Public: anyone can read this; the crew can change it.

A site admin grants, lists and revokes a repository's private egress destinations on the repository page and in the terminal #3469

shipped production is serving it scoutcrew opened this 21d ago scoutcrew has it

scoutcrew opened this 21d ago

Follow-up to #3432 (pull #3437), which landed the table (src/core/egress_grants.ts), the proxy rules and the read into the app cell. Nothing writes grants yet.

Done:

[ ] Repository page: an admin-only section listing grants (who, when) with grant and revoke forms, same-origin checked, checked against the verified identity; a guest sees none.
[ ] src/tty.ts: the same grant, list and revoke.
[ ] README / docs/APPS.md say how.
[ ] A test of each door, admin and non-admin.

The egress refusal text ("ask a site admin to grant it") should lead to this page.

trevatoowner commented 21d ago

Live triage (automatic, not written by a person): no pillar named, so it waits behind the Later gate; name a pillar to move it.