@hachej/boring-workspace 0.1.9 → 0.1.12

package/dist/{FileTree-CKG6iiCM.js → FileTree-BVfqs3rR.js}

@@ -2,7 +2,7 @@ import { jsx as i, jsxs as C } from "react/jsx-runtime";
 import { useRef as w, useEffect as R, useMemo as P, useCallback as x, createContext as H, useContext as L } from "react";
 import { Tree as q } from "react-arborist";
 import { FolderOpenIcon as z, FolderIcon as B, ChevronRightIcon as K, Loader2Icon as E } from "lucide-react";
-import { K as Y } from "./CommandPalette-CWcgmHpK.js";
+import { K as Y } from "./CommandPalette-Dme9em28.js";
 import { Input as G } from "@hachej/boring-ui-kit";
 import { c as v } from "./utils-B6yFEsav.js";
 const T = /* @__PURE__ */ new Set(), A = H({

package/dist/{MarkdownEditor-C77O0ZVD.js → MarkdownEditor-CcCDF65H.js}

@@ -15,7 +15,7 @@ import { TableHeader as tt } from "@tiptap/extension-table-header";
 import { TableCell as et } from "@tiptap/extension-table-cell";
 import rt from "@tiptap/extension-image";
 import { c as y } from "./utils-B6yFEsav.js";
-import { an as U, ao as it } from "./CommandPalette-CWcgmHpK.js";
+import { an as U, ao as it } from "./CommandPalette-Dme9em28.js";
 import { uploadFile as nt } from "@hachej/boring-agent/front";
 import at from "@tiptap/extension-code-block-lowlight";
 import { createLowlight as ot, common as lt } from "lowlight";

package/dist/{WorkspaceLoadingState-DV8V-zC2.js → WorkspaceLoadingState-CPQBxYFG.js}

@@ -2,7 +2,7 @@ import { jsxs as d, jsx as o, Fragment as H } from "react/jsx-runtime";
 import { useCallback as b, useMemo as A, useEffect as S, useState as V, Suspense as X, useRef as q } from "react";
 import { LoadingState as Z, ResizeHandle as G, IconButton as $, Button as J, Kbd as Q } from "@hachej/boring-ui-kit";
 import { c as g } from "./utils-B6yFEsav.js";
-import { $ as Y, a6 as ee, E as te, am as ne, ak as re, u as oe } from "./CommandPalette-CWcgmHpK.js";
+import { $ as Y, a6 as ee, E as te, am as ne, ak as re, u as oe } from "./CommandPalette-Dme9em28.js";
 import { Search as ae, Plus as ie } from "lucide-react";
 function be(e, t, r = !0) {
   if (!r || typeof window > "u") return t;

package/dist/app-front.js

@@ -1,8 +1,8 @@
 import { jsx as d, jsxs as Te, Fragment as x } from "react/jsx-runtime";
 import { useSyncExternalStore as ze, useMemo as v, useRef as K, useState as X, useEffect as y, useCallback as P } from "react";
 import { ChatPanel as Fe, useSessions as Ge } from "@hachej/boring-agent/front";
-import { aj as ke, q as Ye, ak as Qe, u as Xe, al as Ze } from "./CommandPalette-CWcgmHpK.js";
-import { T as He, C as qe, r as Ee, w as et, W as $e } from "./WorkspaceLoadingState-DV8V-zC2.js";
+import { aj as ke, q as Ye, ak as Qe, u as Xe, al as Ze } from "./CommandPalette-Dme9em28.js";
+import { T as He, C as qe, r as Ee, w as et, W as $e } from "./WorkspaceLoadingState-CPQBxYFG.js";
 function tt() {
   const e = `s${Date.now()}`;
   return {

package/dist/app-server.js

@@ -61,13 +61,28 @@ function getPathParam(kind, params) {
   const raw = kind === "navigateToLine" ? params.file : params.path;
   return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
-async function validatePath(workspaceRoot, relPath) {
+function validatePathSyntax(relPath, workspaceRoot) {
+  const rootHint = workspaceRoot ? ` (${workspaceRoot})` : "";
   if (isAbsolute(relPath)) {
     return {
       ok: false,
-      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root (${workspaceRoot}).`
+      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root${rootHint}.`
     };
   }
+  if (relPath.includes("\0")) {
+    return { ok: false, reason: `path "${relPath}" contains a null byte.` };
+  }
+  if (relPath.split(/[\\/]+/).includes("..")) {
+    return {
+      ok: false,
+      reason: `path "${relPath}" escapes the workspace root${rootHint}.`
+    };
+  }
+  return { ok: true };
+}
+async function validatePath(workspaceRoot, relPath) {
+  const syntax = validatePathSyntax(relPath, workspaceRoot);
+  if (!syntax.ok) return syntax;
   const resolved = resolve(workspaceRoot, relPath);
   const rel = relative(workspaceRoot, resolved);
   if (rel.startsWith("..") || isAbsolute(rel)) {
@@ -263,16 +278,20 @@ function createExecUiTool(uiBridge, opts = {}) {
           return makeError("openSurface: meta must be an object when provided");
         }
       }
-      if (workspaceRoot && PATH_BEARING_KINDS.has(kind)) {
+      if (PATH_BEARING_KINDS.has(kind)) {
         const relPath = getPathParam(kind, cmdParams);
         if (!relPath) {
           return makeError(
             `${kind}: ${kind === "navigateToLine" ? "file" : "path"} param is required`
           );
         }
-        const check = await validatePath(workspaceRoot, relPath);
-        if (!check.ok) {
-          return makeError(check.reason);
+        const syntax = validatePathSyntax(relPath, workspaceRoot);
+        if (!syntax.ok) return makeError(syntax.reason);
+        if (workspaceRoot) {
+          const check = await validatePath(workspaceRoot, relPath);
+          if (!check.ok) {
+            return makeError(check.reason);
+          }
         }
       }
       try {

package/dist/server.js

@@ -174,13 +174,28 @@ function getPathParam(kind, params) {
   const raw = kind === "navigateToLine" ? params.file : params.path;
   return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
-async function validatePath(workspaceRoot, relPath) {
+function validatePathSyntax(relPath, workspaceRoot) {
+  const rootHint = workspaceRoot ? ` (${workspaceRoot})` : "";
   if (isAbsolute(relPath)) {
     return {
       ok: false,
-      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root (${workspaceRoot}).`
+      reason: `path "${relPath}" is absolute \u2014 pass a path relative to the workspace root${rootHint}.`
     };
   }
+  if (relPath.includes("\0")) {
+    return { ok: false, reason: `path "${relPath}" contains a null byte.` };
+  }
+  if (relPath.split(/[\\/]+/).includes("..")) {
+    return {
+      ok: false,
+      reason: `path "${relPath}" escapes the workspace root${rootHint}.`
+    };
+  }
+  return { ok: true };
+}
+async function validatePath(workspaceRoot, relPath) {
+  const syntax = validatePathSyntax(relPath, workspaceRoot);
+  if (!syntax.ok) return syntax;
   const resolved = resolve(workspaceRoot, relPath);
   const rel = relative(workspaceRoot, resolved);
   if (rel.startsWith("..") || isAbsolute(rel)) {
@@ -376,16 +391,20 @@ function createExecUiTool(uiBridge, opts = {}) {
           return makeError("openSurface: meta must be an object when provided");
         }
       }
-      if (workspaceRoot && PATH_BEARING_KINDS.has(kind)) {
+      if (PATH_BEARING_KINDS.has(kind)) {
         const relPath = getPathParam(kind, cmdParams);
         if (!relPath) {
           return makeError(
             `${kind}: ${kind === "navigateToLine" ? "file" : "path"} param is required`
           );
         }
-        const check = await validatePath(workspaceRoot, relPath);
-        if (!check.ok) {
-          return makeError(check.reason);
+        const syntax = validatePathSyntax(relPath, workspaceRoot);
+        if (!syntax.ok) return makeError(syntax.reason);
+        if (workspaceRoot) {
+          const check = await validatePath(workspaceRoot, relPath);
+          if (!check.ok) {
+            return makeError(check.reason);
+          }
         }
       }
       try {

package/dist/testing.js

@@ -1,7 +1,7 @@
 import { jsx as ka } from "react/jsx-runtime";
 import * as Pa from "react";
 import { createElement as ds, useMemo as Tn, useLayoutEffect as fs, isValidElement as ps, cloneElement as ms, useSyncExternalStore as Ji } from "react";
-import { i as vs, q as bs, ai as hs } from "./CommandPalette-CWcgmHpK.js";
+import { i as vs, q as bs, ai as hs } from "./CommandPalette-Dme9em28.js";
 import { d as ys } from "./panel-DnvDNQac.js";
 import * as Rs from "react-dom/test-utils";
 import Ba from "react-dom";

package/dist/workspace.css

@@ -1913,6 +1913,9 @@
   .max-w-2xl {
     max-width: var(--container-2xl);
   }
+  .max-w-20 {
+    max-width: calc(var(--spacing) * 20);
+  }
   .max-w-\[68ch\] {
     max-width: 68ch;
   }

package/dist/workspace.d.ts

@@ -509,7 +509,7 @@ export declare interface DataCatalogVisualizationState extends DataCatalogResolv
     title: string;
 }
 
-export declare function DataExplorer({ adapter, facets: facetConfigs, groupBy, onActivate, getDragPayload, emptyState, searchPlaceholder, searchable, query, pageSize, debounceMs, className, }: DataExplorerProps): JSX.Element;
+export declare function DataExplorer({ adapter, facets: facetConfigs, groupBy, onActivate, getDragPayload, emptyState, searchPlaceholder, searchable, query, onQueryChange, pageSize, debounceMs, className, }: DataExplorerProps): JSX.Element;
 
 export declare type DataExplorerProps = {
     adapter: ExplorerAdapter;
@@ -532,6 +532,8 @@ export declare type DataExplorerProps = {
      * Useful when an outer chrome already owns a search box.
      */
     query?: string;
+    /** Called when the toolbar search changes. Use with `query` for controlled per-tab search. */
+    onQueryChange?: (query: string) => void;
     /** Page size and debounce — passed through to useExplorerState. */
     pageSize?: number;
     debounceMs?: number;