camstack 1.2.133 → 1.2.135

package/dist/cli.js

@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-G2NZEBWS.js");
+  await import("./launcher-CGCHY5QF.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-G2NZEBWS.js");
+  await import("./launcher-CGCHY5QF.js");
 }
 
 // src/commands/setup.ts

package/dist/{launcher-G2NZEBWS.js → launcher-CGCHY5QF.js}

@@ -416788,6 +416788,32 @@ var require_spa_mount = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/static/frame-policy.js
+var require_frame_policy = __commonJS({
+  "../../server/backend/dist/api/static/frame-policy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.FRAME_ANCESTORS_POLICY = void 0;
+    exports.isFramePolicyTarget = isFramePolicyTarget;
+    exports.registerFramePolicy = registerFramePolicy;
+    exports.FRAME_ANCESTORS_POLICY = "frame-ancestors 'self'";
+    var CSP_HEADER = "content-security-policy";
+    function isFramePolicyTarget(contentType) {
+      return typeof contentType === "string" && contentType.trim().toLowerCase().startsWith("text/html");
+    }
+    function registerFramePolicy(fastify) {
+      fastify.addHook("onSend", async (_request, reply, payload) => {
+        if (!isFramePolicyTarget(reply.getHeader("content-type")))
+          return payload;
+        if (reply.getHeader(CSP_HEADER) !== void 0)
+          return payload;
+        reply.header(CSP_HEADER, exports.FRAME_ANCESTORS_POLICY);
+        return payload;
+      });
+    }
+  }
+});
+
 // ../../server/backend/dist/boot/integration-id-backfill.js
 var require_integration_id_backfill = __commonJS({
   "../../server/backend/dist/boot/integration-id-backfill.js"(exports) {
@@ -432410,6 +432436,7 @@ var require_main4 = __commonJS({
     var precompressed_asset_js_1 = require_precompressed_asset();
     var spa_static_1 = require_spa_static();
     var spa_mount_1 = require_spa_mount();
+    var frame_policy_1 = require_frame_policy();
     var cap_providers_1 = require_cap_providers();
     var logging_settings_1 = require_logging_settings();
     var request_census_settings_1 = require_request_census_settings();
@@ -432561,6 +432588,7 @@ var require_main4 = __commonJS({
       app.enableCors();
       const fastify = app.getHttpAdapter().getInstance();
       await fastify.register(cookie_1.default);
+      (0, frame_policy_1.registerFramePolicy)(fastify);
       fastify.addHook("onRequest", async (request) => {
         (0, sse_no_compression_js_1.markSseRequestNoCompression)(request);
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.133",
+  "version": "1.2.135",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",