feat(bus,webui): bus read of credential status; the Console shows it (#1549, row 60)

The credentials read returns service, account, role, date kind, date and state for the capability's business, to human and reader sessions only. It never returns a token, file path or variable name. Author Filbert, reviewers Dewey (27558) and Darkwing (27575), candidate manifest 13541657. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-11 19:37:06 -05:00
parent 6a0d43854a
commit 1771bf98b2
9 changed files with 313 additions and 15 deletions
@@ -31,7 +31,12 @@ export async function startBroker({
    ];
    credentials = new Credentials({ references, repoRoots: protectedRoots, dataRoot });
    store = new Store(dataRoot);
-    const broker = new Broker({ store, businesses, secretCheck: (value) => credentials.assertClean(value) });
+    const broker = new Broker({
+      store,
+      businesses,
+      secretCheck: (value) => credentials.assertClean(value),
+      credentialStatus: () => credentials.status(),
+    });
    // Process identities must be supplied for every managed run when using the human transport.
    const launchRecords = [];
    function bindLaunch(r) {