@hachej/boring-core 0.1.23 → 0.1.24

package/dist/{CoreFront-CgAkiEts.d.ts → CoreFront-N0QJSYaM.d.ts}

@@ -14,7 +14,10 @@ interface CoreFrontProps {
     children?: ReactNode;
     authPages?: CoreFrontAuthPagesOverride;
     cspNonce?: string;
+    workspaceRoute?: string;
+    workspaceIdParam?: string;
+    publicPaths?: string[];
 }
-declare function CoreFront({ children, authPages, cspNonce }: CoreFrontProps): react_jsx_runtime.JSX.Element;
+declare function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdParam, publicPaths }: CoreFrontProps): react_jsx_runtime.JSX.Element;
 
 export { type CoreFrontAuthPagesOverride as C, CoreFront as a, type CoreFrontProps as b };

package/dist/app/front/index.d.ts

@@ -1,11 +1,13 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { C as CoreFrontAuthPagesOverride } from '../../CoreFront-CgAkiEts.js';
+import { C as CoreFrontAuthPagesOverride } from '../../CoreFront-N0QJSYaM.js';
 import { WorkspaceAgentSession, WorkspaceAgentFrontProps } from '@hachej/boring-workspace/app/front';
 
+type ChatEntryMode = 'auth-first' | 'chat-first';
 interface CoreWorkspaceAgentFrontProps<TSession extends WorkspaceAgentSession = WorkspaceAgentSession> extends Omit<WorkspaceAgentFrontProps<TSession>, 'workspaceId' | 'frontPluginHotReload' | 'hotReloadEnabled'> {
     /** Core consumes plugins statically for now; app-level hot reload is explicitly unsupported. */
     hotReload?: false;
+    chatEntryMode?: ChatEntryMode;
     authPages?: CoreFrontAuthPagesOverride;
     cspNonce?: string;
     children?: ReactNode;
@@ -15,6 +17,6 @@ interface CoreWorkspaceAgentFrontProps<TSession extends WorkspaceAgentSession =
     loadingFallback?: ReactNode;
     bootPreloadPaths?: string[];
 }
-declare function CoreWorkspaceAgentFront<TSession extends WorkspaceAgentSession = WorkspaceAgentSession>({ authPages, cspNonce, children, workspaceRoute, workspaceIdParam, workspaceHref, loadingFallback, bootPreloadPaths, topBarLeft, topBarRight, appTitle, bridgeEndpoint, hotReload, ...workspaceProps }: CoreWorkspaceAgentFrontProps<TSession>): react_jsx_runtime.JSX.Element;
+declare function CoreWorkspaceAgentFront<TSession extends WorkspaceAgentSession = WorkspaceAgentSession>({ authPages, cspNonce, children, workspaceRoute, workspaceIdParam, workspaceHref, loadingFallback, bootPreloadPaths, topBarLeft, topBarRight, appTitle, bridgeEndpoint, hotReload, chatEntryMode, ...workspaceProps }: CoreWorkspaceAgentFrontProps<TSession>): react_jsx_runtime.JSX.Element;
 
 export { CoreWorkspaceAgentFront, type CoreWorkspaceAgentFrontProps };

package/dist/app/front/index.js

@@ -2,69 +2,408 @@ import {
   CoreFront,
   UserMenu,
   WorkspaceSwitcher,
-  useCurrentWorkspace
-} from "../../chunk-JMCBLJ6W.js";
+  routes,
+  useCurrentWorkspace,
+  useSession,
+  useSignIn,
+  useSignUp,
+  useWorkspaceRouteStatus
+} from "../../chunk-5R3U6QKD.js";
 import "../../chunk-HYNKZSTF.js";
 import "../../chunk-H5KU6R6Y.js";
 import "../../chunk-MLKGABMK.js";
 
 // src/app/front/CoreWorkspaceAgentFront.tsx
-import { useMemo } from "react";
-import { Navigate, Route, useParams } from "react-router-dom";
+import { useEffect as useEffect2, useMemo, useState as useState3 } from "react";
+import { Navigate, Route, useLocation as useLocation2, useParams } from "react-router-dom";
 import {
-  WorkspaceAgentFront,
-  WorkspaceBootGate
+  WorkspaceAgentFront as WorkspaceAgentFront2
 } from "@hachej/boring-workspace/app/front";
+
+// src/app/front/chatFirst/ChatFirstAuthenticatedShell.tsx
+import { useEffect } from "react";
+import {
+  WorkspaceAgentFront
+} from "@hachej/boring-workspace/app/front";
+import { useWorkspaceAttention } from "@hachej/boring-workspace";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+function ChatFirstComposerBlocker() {
+  const { addBlocker, removeBlocker } = useWorkspaceAttention();
+  useEffect(() => {
+    const blocker = {
+      id: "chat-first-workspace-preparing",
+      reason: "workspace-preparing",
+      label: "Preparing workspace\u2026 Send will work in a moment."
+    };
+    addBlocker(blocker);
+    return () => removeBlocker(blocker.id);
+  }, [addBlocker, removeBlocker]);
+  return null;
+}
+function ChatFirstAuthenticatedShell({
+  appTitle,
+  workspaceId,
+  initialDraft,
+  autoSubmitInitialDraft = false,
+  workspaceProps,
+  showComposerBlocker = true
+}) {
+  return /* @__PURE__ */ jsx(
+    WorkspaceAgentFront,
+    {
+      ...workspaceProps,
+      workspaceId,
+      appTitle,
+      topBarLeft: null,
+      sessions: [],
+      activeSessionId: null,
+      onSwitchSession: () => void 0,
+      onCreateSession: () => void 0,
+      onDeleteSession: () => void 0,
+      provisionWorkspace: false,
+      bootPreloadPaths: [],
+      bridgeEndpoint: null,
+      excludeDefaults: ["filesystem"],
+      plugins: [],
+      catalogs: [],
+      commands: [],
+      persistenceEnabled: false,
+      navEnabled: false,
+      defaultNavOpen: false,
+      defaultSurfaceOpen: false,
+      beforeShell: showComposerBlocker ? /* @__PURE__ */ jsxs(Fragment, { children: [
+        workspaceProps.beforeShell,
+        /* @__PURE__ */ jsx(ChatFirstComposerBlocker, {})
+      ] }) : workspaceProps.beforeShell,
+      chatParams: {
+        ...workspaceProps.chatParams,
+        composerBlockers: void 0,
+        ...initialDraft ? { initialDraft } : {},
+        ...initialDraft && autoSubmitInitialDraft ? { autoSubmitInitialDraft: true } : {},
+        serverResourcesEnabled: false,
+        hydrateMessages: false,
+        onBeforeSubmit: showComposerBlocker ? (() => false) : workspaceProps.chatParams?.onBeforeSubmit ?? (() => false)
+      },
+      frontPluginHotReload: false,
+      hotReloadEnabled: false
+    }
+  );
+}
+
+// src/app/front/chatFirst/ChatFirstPublicShell.tsx
+import { useState as useState2 } from "react";
+import { useLocation } from "react-router-dom";
+
+// src/app/front/chatFirst/AuthCard.tsx
+import { useState } from "react";
+import { useNavigate } from "react-router-dom";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+function AuthCard({
+  returnTo,
+  onClose
+}) {
+  const navigate = useNavigate();
+  const signIn = useSignIn();
+  const signUp = useSignUp();
+  const [mode, setMode] = useState("signin");
+  const [name, setName] = useState("");
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState(null);
+  const [submitting, setSubmitting] = useState(false);
+  const forgotPasswordHref = `${routes.forgotPassword}?redirect=${encodeURIComponent(returnTo)}`;
+  async function submit(event) {
+    event.preventDefault();
+    setError(null);
+    setSubmitting(true);
+    try {
+      const result = mode === "signin" ? await signIn.email({ email, password }) : await signUp.email({ email, password, name: name || email });
+      if (result.error) {
+        setError(result.error.message ?? `${mode === "signin" ? "Sign in" : "Sign up"} failed`);
+        return;
+      }
+      onClose?.();
+      navigate(returnTo, { replace: true });
+    } catch (err) {
+      setError(err instanceof Error ? err.message : `${mode === "signin" ? "Sign in" : "Sign up"} failed`);
+    } finally {
+      setSubmitting(false);
+    }
+  }
+  return /* @__PURE__ */ jsxs2("div", { className: "w-full max-w-sm rounded-2xl border border-border bg-card p-4 shadow-2xl", children: [
+    onClose ? /* @__PURE__ */ jsx2("div", { className: "mb-3 flex justify-end", children: /* @__PURE__ */ jsx2("button", { type: "button", className: "rounded-full px-2 py-1 text-sm text-muted-foreground hover:bg-muted", onClick: onClose, "aria-label": "Close sign in", children: "\xD7" }) }) : null,
+    /* @__PURE__ */ jsx2("h2", { id: "auth-modal-title", className: "text-center text-xl font-semibold", children: mode === "signin" ? "Sign in to continue" : "Create your account" }),
+    /* @__PURE__ */ jsx2("p", { className: "mt-2 text-center text-sm text-muted-foreground", children: "Keep your draft and unlock the full workspace." }),
+    /* @__PURE__ */ jsxs2("div", { className: "mt-4 grid grid-cols-2 rounded-xl bg-muted p-1 text-sm", children: [
+      /* @__PURE__ */ jsx2("button", { type: "button", className: `rounded-lg px-3 py-2 ${mode === "signin" ? "bg-background shadow-sm" : "text-muted-foreground"}`, onClick: () => setMode("signin"), children: "Sign in" }),
+      /* @__PURE__ */ jsx2("button", { type: "button", className: `rounded-lg px-3 py-2 ${mode === "signup" ? "bg-background shadow-sm" : "text-muted-foreground"}`, onClick: () => setMode("signup"), children: "Sign up" })
+    ] }),
+    /* @__PURE__ */ jsxs2("form", { className: "mt-4 space-y-2.5", onSubmit: submit, children: [
+      error ? /* @__PURE__ */ jsx2("div", { className: "rounded-lg border border-destructive/30 bg-destructive/10 p-2 text-sm text-destructive", role: "alert", children: error }) : null,
+      mode === "signup" ? /* @__PURE__ */ jsx2("input", { className: "w-full rounded-xl border border-border bg-background px-3 py-2.5 text-sm outline-none focus:border-ring", placeholder: "Name", value: name, onChange: (event) => setName(event.currentTarget.value) }) : null,
+      /* @__PURE__ */ jsx2("input", { className: "w-full rounded-xl border border-border bg-background px-3 py-2.5 text-sm outline-none focus:border-ring", type: "email", autoComplete: "email", placeholder: "Email", value: email, onChange: (event) => setEmail(event.currentTarget.value), required: true }),
+      /* @__PURE__ */ jsx2("input", { className: "w-full rounded-xl border border-border bg-background px-3 py-2.5 text-sm outline-none focus:border-ring", type: "password", autoComplete: mode === "signin" ? "current-password" : "new-password", placeholder: "Password", value: password, onChange: (event) => setPassword(event.currentTarget.value), required: true }),
+      mode === "signin" ? /* @__PURE__ */ jsx2("div", { className: "flex justify-end", children: /* @__PURE__ */ jsx2("a", { href: forgotPasswordHref, className: "text-xs text-muted-foreground hover:underline", children: "Forgot password?" }) }) : null,
+      /* @__PURE__ */ jsx2("button", { type: "submit", className: "w-full rounded-xl bg-primary px-3 py-2.5 text-sm font-medium text-primary-foreground disabled:opacity-50", disabled: submitting, children: submitting ? "Please wait\u2026" : mode === "signin" ? "Continue with email" : "Create account" })
+    ] }),
+    /* @__PURE__ */ jsx2("p", { className: "mt-4 text-center text-xs text-muted-foreground", children: "By continuing, you agree to continue into your private workspace." })
+  ] });
+}
+
+// src/app/front/chatFirst/AuthModal.tsx
+import { jsx as jsx3 } from "react/jsx-runtime";
+function AuthModal({ onClose, returnTo }) {
+  return /* @__PURE__ */ jsx3("div", { className: "fixed inset-0 z-50 flex items-center justify-center bg-background/70 p-4 backdrop-blur-md", role: "dialog", "aria-modal": "true", "aria-labelledby": "auth-modal-title", children: /* @__PURE__ */ jsx3(AuthCard, { returnTo, onClose }) });
+}
+
+// src/app/front/chatFirst/pendingChatEntry.ts
+import { matchPath } from "react-router-dom";
+var PENDING_CHAT_ENTRY_KEY = "boring:pending-chat-entry";
+var PENDING_CHAT_ENTRY_TTL_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_CHAT_FIRST_PENDING_WORKSPACE_ID = "pending";
+var PENDING_CHAT_ENTRY_CHANGED_EVENT = "boring:pending-chat-entry-changed";
+function browserSessionStorage() {
+  try {
+    return typeof window === "undefined" ? null : window.sessionStorage;
+  } catch {
+    return null;
+  }
+}
+function safeReturnTo(pathname, search, hash) {
+  const candidate = `${pathname || "/"}${search || ""}${hash || ""}`;
+  if (!candidate.startsWith("/") || candidate.startsWith("//") || /[\0\r\n<>"'`]/.test(candidate)) return "/";
+  return candidate;
+}
+function readPendingChatEntry() {
+  const storage = browserSessionStorage();
+  if (!storage) return null;
+  try {
+    const raw = storage.getItem(PENDING_CHAT_ENTRY_KEY);
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.draft !== "string" || typeof parsed.returnTo !== "string" || typeof parsed.createdAt !== "number") return null;
+    if (Date.now() - parsed.createdAt > PENDING_CHAT_ENTRY_TTL_MS) {
+      storage.removeItem(PENDING_CHAT_ENTRY_KEY);
+      return null;
+    }
+    return {
+      draft: parsed.draft,
+      returnTo: parsed.returnTo,
+      intendedWorkspaceId: typeof parsed.intendedWorkspaceId === "string" ? parsed.intendedWorkspaceId : void 0,
+      createdAt: parsed.createdAt
+    };
+  } catch {
+    return null;
+  }
+}
+function notifyPendingChatEntryChanged() {
+  globalThis.dispatchEvent?.(new Event(PENDING_CHAT_ENTRY_CHANGED_EVENT));
+}
+function writePendingChatEntry(input) {
+  const storage = browserSessionStorage();
+  if (!storage) return;
+  storage.setItem(PENDING_CHAT_ENTRY_KEY, JSON.stringify({ ...input, createdAt: Date.now() }));
+  notifyPendingChatEntryChanged();
+}
+function clearPendingChatEntry() {
+  browserSessionStorage()?.removeItem(PENDING_CHAT_ENTRY_KEY);
+  notifyPendingChatEntryChanged();
+}
+function pendingChatEntryMatchesLocation(pending, pathname, search, hash) {
+  return Boolean(pending && pending.returnTo === safeReturnTo(pathname, search, hash));
+}
+function routePatterns(route) {
+  const normalized = route.endsWith("/*") ? route.slice(0, -2) : route;
+  return [`${normalized}/*`, normalized];
+}
+function workspaceIdFromPath(pathname, workspaceRoute, workspaceIdParam) {
+  const patterns = [
+    ...routePatterns(workspaceRoute),
+    "/w/:id/*",
+    "/w/:id",
+    "/workspace/:id/*",
+    "/workspace/:id"
+  ];
+  for (const pattern of patterns) {
+    const match = matchPath(pattern, pathname);
+    const id = match?.params[workspaceIdParam]?.trim() ?? match?.params.id?.trim();
+    if (id) return id;
+  }
+  return null;
+}
+
+// src/app/front/chatFirst/ChatFirstPublicShell.tsx
+import { jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
+function readComposerDraftFromDom() {
+  if (typeof document === "undefined") return "";
+  const input = document.querySelector('[data-boring-agent-part="composer-input"]');
+  return input?.value ?? "";
+}
+function ChatFirstPublicShell({
+  appTitle,
+  intendedWorkspaceId,
+  workspaceProps
+}) {
+  const location = useLocation();
+  const [modalOpen, setModalOpen] = useState2(false);
+  const returnTo = safeReturnTo(location.pathname, location.search, location.hash);
+  const workspaceId = intendedWorkspaceId || "public";
+  const openAuth = (draft = readComposerDraftFromDom()) => {
+    writePendingChatEntry({ draft, returnTo, ...intendedWorkspaceId ? { intendedWorkspaceId } : {} });
+    setModalOpen(true);
+  };
+  return /* @__PURE__ */ jsxs3("div", { className: "relative h-screen min-h-0", children: [
+    /* @__PURE__ */ jsx4(
+      ChatFirstAuthenticatedShell,
+      {
+        appTitle,
+        workspaceId,
+        showComposerBlocker: false,
+        workspaceProps: {
+          ...workspaceProps,
+          topBarRight: /* @__PURE__ */ jsx4("button", { type: "button", className: "rounded-md border border-border px-3 py-1.5 text-sm font-medium hover:bg-muted", onClick: () => openAuth(), children: "Sign in" }),
+          className: workspaceProps.className,
+          surfaceButtonBottomOffset: 456,
+          chatParams: {
+            ...workspaceProps.chatParams,
+            emptyPlacement: "hero",
+            composerPlaceholder: "Describe the app, bug, or repo task you want help with\u2026",
+            emptyState: {
+              eyebrow: "Start here",
+              title: "What do you want to build?",
+              description: "Type a prompt or pick an example. Sign in on send to unlock your private workspace."
+            },
+            suggestions: [
+              { label: "Build an app from scratch", hint: "Creates files, installs deps, opens a preview", prompt: "Build a full-stack app with auth, a dashboard, and sample data." },
+              { label: "Understand a codebase", hint: "Maps the repo and explains where to start", prompt: "Explain this codebase, map the architecture, and suggest first improvements." },
+              { label: "Fix a bug safely", hint: "Finds the cause, edits files, runs tests", prompt: "Trace a bug, edit the right files, update tests, and summarize the diff." },
+              { label: "Prototype an interface", hint: "Turns an idea into an interactive UI", prompt: "Build an interactive prototype and open it in the workspace." }
+            ],
+            onBeforeSubmit: (draft) => {
+              openAuth(draft);
+              return false;
+            }
+          }
+        }
+      }
+    ),
+    /* @__PURE__ */ jsx4("aside", { className: "pointer-events-none fixed bottom-6 right-6 z-20 w-[320px]", children: /* @__PURE__ */ jsx4("div", { className: "pointer-events-auto", children: /* @__PURE__ */ jsx4(AuthCard, { returnTo }) }) }),
+    modalOpen ? /* @__PURE__ */ jsx4(AuthModal, { returnTo, onClose: () => setModalOpen(false) }) : null
+  ] });
+}
+
+// src/app/front/CoreWorkspaceAgentFront.tsx
+import { Fragment as Fragment2, jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
 var DEFAULT_WORKSPACE_ROUTE = "/workspace/:id";
 var DEFAULT_WORKSPACE_ID_PARAM = "id";
 function DefaultTopBarRight() {
-  return /* @__PURE__ */ jsx(UserMenu, {});
+  return /* @__PURE__ */ jsx5(UserMenu, {});
 }
 function WorkspaceLoadingPage({
   appTitle,
   topBarLeft,
   topBarRight
 }) {
-  return /* @__PURE__ */ jsxs("div", { className: "flex h-screen min-h-0 flex-col bg-background text-foreground", children: [
-    /* @__PURE__ */ jsxs("header", { className: "flex h-12 shrink-0 items-center justify-between border-b border-border bg-card px-3", children: [
-      /* @__PURE__ */ jsxs("div", { className: "flex min-w-0 items-center gap-3", children: [
-        /* @__PURE__ */ jsx("div", { className: "text-sm font-semibold", children: appTitle }),
+  return /* @__PURE__ */ jsxs4("div", { className: "flex h-screen min-h-0 flex-col bg-background text-foreground", children: [
+    /* @__PURE__ */ jsxs4("header", { className: "flex h-12 shrink-0 items-center justify-between border-b border-border bg-card px-3", children: [
+      /* @__PURE__ */ jsxs4("div", { className: "flex min-w-0 items-center gap-3", children: [
+        /* @__PURE__ */ jsx5("div", { className: "text-sm font-semibold", children: appTitle }),
         topBarLeft
       ] }),
       topBarRight
     ] }),
-    /* @__PURE__ */ jsx("main", { className: "flex min-h-0 flex-1 items-center justify-center px-6", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md rounded-2xl border border-border bg-card p-6 text-center shadow-sm", children: [
-      /* @__PURE__ */ jsx(
+    /* @__PURE__ */ jsx5("main", { className: "flex min-h-0 flex-1 items-center justify-center px-6", children: /* @__PURE__ */ jsxs4("div", { className: "w-full max-w-md rounded-2xl border border-border bg-card p-6 text-center shadow-sm", children: [
+      /* @__PURE__ */ jsx5(
         "div",
         {
           "aria-hidden": "true",
           className: "mx-auto mb-4 h-8 w-8 rounded-full border-2 border-muted-foreground/20 border-t-foreground animate-spin will-change-transform"
         }
       ),
-      /* @__PURE__ */ jsx("h1", { className: "text-lg font-semibold", children: "Switching workspace" }),
-      /* @__PURE__ */ jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: "Restoring files, sessions, and saved layout." }),
-      /* @__PURE__ */ jsx("p", { className: "mt-4 text-xs uppercase tracking-[0.18em] text-muted-foreground", children: "Loading workspace" })
+      /* @__PURE__ */ jsx5("h1", { className: "text-lg font-semibold", children: "Switching workspace" }),
+      /* @__PURE__ */ jsx5("p", { className: "mt-2 text-sm text-muted-foreground", children: "Restoring files, sessions, and saved layout." }),
+      /* @__PURE__ */ jsx5("p", { className: "mt-4 text-xs uppercase tracking-[0.18em] text-muted-foreground", children: "Loading workspace" })
     ] }) })
   ] });
 }
+function usePendingChatDraft() {
+  const session = useSession();
+  const userId = session.data?.user?.id ?? null;
+  const [pending, setPending] = useState3(() => userId ? readPendingChatEntry() : null);
+  useEffect2(() => {
+    if (!userId) {
+      setPending(null);
+      return;
+    }
+    setPending(readPendingChatEntry());
+    const syncPending = () => setPending(readPendingChatEntry());
+    globalThis.addEventListener?.(PENDING_CHAT_ENTRY_CHANGED_EVENT, syncPending);
+    return () => globalThis.removeEventListener?.(PENDING_CHAT_ENTRY_CHANGED_EVENT, syncPending);
+  }, [userId]);
+  return pending;
+}
 function HomeRedirect({
   loadingFallback,
-  workspaceHref
+  workspaceHref,
+  chatEntryMode,
+  appTitle,
+  workspaceProps
 }) {
+  const location = useLocation2();
+  const session = useSession();
   const workspace = useCurrentWorkspace();
-  if (!workspace) return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback });
-  return /* @__PURE__ */ jsx(Navigate, { to: workspaceHref(workspace.id), replace: true });
+  const pendingChatEntry = usePendingChatDraft();
+  const restorePendingDraft = pendingChatEntryMatchesLocation(
+    pendingChatEntry,
+    location.pathname,
+    location.search,
+    location.hash
+  );
+  if (!session.data?.user && chatEntryMode === "chat-first") return /* @__PURE__ */ jsx5(ChatFirstPublicShell, { appTitle, workspaceProps });
+  if (!workspace && chatEntryMode === "chat-first" && session.data?.user && restorePendingDraft) {
+    return /* @__PURE__ */ jsx5(
+      ChatFirstAuthenticatedShell,
+      {
+        appTitle,
+        workspaceId: pendingChatEntry?.intendedWorkspaceId ?? DEFAULT_CHAT_FIRST_PENDING_WORKSPACE_ID,
+        initialDraft: pendingChatEntry?.draft,
+        workspaceProps
+      }
+    );
+  }
+  if (!workspace) return /* @__PURE__ */ jsx5(Fragment2, { children: loadingFallback });
+  return /* @__PURE__ */ jsx5(Navigate, { to: workspaceHref(workspace.id), replace: true });
+}
+function WorkspaceRouteErrorPage({ status, message }) {
+  const title = status === "not-found" ? "Workspace not found" : status === "forbidden" ? "Workspace unavailable" : "Workspace failed to open";
+  return /* @__PURE__ */ jsx5("div", { className: "flex h-screen min-h-0 items-center justify-center bg-background px-6 text-foreground", children: /* @__PURE__ */ jsxs4("div", { className: "w-full max-w-md rounded-2xl border border-border bg-card p-6 text-center shadow-sm", children: [
+    /* @__PURE__ */ jsx5("h1", { className: "text-lg font-semibold", children: title }),
+    /* @__PURE__ */ jsx5("p", { className: "mt-2 text-sm text-muted-foreground", children: message })
+  ] }) });
 }
 function WorkspaceRoute({
   workspaceIdParam,
   loadingFallback,
   bootPreloadPaths,
-  workspaceProps
+  workspaceProps,
+  chatEntryMode,
+  appTitle,
+  workspaceRoute
 }) {
   const params = useParams();
+  const location = useLocation2();
+  const session = useSession();
+  const pendingChatEntry = usePendingChatDraft();
   const currentWorkspace = useCurrentWorkspace();
-  const workspaceId = params[workspaceIdParam]?.trim() ?? "";
+  const routeStatus = useWorkspaceRouteStatus();
+  const workspaceId = params[workspaceIdParam]?.trim() ?? workspaceIdFromPath(location.pathname, workspaceRoute, workspaceIdParam) ?? "";
+  const pendingDraftTargetsWorkspace = !pendingChatEntry?.intendedWorkspaceId || pendingChatEntry.intendedWorkspaceId === workspaceId;
+  const restorePendingDraft = pendingDraftTargetsWorkspace && (pendingChatEntryMatchesLocation(
+    pendingChatEntry,
+    location.pathname,
+    location.search,
+    location.hash
+  ) || pendingChatEntry?.returnTo === "/" && currentWorkspace?.id === workspaceId);
   const requestHeaders = useMemo(
     () => ({ ...workspaceProps.requestHeaders, "x-boring-workspace-id": workspaceId }),
     [workspaceId, workspaceProps.requestHeaders]
@@ -73,30 +412,55 @@ function WorkspaceRoute({
     () => ({ ...workspaceProps.authHeaders, "x-boring-workspace-id": workspaceId }),
     [workspaceId, workspaceProps.authHeaders]
   );
-  if (!workspaceId) return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback });
-  if (currentWorkspace?.id !== workspaceId) return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback });
-  return /* @__PURE__ */ jsx(
-    WorkspaceBootGate,
+  if (!workspaceId) return /* @__PURE__ */ jsx5(Fragment2, { children: loadingFallback });
+  if (!session.data?.user && chatEntryMode === "chat-first") {
+    return /* @__PURE__ */ jsx5(ChatFirstPublicShell, { appTitle, intendedWorkspaceId: workspaceId, workspaceProps });
+  }
+  if (routeStatus.status === "not-found" || routeStatus.status === "forbidden" || routeStatus.status === "switch-failed") {
+    return /* @__PURE__ */ jsx5(WorkspaceRouteErrorPage, { status: routeStatus.status, message: routeStatus.message });
+  }
+  if (chatEntryMode === "chat-first" && restorePendingDraft && (routeStatus.status !== "matched" || currentWorkspace?.id !== workspaceId)) {
+    return /* @__PURE__ */ jsx5(
+      ChatFirstAuthenticatedShell,
+      {
+        appTitle,
+        workspaceId,
+        initialDraft: pendingChatEntry?.draft,
+        workspaceProps
+      }
+    );
+  }
+  if (routeStatus.status !== "matched" || currentWorkspace?.id !== workspaceId) return /* @__PURE__ */ jsx5(Fragment2, { children: loadingFallback });
+  const shouldRestorePendingDraft = restorePendingDraft && Boolean(pendingChatEntry?.draft);
+  const chatParams = {
+    ...workspaceProps.chatParams,
+    ...shouldRestorePendingDraft ? { initialDraft: pendingChatEntry?.draft } : {},
+    ...shouldRestorePendingDraft ? { autoSubmitInitialDraft: true } : {},
+    onBeforeSubmit: async (draft, ctx) => {
+      const existing = workspaceProps.chatParams?.onBeforeSubmit;
+      const result = await existing?.(draft, ctx);
+      if (result !== false) clearPendingChatEntry();
+      return result;
+    }
+  };
+  return /* @__PURE__ */ jsx5(
+    WorkspaceAgentFront2,
     {
+      ...workspaceProps,
       workspaceId,
       requestHeaders,
-      apiBaseUrl: workspaceProps.apiBaseUrl,
-      preloadPaths: bootPreloadPaths,
-      loadingFallback,
-      children: /* @__PURE__ */ jsx(
-        WorkspaceAgentFront,
-        {
-          ...workspaceProps,
-          workspaceId,
-          requestHeaders,
-          authHeaders,
-          frontPluginHotReload: false,
-          hotReloadEnabled: false
-        }
-      )
-    }
+      authHeaders,
+      chatParams,
+      bootPreloadPaths,
+      frontPluginHotReload: false,
+      hotReloadEnabled: false
+    },
+    workspaceId
   );
 }
+function chatFirstPublicPaths(workspaceRoute) {
+  return Array.from(/* @__PURE__ */ new Set(["/", workspaceRoute, "/workspace/:id", "/w/:id"]));
+}
 function CoreWorkspaceAgentFront({
   authPages,
   cspNonce,
@@ -106,11 +470,12 @@ function CoreWorkspaceAgentFront({
   workspaceHref = (workspaceId) => `/workspace/${workspaceId}`,
   loadingFallback,
   bootPreloadPaths,
-  topBarLeft = /* @__PURE__ */ jsx(WorkspaceSwitcher, {}),
-  topBarRight = /* @__PURE__ */ jsx(DefaultTopBarRight, {}),
+  topBarLeft = /* @__PURE__ */ jsx5(WorkspaceSwitcher, {}),
+  topBarRight = /* @__PURE__ */ jsx5(DefaultTopBarRight, {}),
   appTitle = "Boring",
   bridgeEndpoint = "/api/v1/ui",
   hotReload = false,
+  chatEntryMode = "auth-first",
   ...workspaceProps
 }) {
   if (hotReload !== false) {
@@ -118,7 +483,7 @@ function CoreWorkspaceAgentFront({
       "CoreWorkspaceAgentFront does not support hotReload yet; use static plugin consumption or WorkspaceAgentFront for standalone hot reload."
     );
   }
-  const resolvedLoadingFallback = loadingFallback ?? /* @__PURE__ */ jsx(
+  const resolvedLoadingFallback = loadingFallback ?? /* @__PURE__ */ jsx5(
     WorkspaceLoadingPage,
     {
       appTitle,
@@ -133,37 +498,53 @@ function CoreWorkspaceAgentFront({
     topBarRight,
     bridgeEndpoint
   };
-  return /* @__PURE__ */ jsxs(CoreFront, { authPages, cspNonce, children: [
-    /* @__PURE__ */ jsx(
-      Route,
-      {
-        path: "/",
-        element: /* @__PURE__ */ jsx(
-          HomeRedirect,
+  return /* @__PURE__ */ jsxs4(
+    CoreFront,
+    {
+      authPages,
+      cspNonce,
+      workspaceRoute,
+      workspaceIdParam,
+      publicPaths: chatEntryMode === "chat-first" ? chatFirstPublicPaths(workspaceRoute) : void 0,
+      children: [
+        /* @__PURE__ */ jsx5(
+          Route,
           {
-            loadingFallback: resolvedLoadingFallback,
-            workspaceHref
+            path: "/",
+            element: /* @__PURE__ */ jsx5(
+              HomeRedirect,
+              {
+                loadingFallback: resolvedLoadingFallback,
+                workspaceHref,
+                chatEntryMode,
+                appTitle,
+                workspaceProps: resolvedWorkspaceProps
+              }
+            )
           }
-        )
-      }
-    ),
-    /* @__PURE__ */ jsx(
-      Route,
-      {
-        path: workspaceRoute,
-        element: /* @__PURE__ */ jsx(
-          WorkspaceRoute,
+        ),
+        /* @__PURE__ */ jsx5(
+          Route,
           {
-            workspaceIdParam,
-            loadingFallback: resolvedLoadingFallback,
-            bootPreloadPaths,
-            workspaceProps: resolvedWorkspaceProps
+            path: workspaceRoute,
+            element: /* @__PURE__ */ jsx5(
+              WorkspaceRoute,
+              {
+                workspaceIdParam,
+                loadingFallback: resolvedLoadingFallback,
+                bootPreloadPaths,
+                workspaceProps: resolvedWorkspaceProps,
+                chatEntryMode,
+                appTitle,
+                workspaceRoute
+              }
+            )
           }
-        )
-      }
-    ),
-    children
-  ] });
+        ),
+        children
+      ]
+    }
+  );
 }
 export {
   CoreWorkspaceAgentFront

package/dist/app/server/index.js

@@ -9,7 +9,7 @@ import {
   registerRoutes,
   registerSettingsRoutes,
   registerWorkspaceRoutes
-} from "../../chunk-6D7LEQSL.js";
+} from "../../chunk-TAXVSQDW.js";
 import {
   PostgresUserStore,
   PostgresWorkspaceStore,
@@ -531,7 +531,8 @@ async function createCoreWorkspaceAgentServer(options = {}) {
   const { app, sql, db, userStore, workspaceStore } = await createCoreRuntime(config);
   const appRoot = options.appRoot;
   const serveFrontend = options.serveFrontend ?? (process.env.NODE_ENV !== "development" && Boolean(appRoot));
-  const workspaceRoot = options.workspaceRoot ?? process.cwd();
+  const pluginWorkspaceRoot = process.cwd();
+  const workspaceRoot = options.workspaceRoot ?? process.env.BORING_AGENT_WORKSPACE_ROOT ?? process.cwd();
   const telemetrySource = options.telemetry ? "custom" : process.env.BORING_TELEMETRY_ENABLED === "true" ? "db-env" : "noop-env";
   const telemetry = options.telemetry ?? createDatabaseTelemetryFromEnv(db, { appId: config.appId }, process.env);
   app.log.debug({ telemetry: { source: telemetrySource } }, "resolved telemetry sink");
@@ -544,7 +545,7 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     serveSpaShell: (request, reply) => serveFrontendShell(request, reply, path.resolve(appRoot, "dist/front/index.html"), telemetry)
   } : void 0);
   const defaultPluginPackagePaths = resolveDefaultWorkspacePluginPackagePaths({
-    workspaceRoot,
+    workspaceRoot: pluginWorkspaceRoot,
     appPackageJsonPath: options.appPackageJsonPath,
     defaultPluginPackages: options.defaultPluginPackages
   });
@@ -568,7 +569,7 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     return bridge;
   };
   const pluginResolveContext = {
-    workspaceRoot,
+    workspaceRoot: pluginWorkspaceRoot,
     bridge: createUnavailableCorePluginBridge()
   };
   const resolvedPlugins = await Promise.all(
@@ -578,7 +579,7 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     ))
   );
   const pluginCollection = collectWorkspaceAgentServerPlugins({
-    workspaceRoot,
+    workspaceRoot: pluginWorkspaceRoot,
     systemPromptAppend: staticSystemPromptAppend,
     pi: mergePiOptions(options.pi, defaultPackagePiOptions),
     plugins: resolvedPlugins,

package/dist/{chunk-JMCBLJ6W.js → chunk-5R3U6QKD.js}

@@ -471,68 +471,12 @@ function useWorkspaceMembers(workspaceId) {
 }
 
 // src/front/WorkspaceAuthProvider.tsx
-import { createContext as createContext3, useContext as useContext3 } from "react";
+import { createContext as createContext4, useContext as useContext4 } from "react";
 import { useQuery as useQuery2, useQueryClient } from "@tanstack/react-query";
 import { matchPath, useLocation, useParams } from "react-router-dom";
-import { jsx as jsx4 } from "react/jsx-runtime";
-var WorkspaceContext = createContext3({
-  workspace: null,
-  role: null
-});
-var WORKSPACES_QUERY_KEY = ["workspaces"];
-function workspaceQueryKey(workspaceId) {
-  return ["workspace", workspaceId ?? null];
-}
-async function fetchWorkspaces() {
-  const data = await apiFetchJson("/api/v1/workspaces");
-  return data.workspaces;
-}
-async function fetchWorkspace(workspaceId) {
-  return await apiFetchJson(
-    `/api/v1/workspaces/${encodeURIComponent(workspaceId)}`
-  );
-}
-function workspaceIdFromPath(pathname) {
-  const match = matchPath("/w/:id/*", pathname) ?? matchPath("/w/:id", pathname) ?? matchPath("/workspace/:id/*", pathname) ?? matchPath("/workspace/:id", pathname);
-  const id = match?.params.id?.trim();
-  return id ? id : null;
-}
-function WorkspaceAuthProvider({ children }) {
-  const { id } = useParams();
-  const location = useLocation();
-  const queryClient = useQueryClient();
-  const routeWorkspaceId = id?.trim() ? id : workspaceIdFromPath(location.pathname);
-  const workspacesQuery = useQuery2({
-    queryKey: WORKSPACES_QUERY_KEY,
-    queryFn: fetchWorkspaces
-  });
-  const defaultWorkspace = routeWorkspaceId === null ? workspacesQuery.data?.find((workspace2) => workspace2.isDefault) ?? workspacesQuery.data?.[0] ?? null : null;
-  const resolvedId = routeWorkspaceId ?? defaultWorkspace?.id ?? null;
-  const cachedDetail = resolvedId ? queryClient.getQueryData(workspaceQueryKey(resolvedId)) : void 0;
-  const detailQuery = useQuery2({
-    queryKey: workspaceQueryKey(resolvedId),
-    queryFn: () => {
-      if (!resolvedId) {
-        throw new Error("Workspace id is required");
-      }
-      return fetchWorkspace(resolvedId);
-    },
-    enabled: resolvedId !== null
-  });
-  const detail = detailQuery.data ?? cachedDetail ?? null;
-  const workspace = detailQuery.isError ? null : detail?.workspace ?? null;
-  const role = detailQuery.isError ? null : detail?.role ?? null;
-  return /* @__PURE__ */ jsx4(WorkspaceContext.Provider, { value: { workspace, role }, children });
-}
-function useCurrentWorkspace() {
-  return useContext3(WorkspaceContext).workspace;
-}
-function useWorkspaceRole() {
-  return useContext3(WorkspaceContext).role;
-}
 
 // src/front/auth/AuthProvider.tsx
-import { createContext as createContext4, useContext as useContext4, useCallback as useCallback2, useMemo as useMemo2 } from "react";
+import { createContext as createContext3, useContext as useContext3, useCallback as useCallback2, useMemo as useMemo2 } from "react";
 
 // src/front/auth/authClient.ts
 import { createAuthClient } from "better-auth/react";
@@ -555,8 +499,8 @@ function getAuthClient(baseURL) {
 }
 
 // src/front/auth/AuthProvider.tsx
-import { jsx as jsx5 } from "react/jsx-runtime";
-var AuthContext = createContext4(null);
+import { jsx as jsx4 } from "react/jsx-runtime";
+var AuthContext = createContext3(null);
 function toISOString(value) {
   if (!value) return "";
   if (value instanceof Date) return value.toISOString();
@@ -589,10 +533,10 @@ function AuthProvider({
     () => ({ client, signOut }),
     [client, signOut]
   );
-  return /* @__PURE__ */ jsx5(AuthContext.Provider, { value, children });
+  return /* @__PURE__ */ jsx4(AuthContext.Provider, { value, children });
 }
 function useAuthContext() {
-  const ctx = useContext4(AuthContext);
+  const ctx = useContext3(AuthContext);
   if (!ctx) throw new Error("useSession/signIn/signOut must be used within an AuthProvider");
   return ctx;
 }
@@ -620,8 +564,21 @@ function useSignUp() {
   return client.signUp;
 }
 function useForgetPassword() {
-  const { client } = useAuthContext();
-  return client.forgetPassword;
+  useAuthContext();
+  return async (opts) => {
+    const endpoint = buildApiUrl("/auth/request-password-reset");
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      credentials: "include",
+      body: JSON.stringify(opts)
+    });
+    const data = await response.json().catch(() => null);
+    if (!response.ok) {
+      return { data: null, error: data ?? { status: response.status, message: "Request failed" } };
+    }
+    return { data, error: null };
+  };
 }
 function useResetPassword() {
   const { client } = useAuthContext();
@@ -644,6 +601,107 @@ function useSignOut() {
   return signOut;
 }
 
+// src/front/WorkspaceAuthProvider.tsx
+import { jsx as jsx5 } from "react/jsx-runtime";
+var WorkspaceContext = createContext4({
+  workspace: null,
+  role: null,
+  routeStatus: { status: "idle", workspaceId: null }
+});
+var WORKSPACES_QUERY_KEY = ["workspaces"];
+function workspaceQueryKey(workspaceId) {
+  return ["workspace", workspaceId ?? null];
+}
+async function fetchWorkspaces() {
+  const data = await apiFetchJson("/api/v1/workspaces");
+  return data.workspaces;
+}
+async function fetchWorkspace(workspaceId) {
+  return await apiFetchJson(
+    `/api/v1/workspaces/${encodeURIComponent(workspaceId)}`
+  );
+}
+function routePatterns(route) {
+  const normalized = route.endsWith("/*") ? route.slice(0, -2) : route;
+  return [`${normalized}/*`, normalized];
+}
+function workspaceIdFromPath(pathname, workspaceRoute = "/workspace/:id", workspaceIdParam = "id") {
+  const patterns = [
+    ...routePatterns(workspaceRoute),
+    "/w/:id/*",
+    "/w/:id",
+    "/workspace/:id/*",
+    "/workspace/:id"
+  ];
+  for (const pattern of patterns) {
+    const match = matchPath(pattern, pathname);
+    const id = match?.params[workspaceIdParam]?.trim() ?? match?.params.id?.trim();
+    if (id) return id;
+  }
+  return null;
+}
+function routeStatusFromError(workspaceId, error) {
+  const detail = getHttpErrorDetail(error);
+  if (detail.status === 404 || detail.code === "not_found") {
+    return { status: "not-found", workspaceId, message: detail.message };
+  }
+  if (detail.status === 403 || detail.code === "forbidden" || detail.code === "not_member") {
+    return { status: "forbidden", workspaceId, message: detail.message };
+  }
+  return { status: "switch-failed", workspaceId, message: detail.message };
+}
+function WorkspaceAuthProvider({
+  children,
+  workspaceRoute,
+  workspaceIdParam
+}) {
+  const { id } = useParams();
+  const location = useLocation();
+  const queryClient = useQueryClient();
+  const routeWorkspaceId = id?.trim() ? id : workspaceIdFromPath(location.pathname, workspaceRoute, workspaceIdParam);
+  const session = useSession();
+  const isAuthenticated = Boolean(session.data?.user);
+  const workspacesQuery = useQuery2({
+    queryKey: WORKSPACES_QUERY_KEY,
+    queryFn: fetchWorkspaces,
+    enabled: isAuthenticated
+  });
+  const defaultWorkspace = routeWorkspaceId === null ? workspacesQuery.data?.find((workspace2) => workspace2.isDefault) ?? workspacesQuery.data?.[0] ?? null : null;
+  const resolvedId = routeWorkspaceId ?? defaultWorkspace?.id ?? null;
+  const cachedDetail = resolvedId ? queryClient.getQueryData(workspaceQueryKey(resolvedId)) : void 0;
+  const detailQuery = useQuery2({
+    queryKey: workspaceQueryKey(resolvedId),
+    queryFn: () => {
+      if (!resolvedId) {
+        throw new Error("Workspace id is required");
+      }
+      return fetchWorkspace(resolvedId);
+    },
+    enabled: isAuthenticated && resolvedId !== null
+  });
+  const detail = detailQuery.data ?? cachedDetail ?? null;
+  const workspace = detailQuery.isError ? null : detail?.workspace ?? null;
+  const role = detailQuery.isError ? null : detail?.role ?? null;
+  const routeStatus = (() => {
+    if (!isAuthenticated) return { status: "idle", workspaceId: routeWorkspaceId };
+    if (routeWorkspaceId === null) return { status: "idle", workspaceId: null };
+    if (detailQuery.isError) return routeStatusFromError(routeWorkspaceId, detailQuery.error);
+    if (detailQuery.isPending && !detail) return { status: "loading", workspaceId: routeWorkspaceId };
+    if (workspace?.id === routeWorkspaceId) return { status: "matched", workspaceId: routeWorkspaceId, workspace };
+    return { status: "mismatched", workspaceId: routeWorkspaceId, currentWorkspaceId: workspace?.id ?? null };
+  })();
+  return /* @__PURE__ */ jsx5(WorkspaceContext.Provider, { value: { workspace, role, routeStatus }, children });
+}
+function useCurrentWorkspace() {
+  return useContext4(WorkspaceContext).workspace;
+}
+function useWorkspaceRole() {
+  return useContext4(WorkspaceContext).role;
+}
+function useWorkspaceRouteStatus() {
+  return useContext4(WorkspaceContext).routeStatus;
+}
+
 // src/front/auth/UserIdentityProvider.tsx
 import { createContext as createContext5, useContext as useContext5, useEffect as useEffect7, useState as useState6, useRef as useRef3 } from "react";
 import { jsx as jsx6 } from "react/jsx-runtime";
@@ -984,6 +1042,8 @@ function ForgotPasswordPage() {
   const forgetPassword = useForgetPassword();
   const [isSubmitting, setIsSubmitting] = useState10(false);
   const [submitted, setSubmitted] = useState10(false);
+  const redirect = typeof window === "undefined" ? null : new URLSearchParams(window.location.search).get("redirect");
+  const signinHref = redirect ? `${routes.signin}?redirect=${encodeURIComponent(redirect)}` : routes.signin;
   const {
     register,
     handleSubmit,
@@ -1007,7 +1067,7 @@ function ForgotPasswordPage() {
         /* @__PURE__ */ jsx10(CardTitle3, { children: "Check your inbox" }),
         /* @__PURE__ */ jsx10(CardDescription3, { children: "If an account exists with that email, we sent a password reset link. Check your inbox and follow the instructions." })
       ] }),
-      /* @__PURE__ */ jsx10(CardFooter3, { children: /* @__PURE__ */ jsx10("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+      /* @__PURE__ */ jsx10(CardFooter3, { children: /* @__PURE__ */ jsx10("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
     ] }) });
   }
   return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
@@ -1032,7 +1092,7 @@ function ForgotPasswordPage() {
       ] }) }),
       /* @__PURE__ */ jsxs3(CardFooter3, { className: "flex flex-col gap-4", children: [
         /* @__PURE__ */ jsx10(Button5, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Sending\u2026" : "Send reset link" }),
-        /* @__PURE__ */ jsx10("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" })
+        /* @__PURE__ */ jsx10("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" })
       ] })
     ] })
   ] }) });
@@ -1816,6 +1876,7 @@ function InviteAcceptPage() {
 
 // src/front/AuthGate.tsx
 import { useEffect as useEffect9, useMemo as useMemo3, useRef as useRef5 } from "react";
+import { matchPath as matchPath2 } from "react-router-dom";
 import { Fragment as Fragment3, jsx as jsx15 } from "react/jsx-runtime";
 var DEFAULT_GRACE_MS = 3e4;
 var UNSAFE_REDIRECT_RE = /[\0\r\n<>"'`]/;
@@ -1842,7 +1903,12 @@ function normalizePublicPath(path) {
 function isPublicPath(pathname, publicPaths) {
   const normalizedPath = normalizePath(pathname);
   if (normalizedPath === "/auth" || normalizedPath.startsWith("/auth/")) return true;
-  return publicPaths.some((candidate) => normalizedPath === candidate || normalizedPath.startsWith(`${candidate}/`));
+  return publicPaths.some((candidate) => {
+    if (candidate.includes(":") || candidate.includes("*")) {
+      return Boolean(matchPath2({ path: candidate, end: !candidate.includes("*") }, normalizedPath));
+    }
+    return normalizedPath === candidate || normalizedPath.startsWith(`${candidate}/`);
+  });
 }
 function readSafeRedirect(search) {
   const redirect = new URLSearchParams(normalizeSearch(search)).get("redirect");
@@ -1938,8 +2004,8 @@ function AuthGate({
 }
 
 // src/front/CoreFront.tsx
-import { Suspense, useMemo as useMemo6 } from "react";
-import { BrowserRouter, Routes, Route } from "react-router-dom";
+import { Suspense, useCallback as useCallback9, useMemo as useMemo6 } from "react";
+import { BrowserRouter, Routes, Route, useLocation as useLocation2, useNavigate as useNavigate5 } from "react-router-dom";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { Helmet, HelmetProvider } from "react-helmet-async";
 
@@ -2202,12 +2268,15 @@ function WorkspaceSwitcher({
         headers: { "content-type": "application/json" },
         body: JSON.stringify({ name: parsed.data.name })
       });
-      await Promise.all([
-        queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY }),
-        queryClient.invalidateQueries({ queryKey: workspaceQueryKey(data.workspace.id) })
-      ]);
+      queryClient.setQueryData(workspaceQueryKey(data.workspace.id), data);
+      queryClient.setQueryData(WORKSPACES_QUERY_KEY, (current = []) => {
+        if (current.some((workspace) => workspace.id === data.workspace.id)) return current;
+        return [...current, data.workspace];
+      });
       onModalChange(false);
       navigate(hrefForWorkspace(workspacePathPrefix, data.workspace.id));
+      void queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY });
+      void queryClient.invalidateQueries({ queryKey: workspaceQueryKey(data.workspace.id) });
     } catch (error) {
       const detail = getHttpErrorDetail(error);
       if (typeof detail.status === "number" && detail.status >= 400 && detail.status < 500) {
@@ -3420,7 +3489,30 @@ function createDefaultQueryClient() {
     }
   });
 }
-function CoreFront({ children, authPages, cspNonce }) {
+function RouterAuthGate({ children, publicPaths }) {
+  const location = useLocation2();
+  const navigate = useNavigate5();
+  const authLocation = useMemo6(
+    () => ({ pathname: location.pathname, search: location.search, hash: location.hash }),
+    [location.hash, location.pathname, location.search]
+  );
+  const navigateWithinRouter = useCallback9(
+    (to, options) => {
+      navigate(to, { replace: options?.replace });
+    },
+    [navigate]
+  );
+  return /* @__PURE__ */ jsx22(
+    AuthGate,
+    {
+      location: authLocation,
+      navigate: navigateWithinRouter,
+      publicPaths,
+      children
+    }
+  );
+}
+function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdParam, publicPaths }) {
   const queryClient = useMemo6(createDefaultQueryClient, []);
   const resolvedCspNonce = useMemo6(
     () => cspNonce ?? readCspNonceFromDom(),
@@ -3433,7 +3525,7 @@ function CoreFront({ children, authPages, cspNonce }) {
   const VerifyEmailPage2 = authPages?.verifyEmail ?? VerifyEmailPage;
   const AuthErrorPage2 = authPages?.authError ?? AuthErrorPage;
   const UserSettingsPage2 = authPages?.userSettings ?? UserSettingsPage;
-  return /* @__PURE__ */ jsx22(HelmetProvider, { children: /* @__PURE__ */ jsx22(AppErrorBoundary, { children: /* @__PURE__ */ jsx22(QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ jsx22(ConfigProvider, { children: /* @__PURE__ */ jsx22(ThemeProvider, { children: /* @__PURE__ */ jsx22(AuthProvider, { queryClient, children: /* @__PURE__ */ jsx22(UserIdentityProvider, { children: /* @__PURE__ */ jsx22(BrowserRouter, { children: /* @__PURE__ */ jsx22(WorkspaceAuthProvider, { children: /* @__PURE__ */ jsxs15(TopBarSlotProvider, { slot: /* @__PURE__ */ jsx22(UserMenu, {}), children: [
+  return /* @__PURE__ */ jsx22(HelmetProvider, { children: /* @__PURE__ */ jsx22(AppErrorBoundary, { children: /* @__PURE__ */ jsx22(QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ jsx22(ConfigProvider, { children: /* @__PURE__ */ jsx22(ThemeProvider, { children: /* @__PURE__ */ jsx22(AuthProvider, { queryClient, children: /* @__PURE__ */ jsx22(UserIdentityProvider, { children: /* @__PURE__ */ jsx22(BrowserRouter, { children: /* @__PURE__ */ jsx22(WorkspaceAuthProvider, { workspaceRoute, workspaceIdParam, children: /* @__PURE__ */ jsxs15(TopBarSlotProvider, { slot: /* @__PURE__ */ jsx22(UserMenu, {}), children: [
     /* @__PURE__ */ jsx22(Helmet, { children: resolvedCspNonce ? /* @__PURE__ */ jsxs15(Fragment6, { children: [
       /* @__PURE__ */ jsx22("meta", { name: CSP_NONCE_META_NAME, content: resolvedCspNonce }),
       /* @__PURE__ */ jsx22(
@@ -3446,7 +3538,7 @@ function CoreFront({ children, authPages, cspNonce }) {
         }
       )
     ] }) : null }),
-    /* @__PURE__ */ jsx22(AuthGate, { publicPaths: ["/invites"], children: /* @__PURE__ */ jsx22(Suspense, { fallback: null, children: /* @__PURE__ */ jsxs15(Routes, { children: [
+    /* @__PURE__ */ jsx22(RouterAuthGate, { publicPaths: ["/invites", ...publicPaths ?? []], children: /* @__PURE__ */ jsx22(Suspense, { fallback: null, children: /* @__PURE__ */ jsxs15(Routes, { children: [
       /* @__PURE__ */ jsx22(Route, { path: routes.signin, element: /* @__PURE__ */ jsx22(SignInPage2, {}) }),
       /* @__PURE__ */ jsx22(Route, { path: routes.signup, element: /* @__PURE__ */ jsx22(SignUpPage2, {}) }),
       /* @__PURE__ */ jsx22(Route, { path: routes.forgotPassword, element: /* @__PURE__ */ jsx22(ForgotPasswordPage2, {}) }),
@@ -3470,7 +3562,7 @@ function CoreFront({ children, authPages, cspNonce }) {
 
 // src/front/commands/CoreCommandContributions.tsx
 import { useMemo as useMemo7, useState as useState20 } from "react";
-import { useNavigate as useNavigate5 } from "react-router-dom";
+import { useNavigate as useNavigate6 } from "react-router-dom";
 
 // src/front/workspace/commands.ts
 function getWorkspaceCommands(workspaceId, navigate) {
@@ -3508,7 +3600,7 @@ function toPaletteCommand(command) {
   };
 }
 function useCoreCommands() {
-  const navigate = useNavigate5();
+  const navigate = useNavigate6();
   const signOut = useSignOut();
   const workspace = useCurrentWorkspace();
   const [isSigningOut, setIsSigningOut] = useState20(false);
@@ -3632,9 +3724,6 @@ export {
   useBlobUrl,
   useCapabilities,
   useWorkspaceMembers,
-  WorkspaceAuthProvider,
-  useCurrentWorkspace,
-  useWorkspaceRole,
   getAuthClient,
   AuthProvider,
   useSession,
@@ -3644,6 +3733,10 @@ export {
   useSendVerificationEmail,
   useChangePassword,
   useSignOut,
+  WorkspaceAuthProvider,
+  useCurrentWorkspace,
+  useWorkspaceRole,
+  useWorkspaceRouteStatus,
   UserIdentityProvider,
   useUser,
   GoogleAuthButton,

package/dist/{chunk-6D7LEQSL.js → chunk-TAXVSQDW.js}

@@ -1951,9 +1951,60 @@ var updateWorkspaceBody = z3.object({
 }).strict();
 
 // src/server/routes/workspaces.ts
+var DEFAULT_WORKSPACE_NAME = "My Workspace";
 var workspaceRoutesPlugin = async (app) => {
   const store = app.workspaceStore;
   const provisioner = app.provisioner;
+  async function provisionWorkspace(workspace, ownerId, request) {
+    if (!provisioner) return;
+    await store.putWorkspaceRuntime(workspace.id, { state: "pending" });
+    try {
+      const result = await provisioner.provision({
+        workspaceId: workspace.id,
+        workspaceName: workspace.name,
+        ownerId,
+        appId: app.config.appId
+      });
+      await store.putWorkspaceRuntime(workspace.id, {
+        state: "ready",
+        volumePath: result.volumePath
+      });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      await store.putWorkspaceRuntime(workspace.id, {
+        state: "error",
+        lastError: message,
+        lastErrorOp: "provision"
+      });
+      request.log.error({ workspaceId: workspace.id, err }, "workspace.provision.failed");
+      throw new HttpError({
+        status: 500,
+        code: ERROR_CODES.PROVISION_FAILED,
+        message: "Workspace provisioning failed",
+        requestId: request.id
+      });
+    }
+  }
+  async function createWorkspaceForUser(userId, name, isDefault, request) {
+    const workspace = await store.create(userId, name, app.config.appId, { isDefault });
+    await provisionWorkspace(workspace, userId, request);
+    return workspace;
+  }
+  async function ensureDefaultWorkspaceProvisioned(workspace, request) {
+    if (!provisioner || !workspace.isDefault) return;
+    const runtime = await store.getWorkspaceRuntime(workspace.id);
+    const needsProvisioning = !runtime || runtime.state === "ready" && !runtime.volumePath;
+    if (needsProvisioning) await provisionWorkspace(workspace, workspace.createdBy, request);
+  }
+  async function listOrCreateDefaultWorkspace(userId, request) {
+    const existing = await store.list(userId, app.config.appId);
+    if (existing.length > 0) {
+      await Promise.all(existing.map((workspace) => ensureDefaultWorkspaceProvisioned(workspace, request)));
+      return existing;
+    }
+    const created = await createWorkspaceForUser(userId, DEFAULT_WORKSPACE_NAME, true, request);
+    return [created];
+  }
   app.post("/api/v1/workspaces", async (request, reply) => {
     const parsed = createWorkspaceBody.safeParse(request.body);
     if (!parsed.success) {
@@ -1967,42 +2018,13 @@ var workspaceRoutesPlugin = async (app) => {
     const user = request.user;
     const existing = await store.list(user.id, app.config.appId);
     const isDefault = existing.length === 0;
-    const workspace = await store.create(user.id, parsed.data.name, app.config.appId, { isDefault });
-    if (provisioner) {
-      await store.putWorkspaceRuntime(workspace.id, { state: "pending" });
-      try {
-        const result = await provisioner.provision({
-          workspaceId: workspace.id,
-          workspaceName: workspace.name,
-          ownerId: user.id,
-          appId: app.config.appId
-        });
-        await store.putWorkspaceRuntime(workspace.id, {
-          state: "ready",
-          volumePath: result.volumePath
-        });
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        await store.putWorkspaceRuntime(workspace.id, {
-          state: "error",
-          lastError: message,
-          lastErrorOp: "provision"
-        });
-        request.log.error({ workspaceId: workspace.id, err }, "workspace.provision.failed");
-        throw new HttpError({
-          status: 500,
-          code: ERROR_CODES.PROVISION_FAILED,
-          message: "Workspace provisioning failed",
-          requestId: request.id
-        });
-      }
-    }
+    const workspace = await createWorkspaceForUser(user.id, parsed.data.name, isDefault, request);
     request.log.info({ workspaceId: workspace.id, userId: user.id }, "workspace.create");
     reply.status(201);
     return { workspace, role: "owner" };
   });
   app.get("/api/v1/workspaces", async (request) => {
-    const workspaces2 = await store.list(request.user.id, app.config.appId);
+    const workspaces2 = await listOrCreateDefaultWorkspace(request.user.id, request);
     return { workspaces: workspaces2 };
   });
   app.get(

package/dist/front/index.d.ts

@@ -6,7 +6,7 @@ import * as _tanstack_react_query from '@tanstack/react-query';
 import * as better_auth_react from 'better-auth/react';
 import { createAuthClient } from 'better-auth/react';
 import * as better_auth from 'better-auth';
-export { a as CoreFront, C as CoreFrontAuthPagesOverride, b as CoreFrontProps } from '../CoreFront-CgAkiEts.js';
+export { a as CoreFront, C as CoreFrontAuthPagesOverride, b as CoreFrontProps } from '../CoreFront-N0QJSYaM.js';
 import { NavigateFunction } from 'react-router-dom';
 export { TopBarSlotProvider, useTopBarSlot } from './top-bar-slot.js';
 
@@ -70,12 +70,42 @@ type EnrichedMember = WorkspaceMember & {
 };
 declare function useWorkspaceMembers(workspaceId: string): _tanstack_react_query.UseQueryResult<EnrichedMember[], Error>;
 
+type WorkspaceRouteStatus = {
+    status: 'idle';
+    workspaceId: string | null;
+} | {
+    status: 'loading';
+    workspaceId: string | null;
+} | {
+    status: 'matched';
+    workspaceId: string;
+    workspace: Workspace;
+} | {
+    status: 'mismatched';
+    workspaceId: string;
+    currentWorkspaceId: string | null;
+} | {
+    status: 'not-found';
+    workspaceId: string;
+    message: string;
+} | {
+    status: 'forbidden';
+    workspaceId: string;
+    message: string;
+} | {
+    status: 'switch-failed';
+    workspaceId: string;
+    message: string;
+};
 interface WorkspaceAuthProviderProps {
     children: ReactNode;
+    workspaceRoute?: string;
+    workspaceIdParam?: string;
 }
-declare function WorkspaceAuthProvider({ children }: WorkspaceAuthProviderProps): react_jsx_runtime.JSX.Element;
+declare function WorkspaceAuthProvider({ children, workspaceRoute, workspaceIdParam, }: WorkspaceAuthProviderProps): react_jsx_runtime.JSX.Element;
 declare function useCurrentWorkspace(): Workspace | null;
 declare function useWorkspaceRole(): MemberRole | null;
+declare function useWorkspaceRouteStatus(): WorkspaceRouteStatus;
 
 interface AuthProviderProps {
     children: ReactNode;
@@ -464,4 +494,4 @@ declare function sanitizeToolOutput(input: string): string;
 
 declare function debounce<T extends (...args: unknown[]) => unknown>(fn: T, ms: number): T;
 
-export { AppErrorBoundary, type AuthClient, AuthGate, type AuthGateProps, AuthProvider, type AuthProviderProps, type Binding, type Breakpoint, ConfigProvider, type ConfigProviderProps, type CoreCommand, type EnrichedMember, ForgotPasswordPage, GoogleAuthButton, type GoogleAuthButtonProps, InviteAcceptPage, InvitesPage, MembersPage, ResetPasswordPage, type RouteMap, SignInPage, SignUpPage, type ThemeApi, ThemeProvider, type ThemeProviderProps, ThemeToggle, type UserIdentity, UserIdentityProvider, type UserIdentityProviderProps, UserMenu, UserSettingsPage, VerifyEmailPage, WorkspaceAuthProvider, type WorkspaceAuthProviderProps, type WorkspaceCommand, WorkspaceSettingsPage, WorkspaceSwitcher, apiFetch, apiFetchJson, buildApiUrl, buildWsUrl, debounce, getApiBase, getAuthClient, getHttpErrorDetail, getWorkspaceCommands, getWsBase, openWebSocket, routeHref, routes, sanitizeMarkdown, sanitizeToolOutput, setApiBase, useBlobUrl, useCapabilities, useChangePassword, useConfig, useConfigLoaded, useCoreCommands, useCurrentWorkspace, useKeyboardShortcuts, useReducedMotion, useSendVerificationEmail, useSession, useSignIn, useSignOut, useSignUp, useTheme, useUser, useVerifyEmail, useViewportBreakpoint, useWorkspaceMembers, useWorkspaceRole };
+export { AppErrorBoundary, type AuthClient, AuthGate, type AuthGateProps, AuthProvider, type AuthProviderProps, type Binding, type Breakpoint, ConfigProvider, type ConfigProviderProps, type CoreCommand, type EnrichedMember, ForgotPasswordPage, GoogleAuthButton, type GoogleAuthButtonProps, InviteAcceptPage, InvitesPage, MembersPage, ResetPasswordPage, type RouteMap, SignInPage, SignUpPage, type ThemeApi, ThemeProvider, type ThemeProviderProps, ThemeToggle, type UserIdentity, UserIdentityProvider, type UserIdentityProviderProps, UserMenu, UserSettingsPage, VerifyEmailPage, WorkspaceAuthProvider, type WorkspaceAuthProviderProps, type WorkspaceCommand, type WorkspaceRouteStatus, WorkspaceSettingsPage, WorkspaceSwitcher, apiFetch, apiFetchJson, buildApiUrl, buildWsUrl, debounce, getApiBase, getAuthClient, getHttpErrorDetail, getWorkspaceCommands, getWsBase, openWebSocket, routeHref, routes, sanitizeMarkdown, sanitizeToolOutput, setApiBase, useBlobUrl, useCapabilities, useChangePassword, useConfig, useConfigLoaded, useCoreCommands, useCurrentWorkspace, useKeyboardShortcuts, useReducedMotion, useSendVerificationEmail, useSession, useSignIn, useSignOut, useSignUp, useTheme, useUser, useVerifyEmail, useViewportBreakpoint, useWorkspaceMembers, useWorkspaceRole, useWorkspaceRouteStatus };

package/dist/front/index.js

@@ -56,8 +56,9 @@ import {
   useVerifyEmail,
   useViewportBreakpoint,
   useWorkspaceMembers,
-  useWorkspaceRole
-} from "../chunk-JMCBLJ6W.js";
+  useWorkspaceRole,
+  useWorkspaceRouteStatus
+} from "../chunk-5R3U6QKD.js";
 import {
   TopBarSlotProvider,
   useTopBarSlot
@@ -124,5 +125,6 @@ export {
   useVerifyEmail,
   useViewportBreakpoint,
   useWorkspaceMembers,
-  useWorkspaceRole
+  useWorkspaceRole,
+  useWorkspaceRouteStatus
 };

package/dist/server/index.js

@@ -24,7 +24,7 @@ import {
   requireWorkspaceMember,
   validateConfig,
   validatePasswordStrength
-} from "../chunk-6D7LEQSL.js";
+} from "../chunk-TAXVSQDW.js";
 import {
   createDatabase,
   runMigrations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -73,14 +73,15 @@
     "nodemailer": "^8.0.6",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
+    "posthog-node": "^5.35.1",
     "react-helmet-async": "^2.0.5",
     "react-hook-form": "^7.74.0",
     "react-router-dom": "^7.14.2",
     "smol-toml": "^1.6.1",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.23",
-    "@hachej/boring-workspace": "0.1.23",
-    "@hachej/boring-ui-kit": "0.1.23"
+    "@hachej/boring-agent": "0.1.24",
+    "@hachej/boring-workspace": "0.1.24",
+    "@hachej/boring-ui-kit": "0.1.24"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",
@@ -112,11 +113,11 @@
     }
   },
   "scripts": {
-    "build": "pnpm --filter @hachej/boring-ui-kit build && tsup && cp src/front/theme.css dist/front/theme.css && mkdir -p dist/app/front && cp src/app/front/styles.css dist/app/front/styles.css",
+    "build": "tsup && cp src/front/theme.css dist/front/theme.css && mkdir -p dist/app/front && cp src/app/front/styles.css dist/app/front/styles.css",
     "dev": "tsup --watch",
     "test": "vitest run --no-file-parallelism",
     "test:watch": "vitest",
-    "typecheck": "pnpm --filter @hachej/boring-ui-kit build && tsc --noEmit",
+    "typecheck": "tsc --noEmit",
     "lint": "pnpm run typecheck",
     "check:bundle-size": "tsx ./scripts/check-bundle-size.ts",
     "clean": "rm -rf dist .tsbuildinfo",