[Feature] Design signed remote WebUI bundle loading for true hot frontend installs #204

New Issue

zemion · 2026-07-07T09:24:37+02:00

zemion commented

2026-07-07 09:24:37 +02:00

Parent: #36

Goal

Define the future path for WebUI package changes that do not require rebuilding/reloading the core shell.

Acceptance Criteria

Design covers signed asset manifests, compatibility checks, CSP, cache invalidation, rollback, and local/dev behavior.
The design explicitly compares dynamic remote loading with the current rebuild/reload strategy.
Implementation is split into smaller issues after the design is accepted.

Parent: #36 ## Goal Define the future path for WebUI package changes that do not require rebuilding/reloading the core shell. ## Acceptance Criteria - Design covers signed asset manifests, compatibility checks, CSP, cache invalidation, rollback, and local/dev behavior. - The design explicitly compares dynamic remote loading with the current rebuild/reload strategy. - Implementation is split into smaller issues after the design is accepted.

zemion commented

2026-07-07 09:37:57 +02:00

Codex State: ready

Summary

Documented remote signed WebUI bundles as future work; current installer remains build-time WebUI package based with supervised rollback.

Changed Files

docs/MODULE_ARCHITECTURE.md
docs/RELEASE_DEPENDENCIES.md

Next / Blocked

Design signed asset manifests, CSP/cache invalidation, frontend compatibility checks, and asset-level rollback before true hot WebUI package installs.

Suggested status label: status/ready

## Codex State: ready ### Summary - Documented remote signed WebUI bundles as future work; current installer remains build-time WebUI package based with supervised rollback. ### Changed Files - `docs/MODULE_ARCHITECTURE.md` - `docs/RELEASE_DEPENDENCIES.md` ### Next / Blocked - Design signed asset manifests, CSP/cache invalidation, frontend compatibility checks, and asset-level rollback before true hot WebUI package installs. Suggested status label: `status/ready`

zemion commented

2026-07-07 12:03:46 +02:00

Codex State: progress

Summary

Added the first signed/hardened remote WebUI bundle contract: frontend manifests now expose signature/key/integrity metadata, and the core shell can load enabled remote modules after manifest and entry integrity checks.

Changed Files

src/govoplan_core/core/modules.py
src/govoplan_core/server/platform.py
webui/src/platform/modules.ts
webui/src/App.tsx

Verification

/home/zemion/.nvm/versions/node/v22.22.3/bin/npm run build in govoplan-core/webui (OK)

Next / Blocked

Define deployment trust-store provisioning and CSP policy before treating remote bundles as the default release path.

Suggested status label: status/in-progress

## Codex State: progress ### Summary - Added the first signed/hardened remote WebUI bundle contract: frontend manifests now expose signature/key/integrity metadata, and the core shell can load enabled remote modules after manifest and entry integrity checks. ### Changed Files - `src/govoplan_core/core/modules.py` - `src/govoplan_core/server/platform.py` - `webui/src/platform/modules.ts` - `webui/src/App.tsx` ### Verification - `/home/zemion/.nvm/versions/node/v22.22.3/bin/npm run build in govoplan-core/webui (OK)` ### Next / Blocked - Define deployment trust-store provisioning and CSP policy before treating remote bundles as the default release path. Suggested status label: `status/in-progress`

zemion commented

2026-07-07 20:58:05 +02:00

Codex State: done

Summary

Added a dedicated remote WebUI bundle loading design covering signed manifests, compatibility checks, CSP, cache invalidation, rollback, local/dev behavior, and comparison with the supported rebuild path.

Changed Files

Added docs/REMOTE_WEBUI_BUNDLES.md and linked it from docs/MODULE_ARCHITECTURE.md and docs/RELEASE_DEPENDENCIES.md; the design lists follow-up implementation slices for policy flags, CSP config, installer validation, Playwright coverage, and release tooling.

Verification

git diff --check

## Codex State: done ### Summary - Added a dedicated remote WebUI bundle loading design covering signed manifests, compatibility checks, CSP, cache invalidation, rollback, local/dev behavior, and comparison with the supported rebuild path. ### Changed Files - `Added docs/REMOTE_WEBUI_BUNDLES.md and linked it from docs/MODULE_ARCHITECTURE.md and docs/RELEASE_DEPENDENCIES.md; the design lists follow-up implementation slices for policy flags, CSP config, installer validation, Playwright coverage, and release tooling.` ### Verification - `git diff --check`

zemion closed this issue

2026-07-07 20:58:07 +02:00

zemion added the

labels 2026-07-07 23:08:29 +02:00

zemion added the

module/core