Monorepo for Aesthetic.Computer
aesthetic.computer
menuband landing: 'Recent changes' section + path-filtered /api/version
- Adds a Recent Changes panel under What's New that fetches the last
10 commits touching slab/menuband and renders them as terse
hash + message rows. Each hash links to the commit on Tangled.
- /api/version now accepts an optional ?path= query (sandboxed via a
conservative allowlist regex) and pipes it into git log so callers
can scope the recent-commits ticker to a subtree. Other consumers
(prompt.mjs curtain UI, etc.) keep their unscoped behavior.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
+110
-4
+20
-4
system/netlify/functions/version.mjs
+20
-4
system/netlify/functions/version.mjs
···
93
93
return remotes[0] || "origin";
94
94
}
95
95
96
-
async function getLatestFromTangled(repoRoot, deployedCommit) {
96
+
async function getLatestFromTangled(repoRoot, deployedCommit, pathFilter) {
97
97
const gitRemote = await getPreferredRemote(repoRoot);
98
98
await git(["fetch", "--quiet", gitRemote, GIT_BRANCH], repoRoot);
99
99
···
111
111
}
112
112
}
113
113
114
-
const recentRaw = await git([
114
+
// Optional path filter: callers can ask for "only commits that
115
+
// touched <path>", e.g. ?path=slab/menuband for the Menu Band landing
116
+
// page's recent-changes section. Validated against a conservative
117
+
// allowlist so we never invoke `git log -- <user-controlled-path>`
118
+
// with characters that could escape into git's argument grammar.
119
+
const logArgs = [
115
120
"log",
116
121
remoteRef,
117
122
`--max-count=${RECENT_COMMIT_COUNT}`,
118
123
"--pretty=format:%H\t%s\t%an\t%cI",
119
-
], repoRoot);
124
+
];
125
+
if (pathFilter) {
126
+
logArgs.push("--", pathFilter);
127
+
}
128
+
const recentRaw = await git(logArgs, repoRoot);
120
129
121
130
return {
122
131
latestCommit,
···
157
166
const deployedCommit = await getDeployedCommit(repoRoot);
158
167
const url = new URL(request.url);
159
168
const clientHash = url.searchParams.get("current");
169
+
const rawPath = url.searchParams.get("path") || "";
170
+
// Conservative allowlist: alphanumerics, dot, slash, dash, underscore.
171
+
// This blocks shell metacharacters and `--` injection so a malicious
172
+
// ?path= value can't slip a flag into the `git log` invocation.
173
+
const pathFilter = /^[A-Za-z0-9._\/-]{1,128}$/.test(rawPath) && !rawPath.startsWith("-")
174
+
? rawPath
175
+
: "";
160
176
161
177
// Long-poll mode: if client sends ?current=<hash> matching deployed version,
162
178
// wait ~4 seconds before responding (allows near-instant new-deploy detection)
···
181
197
behindBy,
182
198
recentCommits,
183
199
} = repoRoot
184
-
? await getLatestFromTangled(repoRoot, deployedCommit)
200
+
? await getLatestFromTangled(repoRoot, deployedCommit, pathFilter)
185
201
: await getLatestFromTangledMirror(deployedCommit);
186
202
187
203
const status = behindBy === 0 ? "current" : "behind";