@hachej/boring-ui-kit 0.4.5 → 0.4.6

package/README.md

@@ -12,6 +12,8 @@ Lost or malformed acknowledgements stay unknown. `actions.reconcile()` uses reta
 
 Historical scaffold tests install/typecheck packed headless UI and UI+files in clean consumers without Pi or an agent package. Candidate runtime installation qualification is recorded separately in the [implementation checkpoint](../../docs/implementation/PARTIAL.md). Import interfaces with `import type`.
 
+For read-only content without a resource client or controller, select the lightweight [`artifact-viewer`](#read-only-artifactviewer) entry. It needs only React and Marked, not files, Pi, Tiptap, canvas or pdfjs.
+
 See [scaffold guide](../../docs/contracts/SCAFFOLD.md) and [audit](../../docs/contracts/ABSTRACTION-REVIEW.md).
 
 ## Exact proposals and commands
@@ -210,6 +212,24 @@ Mounted `tools.propose` accepts the same complete edits as the headless command
 
 `test/compatibility/canvas-mounted-native.test.mjs` composes selection and proposals with real native ToolTasks. `npm run canvas:journey:commands` requires `CHROMIUM` and permitted loopback sockets; it checks real desktop/phone viewport geometry with fictional assets. Production fonts, licensing, egress and CSS isolation remain separate qualifications.
 
+## Read-only ArtifactViewer
+
+```tsx
+import { ArtifactViewer } from '@hachej/boring-ui-kit/artifact-viewer';
+
+<ArtifactViewer name="fictional-guide.md" mimeType="text/markdown" content="# Fictional guide" />;
+```
+
+`ArtifactViewerProps` accepts `name`, `mimeType`, optional `content: string | Uint8Array`, `url`, `className` and `renderPdf`. Install the existing optional React and Marked peers when selecting this entry. It has no ResourceClient, controller, editing, syntax highlighter or agent integration. The host supplies authorized content and owns URL access policy and layout; mounting grants no file or execution authority.
+
+Normalized MIME selects Markdown, HTML, images and PDF, with filename fallback. Other text/code is an escaped `<pre>` without highlighting. Byte text requires valid UTF-8 without NUL; leading U+FEFF is preserved. Binary audio/video does not become a text preview. Missing or unreadable content displays “Preview unavailable.” Replace byte arrays when changing content rather than mutating them in place.
+
+Markdown uses a private Marked parser, then the same passive HTML allowlist as `HtmlViewer`. Both HTML types render in an empty-sandbox, no-referrer iframe with the fixed restrictive CSP. Links become spans; scripts, attributes, styles, images and external resources are omitted, including Markdown images. The [HTML preview limits](#optional-html-source-and-preview) apply; Markdown input is also limited to 262,144 UTF-16 units before parsing. There is no raw HTML fallback. URL-only Markdown, HTML and text are unavailable: the entry never fetches or embeds them unsanitized.
+
+Images use `<img>` and PDFs use the browser's native sandboxed iframe. `content` takes precedence over `url`; content creates an owned Blob URL, revoked on replacement or unmount. Host URLs are borrowed and never revoked. Relative, HTTP(S), blob and matching image/PDF data URLs are supported; other URL schemes are refused. Supply `renderPdf: (props: ArtifactPdfProps) => ReactNode` to use a trusted host renderer instead, receiving the current `{ name, url }`. The entry does not load pdfjs. Browser-native PDF support and sandbox restrictions vary by browser; it provides no page controls or PDF text extraction.
+
+`test/packages/ui-artifact-viewer.test.mjs` renders fictional fixtures through the built public entry and checks its browser import graph. `npm run test:artifact-viewer-consumer` installs the kit tarball with only React/Marked and test tooling, checks strict declarations, repeats those DOM tests and bundles without files, controllers, Tiptap, canvas, pdfjs or agent code. DOM structure tests do not qualify browser CSP enforcement, parser inertness, egress or native PDF rendering.
+
 ## Optional HTML source and preview
 
 Both `MarkdownEditor` and `HtmlViewer` accept optional `components` bindings for host buttons, inputs, textareas and the selection bubble. Installed registry recipes supply the consumer's unchanged shadcn components. Bindings forward refs and native input events. Omitting them retains unstyled native HTML for direct package consumers; it is not installed-block design qualification. See the [registry theming contract](../../registry/README.md#styling).

package/dist/artifact-viewer.d.ts

@@ -0,0 +1,18 @@
+import type { ReactNode } from 'react';
+export interface ArtifactPdfProps {
+    readonly name: string;
+    readonly url: string;
+}
+export interface ArtifactViewerProps {
+    readonly name: string;
+    readonly mimeType: string;
+    /** Content takes precedence over a URL. Byte content must be replaced, not mutated in place. */
+    readonly content?: string | Uint8Array;
+    /** Borrowed host URL; used only for images and PDF, never fetched for text previews. */
+    readonly url?: string;
+    readonly className?: string;
+    /** Trusted host presentation, for example a separately installed pdfjs renderer. */
+    readonly renderPdf?: (props: ArtifactPdfProps) => ReactNode;
+}
+export declare function ArtifactViewer(props: ArtifactViewerProps): import("react").JSX.Element;
+//# sourceMappingURL=artifact-viewer.d.ts.map

package/dist/artifact-viewer.js

@@ -0,0 +1,125 @@
+'use client';
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useLayoutEffect, useRef, useState } from 'react';
+import { Marked } from 'marked';
+import { passiveHtml } from './passive-html.js';
+const markdown = new Marked();
+const imageTypes = { png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif', webp: 'image/webp', svg: 'image/svg+xml', bmp: 'image/bmp', avif: 'image/avif' };
+function artifactType(name, mimeType) {
+    const mime = mimeType.split(';')[0].trim().toLowerCase();
+    if (mime === 'text/markdown' || mime === 'text/x-markdown')
+        return { kind: 'markdown', mimeType: mime };
+    if (mime === 'text/html')
+        return { kind: 'html', mimeType: mime };
+    if (mime === 'application/pdf')
+        return { kind: 'pdf', mimeType: mime };
+    if (mime.startsWith('image/'))
+        return { kind: 'image', mimeType: mime };
+    if (/^(?:audio|video)\//.test(mime))
+        return undefined;
+    const basename = name.slice(name.lastIndexOf('/') + 1), dot = basename.lastIndexOf('.');
+    const extension = dot === -1 ? '' : basename.slice(dot + 1).toLowerCase();
+    if (extension === 'md' || extension === 'markdown')
+        return { kind: 'markdown', mimeType: 'text/markdown' };
+    if (extension === 'html' || extension === 'htm')
+        return { kind: 'html', mimeType: 'text/html' };
+    if (extension === 'pdf')
+        return { kind: 'pdf', mimeType: 'application/pdf' };
+    const imageType = Object.hasOwn(imageTypes, extension) ? imageTypes[extension] : undefined;
+    if (imageType)
+        return { kind: 'image', mimeType: imageType };
+    if (/^(?:mp4|webm|mov|m4v|ogg|ogv|mp3|wav)$/.test(extension))
+        return undefined;
+    return { kind: 'text', mimeType: mime };
+}
+function decodeText(content) {
+    if (content === undefined)
+        return undefined;
+    if (typeof content === 'string')
+        return content.includes('\0') ? undefined : content;
+    if (content.includes(0))
+        return undefined;
+    try {
+        return new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(content);
+    }
+    catch {
+        return undefined;
+    }
+}
+function Unavailable() {
+    return _jsx("p", { role: "status", children: "Preview unavailable." });
+}
+function PassiveArtifact({ name, text, kind }) {
+    const container = useRef(null);
+    const [ready, setReady] = useState(false);
+    useLayoutEffect(() => {
+        const host = container.current;
+        if (!host)
+            return;
+        host.replaceChildren();
+        try {
+            if (text.length > 262_144)
+                throw new RangeError('Artifact preview source exceeds its limit');
+            const source = passiveHtml(kind === 'markdown' ? markdown.parse(text, { async: false }) : text, host.ownerDocument);
+            const frame = host.ownerDocument.createElement('iframe');
+            frame.setAttribute('sandbox', '');
+            frame.referrerPolicy = 'no-referrer';
+            frame.title = name;
+            frame.srcdoc = source;
+            host.replaceChildren(frame);
+            setReady(true);
+        }
+        catch {
+            host.replaceChildren();
+            setReady(false);
+        }
+        return () => { host.replaceChildren(); };
+    }, [name, text, kind]);
+    return _jsxs(_Fragment, { children: [!ready && _jsx(Unavailable, {}), _jsx("div", { ref: container })] });
+}
+function mediaUrl(url, kind) {
+    if (!url)
+        return undefined;
+    try {
+        const protocol = new URL(url, 'https://artifact.invalid/').protocol;
+        if (['https:', 'http:', 'blob:'].includes(protocol))
+            return url;
+        if (protocol === 'data:' && (kind === 'image' ? /^data:image\//i : /^data:application\/pdf(?:;|,)/i).test(url))
+            return url;
+    }
+    catch { /* A malformed host URL has no preview. */ }
+    return undefined;
+}
+function MediaArtifact({ name, kind, mimeType, content, url, renderPdf }) {
+    const [made, setMade] = useState();
+    useLayoutEffect(() => {
+        if (content === undefined) {
+            setMade(undefined);
+            return;
+        }
+        try {
+            const blob = new Blob([typeof content === 'string' ? content : new Uint8Array(content)], { type: mimeType });
+            const objectUrl = URL.createObjectURL(blob);
+            setMade({ content, mimeType, url: objectUrl });
+            return () => { URL.revokeObjectURL(objectUrl); };
+        }
+        catch {
+            setMade(undefined);
+        }
+    }, [content, mimeType]);
+    const selectedUrl = content === undefined ? mediaUrl(url, kind) : made?.content === content && made.mimeType === mimeType ? made.url : undefined;
+    if (!selectedUrl)
+        return _jsx(Unavailable, {});
+    if (kind === 'image')
+        return _jsx("img", { src: selectedUrl, alt: name, referrerPolicy: "no-referrer" });
+    return renderPdf ? renderPdf({ name, url: selectedUrl }) : _jsx("iframe", { src: selectedUrl, title: name, sandbox: "", referrerPolicy: "no-referrer" });
+}
+export function ArtifactViewer(props) {
+    const type = artifactType(props.name, props.mimeType);
+    const text = type && type.kind !== 'image' && type.kind !== 'pdf' ? decodeText(props.content) : undefined;
+    return _jsx("section", { "data-boring": "artifact-viewer", className: props.className, "aria-label": props.name, children: !type ? _jsx(Unavailable, {}) : type.kind === 'image' || type.kind === 'pdf'
+            ? _jsx(MediaArtifact, { ...props, kind: type.kind, mimeType: type.mimeType })
+            : text === undefined ? _jsx(Unavailable, {}) : type.kind === 'text'
+                ? _jsx("pre", { children: text })
+                : _jsx(PassiveArtifact, { name: props.name, text: text, kind: type.kind }) });
+}

package/dist/html-preview.d.ts

@@ -1,2 +1,2 @@
-export declare function passiveHtml(source: string, document: Document): string;
+export { passiveHtml } from './passive-html.js';
 //# sourceMappingURL=html-preview.d.ts.map

package/dist/html-preview.js

@@ -1,47 +1 @@
-const formatting = new Set(['p', 'div', 'span', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'blockquote', 'pre', 'code', 'strong', 'em', 'b', 'i', 'u', 's', 'small', 'sub', 'sup', 'kbd', 'samp', 'var', 'mark', 'ul', 'ol', 'li', 'dl', 'dt', 'dd', 'table', 'caption', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td', 'section', 'article', 'header', 'footer', 'main', 'aside', 'figure', 'figcaption', 'br', 'hr']);
-const htmlNamespace = 'http://www.w3.org/1999/xhtml';
-const prefix = '<!doctype html><html><head><meta http-equiv="Content-Security-Policy" content="default-src \'none\'; base-uri \'none\'; form-action \'none\'"><meta charset="utf-8"><meta name="referrer" content="no-referrer"><meta name="format-detection" content="telephone=no,email=no,address=no"><title>HTML preview</title></head><body>';
-export function passiveHtml(source, document) {
-    if (source.length > 262_144)
-        throw new RangeError('HTML preview source exceeds its limit');
-    const template = document.createElement('template');
-    template.innerHTML = source;
-    let nodes = 0, length = prefix.length;
-    const output = [prefix];
-    function emit(text) {
-        length += text.length;
-        if (length > 1_048_576)
-            throw new RangeError('HTML preview output exceeds its limit');
-        output.push(text);
-    }
-    function visit(node, depth) {
-        if (++nodes > 20_000 || depth > 128)
-            throw new RangeError('HTML preview structure exceeds its limit');
-        if (node.nodeType === 3) {
-            emit((node.textContent ?? '').replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;'));
-            return;
-        }
-        if (node.nodeType !== 1 || !('namespaceURI' in node) || node.namespaceURI !== htmlNamespace || !('localName' in node) || typeof node.localName !== 'string')
-            return;
-        if (node.localName === 'html' || node.localName === 'head' || node.localName === 'body') {
-            for (let child = node.firstChild; child; child = child.nextSibling)
-                visit(child, depth + 1);
-            return;
-        }
-        const tag = node.localName === 'a' ? 'span' : node.localName;
-        if (!formatting.has(tag))
-            return;
-        emit('<' + tag + '>');
-        if (tag === 'br' || tag === 'hr')
-            return;
-        if (tag === 'pre')
-            emit('\n');
-        for (let child = node.firstChild; child; child = child.nextSibling)
-            visit(child, depth + 1);
-        emit('</' + tag + '>');
-    }
-    for (let child = template.content.firstChild; child; child = child.nextSibling)
-        visit(child, 0);
-    emit('</body></html>');
-    return output.join('');
-}
+export { passiveHtml } from './passive-html.js';

package/dist/passive-html.d.ts

@@ -0,0 +1,2 @@
+export declare function passiveHtml(source: string, document: Document): string;
+//# sourceMappingURL=passive-html.d.ts.map

package/dist/passive-html.js

@@ -0,0 +1,47 @@
+const formatting = new Set(['p', 'div', 'span', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'blockquote', 'pre', 'code', 'strong', 'em', 'b', 'i', 'u', 's', 'small', 'sub', 'sup', 'kbd', 'samp', 'var', 'mark', 'ul', 'ol', 'li', 'dl', 'dt', 'dd', 'table', 'caption', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td', 'section', 'article', 'header', 'footer', 'main', 'aside', 'figure', 'figcaption', 'br', 'hr']);
+const htmlNamespace = 'http://www.w3.org/1999/xhtml';
+const prefix = '<!doctype html><html><head><meta http-equiv="Content-Security-Policy" content="default-src \'none\'; base-uri \'none\'; form-action \'none\'"><meta charset="utf-8"><meta name="referrer" content="no-referrer"><meta name="format-detection" content="telephone=no,email=no,address=no"><title>HTML preview</title></head><body>';
+export function passiveHtml(source, document) {
+    if (source.length > 262_144)
+        throw new RangeError('HTML preview source exceeds its limit');
+    const template = document.createElement('template');
+    template.innerHTML = source;
+    let nodes = 0, length = prefix.length;
+    const output = [prefix];
+    function emit(text) {
+        length += text.length;
+        if (length > 1_048_576)
+            throw new RangeError('HTML preview output exceeds its limit');
+        output.push(text);
+    }
+    function visit(node, depth) {
+        if (++nodes > 20_000 || depth > 128)
+            throw new RangeError('HTML preview structure exceeds its limit');
+        if (node.nodeType === 3) {
+            emit((node.textContent ?? '').replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;'));
+            return;
+        }
+        if (node.nodeType !== 1 || !('namespaceURI' in node) || node.namespaceURI !== htmlNamespace || !('localName' in node) || typeof node.localName !== 'string')
+            return;
+        if (node.localName === 'html' || node.localName === 'head' || node.localName === 'body') {
+            for (let child = node.firstChild; child; child = child.nextSibling)
+                visit(child, depth + 1);
+            return;
+        }
+        const tag = node.localName === 'a' ? 'span' : node.localName;
+        if (!formatting.has(tag))
+            return;
+        emit('<' + tag + '>');
+        if (tag === 'br' || tag === 'hr')
+            return;
+        if (tag === 'pre')
+            emit('\n');
+        for (let child = node.firstChild; child; child = child.nextSibling)
+            visit(child, depth + 1);
+        emit('</' + tag + '>');
+    }
+    for (let child = template.content.firstChild; child; child = child.nextSibling)
+        visit(child, 0);
+    emit('</body></html>');
+    return output.join('');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-ui-kit",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "license": "MIT",
   "private": false,
   "type": "module",
@@ -83,6 +83,10 @@
       "types": "./dist/html-viewer.d.ts",
       "import": "./dist/html-viewer.js"
     },
+    "./artifact-viewer": {
+      "types": "./dist/artifact-viewer.d.ts",
+      "import": "./dist/artifact-viewer.js"
+    },
     "./experience": {
       "types": "./dist/experience.d.ts",
       "import": "./dist/experience.js"
@@ -130,7 +134,7 @@
     }
   },
   "peerDependencies": {
-    "@hachej/boring-files": "^0.4.5",
+    "@hachej/boring-files": "^0.4.6",
     "@earendil-works/pi-durable": "~1.2.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",

package/r/agent-target.json

@@ -4,15 +4,15 @@
   "title": "Point and dictate on app data",
   "description": "Tap explicitly marked JSON app context, dictate once and show the same app agent’s native reply without opening chat. Host-controlled presentation; no feedback report or second controller.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-feedback@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-feedback@^0.4.6",
     "@earendil-works/pi-durable@~1.2.0",
     "react@^19.0.0",
     "react-dom@^19.0.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/app-shell.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/app-shell.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
     "button",
     "card",
     "message",

package/r/app-shell.json

@@ -4,19 +4,19 @@
   "title": "App shell: layouts, list/detail and agent layer",
   "description": "AppShell with three layouts. B \"workspace\" puts a ListDetail on a screen (phone: the list, then the detail as a stack step with Back; wide: a 20rem list and the detail side by side, sidebar as an icon rail). C \"chat\" wraps the app's own AgentWorkspace (untouched, passed as the nav item's render; install the pi-app item yourself) in the same sidebar, account menu and header; it takes no shell agent. A \"screen\": one screen at a time, every screen kept mounted. On a phone bottom tabs (at most four; more give three plus a « Plus » sheet) and an avatar button that opens the account sheet; on a wide screen the shadcn sidebar (icon rail, NavUser). One header per screen through useScreenHeader (title, subtitle, back, up to two actions, the rest behind « … »). The account menu holds « Améliorer l'app » (the improve agent), the app's own entries and sign out. AppSheet is the one bottom sheet (one open at a time, Back closes it). It mounts the AgentLayer: one agent's PiChat above the app (phone: a drawer with peek, half and full snap points; wide: a right panel), the improve agent in the same layer, optional push-to-talk and point mode. Also useAgentContext and readAgentContext (the screen on show travels as `context` with each submit) and useBackLayer, the one Back manager. Built on explicitly pinned Base UI drawer and dropdown-menu recipes, plus the sidebar and avatar of the host's own shadcn style.",
   "dependencies": [
-    "@hachej/boring-feedback@^0.4.5",
-    "@hachej/boring-ui-kit@^0.4.5",
+    "@hachej/boring-feedback@^0.4.6",
+    "@hachej/boring-ui-kit@^0.4.6",
     "@base-ui/react@^1.9.0",
     "react@^19.0.0",
     "react-dom@^19.0.0",
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/dock.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/feedback.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/button.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/dock.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/feedback.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/button.json",
     "drawer",
     "sidebar",
     "avatar",

package/r/board-viewer.json

@@ -4,16 +4,16 @@
   "title": "Board viewer",
   "description": "A board@1 artifact kind for *.board.json. Lazy native tldraw projection of maquette screens, sandboxed HTML mock-ups, goto arrows and notes. Conditional board-file autosave; phone viewing without accidental frame edits. Hosts supply their resource client, asset URLs and license key.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "lucide-react@1.51.0",
     "tldraw@5.5.2"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/maquette-viewer.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/mockup-viewer.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/maquette-viewer.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/mockup-viewer.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
     "button",
     "alert",
     "card",

package/r/button.json

@@ -9,7 +9,7 @@
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
     "dropdown-menu",
     "button",
     "toggle",

package/r/diagram-viewer.json

@@ -8,7 +8,7 @@
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/theme.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/theme.json",
     "alert",
     "badge"
   ],

package/r/dock.json

@@ -7,7 +7,7 @@
     "react@^19.0.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json"
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json"
   ],
   "files": [
     {

package/r/documents.json

@@ -4,20 +4,20 @@
   "title": "Documents: the Library, a file and its revisions",
   "description": "The workspace's Library as the list, the chosen file in its viewer and its retained revisions beside it (an older one opens read-only). DocumentSheet opens one document over the app for a host's « Voir la fiche », with an optional « Toutes les fiches ». Every read goes through one revisionProvider binding.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/theme.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/button.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-app.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/app-shell.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/file-tree.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/viewers.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/theme.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/button.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-app.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/app-shell.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/file-tree.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/viewers.json",
     "drawer",
     "button",
     "scroll-area",

package/r/feedback-preview.json

@@ -4,7 +4,7 @@
   "title": "Feedback preview",
   "description": "PreviewBanner: a live, reversible preview of a change in the page (Approve / Discard) over `@hachej/boring-feedback/preview`, whose subagent calls models through a host gateway. Separate from `feedback` so annotation-only apps do not install the model SDK; install `feedback` first (its styles cover the banner).",
   "dependencies": [
-    "@hachej/boring-feedback@^0.4.5",
+    "@hachej/boring-feedback@^0.4.6",
     "@earendil-works/pi-ai@~1.2.0",
     "react@^19.0.0"
   ],

package/r/feedback.json

@@ -4,16 +4,16 @@
   "title": "Feedback",
   "description": "Feedback from the chat composer: one Feedback button starts feedback mode on the application page (hover, click to pin a numbered note, hold ⌥ to use the app, optional voice), and one chip carries the notes to the next message. FeedbackBar, NoteBubble, FeedbackChip with its review, useComposerFeedback for the pi-chat composer, and PickerOverlay styles. Optional, not mounted by default: PointButton, AnnotateSheet, FeedbackList and FeedbackReport. Picking, masking, anchoring and placement stay in @hachej/boring-feedback/page and /ui, so restyling cannot weaken them.",
   "dependencies": [
-    "@hachej/boring-feedback@^0.4.5",
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-feedback@^0.4.6",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "react-dom@^19.0.0",
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
     "button",
     "toggle",
     "badge",

package/r/file-tree.json

@@ -4,15 +4,15 @@
   "title": "File tree",
   "description": "Browse, search, upload and inspect retained versions through one revisionProvider binding. Uses the consumer's shadcn Button and dropdown-menu with shared version-history rows; Base UI style only.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/theme.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/version-history.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/theme.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/version-history.json",
     "button",
     "dropdown-menu",
     "collapsible",

package/r/highlights.json

@@ -4,13 +4,13 @@
   "title": "Anchored highlights",
   "description": "Exact Markdown highlights and comments in a conditional workspace sidecar.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "react-dom@^19.0.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/markdown-editor.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/markdown-editor.json",
     "button",
     "textarea",
     "label",

package/r/html-viewer.json

@@ -4,13 +4,13 @@
   "title": "HTML source and passive preview",
   "description": "Exact HTML source editing with a reconstructed passive preview and borrowed controller. Browser security qualification remains separate.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "react-dom@^19.0.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/button.json"
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/button.json"
   ],
   "files": [
     {

package/r/maquette-viewer.json

@@ -8,8 +8,8 @@
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/theme.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/diagram-viewer.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/theme.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/diagram-viewer.json",
     "alert",
     "badge",
     "bubble",

package/r/markdown-editor.json

@@ -4,8 +4,8 @@
   "title": "Markdown editor",
   "description": "A host-owned styled wrapper over the concrete borrowed Markdown controller.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
-    "@hachej/boring-files@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
+    "@hachej/boring-files@^0.4.6",
     "react@^19.0.0",
     "react-dom@^19.0.0",
     "marked@^17.0.6",
@@ -23,7 +23,7 @@
     "@tiptap/extension-floating-menu@^3.31.4"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/button.json"
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/button.json"
   ],
   "files": [
     {

package/r/mockup-viewer.json

@@ -10,7 +10,7 @@
     "zod@^4.6.5"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/viewers.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/viewers.json",
     "badge",
     "toggle",
     "tooltip"

package/r/pi-ambient.json

@@ -4,7 +4,7 @@
   "title": "Pi ambient agent",
   "description": "AmbientChat, a compact floating agent bar that grows into a chat window over an existing page, and AgentNotifications, toasts for finished, failed and waiting tasks (with the one guarded browser Notification helper). A block over the pi-chat item; its in-window artifact panel uses the pi-workspace layout.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.5",
+    "@hachej/boring-ui-kit@^0.4.6",
     "react@^19.0.0",
     "react-dom@^19.0.0",
     "@earendil-works/pi-durable@~1.2.0",
@@ -12,11 +12,11 @@
     "lucide-react@^1.51.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/theme.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-chat.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/pi-workspace.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/utils.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.5/r/button.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/theme.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-chat.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/pi-workspace.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/utils.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.6/r/button.json",
     "message-scroller",
     "button",
     "toggle",