Skip to content

build: reject stale dashboard assets in runtime overlays (#53) - #80

Draft
spelech wants to merge 2 commits into
mainfrom
hotfix/issue-53-dashboard-bundle
Draft

spelech wants to merge 2 commits into
mainfrom
hotfix/issue-53-dashboard-bundle

Conversation

@spelech

@spelech spelech commented Oct 28, 2026

Copy link
Copy Markdown
Owner

Refs #53.

Draft: matching application assets and browser authentication remain blocked.

Changes

  • Add a build/sync/verify publication path that attests inputs only after successful compilation and verifies exact output hashes.
  • Reject stale or unverified assets in Dockerfile.overlay; copy verified output into both served directories after removing base-image leftovers.
  • Preserve generated asset bytes across checkouts and document the supported publication process.

The existing unproven dashboard is intentionally rejected. This PR does not patch minified JavaScript, manufacture provenance, lower locked versions or claim to ship a freshly rebuilt authentication UI.

Verification

  • 19 artifact-publication tests passed, including real Docker stale-overlay rejection and installation into both served directories.
  • 25 existing deployment/entrypoint tests passed.
  • Generated requirement inventory: 2 passed; release/link-integrity gate passed.

Still required

The approved npm mirror lacks locked @antfu/install-pkg@2.1.0. Arrange artifact approval/import, perform a genuine application build and commit its matching artifacts/manifests, then verify login, reload, logout, role handling and authenticated dashboard requests in a browser.

Steve Pelech and others added 2 commits October 28, 2026 10:04
Add a fresh-build-only manifest and verified build/sync pipeline. Validate source inputs and exact bundle files before installing the dashboard in both served directories, removing base-image leftovers.

Refs #53

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant