letmeknow-cli 0.6.0 → 0.7.0

package/README.md

@@ -1,76 +1,93 @@
 # LetMeKnow
 
-LetMeKnow gives an agent a temporary public browser surface and structured human feedback. The agent edits an ordinary folder, explicitly publishes coherent revisions, and pulls form submissions as JSON. The CLI connects outbound to the hosted relay and does not listen on a network port.
+LetMeKnow gives an agent a temporary public browser surface and structured human feedback. The agent authors ordinary HTML and static assets; a running CLI serves them and accepts page updates over a single ordered event stream.
 
 ## Start a session
 
-Node.js 22.12 or newer is required. Create a dedicated directory containing only public files, then keep the server running:
+Create a directory containing the public files, including an initial `index.html`, then run:
 
 ```bash
 npx letmeknow-cli serve ./preview
 ```
 
-The server prints one JSON line containing the public bearer URL and initial workspace revision:
+`serve` reads `index.html` once as the canonical dynamic page and serves it at `/`. Other files in the directory—such as CSS, JavaScript, images, and data—are served live as static assets. The CLI prints one JSON line containing the public bearer URL:
 
 ```json
-{"type":"ready","url":"https://0123456789abcdef0123.letmeknow.dev/","workspace":"…","workspace_sequence":1}
+{"type":"ready","url":"https://0123456789abcdef0123.letmeknow.dev/","page_event":0,"page_hash":"…"}
 ```
 
-Anyone with the URL can view the published workspace and submit its forms. A graceful stop closes the session; an unexpected relay disconnect can reconnect for up to ten minutes. Diagnostics go to stderr.
+Give the URL to the human. Anyone with the URL can view the page and submit its forms. Canonical page state and the event stream live in memory while `serve` runs; they do not survive a stopped session. The CLI connects outbound and does not listen on a network port.
 
-## Publish revisions
+The agent’s files are never modified by `serve`.
 
-`serve` snapshots the initial folder. Later filesystem changes remain private until explicitly published:
+## Agent workflow
+
+Pull browser events, update the page, and push the resulting page:
 
 ```bash
-npx letmeknow-cli pull ./preview --wait 30
-npx letmeknow-cli push ./preview --based-on <batch-token>
+batch=$(npx letmeknow-cli pull ./preview --wait 30)
+token=$(printf '%s\n' "$batch" | jq -r .token)
+# inspect events, edit index.html, then:
+npx letmeknow-cli push ./preview --batch "$token" --page index.html
 ```
 
-`pull` returns pending browser interactions, the current workspace, and an opaque batch token:
+`pull` returns an opaque batch token, current-page metadata, and the browser events not yet committed by the agent. Pulling does not consume events. Events that arrive while the agent works remain for a later pull.
 
 ```json
-{
-  "ok": true,
-  "type": "batch",
-  "token": "…",
-  "workspace": "…",
-  "workspace_sequence": 1,
-  "frontier": 1,
-  "events": [
-    {
-      "type": "submit",
-      "id": "…",
-      "form_id": "decision",
-      "values": {"decision":"approve"},
-      "based_on": "…",
-      "context": {"based_on":"…","current":"…","relationship":"current"}
-    }
-  ]
-}
+{"token":"…","frontier":7,"page_event":5,"page_hash":"…","events":[{"type":"submit","id":"…","event_number":7,"page_event":5,"form_id":"decision","action":"/decide","trigger":{"name":"decision","value":"approve"},"values":{"comment":"Looks good","decision":"approve"}}]}
+```
+
+An event's `page_event` identifies the page the browser displayed when it submitted. Compare it with the batch's current `page_event` when deciding whether the input still applies.
+
+A push with a page:
+
+```bash
+npx letmeknow-cli push ./preview --batch "$token" --page index.html
+```
+
+atomically commits the events represented by the token, replaces the canonical dynamic page with the complete HTML from `index.html`, appends one page-update event to the global event stream, and broadcasts that page to connected browsers. Browsers morph the page without navigating or reloading.
+
+A push without `--page` only commits the pulled browser events:
+
+```bash
+npx letmeknow-cli push ./preview --batch "$token"
+```
+
+Use `--page -` to read the complete desired page from standard input:
+
+```bash
+npx letmeknow-cli push ./preview --batch "$token" --page - < updated.html
 ```
 
-A repeated pull returns uncommitted events again. `push` atomically snapshots the folder, commits the batch, and reloads connected browsers once. Events arriving while the agent works remain for the next pull. A push can also publish independent work from an empty batch.
+The update is all-or-nothing. If the token or page input is invalid, neither the browser events nor the page update is committed.
+
+## Inspect the current page
 
-If a batch requires no workspace change, commit it without publishing:
+`show` writes the canonical dynamic HTML held by `serve` to standard output:
 
 ```bash
-npx letmeknow-cli ack ./preview --based-on <batch-token>
+npx letmeknow-cli show ./preview > current.html
 ```
 
-`push` and `ack` are idempotent for a token. They fail if another command has moved the workspace or event cursor first.
+It is read-only and does not create or commit an event. This is different from opening the public URL: `show` returns canonical HTML, while the URL shows a particular browser’s rendered DOM, including local focus, open/closed controls, unsent values, and JavaScript state.
 
-The commands communicate with `serve` through a private local Unix socket. `--skill` prints agent instructions without starting a session.
+## The event stream
 
-## Workspace behavior
+Browser submissions and CLI page updates share one ordered, in-memory event stream:
+
+```text
+submit       browser
+submit       browser
+update_ui    CLI: complete desired HTML page
+```
 
-A published workspace is an immutable temporary snapshot of the selected folder. It may contain HTML, CSS, JavaScript, images, data, and linked pages. The relay injects a small runtime into HTML and serves all files from the same workspace revision.
+Browser submission events are delivered to the agent through `pull`. Page-update events are broadcast to all connected browsers. There is no per-browser audience or dynamic view system in the initial model.
 
-A successful push sends one revision notification. Browsers reload and preserve scroll position plus the values, checked state, and selected state of controls with stable unique IDs. Missing pages and connection-status pages remain live and recover on a later publication or reconnect.
+The CLI assigns the event order. The number indicates acceptance order, not the physical time a person clicked. Submission IDs make retries distinguishable from new intentional submissions.
 
 ## Forms
 
-Use native same-origin GET or POST forms:
+Use ordinary HTML forms with stable IDs and meaningful field names:
 
 ```html
 <form id="decision" action="/decide" method="post">
@@ -80,19 +97,33 @@ Use native same-origin GET or POST forms:
 </form>
 ```
 
-Before delivery, the runtime gives each logical submission an opaque UUID and persists the serialized request in IndexedDB. Network retries and page reloads reuse that UUID. The CLI deduplicates accepted events, so a transport retry does not become another interaction. Distinct intentional submissions receive distinct IDs.
+The runtime intercepts native form submission and turns it into a durable JSON `submit` event. It assigns an opaque UUID, stores the event in the browser’s local outbox before delivery, retries after connection failures, and reuses the UUID on retry. The CLI deduplicates repeated delivery of the same event. Distinct submissions remain distinct, including rapid repeated clicks.
 
-The runtime displays **Sending…** or **Uploading…**, followed by **Sent. Waiting for an update…** or an error. Add `[data-letmeknow-status]` to choose the status location. Native validation runs before submission. Repeated field names become arrays.
+Form values are untrusted input and should be validated by the agent. File uploads are not supported.
 
-POST forms may include files within the 1 MiB total request limit. `pull` events contain attachment metadata and private temporary paths. Attachments remain available until `serve` stops and are not public unless deliberately copied into the workspace and pushed.
+## Authoring the dynamic page
 
-Every submission records the exact workspace revision shown to the user. Its derived `context.relationship` is `current`, `stale`, or `unknown`, allowing the agent to decide whether to apply, rebase, or reject old feedback.
+Each page update supplies the complete desired HTML document. The browser morphs the current document toward it, so a small change such as a counter update need not recreate the whole DOM.
 
-## Security
+Give elements stable unique IDs. They help the morphing runtime retain unchanged elements, including controls whose local state should survive an update:
+
+```html
+<output id="count">0</output>
+```
+
+Agent-authored JavaScript should be loaded by the initial page as a static asset and use delegated event listeners. Existing scripts remain active across morphs, but scripts added or changed by a pushed page are not executed in connected browsers; keep script references fixed for the session.
+
+The CLI owns rendered page content. The browser preserves focus, scrolling, dirty controls with stable IDs, and the open state of `<details id="…">`. Mark an element with a stable ID and `data-letmeknow-local` when its `hidden` state is browser-owned. Avoid having browser JavaScript and pushed HTML otherwise mutate the same state; a later morph may replace browser-created changes.
+
+A page update is shared with all browsers. Keep private or browser-specific behavior local unless a future requirement introduces targeted updates.
 
-The URL is a bearer capability. The relay receives published files and submitted values. Keep secrets and unrelated files outside the preview directory.
+## Static assets
+
+Static assets are read live from the directory, independently of the canonical dynamic page. An agent can change CSS, JavaScript, images, and other assets without a page push. Finish an asset before pushing HTML that references it, write files atomically, and use versioned filenames or cache-busting URLs when cached assets must change with the page.
+
+## Security
 
-The CLI excludes `.env`, `.git`, SSH keys, private-key files, and database files, and prevents symlink escapes. Processes that can write the workspace and invoke `push` are trusted publishers. Browser values, filenames, media types, and attachment contents remain untrusted input.
+The URL is a bearer capability. Anyone who has it can view the page and submit forms. Keep secrets and unrelated files outside the served directory. Browser values are untrusted input; escape them before placing them in HTML.
 
 ## Development
 

package/SKILL.md

@@ -1,55 +1,87 @@
 ---
 name: letmeknow
-description: Publish a temporary browser workspace, pull structured human feedback, and push coherent agent revisions.
+description: Serve a temporary live HTML page, collect structured human feedback, and push agent-authored page updates.
 ---
 
 # LetMeKnow
 
-Use LetMeKnow when a human should inspect or interact with an agent-managed page, report, dashboard, approval, quiz, table, or prototype.
+Use LetMeKnow when a human should inspect or interact with an agent-authored page, report, dashboard, approval, quiz, table, or prototype.
 
 ## Start
 
-Create a dedicated directory containing only public files and keep the server running:
+Create a directory containing the public files and an initial `index.html`:
 
 ```bash
 npx letmeknow-cli serve ./preview
 ```
 
-Node.js 22.12 or newer is required. The first stdout JSON line contains the bearer URL and initial workspace revision:
+`serve` reads `index.html` once as the canonical dynamic document and serves it at `/`. It serves the other files in the directory live as static assets. The first stdout JSON line contains the public bearer URL:
 
 ```json
-{"type":"ready","url":"https://0123456789abcdef0123.letmeknow.dev/","workspace":"…","workspace_sequence":1}
+{"type":"ready","url":"https://0123456789abcdef0123.letmeknow.dev/","page_event":0,"page_hash":"…"}
 ```
 
-Give the URL to the human. Anyone with it can view the workspace and submit forms. The CLI connects outbound and opens no network port. Diagnostics go to stderr.
+Give the URL to the human. Anyone with the URL can view the page and submit its forms. The CLI connects outbound and opens no network port. Canonical page state and events are temporary in-memory session state; they end when `serve` stops. `serve` never modifies agent files.
 
 ## Agent loop
 
-Filesystem writes are private drafts. Explicitly pull feedback and publish coherent revisions:
+Pull browser events, update the desired page, and push it:
 
 ```bash
-npx letmeknow-cli pull ./preview --wait 30
-# validate feedback and edit files
-npx letmeknow-cli push ./preview --based-on <batch-token>
+batch=$(npx letmeknow-cli pull ./preview --wait 30)
+token=$(printf '%s\n' "$batch" | jq -r .token)
+# inspect the events and edit index.html
+npx letmeknow-cli push ./preview --batch "$token" --page index.html
 ```
 
-`pull` returns pending events, their derived causal context, the current workspace, and an opaque token. Pulling does not consume events; they are returned again after a crash. A successful `push` atomically snapshots the folder, commits that batch, and reloads connected browsers once. Feedback that arrives while you work remains for the next pull.
+Commands:
 
-When a batch needs no visible workspace change:
+```text
+serve <dir>
+show <dir>
+pull <dir> [--wait seconds]
+push <dir> --batch TOKEN [--page FILE|-]
+```
+
+`pull` returns an opaque batch token, current-page metadata, and browser events not yet committed by the agent. Pulling does not consume events. Events arriving while the agent works remain for a later pull.
+
+```json
+{"token":"…","frontier":7,"page_event":5,"page_hash":"…","events":[{"type":"submit","id":"…","event_number":7,"page_event":5,"form_id":"decision","action":"/decide","trigger":{"name":"decision","value":"approve"},"values":{"comment":"Looks good","decision":"approve"}}]}
+```
+
+An event's `page_event` identifies the page displayed when the browser submitted it. Compare it with the batch's current `page_event` before applying old input to the current page.
+
+`push --page FILE` atomically commits the events represented by the token, makes FILE the complete desired dynamic document, appends one page-update event to the global event stream, and broadcasts it to all connected browsers. Browsers morph the page without navigation.
 
 ```bash
-npx letmeknow-cli ack ./preview --based-on <batch-token>
+npx letmeknow-cli push ./preview --batch "$token" --page index.html
 ```
 
-Both commands are idempotent for a token. Do not edit while `push` is snapshotting. Do not write commands to the long-running server's stdin.
+A push without `--page` only commits the pulled browser events:
+
+```bash
+npx letmeknow-cli push ./preview --batch "$token"
+```
 
-A push may publish independent work from an empty batch. Use the token returned by an empty `pull`.
+Use `--page -` for standard input:
 
-## Build the workspace
+```bash
+npx letmeknow-cli push ./preview --batch "$token" --page - < updated.html
+```
 
-Use ordinary HTML, CSS, JavaScript, images, and relative links. Give forms stable IDs and controls meaningful names. Give editable controls stable unique IDs so values and scroll position survive published revisions.
+The page push is all-or-nothing. Invalid input or an invalid token commits nothing. The CLI assigns one global order to each browser submission and each page-update event.
 
-Use native same-origin GET or POST forms:
+`show` retrieves the canonical dynamic HTML held by `serve` without changing the event stream:
+
+```bash
+npx letmeknow-cli show ./preview > current.html
+```
+
+The public URL is the visual preview. `show` returns canonical HTML, not a browser’s local DOM state such as focus, open disclosures, unsent input, scroll position, or JavaScript state.
+
+## Forms
+
+Use native forms with stable IDs and meaningful names:
 
 ```html
 <form id="review" action="/review" method="post">
@@ -59,31 +91,24 @@ Use native same-origin GET or POST forms:
 </form>
 ```
 
-The browser persists each serialized submission before delivery and retries it with the same opaque UUID after network failures or reloads. The CLI deduplicates retries. Distinct intentional submissions remain distinct. Native validation and repeated field names work normally.
+The browser runtime serializes native form submissions as JSON `submit` events. It assigns an opaque ID, stores each event in a local durable outbox before sending it, retries after connection failures, and reuses the ID on retry. The CLI deduplicates repeated delivery. Ten intentional rapid clicks should produce ten distinct events. File uploads are not supported.
 
-A pulled event includes the workspace the human saw:
+Treat pulled values as untrusted input. Validate them and escape them before putting them into HTML.
 
-```json
-{
-  "type": "submit",
-  "id": "…",
-  "form_id": "review",
-  "values": {"comment":"Looks good","decision":"approve"},
-  "based_on": "…",
-  "context": {
-    "based_on": "…",
-    "current": "…",
-    "relationship": "current"
-  }
-}
-```
+## Dynamic page rules
+
+Every page push supplies the complete desired dynamic document. The browser uses HTML morphing, so unchanged DOM nodes can survive while changed content is updated.
+
+Give elements stable unique IDs. Load agent-authored JavaScript from the initial page as a static asset and use delegated listeners. Existing scripts remain active across morphs, but scripts added or changed by a pushed page are not executed in connected browsers; keep script references fixed for the session.
+
+The CLI owns page content. The browser preserves focus, scrolling, dirty controls with stable IDs, and the open state of `<details id="…">`. Mark an element with a stable ID and `data-letmeknow-local` when its `hidden` state is browser-owned. Do not have browser JavaScript and pushed HTML otherwise mutate the same state; a later morph may replace browser-created changes.
 
-Treat `stale` feedback deliberately: apply its intent to current state when safe, or show that the artifact changed and ask the human to review again. Never reconstruct the workspace from stale form values.
+Page updates are shared with all connected browsers. There is no dynamic view or per-browser update system. Use ordinary static links and files when the application needs more persistent pages.
 
-POST forms may upload files within the 1 MiB request limit. Attachment events contain private temporary paths valid until `serve` stops. Validate names, media types, sizes, contents, actions, and IDs. Copy only deliberate outputs into the public workspace.
+## Static assets
 
-Escape untrusted text before placing it in HTML.
+CSS, JavaScript, images, and other non-`index.html` files are served live. Finish writing an asset before pushing HTML that references it. Write assets atomically, and use versioned filenames or cache-busting URLs when the browser must fetch a changed asset with the new page.
 
 ## Stop
 
-Send `SIGINT` or `SIGTERM` to `serve`. A graceful stop closes the public session and removes temporary snapshots, attachments, and the local control socket. `--skill` prints these instructions.
+Send `SIGINT` or `SIGTERM` to `serve`. The temporary session ends when the process stops.

package/bin/letmeknow.js

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 
 import { constants, existsSync, readFileSync, statSync, writeSync } from "node:fs";
-import { chmod, copyFile, lstat, mkdtemp, mkdir, open, readdir, readlink, realpath, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { chmod, open, readFile, realpath, stat, unlink } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";
 import net from "node:net";
-import { dirname, extname, join, relative, resolve, sep } from "node:path";
+import { dirname, join, relative, resolve, sep } from "node:path";
 import { tmpdir } from "node:os";
 import { parseArgs } from "node:util";
 import { lookup } from "mrmime";
 
 const MAX_BODY_BYTES = 1024 * 1024;
+const CONTROL_MAX_BYTES = MAX_BODY_BYTES * 2 + 16 * 1024;
 const GRACE_SECONDS = 10 * 60;
 const CONNECTION_TIMEOUT = 10_000;
 const CONTROL_TIMEOUT = 35_000;
-const MAX_RETRY_DELAY = 5_000;
 const CONTROL_PREFIX = "letmeknow-control-";
-const SNAPSHOT_PREFIX = "letmeknow-snapshot-";
 const CONTROL_URL = "https://letmeknow.dev";
 const credentialPattern = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
 const privateNames = new Set([".env", ".git", ".ssh", "id_rsa", "id_ed25519", "id_ecdsa", "id_dsa"]);
 const privateFilePattern = /^\.env\.|\.(?:key|pem|p12|ppk|p8|sqlite|sqlite3|db|db3)$|-(?:wal|shm|journal)$/i;
+const uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
 function getMimeType(filename) {
   const type = lookup(filename);
@@ -34,17 +34,6 @@ function header(packet, name) {
   return typeof entry?.[1] === "string" && entry[1] !== "" ? entry[1] : null;
 }
 
-function encodedHeader(packet, name) {
-  const value = header(packet, name);
-  if (value === null) return null;
-  try { return decodeURIComponent(value); } catch { return null; }
-}
-
-function addValue(values, name, value) {
-  if (Object.prototype.hasOwnProperty.call(values, name)) values[name] = Array.isArray(values[name]) ? [...values[name], value] : [values[name], value];
-  else values[name] = value;
-}
-
 function response(packet, status, body = Buffer.alloc(0), headers = {}) {
   if (body.byteLength > MAX_BODY_BYTES) return response(packet, 413, Buffer.from("response body is too large"), { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store" });
   const outputHeaders = { "Cache-Control": "no-store", ...headers };
@@ -93,12 +82,15 @@ function requestUrl(packet) {
   return { pathname, encodedPathname: url.pathname, search: url.search };
 }
 
-async function staticResponse(root, packet, workspaceId) {
-  const published = (status, body = Buffer.alloc(0), headers = {}) => response(packet, status, body, { ...headers, "X-LetMeKnow-Workspace": workspaceId });
+async function staticResponse(root, packet, page, pageEvent) {
+  const published = (status, body = Buffer.alloc(0), headers = {}) => response(packet, status, body, headers);
   const method = typeof packet.method === "string" ? packet.method.toUpperCase() : "";
   if (method !== "GET" && method !== "HEAD") return errorResponse(packet, 405, "method not allowed");
   let request;
   try { request = requestUrl(packet); } catch { return errorResponse(packet, 400, "bad request"); }
+  if (request.pathname === "/" || request.pathname === "/index.html") {
+    return published(200, Buffer.from(page), { "Content-Type": "text/html; charset=utf-8", "X-LetMeKnow-Page-Event": String(pageEvent) });
+  }
   if (deniedPath(request.pathname)) return errorResponse(packet, 403, "forbidden");
   const candidate = resolve(root, "." + request.pathname);
   if (!inside(root, candidate)) return errorResponse(packet, 403, "forbidden");
@@ -151,69 +143,44 @@ async function staticResponse(root, packet, workspaceId) {
   }
 }
 
-async function multipartSubmission(body, contentType, getAttachmentInbox) {
-  const formData = await new Request("http://letmeknow.local", {
-    method: "POST",
-    headers: { "Content-Type": contentType },
-    body
-  }).formData();
-  const values = Object.create(null);
-  const attachments = [];
-  for (const [name, value] of formData) {
-    if (typeof value === "string") {
-      addValue(values, name, value);
-      continue;
-    }
-    if (value.name === "") continue;
-    const bytes = Buffer.from(await value.arrayBuffer());
-    const path = join(await getAttachmentInbox(), randomUUID());
-    await writeFile(path, bytes, { mode: 0o600, flag: "wx" });
-    attachments.push({ field: name, name: value.name, type: value.type, size: bytes.byteLength, path });
-  }
-  return { values, attachments };
+async function readInitialPage(root) {
+  const candidate = join(root, "index.html");
+  const target = await safeRealpath(root, candidate);
+  if (target === null || target === undefined || deniedPath("/" + relative(root, target).split(sep).join("/"))) throw new Error("index.html is required");
+  const info = await stat(target);
+  if (!info.isFile()) throw new Error("index.html must be a file");
+  if (info.size > MAX_BODY_BYTES) throw new Error("index.html is too large");
+  return (await readFile(target)).toString("utf8");
 }
 
-async function submission(packet, getAttachmentInbox, recordInteraction) {
-  const url = requestUrl(packet);
+async function submission(packet, recordInteraction) {
+  const request = requestUrl(packet);
   const method = typeof packet.method === "string" ? packet.method.toUpperCase() : "";
-  const values = Object.create(null);
-  let attachments;
-  if (method === "GET") {
-    for (const [name, value] of new URLSearchParams(url.search)) addValue(values, name, value);
-  } else if (method === "POST") {
-    const body = Buffer.from(typeof packet.body === "string" ? packet.body : "", "base64");
-    if (body.byteLength > MAX_BODY_BYTES) throw new Error("submission is too large");
-    const contentTypeHeader = header(packet, "content-type");
-    const contentType = contentTypeHeader?.split(";", 1)[0].trim().toLowerCase();
-    if (contentType === "application/x-www-form-urlencoded") {
-      for (const [name, value] of new URLSearchParams(body.toString("utf8"))) addValue(values, name, value);
-    } else if (contentType === "multipart/form-data" && contentTypeHeader) {
-      const parsed = await multipartSubmission(body, contentTypeHeader, getAttachmentInbox);
-      Object.assign(values, parsed.values);
-      attachments = parsed.attachments;
-    } else throw new Error("unsupported submission encoding");
-  } else throw new Error("unsupported submission method");
-  const event = {
-    type: "submit",
-    id: encodedHeader(packet, "x-letmeknow-id") || randomUUID(),
-    method,
-    action: encodedHeader(packet, "x-letmeknow-action") || url.pathname,
-    form_id: encodedHeader(packet, "x-letmeknow-form-id"),
-    trigger: { id: encodedHeader(packet, "x-letmeknow-trigger-id"), name: encodedHeader(packet, "x-letmeknow-trigger-name"), value: encodedHeader(packet, "x-letmeknow-trigger-value") },
-    values
-  };
-  const basedOn = encodedHeader(packet, "x-letmeknow-based-on");
-  if (basedOn !== null) event.based_on = basedOn;
-  if (attachments?.length) event.attachments = attachments;
-  await recordInteraction(event);
+  if (method !== "POST" || request.pathname !== "/_letmeknow/submit") throw new Error("invalid submission endpoint");
+  const contentType = header(packet, "content-type")?.split(";", 1)[0].trim().toLowerCase();
+  if (contentType !== "application/json") throw new Error("JSON submission is required");
+  const body = Buffer.from(typeof packet.body === "string" ? packet.body : "", "base64");
+  if (body.byteLength > MAX_BODY_BYTES) throw new Error("submission is too large");
+  let value;
+  try { value = JSON.parse(body.toString("utf8")); } catch { throw new Error("invalid submission JSON"); }
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("submission must be an object");
+  if (typeof value.id !== "string" || !uuidPattern.test(value.id)) throw new Error("submission id must be a UUID");
+  if (!Number.isSafeInteger(value.page_event) || value.page_event < 0) throw new Error("page_event must be a non-negative integer");
+  if (value.form_id !== null && typeof value.form_id !== "string") throw new Error("form_id must be text or null");
+  if (typeof value.action !== "string") throw new Error("action is required");
+  if (value.trigger !== null && (typeof value.trigger !== "object" || Array.isArray(value.trigger))) throw new Error("trigger must be an object or null");
+  if (!value.values || typeof value.values !== "object" || Array.isArray(value.values)) throw new Error("values are required");
+  await recordInteraction({ type: "submit", id: value.id, page_event: value.page_event, form_id: value.form_id, action: value.action, trigger: value.trigger, values: value.values });
   return response(packet, 202);
 }
 
-async function handleRequest(root, workspaceId, packet, getAttachmentInbox, recordInteraction) {
-  if (header(packet, "x-letmeknow-submission") === "1") {
-    try { return await submission(packet, getAttachmentInbox, recordInteraction); } catch (cause) { return errorResponse(packet, cause?.message === "submission is too large" ? 413 : 400, cause instanceof Error ? cause.message : "invalid submission"); }
+async function handleRequest(root, page, pageEvent, packet, recordInteraction) {
+  let request;
+  try { request = requestUrl(packet); } catch { return errorResponse(packet, 400, "bad request"); }
+  if (request.pathname === "/_letmeknow/submit") {
+    try { return await submission(packet, recordInteraction); } catch (cause) { return errorResponse(packet, cause?.message === "submission is too large" ? 413 : 400, cause instanceof Error ? cause.message : "invalid submission"); }
   }
-  return staticResponse(root, packet, workspaceId);
+  return staticResponse(root, packet, page, pageEvent);
 }
 
 function options(directory) {
@@ -227,40 +194,6 @@ function controlPath(root) {
   return join(tmpdir(), `${CONTROL_PREFIX}${key}.sock`);
 }
 
-async function copyDirectory(source, target, root, visited = new Set()) {
-  const sourceReal = await realpath(source);
-  if (visited.has(sourceReal)) return;
-  visited.add(sourceReal);
-  await mkdir(target, { recursive: true });
-  for (const entry of await readdir(sourceReal, { withFileTypes: true })) {
-    const candidate = join(sourceReal, entry.name);
-    const pathname = "/" + relative(root, candidate).split(sep).join("/");
-    if (deniedPath(pathname)) continue;
-    const targetPath = join(target, entry.name);
-    const targetReal = await safeRealpath(root, candidate);
-    if (targetReal === null) {
-      if ((await lstat(candidate)).isSymbolicLink()) await symlink(await readlink(candidate), targetPath);
-      continue;
-    }
-    if (targetReal === undefined) continue;
-    if (deniedPath("/" + relative(root, targetReal).split(sep).join("/"))) continue;
-    const info = await stat(targetReal);
-    if (info.isDirectory()) await copyDirectory(targetReal, targetPath, root, visited);
-    else if (info.isFile()) await copyFile(targetReal, targetPath);
-  }
-}
-
-async function snapshotDirectory(root) {
-  const snapshot = await mkdtemp(join(tmpdir(), SNAPSHOT_PREFIX));
-  try {
-    await copyDirectory(root, snapshot, root);
-    return snapshot;
-  } catch (cause) {
-    await rm(snapshot, { recursive: true, force: true });
-    throw cause;
-  }
-}
-
 function mutateQueue() {
   let chain = Promise.resolve();
   return operation => {
@@ -302,20 +235,19 @@ function connectControl(root, packet) {
   });
 }
 
+function pageHash(page) {
+  return createHash("sha256").update(page).digest("hex");
+}
+
 async function start(directory) {
   const { root } = await options(directory);
-  let attachmentInboxPromise;
-  const getAttachmentInbox = () => {
-    attachmentInboxPromise ??= mkdtemp(join(tmpdir(), "letmeknow-attachments-"));
-    return attachmentInboxPromise;
-  };
-  const socketPath = controlPath(root);
-  let publishedRoot = await snapshotDirectory(root);
-  let workspaceId = randomUUID();
-  let workspaceSequence = 1;
-  const workspaceIds = new Set([workspaceId]);
+  let page = await readInitialPage(root);
+  let pageEvent = 0;
+  let eventNumber = 0;
+  const currentPageHash = () => pageHash(page);
   const eventLog = [];
-  let committedCursor = 0;
+  const browserEvents = [];
+  let committedBrowserCursor = 0;
   const seenEvents = new Set();
   const tokens = new Map();
   const pendingTokens = new Map();
@@ -332,32 +264,24 @@ async function start(directory) {
   let retryUntil = 0;
   let stopped = false;
   let ready = false;
-  let initialPublished = false;
 
   const batch = () => {
-    const start = committedCursor;
-    const end = eventLog.length;
-    const key = `${workspaceId}:${start}:${end}`;
+    const start = committedBrowserCursor;
+    const end = browserEvents.length;
+    const key = `${pageEvent}:${start}:${end}`;
     const existing = pendingTokens.get(key);
     if (existing) return existing;
     const token = randomUUID();
-    const events = eventLog.slice(start, end).map(event => ({
-      ...event,
-      context: {
-        based_on: event.based_on ?? null,
-        current: workspaceId,
-        relationship: event.based_on === workspaceId ? "current" : workspaceIds.has(event.based_on) ? "stale" : "unknown"
-      }
-    }));
-    tokens.set(token, { start, end, parent: workspaceId, status: "pending", key });
-    const result = { ok: true, type: "batch", token, workspace: workspaceId, workspace_sequence: workspaceSequence, frontier: end, events };
+    const events = browserEvents.slice(start, end);
+    tokens.set(token, { start, end, page_event: pageEvent, status: "pending", key, page_hash: currentPageHash(), has_page: null, requested_page_hash: null });
+    const result = { ok: true, type: "batch", token, frontier: eventNumber, page_event: pageEvent, page_hash: currentPageHash(), events };
     pendingTokens.set(key, result);
     return result;
   };
 
   const notifyPullWaiters = () => {
     for (const waiter of [...pullWaiters]) {
-      if (eventLog.length === committedCursor) continue;
+      if (browserEvents.length === committedBrowserCursor) continue;
       pullWaiters.delete(waiter);
       clearTimeout(waiter.timer);
       waiter.resolve(batch());
@@ -365,53 +289,57 @@ async function start(directory) {
   };
 
   const pull = waitSeconds => {
-    if (eventLog.length > committedCursor || waitSeconds <= 0) return Promise.resolve(batch());
+    if (browserEvents.length > committedBrowserCursor || waitSeconds <= 0) return Promise.resolve(batch());
     return new Promise(resolve => {
       const waiter = { resolve, timer: setTimeout(() => { pullWaiters.delete(waiter); resolve(batch()); }, waitSeconds * 1_000) };
       pullWaiters.add(waiter);
     });
   };
 
-  const commit = async (token, publish) => {
+  const commit = async (token, requestedPage) => {
     const record = tokens.get(token);
     if (!record) return { ok: false, error: "unknown batch token" };
-    if (record.status !== "pending") return record.result;
-    if (record.start < committedCursor && record.end <= committedCursor) {
-      pendingTokens.delete(record.key);
-      record.status = "committed";
-      record.result = { ok: true, type: "already_committed", token, workspace: workspaceId, workspace_sequence: workspaceSequence, frontier: committedCursor };
-      return record.result;
+    const hasPage = requestedPage !== undefined;
+    const requestedPageHash = hasPage ? pageHash(requestedPage) : null;
+    if (record.status !== "pending") {
+      if (record.has_page === hasPage && record.requested_page_hash === requestedPageHash) return record.result;
+      return { ok: false, error: "batch was already committed with a different page payload" };
     }
-    if (record.parent !== workspaceId || record.start !== committedCursor) {
+    record.has_page = hasPage;
+    record.requested_page_hash = requestedPageHash;
+    if (record.page_event !== pageEvent || record.start !== committedBrowserCursor) {
       pendingTokens.delete(record.key);
       record.status = "failed";
-      record.result = { ok: false, error: "batch is based on an old workspace or cursor", current_workspace: workspaceId, frontier: committedCursor };
+      record.result = { ok: false, error: "batch is based on an old page or browser cursor", frontier: eventNumber, page_event: pageEvent, page_hash: currentPageHash() };
       return record.result;
     }
-    if (publish) {
-      const nextRoot = await snapshotDirectory(root);
-      const previousRoot = publishedRoot;
-      publishedRoot = nextRoot;
-      workspaceId = randomUUID();
-      workspaceIds.add(workspaceId);
-      workspaceSequence += 1;
-      record.result = { ok: true, type: "published", token, workspace: workspaceId, workspace_sequence: workspaceSequence, parent: record.parent, frontier: record.end, events: eventLog.slice(record.start, record.end).map(event => event.id) };
-      void rm(previousRoot, { recursive: true, force: true }).catch(() => {});
-    } else {
-      record.result = { ok: true, type: "acknowledged", token, workspace: workspaceId, workspace_sequence: workspaceSequence, frontier: record.end, events: eventLog.slice(record.start, record.end).map(event => event.id) };
+    if (hasPage && Buffer.byteLength(requestedPage, "utf8") > MAX_BODY_BYTES) return { ok: false, error: "page is too large" };
+    const committedEvents = browserEvents.slice(record.start, record.end).map(event => event.id);
+    let update;
+    if (hasPage) {
+      page = requestedPage;
+      eventNumber += 1;
+      pageEvent = eventNumber;
+      update = { type: "update_ui", event_number: pageEvent, html: page };
+      eventLog.push(update);
     }
-    committedCursor = record.end;
+    committedBrowserCursor = record.end;
     pendingTokens.delete(record.key);
     record.status = "committed";
-    if (publish) send({ type: "revision" });
+    record.result = { ok: true, type: "committed", token, frontier: eventNumber, page_event: pageEvent, page_hash: currentPageHash(), events: committedEvents };
+    if (update) send(update);
     return record.result;
   };
 
   const dispatchControl = async request => {
     if (!request || typeof request !== "object") return { ok: false, error: "invalid control request" };
     if (request.type === "pull") return pull(Number.isFinite(request.wait_seconds) ? Math.max(0, request.wait_seconds) : 0);
-    if (request.type === "push") return commit(typeof request.token === "string" ? request.token : "", true);
-    if (request.type === "ack") return commit(typeof request.token === "string" ? request.token : "", false);
+    if (request.type === "show") return { ok: true, type: "page", page_event: pageEvent, page_hash: currentPageHash(), html: page };
+    if (request.type === "push") {
+      if (typeof request.token !== "string") return { ok: false, error: "batch token is required" };
+      if (request.page !== undefined && typeof request.page !== "string") return { ok: false, error: "page must be text" };
+      return commit(request.token, request.page);
+    }
     return { ok: false, error: "unknown control request" };
   };
 
@@ -423,7 +351,7 @@ async function start(directory) {
     let handled = false;
     connection.on("data", async chunk => {
       input += chunk;
-      if (input.length > MAX_BODY_BYTES || handled) return;
+      if (input.length > CONTROL_MAX_BYTES || handled) return;
       const newline = input.indexOf("\n");
       if (newline < 0) return;
       handled = true;
@@ -439,20 +367,20 @@ async function start(directory) {
   });
   await new Promise((resolveListen, reject) => {
     controlServer.once("error", reject);
-    controlServer.listen(socketPath, async () => {
-      try { await chmod(socketPath, 0o600); } catch (cause) { controlServer.close(() => reject(cause)); return; }
+    controlServer.listen(controlPath(root), async () => {
+      try { await chmod(controlPath(root), 0o600); } catch (cause) { controlServer.close(() => reject(cause)); return; }
       controlServer.off("error", reject);
       resolveListen();
     });
-  }).catch(async cause => {
-    await rm(publishedRoot, { recursive: true, force: true });
-    throw new Error(`cannot start local control channel: ${cause.message}`);
-  });
+  }).catch(cause => { throw new Error(`cannot start local control channel: ${cause.message}`); });
 
   const recordInteraction = event => mutate(async () => {
     if (seenEvents.has(event.id)) return;
     seenEvents.add(event.id);
-    eventLog.push(event);
+    eventNumber += 1;
+    const numbered = { ...event, event_number: eventNumber };
+    eventLog.push(numbered);
+    browserEvents.push(numbered);
     notifyPullWaiters();
   });
 
@@ -465,11 +393,7 @@ async function start(directory) {
     try { socket?.close(); } catch {}
     for (const connection of controlConnections) connection.destroy();
     await new Promise(resolveClose => controlServer.close(() => resolveClose()));
-    await unlink(socketPath).catch(() => {});
-    await rm(publishedRoot, { recursive: true, force: true });
-    if (attachmentInboxPromise) {
-      try { await rm(await attachmentInboxPromise, { recursive: true, force: true }); } catch {}
-    }
+    await unlink(controlPath(root)).catch(() => {});
     process.exit(code);
   };
   process.once("SIGINT", () => void stop(0));
@@ -478,7 +402,7 @@ async function start(directory) {
   const retry = () => {
     if (stopped || Date.now() >= retryUntil) return void stop(1);
     retryTimer = setTimeout(() => { retryTimer = undefined; connect(); }, retryDelay);
-    retryDelay = Math.min(retryDelay * 2, MAX_RETRY_DELAY);
+    retryDelay = Math.min(retryDelay * 2, 5_000);
   };
 
   const connect = () => {
@@ -511,15 +435,11 @@ async function start(directory) {
       } else if (packet.type === "session") {
         if (!validSessionUrl(packet.url)) return void stop(1);
         sessionUrl = packet.url;
-        if (!initialPublished) {
-          initialPublished = true;
-          send({ type: "revision" });
-        }
-        if (!ready) { ready = true; process.stdout.write(`${JSON.stringify({ type: "ready", url: sessionUrl, workspace: workspaceId, workspace_sequence: workspaceSequence })}\n`); }
+        if (!ready) { ready = true; process.stdout.write(`${JSON.stringify({ type: "ready", url: sessionUrl, page_event: pageEvent, page_hash: currentPageHash() })}\n`); }
       } else if (packet.type === "http_request") {
-        const requestRoot = publishedRoot;
-        const requestWorkspace = workspaceId;
-        void handleRequest(requestRoot, requestWorkspace, packet, getAttachmentInbox, recordInteraction).then(result => send(result)).catch(() => send(errorResponse(packet, 500, "preview request failed")));
+        const requestPage = page;
+        const requestPageEvent = pageEvent;
+        void handleRequest(root, requestPage, requestPageEvent, packet, recordInteraction).then(result => send(result)).catch(() => send(errorResponse(packet, 500, "preview request failed")));
       } else if (packet.type === "closed") {
         void stop(0);
       } else if (packet.type === "error") {
@@ -563,7 +483,7 @@ function validSessionUrl(value) {
 }
 
 function usage() {
-  return "Usage:\n  npx letmeknow-cli serve <directory>\n  npx letmeknow-cli pull <directory> [--wait <seconds>]\n  npx letmeknow-cli push <directory> --based-on <token>\n  npx letmeknow-cli ack <directory> --based-on <token>\n";
+  return "Usage:\n  npx letmeknow-cli serve <directory>\n  npx letmeknow-cli show <directory>\n  npx letmeknow-cli pull <directory> [--wait <seconds>]\n  npx letmeknow-cli push <directory> --batch <token> [--page <file|->]\n";
 }
 
 function commandArgs() {
@@ -575,7 +495,8 @@ function commandArgs() {
         skill: { type: "boolean" },
         help: { type: "boolean", short: "h" },
         wait: { type: "string" },
-        "based-on": { type: "string" }
+        batch: { type: "string" },
+        page: { type: "string" }
       },
       allowPositionals: true,
       strict: true
@@ -584,22 +505,40 @@ function commandArgs() {
     throw new Error(cause instanceof Error ? cause.message : "invalid arguments");
   }
   if (parsed.values.skill || parsed.values.help) {
-    if (parsed.positionals.length || parsed.values.wait !== undefined || parsed.values["based-on"] !== undefined) throw new Error(usage());
+    if (parsed.positionals.length || parsed.values.wait !== undefined || parsed.values.batch !== undefined || parsed.values.page !== undefined) throw new Error(usage());
     return { command: parsed.values.skill ? "skill" : "help" };
   }
   const [command, directory, ...extra] = parsed.positionals;
   if (!command || !directory || extra.length) throw new Error(usage());
-  if (command === "serve" && (parsed.values.wait !== undefined || parsed.values["based-on"] !== undefined)) throw new Error(usage());
-  if (command === "pull" && parsed.values["based-on"] !== undefined) throw new Error(usage());
-  if ((command === "push" || command === "ack") && parsed.values.wait !== undefined) throw new Error(usage());
-  if (!["serve", "pull", "push", "ack"].includes(command)) throw new Error(usage());
+  if (!["serve", "show", "pull", "push"].includes(command)) throw new Error(usage());
+  if ((command === "serve" || command === "show") && (parsed.values.wait !== undefined || parsed.values.batch !== undefined || parsed.values.page !== undefined)) throw new Error(usage());
+  if (command === "pull" && (parsed.values.batch !== undefined || parsed.values.page !== undefined)) throw new Error(usage());
+  if (command === "push" && parsed.values.wait !== undefined) throw new Error(usage());
   let wait = 0;
   if (parsed.values.wait !== undefined) {
     wait = Number(parsed.values.wait);
     if (!Number.isFinite(wait) || wait < 0) throw new Error("--wait must be a non-negative number");
   }
-  if ((command === "push" || command === "ack") && typeof parsed.values["based-on"] !== "string") throw new Error("--based-on is required");
-  return { command, directory, wait, token: parsed.values["based-on"] };
+  if (command === "push" && typeof parsed.values.batch !== "string") throw new Error("--batch is required");
+  return { command, directory, wait, token: parsed.values.batch, page: parsed.values.page };
+}
+
+async function readPageInput(filename) {
+  const chunks = [];
+  let length = 0;
+  if (filename === "-") {
+    for await (const chunk of process.stdin) {
+      const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+      length += value.byteLength;
+      if (length > MAX_BODY_BYTES) throw new Error("page is too large");
+      chunks.push(value);
+    }
+  } else {
+    const body = await readFile(resolve(filename));
+    if (body.byteLength > MAX_BODY_BYTES) throw new Error("page is too large");
+    chunks.push(body);
+  }
+  return Buffer.concat(chunks).toString("utf8");
 }
 
 let command;
@@ -610,8 +549,16 @@ try {
   else if (command.command === "serve") await start(command.directory);
   else {
     const { root } = await options(command.directory);
-    const result = await connectControl(root, command.command === "pull" ? { type: "pull", wait_seconds: command.wait } : { type: command.command, token: command.token });
-    process.stdout.write(`${JSON.stringify(result)}\n`);
+    let packet;
+    if (command.command === "pull") packet = { type: "pull", wait_seconds: command.wait };
+    else if (command.command === "show") packet = { type: "show" };
+    else {
+      packet = { type: "push", token: command.token };
+      if (command.page !== undefined) packet.page = await readPageInput(command.page);
+    }
+    const result = await connectControl(root, packet);
+    if (command.command === "show" && result.ok) process.stdout.write(result.html);
+    else process.stdout.write(`${JSON.stringify(result)}\n`);
     if (!result.ok) process.exitCode = 1;
   }
 } catch (cause) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "letmeknow-cli",
-  "version": "0.6.0",
-  "description": "A live static preview with agent-readable form submissions.",
+  "version": "0.7.0",
+  "description": "A live agent-authored page with structured browser feedback.",
   "files": [
     "bin",
     "SKILL.md"
@@ -24,6 +24,7 @@
     "@cloudflare/vitest-plugin": "^1.1.0",
     "@cloudflare/workers-types": "^5.20260825.1",
     "@types/node": "^22.15.17",
+    "idiomorph": "0.7.4",
     "typescript": "^5.9.2",
     "vitest": "^4.1.11",
     "wrangler": "^4.126.0",