tofu-web on BonsAI Documentation

tofu-web Architecture Plan

Mon, 01 Jan 0001 00:00:00 +0000

tofu-web Architecture Plan #

Classification: Restricted (describes source code structure, infrastructure and auth flows).

Status: the architecture is agreed, and the scaffold of section 7 is implemented in this PR. Sections 8 and 9 remain design notes, not work in this plan. Deviations the implementation had to make are recorded in 7.8. Owners: @wadwax, @kenkanai-tofu, @adamtofu and @deepanshugautamtofu (.github/CODEOWNERS for /apps/tofu-web/ and this docs section).

Read with Platform Decisions. That document fixes the security model (replacing the safety argument in 6.6), adds a non-silenceable boundaries gate to 6.8, bounds the tool surface, settles model access on AWS, and sets the dependency policy. It keeps 6.3’s preference design and states the costs that come with it. Its section 9 lists exactly what here it supersedes; everything else below is current as written.

tofu-web Platform Decisions

Mon, 01 Jan 0001 00:00:00 +0000

tofu-web Platform Decisions #

Classification: Restricted (describes source code structure, infrastructure and auth flows).

Status: proposed. This document fixes the platform decisions for apps/tofu-web — the security model, where preferences live, how layer boundaries are enforced, how the tool surface is bounded, how the app reaches Claude on AWS, and how the dependency set is held stable. §8 records the alternatives that were evaluated and rejected, with the evidence for each. §9 names the sections of the architecture plan these decisions supersede.

tofu-web Chat Runtime Spike

Mon, 01 Jan 0001 00:00:00 +0000

tofu-web Chat Runtime Spike #

Classification: Internal-Only

Recommendation superseded. §1 below recommends assistant-ui. Platform Decisions §8 retires both candidates, for a better reason than either of mine: CopilotKit’s AnthropicAdapter never calls its injected client, so SigV4 cannot work, and its BedrockAdapter takes no sessionToken, which rules out STS credentials and therefore IRSA on EKS. The tool runtime stays @tanstack/ai. Everything measured here still stands — the SSE numbers in §2 are why §8 also retires dropping Start’s server.