WHC
6e81513e36
A second implementation of cst_agent_hooks_t next to the TUI: the turn runs on a worker thread, the hooks publish events into a ring buffer that SSE clients read, so the engine itself needs no changes. - src/net.c, include/cst_net.h: POSIX/Winsock sockets, non-blocking connect - src/http_srv.c, include/cst_http.h: HTTP/1.1, keep-alive, chunked streaming, body caps (413), Expect: 100-continue, connection cap, exact routing - src/web_md.c, include/cst_web_md.h: streaming markdown -> sanitized HTML (tag/attribute allowlist, javascript: URLs and off-site images dropped) - src/webui.c, include/cst_webui.h: event ring + SSE broadcast, all routes, token (Bearer/Cookie/query) and loopback Host checks, 3 s auto-deny when no client is attached - src/webui_stub.c, CST_WEBUI=0 / CST_BUILD_WEBUI=OFF: build without the WebUI - web/: no-build front end (transcript, approvals, todo, sessions, image upload, status bar) - docs/webui.md: engine API v1 - events, requests, security model - tests/test_webui.c, scripts/e2e_webui.sh: unit tests plus an end-to-end run driven by a recorded SSE stream (no API key needed) - src/main.c: --web --web-port --web-host --web-token --web-dev --web-open and CST_WEB_PORT/HOST/TOKEN/ROOT An empty POST body is now accepted without Content-Length (RFC 9112 6.3) so curl-driven clients can reach cancel/undo/compact/quit; CMakeList's core tests learned about sashidown and test_webui, and CST_WEBUI=0 defines CST_NO_WEBUI.
41 lines
1.3 KiB
C
41 lines
1.3 KiB
C
#ifndef CST_WEBUI_H
|
|
#define CST_WEBUI_H
|
|
|
|
/* The built-in WebUI: an HTTP + SSE front end for one agent process.
|
|
*
|
|
* It is a second implementation of the same interface the TUI uses
|
|
* (cst_agent_hooks_t), which is why the engine needs no changes: the turn
|
|
* runs on a worker thread and every live event goes out as a Server-Sent
|
|
* Event. The protocol is documented in docs/webui.md and is meant to be
|
|
* the contract a dedicated client speaks later. */
|
|
|
|
#include "cst_agent.h"
|
|
|
|
#include <stddef.h>
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
typedef struct {
|
|
const char *host; /* NULL = 127.0.0.1; "0.0.0.0" = every interface */
|
|
int port; /* 0 = pick a free port */
|
|
const char *token; /* NULL = generate one when needed */
|
|
const char *root; /* serve the UI from this directory instead of the
|
|
copy embedded in the binary (development) */
|
|
int open_browser; /* best-effort xdg-open / open / start */
|
|
/* Prompt to run once at startup (--web -p ...); NULL = wait for the UI. */
|
|
const char *prompt;
|
|
int perm_timeout_s; /* how long a permission question waits (0 = 600) */
|
|
} cst_webui_opts_t;
|
|
|
|
/* Serve until interrupted (Ctrl+C) or the event stream asks to quit.
|
|
* Returns the process exit code. */
|
|
int cst_webui_run(cst_agent_t *agent, const cst_webui_opts_t *opts);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* CST_WEBUI_H */
|