Console Shell
What This Service Is For
The shell turns Platform answers into the shared console experience: start-up states, page space, navigation, context entry and application explanations. It is implemented in the console and serves no API of its own.
Boundary
The four owned objects describe client presentation. Security supplies identity and authority, Metadata supplies record placements, and Operations supplies application availability. Hosted search, attention, alerts, recent records, financial context and assistant behavior stay with their owning modules.
Operations in Words
The operations below describe consumption. Start-up asks for the security context, strictly when an address names a workspace and otherwise with a remembered preference. A strict refusal or failure can require fallback reads. Full refresh uses the current workspace context, while application refresh reads only applications and features into the client snapshot. Navigation reads placed record types, falling back to definition and custom-app lists. The administrator overview reads workspace availability. Each listed read is excluded from configurable intake with an explicit reason.
Events and Jobs
An in-browser application-refusal signal starts a refresh. It is not a published Platform event. The shell schedules no service jobs and performs no model inference. The remembered workspace and sidebar cookie are browser preferences.
Consistency Guarantees
Context-change tickets prevent old answers from replacing a newer workspace. This client ordering is not a database transaction. Application refresh checks both ticket and selected workspace, retaining the previous list on failure. Security reads can stamp authentication and settle expired grants; these effects remain Security responsibilities.
The recorded deployment enables licensing and application-access enforcement. The mode readers default to off when configuration is absent or unreadable, so that deployment assumption must be preserved by the owning services. The console still derives domain visibility from the returned application list.