@hachej/boring-workspace 0.1.40 → 0.1.42

package/dist/app-server.d.ts

@@ -1,8 +1,8 @@
 import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 export { PiPackageSource as WorkspacePiPackageSource } from '@hachej/boring-agent/server';
 import { FastifyInstance } from 'fastify';
-import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, d as createInMemoryBridge } from './createInMemoryBridge-DSjZ9efK.js';
-export { e as ServerWorkspaceRuntimeProvisioningInput } from './createInMemoryBridge-DSjZ9efK.js';
+import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, d as createInMemoryBridge } from './createInMemoryBridge-siFWq_R_.js';
+export { e as ServerWorkspaceRuntimeProvisioningInput } from './createInMemoryBridge-siFWq_R_.js';
 import './manifest-C2vVgH_e.js';
 import './agent-tool-CB0RQyx9.js';
 import './ui-bridge-LeBuZqfA.js';

package/dist/app-server.js

@@ -360,7 +360,8 @@ function normalizeBoringPluginSource(input) {
   return {
     rootDir: resolve2(input.rootDir),
     kind: input.kind,
-    ...input.workspaceId ? { workspaceId: input.workspaceId } : {}
+    ...input.workspaceId ? { workspaceId: input.workspaceId } : {},
+    ...input.registered ? { registered: true } : {}
   };
 }
 function pluginIdFromPackageJson(pkg, rootDir) {
@@ -423,10 +424,14 @@ function packagePathContainmentIssues(rootDir, pkg) {
 function discoverBoringPluginDirs(pluginDirs) {
   const out = /* @__PURE__ */ new Map();
   const missingPackageJson = [];
+  const missingDirs = [];
   for (const raw of pluginDirs) {
     const source = normalizeBoringPluginSource(raw);
     const dir = source.rootDir;
-    if (!existsSync2(dir)) continue;
+    if (!existsSync2(dir)) {
+      if (source.registered) missingDirs.push(dir);
+      continue;
+    }
     const info = statSync(dir);
     if (!info.isDirectory()) continue;
     const hasPackageJson = existsSync2(join2(dir, "package.json"));
@@ -441,13 +446,14 @@ function discoverBoringPluginDirs(pluginDirs) {
       if (!out.has(child)) out.set(child, { ...source, rootDir: child });
     }
     const collectionDirNames = /* @__PURE__ */ new Set(["extensions", "npm", "git"]);
-    if (!hasPackageJson && childPackageDirs.length === 0 && !collectionDirNames.has(basename(dir))) {
+    if (!hasPackageJson && (source.registered || childPackageDirs.length === 0 && !collectionDirNames.has(basename(dir)))) {
       missingPackageJson.push(dir);
     }
   }
   return {
     sources: [...out.values()].sort((a, b) => a.rootDir.localeCompare(b.rootDir)),
-    missingPackageJson: [...new Set(missingPackageJson)].sort()
+    missingPackageJson: [...new Set(missingPackageJson)].sort(),
+    missingDirs: [...new Set(missingDirs)].sort()
   };
 }
 function scanBoringPlugins(pluginDirs) {
@@ -455,6 +461,9 @@ function scanBoringPlugins(pluginDirs) {
   const plugins = [];
   const seenIds = /* @__PURE__ */ new Map();
   const discovered = discoverBoringPluginDirs(pluginDirs);
+  for (const pluginDir of discovered.missingDirs) {
+    errors.push({ pluginDir, code: "MISSING_PLUGIN_DIR", message: "registered plugin source directory does not exist" });
+  }
   for (const pluginDir of discovered.missingPackageJson) {
     errors.push({ pluginDir, code: "MISSING_PACKAGE_JSON", message: "package.json is missing" });
   }
@@ -471,7 +480,16 @@ function scanBoringPlugins(pluginDirs) {
       });
       continue;
     }
-    if (!hasPluginMetadata(raw)) continue;
+    if (!hasPluginMetadata(raw)) {
+      if (source.registered) {
+        errors.push({
+          pluginDir: rootDir,
+          code: "INVALID_PLUGIN_METADATA",
+          message: 'package.json has no "boring" or "pi" plugin metadata'
+        });
+      }
+      continue;
+    }
     const result = validateBoringPluginManifest(raw);
     if (!result.valid) {
       const pluginId = safePluginIdFromPackageJson(raw, rootDir);

package/dist/{createInMemoryBridge-DSjZ9efK.d.ts → createInMemoryBridge-siFWq_R_.d.ts}

@@ -60,6 +60,14 @@ interface BoringPluginSource {
     rootDir: string;
     kind: BoringPluginSourceKind;
     workspaceId?: string;
+    /**
+     * True when the user explicitly registered this directory as a plugin
+     * source (e.g. a `packages` entry in Pi settings.json). Registered
+     * sources that are missing, lack a package.json, or carry no plugin
+     * metadata surface as preflight errors instead of being silently
+     * skipped the way speculative scan roots are.
+     */
+    registered?: boolean;
 }
 type BoringPluginSourceInput = string | BoringPluginSource;
 interface BoringServerPluginManifest {

package/dist/plugin.d.ts

@@ -1,6 +1,6 @@
 import { ComponentType, ReactNode } from 'react';
-import { P as PaneProps, a as PanelConfig, S as SurfaceOpenRequest, c as SurfacePanelResolution } from './surface-obE7YwJk.js';
-export { W as WORKSPACE_OPEN_PATH_SURFACE_KIND } from './surface-obE7YwJk.js';
+import { P as PaneProps, a as PanelConfig, S as SurfaceOpenRequest, c as SurfacePanelResolution } from './surface-DmIalUmP.js';
+export { W as WORKSPACE_OPEN_PATH_SURFACE_KIND } from './surface-DmIalUmP.js';
 export { B as BoringPackageBoringField, a as BoringPackagePiField, b as BoringPackagePiSource, c as BoringPackagePiSourceObject, d as BoringPluginManifestErrorCode, e as BoringPluginManifestIssue, f as BoringPluginManifestValidationResult, g as BoringPluginPackageJson, i as isSafePluginRelativePath, h as isValidBoringPluginId, v as validateBoringPluginManifest } from './manifest-C2vVgH_e.js';
 import { a as UiCommand, C as CommandResult, U as UiBridge } from './ui-bridge-LeBuZqfA.js';
 import 'dockview-react';
@@ -70,6 +70,8 @@ interface LeftTabParams {
     searchQuery?: string;
     bridge?: unknown;
     chromeless?: boolean;
+    /** Optional DOM target for left-tab toolbar actions owned by the pane. */
+    chromeActionsElement?: Element | null;
     revealFileTreeRequest?: {
         path: string;
         seq: number;

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { f as WorkspaceServerPluginAsset, g as BoringServerPluginManifest, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, h as BoringPluginListEntry, i as BoringPluginFrontTarget, j as BoringPluginSource, k as BoringPluginEvent, P as PluginRestartSurface } from './createInMemoryBridge-DSjZ9efK.js';
-export { l as BoringPluginFrontTargetResolverContext, m as BoringPluginNativeFrontTarget, n as BoringPluginNativeFrontTargetTrust, o as BoringPluginSourceKind, S as ServerBootstrapOptions, p as ServerBootstrapResult, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, W as WorkspaceServerPlugin, q as bootstrapServer, d as createInMemoryBridge, r as defineServerPlugin, v as validateServerPlugin } from './createInMemoryBridge-DSjZ9efK.js';
+import { f as WorkspaceServerPluginAsset, g as BoringServerPluginManifest, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, h as BoringPluginListEntry, i as BoringPluginFrontTarget, j as BoringPluginSource, k as BoringPluginEvent, P as PluginRestartSurface } from './createInMemoryBridge-siFWq_R_.js';
+export { l as BoringPluginFrontTargetResolverContext, m as BoringPluginNativeFrontTarget, n as BoringPluginNativeFrontTargetTrust, o as BoringPluginSourceKind, S as ServerBootstrapOptions, p as ServerBootstrapResult, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, W as WorkspaceServerPlugin, q as bootstrapServer, d as createInMemoryBridge, r as defineServerPlugin, v as validateServerPlugin } from './createInMemoryBridge-siFWq_R_.js';
 import { FastifyRequest, FastifyInstance } from 'fastify';
 import { U as UiBridge } from './ui-bridge-LeBuZqfA.js';
 export { C as CommandResult, a as UiCommand, b as UiState } from './ui-bridge-LeBuZqfA.js';
@@ -164,7 +164,7 @@ declare function buildBoringSystemPrompt(opts: BuildBoringSystemPromptOptions):
 interface BoringPluginPreflightIssue {
     pluginDir: string;
     pluginId?: string;
-    code: "MISSING_PACKAGE_JSON" | "INVALID_PACKAGE_JSON" | "INVALID_PLUGIN_METADATA";
+    code: "MISSING_PLUGIN_DIR" | "MISSING_PACKAGE_JSON" | "INVALID_PACKAGE_JSON" | "INVALID_PLUGIN_METADATA";
     message: string;
 }
 interface BoringPluginPreflightResult {

package/dist/server.js

@@ -1238,7 +1238,8 @@ function normalizeBoringPluginSource(input) {
   return {
     rootDir: resolve3(input.rootDir),
     kind: input.kind,
-    ...input.workspaceId ? { workspaceId: input.workspaceId } : {}
+    ...input.workspaceId ? { workspaceId: input.workspaceId } : {},
+    ...input.registered ? { registered: true } : {}
   };
 }
 function pluginIdFromPackageJson(pkg, rootDir) {
@@ -1301,10 +1302,14 @@ function packagePathContainmentIssues(rootDir, pkg) {
 function discoverBoringPluginDirs(pluginDirs) {
   const out = /* @__PURE__ */ new Map();
   const missingPackageJson = [];
+  const missingDirs = [];
   for (const raw of pluginDirs) {
     const source = normalizeBoringPluginSource(raw);
     const dir = source.rootDir;
-    if (!existsSync2(dir)) continue;
+    if (!existsSync2(dir)) {
+      if (source.registered) missingDirs.push(dir);
+      continue;
+    }
     const info = statSync(dir);
     if (!info.isDirectory()) continue;
     const hasPackageJson = existsSync2(join3(dir, "package.json"));
@@ -1319,13 +1324,14 @@ function discoverBoringPluginDirs(pluginDirs) {
       if (!out.has(child)) out.set(child, { ...source, rootDir: child });
     }
     const collectionDirNames = /* @__PURE__ */ new Set(["extensions", "npm", "git"]);
-    if (!hasPackageJson && childPackageDirs.length === 0 && !collectionDirNames.has(basename(dir))) {
+    if (!hasPackageJson && (source.registered || childPackageDirs.length === 0 && !collectionDirNames.has(basename(dir)))) {
       missingPackageJson.push(dir);
     }
   }
   return {
     sources: [...out.values()].sort((a, b) => a.rootDir.localeCompare(b.rootDir)),
-    missingPackageJson: [...new Set(missingPackageJson)].sort()
+    missingPackageJson: [...new Set(missingPackageJson)].sort(),
+    missingDirs: [...new Set(missingDirs)].sort()
   };
 }
 function scanBoringPlugins(pluginDirs) {
@@ -1333,6 +1339,9 @@ function scanBoringPlugins(pluginDirs) {
   const plugins = [];
   const seenIds = /* @__PURE__ */ new Map();
   const discovered = discoverBoringPluginDirs(pluginDirs);
+  for (const pluginDir of discovered.missingDirs) {
+    errors.push({ pluginDir, code: "MISSING_PLUGIN_DIR", message: "registered plugin source directory does not exist" });
+  }
   for (const pluginDir of discovered.missingPackageJson) {
     errors.push({ pluginDir, code: "MISSING_PACKAGE_JSON", message: "package.json is missing" });
   }
@@ -1349,7 +1358,16 @@ function scanBoringPlugins(pluginDirs) {
       });
       continue;
     }
-    if (!hasPluginMetadata(raw)) continue;
+    if (!hasPluginMetadata(raw)) {
+      if (source.registered) {
+        errors.push({
+          pluginDir: rootDir,
+          code: "INVALID_PLUGIN_METADATA",
+          message: 'package.json has no "boring" or "pi" plugin metadata'
+        });
+      }
+      continue;
+    }
     const result = validateBoringPluginManifest(raw);
     if (!result.valid) {
       const pluginId = safePluginIdFromPackageJson(raw, rootDir);

package/dist/shared.d.ts

@@ -1,5 +1,5 @@
 export { C as CommandResult, U as UiBridge, a as UiCommand, b as UiState } from './ui-bridge-LeBuZqfA.js';
-export { C as CommandConfig, P as PaneProps, a as PanelConfig, b as PanelRegistration, S as SurfaceOpenRequest, c as SurfacePanelResolution, d as SurfaceResolverConfig, e as SurfaceResolverRegistration, W as WORKSPACE_OPEN_PATH_SURFACE_KIND, f as definePanel } from './surface-obE7YwJk.js';
+export { C as CommandConfig, P as PaneProps, a as PanelConfig, b as PanelRegistration, S as SurfaceOpenRequest, c as SurfacePanelResolution, d as SurfaceResolverConfig, e as SurfaceResolverRegistration, W as WORKSPACE_OPEN_PATH_SURFACE_KIND, f as definePanel } from './surface-DmIalUmP.js';
 export { A as AgentTool, J as JSONSchema, T as ToolExecContext, a as ToolResult } from './agent-tool-CB0RQyx9.js';
 import 'react';
 import 'dockview-react';

package/dist/{surface-obE7YwJk.d.ts → surface-DmIalUmP.d.ts}

@@ -47,6 +47,8 @@ interface PanelConfig<T = any> {
     essential?: boolean;
     chromeless?: boolean;
     supportsFullPage?: boolean;
+    /** Center-panel id opened when this config is used as a left-tab category. */
+    defaultPanelId?: string;
     /** Source: "builtin" | "app" */
     source?: string;
     pluginId?: string;

package/dist/testing.d.ts

@@ -231,6 +231,8 @@ declare interface PanelConfig<T = any> {
     essential?: boolean;
     chromeless?: boolean;
     supportsFullPage?: boolean;
+    /** Center-panel id opened when this config is used as a left-tab category. */
+    defaultPanelId?: string;
     /** Source: "builtin" | "app" */
     source?: string;
     pluginId?: string;

package/dist/testing.js

@@ -1,7 +1,7 @@
 import { jsx as Ba } from "react/jsx-runtime";
 import * as Pa from "react";
 import { createElement as is, useMemo as wn, useLayoutEffect as us, isValidElement as ss, cloneElement as ds, useSyncExternalStore as Gi } from "react";
-import { h as cs, q as fs, o as ps } from "./WorkspaceProvider-uuxyAx3i.js";
+import { h as cs, q as fs, o as ps } from "./WorkspaceProvider-DkZAxsYo.js";
 import { d as ms } from "./panel-DnvDNQac.js";
 import * as bs from "react-dom/test-utils";
 import ka from "react-dom";

package/dist/workspace.css

@@ -1484,6 +1484,9 @@
   .-top-1\.5 {
     top: calc(var(--spacing) * -1.5);
   }
+  .-top-px {
+    top: -1px;
+  }
   .top-0 {
     top: calc(var(--spacing) * 0);
   }
@@ -1508,6 +1511,9 @@
   .right-3 {
     right: calc(var(--spacing) * 3);
   }
+  .-bottom-px {
+    bottom: -1px;
+  }
   .bottom-0 {
     bottom: calc(var(--spacing) * 0);
   }
@@ -2809,6 +2815,67 @@
       }
     }
   }
+  .after\:absolute {
+    &::after {
+      content: var(--tw-content);
+      position: absolute;
+    }
+  }
+  .after\:inset-y-2 {
+    &::after {
+      content: var(--tw-content);
+      inset-block: calc(var(--spacing) * 2);
+    }
+  }
+  .after\:left-1\/2 {
+    &::after {
+      content: var(--tw-content);
+      left: calc(1 / 2 * 100%);
+    }
+  }
+  .after\:w-px {
+    &::after {
+      content: var(--tw-content);
+      width: 1px;
+    }
+  }
+  .after\:-translate-x-1\/2 {
+    &::after {
+      content: var(--tw-content);
+      --tw-translate-x: calc(calc(1 / 2 * 100%) * -1);
+      translate: var(--tw-translate-x) var(--tw-translate-y);
+    }
+  }
+  .after\:rounded-full {
+    &::after {
+      content: var(--tw-content);
+      border-radius: calc(infinity * 1px);
+    }
+  }
+  .after\:bg-border\/55 {
+    &::after {
+      content: var(--tw-content);
+      background-color: var(--boring-border);
+      @supports (color: color-mix(in lab, red, red)) {
+        background-color: color-mix(in oklab, var(--boring-border) 55%, transparent);
+      }
+    }
+  }
+  .after\:transition-\[width\,background-color\] {
+    &::after {
+      content: var(--tw-content);
+      transition-property: width,background-color;
+      transition-timing-function: var(--tw-ease, var(--default-transition-timing-function));
+      transition-duration: var(--tw-duration, var(--default-transition-duration));
+    }
+  }
+  .after\:duration-150 {
+    &::after {
+      content: var(--tw-content);
+      --tw-duration: 150ms;
+      transition-duration: 150ms;
+    }
+  }
   .hover\:-translate-y-0\.5 {
     &:hover {
       @media (hover: hover) {
@@ -2835,6 +2902,13 @@
       }
     }
   }
+  .hover\:\!bg-transparent {
+    &:hover {
+      @media (hover: hover) {
+        background-color: transparent !important;
+      }
+    }
+  }
   .hover\:bg-accent {
     &:hover {
       @media (hover: hover) {
@@ -2862,16 +2936,6 @@
       }
     }
   }
-  .hover\:bg-border\/70 {
-    &:hover {
-      @media (hover: hover) {
-        background-color: var(--boring-border);
-        @supports (color: color-mix(in lab, red, red)) {
-          background-color: color-mix(in oklab, var(--boring-border) 70%, transparent);
-        }
-      }
-    }
-  }
   .hover\:bg-destructive\/10 {
     &:hover {
       @media (hover: hover) {
@@ -2985,10 +3049,26 @@
       }
     }
   }
-  .hover\:\[transition-delay\:150ms\] {
+  .hover\:after\:w-1 {
+    &:hover {
+      @media (hover: hover) {
+        &::after {
+          content: var(--tw-content);
+          width: calc(var(--spacing) * 1);
+        }
+      }
+    }
+  }
+  .hover\:after\:bg-foreground\/35 {
     &:hover {
       @media (hover: hover) {
-        transition-delay: 150ms;
+        &::after {
+          content: var(--tw-content);
+          background-color: var(--boring-foreground);
+          @supports (color: color-mix(in lab, red, red)) {
+            background-color: color-mix(in oklab, var(--boring-foreground) 35%, transparent);
+          }
+        }
       }
     }
   }
@@ -3063,11 +3143,27 @@
       cursor: grabbing;
     }
   }
-  .active\:bg-muted-foreground\/30 {
+  .active\:\!bg-transparent {
     &:active {
-      background-color: var(--boring-muted-foreground);
-      @supports (color: color-mix(in lab, red, red)) {
-        background-color: color-mix(in oklab, var(--boring-muted-foreground) 30%, transparent);
+      background-color: transparent !important;
+    }
+  }
+  .active\:after\:w-1 {
+    &:active {
+      &::after {
+        content: var(--tw-content);
+        width: calc(var(--spacing) * 1);
+      }
+    }
+  }
+  .active\:after\:bg-foreground\/50 {
+    &:active {
+      &::after {
+        content: var(--tw-content);
+        background-color: var(--boring-foreground);
+        @supports (color: color-mix(in lab, red, red)) {
+          background-color: color-mix(in oklab, var(--boring-foreground) 50%, transparent);
+        }
       }
     }
   }

package/dist/workspace.d.ts

@@ -994,6 +994,8 @@ export declare interface LeftTabParams {
     searchQuery?: string;
     bridge?: unknown;
     chromeless?: boolean;
+    /** Optional DOM target for left-tab toolbar actions owned by the pane. */
+    chromeActionsElement?: Element | null;
     revealFileTreeRequest?: {
         path: string;
         seq: number;
@@ -1146,6 +1148,8 @@ export declare interface PanelConfig<T = any> {
     essential?: boolean;
     chromeless?: boolean;
     supportsFullPage?: boolean;
+    /** Center-panel id opened when this config is used as a left-tab category. */
+    defaultPanelId?: string;
     /** Source: "builtin" | "app" */
     source?: string;
     pluginId?: string;
@@ -1489,7 +1493,7 @@ export declare interface SurfaceResolverRegistryLike {
     register(id: string, config: SurfaceResolverRegistration): void;
 }
 
-export declare function SurfaceShell({ rootDir, sidebarDefaultWidth, sidebarMinWidth, sidebarMaxWidth, storageKey, onReady, onChange, onClose, extraPanels, defaultLeftTab, initialPanels, className, }: SurfaceShellProps): JSX.Element;
+export declare function SurfaceShell({ rootDir, sidebarDefaultWidth, sidebarMinWidth, sidebarMaxWidth, storageKey, onReady, onChange, onClose, extraPanels, defaultLeftTab, onReloadAgentPlugins, initialPanels, className, }: SurfaceShellProps): JSX.Element;
 
 export declare interface SurfaceShellApi {
     /** Open a file in the workbench. Idempotent — re-activates an existing pane for the same path. */
@@ -1536,6 +1540,7 @@ export declare interface SurfaceShellProps {
      */
     extraPanels?: string[];
     defaultLeftTab?: string;
+    onReloadAgentPlugins?: () => void | Promise<unknown>;
     initialPanels?: Array<{
         id: string;
         component: string;
@@ -1849,7 +1854,7 @@ export declare function useWorkspaceContextOptional(): WorkspaceContextValue | n
 
 export declare function useWorkspaceRequestId(): string | null;
 
-export declare function WorkbenchLeftPane({ rootDir, bridge, defaultTab, revealFileTreeRequest, onOpenPanel, onCollapse, className, }: WorkbenchLeftPaneProps): JSX.Element;
+export declare function WorkbenchLeftPane({ rootDir, bridge, defaultTab, revealFileTreeRequest, onOpenPanel, onReloadAgentPlugins, onCollapse, className, }: WorkbenchLeftPaneProps): JSX.Element;
 
 declare interface WorkbenchLeftPaneOpenPanelConfig {
     id: string;
@@ -1867,6 +1872,7 @@ export declare interface WorkbenchLeftPaneProps {
         seq: number;
     } | null;
     onOpenPanel?: (config: WorkbenchLeftPaneOpenPanelConfig) => void;
+    onReloadAgentPlugins?: () => void | Promise<unknown>;
     onCollapse?: () => void;
     className?: string;
 }

package/dist/workspace.js

@@ -1,17 +1,17 @@
 var V = Object.defineProperty;
 var X = (e, t, r) => t in e ? V(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
 var T = (e, t, r) => X(e, typeof t != "symbol" ? t + "" : t, r);
-import { u as K, p as Q, a as Y, b as Z, D as ee } from "./WorkspaceProvider-uuxyAx3i.js";
-import { A as Je, C as Ge, c as Ve, d as Xe, e as Qe, F as Ye, f as Ze, M as et, g as tt, P as rt, h as at, i as nt, j as st, k as ot, R as it, S as lt, l as ct, m as dt, T as ut, U as pt, W as ft, n as mt, o as ht, q as gt, r as bt, s as yt, t as vt, v as xt, w as kt, x as wt, y as Pt, z as St, B as Ct, E as Nt, G as Et, H as Rt, I as Tt, J as It, K as Ot, L as Ft, N as Lt, O as Mt, Q as Bt, V as Wt, X as Dt, Y as Kt, Z as $t, _ as jt, $ as zt, a0 as Ht, a1 as Ut, a2 as _t, a3 as qt, a4 as At, a5 as Jt, a6 as Gt, a7 as Vt, a8 as Xt, a9 as Qt, aa as Yt, ab as Zt, ac as er, ad as tr, ae as rr, af as ar, ag as nr, ah as sr, ai as or, aj as ir, ak as lr, al as cr, am as dr, an as ur, ao as pr, ap as fr, aq as mr, ar as hr, as as gr } from "./WorkspaceProvider-uuxyAx3i.js";
+import { u as K, p as Q, a as Y, b as Z, D as ee } from "./WorkspaceProvider-DkZAxsYo.js";
+import { A as Je, C as Ge, c as Ve, d as Xe, e as Qe, F as Ye, f as Ze, M as et, g as tt, P as rt, h as at, i as nt, j as st, k as ot, R as it, S as lt, l as ct, m as dt, T as ut, U as pt, W as ft, n as mt, o as ht, q as gt, r as bt, s as yt, t as vt, v as xt, w as kt, x as wt, y as Pt, z as St, B as Ct, E as Nt, G as Et, H as Rt, I as Tt, J as It, K as Ot, L as Ft, N as Lt, O as Mt, Q as Bt, V as Wt, X as Dt, Y as Kt, Z as $t, _ as jt, $ as zt, a0 as Ht, a1 as Ut, a2 as _t, a3 as qt, a4 as At, a5 as Jt, a6 as Gt, a7 as Vt, a8 as Xt, a9 as Qt, aa as Yt, ab as Zt, ac as er, ad as tr, ae as rr, af as ar, ag as nr, ah as sr, ai as or, aj as ir, ak as lr, al as cr, am as dr, an as ur, ao as pr, ap as fr, aq as mr, ar as hr, as as gr } from "./WorkspaceProvider-DkZAxsYo.js";
 import { c as C } from "./utils-B6yFEsav.js";
-import { C as yr, T as vr, W as xr, b as kr } from "./WorkspaceLoadingState-EratTJfG.js";
+import { C as yr, T as vr, W as xr, b as kr } from "./WorkspaceLoadingState-yp4vNmrT.js";
 import { jsx as a, jsxs as g, Fragment as te } from "react/jsx-runtime";
 import { Button as P, Sheet as re, SheetContent as ae, SheetHeader as ne, SheetTitle as se, SheetDescription as oe, EmptyState as ie, Kbd as I, ErrorState as le, IconButton as O } from "@hachej/boring-ui-kit";
 import { Toaster as Pr, dismissToast as Sr, toast as Cr } from "@hachej/boring-ui-kit";
 import { useSyncExternalStore as $, useState as N, useEffect as k, useRef as S, useCallback as b, useMemo as w, Suspense as ce, Component as de } from "react";
 import { C as Er, c as Rr } from "./CodeEditor-DQqOn4xz.js";
-import { FileTree as Ir } from "./FileTree-DNIzusWa.js";
-import { MarkdownEditor as Fr } from "./MarkdownEditor-DhVfKSAq.js";
+import { FileTree as Ir } from "./FileTree-CVsvICGP.js";
+import { MarkdownEditor as Fr } from "./MarkdownEditor-BvaGmzWP.js";
 import { MenuIcon as ue, PanelLeftOpenIcon as pe, PanelLeftCloseIcon as fe, PinIcon as me, CheckIcon as he, CopyIcon as ge } from "lucide-react";
 import { d as Mr } from "./panel-DnvDNQac.js";
 function We() {

package/docs/INTERFACES.md

@@ -1,6 +1,6 @@
 # Workspace Interfaces
 
-Last updated: 2026-05-02
+Last updated: 2026-06-12
 
 `@hachej/boring-workspace` is a workspace UI and bridge package. The app shell owns
 auth, routing, application persistence, and the concrete chat component.

package/docs/PLUGIN_STRUCTURE.md

@@ -1,9 +1,9 @@
 # Plugin Structure
 
 Canonical quick reference for boring-ui plugin layouts. For the full current
-contract, see [`PLUGIN_SYSTEM.md`](./PLUGIN_SYSTEM.md). For future hosted/runtime
-architecture, see the repo-level
-[`docs/runtime-plugin-v2-hot-reload-plan.md`](../../../docs/runtime-plugin-v2-hot-reload-plan.md).
+contract, see [`PLUGIN_SYSTEM.md`](./PLUGIN_SYSTEM.md). For the historical
+hosted/runtime architecture exploration, see the archived repo-level
+[`docs/plans/archive/runtime-plugin-v2-hot-reload-plan.md`](../../../docs/plans/archive/runtime-plugin-v2-hot-reload-plan.md).
 
 ## Generated/runtime plugin
 

package/docs/PLUGIN_SYSTEM.md

@@ -6,8 +6,9 @@ example `PLUGIN_SYSTEM.md §4.5`), so keep headings stable when editing.
 
 This document describes the implementation as it exists now. Historical
 implementation plans live under `packages/workspace/docs/plans/archive/`.
-For future generated/hosted runtime-plugin architecture, see the repo-level
-`docs/runtime-plugin-v2-hot-reload-plan.md`.
+For the historical generated/hosted runtime-plugin architecture exploration,
+see the archived repo-level
+`docs/plans/archive/runtime-plugin-v2-hot-reload-plan.md`.
 
 ## Contents
 
@@ -27,7 +28,7 @@ For future generated/hosted runtime-plugin architecture, see the repo-level
 | Term | Definition |
 | --- | --- |
 | **App/internal plugin** | Trusted package composed by the app at boot. May export `boring.server`, Fastify routes, agent tools, providers, catalogs, and domain APIs. Server changes require restart/redeploy. |
-| **Runtime/generated plugin** | Workspace-local plugin under `.pi/extensions/<id>/`, usually produced by `boring-ui-plugin scaffold`. It is hot-loaded for front/Pi resources, but must not rely on dynamic backend routes. |
+| **Runtime/generated plugin** | Workspace-local plugin under `.pi/extensions/<id>/`, usually produced by `boring-ui-plugin scaffold`. Also called an **external** plugin in trust-model terms. It is hot-loaded for front/Pi resources, but must not rely on dynamic backend routes. |
 | **Boring plugin package** | Node package with `package.json#boring` and/or `package.json#pi`. App-default packages are declared in `package.json#boring.defaultPluginPackages` or passed to `createWorkspaceAgentServer`. |
 | **Boring front factory** | Default export of `boring.front`: `(api: BoringFrontAPI) => void | Promise<void>`. Usually created with `definePlugin({ ... })`. |
 | **Workspace server plugin** | Trusted boot-time server contribution returned by `defineServerPlugin({ ... })` or a compatible object. May include routes, tools, system prompt, Pi resources, and provisioning. |
@@ -35,6 +36,25 @@ For future generated/hosted runtime-plugin architecture, see the repo-level
 | **Revision** | Per-plugin monotonic integer. It bumps on signature changes and is appended to browser front imports for cache busting. |
 | **Surface resolver** | Front contribution that maps a typed request such as `open-path` to a panel id/title/params. File opens should route through this path. |
 
+### 1.1 Trust model (internal vs external)
+
+The two tiers differ by **provenance and trust**, not just lifecycle:
+
+| | App/internal plugin | Runtime/generated ("external") plugin |
+| --- | --- | --- |
+| Provenance | App-owned package, composed at boot | Workspace-local `.pi/extensions/`, often agent-generated |
+| Trust | Trusted app module | Trusted **only** as local developer/workspace code |
+| Front | Native React in the host tree | Native React (local trusted context) |
+| Server/routes/tools | Full power: Fastify routes, static `agentTools`, providers, domain APIs | Route-free; no `boring.server`; backend work goes through Pi tools |
+| Reload | Restart/redeploy | `/reload` hot-swaps front + Pi resources |
+
+Plugin tools' `execute()` run in the **host Node process and bypass the
+sandbox by design**; plugin loading is local-mode-only (skipped under
+`vercel-sandbox`). Hosted/marketplace plugins — untrusted external code that
+would need iframe fronts and sandbox-proxied tools — are **not implemented**;
+that provenance/permission model is a future phase (see §7 and the archived
+repo-level `docs/plans/archive/runtime-plugin-trust-modes-plan.md`).
+
 ---
 
 ## 2. End-to-end behaviour
@@ -241,6 +261,27 @@ boring-ui-plugin verify <name>
 Do not teach agents to copy `packages/plugin-cli/templates/plugin` for generated runtime
 plugins. That template is an app/internal publishable package example.
 
+### 4.7 Chat slash commands
+
+Plugins can contribute **chat `/slash` commands** — a separate surface from the
+command-palette `commands` output. There is no `!` bang-command; the composer
+parses `/name args` only.
+
+- **Front registry** (`packages/agent/src/front/slashCommands/registry.ts`):
+  `SlashCommand { name, description, kind?, source?, sourcePlugin?, handler }`.
+  `kind: 'local'` runs in the browser; `kind: 'skill'` is forwarded to the Pi
+  agent as `skill: <name>\n\n<args>`. The chat composer (`PiChatPanel`)
+  intercepts `/` input before it reaches the harness.
+- **Server commands** are listed from the harness via
+  `GET /api/v1/agent/commands` (consumed by `useServerCommands`) and executed
+  via `POST /api/v1/agent/commands/execute` — this route **bypasses the
+  harness chat loop**; Pi executes the command natively. `source`
+  (`extension`/`prompt`/`skill`) and `sourcePlugin` tag where a command came
+  from in the picker.
+- **How a plugin contributes one**: ship a Pi extension/prompt/skill in its
+  `package.json#pi` block — Pi-sourced commands appear automatically. No
+  harness changes required.
+
 ---
 
 ## 5. Key algorithms
@@ -327,7 +368,8 @@ while capturing the front factory.
   plugin RPC for purity.
 - Dynamic provider/binding trees for runtime hot-loaded plugins in this PR.
 - Marketplace signing/provenance/permissions. Those belong to the next runtime
-  plugin architecture phase.
+  plugin architecture phase. Promotion (external → internal) is designed as an
+  explicit admin action with pinned provenance + restart — not implemented yet.
 
 ---