Same-origin bought us a lot, and charged us one path space
Serving each app from the same origin as its API means no CORS and an ordinary OAuth client in the browser. The price, discovered while building it: an app route and an API …
Build notes
What we decided while building Xerum, what each decision cost, and what we got wrong on the way. Written for the engineers who will ask the same questions.
The deploy artefact that had never once built
Cross-compiling the tenant binary for Linux had failed since the day it was written, and nothing noticed — because building on a Mac takes a different path that succeeds. What that …
We reversed our biggest design decision, and it cost almost nothing
Git was the system of record for Xerum. Then we listed what the store actually has to do, and git was paying for a model we had already designed away. Here is the reversal, and why …