@classic-homes/agent-chat 0.1.1 → 0.1.2

package/dist/components/UiFrame.svelte

@@ -2,6 +2,7 @@
   import { onMount } from 'svelte';
   import type { UiResourceState } from '../reducer.js';
   import {
+    FRAME_TARGET_ORIGIN,
     MIN_FRAME_HEIGHT,
     UI_FRAME_RENDER,
     composerTextFor,
@@ -27,7 +28,7 @@
   function send(): void {
     frame?.contentWindow?.postMessage(
       { type: UI_FRAME_RENDER, html: resource.html, uri: resource.uri },
-      sandboxOrigin,
+      FRAME_TARGET_ORIGIN,
     );
   }
 

package/dist/components/UiFrame.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UiFrame.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/UiFrame.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAWnD,UAAU,KAAK;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA8DH,QAAA,MAAM,OAAO,2CAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}
+{"version":3,"file":"UiFrame.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/UiFrame.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYnD,UAAU,KAAK;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA8DH,QAAA,MAAM,OAAO,2CAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}

package/dist/ui-frame-protocol.d.ts

@@ -33,8 +33,20 @@ export declare const MIN_FRAME_HEIGHT = 120;
 export declare const MAX_FRAME_HEIGHT = 1200;
 /** Parse a message from the sandbox into a FrameAction, or null when it is not one. */
 export declare function parseFrameMessage(data: unknown): FrameAction | null;
-/** True when a message event came from our sandbox frame and nowhere else. */
+/**
+ * True when a message event came from our sandbox frame and nowhere else. The frame runs with
+ * `sandbox` and no `allow-same-origin`, so its origin is opaque and the browser reports it as
+ * the string "null"; the window identity is the check that matters. The page's own origin is
+ * accepted too for a frame that is not sandboxed (tests, future same-origin hosting).
+ */
 export declare function isFromFrame(event: MessageEvent, frame: HTMLIFrameElement | null, sandboxOrigin: string): boolean;
+/**
+ * Target origin for messages to the sandbox frame. An opaque origin matches nothing but "*",
+ * so a message addressed to the sandbox's https origin would be dropped silently. The window
+ * reference itself (`frame.contentWindow`) is what scopes the message; the HTML it carries is
+ * model output that is untrusted anyway.
+ */
+export declare const FRAME_TARGET_ORIGIN = "*";
 /** Text an intent or prompt action becomes in the composer. */
 export declare function composerTextFor(action: Extract<FrameAction, {
     type: 'prompt' | 'intent';

package/dist/ui-frame-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-frame-protocol.d.ts","sourceRoot":"","sources":["../src/lib/ui-frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAC1D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CA0CnE;AAQD,8EAA8E;AAC9E,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAC/B,aAAa,EAAE,MAAM,GACpB,OAAO,CAET;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC,GAC1D,MAAM,CAIR"}
+{"version":3,"file":"ui-frame-protocol.d.ts","sourceRoot":"","sources":["../src/lib/ui-frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAC1D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CA0CnE;AAQD;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAC/B,aAAa,EAAE,MAAM,GACpB,OAAO,CAGT;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,+DAA+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC,GAC1D,MAAM,CAIR"}

package/dist/ui-frame-protocol.js

@@ -60,10 +60,24 @@ function asRecord(value) {
         ? value
         : undefined;
 }
-/** True when a message event came from our sandbox frame and nowhere else. */
+/**
+ * True when a message event came from our sandbox frame and nowhere else. The frame runs with
+ * `sandbox` and no `allow-same-origin`, so its origin is opaque and the browser reports it as
+ * the string "null"; the window identity is the check that matters. The page's own origin is
+ * accepted too for a frame that is not sandboxed (tests, future same-origin hosting).
+ */
 export function isFromFrame(event, frame, sandboxOrigin) {
-    return !!frame && event.source === frame.contentWindow && event.origin === sandboxOrigin;
+    if (!frame || !frame.contentWindow || event.source !== frame.contentWindow)
+        return false;
+    return event.origin === 'null' || event.origin === sandboxOrigin;
 }
+/**
+ * Target origin for messages to the sandbox frame. An opaque origin matches nothing but "*",
+ * so a message addressed to the sandbox's https origin would be dropped silently. The window
+ * reference itself (`frame.contentWindow`) is what scopes the message; the HTML it carries is
+ * model output that is untrusted anyway.
+ */
+export const FRAME_TARGET_ORIGIN = '*';
 /** Text an intent or prompt action becomes in the composer. */
 export function composerTextFor(action) {
     if (action.type === 'prompt')

package/dist/ui-frame-protocol.test.js

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest';
-import { composerTextFor, parseFrameMessage } from './ui-frame-protocol.js';
+import { composerTextFor, isFromFrame, parseFrameMessage } from './ui-frame-protocol.js';
 describe('parseFrameMessage', () => {
     it('accepts the MCP-UI action set and clamps sizes', () => {
         expect(parseFrameMessage({ type: 'ui-lifecycle-iframe-ready' })).toEqual({ type: 'ready' });
@@ -32,3 +32,17 @@ describe('parseFrameMessage', () => {
         expect(parseFrameMessage({ type: 'eval', payload: {} })).toBeNull();
     });
 });
+describe('isFromFrame', () => {
+    const win = {};
+    const frame = { contentWindow: win };
+    const event = (source, origin) => ({ source, origin });
+    it('accepts the sandbox window with an opaque ("null") or the sandbox origin', () => {
+        expect(isFromFrame(event(win, 'null'), frame, 'https://sandbox.example')).toBe(true);
+        expect(isFromFrame(event(win, 'https://sandbox.example'), frame, 'https://sandbox.example')).toBe(true);
+    });
+    it('rejects other windows, other origins and a missing frame', () => {
+        expect(isFromFrame(event({}, 'null'), frame, 'https://sandbox.example')).toBe(false);
+        expect(isFromFrame(event(win, 'https://evil.example'), frame, 'https://sandbox.example')).toBe(false);
+        expect(isFromFrame(event(win, 'null'), null, 'https://sandbox.example')).toBe(false);
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classic-homes/agent-chat",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": false,
   "type": "module",
   "description": "Svelte 5 chat UI for Classic Agent: session state, message list, composer, tool timeline, artifacts and MCP-UI sandbox frames. Consumed by the Classic App.",
@@ -17,8 +17,8 @@
     "dist"
   ],
   "dependencies": {
-    "@classic-homes/agent-client": "0.1.1",
-    "@classic-homes/agent-contracts": "0.1.1",
+    "@classic-homes/agent-client": "0.1.2",
+    "@classic-homes/agent-contracts": "0.1.2",
     "dompurify": "3.4.17"
   },
   "peerDependencies": {