@hachej/boring-agent 0.1.84 → 0.1.86

package/dist/{chunk-DC3S7SZG.js → chunk-6O5ADR57.js}

@@ -1,6 +1,6 @@
 import {
   ErrorCode
-} from "./chunk-PG2WOJ22.js";
+} from "./chunk-HDIRWHJB.js";
 
 // src/shared/tool-ui.ts
 function isRecord(value) {

package/dist/{chunk-PG2WOJ22.js → chunk-HDIRWHJB.js}

@@ -73,6 +73,9 @@ var ErrorCode = z.enum([
   "PROVISIONING_UV_BOOTSTRAP_FAILED",
   "PROVISIONING_UV_INSTALL_FAILED",
   "PROVISIONING_ARTIFACT_FAILED",
+  // Lane W same-workspace share deep-link (AR1-003)
+  "AR1_SHARE_NOT_FOUND",
+  "AR1_SHARE_TOMBSTONED",
   // Internal
   "ERR_NOT_IMPLEMENTED_UNTIL_T1",
   "INTERNAL_ERROR"
@@ -90,7 +93,8 @@ var AgentConsumptionErrorCode = z.enum([
   "AGENT_CONSUMPTION_INVALID_TRANSITION",
   "AGENT_CONSUMPTION_CYCLE_DETECTED",
   "AGENT_CONSUMPTION_DEPTH_EXCEEDED",
-  "AGENT_CONSUMPTION_SCHEMA_MISMATCH"
+  "AGENT_CONSUMPTION_SCHEMA_MISMATCH",
+  "AGENT_CONSUMPTION_LEGACY_ARTIFACT_REJECTED"
 ]);
 var ApiErrorPayloadSchema = z.object({
   code: ErrorCode,

package/dist/{chunk-2XADUCX7.js → chunk-LYBTHR7J.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WSQ5QNIY.js";
 import {
   ErrorCode
-} from "./chunk-PG2WOJ22.js";
+} from "./chunk-HDIRWHJB.js";
 
 // src/core/piChatSessionService.ts
 var AgentEffectAdmissionError = class extends Error {

package/dist/{chunk-5IRFVKV7.js → chunk-RRVL5JRE.js}

@@ -3,19 +3,21 @@ import {
   AgentDeploymentValidationError,
   OpaqueRefSchema,
   Sha256DigestSchema,
+  ShareEntryErrorCode,
   canonicalStringify,
   createAgentAssetDigest,
   createAgentDefinitionDigest,
   createAgentDeploymentDigest,
+  resolveShareEntry,
   sha256Bytes,
   validateAgentDefinition,
   validateAgentDeployment,
   validateTool
-} from "./chunk-WODTQBXR.js";
+} from "./chunk-YONTHCD7.js";
 import {
   AgentEffectAdmissionError,
   createAgentRuntimeBridge
-} from "./chunk-2XADUCX7.js";
+} from "./chunk-LYBTHR7J.js";
 import {
   sessionStreamPath
 } from "./chunk-WSQ5QNIY.js";
@@ -30,7 +32,7 @@ import {
   StopReceiptSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "./chunk-DC3S7SZG.js";
+} from "./chunk-6O5ADR57.js";
 import {
   createLogger,
   createPiCodingAgentHarness,
@@ -41,7 +43,7 @@ import {
   registerConfiguredModelProviders,
   setEnvDefault,
   withPiHarnessDefaults
-} from "./chunk-5NAN3TAR.js";
+} from "./chunk-ZUDWQAAB.js";
 import {
   safeCapture
 } from "./chunk-AQBXNPMD.js";
@@ -49,7 +51,7 @@ import {
   AgentDefinitionErrorCode,
   AgentDeploymentErrorCode,
   ErrorCode
-} from "./chunk-PG2WOJ22.js";
+} from "./chunk-HDIRWHJB.js";
 
 // src/server/sandbox/direct/createDirectSandbox.ts
 import { spawn } from "child_process";
@@ -1809,6 +1811,14 @@ async function prepareVercelDeploymentSnapshot(opts) {
   });
 }
 
+// src/server/config/workspaceRoot.ts
+var WORKSPACE_ROOT_ENV = "BORING_AGENT_WORKSPACE_ROOT";
+function resolveWorkspaceRoot(defaultRoot = process.cwd()) {
+  const configured = process.env[WORKSPACE_ROOT_ENV]?.trim();
+  if (!configured) return defaultRoot;
+  return configured;
+}
+
 // src/server/runtime/createServerFileSearch.ts
 var DEFAULT_LIMIT = 500;
 var MAX_LIMIT = 5e3;
@@ -7310,6 +7320,19 @@ var PiChatMeteringCoordinator = class {
     if (run2) this.release(run2, "run-rejected");
     this.pruneSession(stateKey, state);
   }
+  /**
+   * Mark the currently-active run as voluntarily user-stopped (the /stop button),
+   * so its terminal accounting RELEASES the hold instead of charging the fallback.
+   * Must be called before the abort so the flag is set when the native aborted
+   * agent-end is observed. Runs with real usage recorded before the stop still
+   * settle that usage; only the unused remainder of the hold is released. No-op if
+   * there is no active run (e.g. the stop landed before agent-start — releasePending
+   * handles that case).
+   */
+  markActiveStopped(sessionId) {
+    const active = this.sessions.get(sessionId)?.active;
+    if (active && !active.terminal) active.userStopped = true;
+  }
   /**
    * Release prompt runs reserved but not yet bound to an agent-start —
    * e.g. a stop/interrupt landing in the window between acceptance and the
@@ -7495,6 +7518,7 @@ var PiChatMeteringCoordinator = class {
       recordedMessageIds: /* @__PURE__ */ new Set(),
       lastIdlessUsageKey: void 0,
       usageWriteFailed: false,
+      userStopped: false,
       reservation: Promise.resolve(),
       terminal: false,
       ops: Promise.resolve()
@@ -7536,7 +7560,7 @@ var PiChatMeteringCoordinator = class {
         if (run2.billableUsageCount > 0) {
           return this.sink.settleRun({ ...run2.scope, reservationId: run2.reservationId, status });
         }
-        const didPaidWork = status === "ok";
+        const didPaidWork = status === "ok" && !run2.userStopped;
         if (didPaidWork) {
           return this.sink.releaseRun({ ...run2.scope, reservationId: run2.reservationId, reason: "fallback-hold-charge" });
         }
@@ -7988,6 +8012,7 @@ var HarnessPiChatService = class {
     const sessionKey = this.sessionKey(ctx, sessionId);
     const adapter = await this.getAdapter(ctx, sessionId, "");
     const clearedQueue = this.clearAllFollowUps(adapter, sessionId, sessionKey);
+    this.metering?.markActiveStopped(sessionKey);
     this.metering?.releaseQueued(sessionKey);
     this.metering?.releasePending(sessionKey);
     await adapter.abort();
@@ -8486,7 +8511,7 @@ function createAgentRuntimeBridge2(config, options = {}) {
   });
 }
 async function createRuntime(config, options) {
-  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-TGBJZISM.js")).createPiCodingAgentHarness;
+  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-MJ5GEL6J.js")).createPiCodingAgentHarness;
   const harnessInput = {
     tools: config.tools ?? [],
     cwd: config.workdir ?? DEFAULT_WORKDIR,
@@ -9498,6 +9523,166 @@ function sameSessionCtx(a, b) {
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { z as z2 } from "zod";
+
+// src/server/mcp/shareEntryResources.ts
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+var MAX_SHARE_READ_BYTES = 256 * 1024;
+var SHARE_RESOURCE_URI_TEMPLATE = "share:///{id}";
+var strictUtf8Decoder2 = new TextDecoder("utf-8", { fatal: true });
+function shareResourceUri(id) {
+  return `share:///${encodeURIComponent(id)}`;
+}
+function registerShareEntryResources(server, options) {
+  const template = new ResourceTemplate(SHARE_RESOURCE_URI_TEMPLATE, {
+    list: async (extra) => listShareResources(options, requestContextFromResourceExtra(extra))
+  });
+  const readCallback = async (uri, variables, extra) => readShareResource(options, variables.id, requestContextFromResourceExtra(extra));
+  server.registerResource(
+    "share",
+    template,
+    {
+      title: "Lane W share entry",
+      description: "Same-workspace shareable file reference (AR1). Resolves live, never a blob snapshot."
+    },
+    readCallback
+  );
+}
+function requestContextFromResourceExtra(extra) {
+  return {
+    sessionId: extra?.sessionId,
+    authInfo: extra?.authInfo
+  };
+}
+async function listShareResources(options, request) {
+  const ctx = await options.resolveSessionCtx(request);
+  if (!ctx.workspaceId) return { resources: [] };
+  const entries = await options.store.list(ctx.workspaceId);
+  return {
+    resources: entries.map((entry) => ({
+      uri: shareResourceUri(entry.id),
+      name: entry.id
+    }))
+  };
+}
+async function readShareResource(options, rawId, request) {
+  const id = typeof rawId === "string" ? rawId : Array.isArray(rawId) ? rawId[0] : void 0;
+  if (!id) return notFoundResult(shareResourceUri(""));
+  const uri = shareResourceUri(id);
+  const ctx = await options.resolveSessionCtx(request);
+  if (!ctx.workspaceId) return notFoundResult(uri);
+  const entry = await options.store.get(id);
+  if (!entry || entry.workspaceId !== ctx.workspaceId) {
+    return notFoundResult(uri);
+  }
+  const workspace = await options.resolveWorkspace(ctx);
+  const resolution = await resolveShareEntry(options.store, id, workspace);
+  if (resolution.status === "not_found") return notFoundResult(uri);
+  if (resolution.status === "tombstoned") {
+    return tombstoneResult(uri, resolution.tombstone);
+  }
+  return readShareEntryContents(uri, resolution.entry, workspace);
+}
+function notFoundResult(uri) {
+  return {
+    contents: [
+      {
+        uri,
+        mimeType: "application/json",
+        text: JSON.stringify({
+          status: "not_found",
+          error: { code: ErrorCode.enum.AR1_SHARE_NOT_FOUND, message: "share not found" }
+        })
+      }
+    ]
+  };
+}
+function tombstoneResult(uri, tombstone) {
+  return {
+    contents: [
+      {
+        uri,
+        mimeType: "application/json",
+        text: JSON.stringify({
+          status: "tombstoned",
+          error: { code: ErrorCode.enum.AR1_SHARE_TOMBSTONED, message: "share target is gone" },
+          id: tombstone.id,
+          workspaceId: tombstone.workspaceId,
+          provenance: tombstone.provenance
+        })
+      }
+    ]
+  };
+}
+async function readShareEntryContents(uri, entry, workspace) {
+  const before = await statShareTarget(workspace, entry.path);
+  assertShareTargetStat(before);
+  assertWithinCap(before.size);
+  if (!workspace.readBinaryFile) {
+    throw new ManagedAgentMcpError(
+      ErrorCode.enum.MCP_AGENT_ARTIFACT_UNAVAILABLE,
+      "share target bytes are unavailable through the authorized workspace"
+    );
+  }
+  const bytes = await workspace.readBinaryFile(entry.path);
+  const after = await statShareTarget(workspace, entry.path);
+  assertShareTargetStat(after);
+  if (!sameStat2(before, after) || bytes.byteLength !== before.size) {
+    throw new ManagedAgentMcpError(ErrorCode.enum.MCP_AGENT_ARTIFACT_UNAVAILABLE, "share target changed while it was being read");
+  }
+  assertWithinCap(bytes.byteLength);
+  const text = decodeUtf83(bytes);
+  const digest = await sha256Bytes(bytes);
+  return {
+    contents: [
+      {
+        uri,
+        mimeType: "text/plain",
+        text,
+        _meta: {
+          status: "ok",
+          digest,
+          byteSize: bytes.byteLength,
+          provenance: entry.provenance
+        }
+      }
+    ]
+  };
+}
+async function statShareTarget(workspace, path4) {
+  try {
+    return await workspace.stat(path4);
+  } catch {
+    throw new ManagedAgentMcpError(ErrorCode.enum.MCP_AGENT_ARTIFACT_UNAVAILABLE, "share target is unavailable");
+  }
+}
+function assertShareTargetStat(stat13) {
+  if (stat13.kind !== "file") {
+    throw new ManagedAgentMcpError(ErrorCode.enum.MCP_AGENT_ARTIFACT_INVALID, "share target must be a file");
+  }
+  if (!Number.isFinite(stat13.size) || stat13.size < 0) {
+    throw new ManagedAgentMcpError(ErrorCode.enum.MCP_AGENT_ARTIFACT_INVALID, "share target size is invalid");
+  }
+}
+function assertWithinCap(byteSize) {
+  if (byteSize > MAX_SHARE_READ_BYTES) {
+    throw new ManagedAgentMcpError(
+      ErrorCode.enum.MCP_AGENT_ARTIFACT_TOO_LARGE,
+      `share target must be ${MAX_SHARE_READ_BYTES} bytes or fewer`
+    );
+  }
+}
+function sameStat2(left, right) {
+  return left.kind === right.kind && left.size === right.size && left.mtimeMs === right.mtimeMs;
+}
+function decodeUtf83(bytes) {
+  try {
+    return strictUtf8Decoder2.decode(bytes);
+  } catch {
+    throw new ManagedAgentMcpError(ErrorCode.enum.MCP_AGENT_ARTIFACT_INVALID, "share target must be well-formed UTF-8");
+  }
+}
+
+// src/server/mcp/managedAgentMcpServer.ts
 var DEFAULT_MAX_BRIEF_SCHEMA_CHARS = 32 * 1024;
 var delegateTaskStatusInputSchema = {
   delegationId: z2.string().min(1)
@@ -9510,6 +9695,13 @@ function createManagedAgentMcpServerWithController(options, controller) {
     name: options.name ?? "boring-managed-agent",
     version: options.version ?? "0.0.0"
   });
+  if (options.shareEntryStore && options.resolveShareSessionCtx && options.resolveShareWorkspace) {
+    registerShareEntryResources(server, {
+      store: options.shareEntryStore,
+      resolveSessionCtx: options.resolveShareSessionCtx,
+      resolveWorkspace: options.resolveShareWorkspace
+    });
+  }
   const registerTool = server.registerTool.bind(server);
   const delegateTaskInputSchema = createDelegateTaskInputSchema(options.maxBriefChars ?? DEFAULT_MAX_BRIEF_SCHEMA_CHARS);
   registerTool(
@@ -12643,7 +12835,7 @@ function requirePath(value, reply) {
   return value;
 }
 function gitRoutes(app, opts, done) {
-  async function resolveWorkspaceRoot(request) {
+  async function resolveWorkspaceRoot2(request) {
     const workspace = opts.getWorkspace ? await opts.getWorkspace(request) : opts.workspace;
     return workspace === void 0 ? void 0 : getNodeWorkspaceHostRoot(workspace);
   }
@@ -12651,7 +12843,7 @@ function gitRoutes(app, opts, done) {
     const query = request.query;
     const path4 = requirePath(query.path, reply);
     if (path4 === null) return;
-    const workspaceRoot = await resolveWorkspaceRoot(request);
+    const workspaceRoot = await resolveWorkspaceRoot2(request);
     if (!workspaceRoot) {
       return {
         enabled: false,
@@ -13315,6 +13507,51 @@ function buildUploadAgentTools(bundle) {
   ];
 }
 
+// src/server/http/routes/deepLink.ts
+var DEFAULT_WORKSPACE_ID4 = "default";
+function getRequestWorkspaceId2(request) {
+  return request.workspaceContext?.workspaceId ?? DEFAULT_WORKSPACE_ID4;
+}
+function sendShareNotFound(reply) {
+  return reply.code(404).send({
+    error: { code: ShareEntryErrorCode.enum.AR1_SHARE_NOT_FOUND, message: "share not found" }
+  });
+}
+var deepLinkRoutes = (app, opts, done) => {
+  async function resolveWorkspace(request) {
+    if (opts.getWorkspace) return await opts.getWorkspace(request);
+    if (opts.workspace) return opts.workspace;
+    throw new Error("deep-link route requires workspace or getWorkspace");
+  }
+  app.get("/a/:id", async (request, reply) => {
+    const { id } = request.params;
+    const requestWorkspaceId = getRequestWorkspaceId2(request);
+    const entry = await opts.store.get(id);
+    if (!entry || entry.workspaceId !== requestWorkspaceId) {
+      return sendShareNotFound(reply);
+    }
+    const workspace = await resolveWorkspace(request);
+    const resolution = await resolveShareEntry(opts.store, id, workspace);
+    switch (resolution.status) {
+      case "not_found":
+        return sendShareNotFound(reply);
+      case "tombstoned":
+        return reply.code(200).send({
+          status: "tombstoned",
+          code: resolution.code,
+          tombstone: resolution.tombstone
+        });
+      case "ok":
+        return reply.code(200).send({
+          status: "ok",
+          workspaceId: resolution.entry.workspaceId,
+          id: resolution.entry.id
+        });
+    }
+  });
+  done();
+};
+
 // src/server/runtime/runtimeBindingLifecycle.ts
 function createRuntimeBindingLifecycle(options) {
   const { app } = options;
@@ -13602,7 +13839,7 @@ function createRuntimeBindingLifecycle(options) {
 
 // src/server/registerAgentRoutes.ts
 var DEFAULT_VERSION2 = "0.1.0-dev";
-var DEFAULT_WORKSPACE_ID4 = "default";
+var DEFAULT_WORKSPACE_ID5 = "default";
 var STANDARD_AGENT_TOOL_NAMES = ["bash", "read", "write", "edit", "find", "grep", "ls"];
 function pluginNameFromPath(path4) {
   const fileName = basename2(path4);
@@ -13622,8 +13859,8 @@ function getAvailableModelProviders() {
     new Set(availableModels.map((model) => model.provider))
   ).sort((a, b) => a.localeCompare(b));
 }
-function getRequestWorkspaceId2(request) {
-  return request.workspaceContext?.workspaceId ?? DEFAULT_WORKSPACE_ID4;
+function getRequestWorkspaceId3(request) {
+  return request.workspaceContext?.workspaceId ?? DEFAULT_WORKSPACE_ID5;
 }
 function promoteRawFileWorkspaceQueryToHeader(request) {
   const pathname = request.url.split("?")[0] ?? request.url;
@@ -13716,7 +13953,7 @@ function createRuntimeReadinessCheck(workspaceId, getRuntimeDependencies) {
   };
 }
 var registerAgentRoutes = async (app, opts) => {
-  const sessionId = opts.sessionId ?? DEFAULT_WORKSPACE_ID4;
+  const sessionId = opts.sessionId ?? DEFAULT_WORKSPACE_ID5;
   const resolvedMode = opts.runtimeModeAdapter?.id ?? opts.mode ?? autoDetectMode();
   const workspaceRoot = opts.workspaceRoot ?? process.cwd();
   const templatePath = opts.templatePath ?? getEnv("BORING_AGENT_TEMPLATE_PATH");
@@ -13738,7 +13975,8 @@ var registerAgentRoutes = async (app, opts) => {
     }
   });
   const modelsWorkspaceScoped = Boolean(opts.filterModels);
-  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
+  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getRuntimeScopeContribution === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
+  const runtimeScopeByRequest = /* @__PURE__ */ new WeakMap();
   const sessionChangesTracker = new InMemorySessionChangesTracker();
   const externalPluginsEnabled = opts.externalPlugins !== false;
   async function resolveScopePi(workspaceId, root, request) {
@@ -13761,11 +13999,13 @@ var registerAgentRoutes = async (app, opts) => {
     const pi = await resolveScopePi(workspaceId, root, request);
     const sessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot: root, request, userId: trustedCtx?.userId }) : opts.sessionNamespace);
     const extraToolsAuthSubject = opts.getExtraTools ? trustedCtx?.userId ?? getRequestAuthSubject2(request) : void 0;
+    const contribution = await opts.getRuntimeScopeContribution?.({ workspaceId, workspaceRoot: root, request });
     return {
       root,
       templatePath: scopedTemplatePath,
       pi,
       sessionNamespace,
+      loadSystemPromptAppend: contribution?.loadSystemPromptAppend,
       key: JSON.stringify([
         resolvedMode,
         workspaceId,
@@ -13773,10 +14013,26 @@ var registerAgentRoutes = async (app, opts) => {
         scopedTemplatePath ?? null,
         pi,
         sessionNamespace ?? null,
-        extraToolsAuthSubject ?? null
+        extraToolsAuthSubject ?? null,
+        contribution?.identity ?? null
       ])
     };
   }
+  function getRuntimeScope(workspaceId, request, trustedCtx) {
+    if (!request) return resolveRuntimeScope(workspaceId, void 0, trustedCtx);
+    let scopes = runtimeScopeByRequest.get(request);
+    if (!scopes) {
+      scopes = /* @__PURE__ */ new Map();
+      runtimeScopeByRequest.set(request, scopes);
+    }
+    const identity = JSON.stringify([workspaceId, trustedCtx?.userId ?? null]);
+    let promise = scopes.get(identity);
+    if (!promise) {
+      promise = resolveRuntimeScope(workspaceId, request, trustedCtx);
+      scopes.set(identity, promise);
+    }
+    return promise;
+  }
   async function resolveSkillScope(workspaceId, request) {
     const root = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : workspaceRoot;
     const pi = await resolveScopePi(workspaceId, root, request);
@@ -13823,6 +14079,7 @@ var registerAgentRoutes = async (app, opts) => {
   }
   async function createRuntimeBinding(workspaceId, scope, request, trustedCtx) {
     const root = scope.root;
+    const scopedSystemPromptAppend = await scope.loadSystemPromptAppend?.();
     const modeCtx = {
       workspaceRoot: root,
       sessionId: workspaceId,
@@ -14036,7 +14293,7 @@ var registerAgentRoutes = async (app, opts) => {
         checkReadiness
       }),
       harnessFactory,
-      systemPromptAppend: opts.systemPromptAppend,
+      systemPromptAppend: [opts.systemPromptAppend, scopedSystemPromptAppend].filter(Boolean).join("\n\n") || void 0,
       systemPromptDynamic,
       telemetry: opts.telemetry,
       metering: opts.metering,
@@ -14095,7 +14352,7 @@ var registerAgentRoutes = async (app, opts) => {
   }
   async function resolveRuntimeBinding(workspaceId, request, options = {}) {
     bindingLifecycle.assertAdmission(workspaceId, request);
-    const scope = await resolveRuntimeScope(workspaceId, request, options.trustedCtx);
+    const scope = await getRuntimeScope(workspaceId, request, options.trustedCtx);
     bindingLifecycle.assertAdmission(workspaceId, request);
     const existing = bindingLifecycle.getEntry(scope.key);
     if (existing) {
@@ -14286,14 +14543,14 @@ var registerAgentRoutes = async (app, opts) => {
   function getSkillsScopeForRequest(request) {
     let promise = skillsScopeByRequest.get(request);
     if (!promise) {
-      promise = resolveSkillScope(getRequestWorkspaceId2(request), request);
+      promise = resolveSkillScope(getRequestWorkspaceId3(request), request);
       skillsScopeByRequest.set(request, promise);
     }
     return promise;
   }
   async function getBindingForRequest(request, options = {}) {
     if (staticBinding) return staticBinding;
-    return await getOrCreateRuntimeBinding(getRequestWorkspaceId2(request), request, options);
+    return await getOrCreateRuntimeBinding(getRequestWorkspaceId3(request), request, options);
   }
   async function getFilesystemBindingsForRequest(request) {
     const binding = await getBindingForRequest(request);
@@ -14301,7 +14558,7 @@ var registerAgentRoutes = async (app, opts) => {
     const user = request.user;
     return await opts.getFilesystemBindings({
       request,
-      workspaceId: getRequestWorkspaceId2(request),
+      workspaceId: getRequestWorkspaceId3(request),
       workspaceRoot: binding.workspaceRoot,
       userId: user?.id,
       userEmail: user?.email,
@@ -14328,7 +14585,7 @@ var registerAgentRoutes = async (app, opts) => {
   }
   app.addHook("onRequest", async (request, reply) => {
     const user = request.user;
-    let workspaceId = DEFAULT_WORKSPACE_ID4;
+    let workspaceId = DEFAULT_WORKSPACE_ID5;
     promoteRawFileWorkspaceQueryToHeader(request);
     if (opts.getWorkspaceId && !isWorkspaceAgnosticAgentRequest(request, { readyStatusWorkspaceScoped: requestScopedRuntime, modelsWorkspaceScoped })) {
       try {
@@ -14382,6 +14639,12 @@ var registerAgentRoutes = async (app, opts) => {
   await app.register(searchRoutes, {
     getFileSearch: async (request) => (await getBindingForRequest(request)).runtimeBundle.fileSearch
   });
+  if (opts.shareEntryStore) {
+    await app.register(deepLinkRoutes, {
+      store: opts.shareEntryStore,
+      getWorkspace: async (request) => (await getBindingForRequest(request)).runtimeBundle.workspace
+    });
+  }
   await app.register(gitRoutes, {
     getWorkspace: async (request) => {
       const runtimeBundle = (await getBindingForRequest(request)).runtimeBundle;
@@ -14427,7 +14690,7 @@ var registerAgentRoutes = async (app, opts) => {
   });
   await app.register(sessionChangesRoutes, { tracker: sessionChangesTracker });
   app.post("/api/v1/agent/reload", async (request, reply) => {
-    const workspaceId = getRequestWorkspaceId2(request);
+    const workspaceId = getRequestWorkspaceId3(request);
     const binding = await getBindingForRequest(request);
     if (!binding.harness.reloadSession) {
       return reply.status(501).send({ ok: false, error: "Agent harness does not support reload" });
@@ -14511,6 +14774,8 @@ export {
   getBoringAgentPathEntries,
   getBoringAgentRuntimeEnv,
   createDirectSandbox,
+  validatePath,
+  assertRealPathWithinWorkspace,
   createNodeWorkspace,
   createBwrapSandbox,
   FileHandleStore,
@@ -14523,6 +14788,7 @@ export {
   prepareDeploymentSnapshot,
   createVercelDeploymentSnapshotProvider,
   prepareVercelDeploymentSnapshot,
+  resolveWorkspaceRoot,
   REMOTE_WORKER_RUNTIME_CWD,
   REMOTE_WORKER_PROVIDER,
   WORKER_INTERNAL_TOKEN_HEADER,
@@ -14557,6 +14823,8 @@ export {
   ManagedAgentMcpError,
   ManagedAgentMcpDelegateController,
   createManagedAgentMcpDelegateController,
+  shareResourceUri,
+  registerShareEntryResources,
   createManagedAgentMcpServer,
   createManagedAgentMcpHttpHandler,
   createAgentApp,