@promptbook/cli 0.112.0-130 → 0.112.0-132

package/apps/agents-server/src/app/admin/custom-js/CustomJsClient.tsx

@@ -53,6 +53,13 @@ export function CustomJsClient() {
                 Scripts entered here are concatenated and injected on every Agents Server page. Use them to add helpers,
                 integrations, or instrumentation, but keep them lean since runtime errors can impact the UI.
             </p>
+            <p className="text-sm text-gray-600 mb-6">
+                Scripts run inside a strict Content Security Policy: they are loaded via a per-request{' '}
+                <code>nonce</code> on the inline <code>&lt;script&gt;</code> tag, and any extra scripts they create at
+                runtime inherit that trust via <code>script-src &apos;strict-dynamic&apos;</code>. Closing{' '}
+                <code>&lt;/script&gt;</code> sequences are no longer rewritten — write valid JavaScript and avoid raw
+                HTML payloads here.
+            </p>
 
             {error && (
                 <div className="mb-4 rounded-md border border-red-300 bg-red-50 px-4 py-3 text-sm text-red-700">

package/apps/agents-server/src/app/layout.tsx

@@ -3,7 +3,8 @@ import { LayoutWrapper } from '@/src/components/LayoutWrapper/LayoutWrapper';
 import { createThemeModeBootstrapScript } from '@/src/components/ThemeMode/createThemeModeBootstrapScript';
 import { APPLICATION_FONT_VARIABLE_CLASS_NAME } from '@/src/utils/applicationFonts';
 import type { Metadata } from 'next';
-import { cookies } from 'next/headers';
+import { cookies, headers } from 'next/headers';
+import { CONTENT_SECURITY_POLICY_NONCE_REQUEST_HEADER } from '../middleware/contentSecurityPolicy';
 import { getCustomJavascriptWithIntegrations } from '../database/customJavascript';
 import { getAggregatedCustomStylesheetCss } from '../database/customStylesheet';
 import { getMetadataMap } from '../database/getMetadata';
@@ -293,6 +294,7 @@ export default async function RootLayout({
         getCustomJavascriptWithIntegrations,
     );
     const cookieStorePromise = cookies();
+    const requestHeadersPromise = headers();
     const defaultThemeModePromise = Promise.all([currentUserPromise, cookieStorePromise, layoutMetadataPromise]).then(
         async ([currentUser, cookieStore, layoutMetadata]) => {
             const cookieThemeMode = cookieStore.get(THEME_MODE_COOKIE_NAME)?.value || null;
@@ -346,6 +348,7 @@ export default async function RootLayout({
         customStylesheetCss,
         customJavascript,
         cookieStore,
+        requestHeaders,
         defaultThemeMode,
         federatedServers,
         footerLinks,
@@ -363,6 +366,7 @@ export default async function RootLayout({
         customStylesheetCssPromise,
         customJavascriptPromise,
         cookieStorePromise,
+        requestHeadersPromise,
         defaultThemeModePromise,
         federatedServersPromise,
         footerLinksPromise,
@@ -379,7 +383,10 @@ export default async function RootLayout({
     const feedbackMode = parseChatFeedbackMode(layoutMetadata.CHAT_FEEDBACK_MODE, layoutMetadata.IS_FEEDBACK_ENABLED);
     const isExperimentalPwaAppEnabled = (layoutMetadata.IS_EXPERIMENTAL_PWA_APP_ENABLED ?? 'true') === 'true';
     const isPublicServer = isPublicServerVisibility(serverVisibility);
-    const safeCustomJavascript = customJavascript.replace(/<\/script>/gi, '<\\/script>');
+    // Note: The custom JavaScript is executed only when the browser sees the matching
+    //       `script-src 'nonce-...'` directive that the middleware sets per request, so a
+    //       fragile string-level sanitization is intentionally not applied here.
+    const contentSecurityPolicyNonce = requestHeaders.get(CONTENT_SECURITY_POLICY_NONCE_REQUEST_HEADER) ?? undefined;
     const webPushPublicKey = process.env.NEXT_PUBLIC_WEB_PUSH_PUBLIC_KEY?.trim() || null;
     const chatVisualModeCookie = cookieStore.get(CHAT_VISUAL_MODE_COOKIE_NAME)?.value || null;
     const cookieLanguage = cookieStore.get(SERVER_LANGUAGE_COOKIE_NAME)?.value || null;
@@ -412,6 +419,7 @@ export default async function RootLayout({
             <body className={`${APPLICATION_FONT_VARIABLE_CLASS_NAME} bg-background text-foreground antialiased`}>
                 <script
                     id="agents-server-theme-mode"
+                    nonce={contentSecurityPolicyNonce}
                     dangerouslySetInnerHTML={{ __html: themeModeBootstrapScript }}
                 />
                 {customStylesheetCss && <style id="agents-server-custom-css">{customStylesheetCss}</style>}
@@ -448,7 +456,8 @@ export default async function RootLayout({
                 {customJavascript && (
                     <script
                         id="agents-server-custom-js"
-                        dangerouslySetInnerHTML={{ __html: safeCustomJavascript }}
+                        nonce={contentSecurityPolicyNonce}
+                        dangerouslySetInnerHTML={{ __html: customJavascript }}
                     />
                 )}
                 {/* Global portal root for modals/popups */}

package/apps/agents-server/src/components/Footer/Footer.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { NEXT_PUBLIC_VERCEL_GIT_COMMIT_REF } from '@/config';
+import { NEXT_PUBLIC_VERCEL_GIT_COMMIT_REF, NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA } from '@/config';
 import { CLAIM, NAME, PROMPTBOOK_ENGINE_VERSION } from '@promptbook-local/core';
 import { useServerLanguage } from '../ServerLanguage/ServerLanguageProvider';
 import { HeadlessLink } from '../_utils/headlessParam';
+import { getCommitFooterEmoji } from './getCommitFooterEmoji';
 
 /**
  * Title/url pair used to extend the footer via metadata.
@@ -169,7 +170,7 @@ export function Footer(props: FooterProps) {
                         <br />
                         {t('footer.allRightsReserved')}
                         <br />
-                        {t('footer.madeInCzechRepublic')}
+                        {t('footer.madeInCzechRepublic', { emoji: getCommitFooterEmoji(NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA) })}
                         {/* <- TODO: !!!!!!!! Put here Prague outline */}
                     </p>
                     <p className="mt-2 text-xs text-gray-400">

package/apps/agents-server/src/components/Footer/getCommitFooterEmoji.ts

@@ -0,0 +1,112 @@
+/**
+ * Curated list of positive or neutral emojis displayed in the footer's "Made with {emoji} in Europe" line.
+ *
+ * The order of this list is part of the deterministic mapping from commit SHA to emoji, so existing
+ * entries should not be reordered. New emojis can be appended at the end without affecting the
+ * indexes of existing ones, but each commit SHA will then map to a different emoji.
+ *
+ * Hearts, cute animals, plants, fruits, sweets, and celebratory symbols are intentionally chosen so
+ * that the footer never shows anything aggressive, scary, or negative.
+ */
+const POSITIVE_FOOTER_EMOJIS = [
+    '❤️',
+    '🧡',
+    '💛',
+    '💚',
+    '💙',
+    '💜',
+    '🤍',
+    '💖',
+    '💝',
+    '🐙',
+    '🦄',
+    '🐶',
+    '🐱',
+    '🐰',
+    '🦊',
+    '🐻',
+    '🐼',
+    '🐨',
+    '🐯',
+    '🦁',
+    '🐸',
+    '🐵',
+    '🐧',
+    '🦉',
+    '🐢',
+    '🦋',
+    '🐝',
+    '🐞',
+    '🐳',
+    '🐬',
+    '🦒',
+    '🐘',
+    '🌸',
+    '🌻',
+    '🌷',
+    '🌹',
+    '🌈',
+    '🌟',
+    '✨',
+    '☀️',
+    '🌙',
+    '🍀',
+    '🌳',
+    '🍎',
+    '🍓',
+    '🍑',
+    '🍒',
+    '🍋',
+    '🍊',
+    '🍇',
+    '🍉',
+    '🍰',
+    '🍪',
+    '🍩',
+    '🍕',
+    '🍔',
+    '🍦',
+    '🍫',
+    '🎉',
+    '🎈',
+    '🎁',
+    '🎨',
+    '🚀',
+    '⭐',
+    '💎',
+    '🪐',
+    '🎵',
+] as const;
+
+/**
+ * Default emoji used in the footer when no commit SHA is available (for example during local
+ * development outside Vercel). Kept as the historic `❤️` so the footer text does not look
+ * unusual when the deployment metadata is missing.
+ */
+const DEFAULT_FOOTER_EMOJI: string = POSITIVE_FOOTER_EMOJIS[0]!;
+
+/**
+ * Derives a stable emoji from a commit SHA using a small djb2-style string hash.
+ *
+ * The same SHA always produces the same emoji, so users can spot a server update by noticing that
+ * the footer emoji changed. The result is taken modulo the curated list, so it is always one of
+ * the positive/neutral emojis in {@link POSITIVE_FOOTER_EMOJIS}.
+ *
+ * @param commitSha - Full or short commit SHA. May be `null` or `undefined` when running outside
+ *                    a Vercel deployment, in which case {@link DEFAULT_FOOTER_EMOJI} is returned.
+ * @returns One emoji from {@link POSITIVE_FOOTER_EMOJIS}.
+ * @private Internal to `apps/agents-server`
+ */
+export function getCommitFooterEmoji(commitSha: string | null | undefined): string {
+    if (!commitSha) {
+        return DEFAULT_FOOTER_EMOJI;
+    }
+
+    let hash = 0;
+    for (let characterIndex = 0; characterIndex < commitSha.length; characterIndex++) {
+        hash = (hash * 31 + commitSha.charCodeAt(characterIndex)) | 0;
+    }
+
+    const emojiIndex = Math.abs(hash) % POSITIVE_FOOTER_EMOJIS.length;
+    return POSITIVE_FOOTER_EMOJIS[emojiIndex]!;
+}

package/apps/agents-server/src/languages/translations/czech.yaml

@@ -380,7 +380,7 @@ footer.logosAndBranding: Loga a vizuální identita
 footer.connectSectionTitle: Spojte se s námi
 footer.linksSectionTitle: Odkazy
 footer.allRightsReserved: Všechna práva vyhrazena.
-footer.madeInCzechRepublic: Vytvořeno s ❤️ v České republice.
+footer.madeInCzechRepublic: Vytvořeno s {emoji} v České republice.
 footer.engineVersion: Verze jádra Promptbooku
 forbidden.title: 403 Zakázáno
 forbidden.message: Nemáte oprávnění k přístupu na tuto stránku.

package/apps/agents-server/src/languages/translations/english.yaml

@@ -384,7 +384,7 @@ footer.logosAndBranding: Logos & Branding
 footer.connectSectionTitle: Connect
 footer.linksSectionTitle: Links
 footer.allRightsReserved: All rights reserved.
-footer.madeInCzechRepublic: Made with ❤️ in Europe
+footer.madeInCzechRepublic: Made with {emoji} in Europe
 footer.engineVersion: Promptbook engine version
 forbidden.title: 403 Forbidden
 forbidden.message: You do not have permission to access this page.

package/apps/agents-server/src/middleware/applyEmbeddingHeader.ts

@@ -21,13 +21,15 @@ export function applyEmbeddingHeader(response: NextResponse, url: URL, isAllowed
         return;
     }
 
+    // Note: The base strict CSP (script-src with nonce) is preserved by appending a separate
+    //       Content-Security-Policy header that only carries the `frame-ancestors` directive.
     if (isAllowed) {
-        response.headers.set('Content-Security-Policy', 'frame-ancestors https: http:');
+        response.headers.append('Content-Security-Policy', 'frame-ancestors https: http:');
         response.headers.delete('X-Frame-Options');
         return;
     }
 
-    response.headers.set('Content-Security-Policy', "frame-ancestors 'none'");
+    response.headers.append('Content-Security-Policy', "frame-ancestors 'none'");
     response.headers.set('X-Frame-Options', 'DENY');
 }
 

package/apps/agents-server/src/middleware/contentSecurityPolicy.ts

@@ -0,0 +1,97 @@
+import type { NextResponse } from 'next/server';
+
+/**
+ * Name of the request header that carries the per-request CSP nonce to server components.
+ *
+ * Server components read it via `next/headers` and must pass it to every inline `<script>` tag so
+ * the browser executes only scripts explicitly rendered by the server.
+ *
+ * @private function of middleware
+ */
+export const CONTENT_SECURITY_POLICY_NONCE_REQUEST_HEADER = 'x-csp-nonce';
+
+/**
+ * Length (in bytes) of the random material used to derive each per-request CSP nonce.
+ *
+ * 16 bytes (128 bits) is the value recommended by the W3C CSP3 specification — large enough to
+ * make guessing infeasible while keeping the base64 representation short.
+ *
+ * @private function of middleware
+ */
+const CONTENT_SECURITY_POLICY_NONCE_BYTE_LENGTH = 16;
+
+/**
+ * Generates a fresh, single-use CSP nonce encoded as base64.
+ *
+ * @returns Cryptographically random nonce safe to inline into a CSP header.
+ *
+ * @private function of middleware
+ */
+export function generateContentSecurityPolicyNonce(): string {
+    const randomBytes = new Uint8Array(CONTENT_SECURITY_POLICY_NONCE_BYTE_LENGTH);
+    crypto.getRandomValues(randomBytes);
+
+    let binaryString = '';
+    for (const byte of randomBytes) {
+        binaryString += String.fromCharCode(byte);
+    }
+
+    // Note: `btoa` is available in the Next.js Edge runtime where this middleware executes.
+    return btoa(binaryString);
+}
+
+/**
+ * Builds the strict Content Security Policy header value for the given nonce.
+ *
+ * The policy locks down `script-src` to nonced inline scripts and scripts loaded by them
+ * (`'strict-dynamic'`). The legacy fallbacks (`'unsafe-inline'`, `http:`, `https:`) are ignored
+ * by modern browsers that honor the nonce, but keep the page functional in older browsers
+ * without weakening security in modern ones.
+ *
+ * @param nonce - Per-request CSP nonce.
+ * @returns Serialized CSP header value.
+ *
+ * @private function of middleware
+ */
+function buildContentSecurityPolicyHeaderValue(nonce: string): string {
+    const directives = [
+        `script-src 'nonce-${nonce}' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http:`,
+        `object-src 'none'`,
+        `base-uri 'self'`,
+    ];
+
+    return directives.join('; ');
+}
+
+/**
+ * Adds the CSP nonce headers to the forwarded request so server components and the Next.js
+ * runtime can detect the nonce and apply it to their own inline scripts.
+ *
+ * @param requestHeaders - Mutable headers object that is forwarded to the route handler.
+ * @param nonce - Per-request CSP nonce.
+ *
+ * @private function of middleware
+ */
+export function applyContentSecurityPolicyToRequestHeaders(requestHeaders: Headers, nonce: string): void {
+    requestHeaders.set(CONTENT_SECURITY_POLICY_NONCE_REQUEST_HEADER, nonce);
+
+    // Note: Next.js detects the nonce automatically when the CSP is also present on the
+    //       forwarded request headers — see https://nextjs.org/docs/app/guides/content-security-policy
+    requestHeaders.set('Content-Security-Policy', buildContentSecurityPolicyHeaderValue(nonce));
+}
+
+/**
+ * Adds the strict CSP response header so the browser enforces the nonced script policy.
+ *
+ * Helpers that add narrower directives (e.g. `applyEmbeddingHeader` with `frame-ancestors`)
+ * must `append` a separate CSP header rather than `set` so the strict `script-src` policy is
+ * preserved.
+ *
+ * @param response - Outgoing response.
+ * @param nonce - Per-request CSP nonce.
+ *
+ * @private function of middleware
+ */
+export function applyContentSecurityPolicyHeader(response: NextResponse, nonce: string): void {
+    response.headers.set('Content-Security-Policy', buildContentSecurityPolicyHeaderValue(nonce));
+}

package/esm/index.es.js

@@ -58,7 +58,7 @@ const BOOK_LANGUAGE_VERSION = '2.0.0';
  * @generated
  * @see https://github.com/webgptorg/promptbook
  */
-const PROMPTBOOK_ENGINE_VERSION = '0.112.0-130';
+const PROMPTBOOK_ENGINE_VERSION = '0.112.0-132';
 /**
  * TODO: string_promptbook_version should be constrained to the all versions of Promptbook engine
  * Note: [💞] Ignore a discrepancy between file name and entity name

package/esm/src/version.d.ts

@@ -15,7 +15,7 @@ export declare const BOOK_LANGUAGE_VERSION: string_semantic_version;
 export declare const PROMPTBOOK_ENGINE_VERSION: string_promptbook_version;
 /**
  * Represents the version string of the Promptbook engine.
- * It follows semantic versioning (e.g., `0.112.0-128`).
+ * It follows semantic versioning (e.g., `0.112.0-131`).
  *
  * @generated
  */

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@promptbook/cli",
-    "version": "0.112.0-130",
+    "version": "0.112.0-132",
     "description": "Promptbook: Create persistent AI agents that turn your company's scattered knowledge into action",
     "private": false,
     "sideEffects": false,