Serve the control console under a runtime base path

Description

Running the console behind a reverse proxy under a prefix is impossible today: Vite bakes base /control/ui/ (internal/control/ui/vite.config.ts), the router base is compile-time BASE_URL (src/App.tsx), every API call is an absolute /control/ path (src/api/client.ts) and the server redirect /control/ui -> /control/ui/ is absolute (internal/control/http.go). One image must serve any prefix: build with a relative base, have the server inject and an API prefix into index.html from CONTROL_BASE_PATH (or X-Forwarded-Prefix from a trusted proxy), and make redirects prefix-aware. Default behaviour unchanged.

Acceptance Criteria

• #1 Console works end to end under an arbitrary prefix with one build
• #2 Default (no prefix) unchanged; Infinity GET shapes unchanged
• #3 UI tests cover prefixed API URL construction

Definition of Done

• #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
• #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
• #3 just dump — inventory diffed against signals/

Implementation Plan

loop6: runtime configured base path with one relative UI build, prefix-aware redirects/assets/API; Go serving proof and UI URL tests, unchanged default/Infinity shapes, environment alignment, gate/review/root landing.

Continue retained base-path patch on accepted readiness main; finish ordinary/lease handler wiring, verify actual local console under configured prefix and unchanged default/Infinity, URL tests, environment alignment and full gate. Root reviews and lands serially.

Implementation Notes

loop1: implementation attempts 0; frozen order and shared HTTP/config seam depend on SKT-0092 (lease HA with crash-only fencing) landing first. HA candidate rejected at review ceiling. Resume after accepted HA land/gate; no UI/base-path source changes.

loop2: implementation attempts 0; dependency-held by SKT-0092 (lease HA with crash-only fencing), whose final authorized implementation attempt failed compilation and was not landed. No downstream source changes. Resume in frozen order after prerequisite accepted land and green composed gate; owner must first authorize further HA repair.

loop3: implementation attempts0; dependency-held by SKT-0092 (lease HA with crash-only fencing). Attempt5 local gate and review completed, but security rejects retained-runtime-red proof provenance; final Astra rescue confirms incompatible premise, no HA land. Resume frozen order only after corrected proof contract or valid missing evidence, accepted HA land and green composed gate. No downstream source changes.

loop4: implementation attempts0; HA source landed ddee479 but composed gate remains red, owned by SKT-0109 (resolve late Faro POST test-oracle proof defect). No readiness/console/backend/chart code begun. Resume frozen order only after owner-authorized HA proof repair and green composed gate; readiness+console first, then state backend, then chart.

loop5 attempts0; dependency-held: SKT-0109 (late Faro POST oracle) candidate unlanded because full gate exposes independent coordinator-loss assertion/admission discrepancy. No downstream source changes. Resume only after authorized repair and prerequisite accepted land/composed green.

loop6 partial, not landed: adds ControlBasePath (CONTROL_BASE_PATH) and Handler.SetBasePath; main.go and ha_main.go wiring (SetBasePath before serving, mount under base+/control/) was never done. Candidate retained byte-exact at operator-held local evidence (base 14719af, sha256 3c6a123e7375be174b068601fb63f4987e00fed28ded6d48c6f35c36ce96fc9d). Gate was red on the control-dash race timeout and an HA planned-exit assertion.

loop7 implementation attempts0; dependency park: H93 must land before B98; retained patch unchanged and hash verified. Resume frozen order after prerequisite accepted land/green gate; no candidate/source changes this run.

loop8 attempts0, priorcountsunchanged. Parkneedsdependency: H93mustland first, blockedR12. RetainedB98patchverified untouched; resumeafterreadinessland.

loop10: new implementation attempts0, historical implementation count0 unchanged. Dependency park on SKT-0093 (standby-aware readiness) acceptance and land; no gate or acceptance claimed. Resume frozen serial order after prerequisite green/land, using retained exact candidate where provided; no reset or reconstruction from prose.

This run: Dependency SKT-0093 (standby-aware readiness) unaccepted/unlanded; performance prerequisite reverted after CI489.278s. Retained input unchanged; zero new implementation attempts. Resume frozen order after prerequisite accepted land and gate.

This run: one new implementation cycle from retainedpatch; before-serve ordinary/lease configuration and dualmounts fixed; browser onebuild default plus2prefixes, navigation/deeplink/assets/22APIrequests each andstrippedproxy/Infinitypayload checks passed. Fail-first UI/compositiontestobserved; fullcandidategate0. Rootland851d8796c32cce37f26a0fb52643414a5556ca7b, CI38075941912 all10jobs success andexactcleancomposedgate0. AggregateCodeRabbit6edd50e..851d879 completedall20files0findings. No externalservicesused; emittedinventoryunchanged/no blueprintgeneration change. Knownlocalvalidation prereqstaleignoreddist trackedseparately bySKT-0120 (build embedded UI before Go validation).

loop12: one new implementation cycle, prior retained history preserved. Done with one-build Chromium prefix/default proof, exact-SHA CI/composed gate and aggregate CodeRabbit.

Final Summary

One relative UI build now serves default or configured runtime prefix, with matching router/assets/API URLs and ordinary/lease dual mounting. Browser proof, URL tests, unchanged Infinity payloads, exact landedSHA CI, composed gate and completeaggregate review prove criteria1-3.