@hachej/boring-agent 0.1.91 → 0.1.93

package/dist/{chunk-IWBC6SF7.js → chunk-2TMS2RU2.js}

@@ -340,6 +340,7 @@ var SAFE_SESSION_NAMESPACE = /^[a-zA-Z0-9_-]+$/;
 var SESSION_ROOT_ENV = "BORING_AGENT_SESSION_ROOT";
 var SUMMARY_PREFIX_BYTES = 64 * 1024;
 var DEFAULT_LEGACY_WORKSPACE_ID = "default";
+var TRUSTED_LOCAL_USER_ID = "local";
 function sessionDirForNamespace(namespace, explicitRoot) {
   const safeNamespace = namespace.trim();
   if (!SAFE_SESSION_NAMESPACE.test(safeNamespace)) {
@@ -358,6 +359,7 @@ var PiSessionStore = class {
   cwd;
   sessionDir;
   allowLegacyUnscopedAccess;
+  pathDerivedLegacyAccess;
   prefixCache = /* @__PURE__ */ new Map();
   listInFlight = /* @__PURE__ */ new Map();
   writerTails = /* @__PURE__ */ new Map();
@@ -366,9 +368,11 @@ var PiSessionStore = class {
     if (typeof options === "string") {
       this.sessionDir = options;
       this.allowLegacyUnscopedAccess = true;
+      this.pathDerivedLegacyAccess = false;
       return;
     }
     this.allowLegacyUnscopedAccess = true;
+    this.pathDerivedLegacyAccess = options?.sessionDir === void 0 && options?.sessionNamespace === void 0;
     this.sessionDir = options?.sessionDir ?? (options?.sessionNamespace ? sessionDirForNamespace(options.sessionNamespace, options.sessionRoot) : defaultSessionDir(options?.storageCwd ?? cwd, options?.sessionRoot));
   }
   getSessionDir() {
@@ -713,6 +717,7 @@ var PiSessionStore = class {
       }
       throw new Error(`Session not found: ${sessionId}`);
     }
+    if (ctx) await this.assertFileBelongsToCtx(matchedPath, ctx, sessionId);
     return this.ensureWrapperForNativeSession(sessionId, matchedPath, ctx);
   }
   async assertFileBelongsToCtx(filepath, ctx, sessionId) {
@@ -975,8 +980,16 @@ var PiSessionStore = class {
     return header ? this.storedCtxBelongsToCtx(readHeaderSessionCtx(header), ctx) : isEmptySessionCtx(ctx);
   }
   storedCtxBelongsToCtx(storedCtx, ctx) {
-    if (storedCtx === null) return this.allowLegacyUnscopedAccess && isLegacyUnscopedCtx(ctx);
-    return sameSessionCtx(storedCtx, ctx);
+    const trustedLocalCtx = !ctx.userId || ctx.userId === TRUSTED_LOCAL_USER_ID;
+    if (storedCtx === null) {
+      return this.allowLegacyUnscopedAccess && (isLegacyUnscopedCtx(ctx) || this.pathDerivedLegacyAccess && trustedLocalCtx);
+    }
+    if (sameSessionCtx(storedCtx, ctx)) return true;
+    if (!this.pathDerivedLegacyAccess || !trustedLocalCtx) return false;
+    if (isEmptySessionCtx(storedCtx)) return true;
+    return Boolean(
+      storedCtx.workspaceId && storedCtx.workspaceId === ctx.workspaceId && (!storedCtx.userId || !ctx.userId && storedCtx.userId === TRUSTED_LOCAL_USER_ID)
+    );
   }
 };
 async function readJsonlPrefix(filepath, maxBytes = SUMMARY_PREFIX_BYTES) {

package/dist/{chunk-BHH5NH7P.js → chunk-4TKUT7IL.js}

@@ -6,7 +6,7 @@ import {
   readConfiguredDefaultModel,
   registerConfiguredModelProviders,
   withPiHarnessDefaults
-} from "./chunk-IWBC6SF7.js";
+} from "./chunk-2TMS2RU2.js";
 import {
   AgentEffectAdmissionError,
   createAgentRuntimeBridge,
@@ -48,7 +48,7 @@ import {
   StopPayloadSchema,
   extractToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "./chunk-PZC76CIA.js";
+} from "./chunk-OFQ7J6SI.js";
 import {
   AgentDefinitionErrorCode,
   AgentDeploymentErrorCode,
@@ -2478,6 +2478,7 @@ var PiChatEventMapper = class {
   activeAssistantMessageId;
   pendingUserStarts = [];
   toolCallMessageIds = /* @__PURE__ */ new Map();
+  toolCallInputs = /* @__PURE__ */ new Map();
   endedMessageIds = /* @__PURE__ */ new Set();
   endedAssistantTurnIds = /* @__PURE__ */ new Set();
   errorEmittedTurnIds = /* @__PURE__ */ new Set();
@@ -2515,6 +2516,7 @@ var PiChatEventMapper = class {
         ];
         this.activeAssistantMessageId = void 0;
         this.toolCallMessageIds.clear();
+        this.toolCallInputs.clear();
         if (status !== "error") this.activeTurnId = void 0;
         return mapped;
       }
@@ -2654,6 +2656,7 @@ var PiChatEventMapper = class {
     const toolCall = assistantEvent.toolCall;
     const toolCallId = optionalString2(toolCall.id) ?? `${messageId}:tool:${partIdFromAssistantEvent(assistantEvent)}`;
     this.toolCallMessageIds.set(toolCallId, messageId);
+    this.toolCallInputs.set(toolCallId, toolCall.arguments);
     return [
       this.event({
         type: "tool-call",
@@ -2747,9 +2750,17 @@ var PiChatEventMapper = class {
     const messageId = this.toolCallMessageIds.get(toolCallId) ?? this.activeAssistantMessageId ?? fallbackMessageId(this.sessionId, "assistant", this.seq + 1);
     const result = event.result;
     const mapped = [];
+    const toolFilesystem = filesystemFromToolInput(this.toolCallInputs.get(toolCallId));
     for (const fileChange of extractFileChanges(isRecord2(result) ? result.details : void 0)) {
-      mapped.push(this.event({ type: "file-changed", path: fileChange.path, changeType: fileChange.op }));
+      const filesystem = fileChange.filesystem ?? toolFilesystem;
+      mapped.push(this.event({
+        type: "file-changed",
+        path: fileChange.path,
+        changeType: fileChange.op,
+        ...filesystem ? { filesystem } : {}
+      }));
     }
+    this.toolCallInputs.delete(toolCallId);
     mapped.push(
       this.event({
         type: "tool-result",
@@ -2896,13 +2907,21 @@ function errorMessageFromAssistantError(assistantEvent) {
   if (isRecord2(assistantEvent.error) && typeof assistantEvent.error.errorMessage === "string") return assistantEvent.error.errorMessage;
   return assistantEvent.reason === "aborted" ? "Aborted" : "Unknown error";
 }
+function filesystemFromToolInput(input) {
+  return isRecord2(input) ? optionalString2(input.filesystem) : void 0;
+}
 function normalizeFileChangeEntry(value) {
   if (!isRecord2(value)) return null;
   const op = value.op;
   const path = value.path;
   if (typeof op !== "string" || !FILE_CHANGE_OPS.has(op)) return null;
   if (typeof path !== "string" || path.length === 0) return null;
-  return { op, path };
+  const filesystem = optionalString2(value.filesystem);
+  return {
+    op,
+    path,
+    ...filesystem ? { filesystem } : {}
+  };
 }
 function extractFileChanges(details) {
   if (!isRecord2(details)) return [];
@@ -4782,7 +4801,7 @@ function createAgentRuntimeBridge2(config, options = {}) {
   });
 }
 async function createRuntime(config, options) {
-  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-PMYRKDE4.js")).createPiCodingAgentHarness;
+  const harnessFactory = config.harnessFactory ?? (await import("./createHarness-UCD74XXK.js")).createPiCodingAgentHarness;
   const harnessInput = {
     tools: config.tools ?? [],
     cwd: config.workdir ?? DEFAULT_WORKDIR,
@@ -6938,7 +6957,7 @@ async function buildAgentComposition(input) {
       sessionNamespace: configuredNamespace,
       sessionDir: compatibility?.sessionDir ?? factoryInput.sessionDir
     }) : async (factoryInput) => {
-      const { createPiCodingAgentHarness } = await import("./createHarness-PMYRKDE4.js");
+      const { createPiCodingAgentHarness } = await import("./createHarness-UCD74XXK.js");
       return createPiCodingAgentHarness({
         ...factoryInput,
         pi,

package/dist/{chunk-PZC76CIA.js → chunk-OFQ7J6SI.js}

@@ -187,7 +187,7 @@ var PiChatEventSchema = z.discriminatedUnion("type", [
     clientSeq: z.number().int().nonnegative().optional(),
     messageId: nonEmptyString
   }),
-  baseEvent.extend({ type: z.literal("file-changed"), path: nonEmptyString, changeType: nonEmptyString }),
+  baseEvent.extend({ type: z.literal("file-changed"), path: nonEmptyString, changeType: nonEmptyString, filesystem: nonEmptyString.optional() }),
   baseEvent.extend({ type: z.literal("ui-command"), command: ShallowPayloadSchema, displayOnly: z.literal(true) }),
   baseEvent.extend({ type: z.literal("usage"), usage: ShallowPayloadSchema }),
   baseEvent.extend({

package/dist/core/index.d.ts

@@ -1,8 +1,8 @@
-import { A as AgentHarness, a as AgentReadiness, b as Agent } from '../harness-Bt_GMNYR.js';
-export { c as AGENT_NOT_IMPLEMENTED_UNTIL_T1, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, k as AgentMessageContent, l as AgentMessagePart, m as AgentNotImplementedError, n as AgentReadinessStatus, o as AgentResolveInputResponse, p as AgentSendInput, q as AgentStartReceipt, r as AgentStreamOptions } from '../harness-Bt_GMNYR.js';
-import { S as SessionStore } from '../piChatEvent-DBO3M5lu.js';
-import { A as AgentCoreSessionService, a as AgentEffectAdmission } from '../piChatSessionService-BaaVWke7.js';
-export { b as AGENT_EFFECT_METHODS, c as AgentEffectAdmissionError, P as PiChatEventStreamResult, d as PiChatEventStreamSubscription, e as PiChatEventSubscriber, f as PiChatReplayRangeError, g as PiChatSessionService, h as PiSessionCreateInit, i as PiSessionRequestContext, w as withAgentEffectAdmission } from '../piChatSessionService-BaaVWke7.js';
+import { A as AgentHarness, a as AgentReadiness, b as Agent } from '../harness-Cc48o6uS.js';
+export { c as AGENT_NOT_IMPLEMENTED_UNTIL_T1, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, k as AgentMessageContent, l as AgentMessagePart, m as AgentNotImplementedError, n as AgentReadinessStatus, o as AgentResolveInputResponse, p as AgentSendInput, q as AgentStartReceipt, r as AgentStreamOptions } from '../harness-Cc48o6uS.js';
+import { S as SessionStore } from '../piChatEvent-BsMp3MSo.js';
+import { A as AgentCoreSessionService, a as AgentEffectAdmission } from '../piChatSessionService-BrPqKrpY.js';
+export { b as AGENT_EFFECT_METHODS, c as AgentEffectAdmissionError, P as PiChatEventStreamResult, d as PiChatEventStreamSubscription, e as PiChatEventSubscriber, f as PiChatReplayRangeError, g as PiChatSessionService, h as PiSessionCreateInit, i as PiSessionRequestContext, w as withAgentEffectAdmission } from '../piChatSessionService-BrPqKrpY.js';
 import '@mariozechner/pi-coding-agent';
 import 'zod';
 

package/dist/{createHarness-PMYRKDE4.js → createHarness-UCD74XXK.js}

@@ -4,7 +4,7 @@ import {
   deriveSourcePlugin,
   mergePiPackageSources,
   withPiHarnessDefaults
-} from "./chunk-IWBC6SF7.js";
+} from "./chunk-2TMS2RU2.js";
 import "./chunk-AQBXNPMD.js";
 import "./chunk-2GBHYJVC.js";
 export {

package/dist/{errors-BEmw9HMp.d.ts → errors-C38f6pol.d.ts}

@@ -1,4 +1,4 @@
-import { b as PiChatEvent, o as ChatModelSelection, K as ThinkingLevel, v as ChatAttachmentPayload, Q as QueuedUserMessage, n as PiChatSnapshot } from './piChatEvent-DBO3M5lu.js';
+import { b as PiChatEvent, o as ChatModelSelection, K as ThinkingLevel, v as ChatAttachmentPayload, Q as QueuedUserMessage, n as PiChatSnapshot } from './piChatEvent-BsMp3MSo.js';
 
 /** Placement-independent event envelope. `seq` is the only replay cursor. */
 interface AgentSessionEvent {

package/dist/front/index.d.ts

@@ -1,7 +1,7 @@
 import * as react from 'react';
 import { ComponentProps, HTMLAttributes, FormEvent, ReactNode, ComponentType } from 'react';
 import { FileUIPart, ChatStatus, UIMessage } from 'ai';
-import { T as ToolUiMetadata, B as BoringChatPart, a as BoringChatMessage, P as PiChatStatus, Q as QueuedUserMessage, C as ChatError, b as PiChatEvent, c as PromptPayload, d as PromptReceipt, F as FollowUpPayload, e as FollowUpReceipt, f as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, h as CommandReceipt, i as StopPayload, j as StopReceipt, k as SessionSummary } from '../piChatEvent-DBO3M5lu.js';
+import { T as ToolUiMetadata, B as BoringChatPart, a as BoringChatMessage, P as PiChatStatus, Q as QueuedUserMessage, C as ChatError, b as PiChatEvent, c as PromptPayload, d as PromptReceipt, F as FollowUpPayload, e as FollowUpReceipt, f as QueueClearPayload, g as QueueClearReceipt, I as InterruptPayload, h as CommandReceipt, i as StopPayload, j as StopReceipt, k as SessionSummary } from '../piChatEvent-BsMp3MSo.js';
 import { InputGroupAddon, InputGroupButton, InputGroupTextarea, Button, Collapsible, CollapsibleContent, CollapsibleTrigger } from '@hachej/boring-ui-kit';
 import { Streamdown } from 'streamdown';
 import { StickToBottom } from 'use-stick-to-bottom';
@@ -154,6 +154,7 @@ type SlashCommandHandlerResult = string | void | {
     preserveDraft?: boolean;
 };
 type SlashCommandHandler = (args: string, ctx: SlashCommandContext) => SlashCommandHandlerResult | Promise<SlashCommandHandlerResult>;
+type SlashCommandClickBehavior = 'execute' | 'insert' | 'disabled';
 interface SlashCommand {
     name: string;
     description: string;
@@ -165,6 +166,8 @@ interface SlashCommand {
      * is needed.
      */
     kind?: 'local' | 'skill';
+    /** Explicit opt-in for assistant-message command links. Unset commands remain plain text. */
+    clickBehavior?: SlashCommandClickBehavior;
     /**
      * Origin of the command, surfaced as a tag in the slash-command picker.
      * Mirrors Pi's command sources for server commands; `local` for built-in