wiki-plugin-hitchhiker 0.3.1 → 0.5.0

package/README.md

@@ -39,24 +39,20 @@ surface. It installs:
 - **Page-flag drop target** — drop a URL / link / page-flag onto a flag: the favicon shows
   a loud pulsing highlight; on drop it opens a ghost **preview card** (see the server below).
 
-## 3. Server component (`server/server.js`, ESM)
-`GET /system/unfurl.json?url=…` → a normalized **static** link-preview card.
-Since 0.3.0 the two extractor libraries are **imported on first request, not at
-start-up** — they cost about 14 MB of heap together, and a host that never
-unfurls should never pay it. Start-up cost of this server is now under 1 MB.
-`{ url, title, description, provider, author, type, image, favicon, source }`.
-- oEmbed metadata first (`@extractus/oembed-extractor`), OpenGraph/Twitter/JSON-LD fallback
-  (`open-graph-scraper`). Metadata only — never the oEmbed HTML embed (no live third-party
-  iframes/scripts).
-- The thumbnail is fetched **server-side and inlined as a `data:` URI**, so the card makes
-  zero client→provider requests.
-- **SSRF-guarded**: public `http`/`https` only; private/loopback/link-local ranges and
-  `*.localhost`/`.local`/`.internal` refused before any fetch. 30-min in-memory cache.
-  Never throws — returns a minimal fallback card offline/on error.
+## 3. Server component (`server/server.js`, ESM) — two tiny routes, no dependencies
+- `GET /system/farm-domains.json` → `{ local: [...], public: [...] }` — which domains this farm serves.
+- `GET /system/outposts.json` → `{ unfurl: ["http://mini.private.fish", …] }` — which **Outposts** the
+  browser may ask for link previews. Read from `{status}/outpost.json` per site (wins), else the
+  `OUTPOST_URL` env (comma-separated), else `[]`. Cached by mtime; no restart to change.
 
-> ⚠️ **Private-farm only for now.** Before any public-farm deployment, harden the SSRF guard
-> against redirect-following (the extractor libs do their own fetch and may follow redirects
-> to internal hosts) and tighten image caps.
+**Since 0.4.0 this plugin does no unfurling.** The link-preview builder — the two heavy extractor
+libraries, ~14 MB of heap — is `wiki-plugin-unfurl`, installed on one well-resourced host (an
+Outpost). `wiki-ux.js` calls that host **directly from the browser** (its route sets
+`Access-Control-Allow-Origin: *`; a plain GET is a simple request, no preflight), shuffling the
+list and trying each with a 2 s timeout. No Outpost, or none answering, means the drop report
+renders without a card. Nothing logs. Absence is a normal state.
+
+The list shape is deliberate: swapping the source for a DNS-SD SRV lookup later is one function.
 
 ## Install / build
 ```sh