@aeptus/aexeo-emdash 0.8.0 → 0.8.1

package/CHANGELOG.md

@@ -6,6 +6,26 @@ and the project follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.8.1] - 2026-05-03
+
+Fix for the entity-presence diagnostic shipped in 0.8.0.
+
+### Fixed
+
+- `EntityPresence` admin component's fetch to `/presence` was
+  missing the `X-EmDash-Request: 1` header that emdash's catch-all
+  plugin-route handler requires for state-changing methods on
+  private routes. Without it the host returns 403 CSRF_REJECTED
+  before the plugin handler runs, and the host's plugin-registry
+  bundle then crashes on the rejected response shape with a
+  `Cannot read properties of undefined (reading 'trim')` error
+  during admin-page render. With the header added, both the 403
+  and the downstream trim crash clear.
+
+  The `/data`, `/refresh`, and `/facts` routes were already sending
+  the header — `/presence` was the new addition and the omission
+  shipped in 0.8.0.
+
 ## [0.8.0] - 2026-05-03
 
 Layer-4 entity-presence diagnostic. The `/entity-legitimacy`
@@ -499,7 +519,8 @@ First public release.
   `astro.config.mjs` for the WASM import to resolve to a
   precompiled `WebAssembly.Module`. Not optional.
 
-[Unreleased]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.0...HEAD
+[Unreleased]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.1...HEAD
+[0.8.1]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.0...aexeo-emdash-v0.8.1
 [0.8.0]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.7.0...aexeo-emdash-v0.8.0
 [0.7.0]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.6.0...aexeo-emdash-v0.7.0
 [0.6.0]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.5.0...aexeo-emdash-v0.6.0

package/dist/admin.js

@@ -476,7 +476,15 @@ function formatAge(minutes) {
 async function callPresenceRoute(kind) {
   const res = await fetch(`${API_BASE2}/plugins/${PLUGIN_ID2}/presence`, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: {
+      "Content-Type": "application/json",
+      // Required by emdash's catch-all plugin-route handler for any
+      // POST/PUT/PATCH/DELETE on a private (default) plugin route.
+      // Without it the host returns 403 CSRF_REJECTED before the
+      // plugin handler even runs. Same convention as the /facts and
+      // /data routes the other admin components use.
+      "X-EmDash-Request": "1"
+    },
     body: JSON.stringify({ kind })
   });
   if (!res.ok) throw new Error(`HTTP ${res.status}`);

package/dist/configured.js

@@ -1191,7 +1191,7 @@ function globToMatcher(pattern) {
 }
 
 // src/version.ts
-var PACKAGE_VERSION = "0.8.0";
+var PACKAGE_VERSION = "0.8.1";
 
 // src/configured.ts
 import { definePlugin } from "emdash";

package/dist/index.js

@@ -23,7 +23,7 @@ function buildAllowedHosts(evaluatorHost) {
 }
 
 // src/version.ts
-var PACKAGE_VERSION = "0.8.0";
+var PACKAGE_VERSION = "0.8.1";
 
 // src/sandbox.ts
 function aexeoPluginSandboxed(options = {}) {

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PACKAGE_VERSION = "0.8.0";
+export declare const PACKAGE_VERSION = "0.8.1";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeptus/aexeo-emdash",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Aexeo SEO/GEO content evaluator as an emdash plugin",
   "license": "MIT",
   "author": "Aeptus",