app.osint-console

OSINT Console

Thin responsive host around @lssm-tech/bundle.osint and @lssm-tech/bundle.self-improving-system. The reusable controllers cover loading, empty, degraded, unauthorized, conflict, stale, review, shadow, canary, observation, promoted, rolled-back, killed, and evidence states with design-system primitives.

The deployable Next.js host uses OSINT_PUBLIC_API_URL when the API is on a separate authenticated origin and otherwise defaults to the browser's same origin. It sends same-origin credentials through the generated SDK, provides responsive dataset, company, job, people, curation, improvement program, signal, candidate, review, gate, canary, observation, rollback, and exact-replay navigation. Candidate- and program-specific views require an explicit resource identifier before fetching.

The command center is organized into independently addressable intelligence, acquisition, governance, recovery, and self-improvement areas. URL parameters preserve the active view, explicit resource identifier, and master/detail record selection across refresh and browser history. The acquisition area covers source health, acquisition activity, research, and evidence. Recovery covers dead letters and webhook delivery; jobs expose freshness/reconciliation actions; and governed improvement covers evaluation, review, shadow, canary, observation, promotion, rollback, kill, and exact replay.

Actions are never inferred by this host. It renders only server-authoritative action descriptors which also match the route's operation allowlist. Descriptors carry their exact input, authorization reference, idempotency key, optional disabled reason, and optional confirmation phrase. Confirmation phrases match byte-for-byte and concurrent double activation is coalesced before the SDK call.

SELF_IMPROVEMENT_PUBLIC_API_URL optionally points improvement controllers at a separately hosted surface; otherwise they reuse OSINT_PUBLIC_API_URL and same-origin credentials. The console never decides policy or promotion state.