@hachej/boring-workspace 0.1.35 → 0.1.37

package/dist/app-server.d.ts

@@ -1,10 +1,11 @@
 import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 export { PiPackageSource as WorkspacePiPackageSource } from '@hachej/boring-agent/server';
 import { FastifyInstance } from 'fastify';
-import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, d as createInMemoryBridge } from './createInMemoryBridge-zb8MpO60.js';
-export { e as ServerWorkspaceRuntimeProvisioningInput } from './createInMemoryBridge-zb8MpO60.js';
+import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, d as createInMemoryBridge } from './createInMemoryBridge-DSjZ9efK.js';
+export { e as ServerWorkspaceRuntimeProvisioningInput } from './createInMemoryBridge-DSjZ9efK.js';
 import './manifest-C2vVgH_e.js';
-import './ui-bridge-DFNem0df.js';
+import './agent-tool-CB0RQyx9.js';
+import './ui-bridge-LeBuZqfA.js';
 
 /**
  * Directory-source entry: `{ dir, options?, hotReload? }`. Resolved via
@@ -89,14 +90,6 @@ interface CreateWorkspaceAgentServerOptions extends WorkspaceAgentCreateOptions,
         force?: boolean;
     };
     validateUiPaths?: boolean;
-    /**
-     * Whether the canonical agent reload refreshes discovered package plugins.
-     * When true, chat `/reload` refreshes package front/Pi metadata and reports
-     * static-server restart warnings; dir-source server entries are re-imported
-     * for diagnostics only. When false, initial static discovery still runs, but
-     * dynamic Pi/system-prompt refresh is disabled. Defaults to true.
-     */
-    pluginHotReload?: boolean;
     /**
      * App-default plugin packages (by npm name OR absolute filesystem path).
      * Each entry is resolved at boot, registered as a Pi package (so Pi sees
@@ -112,28 +105,12 @@ interface CreateWorkspaceAgentServerOptions extends WorkspaceAgentCreateOptions,
      */
     defaultPluginPackages?: string[];
     /**
-     * Absolute path to the app's `package.json`. When passed, the workspace
-     * reads `package.json#boring.defaultPluginPackages: string[]` from it
-     * and merges those entries with anything passed in
-     * `defaultPluginPackages`. Relative entries in package.json resolve
-     * against the package.json's own directory.
-     *
-     * Example app `package.json`:
-     *
-     *     {
-     *       "name": "my-app",
-     *       "boring": {
-     *         "defaultPluginPackages": [
-     *           "@hachej/boring-ask-user",
-     *           "./src/plugins/playgroundDataCatalog"
-     *         ]
-     *       }
-     *     }
-     *
-     * Lets apps declare their plugin set in the canonical app manifest
-     * instead of inside the server boot path.
+     * The host app's package root. Anchors npm-name resolution of
+     * `defaultPluginPackages` at the app's own node_modules (in addition to a
+     * walk-up from `workspaceRoot`). Pass when the workspace root does not
+     * live under the app directory.
      */
-    appPackageJsonPath?: string;
+    appRoot?: string;
     /** Additional plugin collection roots to scan alongside workspace .pi/extensions and package/plugin-derived roots. */
     additionalBoringPluginDirs?: BoringPluginSourceInput[];
     /**
@@ -151,8 +128,6 @@ interface CreateWorkspaceAgentServerOptions extends WorkspaceAgentCreateOptions,
     installPluginAuthoring?: boolean;
     /** Optional host-owned front-target override for boring plugin list/event payloads. */
     boringPluginFrontTargetResolver?: BoringPluginFrontTargetResolver;
-    /** Preserve legacy `/@fs/...` frontUrl payloads alongside frontTarget. Defaults to true. */
-    boringPluginIncludeLegacyFrontUrl?: boolean;
 }
 declare const PLUGIN_AUTHORING_PROVISIONING_IDS: Set<string>;
 declare function omitPluginAuthoringProvisioning(plugins: WorkspaceRuntimeProvisioningInput[]): WorkspaceRuntimeProvisioningInput[];
@@ -190,15 +165,27 @@ declare function createWorkspaceAgentServer(opts?: CreateWorkspaceAgentServerOpt
 
 interface ResolveDefaultWorkspacePluginPackagePathsOptions {
     workspaceRoot?: string;
+    /**
+     * Internal plugin packages, listed explicitly in host boot code — npm
+     * package names (resolved via require.resolve) or absolute directory
+     * paths. Mirrors the front side, where internal plugins are statically
+     * imported in the app: both sides declare the same explicit list.
+     */
     defaultPluginPackages?: string[];
-    appPackageJsonPath?: string;
+    /**
+     * Directory whose node_modules anchors npm-name resolution (the host
+     * package's own root). Defaults to walking up from `workspaceRoot`,
+     * then from this module's location.
+     */
+    anchorDir?: string;
 }
 /**
- * Resolve app-default plugin package declarations exactly once for app hosts.
- * This is shared by standalone workspace-agent and core composition so both
- * read `package.json#boring.defaultPluginPackages` with the same relative-path
- * and package-name semantics.
+ * Resolve each entry in `defaultPluginPackages` to an absolute package
+ * directory. Accepts either an npm-style name (resolved via
+ * `require.resolve('<name>/package.json')`) or an absolute filesystem
+ * path. THROWS on unresolved entries — a typo or missing dependency
+ * is an app boot-time error, not something to silently drop.
  */
-declare function resolveDefaultWorkspacePluginPackagePaths({ workspaceRoot, defaultPluginPackages, appPackageJsonPath, }?: ResolveDefaultWorkspacePluginPackagePathsOptions): string[];
+declare function resolveDefaultWorkspacePluginPackagePaths({ workspaceRoot, defaultPluginPackages, anchorDir, }?: ResolveDefaultWorkspacePluginPackagePathsOptions): string[];
 
 export { type CollectWorkspaceAgentServerPluginsOptions, type CreateWorkspaceAgentServerOptions, type DirPluginEntry, PLUGIN_AUTHORING_PROVISIONING_IDS, type PluginResolveContext, type ResolveDefaultWorkspacePluginPackagePathsOptions, type WorkspaceAgentPiOptions, type WorkspaceAgentServerPluginCollection, type WorkspaceAgentServerPluginContext, type WorkspacePluginEntry, type WorkspacePluginPackagePiSnapshot, WorkspaceProvisioningContribution, WorkspaceRouteContribution, type WorkspaceRuntimeProvisioningInput, buildWorkspaceContextPrompt, collectWorkspaceAgentServerPlugins, createWorkspaceAgentServer, hasDirServerPlugin, omitPluginAuthoringProvisioning, provisionWorkspaceAgentServer, readWorkspacePluginPackagePiSnapshot, readWorkspacePluginPackageRuntimePlugins, resolveDefaultWorkspacePluginPackagePaths, resolveOnePluginEntry };

package/dist/app-server.js

@@ -8,7 +8,7 @@ import {
   resolveMode,
   VERCEL_SANDBOX_WORKSPACE_ROOT
 } from "@hachej/boring-agent/server";
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5 } from "fs";
 import { dirname as dirname7, isAbsolute as isAbsolute5, join as join7, resolve as resolve7 } from "path";
 import { homedir } from "os";
 import { createRequire as createRequire4 } from "module";
@@ -987,7 +987,6 @@ var BoringPluginAssetManager = class {
   pluginDirs;
   errorRoot;
   frontTargetResolver;
-  includeLegacyFrontUrl;
   loaded = /* @__PURE__ */ new Map();
   revisions = /* @__PURE__ */ new Map();
   listeners = /* @__PURE__ */ new Set();
@@ -998,7 +997,16 @@ var BoringPluginAssetManager = class {
     this.pluginDirs = options.pluginDirs;
     this.errorRoot = options.errorRoot ?? join4(process.cwd(), ".pi", "extensions");
     this.frontTargetResolver = options.frontTargetResolver;
-    this.includeLegacyFrontUrl = options.includeLegacyFrontUrl ?? true;
+  }
+  /**
+   * Replace the scanned source roots. Lets hosts re-resolve discovery inputs
+   * (e.g. workspace `.pi/settings.json` package sources, which can gain
+   * entries after `boring-ui-plugin install`) before the next load() so
+   * `/reload` picks up newly installed plugin sources without a process
+   * restart.
+   */
+  setPluginDirs(pluginDirs) {
+    this.pluginDirs = pluginDirs;
   }
   preflight() {
     return preflightBoringPlugins(this.pluginDirs);
@@ -1006,6 +1014,17 @@ var BoringPluginAssetManager = class {
   list() {
     return [...this.loaded.values()].map((plugin) => this.toListEntry(plugin));
   }
+  /**
+   * Plugins whose front lifecycle the SSE channel owns. Internal plugins are
+   * app code — their front is statically bundled by the host app and must
+   * never be re-imported through the hot-reload pipeline (a second module
+   * instance would carry a fresh React context identity, breaking
+   * provider ↔ panel lookups). They are loaded server-side (routes, agent
+   * tools, Pi snapshot) but excluded from SSE replay and live events.
+   */
+  listExternal() {
+    return [...this.loaded.values()].filter((plugin) => plugin.source.kind === "external").map((plugin) => this.toListEntry(plugin));
+  }
   getError(pluginId) {
     const path = this.errorPath(pluginId);
     if (!path || !existsSync4(path)) return null;
@@ -1082,9 +1101,7 @@ ${prompts.join("\n\n")}` } : {}
         } catch {
         }
       }
-      const event = { type: "boring.plugin.unload", id, revision };
-      events.push(event);
-      this.emit(event);
+      this.record(events, { type: "boring.plugin.unload", id, revision }, previous?.source);
     }
     for (const plugin of nextPlugins) {
       try {
@@ -1115,22 +1132,18 @@ ${prompts.join("\n\n")}` } : {}
           boring: plugin.boring,
           version: plugin.version,
           revision,
-          ...this.frontUrlPayload(plugin.frontUrl),
           ...frontTarget ? { frontTarget } : {},
           ...requiresRestart.length > 0 ? { requiresRestart } : {}
         };
-        events.push(event);
-        this.emit(event);
+        this.record(events, event, plugin.source);
       } catch (error) {
         const revision = this.bumpRevision(plugin.id);
         const message = error instanceof Error ? error.stack ?? error.message : String(error);
         this.writeError(plugin.id, message);
-        const event = { type: "boring.plugin.error", id: plugin.id, revision, message };
         const loadError = { id: plugin.id, revision, message };
         this.lastErrors.set(plugin.id, loadError);
         errors.push(loadError);
-        events.push(event);
-        this.emit(event);
+        this.record(events, { type: "boring.plugin.error", id: plugin.id, revision, message }, plugin.source);
       }
     }
     return { loaded: this.list(), events, errors };
@@ -1163,16 +1176,14 @@ Plugin dir: ${error.pluginDir}`;
       ...plugin.pi ? { pi: plugin.pi } : {},
       version: plugin.version,
       revision: plugin.revision,
-      ...this.frontUrlPayload(plugin.frontUrl),
       ...plugin.frontTarget ? { frontTarget: plugin.frontTarget } : {}
     };
   }
-  frontUrlPayload(frontUrl) {
-    if (!this.includeLegacyFrontUrl || !frontUrl) return {};
-    return { frontUrl };
-  }
   resolveFrontTarget(plugin, revision) {
-    if (!plugin.frontPath || !this.frontTargetResolver) return void 0;
+    if (!plugin.frontPath) return void 0;
+    if (!this.frontTargetResolver) {
+      return plugin.frontUrl ? { kind: "module-url", entryUrl: plugin.frontUrl, revision } : void 0;
+    }
     const frontEntrySubpath = typeof plugin.boring.front === "string" ? plugin.boring.front.replace(/^\.\//, "") : normalizePluginSubpath(plugin.rootDir, plugin.frontPath);
     const frontTarget = this.frontTargetResolver(plugin, {
       revision,
@@ -1181,6 +1192,16 @@ Plugin dir: ${error.pluginDir}`;
     if (!frontTarget) return void 0;
     return { ...frontTarget, revision };
   }
+  /**
+   * Append to the load result's events array and emit on the SSE channel —
+   * unless the source is internal. Internal plugins are app code: their
+   * events stay in the load result (for /reload diagnostics and restart
+   * warnings) but never reach SSE subscribers (see listExternal).
+   */
+  record(events, event, source) {
+    events.push(event);
+    if (source?.kind !== "internal") this.emit(event);
+  }
   emit(event) {
     for (const listener of [...this.listeners]) {
       try {
@@ -1265,14 +1286,13 @@ async function boringPluginRoutes(app, opts) {
       }
       write(event.type, payload);
     });
-    for (const plugin of manager.list()) {
+    for (const plugin of manager.listExternal()) {
       write("boring.plugin.load", {
         type: "boring.plugin.load",
         id: plugin.id,
         boring: plugin.boring,
         version: plugin.version,
         revision: plugin.revision,
-        ...plugin.frontUrl ? { frontUrl: plugin.frontUrl } : {},
         ...plugin.frontTarget ? { frontTarget: plugin.frontTarget } : {},
         replay: true
       });
@@ -1872,31 +1892,18 @@ async function rebuildServerPlugins(opts) {
 }
 
 // src/app/server/defaultPluginPackages.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { createRequire as createRequire3 } from "module";
 import { dirname as dirname6, isAbsolute as isAbsolute3, join as join6 } from "path";
-function readAppManifestDefaultPlugins(appPackageJsonPath) {
-  if (!appPackageJsonPath || !existsSync6(appPackageJsonPath)) return [];
-  let pkg;
-  try {
-    pkg = JSON.parse(readFileSync5(appPackageJsonPath, "utf8"));
-  } catch {
-    return [];
-  }
-  const entries = pkg.boring?.defaultPluginPackages;
-  if (!Array.isArray(entries)) return [];
-  const pkgDir = dirname6(appPackageJsonPath);
-  return entries.filter((e) => typeof e === "string").map((entry) => {
-    if (entry.startsWith("./") || entry.startsWith("../")) {
-      return join6(pkgDir, entry);
-    }
-    return entry;
-  });
-}
-function resolveDefaultPluginPackagePaths(workspaceRoot, defaultPluginPackages) {
+function resolveDefaultWorkspacePluginPackagePaths({
+  workspaceRoot = process.cwd(),
+  defaultPluginPackages = [],
+  anchorDir
+} = {}) {
   if (defaultPluginPackages.length === 0) return [];
-  const require5 = createRequire3(join6(workspaceRoot, "package.json"));
-  const requireFromHere = createRequire3(import.meta.url);
+  const requireFromAnchor = anchorDir ? createRequire3(join6(anchorDir, "package.json")) : null;
+  const requireFromWorkspace = createRequire3(join6(workspaceRoot, "package.json"));
+  const resolvers = [requireFromAnchor, requireFromWorkspace].filter((req) => req !== null);
   const resolved = [];
   for (const entry of defaultPluginPackages) {
     if (isAbsolute3(entry)) {
@@ -1909,32 +1916,22 @@ function resolveDefaultPluginPackagePaths(workspaceRoot, defaultPluginPackages)
       continue;
     }
     let resolvedPath = null;
-    try {
-      resolvedPath = dirname6(require5.resolve(`${entry}/package.json`));
-    } catch {
+    for (const req of resolvers) {
       try {
-        resolvedPath = dirname6(requireFromHere.resolve(`${entry}/package.json`));
+        resolvedPath = dirname6(req.resolve(`${entry}/package.json`));
+        break;
       } catch {
-        throw new Error(
-          `defaultPluginPackages: cannot resolve "${entry}" \u2014 install it as a dep of the app (or workspace root) so require.resolve can find its package.json. Pass an absolute path instead if the package lives outside node_modules.`
-        );
       }
     }
+    if (!resolvedPath) {
+      throw new Error(
+        `defaultPluginPackages: cannot resolve "${entry}" \u2014 install it as a dep of the app so require.resolve can find its package.json. Pass an absolute path instead if the package lives outside node_modules.`
+      );
+    }
     resolved.push(resolvedPath);
   }
   return resolved;
 }
-function resolveDefaultWorkspacePluginPackagePaths({
-  workspaceRoot = process.cwd(),
-  defaultPluginPackages = [],
-  appPackageJsonPath
-} = {}) {
-  const manifestPluginPackages = readAppManifestDefaultPlugins(appPackageJsonPath);
-  return resolveDefaultPluginPackagePaths(workspaceRoot, [
-    ...manifestPluginPackages,
-    ...defaultPluginPackages
-  ]);
-}
 
 // src/server/bridge/createInMemoryBridge.ts
 var MAX_PENDING_COMMANDS = 1e3;
@@ -1979,6 +1976,20 @@ function createInMemoryBridge() {
   };
 }
 
+// src/shared/plugins/uiBridgeRegistry.ts
+var REGISTRY_KEY = /* @__PURE__ */ Symbol.for("@hachej/boring-workspace:active-ui-bridge");
+function slot() {
+  return globalThis;
+}
+function registerWorkspaceUiBridge(bridge) {
+  slot()[REGISTRY_KEY] = bridge;
+  return () => {
+    if (slot()[REGISTRY_KEY] === bridge) {
+      slot()[REGISTRY_KEY] = void 0;
+    }
+  };
+}
+
 // src/server/ui-control/tools/uiTools.ts
 import { stat } from "fs/promises";
 import { resolve as resolve6, isAbsolute as isAbsolute4, relative as relative3, win32 } from "path";
@@ -2598,7 +2609,7 @@ function resolveWorkspacePackageRoot() {
   ];
   for (const candidate of candidates) {
     try {
-      const pkg = JSON.parse(readFileSync6(join7(candidate, "package.json"), "utf8"));
+      const pkg = JSON.parse(readFileSync5(join7(candidate, "package.json"), "utf8"));
       if (pkg.name === "@hachej/boring-workspace") return candidate;
     } catch {
     }
@@ -2608,7 +2619,7 @@ function resolveWorkspacePackageRoot() {
 function readPackageVersion(packageRoot) {
   if (!packageRoot) return void 0;
   try {
-    const pkg = JSON.parse(readFileSync6(join7(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync5(join7(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" && pkg.version.length > 0 ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -2625,7 +2636,7 @@ function resolveBoringPiPackageRoot() {
   ];
   for (const candidate of candidates) {
     try {
-      const pkg = JSON.parse(readFileSync6(join7(candidate, "package.json"), "utf8"));
+      const pkg = JSON.parse(readFileSync5(join7(candidate, "package.json"), "utf8"));
       if (pkg.name === "@hachej/boring-pi") return candidate;
     } catch {
     }
@@ -2638,7 +2649,7 @@ function resolveBoringPiPackageRoot() {
 }
 function isUsableBoringUiPluginCliPackageRoot(candidate) {
   try {
-    const pkg = JSON.parse(readFileSync6(join7(candidate, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync5(join7(candidate, "package.json"), "utf8"));
     return pkg.name === "@hachej/boring-ui-plugin-cli" && existsSync7(join7(candidate, "dist", "bin.js"));
   } catch {
     return false;
@@ -2776,7 +2787,7 @@ function resolveLocalPiPackageSource(settingsDir, source) {
 function readPiSettingsBoringPluginSources(settingsPath, workspaceId) {
   let raw;
   try {
-    raw = JSON.parse(readFileSync6(settingsPath, "utf8"));
+    raw = JSON.parse(readFileSync5(settingsPath, "utf8"));
   } catch {
     return [];
   }
@@ -2885,6 +2896,7 @@ function readWorkspacePluginPackagePiSnapshot(pluginDirs) {
 async function createWorkspaceAgentServer(opts = {}) {
   const workspaceRoot = opts.workspaceRoot ?? process.cwd();
   const bridge = createInMemoryBridge();
+  const unregisterUiBridge = registerWorkspaceUiBridge(bridge);
   const resolvedMode = opts.runtimeModeAdapter?.id ?? opts.mode ?? autoDetectMode();
   const modeAdapter = opts.runtimeModeAdapter ?? resolveMode(resolvedMode);
   const workspaceFsCapability = modeAdapter.workspaceFsCapability ?? "best-effort";
@@ -2895,11 +2907,10 @@ async function createWorkspaceAgentServer(opts = {}) {
   const ctx = { workspaceRoot, bridge };
   const defaultPluginPackagePaths = resolveDefaultWorkspacePluginPackagePaths({
     workspaceRoot,
-    appPackageJsonPath: opts.appPackageJsonPath,
-    defaultPluginPackages: opts.defaultPluginPackages
+    defaultPluginPackages: opts.defaultPluginPackages,
+    anchorDir: opts.appRoot
   });
-  const pluginHotReload = opts.pluginHotReload ?? true;
-  const defaultPluginDirEntries = defaultPluginPackagePaths.map((dir) => ({ dir, hotReload: pluginHotReload })).filter((entry) => hasDirServerPlugin(entry));
+  const defaultPluginDirEntries = defaultPluginPackagePaths.map((dir) => ({ dir, hotReload: true })).filter((entry) => hasDirServerPlugin(entry));
   const allPluginEntries = [
     ...defaultPluginDirEntries,
     ...opts.plugins ?? []
@@ -2933,7 +2944,7 @@ async function createWorkspaceAgentServer(opts = {}) {
     return boringPluginDirs;
   };
   refreshBoringPluginDirs();
-  const staticPluginPackagePiSnapshot = pluginHotReload ? emptyPackageJsonPiSnapshot() : readWorkspacePluginPackagePiSnapshot(refreshBoringPluginDirs());
+  const staticPluginPackagePiSnapshot = emptyPackageJsonPiSnapshot();
   const staticPiSkillPaths = [
     ...baseStaticPiSkillPaths,
     ...staticPluginPackagePiSnapshot.additionalSkillPaths
@@ -2946,12 +2957,11 @@ async function createWorkspaceAgentServer(opts = {}) {
     ...baseStaticPiExtensionPaths,
     ...staticPluginPackagePiSnapshot.extensionPaths
   ];
-  const getHotReloadablePiResources = pluginHotReload ? () => readWorkspacePluginPackagePiSnapshot(refreshBoringPluginDirs()) : void 0;
+  const getHotReloadablePiResources = () => readWorkspacePluginPackagePiSnapshot(refreshBoringPluginDirs());
   const boringAssetManager = new BoringPluginAssetManager({
     pluginDirs: boringPluginDirs,
     errorRoot: join7(workspaceRoot, ".pi", "extensions"),
-    frontTargetResolver: opts.boringPluginFrontTargetResolver,
-    includeLegacyFrontUrl: opts.boringPluginIncludeLegacyFrontUrl
+    frontTargetResolver: opts.boringPluginFrontTargetResolver
   });
   const runtimeBackendRegistry = new RuntimeBackendRegistry();
   const buildRuntimeProvisioningInputs = () => {
@@ -3019,19 +3029,17 @@ async function createWorkspaceAgentServer(opts = {}) {
     beforeReload: async () => {
       let restart_warnings = [];
       let diagnostics = [];
-      if (pluginHotReload) {
-        refreshBoringPluginDirs();
-        const scan = await boringAssetManager.load();
-        const backendReload = await runtimeBackendRegistry.reloadFromLoadedPlugins(boringAssetManager.inspectLoaded());
-        restart_warnings = collectRestartWarnings(scan.events);
-        const scanDiagnostics = scan.errors.map((error) => ({
-          source: `boring plugin asset scan (${error.id})`,
-          message: error.message,
-          pluginId: error.id
-        }));
-        const rebuild = await rebuildPlugins();
-        diagnostics = [...scanDiagnostics, ...backendReload.diagnostics, ...rebuild.diagnostics];
-      }
+      refreshBoringPluginDirs();
+      const scan = await boringAssetManager.load();
+      const backendReload = await runtimeBackendRegistry.reloadFromLoadedPlugins(boringAssetManager.inspectLoaded());
+      restart_warnings = collectRestartWarnings(scan.events);
+      const scanDiagnostics = scan.errors.map((error) => ({
+        source: `boring plugin asset scan (${error.id})`,
+        message: error.message,
+        pluginId: error.id
+      }));
+      const rebuild = await rebuildPlugins();
+      diagnostics = [...scanDiagnostics, ...backendReload.diagnostics, ...rebuild.diagnostics];
       await runRuntimeProvisioning();
       const callerResult = await opts.beforeReload?.();
       const callerRestartWarnings = callerResult && typeof callerResult === "object" ? callerResult.restart_warnings ?? [] : [];
@@ -3054,7 +3062,7 @@ async function createWorkspaceAgentServer(opts = {}) {
       extensionFactories: pluginCollection.agentOptions.pi?.extensionFactories,
       getHotReloadableResources: getHotReloadablePiResources
     },
-    systemPromptDynamic: pluginHotReload ? () => aggregatePluginPrompts(boringAssetManager) : void 0
+    systemPromptDynamic: () => aggregatePluginPrompts(boringAssetManager)
   });
   refreshBoringPluginDirs();
   await boringAssetManager.load();
@@ -3062,6 +3070,7 @@ async function createWorkspaceAgentServer(opts = {}) {
   if (typeof app.addHook === "function") {
     app.addHook("onClose", async () => {
       await runtimeBackendRegistry.close();
+      unregisterUiBridge();
     });
   }
   await app.register(uiRoutes, { bridge, preserveStateKeys: pluginCollection.preservedUiStateKeys });

package/dist/boring-workspace.css

@@ -1 +1 @@
-.dv-shell{--dv-background-color: var(--background);--dv-paneview-header-border-color: var(--border);--dv-tabs-and-actions-container-font-size: .8125rem;--dv-tabs-and-actions-container-height: 52px;--dv-tab-close-icon: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='10' height='10' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2'%3E%3Cpath d='M18 6 6 18M6 6l12 12'/%3E%3C/svg%3E");--dv-group-view-background-color: var(--background);--dv-tabs-and-actions-container-background-color: var(--background);--dv-activegroup-visiblepanel-tab-background-color: var(--background);--dv-activegroup-hiddenpanel-tab-background-color: var(--muted);--dv-inactivegroup-visiblepanel-tab-background-color: var(--background);--dv-inactivegroup-hiddenpanel-tab-background-color: var(--muted);--dv-activegroup-visiblepanel-tab-color: var(--foreground);--dv-activegroup-hiddenpanel-tab-color: var(--muted-foreground);--dv-inactivegroup-visiblepanel-tab-color: var(--foreground);--dv-inactivegroup-hiddenpanel-tab-color: var(--muted-foreground);--dv-tab-divider-color: transparent;--dv-drag-over-background-color: oklch(from var(--accent) l c h / .3);--dv-drag-over-border-color: var(--accent);--dv-separator-border: var(--border);color:var(--foreground);background-color:var(--background)}.dv-shell .dv-tabs-and-actions-container,.dv-shell .tabs-and-actions-container{background-color:var(--background)!important;border-bottom:1px solid oklch(from var(--border) l c h / .4);padding:6px 8px 0;gap:4px;align-items:flex-end}.dv-shell .dv-tabs-container,.dv-shell .tab-container{background-color:transparent!important;gap:4px;align-self:stretch;display:flex;align-items:flex-end}.workbench-dockview .dv-shell .dv-tabs-and-actions-container,.workbench-dockview .dv-shell .tabs-and-actions-container,.workbench-dockview .dv-tabs-and-actions-container,.workbench-dockview .tabs-and-actions-container{height:44px!important}.workbench-dockview[data-collapsed-sources=true] .dv-tabs-and-actions-container,.workbench-dockview[data-collapsed-sources=true] .tabs-and-actions-container{padding-left:44px!important}.workbench-dockview .dv-tabs-and-actions-container,.workbench-dockview .tabs-and-actions-container{padding-right:44px!important}.dv-shell .dv-tab,.dv-shell .tab{color:var(--muted-foreground)!important;background-color:transparent!important;border:1px solid transparent;border-top-left-radius:8px;border-top-right-radius:8px;transition:color .18s cubic-bezier(.22,1,.36,1),background-color .18s cubic-bezier(.22,1,.36,1),border-color .18s cubic-bezier(.22,1,.36,1);min-width:120px;max-width:220px;padding:0;height:34px;align-self:end;font-size:12.5px;letter-spacing:-.01em}.dv-shell .dv-tab:hover,.dv-shell .tab:hover{color:var(--foreground)!important;background-color:oklch(from var(--foreground) l c h / .04)!important}.dv-shell .dv-tab>*,.dv-shell .tab>*{width:100%;height:100%}.dv-shell .dv-tab.dv-active-tab,.dv-shell .tab.active-tab{color:var(--foreground)!important;background-color:var(--background)!important;border-color:oklch(from var(--border) l c h / .5);border-bottom-color:var(--background);margin-bottom:-1px;position:relative;z-index:1;font-weight:500}.dv-shell .dv-tab.dv-active-tab:before,.dv-shell .tab.active-tab:before{content:"";position:absolute;left:10px;right:10px;top:-1px;height:2px;background:var(--accent);border-radius:0 0 2px 2px;opacity:0;transition:opacity .2s cubic-bezier(.22,1,.36,1)}.dv-shell .dv-tab.dv-active-tab:hover:before,.dv-shell .tab.active-tab:hover:before{opacity:.7}.dv-shell .sash-container .sash,.dv-shell .dv-sash-container .dv-sash{transition:background-color .2s}.dv-shell .sash-container .sash:hover,.dv-shell .sash-container .sash.active,.dv-shell .dv-sash-container .dv-sash:hover,.dv-shell .dv-sash-container .dv-sash.dv-active{background-color:var(--primary);transition-delay:.15s}.dv-shell .drop-target-dropzone>.drop-target-selection,.dv-shell .dv-drop-target-dropzone>.dv-drop-target-selection{background-color:oklch(from var(--primary) l c h / .15);border:2px dashed var(--primary);border-radius:calc(var(--radius) - 2px)}.dv-shell .watermark,.dv-shell .dv-watermark{color:var(--muted-foreground)}.dv-shell,.dv-shell .dv-dockview,.dv-shell .dv-groupview,.dv-shell .groupview,.dv-shell .groupview>.content-container,.dv-shell .dv-view-container,.dv-shell .view-container{background-color:var(--background)}.dv-shell .dv-groupview,.dv-shell .groupview{color:var(--foreground)}.dv-shell .right-actions-container,.dv-shell .left-actions-container,.dv-shell .dv-right-actions-container,.dv-shell .dv-left-actions-container{color:var(--muted-foreground);display:flex;align-items:center;align-self:stretch}.dv-shell .right-actions-container:hover,.dv-shell .left-actions-container:hover,.dv-shell .dv-right-actions-container:hover,.dv-shell .dv-left-actions-container:hover{color:var(--foreground)}.dv-shell .dv-drag-image{opacity:.85;border:1px solid var(--border);border-radius:calc(var(--radius) - 2px);box-shadow:0 4px 12px #00000026}.dv-chat-stage{--dv-tabs-and-actions-container-height: 32px;--dv-tabs-and-actions-container-font-size: .75rem;--dv-activegroup-visiblepanel-tab-background-color: transparent;--dv-activegroup-hiddenpanel-tab-background-color: transparent;--dv-inactivegroup-visiblepanel-tab-background-color: transparent;--dv-inactivegroup-hiddenpanel-tab-background-color: transparent}.dv-shell.dv-chat-stage .dv-tabs-and-actions-container{border-bottom:none;padding:0;gap:0;align-items:stretch}.dv-shell.dv-chat-stage .dv-tabs-and-actions-container.dv-single-tab .dv-tabs-container{width:100%}.dv-shell.dv-chat-stage .dv-tab,.dv-shell.dv-chat-stage .dv-tab.dv-active-tab{width:100%;height:100%;min-width:0;max-width:none;flex:1 1 auto;align-self:stretch;margin-bottom:0;padding:0;border:none;border-radius:0;background-color:transparent!important}.dv-shell.dv-chat-stage .dv-tab.dv-active-tab:before{content:none}.dv-chat-stage .dv-default-tab-action{display:none}.dv-chat-stage .dv-groupview{position:relative}.dv-chat-stage .dv-groupview:after{content:"";position:absolute;top:0;right:0;bottom:0;left:0;z-index:40;pointer-events:none;background:transparent;transition:background-color .22s cubic-bezier(.22,1,.36,1),box-shadow .22s cubic-bezier(.22,1,.36,1)}[data-boring-workspace-part=chat-pane-stage][data-multi-pane=true] .dv-groupview:not(.dv-active-group):after{background:oklch(from var(--foreground) l c h / .035)}
+.dv-shell{--dv-background-color: var(--background);--dv-paneview-header-border-color: var(--border);--dv-tabs-and-actions-container-font-size: .8125rem;--dv-tabs-and-actions-container-height: 52px;--dv-tab-close-icon: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='10' height='10' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2'%3E%3Cpath d='M18 6 6 18M6 6l12 12'/%3E%3C/svg%3E");--dv-group-view-background-color: var(--background);--dv-tabs-and-actions-container-background-color: var(--background);--dv-activegroup-visiblepanel-tab-background-color: var(--background);--dv-activegroup-hiddenpanel-tab-background-color: var(--muted);--dv-inactivegroup-visiblepanel-tab-background-color: var(--background);--dv-inactivegroup-hiddenpanel-tab-background-color: var(--muted);--dv-activegroup-visiblepanel-tab-color: var(--foreground);--dv-activegroup-hiddenpanel-tab-color: var(--muted-foreground);--dv-inactivegroup-visiblepanel-tab-color: var(--foreground);--dv-inactivegroup-hiddenpanel-tab-color: var(--muted-foreground);--dv-tab-divider-color: transparent;--dv-drag-over-background-color: oklch(from var(--accent) l c h / .3);--dv-drag-over-border-color: var(--accent);--dv-separator-border: var(--border);color:var(--foreground);background-color:var(--background)}.dv-shell .dv-tabs-and-actions-container,.dv-shell .tabs-and-actions-container{background-color:var(--background)!important;border-bottom:1px solid oklch(from var(--border) l c h / .4);padding:6px 8px 0;gap:4px;align-items:flex-end}.dv-shell .dv-tabs-container,.dv-shell .tab-container{background-color:transparent!important;gap:4px;align-self:stretch;display:flex;align-items:flex-end}.workbench-dockview .dv-shell .dv-tabs-and-actions-container,.workbench-dockview .dv-shell .tabs-and-actions-container,.workbench-dockview .dv-tabs-and-actions-container,.workbench-dockview .tabs-and-actions-container{height:44px!important}.workbench-dockview[data-collapsed-sources=true] .dv-tabs-and-actions-container,.workbench-dockview[data-collapsed-sources=true] .tabs-and-actions-container{padding-left:44px!important}.workbench-dockview .dv-tabs-and-actions-container,.workbench-dockview .tabs-and-actions-container{padding-right:44px!important}.dv-shell .dv-tab,.dv-shell .tab{color:var(--muted-foreground)!important;background-color:transparent!important;border:1px solid transparent;border-top-left-radius:8px;border-top-right-radius:8px;transition:color .18s cubic-bezier(.22,1,.36,1),background-color .18s cubic-bezier(.22,1,.36,1),border-color .18s cubic-bezier(.22,1,.36,1);min-width:120px;max-width:220px;padding:0;height:34px;align-self:end;font-size:12.5px;letter-spacing:-.01em}.dv-shell .dv-tab:hover,.dv-shell .tab:hover{color:var(--foreground)!important;background-color:oklch(from var(--foreground) l c h / .04)!important}.dv-shell .dv-tab>*,.dv-shell .tab>*{width:100%;height:100%}.dv-shell .dv-tab.dv-active-tab,.dv-shell .tab.active-tab{color:var(--foreground)!important;background-color:var(--background)!important;border-color:oklch(from var(--border) l c h / .5);border-bottom-color:var(--background);margin-bottom:-1px;position:relative;z-index:1;font-weight:500}.dv-shell .dv-tab.dv-active-tab:before,.dv-shell .tab.active-tab:before{content:"";position:absolute;left:10px;right:10px;top:-1px;height:2px;background:var(--accent);border-radius:0 0 2px 2px;opacity:0;transition:opacity .2s cubic-bezier(.22,1,.36,1)}.dv-shell .dv-tab.dv-active-tab:hover:before,.dv-shell .tab.active-tab:hover:before{opacity:.7}.dv-shell{--dv-sash-color: transparent;--dv-active-sash-color: transparent;--dv-active-sash-transition-delay: 0s}.dv-shell .sash-container .sash,.dv-shell .dv-sash-container .dv-sash{transition:box-shadow .16s cubic-bezier(.22,1,.36,1),background-color .16s cubic-bezier(.22,1,.36,1)}.dv-shell .dv-split-view-container.dv-horizontal>.dv-sash-container>.dv-sash{width:12px;margin-left:-4px}.dv-shell .dv-split-view-container.dv-vertical>.dv-sash-container>.dv-sash{height:12px;margin-top:-4px}.dv-shell .dv-split-view-container.dv-horizontal>.dv-sash-container>.dv-sash:hover,.dv-shell .dv-split-view-container.dv-horizontal>.dv-sash-container>.dv-sash:active{box-shadow:inset 0 0 0 1px oklch(from var(--primary) l c h / .45),inset 5px 0 oklch(from var(--primary) l c h / .35),inset 6px 0 oklch(from var(--primary) l c h / .35)}.dv-shell .dv-split-view-container.dv-vertical>.dv-sash-container>.dv-sash:hover,.dv-shell .dv-split-view-container.dv-vertical>.dv-sash-container>.dv-sash:active{box-shadow:inset 0 0 0 1px oklch(from var(--primary) l c h / .45),inset 0 5px oklch(from var(--primary) l c h / .35),inset 0 6px oklch(from var(--primary) l c h / .35)}.dv-shell .drop-target-dropzone>.drop-target-selection,.dv-shell .dv-drop-target-dropzone>.dv-drop-target-selection{background-color:oklch(from var(--primary) l c h / .15);border:2px dashed var(--primary);border-radius:calc(var(--radius) - 2px)}.dv-shell .watermark,.dv-shell .dv-watermark{color:var(--muted-foreground)}.dv-shell,.dv-shell .dv-dockview,.dv-shell .dv-groupview,.dv-shell .groupview,.dv-shell .groupview>.content-container,.dv-shell .dv-view-container,.dv-shell .view-container{background-color:var(--background)}.dv-shell .dv-groupview,.dv-shell .groupview{color:var(--foreground)}.dv-shell .right-actions-container,.dv-shell .left-actions-container,.dv-shell .dv-right-actions-container,.dv-shell .dv-left-actions-container{color:var(--muted-foreground);display:flex;align-items:center;align-self:stretch}.dv-shell .right-actions-container:hover,.dv-shell .left-actions-container:hover,.dv-shell .dv-right-actions-container:hover,.dv-shell .dv-left-actions-container:hover{color:var(--foreground)}.dv-shell .dv-drag-image{opacity:.85;border:1px solid var(--border);border-radius:calc(var(--radius) - 2px);box-shadow:0 4px 12px #00000026}.dv-chat-stage{--dv-tabs-and-actions-container-height: 32px;--dv-tabs-and-actions-container-font-size: .75rem;--dv-activegroup-visiblepanel-tab-background-color: transparent;--dv-activegroup-hiddenpanel-tab-background-color: transparent;--dv-inactivegroup-visiblepanel-tab-background-color: transparent;--dv-inactivegroup-hiddenpanel-tab-background-color: transparent}.dv-shell.dv-chat-stage .dv-tabs-and-actions-container{border-bottom:none;padding:0;gap:0;align-items:stretch}.dv-shell.dv-chat-stage .dv-tabs-and-actions-container.dv-single-tab .dv-tabs-container{width:100%}.dv-shell.dv-chat-stage .dv-tab,.dv-shell.dv-chat-stage .dv-tab.dv-active-tab{width:100%;height:100%;min-width:0;max-width:none;flex:1 1 auto;align-self:stretch;margin-bottom:0;padding:0;border:none;border-radius:0;background-color:transparent!important}.dv-shell.dv-chat-stage .dv-tab.dv-active-tab:before{content:none}.dv-chat-stage .dv-default-tab-action{display:none}.dv-chat-stage .dv-groupview{position:relative}.dv-chat-stage .dv-groupview:after{content:"";position:absolute;top:0;right:0;bottom:0;left:0;z-index:40;pointer-events:none;background:transparent;transition:background-color .22s cubic-bezier(.22,1,.36,1),box-shadow .22s cubic-bezier(.22,1,.36,1)}[data-boring-workspace-part=chat-pane-stage][data-multi-pane=true] .dv-groupview:not(.dv-active-group):after{background:oklch(from var(--foreground) l c h / .035)}

package/dist/{createInMemoryBridge-zb8MpO60.d.ts → createInMemoryBridge-DSjZ9efK.d.ts}

@@ -1,7 +1,8 @@
 import { B as BoringPackageBoringField, a as BoringPackagePiField } from './manifest-C2vVgH_e.js';
 import { PiPackageSource, PluginSkillSource, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 import { FastifyPluginAsync } from 'fastify';
-import { A as AgentTool, U as UiBridge } from './ui-bridge-DFNem0df.js';
+import { A as AgentTool } from './agent-tool-CB0RQyx9.js';
+import { U as UiBridge } from './ui-bridge-LeBuZqfA.js';
 
 type BoringPluginNativeFrontTargetTrust$1 = "local-trusted-native";
 /**
@@ -17,14 +18,23 @@ interface BoringPluginNativeFrontTarget$1 {
     revision: number;
     trust: BoringPluginNativeFrontTargetTrust$1;
 }
-type BoringPluginFrontTarget$1 = BoringPluginNativeFrontTarget$1;
+/**
+ * Plugin front served as a plain browser module URL — the Vite-dev transport
+ * (`/@fs/...`). Hosts running a Vite dev server let Vite transform the entry;
+ * the CLI's runtime host mints `native` targets instead.
+ */
+interface BoringPluginModuleUrlFrontTarget {
+    kind: "module-url";
+    entryUrl: string;
+    revision: number;
+}
+type BoringPluginFrontTarget$1 = BoringPluginNativeFrontTarget$1 | BoringPluginModuleUrlFrontTarget;
 type BoringPluginEvent$1 = {
     type: "boring.plugin.load";
     id: string;
     boring: BoringPackageBoringField;
     version: string;
     revision: number;
-    frontUrl?: string;
     frontTarget?: BoringPluginFrontTarget$1;
 } | {
     type: "boring.plugin.unload";
@@ -42,7 +52,6 @@ interface BoringPluginListEntry$1 {
     pi?: BoringPackagePiField;
     version: string;
     revision: number;
-    frontUrl?: string;
     frontTarget?: BoringPluginFrontTarget$1;
 }
 

package/dist/plugin.d.ts

@@ -2,6 +2,7 @@ import { ComponentType, ReactNode } from 'react';
 import { P as PaneProps, a as PanelConfig, S as SurfaceOpenRequest, c as SurfacePanelResolution } from './surface-obE7YwJk.js';
 export { W as WORKSPACE_OPEN_PATH_SURFACE_KIND } from './surface-obE7YwJk.js';
 export { B as BoringPackageBoringField, a as BoringPackagePiField, b as BoringPackagePiSource, c as BoringPackagePiSourceObject, d as BoringPluginManifestErrorCode, e as BoringPluginManifestIssue, f as BoringPluginManifestValidationResult, g as BoringPluginPackageJson, i as isSafePluginRelativePath, h as isValidBoringPluginId, v as validateBoringPluginManifest } from './manifest-C2vVgH_e.js';
+import { a as UiCommand, C as CommandResult, U as UiBridge } from './ui-bridge-LeBuZqfA.js';
 import 'dockview-react';
 
 type CatalogBadge = {
@@ -209,4 +210,67 @@ declare function createCapturingBoringFrontAPI(options?: {
 }): CapturingBoringFrontAPIHandle;
 declare function captureFrontPlugin(plugin: BoringFrontFactoryWithId): CapturedFrontPlugin;
 
-export { type BoringFrontAPI, type BoringFrontBindingRegistration, type BoringFrontFactory, type BoringFrontFactoryWithId, type BoringFrontLeftTabRegistration, type BoringFrontPanelCommandRegistration, type BoringFrontPanelRegistration, type BoringFrontProviderRegistration, type BoringFrontSetup, type BoringFrontSurfaceResolverRegistration, type CapturedBoringFrontRegistrations, type CapturedFrontPlugin, type CapturingBoringFrontAPIHandle, type DefinePluginConfig, PaneProps, captureFrontPlugin, createCapturingBoringFrontAPI, definePlugin };
+/**
+ * In-process registry that lets a plugin's Pi slash command reach the live
+ * workspace `UiBridge` WITHOUT an HTTP round-trip or a `BORING_UI_URL` env var.
+ *
+ * Why this exists
+ * ---------------
+ * A Pi extension slash-command handler only receives Pi's terminal-oriented
+ * `ctx.ui` (notify/select/confirm). It has no concept of the boring-ui
+ * workspace UI bridge, so the old canonical template resorted to
+ * `fetch(BORING_UI_URL + "/api/v1/ui/commands")` — fragile, and it silently
+ * no-op'd whenever the env var was unset (which is the common case). The bridge
+ * is already an in-process object owned by the agent server, so the right thing
+ * is to call `bridge.postCommand(...)` directly — the exact same path the
+ * agent's `exec_ui` tool uses.
+ *
+ * Why globalThis
+ * --------------
+ * Hot-reloadable plugins are loaded by Pi through jiti, which keeps its own
+ * module cache. A plain module-level singleton populated by the server is NOT
+ * guaranteed to be the same instance the plugin imports. `globalThis` is shared
+ * across every module realm in the process, so a `Symbol.for`-keyed slot is the
+ * one storage that both the server and a jiti-loaded plugin observe identically.
+ *
+ * This module is browser-safe (only `globalThis` + types), so it can live on
+ * the `@hachej/boring-workspace/plugin` authoring surface.
+ */
+
+/** The active workspace `UiBridge`, or `undefined` when none is registered. */
+declare function getWorkspaceUiBridge(): UiBridge | undefined;
+/**
+ * Thrown by the plugin-facing helpers when no workspace bridge is active — for
+ * example when plugin code runs under a bare Pi CLI with no workspace UI
+ * attached. The message is deliberately actionable.
+ */
+declare class NoWorkspaceUiBridgeError extends Error {
+    constructor();
+}
+/**
+ * Dispatch an arbitrary UI command through the active workspace bridge. This is
+ * the same call the agent's `exec_ui` tool makes; the connected browser drains
+ * the command. Prefer the named helpers below for common actions.
+ */
+declare function execWorkspaceUi(command: UiCommand): Promise<CommandResult>;
+interface OpenPanelArgs {
+    /** Tab instance id. Reuse the same id to re-activate an existing tab. */
+    id: string;
+    /** Panel component id (one of the workspace's registered panels). */
+    component: string;
+    /** Optional params forwarded to the panel component. */
+    params?: Record<string, unknown>;
+}
+/**
+ * Open an app/plugin panel in the workspace from a plugin slash command.
+ * In-process — no URL, no env. Throws `NoWorkspaceUiBridgeError` if no bridge.
+ */
+declare function openPanel(args: OpenPanelArgs): Promise<CommandResult>;
+/**
+ * Show a workspace notification (toast) from a plugin slash command. Unlike
+ * Pi's `ctx.ui.notify` (a terminal notification that is swallowed in
+ * server/headless mode), this surfaces in the browser via the UI bridge.
+ */
+declare function notify(msg: string, level?: "info" | "warn" | "error"): Promise<CommandResult>;
+
+export { type BoringFrontAPI, type BoringFrontBindingRegistration, type BoringFrontFactory, type BoringFrontFactoryWithId, type BoringFrontLeftTabRegistration, type BoringFrontPanelCommandRegistration, type BoringFrontPanelRegistration, type BoringFrontProviderRegistration, type BoringFrontSetup, type BoringFrontSurfaceResolverRegistration, type CapturedBoringFrontRegistrations, type CapturedFrontPlugin, type CapturingBoringFrontAPIHandle, type DefinePluginConfig, NoWorkspaceUiBridgeError, type OpenPanelArgs, PaneProps, captureFrontPlugin, createCapturingBoringFrontAPI, definePlugin, execWorkspaceUi, getWorkspaceUiBridge, notify, openPanel };