@stacksjs/defaults 0.70.366 → 0.70.367

package/resources/components/Dashboard/Deployments/DeploymentList.stx

@@ -1,7 +1,8 @@
 <script client>
-import type { DeploymentRecord } from '../../../../functions/deployments'
+import type { DeploymentRecord, DeploymentRollbackPlan } from '../../../../functions/deployments'
+import type { DeploymentPreview } from '@stacksjs/types'
 import { dashboardApi } from '../../../../functions/dashboard-api'
-import { fetchDeployments, summarizeDeployments } from '../../../../functions/deployments'
+import { fetchDeployments, previewDeploymentRollback, runDeploymentRollback, summarizeDeployments } from '../../../../functions/deployments'
 import { pushToast } from '../../../../functions/toasts'
 
 interface DeploymentStartResponse {
@@ -16,9 +17,18 @@ const status = state('all')
 const isLoading = state(true)
 const loadError = state('')
 const showDeployModal = state(false)
+const deploymentDialogMode = state<'preview' | 'deploy'>('deploy')
 const isStarting = state(false)
+const isPreviewing = state(false)
+const previewPlan = state<DeploymentPreview | null>(null)
 const environment = state('production')
 const domain = state('')
+const showRollbackModal = state(false)
+const rollbackPlan = state<DeploymentRollbackPlan | null>(null)
+const rollbackSite = state('')
+const rollbackRelease = state('')
+const rollbackConfirmation = state('')
+const isRollingBack = state(false)
 const summary = derived(() => summarizeDeployments(deployments()))
 const environmentOptions = [
   { value: 'production', label: 'Production' },
@@ -72,14 +82,13 @@ async function loadDeployments(): Promise<void> {
   }
 }
 
-async function startDeployment(dryRun: boolean): Promise<void> {
+async function startDeployment(): Promise<void> {
   isStarting.set(true)
   try {
     const result = await dashboardApi<DeploymentStartResponse>('/api/dashboard/deployments', {
       method: 'POST',
       body: {
-        confirmed: !dryRun,
-        dryRun,
+        confirmed: true,
         environment: environment(),
         domain: domain().trim(),
       },
@@ -90,11 +99,10 @@ async function startDeployment(dryRun: boolean): Promise<void> {
     pushToast('success', result.message, {
       detail: result.pid ? `Process ${result.pid}` : undefined,
     })
-    if (!dryRun)
-      await loadDeployments()
+    await loadDeployments()
   }
   catch (error) {
-    pushToast('error', dryRun ? 'Could not preview deployment' : 'Could not start deployment', {
+    pushToast('error', 'Could not start deployment', {
       detail: error instanceof Error ? error.message : String(error),
     })
   }
@@ -103,6 +111,89 @@ async function startDeployment(dryRun: boolean): Promise<void> {
   }
 }
 
+function openDeploymentDialog(mode: 'preview' | 'deploy'): void {
+  deploymentDialogMode.set(mode)
+  showDeployModal.set(true)
+}
+
+async function previewDeployment(): Promise<void> {
+  isPreviewing.set(true)
+  try {
+    const result = await dashboardApi<{ success: boolean, plan: DeploymentPreview }>('/api/dashboard/deployments/preview', {
+      method: 'POST',
+      body: {
+        environment: environment(),
+        domain: domain().trim(),
+      },
+    })
+    if (!result.success || !result.plan)
+      throw new Error('Deployment preview could not be generated.')
+    showDeployModal.set(false)
+    previewPlan.set(result.plan)
+  }
+  catch (error) {
+    pushToast('error', 'Could not preview deployment', {
+      detail: error instanceof Error ? error.message : String(error),
+    })
+  }
+  finally {
+    isPreviewing.set(false)
+  }
+}
+
+function continueFromPreview(): void {
+  previewPlan.set(null)
+  openDeploymentDialog('deploy')
+}
+
+function openRollback(): void {
+  rollbackPlan.set(null)
+  rollbackConfirmation.set('')
+  showRollbackModal.set(true)
+}
+
+async function previewRollback(): Promise<void> {
+  isRollingBack.set(true)
+  try {
+    const result = await previewDeploymentRollback({
+      environment: environment(),
+      site: rollbackSite().trim() || undefined,
+      release: rollbackRelease().trim() || undefined,
+    })
+    rollbackPlan.set(result.plan)
+  }
+  catch (error) {
+    pushToast('error', 'Could not preview rollback', { detail: error instanceof Error ? error.message : String(error) })
+  }
+  finally {
+    isRollingBack.set(false)
+  }
+}
+
+async function confirmRollback(): Promise<void> {
+  const plan = rollbackPlan()
+  if (!plan) return
+  isRollingBack.set(true)
+  try {
+    const result = await runDeploymentRollback({
+      environment: environment(),
+      site: rollbackSite().trim() || undefined,
+      release: rollbackRelease().trim() || undefined,
+      revision: plan.revision,
+      confirmation: rollbackConfirmation(),
+    })
+    showRollbackModal.set(false)
+    pushToast('success', result.message)
+    await loadDeployments()
+  }
+  catch (error) {
+    pushToast('error', 'Rollback failed', { detail: error instanceof Error ? error.message : String(error) })
+  }
+  finally {
+    isRollingBack.set(false)
+  }
+}
+
 onMount(() => {
   void loadDeployments()
 })
@@ -115,10 +206,13 @@ onMount(() => {
       <p class="mt-1 text-gray-500 text-sm dark:text-neutral-400">Deployment model records through the guarded dashboard API.</p>
     </div>
     <div class="flex gap-2 items-center">
-      <Button :disabled="isStarting()" variant="outline" @click="startDeployment(true)">
+      <Button :disabled="isStarting() || isPreviewing()" variant="outline" @click="openDeploymentDialog('preview')">
         Preview
       </Button>
-      <Button :disabled="isStarting()" @click="showDeployModal.set(true)">
+      <Button :disabled="isStarting() || isPreviewing() || isRollingBack()" variant="secondary" @click="openRollback">
+        Rollback
+      </Button>
+      <Button :disabled="isStarting() || isPreviewing()" @click="openDeploymentDialog('deploy')">
         Deploy
       </Button>
       <Button :loading="isLoading()" variant="secondary" @click="loadDeployments">
@@ -179,8 +273,8 @@ onMount(() => {
 
   <Modal
     :isOpen="showDeployModal()"
-    title="Start deployment"
-    description="This runs ./buddy deploy as a real background process and records its status."
+    :title="deploymentDialogMode() === 'preview' ? 'Preview deployment' : 'Start deployment'"
+    :description="deploymentDialogMode() === 'preview' ? 'Generate a non-mutating plan from the native Buddy deployment pipeline.' : 'This runs ./buddy deploy as a real background process and records its status.'"
     size="sm"
     @close="showDeployModal.set(false)"
   >
@@ -204,9 +298,48 @@ onMount(() => {
     </div>
     <template #footer>
       <div class="flex gap-2 items-center">
-        <Button :disabled="isStarting()" variant="ghost" @click="showDeployModal.set(false)">Cancel</Button>
-        <Button :loading="isStarting()" @click="startDeployment(false)">Start deployment</Button>
+        <Button :disabled="isStarting() || isPreviewing()" variant="ghost" @click="showDeployModal.set(false)">Cancel</Button>
+        <template :if="deploymentDialogMode() === 'preview'">
+          <Button :loading="isPreviewing()" @click="previewDeployment">Generate preview</Button>
+        </template>
+        <template :else>
+          <Button :loading="isStarting()" @click="startDeployment">Start deployment</Button>
+        </template>
+      </div>
+    </template>
+  </Modal>
+
+  <DeploymentPreviewDialog :plan="previewPlan" @close="previewPlan.set(null)" @deploy="continueFromPreview" />
+
+  <Modal :isOpen="showRollbackModal()" title="Rollback deployment" description="Preview and validate a preserved release before changing the active runtime." size="lg" @close="showRollbackModal.set(false)">
+    <div class="space-y-4">
+      <div class="grid gap-4 sm:grid-cols-2">
+        <Select v-model:value="environment" :options="environmentOptions" label="Environment" placeholder="" />
+        <Input v-model:value="rollbackSite" label="Site" placeholder="All application sites" hint="Optional site slug." />
       </div>
+      <Input v-model:value="rollbackRelease" label="Preserved release" placeholder="Previous release" hint="Optional. Leave blank to use the previous preserved release." />
+      <template :if="rollbackPlan()">
+        <div class="p-4 bg-neutral-50 dark:bg-neutral-950 border border-neutral-200 rounded-lg dark:border-neutral-800">
+          <div class="flex gap-3 items-start">
+            <span aria-hidden="true" class="shrink-0 mt-0.5 h-5 w-5 text-blue-600 i-hugeicons-git-pull-request"></span>
+            <div>
+              <p class="font-semibold text-gray-900 text-sm dark:text-white">Validated rollback to {{ rollbackPlan()?.target }}</p>
+              <p class="mt-1 text-gray-500 text-sm dark:text-neutral-400">{{ rollbackPlan()?.site || 'All sites' }} in {{ rollbackPlan()?.environment }}</p>
+            </div>
+          </div>
+          <pre class="mt-4 p-3 max-h-40 overflow-auto whitespace-pre-wrap font-mono text-neutral-600 text-xs dark:text-neutral-300 bg-white dark:bg-neutral-900 border border-neutral-200 rounded-md dark:border-neutral-800">{{ rollbackPlan()?.output }}</pre>
+        </div>
+        <div :for="warning in rollbackPlan()?.warnings || []" class="flex gap-2 items-start text-orange-800 text-sm dark:text-orange-200">
+          <span aria-hidden="true" class="shrink-0 mt-0.5 h-4 w-4 i-hugeicons-alert-02"></span>
+          <span>{{ warning }}</span>
+        </div>
+        <Input v-model:value="rollbackConfirmation" label="Confirmation" :placeholder="'rollback ' + environment()" :hint="'Type rollback ' + environment() + ' to continue.'" autocomplete="off" />
+      </template>
+    </div>
+    <template #footer>
+      <Button variant="secondary" :disabled="isRollingBack()" @click="showRollbackModal.set(false)">Cancel</Button>
+      <Button :if="!rollbackPlan()" :loading="isRollingBack()" @click="previewRollback">Preview rollback</Button>
+      <Button :if="rollbackPlan()" variant="danger" :loading="isRollingBack()" @click="confirmRollback">Rollback deployment</Button>
     </template>
   </Modal>
 </div>

package/resources/components/Dashboard/Deployments/DeploymentPreviewDialog.stx

@@ -0,0 +1,118 @@
+<script client>
+import type { DeploymentPreview, DeploymentPreviewOperation } from '@stacksjs/types'
+
+const plan = useReactiveProp<DeploymentPreview | null>('plan', null)
+const emit = defineEmits()
+
+const phaseIcons: Record<DeploymentPreviewOperation['phase'], string> = {
+  validate: 'i-hugeicons-task-01',
+  infrastructure: 'i-hugeicons-cloud-server',
+  build: 'i-hugeicons-tools',
+  package: 'i-hugeicons-package',
+  release: 'i-hugeicons-upload-04',
+  runtime: 'i-hugeicons-computer-terminal-01',
+  gateway: 'i-hugeicons-route-01',
+  dns: 'i-hugeicons-globe-02',
+  tls: 'i-hugeicons-shield-key',
+  container: 'i-hugeicons-cube',
+}
+
+function icon(operation: DeploymentPreviewOperation): string {
+  return phaseIcons[operation.phase] || 'i-hugeicons-check-list'
+}
+</script>
+
+<Modal
+  :isOpen="Boolean(plan())"
+  title="Deployment preview"
+  description="Generated from the same environment-aware deployment model as Buddy. No changes were made."
+  size="xl"
+  contentClassName="p-0"
+  @close="emit('close')"
+>
+  <div :if="plan()" class="max-h-[65vh] overflow-y-auto">
+    <div class="grid gap-px grid-cols-2 md:grid-cols-4 bg-neutral-200 dark:bg-neutral-700 border-neutral-200 border-b dark:border-neutral-700">
+      <div class="p-4 bg-white dark:bg-neutral-900">
+        <p class="text-neutral-500 text-xs uppercase dark:text-neutral-400">Environment</p>
+        <p class="mt-1 capitalize font-semibold text-neutral-900 text-sm dark:text-white">{{ plan()?.environment }}</p>
+      </div>
+      <div class="p-4 bg-white dark:bg-neutral-900">
+        <p class="text-neutral-500 text-xs uppercase dark:text-neutral-400">Provider</p>
+        <p class="mt-1 capitalize font-semibold text-neutral-900 text-sm dark:text-white">{{ plan()?.provider }}</p>
+      </div>
+      <div class="p-4 bg-white dark:bg-neutral-900">
+        <p class="text-neutral-500 text-xs uppercase dark:text-neutral-400">Region</p>
+        <p class="mt-1 font-semibold text-neutral-900 text-sm dark:text-white">{{ plan()?.region }}</p>
+      </div>
+      <div class="p-4 bg-white dark:bg-neutral-900">
+        <p class="text-neutral-500 text-xs uppercase dark:text-neutral-400">Target</p>
+        <p class="mt-1 font-semibold text-neutral-900 text-sm dark:text-white">{{ plan()?.target.site || 'All sites' }}</p>
+      </div>
+    </div>
+
+    <div class="p-6">
+      <div class="flex gap-3 items-start p-4 text-green-800 dark:text-green-200 bg-green-50 dark:bg-green-950/30 border border-green-200 rounded-xl dark:border-green-900">
+        <span aria-hidden="true" class="shrink-0 mt-0.5 h-5 w-5 i-hugeicons-checkmark-circle-02"></span>
+        <div>
+          <p class="font-semibold text-sm">Preview only</p>
+          <p class="mt-1 text-sm">No builds, packages, hooks, cloud providers, records, DNS changes, or service restarts were performed.</p>
+        </div>
+      </div>
+
+      <div :if="(plan()?.warnings || []).length > 0" class="mt-4 space-y-2">
+        <div :for="warning in plan()?.warnings || []" class="flex gap-3 items-start p-4 text-amber-900 dark:text-amber-100 bg-amber-50 dark:bg-amber-950/30 border border-amber-200 rounded-xl dark:border-amber-900">
+          <span aria-hidden="true" class="shrink-0 mt-0.5 h-5 w-5 i-hugeicons-alert-02"></span>
+          <p class="text-sm">{{ warning }}</p>
+        </div>
+      </div>
+
+      <section class="mt-6">
+        <div class="flex gap-3 items-end justify-between">
+          <div>
+            <h4 class="font-semibold text-neutral-900 dark:text-white">Planned operations</h4>
+            <p class="mt-1 text-neutral-500 text-sm dark:text-neutral-400">Executed in this order during a real deployment.</p>
+          </div>
+          <span class="font-mono text-neutral-500 text-xs dark:text-neutral-400">{{ plan()?.operations.length || 0 }} steps</span>
+        </div>
+        <ol class="mt-4 space-y-3">
+          <li :for="operation, index in plan()?.operations || []" class="flex gap-4 items-start p-4 bg-neutral-50 dark:bg-neutral-800/70 border border-neutral-200 rounded-xl dark:border-neutral-700">
+            <div class="flex shrink-0 items-center justify-center h-9 w-9 text-blue-700 dark:text-blue-300 bg-blue-100 dark:bg-blue-950/60 rounded-lg">
+              <span aria-hidden="true" class="h-5 w-5 {{ icon(operation) }}"></span>
+            </div>
+            <div class="min-w-0 flex-1">
+              <div class="flex gap-2 items-center">
+                <span class="font-mono text-neutral-400 text-xs">{{ index + 1 }}</span>
+                <h5 class="font-semibold text-neutral-900 text-sm dark:text-white">{{ operation.label }}</h5>
+              </div>
+              <p class="mt-1 text-neutral-600 text-sm dark:text-neutral-300">{{ operation.detail }}</p>
+              <p :if="operation.sites.length > 0" class="mt-2 font-mono text-neutral-500 text-xs dark:text-neutral-400">{{ operation.sites.join(', ') }}</p>
+            </div>
+          </li>
+        </ol>
+      </section>
+
+      <section class="mt-6">
+        <h4 class="font-semibold text-neutral-900 dark:text-white">Resolved sites</h4>
+        <div class="grid gap-3 md:grid-cols-2 mt-4">
+          <article :for="site in plan()?.sites || []" class="p-4 bg-white dark:bg-neutral-900 border border-neutral-200 rounded-xl dark:border-neutral-700">
+            <div class="flex gap-3 items-center justify-between">
+              <h5 class="font-semibold text-neutral-900 text-sm dark:text-white">{{ site.name }}</h5>
+              <span class="px-2 py-1 font-mono text-neutral-600 text-[11px] dark:text-neutral-300 bg-neutral-100 dark:bg-neutral-800 rounded-md">{{ site.kind }}</span>
+            </div>
+            <p class="mt-2 text-neutral-500 text-xs dark:text-neutral-400">{{ site.domains.join(', ') || 'Private service' }}{{ site.path !== '/' ? site.path : '' }}</p>
+          </article>
+        </div>
+      </section>
+    </div>
+  </div>
+
+  <template #footer>
+    <div class="flex gap-2 items-center justify-between w-full">
+      <p class="hidden sm:block text-neutral-500 text-xs dark:text-neutral-400">Review this plan before continuing.</p>
+      <div class="flex gap-2 items-center sm:ml-auto">
+        <Button variant="secondary" @click="emit('close')">Close</Button>
+        <Button @click="emit('deploy')">Continue to deploy</Button>
+      </div>
+    </div>
+  </template>
+</Modal>

package/resources/components/Dashboard/GlobalSearch.stx

@@ -112,10 +112,6 @@ function handleDialogKeydown(event: KeyboardEvent): void {
     event.preventDefault()
     selectCurrent()
   }
-  else if (event.key === 'Escape') {
-    event.preventDefault()
-    close()
-  }
 }
 
 function handleGlobalKeydown(event: KeyboardEvent): void {
@@ -123,10 +119,6 @@ function handleGlobalKeydown(event: KeyboardEvent): void {
     event.preventDefault()
     isOpen() ? close() : open()
   }
-  else if (isOpen() && event.key === 'Escape') {
-    event.preventDefault()
-    close()
-  }
 }
 
 useEventListener('keydown', handleGlobalKeydown)
@@ -136,94 +128,98 @@ onDestroy(() => {
 })
 </script>
 
-<template :if="isOpen()">
-  <div class="fixed inset-0 overflow-y-auto z-50 dashboard-modal-layer" role="dialog" aria-modal="true" aria-label="Search dashboard" @keydown="handleDialogKeydown">
-    <button type="button" class="fixed inset-0 w-full bg-black/50 backdrop-blur-sm cursor-default" aria-label="Close search" @click="close"></button>
-
-    <div class="relative mt-[15vh] mx-auto max-w-lg">
-      <div class="overflow-hidden bg-white dark:bg-neutral-900 border border-neutral-200 rounded-xl dark:border-neutral-700 shadow-2xl">
-        <div class="flex items-center px-4 border-b border-neutral-200 dark:border-neutral-700">
-          <span class="shrink-0 h-5 w-5 text-neutral-400 i-hugeicons-search-02"></span>
-          <input
-            ref="globalSearchInput"
-            x-model="query"
-            type="search"
-            placeholder="Search model records"
-            aria-label="Search model records"
-            class="px-3 py-4 w-full text-neutral-900 text-sm dark:text-white placeholder:text-neutral-400 bg-transparent border-none focus:outline-none focus:ring-0"
-            @input="scheduleSearch($event.target.value)"
-          />
-          <span :if="isSearching()" class="shrink-0 h-5 w-5 text-blue-500 animate-spin i-hugeicons-loading-03"></span>
-          <kbd :if="!isSearching()" class="shrink-0 px-1.5 py-0.5 font-medium text-[10px] text-neutral-400 bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">
-            ESC
-          </kbd>
-        </div>
-
-        <div class="overflow-y-auto max-h-80">
-          <div :if="error()" role="alert" class="px-4 py-8 text-center">
-            <span class="mb-2 mx-auto h-8 w-8 text-red-400 i-hugeicons-alert-02"></span>
-            <p class="text-red-600 text-sm dark:text-red-400">{{ error() }}</p>
-          </div>
+<Modal
+  :isOpen="isOpen()"
+  ariaLabel="Search dashboard"
+  size="md"
+  position="top"
+  panelClassName="overflow-hidden border border-neutral-200 dark:border-neutral-700"
+  contentClassName="p-0"
+  :showCloseButton="false"
+  @close="close()"
+>
+  <div @keydown="handleDialogKeydown">
+    <div class="flex items-center px-4 border-b border-neutral-200 dark:border-neutral-700">
+      <span class="shrink-0 h-5 w-5 text-neutral-400 i-hugeicons-search-02"></span>
+      <input
+        ref="globalSearchInput"
+        x-model="query"
+        type="search"
+        autofocus
+        placeholder="Search model records"
+        aria-label="Search model records"
+        class="px-3 py-4 w-full text-neutral-900 text-sm dark:text-white placeholder:text-neutral-400 bg-transparent border-none focus:outline-none focus:ring-0"
+        @input="scheduleSearch($event.target.value)"
+      />
+      <span :if="isSearching()" class="shrink-0 h-5 w-5 text-blue-500 animate-spin i-hugeicons-loading-03"></span>
+      <kbd :if="!isSearching()" class="shrink-0 px-1.5 py-0.5 font-medium text-[10px] text-neutral-400 bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">
+        ESC
+      </kbd>
+    </div>
 
-          <div :if="!error() && unavailable().length > 0" role="status" class="mt-3 mx-3 px-3 py-2 text-amber-700 text-xs dark:text-amber-300 bg-amber-50 dark:bg-amber-950/30 border border-amber-200 rounded-lg dark:border-amber-900">
-            {{ unavailable().length }} searchable {{ unavailable().length === 1 ? 'model is' : 'models are' }} unavailable. Run migrations or fix the reported model configuration.
-          </div>
+    <div class="overflow-y-auto max-h-80">
+      <div :if="error()" role="alert" class="px-4 py-8 text-center">
+        <span class="mb-2 mx-auto h-8 w-8 text-red-400 i-hugeicons-alert-02"></span>
+        <p class="text-red-600 text-sm dark:text-red-400">{{ error() }}</p>
+      </div>
 
-          <template :if="!error() && Object.keys(results()).length > 0">
-            <template :for="group in resultGroups()">
-              <div class="pb-1 pt-3 px-3">
-                <h3 class="px-1 font-semibold text-neutral-400 text-xs tracking-wider uppercase">
-                  {{ group.type }}
-                </h3>
-              </div>
-              <template :for="item in group.items">
-                <button
-                  type="button"
-                  class="flex gap-3 items-center px-4 py-2.5 w-full text-left transition-colors"
-                  :class="resultIndex(item) === selectedIndex() ? 'bg-blue-50 dark:bg-blue-950/40' : 'hover:bg-neutral-50 dark:hover:bg-neutral-800'"
-                  @mouseenter="selectedIndex.set(resultIndex(item))"
-                  @click="openResult(item)"
-                >
-                  <span :class="'shrink-0 h-5 w-5 text-neutral-400 ' + item.icon"></span>
-                  <span class="flex-1 min-w-0">
-                    <span class="block font-medium text-neutral-900 text-sm truncate dark:text-white">
-                      {{ item.title }}
-                    </span>
-                    <span :if="item.subtitle" class="block text-neutral-500 text-xs truncate dark:text-neutral-400">
-                      {{ item.subtitle }}
-                    </span>
-                  </span>
-                  <span class="shrink-0 h-4 w-4 text-neutral-300 dark:text-neutral-600 i-hugeicons-arrow-right-01"></span>
-                </button>
-              </template>
-            </template>
-          </template>
+      <div :if="!error() && unavailable().length > 0" role="status" class="mt-3 mx-3 px-3 py-2 text-amber-700 text-xs dark:text-amber-300 bg-amber-50 dark:bg-amber-950/30 border border-amber-200 rounded-lg dark:border-amber-900">
+        {{ unavailable().length }} searchable {{ unavailable().length === 1 ? 'model is' : 'models are' }} unavailable. Run migrations or fix the reported model configuration.
+      </div>
 
-          <div :if="!error() && query().trim() && !isSearching() && Object.keys(results()).length === 0" class="px-4 py-8 text-center">
-            <span class="mb-2 mx-auto h-8 w-8 text-neutral-300 dark:text-neutral-600 i-hugeicons-search-02"></span>
-            <p class="text-neutral-500 text-sm dark:text-neutral-400">No results found for "{{ query() }}"</p>
+      <template :if="!error() && Object.keys(results()).length > 0">
+        <template :for="group in resultGroups()">
+          <div class="pb-1 pt-3 px-3">
+            <h3 class="px-1 font-semibold text-neutral-400 text-xs tracking-wider uppercase">
+              {{ group.type }}
+            </h3>
           </div>
+          <template :for="item in group.items">
+            <button
+              type="button"
+              class="flex gap-3 items-center px-4 py-2.5 w-full text-left transition-colors"
+              :class="resultIndex(item) === selectedIndex() ? 'bg-blue-50 dark:bg-blue-950/40' : 'hover:bg-neutral-50 dark:hover:bg-neutral-800'"
+              @mouseenter="selectedIndex.set(resultIndex(item))"
+              @click="openResult(item)"
+            >
+              <span :class="'shrink-0 h-5 w-5 text-neutral-400 ' + item.icon"></span>
+              <span class="flex-1 min-w-0">
+                <span class="block font-medium text-neutral-900 text-sm truncate dark:text-white">
+                  {{ item.title }}
+                </span>
+                <span :if="item.subtitle" class="block text-neutral-500 text-xs truncate dark:text-neutral-400">
+                  {{ item.subtitle }}
+                </span>
+              </span>
+              <span class="shrink-0 h-4 w-4 text-neutral-300 dark:text-neutral-600 i-hugeicons-arrow-right-01"></span>
+            </button>
+          </template>
+        </template>
+      </template>
 
-          <div :if="!error() && !query().trim() && !isSearching()" class="px-4 py-8 text-center">
-            <p class="text-neutral-400 text-sm">Search fields declared by each model's useSearch trait.</p>
-          </div>
-        </div>
-
-        <div class="flex gap-4 items-center px-4 py-2.5 text-neutral-400 text-xs border-neutral-200 border-t dark:border-neutral-700">
-          <span class="flex gap-1 items-center">
-            <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">↑↓</kbd>
-            Navigate
-          </span>
-          <span class="flex gap-1 items-center">
-            <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">↵</kbd>
-            Open
-          </span>
-          <span class="flex gap-1 items-center">
-            <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">esc</kbd>
-            Close
-          </span>
-        </div>
+      <div :if="!error() && query().trim() && !isSearching() && Object.keys(results()).length === 0" class="px-4 py-8 text-center">
+        <span class="mb-2 mx-auto h-8 w-8 text-neutral-300 dark:text-neutral-600 i-hugeicons-search-02"></span>
+        <p class="text-neutral-500 text-sm dark:text-neutral-400">No results found for "{{ query() }}"</p>
       </div>
+
+      <div :if="!error() && !query().trim() && !isSearching()" class="px-4 py-8 text-center">
+        <p class="text-neutral-400 text-sm">Search fields declared by each model's useSearch trait.</p>
+      </div>
+    </div>
+
+    <div class="flex gap-4 items-center px-4 py-2.5 text-neutral-400 text-xs border-neutral-200 border-t dark:border-neutral-700">
+      <span class="flex gap-1 items-center">
+        <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">↑↓</kbd>
+        Navigate
+      </span>
+      <span class="flex gap-1 items-center">
+        <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">↵</kbd>
+        Open
+      </span>
+      <span class="flex gap-1 items-center">
+        <kbd class="px-1 py-0.5 text-[10px] bg-neutral-100 dark:bg-neutral-700 border border-neutral-200 rounded dark:border-neutral-600">esc</kbd>
+        Close
+      </span>
     </div>
   </div>
-</template>
+</Modal>

package/resources/components/Dashboard/Operations/AuditDashboard.stx

@@ -0,0 +1,16 @@
+<script client>
+import type { AuditOperationsResponse } from '../../../../functions/operations'
+import { fetchAuditOperations } from '../../../../functions/operations'
+import { pushToast } from '../../../../functions/toasts'
+const data = state<AuditOperationsResponse | null>(null)
+const loading = state(true)
+async function load(): Promise<void> { loading.set(true); try { data.set(await fetchAuditOperations()) } catch (error) { pushToast('error', 'Could not load audit log', { detail: String(error) }) } finally { loading.set(false) } }
+function date(value: string): string { return new Intl.DateTimeFormat(undefined, { dateStyle: 'medium', timeStyle: 'medium' }).format(new Date(value)) }
+onMount(() => void load())
+</script>
+<div class="space-y-6">
+  <PageHeader title="Operations" description="Inspect the append-only operator event stream with actor and operation correlation."><template #actions><Button variant="secondary" :loading="loading()" @click="load"><span :if="!loading()" class="h-4 w-4 i-hugeicons-refresh"></span>Refresh</Button></template></PageHeader>
+  <OperationsNavigation active="audit" />
+  <section class="grid gap-3 sm:grid-cols-2 lg:grid-cols-4"><StatsCard title="Events" :value="String(data()?.summary.events || 0)" icon="i-hugeicons-activity-03" iconBg="primary" :loading="loading()" /><StatsCard title="Operators" :value="String(data()?.summary.operators || 0)" icon="i-hugeicons-user-group" iconBg="neutral" :loading="loading()" /><StatsCard title="Failures" :value="String(data()?.summary.failures || 0)" icon="i-hugeicons-alert-02" iconBg="warning" :loading="loading()" /><StatsCard title="Latest sequence" :value="String(data()?.summary.latestSequence || 0)" icon="i-hugeicons-list-view" iconBg="success" :loading="loading()" /></section>
+  <section class="overflow-hidden bg-white dark:bg-neutral-900 border border-gray-200 rounded-lg dark:border-neutral-800"><div class="px-4 py-4 border-b border-gray-200 dark:border-neutral-800"><h2 class="font-semibold text-gray-900 dark:text-white">Operator events</h2><p class="mt-1 text-gray-500 text-sm dark:text-neutral-400">Events are sequence ordered and retained in the ts-cloud control plane.</p></div><div :if="!loading() && !data()?.events.length" class="px-6 py-12 text-center text-gray-500 text-sm dark:text-neutral-400">No operator events have been recorded.</div><div class="max-h-[42rem] overflow-auto divide-y divide-gray-100 dark:divide-neutral-800"><div :for="event in data()?.events || []" class="grid gap-2 px-4 py-3 md:grid-cols-[5rem_1fr_10rem_12rem]"><span class="font-mono text-gray-400 text-xs">#{{ event.sequence }}</span><div><p class="font-medium text-gray-900 text-sm dark:text-white">{{ event.type }}</p><p class="mt-1 font-mono text-gray-500 text-xs dark:text-neutral-400">{{ event.operationId || event.id }}</p></div><span class="text-gray-600 text-sm dark:text-neutral-300">{{ event.actorName }}</span><time class="text-gray-500 text-xs dark:text-neutral-400">{{ date(event.createdAt) }}</time></div></div></section>
+</div>

package/resources/components/Dashboard/Operations/ChangeDashboard.stx

@@ -0,0 +1,66 @@
+<script client>
+import type { ChangeOperationsResponse, ReleaseApprovalItem } from '../../../../functions/operations'
+import { decideRelease, fetchChangeOperations } from '../../../../functions/operations'
+import { pushToast } from '../../../../functions/toasts'
+
+const data = state<ChangeOperationsResponse | null>(null)
+const loading = state(true)
+const selected = state<ReleaseApprovalItem | null>(null)
+const comment = state('')
+const busy = state(false)
+
+async function load(): Promise<void> {
+  loading.set(true)
+  try { data.set(await fetchChangeOperations()) }
+  catch (error) { pushToast('error', 'Could not load change plan', { detail: String(error) }) }
+  finally { loading.set(false) }
+}
+
+async function decide(decision: 'approved' | 'rejected'): Promise<void> {
+  if (!selected()) return
+  busy.set(true)
+  try {
+    await decideRelease(selected()!.id, decision, comment())
+    pushToast('success', decision === 'approved' ? 'Release approved.' : 'Release rejected.')
+    selected.set(null)
+    await load()
+  }
+  catch (error) { pushToast('error', 'Approval decision failed', { detail: String(error) }) }
+  finally { busy.set(false) }
+}
+
+onMount(() => void load())
+</script>
+
+<div class="space-y-6">
+  <PageHeader title="Operations" description="Review application changes, safety signals, approvals, and active work in one place.">
+    <template #actions><Button variant="secondary" :loading="loading()" @click="load"><span :if="!loading()" class="h-4 w-4 i-hugeicons-refresh"></span>Refresh</Button></template>
+  </PageHeader>
+  <OperationsNavigation active="changes" />
+  <section class="grid gap-3 sm:grid-cols-2 lg:grid-cols-4">
+    <StatsCard title="Schema changes" :value="String(data()?.summary.migrationChanges || 0)" icon="i-hugeicons-database-01" iconBg="primary" :loading="loading()" />
+    <StatsCard title="Destructive" :value="String(data()?.summary.destructiveChanges || 0)" icon="i-hugeicons-alert-02" iconBg="warning" :loading="loading()" />
+    <StatsCard title="Approvals" :value="String(data()?.summary.approvals || 0)" icon="i-hugeicons-task-done-01" iconBg="neutral" :loading="loading()" />
+    <StatsCard title="Active operations" :value="String(data()?.summary.activeOperations || 0)" icon="i-hugeicons-loading-03" iconBg="success" :loading="loading()" />
+  </section>
+  <section class="grid gap-6 lg:grid-cols-2">
+    <div class="overflow-hidden bg-white dark:bg-neutral-900 border border-gray-200 rounded-lg dark:border-neutral-800">
+      <div class="px-4 py-4 border-b border-gray-200 dark:border-neutral-800"><h2 class="font-semibold text-gray-900 dark:text-white">Change plan</h2><p class="mt-1 text-gray-500 text-sm dark:text-neutral-400">Current model and runtime changes for {{ data()?.environment?.name || 'this environment' }}.</p></div>
+      <div class="divide-y divide-gray-100 dark:divide-neutral-800">
+        <div class="flex items-center justify-between px-4 py-3"><span class="text-gray-700 text-sm dark:text-neutral-300">Model-derived schema operations</span><Badge :variant="data()?.summary.destructiveChanges ? 'warning' : 'info'">{{ data()?.summary.migrationChanges || 0 }}</Badge></div>
+        <div class="flex items-center justify-between px-4 py-3"><span class="text-gray-700 text-sm dark:text-neutral-300">Migration ledger drift</span><Badge :variant="data()?.migrations.summary.drift ? 'warning' : 'success'">{{ data()?.migrations.summary.drift ? 'Review' : 'Clean' }}</Badge></div>
+        <div class="flex items-center justify-between px-4 py-3"><span class="text-gray-700 text-sm dark:text-neutral-300">Running or queued control-plane work</span><Badge variant="default">{{ data()?.activeOperations.length || 0 }}</Badge></div>
+      </div>
+    </div>
+    <div class="overflow-hidden bg-white dark:bg-neutral-900 border border-gray-200 rounded-lg dark:border-neutral-800">
+      <div class="px-4 py-4 border-b border-gray-200 dark:border-neutral-800"><h2 class="font-semibold text-gray-900 dark:text-white">Release approvals</h2><p class="mt-1 text-gray-500 text-sm dark:text-neutral-400">Only native releases explicitly marked as approval-required appear here.</p></div>
+      <div :if="!loading() && !data()?.pendingReleases.length" class="px-6 py-10 text-center text-gray-500 text-sm dark:text-neutral-400">No releases are awaiting approval.</div>
+      <button :for="release in data()?.pendingReleases || []" type="button" class="flex w-full items-center justify-between gap-3 px-4 py-3 text-left hover:bg-gray-50 dark:hover:bg-neutral-800" @click="selected.set(release)"><div><p class="font-medium text-gray-900 text-sm dark:text-white">{{ release.sourceSha || release.id }}</p><p class="mt-1 text-gray-500 text-xs dark:text-neutral-400">{{ release.kind }} · {{ release.strategy }}</p></div><Badge variant="warning">Review</Badge></button>
+    </div>
+  </section>
+  <OperationHistory :operations="data()?.recentOperations || []" :loading="loading()" />
+  <Modal :isOpen="Boolean(selected())" title="Release approval" description="Record an immutable approval decision for this release." size="sm" @close="selected.set(null)">
+    <Input v-model:value="comment" label="Comment" placeholder="Reason for this decision" />
+    <template #footer><Button variant="secondary" :disabled="busy()" @click="selected.set(null)">Cancel</Button><Button variant="danger" :loading="busy()" @click="decide('rejected')">Reject</Button><Button :loading="busy()" @click="decide('approved')">Approve</Button></template>
+  </Modal>
+</div>