Problem: the hexagonal refactor churns the backend tree for nine more phases; the UI delivery stack (web/ SPA, cmd/desktop Wails wrapper, compose/web image) must move to its own repo first so doc/layout rewrites land once on a backend-only tree. Change: - New repo git.hubris.network/dtoro/oikos-web (v0.33.0): web/, desktop/ (updateURL repointed to oikos-web releases), compose/, own CI (web + desktop jobs), own deploy script (CI-green gate, TOCTOU guard, version-tagged images, prune-to-3), own webhook receiver on :9798 + launchd unit, own compose project publishing the same 8091:80. - Cutover executed on mac-mini in order: oikos stack's web service stopped+removed, oikos-web project brought up on 8091; outer Caddy untouched (targets the published port) — serving + Authentik flow + /wails 404 quirk verified post-cutover. - Stripped from oikos: web/, cmd/desktop/, compose/web/, desktop CI workflow, ci.yml web job, Makefile ui/desktop/desktop-package/install targets, the compose web service, oikos-web from deploy.sh's fallback prune list; wails + go-keyring dropped from go.mod, vendor synced. - README / CONTRIBUTING / AGENTS.md / .agents dev+operations docs now point at the new repo; mbse + mascot design docs carry a path note. Risk: production SPA serving depends on the new pipeline now; rollback is versioned-image re-up of the old web service from a pre-split checkout (port 8091). Desktop builds installed before the split still check dtoro/oikos releases — one manual reinstall, noted in the oikos-web release notes. Verification: go vet, make test (race), make generate-check, golangci (no new findings; baseline down 400→365); post-cutover curls — localhost:8091 200, /wails/runtime.js 404, outer Caddy 302 Authentik.
45 lines
1.5 KiB
JavaScript
45 lines
1.5 KiB
JavaScript
"use strict";
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.permuteDomain = permuteDomain;
|
|
const getPublicSuffix_1 = require("./getPublicSuffix");
|
|
/**
|
|
* Generates the permutation of all possible values that {@link domainMatch} the given `domain` parameter. The
|
|
* array is in shortest-to-longest order. Useful when building custom {@link Store} implementations.
|
|
*
|
|
* @example
|
|
* ```
|
|
* permuteDomain('foo.bar.example.com')
|
|
* // ['example.com', 'bar.example.com', 'foo.bar.example.com']
|
|
* ```
|
|
*
|
|
* @public
|
|
* @param domain - the domain to generate permutations for
|
|
* @param allowSpecialUseDomain - flag to control if {@link https://www.rfc-editor.org/rfc/rfc6761.html | Special Use Domains} such as `localhost` should be allowed
|
|
*/
|
|
function permuteDomain(domain, allowSpecialUseDomain) {
|
|
const pubSuf = (0, getPublicSuffix_1.getPublicSuffix)(domain, {
|
|
allowSpecialUseDomain: allowSpecialUseDomain,
|
|
});
|
|
if (!pubSuf) {
|
|
return undefined;
|
|
}
|
|
if (pubSuf == domain) {
|
|
return [domain];
|
|
}
|
|
// Nuke trailing dot
|
|
if (domain.slice(-1) == '.') {
|
|
domain = domain.slice(0, -1);
|
|
}
|
|
const prefix = domain.slice(0, -(pubSuf.length + 1)); // ".example.com"
|
|
const parts = prefix.split('.').reverse();
|
|
let cur = pubSuf;
|
|
const permutations = [cur];
|
|
while (parts.length) {
|
|
// eslint-disable-next-line @typescript-eslint/no-non-null-assertion
|
|
const part = parts.shift();
|
|
cur = `${part}.${cur}`;
|
|
permutations.push(cur);
|
|
}
|
|
return permutations;
|
|
}
|