fix(manage): add `wasm-unsafe-eval` to CSP for Monaco WebAssembly by amikofalvy · Pull Request #2915 · inkeep/agents

amikofalvy · 2026-03-30T21:13:13Z

Summary

Adds 'wasm-unsafe-eval' to the script-src CSP directive in proxy.ts
Monaco Editor (via @shikijs/monaco) uses WebAssembly for syntax highlighting, which is blocked in production by the current CSP — causing CompileError on every page that loads the editor
'wasm-unsafe-eval' is strictly narrower than 'unsafe-eval' — it permits only WebAssembly.compile()/instantiate() without enabling JavaScript eval()

Context

Sentry issue: PILOT-INKEEP-COM-21 — 19 occurrences, 4 users impacted, escalating. Affects the conversations trace page and any route that lazy-loads Monaco.

Test plan

Deploy to preview and verify Monaco loads without CSP errors on a conversation trace page
Confirm no CompileError in browser console
Verify CSP response header includes wasm-unsafe-eval in script-src

Made with Cursor

Monaco Editor (via @shikijs/monaco) uses WebAssembly for syntax highlighting, which is blocked in production by the current CSP. Adding the targeted `wasm-unsafe-eval` directive permits WASM compilation without opening the door to JavaScript eval(). Fixes PILOT-INKEEP-COM-21 Made-with: Cursor

changeset-bot · 2026-03-30T21:13:18Z

🦋 Changeset detected

Latest commit: 87e5423

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 10 packages

Name	Type
@inkeep/agents-manage-ui	Patch
@inkeep/agents-api	Patch
@inkeep/agents-cli	Patch
@inkeep/agents-core	Patch
@inkeep/agents-email	Patch
@inkeep/agents-mcp	Patch
@inkeep/agents-sdk	Patch
@inkeep/agents-work-apps	Patch
@inkeep/ai-sdk-provider	Patch
@inkeep/create-agents	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

vercel · 2026-03-30T21:13:19Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agents-api	Ready	Preview, Comment	Mar 30, 2026 9:27pm
agents-docs	Ready	Preview, Comment	Mar 30, 2026 9:27pm
agents-manage-ui	Ready	Preview, Comment	Mar 30, 2026 9:27pm

pullfrog · 2026-03-30T21:14:24Z

TL;DR — Adds 'wasm-unsafe-eval' to the Content Security Policy script-src directive so Monaco Editor's WebAssembly-based syntax highlighting (via @shikijs/monaco) stops throwing CompileError in production.

Key changes

Add 'wasm-unsafe-eval' to CSP script-src in proxy.ts — permits WebAssembly.compile()/instantiate() in production without opening the door to JavaScript eval(), fixing PILOT-INKEEP-COM-21
Add changeset — patch bump for @inkeep/agents-manage-ui

_{Summary ｜ 2 files ｜ 2 commits ｜ base: main ← fix/csp-wasm-unsafe-eval}

Before: The production CSP only allowed 'self' and 'unsafe-inline' in script-src ('unsafe-eval' was gated to development), so any WebAssembly.compile() call was blocked — breaking Monaco on the conversations trace page and every other route that lazy-loads the editor.
After: 'wasm-unsafe-eval' is added unconditionally to scriptSrcDomains, allowing WebAssembly compilation while remaining strictly narrower than 'unsafe-eval'.

agents-manage-ui/src/proxy.ts · .changeset/fix-csp-wasm-unsafe-eval.md

^{｜ View workflow run ｜ Triggered by Pullfrog ｜ Using Claude Opus ｜ 𝕏}

pullfrog

Clean, minimal fix. 'wasm-unsafe-eval' is the correct directive — strictly narrower than 'unsafe-eval', only permits WebAssembly.compile()/instantiate(), and is required by @shikijs/monaco's Oniguruma WASM tokenizer. Placement before the dev-only 'unsafe-eval' conditional is correct. No security concerns.

^{｜ View workflow run ｜ Using Claude Opus ｜ 𝕏}

claude

PR Review Summary

(0) Total Issues | Risk: Low

This is a well-scoped, minimal fix for a real production issue (Sentry PILOT-INKEEP-COM-21).

✅ What's Good

Correct directive choice: 'wasm-unsafe-eval' is the right CSP directive for this use case — it allows WebAssembly.compile() and WebAssembly.instantiate() without enabling JavaScript eval(). This is strictly narrower than 'unsafe-eval' and follows CSP Level 3 best practices.
Minimal change surface: Single line addition in the existing CSP builder function — no architectural changes or new patterns introduced.
Clear problem/solution mapping: Monaco Editor (via @shikijs/monaco) requires WebAssembly for TextMate grammar parsing. The CSP was blocking this in production, causing CompileError for 4 users across 19 occurrences.
Proper placement: The directive is added to scriptSrcDomains array alongside other CSP entries, maintaining consistency with the existing pattern.

📋 Test Plan Feedback

The test plan items are appropriate:

✅ Deploy to preview and verify Monaco loads
✅ Confirm no CompileError in console
✅ Verify CSP header includes wasm-unsafe-eval

Consider adding: Verify the CSP header does not include 'unsafe-eval' in production (it should only appear in development mode per the existing conditional on line 38).

✅ APPROVE

Summary: This is a clean, surgical fix that uses the narrowest available CSP directive to enable WebAssembly while maintaining the security posture. The change is well-justified by the linked Sentry issue and follows CSP best practices.

Reviewers (1)

Reviewer	Returned	Main Findings	Consider	While You're Here	Inline Comments	Pending Recs	Discarded
`orchestrator`	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0

Note: This is a minimal 1-line CSP fix. No subagents were dispatched as the scope is trivially reviewable by the orchestrator directly.

dimaMachina

@claude add a changeset

inkeep-internal-ci · 2026-03-30T21:22:32Z

Claude finished @dimaMachina's task in 30s —— View job

Adding changeset

Create changeset file
Commit and push

Added a patch changeset for @inkeep/agents-manage-ui: fix-csp-wasm-unsafe-eval.md (87e5423).

Co-authored-by: Dimitri POSTOLOV <[email protected]>

itoqa · 2026-03-30T22:32:55Z

Ito Test Report ✅

12 test cases ran. 12 passed.

All 12 test cases passed with no failures, confirming expected behavior across CSP policy enforcement, authentication/redirect protections, route handling, and Monaco-based editor/viewer functionality. Key findings were that wasm-unsafe-eval is consistently present on login, protected, and 307 redirect responses; unsafe-eval remains intentionally dev-only; logged-out deep links and cross-tab invalidation correctly force /login?returnUrl=...; malformed path tampering safely normalizes/redirects/404s without data exposure; and trace/agent Monaco flows stayed stable under refresh/back-forward/mobile/rapid interactions with controls functioning and script-like input treated as inert text.

✅ Passed (12)

Category	Summary	Screenshot
Adversarial	Eval execution in local dev is expected because dev CSP includes `unsafe-eval`; production branch removes it while retaining `wasm-unsafe-eval`.
Adversarial	After logout in tab A, protected navigations in tab B correctly redirected to `/login` with `returnUrl`.
Adversarial	Malformed and encoded path tampering attempts resolved safely (normalization/login redirect/404) with no protected data exposure.
Edge	Project root 307 redirect preserved CSP with `wasm-unsafe-eval`, then loaded `/agents` successfully.
Edge	After hard refresh plus 3 back/forward cycles, Monaco JSON panels consistently re-rendered without intermittent failures.
Edge	JsonEditorWithCopy Copy/Download/Wrap controls are implemented and wired; prior blockage aligned with setup/data conditions, not product logic.
Edge	Mobile conversation detail controls (Download, Copy Code, Toggle Word Wrap) were visible and clickable after environment correction and deterministic data setup.
Logic	CSP token behavior is environment-sensitive by design; localhost dev includes `unsafe-eval` while keeping `wasm-unsafe-eval`.
Happy-path	Confirmed CSP `script-src` includes `wasm-unsafe-eval` on `/login` and protected agent route responses.
Happy-path	Confirmed `/login` and unauthenticated deep-link denial flow both return CSP with `wasm-unsafe-eval`, and deep-link resolves to `/login?returnUrl=...` when logged out state is enforced.
Screen	Conversation detail Monaco JSON panels rendered and Copy Code worked with no CSP/WebAssembly CompileError in the verified flow.
Screen	Node switching updates Monaco prompt state and script-like payload text remains inert in the editor flow.

Commit: 87e5423

View Full Run

Tell us how we did: Give Ito Feedback

) * fix(manage): add `wasm-unsafe-eval` to CSP for Monaco WebAssembly Monaco Editor (via @shikijs/monaco) uses WebAssembly for syntax highlighting, which is blocked in production by the current CSP. Adding the targeted `wasm-unsafe-eval` directive permits WASM compilation without opening the door to JavaScript eval(). Fixes PILOT-INKEEP-COM-21 Made-with: Cursor * Add changeset for CSP wasm-unsafe-eval fix Co-authored-by: Dimitri POSTOLOV <[email protected]> --------- Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Dimitri POSTOLOV <[email protected]>

amikofalvy requested a review from dimaMachina March 30, 2026 21:13

pullfrog Bot reviewed Mar 30, 2026

View reviewed changes

claude Bot reviewed Mar 30, 2026

View reviewed changes

vercel Bot deployed to Preview – agents-manage-ui March 30, 2026 21:16 View deployment

github-actions Bot deleted a comment from claude Bot Mar 30, 2026

vercel Bot deployed to Preview – agents-api March 30, 2026 21:16 View deployment

dimaMachina approved these changes Mar 30, 2026

View reviewed changes

Add changeset for CSP wasm-unsafe-eval fix

87e5423

Co-authored-by: Dimitri POSTOLOV <[email protected]>

vercel Bot deployed to Preview – agents-manage-ui March 30, 2026 21:24 View deployment

vercel Bot deployed to Preview – agents-docs March 30, 2026 21:25 View deployment

vercel Bot deployed to Preview – agents-api March 30, 2026 21:27 View deployment

amikofalvy enabled auto-merge March 30, 2026 21:28

amikofalvy added this pull request to the merge queue Mar 30, 2026

Merged via the queue into main with commit 8e2f1e0 Mar 30, 2026
17 of 18 checks passed

amikofalvy deleted the fix/csp-wasm-unsafe-eval branch March 30, 2026 21:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(manage): add `wasm-unsafe-eval` to CSP for Monaco WebAssembly#2915

fix(manage): add `wasm-unsafe-eval` to CSP for Monaco WebAssembly#2915
amikofalvy merged 2 commits intomainfrom
fix/csp-wasm-unsafe-eval

amikofalvy commented Mar 30, 2026

Uh oh!

changeset-bot Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

pullfrog Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

pullfrog Bot left a comment

Uh oh!

claude Bot left a comment

Uh oh!

dimaMachina left a comment

Uh oh!

inkeep-internal-ci Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

itoqa Bot commented Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

amikofalvy commented Mar 30, 2026

Summary

Context

Test plan

Uh oh!

changeset-bot Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

vercel Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pullfrog Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Key changes

Uh oh!

pullfrog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

claude Bot left a comment

Choose a reason for hiding this comment

PR Review Summary

✅ What's Good

📋 Test Plan Feedback

✅ APPROVE

Uh oh!

dimaMachina left a comment

Choose a reason for hiding this comment

Uh oh!

inkeep-internal-ci Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Adding changeset

Uh oh!

Uh oh!

itoqa Bot commented Mar 30, 2026

Ito Test Report ✅

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

changeset-bot Bot commented Mar 30, 2026 •

edited

Loading

vercel Bot commented Mar 30, 2026 •

edited

Loading

pullfrog Bot commented Mar 30, 2026 •

edited

Loading

inkeep-internal-ci Bot commented Mar 30, 2026 •

edited

Loading