@hachej/boring-agent 0.1.16 → 0.1.18

package/dist/server/index.js

@@ -2034,12 +2034,12 @@ function fileRoutes(app, opts, done) {
 import { createHash as createHash3 } from "crypto";
 import { constants as constants2 } from "fs";
 import { access as access2, chmod as chmod3, cp, mkdir as mkdir4, readdir as readdir2, readFile as readFile4, stat as stat3, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname5, join as join3, resolve as resolve3 } from "path";
+import { dirname as dirname5, isAbsolute as isAbsolute4, join as join3, relative as relative5, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
 import { execFile } from "child_process";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
-var PROVISIONING_VERSION = 1;
+var PROVISIONING_VERSION = 2;
 function toPath(value) {
   return value instanceof URL ? fileURLToPath(value) : value;
 }
@@ -2103,6 +2103,27 @@ async function fingerprint(contributions) {
       hash.update(JSON.stringify(Object.fromEntries(Object.entries(spec.env ?? {}).map(([k, v]) => [k, String(v)]))));
       if (await exists(projectFile)) await hashPath(dirname5(projectFile), hash);
     }
+    for (const spec of provisioning.nodePackages ?? []) {
+      const packageRoot = toPath(spec.packageRoot);
+      hash.update(`node-package:${spec.id}:${spec.packageName}:${packageRoot}
+`);
+      const packageJson = join3(packageRoot, "package.json");
+      const distDir = join3(packageRoot, "dist");
+      const docsDir = join3(packageRoot, "docs");
+      const skillsDir = join3(packageRoot, "skills");
+      const referencesDir = join3(packageRoot, "references");
+      const sourceDocsDir = join3(packageRoot, "src", "server", "docs");
+      if (await exists(packageJson)) await hashPath(packageJson, hash);
+      if (await exists(distDir)) await hashPath(distDir, hash);
+      const templatesDir = join3(packageRoot, "templates");
+      const publicDir = join3(packageRoot, "public");
+      if (await exists(templatesDir)) await hashPath(templatesDir, hash);
+      if (await exists(publicDir)) await hashPath(publicDir, hash);
+      if (await exists(docsDir)) await hashPath(docsDir, hash);
+      if (await exists(skillsDir)) await hashPath(skillsDir, hash);
+      if (await exists(referencesDir)) await hashPath(referencesDir, hash);
+      else if (!await exists(distDir) && await exists(sourceDocsDir)) await hashPath(sourceDocsDir, hash);
+    }
   }
   return `sha256:${hash.digest("hex")}`;
 }
@@ -2117,10 +2138,23 @@ function collectEnv(contributions) {
   }
   return env;
 }
+function resolveTemplateTarget(workspaceRoot, target) {
+  const rawTarget = target ?? ".";
+  if (rawTarget.length === 0 || rawTarget.includes("\0") || rawTarget.includes("\\") || rawTarget.startsWith("/") || rawTarget.startsWith("//") || /^[A-Za-z]:[\\/]/.test(rawTarget) || rawTarget.split("/").includes("..")) {
+    throw new Error(`Unsafe runtime template target: ${JSON.stringify(rawTarget)}. Template targets must be relative paths inside the workspace.`);
+  }
+  const root = resolve3(workspaceRoot);
+  const resolved = resolve3(root, rawTarget);
+  const rel = relative5(root, resolved);
+  if (rel.startsWith("..") || isAbsolute4(rel)) {
+    throw new Error(`Unsafe runtime template target: ${JSON.stringify(rawTarget)} resolves outside the workspace.`);
+  }
+  return resolved;
+}
 async function seedTemplates(workspaceRoot, contributions) {
   for (const { provisioning } of contributions) {
     for (const template of provisioning.templateDirs ?? []) {
-      await cp(toPath(template.path), resolve3(workspaceRoot, template.target ?? "."), {
+      await cp(toPath(template.path), resolveTemplateTarget(workspaceRoot, template.target), {
         recursive: true,
         force: false,
         errorOnExist: false
@@ -2128,6 +2162,45 @@ async function seedTemplates(workspaceRoot, contributions) {
     }
   }
 }
+function nodePackageTarget(workspaceRoot, packageName) {
+  const parts = packageName.split("/").filter(Boolean);
+  if (parts.length === 0 || parts.some((part) => part === "." || part === "..")) {
+    throw new Error(`Invalid node package name: ${packageName}`);
+  }
+  return join3(workspaceRoot, "node_modules", ...parts);
+}
+async function copyIfExists(source, target) {
+  if (!await exists(source)) return false;
+  await cp(source, target, {
+    recursive: true,
+    force: true,
+    errorOnExist: false
+  });
+  return true;
+}
+async function ensureNodePackages(workspaceRoot, specs) {
+  for (const spec of specs) {
+    const packageRoot = toPath(spec.packageRoot);
+    const target = nodePackageTarget(workspaceRoot, spec.packageName);
+    await mkdir4(target, { recursive: true });
+    const copiedPackageJson = await copyIfExists(join3(packageRoot, "package.json"), join3(target, "package.json"));
+    if (!copiedPackageJson) {
+      throw new Error(`Node package provisioning source is missing package.json: ${packageRoot}`);
+    }
+    await copyIfExists(join3(packageRoot, "dist"), join3(target, "dist"));
+    await copyIfExists(join3(packageRoot, "templates"), join3(target, "templates"));
+    await copyIfExists(join3(packageRoot, "public"), join3(target, "public"));
+    if (!await exists(join3(target, "dist", "docs", "plugins.md"))) {
+      await copyIfExists(join3(packageRoot, "src", "server", "docs"), join3(target, "dist", "docs"));
+    }
+    if (!await copyIfExists(join3(packageRoot, "docs"), join3(target, "docs"))) {
+      await copyIfExists(join3(packageRoot, "src", "server", "docs"), join3(target, "docs"));
+    }
+    await copyIfExists(join3(packageRoot, "skills"), join3(target, "skills"));
+    await copyIfExists(join3(packageRoot, "references"), join3(target, "references"));
+    await copyIfExists(join3(packageRoot, "src", "globals.css"), join3(target, "src", "globals.css"));
+  }
+}
 async function ensurePython(workspaceRoot, specs) {
   if (specs.length === 0) return;
   const venvPython = join3(workspaceRoot, ".venv", "bin", "python");
@@ -2164,6 +2237,11 @@ function assertEnvKey(key) {
 async function isRuntimeMaterialized(workspaceRoot, contributions) {
   const hasPython = contributions.some(({ provisioning }) => (provisioning.python ?? []).length > 0);
   if (hasPython && !await exists(join3(workspaceRoot, ".venv", "bin", "python"))) return false;
+  for (const { provisioning } of contributions) {
+    for (const spec of provisioning.nodePackages ?? []) {
+      if (!await exists(join3(nodePackageTarget(workspaceRoot, spec.packageName), "package.json"))) return false;
+    }
+  }
   return true;
 }
 async function writeShims(workspaceRoot, env) {
@@ -2232,6 +2310,7 @@ async function provisionRuntimeWorkspace({
     }
   }
   await seedTemplates(workspaceRoot, active);
+  await ensureNodePackages(workspaceRoot, active.flatMap(({ provisioning }) => provisioning.nodePackages ?? []));
   await ensurePython(workspaceRoot, active.flatMap(({ provisioning }) => provisioning.python ?? []));
   const actualBinDir = await writeShims(workspaceRoot, env);
   await mkdir4(dirname5(markerPath), { recursive: true });
@@ -2649,8 +2728,10 @@ function createServerFileSearch(workspace, sandbox) {
       const command = [
         "find .",
         "-maxdepth 10",
+        "-path './.boring-agent' -prune -o",
         buildFindArgs(glob),
         "-type f",
+        "-print",
         `| head -n ${safeLimit}`
       ].join(" ");
       const { stdout, exitCode } = await sandbox.exec(command, {
@@ -3274,7 +3355,6 @@ function resolveMode(mode = autoDetectMode()) {
 
 // src/server/createAgentApp.ts
 import Fastify from "fastify";
-import { basename as basename2 } from "path";
 
 // src/server/harness/pi-coding-agent/createHarness.ts
 import { existsSync, readFileSync as readFileSync2 } from "fs";
@@ -3287,7 +3367,8 @@ import {
   ModelRegistry,
   DefaultResourceLoader,
   SettingsManager as SettingsManager2,
-  getAgentDir as getAgentDir2
+  getAgentDir as getAgentDir2,
+  loadSkills
 } from "@mariozechner/pi-coding-agent";
 
 // src/server/harness/pi-coding-agent/tool-adapter.ts
@@ -4216,6 +4297,17 @@ var WORKSPACE_PATHS_GUIDELINE = [
 function composeSystemPromptAppend(hostAppend) {
   return [WORKSPACE_PATHS_GUIDELINE, hostAppend?.trim()].filter(Boolean).join("\n\n");
 }
+function buildDynamicPromptExtension(source) {
+  return (pi) => {
+    pi.on("before_agent_start", async (event) => {
+      const extra = (await source())?.trim();
+      if (!extra) return;
+      return { systemPrompt: `${event.systemPrompt}
+
+${extra}` };
+    });
+  };
+}
 function extractUserMessageText(message) {
   const record = message;
   if (record?.role !== "user") return "";
@@ -4341,6 +4433,30 @@ function createPiCodingAgentHarness(opts) {
     sessionDir: opts.sessionDir
   });
   const piSessions = /* @__PURE__ */ new Map();
+  const effectiveSkillPaths = [];
+  const effectivePackages = [];
+  const effectiveExtensionPaths = [];
+  const refreshEffectiveResources = () => {
+    const dynamic = opts.pi?.getHotReloadableResources?.() ?? {};
+    effectiveSkillPaths.splice(
+      0,
+      effectiveSkillPaths.length,
+      ...opts.pi?.additionalSkillPaths ?? [],
+      ...dynamic.additionalSkillPaths ?? []
+    );
+    effectivePackages.splice(
+      0,
+      effectivePackages.length,
+      ...mergePiPackageSources(opts.pi?.packages ?? [], dynamic.packages ?? [])
+    );
+    effectiveExtensionPaths.splice(
+      0,
+      effectiveExtensionPaths.length,
+      ...opts.pi?.extensionPaths ?? [],
+      ...dynamic.extensionPaths ?? []
+    );
+  };
+  refreshEffectiveResources();
   const scheduleSessionTitle = createSessionTitleScheduler({
     loadSession: (sessionId) => sessionStore.load({ workspaceId: "default" }, sessionId),
     writeTitle: (sessionId, title) => {
@@ -4373,23 +4489,44 @@ function createPiCodingAgentHarness(opts) {
     }
     const resolvedModel = resolveRequestedModel(modelRegistry, input);
     const model = resolvedModel ?? resolveDefaultModel(modelRegistry);
+    refreshEffectiveResources();
     const composedSystemPromptAppend = composeSystemPromptAppend(opts.systemPromptAppend);
+    const dynamicPromptExtension = opts.systemPromptDynamic ? buildDynamicPromptExtension(opts.systemPromptDynamic) : void 0;
     const agentDir = getAgentDir2();
-    const additionalSkillPaths = opts.resourceLoaderOptions?.additionalSkillPaths ?? [];
-    const piPackages = opts.resourceLoaderOptions?.piPackages ?? [];
+    const extensionFactories = [
+      ...dynamicPromptExtension ? [dynamicPromptExtension] : [],
+      ...opts.pi?.extensionFactories ?? []
+    ];
     const settingsManager = createResourceSettingsManager(
       ctx.workdir,
       agentDir,
-      piPackages
+      effectivePackages
     );
     const resourceLoader = new DefaultResourceLoader({
       cwd: ctx.workdir,
       agentDir,
       settingsManager,
       appendSystemPromptOverride: (base) => [...base, composedSystemPromptAppend],
-      ...opts.resourceLoaderOptions?.noContextFiles ? { noContextFiles: true } : {},
-      ...opts.resourceLoaderOptions?.noSkills ? { noSkills: true } : {},
-      ...additionalSkillPaths.length ? { additionalSkillPaths } : {}
+      ...effectiveExtensionPaths.length ? { additionalExtensionPaths: effectiveExtensionPaths } : {},
+      ...extensionFactories.length ? { extensionFactories } : {},
+      ...opts.pi?.noContextFiles ? { noContextFiles: true } : {},
+      ...opts.pi?.noSkills ? { noSkills: true } : {},
+      ...effectiveSkillPaths.length ? { additionalSkillPaths: effectiveSkillPaths } : {},
+      // skillsOverride REPLACES Pi's resolved skill set, which includes
+      // skills contributed by host-declared pi packages (e.g.
+      // @hachej/boring-pi → boring-plugin-authoring). Only trigger it for
+      // the explicit `noSkills` opt-out, where the host wants a clean slate.
+      // Passing additionalSkillPaths is not, by itself, a request to throw
+      // away package skills — those should keep flowing through Pi's loader
+      // and merge with the additional paths.
+      ...opts.pi?.noSkills ? {
+        skillsOverride: () => loadSkills({
+          cwd: ctx.workdir,
+          agentDir,
+          skillPaths: effectiveSkillPaths,
+          includeDefaults: false
+        })
+      } : {}
     });
     await resourceLoader?.reload();
     const { session: piSession } = await createAgentSession({
@@ -4414,6 +4551,13 @@ function createPiCodingAgentHarness(opts) {
     piSessions.set(sessionId, handle);
     return handle;
   }
+  async function reloadPiSession(sessionId) {
+    const handle = piSessions.get(sessionId);
+    if (!handle) return false;
+    refreshEffectiveResources();
+    await handle.piSession.reload();
+    return true;
+  }
   function disposePiSession(sessionId) {
     const handle = piSessions.get(sessionId);
     if (!handle) return;
@@ -4526,6 +4670,7 @@ function createPiCodingAgentHarness(opts) {
     getSystemPrompt(sessionId) {
       return piSessions.get(sessionId)?.piSession.systemPrompt;
     },
+    reloadSession: reloadPiSession,
     async *sendMessage(input, ctx) {
       const { piSession } = await getOrCreatePiSession(
         input.sessionId,
@@ -4926,7 +5071,7 @@ ${attachmentNotes.join("\n")}` : message,
 
 // src/server/harness/pi-coding-agent/pluginLoader.ts
 import { readdir as readdir5, stat as stat5, readFile as readFile7 } from "fs/promises";
-import { join as join7, extname as extname3, resolve as resolve4, sep as sep3, relative as relative5 } from "path";
+import { join as join7, extname as extname3, resolve as resolve4, sep as sep3, relative as relative6 } from "path";
 import { homedir as homedir4 } from "os";
 import { pathToFileURL } from "url";
 var VALID_EXTENSIONS = /* @__PURE__ */ new Set([".js", ".mjs"]);
@@ -5001,7 +5146,7 @@ async function loadNpmPlugin(pkgDir, importFn) {
   if (resolvedMain !== resolvedPkgDir && !resolvedMain.startsWith(resolvedPkgDir + sep3)) {
     return [];
   }
-  const relPath = relative5(resolvedPkgDir, resolvedMain);
+  const relPath = relative6(resolvedPkgDir, resolvedMain);
   if (relPath.startsWith("..")) {
     return [];
   }
@@ -5086,7 +5231,7 @@ import {
 // src/server/tools/operations/bound.ts
 import { constants as constants3 } from "fs";
 import { access as access3, lstat as lstat3, mkdir as mkdir10, readFile as readFile8, readdir as readdir6, readlink, realpath as realpath2, stat as stat6, writeFile as writeFile8 } from "fs/promises";
-import { dirname as dirname7, isAbsolute as isAbsolute4, relative as relative6, resolve as resolve5 } from "path";
+import { dirname as dirname7, isAbsolute as isAbsolute5, relative as relative7, resolve as resolve5 } from "path";
 function toPosixPath(value) {
   return value.split("\\").join("/");
 }
@@ -5131,8 +5276,8 @@ function matchesGlob(relativePath, pattern) {
 }
 function shouldSkipDir(relativePath, ignore) {
   const normalizedRel = toPosixPath(relativePath);
-  const basename4 = normalizedRel.split("/").at(-1) ?? normalizedRel;
-  if (basename4 === ".git" || basename4 === "node_modules") return true;
+  const basename3 = normalizedRel.split("/").at(-1) ?? normalizedRel;
+  if (basename3 === ".git" || basename3 === "node_modules") return true;
   return ignore.some((pattern) => {
     return matchesGlob(normalizedRel, pattern) || matchesGlob(`${normalizedRel}/`, pattern);
   });
@@ -5143,7 +5288,7 @@ async function walkMatches(root, current, pattern, ignore, limit, out) {
   for (const entry of entries) {
     if (out.length >= limit) return;
     const absolutePath = resolve5(current, entry.name);
-    const relativePath = toPosixPath(relative6(root, absolutePath));
+    const relativePath = toPosixPath(relative7(root, absolutePath));
     if (entry.isDirectory() && shouldSkipDir(relativePath, ignore)) continue;
     if (matchesGlob(relativePath, pattern)) {
       out.push(absolutePath);
@@ -5175,8 +5320,8 @@ async function assertWithinWorkspace(workspaceRoot, absPath) {
       const resolvedTarget = resolve5(dirname7(absPath), target);
       const nearestAncestor = await findNearestExistingAncestor(resolvedTarget);
       const realAncestor = await realpath2(nearestAncestor);
-      const rel2 = relative6(realRoot, realAncestor);
-      if (rel2.startsWith("..") || isAbsolute4(rel2)) {
+      const rel2 = relative7(realRoot, realAncestor);
+      if (rel2.startsWith("..") || isAbsolute5(rel2)) {
         throw new Error(`path "${absPath}" is outside workspace`);
       }
       return;
@@ -5196,16 +5341,16 @@ async function assertWithinWorkspace(workspaceRoot, absPath) {
     if (code === "ENOENT") {
       const nearestAncestor = await findNearestExistingAncestor(dirname7(absPath));
       const realAncestor = await realpath2(nearestAncestor);
-      const rel2 = relative6(realRoot, realAncestor);
-      if (rel2.startsWith("..") || isAbsolute4(rel2)) {
+      const rel2 = relative7(realRoot, realAncestor);
+      if (rel2.startsWith("..") || isAbsolute5(rel2)) {
         throw new Error(`path "${absPath}" is outside workspace`);
       }
       return;
     }
     throw err;
   }
-  const rel = relative6(realRoot, realCandidate);
-  if (rel.startsWith("..") || isAbsolute4(rel)) {
+  const rel = relative7(realRoot, realCandidate);
+  if (rel.startsWith("..") || isAbsolute5(rel)) {
     throw new Error(`path "${absPath}" is outside workspace`);
   }
 }
@@ -5296,7 +5441,7 @@ function boundFs(workspaceRoot) {
 }
 
 // src/server/tools/operations/vercel.ts
-import { isAbsolute as isAbsolute5, relative as relative7 } from "path";
+import { isAbsolute as isAbsolute6, relative as relative8 } from "path";
 function rootAliases(workspace) {
   const aliases = [workspace.root];
   if (workspace.root === VERCEL_SANDBOX_WORKSPACE_ROOT) aliases.push(VERCEL_SANDBOX_REMOTE_ROOT);
@@ -5304,11 +5449,11 @@ function rootAliases(workspace) {
   return aliases;
 }
 function isOutsideWorkspaceRel(rel) {
-  return rel === ".." || rel.startsWith("../") || rel.startsWith("..\\") || isAbsolute5(rel);
+  return rel === ".." || rel.startsWith("../") || rel.startsWith("..\\") || isAbsolute6(rel);
 }
 function toRelPath(workspace, absolutePath) {
   for (const root of rootAliases(workspace)) {
-    const rel = relative7(root, absolutePath);
+    const rel = relative8(root, absolutePath);
     if (!isOutsideWorkspaceRel(rel)) return rel;
   }
   const skillMarker = "/.agents/skills/";
@@ -5491,7 +5636,7 @@ import {
   truncateHead,
   truncateLine
 } from "@mariozechner/pi-coding-agent";
-import { resolve as resolve6, relative as relative8 } from "path";
+import { resolve as resolve6, relative as relative9 } from "path";
 
 // src/server/catalog/tools/_shared.ts
 function makeError(message) {
@@ -5644,7 +5789,7 @@ function vercelGrepTool(sandbox, workspaceRoot) {
       }
       if (workspaceRoot && typeof params.path === "string" && params.path.length > 0) {
         const resolved = resolve6(workspaceRoot, params.path);
-        const rel = relative8(workspaceRoot, resolved);
+        const rel = relative9(workspaceRoot, resolved);
         if (rel.startsWith("..") || rel.startsWith("/")) {
           return makeError(`path "${params.path}" is outside workspace`);
         }
@@ -5804,8 +5949,7 @@ function createExecuteIsolatedCodeTool(sandbox) {
         language: { type: "string", enum: ["python", "shell"] },
         image: { type: "string" },
         packages: { type: "array", items: { type: "string" } },
-        sandboxId: { type: "string" },
-        vmSize: { type: "string", enum: ["xxs", "xs", "s", "m", "l"] }
+        sandboxId: { type: "string" }
       },
       required: ["code", "language"],
       additionalProperties: false
@@ -5831,8 +5975,7 @@ function createExecuteIsolatedCodeTool(sandbox) {
           language,
           image: typeof input.image === "string" ? input.image : void 0,
           packages: Array.isArray(input.packages) ? input.packages.filter((v) => typeof v === "string") : void 0,
-          sandboxId: typeof input.sandboxId === "string" ? input.sandboxId : void 0,
-          vmSize: input.vmSize === "xxs" || input.vmSize === "xs" || input.vmSize === "s" || input.vmSize === "m" || input.vmSize === "l" ? input.vmSize : void 0
+          sandboxId: typeof input.sandboxId === "string" ? input.sandboxId : void 0
         });
         return {
           content: [{ type: "text", text: JSON.stringify(result) }],
@@ -6751,7 +6894,7 @@ function modelsRoutes(app, _opts, done) {
 import {
   DefaultPackageManager,
   getAgentDir as getAgentDir3,
-  loadSkills
+  loadSkills as loadSkills2
 } from "@mariozechner/pi-coding-agent";
 var CACHE_TTL_MS2 = 3e4;
 function skillsRoutes(app, opts, done) {
@@ -6786,7 +6929,7 @@ function skillsRoutes(app, opts, done) {
         const resolved = await packageManager.resolve();
         return resolved.skills.filter((resource) => resource.enabled).map((resource) => resource.path);
       })();
-      const result = loadSkills({
+      const result = loadSkills2({
         cwd: workspaceRoot,
         agentDir,
         skillPaths: [...packageSkillPaths, ...additionalSkillPaths ?? []],
@@ -7329,6 +7472,33 @@ data: ${JSON.stringify(event)}
   done();
 }
 
+// src/server/http/routes/reload.ts
+function reloadRoutes(app, opts, done) {
+  app.post("/api/v1/agent/reload", async (request, reply) => {
+    if (!opts.harness.reloadSession) {
+      return reply.status(501).send({ ok: false, error: "Agent harness does not support reload" });
+    }
+    const sessionId = request.body?.sessionId || opts.defaultSessionId;
+    try {
+      const hookResult = await opts.beforeReload?.();
+      const reloaded = await opts.harness.reloadSession(sessionId);
+      const restart_warnings = hookResult?.restart_warnings;
+      const diagnostics = hookResult?.diagnostics;
+      return {
+        ok: true,
+        sessionId,
+        reloaded,
+        ...restart_warnings && restart_warnings.length > 0 ? { restart_warnings } : {},
+        ...diagnostics && diagnostics.length > 0 ? { diagnostics } : {}
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return reply.status(422).send({ ok: false, error: message });
+    }
+  });
+  done();
+}
+
 // src/server/http/routes/search.ts
 var MAX_GLOB_LENGTH = 256;
 var DEFAULT_LIMIT3 = 500;
@@ -7474,13 +7644,21 @@ async function createAgentApp(opts = {}) {
     ...opts.extraTools ?? [],
     ...pluginTools
   ];
-  const harness = createPiCodingAgentHarness({
+  const harnessFactory = opts.harnessFactory ?? ((input) => createPiCodingAgentHarness({
+    ...input,
+    pi: {
+      noContextFiles: true,
+      noSkills: true,
+      ...opts.pi
+    }
+  }));
+  const harness = await harnessFactory({
     tools,
     cwd: workspaceRoot,
     sessionNamespace: opts.sessionNamespace,
     sessionDir: opts.sessionDir,
     systemPromptAppend: opts.systemPromptAppend,
-    resourceLoaderOptions: opts.resourceLoaderOptions
+    systemPromptDynamic: opts.systemPromptDynamic
   });
   const sessionChangesTracker = new InMemorySessionChangesTracker();
   const readyTracker = new ReadyStatusTracker({
@@ -7519,10 +7697,13 @@ async function createAgentApp(opts = {}) {
   await app.register(modelsRoutes);
   await app.register(skillsRoutes, {
     workspaceRoot,
-    additionalSkillPaths: opts.resourceLoaderOptions?.additionalSkillPaths
+    additionalSkillPaths: opts.pi?.additionalSkillPaths,
+    piPackages: opts.pi?.packages,
+    noSkills: opts.pi?.noSkills
   });
   await app.register(sessionChangesRoutes, { tracker: sessionChangesTracker });
   await app.register(catalogRoutes, { tools });
+  await app.register(reloadRoutes, { harness, defaultSessionId: sessionId, beforeReload: opts.beforeReload });
   await app.register(readyStatusRoutes, { tracker: readyTracker });
   return app;
 }
@@ -7552,7 +7733,7 @@ function applyCspHeaders(response, opts = {}) {
 }
 
 // src/server/registerAgentRoutes.ts
-import { basename as basename3 } from "path";
+import { basename as basename2 } from "path";
 import { AuthStorage as AuthStorage3, ModelRegistry as ModelRegistry3 } from "@mariozechner/pi-coding-agent";
 
 // src/server/catalog/mergeTools.ts
@@ -7699,7 +7880,7 @@ var DEFAULT_WORKSPACE_ID3 = "default";
 var STANDARD_AGENT_TOOL_NAMES = ["bash", "read", "write", "edit", "find", "grep", "ls"];
 var VERCEL_BINDING_HEALTHCHECK_INTERVAL_MS = 15e3;
 function pluginNameFromPath(path4) {
-  const fileName = basename3(path4);
+  const fileName = basename2(path4);
   if (fileName.endsWith(".mjs")) return fileName.slice(0, -4);
   if (fileName.endsWith(".js")) return fileName.slice(0, -3);
   return fileName;
@@ -7758,7 +7939,7 @@ var registerAgentRoutes = async (app, opts) => {
   app.addHook("onClose", async () => {
     await modeAdapter.dispose?.();
   });
-  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getResourceLoaderOptions === "function" || typeof opts.getSessionNamespace === "function";
+  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getSessionNamespace === "function";
   const sessionChangesTracker = new InMemorySessionChangesTracker();
   const runtimeBindings = /* @__PURE__ */ new Map();
   const MAX_RUNTIME_BINDINGS = 256;
@@ -7772,27 +7953,27 @@ var registerAgentRoutes = async (app, opts) => {
   async function resolveRuntimeScope(workspaceId, request) {
     const root = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : workspaceRoot;
     const scopedTemplatePath = opts.getTemplatePath ? await opts.getTemplatePath({ workspaceId, workspaceRoot: root, request }) : templatePath;
-    const resourceLoaderOptions = opts.getResourceLoaderOptions ? await opts.getResourceLoaderOptions({ workspaceId, workspaceRoot: root, request }) : opts.resourceLoaderOptions;
+    const pi = opts.getPi ? await opts.getPi({ workspaceId, workspaceRoot: root, request }) : opts.pi;
     const sessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot: root, request }) : opts.sessionNamespace);
     return {
       root,
       templatePath: scopedTemplatePath,
-      resourceLoaderOptions,
+      pi,
       sessionNamespace,
       key: JSON.stringify([
         resolvedMode,
         workspaceId,
         root,
         scopedTemplatePath ?? null,
-        resourceLoaderOptions ?? null,
+        pi ?? null,
         sessionNamespace ?? null
       ])
     };
   }
   async function resolveSkillScope(workspaceId, request) {
     const root = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : workspaceRoot;
-    const resourceLoaderOptions = opts.getResourceLoaderOptions ? await opts.getResourceLoaderOptions({ workspaceId, workspaceRoot: root, request }) : opts.resourceLoaderOptions;
-    return { root, resourceLoaderOptions };
+    const pi = opts.getPi ? await opts.getPi({ workspaceId, workspaceRoot: root, request }) : opts.pi;
+    return { root, pi };
   }
   async function createRuntimeBinding(workspaceId, scope, request) {
     const root = scope.root;
@@ -7837,12 +8018,19 @@ var registerAgentRoutes = async (app, opts) => {
       pluginTools,
       logger: app.log
     });
-    const harness = createPiCodingAgentHarness({
+    const harnessFactory = opts.harnessFactory ?? ((input) => createPiCodingAgentHarness({
+      ...input,
+      pi: {
+        noContextFiles: true,
+        noSkills: true,
+        ...scope.pi
+      }
+    }));
+    const harness = await harnessFactory({
       tools,
       cwd: root,
       sessionNamespace: scope.sessionNamespace,
-      systemPromptAppend: opts.systemPromptAppend,
-      resourceLoaderOptions: scope.resourceLoaderOptions
+      systemPromptAppend: opts.systemPromptAppend
     });
     const readyTracker = new ReadyStatusTracker({
       sandboxReady: resolvedMode !== "vercel-sandbox",
@@ -8025,13 +8213,13 @@ var registerAgentRoutes = async (app, opts) => {
   await app.register(modelsRoutes);
   await app.register(skillsRoutes, {
     workspaceRoot,
-    additionalSkillPaths: opts.resourceLoaderOptions?.additionalSkillPaths,
-    piPackages: opts.resourceLoaderOptions?.piPackages,
-    noSkills: opts.resourceLoaderOptions?.noSkills,
+    additionalSkillPaths: opts.pi?.additionalSkillPaths,
+    piPackages: opts.pi?.packages,
+    noSkills: opts.pi?.noSkills,
     getWorkspaceRoot: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).root,
-    getAdditionalSkillPaths: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).resourceLoaderOptions?.additionalSkillPaths,
-    getPiPackages: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).resourceLoaderOptions?.piPackages,
-    getNoSkills: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).resourceLoaderOptions?.noSkills
+    getAdditionalSkillPaths: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).pi?.additionalSkillPaths,
+    getPiPackages: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).pi?.packages,
+    getNoSkills: staticBinding ? void 0 : async (request) => (await getSkillsScopeForRequest(request)).pi?.noSkills
   });
   await app.register(sessionChangesRoutes, { tracker: sessionChangesTracker });
   await app.register(
@@ -8062,6 +8250,7 @@ export {
   createDirectSandbox,
   createLogger,
   createNodeWorkspace,
+  createResourceSettingsManager,
   createVercelDeploymentSnapshotProvider,
   createVercelSandboxWorkspace,
   fileRoutes,

package/dist/shared/index.d.ts

@@ -1,6 +1,8 @@
-export { A as AgentHarness, R as RunContext, S as SendMessageInput, a as SessionCtx, b as SessionDetail, c as SessionStore, d as SessionSummary, T as ToolUiMetadata, e as extractToolUiMetadata, i as isToolUiMetadata } from '../tool-ui-DSmWuqGe.js';
-import { W as Workspace, S as Sandbox, F as FileSearch, A as AgentTool } from '../sandbox-handle-store-hK76cTjn.js';
-export { E as Entry, a as ExecOptions, b as ExecResult, I as IsolatedCodeInput, c as IsolatedCodeOutput, J as JSONSchema, d as SandboxCapability, e as SandboxHandleRecord, f as SandboxHandleStore, g as Stat, T as ToolExecContext, h as ToolResult } from '../sandbox-handle-store-hK76cTjn.js';
+import { A as AgentTool } from '../harness-DRrTn_5T.js';
+export { a as AgentHarness, J as JSONSchema, R as RunContext, S as SendMessageInput, b as SessionCtx, c as SessionDetail, d as SessionStore, e as SessionSummary, T as ToolExecContext, f as ToolResult } from '../harness-DRrTn_5T.js';
+import { W as Workspace, S as Sandbox, F as FileSearch } from '../agentPluginEvents-zyIvVjsA.js';
+export { E as Entry, a as ExecOptions, b as ExecResult, I as IsolatedCodeInput, c as IsolatedCodeOutput, d as SandboxCapability, e as SandboxHandleRecord, f as SandboxHandleStore, g as Stat, h as WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT } from '../agentPluginEvents-zyIvVjsA.js';
+export { T as ToolUiMetadata, e as extractToolUiMetadata, i as isToolUiMetadata } from '../tool-ui-DIFNGwYd.js';
 export { UIMessage, UIMessageChunk } from 'ai';
 import { z } from 'zod';
 

package/dist/shared/index.js

@@ -9,9 +9,10 @@ import {
 import {
   DEFAULT_AGENT_RUNTIME_CAPABILITIES,
   PI_AGENT_RUNTIME_CAPABILITIES,
+  WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT,
   extractToolUiMetadata,
   isToolUiMetadata
-} from "../chunk-F3CE5CNW.js";
+} from "../chunk-B5JECXMG.js";
 
 // src/shared/config-schema.ts
 import { z } from "zod";
@@ -77,6 +78,7 @@ export {
   ErrorLogFieldsSchema,
   PI_AGENT_RUNTIME_CAPABILITIES,
   RuntimeModeSchema,
+  WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT,
   extractToolUiMetadata,
   isToolUiMetadata,
   validateConfig,

package/dist/tool-ui-DIFNGwYd.d.ts

@@ -0,0 +1,20 @@
+interface ToolUiMetadata {
+    /** Renderer key registered by the app shell, e.g. `pi-subagent`. */
+    rendererId?: string;
+    /** Optional grouping label for future tool timelines/summaries. */
+    displayGroup?: string;
+    /** Optional icon hint. Frontends decide whether/how to honor it. */
+    icon?: string;
+    /** Renderer-specific structured data. */
+    details?: unknown;
+}
+declare function isToolUiMetadata(value: unknown): value is ToolUiMetadata;
+/**
+ * Extract structured UI metadata from a ToolResult-like output.
+ *
+ * Shape:
+ *   output.details.ui = { rendererId, displayGroup, icon, details }
+ */
+declare function extractToolUiMetadata(output: unknown): ToolUiMetadata | undefined;
+
+export { type ToolUiMetadata as T, extractToolUiMetadata as e, isToolUiMetadata as i };