mnfst-run 1.0.22 → 1.0.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mnfst-run",
-  "version": "1.0.22",
+  "version": "1.0.23",
   "description": "Zero-dependency dev server for Manifest projects",
   "type": "module",
   "bin": {

package/serve.mjs

@@ -101,6 +101,7 @@ const MIME = {
 //   server the tab is gone.
 const LIVE_RELOAD_SCRIPT = `<script>
 (function () {
+  window.__mnfstRun = true; // dev marker: the framework loader skips its service worker here
   var tabId = (window.crypto && crypto.randomUUID)
     ? crypto.randomUUID()
     : (Math.random().toString(36).slice(2) + Date.now().toString(36));
@@ -396,6 +397,32 @@ const aiConfig = (() => {
   try { return JSON.parse(readFileSync(join(root, 'manifest.json'), 'utf8')).ai || null; }
   catch { return null; }
 })();
+
+// Doc-grounding: `ai.system` (persona/instructions) + optional `ai.grounding`
+// (URL or project-relative file whose text is appended to the system prompt).
+// Resolved ONCE at startup so the combined prompt is byte-identical across
+// requests — the precondition for the server-side prompt cache to hit.
+let aiSystemResolved = (aiConfig && aiConfig.system) || '';
+async function resolveAiGrounding() {
+  const src = aiConfig && aiConfig.grounding;
+  if (!src) return;
+  try {
+    let text;
+    if (/^https?:\/\//.test(src)) {
+      const r = await fetch(src);
+      if (!r.ok) throw new Error(`http ${r.status}`);
+      text = await r.text();
+    } else {
+      text = readFileSync(join(root, src), 'utf8');
+    }
+    aiSystemResolved = (aiSystemResolved ? aiSystemResolved + '\n\n' : '')
+      + '<reference_documentation>\n' + text + '\n</reference_documentation>';
+    console.log(`[mnfst-run] AI grounding loaded from ${src} (${text.length} bytes)`);
+  } catch (e) {
+    console.warn(`[mnfst-run] AI grounding failed to load from ${src}: ${e.message} — continuing without it`);
+  }
+}
+if (aiConfig) resolveAiGrounding();
 const aiKey = process.env.ANTHROPIC_API_KEY || privateEnv.ANTHROPIC_API_KEY || '';
 if (publicEnv.PUBLIC_ANTHROPIC_API_KEY) {
   // The one footgun: a PUBLIC_-prefixed LLM key would ship to every visitor.
@@ -420,6 +447,12 @@ function streamMockAi(res) {
   res.on('close', () => clearInterval(tick));
 }
 async function streamRealAi(res, payload) {
+  // System prompt as a cache_control block: the (instructions + grounding) text
+  // is byte-identical every request, so Anthropic serves it from the prompt
+  // cache (~0.1× input price) after the first request — long doc-grounded
+  // prompts cost near-nothing per message. Per-request payload.system overrides
+  // (adapter opts) still work but won't share the project-level cache entry.
+  const systemText = payload.system || aiSystemResolved;
   const upstream = await fetch('https://api.anthropic.com/v1/messages', {
     method: 'POST',
     headers: { 'content-type': 'application/json', 'x-api-key': aiKey, 'anthropic-version': '2023-06-01' },
@@ -427,7 +460,7 @@ async function streamRealAi(res, payload) {
       model: payload.model || aiConfig.model || 'claude-haiku-4-5',
       max_tokens: payload.max_tokens || aiConfig.maxTokens || 1024,
       stream: true,
-      system: payload.system || aiConfig.system || undefined,
+      system: systemText ? [{ type: 'text', text: systemText, cache_control: { type: 'ephemeral' } }] : undefined,
       messages: payload.messages || []
     })
   });
@@ -764,7 +797,12 @@ function navigateToNode(html, path) {             // path indices are relative t
 }
 function resolveComponentFile(manifest, name) {
   const all = [...(manifest.preloadedComponents || []), ...(manifest.components || [])];
-  return all.find(p => String(p).split('/').pop().replace('.html', '') === name) || null;
+  const listed = all.find(p => String(p).split('/').pop().replace('.html', '') === name);
+  if (listed) return listed;
+  // Convention component: components/<name>.html needs no manifest entry.
+  const rel = 'components/' + name + '.html';
+  const file = safeResolve('/' + rel);
+  return file && isFile(file) ? rel : null;
 }
 
 // Theme var write: rewrite (or append) a single `--var: value;` in the target CSS file.
@@ -865,6 +903,20 @@ function writeComponentInstance(file, key, overrides, removals) {
   return { region: key, status: 'written', file: basename(file), applied: Object.keys(overrides || {}), removed: removals || [] };
 }
 
+// No-op service worker served at /sw.js when the project has none: a stale
+// production worker (cached shell from a previous deploy) can never hold a
+// dev session. It replaces that worker at the next update check, clears the
+// framework's caches and unregisters itself.
+const NOOP_SW = `// mnfst-run: no-op service worker (unregisters itself, clears Manifest caches)
+self.addEventListener('install', function () { self.skipWaiting(); });
+self.addEventListener('activate', function (e) {
+  e.waitUntil((async function () {
+    try { var keys = await caches.keys(); await Promise.all(keys.filter(function (k) { return k.indexOf('mnfst-sw:') === 0; }).map(function (k) { return caches.delete(k); })); } catch (_) {}
+    try { await self.registration.unregister(); } catch (_) {}
+  })());
+});
+`;
+
 // Resolve a request path against `root` and refuse anything that escapes.
 // `path.join` does NOT prevent `..` traversal — `join('/a/b', '/../../etc/passwd')`
 // returns `/etc/passwd`. Use `path.resolve` + an explicit prefix check.
@@ -1158,6 +1210,12 @@ const server = createServer((req, res) => {
   const exact = safeResolve(urlPath);
   if (exact && isFile(exact)) return serveFile(res, exact);
 
+  if (urlPath === '/sw.js') {
+    res.writeHead(200, { 'Content-Type': 'text/javascript; charset=utf-8', 'Cache-Control': 'no-store' });
+    res.end(NOOP_SW);
+    return;
+  }
+
   const indexPath = safeResolve(urlPath.replace(/\/$/, '') + '/index.html');
   if (indexPath && isFile(indexPath)) return serveFile(res, indexPath);