pop
/
vibed
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main
quotesdb
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '0aa6a6862e'
${ noResults }
vibed/pages
History
Elijah Voigt 0aa6a6862e feat(pages): accept gzip/zstd/xz compressed tar uploads 
Extend the upload validator to accept .tar.gz/.tgz, .tar.zst, and
.tar.xz archives alongside raw .html and .zip. Upload-kind dispatch is
now magic-byte sniffing (detect_kind) rather than trusting Content-Type,
matching the module's never-trust-the-archive posture.

build_tar_manifest reuses every zip-path structural and size rule
(path-traversal checks, dedup, entry cap, root index.html requirement).
The streaming zip-bomb defense is preserved end-to-end: gzip/zstd decode
lazily as each tar entry is read, and one-shot xz decompresses into a
size-bounded LimitedWriter so a bomb aborts mid-decompress. All decoders
are pure Rust (flate2 rust_backend, ruzstd, lzma-rs) and the tar crate
compiles cleanly for wasm32-unknown-unknown; bzip2 is intentionally out
of scope.

Frontend accept list and Content-Type helper updated; the backend now
sniffs the real format so archives are sent as application/octet-stream.

Beans: pages-w7ow (feature) + pages-r4ob/g39t/wadp/u3zc (tasks).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 		2 days ago
..
.beans feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
docs feat(pages): update a page in place via re-upload [pages-ytau] 1 week ago
infra feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
migrations feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
src feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
static feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
.beans.yml feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
.dev.vars.example feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
.gitignore feat(pages): update a page in place via re-upload [pages-ytau] 1 week ago
CLAUDE.md feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
Cargo.lock feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
Cargo.toml feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
README.md feat(pages): update a page in place via re-upload [pages-ytau] 1 week ago
justfile feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
wrangler.toml feat(pages): static-site host at pages.elijah.run (v0) 1 week ago

README.md

pages

A micro static-site host at pages.elijah.run, running entirely on Cloudflare (Workers + R2 + D1) with the Worker written in Rust compiled to WebAssembly.

What it does

  • Browse all live pages at pages.elijah.run.
  • Log in with GitHub, upload a single .html file or a .zip of static assets (drag & drop), pick a name, and the content is served at pages.elijah.run/<name>/.
  • Update a page in place: Update on any page you own re-uploads its content under the same name (the URL never changes, and files the new upload doesn't include are removed).
  • Admins approve which users may upload, and can delete or update any page.

Hosted pages are intended to be client-side-only single-page apps. They are served with a sandboxing Content-Security-Policy (opaque origin): no cookies, no localStorage — see docs/plans/2026-07-12-pages-design.md §2.1. An admin can mark a specific page, or all of a user's pages, as trusted to opt them out of that sandbox (e.g. for local-first apps that need localStorage) — see the "Trust escape hatch" addendum in §2.1 for the exact semantics and the security trade-off that comes with it.

How it works

One Cloudflare Worker routes everything:

  • / — embedded management UI (list, login, upload, admin)
  • /auth/* — GitHub OAuth + session cookies (sessions in D1, hashed)
  • /api/* — JSON API (list/upload/update/delete pages, manage users)
  • /<slug>/* — page content served from R2 with strict security headers

Uploads are validated hard: strict slug grammar + reserved names, zip path-traversal rejection, decompression limits (10 MiB compressed, 25 MiB uncompressed, 300 files). See the design doc for the full security analysis.

Run locally

# from pages/
cp .dev.vars.example .dev.vars   # fill in a GitHub OAuth app's id/secret
wrangler d1 execute pages --local --file migrations/schema.sql
wrangler dev                      # builds via worker-build and serves locally

Test

# from pages/
cargo fmt
cargo check --target wasm32-unknown-unknown
cargo clippy --all-targets -- -D warnings
cargo test

Deploy

Infrastructure (R2 bucket, D1 database, DNS, rate limits) is OpenTofu in infra/; the Worker itself deploys with wrangler deploy (see infra/README.md). Secrets via wrangler secret put GITHUB_CLIENT_SECRET.

License

Dual-licensed under Apache-2.0 and MIT, like the rest of this repository.

Disclaimer

This software was written with Claude Code. Design, review and orchestration by Claude Fable 5 (claude-fable-5); implementation by Claude Sonnet agents with Claude Opus review agents.