CWL
This website is inscribed in Chrysalis Web Language. The file below is the genome: every page, form, and hole. Other AgenticOps tools already know how to read it. We didn’t invent a VPN dialect.
What it is
Some VPNs bolt on a blocklist and call it threat protection. Ours is a description of this product: sign in, the shop, making a connection. Other AgenticOps tools can ask whether this site is still the one we certified.
It does not look at the websites you open through the VPN. Machine status: /cwl-security.
Phone and desktop
Tip 1.0.27: layout site merges User-Agent, an unsupported:opaque-script hole, and a device client island. Pages use cookie cp_device and load { device: … } in HTML — not a UA regex in CWL. Go still runs the script hole on the live site.
What it covers
Pages: home, paths, the path, security, apps, sign in, create account, forgot password, reset, account, connection, admin, this page. Each one carries the same chrome, including CWL in the nav.
The forms for signing in and checkout. A login cookie. A health check. A short status page for the genome.
Go still draws the HTML you see when a page needs your session, a QR code, or a live path. The file is the record of what the product is — not a second secret website.
What it doesn’t do
The file does not make VPN keys, hash passwords, or draw QR codes. Those run here in Go against the Mexico and Chicago boxes. The file says so on purpose, so nobody pretends the language does that work.
The file
Download or read cinderpath.cwl. Same bytes as below.
# Cinderpath customer site CWL genome (tip 1.0.27 semantics)
# Language pillar: AgenticOp-io/chrysalis-cwl
# Convert and Secure consume this surface. They do not redefine it.
# Go (cinderpath-web) is the hole executor: bcrypt, sqlite sessions,
# WireGuard keypair, POP /v1/sessions, QR PNG, opaque device script.
#
# RFC-0029 layout site: shared nav + merged UA header + opaque-script hole
# + device island (RFC-0030). Pages use cookie cp_device + load device
# (RFC-0014 deepen). Live HTML is still Go templates; this file is the record.
module cinderpath;
use json;
use urlencoded;
use auth session;
layout site {
header User-Agent;
hole unsupported:opaque-script;
client ui "device" {
on resize { action "classify-device"; }
}
chrome html "<header class='top'><a class='brand' href='/'>Cinderpath</a><nav><a href='/shop'>Paths</a><a href='/path'>The path</a><a href='/security'>Security</a><a href='/downloads'>Apps</a><a class='cwl-chip' href='/cwl'>CWL</a></nav></header>";
}
@route GET "/healthz"
handler healthz {
effects: none;
return { ok: true, service: "cinderpath-web", genome: "cwl", tip: "1.0.27" };
}
@page GET "/"
page home {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>Pick a city. That's where websites see you.</h1><p>Cinderpath is a VPN. One connection from your device. Extra stops stay on our side. Prices later.</p></main><footer class='foot'><p>Cinderpath · AgenticOps · Mexico City, Los Angeles, Chicago</p><p class='foot-links'><a href='/path'>Path</a><a href='/security'>Security</a><a href='/cwl'>CWL</a></p></footer>";
}
@page GET "/cwl"
page cwl_story {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>CWL</h1><p>This website is inscribed in Chrysalis Web Language (tip 1.0.27). Layout chrome, cookie device tokens, and page islands are in the genome. Go runs the holes.</p></main><footer class='foot'><a href='/cinderpath.cwl'>cinderpath.cwl</a></footer>";
}
@page GET "/security"
page security {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>How this actually works</h1><p>Your whole internet goes through Cinderpath. The last city stays put. The first stop can move on the app. Extra stops do not make this Tor. Split-trust is not live. CWL is not a filter on the sites you visit.</p></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@page GET "/path"
page path_story {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>The path</h1><p>First stop, extra stops, optional Los Angeles, last city. What can move. What we will not do. Split-trust is not live.</p></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route GET "/cwl-security"
handler cwl_security {
effects: none;
header User-Agent;
return { ok: true, product: "cwl-security", built_in: true, scope: "cinderpath-control-plane", genome: "/cinderpath.cwl", tip: "1.0.27", tunnel_inspection: false };
}
@page GET "/login"
page login {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>Sign in</h1><form method='post' action='/login'><label>Email <input name='email' type='email'></label><label>Password <input name='password' type='password'></label><button type='submit'>Sign in</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/login"
handler login_post {
effects: session.write, csrf.verify, db.read;
body email;
body password;
body next;
response-header Set-Cookie = "cp_session=; Path=/; HttpOnly; SameSite=Lax";
return { ok: true };
}
@page GET "/register"
page register {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>Create account</h1><form method='post' action='/register'><label>Email <input name='email' type='email'></label><label>Password <input name='password' type='password'></label><label>Confirm <input name='password2' type='password'></label><button type='submit'>Create account</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/register"
handler register_post {
effects: session.write, db.write;
body email;
body password;
body password2;
return { ok: true };
}
@route POST "/logout"
handler logout {
effects: session.write;
return { ok: true };
}
@page GET "/forgot"
page forgot {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>Reset password</h1><form method='post' action='/forgot'><label>Email <input name='email' type='email'></label><button type='submit'>Send reset</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/forgot"
handler forgot_post {
effects: db.read, mail.send;
body email;
return { ok: true };
}
@page GET "/reset"
page reset {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
query token;
return html "<main data-device='device'><h1>New password</h1><form method='post' action='/reset'><input type='hidden' name='token'><label>Password <input name='password' type='password'></label><button type='submit'>Update</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/reset"
handler reset_post {
effects: db.write;
body token;
body password;
body password2;
return { ok: true };
}
@page GET "/account"
page account {
effects: session.read, auth.require;
layout site;
cookie cp_device;
load { sessionId: cookie cp_session, device: cookie cp_device };
return html "<main data-device='device'><h1>Account</h1><form method='post' action='/account/password'><label>Current <input name='current' type='password'></label><label>New <input name='password' type='password'></label><button type='submit'>Update password</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/account/password"
handler account_password {
effects: session.read, auth.require, csrf.verify, db.write;
body csrf;
body current;
body password;
body password2;
return { ok: true };
}
@page GET "/shop"
page shop {
effects: none;
layout site;
cookie cp_device;
load { sessionId: cookie cp_session, device: cookie cp_device };
return html "<main data-device='device'><h1>Paths</h1><p>City of your choice, out of the country gamer, Super Secure. Prices later. No card charged.</p></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/shop/buy"
handler shop_buy {
effects: session.read, auth.require, csrf.verify, db.write;
body csrf;
body sku;
return { ok: true, sku: sku };
}
@page GET "/connect"
page connect {
effects: session.read, auth.require;
layout site;
cookie cp_device;
query sku;
load { sessionId: cookie cp_session, sku: sku, device: cookie cp_device };
return html "<main data-device='device'><h1>Connection</h1><form method='post' action='/connect'><label>Path <select name='sku'></select></label><label>City websites see <select name='exit'></select></label><button type='submit'>Generate</button></form></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/connect"
handler connect_post {
effects: session.read, auth.require, csrf.verify, db.write;
body csrf;
body sku;
body exit;
body client;
hole hub-cwl:upstream-proxy;
}
@route GET "/connect/conf"
handler connect_conf {
effects: session.read, auth.require;
hole hub-cwl:upstream-proxy;
}
@route GET "/connect/qr.png"
handler connect_qr {
effects: session.read, auth.require;
hole hub-cwl:upstream-proxy;
}
@page GET "/downloads"
page downloads {
effects: none;
layout site;
cookie cp_device;
load { device: cookie cp_device };
return html "<main data-device='device'><h1>Apps</h1><p>Ordinary WireGuard on Windows, Mac, and Linux. Cinderpath app if the first stop should move.</p></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@page GET "/admin"
page admin {
effects: session.read, auth.require, db.read;
layout site;
cookie cp_device;
load { sessionId: cookie cp_session, device: cookie cp_device };
return html "<main data-device='device'><h1>Fleet desk</h1><p>Superadmin grants paths and resets passwords.</p></main><footer class='foot'><a href='/cwl'>CWL</a></footer>";
}
@route POST "/admin/grant"
handler admin_grant {
effects: session.read, auth.require, csrf.verify, db.write;
body csrf;
body email;
body sku;
return { ok: true };
}
@route POST "/admin/password"
handler admin_password {
effects: session.read, auth.require, csrf.verify, db.write;
body csrf;
body email;
body password;
return { ok: true };
}
Cinderpath