ekklesiaandClaude Opus 5.5
65908ac97c
CI / verify (pull_request) Successful in 51s
CI / infrastructure-smoke (pull_request) Successful in 20s
CI / migration-smoke (pull_request) Successful in 1m49s
CI / image-build (pull_request) Successful in 17s
CI / deploy-smoke (same-origin) (pull_request) Successful in 48s
CI / deploy-smoke (split) (pull_request) Successful in 55s
An installation can now serve the Dashboard and the API on sibling hostnames (dash./api.) beside the default same-origin topology, from one image and with configuration alone. - The Dashboard learns its API origin at run time: the built page carries one empty <meta name="ekklesia-api-origin">, which the API fills with its identity base URL's origin at startup, before computing the page's ETag. The shell accepts only a canonical http(s) origin and otherwise fails closed without making a request. The build-time EKKLESIA_API_BASE_URL is gone from the bundle; the development server injects the same element. - The display host stays on the API's origin, so its device cookies, requests, and offline cache are unchanged. - The API trusts its own origin (trusted origins plus the identity base URL), as Better Auth already does, so the display page's mutations pass the origin check without operators listing it. - Doctor validates EKKLESIA_DASHBOARD_ORIGIN exactly as the API's startup does (it previously skipped it), reports the topology without printing hostnames, and warns when split hostnames are not siblings. - The module UI contract states the CORS header limit (safelisted headers plus Content-Type, safelisted response headers only). - Reference deployment: Caddyfile.split.example (Dashboard hostname serves / and its script; API hostname serves /api/*, /display/*, and the display script; each refuses the other's paths) and EKKLESIA_DASHBOARD_HOSTNAME in the proxy overlay and env examples. - The deploy smoke test runs either topology (CI runs both). The split run installs the module template as a test-only module, checks per-hostname routing and exact CORS, then drives a digest-pinned headless Chromium over the DevTools protocol, with no added dependency: sign-in on the Dashboard hostname, the session cookie host-only on the API hostname, the module UI imported cross-origin and its credentialed request succeeding, the display and its service worker on the API hostname, and sign-out. ADR 0045 is marked Accepted. Co-Authored-By: Claude Opus 5.5 <[email protected]>
50 lines
1.6 KiB
TypeScript
50 lines
1.6 KiB
TypeScript
/**
|
|
* The framework-free half of the Ekklesia shell: how it talks to the platform and how it builds a
|
|
* module UI host context. Deliberately the only public surface of this package.
|
|
*
|
|
* The React shell itself (`src/browser/`) is not exported. It is an application, bundled straight to
|
|
* a browser artifact by this package's own build; exporting components would invite another package
|
|
* to depend on Ekklesia's shell internals, which is exactly the coupling the surface boundary
|
|
* exists to prevent. What *is* exported is the protocol — validated wire parsing, context
|
|
* construction, module API resolution — so the end-to-end test can drive the real host code against
|
|
* a real server instead of a reimplementation of it.
|
|
*/
|
|
export {
|
|
bootstrapHost,
|
|
bootstrapDisplayHost,
|
|
type DashboardNavigation,
|
|
type DashboardNavigationEntry,
|
|
type DashboardNavigationGroup,
|
|
type DisplayHostBootstrap,
|
|
type EkklesiaHostConfig,
|
|
type HostBootstrap,
|
|
type HostEventSourceFactory,
|
|
type HostEventSourceOptions,
|
|
type HostModuleDisplayResponse,
|
|
type HostModuleUiDescriptor,
|
|
HostProtocolError,
|
|
type HostProtocolErrorCode,
|
|
loadDashboardNavigation,
|
|
loadHostPrincipal,
|
|
loadModuleDisplay,
|
|
moduleDisplayDescriptorPath,
|
|
parseDashboardNavigation,
|
|
parseDisplayRoute,
|
|
parseHostModuleDisplay,
|
|
parseHostPrincipal,
|
|
resolveApiOrigin,
|
|
resolveApiUrl,
|
|
} from "./host-protocol.js";
|
|
export {
|
|
type CreateModuleUiContextOptions,
|
|
createModuleUiContext,
|
|
moduleUiSourceUrl,
|
|
} from "./module-context.js";
|
|
export {
|
|
HostAuthError,
|
|
type HostAuthErrorCode,
|
|
type HostSignInCredentials,
|
|
signInWithEmail,
|
|
signOutHost,
|
|
} from "./auth-protocol.js";
|