Skip to content

Add web editor, guided setup, relay worker and 3.3.7 docs - #3

Merged
objz merged 14 commits into
masterfrom
feat/web-editor
Oct 26, 2026
Merged

objz merged 14 commits into
masterfrom
feat/web-editor

Conversation

@objz

@objz objz commented Oct 26, 2026

Copy link
Copy Markdown
Owner

Summary

  • Add /editor for live script editing and /setup for guided network setup and backend pairing.
  • Add encrypted relay messaging, console-confirmation flows, draft recovery and regression tests for editor/setup state handling.
  • Restrict privileged pages' external scripts, analytics and framing; allow the site's own icons.
  • Add versioned 3.3.7 documentation while leaving src/docs/3.3.6 unchanged.
  • Move the Cloudflare dump/editor/pairing worker into worker/, including its configuration, schema, tests and deployment instructions.

Companion plugin PR: objz/CommandBridge#74

Validation

Fresh checks on this branch:

  • npm test: 82 passed, 0 failed.
  • node --test worker/test/worker-security.test.mjs: 11 passed, 0 failed.
  • node worker/test/sustained-load.mjs --self-test: passed without network traffic.
  • git diff --exit-code origin/master...HEAD -- src/docs/3.3.6: passed; previous-version docs are unchanged.

Completed local Wrangler sustained test:

  • Five minutes, 10 editor sessions, 1 KiB payloads, 100 encrypted round trips/second.
  • 30,000 sent and delivered; zero missing/duplicate/unexpected messages, errors or early closes.
  • Round-trip latency: p50 6.31 ms, p95 8.40 ms, p99 21.75 ms.
  • Local evidence: .browser-check/relay-sustained-result.json (ignored, not included in the PR).

Deployment and review notes

  • Deploy the worker separately from worker/; publishing the site does not deploy the worker.
  • Production headers and deployed setup/pairing/editor flows still need smoke testing. Earlier production header checks returned HTTP 403, so they remain unverified.
  • The sustained test measures local relay forwarding, not production Cloudflare capacity or dump/database throughput.
  • No production deployment or release was performed as part of opening this PR. Browser suites and the site build were not rerun for this PR-opening step.
  • git diff --check origin/master...HEAD reports whitespace in copied 3.3.7 docs and tests/fixtures/repo-testcmd.yml; those files were left unchanged during PR creation.

objz added 14 commits October 26, 2026 18:14
Every script as a node graph, live on the proxy through the relay:
commands, steps, arguments, aliases, defaults and servers as nodes,
an editable YAML panel with linting and completion, groups, sorting,
copy and paste, and saving through /cb editor confirm on the proxy.
Includes YAML round-trip tests and browser tests for Chromium and
Firefox.
- Move tools/cloudflare-dump-worker to wiki/worker/ and document its separate
  wrangler deploy; keep its README, migrations, D1 binding and local tests.
- Docs: copy 3.3.6 tree to 3.3.7, add signed Redis transport, editor/setup
  browser precautions, public relay token limits; docs/3.3.6 untouched.
- editor.js: prevent inferred deletion of unreadable scripts, preserve dirty
  baseline on external changes, pair YAML sources with _src indexes through
  saves/undo/redo, cancel confirmation on YAML input, persist draft/layout on
  undo/redo; add browser editor-state checks.
- relay.js/setup.js: size-capped frames, binary frame rejection, closing-socket
  guards, prototype-safe pairing dictionaries, retryable failed setup applies.
- Add security page header anchors; regenerate site output.
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying cb-wiki with  Cloudflare Pages  Cloudflare Pages

Latest commit: 1fd6621
Status: ✅  Deploy successful!
Preview URL: https://99836fae.cb-wiki.pages.dev
Branch Preview URL: https://feat-web-editor.cb-wiki.pages.dev

View logs

@objz
objz merged commit b3fe169 into master Oct 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant