[process-manager PM-29] Admin console: Fresh app, browser-served by the control plane

[rickylabs]

Summary

The admin console as a Fresh app served by the control-plane service (@netscript/fresh-ui), contract-first over the PM-9 routes — no new routes minted for the UI. Browser-served mode is the always-ships path (OF-2); desktop packaging (PM-32) and dashboard panel (PM-33) layer on top.

Scope

• Archetype / area: console app under plugins/process-manager (SCOPE-frontend)
• Part of Epic: NetScript Process Manager — bare-metal supervisor + admin console (pup/pm2 done right) #510
• Depends on: [process-manager PM-9] ProcessManagerContract v1: the 18-route table #520, [process-manager PM-10] Control-plane oRPC service (PluginServiceContribution) #521, [process-manager PM-11] Loopback transport + address-descriptor discovery + CLI degraded mode #522, [process-manager PM-12] Token auth: opaque bearer + 0o600 secrets + deny-remote default #523, [process-manager PM-13] Event stream + follow-logs (eventIterator, live-only v1) #524 · Blocks: PM-32, PM-33

Design source

• research/design/d4-cli-admin-console-surfaces.md §3 (PMS-5) · plan.md §4 PM-29

Acceptance criteria

• gate: console consumes only the 18 contract routes via the typed client (no bespoke endpoints)
• gate: auth = the same bearer token (PM-12); no separate UI auth
• gate: ships on fresh-ui L2 + local composition if the L3 blocks/ promotion lags (plan §9 residual 4)
• gate: scoped check/lint/fmt wrappers green (--ext ts,tsx)

Non-scope

• Desktop packaging (PM-32); DashboardPanelContribution (PM-33).

Drift / Debt

• none