@hachej/boring-agent 0.1.109 → 0.1.110

package/dist/{errors-CEU4iujR.d.ts → admin-DORVQfLn.d.ts}

@@ -1,4 +1,4 @@
-import { d as PiChatEvent, l as SessionArchiveFilter, C as ChatModelSelection, T as ThinkingLevel, m as ChatAttachmentPayload, n as QueuedUserMessage, c as PiChatSnapshot } from './piChatEvent-BUWIzw5l.js';
+import { d as PiChatEvent, l as SessionArchiveFilter, O as OriginChannel, C as ChatModelSelection, T as ThinkingLevel, m as ChatAttachmentPayload, n as QueuedUserMessage, c as PiChatSnapshot } from './piChatEvent-DpE0lIb9.js';
 
 /** Placement-independent event envelope. `seq` is the only replay cursor. */
 interface AgentSessionEvent {
@@ -74,7 +74,7 @@ interface AgentSummary {
     readonly pluginIds?: readonly string[];
     readonly definition?: {
         readonly version: string;
-        readonly digest: string;
+        readonly digest?: string;
     };
 }
 interface ListAgentsInput {
@@ -112,6 +112,8 @@ interface CreateAgentSessionInput {
     readonly agentTypeId: string;
     readonly requestId: string;
     readonly title?: string;
+    /** Trusted host-originated channel identity; browser callers normally omit it. */
+    readonly originChannel?: OriginChannel;
     /** Boot-only intent to resume this exact tab-owned empty session. */
     readonly resumeSessionId?: string;
 }
@@ -260,4 +262,79 @@ declare class AgentGatewayError extends Error {
     toJSON(): AgentGatewayErrorDTO;
 }
 
-export { type AgentGateway as A, type JsonValue as B, type ConnectAgentSessionInput as C, type DeleteAgentSessionInput as D, type RenameAgentSessionInput as E, type ResolveAgentAccess as F, type ResolveAgentAccessInput as G, type IdempotentAgentControl as I, type JsonPrimitive as J, type ListAgentsInput as L, type ReadAgentSessionStateInput as R, type VerifiedAgentScopeClaim as V, type WorkspaceScopeId as W, type AuthorizedAgentScope as a, type AgentSessionRef as b, type AgentSessionActivity as c, type AgentSendReceipt as d, AGENT_GATEWAY_ERROR_CODES as e, type AgentAccessDecision as f, type AgentAccessOperation as g, type AgentFollowUpCommand as h, AgentGatewayError as i, AgentGatewayErrorCode as j, type AgentGatewayErrorDTO as k, type AgentPromptCommand as l, type AgentScopeVerifier as m, type AgentSessionConnection as n, type AgentSessionEvent as o, type AgentSessionPage as p, type AgentSessionStateSnapshot as q, type AgentSessionSummary as r, type AgentSummary as s, type AuthSubjectId as t, type AuthorizedAgentSessionQuery as u, type CreateAgentSessionInput as v, type IdempotentAgentSend as w, type IdempotentInterruptControl as x, type IdempotentQueueClear as y, type JsonSafe as z };
+declare const CREDENTIAL_ERROR_CODES: {
+    readonly PROVIDER_UNKNOWN: "CREDENTIAL_PROVIDER_UNKNOWN";
+    readonly NOT_CONFIGURED: "CREDENTIAL_NOT_CONFIGURED";
+    readonly DISABLED: "CREDENTIAL_DISABLED";
+    readonly REVOKED: "CREDENTIAL_REVOKED";
+    readonly FORBIDDEN: "CREDENTIAL_FORBIDDEN";
+    readonly WORKSPACE_MISMATCH: "CREDENTIAL_WORKSPACE_MISMATCH";
+    readonly CONSUMER_MISMATCH: "CREDENTIAL_CONSUMER_MISMATCH";
+    readonly DELIVERY_FORBIDDEN: "CREDENTIAL_DELIVERY_FORBIDDEN";
+    readonly AUTHORITY_INVALID: "CREDENTIAL_AUTHORITY_INVALID";
+    readonly SCHEMA_MISMATCH: "CREDENTIAL_SCHEMA_MISMATCH";
+    readonly UNREADABLE: "CREDENTIAL_UNREADABLE";
+    readonly BACKEND_UNAVAILABLE: "CREDENTIAL_BACKEND_UNAVAILABLE";
+    readonly KEK_UNAVAILABLE: "CREDENTIAL_KEK_UNAVAILABLE";
+    readonly LEASE_EXPIRED: "CREDENTIAL_LEASE_EXPIRED";
+    readonly OAUTH_STATE_INVALID: "CREDENTIAL_OAUTH_STATE_INVALID";
+    readonly OAUTH_REFRESH_FAILED: "CREDENTIAL_OAUTH_REFRESH_FAILED";
+    readonly VALIDATION_UNAUTHORIZED: "CREDENTIAL_VALIDATION_UNAUTHORIZED";
+    readonly VALIDATION_RATE_LIMITED: "CREDENTIAL_VALIDATION_RATE_LIMITED";
+    readonly VALIDATION_UNAVAILABLE: "CREDENTIAL_VALIDATION_UNAVAILABLE";
+    readonly VALIDATION_TIMEOUT: "CREDENTIAL_VALIDATION_TIMEOUT";
+    readonly VALIDATION_UNSUPPORTED: "CREDENTIAL_VALIDATION_UNSUPPORTED";
+};
+type CredentialErrorCode = (typeof CREDENTIAL_ERROR_CODES)[keyof typeof CREDENTIAL_ERROR_CODES];
+declare class CredentialResolutionError extends Error {
+    readonly code: CredentialErrorCode;
+    readonly retryable: boolean;
+    constructor(code: CredentialErrorCode, message: string, options?: Readonly<{
+        retryable?: boolean;
+    }>);
+}
+
+type CredentialLifecycleStateV1 = 'active' | 'disabled' | 'revoked' | 'needs_reauth' | 'intentionally_absent' | 'instance_fallback_enabled';
+/** Metadata-only HTTP contract. No secret-bearing property exists on response DTOs. */
+interface OAuthRevocationReceiptV1 {
+    readonly localStatus: 'revoked';
+    /** Pending means Pi provided no verifiable upstream revocation confirmation. */
+    readonly upstreamStatus: 'pending' | 'confirmed';
+    readonly attemptedAt: string;
+}
+interface CredentialMetadataV1 {
+    readonly providerId: string;
+    readonly displayName: string;
+    readonly credentialType: string;
+    readonly state: CredentialLifecycleStateV1 | 'not_configured';
+    readonly credentialVersion?: number;
+    readonly maskedLastFourSuffix?: string;
+    readonly createdAt?: string;
+    readonly updatedAt?: string;
+    readonly oauthRevocation?: OAuthRevocationReceiptV1;
+}
+interface CredentialMetadataListResponseV1 {
+    readonly credentials: readonly CredentialMetadataV1[];
+}
+interface CredentialWriteRequestV1 {
+    readonly displayLabel?: string;
+    readonly fields: Readonly<Record<string, string>>;
+}
+type CredentialKeyLifecycleOperationV1 = 'rotate' | 'rewrap' | 'crypto-shred';
+/** Metadata-only, caller-supplied-idempotency receipt; never includes key material. */
+interface CredentialKeyLifecycleReceiptV1 {
+    readonly contractVersion: 'boring.credential-key-lifecycle-receipt.v1';
+    readonly operation: CredentialKeyLifecycleOperationV1;
+    readonly workspaceId: string;
+    readonly operationId: string;
+    readonly status: 'completed';
+    readonly dekGeneration?: number;
+}
+interface CredentialRouteErrorV1 {
+    readonly error: {
+        readonly code: CredentialErrorCode;
+        readonly message: string;
+    };
+}
+
+export { type AgentGateway as A, type CredentialLifecycleStateV1 as B, CREDENTIAL_ERROR_CODES as C, type CredentialMetadataListResponseV1 as D, type CredentialMetadataV1 as E, CredentialResolutionError as F, type CredentialRouteErrorV1 as G, type CredentialWriteRequestV1 as H, type DeleteAgentSessionInput as I, type IdempotentAgentControl as J, type IdempotentAgentSend as K, type IdempotentInterruptControl as L, type IdempotentQueueClear as M, type JsonPrimitive as N, type JsonSafe as O, type JsonValue as P, type ListAgentsInput as Q, type ReadAgentSessionStateInput as R, type RenameAgentSessionInput as S, type ResolveAgentAccess as T, type ResolveAgentAccessInput as U, type VerifiedAgentScopeClaim as V, type WorkspaceScopeId as W, type AuthorizedAgentScope as a, type AgentSessionRef as b, type AgentSessionActivity as c, type AgentSendReceipt as d, AGENT_GATEWAY_ERROR_CODES as e, type AgentAccessDecision as f, type AgentAccessOperation as g, type AgentFollowUpCommand as h, AgentGatewayError as i, AgentGatewayErrorCode as j, type AgentGatewayErrorDTO as k, type AgentPromptCommand as l, type AgentScopeVerifier as m, type AgentSessionConnection as n, type AgentSessionEvent as o, type AgentSessionPage as p, type AgentSessionStateSnapshot as q, type AgentSessionSummary as r, type AgentSummary as s, type AuthSubjectId as t, type AuthorizedAgentSessionQuery as u, type ConnectAgentSessionInput as v, type CreateAgentSessionInput as w, type CredentialErrorCode as x, type CredentialKeyLifecycleOperationV1 as y, type CredentialKeyLifecycleReceiptV1 as z };

package/dist/{chunk-GS4ADE34.js → chunk-42D6KAQV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7XAOVFSN.js";
 import {
   ErrorCode
-} from "./chunk-3JFPS2O6.js";
+} from "./chunk-KJIEMSQP.js";
 
 // src/server/harness/pi-coding-agent/createHarness.ts
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -1158,13 +1158,15 @@ var PiSessionStore = class {
     await mkdir2(this.sessionDir, { recursive: true });
     const id = randomUUID3();
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    const originChannel = init?.originChannel ?? "web";
     const header = {
       type: "session",
       version: CURRENT_SESSION_VERSION2,
       id,
       timestamp: now,
       cwd: this.cwd,
-      boringSessionCtx: normalizeSessionCtx(ctx) ?? {}
+      boringSessionCtx: normalizeSessionCtx(ctx) ?? {},
+      boringOriginChannel: originChannel
     };
     const lines = [JSON.stringify(header)];
     if (manualTitle) {
@@ -1186,7 +1188,8 @@ var PiSessionStore = class {
       updatedAt: now,
       turnCount: 0,
       nativeSessionId: id,
-      hasAssistantReply: false
+      hasAssistantReply: false,
+      originChannel
     };
   }
   /**
@@ -1220,7 +1223,8 @@ var PiSessionStore = class {
       ...resolved.directNative ? {
         nativeSessionId: resolved.resolvedSessionId,
         hasAssistantReply: resolved.transcriptSummary.hasAssistantReply
-      } : {}
+      } : {},
+      originChannel: readHeaderOriginChannel(resolved.header)
     }, await readArchivedSessionIds(this.sessionDir));
   }
   /**
@@ -1597,7 +1601,8 @@ var PiSessionStore = class {
         ...directNative ? {
           nativeSessionId: header.id,
           hasAssistantReply: transcript.hasAssistantReply
-        } : {}
+        } : {},
+        originChannel: readHeaderOriginChannel(header)
       };
       const stableForCache = sessionScan.stable && sameFileSnapshot(fileStat, sessionScan.stat) && (!linked || linked.stable);
       if (stableForCache) {
@@ -1933,6 +1938,10 @@ function readHeaderSessionCtx(header) {
   if (!raw || typeof raw !== "object") return {};
   return normalizeSessionCtx(raw) ?? {};
 }
+function readHeaderOriginChannel(header) {
+  const raw = header?.boringOriginChannel;
+  return typeof raw === "string" && raw.length > 0 ? raw : "web";
+}
 function normalizeSessionCtx(ctx) {
   if (!ctx?.workspaceId && !ctx?.userId) return void 0;
   return {
@@ -2311,16 +2320,18 @@ import { SettingsManager as SettingsManager2 } from "@mariozechner/pi-coding-age
 function readSettingsFileIfPresent(path) {
   return existsSync(path) ? readFileSync2(path, "utf-8") : void 0;
 }
-function mergeInjectedProjectPackages(settingsJson, piPackages, includePackage) {
+function mergeInjectedProjectPackages(settingsJson, piPackages, includePackage, includeConfiguredPackages = true) {
   const settings = settingsJson ? JSON.parse(settingsJson) : {};
-  const configuredPackages = Array.isArray(settings.packages) ? settings.packages : [];
+  const configuredPackages = includeConfiguredPackages && Array.isArray(settings.packages) ? settings.packages : [];
   return JSON.stringify({
     ...settings,
     packages: mergePiPackageSources(configuredPackages, piPackages).filter((source) => includePackage?.(source) ?? true)
   });
 }
 function createResourceSettingsManager(cwd, agentDir, piPackages, options = {}) {
-  if (piPackages.length === 0 && !options.includePackage) return SettingsManager2.create(cwd, agentDir);
+  if (piPackages.length === 0 && !options.includePackage && options.includeConfiguredPackages !== false) {
+    return SettingsManager2.create(cwd, agentDir);
+  }
   const globalSettingsPath = join3(agentDir, "settings.json");
   const projectSettingsPath = join3(cwd, ".pi", "settings.json");
   let globalSettingsOverrideJson;
@@ -2328,12 +2339,22 @@ function createResourceSettingsManager(cwd, agentDir, piPackages, options = {})
   const storage = {
     withLock(scope, fn) {
       if (scope === "global") {
-        const current2 = globalSettingsOverrideJson ?? mergeInjectedProjectPackages(readSettingsFileIfPresent(globalSettingsPath), [], options.includePackage);
+        const current2 = globalSettingsOverrideJson ?? mergeInjectedProjectPackages(
+          readSettingsFileIfPresent(globalSettingsPath),
+          [],
+          options.includePackage,
+          options.includeConfiguredPackages
+        );
         const next2 = fn(current2);
         if (next2 !== void 0) globalSettingsOverrideJson = next2;
         return;
       }
-      const current = projectSettingsOverrideJson ?? mergeInjectedProjectPackages(readSettingsFileIfPresent(projectSettingsPath), piPackages, options.includePackage);
+      const current = projectSettingsOverrideJson ?? mergeInjectedProjectPackages(
+        readSettingsFileIfPresent(projectSettingsPath),
+        piPackages,
+        options.includePackage,
+        options.includeConfiguredPackages
+      );
       const next = fn(current);
       if (next !== void 0) projectSettingsOverrideJson = next;
     }
@@ -2621,7 +2642,9 @@ function createPiCodingAgentHarness(opts) {
     };
   }
   async function createPiSession(sessionId, sessionCtx, input, ctx) {
-    const { modelRuntime } = await createConfiguredModelRuntime();
+    const { modelRuntime } = await createConfiguredModelRuntime(
+      pi.credentialStore ? { credentials: pi.credentialStore } : void 0
+    );
     const resolvedModel = resolveRequestedModel(modelRuntime, input, { strict: pi.strictModelResolution });
     const model = resolvedModel ?? resolveDefaultModel(modelRuntime, pi.defaultModel, pi.strictModelResolution);
     const savedPiFile = await sessionStore.loadPiSessionFile(sessionCtx, sessionId);
@@ -2656,7 +2679,8 @@ function createPiCodingAgentHarness(opts) {
     const settingsManager = createResourceSettingsManager(
       opts.cwd,
       agentDir,
-      effectivePackages
+      effectivePackages,
+      { includeConfiguredPackages: pi.noAmbientPackages !== true }
     );
     const resourceLoader = new DefaultResourceLoader({
       cwd: opts.cwd,

package/dist/{chunk-6OANSUEI.js → chunk-72KT6VWV.js}

@@ -6,7 +6,7 @@ import {
   AgentDefinitionErrorCode,
   AgentDeploymentErrorCode,
   ErrorCode
-} from "./chunk-3JFPS2O6.js";
+} from "./chunk-KJIEMSQP.js";
 
 // src/shared/skill-resource.ts
 var AGENT_RESOURCES_FILESYSTEM_ID = "agent_resources";
@@ -39,6 +39,32 @@ function isReadonlyFilesystemMutationError(value) {
   return candidate.code === READONLY_FILESYSTEM_MUTATION_CODE && candidate.statusCode === 403 && typeof candidate.filesystem === "string" && RUNTIME_FILESYSTEM_CAPABILITIES.includes(candidate.operation);
 }
 
+// src/shared/channel.ts
+var descriptors = [
+  {
+    id: "web",
+    label: "Web",
+    icon: "globe",
+    sessionsReadOnlyInWorkspace: false,
+    dialect: "passthrough",
+    canOriginateIdentity: true
+  },
+  {
+    id: "whatsapp",
+    label: "WhatsApp",
+    icon: "message-circle",
+    sessionsReadOnlyInWorkspace: true,
+    dialect: "whatsapp/markdown",
+    canOriginateIdentity: true
+  }
+];
+var CHANNEL_DESCRIPTORS = new Map(
+  descriptors.map((descriptor) => [descriptor.id, Object.freeze(descriptor)])
+);
+function channelDescriptor(originChannel = "web") {
+  return CHANNEL_DESCRIPTORS.get(originChannel);
+}
+
 // src/shared/config-schema.ts
 import { z } from "zod";
 var RuntimeModeSchema = z.enum(["direct", "local", "blaxel", "vercel-sandbox"]);
@@ -728,7 +754,12 @@ var CREDENTIAL_ERROR_CODES = {
   KEK_UNAVAILABLE: "CREDENTIAL_KEK_UNAVAILABLE",
   LEASE_EXPIRED: "CREDENTIAL_LEASE_EXPIRED",
   OAUTH_STATE_INVALID: "CREDENTIAL_OAUTH_STATE_INVALID",
-  OAUTH_REFRESH_FAILED: "CREDENTIAL_OAUTH_REFRESH_FAILED"
+  OAUTH_REFRESH_FAILED: "CREDENTIAL_OAUTH_REFRESH_FAILED",
+  VALIDATION_UNAUTHORIZED: "CREDENTIAL_VALIDATION_UNAUTHORIZED",
+  VALIDATION_RATE_LIMITED: "CREDENTIAL_VALIDATION_RATE_LIMITED",
+  VALIDATION_UNAVAILABLE: "CREDENTIAL_VALIDATION_UNAVAILABLE",
+  VALIDATION_TIMEOUT: "CREDENTIAL_VALIDATION_TIMEOUT",
+  VALIDATION_UNSUPPORTED: "CREDENTIAL_VALIDATION_UNSUPPORTED"
 };
 var CredentialResolutionError = class extends Error {
   code;
@@ -741,6 +772,26 @@ var CredentialResolutionError = class extends Error {
   }
 };
 
+// src/shared/credentials/custody.ts
+function workspaceCredentialCustodyScopeV1(workspaceId) {
+  return assertCredentialCustodyScopeV1({ workspaceId, subject: { kind: "workspace" } });
+}
+function userCredentialCustodyScopeV1(workspaceId, userId) {
+  return assertCredentialCustodyScopeV1({ workspaceId, subject: { kind: "user", userId } });
+}
+function assertCredentialCustodyScopeV1(scope) {
+  if (!scope || typeof scope.workspaceId !== "string" || scope.workspaceId.length === 0 || !scope.subject || scope.subject.kind !== "workspace" && scope.subject.kind !== "user" || scope.subject.kind === "user" && (typeof scope.subject.userId !== "string" || scope.subject.userId.length === 0)) {
+    throw new CredentialResolutionError(CREDENTIAL_ERROR_CODES.SCHEMA_MISMATCH, "Invalid credential custody scope");
+  }
+  return Object.freeze({
+    workspaceId: scope.workspaceId,
+    subject: scope.subject.kind === "workspace" ? Object.freeze({ kind: "workspace" }) : Object.freeze({ kind: "user", userId: scope.subject.userId })
+  });
+}
+function credentialCustodySubjectKeyV1(subject) {
+  return subject.kind === "workspace" ? "workspace" : encodeURIComponent(subject.userId);
+}
+
 // src/shared/credentials/bindings.ts
 var CREDENTIAL_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;
 var MAX_BINDING_TEXT_LENGTH_V1 = 256;
@@ -1209,6 +1260,8 @@ export {
   RUNTIME_FILESYSTEM_CAPABILITIES,
   ReadonlyFilesystemMutationError,
   isReadonlyFilesystemMutationError,
+  CHANNEL_DESCRIPTORS,
+  channelDescriptor,
   RuntimeModeSchema,
   ConfigSchema,
   EnvSchema,
@@ -1261,6 +1314,10 @@ export {
   resolveShareEntry,
   CREDENTIAL_ERROR_CODES,
   CredentialResolutionError,
+  workspaceCredentialCustodyScopeV1,
+  userCredentialCustodyScopeV1,
+  assertCredentialCustodyScopeV1,
+  credentialCustodySubjectKeyV1,
   providerCredentialFieldsV1,
   createCredentialConsumerBindingRegistryV1,
   WORKSPACE_KEK_PROVIDER_VERSION,

package/dist/{chunk-3JFPS2O6.js → chunk-KJIEMSQP.js}

@@ -138,9 +138,18 @@ var ErrorCode = z.enum([
   // Lane W same-workspace share deep-link (AR1-003)
   "AR1_SHARE_NOT_FOUND",
   "AR1_SHARE_TOMBSTONED",
-  // Event stream durability
+  // Event stream durability / external channels
   "EVENT_STORE_OPEN_FAILED",
   "DURABLE_STREAM_UNAVAILABLE",
+  "CHANNEL_DURABLE_STREAM_REQUIRED",
+  "CHANNEL_INBOUND_ACCEPTED",
+  "CHANNEL_UNKNOWN_BINDING",
+  "CHANNEL_INBOUND_PARKED",
+  "CHANNEL_OUTBOUND_PARKED",
+  "CHANNEL_TURN_STALLED",
+  "CHANNEL_BINDING_BUSY",
+  "CHANNEL_BINDING_REVOKED",
+  "SESSION_CREATE_TIMEOUT",
   // Internal
   "ERR_NOT_IMPLEMENTED_UNTIL_T1",
   "INTERNAL_ERROR"

package/dist/{chunk-MVKXLMH3.js → chunk-KN72XWP7.js}

@@ -1,6 +1,6 @@
 import {
   ErrorCode
-} from "./chunk-3JFPS2O6.js";
+} from "./chunk-KJIEMSQP.js";
 
 // src/shared/tool-ui.ts
 function isRecord(value) {