ankka-console 0.10.0 → 0.12.0

package/dist/context.d.ts

@@ -69,15 +69,113 @@ export interface ActionRefusal {
  */
 export declare function act<T>(ctx: ConsoleContext, intent: string, form: FormData, work: () => Promise<T>): Promise<T | ReturnType<typeof data<ActionRefusal>>>;
 export declare const text: (form: FormData, name: string) => string;
+/** The rail's areas, in the order it shows them. */
+export declare const areas: readonly ["organizations", "projects", "services", "members", "tokens", "machines"];
+export type Area = (typeof areas)[number];
+export interface Crumb {
+    label: string;
+    to?: string;
+}
+/** One entry of the shell's listing: a project's service, or an organization's project. */
+export type ListingItem = {
+    kind: "service";
+    key: string;
+    name: string;
+    to: string;
+    lifecycle: string;
+    confirmed: boolean;
+    ready: number;
+    desired: number;
+} | {
+    kind: "project";
+    key: string;
+    name: string;
+    to: string;
+    services: number;
+};
+/**
+ * What the shell around a page shows: the area the rail marks, where the bar says the member is,
+ * the page's primary operation, the organization and project the rail's areas open, and the listing
+ * beside the page. A page with no listing (the front page) leaves it out.
+ */
+export interface ShellData {
+    area?: Area;
+    crumbs: Crumb[];
+    primary?: {
+        label: string;
+        to: string;
+        operation?: Operation;
+    };
+    /** `manages`: the member may manage its members and deploy tokens (an owner, or an administrator). */
+    organization?: {
+        id: string;
+        name: string;
+        manages: boolean;
+    };
+    project?: {
+        id: string;
+        name: string;
+    };
+    listing?: {
+        title: string;
+        label: string;
+        items: ListingItem[];
+        current?: string;
+    };
+}
 /** What every package page's loader data carries for the pages and the host's layout. */
 export interface ConsolePageData {
     mount: string;
     principal: Principal | null;
     hidden: Operation[];
+    shell?: ShellData;
 }
+/** The listing of a project's services, in name order, marking the one being read. */
+export declare function servicesListing(project: {
+    id: string;
+    name: string;
+}, services: {
+    name: string;
+    lifecycle: string;
+    confirmed: boolean;
+    readyInstances: number;
+    desiredInstances: number;
+}[], current?: string): NonNullable<ShellData["listing"]>;
+/** The listing of an organization's projects, in name order, marking the one being read. */
+export declare function projectsListing(organization: {
+    id: string;
+    name: string;
+}, projects: {
+    id: string;
+    name: string;
+    organizationId: string;
+    services: number;
+}[], current?: string): NonNullable<ShellData["listing"]>;
 /**
  * The page data every package page returns. It is also what makes a page require a session: nobody
  * signed in is `SignInRequired`, which `guard` turns into the trip to sign in, even for a page whose
  * loader asks the control plane nothing.
  */
 export declare function pageData(ctx: ConsoleContext): Promise<ConsolePageData>;
+/** A page's data with the shell around it; loaders call it once everything the shell names is read. */
+export declare function withShell(page: ConsolePageData, shell: ShellData): ConsolePageData;
+type OrganizationLike = {
+    id: string;
+    name: string;
+    role?: "owner" | "member" | null;
+};
+/** The shell of a page that belongs to an organization: its projects beside the page. */
+export declare function organizationShell(page: ConsolePageData, o: OrganizationLike, projects: {
+    id: string;
+    name: string;
+    organizationId: string;
+    services: number;
+}[], area: Area, tail: Crumb[], primary?: ShellData["primary"]): ConsolePageData;
+/** The shell of a page that belongs to a project: its services beside the page. */
+export declare function projectShell(page: ConsolePageData, o: OrganizationLike, p: {
+    id: string;
+    name: string;
+}, services: Parameters<typeof servicesListing>[1], tail: Crumb[], primary?: ShellData["primary"], current?: string): ConsolePageData;
+/** A service's pages put applying a new descriptor first. */
+export declare function applyPrimary(projectId: string, name: string): NonNullable<ShellData["primary"]>;
+export {};

package/dist/context.js

@@ -143,6 +143,40 @@ export const text = (form, name) => {
     const v = form.get(name);
     return typeof v === "string" ? v.trim() : "";
 };
+/** The rail's areas, in the order it shows them. */
+export const areas = ["organizations", "projects", "services", "members", "tokens", "machines"];
+const byName = (a, b) => a.name.localeCompare(b.name);
+/** The listing of a project's services, in name order, marking the one being read. */
+export function servicesListing(project, services, current) {
+    const base = `projects/${encodeURIComponent(project.id)}/services/`;
+    return {
+        title: project.name,
+        label: `Services in ${project.name}`,
+        current,
+        items: [...services].sort(byName).map((s) => ({
+            kind: "service",
+            key: s.name,
+            name: s.name,
+            to: base + encodeURIComponent(s.name),
+            lifecycle: s.lifecycle,
+            confirmed: s.confirmed,
+            ready: s.readyInstances,
+            desired: s.desiredInstances,
+        })),
+    };
+}
+/** The listing of an organization's projects, in name order, marking the one being read. */
+export function projectsListing(organization, projects, current) {
+    return {
+        title: organization.name,
+        label: `Projects in ${organization.name}`,
+        current,
+        items: projects
+            .filter((p) => p.organizationId === organization.id)
+            .sort(byName)
+            .map((p) => ({ kind: "project", key: p.id, name: p.name, to: `projects/${encodeURIComponent(p.id)}`, services: p.services })),
+    };
+}
 /**
  * The page data every package page returns. It is also what makes a page require a session: nobody
  * signed in is `SignInRequired`, which `guard` turns into the trip to sign in, even for a page whose
@@ -154,3 +188,42 @@ export async function pageData(ctx) {
         throw new SignInRequired();
     return { mount: ctx.mount, principal, hidden: ctx.extensions.hidden ?? [] };
 }
+/** A page's data with the shell around it; loaders call it once everything the shell names is read. */
+export function withShell(page, shell) {
+    return { ...page, shell };
+}
+/** The shell of a page that belongs to an organization: its projects beside the page. */
+export function organizationShell(page, o, projects, area, tail, primary) {
+    const orgPath = `organizations/${encodeURIComponent(o.id)}`;
+    return withShell(page, {
+        area,
+        crumbs: [{ label: "Organizations", to: "" }, { label: o.name, to: orgPath }, ...tail],
+        primary,
+        organization: { id: o.id, name: o.name, manages: o.role === "owner" || (page.principal?.platformAdmin ?? false) },
+        listing: projectsListing(o, projects),
+    });
+}
+/** The shell of a page that belongs to a project: its services beside the page. */
+export function projectShell(page, o, p, services, tail, primary, current) {
+    return withShell(page, {
+        area: current === undefined ? "projects" : "services",
+        crumbs: [
+            { label: "Organizations", to: "" },
+            { label: o.name, to: `organizations/${encodeURIComponent(o.id)}` },
+            { label: p.name, to: `projects/${encodeURIComponent(p.id)}` },
+            ...tail,
+        ],
+        primary,
+        organization: { id: o.id, name: o.name, manages: o.role === "owner" || (page.principal?.platformAdmin ?? false) },
+        project: { id: p.id, name: p.name },
+        listing: servicesListing(p, services, current),
+    });
+}
+/** A service's pages put applying a new descriptor first. */
+export function applyPrimary(projectId, name) {
+    return {
+        label: "Apply a new descriptor",
+        to: `projects/${encodeURIComponent(projectId)}/services/apply?name=${encodeURIComponent(name)}`,
+        operation: "service.apply",
+    };
+}

package/dist/extensions/render.d.ts

@@ -14,6 +14,8 @@ export declare function Panels<K extends PanelKind>({ kind, entity, loaded }: {
     entity: PanelEntities[K];
     loaded?: LoadedPanels;
 }): import("react").JSX.Element | null;
+/** Whether the host added anything beside an operation, so a page knows to make room for it. */
+export declare function useHostActions(operation: Operation): boolean;
 export declare function HostActions({ operation, entity }: {
     operation: Operation;
     entity?: unknown;

package/dist/extensions/render.js

@@ -42,6 +42,11 @@ export function Panels({ kind, entity, loaded }) {
             return (_jsxs("section", { className: "ac-panel", "aria-labelledby": `panel-${p.id}`, "data-panel": p.id, children: [_jsx("h2", { id: `panel-${p.id}`, children: p.title }), result && !result.ok ? (_jsxs("p", { className: "ac-panel-failed", children: [p.title, " could not be loaded: ", result.error] })) : (_jsx(PanelBoundary, { title: p.title, children: _jsx(p.Component, { entity: entity, data: result?.ok ? result.data : undefined }) }))] }, p.id));
         }) }));
 }
+/** Whether the host added anything beside an operation, so a page knows to make room for it. */
+export function useHostActions(operation) {
+    const { extensions } = useConsole();
+    return (extensions.actions?.[operation]?.length ?? 0) > 0;
+}
 export function HostActions({ operation, entity }) {
     const { extensions } = useConsole();
     const actions = extensions.actions?.[operation] ?? [];

package/dist/extensions/types.d.ts

@@ -1,7 +1,7 @@
 import type { ComponentType } from "react";
 import type { OrganizationSummary, ProjectDetail, ServiceStatus } from "../client/schemas.ts";
 /** Every operation the console offers, by the name a host uses to add beside it or hide it. */
-export declare const operations: readonly ["organization.create", "organization.rename", "organization.delete", "organization.disable", "organization.enable", "organization.quota.set", "organization.quota.clear", "member.invite", "member.role", "member.remove", "invitation.withdraw", "member.repair", "token.create", "token.revoke", "project.create", "project.rename", "project.delete", "registry.set", "registry.clear", "service.apply", "service.pause", "service.resume", "service.restart", "service.expose", "service.unexpose", "service.delete", "service.logs"];
+export declare const operations: readonly ["organization.create", "organization.rename", "organization.delete", "organization.disable", "organization.enable", "organization.quota.set", "organization.quota.clear", "member.invite", "member.role", "member.remove", "invitation.withdraw", "member.repair", "token.create", "token.revoke", "machine.register", "machine.delete", "machine.byte-rates", "project.create", "project.rename", "project.delete", "registry.set", "registry.clear", "project-secret.set", "project-secret.unset", "project-topic.set", "project-topic.unset", "project-broker.set", "project-broker.unset", "project.restore", "project.rehearse", "project.database", "project.backup-credential", "installation.release", "service.switch", "grant.make", "grant.end", "grant.answer", "grant.relinquish", "service.apply", "service.pause", "service.resume", "service.restart", "service.rollback", "service.expose", "service.unexpose", "service-hostname.add", "service-hostname.remove", "service.delete", "service.logs", "service.storage-credential", "service.storage-move", "service.storage-settings", "project-location.set", "project-location.clear"];
 export type Operation = (typeof operations)[number];
 export interface PanelEntities {
     organization: OrganizationSummary;

package/dist/extensions/types.js

@@ -14,17 +14,46 @@ export const operations = [
     "member.repair",
     "token.create",
     "token.revoke",
+    "machine.register",
+    "machine.delete",
+    "machine.byte-rates",
     "project.create",
     "project.rename",
     "project.delete",
     "registry.set",
     "registry.clear",
+    "project-secret.set",
+    "project-secret.unset",
+    "project-topic.set",
+    "project-topic.unset",
+    "project-broker.set",
+    "project-broker.unset",
+    "project.restore",
+    "project.rehearse",
+    "project.database",
+    "project.backup-credential",
+    "installation.release",
+    "service.switch",
+    "grant.make",
+    "grant.end",
+    // An owner of the grantee's side accepting or declining a pending grant, and giving one up: the
+    // organization page's "Offered grants" card.
+    "grant.answer",
+    "grant.relinquish",
     "service.apply",
     "service.pause",
     "service.resume",
     "service.restart",
+    "service.rollback",
     "service.expose",
     "service.unexpose",
+    "service-hostname.add",
+    "service-hostname.remove",
     "service.delete",
     "service.logs",
+    "service.storage-credential",
+    "service.storage-move",
+    "service.storage-settings",
+    "project-location.set",
+    "project-location.clear",
 ];

package/dist/index.d.ts

@@ -1,5 +1,12 @@
-export { ConsoleProvider, useConsole, ConsoleLink, ConsoleForm } from "./ui/console.tsx";
+export { ConsoleProvider, useConsole, ConsoleLink, ConsoleForm, Breadcrumbs, Field, Submit, OperationForm } from "./ui/console.tsx";
 export type { UseConsole } from "./ui/console.tsx";
-export type { Principal } from "./context.ts";
+export { Shell, Backdrop, Bar, Rail, Listing, Inspector, Page, SectionTitle, SegmentedLinks, ServiceSections } from "./ui/shell.tsx";
+export type { SegmentLink, ServiceSection } from "./ui/shell.tsx";
+export { Shape } from "./ui/shape.tsx";
+export { Lifecycle } from "./ui/status.tsx";
+export { button } from "./ui/primitives/button.ts";
+export { Switch } from "./ui/primitives/switch.tsx";
+export { Select } from "./ui/primitives/select.tsx";
+export type { Area, Crumb, ListingItem, Principal, ShellData } from "./context.ts";
 export { operations } from "./extensions/types.ts";
 export type { Action, ConsoleExtensions, Operation, Panel, PanelKind, PanelLoadContext } from "./extensions/types.ts";

package/dist/index.js

@@ -1,5 +1,11 @@
 // The browser-safe entry point: what a host's layout and its own components use. Everything that
 // runs only on the server — the routes table, the middleware, sessions, the server itself — is
 // `ankka-console/server`, so a host's browser bundle never resolves a Node module.
-export { ConsoleProvider, useConsole, ConsoleLink, ConsoleForm } from "./ui/console.js";
+export { ConsoleProvider, useConsole, ConsoleLink, ConsoleForm, Breadcrumbs, Field, Submit, OperationForm } from "./ui/console.js";
+export { Shell, Backdrop, Bar, Rail, Listing, Inspector, Page, SectionTitle, SegmentedLinks, ServiceSections } from "./ui/shell.js";
+export { Shape } from "./ui/shape.js";
+export { Lifecycle } from "./ui/status.js";
+export { button } from "./ui/primitives/button.js";
+export { Switch } from "./ui/primitives/switch.js";
+export { Select } from "./ui/primitives/select.js";
 export { operations } from "./extensions/types.js";

package/dist/routes/auth.sign-out.js

@@ -5,14 +5,19 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
  * than passing silently through single sign-on. Only a POST signs anyone out.
  */
 import { redirect, useLoaderData } from "react-router";
-import { pageData, useConsoleContext } from "../context.js";
+import { pageData, useConsoleContext, withShell } from "../context.js";
 import { ConsoleErrorBoundary } from "../ui/errors.js";
 import { ConsoleForm, ConsoleLink, Submit } from "../ui/console.js";
+import { Page } from "../ui/shell.js";
+import { button } from "../ui/primitives/button.js";
 export const meta = () => [{ title: "Sign out · ankka" }];
 export async function loader({ request, context }) {
     const ctx = useConsoleContext(context);
     const signedIn = (await ctx.runtime.store.read(request)) !== null;
-    return { console: await pageData(ctx).catch(() => ({ mount: ctx.mount, principal: null, hidden: [] })), signedIn };
+    const page = await pageData(ctx)
+        .then((p) => withShell(p, { area: "organizations", crumbs: [{ label: "Organizations", to: "" }, { label: "Sign out" }] }))
+        .catch(() => ({ mount: ctx.mount, principal: null, hidden: [] }));
+    return { console: page, signedIn };
 }
 export async function action({ request, context }) {
     const ctx = useConsoleContext(context);
@@ -32,6 +37,6 @@ export async function action({ request, context }) {
 }
 export default function SignOut() {
     const { signedIn } = useLoaderData();
-    return (_jsx("section", { className: "ac-page", children: signedIn ? (_jsxs(_Fragment, { children: [_jsx("h1", { children: "Sign out" }), _jsx(ConsoleForm, { to: "auth/sign-out", children: _jsx(Submit, { children: "Sign out" }) })] })) : (_jsxs(_Fragment, { children: [_jsx("h1", { children: "You are signed out" }), _jsx("p", { children: "Your session in this console and in the identity provider has ended." }), _jsx("p", { children: _jsx(ConsoleLink, { to: "auth/sign-in", className: "ac-button", children: "Sign in" }) })] })) }));
+    return (_jsx(Page, { children: signedIn ? (_jsxs(_Fragment, { children: [_jsx("h1", { children: "Sign out" }), _jsxs(ConsoleForm, { to: "auth/sign-out", className: "ac-card", children: [_jsx("p", { children: "Sign out of this console and of the identity provider." }), _jsx("div", { children: _jsx(Submit, { primary: true, children: "Sign out" }) })] })] })) : (_jsxs(_Fragment, { children: [_jsx("h1", { children: "You are signed out" }), _jsx("p", { children: "Your session in this console and in the identity provider has ended." }), _jsx("p", { children: _jsx(ConsoleLink, { to: "auth/sign-in", className: button({ variant: "primary" }), children: "Sign in" }) })] })) }));
 }
 export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes/front.d.ts

@@ -1,8 +1,9 @@
 /**
  * The front page: who you are, as the control plane sees you, and the organizations you can see —
- * yours with your role in each, or every one of them for a platform administrator.
+ * yours with your role in each, or every one of them for a platform administrator — and what the
+ * installation is: its version, and its cloud when it names one (feature 044).
  */
-import { type LoaderFunctionArgs, type MetaFunction } from "react-router";
+import { type ActionFunctionArgs, type LoaderFunctionArgs, type MetaFunction } from "react-router";
 import { ConsoleErrorBoundary } from "../ui/errors.tsx";
 export declare const meta: MetaFunction;
 export declare function loader({ context }: LoaderFunctionArgs): Promise<{
@@ -36,6 +37,65 @@ export declare function loader({ context }: LoaderFunctionArgs): Promise<{
             instances: number;
         };
     }[];
+    installation: {
+        platformVersion: string;
+        cloud: {
+            provider: string;
+            account: string;
+            location: string;
+            kmsKey: string | undefined;
+        } | undefined;
+        backups: {
+            backupTarget: string;
+            retentionDays: number;
+            copyRequired: boolean;
+            sharesFailureDomain: boolean;
+            encryption: string;
+            controlPlane: {
+                line: string;
+                cluster: string;
+                phase: string;
+                lastBaseBackup: string | undefined;
+                firstRestorable: string | undefined;
+                lastRestorable: string | undefined;
+                archiveLagSeconds: number | undefined;
+                failing: string | undefined;
+                copiedAt: string | undefined;
+            } | undefined;
+            notBackedUp: string | undefined;
+            secondaryStore: {
+                lastCompleted: string | undefined;
+                lastFailed: string | undefined;
+                failure: string | undefined;
+                buckets: number | undefined;
+                deletedObjects: number | undefined;
+            } | undefined;
+        } | undefined;
+        secrets: {
+            backend: string;
+            recordRetention: string;
+            auditLog: string;
+        } | undefined;
+    };
+    hold: {
+        held: boolean;
+        restoredAt: string | undefined;
+        targetTime: string | undefined;
+        releasedAt: string | undefined;
+        releasedBy: string | undefined;
+        services: {
+            project: string;
+            service: string;
+            recordedGeneration: number | undefined;
+            clusterGeneration: number | undefined;
+            recordedImage: string | undefined;
+            clusterImage: string | undefined;
+        }[];
+        topics: string[];
+        unknownProjects: string[];
+        reconciled: string[];
+    } | undefined;
 }>;
+export declare function action({ request, context }: ActionFunctionArgs): Promise<import("react-router").UNSAFE_DataWithResponseInit<import("../context.ts").ActionRefusal> | Response>;
 export default function Front(): import("react").JSX.Element;
 export declare const ErrorBoundary: typeof ConsoleErrorBoundary;

package/dist/routes/front.js

@@ -1,25 +1,60 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * The front page: who you are, as the control plane sees you, and the organizations you can see —
- * yours with your role in each, or every one of them for a platform administrator.
+ * yours with your role in each, or every one of them for a platform administrator — and what the
+ * installation is: its version, and its cloud when it names one (feature 044).
  */
-import { useLoaderData } from "react-router";
-import { guard, pageData, useConsoleContext } from "../context.js";
+import { redirect, useLoaderData } from "react-router";
+import { act, guard, pageData, text, useConsoleContext, withShell } from "../context.js";
+import { ConsoleForm, Submit, useConsole, when } from "../ui/console.js";
+import { Refused } from "../ui/refused.js";
 import { ConsoleErrorBoundary } from "../ui/errors.js";
-import { ConsoleLink, useConsole } from "../ui/console.js";
-import { HostActions } from "../extensions/render.js";
+import { ConsoleLink } from "../ui/console.js";
+import { Page } from "../ui/shell.js";
+import { HostActions, useHostActions } from "../extensions/render.js";
 export const meta = () => [{ title: "Organizations · ankka" }];
 export async function loader({ context }) {
     const ctx = useConsoleContext(context);
     return guard(ctx, async () => {
-        const [whoami, organizations] = await Promise.all([ctx.client.whoami(), ctx.client.listOrganizations()]);
-        return { console: await pageData(ctx), whoami, organizations };
+        const [whoami, organizations, installation, hold] = await Promise.all([
+            ctx.client.whoami(),
+            ctx.client.listOrganizations(),
+            ctx.client.installation(),
+            // Whether the control plane is held (feature 041); one that cannot say leaves it out.
+            ctx.client.restoreHold().catch(() => undefined),
+        ]);
+        const shell = {
+            area: "organizations",
+            crumbs: [{ label: "Organizations" }],
+            primary: { label: "Create an organization", to: "organizations/new", operation: "organization.create" },
+        };
+        return { console: withShell(await pageData(ctx), shell), whoami, organizations, installation, hold };
+    });
+}
+export async function action({ request, context }) {
+    const ctx = useConsoleContext(context);
+    const form = await request.formData();
+    const intent = text(form, "intent");
+    return act(ctx, intent, form, async () => {
+        if (intent !== "release")
+            throw new Response(`unknown operation '${intent}'`, { status: 400 });
+        await ctx.client.releaseRestoreHold();
+        return redirect(ctx.href(""));
     });
 }
 const roleWords = { owner: "Owner", member: "Member" };
 export default function Front() {
-    const { whoami, organizations } = useLoaderData();
+    const { whoami, organizations, installation, hold } = useLoaderData();
+    const cloud = installation.cloud ?? null;
+    const backups = installation.backups ?? null;
+    const hostActions = useHostActions("organization.create");
     const { shows } = useConsole();
-    return (_jsxs("section", { className: "ac-page", children: [_jsx("h1", { children: "Organizations" }), _jsxs("p", { className: "ac-lede", children: ["Signed in as ", _jsx("strong", { children: whoami.name ?? whoami.email ?? whoami.subject }), whoami.email && whoami.name ? ` (${whoami.email})` : null, whoami.platformAdmin ? ", a platform administrator: you see every organization in this installation." : "."] }), organizations.length === 0 ? (_jsxs("p", { className: "ac-empty", children: ["You are not a member of any organization yet. Create one, or ask an owner to invite ", whoami.email ?? "you", "."] })) : (_jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", children: [_jsx("caption", { className: "ac-visually-hidden", children: "Organizations you can see" }), _jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Name" }), _jsx("th", { scope: "col", children: "Id" }), _jsx("th", { scope: "col", children: "Your role" }), _jsx("th", { scope: "col", className: "ac-num", children: "Projects" }), _jsx("th", { scope: "col", children: "State" })] }) }), _jsx("tbody", { children: organizations.map((o) => (_jsxs("tr", { children: [_jsx("td", { children: _jsx(ConsoleLink, { to: `organizations/${encodeURIComponent(o.id)}`, children: o.name }) }), _jsx("td", { children: o.id }), _jsx("td", { children: o.role ? roleWords[o.role] : "Administrator (not a member)" }), _jsx("td", { className: "ac-num", children: o.projects }), _jsx("td", { children: o.disabled ? "Disabled" : "Active" })] }, o.id))) })] }) })), _jsxs("div", { className: "ac-actions", children: [shows("organization.create") ? (_jsx(ConsoleLink, { to: "organizations/new", className: "ac-button", children: "Create an organization" })) : null, _jsx(HostActions, { operation: "organization.create" })] })] }));
+    return (_jsxs(Page, { inspector: hostActions ? (_jsx("div", { className: "ac-ops", children: _jsx(HostActions, { operation: "organization.create" }) })) : null, children: [_jsx("h1", { children: "Organizations" }), _jsxs("p", { className: "ac-lede", children: ["Signed in as ", _jsx("strong", { children: whoami.name ?? whoami.email ?? whoami.subject }), whoami.email && whoami.name ? ` (${whoami.email})` : null, whoami.platformAdmin ? ", a platform administrator: you see every organization in this installation." : "."] }), hold?.held ? (_jsxs("section", { className: "ac-card", "aria-labelledby": "hold-title", "data-held": "yes", children: [_jsx("h2", { id: "hold-title", children: "The control plane is held" }), _jsxs("p", { children: ["Its database was restored to ", hold.targetTime ? when(hold.targetTime) : "an earlier moment", ", and it changes nothing in the cluster until a platform administrator releases it."] }), hold.services.length > 0 ? (_jsx("ul", { className: "ac-topics", "aria-label": "Services that differ", children: hold.services.map((d) => (_jsxs("li", { "data-differs": `${d.project}/${d.service}`, children: [d.project, "/", d.service, ": recorded ", d.recordedImage ?? "nothing", ", the cluster runs ", d.clusterImage ?? "nothing"] }, `${d.project}/${d.service}`))) })) : null, hold.unknownProjects.length > 0 ? _jsxs("p", { children: ["Projects the database does not know: ", hold.unknownProjects.join(", "), "."] }) : null, whoami.platformAdmin && shows("installation.release") ? (_jsx(ConsoleForm, { intent: "release", children: _jsx(Submit, { intent: "release", children: "Release the control plane" }) })) : null, _jsx(Refused, { intent: "release" })] })) : hold?.releasedAt ? (_jsxs("p", { "data-held": "released", children: ["The control plane was released after its database's restore, ", when(hold.releasedAt), hold.releasedBy ? ` by ${hold.releasedBy}` : "", "."] })) : null, backups ? (_jsx("p", { className: "ac-hint", "data-backups": backups.backupTarget, children: backups.notBackedUp ??
+                    `Backups are kept at least ${backups.retentionDays} days${backups.sharesFailureDomain ? ", in the cluster they back up" : ", with a copy outside the cluster"}.` })) : null, organizations.length === 0 ? (_jsxs("p", { className: "ac-empty", children: ["You are not a member of any organization yet. Create one, or ask an owner to invite ", whoami.email ?? "you", "."] })) : (_jsx("div", { className: "ac-card ac-table-wrap", children: _jsxs("table", { className: "ac-table", children: [_jsx("caption", { className: "ac-visually-hidden", children: "Organizations you can see" }), _jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Name" }), _jsx("th", { scope: "col", children: "Id" }), _jsx("th", { scope: "col", children: "Your role" }), _jsx("th", { scope: "col", className: "ac-num", children: "Projects" }), _jsx("th", { scope: "col", children: "State" })] }) }), _jsx("tbody", { children: organizations.map((o) => (_jsxs("tr", { children: [_jsx("td", { children: _jsx(ConsoleLink, { to: `organizations/${encodeURIComponent(o.id)}`, children: o.name }) }), _jsx("td", { children: o.id }), _jsx("td", { children: o.role ? roleWords[o.role] : "Administrator (not a member)" }), _jsx("td", { className: "ac-num", children: o.projects }), _jsx("td", { children: o.disabled ? "Disabled" : "Active" })] }, o.id))) })] }) })), _jsxs("section", { className: "ac-card", "aria-labelledby": "installation", children: [_jsx("h2", { id: "installation", children: "This installation" }), _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Platform version" }), _jsx("dd", { children: installation.platformVersion }), _jsx("dt", { children: "Cloud" }), _jsx("dd", { children: cloud ? `${cloud.provider}, account ${cloud.account}` : "None: everything is served by the installation itself" }), cloud ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Location" }), _jsx("dd", { children: cloud.location })] })) : null, cloud?.kmsKey ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Wrapping key" }), _jsx("dd", { children: cloud.kmsKey })] })) : null, installation.secrets ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Secrets kept in" }), _jsx("dd", { children: secretBackendWords[installation.secrets.backend] ?? installation.secrets.backend }), _jsx("dt", { children: "Record of reads kept for" }), _jsx("dd", { children: installation.secrets.recordRetention }), _jsx("dt", { children: "Access log" }), _jsx("dd", { children: installation.secrets.auditLog })] })) : null] })] })] }));
 }
+/** The installation's secret store (feature 038), in words; an unknown backend is shown as it is named. */
+const secretBackendWords = {
+    postgres: "Postgres: each service's own database",
+    "secret-manager": "Google Secret Manager",
+};
 export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes/logs.d.ts

@@ -20,6 +20,97 @@ export declare function loader({ request, params, context }: LoaderFunctionArgs)
         paused: boolean;
         hosting: string;
         protocol: string | undefined;
+        mounts: {
+            path: string;
+            service: string;
+            state: string;
+        }[];
+        callers: string[];
+        processPort: number | undefined;
+        broker: string | undefined;
+        undeclaredTopics: string[] | undefined;
+        secretStore: {
+            backend: string;
+            keyRead: boolean;
+            move: {
+                phase: string;
+                outcome: string;
+                names: {
+                    name: string;
+                    state: string;
+                }[];
+                detail: string | undefined;
+            } | undefined;
+        } | undefined;
+        topicChecks: {
+            topic: string | undefined;
+            service: string;
+            component: string;
+            direction: string;
+            stated: string | undefined;
+            state: string;
+        }[] | undefined;
+        topicSources: {
+            kind: string;
+            component: string;
+            topic: string;
+            group: string;
+            start: string;
+            version: number;
+            recordedVersion: number | undefined;
+            behind: boolean;
+            broker: string | undefined;
+            contract: string | undefined;
+            lag: number | undefined;
+            failing: string | undefined;
+            gap: {
+                partitions: {
+                    partition: number;
+                    beginning: number;
+                    earliestRetained: string | undefined;
+                }[];
+                compacted: boolean;
+                gone: boolean;
+                readAt: string | undefined;
+            } | undefined;
+        }[] | undefined;
+        warnings: {
+            kind: string;
+            component: string;
+            topic: string;
+            message: string;
+        }[] | undefined;
+        objectStorage: string | undefined;
+        bucket: string | undefined;
+        bucketAddress: string | undefined;
+        objectStore: string | undefined;
+        bucketLocation: string | undefined;
+        softDeleteDays: number | undefined;
+        storageMove: string | undefined;
+        databaseCluster: string | undefined;
+        grants: string | undefined;
+        crossProjectTopics: {
+            project: string;
+            topic: string;
+            right: string;
+            status: string;
+        }[] | undefined;
+        customHostnames: {
+            hostname: string;
+            state: string;
+            reason: string | undefined;
+            record: {
+                name: string;
+                kind: string;
+                value: string;
+            } | undefined;
+            note: string | undefined;
+        }[];
+        proofRecord: {
+            name: string;
+            kind: string;
+            value: string;
+        } | undefined;
     };
     project: {
         id: string;
@@ -58,6 +149,7 @@ export declare function loader({ request, params, context }: LoaderFunctionArgs)
     query: {
         instance: string | undefined;
         previous: boolean;
+        platform: boolean;
         tail: number;
         since: number | undefined;
     };