feat(docs): v0 static host (Vite, nginx, crawl files, DEX CTAs) #7

Merged

PlasticDigits merged 1 commit from issue/3-v0-static-host into main

2026-09-13 09:53:00 +00:00

PlasticDigits commented

2026-09-13 07:46:01 +00:00

Owner

Summary

Independent program review of #2 recorded RECOMMEND: ACCEPT (architecture at c296faa). This PR is the gated #3 v0 implement.
Vite + React + TypeScript static site, prerendered allowlisted routes, nginxinc/nginx-unprivileged on 8080, honest robots.txt / sitemap.xml, dexHref CTAs, fail-closed VITE_* origins.
Woodpecker extended with Node 24 typecheck/unit/build and Playwright 5 workers. Docs, invariants, and skills/ updated.

Closes #3.

Test plan

npm test — dexHref rejects tickers / javascript: / unknown campaigns; origins fail closed
npm run build with VITE_SITE_ORIGIN + VITE_DEX_ORIGIN (+ optional indexer)
npm run build without VITE_SITE_ORIGIN exits non-zero
npm run test:dist — unique titles/canonicals; robots/sitemap bodies; no banned copy
npm run verify — Docker image uid ≠ 0; /robots.txt text/plain + User-agent; /sitemap.xml application/xml + <urlset; unknown path 404; missing crawl files 404; hashed asset 404; Playwright 5 workers
Woodpecker ci/woodpecker/pr green (gitleaks, tree, web, verify)
No DEX Sitemap: change; no wallet/WC deps; no unpublished marketing guides
Coolify hostname attach + production curl of https://docs.cl8y.com remains operator follow-up (rollback = previous image tag)

## Summary - Independent program review of [#2](https://git.cl8y.com/code/cl8y-docs/issues/2) recorded **`RECOMMEND: ACCEPT`** (architecture at `c296faa`). This PR is the gated [#3](https://git.cl8y.com/code/cl8y-docs/issues/3) v0 implement. - Vite + React + TypeScript static site, prerendered allowlisted routes, `nginxinc/nginx-unprivileged` on 8080, honest `robots.txt` / `sitemap.xml`, `dexHref` CTAs, fail-closed `VITE_*` origins. - Woodpecker extended with Node 24 typecheck/unit/build and Playwright **5 workers**. Docs, invariants, and `skills/` updated. Closes #3. ## Test plan - [ ] `npm test` — `dexHref` rejects tickers / `javascript:` / unknown campaigns; origins fail closed - [ ] `npm run build` with `VITE_SITE_ORIGIN` + `VITE_DEX_ORIGIN` (+ optional indexer) - [ ] `npm run build` without `VITE_SITE_ORIGIN` exits non-zero - [ ] `npm run test:dist` — unique titles/canonicals; robots/sitemap bodies; no banned copy - [ ] `npm run verify` — Docker image uid ≠ 0; `/robots.txt` `text/plain` + `User-agent`; `/sitemap.xml` `application/xml` + `<urlset`; unknown path 404; missing crawl files 404; hashed asset 404; Playwright 5 workers - [ ] Woodpecker `ci/woodpecker/pr` green (gitleaks, tree, web, verify) - [ ] No DEX `Sitemap:` change; no wallet/WC deps; no unpublished marketing guides - [ ] Coolify hostname attach + production curl of `https://docs.cl8y.com` remains **operator follow-up** (rollback = previous image tag)

PlasticDigits added 1 commit

2026-09-13 07:46:01 +00:00

feat(docs): ship v0 static host with crawl files and DEX CTAs 933d6bed69

Implement the gated #3 Vite/nginx app after #2 ACCEPT: unique prerendered
routes, fail-closed HTTPS origins, non-root nginx, and Playwright sniff tests.

Refs: #3