@hachej/boring-core 0.1.48 → 0.1.49

package/dist/{PostgresMeteringStore-DhOVVtau.d.ts → PostgresMeteringStore-qjKGmVFr.d.ts}

@@ -1,4 +1,4 @@
-import { C as CoreConfig } from './types-CWtJ4kgd.js';
+import { C as CoreConfig } from './types-Bb7I-83I.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 
 interface RunMigrationsOptions {

package/dist/app/front/chatFirst/chatFirstPublicShell.css

@@ -0,0 +1,269 @@
+/*
+ * Default styling for the chat-first public (no-auth) shell rendered by
+ * `ChatFirstPublicShell`. Brand-agnostic and token-driven (`--accent`,
+ * `--foreground`, `--muted-foreground`) so every consumer — full-app and child
+ * apps alike — inherits a polished landing. Apps customize via design tokens +
+ * the `chatFirstPublicShell` props (copy, `models`, suggestions), not by
+ * re-implementing this sheet. Imported via the package's `styles.css` entry.
+ */
+
+/* Subtle warm glow behind the hero so the flat background reads with depth.
+   Layers as a background-image over the shell's bg-background color. */
+.public-chat-first-shell {
+  background-image: radial-gradient(
+    70% 52% at 30% 22%,
+    color-mix(in oklch, var(--accent) 11%, transparent),
+    transparent 68%
+  );
+}
+
+/* --- Hand-drawn teaching annotations (public no-auth shell) --- */
+.public-arrow {
+  pointer-events: none;
+  position: fixed;
+  z-index: 20;
+  display: flex;
+  color: color-mix(in oklch, var(--foreground) 55%, transparent);
+}
+
+.public-arrow-svg {
+  overflow: visible;
+}
+
+.public-arrow .paw-stroke {
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 3.5;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+
+.public-arrow-label {
+  font-family: "Caveat", ui-rounded, "Segoe Print", cursive;
+  font-weight: 700;
+  font-size: 26px;
+  line-height: 1;
+  color: color-mix(in oklch, var(--foreground) 78%, transparent);
+  white-space: nowrap;
+}
+
+/* Right: points to the workspace surface button on the right edge. */
+.public-arrow-computer {
+  right: 12px;
+  bottom: 374px;
+  align-items: flex-end;
+  gap: 4px;
+}
+
+.public-arrow-computer .public-arrow-label {
+  margin-bottom: 6px;
+  transform: rotate(-5deg);
+}
+
+.public-arrow-computer .public-arrow-svg {
+  width: 178px;
+  height: 134px;
+}
+
+/* Bottom: points up to the composer (the agent input). */
+.public-arrow-agent {
+  left: 50%;
+  bottom: 78px;
+  flex-direction: column;
+  align-items: center;
+  transform: translateX(-50%);
+  gap: 2px;
+}
+
+.public-arrow-agent .public-arrow-svg {
+  width: 96px;
+  height: 92px;
+}
+
+.public-arrow-agent .public-arrow-label {
+  transform: rotate(-4deg);
+}
+
+/* Teaching arrows + bottom-left sign-in card are edge decorations that need
+   horizontal room — keep them on normal screens, hide only when genuinely
+   narrow (where they'd collide with the centered hero/composer). */
+@media (max-width: 1100px) {
+  .public-arrow,
+  .public-chat-first-shell > aside {
+    display: none;
+  }
+}
+
+/* The composer's model/thinking picker menu expands upward over the hero. It
+   lives deep in the chat content (a non-positioned ancestor), so a z-index
+   can't lift it above the fixed teaching arrow / sign-in card. Instead, while a
+   picker menu is open, hide the bottom "Ask your AI here" arrow and the sign-in
+   card so the menu reads cleanly; they return as soon as it closes. */
+.public-chat-first-shell:has([data-boring-agent-part="model-picker-menu"], [data-boring-agent-part="thinking-picker-menu"]) .public-arrow-agent,
+.public-chat-first-shell:has([data-boring-agent-part="model-picker-menu"], [data-boring-agent-part="thinking-picker-menu"]) > aside {
+  display: none;
+}
+
+/* Hide the chat-pane header strip ("New session") in the no-auth shell — there's
+   only ever a single pane here, so its title/drag/close bar is pure noise. */
+.public-chat-first-shell .dv-chat-stage .dv-tabs-and-actions-container {
+  display: none;
+}
+
+/* Keep opened workspace panes above the teaching arrows. */
+.public-chat-first-shell [data-boring-workspace-part="workbench"] {
+  z-index: 30;
+}
+
+/* --- Prominent hero (public no-auth empty state only) --- */
+.public-chat-first-shell [data-boring-agent-part="empty-state"] {
+  max-width: min(1120px, 92vw);
+}
+
+.public-chat-first-shell [data-boring-agent-part="empty-state"] > div:first-child {
+  font-size: 12px;
+  letter-spacing: 0.18em;
+}
+
+.public-chat-first-shell [data-boring-agent-part="empty-state"] h3 {
+  margin-top: 22px;
+  font-size: clamp(30px, 4.4vw, 60px);
+  font-weight: 600;
+  line-height: 1;
+  letter-spacing: -0.04em;
+  white-space: nowrap;
+}
+
+/* Editorial accent on the closing period (the title string omits its own). */
+.public-chat-first-shell [data-boring-agent-part="empty-state"] h3::after {
+  content: ".";
+  color: var(--accent);
+}
+
+.public-chat-first-shell [data-boring-agent-part="empty-state"] > p {
+  display: block;
+  /* Let the subhead breathe: more space from the title and looser leading
+     between the two lines. */
+  margin-top: 18px;
+  max-width: 58ch;
+  font-size: 17px;
+  line-height: 1.85;
+  /* Honor the explicit \n after "Choose the AI you trust." in the subhead. */
+  white-space: pre-line;
+}
+
+@media (max-width: 560px) {
+  .public-chat-first-shell [data-boring-agent-part="empty-state"] h3 {
+    white-space: normal;
+  }
+}
+
+/* Top-bias the hero + composer group instead of vertically centering it, so it
+   doesn't float to mid-screen (with a large empty band on top) on tall windows. */
+.public-chat-first-shell [class*="justify-center"]:has([data-boring-agent-part="empty-state"]) {
+  justify-content: flex-start;
+  padding-top: clamp(28px, 9vh, 132px);
+}
+
+/* Move the /command cards to the bottom of the hero block (after the footer),
+   so they sit directly above the composer. The empty-state is a flex column,
+   so `order` reorders without touching the React tree. */
+.public-chat-first-shell [data-boring-agent-part="empty-state"] .public-hero-foot {
+  order: 10;
+}
+.public-chat-first-shell [data-boring-agent-part="empty-state"] [data-boring-agent-part="suggestion-grid"] {
+  order: 20;
+}
+
+/* Command launcher cards — make the slash commands read as runnable. */
+.public-chat-first-shell [data-boring-agent-part="suggestion-grid"] {
+  margin-top: 28px;
+  max-width: 560px;
+  margin-left: auto;
+  margin-right: auto;
+  /* Match the composer's rounding + 1px outline so cards + input read as one
+     design system (composer rail is rounded-[28px] with a border/0.7 outline). */
+  border-radius: 20px;
+}
+
+/* Accent send button — make the composer's primary action carry the accent so
+   the orange reads as intentional, not just decoration on the slash cards.
+   Scoped to the public hero; the shared composer elsewhere stays neutral. */
+.public-chat-first-shell [data-boring-agent-part="composer-submit"] {
+  background-color: var(--accent);
+}
+
+.public-chat-first-shell [data-boring-agent-part="composer-submit"]:hover {
+  background-color: color-mix(in oklch, var(--accent) 90%, var(--foreground));
+}
+
+.public-chat-first-shell [data-boring-agent-part="suggestion-card"] {
+  padding-top: 15px;
+  padding-bottom: 15px;
+}
+
+.public-chat-first-shell [data-boring-agent-part="suggestion-card"] > span > span:first-child {
+  font-family: var(--font-mono, ui-monospace, SFMono-Regular, Menlo, monospace);
+  font-size: 13.5px;
+  font-weight: 600;
+  letter-spacing: -0.01em;
+  color: var(--accent);
+}
+
+.public-chat-first-shell [data-boring-agent-part="suggestion-card"] > span > span:nth-child(2) {
+  margin-top: 2px;
+  font-size: 12.5px;
+}
+
+/* Single compact footer line: "providers … · Open source [logo]". */
+.public-chat-first-shell .public-hero-foot {
+  display: flex;
+  flex-direction: row;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  margin-top: 30px;
+  font-size: 12.5px;
+  line-height: 1.4;
+}
+
+.public-chat-first-shell .public-hero-foot span {
+  color: var(--muted-foreground);
+}
+
+.public-chat-first-shell .public-hero-foot .public-hero-providers {
+  color: color-mix(in oklch, var(--foreground) 60%, transparent);
+  letter-spacing: 0.01em;
+}
+
+.public-chat-first-shell .public-hero-foot .public-hero-dot {
+  color: var(--muted-foreground);
+  opacity: 0.5;
+}
+
+.public-chat-first-shell .public-hero-foot .public-hero-github {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  color: var(--foreground);
+  font-weight: 500;
+  text-decoration: none;
+  transition: color 0.15s ease;
+}
+
+.public-chat-first-shell .public-hero-foot .public-hero-github svg {
+  width: 15px;
+  height: 15px;
+}
+
+.public-chat-first-shell .public-hero-foot .public-hero-github:hover {
+  color: var(--accent);
+}
+
+/* Emphasize the trusted choice in the subhead without it reading as a link. */
+.public-chat-first-shell [data-boring-agent-part="empty-state"] > p .public-hero-trust {
+  font-style: normal;
+  font-weight: 600;
+  color: color-mix(in oklch, var(--foreground) 88%, transparent);
+}

package/dist/app/front/index.js

@@ -3,14 +3,18 @@ import {
   UserMenu,
   WorkspaceSwitcher,
   routes,
+  useConfig,
   useCurrentWorkspace,
   useSession,
   useSignIn,
   useSignUp,
   useWorkspaceRouteStatus
-} from "../../chunk-VYXEXOCO.js";
+} from "../../chunk-P4RF2D7H.js";
 import "../../chunk-HYNKZSTF.js";
-import "../../chunk-LIBHVT7V.js";
+import {
+  isRuntimeEmailVerificationEnabled
+} from "../../chunk-I4PGL4ZD.js";
+import "../../chunk-QZGYKLXB.js";
 import "../../chunk-MLKGABMK.js";
 
 // src/app/front/CoreWorkspaceAgentFront.tsx
@@ -108,6 +112,7 @@ function AuthCard({
   onClose
 }) {
   const navigate = useNavigate();
+  const config = useConfig();
   const signIn = useSignIn();
   const signUp = useSignUp();
   const [mode, setMode] = useState("signin");
@@ -127,6 +132,10 @@ function AuthCard({
         return;
       }
       onClose?.();
+      if (mode === "signup" && isRuntimeEmailVerificationEnabled(config)) {
+        navigate(routes.verifyEmail, { replace: true });
+        return;
+      }
       navigate(returnTo, { replace: true });
     } catch (err) {
       setError(err instanceof Error ? err.message : `${mode === "signin" ? "Sign in" : "Sign up"} failed`);
@@ -521,10 +530,29 @@ function HomeRedirect({
   workspaceHref,
   chatEntryMode,
   appTitle,
+  topBarLeft,
+  topBarRight,
   workspaceProps,
   chatFirstPublicShell,
   chatFirstPublicWorkspaceProps
 }) {
+  const config = useConfig();
+  const resolvedAppTitle = appTitle ?? config.appName;
+  const resolvedTopBarLeft = topBarLeft === void 0 ? /* @__PURE__ */ jsx5(WorkspaceSwitcher, { appTitle: resolvedAppTitle }) : topBarLeft;
+  const resolvedLoadingFallback = loadingFallback ?? /* @__PURE__ */ jsx5(
+    WorkspaceLoadingPage,
+    {
+      appTitle: resolvedAppTitle,
+      topBarLeft: resolvedTopBarLeft,
+      topBarRight
+    }
+  );
+  const resolvedWorkspaceProps = {
+    ...workspaceProps,
+    appTitle: resolvedAppTitle,
+    topBarLeft: resolvedTopBarLeft,
+    topBarRight
+  };
   const location = useLocation2();
   const session = useSession();
   const workspace = useCurrentWorkspace();
@@ -539,9 +567,9 @@ function HomeRedirect({
     return /* @__PURE__ */ jsx5(
       ChatFirstPublicShell,
       {
-        appTitle,
+        appTitle: resolvedAppTitle,
         publicShell: chatFirstPublicShell,
-        workspaceProps: mergePublicWorkspaceProps(workspaceProps, chatFirstPublicWorkspaceProps)
+        workspaceProps: mergePublicWorkspaceProps(resolvedWorkspaceProps, chatFirstPublicWorkspaceProps)
       }
     );
   }
@@ -549,14 +577,14 @@ function HomeRedirect({
     return /* @__PURE__ */ jsx5(
       ChatFirstAuthenticatedShell,
       {
-        appTitle,
+        appTitle: resolvedAppTitle,
         workspaceId: pendingChatEntry?.intendedWorkspaceId ?? DEFAULT_CHAT_FIRST_PENDING_WORKSPACE_ID,
         initialDraft: pendingChatEntry?.draft,
-        workspaceProps
+        workspaceProps: resolvedWorkspaceProps
       }
     );
   }
-  if (!workspace) return /* @__PURE__ */ jsx5(Fragment3, { children: loadingFallback });
+  if (!workspace) return /* @__PURE__ */ jsx5(Fragment3, { children: resolvedLoadingFallback });
   return /* @__PURE__ */ jsx5(Navigate, { to: workspaceHref(workspace.id), replace: true });
 }
 function WorkspaceRouteErrorPage({ status, message }) {
@@ -573,10 +601,29 @@ function WorkspaceRoute({
   workspaceProps,
   chatEntryMode,
   appTitle,
+  topBarLeft,
+  topBarRight,
   workspaceRoute,
   chatFirstPublicShell,
   chatFirstPublicWorkspaceProps
 }) {
+  const config = useConfig();
+  const resolvedAppTitle = appTitle ?? config.appName;
+  const resolvedTopBarLeft = topBarLeft === void 0 ? /* @__PURE__ */ jsx5(WorkspaceSwitcher, { appTitle: resolvedAppTitle }) : topBarLeft;
+  const resolvedLoadingFallback = loadingFallback ?? /* @__PURE__ */ jsx5(
+    WorkspaceLoadingPage,
+    {
+      appTitle: resolvedAppTitle,
+      topBarLeft: resolvedTopBarLeft,
+      topBarRight
+    }
+  );
+  const resolvedWorkspaceProps = {
+    ...workspaceProps,
+    appTitle: resolvedAppTitle,
+    topBarLeft: resolvedTopBarLeft,
+    topBarRight
+  };
   const params = useParams();
   const location = useLocation2();
   const session = useSession();
@@ -592,22 +639,22 @@ function WorkspaceRoute({
     location.hash
   ) || pendingChatEntry?.returnTo === "/" && currentWorkspace?.id === workspaceId);
   const requestHeaders = useMemo(
-    () => ({ ...workspaceProps.requestHeaders, "x-boring-workspace-id": workspaceId }),
-    [workspaceId, workspaceProps.requestHeaders]
+    () => ({ ...resolvedWorkspaceProps.requestHeaders, "x-boring-workspace-id": workspaceId }),
+    [workspaceId, resolvedWorkspaceProps.requestHeaders]
   );
   const authHeaders = useMemo(
-    () => ({ ...workspaceProps.authHeaders, "x-boring-workspace-id": workspaceId }),
-    [workspaceId, workspaceProps.authHeaders]
+    () => ({ ...resolvedWorkspaceProps.authHeaders, "x-boring-workspace-id": workspaceId }),
+    [workspaceId, resolvedWorkspaceProps.authHeaders]
   );
-  if (!workspaceId) return /* @__PURE__ */ jsx5(Fragment3, { children: loadingFallback });
+  if (!workspaceId) return /* @__PURE__ */ jsx5(Fragment3, { children: resolvedLoadingFallback });
   if (!session.data?.user && chatEntryMode === "chat-first") {
     return /* @__PURE__ */ jsx5(
       ChatFirstPublicShell,
       {
-        appTitle,
+        appTitle: resolvedAppTitle,
         intendedWorkspaceId: workspaceId,
         publicShell: chatFirstPublicShell,
-        workspaceProps: mergePublicWorkspaceProps(workspaceProps, chatFirstPublicWorkspaceProps)
+        workspaceProps: mergePublicWorkspaceProps(resolvedWorkspaceProps, chatFirstPublicWorkspaceProps)
       }
     );
   }
@@ -618,21 +665,21 @@ function WorkspaceRoute({
     return /* @__PURE__ */ jsx5(
       ChatFirstAuthenticatedShell,
       {
-        appTitle,
+        appTitle: resolvedAppTitle,
         workspaceId,
         initialDraft: pendingChatEntry?.draft,
-        workspaceProps
+        workspaceProps: resolvedWorkspaceProps
       }
     );
   }
-  if (routeStatus.status !== "matched" || currentWorkspace?.id !== workspaceId) return /* @__PURE__ */ jsx5(Fragment3, { children: loadingFallback });
+  if (routeStatus.status !== "matched" || currentWorkspace?.id !== workspaceId) return /* @__PURE__ */ jsx5(Fragment3, { children: resolvedLoadingFallback });
   const shouldRestorePendingDraft = restorePendingDraft && Boolean(pendingChatEntry?.draft);
   const chatParams = {
-    ...workspaceProps.chatParams,
+    ...resolvedWorkspaceProps.chatParams,
     ...shouldRestorePendingDraft ? { initialDraft: pendingChatEntry?.draft } : {},
     ...shouldRestorePendingDraft ? { autoSubmitInitialDraft: true } : {},
     onBeforeSubmit: async (draft, ctx) => {
-      const existing = workspaceProps.chatParams?.onBeforeSubmit;
+      const existing = resolvedWorkspaceProps.chatParams?.onBeforeSubmit;
       const result = await existing?.(draft, ctx);
       if (result !== false) clearPendingChatEntry();
       return result;
@@ -641,9 +688,9 @@ function WorkspaceRoute({
   return /* @__PURE__ */ jsx5(
     WorkspaceAgentFront2,
     {
-      ...workspaceProps,
+      ...resolvedWorkspaceProps,
       workspaceId,
-      workspaceLabel: workspaceProps.workspaceLabel ?? currentWorkspace.name,
+      workspaceLabel: resolvedWorkspaceProps.workspaceLabel ?? currentWorkspace.name,
       requestHeaders,
       authHeaders,
       chatParams,
@@ -667,9 +714,9 @@ function CoreWorkspaceAgentFront({
   workspaceHref = (workspaceId) => `/workspace/${workspaceId}`,
   loadingFallback,
   bootPreloadPaths,
-  topBarLeft = /* @__PURE__ */ jsx5(WorkspaceSwitcher, {}),
+  topBarLeft,
   topBarRight = /* @__PURE__ */ jsx5(DefaultTopBarRight, {}),
-  appTitle = "Sovereign Workspace",
+  appTitle,
   bridgeEndpoint = "/api/v1/ui",
   hotReload = false,
   chatEntryMode = "auth-first",
@@ -683,19 +730,8 @@ function CoreWorkspaceAgentFront({
       "CoreWorkspaceAgentFront does not support hotReload yet; use static plugin consumption or WorkspaceAgentFront for standalone hot reload."
     );
   }
-  const resolvedLoadingFallback = loadingFallback ?? /* @__PURE__ */ jsx5(
-    WorkspaceLoadingPage,
-    {
-      appTitle,
-      topBarLeft,
-      topBarRight
-    }
-  );
-  const resolvedWorkspaceProps = {
+  const routedWorkspaceProps = {
     ...workspaceProps,
-    appTitle,
-    topBarLeft,
-    topBarRight,
     bridgeEndpoint
   };
   return /* @__PURE__ */ jsxs4(
@@ -714,11 +750,13 @@ function CoreWorkspaceAgentFront({
             element: /* @__PURE__ */ jsx5(
               HomeRedirect,
               {
-                loadingFallback: resolvedLoadingFallback,
+                loadingFallback,
                 workspaceHref,
                 chatEntryMode,
                 appTitle,
-                workspaceProps: resolvedWorkspaceProps,
+                topBarLeft,
+                topBarRight,
+                workspaceProps: routedWorkspaceProps,
                 chatFirstPublicShell,
                 chatFirstPublicWorkspaceProps
               }
@@ -733,11 +771,13 @@ function CoreWorkspaceAgentFront({
               WorkspaceRoute,
               {
                 workspaceIdParam,
-                loadingFallback: resolvedLoadingFallback,
+                loadingFallback,
                 bootPreloadPaths,
-                workspaceProps: resolvedWorkspaceProps,
+                workspaceProps: routedWorkspaceProps,
                 chatEntryMode,
                 appTitle,
+                topBarLeft,
+                topBarRight,
                 workspaceRoute,
                 chatFirstPublicShell,
                 chatFirstPublicWorkspaceProps
@@ -1351,7 +1391,7 @@ function BuyCreditsNoticeAction({ apiBaseUrl = "", label = "Buy credits" }) {
         size: "sm",
         onClick: () => void onBuy(),
         disabled: buying,
-        className: "bg-foreground text-background hover:bg-foreground/90",
+        className: "boring-buy-credits-notice-button",
         children: buying ? "Opening\u2026" : label
       }
     ),

package/dist/app/front/styles.css

@@ -4,3 +4,50 @@
 @import "../../front/theme.css";
 @import "@hachej/boring-workspace/globals.css";
 @import "@hachej/boring-agent/front/styles.css";
+
+/* Default styling for the chat-first public (no-auth) shell. Imported last so
+   its plain rules sit after Tailwind's utilities in the cascade. */
+@import "./chatFirst/chatFirstPublicShell.css";
+
+/* Credit notice CTA renders inside the agent subtree. Keep this selector after
+   Tailwind + agent globals so it beats both the Button variant colors and
+   [data-boring-agent] button color reset. */
+[data-boring-agent] .boring-buy-credits-notice-button,
+.boring-buy-credits-notice-button {
+  border: 1px solid color-mix(in oklab, var(--foreground) 18%, transparent);
+  background: var(--foreground);
+  color: var(--background);
+}
+
+[data-boring-agent] .boring-buy-credits-notice-button:hover,
+.boring-buy-credits-notice-button:hover {
+  background: color-mix(in oklab, var(--foreground) 90%, transparent);
+}
+
+html[data-theme="dark"] [data-boring-agent] .boring-buy-credits-notice-button,
+html[data-theme="dark"] .boring-buy-credits-notice-button {
+  border-color: oklch(1 0 0 / 0.2);
+  background: oklch(0.985 0 0);
+  color: oklch(0.145 0.004 285.823);
+}
+
+html[data-theme="dark"] [data-boring-agent] .boring-buy-credits-notice-button:hover,
+html[data-theme="dark"] .boring-buy-credits-notice-button:hover {
+  background: oklch(0.9 0 0);
+}
+
+/* The public-shell chat composer submit button sits on a brand/accent foreground.
+   The generic inverse text is too low-contrast on that amber CTA, so pin the public
+   shell icon to dark ink while leaving authenticated workspace composers alone. */
+.public-chat-first-shell [data-boring-agent] [data-boring-agent-part="composer-submit"] {
+  color: oklch(0.145 0.004 285.823) !important;
+}
+
+html[data-theme="dark"] .public-chat-first-shell [data-boring-agent] [data-boring-agent-part="composer-submit"] {
+  background: oklch(0.985 0 0) !important;
+  color: oklch(0.145 0.004 285.823) !important;
+}
+
+html[data-theme="dark"] .public-chat-first-shell [data-boring-agent] [data-boring-agent-part="composer-submit"]:hover {
+  background: oklch(0.9 0 0) !important;
+}

package/dist/app/server/index.d.ts

@@ -2,10 +2,10 @@ import { RuntimeProvisioningContribution, RegisterAgentRoutesOptions } from '@ha
 import { DirPluginEntry, CreateWorkspaceAgentServerOptions } from '@hachej/boring-workspace/app/server';
 import { WorkspaceServerPlugin } from '@hachej/boring-workspace/server';
 import { FastifyInstance } from 'fastify';
-import { C as CoreConfig } from '../../types-CWtJ4kgd.js';
-import { TelemetrySink } from '../../shared/index.js';
-import { B as BetterAuthInstance, L as LoadConfigOptions } from '../../authHook-DtzhSmqS.js';
-import { D as Database, U as UserStore, W as WorkspaceStore } from '../../connection-C5SiqoNc.js';
+import { C as CoreConfig } from '../../types-Bb7I-83I.js';
+import { T as TelemetrySink } from '../../telemetry-DR18MeI0.js';
+import { B as BetterAuthInstance, L as LoadConfigOptions } from '../../authHook-BbgCBHjP.js';
+import { D as Database, U as UserStore, W as WorkspaceStore } from '../../connection-B1iC6B-w.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import 'better-auth';
 import 'drizzle-orm/postgres-js';

package/dist/app/server/index.js

@@ -9,20 +9,21 @@ import {
   registerRoutes,
   registerSettingsRoutes,
   registerWorkspaceRoutes
-} from "../../chunk-6GAQRQKO.js";
+} from "../../chunk-ZMS6O4CY.js";
 import {
   PostgresUserStore,
   PostgresWorkspaceStore,
   createDatabase,
   telemetryEvents
-} from "../../chunk-FZC3VL5D.js";
+} from "../../chunk-BVZ2YT3M.js";
 import {
   noopTelemetry,
   safeCapture
 } from "../../chunk-AQBXNPMD.js";
+import "../../chunk-I4PGL4ZD.js";
 import {
   ERROR_CODES
-} from "../../chunk-LIBHVT7V.js";
+} from "../../chunk-QZGYKLXB.js";
 import "../../chunk-MLKGABMK.js";
 
 // src/app/server/createCoreWorkspaceAgentServer.ts

package/dist/{authHook-DtzhSmqS.d.ts → authHook-BbgCBHjP.d.ts}

@@ -1,8 +1,8 @@
-import { C as CoreConfig, R as RuntimeConfig } from './types-CWtJ4kgd.js';
+import { C as CoreConfig, R as RuntimeConfig } from './types-Bb7I-83I.js';
 import { FastifyPluginAsync } from 'fastify';
 import { Auth } from 'better-auth';
-import { W as WorkspaceStore, D as Database } from './connection-C5SiqoNc.js';
-import { TelemetrySink } from './shared/index.js';
+import { W as WorkspaceStore, D as Database } from './connection-B1iC6B-w.js';
+import { T as TelemetrySink } from './telemetry-DR18MeI0.js';
 
 interface LoadConfigOptions {
     tomlPath?: string;

package/dist/{chunk-FZC3VL5D.js → chunk-BVZ2YT3M.js}

@@ -1,7 +1,7 @@
 import {
   ERROR_CODES,
   HttpError
-} from "./chunk-LIBHVT7V.js";
+} from "./chunk-QZGYKLXB.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";

package/dist/chunk-I4PGL4ZD.js

@@ -0,0 +1,17 @@
+// src/shared/authPolicy.ts
+function isCoreEmailVerificationEnabled(config) {
+  return Boolean(config.auth.mail);
+}
+function isRuntimeEmailVerificationEnabled(config) {
+  return config?.features.emailVerification === true;
+}
+function canUseProtectedApi(user, requireEmailVerification) {
+  if (!user) return false;
+  return !requireEmailVerification || user.emailVerified === true;
+}
+
+export {
+  isCoreEmailVerificationEnabled,
+  isRuntimeEmailVerificationEnabled,
+  canUseProtectedApi
+};