Adopt the SolidJS front-end as the default gateway UI (4.5.1) (4.5.2) (4.5.3) (4.5.4) (4.5.5) (4.5.6)

.codescene/code-health-rules.json

@@ -1,6 +1,56 @@
 {
   "usage": "Repository overrides for CodeScene code health scoring. Test code is relaxed for inherently similar test structure, and one repo-wide false positive (String Heavy Function Arguments) is disabled with its rationale below. Production code keeps every other rule at default weight.",
   "rule_sets": [
+    {
+      "matching_content_path": "src/channels/web/static/solid/**",
+      "matching_content_path_doc": "Generated, minified SolidJS build output embedded into the binary (refreshed by `make frontend-build`). Not hand-maintained source; code-health findings here are false positives against the bundler's output. The corresponding sources under web-src/ are analysed at full weight.",
+      "rules": [
+        {
+          "name": "Complex Method",
+          "weight": 0.0
+        },
+        {
+          "name": "Complex Conditional",
+          "weight": 0.0
+        },
+        {
+          "name": "Bumpy Road Ahead",
+          "weight": 0.0
+        },
+        {
+          "name": "Overall Code Complexity",
+          "weight": 0.0
+        },
+        {
+          "name": "Deep, Nested Complexity",
+          "weight": 0.0
+        },
+        {
+          "name": "Excess Number of Function Arguments",
+          "weight": 0.0
+        },
+        {
+          "name": "Lines of Code in a Single File",
+          "weight": 0.0
+        },
+        {
+          "name": "Code Duplication",
+          "weight": 0.0
+        },
+        {
+          "name": "Large Method",
+          "weight": 0.0
+        },
+        {
+          "name": "Primitive Obsession",
+          "weight": 0.0
+        },
+        {
+          "name": "String Heavy Function Arguments",
+          "weight": 0.0
+        }
+      ]
+    },
     {
       "matching_content_path": "tests/**",
       "matching_content_path_doc": "Integration test crates: parameterized cases, fixture staging, and assertion tables are deliberately repetitive.",
@@ -161,6 +211,54 @@
         }
       ]
     },
+    {
+      "matching_content_path": "web-src/axinite/tests/**",
+      "matching_content_path_doc": "Browser workspace test suites: the same test-shape leniency as tests/** (parameterized cases, fixture staging, and assertion tables are deliberately repetitive).",
+      "rules": [
+        {
+          "name": "Code Duplication",
+          "weight": 0.0
+        },
+        {
+          "name": "Large Assertion Blocks",
+          "weight": 0.0
+        },
+        {
+          "name": "Duplicated Assertion Blocks",
+          "weight": 0.0
+        },
+        {
+          "name": "Large Method",
+          "weight": 0.0
+        },
+        {
+          "name": "String Heavy Function Arguments",
+          "weight": 0.0
+        }
+      ]
+    },
+    {
+      "matching_content_path": "web-src/mock-backend/**",
+      "matching_content_path_doc": "Daemon-free stub harness, not production code: it mirrors the gateway wire contract with deterministic in-memory fixtures, so fixture volume (file length) and contract-shaped response builders (duplication) are down-weighted, and stringly wire identifiers (primitive obsession, string-heavy arguments) are disabled outright \u2014 the public mock API deliberately takes the same string ids the wire carries. Structural rules (Bumpy Road, Complex Method) stay at default weight and were refactored, not suppressed. Note CodeScene applies one rule set per file, so this set restates the repo-wide String Heavy disable.",
+      "rules": [
+        {
+          "name": "Code Duplication",
+          "weight": 0.3
+        },
+        {
+          "name": "Lines of Code in a Single File",
+          "weight": 0.3
+        },
+        {
+          "name": "Primitive Obsession",
+          "weight": 0.0
+        },
+        {
+          "name": "String Heavy Function Arguments",
+          "weight": 0.0
+        }
+      ]
+    },
     {
       "matching_content_path": "**",
       "matching_content_path_doc": "String Heavy Function Arguments is disabled repo-wide: after the refactor rounds extracted every genuine parameter clump into structs and newtypes, the remaining flagged parameters are paths, URLs, user-supplied text, secret names, shell command tokens, and SQL fragments, which are idiomatically &str in Rust. The smell fires as a systematic false positive here. This general rule set is listed last so the more specific test-scoped sets above take precedence.",

.github/workflows/frontend.yml

@@ -0,0 +1,54 @@
+---
+name: Frontend
+"on":
+  pull_request:
+    branches:
+      - main
+    paths:
+      - "web-src/**"
+      - "src/channels/web/static/solid/**"
+      - "Makefile"
+      - ".github/workflows/frontend.yml"
+  push:
+    branches:
+      - main
+    paths:
+      - "web-src/**"
+      - "src/channels/web/static/solid/**"
+      - "Makefile"
+      - ".github/workflows/frontend.yml"
+
+jobs:
+  frontend:
+    name: Frontend verification
+    runs-on: ubicloud-standard-8
+    env:
+      # playwright.config.ts pins the hermetic browsers path at test time;
+      # the install step must target the same location.
+      PLAYWRIGHT_BROWSERS_PATH: "0"
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Install Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - name: Install uv
+        # `semantic` and `verify:full` fetch semgrep and moz-fluent-linter
+        # through uvx.
+        uses: astral-sh/setup-uv@v5
+      - name: Install dependencies
+        run: make frontend-install
+      - name: Install Playwright Chromium
+        working-directory: web-src
+        run: bunx playwright install --with-deps chromium
+      - name: Full verification chain
+        # Tailwind compile check, Biome lint, TypeScript, vitest unit and
+        # accessibility suites, Fluent variable/coverage checks, the
+        # semantic-CSS rules, the workspace Playwright spec, and
+        # moz-fluent-lint.
+        run: make frontend-full
+      - name: Embedded asset staleness gate
+        # Rebuild the SPA and fail when src/channels/web/static/solid does
+        # not match the web-src sources.
+        run: make frontend-verify

Makefile

@@ -66,10 +66,47 @@ AUDIT_FLAGS ?= \
 	--ignore RUSTSEC-2024-0370 \
 	--ignore RUSTSEC-2025-0134
 
-.PHONY: all install install-with-overrides sync-local-wasm-overrides build-github-tool-wasm fmt check-fmt typecheck lint lint-clippy lint-whitaker markdownlint spelling spelling-phrase-check spelling-config spelling-config-write spelling-helper-test nixie audit rust-audit test test-cargo test-matrix test-matrix-cargo test-workflow-contracts clean
+.PHONY: all install install-with-overrides sync-local-wasm-overrides build-github-tool-wasm fmt check-fmt typecheck lint lint-clippy lint-whitaker markdownlint spelling spelling-phrase-check spelling-config spelling-config-write spelling-helper-test nixie audit rust-audit test test-cargo test-matrix test-matrix-cargo test-workflow-contracts clean frontend-install frontend-build frontend-verify frontend-check frontend-test frontend-full frontend-stub
 
 all: check-fmt lint test spelling
 
+BUN ?= $(shell command -v bun 2>/dev/null || printf '%s' "$$HOME/.bun/bin/bun")
+FRONTEND_DIR := web-src
+FRONTEND_DIST := $(FRONTEND_DIR)/dist
+FRONTEND_EMBED_DIR := src/channels/web/static/solid
+
+frontend-install:
+	cd $(FRONTEND_DIR) && $(BUN) install --frozen-lockfile
+
+# Build the SolidJS app and refresh the embedded copy served by the gateway.
+frontend-build: frontend-install
+	cd $(FRONTEND_DIR) && $(BUN) run build
+	rsync -a --delete $(FRONTEND_DIST)/ $(FRONTEND_EMBED_DIR)/
+
+# Fail when the committed embedded assets are stale relative to web-src.
+frontend-verify: frontend-build
+	git diff --exit-code -- $(FRONTEND_EMBED_DIR) || 		{ echo "error: $(FRONTEND_EMBED_DIR) is stale; commit the output of 'make frontend-build'" >&2; exit 1; }
+
+# Static checks and unit suites for the browser workspace. `semantic`
+# covers the classlist, semgrep, and stylelint rules and fetches semgrep
+# through uvx on first use.
+frontend-check: frontend-install
+	cd $(FRONTEND_DIR) && $(BUN) run check:fmt && $(BUN) run lint && $(BUN) run check:types && $(BUN) run semantic
+
+frontend-test: frontend-check
+	cd $(FRONTEND_DIR) && $(BUN) run test && $(BUN) run test:a11y && $(BUN) run lint:ftl-vars
+
+# The mockup's full verification chain: Tailwind compile check, lint,
+# typecheck, unit + a11y + Fluent + semantic suites, the workspace
+# Playwright spec (browsers must be installed), and moz-fluent-lint.
+frontend-full: frontend-install
+	cd $(FRONTEND_DIR) && $(BUN) run verify:full
+
+# Daemon-free stub runtime: Bun mock API (HTTP + SSE + /api/features) plus a
+# preview server for the built SPA on http://127.0.0.1:2020.
+frontend-stub:
+	cd $(FRONTEND_DIR) && $(BUN) run dev
+
 install:
 	./scripts/build-wasm-extensions.sh
 	$(CARGO) install --path .

README.md

@@ -89,6 +89,8 @@ ______________________________________________________________________
   and tools.
 - [Building channels](docs/BUILDING_CHANNELS.md) — rebuilding bundled channel
   artefacts.
+- [SolidJS front-end](docs/solidjs-frontend.md) — the browser UI, its
+  daemon-free stub runtime (`make frontend-stub`), and feature flags.
 - [Contributing](CONTRIBUTING.md) — development workflow and review tracks.
 - [Changelog](CHANGELOG.md) — release history.