@hachej/boring-core 0.1.79 → 0.1.81

package/dist/app/server/index.js

@@ -773,19 +773,36 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     async resolve(actor, resolveOptions) {
       if (!workspaceAgentDispatcherResolver) throw new Error("workspace agent dispatcher is not ready");
       return await workspaceAgentDispatcherResolver.resolve(actor, resolveOptions);
+    },
+    async resolveWithWorkspace(actor, resolveOptions) {
+      if (!workspaceAgentDispatcherResolver?.resolveWithWorkspace) {
+        throw new Error("workspace agent dispatcher binding is not ready");
+      }
+      return await workspaceAgentDispatcherResolver.resolveWithWorkspace(actor, resolveOptions);
     }
   };
   const basePluginResolveContext = {
     workspaceRoot: pluginWorkspaceRoot,
     bridge: createUnavailableCorePluginBridge()
   };
-  const trustedPluginResolveContext = options.trustedPluginActorResolver ? {
+  const trustedPluginActorResolver = options.trustedPluginActorResolver ?? (async (request) => {
+    const workspaceId = await resolveAuthorizedWorkspaceId(request, workspaceStore);
+    const userId = request.user?.id;
+    if (!userId) throw httpError("authentication required", 401);
+    return { workspaceId, userId };
+  });
+  const trustedPluginResolveContext = {
     ...basePluginResolveContext,
     trusted: {
       workspaceAgentDispatcherResolver: trustedDispatcherProxy,
-      actorResolver: options.trustedPluginActorResolver
+      actorResolver: trustedPluginActorResolver,
+      sql,
+      actorVerifier: async (actor) => Boolean(
+        await workspaceStore.get(actor.workspaceId) && await workspaceStore.isMember(actor.workspaceId, actor.userId) && await userStore.getById(actor.userId)
+      ),
+      hostedAutomationTriggerToken: process.env.BORING_AUTOMATION_TRIGGER_TOKEN
     }
-  } : basePluginResolveContext;
+  };
   const resolvedPlugins = await Promise.all(
     pluginEntries.map(async (entry) => {
       const plugin = await resolveOnePluginEntry(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.79",
+  "version": "0.1.81",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -79,9 +79,9 @@
     "react-router-dom": "^7.18.0",
     "smol-toml": "^1.7.0",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.79",
-    "@hachej/boring-ui-kit": "0.1.79",
-    "@hachej/boring-workspace": "0.1.79"
+    "@hachej/boring-agent": "0.1.81",
+    "@hachej/boring-workspace": "0.1.81",
+    "@hachej/boring-ui-kit": "0.1.81"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",