Explore a Nexus repository graph

Nexus lets signed-in readers browse an indexed repository graph. First get a trusted Nexus origin from the service owner. Production Compose requires an Authentik session at the Caddy entry point for every route. The root path selects the first indexed repository. Graph administration is an Authentik administrator task.

Prerequisites

Use a browser, a trusted Nexus origin, an Authentik session, and an indexed repository. The trusted Nexus origin has the form https://<nexus-host>. Do not use administrator credentials or an MCP connection for graph reading.

Actions

1. Confirm the trusted Nexus origin with the service owner.
2. Open <verified Nexus origin>/.
3. Complete Authentik sign-in when prompted.
4. Use <verified Nexus origin>/?repo=<catalog-id> to open a known repository directly.
5. Select an indexed repository from the repository selector.
6. Search symbols to select a node in the repository graph.
7. Open code references or process flows when the selected node provides them.
8. Open a related Beskid Standard link when the node provides one.

The role map separates signed-in reading, protected administration, and machine graph queries.

flowchart TD
  accTitle: Nexus reader, administrator, and MCP boundary
  accDescr: Signed-in readers navigate graphs. Authentik administrators manage protected controls. MCP clients make machine graph queries through a separate role.
  R[Signed-in reader] --> S[Repository selector]
  S --> G[Graph navigation]
  G --> C[Code references]
  G --> P[Process flows]
  G --> L[Standard links]
  A[Authentik administrator] --> M[Protected management controls]
  X[MCP client] --> Q[Machine graph queries]

Diagram text

1. A signed-in reader selects an indexed repository with the repository selector or a direct query.
2. Graph navigation selects nodes and exposes their available code references.
3. Process flows explain detected execution paths when the indexed graph contains them.
4. Standard links lead to related Beskid Standard material when the selected node has indexed links.
5. An Authentik administrator manages protected controls. Reader sign-in does not grant administrator permissions.
6. An MCP client makes machine graph queries through a separate role. It does not receive reader or administrator permissions from this page.

Expected result

You can view the selected repository graph and inspect a selected code reference, process flow, or Standard link when the index provides it.

Recovery

If you have no trusted origin, stop and use the Nexus operator contract. If Nexus shows an empty state, do not attempt indexing or administration. No indexed repository is available to read. If it is loading, wait for the graph request to finish before you change the selection. If the signed-in route remains unavailable, record the visible error and use the Nexus operator contract. Do not request administrator credentials.

Next task

Open Read Tracker to read delivery status, or open Use your account for the Authentik sign-in procedure.