app-console-keys — console chassis and F-key framework

app-console-keys is the always-installed base chassis of os-console. All other console modules — email, content, SLM monitoring, and the rest — are optional cartridges that plug into the framework app-console-keys defines. The module is mandatory: an os-console binary built without it will not compile.

Naming note: "keys" in app-console-keys refers to keyboard function keys — the F1 through F12 strip that navigates between cartridge slots. It does not refer to cryptographic keys. Cryptographic pairing and machine-based authorization are implemented by system-gateway-mba, a separate crate.

The Cartridge trait

app-console-keys defines the Cartridge trait — the interface every app-console-* module must implement. The trait is minimal: a module declares which F-key slot it occupies, what to render when that slot is active, and how to handle keyboard input while active. The chassis handles everything else: slot registration, input dispatch, focus management, and the status bar.

Because cartridges are compiled directly into the os-console binary rather than loaded at runtime, the trait is a compile-time contract. A module that fails to implement it produces a build error, not a runtime failure.

The F-key navigation strip

The primary interface element managed by app-console-keys is the horizontal F-key tab strip at the top of the console. The strip shows one slot per registered cartridge. The active slot is highlighted; inactive slots are greyed when not installed.

The strip does not re-order slots at runtime. Each cartridge's slot position is fixed at the F-key number it claims. Console input application is permanently fixed at F12 per SYS-ADR-10.

The status bar

The app-console-keys status bar runs along the bottom of the console and is always visible, regardless of which cartridge slot is active. It displays:

Component	Content
Identity	Username and tenant set during the pairing ceremony
Authorization state	MBA LINK ACTIVE, MBA LINK INACTIVE <reason>, or MBA LINK PENDING
Active slot	Name of the currently focused cartridge
Pending pairs	Count of pairing requests awaiting operator approval
Session duration	Elapsed time since console start

Authorization client

app-console-keys maintains a single outbound machine-based authorization link to the Totebox host. Unlike the F-key strip's per-cartridge slots, this link is chassis-wide, not per-service: there is one authorization state, not one per paired backend.

When the link goes inactive, the chassis replaces its entire content area with a full-screen pairing prompt — every cartridge, regardless of which backend it talks to, stops rendering until the link is restored. No cartridge crashes the chassis; the chassis simply shows the pairing screen instead of any cartridge content.

Configuration

Profile-based configuration is stored at ~/.config/os-console/config.toml. The configuration file controls which backend services the console attempts to pair with at startup, display preferences, and the SSH server port (if the SSH server feature is compiled in).

PDF rendering and graphics support

app-console-keys provides the graphics infrastructure used by cartridges that render images: the display path uses the Kitty graphics protocol as the primary path, with Sixel encoding as a fallback, and an error message for terminal environments that support neither. PDF rendering itself is a separate concern — cartridges that render PDF pages to bitmaps depend on app-console-content, which pulls in pdfium-render directly rather than routing through this chassis.

See also

• os-console — the Command Ledger — the os-console product overview, including the F-key surface and operating modes
• os-console — the Command Ledger — the complete cartridge architecture and F-key map
• Console input application — the F12 mandatory input gate; always compiled alongside app-console-keys
• Machine-based authorization — the authorization mechanism the chassis client manages
• Three-ring architecture — the Ring 1/2/3 architecture the authorization client connects to