@hachej/boring-workspace 0.1.61 → 0.1.63

package/dist/app-server.d.ts

@@ -1,12 +1,13 @@
 import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 export { PiPackageSource as WorkspacePiPackageSource } from '@hachej/boring-agent/server';
 import { FastifyInstance } from 'fastify';
-import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, c as WorkspaceBridgeRuntimeEnvOptions, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, f as WorkspaceProvisioningContribution, g as WorkspaceRouteContribution, h as createInMemoryBridge } from './runtimeEnv-XVFZ1OkV.js';
-export { i as ServerWorkspaceRuntimeProvisioningInput } from './runtimeEnv-XVFZ1OkV.js';
+import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, c as WorkspaceBridgeRuntimeEnvOptions, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, f as createInMemoryBridge, g as WorkspaceProvisioningContribution, h as WorkspaceRouteContribution } from './runtimeEnv-HolIkcoB.js';
+export { i as ServerWorkspaceRuntimeProvisioningInput } from './runtimeEnv-HolIkcoB.js';
 import { W as WorkspaceBridgeOperationDefinition } from './workspace-bridge-rpc-A98RA5o6.js';
 import './manifest-C2vVgH_e.js';
 import './agent-tool-CB0RQyx9.js';
-import './ui-bridge-BbuUZ5iC.js';
+import './ui-bridge-D2eO3epD.js';
+import './filesystem-vhLA0ERd.js';
 
 /**
  * Directory-source entry: `{ dir, options?, hotReload? }`. Resolved via
@@ -176,6 +177,7 @@ interface WorkspaceAgentServerPluginCollection {
     routeContributions: WorkspaceRouteContribution[];
     workspaceBridgeHandlers: WorkspaceServerPlugin["workspaceBridgeHandlers"];
     preservedUiStateKeys: string[];
+    defaultPluginPackagePaths: string[];
     agentOptions: Pick<WorkspaceAgentCreateOptions, "extraTools" | "systemPromptAppend" | "pi">;
 }
 interface CollectWorkspaceAgentServerPluginsOptions extends Pick<ServerBootstrapOptions, "plugins" | "defaults" | "excludeDefaults"> {
@@ -185,10 +187,18 @@ interface CollectWorkspaceAgentServerPluginsOptions extends Pick<ServerBootstrap
     /** Whether to include built-in boring plugin-authoring provisioning/prompt resources. */
     installPluginAuthoring?: boolean;
 }
+interface ResolveWorkspaceAgentServerPluginCollectionOptions extends Omit<CollectWorkspaceAgentServerPluginsOptions, "plugins"> {
+    workspaceRoot: string;
+    bridge: ReturnType<typeof createInMemoryBridge>;
+    defaultPluginPackages?: string[];
+    appRoot?: string;
+    plugins?: WorkspacePluginEntry[];
+}
 declare function buildWorkspaceContextPrompt(options?: {
     pluginAuthoringEnabled?: boolean;
 }): string;
 declare function collectWorkspaceAgentServerPlugins(opts?: CollectWorkspaceAgentServerPluginsOptions): WorkspaceAgentServerPluginCollection;
+declare function resolveWorkspaceAgentServerPluginCollection(opts: ResolveWorkspaceAgentServerPluginCollectionOptions): Promise<WorkspaceAgentServerPluginCollection>;
 declare function provisionWorkspaceAgentServer(opts: {
     workspaceRoot: string;
     provisioningContributions?: WorkspaceProvisioningContribution[];
@@ -230,4 +240,4 @@ interface ResolveDefaultWorkspacePluginPackagePathsOptions {
  */
 declare function resolveDefaultWorkspacePluginPackagePaths({ workspaceRoot, defaultPluginPackages, anchorDir, }?: ResolveDefaultWorkspacePluginPackagePathsOptions): string[];
 
-export { type CollectWorkspaceAgentServerPluginsOptions, type CreateWorkspaceAgentServerOptions, type DirPluginEntry, PLUGIN_AUTHORING_PROVISIONING_IDS, type PluginResolveContext, type ResolveDefaultWorkspacePluginPackagePathsOptions, type WorkspaceAgentPiOptions, type WorkspaceAgentServerPluginCollection, type WorkspaceAgentServerPluginContext, type WorkspacePluginEntry, type WorkspacePluginPackagePiSnapshot, WorkspaceProvisioningContribution, WorkspaceRouteContribution, type WorkspaceRuntimeProvisioningInput, assertWorkspaceBridgeHandlersTrusted, buildWorkspaceContextPrompt, collectWorkspaceAgentServerPlugins, createWorkspaceAgentServer, hasDirServerPlugin, isTrustedWorkspaceBridgeHandlerEntry, omitPluginAuthoringProvisioning, provisionWorkspaceAgentServer, readWorkspacePluginPackagePiSnapshot, readWorkspacePluginPackageRuntimePlugins, resolveDefaultWorkspacePluginPackagePaths, resolveOnePluginEntry };
+export { type CollectWorkspaceAgentServerPluginsOptions, type CreateWorkspaceAgentServerOptions, type DirPluginEntry, PLUGIN_AUTHORING_PROVISIONING_IDS, type PluginResolveContext, type ResolveDefaultWorkspacePluginPackagePathsOptions, type ResolveWorkspaceAgentServerPluginCollectionOptions, type WorkspaceAgentPiOptions, type WorkspaceAgentServerPluginCollection, type WorkspaceAgentServerPluginContext, type WorkspacePluginEntry, type WorkspacePluginPackagePiSnapshot, WorkspaceProvisioningContribution, WorkspaceRouteContribution, type WorkspaceRuntimeProvisioningInput, assertWorkspaceBridgeHandlersTrusted, buildWorkspaceContextPrompt, collectWorkspaceAgentServerPlugins, createWorkspaceAgentServer, hasDirServerPlugin, isTrustedWorkspaceBridgeHandlerEntry, omitPluginAuthoringProvisioning, provisionWorkspaceAgentServer, readWorkspacePluginPackagePiSnapshot, readWorkspacePluginPackageRuntimePlugins, resolveDefaultWorkspacePluginPackagePaths, resolveOnePluginEntry, resolveWorkspaceAgentServerPluginCollection };

package/dist/app-server.js

@@ -2457,6 +2457,14 @@ function registerWorkspaceUiBridge(bridge) {
 // src/server/ui-control/tools/uiTools.ts
 import { stat } from "fs/promises";
 import { resolve as resolve6, isAbsolute as isAbsolute4, relative as relative3, win32 } from "path";
+
+// src/shared/types/filesystem.ts
+var USER_FILESYSTEM_ID = "user";
+function normalizeUiFilesystem(filesystem) {
+  return filesystem && filesystem.length > 0 ? filesystem : USER_FILESYSTEM_ID;
+}
+
+// src/server/ui-control/tools/uiTools.ts
 function makeError(message) {
   return {
     content: [{ type: "text", text: message }],
@@ -2474,9 +2482,9 @@ function isPathAbsolute(filePath) {
 function isOutsideWorkspaceRel(rel) {
   return rel === ".." || rel.startsWith("../") || rel.startsWith("..\\") || isPathAbsolute(rel);
 }
-function validatePathSyntax(relPath, workspaceRoot) {
+function validatePathSyntax(relPath, workspaceRoot, opts = {}) {
   const rootHint = workspaceRoot ? ` (${workspaceRoot})` : "";
-  if (isPathAbsolute(relPath)) {
+  if (!opts.allowAbsolute && isPathAbsolute(relPath)) {
     return {
       ok: false,
       reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root${rootHint}.`
@@ -2558,7 +2566,10 @@ function isVerified(kind, params, state) {
   const tabs = state.openTabs ?? [];
   if (kind === "openFile") {
     const path = typeof params.path === "string" ? params.path : null;
-    return path !== null && tabs.some((t) => t.params?.path === path);
+    const filesystem = normalizeUiFilesystem(typeof params.filesystem === "string" ? params.filesystem : void 0);
+    return path !== null && tabs.some(
+      (t) => t.params?.path === path && normalizeUiFilesystem(typeof t.params?.filesystem === "string" ? t.params.filesystem : void 0) === filesystem
+    );
   }
   if (kind === "openPanel") {
     const id = typeof params.id === "string" ? params.id : null;
@@ -2598,7 +2609,7 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "",
       "Supported `kind` values:",
       "",
-      "  openFile     params: { path: string, mode?: 'view'|'edit'|'diff' }",
+      "  openFile     params: { path: string, mode?: 'view'|'edit'|'diff', filesystem?: 'user'|'company_context' }",
       "               \u2014 Open a file in the workbench. The workbench pane",
       "                 auto-opens if collapsed. Path must be relative to the",
       "                 workspace root (e.g. `src/foo.ts`, not `foo.ts` if it",
@@ -2613,6 +2624,8 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "                 is found.",
       "                 If the path is a folder, openFile reveals/selects it in",
       "                 the file tree instead of opening an editor tab.",
+      "                 Omit filesystem for normal workspace files (defaults to user). Use filesystem:'company_context' only when a company_context binding is advertised.",
+      "                 Path prefixes such as company_context:/x do not switch filesystem identity.",
       "                 Example: {kind:'openFile', params:{path:'README.md'}}",
       "",
       "  openPanel    params: { id: string, component: string,",
@@ -2627,11 +2640,15 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "                          component:'chart-canvas',",
       "                          params:{seriesId:'GDPC1'}}}",
       "",
-      "  openSurface  params: { kind: string, target: string, meta?: object }",
+      "  openSurface  params: { kind: string, target: string, filesystem?: 'user'|'company_context', meta?: object }",
       "               \u2014 Open an app-owned target through the workspace",
       "                 surface resolver registry. Use this when the app",
       "                 defines the mapping from domain target to panel",
       "                 component, for example a catalog row.",
+      "                 For kind:'workspace.open.path', filesystem follows the",
+      "                 same rules as openFile: omit for user files; pass",
+      "                 filesystem:'company_context' only for advertised company",
+      "                 context bindings; path prefixes do not switch identity.",
       "                 Example: {kind:'openSurface', params:{",
       "                          kind:'catalog.open-row',",
       "                          target:'orders_daily',",
@@ -2705,29 +2722,32 @@ function createExecUiTool(workspaceBridge, opts = {}) {
             `${kind}: ${kind === "navigateToLine" ? "file" : "path"} param is required`
           );
         }
-        const syntax = validatePathSyntax(relPath, workspaceRoot);
+        const filesystem = kind === "openFile" ? normalizeUiFilesystem(typeof cmdParams.filesystem === "string" ? cmdParams.filesystem : void 0) : USER_FILESYSTEM_ID;
+        const syntax = validatePathSyntax(relPath, workspaceRoot, { allowAbsolute: filesystem !== USER_FILESYSTEM_ID });
         if (!syntax.ok) return makeError(syntax.reason);
-        if (workspaceRoot) {
-          const check = await validateExistingPath(workspaceRoot, relPath);
-          if (!check.ok) {
-            return makeError(check.reason);
-          }
-          if (kind === "openFile" && check.kind === "dir") {
-            effectiveKind = "expandToFile";
-          }
-        } else if (resolvePathKind) {
-          const pathKind = await resolvePathKind(relPath);
-          if (!pathKind) {
-            return makeError(`file not found at "${relPath}". Try find or grep to locate the file before retrying openFile.`);
-          }
-          if (kind === "openFile" && pathKind === "dir") {
-            effectiveKind = "expandToFile";
+        if (filesystem === USER_FILESYSTEM_ID) {
+          if (workspaceRoot) {
+            const check = await validateExistingPath(workspaceRoot, relPath);
+            if (!check.ok) {
+              return makeError(check.reason);
+            }
+            if (kind === "openFile" && check.kind === "dir") {
+              effectiveKind = "expandToFile";
+            }
+          } else if (resolvePathKind) {
+            const pathKind = await resolvePathKind(relPath);
+            if (!pathKind) {
+              return makeError(`file not found at "${relPath}". Try find or grep to locate the file before retrying openFile.`);
+            }
+            if (kind === "openFile" && pathKind === "dir") {
+              effectiveKind = "expandToFile";
+            }
           }
         }
       }
       try {
         const command = { kind: effectiveKind, params: cmdParams };
-        const result = await workspaceBridge.emitUiEffect(command);
+        const result = await workspaceBridge.postCommand(command);
         if (result.status === "error") {
           return {
             content: [{ type: "text", text: JSON.stringify(result) }],
@@ -2979,8 +2999,9 @@ function uiRoutes(app, opts, done) {
       const body = request.body;
       const bridge = await resolveBridge(request);
       const current = await bridge.getState() ?? {};
+      const preserveStateKeys = opts.getPreserveStateKeys ? await opts.getPreserveStateKeys(request) : opts.preserveStateKeys ?? [];
       const preserved = Object.fromEntries(
-        (opts.preserveStateKeys ?? []).filter((key) => !(key in body.state) && key in current).map((key) => [key, current[key]])
+        preserveStateKeys.filter((key) => !(key in body.state) && key in current).map((key) => [key, current[key]])
       );
       await bridge.setState({ ...body.state, ...preserved });
       return reply.code(204).send();
@@ -3928,6 +3949,7 @@ function collectWorkspaceAgentServerPlugins(opts = {}) {
     routeContributions: result.routeContributions,
     workspaceBridgeHandlers: result.workspaceBridgeHandlers,
     preservedUiStateKeys: result.preservedUiStateKeys,
+    defaultPluginPackagePaths: [],
     agentOptions: {
       extraTools: result.agentTools,
       systemPromptAppend: [opts.systemPromptAppend, result.systemPromptAppend].filter(Boolean).join("\n\n") || void 0,
@@ -3944,6 +3966,31 @@ function collectWorkspaceAgentServerPlugins(opts = {}) {
     }
   };
 }
+async function resolveWorkspaceAgentServerPluginCollection(opts) {
+  const ctx = { workspaceRoot: opts.workspaceRoot, bridge: opts.bridge };
+  const defaultPluginPackagePaths = resolveDefaultWorkspacePluginPackagePaths({
+    workspaceRoot: opts.workspaceRoot,
+    defaultPluginPackages: opts.defaultPluginPackages,
+    anchorDir: opts.appRoot
+  });
+  const defaultPluginDirEntries = defaultPluginPackagePaths.map((dir) => ({ dir, hotReload: true, trust: "internal" })).filter((entry) => hasDirServerPlugin(entry));
+  const allPluginEntries = [
+    ...defaultPluginDirEntries,
+    ...opts.plugins ?? []
+  ];
+  const resolvedPlugins = await Promise.all(
+    allPluginEntries.map(async (entry) => {
+      const plugin = await resolveOnePluginEntry(entry, ctx);
+      assertWorkspaceBridgeHandlersTrusted(plugin, entry);
+      return plugin;
+    })
+  );
+  const collection = collectWorkspaceAgentServerPlugins({
+    ...opts,
+    plugins: resolvedPlugins
+  });
+  return { ...collection, defaultPluginPackagePaths };
+}
 async function provisionWorkspaceAgentServer(opts) {
   if (!opts.provisioningContributions?.length) return;
   await provisionRuntimeWorkspace({
@@ -4117,30 +4164,19 @@ async function createWorkspaceAgentServer(opts = {}) {
   const uiTools = createWorkspaceUiTools(bridge, {
     workspaceRoot: validateUiPaths ? workspaceRoot : void 0
   });
-  const ctx = { workspaceRoot, bridge };
-  const defaultPluginPackagePaths = resolveDefaultWorkspacePluginPackagePaths({
+  const pluginAuthoringEnabled = externalPluginsEnabled && (opts.installPluginAuthoring ?? workspaceFsCapability === "strong") && !(opts.excludeDefaults ?? []).includes("boring-ui-plugin-cli-package");
+  const pluginCollection = await resolveWorkspaceAgentServerPluginCollection({
+    ...opts,
     workspaceRoot,
-    defaultPluginPackages: opts.defaultPluginPackages,
-    anchorDir: opts.appRoot
+    bridge,
+    installPluginAuthoring: pluginAuthoringEnabled
   });
-  const defaultPluginDirEntries = defaultPluginPackagePaths.map((dir) => ({ dir, hotReload: true, trust: "internal" })).filter((entry) => hasDirServerPlugin(entry));
+  const defaultPluginPackagePaths = pluginCollection.defaultPluginPackagePaths;
+  const ctx = { workspaceRoot, bridge };
   const allPluginEntries = [
-    ...defaultPluginDirEntries,
+    ...defaultPluginPackagePaths.map((dir) => ({ dir, hotReload: true, trust: "internal" })).filter((entry) => hasDirServerPlugin(entry)),
     ...opts.plugins ?? []
   ];
-  const resolvedPlugins = await Promise.all(
-    allPluginEntries.map(async (entry) => {
-      const plugin = await resolveOnePluginEntry(entry, ctx);
-      assertWorkspaceBridgeHandlersTrusted(plugin, entry);
-      return plugin;
-    })
-  );
-  const pluginAuthoringEnabled = externalPluginsEnabled && (opts.installPluginAuthoring ?? workspaceFsCapability === "strong") && !(opts.excludeDefaults ?? []).includes("boring-ui-plugin-cli-package");
-  const pluginCollection = collectWorkspaceAgentServerPlugins({
-    ...opts,
-    plugins: resolvedPlugins,
-    installPluginAuthoring: pluginAuthoringEnabled
-  });
   const { registry: workspaceBridgeRegistry } = createWorkspaceBridgeRuntimeCore({
     registry: opts.workspaceBridge?.registry,
     ownerWorkspaceId: "default",
@@ -4364,5 +4400,6 @@ export {
   readWorkspacePluginPackagePiSnapshot,
   readWorkspacePluginPackageRuntimePlugins,
   resolveDefaultWorkspacePluginPackagePaths,
-  resolveOnePluginEntry
+  resolveOnePluginEntry,
+  resolveWorkspaceAgentServerPluginCollection
 };

package/dist/events.d.ts

@@ -1,3 +1,5 @@
+import { F as FilesystemId } from './filesystem-vhLA0ERd.js';
+
 /**
  * Tiny typed event bus. ~30 lines, no runtime deps.
  *
@@ -58,9 +60,12 @@ type WorkspacePanelMatch = {
 } | {
     param: string;
     value: unknown;
+} | {
+    params: Record<string, unknown>;
 } | {
     paramPrefix: string;
     value: string;
+    params?: Record<string, unknown>;
 };
 /**
  * Discriminated origin metadata. Encoded as a union (rather than a
@@ -148,17 +153,21 @@ interface WorkspaceHostEventMap {
  */
 interface WorkspacePluginEventMap {
     "filesystem:file.changed": EventMeta & {
+        filesystem?: FilesystemId;
         path: string;
     };
     "filesystem:file.created": EventMeta & {
+        filesystem?: FilesystemId;
         path: string;
         kind: "file" | "dir";
     };
     "filesystem:file.moved": EventMeta & {
+        filesystem?: FilesystemId;
         from: string;
         to: string;
     };
     "filesystem:file.deleted": EventMeta & {
+        filesystem?: FilesystemId;
         path: string;
     };
 }

package/dist/filesystem-vhLA0ERd.d.ts

@@ -0,0 +1,17 @@
+type FilesystemId = "user" | "company_context" | (string & {});
+declare const USER_FILESYSTEM_ID = "user";
+declare const COMPANY_CONTEXT_FILESYSTEM_ID = "company_context";
+interface UiFileResource {
+    readonly filesystem: FilesystemId;
+    readonly path: string;
+}
+type UiFileResourceInput = string | {
+    readonly filesystem?: FilesystemId | null;
+    readonly path: string;
+};
+declare function normalizeUiFilesystem(filesystem: FilesystemId | null | undefined): FilesystemId;
+declare function normalizeUiFileResource(input: UiFileResourceInput): UiFileResource;
+declare function uiFileResourceKey(resource: UiFileResourceInput): string;
+declare function withUiFileResource<T extends Record<string, unknown>>(value: T, fallbackFilesystem?: FilesystemId | null): T & UiFileResource;
+
+export { COMPANY_CONTEXT_FILESYSTEM_ID as C, type FilesystemId as F, USER_FILESYSTEM_ID as U, type UiFileResource as a, type UiFileResourceInput as b, normalizeUiFilesystem as c, normalizeUiFileResource as n, uiFileResourceKey as u, withUiFileResource as w };

package/dist/plugin.d.ts

@@ -1,9 +1,10 @@
 import { ComponentType, ReactNode } from 'react';
-import { P as PaneProps, a as PanelConfig, g as WorkspaceSourceProps, h as SurfaceResolverExample, S as SurfaceOpenRequest, c as SurfacePanelResolution } from './surface-CDklwi48.js';
-export { W as WORKSPACE_OPEN_PATH_SURFACE_KIND, i as WorkspaceSourceOpenPanelConfig } from './surface-CDklwi48.js';
+import { P as PaneProps, a as PanelConfig, g as WorkspaceSourceProps, h as SurfaceResolverExample, S as SurfaceOpenRequest, c as SurfacePanelResolution } from './surface-aLQ_Hryw.js';
+export { W as WORKSPACE_OPEN_PATH_SURFACE_KIND, i as WorkspaceSourceOpenPanelConfig } from './surface-aLQ_Hryw.js';
 export { B as BoringPackageBoringField, a as BoringPackagePiField, b as BoringPackagePiSource, c as BoringPackagePiSourceObject, d as BoringPluginManifestErrorCode, e as BoringPluginManifestIssue, f as BoringPluginManifestValidationResult, g as BoringPluginPackageJson, i as isSafePluginRelativePath, h as isValidBoringPluginId, v as validateBoringPluginManifest } from './manifest-C2vVgH_e.js';
-import { a as UiCommand, C as CommandResult, U as UiBridge } from './ui-bridge-BbuUZ5iC.js';
+import { a as UiCommand, C as CommandResult, U as UiBridge } from './ui-bridge-D2eO3epD.js';
 import 'dockview-react';
+import './filesystem-vhLA0ERd.js';
 
 type CatalogBadge = {
     /** 1–4 char mono code rendered as a chip. */

package/dist/{runtimeEnv-XVFZ1OkV.d.ts → runtimeEnv-HolIkcoB.d.ts}

@@ -3,7 +3,7 @@ import { PiPackageSource, PluginSkillSource, ProvisionWorkspaceRuntimeOptions, R
 import { FastifyPluginAsync } from 'fastify';
 import { A as AgentTool } from './agent-tool-CB0RQyx9.js';
 import { B as BridgeAuthContext, W as WorkspaceBridgeOperationDefinition, a as WorkspaceBridgeCallRequest, b as WorkspaceBridgeCallResponse, d as BridgeCallerClass } from './workspace-bridge-rpc-A98RA5o6.js';
-import { a as UiCommand, C as CommandResult, W as WorkspaceBridge } from './ui-bridge-BbuUZ5iC.js';
+import { a as UiCommand, C as CommandResult, W as WorkspaceBridge } from './ui-bridge-D2eO3epD.js';
 
 type BoringPluginNativeFrontTargetTrust$1 = "local-trusted-native";
 /**
@@ -350,4 +350,4 @@ declare function createWorkspaceBridgeRuntimeEnvContribution(options: CreateWork
 declare function resolveBridgeCallUrl(value: string | undefined): string | undefined;
 declare function resolveBridgeTokenUrl(value: string | undefined): string | undefined;
 
-export { type WorkspaceBridgeCallContext as A, type BridgeAuthPolicy as B, type CreateWorkspaceBridgeRuntimeEnvContributionOptions as C, type WorkspaceBridgeHandlerArgs as D, type WorkspaceBridgeHandlerContribution as E, type WorkspaceBridgeRegistryCallOptions as F, type WorkspaceBridgeRegistryLogger as G, type WorkspaceBridgeRegistryOptions as H, type WorkspaceBridgeRuntimeEnvDisabledReason as I, type WorkspaceBridgeRuntimePlacement as J, bootstrapServer as K, type LocalCliBridgeAuthPolicyOptions as L, createBrowserBridgeAuthPolicy as M, createLocalCliBridgeAuthPolicy as N, createWorkspaceBridgeRegistry as O, type PluginRestartSurface as P, createWorkspaceBridgeRuntimeEnvContribution as Q, type RegisterWorkspaceBridgeHandlerOptions as R, type ServerBootstrapOptions as S, defineServerPlugin as T, resolveBridgeCallUrl as U, resolveBridgeTokenUrl as V, type WorkspaceServerPlugin as W, validateServerPlugin as X, validateWorkspaceBridgeOperationDefinition as Y, WorkspaceBridgeRegistry as a, type WorkspaceBridgeHandler as b, type WorkspaceBridgeRuntimeEnvOptions as c, type BoringPluginSourceInput as d, type BoringPluginFrontTargetResolver as e, type WorkspaceProvisioningContribution as f, type WorkspaceRouteContribution as g, createInMemoryBridge as h, type WorkspaceRuntimeProvisioningInput as i, type WorkspaceServerPluginAsset as j, type BoringServerPluginManifest as k, type BoringPluginListEntry as l, type BoringPluginFrontTarget as m, type BoringPluginSource as n, type BoringPluginEvent as o, type BoringPluginFrontTargetResolverContext as p, type BoringPluginNativeFrontTarget as q, type BoringPluginNativeFrontTargetTrust as r, type BoringPluginSourceKind as s, type BridgeAuthPolicyInput as t, type BridgeAuthPolicyRequestLike as u, type BridgeAuthResolution as v, type BridgePrincipal as w, type BridgeWorkspaceGrant as x, type BrowserBridgeAuthPolicyOptions as y, type ServerBootstrapResult as z };
+export { type WorkspaceBridgeCallContext as A, type BridgeAuthPolicy as B, type CreateWorkspaceBridgeRuntimeEnvContributionOptions as C, type WorkspaceBridgeHandlerArgs as D, type WorkspaceBridgeHandlerContribution as E, type WorkspaceBridgeRegistryCallOptions as F, type WorkspaceBridgeRegistryLogger as G, type WorkspaceBridgeRegistryOptions as H, type WorkspaceBridgeRuntimeEnvDisabledReason as I, type WorkspaceBridgeRuntimePlacement as J, bootstrapServer as K, type LocalCliBridgeAuthPolicyOptions as L, createBrowserBridgeAuthPolicy as M, createLocalCliBridgeAuthPolicy as N, createWorkspaceBridgeRegistry as O, type PluginRestartSurface as P, createWorkspaceBridgeRuntimeEnvContribution as Q, type RegisterWorkspaceBridgeHandlerOptions as R, type ServerBootstrapOptions as S, defineServerPlugin as T, resolveBridgeCallUrl as U, resolveBridgeTokenUrl as V, type WorkspaceServerPlugin as W, validateServerPlugin as X, validateWorkspaceBridgeOperationDefinition as Y, WorkspaceBridgeRegistry as a, type WorkspaceBridgeHandler as b, type WorkspaceBridgeRuntimeEnvOptions as c, type BoringPluginSourceInput as d, type BoringPluginFrontTargetResolver as e, createInMemoryBridge as f, type WorkspaceProvisioningContribution as g, type WorkspaceRouteContribution as h, type WorkspaceRuntimeProvisioningInput as i, type WorkspaceServerPluginAsset as j, type BoringServerPluginManifest as k, type BoringPluginListEntry as l, type BoringPluginFrontTarget as m, type BoringPluginSource as n, type BoringPluginEvent as o, type BoringPluginFrontTargetResolverContext as p, type BoringPluginNativeFrontTarget as q, type BoringPluginNativeFrontTargetTrust as r, type BoringPluginSourceKind as s, type BridgeAuthPolicyInput as t, type BridgeAuthPolicyRequestLike as u, type BridgeAuthResolution as v, type BridgePrincipal as w, type BridgeWorkspaceGrant as x, type BrowserBridgeAuthPolicyOptions as y, type ServerBootstrapResult as z };

package/dist/server.d.ts

@@ -1,8 +1,8 @@
-import { j as WorkspaceServerPluginAsset, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, k as BoringServerPluginManifest, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, l as BoringPluginListEntry, m as BoringPluginFrontTarget, n as BoringPluginSource, o as BoringPluginEvent, P as PluginRestartSurface } from './runtimeEnv-XVFZ1OkV.js';
-export { p as BoringPluginFrontTargetResolverContext, q as BoringPluginNativeFrontTarget, r as BoringPluginNativeFrontTargetTrust, s as BoringPluginSourceKind, t as BridgeAuthPolicyInput, u as BridgeAuthPolicyRequestLike, v as BridgeAuthResolution, w as BridgePrincipal, x as BridgeWorkspaceGrant, y as BrowserBridgeAuthPolicyOptions, C as CreateWorkspaceBridgeRuntimeEnvContributionOptions, L as LocalCliBridgeAuthPolicyOptions, R as RegisterWorkspaceBridgeHandlerOptions, S as ServerBootstrapOptions, z as ServerBootstrapResult, A as WorkspaceBridgeCallContext, D as WorkspaceBridgeHandlerArgs, E as WorkspaceBridgeHandlerContribution, F as WorkspaceBridgeRegistryCallOptions, G as WorkspaceBridgeRegistryLogger, H as WorkspaceBridgeRegistryOptions, I as WorkspaceBridgeRuntimeEnvDisabledReason, c as WorkspaceBridgeRuntimeEnvOptions, J as WorkspaceBridgeRuntimePlacement, f as WorkspaceProvisioningContribution, g as WorkspaceRouteContribution, W as WorkspaceServerPlugin, K as bootstrapServer, M as createBrowserBridgeAuthPolicy, h as createInMemoryBridge, N as createLocalCliBridgeAuthPolicy, O as createWorkspaceBridgeRegistry, Q as createWorkspaceBridgeRuntimeEnvContribution, T as defineServerPlugin, U as resolveBridgeCallUrl, V as resolveBridgeTokenUrl, X as validateServerPlugin, Y as validateWorkspaceBridgeOperationDefinition } from './runtimeEnv-XVFZ1OkV.js';
+import { j as WorkspaceServerPluginAsset, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, k as BoringServerPluginManifest, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, l as BoringPluginListEntry, m as BoringPluginFrontTarget, n as BoringPluginSource, o as BoringPluginEvent, P as PluginRestartSurface } from './runtimeEnv-HolIkcoB.js';
+export { p as BoringPluginFrontTargetResolverContext, q as BoringPluginNativeFrontTarget, r as BoringPluginNativeFrontTargetTrust, s as BoringPluginSourceKind, t as BridgeAuthPolicyInput, u as BridgeAuthPolicyRequestLike, v as BridgeAuthResolution, w as BridgePrincipal, x as BridgeWorkspaceGrant, y as BrowserBridgeAuthPolicyOptions, C as CreateWorkspaceBridgeRuntimeEnvContributionOptions, L as LocalCliBridgeAuthPolicyOptions, R as RegisterWorkspaceBridgeHandlerOptions, S as ServerBootstrapOptions, z as ServerBootstrapResult, A as WorkspaceBridgeCallContext, D as WorkspaceBridgeHandlerArgs, E as WorkspaceBridgeHandlerContribution, F as WorkspaceBridgeRegistryCallOptions, G as WorkspaceBridgeRegistryLogger, H as WorkspaceBridgeRegistryOptions, I as WorkspaceBridgeRuntimeEnvDisabledReason, c as WorkspaceBridgeRuntimeEnvOptions, J as WorkspaceBridgeRuntimePlacement, g as WorkspaceProvisioningContribution, h as WorkspaceRouteContribution, W as WorkspaceServerPlugin, K as bootstrapServer, M as createBrowserBridgeAuthPolicy, f as createInMemoryBridge, N as createLocalCliBridgeAuthPolicy, O as createWorkspaceBridgeRegistry, Q as createWorkspaceBridgeRuntimeEnvContribution, T as defineServerPlugin, U as resolveBridgeCallUrl, V as resolveBridgeTokenUrl, X as validateServerPlugin, Y as validateWorkspaceBridgeOperationDefinition } from './runtimeEnv-HolIkcoB.js';
 import { FastifyRequest, FastifyInstance } from 'fastify';
-import { U as UiBridge, W as WorkspaceBridge } from './ui-bridge-BbuUZ5iC.js';
-export { C as CommandResult, a as UiCommand, b as UiState } from './ui-bridge-BbuUZ5iC.js';
+import { U as UiBridge, W as WorkspaceBridge } from './ui-bridge-D2eO3epD.js';
+export { C as CommandResult, a as UiCommand, b as UiState } from './ui-bridge-D2eO3epD.js';
 import { A as AgentTool } from './agent-tool-CB0RQyx9.js';
 import { W as WorkspaceBridgeOperationDefinition, a as WorkspaceBridgeCallRequest, B as BridgeAuthContext, b as WorkspaceBridgeCallResponse, c as WorkspaceBridgeError, d as BridgeCallerClass, e as BridgeIdempotencyPolicy } from './workspace-bridge-rpc-A98RA5o6.js';
 export { f as BridgeActorAttribution, g as BridgeActorKind, h as BridgeRedactedActorRef, i as WorkspaceBridgeCallFailure, j as WorkspaceBridgeCallSuccess, k as WorkspaceBridgeErrorCode, l as WorkspaceBridgeFileAssetPointer, m as WorkspaceBridgeJsonValue, n as createWorkspaceBridgeError } from './workspace-bridge-rpc-A98RA5o6.js';
@@ -12,6 +12,7 @@ import { PluginLogger } from './runtime-server.js';
 export { RuntimePluginContext, RuntimePluginHandler, RuntimePluginResponse, RuntimePluginRouter, RuntimeServerPlugin, defineRuntimeServerPlugin, validateRuntimeServerPlugin } from './runtime-server.js';
 import { ErrorCode } from '@hachej/boring-agent/shared';
 import './manifest-C2vVgH_e.js';
+import './filesystem-vhLA0ERd.js';
 
 declare function definePluginAsset(importMetaUrl: string, name: string, relativeSource: string, options?: {
     target?: string;
@@ -74,6 +75,7 @@ interface UiRoutesOptions {
      * these slots are published out-of-band by server plugins.
      */
     preserveStateKeys?: string[];
+    getPreserveStateKeys?: (request: FastifyRequest) => string[] | Promise<string[]>;
     paneStatusStore?: PaneRenderStatusStore;
 }
 declare function uiRoutes(app: FastifyInstance, opts: UiRoutesOptions, done: (err?: Error) => void): void;

package/dist/server.js

@@ -262,8 +262,9 @@ function uiRoutes(app, opts, done) {
       const body = request.body;
       const bridge = await resolveBridge(request);
       const current = await bridge.getState() ?? {};
+      const preserveStateKeys = opts.getPreserveStateKeys ? await opts.getPreserveStateKeys(request) : opts.preserveStateKeys ?? [];
       const preserved = Object.fromEntries(
-        (opts.preserveStateKeys ?? []).filter((key) => !(key in body.state) && key in current).map((key) => [key, current[key]])
+        preserveStateKeys.filter((key) => !(key in body.state) && key in current).map((key) => [key, current[key]])
       );
       await bridge.setState({ ...body.state, ...preserved });
       return reply.code(204).send();
@@ -343,6 +344,14 @@ data: ${JSON.stringify({ v: UI_BRIDGE_PROTOCOL_VERSION })}
 // src/server/ui-control/tools/uiTools.ts
 import { stat } from "fs/promises";
 import { resolve, isAbsolute, relative, win32 } from "path";
+
+// src/shared/types/filesystem.ts
+var USER_FILESYSTEM_ID = "user";
+function normalizeUiFilesystem(filesystem) {
+  return filesystem && filesystem.length > 0 ? filesystem : USER_FILESYSTEM_ID;
+}
+
+// src/server/ui-control/tools/uiTools.ts
 function makeError(message) {
   return {
     content: [{ type: "text", text: message }],
@@ -360,9 +369,9 @@ function isPathAbsolute(filePath) {
 function isOutsideWorkspaceRel(rel) {
   return rel === ".." || rel.startsWith("../") || rel.startsWith("..\\") || isPathAbsolute(rel);
 }
-function validatePathSyntax(relPath, workspaceRoot) {
+function validatePathSyntax(relPath, workspaceRoot, opts = {}) {
   const rootHint = workspaceRoot ? ` (${workspaceRoot})` : "";
-  if (isPathAbsolute(relPath)) {
+  if (!opts.allowAbsolute && isPathAbsolute(relPath)) {
     return {
       ok: false,
       reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root${rootHint}.`
@@ -444,7 +453,10 @@ function isVerified(kind, params, state) {
   const tabs = state.openTabs ?? [];
   if (kind === "openFile") {
     const path = typeof params.path === "string" ? params.path : null;
-    return path !== null && tabs.some((t) => t.params?.path === path);
+    const filesystem = normalizeUiFilesystem(typeof params.filesystem === "string" ? params.filesystem : void 0);
+    return path !== null && tabs.some(
+      (t) => t.params?.path === path && normalizeUiFilesystem(typeof t.params?.filesystem === "string" ? t.params.filesystem : void 0) === filesystem
+    );
   }
   if (kind === "openPanel") {
     const id = typeof params.id === "string" ? params.id : null;
@@ -484,7 +496,7 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "",
       "Supported `kind` values:",
       "",
-      "  openFile     params: { path: string, mode?: 'view'|'edit'|'diff' }",
+      "  openFile     params: { path: string, mode?: 'view'|'edit'|'diff', filesystem?: 'user'|'company_context' }",
       "               \u2014 Open a file in the workbench. The workbench pane",
       "                 auto-opens if collapsed. Path must be relative to the",
       "                 workspace root (e.g. `src/foo.ts`, not `foo.ts` if it",
@@ -499,6 +511,8 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "                 is found.",
       "                 If the path is a folder, openFile reveals/selects it in",
       "                 the file tree instead of opening an editor tab.",
+      "                 Omit filesystem for normal workspace files (defaults to user). Use filesystem:'company_context' only when a company_context binding is advertised.",
+      "                 Path prefixes such as company_context:/x do not switch filesystem identity.",
       "                 Example: {kind:'openFile', params:{path:'README.md'}}",
       "",
       "  openPanel    params: { id: string, component: string,",
@@ -513,11 +527,15 @@ function createExecUiTool(workspaceBridge, opts = {}) {
       "                          component:'chart-canvas',",
       "                          params:{seriesId:'GDPC1'}}}",
       "",
-      "  openSurface  params: { kind: string, target: string, meta?: object }",
+      "  openSurface  params: { kind: string, target: string, filesystem?: 'user'|'company_context', meta?: object }",
       "               \u2014 Open an app-owned target through the workspace",
       "                 surface resolver registry. Use this when the app",
       "                 defines the mapping from domain target to panel",
       "                 component, for example a catalog row.",
+      "                 For kind:'workspace.open.path', filesystem follows the",
+      "                 same rules as openFile: omit for user files; pass",
+      "                 filesystem:'company_context' only for advertised company",
+      "                 context bindings; path prefixes do not switch identity.",
       "                 Example: {kind:'openSurface', params:{",
       "                          kind:'catalog.open-row',",
       "                          target:'orders_daily',",
@@ -591,29 +609,32 @@ function createExecUiTool(workspaceBridge, opts = {}) {
             `${kind}: ${kind === "navigateToLine" ? "file" : "path"} param is required`
           );
         }
-        const syntax = validatePathSyntax(relPath, workspaceRoot);
+        const filesystem = kind === "openFile" ? normalizeUiFilesystem(typeof cmdParams.filesystem === "string" ? cmdParams.filesystem : void 0) : USER_FILESYSTEM_ID;
+        const syntax = validatePathSyntax(relPath, workspaceRoot, { allowAbsolute: filesystem !== USER_FILESYSTEM_ID });
         if (!syntax.ok) return makeError(syntax.reason);
-        if (workspaceRoot) {
-          const check = await validateExistingPath(workspaceRoot, relPath);
-          if (!check.ok) {
-            return makeError(check.reason);
-          }
-          if (kind === "openFile" && check.kind === "dir") {
-            effectiveKind = "expandToFile";
-          }
-        } else if (resolvePathKind) {
-          const pathKind = await resolvePathKind(relPath);
-          if (!pathKind) {
-            return makeError(`file not found at "${relPath}". Try find or grep to locate the file before retrying openFile.`);
-          }
-          if (kind === "openFile" && pathKind === "dir") {
-            effectiveKind = "expandToFile";
+        if (filesystem === USER_FILESYSTEM_ID) {
+          if (workspaceRoot) {
+            const check = await validateExistingPath(workspaceRoot, relPath);
+            if (!check.ok) {
+              return makeError(check.reason);
+            }
+            if (kind === "openFile" && check.kind === "dir") {
+              effectiveKind = "expandToFile";
+            }
+          } else if (resolvePathKind) {
+            const pathKind = await resolvePathKind(relPath);
+            if (!pathKind) {
+              return makeError(`file not found at "${relPath}". Try find or grep to locate the file before retrying openFile.`);
+            }
+            if (kind === "openFile" && pathKind === "dir") {
+              effectiveKind = "expandToFile";
+            }
           }
         }
       }
       try {
         const command = { kind: effectiveKind, params: cmdParams };
-        const result = await workspaceBridge.emitUiEffect(command);
+        const result = await workspaceBridge.postCommand(command);
         if (result.status === "error") {
           return {
             content: [{ type: "text", text: JSON.stringify(result) }],

package/dist/shared.d.ts

@@ -1,6 +1,7 @@
-export { C as CommandResult, a as UiCommand, b as UiState, W as WorkspaceBridge } from './ui-bridge-BbuUZ5iC.js';
+export { C as CommandResult, a as UiCommand, b as UiState, W as WorkspaceBridge } from './ui-bridge-D2eO3epD.js';
 export { f as BridgeActorAttribution, g as BridgeActorKind, B as BridgeAuthContext, d as BridgeCallerClass, e as BridgeIdempotencyPolicy, h as BridgeRedactedActorRef, i as WorkspaceBridgeCallFailure, a as WorkspaceBridgeCallRequest, b as WorkspaceBridgeCallResponse, j as WorkspaceBridgeCallSuccess, c as WorkspaceBridgeError, k as WorkspaceBridgeErrorCode, l as WorkspaceBridgeFileAssetPointer, m as WorkspaceBridgeJsonValue, W as WorkspaceBridgeOperationDefinition, n as createWorkspaceBridgeError } from './workspace-bridge-rpc-A98RA5o6.js';
-export { C as CommandConfig, P as PaneProps, a as PanelConfig, b as PanelRegistration, S as SurfaceOpenRequest, c as SurfacePanelResolution, d as SurfaceResolverConfig, e as SurfaceResolverRegistration, W as WORKSPACE_OPEN_PATH_SURFACE_KIND, f as definePanel } from './surface-CDklwi48.js';
+export { C as CommandConfig, P as PaneProps, a as PanelConfig, b as PanelRegistration, S as SurfaceOpenRequest, c as SurfacePanelResolution, d as SurfaceResolverConfig, e as SurfaceResolverRegistration, W as WORKSPACE_OPEN_PATH_SURFACE_KIND, f as definePanel } from './surface-aLQ_Hryw.js';
+export { C as COMPANY_CONTEXT_FILESYSTEM_ID, F as FilesystemId, U as USER_FILESYSTEM_ID, a as UiFileResource, b as UiFileResourceInput, n as normalizeUiFileResource, c as normalizeUiFilesystem, u as uiFileResourceKey, w as withUiFileResource } from './filesystem-vhLA0ERd.js';
 export { A as AgentTool, J as JSONSchema, T as ToolExecContext, a as ToolResult } from './agent-tool-CB0RQyx9.js';
 import 'react';
 import 'dockview-react';

package/dist/shared.js

@@ -26,6 +26,34 @@ function createWorkspaceBridgeError(code, message, details) {
   return details === void 0 ? { code, message } : { code, message, details };
 }
 
+// src/shared/types/filesystem.ts
+var USER_FILESYSTEM_ID = "user";
+var COMPANY_CONTEXT_FILESYSTEM_ID = "company_context";
+function normalizeUiFilesystem(filesystem) {
+  return filesystem && filesystem.length > 0 ? filesystem : USER_FILESYSTEM_ID;
+}
+function normalizeUiFileResource(input) {
+  if (typeof input === "string") {
+    return { filesystem: USER_FILESYSTEM_ID, path: input };
+  }
+  return {
+    filesystem: normalizeUiFilesystem(input.filesystem),
+    path: input.path
+  };
+}
+function uiFileResourceKey(resource) {
+  const normalized = normalizeUiFileResource(resource);
+  return `${normalized.filesystem}:${normalized.path}`;
+}
+function withUiFileResource(value, fallbackFilesystem) {
+  const filesystem = typeof value.filesystem === "string" ? value.filesystem : normalizeUiFilesystem(fallbackFilesystem);
+  return {
+    ...value,
+    filesystem,
+    path: String(value.path ?? "")
+  };
+}
+
 // src/shared/types/surface.ts
 var WORKSPACE_OPEN_PATH_SURFACE_KIND = "workspace.open.path";
 
@@ -47,10 +75,16 @@ function safeCapture(telemetry, event) {
   }
 }
 export {
+  COMPANY_CONTEXT_FILESYSTEM_ID,
+  USER_FILESYSTEM_ID,
   WORKSPACE_OPEN_PATH_SURFACE_KIND,
   WorkspaceBridgeErrorCode,
   createWorkspaceBridgeError,
   definePanel,
   noopTelemetry,
-  safeCapture
+  normalizeUiFileResource,
+  normalizeUiFilesystem,
+  safeCapture,
+  uiFileResourceKey,
+  withUiFileResource
 };

package/dist/{surface-CDklwi48.d.ts → surface-aLQ_Hryw.d.ts}

@@ -1,5 +1,6 @@
 import { ComponentType } from 'react';
 import { DockviewPanelApi, DockviewApi } from 'dockview-react';
+import { F as FilesystemId } from './filesystem-vhLA0ERd.js';
 
 /**
  * Shared panel and command types — no runtime deps beyond React/dockview.
@@ -111,6 +112,7 @@ declare const WORKSPACE_OPEN_PATH_SURFACE_KIND = "workspace.open.path";
 interface SurfaceOpenRequest {
     kind: string;
     target: string;
+    filesystem?: FilesystemId;
     meta?: Record<string, unknown>;
 }
 interface SurfacePanelResolution {