# Carapace

Local control plane

## Auth

Use gateway token/password to call Control API and open pairing WebSocket.

Auth type
Credential

No credential loaded.

## Security Context

## Gateway Status

    {}

## Channels

Raw JSON

    {}

## Config Snapshot (Redacted)

Read-only redacted config + hash for optimistic concurrency.

    {}

## Gemini Onboarding

Configure Gemini with either Google sign-in or a Gemini API key.

Mode
Google OAuth client ID Google OAuth client secret
Gemini API key Gemini base URL (optional)

## Codex Onboarding

Configure Codex with OpenAI subscription login. This is separate from OpenAI API-key setup.

OpenAI OAuth client ID OpenAI OAuth client secret

## Control UI Settings

Safe write path via `PATCH /control/config` (only `gateway.controlUi.*`).

Control UI enabled Allow insecure auth paths Disable device auth for Control UI client
Control UI base path (empty = `/ui`)

## Advanced Config Patch

Apply one explicit `gateway.controlUi.*` path update through `PATCH /control/config` (other paths are rejected by the server).

Path Value (JSON)

## Task Queue Operator

Inspect and mutate durable tasks via control endpoints.

State filter

### Selected Task

    {}

Reason Delay (ms) for retry/resume
Patch payload (CronPayload JSON, optional)
policy.maxAttempts policy.maxTotalRuntimeMs policy.maxTurns policy.maxRunTimeoutSeconds

## Device Pairing (WebSocket)

Uses client ID `carapace-control-ui` over `/ws`.

Pairing socket disconnected.

### Pending Pairing Requests

### Paired Devices

Pairing event log

    []

## Security Notice

This page is not on HTTPS and not localhost. Some auth/pairing paths may be blocked unless `gateway.controlUi.allowInsecureAuth=true`.