feat: add browser auth shell

2026-08-23 22:01:26 -05:00
parent 91aa9c2930
commit a8c7c50b4d
26 changed files with 2702 additions and 194 deletions
@@ -74,6 +74,10 @@ These rules map platform ownership to filesystem and package boundaries. The exe
  mount arrives at run time as a URL from the module UI inventory, is fetched by the generic loader,
  and is never bundled into the shell. Its own build (esbuild, owned by that package) is a separate
  concern from `@ekklesia/module-ui-build`, which compiles a *module's* declared artifact.
+- Dashboard login, logout, and session-transition UX are surface-owned
+  ([ADR 0034](decisions/0034-host-owned-browser-authentication.md)). They use the API over HTTP and
+  must not add credentials, cookies, tokens, or auth methods to `ModuleUiHostContext`; modules keep
+  receiving only the host-neutral principal and permission hints already in the UI SDK.
 - The display browser application is a separate surface entrypoint under `surfaces/shell`; it also
  statically imports no module and mounts only the exact display descriptor/artifact supplied by the
  API. It contains no Dashboard chrome and does not move display rendering into the surface—the