@hachej/boring-agent 0.1.85 → 0.1.87

package/dist/{chunk-HY7EERLW.js → chunk-RRVL5JRE.js}

@@ -1811,6 +1811,14 @@ async function prepareVercelDeploymentSnapshot(opts) {
   });
 }
 
+// src/server/config/workspaceRoot.ts
+var WORKSPACE_ROOT_ENV = "BORING_AGENT_WORKSPACE_ROOT";
+function resolveWorkspaceRoot(defaultRoot = process.cwd()) {
+  const configured = process.env[WORKSPACE_ROOT_ENV]?.trim();
+  if (!configured) return defaultRoot;
+  return configured;
+}
+
 // src/server/runtime/createServerFileSearch.ts
 var DEFAULT_LIMIT = 500;
 var MAX_LIMIT = 5e3;
@@ -12827,7 +12835,7 @@ function requirePath(value, reply) {
   return value;
 }
 function gitRoutes(app, opts, done) {
-  async function resolveWorkspaceRoot(request) {
+  async function resolveWorkspaceRoot2(request) {
     const workspace = opts.getWorkspace ? await opts.getWorkspace(request) : opts.workspace;
     return workspace === void 0 ? void 0 : getNodeWorkspaceHostRoot(workspace);
   }
@@ -12835,7 +12843,7 @@ function gitRoutes(app, opts, done) {
     const query = request.query;
     const path4 = requirePath(query.path, reply);
     if (path4 === null) return;
-    const workspaceRoot = await resolveWorkspaceRoot(request);
+    const workspaceRoot = await resolveWorkspaceRoot2(request);
     if (!workspaceRoot) {
       return {
         enabled: false,
@@ -13967,7 +13975,8 @@ var registerAgentRoutes = async (app, opts) => {
     }
   });
   const modelsWorkspaceScoped = Boolean(opts.filterModels);
-  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
+  const requestScopedRuntime = typeof opts.getWorkspaceId === "function" || typeof opts.getWorkspaceRoot === "function" || typeof opts.getTemplatePath === "function" || typeof opts.getPi === "function" || typeof opts.getExtraTools === "function" || typeof opts.getSessionNamespace === "function" || typeof opts.getSystemPromptDynamic === "function" || typeof opts.getRuntimeScopeContribution === "function" || typeof opts.getTrustedWorkspaceRoot === "function";
+  const runtimeScopeByRequest = /* @__PURE__ */ new WeakMap();
   const sessionChangesTracker = new InMemorySessionChangesTracker();
   const externalPluginsEnabled = opts.externalPlugins !== false;
   async function resolveScopePi(workspaceId, root, request) {
@@ -13990,11 +13999,13 @@ var registerAgentRoutes = async (app, opts) => {
     const pi = await resolveScopePi(workspaceId, root, request);
     const sessionNamespace = normalizeSessionNamespace(opts.getSessionNamespace ? await opts.getSessionNamespace({ workspaceId, workspaceRoot: root, request, userId: trustedCtx?.userId }) : opts.sessionNamespace);
     const extraToolsAuthSubject = opts.getExtraTools ? trustedCtx?.userId ?? getRequestAuthSubject2(request) : void 0;
+    const contribution = await opts.getRuntimeScopeContribution?.({ workspaceId, workspaceRoot: root, request });
     return {
       root,
       templatePath: scopedTemplatePath,
       pi,
       sessionNamespace,
+      loadSystemPromptAppend: contribution?.loadSystemPromptAppend,
       key: JSON.stringify([
         resolvedMode,
         workspaceId,
@@ -14002,10 +14013,26 @@ var registerAgentRoutes = async (app, opts) => {
         scopedTemplatePath ?? null,
         pi,
         sessionNamespace ?? null,
-        extraToolsAuthSubject ?? null
+        extraToolsAuthSubject ?? null,
+        contribution?.identity ?? null
       ])
     };
   }
+  function getRuntimeScope(workspaceId, request, trustedCtx) {
+    if (!request) return resolveRuntimeScope(workspaceId, void 0, trustedCtx);
+    let scopes = runtimeScopeByRequest.get(request);
+    if (!scopes) {
+      scopes = /* @__PURE__ */ new Map();
+      runtimeScopeByRequest.set(request, scopes);
+    }
+    const identity = JSON.stringify([workspaceId, trustedCtx?.userId ?? null]);
+    let promise = scopes.get(identity);
+    if (!promise) {
+      promise = resolveRuntimeScope(workspaceId, request, trustedCtx);
+      scopes.set(identity, promise);
+    }
+    return promise;
+  }
   async function resolveSkillScope(workspaceId, request) {
     const root = request && opts.getWorkspaceRoot ? await opts.getWorkspaceRoot(workspaceId, request) : workspaceRoot;
     const pi = await resolveScopePi(workspaceId, root, request);
@@ -14052,6 +14079,7 @@ var registerAgentRoutes = async (app, opts) => {
   }
   async function createRuntimeBinding(workspaceId, scope, request, trustedCtx) {
     const root = scope.root;
+    const scopedSystemPromptAppend = await scope.loadSystemPromptAppend?.();
     const modeCtx = {
       workspaceRoot: root,
       sessionId: workspaceId,
@@ -14265,7 +14293,7 @@ var registerAgentRoutes = async (app, opts) => {
         checkReadiness
       }),
       harnessFactory,
-      systemPromptAppend: opts.systemPromptAppend,
+      systemPromptAppend: [opts.systemPromptAppend, scopedSystemPromptAppend].filter(Boolean).join("\n\n") || void 0,
       systemPromptDynamic,
       telemetry: opts.telemetry,
       metering: opts.metering,
@@ -14324,7 +14352,7 @@ var registerAgentRoutes = async (app, opts) => {
   }
   async function resolveRuntimeBinding(workspaceId, request, options = {}) {
     bindingLifecycle.assertAdmission(workspaceId, request);
-    const scope = await resolveRuntimeScope(workspaceId, request, options.trustedCtx);
+    const scope = await getRuntimeScope(workspaceId, request, options.trustedCtx);
     bindingLifecycle.assertAdmission(workspaceId, request);
     const existing = bindingLifecycle.getEntry(scope.key);
     if (existing) {
@@ -14746,6 +14774,8 @@ export {
   getBoringAgentPathEntries,
   getBoringAgentRuntimeEnv,
   createDirectSandbox,
+  validatePath,
+  assertRealPathWithinWorkspace,
   createNodeWorkspace,
   createBwrapSandbox,
   FileHandleStore,
@@ -14758,6 +14788,7 @@ export {
   prepareDeploymentSnapshot,
   createVercelDeploymentSnapshotProvider,
   prepareVercelDeploymentSnapshot,
+  resolveWorkspaceRoot,
   REMOTE_WORKER_RUNTIME_CWD,
   REMOTE_WORKER_PROVIDER,
   WORKER_INTERNAL_TOKEN_HEADER,

package/dist/front/index.js

@@ -5714,7 +5714,7 @@ function sortByUpdatedDesc(a, b) {
   return a.id.localeCompare(b.id);
 }
 
-// ../../node_modules/.pnpm/@earendil-works+pi-tui@0.80.3/node_modules/@earendil-works/pi-tui/dist/fuzzy.js
+// ../../node_modules/.pnpm/@earendil-works+pi-tui@0.80.7/node_modules/@earendil-works/pi-tui/dist/fuzzy.js
 function fuzzyMatch(query, text) {
   const queryLower = query.toLowerCase();
   const textLower = text.toLowerCase();

package/dist/front/styles.css

@@ -2521,32 +2521,32 @@
     }
   }
   .dark\:bg-background {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       background-color: var(--background);
     }
   }
   .dark\:\!text-\[var\(--shiki-dark\)\] {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       color: var(--shiki-dark) !important;
     }
   }
   .dark\:text-amber-300 {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       color: var(--color-amber-300);
     }
   }
   .dark\:text-zinc-100 {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       color: var(--color-zinc-100);
     }
   }
   .dark\:text-zinc-300 {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       color: var(--color-zinc-300);
     }
   }
   .dark\:hover\:bg-accent\/50 {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:hover {
         @media (hover: hover) {
           background-color: var(--accent);
@@ -2558,7 +2558,7 @@
     }
   }
   .dark\:hover\:bg-muted {
-    &:is(.dark, .dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:hover {
         @media (hover: hover) {
           background-color: var(--muted);
@@ -2674,7 +2674,7 @@
   }
   .\[\&_\[data-slot\=input-group\]\]\:dark\:\!bg-transparent {
     & [data-slot=input-group] {
-      &:is(.dark, .dark *) {
+      &:is([data-theme="dark"], [data-theme="dark"] *) {
         background-color: transparent !important;
       }
     }
@@ -4921,12 +4921,12 @@
     }
   }
   .dark\:border-input {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       border-color: var(--boring-input);
     }
   }
   .dark\:bg-destructive\/60 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       background-color: var(--boring-destructive);
       @supports (color: color-mix(in lab, red, red)) {
         background-color: color-mix(in oklab, var(--boring-destructive) 60%, transparent);
@@ -4934,7 +4934,7 @@
     }
   }
   .dark\:bg-input\/30 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       background-color: var(--boring-input);
       @supports (color: color-mix(in lab, red, red)) {
         background-color: color-mix(in oklab, var(--boring-input) 30%, transparent);
@@ -4942,17 +4942,17 @@
     }
   }
   .dark\:bg-transparent {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       background-color: transparent;
     }
   }
   .dark\:text-muted-foreground {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       color: var(--boring-muted-foreground);
     }
   }
   .dark\:hover\:bg-input\/50 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:hover {
         @media (hover: hover) {
           background-color: var(--boring-input);
@@ -4964,7 +4964,7 @@
     }
   }
   .dark\:hover\:bg-muted\/40 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:hover {
         @media (hover: hover) {
           background-color: var(--boring-muted);
@@ -4976,7 +4976,7 @@
     }
   }
   .dark\:hover\:text-foreground {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:hover {
         @media (hover: hover) {
           color: var(--boring-foreground);
@@ -4985,7 +4985,7 @@
     }
   }
   .dark\:focus-visible\:ring-destructive\/40 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:focus-visible {
         --tw-ring-color: var(--boring-destructive);
         @supports (color: color-mix(in lab, red, red)) {
@@ -4995,7 +4995,7 @@
     }
   }
   .dark\:has-\[\[data-slot\]\[aria-invalid\=true\]\]\:ring-destructive\/40 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:has(*:is([data-slot][aria-invalid=true])) {
         --tw-ring-color: var(--boring-destructive);
         @supports (color: color-mix(in lab, red, red)) {
@@ -5005,7 +5005,7 @@
     }
   }
   .dark\:aria-invalid\:ring-destructive\/40 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[aria-invalid="true"] {
         --tw-ring-color: var(--boring-destructive);
         @supports (color: color-mix(in lab, red, red)) {
@@ -5015,14 +5015,14 @@
     }
   }
   .dark\:data-\[state\=active\]\:border-input {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[data-state="active"] {
         border-color: var(--boring-input);
       }
     }
   }
   .dark\:data-\[state\=active\]\:bg-input\/30 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[data-state="active"] {
         background-color: var(--boring-input);
         @supports (color: color-mix(in lab, red, red)) {
@@ -5032,14 +5032,14 @@
     }
   }
   .dark\:data-\[state\=active\]\:text-foreground {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[data-state="active"] {
         color: var(--boring-foreground);
       }
     }
   }
   .dark\:group-data-\[variant\=line\]\/tabs-list\:data-\[state\=active\]\:border-transparent {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:is(:where(.group\/tabs-list)[data-variant="line"] *) {
         &[data-state="active"] {
           border-color: transparent;
@@ -5048,7 +5048,7 @@
     }
   }
   .dark\:group-data-\[variant\=line\]\/tabs-list\:data-\[state\=active\]\:bg-transparent {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &:is(:where(.group\/tabs-list)[data-variant="line"] *) {
         &[data-state="active"] {
           background-color: transparent;
@@ -5057,14 +5057,14 @@
     }
   }
   .dark\:data-\[state\=checked\]\:bg-primary {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[data-state="checked"] {
         background-color: var(--boring-primary);
       }
     }
   }
   .dark\:data-\[variant\=destructive\]\:focus\:bg-destructive\/20 {
-    &:is(.dark *) {
+    &:is([data-theme="dark"], [data-theme="dark"] *) {
       &[data-variant="destructive"] {
         &:focus {
           background-color: var(--boring-destructive);
@@ -5592,7 +5592,7 @@
     }
   }
 }
-.dark {
+[data-theme="dark"] {
   --background: oklch(0.145 0.004 285.823);
   --foreground: oklch(0.985 0 0);
   --card: oklch(0.145 0.004 285.823);
@@ -5684,7 +5684,7 @@
   --boring-agent-diff-remove: oklch(from var(--destructive) l c h / 0.14);
   --boring-agent-diff-remove-fg: var(--destructive);
 }
-.dark [data-boring-agent] {
+[data-theme="dark"] [data-boring-agent] {
   --background: var(--boring-background, oklch(0.145 0.004 285.823));
   --foreground: var(--boring-foreground, oklch(0.985 0 0));
   --card: var(--boring-card, oklch(0.145 0.004 285.823));
@@ -5772,7 +5772,7 @@ pre code span[style*="--sdm-c"] {
   color: var(--sdm-c, inherit);
   background-color: var(--sdm-bg, transparent);
 }
-.dark pre code span[style*="--shiki-dark"] {
+[data-theme="dark"] pre code span[style*="--shiki-dark"] {
   color: var(--shiki-dark, var(--sdm-c, inherit));
   background-color: var(--shiki-dark-bg, var(--sdm-bg, transparent));
 }

package/dist/server/index.d.ts

@@ -191,6 +191,17 @@ interface CreateNodeWorkspaceOptions {
 }
 declare function createNodeWorkspace(root: string, opts?: CreateNodeWorkspaceOptions): Workspace;
 
+/**
+ * Validate and resolve a user-provided relative path under workspaceRoot.
+ */
+declare function validatePath(workspaceRoot: string, relPath: string): string;
+/**
+ * Resolve symlinks and ensure candidate path remains under workspaceRoot.
+ */
+declare function assertRealPathWithinWorkspace(workspaceRoot: string, absPath: string): Promise<void>;
+
+declare function resolveWorkspaceRoot(defaultRoot?: string): string;
+
 interface BoringAgentRuntimePaths {
     /** Runtime-visible workspace root. This is BORING_AGENT_WORKSPACE_ROOT. */
     workspaceRoot: string;
@@ -1300,6 +1311,18 @@ interface RegisterAgentRoutesOptions {
         workspaceId: string;
         workspaceRoot: string;
     }) => string | undefined | Promise<string | undefined>;
+    /** Immutable host contribution captured once in the runtime binding scope. */
+    getRuntimeScopeContribution?: (ctx: {
+        workspaceId: string;
+        workspaceRoot: string;
+        request?: FastifyRequest;
+    }) => Readonly<{
+        identity: string;
+        loadSystemPromptAppend?: () => Promise<string | undefined>;
+    }> | Promise<Readonly<{
+        identity: string;
+        loadSystemPromptAppend?: () => Promise<string | undefined>;
+    }>>;
     /** Override the default pi-backed harness with a custom agent runtime. */
     harnessFactory?: AgentHarnessFactory;
     /** Optional pi adapter/runtime knobs used by the default harness. */
@@ -1425,4 +1448,4 @@ interface Logger {
 }
 declare function createLogger(prefix: string): Logger;
 
-export { AgentConfig, AgentDirectoryCompilerError, type AgentDirectoryCompilerErrorCode, type AgentDirectoryCompilerPublicErrorCode, AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type CreateAgentAppOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifact, type ManagedAgentArtifactCandidate, type ManagedAgentArtifactRef, type ManagedAgentBoundRunnerWorkspace, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateRunInput, type ManagedAgentDelegateRunner, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type ManagedAgentWorkspaceResolutionInput, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, RemoteWorkerExecRequest, type RemoteWorkerModeAdapterOptions, RemoteWorkerWorkspaceOp, RemoteWorkerWorkspaceResult, type ResolvedAgent, type ResolvedAgentDigestInput, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type ShareEntryMcpResourceOptions, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, type WorkspaceAgentDispatcherBinding, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, compileAgentDirectory, constantTimeTokenEqual, createAgent, createAgentApp, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResolvedAgentDigest, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, registerShareEntryResources, resolveAgentDeployment, resolveMode, resolveSandboxHandle, shareResourceUri };
+export { AgentConfig, AgentDirectoryCompilerError, type AgentDirectoryCompilerErrorCode, type AgentDirectoryCompilerPublicErrorCode, AgentHarnessFactory, type AgentMeteringSink, type BoringAgentRuntimePaths, type BuiltinRuntimeModeId, type CreateAgentAppOptions, type CreateVercelProvisioningAdapterOptions, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, FileHandleStore, type LogFields, type Logger, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifact, type ManagedAgentArtifactCandidate, type ManagedAgentArtifactRef, type ManagedAgentBoundRunnerWorkspace, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateRunInput, type ManagedAgentDelegateRunner, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type ManagedAgentWorkspaceResolutionInput, type MeteringErrorLogger, type MeteringReleaseInput, type MeteringReleaseReason, type MeteringReservationResult, type MeteringReserveInput, type MeteringRunKind, type MeteringRunScope, type MeteringRunStatus, type MeteringSettleInput, type MeteringUsage, type MeteringUsageInput, type ModeContext, PI_PACKAGE_RESOURCE_FILTERS, type PiExtensionFactory, type PiHarnessOptions, type PiPackageSource, type PluginSkillSource, type ProvisionRuntimeWorkspaceOptions, type ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, type RegisterAgentRoutesOptions, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, RemoteWorkerExecRequest, type RemoteWorkerModeAdapterOptions, RemoteWorkerWorkspaceOp, RemoteWorkerWorkspaceResult, type ResolvedAgent, type ResolvedAgentDigestInput, type RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, type RuntimeFilesystemBinding, type RuntimeFilesystemBindingOperations, type RuntimeModeAdapter, type RuntimeModeId, type RuntimeNodePackageSpec$1 as RuntimeNodePackageSpec, type RuntimeProvisioningContribution$1 as RuntimeProvisioningContribution, type RuntimePythonSpec$1 as RuntimePythonSpec, type RuntimeTemplateContribution$1 as RuntimeTemplateContribution, type RuntimeWorkspaceProvisioningResult, type ShareEntryMcpResourceOptions, type SnapshotBakeOptions, type SnapshotBakeResult, UV_SETUP_COMMANDS, VERCEL_PROVISIONING_CACHE_ROOT, VERCEL_SANDBOX_WORKSPACE_ROOT, UV_SETUP_COMMANDS as VERCEL_UV_SETUP_COMMANDS, type VercelBakeClient, type VercelBakeSandbox, type VercelDeploymentSnapshotOptions, type WorkspaceAgentDispatcherBinding, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, type WorkspaceProvisioningAdapter, type WorkspaceProvisioningExecResult, type WorkspaceProvisioningResult, applyCspHeaders, assertRealPathWithinWorkspace, autoDetectMode, bakeSnapshotIfNeeded, buildDeploymentSnapshotRecipe, buildPackageHash, buildSnapshotRecipeHash, compactPiPackages, compileAgentDirectory, constantTimeTokenEqual, createAgent, createAgentApp, createDirectSandbox, createLogger, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createNodeWorkspace, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResolvedAgentDigest, createResourceSettingsManager, createVercelDeploymentSnapshotProvider, createVercelProvisioningAdapter, createVercelSandboxWorkspace, decodeBytesFromWorker, encodeBytesForWorker, fileRoutes, getBoringAgentPathEntries, getBoringAgentRuntimeEnv, getBoringAgentRuntimePaths, hasBwrap, mergePiPackageSources, normalizeMeteringUsage, piPackageSourceKey, prepareDeploymentSnapshot, prepareVercelDeploymentSnapshot, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentRoutes, registerShareEntryResources, resolveAgentDeployment, resolveMode, resolveSandboxHandle, resolveWorkspaceRoot, shareResourceUri, validatePath };

package/dist/server/index.js

@@ -16,6 +16,7 @@ import {
   WORKER_REQUEST_ID_HEADER,
   WORKER_WORKSPACE_ID_HEADER,
   applyCspHeaders,
+  assertRealPathWithinWorkspace,
   autoDetectMode,
   bakeSnapshotIfNeeded,
   buildDeploymentSnapshotRecipe,
@@ -55,8 +56,10 @@ import {
   resolveAgentDeployment,
   resolveMode,
   resolveSandboxHandle,
-  shareResourceUri
-} from "../chunk-HY7EERLW.js";
+  resolveWorkspaceRoot,
+  shareResourceUri,
+  validatePath
+} from "../chunk-RRVL5JRE.js";
 import "../chunk-YONTHCD7.js";
 import "../chunk-LYBTHR7J.js";
 import "../chunk-WSQ5QNIY.js";
@@ -91,6 +94,7 @@ export {
   WORKER_REQUEST_ID_HEADER,
   WORKER_WORKSPACE_ID_HEADER,
   applyCspHeaders,
+  assertRealPathWithinWorkspace,
   autoDetectMode,
   bakeSnapshotIfNeeded,
   buildDeploymentSnapshotRecipe,
@@ -135,5 +139,7 @@ export {
   resolveAgentDeployment,
   resolveMode,
   resolveSandboxHandle,
-  shareResourceUri
+  resolveWorkspaceRoot,
+  shareResourceUri,
+  validatePath
 };

package/dist/server/worker/index.js

@@ -4,7 +4,7 @@ import {
   constantTimeTokenEqual,
   createBwrapSandbox,
   createNodeWorkspace
-} from "../../chunk-HY7EERLW.js";
+} from "../../chunk-RRVL5JRE.js";
 import "../../chunk-YONTHCD7.js";
 import "../../chunk-LYBTHR7J.js";
 import "../../chunk-WSQ5QNIY.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.85",
+  "version": "0.1.87",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -50,7 +50,7 @@
     "docs"
   ],
   "dependencies": {
-    "@mariozechner/pi-coding-agent": "npm:@earendil-works/pi-coding-agent@0.75.5",
+    "@mariozechner/pi-coding-agent": "npm:@earendil-works/pi-coding-agent@0.80.7",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@radix-ui/react-collapsible": "^1.1.14",
     "@radix-ui/react-dialog": "^1.1.17",
@@ -84,7 +84,7 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-ui-kit": "0.1.85"
+    "@hachej/boring-ui-kit": "0.1.87"
   },
   "devDependencies": {
     "@antithesishq/bombadil": "0.6.1",