@hachej/boring-workspace 0.1.77 → 0.1.79

package/dist/app-server.d.ts

@@ -1,6 +1,6 @@
-import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
+import { PiPackageSource, PiExtensionFactory, CreateAgentAppOptions, WorkspaceAgentDispatcherResolver, ProvisionWorkspaceRuntimeOptions } from '@hachej/boring-agent/server';
 export { PiPackageSource as WorkspacePiPackageSource } from '@hachej/boring-agent/server';
-import { FastifyInstance } from 'fastify';
+import { FastifyRequest, FastifyInstance } from 'fastify';
 import { W as WorkspaceServerPlugin, S as ServerBootstrapOptions, a as WorkspaceBridgeRegistry, B as BridgeAuthPolicy, b as WorkspaceBridgeHandler, c as WorkspaceBridgeRuntimeEnvOptions, d as BoringPluginSourceInput, e as BoringPluginFrontTargetResolver, f as createInMemoryBridge, g as WorkspaceProvisioningContribution, h as WorkspaceRouteContribution } from './runtimeEnv-DKtVLBXo.js';
 export { i as ServerWorkspaceRuntimeProvisioningInput } from './runtimeEnv-DKtVLBXo.js';
 import { W as WorkspaceBridgeOperationDefinition } from './workspace-bridge-rpc-BHsOJMlW.js';
@@ -79,6 +79,17 @@ type WorkspaceAgentCreateOptions = Omit<CreateAgentAppOptions, "pi"> & {
 interface WorkspaceAgentServerPluginContext {
     workspaceRoot: string;
     bridge: ReturnType<typeof createInMemoryBridge>;
+    /** Available only to boot-time internal package plugins in standalone/local composition. */
+    trusted?: {
+        workspaceAgentDispatcherResolver: WorkspaceAgentDispatcherResolver;
+        actorResolver: (request: FastifyRequest) => Promise<{
+            workspaceId: string;
+            userId: string;
+        }> | {
+            workspaceId: string;
+            userId: string;
+        };
+    };
 }
 /**
  * Single install entry type. Accepts:
@@ -193,6 +204,7 @@ interface ResolveWorkspaceAgentServerPluginCollectionOptions extends Omit<Collec
     defaultPluginPackages?: string[];
     appRoot?: string;
     plugins?: WorkspacePluginEntry[];
+    trustedPluginContext?: WorkspaceAgentServerPluginContext["trusted"];
 }
 declare function buildWorkspaceContextPrompt(options?: {
     pluginAuthoringEnabled?: boolean;

package/dist/app-server.js

@@ -3968,7 +3968,8 @@ function collectWorkspaceAgentServerPlugins(opts = {}) {
   };
 }
 async function resolveWorkspaceAgentServerPluginCollection(opts) {
-  const ctx = { workspaceRoot: opts.workspaceRoot, bridge: opts.bridge };
+  const baseCtx = { workspaceRoot: opts.workspaceRoot, bridge: opts.bridge };
+  const trustedCtx = { ...baseCtx, trusted: opts.trustedPluginContext };
   const defaultPluginPackagePaths = resolveDefaultWorkspacePluginPackagePaths({
     workspaceRoot: opts.workspaceRoot,
     defaultPluginPackages: opts.defaultPluginPackages,
@@ -3981,7 +3982,10 @@ async function resolveWorkspaceAgentServerPluginCollection(opts) {
   ];
   const resolvedPlugins = await Promise.all(
     allPluginEntries.map(async (entry) => {
-      const plugin = await resolveOnePluginEntry(entry, ctx);
+      const plugin = await resolveOnePluginEntry(
+        entry,
+        "dir" in entry && entry.trust === "internal" ? trustedCtx : baseCtx
+      );
       assertWorkspaceBridgeHandlersTrusted(plugin, entry);
       return plugin;
     })
@@ -4167,7 +4171,18 @@ async function createWorkspaceAgentServer(opts = {}) {
     workspaceRoot: validateUiPaths ? workspaceRoot : void 0
   });
   const pluginAuthoringEnabled = externalPluginsEnabled && (opts.installPluginAuthoring ?? workspaceFsCapability === "strong") && !(opts.excludeDefaults ?? []).includes("boring-ui-plugin-cli-package");
+  let workspaceAgentDispatcherResolver;
+  const trustedDispatcherProxy = {
+    async resolve(actor, options) {
+      if (!workspaceAgentDispatcherResolver) throw new Error("workspace agent dispatcher is not ready");
+      return await workspaceAgentDispatcherResolver.resolve(actor, options);
+    }
+  };
   const pluginCollection = await resolveWorkspaceAgentServerPluginCollection({
+    trustedPluginContext: {
+      workspaceAgentDispatcherResolver: trustedDispatcherProxy,
+      actorResolver: () => ({ workspaceId: opts.sessionId ?? "default", userId: "local" })
+    },
     ...opts,
     workspaceRoot,
     bridge,
@@ -4278,6 +4293,10 @@ async function createWorkspaceAgentServer(opts = {}) {
   });
   const app = await createAgentApp({
     ...opts,
+    onWorkspaceAgentDispatcher: (resolver) => {
+      workspaceAgentDispatcherResolver = resolver;
+      opts.onWorkspaceAgentDispatcher?.(resolver);
+    },
     mode: resolvedMode,
     workspaceRoot,
     externalPlugins: externalPluginsEnabled,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-workspace",
-  "version": "0.1.77",
+  "version": "0.1.79",
   "type": "module",
   "license": "MIT",
   "description": "Workspace UI, plugin, and bridge package for composing chat, files, catalogs, editors, and app-specific panes.",
@@ -139,9 +139,9 @@
     "tailwind-merge": "^2.0.0",
     "zod": "^3.23.0",
     "zustand": "^5.0.14",
-    "@hachej/boring-agent": "0.1.77",
-    "@hachej/boring-ui-kit": "0.1.77",
-    "@hachej/boring-ui-plugin-cli": "0.1.77"
+    "@hachej/boring-agent": "0.1.79",
+    "@hachej/boring-ui-kit": "0.1.79",
+    "@hachej/boring-ui-plugin-cli": "0.1.79"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4.3.1",