Skip to content

106336206/ssc 36 collapse game bootstrap fan out into one bounded data - #249

Merged
Gizmotronn merged 11 commits into
mainfrom
106336206/ssc-36-collapse-game-bootstrap-fan-out-into-one-bounded-data
Sep 21, 2026
Merged

Gizmotronn merged 11 commits into
mainfrom
106336206/ssc-36-collapse-game-bootstrap-fan-out-into-one-bounded-data

Conversation

@Gizmotronn

Copy link
Copy Markdown
Member

No description provided.

Gizmotronn and others added 9 commits September 19, 2026 15:59
… verification

Separate ~3KB Worker on same-origin /api/v1/* routes (no CORS preflights).
RS256 verified via WebCrypto against a cached JWKS with refresh cooldown, so
warm requests make zero subrequests. PocketBase admin creds stay in Worker
secrets. Tests cover missing, malformed, expired, forged, wrong-issuer and
cross-user requests plus the JWKS subrequest budget.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…r-side Clerk auth

Remove auth() and force-dynamic from /game and the landing page. GameShell reads the Clerk browser session and redirects to /auth when it is missing or expired. Middleware still handles the server-side redirects.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
The hub now makes one bootstrap request instead of three. Hub state comes from the bootstrap response, the PocketBase admin client is shared, Clerk's Backend API is only called when an account has no username, and the classifications list loads after a mechanic panel opens. Adds subrequest, response-size and latency assertions.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
… secrets

Add a dispatch-only workflow that reuses the existing PocketBase and Cloudflare secrets and passes CLERK_ISSUER and authorized parties from GitHub variables. Removes hard-coded vars from the Worker's wrangler.jsonc.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…r smoke tests

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@Gizmotronn
Gizmotronn merged commit 4dfc41b into main Sep 21, 2026
2 checks passed
@Gizmotronn
Gizmotronn deleted the 106336206/ssc-36-collapse-game-bootstrap-fan-out-into-one-bounded-data branch September 21, 2026 07:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant