ankka-console 0.10.0

package/dist/routes/project.js

@@ -0,0 +1,61 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * A project: its services, kept current while the page is open, and its registry credential.
+ */
+import { redirect, useLoaderData } from "react-router";
+import { act, guard, pageData, text, useConsoleContext } from "../context.js";
+import { ConsoleErrorBoundary } from "../ui/errors.js";
+import { Breadcrumbs, ConsoleForm, ConsoleLink, Field, Submit, useConsole, when } from "../ui/console.js";
+import { Refused, useRefusal } from "../ui/refused.js";
+import { Lifecycle } from "../ui/status.js";
+import { useProjectStream } from "../ui/use-stream.js";
+import { HostActions, loadPanels, Panels } from "../extensions/render.js";
+export const meta = ({ loaderData }) => [{ title: `${loaderData?.project.name ?? "Project"} · ankka` }];
+export async function loader({ params, context }) {
+    const ctx = useConsoleContext(context);
+    const id = params.projectId;
+    return guard(ctx, async () => {
+        const [project, services, page] = await Promise.all([ctx.client.getProject(id), ctx.client.listServices(id), pageData(ctx)]);
+        const organization = await ctx.client.getOrganization(project.organizationId);
+        return { console: page, project, organization, services, panels: await loadPanels(ctx, "project", project) };
+    });
+}
+export async function action({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const id = params.projectId;
+    const form = await request.formData();
+    const intent = text(form, "intent");
+    const self = ctx.href(`projects/${encodeURIComponent(id)}`);
+    return act(ctx, intent, form, async () => {
+        switch (intent) {
+            case "rename":
+                await ctx.client.renameProject(id, text(form, "name"));
+                return redirect(self);
+            case "delete": {
+                const project = await ctx.client.getProject(id);
+                await ctx.client.deleteProject(id);
+                return redirect(ctx.href(`organizations/${encodeURIComponent(project.organizationId)}`));
+            }
+            case "registry-set":
+                // The password crosses once, to the control plane, and is never shown again by anything.
+                await ctx.client.setRegistry(id, { server: text(form, "server"), username: text(form, "username"), password: String(form.get("password") ?? "") });
+                return redirect(self);
+            case "registry-clear":
+                await ctx.client.clearRegistry(id);
+                return redirect(self);
+            default:
+                throw new Response(`unknown operation '${intent}'`, { status: 400 });
+        }
+    });
+}
+export default function Project() {
+    const { project: p, organization: o, services: initial, panels } = useLoaderData();
+    const { services, state } = useProjectStream(p.id, initial);
+    const { shows } = useConsole();
+    const renameRefusal = useRefusal("rename");
+    const deleteRefusal = useRefusal("delete");
+    const registryRefusal = useRefusal("registry-set");
+    const path = `projects/${encodeURIComponent(p.id)}`;
+    return (_jsxs("section", { className: "ac-page", children: [_jsx(Breadcrumbs, { trail: [{ label: "Organizations", to: "" }, { label: o.name, to: `organizations/${encodeURIComponent(o.id)}` }, { label: p.name }] }), _jsx("h1", { children: p.name }), _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Id" }), _jsx("dd", { children: p.id }), _jsx("dt", { children: "Organization" }), _jsx("dd", { children: o.name })] }), _jsx("h2", { id: "services", children: "Services" }), state === "live" ? _jsx("p", { className: "ac-live", children: "Updating as the platform reports" }) : null, services.length === 0 ? (_jsx("p", { className: "ac-empty", children: "No services yet. Apply a descriptor to deploy one." })) : (_jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", "aria-describedby": "services", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Service" }), _jsx("th", { scope: "col", children: "State" }), _jsx("th", { scope: "col", className: "ac-num", children: "Instances" }), _jsx("th", { scope: "col", children: "Image" }), _jsx("th", { scope: "col", className: "ac-num", children: "Generation" }), _jsx("th", { scope: "col", children: "Address" })] }) }), _jsx("tbody", { children: services.map((s) => (_jsxs("tr", { "data-service": s.name, children: [_jsx("td", { children: _jsx(ConsoleLink, { to: `${path}/services/${encodeURIComponent(s.name)}`, children: s.name }) }), _jsx("td", { children: _jsx(Lifecycle, { lifecycle: s.lifecycle, confirmed: s.confirmed }) }), _jsxs("td", { className: "ac-num", children: [s.readyInstances, " of ", s.desiredInstances] }), _jsx("td", { children: s.image }), _jsx("td", { className: "ac-num", children: s.generation }), _jsx("td", { children: s.hostname ? _jsx("a", { href: s.hostname, children: s.hostname.replace(/^https:\/\//, "") }) : s.exposed ? "Exposed, no address yet" : "Not exposed" })] }, s.name))) })] }) })), _jsxs("div", { className: "ac-actions", children: [shows("service.apply") ? (_jsx(ConsoleLink, { to: `${path}/services/apply`, className: "ac-button", children: "Apply a descriptor" })) : null, _jsx(HostActions, { operation: "service.apply", entity: p })] }), _jsx("h2", { children: "Registry" }), p.registry ? (_jsxs("p", { children: ["Private images are pulled from ", _jsx("strong", { children: p.registry.server }), " as ", _jsx("strong", { children: p.registry.username }), ", set ", when(p.registry.setAt), p.registry.setBy ? ` by ${p.registry.setBy}` : "", "."] })) : (_jsx("p", { children: "Services in this project pull only public images. Set a credential to pull private ones." })), shows("registry.set") ? (_jsxs("details", { className: "ac-more", open: registryRefusal !== undefined || undefined, children: [_jsx("summary", { children: p.registry ? "Replace the registry credential" : "Set a registry credential" }), _jsxs(ConsoleForm, { intent: "registry-set", className: "ac-form", children: [_jsx(Field, { label: "Registry server", name: "server", required: true, placeholder: "ghcr.io", defaultValue: registryRefusal?.values.server ?? p.registry?.server }), _jsx(Field, { label: "Username", name: "username", required: true, autoComplete: "off", defaultValue: registryRefusal?.values.username ?? p.registry?.username }), _jsx(Field, { label: "Password or token", name: "password", type: "password", required: true, autoComplete: "new-password", hint: "Sent once to the platform, which keeps it only in the cluster. It is never shown again." }), _jsx(Refused, { intent: "registry-set" }), _jsx("div", { children: _jsx(Submit, { intent: "registry-set", children: "Save credential" }) })] })] })) : null, p.registry && shows("registry.clear") ? (_jsxs(ConsoleForm, { intent: "registry-clear", children: [_jsx(Submit, { intent: "registry-clear", children: "Clear credential" }), _jsx(Refused, { intent: "registry-clear" })] })) : null, _jsx(Panels, { kind: "project", entity: p, loaded: panels }), shows("project.rename") || shows("project.delete") ? (_jsxs("details", { className: "ac-more", open: renameRefusal !== undefined || deleteRefusal !== undefined || undefined, children: [_jsx("summary", { children: "Rename or delete" }), shows("project.rename") ? (_jsxs(ConsoleForm, { intent: "rename", className: "ac-inline", children: [_jsx(Field, { label: "New name", name: "name", required: true, defaultValue: renameRefusal?.values.name ?? p.name }), _jsx(Submit, { intent: "rename", children: "Rename" })] })) : null, _jsx(Refused, { intent: "rename" }), shows("project.delete") ? (_jsxs("div", { className: "ac-danger-zone", children: [_jsxs("p", { children: ["Deleting ", p.name, " is permanent, and its id can never be used again. It must have no services."] }), _jsx(ConsoleForm, { intent: "delete", children: _jsx(Submit, { intent: "delete", danger: true, children: "Delete project" }) }), _jsx(Refused, { intent: "delete" })] })) : null] })) : null] }));
+}
+export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes/service-apply.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Applies a descriptor: pasted, or read from a file. The console checks only that the text is JSON
+ * and names a service; every rule about what a descriptor may say is the control plane's, and its
+ * refusal is shown problem by problem beside the text.
+ */
+import { type ActionFunctionArgs, type LoaderFunctionArgs, type MetaFunction } from "react-router";
+import { type ActionRefusal } from "../context.ts";
+import { ConsoleErrorBoundary } from "../ui/errors.tsx";
+export declare const meta: MetaFunction;
+export declare function loader({ request, params, context }: LoaderFunctionArgs): Promise<{
+    console: import("../context.ts").ConsolePageData;
+    project: {
+        id: string;
+        name: string;
+        organizationId: string;
+        registry: {
+            server: string;
+            username: string;
+            setAt: string | undefined;
+            setBy: string | undefined;
+        } | undefined;
+    };
+    organization: {
+        id: string;
+        name: string;
+        projects: number;
+        disabled: boolean;
+        role: NonNullable<"member" | "owner"> | undefined;
+        quota: {
+            projects: number | undefined;
+            services: number | undefined;
+            instances: number | undefined;
+        } | undefined;
+        usage: {
+            projects: number;
+            services: number;
+            instances: number;
+        };
+    };
+    name: string | null;
+}>;
+export declare function action({ request, params, context }: ActionFunctionArgs): Promise<import("react-router").UNSAFE_DataWithResponseInit<ActionRefusal> | Response>;
+export default function ApplyDescriptor(): import("react").JSX.Element;
+export declare const ErrorBoundary: typeof ConsoleErrorBoundary;

package/dist/routes/service-apply.js

@@ -0,0 +1,65 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Applies a descriptor: pasted, or read from a file. The console checks only that the text is JSON
+ * and names a service; every rule about what a descriptor may say is the control plane's, and its
+ * refusal is shown problem by problem beside the text.
+ */
+import { redirect, useLoaderData } from "react-router";
+import { act, guard, pageData, useConsoleContext } from "../context.js";
+import { ConsoleErrorBoundary } from "../ui/errors.js";
+import { Breadcrumbs, ConsoleForm, Submit } from "../ui/console.js";
+import { Refused, useRefusal } from "../ui/refused.js";
+import { data } from "react-router";
+export const meta = () => [{ title: "Apply a descriptor · ankka" }];
+export async function loader({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    return guard(ctx, async () => {
+        const project = await ctx.client.getProject(params.projectId);
+        const organization = await ctx.client.getOrganization(project.organizationId);
+        const name = new URL(request.url).searchParams.get("name");
+        return { console: await pageData(ctx), project, organization, name };
+    });
+}
+const notApplied = (reason, descriptor) => data({ intent: "apply", status: 400, reason, problems: [reason], values: { descriptor } }, { status: 400 });
+export async function action({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const projectId = params.projectId;
+    const form = await request.formData();
+    const file = form.get("file");
+    const pasted = String(form.get("descriptor") ?? "");
+    const descriptor = pasted.trim() !== "" ? pasted : file instanceof File && file.size > 0 ? await file.text() : "";
+    if (descriptor.trim() === "")
+        return notApplied("Paste a descriptor or choose a service.json file.", descriptor);
+    let name;
+    try {
+        name = JSON.parse(descriptor).name;
+    }
+    catch (e) {
+        return notApplied(`The descriptor is not valid JSON: ${e instanceof Error ? e.message : String(e)}`, descriptor);
+    }
+    if (typeof name !== "string" || name === "")
+        return notApplied('The descriptor has no "name": it names the service it deploys.', descriptor);
+    const values = new FormData();
+    values.set("descriptor", descriptor);
+    return act(ctx, "apply", values, async () => {
+        await ctx.client.applyService(projectId, name, descriptor);
+        return redirect(ctx.href(`projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`));
+    });
+}
+const example = `{
+  "name": "cart",
+  "service": {
+    "image": "ghcr.io/example/cart:1.0.0"
+  }
+}`;
+export default function ApplyDescriptor() {
+    const { project: p, organization: o, name } = useLoaderData();
+    const refusal = useRefusal("apply");
+    return (_jsxs("section", { className: "ac-page", children: [_jsx(Breadcrumbs, { trail: [
+                    { label: "Organizations", to: "" },
+                    { label: o.name, to: `organizations/${encodeURIComponent(o.id)}` },
+                    { label: p.name, to: `projects/${encodeURIComponent(p.id)}` },
+                    { label: "Apply a descriptor" },
+                ] }), _jsxs("h1", { children: ["Apply a descriptor", name ? ` to ${name}` : ""] }), _jsxs("p", { className: "ac-lede", children: ["A descriptor is a service's ", _jsx("code", { children: "service.json" }), ". Applying it creates the service, or updates it if one with that name exists."] }), _jsxs(ConsoleForm, { intent: "apply", encType: "multipart/form-data", className: "ac-form", children: [_jsxs("div", { className: "ac-field", children: [_jsx("label", { htmlFor: "descriptor", children: "Descriptor" }), _jsx("textarea", { id: "descriptor", name: "descriptor", spellCheck: false, placeholder: example, defaultValue: refusal?.values.descriptor, "aria-describedby": "descriptor-hint", "aria-invalid": refusal ? true : undefined }), _jsx("p", { className: "ac-hint", id: "descriptor-hint", children: "Paste it here, or choose the file below instead." })] }), _jsxs("div", { className: "ac-field", children: [_jsx("label", { htmlFor: "file", children: "Or a service.json file" }), _jsx("input", { id: "file", name: "file", type: "file", accept: "application/json,.json" })] }), _jsx(Refused, { intent: "apply" }), _jsx("div", { children: _jsx(Submit, { intent: "apply", children: "Apply" }) })] })] }));
+}
+export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes/service.d.ts

@@ -0,0 +1,71 @@
+/**
+ * A service: everything the platform reports about it, kept current while the page is open, its
+ * attributed history, and the operations the CLI offers. After an operation the page shows the
+ * state the control plane reports, never what the console expected.
+ */
+import { type ActionFunctionArgs, type LoaderFunctionArgs, type MetaFunction } from "react-router";
+import { ConsoleErrorBoundary } from "../ui/errors.tsx";
+export declare const meta: MetaFunction<typeof loader>;
+export declare function loader({ params, context }: LoaderFunctionArgs): Promise<{
+    console: import("../context.ts").ConsolePageData;
+    service: {
+        name: string;
+        projectId: string;
+        lifecycle: string;
+        generation: number;
+        image: string;
+        readyInstances: number;
+        desiredInstances: number;
+        detail: string | undefined;
+        confirmed: boolean;
+        database: string | undefined;
+        hostname: string | undefined;
+        exposed: boolean;
+        suspended: boolean;
+        paused: boolean;
+        hosting: string;
+        protocol: string | undefined;
+    };
+    history: {
+        kind: string;
+        generation: number;
+        actor: {
+            subject: string;
+            display: string | undefined;
+            administrative: boolean;
+        } | undefined;
+        at: string | undefined;
+    }[];
+    project: {
+        id: string;
+        name: string;
+        organizationId: string;
+        registry: {
+            server: string;
+            username: string;
+            setAt: string | undefined;
+            setBy: string | undefined;
+        } | undefined;
+    };
+    organization: {
+        id: string;
+        name: string;
+        projects: number;
+        disabled: boolean;
+        role: NonNullable<"member" | "owner"> | undefined;
+        quota: {
+            projects: number | undefined;
+            services: number | undefined;
+            instances: number | undefined;
+        } | undefined;
+        usage: {
+            projects: number;
+            services: number;
+            instances: number;
+        };
+    };
+    panels: import("../extensions/render.tsx").LoadedPanels;
+}>;
+export declare function action({ request, params, context }: ActionFunctionArgs): Promise<import("react-router").UNSAFE_DataWithResponseInit<import("../context.ts").ActionRefusal> | Response>;
+export default function Service(): import("react").JSX.Element;
+export declare const ErrorBoundary: typeof ConsoleErrorBoundary;

package/dist/routes/service.js

@@ -0,0 +1,73 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * A service: everything the platform reports about it, kept current while the page is open, its
+ * attributed history, and the operations the CLI offers. After an operation the page shows the
+ * state the control plane reports, never what the console expected.
+ */
+import { redirect, useLoaderData } from "react-router";
+import { act, guard, pageData, text, useConsoleContext } from "../context.js";
+import { ConsoleErrorBoundary } from "../ui/errors.js";
+import { Breadcrumbs, ConsoleForm, ConsoleLink, Submit, useConsole, when } from "../ui/console.js";
+import { Refused, useRefusal } from "../ui/refused.js";
+import { Lifecycle } from "../ui/status.js";
+import { useServiceStream } from "../ui/use-stream.js";
+import { HostActions, loadPanels, Panels } from "../extensions/render.js";
+export const meta = ({ loaderData }) => [{ title: `${loaderData?.service.name ?? "Service"} · ankka` }];
+export async function loader({ params, context }) {
+    const ctx = useConsoleContext(context);
+    const { projectId, name } = params;
+    return guard(ctx, async () => {
+        const [service, history, project, page] = await Promise.all([
+            ctx.client.getService(projectId, name),
+            ctx.client.history(projectId, name),
+            ctx.client.getProject(projectId),
+            pageData(ctx),
+        ]);
+        const organization = await ctx.client.getOrganization(project.organizationId);
+        return { console: page, service, history: [...history].reverse(), project, organization, panels: await loadPanels(ctx, "service", service) };
+    });
+}
+const serviceOperations = ["pause", "resume", "restart", "expose", "unexpose"];
+export async function action({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const { projectId, name } = params;
+    const form = await request.formData();
+    const intent = text(form, "intent");
+    return act(ctx, intent, form, async () => {
+        if (intent === "delete") {
+            await ctx.client.deleteService(projectId, name);
+            return redirect(ctx.href(`projects/${encodeURIComponent(projectId)}`));
+        }
+        if (!serviceOperations.includes(intent))
+            throw new Response(`unknown operation '${intent}'`, { status: 400 });
+        await ctx.client.serviceOperation(projectId, name, intent);
+        return redirect(ctx.href(`projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`));
+    });
+}
+const history = {
+    applied: "Applied",
+    restarted: "Restarted",
+    paused: "Paused",
+    resumed: "Resumed",
+    exposed: "Exposed",
+    unexposed: "Unexposed",
+    deleted: "Deleted",
+};
+function Operation({ intent, label, operation, danger, entity }) {
+    const { shows } = useConsole();
+    return (_jsxs(_Fragment, { children: [shows(operation) ? (_jsx(ConsoleForm, { intent: intent, children: _jsx(Submit, { intent: intent, danger: danger, children: label }) })) : null, _jsx(HostActions, { operation: operation, entity: entity })] }));
+}
+export default function Service() {
+    const data = useLoaderData();
+    const { project: p, organization: o, panels } = data;
+    const { status: s, state } = useServiceStream(p.id, data.service.name, data.service);
+    const deleteRefused = useRefusal("delete") !== undefined;
+    const path = `projects/${encodeURIComponent(p.id)}/services/${encodeURIComponent(s.name)}`;
+    return (_jsxs("section", { className: "ac-page", children: [_jsx(Breadcrumbs, { trail: [
+                    { label: "Organizations", to: "" },
+                    { label: o.name, to: `organizations/${encodeURIComponent(o.id)}` },
+                    { label: p.name, to: `projects/${encodeURIComponent(p.id)}` },
+                    { label: s.name },
+                ] }), _jsx("h1", { children: s.name }), _jsxs("p", { "aria-live": "polite", className: "ac-state-line", children: [_jsx(Lifecycle, { lifecycle: s.lifecycle, confirmed: s.confirmed }), state === "live" ? _jsx("span", { className: "ac-live", children: " Updating as the platform reports" }) : null] }), s.detail ? _jsx("p", { className: "ac-notice", children: s.detail }) : null, _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Instances" }), _jsxs("dd", { children: [s.readyInstances, " ready of ", s.desiredInstances] }), _jsx("dt", { children: "Image" }), _jsx("dd", { children: s.image }), _jsx("dt", { children: "Generation" }), _jsx("dd", { children: s.generation }), _jsx("dt", { children: "Address" }), _jsx("dd", { children: s.hostname ? _jsx("a", { href: s.hostname, children: s.hostname }) : s.exposed ? "Exposed; the platform has no address for it yet" : "Not exposed" }), _jsx("dt", { children: "Database" }), _jsx("dd", { children: s.database ?? "Nothing reported yet" }), _jsx("dt", { children: "Runs as" }), _jsx("dd", { children: s.hosting === "process" ? `A process beside the platform's sidecar${s.protocol ? `, protocol ${s.protocol}` : ""}` : "Embedded in the platform's runtime" }), _jsx("dt", { children: "Stopped by" }), _jsx("dd", { children: s.suspended ? "Its organization is disabled" : s.paused ? "Its members paused it" : "Nobody" }), _jsx("dt", { children: "Report" }), _jsx("dd", { children: s.confirmed ? "Confirmed by the cluster" : "The last known state; the cluster has not confirmed it" })] }), _jsxs("div", { className: "ac-actions", "aria-label": "Operations", children: [s.paused ? _jsx(Operation, { intent: "resume", label: "Resume", operation: "service.resume", entity: s }) : _jsx(Operation, { intent: "pause", label: "Pause", operation: "service.pause", entity: s }), _jsx(Operation, { intent: "restart", label: "Restart", operation: "service.restart", entity: s }), s.exposed ? _jsx(Operation, { intent: "unexpose", label: "Unexpose", operation: "service.unexpose", entity: s }) : _jsx(Operation, { intent: "expose", label: "Expose", operation: "service.expose", entity: s }), _jsx(ConsoleLink, { to: `${path}/logs`, className: "ac-button ac-button-quiet", children: "Logs" }), _jsx(ConsoleLink, { to: `projects/${encodeURIComponent(p.id)}/services/apply?name=${encodeURIComponent(s.name)}`, className: "ac-button ac-button-quiet", children: "Apply a new descriptor" })] }), serviceOperations.map((op) => (_jsx(Refused, { intent: op }, op))), _jsx(Panels, { kind: "service", entity: s, loaded: panels }), _jsx("h2", { children: "History" }), data.history.length === 0 ? (_jsx("p", { className: "ac-empty", children: "Nothing recorded yet." })) : (_jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "What" }), _jsx("th", { scope: "col", className: "ac-num", children: "Generation" }), _jsx("th", { scope: "col", children: "Who" }), _jsx("th", { scope: "col", children: "When" })] }) }), _jsx("tbody", { children: data.history.map((h, i) => (_jsxs("tr", { children: [_jsx("td", { children: history[h.kind] ?? h.kind }), _jsx("td", { className: "ac-num", children: h.generation }), _jsxs("td", { children: [h.actor ? (h.actor.display ?? h.actor.subject) : "—", h.actor?.administrative ? " (as administrator)" : ""] }), _jsx("td", { children: when(h.at) })] }, i))) })] }) })), _jsxs("details", { className: "ac-more", open: deleteRefused || undefined, children: [_jsx("summary", { children: "Delete" }), _jsxs("div", { className: "ac-danger-zone", children: [_jsxs("p", { children: ["Deleting ", s.name, " stops it and removes it from the project. Its database is kept: applying a descriptor with this name again brings the service back with its data."] }), _jsx(Operation, { intent: "delete", label: "Delete service", operation: "service.delete", danger: true, entity: s }), _jsx(Refused, { intent: "delete" })] })] })] }));
+}
+export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes/stream.project.d.ts

@@ -0,0 +1,3 @@
+/** `GET <mount>/stream/projects/:projectId`: a project's service listing, sent whenever it changes. */
+import type { LoaderFunctionArgs } from "react-router";
+export declare function loader({ request, params, context }: LoaderFunctionArgs): Promise<Response>;

package/dist/routes/stream.project.js

@@ -0,0 +1,25 @@
+import { useConsoleContext } from "../context.js";
+import { pollingStream } from "../stream/sse.js";
+import { ended } from "./stream.service.js";
+export async function loader({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const projectId = params.projectId;
+    let last = "";
+    return pollingStream({
+        signal: request.signal,
+        async tick(sink) {
+            try {
+                const services = await ctx.client.listServices(projectId);
+                const now = JSON.stringify(services);
+                if (now !== last) {
+                    last = now;
+                    sink.send("services", services);
+                }
+            }
+            catch (e) {
+                if (!ended(sink, e))
+                    throw e;
+            }
+        },
+    });
+}

package/dist/routes/stream.service.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `GET <mount>/stream/services/:projectId/:name`: a service page's live updates. Every two seconds
+ * the service is read as the signed-in person and `status` is sent when it changed; with `logs` in
+ * the query, the chosen instances' recent output is read too and only new lines are sent.
+ */
+import type { LoaderFunctionArgs } from "react-router";
+import { type EventSink } from "../stream/sse.ts";
+export declare function ended(sink: EventSink, e: unknown): boolean;
+export declare function loader({ request, params, context }: LoaderFunctionArgs): Promise<Response>;

package/dist/routes/stream.service.js

@@ -0,0 +1,68 @@
+import { useConsoleContext } from "../context.js";
+import { ControlPlaneError, SignInRequired } from "../client/errors.js";
+import { pollingStream } from "../stream/sse.js";
+import { LogFollower, lines } from "../stream/log-follow.js";
+export function ended(sink, e) {
+    if (e instanceof SignInRequired) {
+        sink.end("session-ended", { reason: "sign-in-required" });
+        return true;
+    }
+    if (e instanceof ControlPlaneError && e.status === 404) {
+        sink.end("gone", { reason: e.reason });
+        return true;
+    }
+    return false;
+}
+export async function loader({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const projectId = params.projectId;
+    const name = params.name;
+    const query = new URL(request.url).searchParams;
+    const follow = query.has("logs");
+    const tail = Math.min(Math.max(Number(query.get("tail") ?? 200) || 200, 1), 5_000);
+    const logQuery = { instance: query.get("instance") || undefined, previous: query.get("previous") === "true", tail };
+    const follower = new LogFollower(tail);
+    const primed = new Set();
+    let last = "";
+    return pollingStream({
+        signal: request.signal,
+        async tick(sink) {
+            try {
+                const status = await ctx.client.getService(projectId, name);
+                const now = JSON.stringify(status);
+                if (now !== last) {
+                    last = now;
+                    sink.send("status", status);
+                }
+            }
+            catch (e) {
+                if (ended(sink, e))
+                    return;
+                throw e;
+            }
+            if (!follow)
+                return;
+            try {
+                const logs = await ctx.client.logs(projectId, name, logQuery);
+                for (const instance of logs.instances) {
+                    if (instance.error) {
+                        sink.send("logs", { instance: instance.instance, error: instance.error });
+                        continue;
+                    }
+                    const fresh = follower.next(instance.instance, lines(instance.output));
+                    // The first window replaces what the page rendered, so nothing written between the page's
+                    // own read and this one is lost.
+                    const reset = !primed.has(instance.instance);
+                    primed.add(instance.instance);
+                    if (fresh.length > 0 || reset)
+                        sink.send("logs", { instance: instance.instance, lines: fresh, reset });
+                }
+            }
+            catch (e) {
+                if (e instanceof SignInRequired)
+                    return void ended(sink, e);
+                // A service with no running instance has no logs; its status says why.
+            }
+        },
+    });
+}

package/dist/routes/tokens.d.ts

@@ -0,0 +1,47 @@
+/**
+ * An organization's deploy tokens. A new token's secret is shown exactly once: the creation
+ * redirects (so a reload can never create a second token), carrying the secret across in a sealed
+ * cookie that this page reads and clears on its next render.
+ */
+import { type ActionFunctionArgs, type LoaderFunctionArgs, type MetaFunction } from "react-router";
+import { ConsoleErrorBoundary } from "../ui/errors.tsx";
+export declare const meta: MetaFunction;
+export declare function loader({ request, params, context }: LoaderFunctionArgs): Promise<{
+    console: import("../context.ts").ConsolePageData;
+    organization: {
+        id: string;
+        name: string;
+        projects: number;
+        disabled: boolean;
+        role: NonNullable<"member" | "owner"> | undefined;
+        quota: {
+            projects: number | undefined;
+            services: number | undefined;
+            instances: number | undefined;
+        } | undefined;
+        usage: {
+            projects: number;
+            services: number;
+            instances: number;
+        };
+    };
+    tokens: {
+        id: string;
+        label: string;
+        subject: string;
+        createdBy: string | undefined;
+        createdAt: string | undefined;
+        expiresAt: string | undefined;
+        lastUsed: string | undefined;
+    }[];
+    created: {
+        id: string;
+        label: string;
+        secret: string;
+        subject: string;
+        expiresAt: string | undefined;
+    } | null;
+}>;
+export declare function action({ request, params, context }: ActionFunctionArgs): Promise<import("react-router").UNSAFE_DataWithResponseInit<import("../context.ts").ActionRefusal> | Response>;
+export default function Tokens(): import("react").JSX.Element;
+export declare const ErrorBoundary: typeof ConsoleErrorBoundary;

package/dist/routes/tokens.js

@@ -0,0 +1,50 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * An organization's deploy tokens. A new token's secret is shown exactly once: the creation
+ * redirects (so a reload can never create a second token), carrying the secret across in a sealed
+ * cookie that this page reads and clears on its next render.
+ */
+import { redirect, useLoaderData } from "react-router";
+import { act, guard, pageData, text, useConsoleContext } from "../context.js";
+import { ConsoleErrorBoundary } from "../ui/errors.js";
+import { Breadcrumbs, ConsoleForm, Field, Submit, useConsole, when } from "../ui/console.js";
+import { Refused, useRefusal } from "../ui/refused.js";
+import { HostActions } from "../extensions/render.js";
+export const meta = () => [{ title: "Deploy tokens · ankka" }];
+export async function loader({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const id = params.organizationId;
+    return guard(ctx, async () => {
+        const [organization, tokens, page] = await Promise.all([ctx.client.getOrganization(id), ctx.client.tokens(id), pageData(ctx)]);
+        const created = await ctx.runtime.tokenFlash.take(request, ctx.headers);
+        // Shown from the one-time cookie alone: the listing is a projection and may not show the new token yet.
+        return { console: page, organization, tokens, created };
+    });
+}
+export async function action({ request, params, context }) {
+    const ctx = useConsoleContext(context);
+    const id = params.organizationId;
+    const form = await request.formData();
+    const intent = text(form, "intent");
+    const self = ctx.href(`organizations/${encodeURIComponent(id)}/tokens`);
+    return act(ctx, intent, form, async () => {
+        if (intent === "create") {
+            const days = text(form, "expiresInDays");
+            const created = await ctx.client.createToken(id, { label: text(form, "label"), expiresIn: days ? Number(days) * 86_400 : undefined });
+            await ctx.runtime.tokenFlash.write(created, ctx.headers);
+            return redirect(self);
+        }
+        if (intent === "revoke") {
+            await ctx.client.revokeToken(id, text(form, "tokenId"));
+            return redirect(self);
+        }
+        throw new Response(`unknown operation '${intent}'`, { status: 400 });
+    });
+}
+export default function Tokens() {
+    const { organization: o, tokens, created } = useLoaderData();
+    const { shows } = useConsole();
+    const refusal = useRefusal("create");
+    return (_jsxs("section", { className: "ac-page", children: [_jsx(Breadcrumbs, { trail: [{ label: "Organizations", to: "" }, { label: o.name, to: `organizations/${encodeURIComponent(o.id)}` }, { label: "Deploy tokens" }] }), _jsxs("h1", { children: ["Deploy tokens for ", o.name] }), _jsx("p", { className: "ac-lede", children: "A deploy token lets a machine, such as a CI job, deploy as a member of this organization. It cannot manage members or tokens." }), created ? (_jsxs("div", { className: "ac-notice", role: "status", children: [_jsxs("p", { children: [_jsxs("strong", { children: ["Copy the token for ", created.label, " now."] }), " It is shown this once and cannot be retrieved later."] }), _jsx("code", { className: "ac-secret", "data-secret": true, children: created.secret })] })) : null, tokens.length === 0 ? (_jsx("p", { className: "ac-empty", children: "No deploy tokens." })) : (_jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", children: [_jsx("caption", { className: "ac-visually-hidden", children: "Deploy tokens" }), _jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Label" }), _jsx("th", { scope: "col", children: "Id" }), _jsx("th", { scope: "col", children: "Created" }), _jsx("th", { scope: "col", children: "Expires" }), _jsx("th", { scope: "col", children: "Last used" }), _jsx("th", { scope: "col", children: "Revoke" })] }) }), _jsx("tbody", { children: tokens.map((t) => (_jsxs("tr", { "data-token": t.id, children: [_jsx("td", { children: t.label }), _jsx("td", { children: t.id }), _jsxs("td", { children: [when(t.createdAt), t.createdBy ? ` by ${t.createdBy}` : ""] }), _jsx("td", { children: t.expiresAt ? when(t.expiresAt) : "Never" }), _jsx("td", { children: t.lastUsed ?? "Never" }), _jsx("td", { children: shows("token.revoke") ? (_jsxs(ConsoleForm, { intent: "revoke", children: [_jsx("input", { type: "hidden", name: "tokenId", value: t.id }), _jsx(Submit, { intent: "revoke", danger: true, children: "Revoke" })] })) : null })] }, t.id))) })] }) })), _jsx(Refused, { intent: "revoke" }), shows("token.create") ? (_jsxs(_Fragment, { children: [_jsx("h2", { children: "Create a deploy token" }), _jsxs(ConsoleForm, { intent: "create", className: "ac-inline", children: [_jsx(Field, { label: "Label", name: "label", required: true, hint: "What uses it, such as a repository's CI.", defaultValue: refusal?.values.label, autoComplete: "off" }), _jsx(Field, { label: "Expires after days", name: "expiresInDays", type: "number", min: 0, max: 365, hint: "Empty for the platform's default of 90 days; 0 for never; at most 365.", defaultValue: refusal?.values.expiresInDays }), _jsx(Submit, { intent: "create", children: "Create token" })] }), _jsx(Refused, { intent: "create" }), _jsx("div", { className: "ac-actions", children: _jsx(HostActions, { operation: "token.create", entity: o }) })] })) : null] }));
+}
+export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes.d.ts

@@ -0,0 +1,28 @@
+/**
+ * A route config entry, the shape `@react-router/dev/routes` builds. Declared here rather than
+ * imported so that the package's runtime entry point never loads the framework's build tooling.
+ */
+export interface RouteConfigEntry {
+    id?: string;
+    path?: string;
+    index?: boolean;
+    caseSensitive?: boolean;
+    file: string;
+    children?: RouteConfigEntry[];
+}
+export interface ConsoleRoutesOptions {
+    /**
+     * Whether the package's own sign-in routes are included. A host that signs people in itself and
+     * supplies a `TokenSource` passes `false`.
+     */
+    auth?: boolean;
+}
+/**
+ * The console's pages and resource routes, to be spread inside a host's layout and under any
+ * prefix it chooses:
+ *
+ * ```ts
+ * layout("./layout.tsx", [...prefix("console", consoleRoutes())])
+ * ```
+ */
+export declare function consoleRoutes(options?: ConsoleRoutesOptions): RouteConfigEntry[];

package/dist/routes.js

@@ -0,0 +1,48 @@
+import { fileURLToPath } from "node:url";
+// The route modules sit beside this file: `src/routes/*.tsx` when the package is used from source
+// (the repository's own host and tests, under the `ankka-source` condition), `dist/routes/*.js` when
+// it is installed from npm. Route config entries are file paths, not module specifiers, so each is
+// an absolute path into wherever the package is installed.
+const here = import.meta.url;
+const fromSource = here.endsWith(".ts");
+const routesDir = fileURLToPath(new URL("./routes/", here));
+function file(name, kind) {
+    const ext = fromSource ? (kind === "page" ? ".tsx" : ".ts") : ".js";
+    return routesDir + name + ext;
+}
+function page(path, name) {
+    return path === undefined
+        ? { id: `ankka-console/${name}`, index: true, file: file(name, "page") }
+        : { id: `ankka-console/${name}`, path, file: file(name, "page") };
+}
+function resource(path, name) {
+    return { id: `ankka-console/${name}`, path, file: file(name, "resource") };
+}
+/**
+ * The console's pages and resource routes, to be spread inside a host's layout and under any
+ * prefix it chooses:
+ *
+ * ```ts
+ * layout("./layout.tsx", [...prefix("console", consoleRoutes())])
+ * ```
+ */
+export function consoleRoutes(options = {}) {
+    const auth = options.auth ?? true;
+    return [
+        page(undefined, "front"),
+        page("organizations/new", "organization-new"),
+        page("organizations/:organizationId", "organization"),
+        page("organizations/:organizationId/members", "members"),
+        page("organizations/:organizationId/tokens", "tokens"),
+        page("organizations/:organizationId/projects/new", "project-new"),
+        page("projects/:projectId", "project"),
+        page("projects/:projectId/services/apply", "service-apply"),
+        page("projects/:projectId/services/:name", "service"),
+        page("projects/:projectId/services/:name/logs", "logs"),
+        resource("stream/projects/:projectId", "stream.project"),
+        resource("stream/services/:projectId/:name", "stream.service"),
+        ...(auth
+            ? [page("auth/sign-in", "auth.sign-in"), page("auth/callback", "auth.callback"), page("auth/sign-out", "auth.sign-out")]
+            : []),
+    ];
+}