temporalui

Overview ¶

Package temporalui serves the upstream Temporal UI under PathPrefix through a read-only reverse proxy scoped to the caller's organization namespace.

The embedded UI runs with auth disabled and is reachable only through this proxy, so the proxy is the security boundary:

• the caller is a Credimi user authenticated by the `pb_auth` cookie the webapp already keeps in sync with the PocketBase auth store;
• only GET and HEAD reach the UI, so no workflow can be started, signaled, cancelled, terminated or reset from it;
• API calls must target the caller's organization namespace; the namespace list is replaced by the caller's namespace alone.

HTML pages get embedHead, which fits the UI into a Credimi run page: no shell, light theme only, navigation kept on the embedded run.