@hachej/boring-agent 0.1.75 → 0.1.77

package/dist/{chunk-AQVEZYLH.js → chunk-3WWLQAJB.js}

@@ -1,17 +1,18 @@
 import {
+  AgentFilesystemRequiredError,
   AgentNotImplementedError,
   sessionStreamPath
-} from "./chunk-WSQ5QNIY.js";
+} from "./chunk-ZUEITFIJ.js";
 import {
   extractToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "./chunk-4LXA7OOV.js";
+} from "./chunk-ORURYKNY.js";
 import {
   createLogger
 } from "./chunk-AJZHR626.js";
 import {
   ErrorCode
-} from "./chunk-XZKU7FBV.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/server/pi-chat/metering.ts
 var meteringLogger = createLogger("pi-chat-metering");
@@ -1627,6 +1628,7 @@ var HarnessPiChatService = class {
   workdir;
   workspace;
   eventStore;
+  allowAttachments;
   channels = /* @__PURE__ */ new Map();
   // Single-flight guard so concurrent cold callers (e.g. two browser tabs each
   // opening /events while the session is still being created) converge on one
@@ -1644,6 +1646,7 @@ var HarnessPiChatService = class {
     this.workdir = options.workdir;
     this.workspace = options.workspace;
     this.eventStore = options.eventStore;
+    this.allowAttachments = options.allowAttachments !== false;
     this.metering = options.metering ? new PiChatMeteringCoordinator(options.metering, options.meteringLogger) : void 0;
   }
   /** Test/diagnostic hook: resolves once queued metering sink calls settle. */
@@ -1722,6 +1725,7 @@ var HarnessPiChatService = class {
     return { type: "ok", unsubscribe: result.unsubscribe, closed: channel.closed };
   }
   async prompt(ctx, sessionId, payload) {
+    this.assertAttachmentsAllowed(payload);
     const sessionKey = this.sessionKey(ctx, sessionId);
     const adapter = await this.getAdapter(ctx, sessionId, payload);
     const channel = await this.ensureChannel(ctx, sessionId, adapter);
@@ -1762,6 +1766,10 @@ var HarnessPiChatService = class {
     }
     return { accepted: true, cursor: receiptCursor, clientNonce: payload.clientNonce };
   }
+  assertAttachmentsAllowed(payload) {
+    if (this.allowAttachments || !payload.attachments || payload.attachments.length === 0) return;
+    throw new AgentFilesystemRequiredError();
+  }
   async followUp(ctx, sessionId, payload) {
     const sessionKey = this.sessionKey(ctx, sessionId);
     const adapter = await this.getAdapter(ctx, sessionId, payload.message);
@@ -2160,13 +2168,13 @@ function promptCancelledError() {
   });
 }
 function deferred() {
-  let resolve;
+  let resolve2;
   let reject;
   const promise = new Promise((nextResolve, nextReject) => {
-    resolve = nextResolve;
+    resolve2 = nextResolve;
     reject = nextReject;
   });
-  return { promise, resolve, reject };
+  return { promise, resolve: resolve2, reject };
 }
 function normalizeSessionAccessError(error, sessionId) {
   if (error?.code === ErrorCode.enum.SESSION_NOT_FOUND || isPlainSessionNotFound(error, sessionId)) {
@@ -2307,6 +2315,29 @@ function sessionCacheKey(sessionId, ctx) {
   return JSON.stringify([sessionId, ctx.workspaceId ?? "", ctx.userId ?? ""]);
 }
 
+// src/server/runtime/pureRuntime.ts
+import { chmod, mkdir, mkdtemp } from "fs/promises";
+import { tmpdir } from "os";
+import { join, resolve } from "path";
+var PURE_RUNTIME_CWD_NAME = ".runtime-none";
+var defaultPureRuntimeCwd;
+async function createPureRuntimeCwd(sessionRoot) {
+  const explicitRoot = sessionRoot?.trim();
+  if (!explicitRoot) {
+    defaultPureRuntimeCwd ??= createDefaultPureRuntimeCwd();
+    return defaultPureRuntimeCwd;
+  }
+  const cwd = join(resolve(explicitRoot), PURE_RUNTIME_CWD_NAME);
+  await mkdir(cwd, { recursive: true, mode: 448 });
+  await chmod(cwd, 448);
+  return cwd;
+}
+async function createDefaultPureRuntimeCwd() {
+  const cwd = await mkdtemp(join(tmpdir(), "boring-agent-pure-"));
+  await chmod(cwd, 448);
+  return cwd;
+}
+
 // src/server/createAgent.ts
 var DEFAULT_WORKDIR = "";
 var DEFAULT_LIVE_BUFFER_SIZE = 1e3;
@@ -2363,6 +2394,7 @@ function createAgentRuntimeBridge(config, options = {}) {
     }
   }
   async function start(input) {
+    assertFilesystemAttachmentsAllowed(config, input);
     const runtime = await getRuntime();
     const { sessionId, sessionKey, ctx } = await ensureSession(input, runtime);
     startedSessions.set(sessionKey, { sessionId, ctx });
@@ -2453,11 +2485,13 @@ function createRuntimeLoader(config, options) {
   };
 }
 async function createRuntime(config, options) {
-  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-B3MYGFVB.js")).createPiCodingAgentHarness;
+  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-RZUU6MJQ.js")).createPiCodingAgentHarness;
+  const pureRuntimeCwd = config.runtime === "none" ? await createPureRuntimeCwd(config.sessionStorageRoot) : void 0;
   const harnessInput = {
     tools: config.tools ?? [],
-    cwd: config.workdir ?? DEFAULT_WORKDIR,
-    runtimeCwd: options.harness?.runtimeCwd ?? options.service?.workdir ?? config.workdir,
+    cwd: pureRuntimeCwd ?? config.workdir ?? DEFAULT_WORKDIR,
+    runtimeCwd: pureRuntimeCwd ?? options.harness?.runtimeCwd ?? options.service?.workdir ?? config.workdir,
+    sessionStorageCwd: pureRuntimeCwd ? DEFAULT_WORKDIR : void 0,
     systemPromptAppend: config.systemPromptAppend,
     systemPromptDynamic: config.systemPromptDynamic,
     sessionRoot: config.sessionStorageRoot,
@@ -2471,13 +2505,18 @@ async function createRuntime(config, options) {
     service: new HarnessPiChatService({
       harness,
       sessionStore,
-      workdir: options.service?.workdir ?? config.workdir ?? DEFAULT_WORKDIR,
+      workdir: pureRuntimeCwd ?? options.service?.workdir ?? config.workdir ?? DEFAULT_WORKDIR,
       workspace: options.service?.workspace,
       eventStore: options.service?.eventStore,
+      allowAttachments: config.runtime !== "none",
       metering: config.metering
     })
   };
 }
+function assertFilesystemAttachmentsAllowed(config, input) {
+  if (config.runtime !== "none" || !input.attachments || input.attachments.length === 0) return;
+  throw new AgentFilesystemRequiredError();
+}
 function createReadiness(config) {
   const requirements = [...config.readinessRequirements ?? []];
   return {
@@ -2602,8 +2641,8 @@ async function acquireSessionLock(locks, sessionId) {
   const previous = locks.get(sessionId) ?? Promise.resolve();
   let release;
   const current = previous.catch(() => {
-  }).then(() => new Promise((resolve) => {
-    release = resolve;
+  }).then(() => new Promise((resolve2) => {
+    release = resolve2;
   }));
   locks.set(sessionId, current);
   await previous.catch(() => {
@@ -2735,7 +2774,7 @@ function createLiveIterator(state, startIndex) {
     async next() {
       if (queued.length > 0) return { value: queued.shift(), done: false };
       if (!active || state.closed) return { value: void 0, done: true };
-      return new Promise((resolve) => waiters.push(resolve));
+      return new Promise((resolve2) => waiters.push(resolve2));
     },
     async return() {
       active = false;

package/dist/{chunk-XZKU7FBV.js → chunk-6AEK34XU.js}

@@ -19,6 +19,7 @@ var ErrorCode = z.enum([
   "WORKSPACE_NOT_READY",
   // Agent runtime / provisioning
   "AGENT_RUNTIME_NOT_READY",
+  "AGENT_CONTROL_RECEIPT_INVALID",
   "RUNTIME_PROVISIONING_FAILED",
   "RUNTIME_PROVISIONING_LOCKED",
   // Sandbox / exec
@@ -69,6 +70,7 @@ var ErrorCode = z.enum([
   "PROVISIONING_ARTIFACT_FAILED",
   // Internal
   "ERR_NOT_IMPLEMENTED_UNTIL_T1",
+  "ERR_NO_FILESYSTEM_FOR_ATTACHMENTS",
   "INTERNAL_ERROR"
 ]);
 var ERROR_CODES = ErrorCode.options;

package/dist/{chunk-4LXA7OOV.js → chunk-ORURYKNY.js}

@@ -1,6 +1,6 @@
 import {
   ErrorCode
-} from "./chunk-XZKU7FBV.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/shared/tool-ui.ts
 function isRecord(value) {

package/dist/{chunk-FDGWCMJD.js → chunk-TS3QGFKK.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-AJZHR626.js";
 import {
   ErrorCode
-} from "./chunk-XZKU7FBV.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/server/harness/pi-coding-agent/createHarness.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -341,6 +341,7 @@ function sessionBaseDir(explicitRoot) {
   return configured ? resolve(configured) : join(homedir(), ".pi", "agent", "sessions");
 }
 function defaultSessionDir(cwd, explicitRoot) {
+  if (explicitRoot && cwd.trim().length === 0) return sessionBaseDir(explicitRoot);
   const safePath = `--${cwd.replace(/^[/\\]/, "").replace(/[/\\:]/g, "-")}--`;
   return join(sessionBaseDir(explicitRoot), safePath);
 }
@@ -1505,7 +1506,7 @@ function createPiCodingAgentHarness(opts) {
     sessionNamespace: opts.sessionNamespace,
     sessionRoot: opts.sessionRoot,
     sessionDir: opts.sessionDir,
-    storageCwd: opts.cwd
+    storageCwd: opts.sessionStorageCwd ?? opts.cwd
   });
   const piSessions = /* @__PURE__ */ new Map();
   const runContextStorage = new AsyncLocalStorage();

package/dist/{chunk-WSQ5QNIY.js → chunk-ZUEITFIJ.js}

@@ -1,5 +1,6 @@
 // src/shared/events.ts
 var AGENT_NOT_IMPLEMENTED_UNTIL_T1 = "ERR_NOT_IMPLEMENTED_UNTIL_T1";
+var AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS = "ERR_NO_FILESYSTEM_FOR_ATTACHMENTS";
 function sessionStreamPath(sessionId) {
   return `sessions/${sessionId}`;
 }
@@ -10,9 +11,19 @@ var AgentNotImplementedError = class extends Error {
     this.name = "AgentNotImplementedError";
   }
 };
+var AgentFilesystemRequiredError = class extends Error {
+  code = AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS;
+  statusCode = 400;
+  constructor(message = "Attachments require a filesystem-backed agent runtime.") {
+    super(message);
+    this.name = "AgentFilesystemRequiredError";
+  }
+};
 
 export {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
+  AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS,
   sessionStreamPath,
-  AgentNotImplementedError
+  AgentNotImplementedError,
+  AgentFilesystemRequiredError
 };

package/dist/core/index.d.ts

@@ -1,6 +1,6 @@
-import { u as AgentConfig, b as Agent } from '../harness-Dwxh6USt.js';
-export { a as AGENT_NOT_IMPLEMENTED_UNTIL_T1, c as AgentActor, d as AgentCoreHarness, e as AgentCoreHarnessFactory, f as AgentCorePromptInput, g as AgentCoreSessionAdapter, h as AgentCoreSessionSnapshot, i as AgentEvent, k as AgentMessageContent, l as AgentMessagePart, m as AgentNotImplementedError, n as AgentReadiness, o as AgentReadinessStatus, p as AgentResolveInputResponse, q as AgentRuntimeAdapter, r as AgentSendInput, s as AgentStartReceipt, t as AgentStreamOptions } from '../harness-Dwxh6USt.js';
-import '../session-DKMQNtNG.js';
+import { w as AgentConfig, c as Agent } from '../harness-OsJBlx4u.js';
+export { a as AGENT_NOT_IMPLEMENTED_UNTIL_T1, b as AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, k as AgentFilesystemRequiredError, m as AgentMessageContent, n as AgentMessagePart, o as AgentNotImplementedError, p as AgentReadiness, q as AgentReadinessStatus, r as AgentResolveInputResponse, s as AgentRuntimeAdapter, t as AgentSendInput, u as AgentStartReceipt, v as AgentStreamOptions } from '../harness-OsJBlx4u.js';
+import '../session-FUiMWsyX.js';
 import 'zod';
 import '@mariozechner/pi-coding-agent';
 

package/dist/core/index.js

@@ -1,15 +1,19 @@
 import {
   createAgent
-} from "../chunk-AQVEZYLH.js";
+} from "../chunk-3WWLQAJB.js";
 import {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
+  AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS,
+  AgentFilesystemRequiredError,
   AgentNotImplementedError
-} from "../chunk-WSQ5QNIY.js";
-import "../chunk-4LXA7OOV.js";
+} from "../chunk-ZUEITFIJ.js";
+import "../chunk-ORURYKNY.js";
 import "../chunk-AJZHR626.js";
-import "../chunk-XZKU7FBV.js";
+import "../chunk-6AEK34XU.js";
 export {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
+  AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS,
+  AgentFilesystemRequiredError,
   AgentNotImplementedError,
   createAgent
 };

package/dist/{createHarness-B3MYGFVB.js → createHarness-RZUU6MJQ.js}

@@ -4,10 +4,10 @@ import {
   deriveSourcePlugin,
   mergePiPackageSources,
   withPiHarnessDefaults
-} from "./chunk-FDGWCMJD.js";
+} from "./chunk-TS3QGFKK.js";
 import "./chunk-AQBXNPMD.js";
 import "./chunk-AJZHR626.js";
-import "./chunk-XZKU7FBV.js";
+import "./chunk-6AEK34XU.js";
 export {
   createPiCodingAgentHarness,
   createResourceSettingsManager,

package/dist/front/index.d.ts

@@ -1,14 +1,13 @@
 import * as react from 'react';
 import { ComponentProps, HTMLAttributes, FormEvent, ReactNode, ComponentType } from 'react';
 import { FileUIPart, ChatStatus, UIMessage } from 'ai';
-import { T as ToolUiMetadata, B as BoringChatPart, e as BoringChatMessage, k as PiChatStatus, Q as QueuedUserMessage, C as ChatError, P as PiChatEvent, n as SessionSummary } from '../session-DKMQNtNG.js';
-import { P as PromptPayload, c as PromptReceipt, F as FollowUpPayload, a as FollowUpReceipt, Q as QueueClearPayload, d as QueueClearReceipt, I as InterruptPayload, C as CommandReceipt, S as StopPayload, e as StopReceipt } from '../piChatCommand-CSepU1NX.js';
+import { T as ToolUiMetadata, B as BoringChatPart, e as BoringChatMessage, k as PiChatStatus, Q as QueuedUserMessage, C as ChatError, P as PiChatEvent, n as SessionSummary } from '../session-FUiMWsyX.js';
+import { P as PromptPayload, f as PromptReceipt, F as FollowUpPayload, d as FollowUpReceipt, Q as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, c as CommandReceipt, S as StopPayload, h as StopReceipt } from '../piChatCommand-BuWXytap.js';
 import { InputGroupAddon, InputGroupButton, InputGroupTextarea, Button, Collapsible, CollapsibleContent, CollapsibleTrigger } from '@hachej/boring-ui-kit';
 import { Streamdown } from 'streamdown';
 import { StickToBottom } from 'use-stick-to-bottom';
 import { ClassValue } from 'clsx';
 import 'zod';
-import '../chatSubmitPayload-DwOHyiqR.js';
 
 interface UploadFileOptions {
     apiBaseUrl?: string;

package/dist/front/index.js

@@ -12,10 +12,10 @@ import {
   StopReceiptSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata
-} from "../chunk-4LXA7OOV.js";
+} from "../chunk-ORURYKNY.js";
 import {
   ErrorCode
-} from "../chunk-XZKU7FBV.js";
+} from "../chunk-6AEK34XU.js";
 import {
   DebugDrawer,
   cn,

package/dist/{harness-Dwxh6USt.d.ts → harness-OsJBlx4u.d.ts}

@@ -1,4 +1,4 @@
-import { S as SessionCtx, P as PiChatEvent, a as SessionStore } from './session-DKMQNtNG.js';
+import { S as SessionCtx, P as PiChatEvent, a as SessionStore } from './session-FUiMWsyX.js';
 import { AgentSessionEvent, PromptOptions } from '@mariozechner/pi-coding-agent';
 
 interface TelemetrySink {
@@ -47,6 +47,7 @@ interface ToolResult {
 }
 
 declare const AGENT_NOT_IMPLEMENTED_UNTIL_T1: "ERR_NOT_IMPLEMENTED_UNTIL_T1";
+declare const AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS: "ERR_NO_FILESYSTEM_FOR_ATTACHMENTS";
 interface MessageAttachment {
     filename?: string;
     mediaType?: string;
@@ -140,6 +141,11 @@ declare class AgentNotImplementedError extends Error {
     readonly code: "ERR_NOT_IMPLEMENTED_UNTIL_T1";
     constructor(message?: string);
 }
+declare class AgentFilesystemRequiredError extends Error {
+    readonly code: "ERR_NO_FILESYSTEM_FOR_ATTACHMENTS";
+    readonly statusCode = 400;
+    constructor(message?: string);
+}
 
 interface AgentHarnessFactoryInput {
     tools: AgentTool[];
@@ -147,6 +153,8 @@ interface AgentHarnessFactoryInput {
     cwd: string;
     /** Agent-visible cwd used by Pi/system prompt/session metadata. */
     runtimeCwd?: string;
+    /** Optional cwd used only to derive the default transcript storage directory. */
+    sessionStorageCwd?: string;
     systemPromptAppend?: string;
     sessionNamespace?: string;
     sessionRoot?: string;
@@ -262,4 +270,4 @@ interface RunContext {
     allowPromptDispatch?: boolean;
 }
 
-export { type AgentTool as A, sessionStreamPath as B, type ToolReadinessRequirement as C, type AgentHarnessFactory as D, type AgentHarnessFactoryInput as E, type JSONSchema as J, type MessageAttachment as M, type RunContext as R, type SendMessageInput as S, type TelemetryEvent as T, AGENT_NOT_IMPLEMENTED_UNTIL_T1 as a, type Agent as b, type AgentActor as c, type AgentCoreHarness as d, type AgentCoreHarnessFactory as e, type AgentCorePromptInput as f, type AgentCoreSessionAdapter as g, type AgentCoreSessionSnapshot as h, type AgentEvent as i, type AgentHarness as j, type AgentMessageContent as k, type AgentMessagePart as l, AgentNotImplementedError as m, type AgentReadiness as n, type AgentReadinessStatus as o, type AgentResolveInputResponse as p, type AgentRuntimeAdapter as q, type AgentSendInput as r, type AgentStartReceipt as s, type AgentStreamOptions as t, type AgentConfig as u, type TelemetrySink as v, type ToolExecContext as w, type ToolResult as x, noopTelemetry as y, safeCapture as z };
+export { type AgentTool as A, noopTelemetry as B, safeCapture as C, sessionStreamPath as D, type ToolReadinessRequirement as E, type AgentHarnessFactory as F, type AgentHarnessFactoryInput as G, type JSONSchema as J, type MessageAttachment as M, type RunContext as R, type SendMessageInput as S, type TelemetryEvent as T, AGENT_NOT_IMPLEMENTED_UNTIL_T1 as a, AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS as b, type Agent as c, type AgentActor as d, type AgentCoreHarness as e, type AgentCoreHarnessFactory as f, type AgentCorePromptInput as g, type AgentCoreSessionAdapter as h, type AgentCoreSessionSnapshot as i, type AgentEvent as j, AgentFilesystemRequiredError as k, type AgentHarness as l, type AgentMessageContent as m, type AgentMessagePart as n, AgentNotImplementedError as o, type AgentReadiness as p, type AgentReadinessStatus as q, type AgentResolveInputResponse as r, type AgentRuntimeAdapter as s, type AgentSendInput as t, type AgentStartReceipt as u, type AgentStreamOptions as v, type AgentConfig as w, type TelemetrySink as x, type ToolExecContext as y, type ToolResult as z };

package/dist/piChatCommand-BuWXytap.d.ts

@@ -0,0 +1,60 @@
+import { Q as QueuedUserMessage } from './session-FUiMWsyX.js';
+
+type ThinkingLevel = 'off' | 'low' | 'medium' | 'high';
+interface ChatModelSelection {
+    provider: string;
+    id: string;
+}
+interface ChatAttachmentPayload {
+    filename?: string;
+    mediaType?: string;
+    url: string;
+    /** Workspace-relative path when the browser upload endpoint persisted the attachment. */
+    path?: string;
+}
+interface ChatSubmitPayload {
+    message: string;
+    displayMessage?: string;
+    clientNonce: string;
+    model?: ChatModelSelection;
+    thinkingLevel?: ThinkingLevel;
+    attachments?: ChatAttachmentPayload[];
+}
+
+type PromptPayload = ChatSubmitPayload;
+interface FollowUpPayload {
+    message: string;
+    displayMessage?: string;
+    clientNonce: string;
+    clientSeq: number;
+}
+interface QueueClearPayload {
+    clientNonce?: string;
+    clientSeq?: number;
+}
+type InterruptPayload = Record<string, never>;
+type StopPayload = Record<string, never>;
+interface CommandReceipt {
+    accepted: true;
+    cursor: number;
+}
+type PromptReceipt = CommandReceipt & {
+    clientNonce: string;
+    duplicate?: boolean;
+};
+type FollowUpReceipt = CommandReceipt & {
+    clientNonce: string;
+    clientSeq: number;
+    queued: true;
+    duplicate?: boolean;
+};
+type QueueClearReceipt = CommandReceipt & {
+    cleared: number;
+};
+type InterruptReceipt = CommandReceipt;
+type StopReceipt = CommandReceipt & {
+    stopped: boolean;
+    clearedQueue: QueuedUserMessage[];
+};
+
+export type { ChatAttachmentPayload as C, FollowUpPayload as F, InterruptPayload as I, PromptPayload as P, QueueClearPayload as Q, StopPayload as S, ThinkingLevel as T, ChatModelSelection as a, ChatSubmitPayload as b, CommandReceipt as c, FollowUpReceipt as d, InterruptReceipt as e, PromptReceipt as f, QueueClearReceipt as g, StopReceipt as h };

package/dist/server/index.d.ts

@@ -1,14 +1,14 @@
-import { j as WorkspaceRuntimeContext, S as Sandbox, f as SandboxHandleStore, e as SandboxHandleRecord, W as Workspace, F as FileSearch, g as Stat, E as Entry, b as ExecResult, k as WorkspaceChangeEvent, a as ExecOptions, P as PluginRestartWarning } from '../agentPluginEvents-CqLTEdG2.js';
+import { m as WorkspaceRuntimeContext, S as Sandbox, f as SandboxHandleStore, e as SandboxHandleRecord, W as Workspace, F as FileSearch, g as Stat, E as Entry, b as ExecResult, n as WorkspaceChangeEvent, a as ExecOptions, P as PluginRestartWarning, k as WorkspaceAgentDispatcherContext, j as WorkspaceAgentDispatcher } from '../workspaceAgentDispatcher-Cl3EBveh.js';
 import { Sandbox as Sandbox$1 } from '@vercel/sandbox';
-import { v as TelemetrySink, C as ToolReadinessRequirement, i as AgentEvent, b as Agent, c as AgentActor, A as AgentTool, D as AgentHarnessFactory } from '../harness-Dwxh6USt.js';
-export { u as AgentConfig, E as AgentHarnessFactoryInput } from '../harness-Dwxh6USt.js';
+import { x as TelemetrySink, E as ToolReadinessRequirement, j as AgentEvent, c as Agent, d as AgentActor, A as AgentTool, F as AgentHarnessFactory } from '../harness-OsJBlx4u.js';
+export { w as AgentConfig, G as AgentHarnessFactoryInput } from '../harness-OsJBlx4u.js';
 import { FastifyInstance, FastifyRequest, FastifyPluginAsync } from 'fastify';
 export { createAgent } from '../core/index.js';
-import { S as SessionCtx, f as ErrorCode } from '../session-DKMQNtNG.js';
+import { S as SessionCtx, f as ErrorCode } from '../session-FUiMWsyX.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { PackageSource, ExtensionFactory, SettingsManager } from '@mariozechner/pi-coding-agent';
-import { b as ChatModelSelection } from '../chatSubmitPayload-DwOHyiqR.js';
+import { a as ChatModelSelection } from '../piChatCommand-BuWXytap.js';
 import 'zod';
 
 interface CreateDirectSandboxOptions {
@@ -1083,6 +1083,13 @@ type MeteringErrorLogger = (message: string, error: unknown) => void;
  * from an unexpected provider still meters as zeros instead of NaN. */
 declare function normalizeMeteringUsage(value: unknown): MeteringUsage | undefined;
 
+interface WorkspaceAgentDispatcherResolveOptions {
+    request?: FastifyRequest;
+}
+interface WorkspaceAgentDispatcherResolver {
+    resolve(ctx: WorkspaceAgentDispatcherContext, options?: WorkspaceAgentDispatcherResolveOptions): Promise<WorkspaceAgentDispatcher>;
+}
+
 interface CreateAgentAppOptions {
     workspaceRoot?: string;
     sessionId?: string;
@@ -1138,6 +1145,8 @@ interface CreateAgentAppOptions {
     }) => Promise<void>;
     /** Optional explicit file-backed session directory. Mostly for tests/hosts. */
     sessionDir?: string;
+    /** Optional explicit root for file-backed session directories. */
+    sessionRoot?: string;
     /**
      * Enable user/global Pi extension auto-discovery from .pi/ and ~/.pi.
      * App/internal plugins should be passed through extraTools/pi instead.
@@ -1170,6 +1179,11 @@ interface CreateAgentAppOptions {
         message: string;
         pluginId?: string;
     }>>;
+    /**
+     * Trusted in-process host composition seam. The resolver trusts caller-supplied
+     * workspace/user context; callers must authorize that context before resolving.
+     */
+    onWorkspaceAgentDispatcher?: (resolver: WorkspaceAgentDispatcherResolver) => void;
 }
 declare function createAgentApp(opts?: CreateAgentAppOptions): Promise<FastifyInstance>;
 
@@ -1296,11 +1310,14 @@ interface RegisterAgentRoutesOptions {
         workspaceId: string;
         workspaceRoot: string;
         request?: FastifyRequest;
+        /** Verified actor id for trusted requestless dispatcher resolution. */
+        userId?: string;
     }) => string | undefined | Promise<string | undefined>;
     registerHealthRoute?: boolean;
     sandboxHandleStore?: SandboxHandleStore;
     getWorkspaceId?: (request: FastifyRequest) => string | Promise<string>;
     getWorkspaceRoot?: (workspaceId: string, request: FastifyRequest) => string | Promise<string>;
+    getTrustedWorkspaceRoot?: (ctx: WorkspaceAgentDispatcherContext) => string | Promise<string>;
     /** Generic runtime env contributors. Agent stays workspace-neutral; hosts decide env names/values. */
     runtimeEnvContributions?: RuntimeEnvContribution[];
     /**
@@ -1336,6 +1353,11 @@ interface RegisterAgentRoutesOptions {
         message: string;
         pluginId?: string;
     }>>;
+    /**
+     * Trusted in-process host composition seam. The resolver trusts caller-supplied
+     * workspace/user context; callers must authorize that context before resolving.
+     */
+    onWorkspaceAgentDispatcher?: (resolver: WorkspaceAgentDispatcherResolver) => void;
 }
 /**
  * Fastify plugin that mounts agent routes onto a host app (typically core-built).
@@ -1357,4 +1379,4 @@ interface Logger {
 }
 declare function createLogger(prefix: string): Logger;
 
-export { AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type BwrapResourceLimits, type CreateAgentAppOptions, type CreateBwrapSandboxOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifactRef, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, REMOTE_WORKER_PROVIDER, REMOTE_WORKER_RUNTIME_CWD, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, type RemoteWorkerErrorPayload, type RemoteWorkerExecRequest, type RemoteWorkerExecResponse, type RemoteWorkerFsEventEnvelope, type RemoteWorkerModeAdapterOptions, type RemoteWorkerWorkspaceOp, type RemoteWorkerWorkspaceResult, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, WORKER_INTERNAL_TOKEN_HEADER, WORKER_REQUEST_ID_HEADER, WORKER_WORKSPACE_ID_HEADER, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, constantTimeTokenEqual, createAgentApp, createBwrapSandbox, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveMode, resolveSandboxHandle };
+export { AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type BwrapResourceLimits, type CreateAgentAppOptions, type CreateBwrapSandboxOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifactRef, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, REMOTE_WORKER_PROVIDER, REMOTE_WORKER_RUNTIME_CWD, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, type RemoteWorkerErrorPayload, type RemoteWorkerExecRequest, type RemoteWorkerExecResponse, type RemoteWorkerFsEventEnvelope, type RemoteWorkerModeAdapterOptions, type RemoteWorkerWorkspaceOp, type RemoteWorkerWorkspaceResult, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, WORKER_INTERNAL_TOKEN_HEADER, WORKER_REQUEST_ID_HEADER, WORKER_WORKSPACE_ID_HEADER, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, constantTimeTokenEqual, createAgentApp, createBwrapSandbox, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveMode, resolveSandboxHandle };