wiki-viewer 1.8.0 → 1.8.1

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-viewer",
-  "version": "1.8.0",
+  "version": "1.8.1",
   "description": "Local file viewer and wiki — view markdown, HTML, PDFs, notebooks, office docs, and more from any directory",
   "license": "MIT",
   "type": "module",

package/.next/standalone/packages/wiki-viewer-mcp/README.md

@@ -90,11 +90,12 @@ node dist/index.js   # start MCP server
 Set three environment variables before starting the MCP server
 (the `register` command prints them for you after approval):
 
-| Var                    | Description                                                              |
-| ---------------------- | ------------------------------------------------------------------------ |
-| `WIKI_VIEWER_URL`      | Base URL of your wiki-viewer instance, e.g. `https://notes.example.com`  |
-| `WIKI_VIEWER_TOKEN`    | Bearer token obtained via `wiki-viewer-mcp register`                     |
-| `WIKI_VIEWER_AGENT_ID` | Your agent ID (e.g. `ai:myagent`), sent as `X-Agent-Id` on every request |
+| Var                     | Description                                                                                                                                                                                       |
+| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `WIKI_VIEWER_URL`       | Base URL of your wiki-viewer instance, e.g. `https://notes.example.com`                                                                                                                           |
+| `WIKI_VIEWER_TOKEN`     | Bearer token obtained via `wiki-viewer-mcp register`                                                                                                                                              |
+| `WIKI_VIEWER_AGENT_ID`  | Your agent ID (e.g. `ai:myagent`), sent as `X-Agent-Id` on every request                                                                                                                          |
+| `WIKI_VIEWER_WORKSPACE` | _Optional._ Workspace id, sent as `X-Workspace` on every request. Targets one root directory when the instance serves several. Omit for single-workspace instances (the server uses its default). |
 
 ## Usage in Claude Code / Cursor / Codex
 

package/.next/standalone/packages/wiki-viewer-mcp/dist/http-client.js

@@ -56,11 +56,13 @@ export class WikiViewerClient {
     baseUrl;
     token;
     agentId;
+    workspace;
     _fetch;
     constructor(config) {
         this.baseUrl = config.baseUrl.replace(/\/$/, "");
         this.token = config.token;
         this.agentId = config.agentId;
+        this.workspace = config.workspace;
         this._fetch = config.fetch ?? globalThis.fetch;
     }
     // ── Helpers ────────────────────────────────────────────────────────────────
@@ -68,6 +70,8 @@ export class WikiViewerClient {
         return {
             Authorization: `Bearer ${this.token}`,
             "X-Agent-Id": this.agentId,
+            // Target a specific workspace when configured. Omitted = server default.
+            ...(this.workspace ? { "X-Workspace": this.workspace } : {}),
             ...extra,
         };
     }

package/.next/standalone/packages/wiki-viewer-mcp/dist/index.js

@@ -9,6 +9,7 @@
  *   WIKI_VIEWER_URL      Base URL of wiki-viewer instance (required)
  *   WIKI_VIEWER_TOKEN    Bearer token from TOFU registration (required)
  *   WIKI_VIEWER_AGENT_ID X-Agent-Id header value (required)
+ *   WIKI_VIEWER_WORKSPACE  Workspace id for X-Workspace header (optional; targets one workspace)
  *
  * Mode-awareness:
  *   Before any raw write to a .md file, the shim checks the cached
@@ -62,6 +63,7 @@ export function createClient(overrides) {
         baseUrl: overrides?.baseUrl ?? requireEnv("WIKI_VIEWER_URL"),
         token: overrides?.token ?? requireEnv("WIKI_VIEWER_TOKEN"),
         agentId: overrides?.agentId ?? requireEnv("WIKI_VIEWER_AGENT_ID"),
+        workspace: overrides?.workspace ?? process.env.WIKI_VIEWER_WORKSPACE,
         fetch: overrides?.fetch,
     });
 }
@@ -424,6 +426,7 @@ async function runRegister() {
             "scope-paths": { type: "string", default: "**/*" },
             ops: { type: "string", default: "read,mutate" },
             timeout: { type: "string", default: "300" },
+            workspace: { type: "string" },
         },
         allowPositionals: true,
     });
@@ -489,6 +492,7 @@ async function runRegister() {
                         WIKI_VIEWER_URL: values.url,
                         WIKI_VIEWER_TOKEN: result.token,
                         WIKI_VIEWER_AGENT_ID: result.agentId,
+                        ...(values.workspace ? { WIKI_VIEWER_WORKSPACE: values.workspace } : {}),
                     },
                 },
             },

package/.next/standalone/packages/wiki-viewer-mcp/src/http-client.ts

@@ -15,6 +15,8 @@ export interface ClientConfig {
   baseUrl: string;       // e.g. "https://notes.example.com"
   token: string;         // Bearer token from TOFU registration
   agentId: string;       // X-Agent-Id header
+  /** Target workspace id (X-Workspace header). Optional: omit for single-workspace instances. */
+  workspace?: string;
   /** Override fetch implementation (for testing) */
   fetch?: typeof fetch;
 }
@@ -116,12 +118,14 @@ export class WikiViewerClient {
   private readonly baseUrl: string;
   private readonly token: string;
   private readonly agentId: string;
+  private readonly workspace?: string;
   private readonly _fetch: typeof fetch;
 
   constructor(config: ClientConfig) {
     this.baseUrl = config.baseUrl.replace(/\/$/, "");
     this.token = config.token;
     this.agentId = config.agentId;
+    this.workspace = config.workspace;
     this._fetch = config.fetch ?? globalThis.fetch;
   }
 
@@ -131,6 +135,8 @@ export class WikiViewerClient {
     return {
       Authorization: `Bearer ${this.token}`,
       "X-Agent-Id": this.agentId,
+      // Target a specific workspace when configured. Omitted = server default.
+      ...(this.workspace ? { "X-Workspace": this.workspace } : {}),
       ...extra,
     };
   }

package/.next/standalone/packages/wiki-viewer-mcp/src/index.ts

@@ -9,6 +9,7 @@
  *   WIKI_VIEWER_URL      Base URL of wiki-viewer instance (required)
  *   WIKI_VIEWER_TOKEN    Bearer token from TOFU registration (required)
  *   WIKI_VIEWER_AGENT_ID X-Agent-Id header value (required)
+ *   WIKI_VIEWER_WORKSPACE  Workspace id for X-Workspace header (optional; targets one workspace)
  *
  * Mode-awareness:
  *   Before any raw write to a .md file, the shim checks the cached
@@ -76,12 +77,14 @@ export function createClient(overrides?: {
   baseUrl?: string;
   token?: string;
   agentId?: string;
+  workspace?: string;
   fetch?: typeof fetch;
 }): WikiViewerClient {
   return new WikiViewerClient({
     baseUrl: overrides?.baseUrl ?? requireEnv("WIKI_VIEWER_URL"),
     token: overrides?.token ?? requireEnv("WIKI_VIEWER_TOKEN"),
     agentId: overrides?.agentId ?? requireEnv("WIKI_VIEWER_AGENT_ID"),
+    workspace: overrides?.workspace ?? process.env.WIKI_VIEWER_WORKSPACE,
     fetch: overrides?.fetch,
   });
 }
@@ -524,6 +527,7 @@ async function runRegister() {
       "scope-paths": { type: "string", default: "**/*" },
       ops: { type: "string", default: "read,mutate" },
       timeout: { type: "string", default: "300" },
+      workspace: { type: "string" },
     },
     allowPositionals: true,
   });
@@ -595,6 +599,7 @@ async function runRegister() {
             WIKI_VIEWER_URL: values.url,
             WIKI_VIEWER_TOKEN: result.token,
             WIKI_VIEWER_AGENT_ID: result.agentId,
+            ...(values.workspace ? { WIKI_VIEWER_WORKSPACE: values.workspace } : {}),
           },
         },
       },

package/.next/standalone/src/app/api/agents/install/route.ts

@@ -74,9 +74,25 @@ export async function GET(req: NextRequest): Promise<NextResponse> {
 			{ method: "GET",    path: "/api/agent/fs/ls/<path>",    auth: "bearer+agent-id", purpose: "Directory listing. ?recursive&limit&depth. Scope-filtered. Excludes .proof/." },
 			{ method: "POST",   path: "/api/agent/fs/move",         auth: "bearer+agent-id", purpose: "Move/rename. Body: {from, to, ifMatch?}. Moves .md sidecar too." },
 			{ method: "POST",   path: "/api/agent/fs/search",       auth: "bearer+agent-id", purpose: "Server-side grep or glob. Body: {kind:'grep'|'glob', query, path?, glob?, limit?}." },
+			// Settings (resolved workspace root, rate limit)
+			{ method: "GET",    path: "/api/agent/settings",        auth: "bearer+agent-id", purpose: "Returns rateLimit + resolved 'root' (the active workspace's directory for the X-Workspace you send)." },
 			// Human presence (for editor lease — drives active collab-state)
 			{ method: "POST",   path: "/api/wiki/presence",         auth: "session",          purpose: "Human editor lease heartbeat. Body: {path, action:'open'|'heartbeat'|'close'}." },
 		],
+		workspaces: {
+			description:
+				"This instance can serve multiple root directories ('workspaces'). Every agent path is relative to ONE workspace root.",
+			header: "X-Workspace: <workspaceId>",
+			queryParam: "ws=<workspaceId>",
+			default:
+				"If omitted, the server resolves to the most-recently-opened workspace. Correct for single-workspace instances; be explicit when several exist.",
+			discoverId:
+				"Ask the human for the workspace id, read it from the ?ws= param of a pasted wiki-viewer URL, or call GET /api/agent/settings (with X-Workspace) to confirm the resolved 'root'.",
+			scoped:
+				"A token may be pinned to one workspace (scope.workspaceId at approval). Requests resolving to a different workspace return 403 FORBIDDEN. A token with no pin is wildcard (any workspace).",
+			isolation:
+				"Paths in one workspace never touch another, even with identical relative paths.",
+		},
 		capabilities: {
 			maxFileBytes: MAX_FILE_BYTES,
 			supportsRange: true,
@@ -85,6 +101,8 @@ export async function GET(req: NextRequest): Promise<NextResponse> {
 			search: ["grep", "glob"],
 			globDialect: "**,*,?",
 			scopeOps: ["read", "mutate", "delete"],
+			scopeWorkspaceId: true,
+			workspaceHeader: "X-Workspace",
 			collabStates: ["active", "tracked", "untracked", "not-markdown"],
 			collabPrecondition: "If-Collab-Match",
 		},
@@ -103,8 +121,8 @@ export async function GET(req: NextRequest): Promise<NextResponse> {
 		mcpAdapter: {
 			package: "wiki-viewer-mcp",
 			invoke: "npx wiki-viewer-mcp",
-			env: ["WIKI_VIEWER_URL", "WIKI_VIEWER_TOKEN", "WIKI_VIEWER_AGENT_ID"],
-			description: "Thin MCP adapter mapping standard MCP filesystem tools onto these endpoints. Reads X-Collab-State and blocks or warns on raw writes to active .md files.",
+			env: ["WIKI_VIEWER_URL", "WIKI_VIEWER_TOKEN", "WIKI_VIEWER_AGENT_ID", "WIKI_VIEWER_WORKSPACE"],
+			description: "Thin MCP adapter mapping standard MCP filesystem tools onto these endpoints. Set WIKI_VIEWER_WORKSPACE to target a specific workspace (sends X-Workspace on every call). Reads X-Collab-State and blocks or warns on raw writes to active .md files.",
 		},
 		ops: [
 			"block.replace",