feat(m2.2.4): add read-only Core registry inspection views

.env.example

@@ -136,6 +136,16 @@ OPENHUMAN_TEMPERATURE=0.7
 # [optional] Allow bearer-authenticated RPC callers to invoke update.apply/update.run
 # Disable on exposed server deployments unless you explicitly want remote self-upgrade.
 # OPENHUMAN_AUTO_UPDATE_RPC_MUTATIONS_ENABLED=true
+# [optional] YouPet Core REST API base URL for the workbench bridge (default: http://127.0.0.1:8000).
+# YOUPET_CORE_API_URL=http://127.0.0.1:8000
+# [optional] YouPet Core service token. Prefer config.toml/keyring-backed config for local use.
+# YOUPET_SERVICE_TOKEN=
+# [optional] Actor label sent in X-Actor-Id for YouPet workbench requests (default: openhuman-workbench).
+# YOUPET_WORKBENCH_ACTOR_ID=openhuman-workbench
+# [required for YouPet Workbench alert actions] Core users.id UUID for the operator.
+# YOUPET_OPERATOR_USER_ID=
+# [required for ActionRequest list/inbox] Core tenant UUID (or pass tenantId RPC override).
+# YOUPET_TENANT_ID=
 
 # ---------------------------------------------------------------------------
 # Runtime flags

app/package.json

@@ -127,6 +127,7 @@
     "three": "^0.183.2",
     "tw-animate-css": "^1.4.0",
     "util": "^0.12.5",
+    "zod": "4.3.6",
     "zustand": "^5.0.15"
   },
   "devDependencies": {

app/scripts/e2e-run-all-flows.sh

@@ -244,6 +244,7 @@ if should_run_suite "navigation"; then
   run "test/e2e/specs/navigation-settings-panels.spec.ts"     "navigation-settings"       "navigation"
   run "test/e2e/specs/command-palette.spec.ts"                "command-palette"           "navigation"
   run "test/e2e/specs/channels-smoke.spec.ts"                 "channels-smoke"            "navigation"
+  run "test/e2e/specs/action-request-inbox.spec.ts"           "action-request-inbox"      "navigation"
   run "test/e2e/specs/insights-dashboard.spec.ts"             "insights-dashboard"        "navigation"
   run "test/e2e/specs/guided-tour-gates.spec.ts"              "guided-tour-gates"         "navigation"
   _mini_summary "navigation"

app/src/AppRoutes.guards.test.tsx

@@ -178,7 +178,8 @@ describe('AppRoutes — the whole route table stays classified', () => {
     '/callback/:kind': 'none',
     '/callback/:kind/:status': 'none',
     '/onboarding/*': 'protected',
-    '/home': 'redirect',
+    '/home': 'protected',
+    '/registries': 'protected',
     '/human': 'protected',
     '/brain': 'protected',
     '/flows': 'protected',
@@ -198,6 +199,8 @@ describe('AppRoutes — the whole route table stays classified', () => {
     '/routines': 'redirect',
     '/rewards': 'protected',
     '/workflows': 'protected',
+    '/workbench': 'protected',
+    '/action-requests': 'protected',
     '/webhooks': 'redirect',
     '/settings/*': 'protected',
     '/ptt-overlay': 'none',

app/src/AppRoutes.redirects.test.tsx

@@ -85,7 +85,6 @@ function landingFor(entry: string) {
 // is added there and not here, `every redirect in the route table is covered`
 // below fails — the list cannot silently fall behind the code.
 const REDIRECTS: Array<{ from: string; pathname: string; search: string }> = [
-  { from: '/home', pathname: '/chat', search: '' },
   { from: '/activity', pathname: '/settings/notifications', search: '' },
   { from: '/intelligence', pathname: '/settings/notifications', search: '' },
   { from: '/skills', pathname: '/connections', search: '' },

app/src/AppRoutes.test.tsx

@@ -0,0 +1,135 @@
+import { render, screen } from '@testing-library/react';
+import type { ReactNode } from 'react';
+import { MemoryRouter } from 'react-router-dom';
+import { describe, expect, it, vi } from 'vitest';
+
+vi.mock('./lib/platform', () => ({ getIsMobile: () => false }));
+vi.mock('./AppRoutesIOS', () => ({ default: () => <div data-testid="ios-routes">ios</div> }));
+vi.mock('./components/DefaultRedirect', () => ({
+  default: () => <div data-testid="default-redirect">redirect</div>,
+}));
+vi.mock('./components/ProtectedRoute', () => ({
+  default: ({ children, requireAuth }: { children: ReactNode; requireAuth?: boolean }) => (
+    <div data-testid="protected-route" data-require-auth={String(requireAuth)}>
+      {children}
+    </div>
+  ),
+}));
+vi.mock('./components/PublicRoute', () => ({
+  default: ({ children }: { children: ReactNode }) => (
+    <div data-testid="public-route">{children}</div>
+  ),
+}));
+vi.mock('./features/human/HumanPage', () => ({
+  default: () => <div data-testid="page-human">human</div>,
+}));
+vi.mock('./features/coreRegistries/CoreRegistriesPage', () => ({
+  default: () => <div data-testid="page-core-registries">core-registries</div>,
+}));
+vi.mock('./pages/Accounts', () => ({
+  default: () => <div data-testid="page-accounts">accounts</div>,
+}));
+vi.mock('./components/routing/ForwardSearch', () => ({
+  default: ({ to }: { to: string }) => <div data-testid={`forward:${to}`}>{to}</div>,
+}));
+vi.mock('./pages/Activity', () => ({
+  default: () => <div data-testid="page-activity">activity</div>,
+}));
+vi.mock('./pages/Brain', () => ({ default: () => <div data-testid="page-brain">brain</div> }));
+vi.mock('./pages/dev/AgentInsightsPreview', () => ({
+  default: () => <div data-testid="page-agent-insights">agent-insights</div>,
+}));
+vi.mock('./pages/dev/assistant-ui-demo', () => ({
+  default: () => <div data-testid="page-assistant-ui-demo">assistant-ui-demo</div>,
+}));
+vi.mock('./pages/dev/UiGallery', () => ({
+  default: () => <div data-testid="page-ui-gallery">ui-gallery</div>,
+}));
+vi.mock('./pages/FlowCanvasPage', () => ({
+  default: () => <div data-testid="page-flow-canvas">flow-canvas</div>,
+  FlowCanvasDraftPage: () => <div data-testid="page-flow-canvas-draft">flow-canvas-draft</div>,
+}));
+vi.mock('./pages/FlowsPage', () => ({ default: () => <div data-testid="page-flows">flows</div> }));
+vi.mock('./pages/Home', () => ({ default: () => <div data-testid="page-home">home</div> }));
+vi.mock('./pages/Invites', () => ({
+  default: () => <div data-testid="page-invites">invites</div>,
+}));
+vi.mock('./pages/Notifications', () => ({
+  default: () => <div data-testid="page-notifications">notifications</div>,
+}));
+vi.mock('./pages/onboarding/Onboarding', () => ({
+  default: () => <div data-testid="page-onboarding">onboarding</div>,
+}));
+vi.mock('./pages/PttOverlayPage', () => ({
+  PttOverlayPage: () => <div data-testid="page-ptt-overlay">ptt-overlay</div>,
+}));
+vi.mock('./pages/Rewards', () => ({
+  default: () => <div data-testid="page-rewards">rewards</div>,
+}));
+vi.mock('./pages/Settings', () => ({
+  default: () => <div data-testid="page-settings">settings</div>,
+}));
+vi.mock('./pages/Skills', () => ({ default: () => <div data-testid="page-skills">skills</div> }));
+vi.mock('./pages/WebCallbackPage', () => ({
+  default: () => <div data-testid="page-web-callback">callback</div>,
+}));
+vi.mock('./pages/Welcome', () => ({
+  default: () => <div data-testid="page-welcome">welcome</div>,
+}));
+vi.mock('./pages/Workbench', () => ({
+  default: () => <div data-testid="page-workbench">workbench</div>,
+}));
+vi.mock('./pages/ActionRequestInbox', () => ({
+  default: () => <div data-testid="page-action-request-inbox">action-requests</div>,
+}));
+vi.mock('./pages/WorkflowsRun', () => ({
+  default: () => <div data-testid="page-workflows-run">workflows-run</div>,
+}));
+
+const AppRoutes = (await import('./AppRoutes')).default;
+
+describe('AppRoutes', () => {
+  it('registers the Home route behind the protected desktop shell', () => {
+    render(
+      <MemoryRouter initialEntries={['/home']}>
+        <AppRoutes />
+      </MemoryRouter>
+    );
+
+    expect(screen.getByTestId('page-home')).toBeInTheDocument();
+    expect(screen.getByTestId('protected-route')).toHaveAttribute('data-require-auth', 'true');
+  });
+
+  it('registers the Core Registries route behind the protected desktop shell', () => {
+    render(
+      <MemoryRouter initialEntries={['/registries']}>
+        <AppRoutes />
+      </MemoryRouter>
+    );
+
+    expect(screen.getByTestId('page-core-registries')).toBeInTheDocument();
+    expect(screen.getByTestId('protected-route')).toHaveAttribute('data-require-auth', 'true');
+  });
+
+  it('preserves the Workbench route behind the protected desktop shell', () => {
+    render(
+      <MemoryRouter initialEntries={['/workbench']}>
+        <AppRoutes />
+      </MemoryRouter>
+    );
+
+    expect(screen.getByTestId('page-workbench')).toBeInTheDocument();
+    expect(screen.getByTestId('protected-route')).toHaveAttribute('data-require-auth', 'true');
+  });
+
+  it('preserves the ActionRequest inbox behind the protected desktop shell', () => {
+    render(
+      <MemoryRouter initialEntries={['/action-requests']}>
+        <AppRoutes />
+      </MemoryRouter>
+    );
+
+    expect(screen.getByTestId('page-action-request-inbox')).toBeInTheDocument();
+    expect(screen.getByTestId('protected-route')).toHaveAttribute('data-require-auth', 'true');
+  });
+});

app/src/AppRoutes.tsx

@@ -5,16 +5,19 @@ import DefaultRedirect from './components/DefaultRedirect';
 import ProtectedRoute from './components/ProtectedRoute';
 import PublicRoute from './components/PublicRoute';
 import ForwardSearch from './components/routing/ForwardSearch';
+import CoreRegistriesPage from './features/coreRegistries/CoreRegistriesPage';
 import HumanPage from './features/human/HumanPage';
 import { getIsMobile } from './lib/platform';
 import Accounts from './pages/Accounts';
+import ActionRequestInbox from './pages/ActionRequestInbox';
 import Activity from './pages/Activity';
 import Brain from './pages/Brain';
 import AgentInsightsPreview from './pages/dev/AgentInsightsPreview';
 import AssistantUiDemoPage from './pages/dev/assistant-ui-demo';
 import UiGallery from './pages/dev/UiGallery';
 import FlowCanvasPage, { FlowCanvasDraftPage } from './pages/FlowCanvasPage';
 import FlowsPage from './pages/FlowsPage';
+import Home from './pages/Home';
 import Invites from './pages/Invites';
 import Notifications from './pages/Notifications';
 import Onboarding from './pages/onboarding/Onboarding';
@@ -24,6 +27,7 @@ import Settings from './pages/Settings';
 import Skills from './pages/Skills';
 import WebCallbackPage from './pages/WebCallbackPage';
 import Welcome from './pages/Welcome';
+import Workbench from './pages/Workbench';
 import WorkflowsRun from './pages/WorkflowsRun';
 
 interface AppRoutesProps {
@@ -71,9 +75,23 @@ const AppRoutes = ({ location }: AppRoutesProps = {}) => {
       />
 
       {/* Protected routes */}
-      {/* Home is merged into the unified chat surface — /home redirects to /chat
-          (the chat's empty "new window" state is the former Home greeting). */}
-      <Route path="/home" element={<Navigate to="/chat" replace />} />
+      <Route
+        path="/home"
+        element={
+          <ProtectedRoute requireAuth={true}>
+            <Home />
+          </ProtectedRoute>
+        }
+      />
+
+      <Route
+        path="/registries"
+        element={
+          <ProtectedRoute requireAuth={true}>
+            <CoreRegistriesPage />
+          </ProtectedRoute>
+        }
+      />
 
       {/* Human — the dedicated full-bleed mascot stage. The chat surface carries
           the same mascot docked on its composer; both read one set of mascot
@@ -211,6 +229,24 @@ const AppRoutes = ({ location }: AppRoutesProps = {}) => {
         }
       />
 
+      <Route
+        path="/workbench"
+        element={
+          <ProtectedRoute requireAuth={true}>
+            <Workbench />
+          </ProtectedRoute>
+        }
+      />
+
+      <Route
+        path="/action-requests"
+        element={
+          <ProtectedRoute requireAuth={true}>
+            <ActionRequestInbox />
+          </ProtectedRoute>
+        }
+      />
+
       {/* Back-compat: /routines was an orphaned dead page. Workflows is now a
           first-level module — redirect surviving deep links to /flows. */}
       <Route path="/routines" element={<Navigate to="/flows" replace />} />