash } from "node:crypto";
-import * as os5 from "node:os";
-import * as path7 from "node:path";
+import * as os7 from "node:os";
+import * as path8 from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 var execFileAsync = promisify(execFile);
@@ -6983,23 +7097,23 @@ function shouldAutoPreflight() {
   return false;
 }
 function isPathInside(parent, candidate) {
-  return candidate === parent || candidate.startsWith(`${parent}${path7.sep}`);
+  return candidate === parent || candidate.startsWith(`${parent}${path8.sep}`);
 }
 async function resolveSafeVenvPath(workdir, venvDirRaw) {
   const venvDir = venvDirRaw.trim();
   if (!venvDir) {
     throw new Error("PARALLAX_BENCHMARK_PREFLIGHT_VENV must be non-empty");
   }
-  if (path7.isAbsolute(venvDir)) {
+  if (path8.isAbsolute(venvDir)) {
     throw new Error("PARALLAX_BENCHMARK_PREFLIGHT_VENV must be relative to workdir");
   }
-  const normalized = path7.normalize(venvDir);
-  if (normalized === "." || normalized === ".." || normalized.startsWith(`..${path7.sep}`)) {
+  const normalized = path8.normalize(venvDir);
+  if (normalized === "." || normalized === ".." || normalized.startsWith(`..${path8.sep}`)) {
     throw new Error("PARALLAX_BENCHMARK_PREFLIGHT_VENV must stay within workdir");
   }
-  const workdirResolved = path7.resolve(workdir);
+  const workdirResolved = path8.resolve(workdir);
   const workdirReal = await realpath(workdirResolved);
-  const resolved = path7.resolve(workdirReal, normalized);
+  const resolved = path8.resolve(workdirReal, normalized);
   if (!isPathInside(workdirReal, resolved)) {
     throw new Error("PARALLAX_BENCHMARK_PREFLIGHT_VENV resolves outside workdir");
   }
@@ -7015,7 +7129,7 @@ async function resolveSafeVenvPath(workdir, venvDirRaw) {
     const maybeErr = err;
     if (maybeErr?.code !== "ENOENT")
       throw err;
-    const parentReal = await realpath(path7.dirname(resolved));
+    const parentReal = await realpath(path8.dirname(resolved));
     if (!isPathInside(workdirReal, parentReal)) {
       throw new Error("PARALLAX_BENCHMARK_PREFLIGHT_VENV parent resolves outside workdir");
     }
@@ -7031,10 +7145,10 @@ async function fileExists(filePath) {
   }
 }
 async function resolveRequirementsPath(workdir) {
-  const workdirReal = await realpath(path7.resolve(workdir));
+  const workdirReal = await realpath(path8.resolve(workdir));
   const candidates = [
-    path7.join(workdir, "apps", "api", "requirements.txt"),
-    path7.join(workdir, "requirements.txt")
+    path8.join(workdir, "apps", "api", "requirements.txt"),
+    path8.join(workdir, "requirements.txt")
   ];
   for (const candidate of candidates) {
     if (!await fileExists(candidate))
@@ -7061,7 +7175,7 @@ async function runBenchmarkPreflight(workdir) {
   const mode = process.env.PARALLAX_BENCHMARK_PREFLIGHT_MODE?.toLowerCase() === "warm" ? "warm" : "cold";
   const venvDir = process.env.PARALLAX_BENCHMARK_PREFLIGHT_VENV || ".benchmark-venv";
   const venvPath = await resolveSafeVenvPath(workdir, venvDir);
-  const pythonInVenv = path7.join(venvPath, process.platform === "win32" ? "Scripts" : "bin", process.platform === "win32" ? "python.exe" : "python");
+  const pythonInVenv = path8.join(venvPath, process.platform === "win32" ? "Scripts" : "bin", process.platform === "win32" ? "python.exe" : "python");
   const key = `${workdir}::${mode}::${venvPath}::${requirementsFingerprint}`;
   if (PREFLIGHT_DONE.has(key)) {
     if (await fileExists(pythonInVenv))
@@ -7269,21 +7383,21 @@ async function handleAgentRoutes(req, res, pathname, ctx) {
         customCredentials,
         metadata
       } = body;
-      const workspaceBaseDir = path7.join(os5.homedir(), ".milady", "workspaces");
-      const workspaceBaseDirResolved = path7.resolve(workspaceBaseDir);
-      const cwdResolved = path7.resolve(process.cwd());
+      const workspaceBaseDir = path8.join(os7.homedir(), ".milady", "workspaces");
+      const workspaceBaseDirResolved = path8.resolve(workspaceBaseDir);
+      const cwdResolved = path8.resolve(process.cwd());
       const workspaceBaseDirReal = await realpath(workspaceBaseDirResolved).catch(() => workspaceBaseDirResolved);
       const cwdReal = await realpath(cwdResolved).catch(() => cwdResolved);
       const allowedPrefixes = [workspaceBaseDirReal, cwdReal];
       let workdir = rawWorkdir;
       if (workdir) {
-        const resolved = path7.resolve(workdir);
+        const resolved = path8.resolve(workdir);
         const resolvedReal = await realpath(resolved).catch(() => null);
         if (!resolvedReal) {
           sendError(res, "workdir must exist", 403);
           return true;
         }
-        const isAllowed = allowedPrefixes.some((prefix2) => resolvedReal === prefix2 || resolvedReal.startsWith(prefix2 + path7.sep));
+        const isAllowed = allowedPrefixes.some((prefix2) => resolvedReal === prefix2 || resolvedReal.startsWith(prefix2 + path8.sep));
         if (!isAllowed) {
           sendError(res, "workdir must be within workspace base directory or cwd", 403);
           return true;
@@ -7927,7 +8041,7 @@ async function handleWorkspaceRoutes(req, res, pathname, ctx) {
 // src/api/routes.ts
 var MAX_BODY_SIZE = 1024 * 1024;
 async function parseBody(req) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     let body = "";
     let size = 0;
     req.on("data", (chunk) => {
@@ -7941,7 +8055,7 @@ async function parseBody(req) {
     });
     req.on("end", () => {
       try {
-        resolve6(body ? JSON.parse(body) : {});
+        resolve7(body ? JSON.parse(body) : {});
       } catch {
         reject(new Error("Invalid JSON body"));
       }
@@ -8029,5 +8143,5 @@ export {
   CodingWorkspaceService
 };
 
-//# debugId=C832944FABDC8E0964756E2164756E21
+//# debugId=CC31B3CD95C1813A64756E2164756E21
 //# sourceMappingURL=index.js.map