8ae9bced24
Search view: read ?q from hash, call /api/search, group hits by kind with rank + space_id; sidebar filters for kinds and space_id; updates on Enter or filter change. Bumps package.json + server.js VERSION to 2.0.0-alpha.2 and pins the /health version assertion to match. CHANGELOG: full Plan 2 entry covering API surface, capability tiering, audit chain extension (approve/reject events), and the SPA shell. Security: adds safeHref() to dom.js and applies it everywhere an API-supplied URL becomes href / src (reference media block + reference source_url anchor + resource url anchor). javascript: and other non-http(s)/mailto schemes from agent-suggested content can no longer execute in the owner's browser. Plan 2 surface is feature-complete: 22/22 tasks landed, 185 tests across 43 files, SPA renders end-to-end including the suggest -> approve agent flow. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
29 lines
605 B
JSON
29 lines
605 B
JSON
{
|
|
"name": "void-server",
|
|
"version": "2.0.0-alpha.2",
|
|
"type": "module",
|
|
"private": true,
|
|
"scripts": {
|
|
"start": "node server.js",
|
|
"migrate": "node lib/db/migrate.js up",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"bcrypt": "^6.0.0",
|
|
"dompurify": "^3.4.7",
|
|
"dotenv": "^17.4.2",
|
|
"express": "^5.2.1",
|
|
"marked": "^18.0.4",
|
|
"pg": "^8.21.0",
|
|
"pino": "^10.3.1",
|
|
"pino-pretty": "^13.1.3",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"devDependencies": {
|
|
"@vitest/coverage-v8": "^4.1.7",
|
|
"supertest": "^7.2.2",
|
|
"vitest": "^4.1.7"
|
|
}
|
|
}
|