Reuse Router administration, Forgejo and supported harness navigation safely

kilo commented

2026-10-04 23:04:48 +00:00

Member

Goal

Owner: Console navigation. Reach existing specialist surfaces without recreating their controls or assuming cross-origin integration.

Why / Current Evidence

Operators already have Router administration and Forgejo diff/issues; duplicating them increases risk. Console seed d6468f3 has no integration. Router 8d9d4b04bcb23fe19ff702b6209fbcb1537cdf1b server_ui/control_api emit frame-ancestors none, Strict host-only HttpOnly admin cookie and mutation CSRF; no verified delegated Console auth. Kernel eb4f4a2956712bfaf39a3271e1523e7f77a91e26 has no IDE attach proof. Source sections 4,5,8,9; G01/G08/G09/G10.

Scope / Non-Goals

Top-level links to verified Router admin read pages and exact Forgejo subject/candidate evidence; supported workspace/session navigation after harness proof. No iframe, session/cookie sharing, SSO assumption, credentials/source configuration forms, issue editor/diff clone or GUI automation.

Acceptance Criteria

Exact configured trusted instance/host shown before navigation; safe allowed URL schemes, no token URLs/unsafe task-generated links; external-link behavior accessible.
Router handles its own login; cross-site Strict-cookie behavior and denied/expired sessions honest, no credential forwarding.
No automatic connection-test/login/bootstrap/generation side effect; read-page navigation not advertised as passive if page does collection.
Unsupported attach/version or remote filesystem unavailable clearly; never seize/stop another session or imply external Kilo panel discovery.
CLI/resource summaries remain useful without navigating a dashboard.

Constraints

Privacy: private repository/workspace URLs not exported without consent. Compatibility/migration: producer UI path/version matrix, old settings validated, no arbitrary endpoint proxy. Reuse actual Router UI/Forgejo/harness attach; copying components requires exact revision/license/notice and permission, proprietary DemandTrace material excluded. Priority P2 after trusted reads; actual browser/session access separately authorized, no inference.

Links / Dependencies

Parent #1; Console #2/#4/#5/#9. Router BioMedical-IT/scarcity-router#140 and /issues/183; Kernel Creatidy/creatidy-kernel#47 and /issues/53.

## Goal Owner: Console navigation. Reach existing specialist surfaces without recreating their controls or assuming cross-origin integration. ## Why / Current Evidence Operators already have Router administration and Forgejo diff/issues; duplicating them increases risk. Console seed d6468f3 has no integration. Router 8d9d4b04bcb23fe19ff702b6209fbcb1537cdf1b server_ui/control_api emit frame-ancestors none, Strict host-only HttpOnly admin cookie and mutation CSRF; no verified delegated Console auth. Kernel eb4f4a2956712bfaf39a3271e1523e7f77a91e26 has no IDE attach proof. Source sections 4,5,8,9; G01/G08/G09/G10. ## Scope / Non-Goals Top-level links to verified Router admin read pages and exact Forgejo subject/candidate evidence; supported workspace/session navigation after harness proof. No iframe, session/cookie sharing, SSO assumption, credentials/source configuration forms, issue editor/diff clone or GUI automation. ## Acceptance Criteria - Exact configured trusted instance/host shown before navigation; safe allowed URL schemes, no token URLs/unsafe task-generated links; external-link behavior accessible. - Router handles its own login; cross-site Strict-cookie behavior and denied/expired sessions honest, no credential forwarding. - No automatic connection-test/login/bootstrap/generation side effect; read-page navigation not advertised as passive if page does collection. - Unsupported attach/version or remote filesystem unavailable clearly; never seize/stop another session or imply external Kilo panel discovery. - CLI/resource summaries remain useful without navigating a dashboard. ## Constraints Privacy: private repository/workspace URLs not exported without consent. Compatibility/migration: producer UI path/version matrix, old settings validated, no arbitrary endpoint proxy. Reuse actual Router UI/Forgejo/harness attach; copying components requires exact revision/license/notice and permission, proprietary DemandTrace material excluded. Priority P2 after trusted reads; actual browser/session access separately authorized, no inference. ## Links / Dependencies Parent #1; Console #2/#4/#5/#9. Router https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/issues/140 and /issues/183; Kernel https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/47 and /issues/53.

kilo added a new dependency

2026-10-04 23:05:48 +00:00

#2 Define supported producer reads and the browser authentication boundary

kilo referenced this issue

2026-10-04 23:05:48 +00:00

Deliver cross-product overview and exact Kernel task evidence drill-down #4

kilo commented

2026-10-04 23:05:48 +00:00

Author

Member

Registered Console child identities now resolved: #9 is attention/notifications; accessibility is #10. The initial body's speculative #9 accessibility link is corrected to #10 here. Navigation depends on #2 trusted read/browser boundary, #4/#5 view use, #10 accessible links and #13 conditional attach/remote research. No iframe/session sharing or task-control authority is implied.