rewritable 0.5.0 → 0.7.0

package/README.md

@@ -125,10 +125,10 @@ The agent loop retries up to 3 times when the model emits plain text instead of
 
 | Flag | Effect |
 |---|---|
-| `--backend <name>` | `openrouter` (default), `ollama`, `lmstudio`. Falls back to `$RWA_BACKEND`. `bridge` is browser-only by design. |
+| `--backend <name>` | `openrouter` (default), `ollama`, `lmstudio`, `atomic`. Falls back to `$RWA_BACKEND`. `bridge` is browser-only by design. |
 | `--model <id>` | model id passed to the backend. Falls back to `$RWA_MODEL`, then `google/gemini-3.5-flash`. |
-| `--base-url <url>` | OpenAI-compatible base URL override. Defaults: `https://openrouter.ai/api/v1`, `http://localhost:11434/v1` (or `$RWA_OLLAMA_URL`), `http://localhost:1234/v1` (or `$RWA_LMSTUDIO_URL`). |
-| `--api-key <key>` | openrouter only; falls back to `$RWA_OPENROUTER_KEY`. ollama / lmstudio run locally without auth. |
+| `--base-url <url>` | OpenAI-compatible base URL override. Defaults: `https://openrouter.ai/api/v1`, `http://localhost:11434/v1` (or `$RWA_OLLAMA_URL`), `http://localhost:1234/v1` (or `$RWA_LMSTUDIO_URL`), `http://127.0.0.1:1337/v1` (or `$RWA_ATOMIC_URL`). |
+| `--api-key <key>` | openrouter only; falls back to `$RWA_OPENROUTER_KEY`. ollama / lmstudio / atomic run locally without auth. |
 
 #### Other edit flags
 

package/bin/rwa.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { newCmd, importCmd, version, KNOWN_KINDS, openWithPrefill, SEED_CANDIDATES } from '../src/commands.mjs';
-import { resolveApiKey } from '../src/backend.mjs';
+import { resolveApiKey, backendMaxTokens } from '../src/backend.mjs';
 import { parseCreateArgs, createCmd } from '../src/create.mjs';
 import { relative } from 'node:path';
 
@@ -101,7 +101,7 @@ Flags:
   --open, -o     open the resulting file in the default app. First-paint
                  sessionStorage is pre-populated from env / ./.env:
                    OPENROUTER_API_KEY → ?key=…    (lifted into rwa_apikey)
-                   RWA_BACKEND        → ?backend= (openrouter|ollama|lmstudio|bridge)
+                   RWA_BACKEND        → ?backend= (openrouter|ollama|lmstudio|atomic|bridge)
                    RWA_MODEL          → ?model=…  (model name string)
                  The bootstrap lifts each into sessionStorage and scrubs the
                  URL bar on first paint, so the values don't sit in history.
@@ -137,8 +137,8 @@ Flags:
                  the raw body; on failure, the \`{code, subcode, details}\`
                  object goes to stderr.
   --backend <n>  (edit instruction path / skin --l1) backend name. One of:
-                 openrouter (default), ollama, lmstudio. Falls back to
-                 \$RWA_BACKEND if unset.
+                 openrouter (default), ollama, lmstudio, atomic. Falls back
+                 to \$RWA_BACKEND if unset.
   --model <id>   (edit instruction path / skin --l1) model id passed to the
                  backend. Falls back to \$RWA_MODEL, then a
                  sensible default for the backend.
@@ -248,6 +248,7 @@ function envBaseUrl(name) {
     case 'openrouter': return 'https://openrouter.ai/api/v1';
     case 'ollama':     return process.env.RWA_OLLAMA_URL || 'http://localhost:11434/v1';
     case 'lmstudio':   return process.env.RWA_LMSTUDIO_URL || 'http://localhost:1234/v1';
+    case 'atomic':     return process.env.RWA_ATOMIC_URL || 'http://127.0.0.1:1337/v1';
     default:           return undefined;
   }
 }
@@ -377,7 +378,7 @@ function detectProductKind(fileText) {
 
         // Reject unknown backends fast. `bridge` is browser-only by design
         // (single-shot via web_cli_bridge); the CLI has no equivalent.
-        if (!['openrouter', 'ollama', 'lmstudio'].includes(backendName)) {
+        if (!['openrouter', 'ollama', 'lmstudio', 'atomic'].includes(backendName)) {
           emitEdit({ code: 'usage_error', subcode: 'unknown_backend', details: { backend: backendName } }, jsonMode);
           process.exitCode = 1;
           return;
@@ -457,7 +458,7 @@ function detectProductKind(fileText) {
             currentDoc: promptDoc,
             instruction,
             frozenZoneNames,
-            backend: { baseUrl, model: modelId, apiKey },
+            backend: { baseUrl, model: modelId, apiKey, maxTokens: backendMaxTokens(backendName) },
             onRetry: r => {
               if (jsonMode) {
                 process.stderr.write(JSON.stringify({ phase: 'retry', attempt: r.attempt, reason: r.reason }) + '\n');
@@ -845,7 +846,7 @@ function detectProductKind(fileText) {
         const baseUrl     = baseUrlFlag.value || envBaseUrl(backendName);
         const apiKey      = resolveApiKey(backendName, apiKeyFlag.value);
 
-        if (!['openrouter', 'ollama', 'lmstudio'].includes(backendName)) {
+        if (!['openrouter', 'ollama', 'lmstudio', 'atomic'].includes(backendName)) {
           emitSkin({ code: 'usage_error', subcode: 'unknown_backend', details: { backend: backendName } });
           process.exitCode = 1; return;
         }
@@ -882,7 +883,7 @@ function detectProductKind(fileText) {
           result = await skinCmdL1(filePath, action, {
             systemPrompt,
             toolSchemas: TOOL_SCHEMAS,
-            backend: { baseUrl, model: modelId, apiKey },
+            backend: { baseUrl, model: modelId, apiKey, maxTokens: backendMaxTokens(backendName) },
             onRetry: r => {
               if (jsonMode) process.stderr.write(JSON.stringify({ phase: 'retry', attempt: r.attempt, reason: r.reason }) + '\n');
               else process.stderr.write(`rwa skin: attempt ${r.attempt}/3 retrying — ${r.reason}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rewritable",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "CLI for re-writeable: emit and import single-file rwa documents.",
   "type": "module",
   "bin": {

package/seeds/rewritable.html

@@ -88,6 +88,17 @@ body{font-family:var(--font-ui);background:var(--bg);color:var(--text);min-heigh
 #rwa-info-panel .rwa-info-foot{margin-top:12px;padding-top:10px;border-top:1px solid var(--gray-100);font-size:11px;color:var(--gray-500);line-height:1.5;}
 #rwa-info-panel strong{color:var(--gray-900);font-weight:600;}
 #rwa-info-panel code{font-family:var(--font-mono);font-size:11px;background:var(--gray-50);padding:1px 5px;border-radius:4px;color:var(--gray-700);}
+#rwa-share-panel{position:fixed;top:50px;right:12px;background:var(--white);border:1px solid var(--gray-200);border-radius:var(--radius-sm);padding:18px 20px;display:none;max-width:340px;z-index:999;box-shadow:0 4px 16px rgba(0,0,0,0.08);font-family:var(--font-ui);font-size:13px;line-height:1.55;color:var(--gray-700);}
+#rwa-share-panel.open{display:block;}
+#rwa-share-panel h4{margin:0 0 6px;font-size:15px;color:var(--gray-900);font-weight:600;}
+#rwa-share-panel p{margin:0 0 10px;}
+.rwa-share-url{font-family:var(--font-mono);font-size:11px;background:var(--gray-50);border:1px solid var(--gray-100);border-radius:6px;padding:6px 8px;margin:0 0 8px;cursor:pointer;word-break:break-all;color:var(--gray-700);}
+.rwa-share-fresh{font-family:var(--font-mono);font-size:10px;color:var(--gray-500);margin-bottom:10px;}
+.rwa-share-msg{font-size:12px;color:var(--gray-600);background:var(--gray-50);border-radius:6px;padding:6px 8px;margin-bottom:8px;}
+.rwa-share-actions{display:flex;gap:6px;flex-wrap:wrap;}
+.rwa-share-actions button{font:inherit;font-size:12px;padding:5px 10px;border:1px solid var(--gray-300);border-radius:8px;background:var(--white);color:var(--gray-900);cursor:pointer;}
+.rwa-share-actions button:disabled{opacity:.5;cursor:default;}
+#rwa-share-create,#rwa-share-update{background:var(--gray-900);color:var(--white);border-color:var(--gray-900);}
 .rwa-set-hint code{background:var(--gray-100);padding:1px 4px;border-radius:3px;font-size:10px;}
 .rwa-set-hint.ok{color:#15803d;}
 .rwa-set-hint.err{color:#b91c1c;}
@@ -369,6 +380,13 @@ const RWA = {
   // not block these requests even when the container is served over HTTPS.
   DEFAULT_OLLAMA_URL:'http://localhost:11434/v1',
   DEFAULT_LMSTUDIO_URL:'http://localhost:1234/v1',
+  // atomic.chat: a local OpenAI-compatible inference server (MLX-backed on
+  // Apple Silicon) with the same /v1/chat/completions + /v1/models shape and
+  // real multi-turn tool_calls. CORS note: it allows http(s) page origins out
+  // of the box but NOT the file:// null origin — serve the container from a
+  // local origin (or a hosted projection) to use it.
+  DEFAULT_ATOMIC_URL:'http://127.0.0.1:1337/v1',
+  K_BASE_URL_ATOMIC:'rwa_base_url_atomic',
   // Optional alternative agent backend: a localhost CLI bridge
   // (https://github.com/martintreiber/web_cli_bridge style) that runs
   // arbitrary shell commands. When the user picks "bridge" in settings, ⌘K
@@ -376,6 +394,13 @@ const RWA = {
   // for users with a Claude subscription; the price is a per-call subprocess
   // (~5-10s startup) and a single-shot agent loop (no mid-stream tool_calls).
   BRIDGE_URL:'http://127.0.0.1:8765/run',
+  // Connected-share service (the ↗ panel): a stable share URL the user
+  // explicitly publishes versions to. Network I/O happens ONLY on share
+  // gestures — never at boot, never on ⌘S — so offline-first holds. Dev /
+  // self-hosted services override via sessionStorage rwa_share_base.
+  // Design: docs/plans/2026-06-11-save-affordance-framings.md §7c.
+  SHARE_BASE:'https://rewritable.ikangai.com',
+  K_SHARE_BASE:'rwa_share_base',
 };
 
 // `rwa new -o` / `rwa import -o` can pass first-paint configuration via URL
@@ -393,7 +418,7 @@ try {
     qs.delete('key');
   }
   const b = qs.get('backend');
-  if (b && ['openrouter','ollama','lmstudio','bridge','bridge-session'].includes(b)) {
+  if (b && ['openrouter','ollama','lmstudio','atomic','bridge','bridge-session'].includes(b)) {
     sessionStorage.setItem(RWA.K_BACKEND, b);
     qs.delete('backend');
   }
@@ -1095,10 +1120,11 @@ function buildUI() {
   <button class="rwa-st-btn" id="rwa-st-info" title="what is this?" aria-label="what is this?">ⓘ</button>
   <button class="rwa-st-btn" id="rwa-st-cog">⚙</button>
   <button class="rwa-st-btn" id="rwa-st-skin" title="skins — pick a look" aria-label="skins">✦</button>
+  <button class="rwa-st-btn" id="rwa-st-share" title="share at a link" aria-label="share at a link">↗</button>
   <button class="rwa-st-btn pri" id="rwa-st-commit">⌘S</button>
 </div>
 <div id="rwa-set-panel">
-  <div class="rwa-set-row"><label>Backend</label><select id="rwa-backend"><option value="openrouter">OpenRouter (API key)</option><option value="ollama">Ollama (localhost)</option><option value="lmstudio">LM Studio (localhost)</option><option value="bridge">Bridge (claude -p, localhost)</option><option value="bridge-session">Bridge session (claude, persistent)</option></select></div>
+  <div class="rwa-set-row"><label>Backend</label><select id="rwa-backend"><option value="openrouter">OpenRouter (API key)</option><option value="ollama">Ollama (localhost)</option><option value="lmstudio">LM Studio (localhost)</option><option value="atomic">atomic.chat (localhost)</option><option value="bridge">Bridge (claude -p, localhost)</option><option value="bridge-session">Bridge session (claude, persistent)</option></select></div>
   <div class="rwa-set-row" id="rwa-set-row-key"><label>OpenRouter Key</label><input type="password" id="rwa-key" placeholder="sk-or-..." autocomplete="off"></div>
   <div class="rwa-set-row" id="rwa-set-row-bridge-token" style="display:none;"><label>Bridge Token</label><input type="password" id="rwa-bridge-token" placeholder="WEB_CLI_BRIDGE_TOKEN" autocomplete="off"></div>
   <div class="rwa-set-row" id="rwa-set-row-bridge-cwd" style="display:none;"><label>Session Dir</label><input type="text" id="rwa-bridge-cwd" placeholder="/path/on/bridge/host" autocomplete="off" spellcheck="false"></div>
@@ -1108,6 +1134,7 @@ function buildUI() {
 </div>
 <div id="rwa-info-panel"></div>
 <div id="rwa-skin-panel"></div>
+<div id="rwa-share-panel"></div>
 <div id="rwa-pal">
   <div id="rwa-pal-box">
     <div class="rwa-pal-top">
@@ -1178,6 +1205,12 @@ function buildUI() {
       defaultUrl: RWA.DEFAULT_LMSTUDIO_URL,
       storageKey: RWA.K_BASE_URL_LMSTUDIO,
     },
+    atomic: {
+      showKey: false, showBaseUrl: true, showModel: true, showHint: true,
+      hintHTML: 'atomic.chat serves an OpenAI-compatible API on <code>127.0.0.1:1337</code>, no key needed — use <code>Test</code> to list its models. CORS allows http(s) page origins out of the box but <strong>not <code>file://</code> pages</strong> (the null origin): open this container from a local web server or a hosted projection to use it.',
+      defaultUrl: RWA.DEFAULT_ATOMIC_URL,
+      storageKey: RWA.K_BASE_URL_ATOMIC,
+    },
     bridge: {
       showKey: false, showBaseUrl: false, showModel: false, showHint: false,
       hintHTML: '',
@@ -1289,6 +1322,7 @@ function buildUI() {
   document.getElementById('rwa-st-cog').onclick = () => {
     document.getElementById('rwa-info-panel').classList.remove('open');   // panels are mutually exclusive
     document.getElementById('rwa-skin-panel').classList.remove('open');
+    document.getElementById('rwa-share-panel').classList.remove('open');
     document.getElementById('rwa-set-panel').classList.toggle('open');
   };
   // ⓘ "what is this?" — render the rwa-identity/1 bundle as prose on open so it
@@ -1297,6 +1331,7 @@ function buildUI() {
   document.getElementById('rwa-st-info').onclick = () => {
     document.getElementById('rwa-set-panel').classList.remove('open');
     document.getElementById('rwa-skin-panel').classList.remove('open');
+    document.getElementById('rwa-share-panel').classList.remove('open');
     const panel = document.getElementById('rwa-info-panel');
     if (!panel.classList.contains('open')) panel.innerHTML = renderInfoPanel();
     panel.classList.toggle('open');
@@ -1307,6 +1342,17 @@ function buildUI() {
     if (panel && panel.classList.contains('open')) { panel.classList.remove('open'); return; }
     openSkinPanel();
   };
+  // ↗ connected share — open re-renders from the live record so the panel
+  // always reflects the current connection + freshness. Mutually exclusive
+  // with the other three panels.
+  document.getElementById('rwa-st-share').onclick = () => {
+    const panel = document.getElementById('rwa-share-panel');
+    if (panel.classList.contains('open')) { panel.classList.remove('open'); return; }
+    document.getElementById('rwa-set-panel').classList.remove('open');
+    document.getElementById('rwa-info-panel').classList.remove('open');
+    document.getElementById('rwa-skin-panel').classList.remove('open');
+    renderSharePanel().then(() => panel.classList.add('open'));
+  };
   document.getElementById('rwa-st-commit').onclick = commit;
 
   const pal = document.getElementById('rwa-pal'), inp = document.getElementById('rwa-pal-inp'), go = document.getElementById('rwa-pal-go');
@@ -4159,6 +4205,7 @@ HARD RULES: colors are hex strings only (e.g. "#c0392b"); fonts are ONE of the f
     if (!panel) return;
     const setP = document.getElementById('rwa-set-panel'); if (setP) setP.classList.remove('open');
     const infoP = document.getElementById('rwa-info-panel'); if (infoP) infoP.classList.remove('open');
+    const shareP = document.getElementById('rwa-share-panel'); if (shareP) shareP.classList.remove('open');
     const active = currentSkinName();
     panel.innerHTML =
       '<div class="rwa-skin-hd"><span>Skins</span><span>' + (active || '—') + '</span></div>'
@@ -4287,6 +4334,18 @@ function resolveBackendConfig() {
       apiKey: null, extraHeaders: {}, requiresKey: false,
     };
   }
+  if (backend === 'atomic') {
+    return {
+      backend, kind:'openai_compat',
+      baseUrl: (sessionStorage.getItem(RWA.K_BASE_URL_ATOMIC) || '').trim() || RWA.DEFAULT_ATOMIC_URL,
+      apiKey: null, extraHeaders: {}, requiresKey: false,
+      // atomic.chat REJECTS (400) requests whose prompt + max generation
+      // exceed its MAX_KV_SIZE (16384 default) rather than clamping like
+      // ollama/lmstudio — half the window for generation, half for the
+      // prompt + document. Callers read cfg.maxTokens || 32000.
+      maxTokens: 8192,
+    };
+  }
   if (backend === 'bridge') {
     return { backend, kind:'bridge' };
   }
@@ -4345,7 +4404,7 @@ async function callAgentSingleShot(prompt) {
   const model = sessionStorage.getItem(RWA.K_MODEL) || RWA.MODEL;
   const data = await openAiCompatChat(cfg, {
     model,
-    max_tokens: 32000,
+    max_tokens: cfg.maxTokens || 32000,
     messages: [{ role:'user', content: prompt }],
   });
   const msg = data.choices?.[0]?.message;
@@ -6154,6 +6213,155 @@ function renderInfoPanel() {
   ].join('');
 }
 
+// ─── Connected share (the ↗ panel) ──────────────────────────────────
+// A rewritable can be CONNECTED to a stable URL: "Create share link" POSTs the
+// full current file bytes (buildFile output — exactly the ⌘S artifact) to the
+// share service; "Publish this version" re-POSTs to the same short under the
+// returned update token. The record {short,url,token,publishedHash,publishedAt}
+// lives in rwa_state — machine-local on purpose: the token is a capability,
+// and buildFile only serializes INLINE_DOC, so neither can ever travel in the
+// file. The copy says VERSION on purpose: the link shows the last published
+// version, not live edits (docs/plans/2026-06-11-save-affordance-framings.md
+// §7c). These are the ONLY fetches the runtime makes outside the agent
+// backends, each behind an explicit user gesture — offline-first holds.
+const shareBaseUrl = () =>
+  (sessionStorage.getItem(RWA.K_SHARE_BASE) || '').trim() || RWA.SHARE_BASE;
+
+// Hash + file bytes from ONE doc read, so publishedHash always describes the
+// exact bytes that went out (no mid-flight-edit skew).
+async function shareSnapshot() {
+  const d = await getDoc();
+  const buf = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(d));
+  const hash = [...new Uint8Array(buf)].map(b => b.toString(16).padStart(2, '0')).join('');
+  return { text: buildFile(d), hash };
+}
+async function shareDocHashHex() { return (await shareSnapshot()).hash; }
+
+const getShareConn   = () => idbGet(RWA.STATE, 'share_conn');
+const setShareConn   = v  => idbPut(RWA.STATE, v, 'share_conn');
+const clearShareConn = () => idbDel(RWA.STATE, 'share_conn');
+
+class ShareError extends Error { constructor(code, msg) { super(msg || code); this.code = code; } }
+
+async function shareFetch(path, { method = 'POST', token, body } = {}) {
+  const headers = {};
+  if (body != null) headers['Content-Type'] = 'text/html';
+  if (token) headers.Authorization = 'Bearer ' + token;
+  try {
+    return await fetch(shareBaseUrl() + path, { method, headers, body });
+  } catch (_) {
+    throw new ShareError('share_unreachable', 'Sharing service unreachable — check your connection and try again.');
+  }
+}
+
+async function shareErrDetail(res) {
+  try { return (await res.json()).error || ('http ' + res.status); } catch (_) { return 'http ' + res.status; }
+}
+
+async function shareCreate() {
+  const snap = await shareSnapshot();
+  const res = await shareFetch('/share', { body: snap.text });
+  if (res.status !== 201) throw new ShareError('share_failed', 'Could not create the share link (' + await shareErrDetail(res) + ').');
+  const out = await res.json();
+  const conn = { short: out.short, url: out.url, token: out.token, publishedHash: snap.hash, publishedAt: Date.now() };
+  await setShareConn(conn);
+  return conn;
+}
+
+async function shareUpdate() {
+  const conn = await getShareConn();
+  if (!conn) throw new ShareError('share_not_connected', 'Not connected to a link yet.');
+  const snap = await shareSnapshot();
+  const res = await shareFetch('/share/' + conn.short, { token: conn.token, body: snap.text });
+  if (res.status === 401 || res.status === 404 || res.status === 410) {
+    // The capability is dead (unshared elsewhere, expired, or revoked). Keep
+    // nothing stale around — the honest state is "not connected".
+    await clearShareConn();
+    throw new ShareError('share_connection_lost', 'This link can no longer be updated — create a new one.');
+  }
+  if (res.status !== 200) throw new ShareError('share_failed', 'Could not publish this version (' + await shareErrDetail(res) + ').');
+  const next = { ...conn, publishedHash: snap.hash, publishedAt: Date.now() };
+  await setShareConn(next);
+  return next;
+}
+
+async function shareUnshare() {
+  const conn = await getShareConn();
+  if (!conn) return;
+  // A network failure throws BEFORE the clear — an unreachable service must
+  // not silently orphan a live public link. 401/404 mean the share is already
+  // gone server-side; clearing is the honest state either way.
+  await shareFetch('/share/' + conn.short, { method: 'DELETE', token: conn.token });
+  await clearShareConn();
+}
+
+function shareRelTime(ts) {
+  const m = Math.round((Date.now() - ts) / 60000);
+  if (m < 1) return 'just now';
+  if (m < 60) return m + ' min ago';
+  const h = Math.round(m / 60);
+  if (h < 24) return h + ' h ago';
+  return Math.round(h / 24) + ' d ago';
+}
+
+// One in-flight share action at a time; the panel re-renders disabled while
+// busy and re-enabled (with an error message, if any) after.
+let shareBusy = false;
+async function shareAction(fn) {
+  if (shareBusy) return;
+  shareBusy = true;
+  try { await renderSharePanel(); } catch (_) {}
+  let msg = null;
+  try { await fn(); }
+  catch (e) { msg = (e && e.message) || String(e); }
+  shareBusy = false;
+  await renderSharePanel(msg);
+}
+
+function copyShareUrl(url) {
+  if (navigator.clipboard && navigator.clipboard.writeText) {
+    navigator.clipboard.writeText(url)
+      .then(() => renderSharePanel('Link copied.'))
+      .catch(() => {});
+  }
+}
+
+async function renderSharePanel(msg) {
+  const panel = document.getElementById('rwa-share-panel');
+  if (!panel) return;
+  const esc = s => String(s == null ? '' : s).replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' }[c]));
+  const note = msg ? '<div class="rwa-share-msg">' + esc(msg) + '</div>' : '';
+  const dis = shareBusy ? ' disabled' : '';
+  const conn = await getShareConn();
+  if (!conn) {
+    panel.innerHTML = [
+      '<h4>Share at a link</h4>',
+      '<p>Anyone with the link sees the version you publish — not your live edits.</p>',
+      note,
+      '<div class="rwa-share-actions"><button type="button" id="rwa-share-create"' + dis + '>Create share link</button></div>',
+    ].join('');
+    document.getElementById('rwa-share-create').onclick = () => shareAction(shareCreate);
+    return;
+  }
+  const current = (await shareDocHashHex()) === conn.publishedHash;
+  panel.innerHTML = [
+    '<h4>Shared at a link</h4>',
+    '<div class="rwa-share-url" id="rwa-share-url" title="click to copy">' + esc(conn.url) + '</div>',
+    '<div class="rwa-share-fresh" id="rwa-share-fresh">Published ' + esc(shareRelTime(conn.publishedAt)) + ' · ' +
+      (current ? 'the link shows this version' : 'behind your latest edits') + '</div>',
+    note,
+    '<div class="rwa-share-actions">',
+    '<button type="button" id="rwa-share-update"' + dis + '>Publish this version</button>',
+    '<button type="button" id="rwa-share-copy">Copy link</button>',
+    '<button type="button" id="rwa-share-stop"' + dis + '>Stop sharing</button>',
+    '</div>',
+  ].join('');
+  document.getElementById('rwa-share-update').onclick = () => shareAction(shareUpdate);
+  document.getElementById('rwa-share-stop').onclick = () => shareAction(shareUnshare);
+  document.getElementById('rwa-share-copy').onclick = () => copyShareUrl(conn.url);
+  document.getElementById('rwa-share-url').onclick = () => copyShareUrl(conn.url);
+}
+
 // ─── First-party 'presentation' view provider (spec §5.10) ──────────
 // WRAP-IN-PLACE: split the doc at <h1>/<h2> boundaries into
 // <section class="rwa-slide"> wrappers WITHOUT reordering. SECTION ∉
@@ -6395,7 +6603,7 @@ async function modify(instr, lensMeta = null, opts = null) {
       try {
         data = await openAiCompatChat(cfg, {
           model,
-          max_tokens: 32000,
+          max_tokens: cfg.maxTokens || 32000,
           messages,
           tools: TOOL_SCHEMAS,
           tool_choice: 'auto',

package/src/agent-loop.mjs

@@ -128,12 +128,14 @@ export async function runAgentLoop({
   throw new AgentError('no_envelope_after_retries', { retries: RETRY_BUDGET });
 }
 
-async function callBackend({ baseUrl, model, apiKey }, body) {
+async function callBackend({ baseUrl, model, apiKey, maxTokens }, body) {
   const headers = { 'Content-Type': 'application/json' };
   if (apiKey) headers['Authorization'] = `Bearer ${apiKey}`;
   const url = baseUrl.replace(/\/+$/, '') + '/chat/completions';
   // Seed parity (seeds/rewritable.html openAiCompatChat caller in modify()):
-  // every request carries max_tokens: 32000 and tool_choice: 'auto'. The
+  // every request carries the backend's max_tokens (32000 historically; 8192
+  // for atomic, whose server REJECTS prompt+generation past MAX_KV_SIZE rather
+  // than clamping — see backendMaxTokens) and tool_choice: 'auto'. The
   // tool_choice default forces the model to call one of the provided tools
   // rather than emitting plain text (which would trip our no_tool_call retry).
   const res = await fetch(url, {
@@ -141,7 +143,7 @@ async function callBackend({ baseUrl, model, apiKey }, body) {
     headers,
     body: JSON.stringify({
       model,
-      max_tokens: 32000,
+      max_tokens: maxTokens || 32000,
       tool_choice: 'auto',
       ...body,
     }),

package/src/backend.mjs

@@ -2,15 +2,15 @@
 // precedence is unit-testable (the bin entrypoint runs on import and can't be
 // imported cleanly).
 //
-// Only the openrouter backend needs a key — ollama and lmstudio run locally
-// without auth. The key resolves in order: an explicit --api-key flag, then the
+// Only the openrouter backend needs a key — ollama, lmstudio, and atomic run
+// locally without auth. The key resolves in order: an explicit --api-key flag, then the
 // project-specific RWA_OPENROUTER_KEY (env conventions match the docker-compose
 // deploy in service/), then the CONVENTIONAL OPENROUTER_API_KEY that agents and
 // users normally have exported. Empty strings count as absent.
 
 /**
  * Resolve the API key for a backend.
- * @param {string} backendName — 'openrouter' | 'ollama' | 'lmstudio'
+ * @param {string} backendName — 'openrouter' | 'ollama' | 'lmstudio' | 'atomic'
  * @param {string|undefined} flagValue — the --api-key flag value, if any
  * @param {Record<string,string|undefined>} [env] — environment (injectable for tests)
  * @returns {string|undefined} the key, or undefined when none applies
@@ -26,10 +26,10 @@ export function resolveApiKey(backendName, flagValue, env = process.env) {
 /**
  * Default OpenAI-compatible base URL for a backend — mirrors the inline
  * `envBaseUrl` in bin/rwa.mjs (and seeds/rewritable.html resolveBackendConfig).
- * ollama and lmstudio honor RWA_*_URL overrides (remote host / non-standard port);
- * openrouter is fixed (the URL has never drifted in the seed). Shared by `rwa edit`
+ * ollama, lmstudio, and atomic honor RWA_*_URL overrides (remote host / non-standard
+ * port); openrouter is fixed (the URL has never drifted in the seed). Shared by `rwa edit`
  * and `rwa create` so the default never diverges between the two.
- * @param {string} name — 'openrouter' | 'ollama' | 'lmstudio'
+ * @param {string} name — 'openrouter' | 'ollama' | 'lmstudio' | 'atomic'
  * @param {Record<string,string|undefined>} [env] — environment (injectable for tests)
  * @returns {string|undefined}
  */
@@ -38,6 +38,24 @@ export function envBaseUrl(name, env = process.env) {
     case 'openrouter': return 'https://openrouter.ai/api/v1';
     case 'ollama':     return env.RWA_OLLAMA_URL || 'http://localhost:11434/v1';
     case 'lmstudio':   return env.RWA_LMSTUDIO_URL || 'http://localhost:1234/v1';
+    case 'atomic':     return env.RWA_ATOMIC_URL || 'http://127.0.0.1:1337/v1';
     default:           return undefined;
   }
 }
+
+/**
+ * Per-backend max_tokens for the agent loop. The historical 32000 stands for
+ * hosted/clamping backends, but atomic.chat REJECTS (400) any request whose
+ * prompt + max generation exceeds its MAX_KV_SIZE (16384 by default) rather
+ * than clamping — so it gets 8192, leaving the other half of the window for
+ * the system prompt + document. RWA_MAX_TOKENS overrides for unusual servers.
+ * Mirrors the seed's resolveBackendConfig() maxTokens.
+ * @param {string} name — backend name
+ * @param {Record<string,string|undefined>} [env]
+ * @returns {number}
+ */
+export function backendMaxTokens(name, env = process.env) {
+  const override = Number(env.RWA_MAX_TOKENS);
+  if (Number.isFinite(override) && override > 0) return override;
+  return name === 'atomic' ? 8192 : 32000;
+}

package/src/commands.mjs

@@ -85,7 +85,7 @@ async function readEnvKey(name) {
 // than throwing — pre-fill is best-effort; an unknown value just means the
 // user sees the default backend (openrouter) on first paint.
 function validBackend(v) {
-  return ['openrouter', 'ollama', 'lmstudio', 'bridge'].includes(v) ? v : null;
+  return ['openrouter', 'ollama', 'lmstudio', 'atomic', 'bridge'].includes(v) ? v : null;
 }
 
 // Collect URL-param pre-fills from env / ./.env. Returns an object whose keys

package/src/create.mjs

@@ -20,7 +20,7 @@ import { runAgentLoop } from './agent-loop.mjs';
 import { applyPlan, CliError } from './edit.mjs';
 import { assertSelfContained } from './self-contained.mjs';
 import { findFrozenZones } from './apply-edits.mjs';
-import { resolveApiKey, envBaseUrl } from './backend.mjs';
+import { resolveApiKey, envBaseUrl, backendMaxTokens } from './backend.mjs';
 import { atomicWrite } from './atomic-write.mjs';
 
 // Hard cap on --data baked into the snapshot. The dataset lands inside INLINE_DOC
@@ -219,6 +219,7 @@ export async function createCmd(parsed, { seedCandidates, cwd = process.cwd(), s
     baseUrl: parsed.backend.baseUrl || envBaseUrl(backendName),
     model:   parsed.backend.model   || process.env.RWA_MODEL || 'google/gemini-3.5-flash',
     apiKey:  resolveApiKey(backendName, parsed.backend.apiKey),
+    maxTokens: backendMaxTokens(backendName),
   };
 
   // Per-kind system prompt + the create-only self-containment directive; the brief