@hachej/boring-agent 0.1.43 → 0.1.45

package/dist/{agentPluginEvents-DP-vLNCs.d.ts → agentPluginEvents-Dgm57gEU.d.ts}

@@ -1,4 +1,4 @@
-import { d as SessionStore } from './chatSubmitPayload-gC61O4Ni.js';
+import { d as SessionStore } from './chatSubmitPayload-DHqQL2wD.js';
 
 interface TelemetrySink {
     capture(event: TelemetryEvent): void | Promise<void>;

package/dist/{chatSubmitPayload-gC61O4Ni.d.ts → chatSubmitPayload-DHqQL2wD.d.ts}

@@ -33,6 +33,8 @@ interface ChatAttachmentPayload {
     filename?: string;
     mediaType?: string;
     url: string;
+    /** Workspace-relative path when the browser upload endpoint persisted the attachment. */
+    path?: string;
 }
 interface ChatSubmitPayload {
     message: string;

package/dist/{chunk-YUDMSYAO.js → chunk-HEEJSOFF.js}

@@ -291,7 +291,8 @@ var ThinkingLevelSchema = z2.enum(["off", "low", "medium", "high"]);
 var ChatAttachmentPayloadSchema = z2.object({
   filename: z2.string().optional(),
   mediaType: z2.string().optional(),
-  url: nonEmptyString
+  url: nonEmptyString,
+  path: z2.string().optional()
 });
 var PromptPayloadSchema = z2.object({
   message: z2.string().min(1).max(1e6),

package/dist/front/index.d.ts

@@ -2,8 +2,8 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { ComponentType, ReactNode, HTMLAttributes, ComponentProps, FormEvent } from 'react';
 import { FileUIPart, UIMessage, ChatStatus } from 'ai';
-import { T as ToolUiMetadata, B as BoringChatPart, d as BoringChatMessage, m as PiChatStatus, r as QueuedUserMessage, C as ChatError, P as PiChatEvent, o as PromptPayload, p as PromptReceipt, F as FollowUpPayload, i as FollowUpReceipt, Q as QueueClearPayload, q as QueueClearReceipt, I as InterruptPayload, e as CommandReceipt, S as StopPayload, s as StopReceipt } from '../piChatEvent-DR9a-FVz.js';
-import { e as SessionSummary } from '../chatSubmitPayload-gC61O4Ni.js';
+import { T as ToolUiMetadata, B as BoringChatPart, d as BoringChatMessage, m as PiChatStatus, r as QueuedUserMessage, C as ChatError, P as PiChatEvent, o as PromptPayload, p as PromptReceipt, F as FollowUpPayload, i as FollowUpReceipt, Q as QueueClearPayload, q as QueueClearReceipt, I as InterruptPayload, e as CommandReceipt, S as StopPayload, s as StopReceipt } from '../piChatEvent-DNKo77Xw.js';
+import { e as SessionSummary } from '../chatSubmitPayload-DHqQL2wD.js';
 import { Button, Collapsible, CollapsibleContent, CollapsibleTrigger, InputGroupAddon, InputGroupButton, InputGroupTextarea } from '@hachej/boring-ui-kit';
 import { Streamdown } from 'streamdown';
 import { StickToBottom } from 'use-stick-to-bottom';
@@ -15,6 +15,7 @@ interface UploadFileOptions {
     workspaceRequestId?: string | null;
     directory?: string;
     sourcePath?: string;
+    fetch?: typeof globalThis.fetch;
 }
 interface UploadFileResult {
     url: string;
@@ -390,6 +391,7 @@ declare class RemotePiSession {
     private connectEvents;
     private runEventStream;
     private rehydrateAfterStreamReset;
+    private ensureReconnectScheduled;
     private scheduleReconnect;
     private postCommand;
     private rollbackOptimisticMessage;
@@ -695,6 +697,7 @@ type PromptInputProps = Omit<HTMLAttributes<HTMLFormElement>, "onSubmit" | "onEr
      * attachment URL is replaced with the stable server path before submit. */
     onUploadFile?: (file: File) => Promise<{
         url: string;
+        path?: string;
     }>;
 };
 declare const PromptInput: ({ className, accept, multiple, globalDrop, syncHiddenInput, maxFiles, maxFileSize, onError, onSubmit, onUploadFile, children, ...props }: PromptInputProps) => react_jsx_runtime.JSX.Element;

package/dist/front/index.js

@@ -13,7 +13,7 @@ import {
   StopReceiptSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata
-} from "../chunk-YUDMSYAO.js";
+} from "../chunk-HEEJSOFF.js";
 import {
   DebugDrawer,
   cn,
@@ -30,14 +30,14 @@ function readAsDataUrl(file) {
   });
 }
 async function uploadFile(file, opts = {}) {
-  const { apiBaseUrl = "", workspaceRequestId, directory, sourcePath } = opts;
+  const { apiBaseUrl = "", workspaceRequestId, directory, sourcePath, fetch: fetchImpl = globalThis.fetch } = opts;
   const dataUrl = await readAsDataUrl(file);
   const comma = dataUrl.indexOf(",");
   const contentBase64 = comma >= 0 ? dataUrl.slice(comma + 1) : "";
   const headers = { "Content-Type": "application/json" };
   if (workspaceRequestId) headers["x-boring-workspace-id"] = workspaceRequestId;
   const base = apiBaseUrl.replace(/\/$/, "");
-  const res = await fetch(`${base}/api/v1/files/upload`, {
+  const res = await fetchImpl(`${base}/api/v1/files/upload`, {
     method: "POST",
     headers,
     credentials: "include",
@@ -2230,7 +2230,8 @@ async function resolveAttachmentUrls(files) {
   return Promise.all(files.map(async (file) => ({
     filename: file.filename,
     mediaType: file.mediaType,
-    url: file.url.startsWith("blob:") ? await convertBlobUrlToDataUrl(file.url) ?? file.url : file.url
+    url: file.url.startsWith("blob:") ? await convertBlobUrlToDataUrl(file.url) ?? file.url : file.url,
+    ...typeof file.path === "string" ? { path: file.path } : {}
   })));
 }
 async function readFileAsText(file) {
@@ -2255,14 +2256,18 @@ async function createEnrichedSubmitPayload({
   for (const file of files ?? []) {
     const label = file.filename ?? "attachment";
     const mime = file.mediaType ?? "application/octet-stream";
+    const workspacePath = typeof file.path === "string" ? file.path : void 0;
+    const pathNote = workspacePath ? `
+Saved in workspace at: ${workspacePath}
+Use the workspace file/read tools with this path if you need to inspect it.` : "";
     const content = await readFileAsText(file);
     if (content !== null) {
-      attachmentSummaries.push(`[attached: ${label} (${mime})]
+      attachmentSummaries.push(`[attached: ${label} (${mime})${pathNote}]
 \`\`\`
 ${content}
 \`\`\``);
     } else {
-      attachmentSummaries.push(`[attached: ${label} (${mime}, not inlined \u2014 binary)]`);
+      attachmentSummaries.push(`[attached: ${label} (${mime}, not inlined \u2014 binary)${pathNote}]`);
     }
   }
   const mentionNote = mentionedFiles.length > 0 ? `@files: ${mentionedFiles.join(", ")}` : null;
@@ -3246,7 +3251,7 @@ function selectQueuePreview(state) {
 }
 function selectRuntimeNotices(state) {
   const notices = [...state.notices];
-  if (state.connection.state === "reconnecting") {
+  if (state.connection.state === "reconnecting" && hasVisibleReconnectWork(state)) {
     notices.push({ id: "connection-reconnecting", level: "warning", text: "Reconnecting to the agent session\u2026" });
   }
   if (state.retryNotice) {
@@ -3261,6 +3266,9 @@ function selectRuntimeNotices(state) {
   }
   return notices;
 }
+function hasVisibleReconnectWork(state) {
+  return state.status !== "idle" || state.queue.followUps.length > 0 || Object.keys(state.optimisticOutbox).length > 0 || state.pendingToolCallIds.size > 0;
+}
 function optimisticText(message) {
   const text = message.parts.filter((part) => part.type === "text").map((part) => part.text).join("\n\n");
   return text;
@@ -3703,10 +3711,18 @@ function piChatReducer(state, action) {
         queue: { followUps: clearQueuedFollowUps(state.queue.followUps, action) },
         optimisticOutbox: clearOptimisticFollowUps(state.optimisticOutbox, action)
       };
-    case "connection-state":
-      return { ...state, connection: { ...state.connection, state: action.state } };
+    case "connection-state": {
+      const nextState = {
+        ...state,
+        connection: { ...state.connection, state: action.state }
+      };
+      return action.state === "connected" ? clearProtocolError(nextState) : nextState;
+    }
     case "heartbeat":
-      return { ...state, connection: { ...state.connection, lastHeartbeatAt: action.now ?? Date.now() } };
+      return clearProtocolError({
+        ...state,
+        connection: { ...state.connection, lastHeartbeatAt: action.now ?? Date.now() }
+      });
     case "protocol-error":
       return {
         ...state,
@@ -3723,6 +3739,14 @@ function piChatReducer(state, action) {
       return { ...state, notices: state.notices.filter((notice) => notice.id !== action.id) };
   }
 }
+function clearProtocolError(state) {
+  if (!state.notices.some((notice) => notice.id === "protocol-error")) return state;
+  return {
+    ...state,
+    error: void 0,
+    notices: state.notices.filter((notice) => notice.id !== "protocol-error")
+  };
+}
 function syncCursor(state, cursor) {
   if (cursor <= state.lastSeq) return { ...state, hydrated: true, needsResync: void 0 };
   return { ...state, lastSeq: cursor, hydrated: true, needsResync: void 0 };
@@ -3730,7 +3754,9 @@ function syncCursor(state, cursor) {
 function hydrateFromSnapshot(state, snapshot, options = {}) {
   if (snapshot.seq < state.lastSeq && !options.allowSeqRewind) return state;
   const queue = { followUps: enrichQueueWithKnownMetadata(snapshot.queue.followUps, state.optimisticOutbox, state.queue.followUps) };
-  const committedMessages = normalizeSnapshotMessages(snapshot.messages);
+  const snapshotMessages = normalizeSnapshotMessages(snapshot.messages);
+  const preserveLocalHistory = shouldPreserveLocalCommittedHistory(state, snapshot, snapshotMessages, options);
+  const committedMessages = preserveLocalHistory ? mergeSnapshotMessagesIntoLocal(state.committedMessages, snapshotMessages) : snapshotMessages;
   const serverNonces = /* @__PURE__ */ new Set();
   for (const message of committedMessages) {
     if (message.clientNonce) serverNonces.add(message.clientNonce);
@@ -3739,7 +3765,12 @@ function hydrateFromSnapshot(state, snapshot, options = {}) {
     if (followUp.clientNonce) serverNonces.add(followUp.clientNonce);
   }
   const nextOutbox = {};
-  const staleOutbox = Object.values(state.optimisticOutbox).filter((message) => !serverNonces.has(message.clientNonce));
+  if (preserveLocalHistory) {
+    for (const message of Object.values(state.optimisticOutbox)) {
+      if (!serverNonces.has(message.clientNonce)) nextOutbox[message.clientNonce] = message;
+    }
+  }
+  const staleOutbox = preserveLocalHistory ? [] : Object.values(state.optimisticOutbox).filter((message) => !serverNonces.has(message.clientNonce));
   const notices = staleOutbox.length > 0 ? upsertNotice(state.notices, {
     id: "stale-outbox-cleared",
     level: "warning",
@@ -3766,6 +3797,22 @@ function hydrateFromSnapshot(state, snapshot, options = {}) {
     needsResync: void 0
   };
 }
+function shouldPreserveLocalCommittedHistory(state, snapshot, snapshotMessages, options) {
+  if (options.allowSeqRewind) return false;
+  if (!state.hydrated) return false;
+  if (state.sessionId !== snapshot.sessionId) return false;
+  if (state.committedMessages.length === 0) return false;
+  if (snapshotMessages.length < state.committedMessages.length) return true;
+  for (let index = 0; index < state.committedMessages.length; index += 1) {
+    if (snapshotMessages[index]?.id !== state.committedMessages[index]?.id) return true;
+  }
+  return false;
+}
+function mergeSnapshotMessagesIntoLocal(currentMessages, snapshotMessages) {
+  let merged = currentMessages;
+  for (const message of snapshotMessages) merged = replaceOrAppendMessage(merged, message);
+  return merged;
+}
 function applySequencedEvent(state, event) {
   if (event.seq <= state.lastSeq) return state;
   const expectedSeq = state.lastSeq + 1;
@@ -4494,6 +4541,7 @@ var RemotePiSession = class {
       this.store.dispatch({ type: "optimistic-user-message", message: toOptimisticUserMessage(payload) }, { flush: true });
     }
     if (!this.started) await this.start(this.store.getState().lastSeq);
+    else this.ensureReconnectScheduled();
     try {
       const receipt = await this.postCommand("/prompt", payload, PromptReceiptSchema);
       return receipt;
@@ -4507,6 +4555,7 @@ var RemotePiSession = class {
       this.store.dispatch({ type: "optimistic-user-message", message: toOptimisticUserMessage(payload) }, { flush: true });
     }
     if (!this.started) await this.start(this.store.getState().lastSeq);
+    else this.ensureReconnectScheduled();
     try {
       const receipt = await this.postCommand("/followup", payload, FollowUpReceiptSchema);
       return receipt;
@@ -4675,7 +4724,9 @@ var RemotePiSession = class {
       markOpen();
       if (!this.isStreamActive(generation, runId)) return;
       if (!connectTimedOut && shouldIgnoreStreamClose(error, controller)) return;
-      this.dispatchProtocolError(connectTimedOut ? `Pi chat event stream timed out after ${this.requestTimeoutMs}ms.` : errorMessage(error, "Pi chat event stream disconnected."));
+      if (!connectTimedOut) {
+        this.dispatchProtocolError(errorMessage(error, "Pi chat event stream disconnected."));
+      }
       this.scheduleReconnect(generation);
     } finally {
       clearConnectTimer();
@@ -4687,6 +4738,13 @@ var RemotePiSession = class {
     this.abortEventStream();
     void this.hydrateAndConnect(generation, options);
   }
+  ensureReconnectScheduled() {
+    if (!this.isGenerationActive(this.generation)) return;
+    const state = this.store.getState();
+    if (state.connection.state === "connected" || state.connection.state === "connecting") return;
+    if (this.reconnectTimer !== void 0) return;
+    void this.hydrateAndConnect(this.generation);
+  }
   scheduleReconnect(generation) {
     if (!this.isGenerationActive(generation)) return;
     this.clearReconnectTimer();
@@ -7988,11 +8046,11 @@ var PromptInput = ({
   const inputRef = useRef14(null);
   const formRef = useRef14(null);
   const [items, setItems] = useState17([]);
-  const setFileUrlLocal = useCallback15((id, url, status) => {
+  const setFileUrlLocal = useCallback15((id, url, status, path) => {
     setItems((prev) => prev.map((f) => {
       if (f.id !== id) return f;
       if (f.url !== url && f.url.startsWith("blob:")) URL.revokeObjectURL(f.url);
-      return { ...f, url, status };
+      return { ...f, url, status, ...path ? { path } : {} };
     }));
   }, []);
   const files = usingProvider ? controller.attachments.files : items;
@@ -8061,7 +8119,7 @@ var PromptInput = ({
         for (let i = 0; i < entries.length; i++) {
           const entry = entries[i];
           const file = capped[i];
-          onUploadFile(file).then(({ url }) => setFileUrlLocal(entry.id, url, "ready")).catch(() => setFileUrlLocal(entry.id, entry.url, "error"));
+          onUploadFile(file).then(({ url, path }) => setFileUrlLocal(entry.id, url, "ready", path)).catch(() => setFileUrlLocal(entry.id, entry.url, "error"));
         }
       }
     },
@@ -8744,6 +8802,11 @@ function PiChatComposerSurface({
   onSubmitMessage,
   onStop
 }) {
+  const uploadAttachment = useCallback16((file) => uploadFile(file, {
+    apiBaseUrl,
+    workspaceRequestId: requestHeaders?.["x-boring-workspace-id"],
+    fetch: fetch2
+  }), [apiBaseUrl, fetch2, requestHeaders]);
   const resizeTextarea = useCallback16((node) => {
     if (!node) return;
     node.style.height = "auto";
@@ -8903,6 +8966,7 @@ function PiChatComposerSurface({
           {
             "data-boring-state": status,
             onSubmit: (message) => onSubmitMessage({ text: message.text, files: message.files }),
+            onUploadFile: uploadAttachment,
             multiple: true,
             maxFiles: disabled || isStreaming ? 0 : MAX_PROMPT_ATTACHMENTS,
             maxFileSize: MAX_PROMPT_ATTACHMENT_BYTES,

package/dist/{piChatEvent-DR9a-FVz.d.ts → piChatEvent-DNKo77Xw.d.ts}

@@ -1,4 +1,4 @@
-import { b as ChatSubmitPayload } from './chatSubmitPayload-gC61O4Ni.js';
+import { b as ChatSubmitPayload } from './chatSubmitPayload-DHqQL2wD.js';
 import { z } from 'zod';
 
 interface ToolUiMetadata {

package/dist/server/index.d.ts

@@ -1,9 +1,9 @@
-import { o as WorkspaceRuntimeContext, S as Sandbox, g as SandboxHandleStore, f as SandboxHandleRecord, W as Workspace, j as TelemetrySink, F as FileSearch, i as Stat, E as Entry, c as ExecResult, q as WorkspaceChangeEvent, b as ExecOptions, P as PluginRestartWarning, A as AgentTool, r as AgentHarnessFactory } from '../agentPluginEvents-DP-vLNCs.js';
-export { t as AgentHarnessFactoryInput } from '../agentPluginEvents-DP-vLNCs.js';
+import { o as WorkspaceRuntimeContext, S as Sandbox, g as SandboxHandleStore, f as SandboxHandleRecord, W as Workspace, j as TelemetrySink, F as FileSearch, i as Stat, E as Entry, c as ExecResult, q as WorkspaceChangeEvent, b as ExecOptions, P as PluginRestartWarning, A as AgentTool, r as AgentHarnessFactory } from '../agentPluginEvents-Dgm57gEU.js';
+export { t as AgentHarnessFactoryInput } from '../agentPluginEvents-Dgm57gEU.js';
 import { Sandbox as Sandbox$1 } from '@vercel/sandbox';
 import { FastifyInstance, FastifyRequest, FastifyPluginAsync } from 'fastify';
 import { PackageSource, ExtensionFactory, SettingsManager } from '@mariozechner/pi-coding-agent';
-import { a as ChatModelSelection } from '../chatSubmitPayload-gC61O4Ni.js';
+import { a as ChatModelSelection } from '../chatSubmitPayload-DHqQL2wD.js';
 
 interface CreateDirectSandboxOptions {
     runtimeContext?: WorkspaceRuntimeContext;

package/dist/server/index.js

@@ -13,7 +13,7 @@ import {
   StopPayloadSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "../chunk-YUDMSYAO.js";
+} from "../chunk-HEEJSOFF.js";
 
 // src/server/sandbox/direct/createDirectSandbox.ts
 import { spawn } from "child_process";
@@ -1795,13 +1795,15 @@ async function bakeSnapshotIfNeeded(opts) {
 }
 
 // src/server/sandbox/snapshots/deploymentSnapshot.ts
-var VERCEL_UV_BIN = "/home/vercel-sandbox/.local/bin/uv";
+var VERCEL_UV_BIN_DIR = "/workspace/.boring-agent/sdk/uv/bin";
+var VERCEL_UV_BIN = `${VERCEL_UV_BIN_DIR}/uv`;
 var UV_SETUP_COMMANDS = [
   "command -v uv >/dev/null 2>&1 || python3 -m pip install --upgrade uv",
   "uv --version"
 ];
 var NODE_UV_SETUP_COMMANDS = [
-  `[ -x ${VERCEL_UV_BIN} ] || curl -LsSf https://astral.sh/uv/install.sh | sh`,
+  `mkdir -p ${VERCEL_UV_BIN_DIR}`,
+  `[ -x ${VERCEL_UV_BIN} ] || curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=${VERCEL_UV_BIN_DIR} sh`,
   `${VERCEL_UV_BIN} --version`
 ];
 function isNodeFamilyRuntime(runtime) {
@@ -8723,19 +8725,25 @@ import { AuthStorage as AuthStorage2, ModelRegistry as ModelRegistry2 } from "@m
 function modelsRoutes(app, _opts, done) {
   const authStorage = AuthStorage2.create();
   const registry = ModelRegistry2.create(authStorage);
-  registerConfiguredModelProviders(registry);
+  const configuredModels = registerConfiguredModelProviders(registry);
+  const configuredModelSet = new Set(
+    configuredModels.map((model) => `${model.provider}:${model.id}`)
+  );
   app.get("/api/v1/agent/models", async (_request, reply) => {
     const availableModels = registry.getAvailable();
     const availableSet = new Set(
       availableModels.map((m) => `${m.provider}:${m.id}`)
     );
-    const models = registry.getAll().map((m) => ({
+    const allModels = configuredModelSet.size > 0 ? registry.getAll().filter((m) => configuredModelSet.has(`${m.provider}:${m.id}`)) : registry.getAll();
+    const models = allModels.map((m) => ({
       provider: m.provider,
       id: m.id,
       label: m.label ?? m.id,
       // Keep this endpoint cheap: it is fetched on chat mount, so it must never
       // block workspace load on deep provider auth resolution. ModelRegistry's
-      // available set is already derived from configured auth sources.
+      // available set is already derived from configured auth sources. When
+      // hosts configure launch/custom providers, those configured models are an
+      // allowlist: do not leak the built-in registry's unavailable catalog.
       available: availableSet.has(`${m.provider}:${m.id}`)
     }));
     models.sort((a, b) => {
@@ -9210,7 +9218,7 @@ function statusCodeFromError(err) {
 
 // src/server/http/routes/systemPrompt.ts
 function systemPromptRoutes(app, opts, done) {
-  async function resolveHarness(request) {
+  async function resolveHarness2(request) {
     if (opts.getHarness) return await opts.getHarness(request);
     if (opts.harness) return opts.harness;
     throw new Error("system prompt route requires harness or getHarness");
@@ -9229,7 +9237,7 @@ function systemPromptRoutes(app, opts, done) {
           }
         });
       }
-      const harness = await resolveHarness(request);
+      const harness = await resolveHarness2(request);
       if (typeof harness.getSystemPrompt !== "function") {
         return reply.code(501).send({
           error: {
@@ -9387,14 +9395,24 @@ function normalizeSessionId(value, fallback) {
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : fallback;
 }
+function resolveHarness(opts, request) {
+  return "getHarness" in opts ? opts.getHarness(request) : opts.harness;
+}
+function resolveWorkdir(opts, request) {
+  return "getWorkdir" in opts ? opts.getWorkdir(request) : opts.workdir;
+}
 function commandsRoutes(app, opts, done) {
   app.get("/api/v1/agent/commands", async (request, reply) => {
     try {
       const query = request.query;
       const sessionId = normalizeSessionId(query.sessionId, opts.defaultSessionId);
-      const commands = await opts.harness.getSlashCommands?.(sessionId, {
+      const [harness, workdir] = await Promise.all([
+        resolveHarness(opts, request),
+        resolveWorkdir(opts, request)
+      ]);
+      const commands = await harness.getSlashCommands?.(sessionId, {
         abortSignal: new AbortController().signal,
-        workdir: opts.workdir
+        workdir
       }) ?? [];
       return reply.code(200).send({ commands });
     } catch (error) {
@@ -9403,19 +9421,23 @@ function commandsRoutes(app, opts, done) {
     }
   });
   app.post("/api/v1/agent/commands/execute", async (request, reply) => {
-    if (!opts.harness.executeSlashCommand) {
-      return reply.code(501).send({ error: "Command execution not supported by this harness." });
-    }
     try {
+      const [harness, workdir] = await Promise.all([
+        resolveHarness(opts, request),
+        resolveWorkdir(opts, request)
+      ]);
+      if (!harness.executeSlashCommand) {
+        return reply.code(501).send({ error: "Command execution not supported by this harness." });
+      }
       const query = request.query;
       const body = request.body && typeof request.body === "object" ? request.body : {};
       const sessionId = normalizeSessionId(query.sessionId, opts.defaultSessionId);
       const name = typeof body.name === "string" ? body.name.trim() : "";
       const args = typeof body.args === "string" ? body.args : "";
       if (!name) return reply.code(400).send({ error: "name body field is required" });
-      await opts.harness.executeSlashCommand(sessionId, name, args, {
+      await harness.executeSlashCommand(sessionId, name, args, {
         abortSignal: new AbortController().signal,
-        workdir: opts.workdir
+        workdir
       });
       return reply.code(200).send({ ok: true });
     } catch (error) {
@@ -12032,9 +12054,13 @@ function pluginNameFromPath(path4) {
 function getAvailableModelProviders() {
   const authStorage = AuthStorage3.create();
   const registry = ModelRegistry3.create(authStorage);
-  registerConfiguredModelProviders(registry);
+  const configuredModels = registerConfiguredModelProviders(registry);
+  const configuredModelSet = new Set(
+    configuredModels.map((model) => `${model.provider}:${model.id}`)
+  );
+  const availableModels = configuredModelSet.size > 0 ? registry.getAvailable().filter((model) => configuredModelSet.has(`${model.provider}:${model.id}`)) : registry.getAvailable();
   return Array.from(
-    new Set(registry.getAvailable().map((model) => model.provider))
+    new Set(availableModels.map((model) => model.provider))
   ).sort((a, b) => a.localeCompare(b));
 }
 function selectRuntimeModeAdapter(mode, sandboxHandleStore) {
@@ -12682,6 +12708,18 @@ var registerAgentRoutes = async (app, opts) => {
     catalogRoutes,
     staticBinding ? { tools: staticBinding.tools } : { getTools: async (request) => (await getBindingForRequest(request)).tools }
   );
+  await app.register(
+    commandsRoutes,
+    staticBinding ? {
+      harness: staticBinding.harness,
+      defaultSessionId: sessionId,
+      workdir: staticBinding.runtimeBundle.workspace.root
+    } : {
+      defaultSessionId: sessionId,
+      getHarness: async (request) => (await getBindingForRequest(request)).harness,
+      getWorkdir: async (request) => (await getBindingForRequest(request)).runtimeBundle.workspace.root
+    }
+  );
   await app.register(
     readyStatusRoutes,
     staticBinding ? { tracker: staticBinding.readyTracker } : { getTracker: async (request) => (await getBindingForRequest(request)).readyTracker }

package/dist/shared/index.d.ts

@@ -1,8 +1,8 @@
-import { W as Workspace, S as Sandbox, F as FileSearch, A as AgentTool } from '../agentPluginEvents-DP-vLNCs.js';
-export { a as AgentHarness, C as CommandNotifyPayload, E as Entry, b as ExecOptions, c as ExecResult, I as IsolatedCodeInput, d as IsolatedCodeOutput, J as JSONSchema, R as RunContext, e as SandboxCapability, f as SandboxHandleRecord, g as SandboxHandleStore, h as SendMessageInput, i as Stat, T as TelemetryEvent, j as TelemetrySink, k as ToolExecContext, l as ToolResult, m as WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT, n as WORKSPACE_COMMAND_NOTIFY_EVENT, o as WorkspaceRuntimeContext, p as noopTelemetry, s as safeCapture } from '../agentPluginEvents-DP-vLNCs.js';
-import { B as BoringChatPart, T as ToolUiMetadata } from '../piChatEvent-DR9a-FVz.js';
-export { A as ApiErrorPayload, a as ApiErrorPayloadSchema, b as ApiErrorResponse, c as ApiErrorResponseSchema, d as BoringChatMessage, C as ChatError, e as CommandReceipt, E as ERROR_CODES, f as ErrorCode, g as ErrorLogFields, h as ErrorLogFieldsSchema, F as FollowUpPayload, i as FollowUpReceipt, I as InterruptPayload, j as InterruptReceipt, P as PiChatEvent, k as PiChatHeartbeatFrame, l as PiChatSnapshot, m as PiChatStatus, n as PiChatStreamFrame, o as PromptPayload, p as PromptReceipt, Q as QueueClearPayload, q as QueueClearReceipt, r as QueuedUserMessage, S as StopPayload, s as StopReceipt, t as extractToolUiMetadata, u as isToolUiMetadata } from '../piChatEvent-DR9a-FVz.js';
-export { C as ChatAttachmentPayload, a as ChatModelSelection, b as ChatSubmitPayload, S as SessionCtx, c as SessionDetail, d as SessionStore, e as SessionSummary, T as ThinkingLevel } from '../chatSubmitPayload-gC61O4Ni.js';
+import { W as Workspace, S as Sandbox, F as FileSearch, A as AgentTool } from '../agentPluginEvents-Dgm57gEU.js';
+export { a as AgentHarness, C as CommandNotifyPayload, E as Entry, b as ExecOptions, c as ExecResult, I as IsolatedCodeInput, d as IsolatedCodeOutput, J as JSONSchema, R as RunContext, e as SandboxCapability, f as SandboxHandleRecord, g as SandboxHandleStore, h as SendMessageInput, i as Stat, T as TelemetryEvent, j as TelemetrySink, k as ToolExecContext, l as ToolResult, m as WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT, n as WORKSPACE_COMMAND_NOTIFY_EVENT, o as WorkspaceRuntimeContext, p as noopTelemetry, s as safeCapture } from '../agentPluginEvents-Dgm57gEU.js';
+import { B as BoringChatPart, T as ToolUiMetadata } from '../piChatEvent-DNKo77Xw.js';
+export { A as ApiErrorPayload, a as ApiErrorPayloadSchema, b as ApiErrorResponse, c as ApiErrorResponseSchema, d as BoringChatMessage, C as ChatError, e as CommandReceipt, E as ERROR_CODES, f as ErrorCode, g as ErrorLogFields, h as ErrorLogFieldsSchema, F as FollowUpPayload, i as FollowUpReceipt, I as InterruptPayload, j as InterruptReceipt, P as PiChatEvent, k as PiChatHeartbeatFrame, l as PiChatSnapshot, m as PiChatStatus, n as PiChatStreamFrame, o as PromptPayload, p as PromptReceipt, Q as QueueClearPayload, q as QueueClearReceipt, r as QueuedUserMessage, S as StopPayload, s as StopReceipt, t as extractToolUiMetadata, u as isToolUiMetadata } from '../piChatEvent-DNKo77Xw.js';
+export { C as ChatAttachmentPayload, a as ChatModelSelection, b as ChatSubmitPayload, S as SessionCtx, c as SessionDetail, d as SessionStore, e as SessionSummary, T as ThinkingLevel } from '../chatSubmitPayload-DHqQL2wD.js';
 import { z } from 'zod';
 
 interface CatalogDeps {
@@ -1347,12 +1347,15 @@ declare const ChatAttachmentPayloadSchema: z.ZodObject<{
     filename: z.ZodOptional<z.ZodString>;
     mediaType: z.ZodOptional<z.ZodString>;
     url: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     url: string;
+    path?: string | undefined;
     filename?: string | undefined;
     mediaType?: string | undefined;
 }, {
     url: string;
+    path?: string | undefined;
     filename?: string | undefined;
     mediaType?: string | undefined;
 }>;
@@ -1375,12 +1378,15 @@ declare const PromptPayloadSchema: z.ZodObject<{
         filename: z.ZodOptional<z.ZodString>;
         mediaType: z.ZodOptional<z.ZodString>;
         url: z.ZodString;
+        path: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         url: string;
+        path?: string | undefined;
         filename?: string | undefined;
         mediaType?: string | undefined;
     }, {
         url: string;
+        path?: string | undefined;
         filename?: string | undefined;
         mediaType?: string | undefined;
     }>, "many">>;
@@ -1395,6 +1401,7 @@ declare const PromptPayloadSchema: z.ZodObject<{
     thinkingLevel?: "off" | "low" | "medium" | "high" | undefined;
     attachments?: {
         url: string;
+        path?: string | undefined;
         filename?: string | undefined;
         mediaType?: string | undefined;
     }[] | undefined;
@@ -1409,6 +1416,7 @@ declare const PromptPayloadSchema: z.ZodObject<{
     thinkingLevel?: "off" | "low" | "medium" | "high" | undefined;
     attachments?: {
         url: string;
+        path?: string | undefined;
         filename?: string | undefined;
         mediaType?: string | undefined;
     }[] | undefined;

package/dist/shared/index.js

@@ -39,7 +39,7 @@ import {
   extractToolUiMetadata,
   isToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "../chunk-YUDMSYAO.js";
+} from "../chunk-HEEJSOFF.js";
 
 // src/shared/config-schema.ts
 import { z } from "zod";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -74,7 +74,7 @@
     "use-stick-to-bottom": "^1.1.3",
     "yaml": "^2.8.3",
     "zod": "^3.25.76",
-    "@hachej/boring-ui-kit": "0.1.43"
+    "@hachej/boring-ui-kit": "0.1.45"
   },
   "devDependencies": {
     "@antithesishq/bombadil": "0.5.0",