Macaroni – a single HTML file messenger

(github.com)

39 points | by snowflaxxx 2 hours ago

12 comments

  • vincnetas 2 minutes ago
    When docs say "no backend", but git (GitHub) is actually your backend :/
  • littlecranky67 17 minutes ago
    Nice idea. I would have expected it would use WebRTC for p2p client-to-client connection. A noted related project is Trystero [0] that uses all sort of external services to allow client-to-client discovery (such as Nostr, BitTorrent, Supabase etc.) - maybe a future project to combine the two.

    [0]: https://github.com/dmotz/trystero?tab=readme-ov-file#how-it-...

  • torginus 1 hour ago
    I wonder why this type of deployment is not more popular - pushing all resources inside a single HTML file, with a script tag, and inline resources as blobs.
    • andai 1 hour ago
      I do this whenever possible. As a separate issue, I also aim for <50KB whenever possible, e.g. I made a multiplayer browser game in 32KB and a LLM UI in 20KB.

      That might just be an aesthetic choice on my part, but I often find that I am able to implement all the features I need in surprisingly few lines of code. e.g. the first version of my LLM UI was 200 lines and quite usable for my purposes.

      And my OpenClaw clone was 50 lines. Just a Telegram wrapper around Claude, but turns out that's all I needed.[0]

      Also no dependencies, frameworks, libaries etc. Not a hard rule, but I find that they add negative value about 90% of the time, at least at my scale.

      There are dozens of us! :)

      [0] Of course, "Claude Code" isn't 50 lines. Except, it turns out you can replace it in about 50 lines. From the SWE-bench folks: https://minimal-agent.com/

      To this I added the missing outer loop (so it's actually an agent a human can use) and vendored in a microscopic llm lib (yay no deps). https://gist.github.com/a-n-d-a-i/bd50aaa4bdb15f9a4cc8176ee3...

    • janilowski 53 minutes ago
      It's very impractical.

      - you get a slower first load (cannot progressively fetch resources as they're needed) - can't reuse a stylesheet, script or image on a different page (each has to have their own copy) - can't cache commonly used files - can't make granular changes to specific parts of the code. user has to reload everything each time. - can't set a proper content security policy

      And many more! It's cool for a tiny demo but for anything serious you wouldn't want a single (extremely ugly) HTML file.

      • hnlmorg 9 minutes ago
        I'm not advocating this development approach, but I also think some of your reasons aren't particularly robust when scrutinized.

        > can't reuse a stylesheet, script or image on a different page (each has to have their own copy)

        Isn't the point of a single HTML file that you don't have different pages that would need to reuse those assets?

        > can't cache commonly used files

        You can still cache the HTML.

        > can't make granular changes to specific parts of the code

        Pretty sure text editors can edit text regardless of whether it's a single file or multiple files.

        > can't set a proper content security policy

        I'd have thought a single page HTML file could negate the need for a CSP since you no longer have any resources accessible via a URI that you need to limit access to.

        > you wouldn't want a single (extremely ugly) HTML file

        Ugliness a subjective.

        ---

        I think your first load point is the strongest one. But I'd also throw in "it's harder to develop a good single page HTML"

        You could probably mitigate some of that difficulty by having a build script (like static site compilers) but then you have to ask yourself if you're introducing more complexity than you're attempting to solve.

      • voidUpdate 46 minutes ago
        > "can't reuse a stylesheet, script or image on a different page (each has to have their own copy)"

        Not a problem if you're deploying a single file

    • snowflaxxx 1 hour ago
      You just described the Macaroni plugin system — plugins are literally appended as <script> tags before the closing </html> tag.
    • Theodores 9 minutes ago
      Or as an SVG file. I have an interesting experiment that puts a sprites sheet, CSS and even some scripting in the favicon file. Since every browser wants some type of favicon anyway, why not overload it with fun stuff?

      Sure the JavaScript won't load in CSS or favicon mode, but it can be loaded into the Dom as well as exist in the CSS.

      In my SVG file I have lots of CSS variables generated by the JavaScript, then saved as a big list in the SVG, enabling light/dark mode things. SMIL animation too.

      This experiment is based on what you described, an all in one HTML file.

      In that experiment the CSS was getting clumsy due to the amount of SVG I had in there, so I put the CSS in the SVG for fun.

      As for why, I am creating a modern version of an Embroidery sampler. These existed from centuries ago and served as a portfolio of sorts plus a reference on different stitches, such as how to do the alphabet.

      So my SVG sampler has examples of how to do tricky things in SVG, with all of it human drawable and readable, so no massive paths, just simple primitives, clipped, masked, transformed and cloned to create all my icons, logos and clipart.

      I hope to make SVG samplers a thing, so one SVG file and one HTML file to illustrate how it all works.

      To be honest it has been an excellent learning experience and I can now do so many things with just the MDN reference for SVG as my guide.

  • andai 1 hour ago
    I'm a fan of the license. https://www.wtfpl.net/about/
    • ventana 38 minutes ago
      Besides other fun things about this license, using it effectively forbids Google employees to send patches to your projects. [1]

      [1]: https://opensource.google/documentation/reference/patching#f...

      • wvbdmp 9 minutes ago
        The paragraph doesn’t really explain the rationale for forbidding WTFPL and even Public Domain and CC0? They’re all fine for commercial use, aren’t they?
        • andai 2 minutes ago
          I thought they were basically BSD/MIT but even less annoying.
    • johanbcn 48 minutes ago
      > changing it [the license] is allowed as long as the name is changed.

      But what if that's exactly what I want to do?

  • boomlinde 48 minutes ago
    "Sending a message to your mother should not require infrastructure comparable to a small bank."

    To that end, requiring the use of GitHub for your application to work is a dead end.

    "Macaroni Messenger is a distributed messaging system"

    No.

    "The backend does not exist."

    Unless by "backend" you mean the underlying infrastructure and server logic you've made the clients depend on for the exchange of messages to happen.

    • snowflaxxx 44 minutes ago
      That’s fair criticism of the current implementation.

      The idea isn’t that transport magically disappears. The idea is that users don’t have to deploy, operate, pay for, or even think about transport.

      GitHub happens to provide one out of the box, which makes the proof of concept extremely easy to try.

      If I need to run databases, message brokers, servers and monitoring just to send my mom “please cook macaroni”, I’ve already lost interest.

  • kristopolous 1 hour ago
    I made an interesting chat system as well: A way to sneak messages in through images for places where they otherwise wouldn't exist... pretty different.

    https://github.com/kristopolous/image-chat

  • msyea 39 minutes ago
    Nice idea. I recently published an article with a different twist. Static Vite+React site but all the backends are via OAuth PKCE and your customers bring their own. https://type2fun.net/infinitely-scalable-personal-apps I like the idea of building apps but skipping the infra burden/costs.
  • utilize1808 19 minutes ago
    So, browser = Java Runtime; uber HTML = applet?
  • ventana 2 hours ago
    It just looks like a funny slop project if you read the English readme, but reading the Russian PHILOSOPHY.md [1] (auto-translated [2] if you don't read Russian) makes you realize that there's probably something more than "let's implement a messenger using git remote as a storage", knowing how popular messenger apps are getting blocked in Russia.

    [1]: https://github.com/vanyapr/makaroshki/blob/main/PHILOSOPHY.m...

    [2]: https://github-com.translate.goog/vanyapr/makaroshki/blob/ma... (Google Translate)

    • Klaster_1 56 minutes ago
      >Macaroni Messenger is not a political statement. >We are not trying to circumvent restrictions. >We are not trying to circumvent restrictions. >We are not trying to fight the laws.

      This is talking politics without talking politics. The project literally attempts to circumvent russian censorship restrictions and their spirit. This is either a joke the file talks about or naive CYA.

      Cool project nevertheless, I like idea of an utility SPA distributed as bare HTML file that doesn't even require a web server.

      • ventana 24 minutes ago
        There is a popular view in Russia, including within the software developers communities, that "politics" is something bad and dirty; people often ban "politics" in group chats and forums.

        As a result, a highly technical person might work on a very complex solution to circumvent the restrictions but will declare (and probably even truly believe) that they are not making a political statement – as opposed to, for example, attending a protest, which is definitely considered a political action, or supporting a politician.

    • ivvve 1 hour ago
      Here's the translated version I got (GH translate didn't work for me for some reason).

      https://pastebin.com/raw/EPtJM5Dp

    • snowflaxxx 1 hour ago
      [flagged]
  • BrenBarn 1 hour ago
    "Single file" is a bit misleading when it requires Github to do anything.
    • brazzy 1 hour ago
      It's kinda implicitly obvious that a messenger needs some kind of backend. Though admittedly using Github as a backend is such an unusual choice that I would consider it equally important to mention.
    • alhadrad 1 hour ago
      And its why we cannot have nice things. This is likely a TOS violation of github.
      • jogu 1 hour ago
        I think it's pretty clear from the readme that this is a humorous proof of concept more so than anything someone should seriously use.
        • snowflaxxx 59 minutes ago
          True, but imagine this use case:

          A messenger file with hardcoded settings and a hardcoded PGP key, stored on a USB stick.

          You send a message.

          Then you physically destroy the USB stick.

          The client, the key, and the configuration are gone.

          At some point the joke starts looking suspiciously like a dead-drop communication protocol.

          How do you like that, FBI?

        • andai 1 hour ago
          From the translated readme:

          Macaroni Messenger is not a joke. It simply refuses to complicate solutions unnecessarily.

          That's why some technical decisions might look like a joke.

          Sometimes it really is a joke. But most of the time, it's just the simplest working option.

          https://news.ycombinator.com/item?id=48487542

      • snowflaxxx 1 hour ago
        That’s fair, although GitHub is just the default transport because it requires zero setup.

        The protocol itself isn’t tied to GitHub and works with any Git remote.

        If GitHub ever decided this wasn’t an acceptable use case, swapping the remote would be trivial.

        • jogu 1 hour ago
          Looking at the source I don't think that's true -- it's using GitHub specific APIs to read/write files. It's not standard git so any remote wouldn't work, and the mechanics are more akin to a key-value store than git really.

          Not to say you couldn't add a generic git protocol to this, just that that's not being done here.

        • brazzy 1 hour ago
          > The protocol itself isn’t tied to GitHub and works with any Git remote.

          > If GitHub ever decided this wasn’t an acceptable use case, swapping the remote would be trivial.

          Nope.

          From the README:

          "GitHub is the only working write provider right now. GitLab, GitVerse, Gitea, Forgejo, and other git hosts are protocol targets for future adapters. Today they are not finished write adapters."

    • snowflaxxx 1 hour ago
      [flagged]
  • triyambakam 1 hour ago
    > so the first screen does not burn unauthenticated GitHub API rate limit.

    Claude loves this dumb word "burn". Recently it even said "burn a TOTP" as if they are finite.