SILVER/NODEDC_PLATFORM
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Document BIM session sync canon boundaries

Browse Source
This commit is contained in:
Codex
2026-06-23 20:23:01 +03:00
parent 1aaf53c378
commit f8c19d712a
4 changed files with 50 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/CURRENT_INFRA_HANDOFF.md
+14 -1
View File
@@ -1,6 +1,6 @@
# NODE.DC current infra handoff
Last updated: 2026-05-15.
Last updated: 2026-06-23.
This document is the fast context entrypoint for a new engineering chat. Read it first before touching deploy, Synology, Authentik, Launcher, or Tasker.
@@ -16,6 +16,7 @@ Source-of-truth repositories:
| Launcher / Hub | NODE.DC control plane, user/admin UI, access requests, access matrix, Authentik sync | `/Users/dcconstructions/Downloads/mnt/data/nodedc_launcher` |
| Tasker / Operational Core | Plane fork, tasks/workspaces/projects, standalone-capable product module | `/Users/dcconstructions/Downloads/mnt/data/dc_taskmanager/NODEDC_TASKMANAGER` |
| Ops Agents Gateway | Standalone MCP/API router for Tasker operational agents | `/Users/dcconstructions/Downloads/mnt/data/NODEDC_TASKMANAGER_CODEXAPI` |
| BIM Viewer | Standalone BIM/CAD/point-cloud viewer, public share links, model runtime storage | `/Users/dcconstructions/Downloads/mnt/NODEDC/NODEDC_BIM_VIEWER` |
Current Git branches:
@@ -23,6 +24,7 @@ Current Git branches:
- Launcher: `main`
- Tasker: `master`
- Ops Agents Gateway: `main`
- BIM Viewer: `beam`
The modules communicate through HTTP/OIDC/internal APIs. They must remain independently buildable and deployable.
@@ -59,6 +61,7 @@ https://id.nodedc.ru -> Authentik
https://hub.nodedc.ru -> Launcher / Hub
https://ops.nodedc.ru -> Tasker / Operational Core
https://ops-agents.nodedc.ru -> Ops Agents Gateway / MCP endpoint
https://bim.nodedc.tech -> BIM Viewer
```
`id.nodedc.ru` is only the public OIDC/login host. Authentik Admin is deliberately kept off that public host; `/if/admin/*` returns `404` there.
@@ -244,6 +247,16 @@ Git repo -> build image / sync deploy files -> Synology compose recreate selecte
Do not edit NAS copies as the long-term fix. If an emergency live edit is made on NAS, port it back into the relevant repo before continuing product work.
## Auth/session sync status
Read `docs/AUTH_MODEL.md` before changing cross-app auth/session behavior.
As of 2026-06-23, the proven shared live-session path was logout-first: Launcher publishes `nodedc:session:logout` through `/auth/session-sync` and frontchannel app logout URLs, and Engine subscribes to that logout event. BIM Viewer has now been aligned with that logout path.
BIM also introduced a BIM-first login-sync slice for share links: Launcher service registry can call BIM `loginSyncUrl`; BIM records only a short-lived marker and then revalidates through Launcher optional-launch/handoff. This marker is not auth and must not grant controls directly.
This is not yet a platform-wide login/change canon. Before adding another service, define the shared `ndcauth.session` contract in Platform/Auth SDK terms and verify HUB/OPS/ENGINE/BIM with a browser matrix: login from any surface, logout from any surface, already-open apps update without refresh.
## Platform / Launcher deploy
From macOS with `/Volumes/docker` mounted: