agent-dag 1.33.57 → 1.33.59

package/dist/web/index.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>agents-deck</title>
     <link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Ctext y='84' font-size='84'%3E%E2%97%89%3C/text%3E%3C/svg%3E" />
-    <script type="module" crossorigin src="/assets/index-BMwi5hcI.js"></script>
+    <script type="module" crossorigin src="/assets/index-BQcrqBmU.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-CF2yG9oG.css">
   </head>
   <body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-dag",
-  "version": "1.33.57",
+  "version": "1.33.59",
   "description": "Live deck of Claude Code and Codex agents — watch parallel subagents fork, call tools, and return on one calm canvas. Also available as npx ccdeck and npx agent-dag.",
   "type": "module",
   "bin": {

package/src/server/index.mjs

@@ -1440,6 +1440,23 @@ function originMatchesHost(origin, host) {
   return fromOrigin !== "" && fromOrigin === fromHost;
 }
 
+// A request handler rejected. Two audiences, two different amounts of detail:
+// the operator, who needs the whole error — stack included — to find the bug,
+// and the HTTP client, which needs to know only that the request failed.
+//
+// They used to get the same string, on the theory that this server binds
+// 127.0.0.1 and its only client is the user's own tab. A DNS-rebound page
+// reaches a loopback server as same-origin and can read the body, and the
+// errors that land here carry absolute paths out of the user's home directory
+// — a failed rename of ~/.claude/settings.json, an ENOENT from an import. So
+// stderr keeps every byte and the response body carries none of it; nothing is
+// swallowed, it just stops travelling over the wire.
+export function sendInternalError(res, err, log = console.error) {
+  log("agents-deck: request handler failed:", err);
+  if (!res.headersSent) send(res, 500, { error: "internal error" });
+  else res.end();
+}
+
 async function tryListen(server, port, host) {
   return new Promise((res, rej) => {
     server.once("error", rej);
@@ -1479,17 +1496,7 @@ export async function startServer({ port = 4317, host = "127.0.0.1", persist = n
   // default for an unhandled rejection is to kill the process, which would
   // take the whole deck down — SSE stream, hook ingest and all — because one
   // background quota poll hit a network error. Answer the request instead.
-  const guard = (p, res) => Promise.resolve(p).catch(err => {
-    console.error("agents-deck: request handler failed:", err?.message ?? err);
-    // The message goes to the browser too. This server binds 127.0.0.1 and its
-    // only client is the user's own tab, so the usual reason to withhold it
-    // does not apply — while withholding it is how a ReferenceError in the
-    // import path spent a release looking like a rejected share.
-    if (!res.headersSent) {
-      send(res, 500, { error: "internal error", detail: String(err?.message ?? err).slice(0, 300) });
-    }
-    else res.end();
-  });
+  const guard = (p, res) => Promise.resolve(p).catch(err => sendInternalError(res, err));
 
   const server = createServer((req, res) => {
     const url = requestUrl(req.url);