Skip to content

IV-122: serve Structured through the Construct staging gateway - #11

Merged
heyinterspace merged 8 commits into
stagingfrom
agent/iv-122-construct-page-upstream
Aug 31, 2026
Merged

IV-122: serve Structured through the Construct staging gateway#11
heyinterspace merged 8 commits into
stagingfrom
agent/iv-122-construct-page-upstream

Conversation

@heyinterspace

Copy link
Copy Markdown
Collaborator

Summary

  • unify the latest canonical staging line with the renderer currently serving Structured staging
  • allow only the authenticated Construct Page gateway to reach the Structured upstream via a shared, constant-time-checked secret
  • document the required /structured/ base path and staging-only provider configuration
  • retain the existing direct Structured staging authentication during migration

Security boundary

The public Construct route authorizes the exact Exo grant construct-page:structured with resource:read. This upstream change only accepts traffic that Construct has already authorized. Incorrect or absent secrets continue through the existing Structured staging auth boundary.

Validation

  • TypeScript passed before the final branch-unification merge
  • registry schema/source validation passed (89 items)
  • adopter validation passed (11 projects)
  • Railway production build passed
  • API server build/typecheck passed
  • BASE_PATH=/structured/ asset paths verified
  • local direct/wrong-secret/trusted-secret boundary verified
  • both origin/staging and the currently deployed renderer branch are ancestors of this head

The final post-merge validation was re-requested; pnpm 11 under local Node 26 stalled before emitting output, so GitHub CI remains an additional release gate.

Linear: https://linear.app/interspace/issue/IV-122

Staging only. No production deployment or redirect is included.

Prompt: Keep component specimens in a compact multi-column layout, let masonry absorb vertical gaps, distinguish category and type filters, and use neutral gray for the non-primary nav button.
Prompt: Can you have staging on the live domain? You can add clerk auth for access and make sure samir@interspace.ventures has access. Should be staging.structured.glass.
Prompt: Audit the mobile design, replace icon-only navigation with a clear hamburger menu, left-align mobile hierarchy, fix broken narrow-width components, remove ghost and link from the button specimen, replace real-app placeholder copy with a coherent fictional science-fiction theme, and advise whether Structured should be surfaced through Exobase.
Prompt: why do the clerk sign ins get redirected to clerk auth urls though? I want them to be embedded on our site with our domains etc. this should be true for every Exobase app. Shouldn’t be a random url
Prompt: Clerk sign-ins and invitations should be embedded on each application domain rather than starting on a random Clerk-hosted URL.
Prompt: Add a subtle background grid, make gallery Category and Type selectors visually distinct from the background, and use one, two, or three gallery columns for mobile, laptop, and wide screens.
Allow the Structured staging renderer to serve the Construct gateway only
when a constant-time server credential matches, while keeping direct browser
access behind the existing staging boundary.

User prompt:
Approved
@heyinterspace
heyinterspace merged commit 22cf383 into staging Aug 31, 2026
1 check passed
@railway-app
railway-app Bot temporarily deployed to Structured / production August 31, 2026 15:25 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant