@takodotid/circuit 0.43.1 → 1.0.0-rc.2

package/src/schema/policy.ts

@@ -1,115 +0,0 @@
-import type { Family, IP, Prefix } from "./common";
-
-/** A standard BGP community, `asn:value`, for example `64500:100`. Each part is 0 to 65535. */
-export type StandardCommunity = `${number}:${number}`;
-
-/** A large BGP community, `asn:function:parameter`, for example `64500:1:6939`. Each part is 0 to 4294967295. */
-export type LargeCommunity = `${number}:${number}:${number}`;
-
-/** A standard community to remove. `*` stands for any value of a part, as in `64500:*`. */
-export type StandardCommunityPattern = `${number | "*"}:${number | "*"}`;
-
-/** A large community to remove. `*` stands for any value of a part, as in `64500:*:*`. */
-export type LargeCommunityPattern = `${number | "*"}:${number | "*"}:${number | "*"}`;
-
-/** Registries a prefix set can be fetched from. */
-export type Registry = "ripe-stat";
-
-/** Prefixes listed here, or fetched from a registry by `refresh` and never typed by hand. */
-export type PrefixSet =
-    | {
-          /** The prefixes, of one family. */
-          prefixes: readonly Prefix[];
-      }
-    | {
-          source: {
-              /** Where the prefixes come from. */
-              registry: Registry;
-              /** What to ask for, for example `AS7713`. */
-              query: string;
-              /** Which family to keep. */
-              family: Family;
-          };
-      };
-
-/** Conditions on a route. All must be true. An empty match is true for every route. */
-export type Match<S extends string> = {
-    /** Only routes of this family. */
-    family?: Family;
-    /** Exactly this prefix. */
-    prefix?: Prefix;
-    /** Any prefix in this set. */
-    prefix_set?: S;
-    /** Prefix length within this range, inclusive. */
-    prefix_length?: { min?: number; max?: number };
-    /** AS path length within this range, inclusive. Every AS counts, prepends included. */
-    as_path_length?: { min?: number; max?: number };
-    /** The AS path holds this AS anywhere: the route came from it or through it. */
-    through_as?: number;
-    /** The route's origin validation state. */
-    rpki?: "valid" | "invalid" | "not-found";
-    /** Has this standard community, `asn:value`. */
-    community?: StandardCommunity;
-    /** Has this large community, `asn:function:parameter`. */
-    large_community?: LargeCommunity;
-};
-
-/** Changes to a route. In community lists to remove, `*` stands for any value of a field, as in `64500:*:*`. */
-export type Sets = {
-    /** Preference among routes to the same prefix within our AS. Higher wins. */
-    local_pref?: number;
-    /** Multi-exit discriminator offered to the neighbor. Lower wins. */
-    med?: number;
-    /** Prepend our own AS this many times, to make the path look longer. */
-    prepend?: number;
-    /** Replace the route's standard communities with these. */
-    communities?: readonly StandardCommunity[];
-    /** Add these standard communities. */
-    add_communities?: readonly StandardCommunity[];
-    /** Remove standard communities matching these. A part may be `*`. */
-    remove_communities?: readonly StandardCommunityPattern[];
-    /** Replace the route's large communities with these. */
-    large_communities?: readonly LargeCommunity[];
-    /** Add these large communities. */
-    add_large_communities?: readonly LargeCommunity[];
-    /** Remove large communities matching these. A part may be `*`. */
-    remove_large_communities?: readonly LargeCommunityPattern[];
-    /** Next hop for the route. */
-    next_hop?: IP;
-    /** Source address for traffic the device itself sends to the route. Applies to routes of the same family as the address. */
-    preferred_source?: IP;
-    /** Drop traffic to the route on this device, instead of forwarding it. */
-    blackhole?: true;
-};
-
-/**
- * Run another policy at this point. A route it accepts or rejects stops there; any other route goes on to the next rule. A call holds nothing else: to call a policy for some routes only, put the match inside that policy.
- */
-export type CallRule<P extends string> = {
-    /** Shown beside the rule on the device. */
-    description?: string;
-    /** The policy to run. */
-    call: P;
-    match?: never;
-    set?: never;
-    action?: never;
-};
-
-/** Change and decide on the routes that match. A rule without `action` changes the route and moves on to the next rule. */
-export type MatchRule<S extends string> = {
-    /** Shown beside the rule on the device. */
-    description?: string;
-    call?: never;
-    /** Which routes the rule applies to. Every route when absent. */
-    match?: Match<S>;
-    /** What to change on a matching route. */
-    set?: Sets;
-    /** Accept or reject a matching route, ending the policy for it. */
-    action?: "accept" | "reject";
-};
-
-/** One step of a route policy: a call to another policy, or a rule that matches routes, changes them and may decide on them. */
-export type PolicyRule<P extends string, S extends string> = CallRule<P> | MatchRule<S>;
-
-/** Rules evaluated in order, first decision wins. A route no rule accepts is rejected. */
-export type RoutePolicy<P extends string, S extends string> = readonly PolicyRule<P, S>[];

package/src/schema/routing.ts

@@ -1,173 +0,0 @@
-import type { Family, IP, Prefix, Secret } from "./common";
-
-/** A route the device has without learning it. */
-export type StaticRoute<I extends string, F extends string, T extends string = never> = {
-    /** Destination. */
-    prefix: Prefix;
-    /** Next-hop address. */
-    via?: IP;
-    /** Next-hop interface, for a link without a next-hop address. */
-    interface?: I;
-    /** Discard matching traffic. The usual way to originate an aggregate. */
-    blackhole?: true;
-    /** Withdraw the route while BFD finds `via` dead, and put it back once `via` answers again. Needs `via`. */
-    bfd?: true;
-    /** Preference against other routes to the same prefix. Lower wins. 1 when absent. */
-    distance?: number;
-    /** The VRF the route is in. The main table when absent. */
-    vrf?: F;
-    /** The table the route is in: `main`, or one of `routing.tables`. The main table when absent; write `main` to say so. A route has a `vrf` or a `table`, not both. */
-    table?: T | "main";
-    /** Why the route exists. */
-    description?: string;
-};
-
-/**
- * What a BGP neighbor is to us, with the roles RFC 9234 defines: `provider`, a transit we buy from; `customer`, one we sell transit to; `peer`, one we exchange our own routes with; `rs`, an exchange's route server; `rs-client`, a network using our route server.
- */
-export type BgpRole = "provider" | "customer" | "peer" | "rs" | "rs-client";
-
-/** Settings a BGP neighbor can set itself or take from its group. */
-export type NeighborSettings<P extends string, T extends string = never> = {
-    /** The neighbor's AS. Our own AS makes the session internal. */
-    remote_as?: number;
-    /** Who the neighbor is. */
-    description?: string;
-    /** Source address for the session. The outgoing interface's address when absent. */
-    local_address?: IP;
-    /** Policy for routes learned. Nothing is accepted when absent. */
-    import?: P;
-    /** Policy for routes announced. Nothing is announced when absent. */
-    export?: P;
-    /** What the neighbor is to us, such as `provider` for a transit. Both sides then reject a route leak, as RFC 9234 describes. */
-    role?: BgpRole;
-    /** The neighbor is more than one hop away. */
-    multihop?: boolean;
-    /** TCP MD5 password shared with the neighbor. */
-    password?: Secret;
-    /** Close the session when the neighbor announces more prefixes than this. It stays closed until cleared by hand, on RouterOS with `/routing bgp session clear <session> flag=limit-exceeded`. */
-    max_prefixes?: number;
-    /** Seconds without a message before the session is declared down. */
-    hold_time?: number;
-    /** Seconds between keepalive messages. */
-    keepalive?: number;
-    /** Families exchanged. The family of the neighbor's address when absent. */
-    families?: readonly Family[];
-    /** Wait for the neighbor to connect instead of connecting to it. */
-    passive?: boolean;
-    /** Detect a dead link in under a second with BFD. */
-    bfd?: boolean;
-    /** The table the routes learned are installed in: `main`, or one of `routing.tables`. The main table when absent; write `main` to say so. On RouterOS the session also announces from that table, so each prefix of `networks` it announces needs a route in the table too, and a running session takes a new table only when it restarts. */
-    table?: T | "main";
-};
-
-/** One BGP session. Settings it does not set come from its group. */
-export type Neighbor<P extends string, G extends string, T extends string = never> = NeighborSettings<P, T> & {
-    /** The neighbor's address. */
-    address: IP;
-    /** The group this neighbor takes a setting from when it does not set that setting itself. */
-    group?: NoInfer<G>;
-};
-
-/** BGP on this device. */
-export type Bgp<P extends string, G extends string, T extends string = never> = {
-    /** Our AS number. */
-    asn: number;
-    /** Prefixes this device originates. Each needs a route, for example a static blackhole. Export policy still decides who receives them. */
-    networks?: readonly Prefix[];
-    /** Settings shared by several neighbors, keyed by group name. */
-    groups?: Record<G, NeighborSettings<P, T>>;
-    /** Sessions keyed by name. */
-    neighbors?: Record<string, Neighbor<P, G, T>>;
-};
-
-/** How fast BFD notices a dead neighbor: after `multiplier` packets in a row are missed, so in `interval` times `multiplier` milliseconds. */
-export type Bfd = {
-    /** Milliseconds between the packets this device sends, and the shortest gap it asks of the neighbor. */
-    interval: number;
-    /** How many packets in a row may be missed before the neighbor is declared down. */
-    multiplier: number;
-};
-
-/** A route origin validation server, RFC 8210. */
-export type RpkiServer = {
-    /** Where the validator listens. */
-    address: IP;
-    /** Its RTR port, often 323 or 8282. */
-    port: number;
-    /** Who runs it, or why it is here. */
-    description?: string;
-};
-
-/** OSPF on one interface. */
-export type OspfInterface = {
-    /** Cost of sending through this interface. Lower is preferred. Derived from speed when absent. */
-    cost?: number;
-    /** Advertise the interface's network but form no adjacency on it. */
-    passive?: boolean;
-    /** How the link is treated. Broadcast when absent. */
-    network?: "broadcast" | "point-to-point";
-    /** Detect a dead neighbor in under a second with BFD. */
-    bfd?: boolean;
-};
-
-/** An OSPF area ID, written as four numbers with dots between them, for example `0.0.0.0` for the backbone. */
-export type OspfAreaId = `${number}.${number}.${number}.${number}`;
-
-/** OSPF, version 2 for IPv4 and version 3 for IPv6. */
-export type Ospf<I extends string> = {
-    /** Which versions run. IPv4 when absent. */
-    families?: readonly Family[];
-    /** Areas keyed by area ID, for example `0.0.0.0`, each with the interfaces in it. */
-    areas: Record<OspfAreaId, { interfaces: Partial<Record<I, OspfInterface>> }>;
-    /** Routes from other sources announced into OSPF. */
-    redistribute?: readonly ("connected" | "static")[];
-};
-
-/** A routing table beside the main one. It holds no interfaces: routes go in from static routes and BGP neighbors that name it in `table`, and `routing.rules` send traffic to it. */
-export type RoutingTable = {
-    /** What the table is for. */
-    description?: string;
-};
-
-/** Traffic a routing rule matches: all of what is given. Every packet when absent. */
-export type RoutingRuleMatch<I extends string> = {
-    /** Source prefix. */
-    src?: Prefix;
-    /** Destination prefix. */
-    dst?: Prefix;
-    /** The interface the traffic arrives on. */
-    in_interface?: I;
-};
-
-/** One routing rule: traffic it matches is routed by `table` instead of the main table. */
-export type RoutingRule<I extends string, T extends string> = {
-    /** Why the rule exists. */
-    description?: string;
-    /** What the traffic must match. Every packet when absent, so such a rule is the last one. */
-    match?: RoutingRuleMatch<I>;
-    /** The table that routes the traffic: one of `routing.tables`, or `main`. */
-    table: T | "main";
-    /** When `table` has no route for a packet: `none` drops it as unroutable, `main` routes it by the main table instead. `none` when absent. Not for a rule whose table is `main`. */
-    fallback?: "none" | "main";
-};
-
-/** Routing on this device. */
-export type Routing<P extends string, G extends string, I extends string, F extends string, T extends string = never> = {
-    /** Identifies this router to its neighbors. */
-    router_id?: IP;
-    /** Routing tables beside the main one, keyed by name. Not `main`, and not the name of a VRF. */
-    tables?: Record<T, RoutingTable>;
-    /** Rules that route matching traffic by another table, such as traffic from one block by its own transits' default. In order: the first that matches decides, and traffic no rule matches is routed by the main table. */
-    rules?: readonly RoutingRule<I, NoInfer<T>>[];
-    /** Routes the device has without learning them. */
-    static?: readonly StaticRoute<I, F, NoInfer<T>>[];
-    /** BGP sessions and what they exchange. */
-    bgp?: Bgp<P, G, NoInfer<T>>;
-    /** OSPF areas and interfaces. */
-    ospf?: Ospf<I>;
-    /** Validators answering route origin validation. */
-    rpki?: readonly RpkiServer[];
-    /** BFD timers for every BFD session on the device: BGP, OSPF and static routes. The platform's own when absent; Junos has none, so Circuit sends every 300 ms there. Both ends of a link should agree. */
-    bfd?: Bfd;
-};

package/src/schema/system.ts

@@ -1,203 +0,0 @@
-import type { IP, MacAddress, Prefix, Secret, Severity } from "./common";
-import type { TimeZone } from "./time-zones";
-
-/** A software release track, as RouterOS names them. `long-term` changes least; `development` is the newest and least tested. */
-export type ReleaseChannel = "long-term" | "stable" | "testing" | "development";
-
-/** How bad an alarm is, most severe first, as ITU-T X.733 ranks them. */
-export type AlarmSeverity = "critical" | "major" | "minor" | "warning";
-
-/** Device-wide settings. */
-export type System = {
-    /** IANA zone, for example `Asia/Jakarta`. The editor suggests every name. UTC when absent. */
-    timezone?: TimeZone;
-    /** Shown at login. */
-    banner?: string;
-    /** Resolvers the device uses. */
-    dns?: {
-        /** Resolvers, in order of preference. */
-        servers: readonly IP[];
-        /** Answer queries from others. Off when absent. */
-        serve?: boolean;
-    };
-    /** How the device keeps time. */
-    ntp?: {
-        /** Time sources, by address or name. */
-        servers: readonly string[];
-        /** Answer time queries from others. Off when absent. */
-        serve?: boolean;
-    };
-    /** Where log messages go. */
-    logging?: {
-        /** Kept on the device's own storage, from `level` up. */
-        local?: {
-            /** The least severe message kept. */
-            level: Severity;
-            /** How many rotated files to keep. */
-            files?: number;
-            /** Lines in each file before it rotates. */
-            lines_per_file?: number;
-        };
-        /** Sent to syslog collectors, each from its own `level` up. */
-        remote?: readonly {
-            address: IP;
-            /** UDP port. 514 when absent. */
-            port?: number;
-            /** The least severe message sent. */
-            level: Severity;
-        }[];
-    };
-    /** Software release track the device updates from. `stable` when absent. */
-    release_channel?: ReleaseChannel;
-    /** Alarms raised at another severity than the platform's own, keyed by the alarm's name as the platform spells it, such as `hwOpticalUnAuthorized` on VRP. */
-    alarms?: Record<string, { severity: AlarmSeverity }>;
-    /** Read optic temperature, power and voltage. */
-    transceiver_monitoring?: boolean;
-    /** Host behaviour of the IP stack. */
-    ip?: {
-        /** Send ICMP redirects. Off when absent. */
-        icmp_redirects?: boolean;
-        /** Answer a TCP SYN flood with SYN cookies. Off when absent. */
-        syn_cookies?: boolean;
-    };
-};
-
-/** A login on the device. */
-export type User = {
-    /** What the user may do. */
-    role: "admin" | "operator" | "read-only";
-    /** The login password. */
-    password: Secret;
-    /** Who the account is for. */
-    description?: string;
-    /** Public keys accepted instead of the password over SSH. */
-    ssh_keys?: readonly string[];
-};
-
-/** A way into the device. Absent means turned off. */
-export type Service = {
-    /** Sources allowed. `management.allow` when absent. */
-    allow?: readonly Prefix[];
-    /** TCP or UDP port. The protocol's own when absent. */
-    port?: number;
-};
-
-/** One SNMPv3 user. */
-export type SnmpUser = {
-    /** How messages are authenticated. */
-    auth: "sha1" | "sha256";
-    /** The authentication passphrase. */
-    auth_password: Secret;
-    /** How messages are encrypted. */
-    privacy: "aes128" | "des";
-    /** The encryption passphrase. */
-    privacy_password: Secret;
-};
-
-/** How the device is reached and managed. */
-export type Management<I extends string, C extends string> = {
-    /** Sources allowed to every service that does not set its own. */
-    allow?: readonly Prefix[];
-    /** The ports and interfaces the services answer on; every other one answers ping alone. Every one with an address when absent. */
-    interfaces?: readonly I[];
-    /** Secure shell. */
-    ssh?: Service & {
-        /** Also offer legacy ciphers, MACs and key exchanges. Off when absent. */
-        weak_crypto?: boolean;
-        /** Seconds a login may take. */
-        auth_timeout?: number;
-        /** Failed attempts allowed per connection. */
-        auth_retries?: number;
-    };
-    /** Unencrypted remote login. */
-    telnet?: Service;
-    /** Web interface, unencrypted. */
-    http?: Service;
-    /** Web interface over TLS. */
-    https?: Service & {
-        /** One of the device's `certificates`. */
-        certificate?: C;
-    };
-    /** The platform's own API, unencrypted. */
-    api?: Service;
-    /** The platform's own API over TLS. */
-    api_tls?: Service & {
-        /** One of the device's `certificates`. */
-        certificate?: C;
-    };
-    /** File transfer, unencrypted. */
-    ftp?: Service;
-    /** The platform's own management protocol. `interfaces` also allows it at layer 2 on those interfaces. */
-    native?: Service & { interfaces?: readonly I[] };
-    /** Polling by SNMP. */
-    snmp?: Service & {
-        /** Read-only community for version 2c. Version 2c is off when absent. */
-        community?: Secret;
-        /** Version 3 users, keyed by name. */
-        users?: Record<string, SnmpUser>;
-        /** Who to contact about the device. */
-        contact?: string;
-        /** Where the device is. */
-        location?: string;
-    };
-    /** Console login uses this password. The device's users when absent. */
-    console?: { password: Secret };
-    /** Password for privileged mode, on platforms that have one. */
-    privilege_password?: Secret;
-};
-
-/** A DHCP server for one network. */
-export type DhcpServer<I extends string> = {
-    /** Where it answers. */
-    interface: I;
-    /** The network it serves. */
-    network: Prefix;
-    /** Default gateway given to clients. */
-    gateway: IP;
-    /** Resolvers given to clients. */
-    dns?: readonly IP[];
-    /** First and last address given to clients. */
-    pool: readonly [IP, IP];
-    /** Seconds a lease lasts. */
-    lease_time?: number;
-    /** Addresses fixed to a MAC. */
-    reservations?: readonly {
-        address: IP;
-        /** The client's MAC address. */
-        mac: MacAddress;
-        /** Whose address it is. */
-        description?: string;
-    }[];
-};
-
-/** Forward DHCP requests heard on an interface to servers elsewhere. */
-export type DhcpRelay<I extends string> = {
-    /** Where requests are heard. */
-    interface: I;
-    /** Where they are forwarded. */
-    servers: readonly IP[];
-};
-
-/** A certificate the device presents or trusts. */
-export type Certificate = {
-    /** The certificate, PEM. Public, so it is kept in the repository. */
-    certificate: string;
-    /** Its private key: a PEM file through `secretFile`, or PEM base64-encoded as one line through `secret`. A certificate the device only trusts, such as a CA, has none. */
-    private_key?: Secret;
-};
-
-/** Export flow records or packet samples to collectors. */
-export type FlowExport<I extends string> = {
-    /** The record format. */
-    protocol: "sflow" | "netflow-v9" | "ipfix";
-    /** Where records are sent. */
-    collectors: readonly {
-        address: IP;
-        /** UDP port. 6343 for sFlow and 2055 otherwise when absent. */
-        port?: number;
-    }[];
-    /** Sample one packet in this many. Every packet when absent, on a platform that can export every packet. */
-    sampling?: number;
-    /** Where traffic is observed. Every interface when absent. */
-    interfaces?: readonly I[];
-};

package/src/studio/public/app.js

@@ -1,186 +0,0 @@
-// @ts-check
-/// <reference lib="dom" />
-// Studio's page: loads what the server gathered from the config, shows the place the address names, and loads again whenever the server says the config changed.
-
-import { Dom } from "./dom.js";
-import { Graph } from "./graph.js";
-import { Tables } from "./tables.js";
-import { Tools } from "./tools.js";
-import { Compare } from "./compare.js";
-
-/** @typedef {import("../data").StudioData} StudioData */
-
-export class App {
-    static #views = Dom.byId("views");
-    static #search = /** @type {HTMLInputElement} */ (Dom.byId("search"));
-    static #summary = Dom.byId("summary");
-    static #live = Dom.byId("live");
-    static #banner = Dom.byId("banner");
-    static #graphView = Dom.byId("graph-view");
-    static #tablesView = Dom.byId("tables-view");
-    static #tables = Dom.byId("tables");
-    static #problems = Dom.byId("problem-count");
-
-    /** What the server gathered last. @type {StudioData | undefined} */
-    static #studio;
-    /** The address last shown, so drawing the same place again keeps where the reader had scrolled to. */
-    static #shownRoute = "";
-
-    /** @type {ReturnType<typeof setTimeout> | undefined} */
-    static #searching;
-
-    static #showSummary() {
-        const studio = App.#studio;
-        if (!studio) return;
-
-        const { graph } = studio;
-        const devices = studio.devices.length;
-        const errors = graph.findings.filter((finding) => finding.level === "error").length;
-        const warnings = graph.findings.length - errors;
-        const drifted = Object.values(graph.drift).filter((drift) => drift.status === "differs").length;
-
-        const count = Tables.problemCount(studio);
-        App.#problems.textContent = count ? String(count) : "";
-
-        const items = [
-            { value: devices, label: devices === 1 ? "device" : "devices", state: "neutral" },
-            { value: errors, label: errors === 1 ? "error" : "errors", state: errors ? "error" : "quiet" },
-            { value: warnings, label: warnings === 1 ? "warning" : "warnings", state: warnings ? "warning" : "quiet" },
-            { value: drifted, label: "unlike the snapshot", state: drifted ? "changed" : "quiet" },
-        ];
-
-        App.#summary.replaceChildren(
-            ...items.map(({ value, label, state }) => {
-                const item = document.createElement("span");
-                item.className = `summary-item ${state}`;
-                item.append(String(value), ` ${label}`);
-                return item;
-            })
-        );
-    }
-
-    /** Show the place the address names, such as `#graph/bgp` or `#devices/edge-01/ports`. */
-    static #route() {
-        const studio = App.#studio;
-        if (!studio) return;
-
-        const parts = location.hash.slice(1).split("/").map(decodeURIComponent).filter(Boolean);
-        const [view] = parts;
-
-        // An address from before the tables, such as `#bgp`, still opens that layer.
-        const isGraph = !view || view === "graph" || Graph.isLayer(view);
-        const asked = view === "graph" ? parts[1] : view;
-
-        const moved = location.hash !== App.#shownRoute;
-        App.#shownRoute = location.hash;
-
-        for (const button of App.#views.querySelectorAll("button")) {
-            const pressed = isGraph ? button.dataset.view === "graph" : button.dataset.view === view;
-            button.setAttribute("aria-pressed", String(pressed));
-        }
-
-        App.#graphView.hidden = !isGraph;
-        App.#tablesView.hidden = isGraph;
-
-        if (view === "search") {
-            if (App.#search.value !== (parts[1] ?? "")) App.#search.value = parts[1] ?? "";
-        } else if (document.activeElement !== App.#search) {
-            App.#search.value = "";
-        }
-
-        App.#showSummary();
-
-        if (isGraph) {
-            Graph.show(Graph.isLayer(asked) ? asked : Graph.currentLayer());
-            return;
-        }
-
-        const tables = App.#tables;
-        const scrolled = tables.scrollTop;
-        if (view === "tools") Tools.show(parts, tables, studio);
-        else if (view === "compare") Compare.show(parts, tables, studio);
-        else Tables.show(parts, tables, studio);
-        tables.scrollTop = moved ? 0 : scrolled;
-
-        // A new place comes in; the same place drawn again, because the config changed, stays still.
-        if (moved) Dom.enter(tables);
-    }
-
-    /** Load what Studio shows, at the start and whenever the server says the config changed. */
-    static async #load() {
-        /** @type {(StudioData & { error?: undefined }) | { error: string }} */
-        let next;
-
-        try {
-            next = await (await fetch("data", { cache: "no-store" })).json();
-        } catch (error) {
-            next = { error: `could not reach circuit studio: ${error instanceof Error ? error.message : String(error)}` };
-        }
-
-        if (next.error !== undefined) {
-            App.#banner.textContent = `The config could not be read, so what is shown is the last that could:\n${next.error}`;
-            App.#banner.hidden = false;
-            return;
-        }
-
-        App.#banner.hidden = true;
-        App.#studio = next;
-        Graph.set(next.graph);
-        App.#route();
-    }
-
-    /** Wire up the page and load what it shows. */
-    static start() {
-        for (const button of App.#views.querySelectorAll("button")) {
-            const view = button.dataset.view ?? "graph";
-            button.addEventListener("click", () => Dom.go(view === "graph" ? `graph/${Graph.currentLayer()}` : view));
-        }
-
-        window.addEventListener("hashchange", App.#route);
-
-        // A menu closes once one of its items is chosen, or when the reader clicks anywhere else.
-        document.addEventListener("click", (event) => {
-            const target = event.target instanceof Element ? event.target : undefined;
-
-            for (const menu of document.querySelectorAll("details.menu[open]")) {
-                if (!target || !menu.contains(target) || target.closest(".menu-items button")) menu.removeAttribute("open");
-            }
-        });
-
-        App.#search.addEventListener("input", () => {
-            clearTimeout(App.#searching);
-
-            const query = App.#search.value.trim();
-            App.#searching = setTimeout(() => Dom.go(query ? `search/${encodeURIComponent(query)}` : "devices"), 200);
-        });
-
-        const events = new EventSource("events");
-        const live = App.#live;
-
-        events.addEventListener("open", () => {
-            live.textContent = "live";
-            live.title = "Watching the config: a saved change shows here at once.";
-            live.classList.add("on");
-        });
-
-        events.addEventListener("error", () => {
-            live.textContent = "not connected";
-            live.title = "Circuit Studio is not answering. Is circuit studio still running?";
-            live.classList.remove("on");
-        });
-
-        // The config changed: load it again, and the live mark beats once to say so. The page itself changed, while working on Circuit: load the page again.
-        events.addEventListener("message", (event) => {
-            if (event.data === "page") return location.reload();
-
-            live.classList.remove("beat");
-            void live.offsetWidth;
-            live.classList.add("beat");
-            void App.#load();
-        });
-
-        void App.#load();
-    }
-}
-
-App.start();