@@ 45,8 45,12 @@ authorizer spares git.sr.ht a GraphQL call on every page load.
diffs, and commit logs, all bounded by context timeouts and output-size caps.
- `authz/` — cookie→identity and the git.sr.ht GraphQL authorizer with a short
TTL cache.
-- `web/` — chi router, handlers, Go templates, embedded static assets. The page
- chrome is not here: it is `sr-ht-ecore/chrome`, wired up in `web/server.go`.
+- `web/` — chi router, handlers, Go templates, embedded static assets. Most of
+ the machinery around them is not here but in [sr-ht-ecore], wired up in
+ `web/server.go`: `chrome` for the page frame, `pages` for template discovery
+ and the shared error page, `assets` for the hashed artefacts and their cache
+ policy, `csrf` and `middleware` for the router's guards. What is left is this
+ service's own: the routes, the handlers, and the templates they render.
- `frontend/` + `scss/` — build-time TypeScript diff bundle and the SCSS entry.
- `cmd/comparesrht/` — the daemon entry point and startup validation.
- `contrib/` — nginx server block, systemd unit, and a dev GraphQL stub.