Refactor module and crate responsibility boundaries

.github/workflows/ci.yml

@@ -333,6 +333,27 @@ jobs:
           npm ci
           npm run build
 
+      - name: Install Playwright package
+        working-directory: tests/playwright
+        run: npm ci
+
+      - name: Install Playwright browsers
+        working-directory: tests/playwright
+        run: npx playwright install --with-deps chromium
+
+      - name: Run WASM UI browser tests
+        working-directory: tests/playwright
+        run: npm test -- --config wasm-ui.config.ts
+
+      - name: Upload WASM UI test results
+        if: failure()
+        uses: actions/upload-artifact@v7.0.1
+        with:
+          name: wasm-ui-test-results
+          path: tests/playwright/test-results
+          if-no-files-found: ignore
+          retention-days: 7
+
   coverage:
     name: Coverage report
     runs-on: ubuntu-latest

.gitignore

@@ -41,3 +41,7 @@ sketchpad/
 
 # External security review input (not part of the published repo)
 SECURITY_FINDINGS.md
+
+# Specification emitter source modules are not generated documents.
+!crates/rest/ras-rest-macro/src/openapi/
+!crates/rpc/ras-jsonrpc-macro/src/openrpc/

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Changed - 2026-09-05 (responsibility boundaries refactor)
+- **`tokio-tungstenite` aligned with Axum** (`ras-jsonrpc-bidirectional-client`, `-server`, `-types`, `-macro`). The workspace pin moved from 0.26 to 0.29, the version Axum 0.8 already used, so the lockfile carries a single copy of `tungstenite` and `tokio-tungstenite`. No source changes were needed.
+- **New `ras-api-explorer-assets` crate** (`crates/specs`). The browser API explorer that `ras-rest-macro` and `ras-jsonrpc-macro` embed now lives in its own dependency-free crate as standalone HTML, CSS and JavaScript files assembled at compile time into `TEMPLATE`, with the configuration placeholder exported as `CONFIG_PLACEHOLDER`. Previously the JSON-RPC macro read the template from the REST macro's source tree with a relative `include_str!`, which broke outside the workspace. Publish this crate before either macro. The served explorer differs from the previous one only in whitespace around the style and script wrapper tags.
+- Large modules were split by responsibility across the macro, auth, identity, transport and bidirectional crates without changing public paths, generated code, or behavior; moved types are re-exported from their previous locations. Integration suites were regrouped into scenario modules under the same test targets, and the `xm_feedback_*` macro test targets were renamed to `http_service_contracts`.
+
 ### Fixed - 2026-09-05 (audit remediation, fifth review pass)
 - **`ConnectionContext::subscribe` is the only subscription mutation, and it is checked** (`ras-jsonrpc-bidirectional-server`, breaking). The context now carries the service's `SubscriptionPolicy` (limits, shared accounting, manager) and `subscribe` enforces topic length and the per-connection cap under the connection's write guard, reserves a global slot atomically, and mirrors into the manager, returning `BidirectionalError` on refusal instead of `()`. `unsubscribe` releases the slot and the manager entry. The `info` field is no longer public, so there is no unchecked path: a handler subscribing from `on_connect`, `handle_request` or anywhere else is limited and counted exactly like a client-driven subscribe, and teardown releases only what was reserved, so the counter cannot underflow. The handler-level reconciliation (`sync_subscriptions`) and `WebSocketHandler::with_subscription_limits` / `with_subscription_accounting` are gone; attach the policy with `ConnectionContext::with_subscription_policy` (the service does this automatically). Regression test subscribes greedily from both `on_connect` and `handle_subscribe` and asserts exactly the cap was accepted and the counter returns to zero.
 

Cargo.toml

@@ -63,7 +63,7 @@ sha2 = "0.10"
 subtle = "2.6"
 tempfile = "3.13"
 thiserror = "2.0"
-tokio-tungstenite = "0.26"
+tokio-tungstenite = "0.29"
 tower-http = "0.6"
 tracing = "0.1"
 url = "2.5"

README.md

@@ -76,8 +76,10 @@ crates/
 │   └── ras-identity-session # JWT session management
 ├── observability/           # Monitoring and metrics
 │   └── ras-observability-otel # OpenTelemetry implementation
-├── specs/                   # Specification types
-│   └── ras-openrpc-types    # OpenRPC 1.3.2 spec types
+├── specs/                   # Specifications and their shared assets
+│   ├── ras-api-explorer-assets # Embedded API explorer shared by the REST and JSON-RPC macros
+│   ├── ras-openrpc-types    # OpenRPC 1.3.2 spec types
+│   └── ras-permission-manifest # Permission manifest types
 examples/                    # Example applications
 ├── basic-jsonrpc/           # JSON-RPC service demo
 ├── bidirectional-chat/      # Real-time chat system