ankka-console 0.11.0 → 0.12.0

package/dist/routes/service.js

@@ -7,7 +7,8 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 import { redirect, useLoaderData } from "react-router";
 import { act, applyPrimary, guard, pageData, projectShell, text, useConsoleContext } from "../context.js";
 import { ConsoleErrorBoundary } from "../ui/errors.js";
-import { ConsoleForm, Submit, useConsole } from "../ui/console.js";
+import { ConsoleForm, Field, Submit, useConsole } from "../ui/console.js";
+import { Select } from "../ui/primitives/select.js";
 import { Page, SectionTitle, ServiceSections } from "../ui/shell.js";
 import { Shape } from "../ui/shape.js";
 import { runsAs } from "../ui/hosting.js";
@@ -37,6 +38,7 @@ export async function loader({ params, context }) {
     });
 }
 const serviceOperations = ["pause", "resume", "restart", "expose", "unexpose"];
+const storageOperations = ["storage-credential", "storage-settings"];
 export async function action({ request, params, context }) {
     const ctx = useConsoleContext(context);
     const { projectId, name } = params;
@@ -47,12 +49,47 @@ export async function action({ request, params, context }) {
             await ctx.client.deleteService(projectId, name);
             return redirect(ctx.href(`projects/${encodeURIComponent(projectId)}`));
         }
+        const self = ctx.href(`projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`);
+        if (intent === "storage-credential") {
+            await ctx.client.reissueStorageCredential(projectId, name);
+            return redirect(self);
+        }
+        if (intent === "storage-settings") {
+            await ctx.client.reapplyStorageSettings(projectId, name);
+            return redirect(self);
+        }
+        if (intent === "storage-move") {
+            await ctx.client.moveStorage(projectId, name, text(form, "writePauseBound") || undefined);
+            return redirect(self);
+        }
+        if (intent === "hostname-add") {
+            await ctx.client.addHostname(projectId, name, text(form, "hostname").trim());
+            return redirect(self);
+        }
+        if (intent === "hostname-remove") {
+            await ctx.client.removeHostname(projectId, name, text(form, "hostname"));
+            return redirect(self);
+        }
         if (!serviceOperations.includes(intent))
             throw new Response(`unknown operation '${intent}'`, { status: 400 });
         await ctx.client.serviceOperation(projectId, name, intent);
-        return redirect(ctx.href(`projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`));
+        return redirect(self);
     });
 }
+/** The store a bucket is in, as the operator reported it. */
+const stores = { garage: "Garage", gcs: "Google Cloud Storage" };
+/**
+ * What members can do about a bucket the platform made: issue its credential again, reapply the
+ * installation's settings to one in Google Cloud Storage, or move one from Garage there. Whether the
+ * installation can move at all is the control plane's to say, and its refusal is shown here.
+ */
+function Storage({ s }) {
+    const { shows } = useConsole();
+    const moveRefusal = useRefusal("storage-move");
+    if (!s.bucket)
+        return null;
+    return (_jsxs("section", { className: "ac-ops", "aria-labelledby": "storage-title", children: [_jsx(SectionTitle, { children: _jsx("span", { id: "storage-title", children: "Object storage" }) }), _jsx(Operation, { intent: "storage-credential", label: "Issue credential again", operation: "service.storage-credential", entity: s }), s.objectStore === "gcs" ? (_jsx(Operation, { intent: "storage-settings", label: "Reapply bucket settings", operation: "service.storage-settings", entity: s })) : shows("service.storage-move") ? (_jsxs("details", { className: "ac-more", open: moveRefusal !== undefined || undefined, children: [_jsx("summary", { children: "Move to Google Cloud Storage" }), _jsx("p", { children: "Every object is copied while the service goes on writing; then its writes are paused, what changed is copied, every object is checked on both sides, and the service is replaced onto its new bucket. The bucket in Garage is kept." }), _jsxs(ConsoleForm, { intent: "storage-move", className: "ac-form", children: [_jsx(Field, { label: "Write pause bound", name: "writePauseBound", placeholder: "10m", autoComplete: "off", defaultValue: moveRefusal?.values.writePauseBound, hint: "How long writes may be paused, from 1m to 24h. A pause that reaches it fails the move and gives the writes back." }), _jsx(Refused, { intent: "storage-move" }), _jsx("div", { children: _jsx(Submit, { intent: "storage-move", children: "Move bucket" }) })] })] })) : null, _jsx(HostActions, { operation: "service.storage-move", entity: s }), storageOperations.map((op) => (_jsx(Refused, { intent: op }, op)))] }));
+}
 /** A service's bucket, that it has a store of its own, or none — and a phrase while it waits or failed. */
 function objectStorage(s) {
     if (s.objectStorage && /waiting|failed/.test(s.objectStorage))
@@ -67,12 +104,34 @@ function Operation({ intent, label, operation, danger, entity }) {
     const { shows } = useConsole();
     return (_jsxs(_Fragment, { children: [shows(operation) ? (_jsx(ConsoleForm, { intent: intent, children: _jsx(Submit, { intent: intent, danger: danger, children: label }) })) : null, _jsx(HostActions, { operation: operation, entity: entity })] }));
 }
+function record(r) {
+    return `${r.kind} ${r.name} → ${r.value}`;
+}
+function hostnameStands(h) {
+    return h.reason ? `${h.state}: ${h.reason}` : h.state;
+}
+/**
+ * The names a service answers at: the one the platform derives, then each custom hostname with where it
+ * stands and the record its owner creates, and the proof record the project's names need. Adding and
+ * removing are forms; the control plane's refusal is shown as it says it.
+ */
+function Hostnames({ service: s }) {
+    return (_jsxs("section", { className: "ac-card", "aria-labelledby": "hostnames", "data-hostnames": true, children: [_jsx("h2", { id: "hostnames", children: "Hostnames" }), _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Address" }), _jsx("dd", { children: s.hostname ? _jsx("a", { href: s.hostname, children: s.hostname }) : s.exposed ? "Exposed; the platform has no address for it yet" : "Not exposed" }), s.customHostnames.map((h) => (_jsxs("div", { "data-custom-hostname": h.hostname, "data-state": h.state, children: [_jsx("dt", { children: h.hostname }), _jsxs("dd", { children: [_jsx("span", { children: hostnameStands(h) }), h.record ? (_jsxs("span", { className: "ac-hint", "data-record": true, children: [" ", "Create ", record(h.record)] })) : null, h.note ? _jsxs("span", { className: "ac-hint", children: [" ", h.note] }) : null] })] }, h.hostname))), s.proofRecord ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Proof record" }), _jsx("dd", { children: _jsxs("code", { "data-proof-record": true, children: [s.proofRecord.kind, " ", s.proofRecord.name, " \"", s.proofRecord.value, "\""] }) })] })) : null] })] }));
+}
+/** Adding and removing a custom hostname, in the inspector with the service's other operations. */
+function HostnameOperations({ service: s }) {
+    const { shows } = useConsole();
+    const addRefusal = useRefusal("hostname-add");
+    if (!shows("service-hostname.add") && !shows("service-hostname.remove"))
+        return null;
+    return (_jsxs("section", { className: "ac-form", "aria-labelledby": "hostname-operations", "data-hostname-operations": true, children: [_jsx(SectionTitle, { children: _jsx("span", { id: "hostname-operations", children: "Custom hostnames" }) }), shows("service-hostname.add") ? (_jsxs(ConsoleForm, { intent: "hostname-add", className: "ac-inline", children: [_jsx(Field, { label: "Add a custom hostname", name: "hostname", required: true, autoComplete: "off", placeholder: "app.example.com", defaultValue: addRefusal?.values.hostname }), _jsx(Submit, { intent: "hostname-add", primary: true, children: "Add" })] })) : null, _jsx(Refused, { intent: "hostname-add" }), shows("service-hostname.remove") && s.customHostnames.length > 0 ? (_jsxs(ConsoleForm, { intent: "hostname-remove", className: "ac-inline", children: [_jsx(Select, { label: "Remove a custom hostname", id: "hostname-remove", name: "hostname", children: s.customHostnames.map((h) => (_jsx("option", { value: h.hostname, children: h.hostname }, h.hostname))) }), _jsx(Submit, { intent: "hostname-remove", danger: true, children: "Remove" })] })) : null, _jsx(Refused, { intent: "hostname-remove" })] }));
+}
 export default function Service() {
     const data = useLoaderData();
     const { project: p, panels } = data;
     const { status: s, state } = useServiceStream(p.id, data.service.name, data.service);
     const deleteRefused = useRefusal("delete") !== undefined;
-    const inspector = (_jsxs(_Fragment, { children: [_jsxs("section", { className: "ac-ops", "aria-labelledby": "operations-title", children: [_jsx(SectionTitle, { children: _jsx("span", { id: "operations-title", children: "Operations" }) }), s.paused ? _jsx(Operation, { intent: "resume", label: "Resume", operation: "service.resume", entity: s }) : _jsx(Operation, { intent: "pause", label: "Pause", operation: "service.pause", entity: s }), _jsx(Operation, { intent: "restart", label: "Restart", operation: "service.restart", entity: s }), s.exposed ? _jsx(Operation, { intent: "unexpose", label: "Unexpose", operation: "service.unexpose", entity: s }) : _jsx(Operation, { intent: "expose", label: "Expose", operation: "service.expose", entity: s })] }), serviceOperations.map((op) => (_jsx(Refused, { intent: op }, op))), _jsxs("details", { className: "ac-more", open: deleteRefused || undefined, children: [_jsx("summary", { children: "Delete" }), _jsxs("div", { className: "ac-danger-zone", children: [_jsxs("p", { children: ["Deleting ", s.name, " stops it and removes it from the project. Its database is kept, and so is its bucket if it has one: applying a descriptor with this name again brings the service back with its data."] }), _jsx(Operation, { intent: "delete", label: "Delete service", operation: "service.delete", danger: true, entity: s }), _jsx(Refused, { intent: "delete" })] })] })] }));
-    return (_jsxs(Page, { inspector: inspector, children: [_jsxs("div", { className: "ac-head", children: [_jsx("h1", { children: s.name }), _jsxs("p", { "aria-live": "polite", className: "ac-actions ac-state-line", children: [_jsx("span", { className: "ac-pill", children: _jsx(Lifecycle, { lifecycle: s.lifecycle, confirmed: s.confirmed }) }), state === "live" ? _jsx("span", { className: "ac-live", children: " Updating as the platform reports" }) : null] }), _jsx(ServiceSections, { projectId: p.id, name: s.name, current: "overview" })] }), s.detail ? _jsx("p", { className: "ac-notice", children: s.detail }) : null, _jsx(Shape, { service: s }), _jsxs("section", { className: "ac-card", "aria-labelledby": "reported", children: [_jsx("h2", { id: "reported", children: "Reported by the cluster" }), _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Instances" }), _jsxs("dd", { children: [s.readyInstances, " ready of ", s.desiredInstances] }), _jsx("dt", { children: "Image" }), _jsx("dd", { children: s.image }), _jsx("dt", { children: "Generation" }), _jsx("dd", { children: s.generation }), _jsx("dt", { children: "Address" }), _jsx("dd", { children: s.hostname ? _jsx("a", { href: s.hostname, children: s.hostname }) : s.exposed ? "Exposed; the platform has no address for it yet" : "Not exposed" }), _jsx("dt", { children: "Database" }), _jsx("dd", { children: s.hosting === "web" ? "None" : (s.database ?? "Nothing reported yet") }), _jsx("dt", { children: "Object storage" }), _jsxs("dd", { children: [objectStorage(s), s.bucketAddress ? _jsxs("span", { className: "ac-hint", "data-bucket-address": true, children: [" ", s.bucketAddress] }) : null] }), s.broker ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Broker" }), _jsx("dd", { children: s.broker })] })) : null, s.undeclaredTopics && s.undeclaredTopics.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Undeclared topics" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.undeclaredTopics.map((t) => (_jsx("li", { "data-topic": t, children: _jsx("code", { children: t }) }, t))) }) })] })) : null, s.topicSources && s.topicSources.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Topic sources" }), _jsx("dd", { children: _jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", "data-topic-sources": true, children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Component" }), _jsx("th", { scope: "col", children: "Topic" }), _jsx("th", { scope: "col", children: "Group" }), _jsx("th", { scope: "col", className: "ac-num", children: "Version" }), _jsx("th", { scope: "col", className: "ac-num", children: "Lag" }), _jsx("th", { scope: "col", children: "Failing" })] }) }), _jsx("tbody", { children: s.topicSources.map((t) => (_jsxs("tr", { "data-topic-source": t.component, "data-failing": t.failing ? "yes" : "no", children: [_jsx("td", { children: t.component }), _jsxs("td", { children: [_jsx("code", { children: t.broker ? `${t.topic}@${t.broker}` : t.topic }), t.contract ? ` as ${t.contract}` : ""] }), _jsx("td", { children: _jsx("code", { children: t.group }) }), _jsx("td", { className: "ac-num", children: t.version }), _jsx("td", { className: "ac-num", children: t.lag ?? "—" }), _jsx("td", { children: t.failing ? _jsx("span", { className: "ac-notice", children: t.failing }) : "—" })] }, t.component))) })] }) }) })] })) : null, s.topicChecks && s.topicChecks.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Topic checks" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.topicChecks.map((c) => (_jsxs("li", { "data-check": c.state, children: [c.component, " ", c.direction, ": ", c.state, c.state === "mismatch" ? ` (${c.stated ?? "none"})` : ""] }, `${c.component}/${c.direction}`))) }) })] })) : null, _jsx("dt", { children: "Runs as" }), _jsx("dd", { children: runsAs(s) }), s.hosting === "web" ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Admits" }), _jsx("dd", { children: ["The internet", ...s.callers.map((c) => (c === "*" ? `Every service in ${p.name}` : c))].join(", ") }), _jsx("dt", { children: "Mounts" }), _jsx("dd", { children: s.mounts.length === 0 ? ("None") : (_jsx("ul", { className: "ac-mounts", children: s.mounts.map((m) => (_jsxs("li", { "data-mount": m.path, children: [_jsx("code", { children: m.path }), " \u2192 ", m.service, m.state && m.state !== "ok" ? ` (${m.state})` : ""] }, m.path))) })) })] })) : null, _jsx("dt", { children: "Stopped by" }), _jsx("dd", { children: s.suspended ? "Its organization is disabled" : s.paused ? "Its members paused it" : "Nobody" }), _jsx("dt", { children: "Report" }), _jsx("dd", { children: s.confirmed ? "Confirmed by the cluster" : "The last known state; the cluster has not confirmed it" })] })] }), _jsx(Panels, { kind: "service", entity: s, loaded: panels })] }));
+    const inspector = (_jsxs(_Fragment, { children: [_jsxs("section", { className: "ac-ops", "aria-labelledby": "operations-title", children: [_jsx(SectionTitle, { children: _jsx("span", { id: "operations-title", children: "Operations" }) }), s.paused ? _jsx(Operation, { intent: "resume", label: "Resume", operation: "service.resume", entity: s }) : _jsx(Operation, { intent: "pause", label: "Pause", operation: "service.pause", entity: s }), _jsx(Operation, { intent: "restart", label: "Restart", operation: "service.restart", entity: s }), s.exposed ? _jsx(Operation, { intent: "unexpose", label: "Unexpose", operation: "service.unexpose", entity: s }) : _jsx(Operation, { intent: "expose", label: "Expose", operation: "service.expose", entity: s })] }), _jsx(HostnameOperations, { service: s }), serviceOperations.map((op) => (_jsx(Refused, { intent: op }, op))), _jsx(Storage, { s: s }), _jsxs("details", { className: "ac-more", open: deleteRefused || undefined, children: [_jsx("summary", { children: "Delete" }), _jsxs("div", { className: "ac-danger-zone", children: [_jsxs("p", { children: ["Deleting ", s.name, " stops it and removes it from the project. Its database is kept, and so is its bucket if it has one: applying a descriptor with this name again brings the service back with its data."] }), _jsx(Operation, { intent: "delete", label: "Delete service", operation: "service.delete", danger: true, entity: s }), _jsx(Refused, { intent: "delete" })] })] })] }));
+    return (_jsxs(Page, { inspector: inspector, children: [_jsxs("div", { className: "ac-head", children: [_jsx("h1", { children: s.name }), _jsxs("p", { "aria-live": "polite", className: "ac-actions ac-state-line", children: [_jsx("span", { className: "ac-pill", children: _jsx(Lifecycle, { lifecycle: s.lifecycle, confirmed: s.confirmed }) }), state === "live" ? _jsx("span", { className: "ac-live", children: " Updating as the platform reports" }) : null] }), _jsx(ServiceSections, { projectId: p.id, name: s.name, current: "overview" })] }), s.detail ? _jsx("p", { className: "ac-notice", children: s.detail }) : null, _jsx(Shape, { service: s }), _jsx(Hostnames, { service: s }), _jsxs("section", { className: "ac-card", "aria-labelledby": "reported", children: [_jsx("h2", { id: "reported", children: "Reported by the cluster" }), _jsxs("dl", { className: "ac-facts", children: [_jsx("dt", { children: "Instances" }), _jsxs("dd", { children: [s.readyInstances, " ready of ", s.desiredInstances] }), _jsx("dt", { children: "Image" }), _jsx("dd", { children: s.image }), _jsx("dt", { children: "Generation" }), _jsx("dd", { children: s.generation }), _jsx("dt", { children: "Database" }), _jsx("dd", { children: s.hosting === "web" ? "None" : (s.database ?? "Nothing reported yet") }), _jsx("dt", { children: "Object storage" }), _jsxs("dd", { children: [objectStorage(s), s.bucketAddress ? _jsxs("span", { className: "ac-hint", "data-bucket-address": true, children: [" ", s.bucketAddress] }) : null] }), s.objectStore ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Object store" }), _jsx("dd", { "data-object-store": s.objectStore, children: stores[s.objectStore] ?? s.objectStore })] })) : null, s.bucketLocation ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Bucket location" }), _jsx("dd", { children: s.bucketLocation })] })) : null, s.softDeleteDays !== undefined && s.softDeleteDays !== null ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Deleted objects" }), _jsxs("dd", { children: ["Recoverable for ", s.softDeleteDays, " days"] })] })) : null, s.storageMove ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Bucket move" }), _jsx("dd", { "data-storage-move": true, children: s.storageMove })] })) : null, s.broker ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Broker" }), _jsx("dd", { children: s.broker })] })) : null, s.grants ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Grants" }), _jsx("dd", { "data-grants": true, children: s.grants })] })) : null, s.crossProjectTopics && s.crossProjectTopics.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Cross-project topics" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.crossProjectTopics.map((t) => (_jsxs("li", { "data-cross-project-topic": `${t.project}/${t.topic}`, "data-granted": t.status === "granted" ? "yes" : "no", children: [_jsx("code", { children: `${t.project}/${t.topic}` }), " ", t.right, " ", t.status === "granted" ? t.status : _jsx("span", { className: "ac-notice", children: t.status })] }, `${t.project}/${t.topic}/${t.right}`))) }) })] })) : null, s.undeclaredTopics && s.undeclaredTopics.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Undeclared topics" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.undeclaredTopics.map((t) => (_jsx("li", { "data-topic": t, children: _jsx("code", { children: t }) }, t))) }) })] })) : null, s.warnings && s.warnings.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Warnings" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.warnings.map((w) => (_jsx("li", { "data-warning": w.kind, children: _jsx("span", { className: "ac-notice", children: w.message }) }, `${w.kind}/${w.component}/${w.topic}`))) }) })] })) : null, s.topicSources && s.topicSources.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Topic sources" }), _jsx("dd", { children: _jsx("div", { className: "ac-table-wrap", children: _jsxs("table", { className: "ac-table", "data-topic-sources": true, children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Component" }), _jsx("th", { scope: "col", children: "Topic" }), _jsx("th", { scope: "col", children: "Group" }), _jsx("th", { scope: "col", className: "ac-num", children: "Version" }), _jsx("th", { scope: "col", className: "ac-num", children: "Lag" }), _jsx("th", { scope: "col", children: "Failing" }), _jsx("th", { scope: "col", children: "Retained" })] }) }), _jsx("tbody", { children: s.topicSources.map((t) => (_jsxs("tr", { "data-topic-source": t.component, "data-failing": t.failing ? "yes" : "no", children: [_jsx("td", { children: t.component }), _jsxs("td", { children: [_jsx("code", { children: t.broker ? `${t.topic}@${t.broker}` : t.topic }), t.contract ? ` as ${t.contract}` : ""] }), _jsx("td", { children: _jsx("code", { children: t.group }) }), _jsx("td", { className: "ac-num", children: t.version }), _jsx("td", { className: "ac-num", children: t.lag ?? "—" }), _jsx("td", { children: t.failing ? _jsx("span", { className: "ac-notice", children: t.failing }) : "—" }), _jsx("td", { "data-gap": t.gap ? (t.gap.compacted ? "compacted" : t.gap.gone ? "gone" : "everything") : "unknown", children: t.gap === undefined || t.gap === null ? ("—") : t.gap.compacted ? ("compacted") : !t.gap.gone ? ("everything") : (_jsxs("details", { children: [_jsx("summary", { children: "earlier messages gone" }), _jsx("ul", { className: "ac-topics", children: t.gap.partitions.map((p) => (_jsxs("li", { "data-partition": p.partition, children: ["p", p.partition, " from ", p.beginning, " (", p.earliestRetained ?? "holds nothing", ")"] }, p.partition))) })] })) })] }, t.component))) })] }) }) })] })) : null, s.topicChecks && s.topicChecks.length > 0 ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Topic checks" }), _jsx("dd", { children: _jsx("ul", { className: "ac-topics", children: s.topicChecks.map((c) => (_jsxs("li", { "data-check": c.state, children: [c.component, " ", c.direction, ": ", c.state, c.state === "mismatch" ? ` (${c.stated ?? "none"})` : ""] }, `${c.component}/${c.direction}`))) }) })] })) : null, _jsx("dt", { children: "Runs as" }), _jsx("dd", { children: runsAs(s) }), s.hosting === "web" ? (_jsxs(_Fragment, { children: [_jsx("dt", { children: "Admits" }), _jsx("dd", { children: ["The internet", ...s.callers.map((c) => (c === "*" ? `Every service in ${p.name}` : c))].join(", ") }), _jsx("dt", { children: "Mounts" }), _jsx("dd", { children: s.mounts.length === 0 ? ("None") : (_jsx("ul", { className: "ac-mounts", children: s.mounts.map((m) => (_jsxs("li", { "data-mount": m.path, children: [_jsx("code", { children: m.path }), " \u2192 ", m.service, m.state && m.state !== "ok" ? ` (${m.state})` : ""] }, m.path))) })) })] })) : null, _jsx("dt", { children: "Stopped by" }), _jsx("dd", { children: s.suspended ? "Its organization is disabled" : s.paused ? "Its members paused it" : "Nobody" }), _jsx("dt", { children: "Report" }), _jsx("dd", { children: s.confirmed ? "Confirmed by the cluster" : "The last known state; the cluster has not confirmed it" })] })] }), _jsx(Panels, { kind: "service", entity: s, loaded: panels })] }));
 }
 export const ErrorBoundary = ConsoleErrorBoundary;

package/dist/routes.js

@@ -34,6 +34,7 @@ export function consoleRoutes(options = {}) {
         page("organizations/:organizationId", "organization"),
         page("organizations/:organizationId/members", "members"),
         page("organizations/:organizationId/tokens", "tokens"),
+        page("organizations/:organizationId/machines", "machines"),
         page("organizations/:organizationId/projects/new", "project-new"),
         page("projects/:projectId", "project"),
         page("projects/:projectId/services/apply", "service-apply"),

package/dist/runtime.d.ts

@@ -3,7 +3,7 @@ import { SealedFlash, type SessionStore } from "./session/cookie-store.ts";
 import { SessionTokenSource, type TokenSource } from "./session/token-source.ts";
 import { type FetchLike } from "./server/transport.ts";
 import type { ConsoleOptions } from "./options.ts";
-import type { DeployTokenCreated } from "./client/schemas.ts";
+import type { DeployTokenCreated, MachineRegistered } from "./client/schemas.ts";
 export interface ConsoleRuntime {
     options: ConsoleOptions;
     mount: string;
@@ -16,6 +16,8 @@ export interface ConsoleRuntime {
     controlPlaneFetch: FetchLike;
     /** A deploy token's secret, carried across one redirect and shown once. */
     tokenFlash: SealedFlash<DeployTokenCreated>;
+    /** A registered machine's client secret, carried across one redirect and shown once, as a token's is. */
+    machineFlash: SealedFlash<MachineRegistered>;
     pendingLogin: SealedFlash<{
         state: string;
         nonce: string;

package/dist/runtime.js

@@ -71,6 +71,7 @@ export function createRuntime(options) {
         sessionTokens,
         controlPlaneFetch,
         tokenFlash: new SealedFlash({ secret: secret ?? "unused", secure, name: "ankka_console_flash", maxAgeSeconds: 60 }),
+        machineFlash: new SealedFlash({ secret: secret ?? "unused", secure, name: "ankka_console_machine_flash", maxAgeSeconds: 60 }),
         pendingLogin: new SealedFlash({ secret: secret ?? "unused", secure, name: "ankka_console_login", maxAgeSeconds: 600 }),
         log: options.log ?? ((line) => process.stdout.write(JSON.stringify(line) + "\n")),
     };

package/dist/testing/fake-control-plane.d.ts

@@ -2,7 +2,8 @@
  * A control plane in one process: every route the console uses, over in-memory state, with the
  * control plane's rules as the console can observe them — who sees what, `404` rather than `403`
  * for an outsider, owner-only operations, tombstoned ids, `409` for a non-empty delete, a disabled
- * organization refusing changes, descriptor validation, a deploy token shown once.
+ * organization refusing changes, descriptor validation, a deploy token shown once, grants made,
+ * listed and ended with their effect, and machines registered with a secret shown once.
  *
  * It answers from state rather than from a script, so it cannot run out quietly. What a test needs
  * to steer is explicit: `script()` makes the next answer on one route a given status, `tick()` moves
@@ -32,6 +33,10 @@ export interface FakeControlPlaneOptions {
     signupUrl?: string;
     baseDomain?: string;
     port?: number;
+    /** The broker's address outside the cluster; unset, the installation does not expose its broker and a machine's topic grant opens nothing. */
+    brokerBootstrap?: string;
+    /** The most bytes a second a machine may be given on either side; the control plane's default is 32 MiB. */
+    byteRateCeiling?: number;
 }
 type Role = "owner" | "member";
 interface Member {
@@ -82,8 +87,55 @@ interface Project {
     topics?: Map<string, TopicRecord>;
     /** Declared brokers beside the installation's, by name. */
     brokers?: Map<string, BrokerRecord>;
+    /** Where the project's new buckets in Google Cloud Storage are made (feature 039). */
+    location?: string;
+    /** Feature 041: restores asked for, in order, and rehearsals. Restores verify at once here. */
+    restores?: {
+        name: string;
+        line: string;
+        moment: string;
+        requestedBy?: string;
+        requestedAt: string;
+    }[];
+    rehearsals?: {
+        name: string;
+        line: string;
+        moment: string;
+        requestedBy?: string;
+        requestedAt: string;
+    }[];
+    databaseHistory?: {
+        kind: string;
+        by?: string;
+        at: string;
+        detail?: string;
+    }[];
+    credentialGeneration?: number;
+    database?: {
+        replicas: number;
+        synchronous: boolean;
+        retentionDays?: number;
+        rehearse?: string;
+    };
+    /** The changes to its topics, newest first. */
+    history?: ProjectHistoryRecord[];
     hidden: boolean;
 }
+interface ProjectHistoryRecord {
+    kind: string;
+    topic: string;
+    actor?: {
+        subject: string;
+        display?: string;
+        administrative: boolean;
+    };
+    at?: string;
+    changes: {
+        setting: string;
+        from: string;
+        to: string;
+    }[];
+}
 interface BrokerRecord {
     bootstrap: string;
     shape: string;
@@ -102,7 +154,31 @@ interface TopicSourceRecord {
     contract?: string;
     lag?: number;
     failing?: string;
+    /** What the broker still holds of the topic, per partition. */
+    gap?: {
+        partitions: {
+            partition: number;
+            beginning: number;
+            earliestRetained?: string;
+        }[];
+        compacted?: boolean;
+        gone?: boolean;
+        readAt?: string;
+    };
+}
+/** A topic's settings, in the words a member types, as the control plane keeps them. */
+interface TopicSettingsRecord {
+    retention: string;
+    retentionSize: string;
+    cleanup: string;
+    tombstoneWindow: string;
+    minCompactionLag: string;
+    maxCompactionLag: string;
+    copies?: number;
+    minInSync?: number;
 }
+declare const SettingNames: readonly ["retention", "retentionSize", "cleanup", "tombstoneWindow", "minCompactionLag", "maxCompactionLag", "copies", "minInSync"];
+type SettingName = (typeof SettingNames)[number];
 interface TopicRecord {
     partitions: number;
     phase?: string;
@@ -113,6 +189,11 @@ interface TopicRecord {
         fingerprint: string;
         schema: unknown;
     };
+    /** Every setting, and the ones the installation supplied; absent for a topic seeded without them. */
+    settings?: TopicSettingsRecord;
+    defaulted?: SettingName[];
+    /** How many copies the broker holds, as a seed says. */
+    copiesHeld?: number;
 }
 /** One side a running service takes on a declared topic with a contract, against it; `topic` is the fake's own, for the project's listing. */
 interface TopicCheckRecord {
@@ -126,6 +207,8 @@ interface TopicCheckRecord {
 interface Service {
     name: string;
     projectId: string;
+    /** Custom hostnames (feature 045), in the order added; the fake serves each at once. */
+    customHostnames?: string[];
     lifecycle: string;
     generation: number;
     image: string;
@@ -136,6 +219,8 @@ interface Service {
     paused: boolean;
     /** What the cluster reports of its database; `null` until it has reported one. */
     database: string | null;
+    /** The restore a member switched it to (feature 041); the project database when absent. */
+    databaseCluster?: string;
     history: {
         kind: string;
         generation: number;
@@ -147,6 +232,7 @@ interface Service {
         at: string;
         image?: string;
         digest?: string;
+        hostname?: string;
         rolledBackTo?: number;
     }[];
     /** The descriptor in force, and the applied ones a rollback can return to, newest first, at most fifty. */
@@ -181,6 +267,12 @@ interface Service {
     ownObjectStore?: boolean;
     /** The descriptor asked that the bucket be reachable from the internet. */
     exposeObjectStorage?: boolean;
+    /** The store the bucket is in, `garage` or `gcs`, as the operator reports it (feature 039). */
+    objectStore?: string;
+    /** Where its bucket in Google Cloud Storage is. */
+    bucketLocation?: string;
+    /** Where a move of its bucket from Garage is, as the control plane phrases it. */
+    storageMove?: string;
     /** What the instances report when asked for the topology; generated from the service when unset. */
     topology?: FakeTopology;
 }
@@ -216,6 +308,48 @@ interface Token {
     expiresAt?: string;
     revoked: boolean;
 }
+/** What one grant opens, flat as the control plane holds it (feature 040). */
+export interface FakeGrantTarget {
+    kind: string;
+    service?: string;
+    method?: string;
+    path?: string;
+    topic?: string;
+    right?: string;
+    decrypt?: boolean;
+}
+interface GrantAct {
+    by?: string;
+    at: string;
+}
+/** A grant a project made; `changes` is what the grantee's side records of it. */
+interface Grant {
+    id: string;
+    projectId: string;
+    grantee: string;
+    target: FakeGrantTarget;
+    state: string;
+    granted: GrantAct;
+    answered?: GrantAct;
+    ended?: GrantAct;
+    changes: {
+        change: string;
+        by?: string;
+        at: string;
+    }[];
+}
+interface Machine {
+    organizationId: string;
+    name: string;
+    registeredBy?: string;
+    registeredAt: string;
+    byteRates?: {
+        produceBytesPerSecond: number;
+        consumeBytesPerSecond: number;
+        requestPercentage: number;
+    };
+    hidden: boolean;
+}
 export interface FakeControlPlane {
     url: string;
     server: Server;
@@ -242,11 +376,36 @@ export interface FakeControlPlane {
         services: Map<string, Service>;
         tokens: Map<string, Token>;
         tombstones: Set<string>;
+        /** Every project's grants, by id. */
+        grants: Map<string, Grant>;
+        /** Registered machines, by `<organization>/<name>`. */
+        machines: Map<string, Machine>;
     };
     seed(seed: FakeSeed): void;
     close(): Promise<void>;
 }
+/** The installation's cloud, as `GET /installation` reports it (feature 044). */
+export interface FakeCloud {
+    provider: string;
+    account: string;
+    location: string;
+    kmsKey?: string;
+}
 export interface FakeSeed {
+    /** The installation's cloud (feature 044); `null` for an installation that names none, as until seeded. */
+    cloud?: FakeCloud | null;
+    /** Where the installation keeps new buckets (feature 039); Garage until a suite says otherwise. */
+    objectStore?: "garage" | "gcs";
+    /** Feature 041: start held, as a control plane whose own database was restored. */
+    held?: {
+        targetTime: string;
+        services?: {
+            project: string;
+            service: string;
+            recordedImage?: string;
+            clusterImage?: string;
+        }[];
+    };
     organizations?: {
         id: string;
         name: string;
@@ -283,6 +442,9 @@ export interface FakeSeed {
         provisionObjectStorage?: boolean;
         exposeObjectStorage?: boolean;
         ownObjectStore?: boolean;
+        /** The store its bucket is in, `garage` or `gcs`. */
+        objectStore?: string;
+        bucketLocation?: string;
     }[];
     /** Project secrets, by name and entry: a value each, never listed. */
     secrets?: {
@@ -310,6 +472,22 @@ export interface FakeSeed {
             name: string;
             schema: unknown;
         };
+        /** Its settings, each the installation's shipped default unless given; none for a topic from before settings. */
+        settings?: Partial<TopicSettingsRecord>;
+    }[];
+    /** Grants a project made, as if an owner had made them: accepted within its organization, pending to another, unless `state` says. */
+    grants?: {
+        projectId: string;
+        grantee: string;
+        target: FakeGrantTarget;
+        state?: string;
+        by?: string;
+    }[];
+    /** Machines registered on an organization. */
+    machines?: {
+        organizationId: string;
+        name: string;
+        byteRates?: Machine["byteRates"];
     }[];
 }
 export declare function fakeControlPlane(options?: FakeControlPlaneOptions): Promise<FakeControlPlane>;