Add Console Responsibility Split - clarify agent owns PTY/execution, API authenticates, portal renders UI only

This commit is contained in:
jester 2026-01-18 22:49:23 +00:00
parent 1a869d731d
commit ab298fd7f2

View File

@ -126,3 +126,26 @@ It does not directly query agents, Proxmox, or exporters.
- UI refresh reflects Redis state, not instant agent changes
This model intentionally mirrors Pterodactyl semantics.
---
## Console Responsibility Split (Authoritative)
### Agent
- Owns PTY lifecycle
- Owns process execution
- Owns security boundary
- Owns WebSocket console endpoint
### API
- Authenticates console access
- Provides server metadata (vmid, type)
- Does NOT proxy PTY traffic
### Portal
- Renders terminal UI
- Sends raw input bytes
- Displays streamed output
- Must not assume process state
This split is intentional and enforced to prevent drift.