@jrpool/kilotest 35.1.0 → 36.1.0

package/SERVICE.md

@@ -196,22 +196,52 @@ The Caddy configuration is maintained and tracked in `/etc/caddy/Caddyfile`. Lea
 kilotest.com {
   # Enable Zstandard and Gzip compression of responses.
   encode zstd gzip
-
-  # Truncate the initial /qai from the forwarded path.
+  # Specify the only paths of forwardable requests.
+  @allowedGET {
+    method GET
+    path /mcp / /index.html /robots.txt /openapi.yaml /openapi.json /swagger.yaml /swagger.json /api-docs /llms.txt /llms-full.txt *.html* /fullReport.json/* /api/* /tutorial/images/* /favicon.* /style.css /sitemap.xml
+  }
+  @allowedPOST {
+    method POST
+    path /mcp /retestRec.html/* /testRec.html/* /recAction.html /reannotate.html /wcagRenew.html /api/* /tutorialComment.html
+  }
+  @allowedOPTIONS method OPTIONS
+  handle @allowedOPTIONS {
+    header {
+      Access-Control-Allow-Origin *
+      Access-Control-Allow-Methods GET,POST,OPTIONS
+      Access-Control-Allow-Headers Content-Type,Authorization
+    }
+    respond 204
+  }
+  # Truncate any initial /qai from the forwarded path.
   handle_path /qai* {
-    # Forward any matching request to port 3001.
+    # Forward any QAI request to port 3001.
     reverse_proxy localhost:3001
   }
-
-  # Forward any other request to port 3000.
-  reverse_proxy localhost:3000 {
-    # Improve SSE latency.
-    flush_interval -1
+  # Forward any other GET, POST, or OPTIONS request, if allowed, to port 3000.
+  handle @allowedGET {
+    reverse_proxy localhost:3000 {
+      # Improve SSE latency.
+      flush_interval -1
+    }
+  }
+  handle @allowedPOST {
+    reverse_proxy localhost:3000 {
+      # Improve SSE latency.
+      flush_interval -1
+    }
+  }
+  # Return not-found for any other request.
+  handle {
+    respond 404
   }
 }
 ```
 
-This configuration prevents granular reporting by Testaro agents from being buffered, so the updates reach the browser without delay.
+This configuration can be futher tightened if experience warrants.
+
+The `flush_interval` setting prevents granular reporting by Testaro agents from being buffered, so the updates reach the browser without delay.
 
 ## Version management
 

package/index.js

@@ -28,7 +28,7 @@ const {
   reportsPath,
   ruleIDs
 } = require('./util');
-const {handleMCP} = require('./mcp');
+const {handleMCP, mcpPath} = require('./mcp');
 const fs = require('fs/promises');
 const http = require('http');
 const https = require('https');
@@ -210,19 +210,11 @@ const requestHandler = async (request, response) => {
   const {pathname, search} = requestURL;
   const pageName = pathname.split('/')[1];
   const pathTail = pathname.split('/').slice(2).join('/');
-  // If the request is an OPTIONS request:
-  if (method === 'OPTIONS') {
-    // Serve response headers, including one allowing requests from other applications.
-    response.setHeader('Access-Control-Allow-Origin', '*');
-    response.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-    response.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
-    response.statusCode = 204;
-    response.end();
-  }
-  // Otherwise, if the request is a GET request:
-  else if (method === 'GET') {
+  // If the request is a GET request:
+  if (method === 'GET') {
     // If it is for the model context protocol server:
-    if (pathname === '/mcp') {
+    if (pathname === mcpPath) {
+      // Handle the MCP request.
       await handleMCP(request, response);
     }
     // Otherwise, if it is for the home page:
@@ -267,6 +259,13 @@ const requestHandler = async (request, response) => {
       setHeaders('text/plain', '/llms-full.txt', 'medium');
       response.end(llmsfull);
     }
+    // Otherwise, if it is for the XML sitemap:
+    else if (pageName === 'sitemap.xml') {
+      const sitemap = await fs.readFile('sitemap.xml', 'utf8');
+      // Serve it.
+      setHeaders('application/xml', '/sitemap.xml', 'medium');
+      response.end(sitemap);
+    }
     // Otherwise, if it is for a full report download:
     else if (pageName === 'fullReport.json') {
       const [timeStamp, jobID] = pathTail.split('/');
@@ -511,12 +510,12 @@ const requestHandler = async (request, response) => {
           if (what) {
             // Set a location header for a response.
             response.setHeader('content-location', `${pathname}${search}`);
-            // Get the answer data.
+            // Get the answer data about the remaining recommendations.
             const answerData = await require(path.join(__dirname, 'testOrder', 'index'))
             .answer(url, what, authCode);
             // If the answer data are valid:
             if (answerData.status === 'ok') {
-              // Serve the answer page.
+              // Serve the test-order page with the remaining recommendations.
               response.end(answerData.answerPage);
             }
             // Otherwise, i.e. if they are invalid:
@@ -537,7 +536,7 @@ const requestHandler = async (request, response) => {
             response.setHeader('content-location', '/recActionForm.html');
             // Get the answer data.
             const answerData = await require(path.join(__dirname, 'recActionForm', 'index')).answer();
-            // Serve the test-order form.
+            // Serve the test-order form with the remaining recommendations.
             response.end(answerData.answerPage);
           }
         }
@@ -781,7 +780,7 @@ const requestHandler = async (request, response) => {
   }
   // Otherwise, i.e. if it is neither a GET nor a POST request:
   else {
-    // Report its invalidity.
+    // Report its invalidity. (Caddy handles OPTIONS requests.)
     await serveError({message: 'ERROR: Invalid request method'}, response, true);
   }
 };

package/mcp.js

@@ -15,6 +15,10 @@ const reportIssuesAPI = require('./reportIssues/api');
 const reportIssueAPI = require('./reportIssue/api');
 const testRecFormAPI = require('./testRecForm/api');
 
+// CONSTANTS
+
+exports.mcpPath = '/mcp';
+
 // FUNCTIONS
 
 // Creates and returns an McpServer with Kilotest tools registered.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jrpool/kilotest",
-  "version": "35.1.0",
+  "version": "36.1.0",
   "description": "An ensemble testing service with a focus on accessibility",
   "main": "index.js",
   "scripts": {

package/robots.txt

@@ -1,4 +1,16 @@
 # robots.txt
 User-agent: *
 Allow: /
+Disallow: /ai0BalanceForm.html
+Disallow: /recActionForm.html
+Disallow: /recAction.html
+Disallow: /reannotateForm.html
+Disallow: /reannotate.html
+Disallow: /reportHideForm.html
+Disallow: /reportUnhideForm.html
+Disallow: /reportsPruneForm.html
+Disallow: /reportsRewindForm.html
+Disallow: /reportsExpungeForm.html
+Disallow: /wcagRenewForm.html
+Disallow: /wcagRenew.html
 Sitemap: https://kilotest.com/sitemap.xml

package/sitemap.xml

@@ -8,4 +8,5 @@
   <url><loc>https://kilotest.com/tutorial.html</loc></url>
   <url><loc>https://kilotest.com/openapi.yaml</loc></url>
   <url><loc>https://kilotest.com/llms.txt</loc></url>
+  <url><loc>https://kilotest.com/llms-full.txt</loc></url>
 </urlset>

package/testOrder/index.js

@@ -11,7 +11,7 @@ const path = require('path');
 
 // FUNCTIONS
 
-// Implements a test order and returns an acknowledgement page.
+// Implements a test order and returns a revised recommendations page.
 exports.answer = async (url, what, authCode) => {
   // If the arguments are valid:
   if (isURL(url) && what && authCode === process.env.AUTH_CODE) {