@plurnk/plurnk-web 0.0.0-stage → 1.1.0

package/ai.plurnk/.env.defaults

@@ -0,0 +1,38 @@
+# {§web-host} {§web-configuration} @plurnk/plurnk-web — optional document host. Sign-in uses the shared daemon authority.
+# 1 = claim / on the daemon's listener; 0 = no routes. Read at daemon startup.
+PLURNK_WEB_ENABLED=1
+# Initial page preference: 0 = explicit review; 1 = automatically accept proposals.
+# A session page reached from another site, or on plain HTTP other than localhost, starts in explicit review.
+# Read at startup; /yolo overrides this page only. Reload restores this setting.
+# Questions and MCP input always require an answer. Daemon permission policy still applies.
+PLURNK_WEB_YOLO=0
+# Newest Unicode code points retained in the ephemeral live reasoning preview.
+# Positive integer, read at startup. Full reasoning remains available on demand.
+PLURNK_WEB_REASONING_PREVIEW_CHARS=4096
+# Sign-in transactions, not authenticated session lifetimes. Each travels sealed in its
+# browser's cookie. Seconds available to complete sign-in; positive integer. Read at startup.
+PLURNK_WEB_LOGIN_TTL_SEC=600
+# Workspace and session creation forms, not sign-in transactions or workspace lifetimes.
+# Seconds a settled creation stays addressable, so a retry after a lost
+# response converges to the same place; positive integer, read at startup.
+PLURNK_WEB_CREATE_TTL_SEC=600
+# Maximum retained in-flight and settled creations per module, workspaces and sessions together.
+# Beyond it the oldest settled token yields; in-flight ones are kept. Positive integer, read at startup.
+PLURNK_WEB_CREATE_TOKENS=128
+# Maximum UTF-8 bytes of a creation, rename or session form body. Larger bodies answer 413.
+# Positive integer, read at startup.
+PLURNK_WEB_FORM_BYTES=16384
+# Diagram compilation, not agent work. Positive integers, read at startup.
+# Maximum parallel compiler threads. Threads start on demand and retire when idle.
+PLURNK_WEB_DIAGRAM_THREADS=2
+# Maximum admitted compilations, including queued work. Excess requests answer 429.
+PLURNK_WEB_DIAGRAM_PENDING=16
+# Milliseconds for queueing and compilation after source intake (1–2147483647).
+# Expiry answers 408; the ceiling is Node's timer range, not a render policy.
+PLURNK_WEB_DIAGRAM_TIMEOUT_MS=1000
+# Maximum UTF-8 JSON request bytes. Excess input answers 413.
+PLURNK_WEB_DIAGRAM_INPUT_BYTES=65536
+# Maximum UTF-8 SVG response bytes. Compiler/output limits answer 422.
+PLURNK_WEB_DIAGRAM_OUTPUT_BYTES=4000000
+# Ondine's flowchart edge bound; other syntax limits remain the compiler's contract.
+PLURNK_WEB_DIAGRAM_EDGES=5000

package/ai.plurnk/assets.json

@@ -0,0 +1,193 @@
+[
+  [
+    "/assets/index-B4w6iDKw.css",
+    "assets/index-B4w6iDKw.css",
+    "text/css",
+    {
+      "br": "assets/index-B4w6iDKw.css.br",
+      "gzip": "assets/index-B4w6iDKw.css.gz"
+    }
+  ],
+  [
+    "/assets/index-CGRGblLU.js",
+    "assets/index-CGRGblLU.js",
+    "text/javascript",
+    {
+      "br": "assets/index-CGRGblLU.js.br",
+      "gzip": "assets/index-CGRGblLU.js.gz"
+    }
+  ],
+  [
+    "/assets/math-renderer-CnlgS6FH.js",
+    "assets/math-renderer-CnlgS6FH.js",
+    "text/javascript",
+    {
+      "br": "assets/math-renderer-CnlgS6FH.js.br",
+      "gzip": "assets/math-renderer-CnlgS6FH.js.gz"
+    }
+  ],
+  [
+    "/assets/math-renderer-CZ_XtOMq.css",
+    "assets/math-renderer-CZ_XtOMq.css",
+    "text/css",
+    {
+      "br": "assets/math-renderer-CZ_XtOMq.css.br",
+      "gzip": "assets/math-renderer-CZ_XtOMq.css.gz"
+    }
+  ],
+  [
+    "/assets/overview-DEhW9HUG.js",
+    "assets/overview-DEhW9HUG.js",
+    "text/javascript",
+    {
+      "br": "assets/overview-DEhW9HUG.js.br",
+      "gzip": "assets/overview-DEhW9HUG.js.gz"
+    }
+  ],
+  [
+    "/assets/preload-helper-BjS5LQBu.js",
+    "assets/preload-helper-BjS5LQBu.js",
+    "text/javascript",
+    {
+      "br": "assets/preload-helper-BjS5LQBu.js.br",
+      "gzip": "assets/preload-helper-BjS5LQBu.js.gz"
+    }
+  ],
+  [
+    "/assets/session-agent-DwY8S586.js",
+    "assets/session-agent-DwY8S586.js",
+    "text/javascript",
+    {
+      "br": "assets/session-agent-DwY8S586.js.br",
+      "gzip": "assets/session-agent-DwY8S586.js.gz"
+    }
+  ],
+  [
+    "/assets/session-BcdGbgAa.js",
+    "assets/session-BcdGbgAa.js",
+    "text/javascript",
+    {
+      "br": "assets/session-BcdGbgAa.js.br",
+      "gzip": "assets/session-BcdGbgAa.js.gz"
+    }
+  ],
+  [
+    "/assets/src-Du01yeMu.js",
+    "assets/src-Du01yeMu.js",
+    "text/javascript",
+    {
+      "br": "assets/src-Du01yeMu.js.br"
+    }
+  ],
+  [
+    "/assets/src-J2qT9xpv.js",
+    "assets/src-J2qT9xpv.js",
+    "text/javascript",
+    {
+      "br": "assets/src-J2qT9xpv.js.br",
+      "gzip": "assets/src-J2qT9xpv.js.gz"
+    }
+  ],
+  [
+    "/assets/Temml-CCjoacWt.woff2",
+    "assets/Temml-CCjoacWt.woff2",
+    "font/woff2",
+    {}
+  ],
+  [
+    "/icons/APACHE-2.0.txt",
+    "icons/APACHE-2.0.txt",
+    "text/plain",
+    {
+      "br": "icons/APACHE-2.0.txt.br",
+      "gzip": "icons/APACHE-2.0.txt.gz"
+    }
+  ],
+  [
+    "/icons/NOTO-NOTICE.txt",
+    "icons/NOTO-NOTICE.txt",
+    "text/plain",
+    {
+      "br": "icons/NOTO-NOTICE.txt.br",
+      "gzip": "icons/NOTO-NOTICE.txt.gz"
+    }
+  ],
+  [
+    "/icons/plurnk-maskable.svg",
+    "icons/plurnk-maskable.svg",
+    "image/svg+xml",
+    {
+      "br": "icons/plurnk-maskable.svg.br",
+      "gzip": "icons/plurnk-maskable.svg.gz"
+    }
+  ],
+  [
+    "/icons/plurnk.svg",
+    "icons/plurnk.svg",
+    "image/svg+xml",
+    {
+      "br": "icons/plurnk.svg.br",
+      "gzip": "icons/plurnk.svg.gz"
+    }
+  ],
+  [
+    "/index.html",
+    "index.html",
+    "text/html",
+    {}
+  ],
+  [
+    "/manifest.webmanifest",
+    "manifest.webmanifest",
+    "application/manifest+json",
+    {
+      "br": "manifest.webmanifest.br",
+      "gzip": "manifest.webmanifest.gz"
+    }
+  ],
+  [
+    "/vendor/CFWORKER-JSON-SCHEMA-LICENSE.txt",
+    "vendor/CFWORKER-JSON-SCHEMA-LICENSE.txt",
+    "text/plain",
+    {
+      "br": "vendor/CFWORKER-JSON-SCHEMA-LICENSE.txt.br",
+      "gzip": "vendor/CFWORKER-JSON-SCHEMA-LICENSE.txt.gz"
+    }
+  ],
+  [
+    "/vendor/DEPENDENCIES-LICENSE.txt",
+    "vendor/DEPENDENCIES-LICENSE.txt",
+    "text/plain",
+    {
+      "br": "vendor/DEPENDENCIES-LICENSE.txt.br",
+      "gzip": "vendor/DEPENDENCIES-LICENSE.txt.gz"
+    }
+  ],
+  [
+    "/vendor/MARKED-FOOTNOTE-LICENSE.txt",
+    "vendor/MARKED-FOOTNOTE-LICENSE.txt",
+    "text/plain",
+    {
+      "br": "vendor/MARKED-FOOTNOTE-LICENSE.txt.br",
+      "gzip": "vendor/MARKED-FOOTNOTE-LICENSE.txt.gz"
+    }
+  ],
+  [
+    "/vendor/OTM-LICENSE.txt",
+    "vendor/OTM-LICENSE.txt",
+    "text/plain",
+    {
+      "br": "vendor/OTM-LICENSE.txt.br",
+      "gzip": "vendor/OTM-LICENSE.txt.gz"
+    }
+  ],
+  [
+    "/vendor/PICO-LICENSE.txt",
+    "vendor/PICO-LICENSE.txt",
+    "text/plain",
+    {
+      "br": "vendor/PICO-LICENSE.txt.br",
+      "gzip": "vendor/PICO-LICENSE.txt.gz"
+    }
+  ]
+]

package/ai.plurnk/creations.js

@@ -0,0 +1,65 @@
+import { directoryPath } from "./directory-addresses.js";
+import { RequestError } from "./http.js";
+
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
+
+/** @typedef {{ kind: "flight", creation: Promise<string>, expires: number } | { kind: "done", path: string, expires: number } | { kind: "failed", error: Error, expires: number }} CreationEntry */
+
+/** {§web-workspace-creation} Owns form-token convergence at the module's HTTP boundary;
+ * the daemon's creation contract has no idempotency key of its own.
+ */
+export default class Creations {
+    #ttl;
+    #tokens;
+    /** @type {Map<string, CreationEntry>} */
+    #entries = new Map();
+
+    /** @param {{ ttl: number, tokens: number }} limits */
+    constructor({ ttl, tokens }) {
+        this.#ttl = ttl;
+        this.#tokens = tokens;
+    }
+
+    /** @param {number} now */
+    #prune(now) {
+        for (const [key, entry] of this.#entries) if (entry.kind !== "flight" && entry.expires <= now) this.#entries.delete(key);
+    }
+
+    /**
+     * @param {string} token The form's hidden token.
+     * @param {() => Promise<string | { workspaceName: string, projectRoot: string | null }>} create
+     * @returns {Promise<string>} The canonical address of the created workspace.
+     */
+    async submit(token, create) {
+        if (!UUID_PATTERN.test(token)) throw new RequestError(400, "Invalid form token.");
+        const now = Date.now();
+        this.#prune(now);
+        const existing = this.#entries.get(token);
+        if (existing !== undefined) {
+            if (existing.kind === "flight") return existing.creation;
+            if (existing.kind === "done") return existing.path;
+            throw existing.error;
+        }
+
+        while (this.#entries.size >= this.#tokens) {
+            const completed = [...this.#entries].find(([, entry]) => entry.kind !== "flight");
+            if (completed === undefined) break;
+            this.#entries.delete(completed[0]);
+        }
+
+        const creation = (async () => {
+            const result = await create();
+            if (typeof result === "string") return result;
+            if (result.projectRoot !== null) throw new Error("The daemon created a workspace with a project folder from a folderless request.");
+            const path = directoryPath({ kind: "workspace", workspace: result.workspaceName });
+            if (path === null) throw new Error("The daemon returned a workspace name without a directory address.");
+            return path;
+        })();
+        this.#entries.set(token, { kind: "flight", creation, expires: now + this.#ttl * 1000 });
+        creation.then(
+            (path) => { this.#entries.set(token, { kind: "done", path, expires: Date.now() + this.#ttl * 1000 }); },
+            (error) => { this.#entries.set(token, { kind: "failed", error, expires: Date.now() + this.#ttl * 1000 }); },
+        );
+        return creation;
+    }
+}

package/ai.plurnk/diagram-compiler.js

@@ -0,0 +1,15 @@
+import { render, RenderError } from "ondine/compiler";
+
+/** {§web-diagram-service} This synchronous compiler runs only in a Piscina thread.
+ * @param {{ source: string, limit: number, outputLimit: number, maxEdges: number }} input
+ */
+export default function compile({ source, ...limits }) {
+    try {
+        const { svg } = render(source, { ...limits, autoDirection: false, responsive: false });
+        if (Buffer.byteLength(svg) > limits.outputLimit) return { error: "Diagram output exceeds the configured limit." };
+        return { svg };
+    } catch (error) {
+        if (!(error instanceof RenderError)) throw error;
+        return { error: error.message };
+    }
+}

package/ai.plurnk/diagrams.js

@@ -0,0 +1,130 @@
+import { ConfigurationError, Knob } from "@plurnk/plurnk-meta";
+import { Piscina } from "piscina";
+import { MIMEType } from "node:util";
+import { privateHeaders, RequestError } from "./http.js";
+
+// Node timers use a signed 32-bit millisecond delay; overflow becomes a 1 ms timer.
+const MAX_TIMER_DELAY = 2 ** 31 - 1;
+
+/** {§web-diagram-service} Owns bounded presentation work, never daemon agent work. */
+export default class Diagrams {
+    #threads;
+    #pending;
+    #timeout;
+    #input;
+    #output;
+    #edges;
+    /** @type {Piscina<Parameters<typeof import("./diagram-compiler.js").default>[0], ReturnType<typeof import("./diagram-compiler.js").default>> | undefined} */
+    #pool;
+    #active = 0;
+    #stop = new AbortController();
+
+    /**
+     * @param {{ threads: number, pending: number, timeout: number, input: number, output: number, edges: number }} [limits]
+     */
+    constructor(limits) {
+        this.#threads = limits?.threads ?? Knob.integer("PLURNK_WEB_DIAGRAM_THREADS", 1);
+        this.#pending = limits?.pending ?? Knob.integer("PLURNK_WEB_DIAGRAM_PENDING", 1);
+        this.#timeout = limits?.timeout ?? Knob.integer("PLURNK_WEB_DIAGRAM_TIMEOUT_MS", 1);
+        this.#input = limits?.input ?? Knob.integer("PLURNK_WEB_DIAGRAM_INPUT_BYTES", 1);
+        this.#output = limits?.output ?? Knob.integer("PLURNK_WEB_DIAGRAM_OUTPUT_BYTES", 1);
+        this.#edges = limits?.edges ?? Knob.integer("PLURNK_WEB_DIAGRAM_EDGES", 1);
+        if (this.#timeout > MAX_TIMER_DELAY) {
+            throw new ConfigurationError("PLURNK_WEB_DIAGRAM_TIMEOUT_MS", `must not exceed ${MAX_TIMER_DELAY} milliseconds`);
+        }
+    }
+
+    /**
+     * @param {<T>(read: () => T) => T | null} contain
+     * @returns {Diagrams | null}
+     */
+    static create(contain) {
+        const threads = contain(() => Knob.integer("PLURNK_WEB_DIAGRAM_THREADS", 1));
+        const pending = contain(() => Knob.integer("PLURNK_WEB_DIAGRAM_PENDING", 1));
+        const timeout = contain(() => {
+            const ms = Knob.integer("PLURNK_WEB_DIAGRAM_TIMEOUT_MS", 1);
+            if (ms > MAX_TIMER_DELAY) {
+                throw new ConfigurationError("PLURNK_WEB_DIAGRAM_TIMEOUT_MS", `must not exceed ${MAX_TIMER_DELAY} milliseconds`);
+            }
+            return ms;
+        });
+        const input = contain(() => Knob.integer("PLURNK_WEB_DIAGRAM_INPUT_BYTES", 1));
+        const output = contain(() => Knob.integer("PLURNK_WEB_DIAGRAM_OUTPUT_BYTES", 1));
+        const edges = contain(() => Knob.integer("PLURNK_WEB_DIAGRAM_EDGES", 1));
+        if (threads === null || pending === null || timeout === null || input === null || output === null || edges === null) {
+            return null;
+        }
+        return new Diagrams({ threads, pending, timeout, input, output, edges });
+    }
+
+    /** @param {string} source @param {AbortSignal} signal */
+    async #compile(source, signal) {
+        if (this.#stop.signal.aborted) throw new RequestError(503, "Diagram service is stopping.");
+        if (this.#active >= this.#pending) throw new RequestError(429, "Diagram service is busy.");
+        const deadline = AbortSignal.timeout(this.#timeout);
+        const combined = AbortSignal.any([signal, deadline, this.#stop.signal]);
+        this.#pool ??= new Piscina({ filename: new URL("./diagram-compiler.js", import.meta.url).href,
+            minThreads: 0, maxThreads: this.#threads, maxQueue: this.#pending });
+        this.#active++;
+        try {
+            const result = await this.#pool.run({ source, limit: this.#input, outputLimit: this.#output, maxEdges: this.#edges }, { signal: combined });
+            if (result.error !== undefined) throw new RequestError(422, result.error);
+            return Buffer.from(result.svg);
+        } catch (cause) {
+            if (this.#stop.signal.aborted) throw new RequestError(503, "Diagram service is stopping.", { cause });
+            if (deadline.aborted) throw new RequestError(408, "Diagram rendering timed out.", { cause });
+            throw cause;
+        } finally { this.#active--; }
+    }
+
+    /** @param {import("node:http").IncomingMessage} req @param {import("node:http").ServerResponse} res */
+    async serve(req, res) {
+        if (req.method !== "POST") {
+            res.setHeader("allow", "POST");
+            throw new RequestError(405, "Use POST for diagram compilation.");
+        }
+        // JSON is not CORS-safelisted: cross-origin forms cannot invoke the compiler.
+        let type;
+        try { type = new MIMEType(req.headers["content-type"] ?? ""); }
+        catch (cause) { throw new RequestError(415, "Use UTF-8 application/json.", { cause }); }
+        if (type.essence !== "application/json" || (type.params.has("charset") && type.params.get("charset")?.toLowerCase() !== "utf-8")) {
+            throw new RequestError(415, "Use UTF-8 application/json.");
+        }
+        if (req.headers["sec-fetch-site"] !== undefined && req.headers["sec-fetch-site"] !== "same-origin") {
+            throw new RequestError(403, "Same-origin request required.");
+        }
+        const disconnected = new AbortController();
+        const depart = () => disconnected.abort();
+        res.once("close", depart);
+        try {
+            let size = 0;
+            const chunks = [];
+            for await (const chunk of req.iterator({ destroyOnReturn: false })) {
+                size += chunk.byteLength;
+                if (size > this.#input) throw new RequestError(413, "Diagram source exceeds the configured limit.");
+                chunks.push(chunk);
+            }
+            let input;
+            try { input = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks))); }
+            catch (cause) { throw new RequestError(400, "Invalid diagram JSON.", { cause }); }
+            if (input === null || typeof input !== "object" || Array.isArray(input)
+                || typeof input.source !== "string" || Object.keys(input).length !== 1) {
+                throw new RequestError(400, "Expected a source string.");
+            }
+            const svg = await this.#compile(input.source, disconnected.signal);
+            res.writeHead(200, { ...privateHeaders, "content-type": "image/svg+xml", "content-length": svg.byteLength,
+                "content-security-policy": "sandbox; default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'" });
+            res.end(svg);
+        } catch (error) {
+            if (!(disconnected.signal.aborted && error instanceof Error && (error.name === "AbortError"
+                || ("code" in error && ["ECONNRESET", "ERR_STREAM_PREMATURE_CLOSE"].includes(String(error.code)))))) throw error;
+        } finally {
+            res.off("close", depart);
+        }
+    }
+
+    async close() {
+        this.#stop.abort();
+        await this.#pool?.destroy();
+    }
+}

package/ai.plurnk/directory-addresses.js

@@ -0,0 +1,35 @@
+import indexDocument from "./index-document.js";
+
+/** @typedef {{ kind: "daemon" } | { kind: "workspace", workspace: string } | { kind: "session", workspace: string, session: string }} Directory */
+
+/** @param {Directory} directory @returns {string | null} */
+export function directoryPath(directory) {
+    // {§web-directory-addresses} No normalization or substitute identity for legacy names.
+    if (directory.kind === "daemon") return "/~/";
+    const { workspace } = directory;
+    if (!workspace || !workspace.isWellFormed() || workspace.split("/").some((part) => part === "." || part === "..")) return null;
+    const path = `/~/${workspace.split("/").map(encodeURIComponent).join("/")}`;
+    if (directory.kind === "workspace") return `${path}/`;
+    if (!directory.session || !directory.session.isWellFormed()) return null;
+    return `${path}@${encodeURIComponent(directory.session)}/`;
+}
+
+/** @param {string} target Origin-relative request target. @returns {Directory | null} */
+export function parseDirectory(target) {
+    const pathname = indexDocument(target.split(/[?#]/u, 1)[0]);
+    // Split syntax before decoding; an encoded @ or slash is part of the name.
+    const match = /^\/(?:~|%7[eE])\/(?:(?<workspace>[^@]+)(?:@(?<session>[^/@]+))?\/)?index\.html$/u.exec(pathname);
+    if (!match) return null;
+    const { workspace, session } = match.groups ?? {};
+    if (workspace === undefined) return { kind: "daemon" };
+    try {
+        /** @type {Directory} */
+        const directory = session === undefined
+            ? { kind: "workspace", workspace: decodeURIComponent(workspace) }
+            : { kind: "session", workspace: decodeURIComponent(workspace), session: decodeURIComponent(session) };
+        return directoryPath(directory) === null ? null : directory;
+    } catch (error) {
+        if (error instanceof URIError) return null;
+        throw error;
+    }
+}