pop
/
vibed
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
main
quotesdb
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'f7fa11071d'
${ noResults }
vibed/pages
History
Elijah Voigt f7fa11071d feat(pages): raise upload limits for large wasm (per-file 16 MiB, total 48 MiB) 
The 5 MiB per-file cap rejected wasm binaries larger than that
("exceeds the maximum per-file size of 5242880 bytes"). Raise the
coherent limit set to fit large wasm while staying well under the
Worker's ~128 MiB memory ceiling (the body is buffered and decompressed
in memory):

- max_file:               5  -> 16 MiB
- max_uncompressed_total: 25 -> 48 MiB
- max_compressed / MAX_UPLOAD_BYTES / axum body cap: 10 -> 24 MiB
- max_entries / max_path_len / max_depth: unchanged

Updates UploadLimits::default, routes::api::MAX_UPLOAD_BYTES (the
DefaultBodyLimit layer follows it), the frontend client-side pre-check
and message, and the design doc §2.2 numbers.

Bean: pages-ufk2.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 		1 day ago
..
.beans feat(pages): raise upload limits for large wasm (per-file 16 MiB, total 48 MiB) 1 day ago
docs feat(pages): raise upload limits for large wasm (per-file 16 MiB, total 48 MiB) 1 day ago
infra feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
migrations feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
src feat(pages): raise upload limits for large wasm (per-file 16 MiB, total 48 MiB) 1 day ago
static feat(pages): raise upload limits for large wasm (per-file 16 MiB, total 48 MiB) 1 day ago
.beans.yml feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
.dev.vars.example feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
.gitignore feat(pages): update a page in place via re-upload [pages-ytau] 1 week ago
CLAUDE.md feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
Cargo.lock feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
Cargo.toml feat(pages): accept gzip/zstd/xz compressed tar uploads 2 days ago
README.md feat(pages): update a page in place via re-upload [pages-ytau] 1 week ago
justfile feat(pages): static-site host at pages.elijah.run (v0) 1 week ago
wrangler.toml feat(pages): static-site host at pages.elijah.run (v0) 1 week ago

README.md

pages

A micro static-site host at pages.elijah.run, running entirely on Cloudflare (Workers + R2 + D1) with the Worker written in Rust compiled to WebAssembly.

What it does

  • Browse all live pages at pages.elijah.run.
  • Log in with GitHub, upload a single .html file or a .zip of static assets (drag & drop), pick a name, and the content is served at pages.elijah.run/<name>/.
  • Update a page in place: Update on any page you own re-uploads its content under the same name (the URL never changes, and files the new upload doesn't include are removed).
  • Admins approve which users may upload, and can delete or update any page.

Hosted pages are intended to be client-side-only single-page apps. They are served with a sandboxing Content-Security-Policy (opaque origin): no cookies, no localStorage — see docs/plans/2026-07-12-pages-design.md §2.1. An admin can mark a specific page, or all of a user's pages, as trusted to opt them out of that sandbox (e.g. for local-first apps that need localStorage) — see the "Trust escape hatch" addendum in §2.1 for the exact semantics and the security trade-off that comes with it.

How it works

One Cloudflare Worker routes everything:

  • / — embedded management UI (list, login, upload, admin)
  • /auth/* — GitHub OAuth + session cookies (sessions in D1, hashed)
  • /api/* — JSON API (list/upload/update/delete pages, manage users)
  • /<slug>/* — page content served from R2 with strict security headers

Uploads are validated hard: strict slug grammar + reserved names, zip path-traversal rejection, decompression limits (10 MiB compressed, 25 MiB uncompressed, 300 files). See the design doc for the full security analysis.

Run locally

# from pages/
cp .dev.vars.example .dev.vars   # fill in a GitHub OAuth app's id/secret
wrangler d1 execute pages --local --file migrations/schema.sql
wrangler dev                      # builds via worker-build and serves locally

Test

# from pages/
cargo fmt
cargo check --target wasm32-unknown-unknown
cargo clippy --all-targets -- -D warnings
cargo test

Deploy

Infrastructure (R2 bucket, D1 database, DNS, rate limits) is OpenTofu in infra/; the Worker itself deploys with wrangler deploy (see infra/README.md). Secrets via wrangler secret put GITHUB_CLIENT_SECRET.

License

Dual-licensed under Apache-2.0 and MIT, like the rest of this repository.

Disclaimer

This software was written with Claude Code. Design, review and orchestration by Claude Fable 5 (claude-fable-5); implementation by Claude Sonnet agents with Claude Opus review agents.