@hachej/boring-agent 0.1.98 → 0.1.100

package/dist/{chunk-WC5KBGP2.js → chunk-GRMDMWBW.js}

@@ -1832,6 +1832,32 @@ ${extra}` };
     });
   };
 }
+var PI_RELATIVE_SKILL_PATH_GUIDANCE = "When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md / dirname of the path) and use that absolute path in tool commands.";
+var RESOURCE_RELATIVE_SKILL_PATH_GUIDANCE = "When a skill location is a JSON resource locator, pass its filesystem and path fields to the read tool. Resolve referenced relative paths against the locator's directory in the same filesystem; never convert a resource locator to a host path.";
+function unescapeXmlText(value) {
+  return value.replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&gt;/g, ">").replace(/&lt;/g, "<").replace(/&amp;/g, "&");
+}
+function escapeXmlText(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function projectSkillResourceLocations(systemPrompt, locate) {
+  let projected = false;
+  const output = systemPrompt.replace(/<location>([^<]*)<\/location>/g, (match, encodedPath) => {
+    const resource = locate(unescapeXmlText(encodedPath));
+    if (!resource) return match;
+    projected = true;
+    return `<location>${escapeXmlText(JSON.stringify(resource))}</location>`;
+  });
+  if (!projected) return systemPrompt;
+  return output.replace(PI_RELATIVE_SKILL_PATH_GUIDANCE, RESOURCE_RELATIVE_SKILL_PATH_GUIDANCE);
+}
+function buildSkillResourceProjectionExtension(locate) {
+  return (pi) => {
+    pi.on("before_agent_start", async (event) => ({
+      systemPrompt: projectSkillResourceLocations(event.systemPrompt, locate)
+    }));
+  };
+}
 function buildToolErrorResultExtension() {
   return (pi) => {
     pi.on("tool_result", async (event) => {
@@ -2084,10 +2110,12 @@ function createPiCodingAgentHarness(opts) {
     const dynamicPromptExtension = opts.systemPromptDynamic ? buildDynamicPromptExtension(opts.systemPromptDynamic) : void 0;
     const agentDir = getAgentDir2();
     const toolErrorResultExtension = buildToolErrorResultExtension();
+    const skillResourceProjectionExtension = pi.locateSkillResource ? buildSkillResourceProjectionExtension(pi.locateSkillResource) : void 0;
     const extensionFactories = [
       toolErrorResultExtension,
       ...dynamicPromptExtension ? [dynamicPromptExtension] : [],
-      ...pi.extensionFactories ?? []
+      ...pi.extensionFactories ?? [],
+      ...skillResourceProjectionExtension ? [skillResourceProjectionExtension] : []
     ];
     const settingsManager = createResourceSettingsManager(
       opts.cwd,
@@ -2287,6 +2315,7 @@ export {
   mergePiPackageSources,
   createResourceSettingsManager,
   withPiHarnessDefaults,
+  projectSkillResourceLocations,
   deriveSourcePlugin,
   createPiCodingAgentHarness
 };

package/dist/{chunk-CXMM24NW.js → chunk-ZOHN72OS.js}

@@ -7,7 +7,7 @@ import {
   readConfiguredDefaultModel,
   registerConfiguredModelProviders,
   withPiHarnessDefaults
-} from "./chunk-WC5KBGP2.js";
+} from "./chunk-GRMDMWBW.js";
 import {
   AGENT_KNOWLEDGE_FILESYSTEM_ID,
   AgentDefinitionValidationError,
@@ -7931,7 +7931,7 @@ async function buildAgentComposition(input) {
     sessionNamespace: configuredNamespace,
     sessionDir: runtimeScope.sessionDir ?? factoryInput.sessionDir
   }) : async (factoryInput) => {
-    const { createPiCodingAgentHarness } = await import("./createHarness-PW3A2MRB.js");
+    const { createPiCodingAgentHarness } = await import("./createHarness-5TEXLUYX.js");
     return createPiCodingAgentHarness({
       ...factoryInput,
       pi,
@@ -12159,7 +12159,6 @@ function createPiResourceDigestInput(input) {
     additionalSkillPaths: uniqueStrings(input.resourceSets.flatMap((set) => set.additionalSkillPaths ?? [])),
     packages: compactPiPackages(input.resourceSets.flatMap((set) => set.packages ?? [])),
     extensionPaths: uniqueStrings(input.resourceSets.flatMap((set) => set.extensionPaths ?? [])),
-    allowInternalSymlinks: input.allowInternalSymlinks,
     authorizedRoots: uniqueStrings([
       piCwd,
       piAgentDir,
@@ -12183,14 +12182,7 @@ async function digestPiResourceInputs(input) {
     throw stableError(ErrorCode.enum.CONFIG_INVALID, 400, "Pi resource digest requires at least one independently authorized root");
   }
   const limits = normalizeLimits(input.limits);
-  const state = {
-    hash,
-    limits,
-    authorizedRoots,
-    allowInternalSymlinks: input.allowInternalSymlinks ?? false,
-    nodes: 0,
-    bytes: 0
-  };
+  const state = { hash, limits, authorizedRoots, nodes: 0, bytes: 0 };
   frameString(hash, "format", FORMAT_VERSION);
   frameString(hash, "pi-cwd", piCwd);
   frameString(hash, "project-settings-dir", projectSettingsDir);
@@ -12263,7 +12255,7 @@ function packageDescriptor(source) {
 async function hashResourceCollection(state, baseDir, kind, paths, digestContainingArtifact) {
   for (const path of [...new Set(paths)].sort()) {
     const absolutePath = resolvePiPath(path, baseDir);
-    await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots, state.allowInternalSymlinks);
+    await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots);
     try {
       await lstat4(absolutePath);
     } catch (error) {
@@ -12346,7 +12338,7 @@ async function findContainingArtifactRoot(path, authorizedRoots) {
 }
 async function hashLocalResource(state, path, logicalPath, depth) {
   const absolutePath = resolve8(path);
-  await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots, state.allowInternalSymlinks);
+  await assertContainedWithoutSymlinks(absolutePath, state.authorizedRoots);
   if (depth > state.limits.maxDepth) {
     throw limitError(`Pi resource tree exceeds maximum depth ${state.limits.maxDepth}`);
   }
@@ -12365,16 +12357,7 @@ async function hashLocalResource(state, path, logicalPath, depth) {
     throw limitError(`Pi resource tree exceeds maximum node count ${state.limits.maxFiles}`);
   }
   if (stat7.isSymbolicLink()) {
-    if (!state.allowInternalSymlinks) {
-      throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${absolutePath}`);
-    }
-    const target = await realpath5(absolutePath);
-    if (!mostSpecificContainingRoot(target, state.authorizedRoots)) {
-      throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlink resolves outside authorized roots: ${absolutePath}`);
-    }
-    frameString(state.hash, "symlink-target", target);
-    await hashLocalResource(state, target, logicalPath, depth);
-    return;
+    throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${absolutePath}`);
   }
   if (stat7.isDirectory()) {
     frameString(state.hash, "directory", logicalPath);
@@ -12448,7 +12431,7 @@ async function hashLocalResource(state, path, logicalPath, depth) {
 function assertSameFile(before, after, path) {
   if (before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs) throw changedError(path);
 }
-async function assertContainedWithoutSymlinks(path, roots, allowInternalSymlinks = false) {
+async function assertContainedWithoutSymlinks(path, roots) {
   const root = mostSpecificContainingRoot(path, roots);
   if (!root) {
     throw stableError(ErrorCode.enum.PATH_ESCAPE, 403, `Pi resource path is outside authorized roots: ${path}`);
@@ -12461,13 +12444,7 @@ async function assertContainedWithoutSymlinks(path, roots, allowInternalSymlinks
     current = resolve8(current, segment);
     try {
       if ((await lstat4(current)).isSymbolicLink()) {
-        if (!allowInternalSymlinks) {
-          throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${current}`);
-        }
-        const target = await realpath5(current);
-        if (!mostSpecificContainingRoot(target, roots)) {
-          throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlink resolves outside authorized roots: ${current}`);
-        }
+        throw stableError(ErrorCode.enum.PATH_SYMLINK_ESCAPE, 403, `Pi resource symlinks are not allowed: ${current}`);
       }
     } catch (error) {
       if (isMissing(error)) return;

package/dist/{createHarness-PW3A2MRB.js → createHarness-5TEXLUYX.js}

@@ -3,8 +3,9 @@ import {
   createResourceSettingsManager,
   deriveSourcePlugin,
   mergePiPackageSources,
+  projectSkillResourceLocations,
   withPiHarnessDefaults
-} from "./chunk-WC5KBGP2.js";
+} from "./chunk-GRMDMWBW.js";
 import "./chunk-4IQ4HHBG.js";
 import "./chunk-VXF5DWS6.js";
 export {
@@ -12,5 +13,6 @@ export {
   createResourceSettingsManager,
   deriveSourcePlugin,
   mergePiPackageSources,
+  projectSkillResourceLocations,
   withPiHarnessDefaults
 };

package/dist/front/index.d.ts

@@ -462,6 +462,7 @@ declare class RemotePiSession {
     private sessionUrl;
     private addressedCommandPayload;
     private dispatchProtocolError;
+    private dispatchTerminalSessionError;
     private recordEventType;
     private recordLargeStateWarning;
     private clearReconnectTimer;
@@ -695,6 +696,8 @@ interface PiChatPanelProps<TComposerBlocker extends ComposerBlocker = ComposerBl
     allowPromptDuringInitialHydration?: boolean;
     workspaceWarmupStatus?: ChatPanelWorkspaceWarmupStatus;
     onSessionReset?: () => void | Promise<void>;
+    /** Creates and selects a session when the host controls sessionId. */
+    onCreateSession?: () => void | Promise<void>;
     onBeforeSubmit?: (draft: string, context: ChatSubmitContext) => false | void | boolean | Promise<false | void | boolean>;
     onReloadAgentPlugins?: () => Promise<AgentPluginReloadResult | string>;
     onCommandResult?: (message: string) => void;
@@ -720,7 +723,7 @@ interface PiChatPanelProps<TComposerBlocker extends ComposerBlocker = ComposerBl
      * knowing what the code means or what the action does. */
     renderNoticeAction?: (notice: PiChatRuntimeNotice) => ReactNode;
 }
-declare function PiChatPanel<TComposerBlocker extends ComposerBlocker = ComposerBlocker>({ sessionId, agentTypeId, extraCommands, apiBaseUrl, workspaceId, storageScope, requestHeaders, storage, fetch, className, chrome, debug, showSessions, hotReloadEnabled, suggestions, emptyState, emptyPlacement, composerPlaceholder, initialDraft, autoSubmitInitialDraft, onDraftRestored, onAutoSubmitInitialDraftAccepted, onAutoSubmitInitialDraftSettled, model, defaultModel, availableModels, hideDefaultModelOption, hideComposerSettings, suppressPreSubmitCancelledWarning, thinkingLevel, thinkingControl, serverResourcesEnabled, mentionedFiles, commands, excludeBuiltinCommands, toolRenderers, createRemoteSession, remoteSessionOptions, hydrateMessages, allowPromptDuringInitialHydration, workspaceWarmupStatus, onSessionReset, onBeforeSubmit, onReloadAgentPlugins, onCommandResult, onComposerWarning, onMentionedFilesConsumed, onPromptSubmitStarted, onData, onOpenArtifact, composerBlockers, onComposerStop, onComposerBlockerAction, onTurnComplete, renderNoticeAction, }: PiChatPanelProps<TComposerBlocker>): react.JSX.Element;
+declare function PiChatPanel<TComposerBlocker extends ComposerBlocker = ComposerBlocker>({ sessionId, agentTypeId, extraCommands, apiBaseUrl, workspaceId, storageScope, requestHeaders, storage, fetch, className, chrome, debug, showSessions, hotReloadEnabled, suggestions, emptyState, emptyPlacement, composerPlaceholder, initialDraft, autoSubmitInitialDraft, onDraftRestored, onAutoSubmitInitialDraftAccepted, onAutoSubmitInitialDraftSettled, model, defaultModel, availableModels, hideDefaultModelOption, hideComposerSettings, suppressPreSubmitCancelledWarning, thinkingLevel, thinkingControl, serverResourcesEnabled, mentionedFiles, commands, excludeBuiltinCommands, toolRenderers, createRemoteSession, remoteSessionOptions, hydrateMessages, allowPromptDuringInitialHydration, workspaceWarmupStatus, onSessionReset, onCreateSession, onBeforeSubmit, onReloadAgentPlugins, onCommandResult, onComposerWarning, onMentionedFilesConsumed, onPromptSubmitStarted, onData, onOpenArtifact, composerBlockers, onComposerStop, onComposerBlockerAction, onTurnComplete, renderNoticeAction, }: PiChatPanelProps<TComposerBlocker>): react.JSX.Element;
 
 type AddressedAgentOption = Pick<AgentSummary, 'agentTypeId' | 'label' | 'description' | 'pluginIds'>;
 interface UseAddressedAgentSelectionOptions {

package/dist/front/index.js

@@ -75,6 +75,7 @@ function rawWorkspaceFileUrl(path, opts) {
 
 // src/front/chat/PiChatPanel.tsx
 import { lazy, Suspense, useCallback as useCallback18, useEffect as useEffect21, useMemo as useMemo16, useRef as useRef18, useState as useState20 } from "react";
+import { Button as Button12 } from "@hachej/boring-ui-kit";
 
 // src/front/ArtifactOpenContext.tsx
 import { createContext, useContext } from "react";
@@ -3412,6 +3413,71 @@ function messageCreatedAtMs(message) {
   return Number.isFinite(timestamp) ? timestamp : void 0;
 }
 
+// src/front/chat/gatewayResponseError.ts
+var RUNTIME_SCOPE_MISMATCH_MESSAGE = "This chat belongs to a previous runtime configuration and can no longer be changed.";
+var GatewayResponseError = class extends Error {
+  constructor(status, message, code3, details, body, operation) {
+    super(message);
+    this.status = status;
+    this.code = code3;
+    this.details = details;
+    this.body = body;
+    this.operation = operation;
+    this.name = "GatewayResponseError";
+    this.errorCode = code3;
+  }
+  status;
+  code;
+  details;
+  body;
+  operation;
+  errorCode;
+};
+async function gatewayResponseError(response, fallbackMessage, operation) {
+  const body = await safeReadJson(response);
+  return gatewayResponseErrorFromBody(response.status, body, fallbackMessage, operation);
+}
+function gatewayResponseErrorFromBody(status, body, fallbackMessage, operation) {
+  const payload = errorPayload(body);
+  const code3 = gatewayResponseErrorCode(payload?.code);
+  const serverMessage = typeof payload?.message === "string" && payload.message.trim().length > 0 ? payload.message : fallbackMessage;
+  const message = code3 === AgentGatewayErrorCode.AGENT_SESSION_RUNTIME_SCOPE_MISMATCH ? RUNTIME_SCOPE_MISMATCH_MESSAGE : serverMessage;
+  const details = isJsonValue(payload?.details) ? payload.details : void 0;
+  return new GatewayResponseError(status, message, code3, details, body, operation);
+}
+function gatewayResponseErrorCode(value) {
+  const sharedCode = ErrorCode.safeParse(value);
+  if (sharedCode.success) return sharedCode.data;
+  return typeof value === "string" && AGENT_GATEWAY_ERROR_CODES.includes(value) ? value : void 0;
+}
+function errorResponseCode(error) {
+  if (error instanceof GatewayResponseError) return error.code;
+  const record = typeof error === "object" && error !== null ? error : void 0;
+  return gatewayResponseErrorCode(record?.code ?? record?.errorCode);
+}
+function isRuntimeScopeMismatchError(error) {
+  return errorResponseCode(error) === AgentGatewayErrorCode.AGENT_SESSION_RUNTIME_SCOPE_MISMATCH;
+}
+async function safeReadJson(response) {
+  const text = await response.text();
+  if (!text) return void 0;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return void 0;
+  }
+}
+function errorPayload(body) {
+  if (typeof body !== "object" || body === null) return void 0;
+  const record = body;
+  return typeof record.error === "object" && record.error !== null ? record.error : record;
+}
+function isJsonValue(value) {
+  if (value === null || ["string", "number", "boolean"].includes(typeof value)) return true;
+  if (Array.isArray(value)) return value.every(isJsonValue);
+  return typeof value === "object" && value !== null && Object.values(value).every(isJsonValue);
+}
+
 // src/front/chat/pi/piChatAssistantCommit.ts
 function commitFinalMessage(state, messageId, final) {
   const plan = buildAssistantCommitPlan(state, messageId, final);
@@ -3793,6 +3859,20 @@ function piChatReducer(state, action) {
           dismissible: true
         })
       };
+    case "terminal-session-error":
+      return {
+        ...state,
+        status: "error",
+        hydrated: true,
+        connection: { ...state.connection, state: "suspended" },
+        retryNotice: void 0,
+        notices: upsertNotice(state.notices, {
+          id: "terminal-session-error",
+          level: "error",
+          text: action.message,
+          errorCode: action.errorCode
+        })
+      };
     case "clear-notice":
       return { ...state, notices: state.notices.filter((notice) => notice.id !== action.id) };
   }
@@ -4718,6 +4798,10 @@ var RemotePiSession = class {
       this.connectEvents(snapshot.seq, generation);
     } catch (error) {
       if (!this.isHydrationActive(generation, hydrationRunId) || isAbortError(error)) return;
+      if (isRuntimeScopeMismatchError(error)) {
+        this.dispatchTerminalSessionError(error);
+        return;
+      }
       this.dispatchProtocolError(errorMessage(error, "Failed to hydrate Pi chat session state."));
       this.scheduleReconnect(generation);
     }
@@ -4772,7 +4856,7 @@ var RemotePiSession = class {
         return;
       }
       if (!response.ok) {
-        const body = await safeReadJson(response);
+        const body = await safeReadJson2(response);
         if (!this.isStreamActive(generation, runId)) {
           markOpen();
           return;
@@ -4784,8 +4868,18 @@ var RemotePiSession = class {
           markOpen();
           return;
         }
-        this.dispatchProtocolError(routeErrorMessage(body, `Pi chat event stream failed with HTTP ${response.status}.`));
-        this.scheduleReconnect(generation);
+        const responseError = gatewayResponseErrorFromBody(
+          response.status,
+          body,
+          `Pi chat event stream failed with HTTP ${response.status}.`,
+          "events"
+        );
+        if (isRuntimeScopeMismatchError(responseError)) {
+          this.dispatchTerminalSessionError(responseError);
+        } else {
+          this.dispatchProtocolError(responseError.message);
+          this.scheduleReconnect(generation);
+        }
         markOpen();
         return;
       }
@@ -4907,8 +5001,8 @@ var RemotePiSession = class {
     }, timeoutMs);
     try {
       const response = await this.fetchImpl(url, { ...init, signal: controller.signal });
-      const body = await safeReadJson(response);
-      if (!response.ok) throw new RemotePiSessionHttpError(response.status, routeErrorMessage(body, `HTTP ${response.status}`), body, routeErrorCode(body));
+      const body = await safeReadJson2(response);
+      if (!response.ok) throw gatewayResponseErrorFromBody(response.status, body, `HTTP ${response.status}`, url);
       return body;
     } catch (error) {
       if (timedOut) throw new Error(`Request to ${url} timed out after ${timeoutMs}ms.`);
@@ -4972,6 +5066,20 @@ var RemotePiSession = class {
     const error = { code: ErrorCode.enum.INTERNAL_ERROR, message, retryable: true };
     this.store.dispatch({ type: "protocol-error", error }, { flush: true });
   }
+  dispatchTerminalSessionError(error) {
+    if (this.disposed) return;
+    const errorCode = errorResponseCode(error);
+    if (!errorCode) {
+      this.dispatchProtocolError(errorMessage(error, "Chat session is unavailable."));
+      return;
+    }
+    this.suspendStream();
+    this.store.dispatch({
+      type: "terminal-session-error",
+      message: errorMessage(error, "Chat session is unavailable."),
+      errorCode
+    }, { flush: true });
+  }
   recordEventType(type) {
     this.recentEventTypes.push(type);
     if (this.recentEventTypes.length > EVENT_TYPE_RING_LIMIT) this.recentEventTypes.shift();
@@ -5026,22 +5134,8 @@ function addressedSnapshot(value) {
 function createRemotePiSession(options) {
   return new RemotePiSession(options);
 }
-var RemotePiSessionHttpError = class extends Error {
-  constructor(status, message, body, errorCode) {
-    super(message);
-    this.status = status;
-    this.body = body;
-    this.errorCode = errorCode;
-    this.name = "RemotePiSessionHttpError";
-  }
-  status;
-  body;
-  errorCode;
-};
 function piChatErrorCode(error) {
-  if (error instanceof RemotePiSessionHttpError) return error.errorCode;
-  const parsed = ErrorCode.safeParse(error?.errorCode);
-  return parsed.success ? parsed.data : void 0;
+  return errorResponseCode(error);
 }
 function toOptimisticUserMessage(payload) {
   const displayText = payload.displayMessage ?? payload.message;
@@ -5065,7 +5159,7 @@ function toOptimisticUserMessage(payload) {
     ]
   };
 }
-async function safeReadJson(response) {
+async function safeReadJson2(response) {
   const text = await response.text();
   if (!text) return void 0;
   try {
@@ -5074,19 +5168,6 @@ async function safeReadJson(response) {
     return void 0;
   }
 }
-function routeErrorMessage(body, fallback) {
-  if (typeof body !== "object" || body === null) return fallback;
-  const error = body.error;
-  const payload = typeof error === "object" && error !== null ? error : body;
-  return typeof payload.message === "string" && payload.message ? payload.message : fallback;
-}
-function routeErrorCode(body) {
-  if (typeof body !== "object" || body === null) return void 0;
-  const error = body.error;
-  const payload = typeof error === "object" && error !== null ? error : body;
-  const parsed = ErrorCode.safeParse(payload.code);
-  return parsed.success ? parsed.data : void 0;
-}
 function errorMessage(error, fallback) {
   return error instanceof Error && error.message ? error.message : fallback;
 }
@@ -10480,6 +10561,7 @@ function PiChatPanel({
   allowPromptDuringInitialHydration = false,
   workspaceWarmupStatus,
   onSessionReset,
+  onCreateSession,
   onBeforeSubmit,
   onReloadAgentPlugins,
   onCommandResult,
@@ -10734,12 +10816,33 @@ function PiChatPanel({
     });
     setLocalNotices((previous) => previous.filter((notice) => notice.id !== id));
   }, []);
+  const createSessionInFlightRef = useRef18(null);
+  const [creatingSession, setCreatingSession] = useState20(false);
   const createSession = useCallback18(() => {
-    if (externalSessionId) return;
-    void sessions.create().catch((error) => {
+    if (createSessionInFlightRef.current) return createSessionInFlightRef.current;
+    if (externalSessionId && !onCreateSession) return Promise.resolve();
+    setCreatingSession(true);
+    const operation = (async () => {
+      await Promise.resolve();
+      if (externalSessionId) await onCreateSession?.();
+      else await sessions.create();
+    })().catch((error) => {
       addLocalNotice({ id: "session-create-error", level: "error", text: errorMessage2(error, "Could not create a chat session."), dismissible: true });
+    }).finally(() => {
+      if (createSessionInFlightRef.current === operation) createSessionInFlightRef.current = null;
+      setCreatingSession(false);
     });
-  }, [addLocalNotice, externalSessionId, sessions.create]);
+    createSessionInFlightRef.current = operation;
+    return operation;
+  }, [addLocalNotice, externalSessionId, onCreateSession, sessions.create]);
+  const renderRuntimeNoticeAction = useCallback18((notice) => {
+    const hostAction = renderNoticeAction?.(notice);
+    if (hostAction != null) return hostAction;
+    if (notice.errorCode === AgentGatewayErrorCode.AGENT_SESSION_RUNTIME_SCOPE_MISMATCH && (!externalSessionId || onCreateSession)) {
+      return /* @__PURE__ */ jsx36(Button12, { type: "button", size: "sm", variant: "outline", disabled: creatingSession, onClick: createSession, children: creatingSession ? "Starting new chat\u2026" : "Start new chat" });
+    }
+    return null;
+  }, [createSession, creatingSession, externalSessionId, onCreateSession, renderNoticeAction]);
   useEffect21(() => {
     if (externalSessionId || sessionsLoading || sessionsError || activeSessionId || sessionList.length > 0) return;
     if (resetInProgressRef.current) return;
@@ -11350,7 +11453,7 @@ function PiChatPanel({
                   onMentionActivate: activateAssistantMention,
                   runtimeNotices,
                   onDismissNotice: clearLocalNotice,
-                  renderNoticeAction,
+                  renderNoticeAction: renderRuntimeNoticeAction,
                   onScrollToBottomReady: (scrollToBottom) => {
                     scrollToBottomRef.current = scrollToBottom;
                   },
@@ -11396,73 +11499,6 @@ function PiChatPanel({
 
 // src/front/chat/useAddressedAgentSelection.ts
 import { useCallback as useCallback19, useEffect as useEffect22, useMemo as useMemo17, useState as useState21 } from "react";
-
-// src/front/chat/gatewayResponseError.ts
-var RUNTIME_SCOPE_MISMATCH_MESSAGE = "This chat belongs to a previous runtime configuration and can no longer be changed.";
-var GatewayResponseError = class extends Error {
-  constructor(status, message, code3, details, body, operation) {
-    super(message);
-    this.status = status;
-    this.code = code3;
-    this.details = details;
-    this.body = body;
-    this.operation = operation;
-    this.name = "GatewayResponseError";
-    this.errorCode = code3;
-  }
-  status;
-  code;
-  details;
-  body;
-  operation;
-  errorCode;
-};
-async function gatewayResponseError(response, fallbackMessage, operation) {
-  const body = await safeReadJson2(response);
-  return gatewayResponseErrorFromBody(response.status, body, fallbackMessage, operation);
-}
-function gatewayResponseErrorFromBody(status, body, fallbackMessage, operation) {
-  const payload = errorPayload(body);
-  const code3 = gatewayResponseErrorCode(payload?.code);
-  const serverMessage = typeof payload?.message === "string" && payload.message.trim().length > 0 ? payload.message : fallbackMessage;
-  const message = code3 === AgentGatewayErrorCode.AGENT_SESSION_RUNTIME_SCOPE_MISMATCH ? RUNTIME_SCOPE_MISMATCH_MESSAGE : serverMessage;
-  const details = isJsonValue(payload?.details) ? payload.details : void 0;
-  return new GatewayResponseError(status, message, code3, details, body, operation);
-}
-function gatewayResponseErrorCode(value) {
-  const sharedCode = ErrorCode.safeParse(value);
-  if (sharedCode.success) return sharedCode.data;
-  return typeof value === "string" && AGENT_GATEWAY_ERROR_CODES.includes(value) ? value : void 0;
-}
-function errorResponseCode(error) {
-  if (error instanceof GatewayResponseError) return error.code;
-  const record = typeof error === "object" && error !== null ? error : void 0;
-  return gatewayResponseErrorCode(record?.code ?? record?.errorCode);
-}
-function isRuntimeScopeMismatchError(error) {
-  return errorResponseCode(error) === AgentGatewayErrorCode.AGENT_SESSION_RUNTIME_SCOPE_MISMATCH;
-}
-async function safeReadJson2(response) {
-  const text = await response.text();
-  if (!text) return void 0;
-  try {
-    return JSON.parse(text);
-  } catch {
-    return void 0;
-  }
-}
-function errorPayload(body) {
-  if (typeof body !== "object" || body === null) return void 0;
-  const record = body;
-  return typeof record.error === "object" && record.error !== null ? record.error : record;
-}
-function isJsonValue(value) {
-  if (value === null || ["string", "number", "boolean"].includes(typeof value)) return true;
-  if (Array.isArray(value)) return value.every(isJsonValue);
-  return typeof value === "object" && value !== null && Object.values(value).every(isJsonValue);
-}
-
-// src/front/chat/useAddressedAgentSelection.ts
 var inFlightDiscoveries = /* @__PURE__ */ new WeakMap();
 function useAddressedAgentSelection({
   apiBaseUrl,

package/dist/server/agent-host/testing/gatewayConformance.d.ts

@@ -1,5 +1,5 @@
 import { b as AgentGateway, c as AuthorizedAgentScope, d as AgentSessionRef, e as AgentSessionActivity } from '../../../errors-cNC4HMpV.js';
-import { A as AgentGatewayEffect } from '../../../types-D_SD-7_l.js';
+import { A as AgentGatewayEffect } from '../../../types-BPzq-RwN.js';
 import '../../../piChatEvent-B3ehh9V0.js';
 import 'zod';
 import 'fastify';

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
-import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionFileRef, C as ConfiguredAgentHostAgentSpec, h as AgentHostAgentSpec, i as RuntimeBundle, j as PiHarnessOptions, k as AgentMeteringSink, l as RuntimeFilesystemBinding, m as CreatedAgentHost, n as MeteringErrorLogger, o as ReadyStatusTracker, p as ResolvedAgentRuntimeScope, q as CreateAgentHostOptions, r as CompiledAgentHostAgentSpec, s as AgentRequestLedger, t as AgentEffectAdmission, u as AuthorizedEnvironmentIntent, v as AgentHostEnvironmentScope, w as AgentRequestKey, x as AgentRequestLedgerPrepareResult, y as AgentRequestFailure, z as AgentRequestLedgerRecord, D as AgentFleetCompiler, E as AgentRequestTarget, F as RuntimeFilesystemAccessDecision } from '../types-D_SD-7_l.js';
-export { A as AgentGatewayEffect, G as AgentHostDescription, H as AgentHostDirectProjectionOptions, I as AgentHostDispatcherRunInput, J as AgentHostEnvironmentLease, K as AgentHostHandle, L as LegacyDefaultAgentHostSpec, N as MeteringReleaseInput, O as MeteringReleaseReason, Q as MeteringReservationResult, S as MeteringReserveInput, T as MeteringRunKind, U as MeteringRunScope, V as MeteringRunStatus, X as MeteringSettleInput, Y as MeteringUsage, Z as MeteringUsageInput, _ as PI_PACKAGE_RESOURCE_FILTERS, $ as PiExtensionFactory, a0 as PluginSkillSource, a1 as ResolvedEnvironmentScope, a2 as RuntimeFilesystemBindingOperations, a3 as RuntimeNodePackageSpec, a4 as RuntimeProvisioningContribution, a5 as RuntimePythonSpec, a6 as RuntimeTemplateContribution, a7 as WorkspaceProvisioningExecResult, a8 as compactPiPackages, a9 as mergePiPackageSources, aa as normalizeMeteringUsage, ab as piPackageSourceKey } from '../types-D_SD-7_l.js';
+import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionFileRef, C as ConfiguredAgentHostAgentSpec, h as AgentHostAgentSpec, i as RuntimeBundle, j as PiHarnessOptions, k as AgentMeteringSink, l as RuntimeFilesystemBinding, m as CreatedAgentHost, n as MeteringErrorLogger, o as ReadyStatusTracker, p as ResolvedAgentRuntimeScope, q as CreateAgentHostOptions, r as CompiledAgentHostAgentSpec, s as AgentRequestLedger, t as AgentEffectAdmission, u as AuthorizedEnvironmentIntent, v as AgentHostEnvironmentScope, w as AgentRequestKey, x as AgentRequestLedgerPrepareResult, y as AgentRequestFailure, z as AgentRequestLedgerRecord, D as AgentFleetCompiler, E as AgentRequestTarget, F as RuntimeFilesystemAccessDecision } from '../types-BPzq-RwN.js';
+export { A as AgentGatewayEffect, G as AgentHostDescription, H as AgentHostDirectProjectionOptions, I as AgentHostDispatcherRunInput, J as AgentHostEnvironmentLease, K as AgentHostHandle, L as LegacyDefaultAgentHostSpec, N as MeteringReleaseInput, O as MeteringReleaseReason, Q as MeteringReservationResult, S as MeteringReserveInput, T as MeteringRunKind, U as MeteringRunScope, V as MeteringRunStatus, X as MeteringSettleInput, Y as MeteringUsage, Z as MeteringUsageInput, _ as PI_PACKAGE_RESOURCE_FILTERS, $ as PiExtensionFactory, a0 as PluginSkillSource, a1 as ResolvedEnvironmentScope, a2 as RuntimeFilesystemBindingOperations, a3 as RuntimeNodePackageSpec, a4 as RuntimeProvisioningContribution, a5 as RuntimePythonSpec, a6 as RuntimeTemplateContribution, a7 as WorkspaceProvisioningExecResult, a8 as compactPiPackages, a9 as mergePiPackageSources, aa as normalizeMeteringUsage, ab as piPackageSourceKey } from '../types-BPzq-RwN.js';
 import { E as ExecOptions, a as ExecResult, W as WorkspaceChangeEvent, b as Workspace, S as Sandbox } from '../sandbox-KQiEdz4W.js';
 export { R as RuntimeFilesystemCapability } from '../sandbox-KQiEdz4W.js';
 import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult, b as RemoteWorkerExecRequest } from '../middleware-Cq_cYHjJ.js';
@@ -1356,8 +1356,6 @@ interface PiResourceDigestInput {
     readonly extensionPaths?: readonly string[];
     /** Lexical roots explicitly authorized by the embedding Workspace/CLI. */
     readonly authorizedRoots: readonly string[];
-    /** CLI workspaces may contain repo-managed symlinks (e.g. .pi/skills/*). */
-    readonly allowInternalSymlinks?: boolean;
     readonly limits?: Partial<PiResourceDigestLimits>;
 }
 interface PiResourceSet {
@@ -1374,7 +1372,6 @@ declare function createPiResourceDigestInput(input: {
     readonly noSkills?: boolean;
     readonly resourceSets: readonly PiResourceSet[];
     readonly authorizedRoots: readonly string[];
-    readonly allowInternalSymlinks?: boolean;
     readonly limits?: Partial<PiResourceDigestLimits>;
 }): PiResourceDigestInput;
 /** Bounded asynchronous content identity for the exact Pi resources considered by a reload candidate. */

package/dist/server/index.js

@@ -88,14 +88,14 @@ import {
   shareResourceUri,
   withResolvedCredential,
   withRuntimeEnvContributions
-} from "../chunk-CXMM24NW.js";
+} from "../chunk-ZOHN72OS.js";
 import {
   PI_PACKAGE_RESOURCE_FILTERS,
   compactPiPackages,
   createResourceSettingsManager,
   mergePiPackageSources,
   piPackageSourceKey
-} from "../chunk-WC5KBGP2.js";
+} from "../chunk-GRMDMWBW.js";
 import "../chunk-3OEDBRKY.js";
 import "../chunk-4IQ4HHBG.js";
 import "../chunk-WSQ5QNIY.js";

package/dist/server/worker/index.js

@@ -1,8 +1,8 @@
 import {
   WORKER_INTERNAL_TOKEN_HEADER,
   constantTimeTokenEqual
-} from "../../chunk-CXMM24NW.js";
-import "../../chunk-WC5KBGP2.js";
+} from "../../chunk-ZOHN72OS.js";
+import "../../chunk-GRMDMWBW.js";
 import "../../chunk-3OEDBRKY.js";
 import "../../chunk-4IQ4HHBG.js";
 import "../../chunk-WSQ5QNIY.js";

package/dist/{types-D_SD-7_l.d.ts → types-BPzq-RwN.d.ts}

@@ -567,6 +567,11 @@ declare function mergePiPackageSources(base?: PiPackageSource[], additional?: Pi
 
 interface PiHarnessOptions {
     noContextFiles?: boolean;
+    /** Projects server-internal skill files to model-visible resource locators. */
+    locateSkillResource?: (filePath: string) => {
+        filesystem: string;
+        path: string;
+    } | undefined;
     noSkills?: boolean;
     /** Disable ambient Pi extensions (required when tools execute in a remote runtime). */
     noExtensions?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.98",
+  "version": "0.1.100",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -96,9 +96,9 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-bash": "0.1.98",
-    "@hachej/boring-sandbox": "0.1.98",
-    "@hachej/boring-ui-kit": "0.1.98"
+    "@hachej/boring-sandbox": "0.1.100",
+    "@hachej/boring-ui-kit": "0.1.100",
+    "@hachej/boring-bash": "0.1.100"
   },
   "devDependencies": {
     "@vercel/sandbox": "2.9.2",