[williamloo-scale]

Stacked on #428.

packages/agentenv-protocol/examples/website/notes/: a reference site on WebsiteEnvironment, about 130 lines of Python plus a small Vite page.

• Per-user notes stamped with self.now(), auto sign-in as the acting user, and /api/admin/notes with roles=["admin"] (403 otherwise).
• The page uses relative URLs, so it works under the gateway's /website/notes/ route. A refresh keeps text typed into a note that isn't saved yet, with its focus and cursor, and the page's clock re-reads X-Universe-Now every 5 seconds, so a stopped or faster universe clock shows.
• One image: a node stage builds the page, a python stage serves it with the API on PORT, with curl for the compose health check. env.toml declares it as the server image.

Test

Unit suite and protocol tests: 12,667 passed, lint clean.

• test_website_notes_example.py: 8 passed.
• Built and ran the image: healthy, and python -m agentenv_protocol.website.conformance http://localhost:18080 --clock-host host.docker.internal passed 8/8. Pages, session, notes and the admin route checked by curl.
• In Chromium against the site: with a title's save delayed, text typed into the body stays focused through the refresh and is saved, one save per edit.
• Registered with agent-env env website put --server-dockerfile ... --health-path /healthz against local stores only.

🤖 Generated with Claude Code

Confidence Score: 5/5

The PR appears safe to merge with the noted dependency on PR #443.

Summary

Adds a Notes reference site with per-user notes, an admin-only route, a Vite page, and one server image.

• The Notes server keeps notes with their owners and universe timestamps.
• The Notes page keeps drafts and shows the environment's clock.
• One container image serves the Notes page and API together.

_{Reviews (15) · Last reviewed commit: "fix(website): the Notes page keeps unsav..." · Reviewed by Greptile}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​vite@​5.4.10

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Priority	Alert  (click "▶" to expand/collapse)	Action
	High CVE: launch-editor: fs.existsSync() existence check can be bypassed on Windows in npm `vite` CVE: GHSA-587h-7wmj-h5pm launch-editor: fs.existsSync() existence check can be bypassed on Windows (HIGH) Affected versions: >= 8.3.0 < 8.3.3; >= 8.2.0 < 8.2.4; >= 8.0.0 < 8.1.6; >= 7.0.0 < 7.3.7; < 6.4.4 Patched version: 6.4.4 From: packages/agentenv-protocol/examples/website/notes/web/package-lock.json → npm/vite@5.4.10 ℹ Read more on: This package | This alert | What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vite@5.4.10. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn

View full report

[williamloo-scale]

@greptile-apps the three findings from the last review are fixed in b055f91:

• Filters discard failed edits (main.js): unsaved edits now live in a drafts map keyed by note and field, not only in the inputs. Each render rebuilds a note's fields from its draft, so an edit whose PATCH failed survives a filter that hides the note. A successful save clears the fields it sent.
• Notes links can leave (index.html): the trailing-slash reload builds its address from new URL(location.href) and changes only pathname, so it can't leave the page's origin. //evil.example/page reloads on the same host. The new-site template in feat(website): the browser client, env website new and env website dev (FD-4683) #446 gets the same line.
• Saved titles keep saving (main.js): a render restores only the focused field's focus and selection, and takes each value from the note or its draft. Once a save succeeds, the server's trimmed title is shown and isn't sent again. An edit typed after the submission is kept.

Each fix was checked in a browser against a built Notes site: with a failing PATCH, against //evil.example/page and /%2F%2Fevil.example/page, and against a padded title. The full unit suite passes on this commit (12,915) and lint is clean. All three threads are replied to and resolved.

[greptile-apps]

Confirmed: the changes in b055f918 address all three findings. Failed edits remain in drafts across filter renders, the trailing-slash redirect retains the current origin, and accepted saves clear only the submitted draft values so server-normalized titles display without losing newer edits. The reported browser and test checks are consistent with the updated flow.