Open console work through a durable address

Purpose

Shareable addresses preserve the workspace and destination needed to resume console work.

How It Works

A person opens an address from a bookmark, message or navigation entry. The console reads the workspace and destination from that address. Authentication can intervene before workspace entry. Route construction supplies the same destination shape for links created elsewhere in the console. Planned destinations have a placeholder rather than a finished working screen. The product should remove internal planning references from the placeholder’s customer-facing explanation.

Relationships

Workspace entry checks the workspace named by the address.
Record references use the route catalogue to build destinations.
Legacy entry maps older addresses onto the current scheme.

Show evidence (sources, provenance, origins, pinned commits)

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Outcomes: Bookmarks and shared links identify their workspace and page.Route construction and page placement share a maintained catalogue.
Surfaces: console
Intent sources: react-console:docs/url-architecture.md#1. Rules (decided by Andrew 2026-10-14; final acceptance 2026-10-15)react-console:docs/url-architecture.md#6. Tenant from the URL (decided by Andrew 2026-10-14; final acceptance 2026-10-15)

Controls

32 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-003 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-LOG-002 TC-LOG-003 TC-LOG-005 TC-PI-001 TC-PI-002 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

Permissions

Key	Checked at	Scope
`console.access`	console	tenant
`platform.security-self.read`	api	tenant

Business Rules

10 rules, 7 to be proved before approval. A rule's product intent is derived from its origin: 0 confirmed by a product decision, the rest inheriting this capability's proposed.

Id	Rule	Kind	Enforced at	Provenance
`01`must prove Proposed	Console work uses HQ or workspace console roots, while route guards separately allow authentication, previews, portals, public payments, print pages and temporary legacy entry points. no proof recorded yet	invariant	console	test react-console:lib/routes/__tests__/guards.test.ts#places every page.tsx on a route node or an allowed page that is not a tenant's
`02` Proposed	Workspace addresses place the product area before its resource and optional record, nest child records under parents and organize Configuration separately by module. origin: react-console:docs/url-architecture.md#1. Rules, rules 2 and 4 (decided by Andrew 2026-10-14; final acceptance 2026-10-15)	invariant	console	documented react-console:docs/url-architecture.md#1. Rules
`03`must prove Proposed	Console-defined path words are lowercase or camelCase without hyphens or underscores, while data identifiers may include hyphens. origin: react-console:docs/url-architecture.md#1. Rules, rule 3 (Andrew, 2026-10-14) (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	validation	console	test react-console:lib/routes/__tests__/guards.test.ts#names every folder under app/ with a lowercase word or camelCase
`04`must prove Proposed	Shared builders construct console links and source guards check literal paths and page inventory with declared non-console and redirect exceptions. origin: react-console:docs/url-architecture.md#1. Rules, rule 6 (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	invariant	console	test react-console:lib/routes/__tests__/guards.test.ts#finds no literal console path outside lib/routes
`05`must prove Proposed	A Configuration module key cannot also name a cross-module Configuration area. origin: react-console:docs/url-architecture.md#1. Rules, rule 4 (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	validation	console	test react-console:lib/routes/__tests__/routes.test.ts#never shares a word between a configuration module and a cross-module area
`06`must prove Proposed	Record links survive reload in their workspace, and browser history moves between console pages. origin: react-console:docs/url-architecture.md#8. Tests (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	invariant	console	test react-console:e2e/mock/url-architecture.mock.spec.ts#a record deep link survives a reload
`07`must prove Proposed	Sign-in after a signed-out deep link returns to its requested page and query. origin: react-console:docs/url-architecture.md#6. Tenant from the URL (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	lifecycle	console	test react-console:e2e/dev/url-architecture.dev.spec.ts#a signed-out deep link goes through sign-in and comes back to the same page and query
`08`must prove Proposed	A registered planned destination renders a named, permission- and application-guarded placeholder, while an unregistered destination returns not found. origin: react-console:docs/url-architecture.md#3. Workspaces (decided by Andrew 2026-10-14; final acceptance 2026-10-15) no proof recorded yet	policy	console	observed react-console:app/(console)/console/[tenantId]/[...slug]/page.tsx:ModulePage
`09` Proposed	Builders accept queries and legacy redirects retain them, while switching workspaces intentionally removes the query. origin: react-console:docs/url-architecture.md#5. lib/routes (decided by Andrew 2026-10-14; final acceptance 2026-10-15)	invariant	console	observed react-console:lib/routes/build.ts:queryString; lib/routes/legacy.ts:legacyTenantPath; lib/routes/match.ts:switchTenantPath
`10` Proposed	Former Eligibility addresses permanently redirect to the corresponding Configuration rule screen within the same workspace.	lifecycle	console	test react-console:lib/routes/__tests__/eligibility-redirect.test.ts#keep the tenant the link named

Scenarios

Id	Given	When	Then	Provenance
`01`	A permitted user reloads a contact bookmark.	The page initializes again.	The same workspace and contact remain selected.	test react-console:e2e/mock/url-architecture.mock.spec.ts#a record deep link survives a reload
`02`	A shared console link is opened without a session.	The person completes sign-in.	The requested destination and query are preserved.	test react-console:e2e/dev/url-architecture.dev.spec.ts#a signed-out deep link goes through sign-in and comes back to the same page and query
`03`	The typed address is neither a page nor a registered planned destination.	The console resolves it.	The destination is not found.	observed react-console:app/(console)/console/[tenantId]/[...slug]/page.tsx:ModulePage

Planning

Open console work through a durable address ​

Purpose ​

How It Works ​

Relationships ​