Skip to content

Add app audience and Share & manage handoffs #34

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thebillg merged 2 commits into from
Oct 28, 2026
Merged

Add app audience and Share & manage handoffs #34

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d7cda2a
feat(apps): report audience and management handoff links
nathan-thillairajah Oct 26, 2026
9d1f304
fix(apps): require complete audience policy for handoff
nathan-thillairajah Oct 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -288,3 +288,16 @@ shared workspace-list endpoint to accept workstation authentication, with the
matching Roxy policy deployed.
`bl workspace switch` continues to require a local CLI login; listing does not
change the workstation's active workspace or rotate a session.

### App completion handoff

After readiness, `bl apps handoff APP_ID --json` reads the current app and audience
and returns an exact `management_url` into its Share & manage panel. Configure
`BL_APPS_MANAGEMENT_BASE_URL` (or `--management-base-url`) with the HTTPS portal
origin for the same environment. The CLI does not derive a portal from a mesh
hostname. Keep the configured control-plane origin for delegated authentication.

The result separates verified policy from unknown access and does not claim
recipient browser acceptance. It performs no sharing, session switch, or deployment.
If policy inspection is unavailable, agents must report the audience as unknown.
Portal deep links require the matching portal and Kgoose workspace-selection changes.
Loading
Loading