- Shipped
- August 20, 2026 at 4:35 AM UTC
- Author
- kamo
- Commit
- 246c61b
Both are Guacamole targets that share one credential between everybody, which makes them operator tooling rather than a member's own workspace. They were top-bar nav options gated on `ctx.isGod`, so every god carried two icons for machines they rarely touch, both of them draggable, unpinnable and searchable in the command palette like an ordinary feature. They now render as two buttons to the left of "Add platform admin" on Settings -> Platform Administration -> Platform Admins, beside the dev-machine controls that already administer the third KamoDesktop target. The gate is `caller.isGod` from the tab's own payload - the server's reading of `users.is_god`, never a client-side derivation - and DesktopSsoController still requires god on its own, so the buttons only mirror an answer the endpoint gives independently. desktopLinux stays in the nav: it is provision-gated, per-member and personal. Removing the two registry entries removes their nav placement, their launchpad cards, their palette entries and their action keys; resolveNavLayout already drops stored ids that no longer exist, so a member who had arranged them keeps a valid layout with no migration. The devMachineGate test now asserts they are absent rather than god-gated.