@hachej/boring-core 0.1.5 → 0.1.6

package/dist/app/front/index.js

@@ -3,7 +3,7 @@ import {
   UserMenu,
   WorkspaceSwitcher,
   useCurrentWorkspace
-} from "../../chunk-VTOS4C7B.js";
+} from "../../chunk-A5TMALZR.js";
 import "../../chunk-HYNKZSTF.js";
 import "../../chunk-H5KU6R6Y.js";
 import "../../chunk-MLKGABMK.js";

package/dist/app/server/index.js

@@ -9,7 +9,7 @@ import {
   registerRoutes,
   registerSettingsRoutes,
   registerWorkspaceRoutes
-} from "../../chunk-CZ4HIXII.js";
+} from "../../chunk-RIEZ2IPH.js";
 import {
   PostgresUserStore,
   PostgresWorkspaceStore,
@@ -328,11 +328,23 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     plugins: options.plugins,
     excludeDefaults: options.excludeDefaults
   });
-  await provisionWorkspaceAgentServer({
-    workspaceRoot,
-    provisioningContributions: pluginCollection.provisioningContributions,
-    force: options.forceProvisioning
-  });
+  const provisionedWorkspaceRoots = /* @__PURE__ */ new Map();
+  const ensureWorkspaceProvisioned = (root) => {
+    if (pluginCollection.provisioningContributions.length === 0) return Promise.resolve();
+    const existing = provisionedWorkspaceRoots.get(root);
+    if (existing) return existing;
+    const pending = provisionWorkspaceAgentServer({
+      workspaceRoot: root,
+      provisioningContributions: pluginCollection.provisioningContributions,
+      force: options.forceProvisioning
+    }).catch((error) => {
+      provisionedWorkspaceRoots.delete(root);
+      throw error;
+    });
+    provisionedWorkspaceRoots.set(root, pending);
+    return pending;
+  };
+  await ensureWorkspaceProvisioned(workspaceRoot);
   const bridges = /* @__PURE__ */ new Map();
   const getUiBridge = (workspaceId) => {
     let bridge = bridges.get(workspaceId);
@@ -343,11 +355,16 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     return bridge;
   };
   const resolveWorkspaceId = async (request) => options.getWorkspaceId ? await options.getWorkspaceId(request) : await resolveAuthorizedWorkspaceId(request, workspaceStore);
-  const resolveRoot = async (workspaceId, request) => options.getWorkspaceRoot ? await options.getWorkspaceRoot(workspaceId, request) : await resolveWorkspaceRoot(workspaceRoot, workspaceId);
+  const resolveRoot = async (workspaceId, request) => {
+    const root = options.getWorkspaceRoot ? await options.getWorkspaceRoot(workspaceId, request) : await resolveWorkspaceRoot(workspaceRoot, workspaceId);
+    await ensureWorkspaceProvisioned(root);
+    return root;
+  };
   await app.register(registerAgentRoutes, {
     workspaceRoot,
     sessionId: options.sessionId,
     templatePath: options.templatePath,
+    getTemplatePath: options.getTemplatePath,
     mode: options.mode,
     version: options.version,
     extraTools: [

package/dist/{chunk-VTOS4C7B.js → chunk-A5TMALZR.js}

@@ -1809,11 +1809,11 @@ function AuthGate({
       clearTimeout(redirectTimerRef.current);
       redirectTimerRef.current = null;
     }
-    const pathname = normalizePath(currentLocation.pathname);
+    const pathname2 = normalizePath(currentLocation.pathname);
     const currentPath = buildCurrentPath(currentLocation);
     if (session.data) {
       nullSinceRef.current = null;
-      if (pathname === routes.signin) {
+      if (pathname2 === routes.signin) {
         const destination = readSafeRedirect(currentLocation.search) ?? "/";
         if (destination !== currentPath) {
           goTo(destination, { replace: true });
@@ -1821,7 +1821,11 @@ function AuthGate({
       }
       return;
     }
-    if (session.isPending || isPublicPath(pathname, normalizedPublicPaths)) {
+    if (isPublicPath(pathname2, normalizedPublicPaths)) {
+      nullSinceRef.current = null;
+      return;
+    }
+    if (session.isPending) {
       nullSinceRef.current = null;
       return;
     }
@@ -1840,6 +1844,8 @@ function AuthGate({
     }, remainingMs);
     redirectTimerRef.current.unref?.();
   }, [currentLocation, goTo, graceMs, normalizedPublicPaths, readNow, session.data, session.isPending]);
+  const pathname = normalizePath(currentLocation.pathname);
+  if (session.isPending && !isPublicPath(pathname, normalizedPublicPaths)) return null;
   return /* @__PURE__ */ jsx14(Fragment, { children });
 }
 
@@ -2752,7 +2758,7 @@ function MembersPage() {
 }
 
 // src/front/workspace/WorkspaceSettingsPage.tsx
-import { useCallback as useCallback8, useState as useState18 } from "react";
+import { useCallback as useCallback8, useEffect as useEffect10, useState as useState18 } from "react";
 import { useQuery as useQuery6, useMutation as useMutation4, useQueryClient as useQueryClient6 } from "@tanstack/react-query";
 import { useNavigate as useNavigate4 } from "react-router-dom";
 import {
@@ -2775,6 +2781,7 @@ import {
 } from "@hachej/boring-ui-kit";
 import {
   AlertCircle,
+  FileImage,
   HardDrive,
   RefreshCw,
   Settings2 as Settings22,
@@ -2852,6 +2859,7 @@ function roleLabel(role) {
 var WORKSPACE_NAV_ITEMS = [
   { href: "#general", label: "General", description: "Name and access" },
   { href: "#runtime", label: "Runtime", description: "Provisioning state" },
+  { href: "#files", label: "Files", description: "Markdown assets" },
   { href: "#danger-zone", label: "Danger zone", description: "Permanent actions" }
 ];
 function WorkspaceSettingsPage({ topBar } = {}) {
@@ -2866,8 +2874,11 @@ function WorkspaceSettingsPage({ topBar } = {}) {
   const [deleteConfirmName, setDeleteConfirmName] = useState18("");
   const [deleteDialogOpen, setDeleteDialogOpen] = useState18(false);
   const [deleteError, setDeleteError] = useState18(null);
+  const [imageUploadDirValue, setImageUploadDirValue] = useState18(null);
+  const [fileSettingsError, setFileSettingsError] = useState18(null);
   const displayName = nameValue ?? workspace?.name ?? "";
   const encodedWorkspaceId = encodeURIComponent(workspaceId);
+  const requestHeaders = workspaceId ? { "x-boring-workspace-id": workspaceId } : void 0;
   const runtimeQuery = useQuery6({
     queryKey: ["runtime", workspaceId],
     queryFn: async () => {
@@ -2884,6 +2895,50 @@ function WorkspaceSettingsPage({ topBar } = {}) {
     },
     enabled: workspaceId.length > 0
   });
+  const fileSettingsQuery = useQuery6({
+    queryKey: ["workspace-file-settings", workspaceId],
+    queryFn: async () => {
+      try {
+        const data = await apiFetchJson(
+          "/api/v1/workspace-settings",
+          { headers: requestHeaders }
+        );
+        return data.settings;
+      } catch (err) {
+        const detail = getHttpErrorDetail(err);
+        if (detail.status === 404) return null;
+        throw err;
+      }
+    },
+    enabled: workspaceId.length > 0,
+    retry: false
+  });
+  useEffect10(() => {
+    const next = fileSettingsQuery.data?.markdown?.imageUploadDir;
+    if (typeof next === "string") setImageUploadDirValue(next);
+  }, [fileSettingsQuery.data?.markdown?.imageUploadDir]);
+  const fileSettingsMutation = useMutation4({
+    mutationFn: async (imageUploadDir) => {
+      const data = await apiFetchJson(
+        "/api/v1/workspace-settings",
+        {
+          method: "PUT",
+          headers: { ...requestHeaders, "Content-Type": "application/json" },
+          body: JSON.stringify({ settings: { markdown: { imageUploadDir } } })
+        }
+      );
+      return data.settings;
+    },
+    onSuccess: (settings) => {
+      setFileSettingsError(null);
+      setImageUploadDirValue(settings.markdown?.imageUploadDir ?? "assets/images");
+      queryClient.invalidateQueries({ queryKey: ["workspace-file-settings", workspaceId] });
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      setFileSettingsError(detail.message);
+    }
+  });
   const renameMutation = useMutation4({
     mutationFn: async (name) => {
       await apiFetch(`/api/v1/workspaces/${encodedWorkspaceId}`, {
@@ -2950,15 +3005,28 @@ function WorkspaceSettingsPage({ topBar } = {}) {
     setDeleteError(null);
     deleteMutation.mutate();
   }, [deleteMutation]);
+  const handleSaveFileSettings = useCallback8(() => {
+    const trimmed = (imageUploadDirValue ?? "").trim();
+    if (!trimmed) return;
+    fileSettingsMutation.mutate(trimmed);
+  }, [fileSettingsMutation, imageUploadDirValue]);
   const runtime = runtimeQuery.data ?? null;
   const hasRuntime = runtime !== null && runtimeQuery.isSuccess;
+  const fileSettings = fileSettingsQuery.data ?? null;
+  const hasFileSettings = fileSettings !== null && fileSettingsQuery.isSuccess;
+  const currentImageUploadDir = fileSettings?.markdown?.imageUploadDir ?? "assets/images";
+  const fileSettingsChanged = imageUploadDirValue !== null && imageUploadDirValue.trim() !== currentImageUploadDir;
   const nameChanged = nameValue !== null && nameValue.trim() !== workspace?.name;
   const canEditName = role !== "viewer";
   const canDeleteWorkspace = role === "owner" || role === null;
   const workspaceName = workspace?.name ?? "Workspace";
   const workspaceInitial2 = (workspace?.name?.trim()?.[0] ?? "W").toUpperCase();
   const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx19(SettingsTopBar2, { workspaceId, workspaceName }) : topBar;
-  const navItems = hasRuntime ? WORKSPACE_NAV_ITEMS : WORKSPACE_NAV_ITEMS.filter((item) => item.href !== "#runtime");
+  const navItems = WORKSPACE_NAV_ITEMS.filter((item) => {
+    if (item.href === "#runtime") return hasRuntime;
+    if (item.href === "#files") return hasFileSettings;
+    return true;
+  });
   return /* @__PURE__ */ jsxs13("main", { className: "boring-settings-shell", children: [
     topBarNode,
     /* @__PURE__ */ jsx19("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs13("div", { className: "boring-settings-layout", children: [
@@ -3091,6 +3159,48 @@ function WorkspaceSettingsPage({ topBar } = {}) {
             ] })
           }
         ),
+        hasFileSettings && /* @__PURE__ */ jsx19(
+          UiSettingsPanel2,
+          {
+            id: "files",
+            testId: "file-settings-card",
+            icon: /* @__PURE__ */ jsx19(FileImage, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Files",
+            description: "Configure where markdown editor image uploads are stored. Direct/local workspaces can also edit .boring/settings.",
+            footer: /* @__PURE__ */ jsx19(
+              Button14,
+              {
+                "data-testid": "save-file-settings",
+                size: "sm",
+                disabled: !fileSettingsChanged || fileSettingsMutation.isPending || !canEditName,
+                onClick: handleSaveFileSettings,
+                children: fileSettingsMutation.isPending ? "Saving..." : "Save file settings"
+              }
+            ),
+            children: /* @__PURE__ */ jsxs13("div", { className: "space-y-4", children: [
+              fileSettingsError && /* @__PURE__ */ jsx19(Notice5, { "data-testid": "file-settings-error", role: "alert", tone: "error", description: fileSettingsError }),
+              /* @__PURE__ */ jsxs13("div", { className: "space-y-2", children: [
+                /* @__PURE__ */ jsx19(Label9, { htmlFor: "markdown-image-upload-dir", className: "text-[12px]", children: "Markdown image upload path" }),
+                /* @__PURE__ */ jsx19(
+                  Input9,
+                  {
+                    id: "markdown-image-upload-dir",
+                    "data-testid": "markdown-image-upload-dir-input",
+                    className: "h-8 font-mono text-[13px]",
+                    value: imageUploadDirValue ?? currentImageUploadDir,
+                    onChange: (e) => setImageUploadDirValue(e.target.value),
+                    disabled: !canEditName
+                  }
+                ),
+                /* @__PURE__ */ jsxs13(FieldNote, { children: [
+                  "Relative workspace path used by markdown image uploads. Stored in ",
+                  /* @__PURE__ */ jsx19("code", { children: ".boring/settings" }),
+                  "."
+                ] })
+              ] })
+            ] })
+          }
+        ),
         /* @__PURE__ */ jsx19(
           UiSettingsPanel2,
           {

package/dist/{chunk-CZ4HIXII.js → chunk-RIEZ2IPH.js}

@@ -672,11 +672,16 @@ async function createCoreApp(config, options) {
         ],
         styleSrc: [
           "'self'",
+          "https://fonts.googleapis.com",
           (request) => `'nonce-${request.cspNonce ?? ""}'`
         ],
+        // React/DockView use style attributes for runtime layout sizing.
+        // Keep stylesheet loading nonce/domain-bound, but allow attributes
+        // so production CSP does not collapse workspace/workbench panes.
+        styleSrcAttr: ["'unsafe-inline'"],
         imgSrc: ["'self'", "data:", "blob:"],
         connectSrc: ["'self'"],
-        fontSrc: ["'self'"],
+        fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"],
         objectSrc: ["'none'"],
         frameAncestors: ["'none'"],
         baseUri: ["'self'"],

package/dist/front/index.d.ts

@@ -410,7 +410,7 @@ interface AuthGateProps {
     }) => void;
     now?: () => number;
 }
-declare function AuthGate({ children, publicPaths, graceMs, location, navigate, now, }: AuthGateProps): react_jsx_runtime.JSX.Element;
+declare function AuthGate({ children, publicPaths, graceMs, location, navigate, now, }: AuthGateProps): react_jsx_runtime.JSX.Element | null;
 
 interface CoreCommand {
     id: string;

package/dist/front/index.js

@@ -56,7 +56,7 @@ import {
   useViewportBreakpoint,
   useWorkspaceMembers,
   useWorkspaceRole
-} from "../chunk-VTOS4C7B.js";
+} from "../chunk-A5TMALZR.js";
 import {
   TopBarSlotProvider,
   useTopBarSlot

package/dist/server/index.js

@@ -24,7 +24,7 @@ import {
   requireWorkspaceMember,
   validateConfig,
   validatePasswordStrength
-} from "../chunk-CZ4HIXII.js";
+} from "../chunk-RIEZ2IPH.js";
 import {
   createDatabase,
   runMigrations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -78,9 +78,9 @@
     "react-router-dom": "^7.14.2",
     "smol-toml": "^1.6.1",
     "zod": "^3.25.76",
-    "@hachej/boring-ui-kit": "0.1.5",
-    "@hachej/boring-agent": "0.1.5",
-    "@hachej/boring-workspace": "0.1.5"
+    "@hachej/boring-agent": "0.1.6",
+    "@hachej/boring-workspace": "0.1.6",
+    "@hachej/boring-ui-kit": "0.1.6"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",