update metadata, routing, and security configurations

Author: modelorona

.serena/.gitignore

@@ -0,0 +1 @@
+/cache

.serena/project.yml

@@ -0,0 +1,113 @@
+# the name by which the project can be referenced within Serena
+project_name: "dory"
+
+
+# list of languages for which language servers are started; choose from:
+#   al                  bash                clojure             cpp                 csharp
+#   csharp_omnisharp    dart                elixir              elm                 erlang
+#   fortran             fsharp              go                  groovy              haskell
+#   java                julia               kotlin              lua                 markdown
+#   matlab              nix                 pascal              perl                php
+#   php_phpactor        powershell          python              python_jedi         r
+#   rego                ruby                ruby_solargraph     rust                scala
+#   swift               terraform           toml                typescript          typescript_vts
+#   vue                 yaml                zig
+#   (This list may be outdated. For the current list, see values of Language enum here:
+#   https://github.com/oraios/serena/blob/main/src/solidlsp/ls_config.py
+#   For some languages, there are alternative language servers, e.g. csharp_omnisharp, ruby_solargraph.)
+# Note:
+#   - For C, use cpp
+#   - For JavaScript, use typescript
+#   - For Free Pascal/Lazarus, use pascal
+# Special requirements:
+#   Some languages require additional setup/installations.
+#   See here for details: https://oraios.github.io/serena/01-about/020_programming-languages.html#language-servers
+# When using multiple languages, the first language server that supports a given file will be used for that file.
+# The first language is the default language and the respective language server will be used as a fallback.
+# Note that when using the JetBrains backend, language servers are not used and this list is correspondingly ignored.
+languages:
+- typescript
+
+# the encoding used by text files in the project
+# For a list of possible encodings, see https://docs.python.org/3.11/library/codecs.html#standard-encodings
+encoding: "utf-8"
+
+# whether to use project's .gitignore files to ignore files
+ignore_all_files_in_gitignore: true
+
+# list of additional paths to ignore in this project.
+# Same syntax as gitignore, so you can use * and **.
+# Note: global ignored_paths from serena_config.yml are also applied additively.
+ignored_paths: []
+
+# whether the project is in read-only mode
+# If set to true, all editing tools will be disabled and attempts to use them will result in an error
+# Added on 2025-04-18
+read_only: false
+
+# list of tool names to exclude. We recommend not excluding any tools, see the readme for more details.
+# Below is the complete list of tools for convenience.
+# To make sure you have the latest list of tools, and to view their descriptions, 
+# execute `uv run scripts/print_tool_overview.py`.
+#
+#  * `activate_project`: Activates a project by name.
+#  * `check_onboarding_performed`: Checks whether project onboarding was already performed.
+#  * `create_text_file`: Creates/overwrites a file in the project directory.
+#  * `delete_lines`: Deletes a range of lines within a file.
+#  * `delete_memory`: Deletes a memory from Serena's project-specific memory store.
+#  * `execute_shell_command`: Executes a shell command.
+#  * `find_referencing_code_snippets`: Finds code snippets in which the symbol at the given location is referenced.
+#  * `find_referencing_symbols`: Finds symbols that reference the symbol at the given location (optionally filtered by type).
+#  * `find_symbol`: Performs a global (or local) search for symbols with/containing a given name/substring (optionally filtered by type).
+#  * `get_current_config`: Prints the current configuration of the agent, including the active and available projects, tools, contexts, and modes.
+#  * `get_symbols_overview`: Gets an overview of the top-level symbols defined in a given file.
+#  * `initial_instructions`: Gets the initial instructions for the current project.
+#     Should only be used in settings where the system prompt cannot be set,
+#     e.g. in clients you have no control over, like Claude Desktop.
+#  * `insert_after_symbol`: Inserts content after the end of the definition of a given symbol.
+#  * `insert_at_line`: Inserts content at a given line in a file.
+#  * `insert_before_symbol`: Inserts content before the beginning of the definition of a given symbol.
+#  * `list_dir`: Lists files and directories in the given directory (optionally with recursion).
+#  * `list_memories`: Lists memories in Serena's project-specific memory store.
+#  * `onboarding`: Performs onboarding (identifying the project structure and essential tasks, e.g. for testing or building).
+#  * `prepare_for_new_conversation`: Provides instructions for preparing for a new conversation (in order to continue with the necessary context).
+#  * `read_file`: Reads a file within the project directory.
+#  * `read_memory`: Reads the memory with the given name from Serena's project-specific memory store.
+#  * `remove_project`: Removes a project from the Serena configuration.
+#  * `replace_lines`: Replaces a range of lines within a file with new content.
+#  * `replace_symbol_body`: Replaces the full definition of a symbol.
+#  * `restart_language_server`: Restarts the language server, may be necessary when edits not through Serena happen.
+#  * `search_for_pattern`: Performs a search for a pattern in the project.
+#  * `summarize_changes`: Provides instructions for summarizing the changes made to the codebase.
+#  * `switch_modes`: Activates modes by providing a list of their names
+#  * `think_about_collected_information`: Thinking tool for pondering the completeness of collected information.
+#  * `think_about_task_adherence`: Thinking tool for determining whether the agent is still on track with the current task.
+#  * `think_about_whether_you_are_done`: Thinking tool for determining whether the task is truly completed.
+#  * `write_memory`: Writes a named memory (for future reference) to Serena's project-specific memory store.
+excluded_tools: []
+
+# list of tools to include that would otherwise be disabled (particularly optional tools that are disabled by default)
+included_optional_tools: []
+
+# fixed set of tools to use as the base tool set (if non-empty), replacing Serena's default set of tools.
+# This cannot be combined with non-empty excluded_tools or included_optional_tools.
+fixed_tools: []
+
+# list of mode names to that are always to be included in the set of active modes
+# The full set of modes to be activated is base_modes + default_modes.
+# If the setting is undefined, the base_modes from the global configuration (serena_config.yml) apply.
+# Otherwise, this setting overrides the global configuration.
+# Set this to [] to disable base modes for this project.
+# Set this to a list of mode names to always include the respective modes for this project.
+base_modes:
+
+# list of mode names that are to be activated by default.
+# The full set of modes to be activated is base_modes + default_modes.
+# If the setting is undefined, the default_modes from the global configuration (serena_config.yml) apply.
+# Otherwise, this overrides the setting from the global configuration (serena_config.yml).
+# This setting can, in turn, be overridden by CLI parameters (--mode).
+default_modes:
+
+# initial prompt for the project. It will always be given to the LLM upon activating the project
+# (contrary to the memories, which are loaded on demand).
+initial_prompt: ""

k8s/config/nginx-default.conf

@@ -8,6 +8,9 @@ server {
     add_header X-Content-Type-Options "nosniff" always;
     add_header X-XSS-Protection "1; mode=block" always;
     add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://us.i.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://us.i.posthog.com; frame-ancestors 'self'" always;
 
     location ^~ /docs {
         alias   /usr/share/docs;

src/components/routes.tsx

@@ -47,21 +47,27 @@ export default function Routes() {
   useEffect(() => {
     setLoading(true);
     const loadRoutes = async () => {
-      // For root path, load the first navigation page
-      const targetPath = pathname === '/' ? ALL_NAVIGATION[0].groups[0].pages[0].href : pathname;
-      
-      const entries = await Promise.all(
-        Object.entries(ALL_PAGES).filter(([path]) => path === targetPath).map(async ([path, loader]) => {
-          const module = await loader();
-          const routePath = pathname === '/' ? '/' : pathFromFilename(path);
-          return {
-            path: routePath,
-            component: module.default,
-          };
-        })
-      );  
-      setRoutes(entries);
-      setLoading(false);
+      try {
+        // For root path, load the first navigation page
+        const targetPath = pathname === '/' ? ALL_NAVIGATION[0].groups[0].pages[0].href : pathname;
+
+        const entries = await Promise.all(
+          Object.entries(ALL_PAGES).filter(([path]) => path === targetPath).map(async ([path, loader]) => {
+            const module = await loader();
+            const routePath = pathname === '/' ? '/' : pathFromFilename(path);
+            return {
+              path: routePath,
+              component: module.default,
+            };
+          })
+        );
+        setRoutes(entries);
+      } catch (error) {
+        console.error('Failed to load route:', error);
+        setRoutes([]);
+      } finally {
+        setLoading(false);
+      }
     };
 
     loadRoutes();

src/plugins/html-metadata-injector.ts

@@ -23,6 +23,8 @@ export function htmlMetadataInjector(): Plugin {
         const siteName = config.name || 'Documentation';
         const defaultTitle = config.title || siteName;
         const defaultDescription = config.description || `${siteName} - Technical Documentation`;
+        const siteUrl = config.url || '';
+        const siteImage = config.image || './docs/favicon.svg';
 
         // Replace title
         html = html.replace(
@@ -54,6 +56,20 @@ export function htmlMetadataInjector(): Plugin {
           `<meta property="og:site_name" content="${siteName}" />`
         );
 
+        // Replace Open Graph image
+        html = html.replace(
+          /<meta property="og:image" content=".*?" \/>/,
+          `<meta property="og:image" content="${siteImage}" />`
+        );
+
+        // Replace Open Graph URL
+        if (siteUrl) {
+          html = html.replace(
+            /<meta property="og:url" content=".*?" \/>/,
+            `<meta property="og:url" content="${siteUrl}" />`
+          );
+        }
+
         // Replace Twitter title
         html = html.replace(
           /<meta name="twitter:title" content=".*?" \/>/,
@@ -66,6 +82,12 @@ export function htmlMetadataInjector(): Plugin {
           `<meta name="twitter:description" content="${defaultDescription}" />`
         );
 
+        // Replace Twitter image
+        html = html.replace(
+          /<meta name="twitter:image" content=".*?" \/>/,
+          `<meta name="twitter:image" content="${siteImage}" />`
+        );
+
         return html;
       } catch (error) {
         console.error('❌ Failed to parse dory.json for metadata injection:', error);

src/types/config.ts

@@ -87,8 +87,11 @@ export interface DoryAnalytics {
 
 export interface DoryConfig {
   name: string;
-  favicon: string;
+  title?: string;
+  description?: string;
+  image?: string;
   url?: string;
+  favicon: string;
   colors?: DoryColors;
   fonts?: DoryFonts;
   navigation: DoryNavigation;

src/ui/header.tsx

@@ -69,15 +69,20 @@ export function Header({ className }: { className?: string }) {
         </div>
         <nav className="hidden md:block">
           <ul role="list" className="flex items-center gap-8">
-            {ALL_NAVIGATION.map((tab) => (
-              <TopLevelNavItem 
-                key={tab.title} 
-                href={tab.groups[0].pages[0].href}
-                isActive={pathname.startsWith(`/${tab.groups[0].pages[0].href.split('/')[1]}`)}
-              >
-                {tab.title}
-              </TopLevelNavItem>
-            ))}
+            {ALL_NAVIGATION.map((tab) => {
+              const isActive = tab.groups.some(group =>
+                group.pages.some(page => page.href === pathname)
+              );
+              return (
+                <TopLevelNavItem
+                  key={tab.title}
+                  href={tab.groups[0].pages[0].href}
+                  isActive={isActive}
+                >
+                  {tab.title}
+                </TopLevelNavItem>
+              );
+            })}
           </ul>
         </nav>
         <div className="hidden md:block md:h-5 md:w-px md:bg-zinc-900/10 md:dark:bg-white/15" />