@hachej/boring-workspace 0.1.53 → 0.1.55

package/dist/app-server.d.ts

@@ -1,11 +1,12 @@
 import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 export { PiPackageSource as WorkspacePiPackageSource } from '@hachej/boring-agent/server';
 import { FastifyInstance } from 'fastify';
-import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, B as BoringPluginSourceInput, a as BoringPluginFrontTargetResolver, b as WorkspaceProvisioningContribution, c as WorkspaceRouteContribution, d as createInMemoryBridge } from './createInMemoryBridge-siFWq_R_.js';
-export { e as ServerWorkspaceRuntimeProvisioningInput } from './createInMemoryBridge-siFWq_R_.js';
+import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, c as WorkspaceBridgeRuntimeEnvOptions, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, f as WorkspaceProvisioningContribution, g as WorkspaceRouteContribution, h as createInMemoryBridge } from './runtimeEnv-XVFZ1OkV.js';
+export { i as ServerWorkspaceRuntimeProvisioningInput } from './runtimeEnv-XVFZ1OkV.js';
+import { W as WorkspaceBridgeOperationDefinition } from './workspace-bridge-rpc-A98RA5o6.js';
 import './manifest-C2vVgH_e.js';
 import './agent-tool-CB0RQyx9.js';
-import './ui-bridge-LeBuZqfA.js';
+import './ui-bridge-BbuUZ5iC.js';
 
 /**
  * Directory-source entry: `{ dir, options?, hotReload? }`. Resolved via
@@ -15,6 +16,12 @@ interface DirPluginEntry {
     dir: string;
     options?: unknown;
     hotReload?: boolean;
+    /**
+     * Directory-source plugins are untrusted for host bridge handler registration
+     * unless the app explicitly marks the entry as internal at boot. This keeps
+     * user/workspace plugin packages from self-registering privileged host RPCs.
+     */
+    trust?: "internal";
 }
 /**
  * Directory-source server entries are manifest-only: missing declarations mean
@@ -37,6 +44,8 @@ interface PluginResolveContext {
  * (no manifest server) returns false.
  */
 declare function hasDirServerPlugin(entry: DirPluginEntry): boolean;
+declare function isTrustedWorkspaceBridgeHandlerEntry(entry: unknown): boolean;
+declare function assertWorkspaceBridgeHandlersTrusted(plugin: WorkspaceServerPlugin, entry: unknown): void;
 /**
  * Single dispatch point for any entry shape:
  *   - WorkspaceServerPlugin object → pass through
@@ -73,16 +82,19 @@ interface WorkspaceAgentServerPluginContext {
 /**
  * Single install entry type. Accepts:
  *  - `WorkspaceServerPlugin` — pre-built plugin object.
- *  - `{ dir, options?, hotReload? }` — directory-source plugin resolved
+ *  - `{ dir, options?, hotReload?, trust? }` — directory-source plugin resolved
  *     via explicit package.json#boring.server. Declared-but-missing throws.
  *     hotReload uses jiti for diagnostic re-imports, while route/tool
- *     registration is still boot-time.
+ *     registration is still boot-time. Directory entries may contribute
+ *     `workspaceBridgeHandlers` only when marked `trust: "internal"`.
  */
 type WorkspacePluginEntry = WorkspaceServerPlugin | DirPluginEntry;
 interface CreateWorkspaceAgentServerOptions extends WorkspaceAgentCreateOptions, Pick<ServerBootstrapOptions, "defaults" | "excludeDefaults"> {
     /**
-     * Plugins to install. Accepts pre-built `WorkspaceServerPlugin` objects
-     * or `{ dir, options?, hotReload? }` directory-source entries.
+     * Host-installed server plugins. Accepts pre-built `WorkspaceServerPlugin`
+     * objects or `{ dir, options?, hotReload?, trust? }` directory-source entries.
+     * Directory entries may contribute privileged `workspaceBridgeHandlers` only
+     * when explicitly marked `trust: "internal"`.
      */
     plugins?: WorkspacePluginEntry[];
     provisionWorkspace?: boolean;
@@ -111,6 +123,24 @@ interface CreateWorkspaceAgentServerOptions extends WorkspaceAgentCreateOptions,
      * live under the app directory.
      */
     appRoot?: string;
+    workspaceBridge?: {
+        registry?: WorkspaceBridgeRegistry;
+        runtimeTokenSecret?: string;
+        runtimeRefreshTokenSecret?: string;
+        browserAuthPolicy?: BridgeAuthPolicy;
+        /**
+         * Dev-only escape hatch for standalone/local CLI usage. This is never
+         * enabled implicitly: exposed hosts must provide browserAuthPolicy, and
+         * local tools that intentionally rely on the unauthenticated local-cli
+         * policy must opt in explicitly.
+         */
+        allowInsecureLocalCliBrowserAuth?: boolean;
+        handlers?: Array<{
+            definition: WorkspaceBridgeOperationDefinition;
+            handler: WorkspaceBridgeHandler;
+        }>;
+        runtimeEnv?: WorkspaceBridgeRuntimeEnvOptions;
+    };
     /** Additional plugin collection roots to scan alongside workspace .pi/extensions and package/plugin-derived roots. */
     additionalBoringPluginDirs?: BoringPluginSourceInput[];
     /**
@@ -144,6 +174,7 @@ interface WorkspaceAgentServerPluginCollection {
     provisioningContributions: WorkspaceProvisioningContribution[];
     runtimePlugins: WorkspaceRuntimeProvisioningInput[];
     routeContributions: WorkspaceRouteContribution[];
+    workspaceBridgeHandlers: WorkspaceServerPlugin["workspaceBridgeHandlers"];
     preservedUiStateKeys: string[];
     agentOptions: Pick<WorkspaceAgentCreateOptions, "extraTools" | "systemPromptAppend" | "pi">;
 }
@@ -199,4 +230,4 @@ interface ResolveDefaultWorkspacePluginPackagePathsOptions {
  */
 declare function resolveDefaultWorkspacePluginPackagePaths({ workspaceRoot, defaultPluginPackages, anchorDir, }?: ResolveDefaultWorkspacePluginPackagePathsOptions): string[];
 
-export { type CollectWorkspaceAgentServerPluginsOptions, type CreateWorkspaceAgentServerOptions, type DirPluginEntry, PLUGIN_AUTHORING_PROVISIONING_IDS, type PluginResolveContext, type ResolveDefaultWorkspacePluginPackagePathsOptions, type WorkspaceAgentPiOptions, type WorkspaceAgentServerPluginCollection, type WorkspaceAgentServerPluginContext, type WorkspacePluginEntry, type WorkspacePluginPackagePiSnapshot, WorkspaceProvisioningContribution, WorkspaceRouteContribution, type WorkspaceRuntimeProvisioningInput, buildWorkspaceContextPrompt, collectWorkspaceAgentServerPlugins, createWorkspaceAgentServer, hasDirServerPlugin, omitPluginAuthoringProvisioning, provisionWorkspaceAgentServer, readWorkspacePluginPackagePiSnapshot, readWorkspacePluginPackageRuntimePlugins, resolveDefaultWorkspacePluginPackagePaths, resolveOnePluginEntry };
+export { type CollectWorkspaceAgentServerPluginsOptions, type CreateWorkspaceAgentServerOptions, type DirPluginEntry, PLUGIN_AUTHORING_PROVISIONING_IDS, type PluginResolveContext, type ResolveDefaultWorkspacePluginPackagePathsOptions, type WorkspaceAgentPiOptions, type WorkspaceAgentServerPluginCollection, type WorkspaceAgentServerPluginContext, type WorkspacePluginEntry, type WorkspacePluginPackagePiSnapshot, WorkspaceProvisioningContribution, WorkspaceRouteContribution, type WorkspaceRuntimeProvisioningInput, assertWorkspaceBridgeHandlersTrusted, buildWorkspaceContextPrompt, collectWorkspaceAgentServerPlugins, createWorkspaceAgentServer, hasDirServerPlugin, isTrustedWorkspaceBridgeHandlerEntry, omitPluginAuthoringProvisioning, provisionWorkspaceAgentServer, readWorkspacePluginPackagePiSnapshot, readWorkspacePluginPackageRuntimePlugins, resolveDefaultWorkspacePluginPackagePaths, resolveOnePluginEntry };