agent-whiteboard 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/dist/server/app.js +3 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,7 @@
|
|
|
1
|
+
## 1.0.4 — 2026-08-04
|
|
2
|
+
|
|
3
|
+
Republish of 1.0.3 with a rebuilt dist/ — the previous publish shipped a stale pre-fix build that didn't include the CSP unsafe-eval fix.
|
|
4
|
+
|
|
1
5
|
## 1.0.3 — 2026-08-04
|
|
2
6
|
|
|
3
7
|
**Milestone v1.1.1 — Vega-Lite CSP `unsafe-eval` Fix (patch, Sprint 80) complete.** The live browser render path's Content-Security-Policy blocked Vega-Lite's client-side expression compiler, throwing a console error and breaking the "6 / 6 — Vega-Lite" and "7b — Vega-Lite (6 s)" showcase slides (B23 in `01`, F31 in `03`).
|
package/dist/server/app.js
CHANGED
|
@@ -25,7 +25,9 @@ export function isValidMermaid(payload) {
|
|
|
25
25
|
// because the self-contained HTML export embeds the full mermaid.js bundle
|
|
26
26
|
// and generated CSS inline (F17 in docs/03) — a nonce/hash scheme would be
|
|
27
27
|
// more restrictive but isn't worth the complexity for a backstop control.
|
|
28
|
-
|
|
28
|
+
// 'unsafe-eval' is required for Vega-Lite's client-side expression compiler
|
|
29
|
+
// (new Function(...) for scales/signals — B23/F31 in docs/01/03).
|
|
30
|
+
const CSP_HEADER = "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; " +
|
|
29
31
|
"img-src 'self' data:; connect-src 'self' ws: wss:; object-src 'none'; base-uri 'none'; " +
|
|
30
32
|
"frame-ancestors 'none'";
|
|
31
33
|
export function createApp(options = {}) {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "agent-whiteboard",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.4",
|
|
4
4
|
"description": "A domain-agnostic interactive whiteboard for AI teacher agents — render diagrams, math, charts, and HTML to a local browser tab via MCP tools.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|