@hachej/boring-workspace 0.1.10 → 0.1.13

package/dist/server.js

@@ -162,7 +162,7 @@ data: ${JSON.stringify({ v: UI_BRIDGE_PROTOCOL_VERSION })}
 
 // src/server/ui-control/tools/uiTools.ts
 import { access } from "fs/promises";
-import { resolve, isAbsolute, relative } from "path";
+import { resolve, isAbsolute, relative, win32 } from "path";
 function makeError(message) {
   return {
     content: [{ type: "text", text: message }],
@@ -174,16 +174,37 @@ function getPathParam(kind, params) {
   const raw = kind === "navigateToLine" ? params.file : params.path;
   return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
-async function validatePath(workspaceRoot, relPath) {
-  if (isAbsolute(relPath)) {
+function isPathAbsolute(filePath) {
+  return isAbsolute(filePath) || win32.isAbsolute(filePath);
+}
+function isOutsideWorkspaceRel(rel) {
+  return rel === ".." || rel.startsWith("../") || rel.startsWith("..\\") || isPathAbsolute(rel);
+}
+function validatePathSyntax(relPath, workspaceRoot) {
+  const rootHint = workspaceRoot ? ` (${workspaceRoot})` : "";
+  if (isPathAbsolute(relPath)) {
     return {
       ok: false,
-      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root (${workspaceRoot}).`
+      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root${rootHint}.`
     };
   }
+  if (relPath.includes("\0")) {
+    return { ok: false, reason: `path "${relPath}" contains a null byte.` };
+  }
+  if (relPath.split(/[\\/]+/).includes("..")) {
+    return {
+      ok: false,
+      reason: `path "${relPath}" escapes the workspace root${rootHint}.`
+    };
+  }
+  return { ok: true };
+}
+async function validatePath(workspaceRoot, relPath) {
+  const syntax = validatePathSyntax(relPath, workspaceRoot);
+  if (!syntax.ok) return syntax;
   const resolved = resolve(workspaceRoot, relPath);
   const rel = relative(workspaceRoot, resolved);
-  if (rel.startsWith("..") || isAbsolute(rel)) {
+  if (isOutsideWorkspaceRel(rel)) {
     return {
       ok: false,
       reason: `path "${relPath}" escapes the workspace root (${workspaceRoot}).`
@@ -286,13 +307,14 @@ function createExecUiTool(uiBridge, opts = {}) {
       "                 auto-opens if collapsed. Path must be relative to the",
       "                 workspace root (e.g. `src/foo.ts`, not `foo.ts` if it",
       "                 lives under src/).",
-      "                 Recovery on file-not-found: this tool stat-checks the",
-      "                 path server-side and returns an error if it doesn't",
-      "                 exist. On that error, immediately call find (or",
-      "                 grep) to locate the file, then call exec_ui",
-      "                 openFile AGAIN using the EXACT path returned \u2014 don't",
-      "                 give up and don't switch to the read tool. Repeat",
-      "                 until openFile succeeds or no candidate is found.",
+      "                 Recovery on file-not-found: when the server has local",
+      "                 filesystem access, this tool stat-checks the path and",
+      "                 returns an error if it doesn't exist. On that error,",
+      "                 immediately call find (or grep) to locate the file,",
+      "                 then call exec_ui openFile AGAIN using the EXACT path",
+      "                 returned \u2014 don't give up and don't switch to the read",
+      "                 tool. Repeat until openFile succeeds or no candidate",
+      "                 is found.",
       "                 Example: {kind:'openFile', params:{path:'README.md'}}",
       "",
       "  openPanel    params: { id: string, component: string,",
@@ -376,16 +398,20 @@ function createExecUiTool(uiBridge, opts = {}) {
           return makeError("openSurface: meta must be an object when provided");
         }
       }
-      if (workspaceRoot && PATH_BEARING_KINDS.has(kind)) {
+      if (PATH_BEARING_KINDS.has(kind)) {
         const relPath = getPathParam(kind, cmdParams);
         if (!relPath) {
           return makeError(
             `${kind}: ${kind === "navigateToLine" ? "file" : "path"} param is required`
           );
         }
-        const check = await validatePath(workspaceRoot, relPath);
-        if (!check.ok) {
-          return makeError(check.reason);
+        const syntax = validatePathSyntax(relPath, workspaceRoot);
+        if (!syntax.ok) return makeError(syntax.reason);
+        if (workspaceRoot) {
+          const check = await validatePath(workspaceRoot, relPath);
+          if (!check.ok) {
+            return makeError(check.reason);
+          }
         }
       }
       try {

package/dist/testing.js

@@ -1,7 +1,7 @@
 import { jsx as ka } from "react/jsx-runtime";
 import * as Pa from "react";
 import { createElement as ds, useMemo as Tn, useLayoutEffect as fs, isValidElement as ps, cloneElement as ms, useSyncExternalStore as Ji } from "react";
-import { i as vs, q as bs, ai as hs } from "./CommandPalette-D5KPKtKA.js";
+import { i as vs, q as bs, ai as hs } from "./CommandPalette-Dme9em28.js";
 import { d as ys } from "./panel-DnvDNQac.js";
 import * as Rs from "react-dom/test-utils";
 import Ba from "react-dom";

package/dist/workspace.css

@@ -1868,9 +1868,6 @@
   .w-6 {
     width: calc(var(--spacing) * 6);
   }
-  .w-7 {
-    width: calc(var(--spacing) * 7);
-  }
   .w-9 {
     width: calc(var(--spacing) * 9);
   }
@@ -1913,6 +1910,9 @@
   .max-w-2xl {
     max-width: var(--container-2xl);
   }
+  .max-w-20 {
+    max-width: calc(var(--spacing) * 20);
+  }
   .max-w-\[68ch\] {
     max-width: 68ch;
   }

package/dist/workspace.d.ts

@@ -509,7 +509,7 @@ export declare interface DataCatalogVisualizationState extends DataCatalogResolv
     title: string;
 }
 
-export declare function DataExplorer({ adapter, facets: facetConfigs, groupBy, onActivate, getDragPayload, emptyState, searchPlaceholder, searchable, query, pageSize, debounceMs, className, }: DataExplorerProps): JSX.Element;
+export declare function DataExplorer({ adapter, facets: facetConfigs, groupBy, onActivate, getDragPayload, emptyState, searchPlaceholder, searchable, query, onQueryChange, pageSize, debounceMs, className, }: DataExplorerProps): JSX.Element;
 
 export declare type DataExplorerProps = {
     adapter: ExplorerAdapter;
@@ -532,6 +532,8 @@ export declare type DataExplorerProps = {
      * Useful when an outer chrome already owns a search box.
      */
     query?: string;
+    /** Called when the toolbar search changes. Use with `query` for controlled per-tab search. */
+    onQueryChange?: (query: string) => void;
     /** Page size and debounce — passed through to useExplorerState. */
     pageSize?: number;
     debounceMs?: number;