@hachej/boring-workspace 0.1.76 → 0.1.77

package/dist/plugin.d.ts

@@ -268,6 +268,8 @@ interface WorkspaceShellCapabilities {
     openDetachedChat(sessionId: string, options?: {
         anchor?: WorkspaceShellAnchorRect;
         title?: string;
+        initialDraft?: string;
+        composingEnabled?: boolean;
     }): WorkspaceShellCapabilityResult;
 }
 declare function useWorkspaceShellCapabilities(): WorkspaceShellCapabilities;

package/dist/src/app/front/useWorkspaceShellCapabilitiesController.d.ts

@@ -1,8 +1,13 @@
 import { Dispatch, SetStateAction } from 'react';
 import { DispatchContext } from '../../front/bridge';
 import { WorkspaceShellCapabilities } from '../../front/shell/WorkspaceShellCapabilitiesContext';
-export declare function useWorkspaceShellCapabilitiesController({ setFloatingChatSessionId, openChatPane, surfaceDispatch, }: {
-    setFloatingChatSessionId: Dispatch<SetStateAction<string | null>>;
+export declare function useWorkspaceShellCapabilitiesController({ setFloatingChatSession, openChatPane, surfaceDispatch, }: {
+    setFloatingChatSession: Dispatch<SetStateAction<{
+        sessionId: string;
+        title?: string;
+        initialDraft?: string;
+        composingEnabled?: boolean;
+    } | null>>;
     openChatPane: (sessionId: string) => void;
     surfaceDispatch: DispatchContext;
 }): WorkspaceShellCapabilities;

package/dist/src/shared/plugins/workspaceShellCapabilities.d.ts

@@ -35,6 +35,8 @@ export interface WorkspaceShellCapabilities {
     openDetachedChat(sessionId: string, options?: {
         anchor?: WorkspaceShellAnchorRect;
         title?: string;
+        initialDraft?: string;
+        composingEnabled?: boolean;
     }): WorkspaceShellCapabilityResult;
 }
 export declare function WorkspaceShellCapabilitiesProvider({ value, children, }: {

package/docs/PLUGIN_SYSTEM.md

@@ -48,6 +48,13 @@ The two tiers differ by **provenance and trust**, not just lifecycle:
 | Server/routes/tools | Full power: Fastify routes, static `agentTools`, providers, domain APIs | Route-free; no `boring.server`; backend work goes through Pi tools |
 | Reload | Restart/redeploy | `/reload` hot-swaps front + Pi resources |
 
+App-owned boot composition may inject narrowly scoped trusted host
+capabilities, such as `WorkspaceAgentDispatcher`, into an app/internal
+integration. The host must verify the workspace actor before injection; the
+dispatcher trusts the supplied `{ workspaceId, userId }` and performs no
+authorization. Runtime/generated plugins never receive this capability and do
+not gain backend services, routes, runtime bindings, or raw filesystem paths.
+
 Plugin tools' `execute()` run in the **host Node process and bypass the
 sandbox by design**; plugin loading is local-mode-only (skipped under
 `vercel-sandbox`). Hosted/marketplace plugins — untrusted external code that

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-workspace",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "type": "module",
   "license": "MIT",
   "description": "Workspace UI, plugin, and bridge package for composing chat, files, catalogs, editors, and app-specific panes.",
@@ -139,9 +139,9 @@
     "tailwind-merge": "^2.0.0",
     "zod": "^3.23.0",
     "zustand": "^5.0.14",
-    "@hachej/boring-agent": "0.1.76",
-    "@hachej/boring-ui-kit": "0.1.76",
-    "@hachej/boring-ui-plugin-cli": "0.1.76"
+    "@hachej/boring-agent": "0.1.77",
+    "@hachej/boring-ui-kit": "0.1.77",
+    "@hachej/boring-ui-plugin-cli": "0.1.77"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4.3.1",