Web console

The platform has a web console where you can look at your Lane in a browser: your Boxes, their snapshots and images, and a console into each Box.

For people, not agents

The web console has none of af’s guardrails: no --confirm, no core pinning, no memory check, no key sync. A Box made or changed there may not be one af can manage. Look around and use the console there; make your changes with af.

Open it

af ui --json

This writes ~/.config/af/af-<you>.p12, readable only by you: your certificate and key in a browser file, encrypted with a passphrase. It prints:

• the passphrase, once. Use af ui --passphrase - to type your own on stdin instead (at least 8 characters);
• the URL of the console;
• the steps for your browser.

Then, in your own browser:

1. Import the .p12 file (Chrome, Firefox or Safari), using the passphrase.
2. Open the URL.
3. Accept the platform’s server certificate. Its SHA-256 is in the steps; check that it matches.
4. Choose the af-<you> certificate when the browser asks.

What you see

The console signs in with the same certificate as af, so it shows exactly what af shows: your Lane and nothing of anyone else’s. Running af ui again writes a new file with a new passphrase. af never sends the file anywhere and never prints the key.