New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@casual-simulation/causal-tree-client-socketio

Package Overview
Dependencies
Maintainers
2
Versions
105
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@casual-simulation/causal-tree-client-socketio - npm Package Versions

1
911

0.9.17

Diff

Changelog

Source

V0.9.17

Date: 07/25/2019

Changes:

  • Improvements
    • Added the ability to execute remote events on the server.
      • This lets us do all sorts of administrative tasks while keeping things secure.
      • These events are sent via scripts.
      • Depending on the action, it may only be possible to execute them in the correct channel. For example, executing admin tasks is only allowed in the admin channel to help prevent things like clickjacking.
      • The following functions are supported:
        • Admin channel only
          • server.grantRole(username, role): Grants the given role to the user account with the given username if the current player is an admin.
          • server.revokeRole(username, role): Revokes the given role from the user account with the given username if the current player is an admin.
          • server.shell(script): Runs the given shell script on the server if the current player is an admin.
    • Improved the login system to dynamically update based on changes to the admin channel.
      • This lets us do things like lock user accounts or tokens and have the system automatically handle it.
      • It even supports formulas!
      • The login system uses the following tags on bots in the admin channel:
        • aux.account.username: This tag indicates that the bot is a "user account" bot for the given username.
        • aux.account.roles: This tag indicates which roles an account should be granted.
        • aux.account.locked: This tag indicates whether the account is locked and that logging in using it should not be allowed.
        • aux.token: This tag indicates that the bot is a "token" which can be used to login to a user account.
        • aux.token.username: This tag indicates the username of the user account that the token is for.
        • aux.token.locked: This tag indicates whether the token is locked and therefore cannot be used to login to the account.
    • Improved the login system to automatically give guests the guest role.
      • This allows blocking guests via the aux.blacklist.roles tag on the channel config file.
    • Improved the channel system to only allow loading a channel if it has been created via a bot in the admin channel.
      • This lets admins control which channels are accessible.
      • The admin channel is always accessible, but only to admins. This is a safety measure to prevent people from locking themselves out.
      • To make a channel accessible, load the admin channel and create a bot with aux.channel set to the channel you want and aux.channels set to true.
      • Alternatively, load the channel you want and click the Create Channel toast that pops up. (only works if you're an admin)
    • Added the ability to view and control how many sessions are allowed.
      • Allows setting a max sessions allowed value for channels and the entire server.
      • Per-Channel settings go on the channel file in the admin channel.
        • The aux.channel.connectedSessions tag indicates how many sessions are active for the channel.
        • The aux.channel.maxSessionsAllowed tag specifies how many sessions are allowed for the channel. Admins are not affected by this setting. If this value is not set then there is no limit.
      • Global settings go on the config file in the admin channel.
        • The aux.connectedSessions tag indicates how many sessions are active for the server.
        • The aux.maxSessionsAllowed tag specifies how many sessions are allowed for the entire server. Admins are not affected by this setting. If this value is not set then there is no limit.
    • Added the ability to query the status information from the server.
      • Requests to /api/{channelId}/status will return a JSON object containing the current number of active connections for the channel.
      • Requests to /api/status will return a JSON object containing the current number of active connections for the server.
    • Changed aux.inventory.color tag to aux.context.inventory.color, and allowed the editing of the invenroty color to be done in the context bot's tags.
    • Added an aux.context.inventory.visible tag to toggle the player inventory on and off, it will default to visible.
    • Reduced width of player inventory and added a left alligned line to it's left side.
    • Gave the player inventory the ability to be set by a user set inventory context tag.
    • Added a width maximum to the player inventory.
    • Added in the onAnyBotClicked() function to fire an event when any bot in the scene has been clicked.
  • Bug Fixes
    • The player's background context color can now be set via fomula.
    • Fixed scripts to remove deleted files from queries like getBots() or getBot().
    • Fixed the login screen to hide the loading progress when the user needs to scan the token from their other device.
    • Improved the JavaScript sandbox to prevent common infinite loops.
      • Loops in JavaScript code now have an energy cost of 1 per iteration.
      • By default, each formula/action has an energy of 100,000.
      • Shouts get their own energy value set at 100,000. (for now - so it's still possible to get around the energy limit by shouting back and forth)
      • Exceeding the energy limit causes the formula/action to be terminated so that the application doesn't get locked up.
    • Corrected misspelled tag name in the tag dropdown list.
    • Fixed positioning issue with setting aux.label.anchor via an interaction.
kallyngowdyyeti
published 0.9.14 •

Changelog

Source

V0.9.14

Date: 07/17/2019

Changes:

  • Improvements
    • Added a login system
      • Users are first-come first-serve.
        • Upon login your device will generate a token that is used to authenticate the device for that user account.
          • Because this token is unique and secret you must use the new "Login with Another Device" feature in the side menu.
          • This will show a QR code that can be scanned after trying to login with the same username.
        • Users can be granted roles via their bot in the admin channel.
          • These roles can be used to allow or deny access to channels.
          • Users that have the admin role are allowed access to every channel. (and bypass the blacklist and whitelist)
      • The server now decides if a user is able to load an aux.
        • This means that the server checks aux.blacklist and aux.whitelist before sending the data.
        • The following tags have been added to check whether a user is allowed access based on their roles.
          • aux.whitelist.roles: Specifies the list of roles that users must have all of in order to access the channel.
          • aux.blacklist.roles: Specifies the list of roles that users must not have any of in order to access the channel.
        • By default, the admin channel is set to allow only users with the admin role.
    • The login screen now remembers which users you have logged in with previously.
      • Because tokens are saved on the device it is important to save users and only remove them if explicitly requested by the user.
    • The aux.line.style tag's wall settting will now dynamically scale with bot height and bot stacking.
    • The inventory viewport now no longer accepts panning input, it will now only zoom and rotate.
    • Added in an aux.line.style tag that changes the design of the aux.line.to line.
    • Added in a resize sheets button to set sheet's to full page width at all times.
    • Added in an aux.line.width tag that changes the width of the aux.line.to but only the wall style for now.
    • Resize the sheets button is now on the far left of the sheets buttons.
    • Added a new Make mod from selection button to the sheet's buttons.
    • Clicking off of the sheets will now always revert the selected item to an empty bot.
    • Clicking the enter key on a selected tag will automatically open up the new tag input section.
    • Clicking the escape key when the new tag input section is up will close the input section.
    • The new tag input section will now be left alligned in the sheets.
    • The tag section buttons will now appear below the bot content in the sheets.
    • Moved the sheet's Toggle Size button to the right side of the sheet.
  • Bug Fixes
    • Fixed create() to dissallow overriding aux.creator when a creator is specified.
    • The center button will no longer effect the rotation in channel designer's viewport.
    • 'Enable AR' button no longer shows up in iOS Chrome which is currently unsupported.
    • Fixed AR rendering for both AUX Designer and AUX Player.
    • Fixed the login page to redirect to Channel Designer if the user refreshes the page while on the login screen.
    • Fixed an issue that would cause player.currentContext() to be undefined if it was accessed inside onConnected().
    • Fixed the link to the aux-debug page in Channel Designer.
    • Fixed an issue where formulas which had circular dependencies would cause other tags referencing the circular tag to not update.
    • Fixed the parsing logic for filter tags to support curly quotes. (a.k.a. "Smart Quotes" that the iOS keyboard makes)
    • Adding a new tag to a bot will now automatically focus the new tag whereas before it would not focus it.
    • Fixed the file table to not interrupt the user's typing when tag value updates are processed.
  • Security Fixes
    • Updated the lodash NPM package to 4.17.14 to mitigate CVE-2018-16487.
kallyngowdyyeti
published 0.9.12 •

Changelog

Source

V0.9.12

Date: 07/09/2019

Changes:

  • Improvements
    • Added a rotation option to player.tweenTo, users can now define an x and y rotation to define which way the camera views the bot.
    • New context popup opens withaux.context.locked set to false and the text has been change to Lock Context.
    • Changed aux.mod.tags to aux.mod.mergeTags.
    • Renamed aux.movable="mod" to aux.movable="cloneMod".
    • isDiff function no longer checks for aux.mod.mergeTags when determining weather a bot is a diff or not.
    • Added the aux.listening tag to disable, a bot will accept shouts or whispers if this tage is set to true but ignore them it aux.listening is set to false.
    • Removed the context_ prefix of the default generated name of new contexts.
  • Bug Fixes
    • The cube that appears on empty bot will now be properly sized.
    • The center inventory button will now appear when intended.
    • Fixed typo on the Requesting site ID text.
    • First entered letter on a new bot's label not appearing had been resolved.
    • The function onCombine should not trigger when dragging on a stack of bots but a warning message explaining this has been added it this is attempted.
    • Dragging the inventory top to change its size will no longer cause the Google Chrome mobile app to refresh the page.
    • Added in a tween override when user attempts input during a tween that will stop the tween immediately.
kallyngowdyyeti
published 0.9.8 •

Changelog

Source

V0.9.8

Date: 06/28/2019

Changes:

  • Improvements
    • Can now click on and drag multiple files at a time, one for each VR controller.
  • Bug Fixes
    • Fixed loading on Firefox browsers.
      • Added special case for Firefox browsers to ignore the use of browser crypto since it seems to cause errors despite it being supported.
    • Always render VR controllers, even if they are not in view of the camera.
      • This makes sure that you can still see controller pointer lines and cursors even if you are holding the controller out of view.
    • Fixed loading on Safari by allowing the sandboxed iframe to do more than it should be able to.
      • Related Bug: https://bugs.webkit.org/show_bug.cgi?id=170075
kallyngowdyyeti
published 0.9.7 •

Changelog

Source

V0.9.7

Date: 06/28/2019

Changes:

  • Bug Fixes
    • Inventory camera updates properly again in AUXPlayer.
    • Added some basic regex URL validation to aux.iframe tag.
kallyngowdyyeti
published 0.9.6 •

Changelog

Source

V0.9.6

Date: 06/28/2019

Changes:

  • Breaking Changes
    • Removed @ and # expressions.
      • This means that @id and #id will no longer work.
      • Instead, use getBots("#id") and getBotTagValues("#id").
  • Improvements
    • The inventory now begins with a top down view.
    • The center viewport button will now set the rotation to be top down.
    • Inventory now begins with an increased zoom value.
    • Manually control when we submit the frame to the VRDisplay
      • This allows us to be able to do multiple rendering passes on the WebGL canvas and have them all appear in VR correctly.
      • Before this fix, any elements that were rendered onto the WebGL canvas after the first pass were absent from VR. This was because the THREE.WebGLRenderer prematurely submitted the frame to the VRDisplay. This was a problem because it appears that the WebVR API ignores subsequent calls to the VRDisplay.submitFrame function until the current frame has passed.
    • Added the hasTag function to allow users to check if the file has a specific tag on it.
    • Moved formula calculations to a background thread.
      • This helps get a more consistent framerate by running formulas in the background while the scene is rendering.
      • As a result, the window global variable will not be available formulas.
        • This means formulas like window.alert() or window.location or window.navigator.vibrate() will not work anymore.
        • This also means that channels are more secure since you should no longer be able to write a formula that directly modifies bots in another channel. (no crossing the streams)
      • The new system works by tracking dependencies between formulas.
        • It looks for calls to getTag(), getBot(), getBots() and getBotTagValues() to track dependencies.
        • It is fairly limited and does not yet support using variables for tag names. So getTag(this, myVar) won't work. But getTag(this, "#tag") will work.
        • There are probably bugs.
      • Additional improvements include showing the error message produced from a formula.
        • If the formula throws an error then it will show up instead of the formula text.
        • The UI has not been updated so you cannot scroll to read the full error message.
    • Improved line performance.
    • Improved label positioning to be more consistent.
    • Improved users to share inventories, menus, and simulations when they are logged in with the same username.
    • Old inactive users will now be deleted automatically to keep the data model clear of unused users.
      • This only affects bots that have the aux._user tag set.
    • Improved our usage of Vue.js to prevent it from crawling the entire game tree to setup property listeners.
      • This reduces rendering overhead significantly.
    • Changed the size of the inventory's dragging bar.
  • Bug Fixes
    • Fixed rendering warning that was caused by aux.line.to if the line was too short.
    • The context will now no longer allow for bot placement if it is not being visualized.
    • The bot's label should now always appear on page reload.
    • The bot sheet should now no longer have an incorrect layout upon adding a new bot.
    • The config ID in sheets will now read as config and not confi.
    • Switching contexts in AUXPlayer will now add the old context to the browser history so you can use the back and forward buttons to go back and forth.
kallyngowdyyeti
published 0.9.1 •

Changelog

Source

V0.9.19

Date: 07/29/2019

Changes:

  • Improvements
    • Added the ability for shouts and whispers to return values.
      • shout() returns a list of results from every bot that ran a script for the shout ordered by bot ID.
      • whisper() returns a list of results from every bot that ran a script for the whisper ordered by the input bot array.
      • To return a value from a shout/whisper handler, use return statements. For example, to return 10 from a shout you would simply write return 10.
    • Changed the tag suggestion list to only show when there are tags that match the input.
    • Changed the create surface popup's header text to read: Create Context from Selection.
    • Added show surface checkbox to the create context popup.
    • Removed the text on the sheet's bottom left add tag button.
    • Added the phrase powered by CasualOS to bthe hamburger menu and loading popup.
    • Removed Unselect All from the sheets.
  • Bug Fixes
    • Fixed an issue that would let users load the admin channel because no file specified session limits for it.
    • Fixed an issue that would cause formulas which contained indexer expressions to fail.
    • Fixed the server to not overwrite broke Causal Trees.
    • Stopped incorrect empty tag warning when attempting to add in a new tag.
    • Fixed there not being a visible right bar on the player inventory.
    • Fixed dependency tracking for formulas which get bots by ID. (like getBots("id"))
kallyngowdyyeti
published 0.8.10 •

Changelog

Source

V0.8.10

Date: 06/07/2019

Changes:

  • Improvements
    • Change diff key word to merge or mergeBall.
      • EX: The tag function aux.diff has been changed to aux.mergeBall and aux.diffTags has been changed to aux.mergeBall.tags and the diff id tag value has been changed to merge.
kallyngowdyyeti
published 0.8.9 •

Changelog

Source

V0.8.9

Date: 06/06/2019

Changes:

  • Improvements
    • Changed diff.save and diff.load to diff.export and diff.import respectfully.
    • Changed function saveDiff to automatically include the loadDiff function within it to clean up the resulting output.
    • diff.save will now return a cleaner JSON than it was before.
  • Bug Fixes
    • Duplicate tags will now not show up in a closed tag section's tag count.
    • Stopped additon of extra whitespace on left side of screen when multi selecting too many files.
kallyngowdyyeti
published 0.8.0 •

Changelog

Source

V0.8.0

Date: 05/25/2019

Changes:

  • Improvements
    • Replaced 2D slot-based inventory with a full 3D inventory context view on the lower portion of the screen.
      • You can drag files seamlessly in and out of the inventory and current player context.
      • Inventory has seperate camera control from the player context.
      • Inventory is now unlimited in capacity as it is just another 3d context to place files in and take with you.
    • Added a tag section check for multiple action tags, will now compress them into the actions() section.
    • Add a docker-compose file for arm32 devices.
    • Add the ability to execute a formula and get file events out of it.
    • Add a play button to the search bar that executes the script.
  • Bug Fixes
    • Fixed ability to click on files with aux.shape set to sprite.
    • Hide the context menu on mobile when clicking the background with it open.
    • Refactored progress bars to be more performant.
    • Progress bars no longer interfere with input.
    • Allow queries to return values that are not null or empty strings.
    • Remove context menu on mobile when clicking on background.
    • Make users that are in AUX Player appear blue.
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc