From e3a9513ac5e6f5b54e11417944cbd3539629b82b Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Wed, 11 Nov 2026 08:22:47 +0000 Subject: [PATCH 1/2] feat: WebMCP site tools via @profullstack/webmcp Page head embed: site_info and open_page (home, commands, blog). CSP script-src names cdn.jsdelivr.net. Co-Authored-By: Claude Opus 5.5 --- src/server.mjs | 2 +- src/site.mjs | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/server.mjs b/src/server.mjs index 7498fe8..bf734ea 100644 --- a/src/server.mjs +++ b/src/server.mjs @@ -72,7 +72,7 @@ export function createApp({ crawlGate = createCrawlGate() } = {}) { 'Referrer-Policy': 'strict-origin-when-cross-origin', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'Content-Security-Policy': - `default-src 'self'; script-src 'self' https://crawlproof.com; style-src 'self' 'nonce-${res.locals.nonce}'; img-src 'self' data: https://built.indie.pit.world https://pwamart.com; font-src 'self'; connect-src 'self' https://crawlproof.com; frame-src https://crawlproof.com; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'`, + `default-src 'self'; script-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; style-src 'self' 'nonce-${res.locals.nonce}'; img-src 'self' data: https://built.indie.pit.world https://pwamart.com; font-src 'self'; connect-src 'self' https://crawlproof.com; frame-src https://crawlproof.com; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'`, 'Permissions-Policy': 'camera=(), microphone=(), geolocation=(), interest-cohort=()', }); next(); diff --git a/src/site.mjs b/src/site.mjs index 0d9fa0d..95d4ea4 100644 --- a/src/site.mjs +++ b/src/site.mjs @@ -72,6 +72,7 @@ export function head({ title, description, path, extraHead = '' }) { + ${extraHead} From 676fccc67cd02f64292654efcf8e93810ba5b10a Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Wed, 11 Nov 2026 08:24:16 +0000 Subject: [PATCH 2/2] chore: resync data/commands.json with the CLI (CI check was red on main) Co-Authored-By: Claude Opus 5.5 --- data/commands.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/commands.json b/data/commands.json index 1ac4828..991d4a8 100644 --- a/data/commands.json +++ b/data/commands.json @@ -211,7 +211,7 @@ "name": "name", "aliases": [], "group": "hosting", - "summary": "prove you hold a Moshpit name, so an app can use it as your identity" + "summary": "prove you hold a Moshpit name, or serve it from a c0mpute site" }, { "name": "doh",