@hachej/boring-agent 0.1.76 → 0.1.77

package/dist/{chunk-FRFCVP3X.js → chunk-3WWLQAJB.js}

@@ -6,13 +6,13 @@ import {
 import {
   extractToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "./chunk-PMREGRGD.js";
+} from "./chunk-ORURYKNY.js";
 import {
   createLogger
 } from "./chunk-AJZHR626.js";
 import {
   ErrorCode
-} from "./chunk-M4AY4VBI.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/server/pi-chat/metering.ts
 var meteringLogger = createLogger("pi-chat-metering");
@@ -2485,7 +2485,7 @@ function createRuntimeLoader(config, options) {
   };
 }
 async function createRuntime(config, options) {
-  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-HQ3RHXTF.js")).createPiCodingAgentHarness;
+  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-RZUU6MJQ.js")).createPiCodingAgentHarness;
   const pureRuntimeCwd = config.runtime === "none" ? await createPureRuntimeCwd(config.sessionStorageRoot) : void 0;
   const harnessInput = {
     tools: config.tools ?? [],

package/dist/{chunk-M4AY4VBI.js → chunk-6AEK34XU.js}

@@ -19,6 +19,7 @@ var ErrorCode = z.enum([
   "WORKSPACE_NOT_READY",
   // Agent runtime / provisioning
   "AGENT_RUNTIME_NOT_READY",
+  "AGENT_CONTROL_RECEIPT_INVALID",
   "RUNTIME_PROVISIONING_FAILED",
   "RUNTIME_PROVISIONING_LOCKED",
   // Sandbox / exec

package/dist/{chunk-PMREGRGD.js → chunk-ORURYKNY.js}

@@ -1,6 +1,6 @@
 import {
   ErrorCode
-} from "./chunk-M4AY4VBI.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/shared/tool-ui.ts
 function isRecord(value) {

package/dist/{chunk-OABGJVSA.js → chunk-TS3QGFKK.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-AJZHR626.js";
 import {
   ErrorCode
-} from "./chunk-M4AY4VBI.js";
+} from "./chunk-6AEK34XU.js";
 
 // src/server/harness/pi-coding-agent/createHarness.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/core/index.d.ts

@@ -1,6 +1,6 @@
-import { w as AgentConfig, c as Agent } from '../harness-BrX6CdMT.js';
-export { a as AGENT_NOT_IMPLEMENTED_UNTIL_T1, b as AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, k as AgentFilesystemRequiredError, m as AgentMessageContent, n as AgentMessagePart, o as AgentNotImplementedError, p as AgentReadiness, q as AgentReadinessStatus, r as AgentResolveInputResponse, s as AgentRuntimeAdapter, t as AgentSendInput, u as AgentStartReceipt, v as AgentStreamOptions } from '../harness-BrX6CdMT.js';
-import '../session-DTV7L5dc.js';
+import { w as AgentConfig, c as Agent } from '../harness-OsJBlx4u.js';
+export { a as AGENT_NOT_IMPLEMENTED_UNTIL_T1, b as AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, k as AgentFilesystemRequiredError, m as AgentMessageContent, n as AgentMessagePart, o as AgentNotImplementedError, p as AgentReadiness, q as AgentReadinessStatus, r as AgentResolveInputResponse, s as AgentRuntimeAdapter, t as AgentSendInput, u as AgentStartReceipt, v as AgentStreamOptions } from '../harness-OsJBlx4u.js';
+import '../session-FUiMWsyX.js';
 import 'zod';
 import '@mariozechner/pi-coding-agent';
 

package/dist/core/index.js

@@ -1,15 +1,15 @@
 import {
   createAgent
-} from "../chunk-FRFCVP3X.js";
+} from "../chunk-3WWLQAJB.js";
 import {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
   AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS,
   AgentFilesystemRequiredError,
   AgentNotImplementedError
 } from "../chunk-ZUEITFIJ.js";
-import "../chunk-PMREGRGD.js";
+import "../chunk-ORURYKNY.js";
 import "../chunk-AJZHR626.js";
-import "../chunk-M4AY4VBI.js";
+import "../chunk-6AEK34XU.js";
 export {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
   AGENT_NO_FILESYSTEM_FOR_ATTACHMENTS,

package/dist/{createHarness-HQ3RHXTF.js → createHarness-RZUU6MJQ.js}

@@ -4,10 +4,10 @@ import {
   deriveSourcePlugin,
   mergePiPackageSources,
   withPiHarnessDefaults
-} from "./chunk-OABGJVSA.js";
+} from "./chunk-TS3QGFKK.js";
 import "./chunk-AQBXNPMD.js";
 import "./chunk-AJZHR626.js";
-import "./chunk-M4AY4VBI.js";
+import "./chunk-6AEK34XU.js";
 export {
   createPiCodingAgentHarness,
   createResourceSettingsManager,

package/dist/front/index.d.ts

@@ -1,14 +1,13 @@
 import * as react from 'react';
 import { ComponentProps, HTMLAttributes, FormEvent, ReactNode, ComponentType } from 'react';
 import { FileUIPart, ChatStatus, UIMessage } from 'ai';
-import { T as ToolUiMetadata, B as BoringChatPart, e as BoringChatMessage, k as PiChatStatus, Q as QueuedUserMessage, C as ChatError, P as PiChatEvent, n as SessionSummary } from '../session-DTV7L5dc.js';
-import { P as PromptPayload, c as PromptReceipt, F as FollowUpPayload, a as FollowUpReceipt, Q as QueueClearPayload, d as QueueClearReceipt, I as InterruptPayload, C as CommandReceipt, S as StopPayload, e as StopReceipt } from '../piChatCommand-5UO2F_gv.js';
+import { T as ToolUiMetadata, B as BoringChatPart, e as BoringChatMessage, k as PiChatStatus, Q as QueuedUserMessage, C as ChatError, P as PiChatEvent, n as SessionSummary } from '../session-FUiMWsyX.js';
+import { P as PromptPayload, f as PromptReceipt, F as FollowUpPayload, d as FollowUpReceipt, Q as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, c as CommandReceipt, S as StopPayload, h as StopReceipt } from '../piChatCommand-BuWXytap.js';
 import { InputGroupAddon, InputGroupButton, InputGroupTextarea, Button, Collapsible, CollapsibleContent, CollapsibleTrigger } from '@hachej/boring-ui-kit';
 import { Streamdown } from 'streamdown';
 import { StickToBottom } from 'use-stick-to-bottom';
 import { ClassValue } from 'clsx';
 import 'zod';
-import '../chatSubmitPayload-DwOHyiqR.js';
 
 interface UploadFileOptions {
     apiBaseUrl?: string;

package/dist/front/index.js

@@ -12,10 +12,10 @@ import {
   StopReceiptSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata
-} from "../chunk-PMREGRGD.js";
+} from "../chunk-ORURYKNY.js";
 import {
   ErrorCode
-} from "../chunk-M4AY4VBI.js";
+} from "../chunk-6AEK34XU.js";
 import {
   DebugDrawer,
   cn,

package/dist/{harness-BrX6CdMT.d.ts → harness-OsJBlx4u.d.ts}

@@ -1,4 +1,4 @@
-import { S as SessionCtx, P as PiChatEvent, a as SessionStore } from './session-DTV7L5dc.js';
+import { S as SessionCtx, P as PiChatEvent, a as SessionStore } from './session-FUiMWsyX.js';
 import { AgentSessionEvent, PromptOptions } from '@mariozechner/pi-coding-agent';
 
 interface TelemetrySink {

package/dist/piChatCommand-BuWXytap.d.ts

@@ -0,0 +1,60 @@
+import { Q as QueuedUserMessage } from './session-FUiMWsyX.js';
+
+type ThinkingLevel = 'off' | 'low' | 'medium' | 'high';
+interface ChatModelSelection {
+    provider: string;
+    id: string;
+}
+interface ChatAttachmentPayload {
+    filename?: string;
+    mediaType?: string;
+    url: string;
+    /** Workspace-relative path when the browser upload endpoint persisted the attachment. */
+    path?: string;
+}
+interface ChatSubmitPayload {
+    message: string;
+    displayMessage?: string;
+    clientNonce: string;
+    model?: ChatModelSelection;
+    thinkingLevel?: ThinkingLevel;
+    attachments?: ChatAttachmentPayload[];
+}
+
+type PromptPayload = ChatSubmitPayload;
+interface FollowUpPayload {
+    message: string;
+    displayMessage?: string;
+    clientNonce: string;
+    clientSeq: number;
+}
+interface QueueClearPayload {
+    clientNonce?: string;
+    clientSeq?: number;
+}
+type InterruptPayload = Record<string, never>;
+type StopPayload = Record<string, never>;
+interface CommandReceipt {
+    accepted: true;
+    cursor: number;
+}
+type PromptReceipt = CommandReceipt & {
+    clientNonce: string;
+    duplicate?: boolean;
+};
+type FollowUpReceipt = CommandReceipt & {
+    clientNonce: string;
+    clientSeq: number;
+    queued: true;
+    duplicate?: boolean;
+};
+type QueueClearReceipt = CommandReceipt & {
+    cleared: number;
+};
+type InterruptReceipt = CommandReceipt;
+type StopReceipt = CommandReceipt & {
+    stopped: boolean;
+    clearedQueue: QueuedUserMessage[];
+};
+
+export type { ChatAttachmentPayload as C, FollowUpPayload as F, InterruptPayload as I, PromptPayload as P, QueueClearPayload as Q, StopPayload as S, ThinkingLevel as T, ChatModelSelection as a, ChatSubmitPayload as b, CommandReceipt as c, FollowUpReceipt as d, InterruptReceipt as e, PromptReceipt as f, QueueClearReceipt as g, StopReceipt as h };

package/dist/server/index.d.ts

@@ -1,14 +1,14 @@
-import { j as WorkspaceRuntimeContext, S as Sandbox, f as SandboxHandleStore, e as SandboxHandleRecord, W as Workspace, F as FileSearch, g as Stat, E as Entry, b as ExecResult, k as WorkspaceChangeEvent, a as ExecOptions, P as PluginRestartWarning } from '../agentPluginEvents-CqLTEdG2.js';
+import { m as WorkspaceRuntimeContext, S as Sandbox, f as SandboxHandleStore, e as SandboxHandleRecord, W as Workspace, F as FileSearch, g as Stat, E as Entry, b as ExecResult, n as WorkspaceChangeEvent, a as ExecOptions, P as PluginRestartWarning, k as WorkspaceAgentDispatcherContext, j as WorkspaceAgentDispatcher } from '../workspaceAgentDispatcher-Cl3EBveh.js';
 import { Sandbox as Sandbox$1 } from '@vercel/sandbox';
-import { x as TelemetrySink, E as ToolReadinessRequirement, j as AgentEvent, c as Agent, d as AgentActor, A as AgentTool, F as AgentHarnessFactory } from '../harness-BrX6CdMT.js';
-export { w as AgentConfig, G as AgentHarnessFactoryInput } from '../harness-BrX6CdMT.js';
+import { x as TelemetrySink, E as ToolReadinessRequirement, j as AgentEvent, c as Agent, d as AgentActor, A as AgentTool, F as AgentHarnessFactory } from '../harness-OsJBlx4u.js';
+export { w as AgentConfig, G as AgentHarnessFactoryInput } from '../harness-OsJBlx4u.js';
 import { FastifyInstance, FastifyRequest, FastifyPluginAsync } from 'fastify';
 export { createAgent } from '../core/index.js';
-import { S as SessionCtx, f as ErrorCode } from '../session-DTV7L5dc.js';
+import { S as SessionCtx, f as ErrorCode } from '../session-FUiMWsyX.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { PackageSource, ExtensionFactory, SettingsManager } from '@mariozechner/pi-coding-agent';
-import { b as ChatModelSelection } from '../chatSubmitPayload-DwOHyiqR.js';
+import { a as ChatModelSelection } from '../piChatCommand-BuWXytap.js';
 import 'zod';
 
 interface CreateDirectSandboxOptions {
@@ -1083,6 +1083,13 @@ type MeteringErrorLogger = (message: string, error: unknown) => void;
  * from an unexpected provider still meters as zeros instead of NaN. */
 declare function normalizeMeteringUsage(value: unknown): MeteringUsage | undefined;
 
+interface WorkspaceAgentDispatcherResolveOptions {
+    request?: FastifyRequest;
+}
+interface WorkspaceAgentDispatcherResolver {
+    resolve(ctx: WorkspaceAgentDispatcherContext, options?: WorkspaceAgentDispatcherResolveOptions): Promise<WorkspaceAgentDispatcher>;
+}
+
 interface CreateAgentAppOptions {
     workspaceRoot?: string;
     sessionId?: string;
@@ -1172,6 +1179,11 @@ interface CreateAgentAppOptions {
         message: string;
         pluginId?: string;
     }>>;
+    /**
+     * Trusted in-process host composition seam. The resolver trusts caller-supplied
+     * workspace/user context; callers must authorize that context before resolving.
+     */
+    onWorkspaceAgentDispatcher?: (resolver: WorkspaceAgentDispatcherResolver) => void;
 }
 declare function createAgentApp(opts?: CreateAgentAppOptions): Promise<FastifyInstance>;
 
@@ -1298,11 +1310,14 @@ interface RegisterAgentRoutesOptions {
         workspaceId: string;
         workspaceRoot: string;
         request?: FastifyRequest;
+        /** Verified actor id for trusted requestless dispatcher resolution. */
+        userId?: string;
     }) => string | undefined | Promise<string | undefined>;
     registerHealthRoute?: boolean;
     sandboxHandleStore?: SandboxHandleStore;
     getWorkspaceId?: (request: FastifyRequest) => string | Promise<string>;
     getWorkspaceRoot?: (workspaceId: string, request: FastifyRequest) => string | Promise<string>;
+    getTrustedWorkspaceRoot?: (ctx: WorkspaceAgentDispatcherContext) => string | Promise<string>;
     /** Generic runtime env contributors. Agent stays workspace-neutral; hosts decide env names/values. */
     runtimeEnvContributions?: RuntimeEnvContribution[];
     /**
@@ -1338,6 +1353,11 @@ interface RegisterAgentRoutesOptions {
         message: string;
         pluginId?: string;
     }>>;
+    /**
+     * Trusted in-process host composition seam. The resolver trusts caller-supplied
+     * workspace/user context; callers must authorize that context before resolving.
+     */
+    onWorkspaceAgentDispatcher?: (resolver: WorkspaceAgentDispatcherResolver) => void;
 }
 /**
  * Fastify plugin that mounts agent routes onto a host app (typically core-built).
@@ -1359,4 +1379,4 @@ interface Logger {
 }
 declare function createLogger(prefix: string): Logger;
 
-export { AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type BwrapResourceLimits, type CreateAgentAppOptions, type CreateBwrapSandboxOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifactRef, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, REMOTE_WORKER_PROVIDER, REMOTE_WORKER_RUNTIME_CWD, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, type RemoteWorkerErrorPayload, type RemoteWorkerExecRequest, type RemoteWorkerExecResponse, type RemoteWorkerFsEventEnvelope, type RemoteWorkerModeAdapterOptions, type RemoteWorkerWorkspaceOp, type RemoteWorkerWorkspaceResult, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, WORKER_INTERNAL_TOKEN_HEADER, WORKER_REQUEST_ID_HEADER, WORKER_WORKSPACE_ID_HEADER, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, constantTimeTokenEqual, createAgentApp, createBwrapSandbox, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveMode, resolveSandboxHandle };
+export { AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type BwrapResourceLimits, type CreateAgentAppOptions, type CreateBwrapSandboxOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifactRef, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, REMOTE_WORKER_PROVIDER, REMOTE_WORKER_RUNTIME_CWD, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, type RemoteWorkerErrorPayload, type RemoteWorkerExecRequest, type RemoteWorkerExecResponse, type RemoteWorkerFsEventEnvelope, type RemoteWorkerModeAdapterOptions, type RemoteWorkerWorkspaceOp, type RemoteWorkerWorkspaceResult, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, WORKER_INTERNAL_TOKEN_HEADER, WORKER_REQUEST_ID_HEADER, WORKER_WORKSPACE_ID_HEADER, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, constantTimeTokenEqual, createAgentApp, createBwrapSandbox, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveMode, resolveSandboxHandle };

package/dist/server/index.js

@@ -7,16 +7,18 @@ import {
   createAgent,
   createAgentRuntimeBridge,
   normalizeMeteringUsage
-} from "../chunk-FRFCVP3X.js";
+} from "../chunk-3WWLQAJB.js";
 import "../chunk-ZUEITFIJ.js";
 import {
+  CommandReceiptSchema,
   FollowUpPayloadSchema,
   InterruptPayloadSchema,
   PiChatSnapshotSchema,
   PromptPayloadSchema,
   QueueClearPayloadSchema,
-  StopPayloadSchema
-} from "../chunk-PMREGRGD.js";
+  StopPayloadSchema,
+  StopReceiptSchema
+} from "../chunk-ORURYKNY.js";
 import {
   PI_PACKAGE_RESOURCE_FILTERS,
   PiSessionStore,
@@ -31,7 +33,7 @@ import {
   registerConfiguredModelProviders,
   setEnvDefault,
   withPiHarnessDefaults
-} from "../chunk-OABGJVSA.js";
+} from "../chunk-TS3QGFKK.js";
 import {
   safeCapture
 } from "../chunk-AQBXNPMD.js";
@@ -40,7 +42,7 @@ import {
 } from "../chunk-AJZHR626.js";
 import {
   ErrorCode
-} from "../chunk-M4AY4VBI.js";
+} from "../chunk-6AEK34XU.js";
 
 // src/server/sandbox/direct/createDirectSandbox.ts
 import { spawn } from "child_process";
@@ -9496,15 +9498,103 @@ async function registerAgentRouteBindingProfile(app, profile) {
   await app.register(readyStatusRoutes, profile.readyStatus);
 }
 
+// src/server/workspaceAgentDispatcher.ts
+function createBoundWorkspaceAgentDispatcher(agent, ctx) {
+  const boundCtx = normalizeWorkspaceAgentDispatcherContext(ctx);
+  return {
+    send(input) {
+      return agent.send({ ...input, ctx: boundCtx });
+    },
+    async interrupt(sessionId) {
+      return parseControlReceipt(await agent.interrupt(sessionId, boundCtx), "interrupt");
+    },
+    async stop(sessionId) {
+      return parseStopReceipt(await agent.stop(sessionId, boundCtx));
+    }
+  };
+}
+function assertWorkspaceAgentDispatcherRequestContext(ctx, request) {
+  normalizeWorkspaceAgentDispatcherContext(ctx);
+  if (!request) return;
+  const requestWorkspaceId = request.workspaceContext?.workspaceId?.trim();
+  if (!requestWorkspaceId) return;
+  if (requestWorkspaceId !== ctx.workspaceId.trim()) {
+    throw createWorkspaceAgentDispatcherError(
+      ErrorCode.enum.UNAUTHORIZED,
+      "workspace agent dispatcher context does not match request workspace",
+      401
+    );
+  }
+}
+function normalizeWorkspaceAgentDispatcherContext(ctx) {
+  const workspaceId = ctx.workspaceId?.trim();
+  const userId = ctx.userId?.trim();
+  if (!workspaceId) {
+    throw createWorkspaceAgentDispatcherError(
+      ErrorCode.enum.WORKSPACE_UNINITIALIZED,
+      "workspace id is required",
+      400
+    );
+  }
+  if (!userId) {
+    throw createWorkspaceAgentDispatcherError(
+      ErrorCode.enum.UNAUTHORIZED,
+      "user id is required",
+      401
+    );
+  }
+  return { workspaceId, userId };
+}
+function parseControlReceipt(receipt, action) {
+  const parsed = CommandReceiptSchema.safeParse(receipt);
+  if (parsed.success) return parsed.data;
+  throw createWorkspaceAgentDispatcherError(
+    ErrorCode.enum.AGENT_CONTROL_RECEIPT_INVALID,
+    `agent ${action} returned a malformed receipt`,
+    500
+  );
+}
+function parseStopReceipt(receipt) {
+  const parsed = StopReceiptSchema.safeParse(receipt);
+  if (parsed.success) return parsed.data;
+  throw createWorkspaceAgentDispatcherError(
+    ErrorCode.enum.AGENT_CONTROL_RECEIPT_INVALID,
+    "agent stop returned a malformed receipt",
+    500
+  );
+}
+function createWorkspaceAgentDispatcherError(code, message, statusCode) {
+  const error = new Error(message);
+  error.code = code;
+  error.statusCode = statusCode;
+  return error;
+}
+
 // src/server/createAgentApp.ts
 var DEFAULT_VERSION = "0.1.0-dev";
 var DEFAULT_SESSION_ID = "default";
 var PURE_RUNTIME_MODE = "none";
+function createStaticWorkspaceAgentDispatcherResolver(agent, workspaceId) {
+  return {
+    async resolve(ctx, options) {
+      const boundCtx = normalizeWorkspaceAgentDispatcherContext(ctx);
+      assertWorkspaceAgentDispatcherRequestContext(boundCtx, options?.request);
+      if (boundCtx.workspaceId !== workspaceId) {
+        throw createWorkspaceAgentDispatcherError(
+          ErrorCode.enum.UNAUTHORIZED,
+          "workspace agent dispatcher context does not match bound workspace",
+          401
+        );
+      }
+      return createBoundWorkspaceAgentDispatcher(agent, boundCtx);
+    }
+  };
+}
 async function createAgentApp(opts = {}) {
   const sessionId = opts.sessionId ?? DEFAULT_SESSION_ID;
   const app = Fastify({ logger: opts.logger ?? true, bodyLimit: 16 * 1024 * 1024 });
   const resolvedMode = opts.runtimeModeAdapter?.id ?? opts.mode ?? autoDetectMode();
-  const profile = !opts.runtimeModeAdapter && resolvedMode === PURE_RUNTIME_MODE ? await createPureAgentAppProfile(opts, resolvedMode) : await createWorkspaceAgentAppProfile(opts, sessionId, resolvedMode, app);
+  const profile = !opts.runtimeModeAdapter && resolvedMode === PURE_RUNTIME_MODE ? await createPureAgentAppProfile(opts, sessionId, resolvedMode) : await createWorkspaceAgentAppProfile(opts, sessionId, resolvedMode, app);
   app.addHook(
     "onRequest",
     createAuthMiddleware({
@@ -9515,7 +9605,7 @@ async function createAgentApp(opts = {}) {
   await registerAgentRouteBindingProfile(app, profile);
   return app;
 }
-async function createPureAgentAppProfile(opts, resolvedMode) {
+async function createPureAgentAppProfile(opts, sessionId, resolvedMode) {
   const runtimePi = withPiHarnessDefaults(opts.pi);
   const baseHarnessFactory = opts.harnessFactory ?? ((input) => createPiCodingAgentHarness({
     ...input,
@@ -9539,6 +9629,7 @@ async function createPureAgentAppProfile(opts, resolvedMode) {
     sessionStorageRoot: opts.sessionRoot
   });
   const agentRuntime = await coreAgent.getRuntime();
+  opts.onWorkspaceAgentDispatcher?.(createStaticWorkspaceAgentDispatcherResolver(coreAgent.agent, sessionId));
   const readyTracker = new ReadyStatusTracker({ sandboxReady: true, harnessReady: true });
   return {
     runtimeMode: resolvedMode,
@@ -9657,6 +9748,7 @@ async function createWorkspaceAgentAppProfile(opts, sessionId, resolvedMode, app
     }
   });
   const agentRuntime = await coreAgent.getRuntime();
+  opts.onWorkspaceAgentDispatcher?.(createStaticWorkspaceAgentDispatcherResolver(coreAgent.agent, sessionId));
   const harness = agentRuntime.harness;
   harnessRef = harness;
   const readyTracker = createRuntimeReadyStatusTracker(modeAdapter, {
@@ -10043,7 +10135,7 @@ var registerAgentRoutes = async (app, opts) => {
     await modeAdapter.dispose?.();
   });
   const modelsWorkspaceScoped = Boolean(opts.filterModels);
-  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function";
+  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
   const sessionChangesTracker = new InMemorySessionChangesTracker();
   const externalPluginsEnabled = opts.externalPlugins !== false;
   const runtimeBindings = /* @__PURE__ */ new Map();
@@ -10058,12 +10150,23 @@ var registerAgentRoutes = async (app, opts) => {
   async function resolveScopePi(workspaceId, root, request) {
     return withPiHarnessDefaults(opts.getPi ? await opts.getPi({ workspaceId, workspaceRoot: root, request }) : opts.pi);
   }
-  async function resolveRuntimeScope(workspaceId, request) {
-    const root = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : workspaceRoot;
+  async function resolveRuntimeScope(workspaceId, request, trustedCtx) {
+    let root = workspaceRoot;
+    if (request && opts.getWorkspaceRoot) {
+      root = await opts.getWorkspaceRoot(workspaceId, request);
+    } else if (trustedCtx && opts.getTrustedWorkspaceRoot) {
+      root = await opts.getTrustedWorkspaceRoot(trustedCtx);
+    } else if (!request && opts.getWorkspaceRoot) {
+      throw createWorkspaceAgentDispatcherError(
+        ErrorCode.enum.WORKSPACE_UNINITIALIZED,
+        "workspace root resolution requires trusted workspace context",
+        400
+      );
+    }
     const scopedTemplatePath = opts.getTemplatePath ? await opts.getTemplatePath({ workspaceId, workspaceRoot: root, request }) : templatePath;
     const pi = await resolveScopePi(workspaceId, root, request);
-    const sessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot: root, request }) : opts.sessionNamespace);
-    const extraToolsAuthSubject = opts.getExtraTools ? getRequestAuthSubject2(request) : void 0;
+    const sessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot: root, request, userId: trustedCtx?.userId }) : opts.sessionNamespace);
+    const extraToolsAuthSubject = opts.getExtraTools ? trustedCtx?.userId ?? getRequestAuthSubject2(request) : void 0;
     return {
       root,
       templatePath: scopedTemplatePath,
@@ -10123,7 +10226,7 @@ var registerAgentRoutes = async (app, opts) => {
       request
     });
   }
-  async function createRuntimeBinding(workspaceId, scope, request) {
+  async function createRuntimeBinding(workspaceId, scope, request, trustedCtx) {
     const root = scope.root;
     const modeCtx = {
       workspaceRoot: root,
@@ -10271,7 +10374,7 @@ var registerAgentRoutes = async (app, opts) => {
       workspaceRoot: root,
       runtimeMode: resolvedMode,
       workspaceFsCapability: runtimeBundle.workspace.fsCapability,
-      authSubject: getRequestAuthSubject2(request)
+      authSubject: trustedCtx?.userId ?? getRequestAuthSubject2(request)
     }) : [];
     const tools = mergeTools({
       standardTools,
@@ -10347,12 +10450,12 @@ var registerAgentRoutes = async (app, opts) => {
     startRuntimeProvisioning(request);
     return binding;
   }
-  function createRuntimeBindingEntry(workspaceId, scope, request) {
+  function createRuntimeBindingEntry(workspaceId, scope, request, trustedCtx) {
     const entry = {
       state: "pending",
       promise: Promise.resolve(null)
     };
-    entry.promise = createRuntimeBinding(workspaceId, scope, request).then(
+    entry.promise = createRuntimeBinding(workspaceId, scope, request, trustedCtx).then(
       (binding) => {
         entry.state = "ready";
         return binding;
@@ -10368,7 +10471,7 @@ var registerAgentRoutes = async (app, opts) => {
     return entry;
   }
   async function getOrCreateRuntimeBinding(workspaceId, request, options = {}) {
-    const scope = await resolveRuntimeScope(workspaceId, request);
+    const scope = await resolveRuntimeScope(workspaceId, request, options.trustedCtx);
     const existing = runtimeBindings.get(scope.key);
     if (existing) {
       if (options.failIfPending && existing.state === "pending") {
@@ -10386,7 +10489,7 @@ var registerAgentRoutes = async (app, opts) => {
         );
       }
     }
-    const created = createRuntimeBindingEntry(workspaceId, scope, request);
+    const created = createRuntimeBindingEntry(workspaceId, scope, request, options.trustedCtx);
     runtimeBindings.set(scope.key, created);
     evictRuntimeBindings();
     if (options.failIfPending) {
@@ -10442,6 +10545,24 @@ var registerAgentRoutes = async (app, opts) => {
   const staticBinding = requestScopedRuntime ? null : await getOrCreateRuntimeBinding(sessionId);
   const skillsScopeByRequest = /* @__PURE__ */ new WeakMap();
   const earlySessionStores = /* @__PURE__ */ new Map();
+  opts.onWorkspaceAgentDispatcher?.({
+    async resolve(ctx, options) {
+      const boundCtx = normalizeWorkspaceAgentDispatcherContext(ctx);
+      assertWorkspaceAgentDispatcherRequestContext(boundCtx, options?.request);
+      if (staticBinding) {
+        if (boundCtx.workspaceId !== sessionId) {
+          throw createWorkspaceAgentDispatcherError(
+            ErrorCode.enum.UNAUTHORIZED,
+            "workspace agent dispatcher context does not match bound workspace",
+            401
+          );
+        }
+        return createBoundWorkspaceAgentDispatcher(staticBinding.agent, boundCtx);
+      }
+      const binding = await getOrCreateRuntimeBinding(boundCtx.workspaceId, options?.request, { trustedCtx: boundCtx });
+      return createBoundWorkspaceAgentDispatcher(binding.agent, boundCtx);
+    }
+  });
   function getSkillsScopeForRequest(request) {
     let promise = skillsScopeByRequest.get(request);
     if (!promise) {
@@ -10658,7 +10779,7 @@ var registerAgentRoutes = async (app, opts) => {
 };
 async function registerPureAgentRoutes(app, opts, sessionId, resolvedMode) {
   const pureBindings = /* @__PURE__ */ new Map();
-  const requestScopedPure = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getExtraTools === "function" || typeof opts.getPi === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function";
+  const requestScopedPure = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getExtraTools === "function" || typeof opts.getPi === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
   function evictPureBindings() {
     if (pureBindings.size <= MAX_PURE_BINDINGS) return;
     const keys = Array.from(pureBindings.keys());
@@ -10671,12 +10792,23 @@ async function registerPureAgentRoutes(app, opts, sessionId, resolvedMode) {
       });
     }
   }
-  async function createPureBinding(request) {
-    const workspaceId = request ? getRequestWorkspaceId2(request) : sessionId;
-    const workspaceRoot = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : opts.workspaceRoot ?? "";
+  async function createPureBinding(request, trustedCtx) {
+    const workspaceId = trustedCtx?.workspaceId ?? (request ? getRequestWorkspaceId2(request) : sessionId);
+    let workspaceRoot = opts.workspaceRoot ?? "";
+    if (request && opts.getWorkspaceRoot) {
+      workspaceRoot = await opts.getWorkspaceRoot(workspaceId, request);
+    } else if (trustedCtx && opts.getTrustedWorkspaceRoot) {
+      workspaceRoot = await opts.getTrustedWorkspaceRoot(trustedCtx);
+    } else if (!request && opts.getWorkspaceRoot) {
+      throw createWorkspaceAgentDispatcherError(
+        ErrorCode.enum.WORKSPACE_UNINITIALIZED,
+        "workspace root resolution requires trusted workspace context",
+        400
+      );
+    }
     const pi = withPiHarnessDefaults(opts.getPi ? await opts.getPi({ workspaceId, workspaceRoot, request }) : opts.pi);
-    const configuredSessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot, request }) : opts.sessionNamespace);
-    const authSubject = opts.getExtraTools ? getRequestAuthSubject2(request) : void 0;
+    const configuredSessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot, request, userId: trustedCtx?.userId }) : opts.sessionNamespace);
+    const authSubject = opts.getExtraTools ? trustedCtx?.userId ?? getRequestAuthSubject2(request) : void 0;
     const pureScopeNamespace = opts.getWorkspaceId ? pureSessionNamespaceFromWorkspaceId(workspaceId) : requestScopedPure ? pureSessionNamespaceFromScope([resolvedMode, workspaceId, workspaceRoot, pi, authSubject ?? null]) : void 0;
     const sessionNamespace = configuredSessionNamespace && pureScopeNamespace ? `${configuredSessionNamespace}-${pureScopeNamespace}` : configuredSessionNamespace ?? pureScopeNamespace;
     const key = JSON.stringify([
@@ -10739,6 +10871,24 @@ async function registerPureAgentRoutes(app, opts, sessionId, resolvedMode) {
     return bindingPromise;
   }
   const staticBinding = requestScopedPure ? void 0 : await createPureBinding();
+  opts.onWorkspaceAgentDispatcher?.({
+    async resolve(ctx, options) {
+      const boundCtx = normalizeWorkspaceAgentDispatcherContext(ctx);
+      assertWorkspaceAgentDispatcherRequestContext(boundCtx, options?.request);
+      if (staticBinding) {
+        if (boundCtx.workspaceId !== sessionId) {
+          throw createWorkspaceAgentDispatcherError(
+            ErrorCode.enum.UNAUTHORIZED,
+            "workspace agent dispatcher context does not match bound workspace",
+            401
+          );
+        }
+        return createBoundWorkspaceAgentDispatcher(staticBinding.agent, boundCtx);
+      }
+      const binding = await createPureBinding(options?.request, boundCtx);
+      return createBoundWorkspaceAgentDispatcher(binding.agent, boundCtx);
+    }
+  });
   const profile = {
     runtimeMode: resolvedMode,
     capabilities: {