jobtrack 1.0.8 → 1.0.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jobtrack",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "type": "module",
   "license": "MIT",
   "description": "Runs the JobTrack API + web UI as one background process with a Windows tray icon",
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@fastify/static": "^10.1.3",
-    "@jobtrack/api": "^1.0.5",
+    "@jobtrack/api": "^1.0.6",
     "fastify": "^5.12.1",
     "systray": "^1.0.5",
     "tsx": "^4.23.12"

package/src/server.ts

@@ -8,7 +8,7 @@
 import fastifyStatic from '@fastify/static';
 import type { FastifyInstance } from 'fastify';
 import { buildApp } from '@jobtrack/api/app';
-import { loadConfig, type Config } from '@jobtrack/api/config';
+import { loadConfig, loadEnvFile, type Config } from '@jobtrack/api/config';
 import { createRepos } from '@jobtrack/api/db/create-repos';
 import type { RepoBundle } from '@jobtrack/api/db/repos';
 import { SearchIndex } from '@jobtrack/api/search';
@@ -25,6 +25,9 @@ export interface RunningServer {
 }
 
 export async function startServer(): Promise<RunningServer> {
+  // The file the tray's "Open App Settings" menu item edits — read here, or that menu
+  // item is a text editor pointed at nothing.
+  loadEnvFile();
   const config = loadConfig();
   const repos = await createRepos(config);
 

package/vendor/.env.example

@@ -1,11 +1,18 @@
 # Copy this file to `.env` and adjust as needed. Every value below is optional — an
 # unmodified `.env` (or no `.env` at all) runs JobTrack on local SQLite at
 # http://127.0.0.1:3001. See README.md "Configuration" for the full write-up.
+#
+# The file is read from the app data directory: this repo's root when running from a clone,
+# %APPDATA%\jobtrack (or ~/.local/share/jobtrack) for an installed `jobtrack` — the same file
+# the tray's "Open App Settings" opens. Anything already set in the real environment wins
+# over what is written here.
 
 # sqlite (default), postgres, or mysql — the driver for the implicit "default" target.
 # DB_DRIVER=sqlite
 
-# SQLite only. Path is relative to the repo root.
+# SQLite only, and never relative to whatever directory the app was started from. A bare
+# filename (DB_FILE=work.db) is a second database in the same data folder; a relative path
+# is resolved from the app data directory above; an absolute path is used as written.
 # DB_FILE=data/jobtrack.db
 
 # Postgres/MySQL only. Required when DB_DRIVER is postgres or mysql.
@@ -25,5 +32,16 @@
 # Any transformers.js feature-extraction model.
 # EMBEDDING_MODEL=Xenova/all-MiniLM-L6-v2
 
-# Where the ONNX embedding model is cached, relative to the repo root.
+# Where the ONNX embedding model is cached. Relative to the app data directory, as above.
 # MODEL_CACHE_DIR=.models
+
+# Extra browser origins allowed to call the API without a token, comma-separated. This
+# app's own UI (the tray's address and the :5173 dev server) is always allowed; everything
+# else — the browser extension included — authenticates with the token below instead.
+# See docs/capture.md.
+# CORS_ORIGINS=http://localhost:4173
+
+# The token a browser extension presents. Left unset, JobTrack generates one on first run
+# and keeps it in data/api-token — that is the normal case, and the file is what you paste
+# into the extension's options page. Set it here only to manage the secret yourself.
+# API_TOKEN=