feat(manager): manage ontology assets and infrastructure

2026-08-22 15:04:32 +03:00
parent b302b6ba1a
commit 088686d67f
8 changed files with 1027 additions and 27 deletions
@@ -20,8 +20,17 @@ behavior; projects, inventory, collections and access remain shared Device Core

 The project workspace covers inventory, discovery, collections, adapter/profile metadata,
 Edges, routes, sessions, bindings, configuration state, the honest command ledger, immutable
-audit metadata and project grants. Navigation and actions are derived from effective project
-capabilities. Global adapter/profile/Edge mutation is additionally restricted to a Hub owner.
+audit metadata and project grants. It also joins the official ontology projection for stable
+Assets, temporal Device-to-Asset bindings, provider-neutral Hosts, endpoints, deployments,
+service instances and freshness-bounded health observations. Navigation and actions are
+derived from effective project capabilities. Global adapter/profile/Edge mutation is
+additionally restricted to a Hub owner.
+
+Host credentials are accepted only as opaque `secret-ref:*` values by the server-side Core
+command. The browser projection receives only `managementCredentialConfigured`; it never
+receives the reference or secret. Missing or expired health evidence is rendered as
+`unobserved`, never inferred as `unreachable`. Arbitrary WebSSH remains disabled pending a
+separate short-lived management-session and break-glass design.

 Command planning and transport intentionally have no Device Manager mutation route yet.
 The UI never presents `sent` as success: `acknowledged` and `verified` remain different