@hachej/boring-agent 0.1.78 → 0.1.80

package/dist/protocol-B_OQKfbI.d.ts

@@ -0,0 +1,104 @@
+import { W as WorkspaceRuntimeContext, S as Sandbox, d as Stat, e as Entry, b as ExecResult, c as WorkspaceChangeEvent } from './sandbox-DthfJaOB.js';
+
+interface BwrapResourceLimits {
+    cpuSeconds?: number;
+    fileSizeBlocks?: number;
+    maxProcesses?: number;
+    openFiles?: number;
+    virtualMemoryKb?: number;
+}
+interface CreateBwrapSandboxOptions {
+    hostWorkspaceRoot?: string;
+    runtimeContext?: WorkspaceRuntimeContext;
+    network?: 'shared' | 'isolated';
+    dropAllCapabilities?: boolean;
+    resourceLimits?: BwrapResourceLimits;
+}
+declare function createBwrapSandbox(opts?: CreateBwrapSandboxOptions): Sandbox;
+
+declare const REMOTE_WORKER_RUNTIME_CWD = "/workspace";
+declare const REMOTE_WORKER_PROVIDER = "remote-worker";
+declare const WORKER_INTERNAL_TOKEN_HEADER = "x-boring-internal-token";
+declare const WORKER_WORKSPACE_ID_HEADER = "x-boring-workspace-id";
+declare const WORKER_REQUEST_ID_HEADER = "x-boring-request-id";
+type RemoteWorkerWorkspaceOp = {
+    op: 'readFile';
+    path: string;
+} | {
+    op: 'readBinaryFile';
+    path: string;
+} | {
+    op: 'writeFile';
+    path: string;
+    data: string;
+} | {
+    op: 'writeBinaryFile';
+    path: string;
+    dataBase64: string;
+} | {
+    op: 'readFileWithStat';
+    path: string;
+} | {
+    op: 'writeFileWithStat';
+    path: string;
+    data: string;
+} | {
+    op: 'writeBinaryFileWithStat';
+    path: string;
+    dataBase64: string;
+} | {
+    op: 'unlink';
+    path: string;
+} | {
+    op: 'readdir';
+    path: string;
+} | {
+    op: 'stat';
+    path: string;
+} | {
+    op: 'mkdir';
+    path: string;
+    recursive?: boolean;
+} | {
+    op: 'rename';
+    from: string;
+    to: string;
+};
+type RemoteWorkerWorkspaceResult = {
+    content: string;
+} | {
+    dataBase64: string;
+} | {
+    stat: Stat;
+} | {
+    content: string;
+    stat: Stat;
+} | {
+    entries: Entry[];
+} | {
+    ok: true;
+};
+interface RemoteWorkerExecRequest {
+    cmd: string;
+    cwd?: string;
+    env?: Record<string, string>;
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+}
+interface RemoteWorkerExecResponse extends Omit<ExecResult, 'stdout' | 'stderr'> {
+    stdoutBase64: string;
+    stderrBase64: string;
+}
+interface RemoteWorkerErrorPayload {
+    error: {
+        code: string;
+        message: string;
+        statusCode?: number;
+        details?: unknown;
+    };
+}
+interface RemoteWorkerFsEventEnvelope {
+    event: WorkspaceChangeEvent;
+}
+
+export { type BwrapResourceLimits as B, type CreateBwrapSandboxOptions as C, type RemoteWorkerWorkspaceOp as R, WORKER_INTERNAL_TOKEN_HEADER as W, type RemoteWorkerWorkspaceResult as a, type RemoteWorkerExecRequest as b, REMOTE_WORKER_PROVIDER as c, REMOTE_WORKER_RUNTIME_CWD as d, type RemoteWorkerErrorPayload as e, type RemoteWorkerExecResponse as f, type RemoteWorkerFsEventEnvelope as g, WORKER_REQUEST_ID_HEADER as h, WORKER_WORKSPACE_ID_HEADER as i, createBwrapSandbox as j };

package/dist/{workspaceAgentDispatcher-Cl3EBveh.d.ts → sandbox-DthfJaOB.d.ts}

@@ -1,6 +1,3 @@
-import { e as InterruptReceipt, h as StopReceipt } from './piChatCommand-BuWXytap.js';
-import { t as AgentSendInput, j as AgentEvent } from './harness-OsJBlx4u.js';
-
 interface WorkspaceRuntimeContext {
     /** Agent-visible working directory shared by file-tree and shell execution. */
     readonly runtimeCwd: string;
@@ -288,77 +285,4 @@ interface IsolatedCodeOutput {
     exitCode: number;
 }
 
-interface SandboxHandleRecord {
-    workspaceId: string;
-    sandboxId: string;
-    snapshotId?: string;
-    createdAt: string;
-    lastUsedAt: string;
-}
-interface SandboxHandleStore {
-    get(workspaceId: string): Promise<SandboxHandleRecord | null>;
-    put(record: SandboxHandleRecord): Promise<void>;
-    delete(workspaceId: string): Promise<void>;
-    list(): Promise<SandboxHandleRecord[]>;
-}
-
-interface FileSearch {
-    search(glob: string, limit?: number): Promise<string[]>;
-}
-
-/**
- * Browser CustomEvent name dispatched on `window` after the workspace's
- * agent-plugin hot reload subscriber commits a registry change (load,
- * unload, or error).
- *
- * Declared in `@hachej/boring-agent` (not `@hachej/boring-workspace`)
- * so the agent's ChatPanel — which listens for this event to refresh
- * its slash-command palette / banner state — can import it without
- * creating a workspace → agent → workspace cycle. Workspace's
- * `useAgentPluginHotReload` imports the same constant.
- */
-declare const WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT = "boring-ui:agent-plugins-reloaded";
-/**
- * One per plugin that loaded successfully but whose server-side surfaces
- * (Fastify routes / agent tools) still hold pre-reload code. Shared
- * between the agent's /reload HTTP route + the ChatPanel banner so the
- * agent layer has ONE declaration of this wire shape. Mirrors what the
- * workspace's `collectRestartWarnings()` emits (workspace owns the
- * canonical `PluginRestartWarning` type; we redeclare here only because
- * the agent layer must not depend on workspace).
- */
-interface PluginRestartWarning {
-    id: string;
-    surfaces: string[];
-    message: string;
-}
-/**
- * Browser CustomEvent name dispatched on `window` when a `showNotification`
- * UI command arrives from the server (e.g. from a plugin slash command that
- * calls `notify()`). `PiChatPanel` listens for this to show the
- * `CommandRunStatus` banner above the composer.
- */
-declare const WORKSPACE_COMMAND_NOTIFY_EVENT = "boring-ui:command-notify";
-/**
- * Payload carried by `WORKSPACE_COMMAND_NOTIFY_EVENT`. Maps directly to
- * what `uiCommandDispatcher` extracts from the `showNotification` command.
- */
-interface CommandNotifyPayload {
-    message: string;
-    tone: 'success' | 'error' | 'info' | 'warn';
-    /** Name of the command that triggered the notification (without leading slash). */
-    command?: string;
-}
-
-interface WorkspaceAgentDispatcherContext {
-    workspaceId: string;
-    userId: string;
-}
-type WorkspaceAgentDispatcherSendInput = Omit<AgentSendInput, 'ctx'>;
-interface WorkspaceAgentDispatcher {
-    send(input: WorkspaceAgentDispatcherSendInput): AsyncIterable<AgentEvent>;
-    interrupt(sessionId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string): Promise<StopReceipt>;
-}
-
-export { type CommandNotifyPayload as C, type Entry as E, type FileSearch as F, type IsolatedCodeInput as I, type PluginRestartWarning as P, type Sandbox as S, type Workspace as W, type ExecOptions as a, type ExecResult as b, type IsolatedCodeOutput as c, type SandboxCapability as d, type SandboxHandleRecord as e, type SandboxHandleStore as f, type Stat as g, WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT as h, WORKSPACE_COMMAND_NOTIFY_EVENT as i, type WorkspaceAgentDispatcher as j, type WorkspaceAgentDispatcherContext as k, type WorkspaceAgentDispatcherSendInput as l, type WorkspaceRuntimeContext as m, type WorkspaceChangeEvent as n };
+export type { ExecOptions as E, IsolatedCodeInput as I, Sandbox as S, WorkspaceRuntimeContext as W, Workspace as a, ExecResult as b, WorkspaceChangeEvent as c, Stat as d, Entry as e, IsolatedCodeOutput as f, SandboxCapability as g };

package/dist/server/index.d.ts

@@ -1,14 +1,15 @@
-import { m as WorkspaceRuntimeContext, S as Sandbox, f as SandboxHandleStore, e as SandboxHandleRecord, W as Workspace, F as FileSearch, g as Stat, E as Entry, b as ExecResult, n as WorkspaceChangeEvent, a as ExecOptions, P as PluginRestartWarning, k as WorkspaceAgentDispatcherContext, j as WorkspaceAgentDispatcher } from '../workspaceAgentDispatcher-Cl3EBveh.js';
+import { W as WorkspaceRuntimeContext, S as Sandbox, a as Workspace, E as ExecOptions, b as ExecResult, c as WorkspaceChangeEvent } from '../sandbox-DthfJaOB.js';
+import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult, b as RemoteWorkerExecRequest } from '../protocol-B_OQKfbI.js';
+export { B as BwrapResourceLimits, C as CreateBwrapSandboxOptions, c as REMOTE_WORKER_PROVIDER, d as REMOTE_WORKER_RUNTIME_CWD, e as RemoteWorkerErrorPayload, f as RemoteWorkerExecResponse, g as RemoteWorkerFsEventEnvelope, W as WORKER_INTERNAL_TOKEN_HEADER, h as WORKER_REQUEST_ID_HEADER, i as WORKER_WORKSPACE_ID_HEADER, j as createBwrapSandbox } from '../protocol-B_OQKfbI.js';
+import { S as SandboxHandleStore, a as SandboxHandleRecord, F as FileSearch, C as CompiledAgentBundle, b as Sha256Digest, A as AgentDeployment, P as PluginRestartWarning, W as WorkspaceAgentDispatcherContext, c as WorkspaceAgentDispatcher } from '../workspaceAgentDispatcher-Wi6NIh2G.js';
 import { Sandbox as Sandbox$1 } from '@vercel/sandbox';
-import { x as TelemetrySink, E as ToolReadinessRequirement, j as AgentEvent, c as Agent, d as AgentActor, A as AgentTool, F as AgentHarnessFactory } from '../harness-OsJBlx4u.js';
-export { w as AgentConfig, G as AgentHarnessFactoryInput } from '../harness-OsJBlx4u.js';
+import { T as TelemetrySink, s as ToolReadinessRequirement, t as AgentConfig, b as Agent, d as AgentActor, j as AgentEvent, u as AgentTool, v as AgentHarnessFactory } from '../harness-BZW5Jiy3.js';
+export { w as AgentHarnessFactoryInput } from '../harness-BZW5Jiy3.js';
 import { FastifyInstance, FastifyRequest, FastifyPluginAsync } from 'fastify';
-export { createAgent } from '../core/index.js';
-import { S as SessionCtx, f as ErrorCode } from '../session-FUiMWsyX.js';
+import { E as ErrorCode, o as SessionCtx, C as ChatModelSelection } from '../piChatEvent-CpoTZau1.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { PackageSource, ExtensionFactory, SettingsManager } from '@mariozechner/pi-coding-agent';
-import { a as ChatModelSelection } from '../piChatCommand-BuWXytap.js';
 import 'zod';
 
 interface CreateDirectSandboxOptions {
@@ -16,22 +17,6 @@ interface CreateDirectSandboxOptions {
 }
 declare function createDirectSandbox(opts?: CreateDirectSandboxOptions): Sandbox;
 
-interface BwrapResourceLimits {
-    cpuSeconds?: number;
-    fileSizeBlocks?: number;
-    maxProcesses?: number;
-    openFiles?: number;
-    virtualMemoryKb?: number;
-}
-interface CreateBwrapSandboxOptions {
-    hostWorkspaceRoot?: string;
-    runtimeContext?: WorkspaceRuntimeContext;
-    network?: 'shared' | 'isolated';
-    dropAllCapabilities?: boolean;
-    resourceLimits?: BwrapResourceLimits;
-}
-declare function createBwrapSandbox(opts?: CreateBwrapSandboxOptions): Sandbox;
-
 interface FileHandleStoreOptions {
     storePath?: string;
 }
@@ -557,91 +542,6 @@ interface RuntimeBundle {
     filesystemBindings?: RuntimeFilesystemBinding[];
 }
 
-declare const REMOTE_WORKER_RUNTIME_CWD = "/workspace";
-declare const REMOTE_WORKER_PROVIDER = "remote-worker";
-declare const WORKER_INTERNAL_TOKEN_HEADER = "x-boring-internal-token";
-declare const WORKER_WORKSPACE_ID_HEADER = "x-boring-workspace-id";
-declare const WORKER_REQUEST_ID_HEADER = "x-boring-request-id";
-type RemoteWorkerWorkspaceOp = {
-    op: 'readFile';
-    path: string;
-} | {
-    op: 'readBinaryFile';
-    path: string;
-} | {
-    op: 'writeFile';
-    path: string;
-    data: string;
-} | {
-    op: 'writeBinaryFile';
-    path: string;
-    dataBase64: string;
-} | {
-    op: 'readFileWithStat';
-    path: string;
-} | {
-    op: 'writeFileWithStat';
-    path: string;
-    data: string;
-} | {
-    op: 'writeBinaryFileWithStat';
-    path: string;
-    dataBase64: string;
-} | {
-    op: 'unlink';
-    path: string;
-} | {
-    op: 'readdir';
-    path: string;
-} | {
-    op: 'stat';
-    path: string;
-} | {
-    op: 'mkdir';
-    path: string;
-    recursive?: boolean;
-} | {
-    op: 'rename';
-    from: string;
-    to: string;
-};
-type RemoteWorkerWorkspaceResult = {
-    content: string;
-} | {
-    dataBase64: string;
-} | {
-    stat: Stat;
-} | {
-    content: string;
-    stat: Stat;
-} | {
-    entries: Entry[];
-} | {
-    ok: true;
-};
-interface RemoteWorkerExecRequest {
-    cmd: string;
-    cwd?: string;
-    env?: Record<string, string>;
-    timeoutMs?: number;
-    maxOutputBytes?: number;
-}
-interface RemoteWorkerExecResponse extends Omit<ExecResult, 'stdout' | 'stderr'> {
-    stdoutBase64: string;
-    stderrBase64: string;
-}
-interface RemoteWorkerErrorPayload {
-    error: {
-        code: string;
-        message: string;
-        statusCode?: number;
-        details?: unknown;
-    };
-}
-interface RemoteWorkerFsEventEnvelope {
-    event: WorkspaceChangeEvent;
-}
-
 interface RemoteWorkerClientOptions {
     baseUrl: string;
     token: string;
@@ -790,16 +690,90 @@ interface ResolveModeOptions {
 }
 declare function resolveMode(mode?: RuntimeModeId, opts?: ResolveModeOptions): RuntimeModeAdapter;
 
+declare function createAgent(config: AgentConfig): Agent;
+
+type AgentDirectoryCompilerErrorCode = 'AGENT_DIRECTORY_NOT_FOUND' | 'AGENT_DIRECTORY_NOT_DIRECTORY' | 'AGENT_MANIFEST_NOT_FOUND' | 'AGENT_MANIFEST_NOT_FILE' | 'AGENT_MANIFEST_INVALID_UTF8' | 'AGENT_MANIFEST_INVALID_JSON' | 'AGENT_ASSET_NOT_FOUND' | 'AGENT_ASSET_NOT_FILE' | 'AGENT_ASSET_INVALID_UTF8' | 'AGENT_PATH_SYMLINK_ESCAPE' | 'AGENT_PATH_CHANGED_DURING_READ' | 'AGENT_DIRECTORY_IO_FAILED';
+type AgentDirectoryCompilerPublicErrorCode = Extract<ErrorCode, 'CONFIG_INVALID' | 'PATH_NOT_FOUND' | 'PATH_SYMLINK_ESCAPE'>;
+declare class AgentDirectoryCompilerError extends Error {
+    readonly code: AgentDirectoryCompilerPublicErrorCode;
+    readonly compilerCode: AgentDirectoryCompilerErrorCode;
+    readonly field: string;
+    constructor(input: {
+        code: AgentDirectoryCompilerPublicErrorCode;
+        compilerCode: AgentDirectoryCompilerErrorCode;
+        field: string;
+        message: string;
+        cause?: unknown;
+    });
+}
+declare function compileAgentDirectory(directory: string): Promise<CompiledAgentBundle>;
+
+interface ResolvedAgent {
+    readonly workspace: Readonly<{
+        workspaceId: string;
+        defaultDeploymentId: string;
+        compositionDigest: Sha256Digest;
+    }>;
+    readonly deployment: Readonly<{
+        deploymentId: string;
+        version: string;
+        agentId: string;
+        digest: Sha256Digest;
+    }>;
+    readonly definition: Readonly<{
+        definitionId: string;
+        version: string;
+        digest: Sha256Digest;
+        instructionsRef: string;
+    }>;
+    readonly instructions: Readonly<{
+        ref: string;
+        content: string;
+    }>;
+    readonly resolvedDigest: Sha256Digest;
+}
+declare function resolveAgentDeployment(bundle: CompiledAgentBundle, deployment: AgentDeployment, authorizedBinding: unknown): Promise<ResolvedAgent>;
+
 declare const MANAGED_AGENT_MCP_ORIGIN_SURFACE = "mcp-managed-agent";
-declare const MANAGED_AGENT_MCP_DELIVERY_RULE = "M1-pr1 DELIVERY v0: delegate_task returns final assistant text and artifact file references only; share-link delivery is gated on PR #424.";
+declare const MANAGED_AGENT_MCP_DELIVERY_RULE = "M1 DELIVERY v0: delegate_task returns bounded final assistant text and at most one complete authorized inline Markdown artifact; no artifact paths, truncation, or share-link delivery.";
 type ManagedAgentDelegationStatus = 'running' | 'completed' | 'error';
 type ManagedAgentDelegateStatus = ManagedAgentDelegationStatus;
-interface ManagedAgentArtifactRef {
+interface ManagedAgentArtifactCandidate {
     path: string;
     mediaType?: string;
     title?: string;
-    content?: string;
-    truncated?: boolean;
+    content?: unknown;
+    truncated?: unknown;
+}
+/** @deprecated Use ManagedAgentArtifactCandidate for internal artifact path candidates. */
+type ManagedAgentArtifactRef = ManagedAgentArtifactCandidate;
+interface ManagedAgentArtifact {
+    content: string;
+    sha256: `sha256:${string}`;
+    byteSize: number;
+    mediaType?: string;
+    title?: string;
+}
+interface ManagedAgentWorkspaceResolutionInput {
+    brief: string;
+    ctx: SessionCtx;
+    request: ManagedAgentDelegateRequestContext;
+}
+interface ManagedAgentDelegateRunInput {
+    brief: string;
+    ctx: SessionCtx;
+    request: ManagedAgentDelegateRequestContext;
+    actor: AgentActor;
+    signal?: AbortSignal;
+    onSessionStarted?: (sessionId: string) => void;
+}
+interface ManagedAgentDelegateRunner {
+    run(input: ManagedAgentDelegateRunInput): AsyncIterable<AgentEvent>;
+    stop?(sessionId: string, ctx: SessionCtx): Promise<void> | void;
+}
+interface ManagedAgentBoundRunnerWorkspace {
+    runner: ManagedAgentDelegateRunner;
+    workspace: Workspace;
 }
 interface ManagedAgentDelegateProgress {
     at: string;
@@ -811,7 +785,7 @@ interface ManagedAgentDelegateResult {
     delegationId: string;
     status: 'completed';
     finalAssistantText: string;
-    artifacts: ManagedAgentArtifactRef[];
+    artifact?: ManagedAgentArtifact;
     deliveryRule: typeof MANAGED_AGENT_MCP_DELIVERY_RULE;
 }
 interface ManagedAgentDelegateStatusResult {
@@ -842,25 +816,31 @@ interface ManagedAgentCollectArtifactsInput {
     delegationId: string;
     sessionId: string;
     ctx: SessionCtx;
+    request: ManagedAgentDelegateRequestContext;
     finalAssistantText: string;
     events: readonly AgentEvent[];
 }
 interface ManagedAgentMcpDelegateOptions {
-    agent: Agent;
+    agent?: Agent;
     resolveSessionCtx(input: {
         brief: string;
         request: ManagedAgentDelegateRequestContext;
     }): SessionCtx | Promise<SessionCtx>;
+    resolveWorkspace?(input: ManagedAgentWorkspaceResolutionInput): Workspace | Promise<Workspace>;
+    resolveRunnerWorkspace?(input: ManagedAgentWorkspaceResolutionInput & {
+        actor: AgentActor;
+    }): ManagedAgentBoundRunnerWorkspace | Promise<ManagedAgentBoundRunnerWorkspace>;
     resolveActor?(input: {
         brief: string;
         ctx: SessionCtx;
         request: ManagedAgentDelegateRequestContext;
     }): AgentActor | Promise<AgentActor>;
-    collectArtifacts?(input: ManagedAgentCollectArtifactsInput): ManagedAgentArtifactRef[] | Promise<ManagedAgentArtifactRef[]>;
+    collectArtifacts?(input: ManagedAgentCollectArtifactsInput): ManagedAgentArtifactCandidate[] | Promise<ManagedAgentArtifactCandidate[]>;
     createDelegationId?: () => string;
     now?: () => Date;
+    maxBriefBytes?: number;
+    /** Optional additional character cap retained for host compatibility. */
     maxBriefChars?: number;
-    maxInlineArtifactContentChars?: number;
     terminalRetentionMs?: number;
     maxDelegations?: number;
     redactionCanaries?: readonly string[];
@@ -874,8 +854,8 @@ declare class ManagedAgentMcpDelegateController {
     private readonly delegations;
     private readonly createDelegationId;
     private readonly now;
-    private readonly maxBriefChars;
-    private readonly maxInlineArtifactContentChars;
+    private readonly maxBriefBytes;
+    private readonly maxBriefChars?;
     private readonly terminalRetentionMs;
     private readonly maxDelegations;
     private readonly redactionCanaries;
@@ -888,11 +868,15 @@ declare class ManagedAgentMcpDelegateController {
     private pruneDelegations;
     private parseBrief;
     private resolveSessionCtx;
+    private resolveWorkspace;
+    private resolveRunnerWorkspace;
+    private createAgentDelegateRunner;
     private assertNotAborted;
     private stopDelegatedSession;
     private resolveActor;
     private observeEvent;
     private pushProgress;
+    private validateFinalAssistantText;
     private collectArtifacts;
     private toSafeError;
     private assertPublicPayloadSafe;
@@ -901,14 +885,19 @@ declare class ManagedAgentMcpDelegateController {
 }
 declare function createManagedAgentMcpDelegateController(options: ManagedAgentMcpDelegateOptions): ManagedAgentMcpDelegateController;
 
-interface ManagedAgentMcpServerOptions extends ManagedAgentMcpDelegateOptions {
+interface ManagedAgentMcpPresentationOptions {
     name?: string;
     version?: string;
+    maxBriefChars?: number;
 }
-interface ManagedAgentMcpHttpHandlerOptions extends ManagedAgentMcpServerOptions {
-    controller?: ManagedAgentMcpDelegateController;
+interface ManagedAgentMcpServerOptions extends ManagedAgentMcpDelegateOptions, ManagedAgentMcpPresentationOptions {
 }
-declare function createManagedAgentMcpServer(options: ManagedAgentMcpServerOptions, controller?: ManagedAgentMcpDelegateController): McpServer;
+type ManagedAgentMcpHttpHandlerOptions = (ManagedAgentMcpPresentationOptions & {
+    controller: ManagedAgentMcpDelegateController;
+}) | (ManagedAgentMcpServerOptions & {
+    controller?: undefined;
+});
+declare function createManagedAgentMcpServer(options: ManagedAgentMcpServerOptions): McpServer;
 declare function createManagedAgentMcpHttpHandler(options: ManagedAgentMcpHttpHandlerOptions): (req: IncomingMessage, res: ServerResponse, parsedBody?: unknown) => Promise<void>;
 
 interface ReloadHookDiagnostic {
@@ -1086,8 +1075,13 @@ declare function normalizeMeteringUsage(value: unknown): MeteringUsage | undefin
 interface WorkspaceAgentDispatcherResolveOptions {
     request?: FastifyRequest;
 }
+interface WorkspaceAgentDispatcherBinding {
+    dispatcher: WorkspaceAgentDispatcher;
+    workspace: Workspace;
+}
 interface WorkspaceAgentDispatcherResolver {
     resolve(ctx: WorkspaceAgentDispatcherContext, options?: WorkspaceAgentDispatcherResolveOptions): Promise<WorkspaceAgentDispatcher>;
+    resolveWithWorkspace?(ctx: WorkspaceAgentDispatcherContext, options?: WorkspaceAgentDispatcherResolveOptions): Promise<WorkspaceAgentDispatcherBinding>;
 }
 
 interface CreateAgentAppOptions {
@@ -1332,6 +1326,8 @@ interface RegisterAgentRoutesOptions {
         runtimeLayout: BoringAgentRuntimePaths;
         provisioningAdapter?: WorkspaceProvisioningAdapter;
         request?: FastifyRequest;
+        /** Aborted when this binding retires; retirement still drains the task before provider disposal. */
+        signal: AbortSignal;
     }) => WorkspaceProvisioningResult | undefined | Promise<WorkspaceProvisioningResult | undefined>;
     provisionWorkspace?: boolean;
     /** Optional hook called before /api/v1/agent/reload reloads the harness. */
@@ -1379,4 +1375,4 @@ interface Logger {
 }
 declare function createLogger(prefix: string): Logger;
 
-export { AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type BwrapResourceLimits, type CreateAgentAppOptions, type CreateBwrapSandboxOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifactRef, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, REMOTE_WORKER_PROVIDER, REMOTE_WORKER_RUNTIME_CWD, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, type RemoteWorkerErrorPayload, type RemoteWorkerExecRequest, type RemoteWorkerExecResponse, type RemoteWorkerFsEventEnvelope, type RemoteWorkerModeAdapterOptions, type RemoteWorkerWorkspaceOp, type RemoteWorkerWorkspaceResult, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, WORKER_INTERNAL_TOKEN_HEADER, WORKER_REQUEST_ID_HEADER, WORKER_WORKSPACE_ID_HEADER, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, constantTimeTokenEqual, createAgentApp, createBwrapSandbox, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveMode, resolveSandboxHandle };
+export { AgentConfig, AgentDirectoryCompilerError, type AgentDirectoryCompilerErrorCode, type AgentDirectoryCompilerPublicErrorCode, AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type CreateAgentAppOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifact, type ManagedAgentArtifactCandidate, type ManagedAgentArtifactRef, type ManagedAgentBoundRunnerWorkspace, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateRunInput, type ManagedAgentDelegateRunner, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type ManagedAgentWorkspaceResolutionInput, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, RemoteWorkerExecRequest, type RemoteWorkerModeAdapterOptions, RemoteWorkerWorkspaceOp, RemoteWorkerWorkspaceResult, type ResolvedAgent, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, type WorkspaceAgentDispatcherBinding, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, compileAgentDirectory, constantTimeTokenEqual, createAgent, createAgentApp, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, resolveAgentDeployment, resolveMode, resolveSandboxHandle };