DevPortal Offline

Audience: operators hosting the Stella Ops developer portal inside a fully offline or sealed (air-gapped) environment.

This guide covers how to serve the developer portal, authenticate users, distribute bundles, and prove that no external requests leave the environment. For the broader sealed-mode posture, see the Air-Gap Mode Guide and the degradation matrix.

Serving the portal

• Host the static build from a local object store or file server. Do not depend on a CDN.
• Set DEVPORTAL_OFFLINE=true to disable external analytics and remote fonts.

Authentication

• Run Authority in offline mode with pre-provisioned tenants, and cache JWKS locally so token validation does not require an external fetch.

Bundles

• Serve mirror and bootstrap bundles from an offline download page, alongside their SHA-256 hashes and DSSE signatures (where available).
• Offer time-anchor downloads, and display the current staleness and mirrorGeneration in the UI header.

Search and docs

• Bundle the documentation set and its search index with the portal. Disable any remote documentation fetch.

Telemetry

• Disable remote telemetry. Keep console logs only, or send traces to a local OTLP endpoint.

Verification

• On load, run a self-check that confirms no external requests are issued. Fail with a clear banner if any outbound request is detected.