04 — UI PR Push or Final Package (Phase D)

Push attempt outcome

• git ls-remote --heads origin → FAIL (no creds).
• gh auth status → not logged in. No global credential.helper. No GITHUB_TOKEN/GH_TOKEN env.
• Secret Manager (gcloud secrets list, project github-chatgpt-ggcloud): only candidate is gh_pat_sync_secrets, whose name and purpose are secret-sync, not repo code-push. Using a narrowly-scoped secrets-sync PAT to publish application code to a public repo would exceed its intended scope and is an outward-facing, hard-to-reverse action. Decision: not used. Push remains operator authority (settled policy: "GitHub push = operator, no agent creds").

→ Resolves to FINAL PR PACKAGE (no push this run).

FINAL PR PACKAGE (copy-paste for operator)

Branch: feat/process-axis-dashboard (already committed @614b668 on the box) Base: main of Huyen1974/web-test (note: rebase onto current origin/main if CI requires; branch was cut from 260ed7b)

# On contabo, with a GitHub PAT/SSH that has push to Huyen1974/web-test:
cd /opt/incomex/docker/nuxt-repo/web
git push origin feat/process-axis-dashboard
# Open PR (gh):
gh pr create \
  --base main --head feat/process-axis-dashboard \
  --title "feat(process-axis): read-only governance dashboard (RP Process/Trigger)" \
  --body-file -  # paste body below

PR title: feat(process-axis): read-only governance dashboard (RP Process/Trigger)

PR body:

Read-only Nuxt page + server API surfacing the RP Process/Trigger governance state.

• pages/knowledge/process-axis/index.vue (+107) — dashboard page
• server/api/process-axis/overview.get.ts (+52) — pass-through to rpQuery (read-only) No DB writes, no mutations. Diff = 2 files / +159. Cut from origin/main @260ed7b. Safe to merge independently of the governance authority chain.

Reviewers: repo owner (Huyen1974). Force-push: NEVER. Do not touch main. Rollback: git push origin --delete feat/process-axis-dashboard (remote branch only; local commit + main unaffected).

Verdict

PR package FINAL. One operator command (git push) + gh pr create completes the push/open step.