@milpa/comal 0.2.2 → 0.2.4

package/src/workspace-serve.mjs

@@ -0,0 +1,59 @@
+// House-managed static server for browser tests (chrome-devtools MCP, extension labs).
+// It serves one workspace folder read-only on 127.0.0.1 and lives only as long as the
+// Comal process: no background shell process to approve, track or leak.
+import http from 'node:http';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { confinedPath } from './visual/registry.mjs';
+
+const TYPES = { '.html': 'text/html; charset=utf-8', '.htm': 'text/html; charset=utf-8', '.css': 'text/css; charset=utf-8', '.js': 'text/javascript; charset=utf-8',
+  '.mjs': 'text/javascript; charset=utf-8', '.json': 'application/json; charset=utf-8', '.svg': 'image/svg+xml', '.png': 'image/png', '.jpg': 'image/jpeg',
+  '.jpeg': 'image/jpeg', '.gif': 'image/gif', '.webp': 'image/webp', '.ico': 'image/x-icon', '.woff2': 'font/woff2', '.txt': 'text/plain; charset=utf-8' };
+const MAX_SERVERS = 4;
+const fail = message => Object.assign(new Error(message), { code: 'WORKSPACE_SERVE_INVALID' });
+
+export function workspaceServeOperations({ cwd }) {
+  const servers = new Map();
+  async function start(directory) {
+    if (servers.size >= MAX_SERVERS) throw fail(`Ya hay ${MAX_SERVERS} servidores; detén uno con action stop.`);
+    const root = await confinedPath(cwd, directory, 'WorkspaceServe');
+    if (!(await fs.stat(root)).isDirectory()) throw fail(`WorkspaceServe: ${directory} no es una carpeta.`);
+    const server = http.createServer(async (request, response) => {
+      const reply = (status, body = '') => { response.writeHead(status, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' }); response.end(body); };
+      if (!['GET', 'HEAD'].includes(request.method)) return reply(405, 'Solo lectura.');
+      try {
+        let relative = decodeURIComponent(new URL(request.url, 'http://127.0.0.1').pathname).replace(/^\/+/, '');
+        if (!relative || relative.endsWith('/')) relative += 'index.html';
+        // The real path must stay inside the served folder (no .., no symlink out, no protected state).
+        const file = await confinedPath(root, relative, 'archivo').catch(() => null);
+        if (!file || path.relative(root, file).startsWith('..') || !(await fs.stat(file)).isFile()) return reply(404, 'No existe.');
+        const body = await fs.readFile(file);
+        response.writeHead(200, { 'content-type': TYPES[path.extname(file).toLowerCase()] || 'application/octet-stream', 'content-length': body.length, 'cache-control': 'no-store' });
+        response.end(request.method === 'HEAD' ? undefined : body);
+      } catch { reply(404, 'No existe.'); }
+    });
+    await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', resolve); });
+    server.unref(); // never keeps Comal alive; it closes with the process
+    const id = randomUUID(), entry = { server_id: id, directory: path.relative(await fs.realpath(cwd), root), url: `http://127.0.0.1:${server.address().port}/` };
+    servers.set(id, { ...entry, server });
+    return entry;
+  }
+  async function stop(id) {
+    const entry = servers.get(id); if (!entry) throw fail(`WorkspaceServe: no hay servidor con server_id ${id}.`);
+    servers.delete(id); entry.server.closeAllConnections?.();
+    await new Promise(resolve => entry.server.close(resolve));
+    return { stopped: true, server_id: id };
+  }
+  return [{
+    name: 'WorkspaceServe',
+    description: 'Serve one workspace folder read-only (GET/HEAD) on http://127.0.0.1:<port>/ for browser tests: pages a content script must match, fixtures for an extension lab suite, a page to open with chrome-devtools. Use it instead of starting a server with Bash. action start {directory} returns url and server_id; stop {server_id}; list. Servers close when the session process exits. Not the workspace root, never .comal/.harness/.git.',
+    effects: { workspace: 'read', external: 'none', process: 'none', authority: 'none' },
+    input_schema: { type: 'object', properties: { action: { enum: ['start', 'stop', 'list'] }, directory: { type: 'string', minLength: 1, maxLength: 500 }, server_id: { type: 'string', minLength: 1, maxLength: 64 } }, required: ['action'], additionalProperties: false },
+    run: async input => {
+      if (input.action === 'start') { if (!input.directory) throw fail('start requiere directory.'); return JSON.stringify(await start(input.directory)); }
+      if (input.action === 'stop') { if (!input.server_id) throw fail('stop requiere server_id.'); return JSON.stringify(await stop(input.server_id)); }
+      return JSON.stringify({ servers: [...servers.values()].map(({ server_id, directory, url }) => ({ server_id, directory, url })) });
+    },
+  }];
+}