@hachej/boring-agent 0.1.96 → 0.1.98

package/dist/{chunk-NSE2RHU3.js → chunk-CXMM24NW.js}

@@ -6519,6 +6519,7 @@ var HarnessPiChatService = class {
       if (persisted && !channel && !this.harnessMayHaveLiveSession(ctx, sessionId)) return persisted;
     }
     const adapter = await this.getAdapter(ctx, sessionId, "");
+    await this.ensureChannel(ctx, sessionId, adapter);
     if (this.canRefreshFromPersistedState(sessionKey, adapter)) {
       const persisted = await this.readPersistedState(ctx, sessionId);
       if (persisted && this.canRefreshFromPersistedState(sessionKey, adapter) && !this.persistedStateDropsLiveMessages(persisted, adapter, sessionId)) {
@@ -12158,6 +12159,7 @@ function createPiResourceDigestInput(input) {
     additionalSkillPaths: uniqueStrings(input.resourceSets.flatMap((set) => set.additionalSkillPaths ?? [])),
     packages: compactPiPackages(input.resourceSets.flatMap((set) => set.packages ?? [])),
     extensionPaths: uniqueStrings(input.resourceSets.flatMap((set) => set.extensionPaths ?? [])),
+    allowInternalSymlinks: input.allowInternalSymlinks,
     authorizedRoots: uniqueStrings([
       piCwd,
       piAgentDir,
@@ -12181,7 +12183,14 @@ async function digestPiResourceInputs(input) {
     throw stableError(ErrorCode.enum.CONFIG_INVALID, 400, "Pi resource digest requires at least one independently authorized root");
   }
   const limits = normalizeLimits(input.limits);
-  const state = { hash, limits, authorizedRoots, nodes: 0, bytes: 0 };
+  const state = {
+    hash,
+    limits,
+    authorizedRoots,
+    allowInternalSymlinks: input.allowInternalSymlinks ?? false,
+    nodes: 0,
+    bytes: 0
+  };
   frameString(hash, "format", FORMAT_VERSION);
   frameString(hash, "pi-cwd", piCwd);
   frameString(hash, "project-settings-dir", projectSettingsDir);
@@ -12254,7 +12263,7 @@ function packageDescriptor(source) {
 async function hashResourceCollection(state, baseDir, kind, paths, digestContainingArtifact) {
   for (const path of [...new Set(paths)].sort()) {
     const absolutePath = resolvePiPath(path, baseDir);
-    await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots);
+    await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots, state.allowInternalSymlinks);
     try {
       await lstat4(absolutePath);
     } catch (error) {
@@ -12337,7 +12346,7 @@ async function findContainingArtifactRoot(path, authorizedRoots) {
 }
 async function hashLocalResource(state, path, logicalPath, depth) {
   const absolutePath = resolve8(path);
-  await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots);
+  await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots, state.allowInternalSymlinks);
   if (depth > state.limits.maxDepth) {
     throw limitError(`Pi resource tree exceeds maximum depth ${state.limits.maxDepth}`);
   }
@@ -12356,7 +12365,16 @@ async function hashLocalResource(state, path, logicalPath, depth) {
     throw limitError(`Pi resource tree exceeds maximum node count ${state.limits.maxFiles}`);
   }
   if (stat7.isSymbolicLink()) {
-    throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${absolutePath}`);
+    if (!state.allowInternalSymlinks) {
+      throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${absolutePath}`);
+    }
+    const target = await realpath5(absolutePath);
+    if (!mostSpecificContainingRoot(target, state.authorizedRoots)) {
+      throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlink resolves outside authorized roots: ${absolutePath}`);
+    }
+    frameString(state.hash, "symlink-target", target);
+    await hashLocalResource(state, target, logicalPath, depth);
+    return;
   }
   if (stat7.isDirectory()) {
     frameString(state.hash, "directory", logicalPath);
@@ -12430,7 +12448,7 @@ async function hashLocalResource(state, path, logicalPath, depth) {
 function assertSameFile(before, after, path) {
   if (before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs) throw changedError(path);
 }
-async function assertContainedWithoutSymlinks(path, roots) {
+async function assertContainedWithoutSymlinks(path, roots, allowInternalSymlinks = false) {
   const root = mostSpecificContainingRoot(path, roots);
   if (!root) {
     throw stableError(ErrorCode.enum.PATH_ESCAPE, 403, `Pi resource path is outside authorized roots: ${path}`);
@@ -12443,7 +12461,13 @@ async function assertContainedWithoutSymlinks(path, roots) {
     current = resolve8(current, segment);
     try {
       if ((await lstat4(current)).isSymbolicLink()) {
-        throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${current}`);
+        if (!allowInternalSymlinks) {
+          throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${current}`);
+        }
+        const target = await realpath5(current);
+        if (!mostSpecificContainingRoot(target, roots)) {
+          throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlink resolves outside authorized roots: ${current}`);
+        }
       }
     } catch (error) {
       if (isMissing(error)) return;

package/dist/front/index.d.ts

@@ -373,6 +373,7 @@ interface RemotePiSessionOptions {
     setTimeoutFn?: typeof globalThis.setTimeout;
     clearTimeoutFn?: typeof globalThis.clearTimeout;
     requestTimeoutMs?: number;
+    commandTimeoutMs?: number;
 }
 interface RemotePiSessionLargeStateWarning {
     type: 'large-state';
@@ -419,6 +420,7 @@ declare class RemotePiSession {
     private readonly setTimeoutFn;
     private readonly clearTimeoutFn;
     private readonly requestTimeoutMs;
+    private readonly commandTimeoutMs;
     private generation;
     private streamRunId;
     private reconnectAttempt;

package/dist/front/index.js

@@ -4520,6 +4520,7 @@ var SUPPORTED_PROTOCOL_VERSION = 1;
 var DEFAULT_RECONNECT_BASE_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_REQUEST_TIMEOUT_MS = 15e3;
+var DEFAULT_COMMAND_TIMEOUT_MS = 6e4;
 var DEFAULT_LARGE_STATE_WARNING_BYTES = 5 * 1024 * 1024;
 var DEFAULT_LARGE_STATE_WARNING_MESSAGES = 300;
 var EVENT_TYPE_RING_LIMIT = 20;
@@ -4536,6 +4537,7 @@ var RemotePiSession = class {
     this.setTimeoutFn = options.setTimeoutFn ?? globalThis.setTimeout;
     this.clearTimeoutFn = options.clearTimeoutFn ?? globalThis.clearTimeout;
     this.requestTimeoutMs = options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+    this.commandTimeoutMs = options.commandTimeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;
     this.store = createPiChatStore(createInitialPiChatState({
       sessionId: options.sessionId,
       workspaceId: options.workspaceId,
@@ -4552,6 +4554,7 @@ var RemotePiSession = class {
   setTimeoutFn;
   clearTimeoutFn;
   requestTimeoutMs;
+  commandTimeoutMs;
   generation = 0;
   streamRunId = 0;
   reconnectAttempt = 0;
@@ -4877,7 +4880,7 @@ var RemotePiSession = class {
       method: "POST",
       headers: { ...headers, "Content-Type": "application/json" },
       body: JSON.stringify(this.addressedCommandPayload(path, payload))
-    });
+    }, this.commandTimeoutMs);
     if (!this.isGenerationActive(generation)) {
       throw abortError("Remote Pi session disposed before command receipt.");
     }
@@ -4894,21 +4897,21 @@ var RemotePiSession = class {
     if (this.disposed) return;
     this.store.dispatch({ type: "remove-optimistic-user-message", clientNonce }, { flush: true });
   }
-  async fetchJson(url, init) {
+  async fetchJson(url, init, timeoutMs = this.requestTimeoutMs) {
     const controller = new AbortController();
     this.fetchControllers.add(controller);
     let timedOut = false;
     const timer = globalThis.setTimeout(() => {
       timedOut = true;
       controller.abort();
-    }, this.requestTimeoutMs);
+    }, timeoutMs);
     try {
       const response = await this.fetchImpl(url, { ...init, signal: controller.signal });
       const body = await safeReadJson(response);
       if (!response.ok) throw new RemotePiSessionHttpError(response.status, routeErrorMessage(body, `HTTP ${response.status}`), body, routeErrorCode(body));
       return body;
     } catch (error) {
-      if (timedOut) throw new Error(`Request to ${url} timed out after ${this.requestTimeoutMs}ms.`);
+      if (timedOut) throw new Error(`Request to ${url} timed out after ${timeoutMs}ms.`);
       throw error;
     } finally {
       globalThis.clearTimeout(timer);

package/dist/server/index.d.ts

@@ -1356,6 +1356,8 @@ interface PiResourceDigestInput {
     readonly extensionPaths?: readonly string[];
     /** Lexical roots explicitly authorized by the embedding Workspace/CLI. */
     readonly authorizedRoots: readonly string[];
+    /** CLI workspaces may contain repo-managed symlinks (e.g. .pi/skills/*). */
+    readonly allowInternalSymlinks?: boolean;
     readonly limits?: Partial<PiResourceDigestLimits>;
 }
 interface PiResourceSet {
@@ -1372,6 +1374,7 @@ declare function createPiResourceDigestInput(input: {
     readonly noSkills?: boolean;
     readonly resourceSets: readonly PiResourceSet[];
     readonly authorizedRoots: readonly string[];
+    readonly allowInternalSymlinks?: boolean;
     readonly limits?: Partial<PiResourceDigestLimits>;
 }): PiResourceDigestInput;
 /** Bounded asynchronous content identity for the exact Pi resources considered by a reload candidate. */

package/dist/server/index.js

@@ -88,7 +88,7 @@ import {
   shareResourceUri,
   withResolvedCredential,
   withRuntimeEnvContributions
-} from "../chunk-NSE2RHU3.js";
+} from "../chunk-CXMM24NW.js";
 import {
   PI_PACKAGE_RESOURCE_FILTERS,
   compactPiPackages,

package/dist/server/worker/index.js

@@ -1,7 +1,7 @@
 import {
   WORKER_INTERNAL_TOKEN_HEADER,
   constantTimeTokenEqual
-} from "../../chunk-NSE2RHU3.js";
+} from "../../chunk-CXMM24NW.js";
 import "../../chunk-WC5KBGP2.js";
 import "../../chunk-3OEDBRKY.js";
 import "../../chunk-4IQ4HHBG.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.96",
+  "version": "0.1.98",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -88,7 +88,7 @@
     "diff": "^9.0.0",
     "fastify": "^5.11.2",
     "lucide-react": "^1.27.0",
-    "motion": "^12.43.0",
+    "motion": "^13.0.0",
     "nanoid": "^6.0.0",
     "shiki": "^4.4.2",
     "streamdown": "^2.5.0",
@@ -96,9 +96,9 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-bash": "0.1.96",
-    "@hachej/boring-ui-kit": "0.1.96",
-    "@hachej/boring-sandbox": "0.1.96"
+    "@hachej/boring-bash": "0.1.98",
+    "@hachej/boring-sandbox": "0.1.98",
+    "@hachej/boring-ui-kit": "0.1.98"
   },
   "devDependencies": {
     "@vercel/sandbox": "2.9.2",