@hachej/boring-agent 0.1.100 → 0.1.103

package/dist/server/index.d.ts

@@ -1,21 +1,21 @@
-import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionFileRef, C as ConfiguredAgentHostAgentSpec, h as AgentHostAgentSpec, i as RuntimeBundle, j as PiHarnessOptions, k as AgentMeteringSink, l as RuntimeFilesystemBinding, m as CreatedAgentHost, n as MeteringErrorLogger, o as ReadyStatusTracker, p as ResolvedAgentRuntimeScope, q as CreateAgentHostOptions, r as CompiledAgentHostAgentSpec, s as AgentRequestLedger, t as AgentEffectAdmission, u as AuthorizedEnvironmentIntent, v as AgentHostEnvironmentScope, w as AgentRequestKey, x as AgentRequestLedgerPrepareResult, y as AgentRequestFailure, z as AgentRequestLedgerRecord, D as AgentFleetCompiler, E as AgentRequestTarget, F as RuntimeFilesystemAccessDecision } from '../types-BPzq-RwN.js';
-export { A as AgentGatewayEffect, G as AgentHostDescription, H as AgentHostDirectProjectionOptions, I as AgentHostDispatcherRunInput, J as AgentHostEnvironmentLease, K as AgentHostHandle, L as LegacyDefaultAgentHostSpec, N as MeteringReleaseInput, O as MeteringReleaseReason, Q as MeteringReservationResult, S as MeteringReserveInput, T as MeteringRunKind, U as MeteringRunScope, V as MeteringRunStatus, X as MeteringSettleInput, Y as MeteringUsage, Z as MeteringUsageInput, _ as PI_PACKAGE_RESOURCE_FILTERS, $ as PiExtensionFactory, a0 as PluginSkillSource, a1 as ResolvedEnvironmentScope, a2 as RuntimeFilesystemBindingOperations, a3 as RuntimeNodePackageSpec, a4 as RuntimeProvisioningContribution, a5 as RuntimePythonSpec, a6 as RuntimeTemplateContribution, a7 as WorkspaceProvisioningExecResult, a8 as compactPiPackages, a9 as mergePiPackageSources, aa as normalizeMeteringUsage, ab as piPackageSourceKey } from '../types-BPzq-RwN.js';
-import { E as ExecOptions, a as ExecResult, W as WorkspaceChangeEvent, b as Workspace, S as Sandbox } from '../sandbox-KQiEdz4W.js';
-export { R as RuntimeFilesystemCapability } from '../sandbox-KQiEdz4W.js';
-import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult, b as RemoteWorkerExecRequest } from '../middleware-Cq_cYHjJ.js';
-export { c as REMOTE_WORKER_PROVIDER, d as REMOTE_WORKER_RUNTIME_CWD, e as RemoteWorkerErrorPayload, f as RemoteWorkerExecResponse, g as RemoteWorkerFsEventEnvelope, W as WORKER_INTERNAL_TOKEN_HEADER, h as WORKER_REQUEST_ID_HEADER, i as WORKER_WORKSPACE_ID_HEADER, j as createAgentAuthMiddleware } from '../middleware-Cq_cYHjJ.js';
+import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionFileRef, C as ConfiguredAgentHostAgentSpec, h as AgentHostAgentSpec, i as RuntimeBundle, j as PiHarnessOptions, k as AgentMeteringSink, l as RuntimeFilesystemBinding, m as CreatedAgentHost, n as MeteringErrorLogger, o as ReadyStatusTracker, p as CreateAgentHostOptions, q as CompiledAgentHostAgentSpec, r as AgentRequestLedger, s as AgentEffectAdmission, t as AuthorizedEnvironmentIntent, u as AgentHostEnvironmentScope, v as ResolvedAgentRuntimeScope, w as AgentRequestKey, x as AgentRequestLedgerPrepareResult, y as AgentRequestFailure, z as AgentRequestLedgerRecord, D as AgentFleetCompiler, E as AgentRequestTarget, F as RuntimeFilesystemAccessDecision } from '../types-BnjMLAd5.js';
+export { A as AgentGatewayEffect, G as AgentHostDescription, H as AgentHostDirectProjectionOptions, I as AgentHostDispatcherRunInput, J as AgentHostEnvironmentLease, K as AgentHostHandle, L as LegacyDefaultAgentHostSpec, N as MeteringReleaseInput, O as MeteringReleaseReason, Q as MeteringReservationResult, S as MeteringReserveInput, T as MeteringRunKind, U as MeteringRunScope, V as MeteringRunStatus, X as MeteringSettleInput, Y as MeteringUsage, Z as MeteringUsageInput, _ as PI_PACKAGE_RESOURCE_FILTERS, $ as PiExtensionFactory, a0 as PluginSkillSource, a1 as ResolvedEnvironmentScope, a2 as RuntimeFilesystemBindingOperations, a3 as RuntimeNodePackageSpec, a4 as RuntimeProvisioningContribution, a5 as RuntimePythonSpec, a6 as RuntimeTemplateContribution, a7 as WorkspaceProvisioningExecResult, a8 as compactPiPackages, a9 as mergePiPackageSources, aa as normalizeMeteringUsage, ab as piPackageSourceKey } from '../types-BnjMLAd5.js';
+import { d as ExecOptions, a as ExecResult, W as WorkspaceChangeEvent, b as Workspace, c as Sandbox } from '../sandbox-BMhut3kh.js';
+export { h as RuntimeFilesystemCapability } from '../sandbox-BMhut3kh.js';
+import { b as RemoteWorkerHealthResponse, R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult, c as RemoteWorkerExecRequest } from '../middleware-CaAEXpi5.js';
+export { d as REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY, e as REMOTE_WORKER_PROVIDER, f as REMOTE_WORKER_RUNTIME_CWD, g as RemoteWorkerErrorPayload, h as RemoteWorkerExecResponse, i as RemoteWorkerFsEventEnvelope, W as WORKER_INTERNAL_TOKEN_HEADER, j as WORKER_REQUEST_ID_HEADER, k as WORKER_WORKSPACE_ID_HEADER, l as createAgentAuthMiddleware } from '../middleware-CaAEXpi5.js';
 import { SandboxProviderV1, WorkspaceSandboxPairV1 } from '@hachej/boring-sandbox/shared';
-import { S as SandboxHandleStore, C as CompiledAgentBundle, a as Sha256Digest, A as AgentDeployment, b as ShareEntryStore, P as ProviderId, c as CredentialFieldId, R as ResolvedCredentialMaterialV1, d as AuthorizedWorkspaceCredentialScopeV1, V as VerifiedWorkspaceCredentialAuthorityV1, W as WorkspaceCredentialAuthorityVerifierV1, e as CredentialConsumerBindingRegistryV1, f as ProviderRegistryV1, g as WorkspaceCredentialResolverV1, h as ProviderCredentialRefV1, i as ResolvedCredentialLeaseV1 } from '../lease-D8WC6pQl.js';
-import { E as ErrorCode, l as SessionCtx, b as PiChatEvent, S as SessionStore, m as SessionListOptions, k as SessionSummary, n as PiChatSnapshot, c as PromptPayload, d as PromptReceipt, F as FollowUpPayload, e as FollowUpReceipt, f as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, i as StopPayload, j as StopReceipt } from '../piChatEvent-B3ehh9V0.js';
-import { J as JsonValue, b as AgentGateway, c as AuthorizedAgentScope, d as AgentSessionRef, e as AgentSessionActivity, V as VerifiedAgentScopeClaim, f as AgentGatewayErrorDTO, g as AgentSessionSummary, h as AgentSessionStateSnapshot, i as AgentSessionConnection } from '../errors-cNC4HMpV.js';
-import { d as AgentActor, j as AgentEvent, T as TelemetrySink, s as AgentTool, t as AgentHarnessFactory, A as AgentHarness } from '../harness-DS8jLKIx.js';
-export { u as AgentConfig, v as AgentHarnessFactoryInput } from '../harness-DS8jLKIx.js';
+import { F as SandboxHandleStore, k as CompiledAgentBundle, a as Sha256Digest, i as AgentDeployment, M as ShareEntryStore, y as ProviderId, c as CredentialFieldId, B as ResolvedCredentialMaterialV1, d as AuthorizedWorkspaceCredentialScopeV1, V as VerifiedWorkspaceCredentialAuthorityV1, X as WorkspaceCredentialAuthorityVerifierV1, n as CredentialConsumerBindingRegistryV1, z as ProviderRegistryV1, Y as WorkspaceCredentialResolverV1, P as ProviderCredentialRefV1, R as ResolvedCredentialLeaseV1 } from '../lease-K-EZhdL-.js';
+import { y as ErrorCode, n as SessionCtx, c as PiChatEvent, S as SessionStore, a as SessionListOptions, b as SessionSummary, P as PiChatSnapshot, d as PromptPayload, e as PromptReceipt, F as FollowUpPayload, f as FollowUpReceipt, Q as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, i as StopPayload, j as StopReceipt } from '../piChatEvent-g1nIBh44.js';
+import { x as JsonValue, A as AgentGateway, a as AuthorizedAgentScope, b as AgentSessionRef, c as AgentSessionActivity, V as VerifiedAgentScopeClaim, i as AgentGatewayErrorDTO, p as AgentSessionSummary, o as AgentSessionStateSnapshot, l as AgentSessionConnection } from '../errors-szpcDUFQ.js';
+import { d as AgentActor, j as AgentEvent, v as TelemetrySink, s as AgentTool, D as AgentHarnessFactory, A as AgentHarness } from '../harness-erpL2SER.js';
+export { u as AgentConfig, E as AgentHarnessFactoryInput } from '../harness-erpL2SER.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { FastifyRequest, FastifyInstance, FastifyPluginCallback } from 'fastify';
-import { i as PiSessionRequestContext, g as PiChatSessionService, h as PiSessionCreateInit, e as PiChatEventSubscriber, P as PiChatEventStreamResult } from '../piChatSessionService-xnv8rcdh.js';
-import { W as WorkspaceAgentDirectRunInput, a as WorkspaceAgentDirectRunCallback, b as WorkspaceAgentDispatcherContext, c as WorkspaceAgentDispatcher, d as WorkspaceAgentGatewayBinding } from '../file-search-QxnanNjO.js';
-export { L as LeaseBoundWorkspaceAgent } from '../file-search-QxnanNjO.js';
+import { i as PiSessionRequestContext, g as PiChatSessionService, h as PiSessionCreateInit, e as PiChatEventSubscriber, P as PiChatEventStreamResult } from '../piChatSessionService-DugeRHzb.js';
+import { c as WorkspaceAgentDirectRunInput, W as WorkspaceAgentDirectRunCallback, f as WorkspaceAgentDispatcherContext, e as WorkspaceAgentDispatcher, i as WorkspaceAgentGatewayBinding } from '../file-search-BXdSm-Yq.js';
+export { L as LeaseBoundWorkspaceAgent } from '../file-search-BXdSm-Yq.js';
 import { SettingsManager } from '@mariozechner/pi-coding-agent';
 import '@hachej/boring-bash/agent';
 import '@hachej/boring-sandbox/providers/node-workspace';
@@ -95,7 +95,7 @@ declare class RemoteWorkerClient {
     private timeoutError;
     private abortedError;
     private fetchWithTimeout;
-    health(): Promise<void>;
+    health(): Promise<RemoteWorkerHealthResponse>;
     workspace(op: RemoteWorkerWorkspaceOp): Promise<RemoteWorkerWorkspaceResult>;
     exec(input: RemoteWorkerExecRequest, opts?: Pick<ExecOptions, 'signal'>): Promise<ExecResult>;
     watch(onEvent: (event: WorkspaceChangeEvent) => void, onError?: (error: Error) => void): {
@@ -115,7 +115,7 @@ interface RemoteWorkerModeAdapterOptions {
 }
 declare function createRemoteWorkerModeAdapter(opts?: RemoteWorkerModeAdapterOptions): RuntimeModeAdapter;
 
-declare function createRemoteWorkerWorkspace(client: RemoteWorkerClient): Workspace;
+declare function createRemoteWorkerWorkspace(client: RemoteWorkerClient, supportsExclusiveBinaryCreate?: boolean): Workspace;
 
 declare function createRemoteWorkerSandbox(client: RemoteWorkerClient): Sandbox;
 
@@ -1068,15 +1068,9 @@ interface BuiltAgentComposition {
     readonly tools: readonly AgentTool[];
     readonly runtimeBundle: RuntimeBundle;
     readonly readyTracker: ReadyStatusTracker;
-    readonly runtimeScopeIdentity: string;
     dispose(): Promise<void>;
 }
 
-interface AgentSessionRuntimeAuthority {
-    readonly runtimeScope: ResolvedAgentRuntimeScope;
-    /** Absent only for a pre-AH0 transcript created before runtime pins existed. */
-    readonly runtimeScopeIdentity?: string;
-}
 interface AgentSessionActivityUpdate {
     readonly ref: AgentSessionRef;
     readonly status: AgentSessionActivity;
@@ -1117,11 +1111,10 @@ interface AgentHostRuntime {
     resolveEnvironmentScope(scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, intent: AuthorizedEnvironmentIntent): Promise<AgentHostEnvironmentScope>;
     acquireEnvironment(scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, intent: AuthorizedEnvironmentIntent): Promise<EnvironmentLease>;
     acquireResolvedEnvironment(workspaceScopeId: string, environment: AgentHostEnvironmentScope): Promise<EnvironmentLease>;
-    resolveSessionRuntime(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, sessionId: string): Promise<AgentSessionRuntimeAuthority | undefined>;
+    resolveSessionRuntime(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, sessionId: string): Promise<ResolvedAgentRuntimeScope | undefined>;
     resolveAgentRuntimeScope(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, operation: 'new-binding' | 'existing-session' | 'reload', requestId: string, sessionId?: string): Promise<ResolvedAgentRuntimeScope>;
-    resolveBinding(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, resolvedRuntimeScope?: ResolvedAgentRuntimeScope, purpose?: 'current' | 'pinned'): Promise<RuntimeBinding>;
-    findPublishedBinding(agentTypeId: string, workspaceScopeId: string, runtimeScopeIdentity?: string, physicalBindingIdentity?: string, provisioningFingerprint?: string): RuntimeBinding | undefined;
-    findPublishedCurrentBinding(agentTypeId: string, workspaceScopeId: string, physicalBindingIdentity: string, runtimeScopeIdentity?: string, provisioningFingerprint?: string): RuntimeBinding | undefined;
+    resolveBinding(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, resolvedRuntimeScope?: ResolvedAgentRuntimeScope): Promise<RuntimeBinding>;
+    findPublishedCurrentBinding(agentTypeId: string, workspaceScopeId: string, physicalBindingIdentity: string, bindingIdentity?: string, provisioningFingerprint?: string): RuntimeBinding | undefined;
     startDrain(): void;
     drainRuntime(): Promise<void>;
     registerSubscription(close: () => void | Promise<void>): () => void;
@@ -1182,10 +1175,8 @@ declare class EmbeddedAgentGateway implements AgentGateway {
     private readonly runtime;
     private readonly cursorSecret;
     private readonly connections;
-    private readonly pins;
-    private readonly unpinnedSessionFallbackPins;
     private readonly writerTails;
-    private sessionRuntimeResolutionObserver?;
+    private readonly knownSessions;
     private closed;
     constructor(runtime: AgentHostRuntime);
     /** Host-owned addressed runtime-capability effect seam. */
@@ -1208,16 +1199,11 @@ declare class EmbeddedAgentGateway implements AgentGateway {
         claim: VerifiedAgentScopeClaim;
         binding: RuntimeBinding;
     }>;
-    /** Side-effect-free reload lookup: validates persisted existence/pin and requires an already-published binding. */
+    /** Side-effect-free reload lookup: validates session access and requires the current binding to be published. */
     inspectPublishedSessionBinding(scope: AuthorizedAgentScope, ref: AgentSessionRef): Promise<{
         claim: VerifiedAgentScopeClaim;
         binding: RuntimeBinding;
     }>;
-    /** Server-only test observer for distinguishing runtime pin resolution paths. */
-    setSessionRuntimeResolutionObserverForTesting(observer: (input: {
-        readonly source: 'unpinned-session-fallback' | 'persisted-runtime-pin';
-        readonly runtimeScopeIdentity: string;
-    }) => void): void;
     /** Test-only activity seam used by the shared implementation conformance. */
     setActivityForTesting(workspaceScopeId: string, ref: AgentSessionRef, activity: AgentSessionActivity): void;
     private assertOpen;
@@ -1350,6 +1336,8 @@ interface PiResourceDigestInput {
     readonly piUserHome: string;
     /** Mirrors Pi's noSkills resource-loader option. */
     readonly noSkills: boolean;
+    /** Mirrors Pi's noContextFiles resource-loader option; omitted stays sealed. */
+    readonly noContextFiles?: boolean;
     readonly promptParts?: readonly (string | undefined)[];
     readonly additionalSkillPaths?: readonly string[];
     readonly packages?: readonly PiPackageSource[];
@@ -1370,6 +1358,7 @@ declare function createPiResourceDigestInput(input: {
     readonly piAgentDir?: string;
     readonly piUserHome?: string;
     readonly noSkills?: boolean;
+    readonly noContextFiles?: boolean;
     readonly resourceSets: readonly PiResourceSet[];
     readonly authorizedRoots: readonly string[];
     readonly limits?: Partial<PiResourceDigestLimits>;

package/dist/server/index.js

@@ -13,6 +13,7 @@ import {
   MANAGED_AGENT_MCP_ORIGIN_SURFACE,
   ManagedAgentMcpDelegateController,
   ManagedAgentMcpError,
+  REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
   REMOTE_WORKER_PROVIDER,
   REMOTE_WORKER_RUNTIME_CWD,
   RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE,
@@ -88,20 +89,20 @@ import {
   shareResourceUri,
   withResolvedCredential,
   withRuntimeEnvContributions
-} from "../chunk-ZOHN72OS.js";
+} from "../chunk-6WKQ4FC4.js";
 import {
   PI_PACKAGE_RESOURCE_FILTERS,
   compactPiPackages,
   createResourceSettingsManager,
   mergePiPackageSources,
   piPackageSourceKey
-} from "../chunk-GRMDMWBW.js";
-import "../chunk-3OEDBRKY.js";
+} from "../chunk-TW7G33QH.js";
+import "../chunk-JNEKOVMJ.js";
 import "../chunk-4IQ4HHBG.js";
 import "../chunk-WSQ5QNIY.js";
-import "../chunk-LSO2AO6Q.js";
+import "../chunk-7QM22DU7.js";
 import "../chunk-YGRQ4Q5P.js";
-import "../chunk-VXF5DWS6.js";
+import "../chunk-K25PK5EC.js";
 export {
   AgentDirectoryCompilerError,
   AgentFleetCompilationError,
@@ -118,6 +119,7 @@ export {
   ManagedAgentMcpDelegateController,
   ManagedAgentMcpError,
   PI_PACKAGE_RESOURCE_FILTERS,
+  REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
   REMOTE_WORKER_PROVIDER,
   REMOTE_WORKER_RUNTIME_CWD,
   RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE,

package/dist/server/worker/index.d.ts

@@ -1,8 +1,8 @@
 import { FastifyInstance, FastifyRequest, FastifyReply, FastifyServerOptions } from 'fastify';
 import { BwrapResourceLimits } from '@hachej/boring-sandbox/providers/bwrap';
 import { SandboxProviderV1 } from '@hachej/boring-sandbox/shared';
-import { b as Workspace, S as Sandbox } from '../../sandbox-KQiEdz4W.js';
-import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult } from '../../middleware-Cq_cYHjJ.js';
+import { b as Workspace, c as Sandbox } from '../../sandbox-BMhut3kh.js';
+import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult } from '../../middleware-CaAEXpi5.js';
 
 interface WorkerConfig {
     workspaceRoot: string;
@@ -22,6 +22,7 @@ declare const WORKER_ERROR_CODES: {
     readonly VALIDATION_ERROR: "validation_error";
     readonly INVALID_WORKSPACE_ID: "invalid_workspace_id";
     readonly NOT_IMPLEMENTED: "not_implemented";
+    readonly ALREADY_EXISTS: "REMOTE_WORKER_ALREADY_EXISTS";
     readonly EXEC_CONCURRENCY_LIMIT: "exec_concurrency_limit";
     readonly UNSUPPORTED_WORKSPACE_OP: "unsupported_workspace_op";
 };

package/dist/server/worker/index.js

@@ -1,14 +1,15 @@
 import {
+  REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
   WORKER_INTERNAL_TOKEN_HEADER,
   constantTimeTokenEqual
-} from "../../chunk-ZOHN72OS.js";
-import "../../chunk-GRMDMWBW.js";
-import "../../chunk-3OEDBRKY.js";
+} from "../../chunk-6WKQ4FC4.js";
+import "../../chunk-TW7G33QH.js";
+import "../../chunk-JNEKOVMJ.js";
 import "../../chunk-4IQ4HHBG.js";
 import "../../chunk-WSQ5QNIY.js";
-import "../../chunk-LSO2AO6Q.js";
+import "../../chunk-7QM22DU7.js";
 import "../../chunk-YGRQ4Q5P.js";
-import "../../chunk-VXF5DWS6.js";
+import "../../chunk-K25PK5EC.js";
 
 // src/server/worker/index.ts
 import Fastify from "fastify";
@@ -58,6 +59,7 @@ var WORKER_ERROR_CODES = {
   VALIDATION_ERROR: "validation_error",
   INVALID_WORKSPACE_ID: "invalid_workspace_id",
   NOT_IMPLEMENTED: "not_implemented",
+  ALREADY_EXISTS: "REMOTE_WORKER_ALREADY_EXISTS",
   EXEC_CONCURRENCY_LIMIT: "exec_concurrency_limit",
   UNSUPPORTED_WORKSPACE_OP: "unsupported_workspace_op"
 };
@@ -154,6 +156,20 @@ async function runWorkspaceOp(workspace, op) {
       if (!workspace.writeBinaryFile) throw Object.assign(new Error("binary write unsupported"), { statusCode: 501, code: WORKER_ERROR_CODES.NOT_IMPLEMENTED });
       await workspace.writeBinaryFile(op.path, new Uint8Array(Buffer.from(op.dataBase64, "base64")));
       return { ok: true };
+    case "createBinaryFile":
+      if (!workspace.createBinaryFile) throw Object.assign(new Error("exclusive binary create unsupported"), { statusCode: 501, code: WORKER_ERROR_CODES.NOT_IMPLEMENTED });
+      try {
+        await workspace.createBinaryFile(op.path, new Uint8Array(Buffer.from(op.dataBase64, "base64")));
+      } catch (error) {
+        if (error?.code === "EEXIST") {
+          throw Object.assign(new Error("exclusive binary create destination exists"), {
+            statusCode: 409,
+            code: WORKER_ERROR_CODES.ALREADY_EXISTS
+          });
+        }
+        throw error;
+      }
+      return { ok: true };
     case "readFileWithStat":
       if (!workspace.readFileWithStat) {
         return { content: await workspace.readFile(op.path), stat: await workspace.stat(op.path) };
@@ -247,7 +263,10 @@ async function registerWorkerRoutes(app, config, runtimeProvider) {
     }
   });
   app.get("/health", async () => ({ ok: true }));
-  app.get("/internal/health", async () => ({ ok: true }));
+  app.get("/internal/health", async () => ({
+    ok: true,
+    capabilities: [REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY]
+  }));
   app.addHook("preHandler", async (request, reply) => {
     if (request.method === "GET" && request.url === "/health") return;
     if (!verifyInternalToken(request, reply, config.internalToken)) return reply;