ellf-cli 6.0.4__tar.gz → 6.0.5__tar.gz

{ellf_cli-6.0.4/ellf_cli.egg-info → ellf_cli-6.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ellf-cli
-Version: 6.0.4
+Version: 6.0.5
 Summary: Ellf Command Line Interface
 Home-page: https://prodi.gy
 Author: ExplosionAI GmbH

{ellf_cli-6.0.4 → ellf_cli-6.0.5}/README.md

@@ -1248,6 +1248,111 @@ Manage TLS certificates for local cluster access. Use --self-signed when you hav
 | `--namespace` | `str` | Kubernetes namespace | `'ellf'` |
 | `--output` | `str` | Output format for trust commands: human, json, shell | `'human'` |
 
+### `ellf services`
+
+#### `ellf services create`
+
+Create a new service. The available service recipes are fetched from your cluster and are added as dynamic subcommands. You can see more details and available arguments by calling the subcommand with --help, e.g. create [name] --help
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `--exists-ok` | `bool` | Don't raise an error if it exists | `False` |
+| `--no-start` | `bool` | Don't start {noun} after creation | `False` |
+| `--no-wait` | `bool` | Don't wait for the service to be ready after starting | `False` |
+| `--help`, `-h` | `bool` | Show help message | `False` |
+| `_extra` | `str` |  | `[]` |
+
+#### `ellf services list`
+
+List the services on the cluster.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `--select` | `list[str]` | Comma-separated fields to select and show in output. Available: ['id', 'created', 'updated', 'cluster_id', 'name', 'project_id', 'job_type', 'plan', 'cli_command', 'state'] | `['id', 'name', 'state', 'project_name']` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services info`
+
+Print information about a service on the cluster.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `Union[str, UUID]` | Name or ID of the service |  |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--select` | `list[str]` | Comma-separated fields to select and show in output. Available: ['id', 'created', 'updated', 'cluster_id', 'name', 'project_id', 'job_type', 'plan', 'cli_command', 'recipe_name', 'recipe_title', 'project_name', 'error', 'last_execution_id', 'url', 'url_ui', 'url_logs', 'created_by_user'] | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services logs`
+
+Get logs for a service on the cluster.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `str` | Name or ID of the service (or the last service if not set) | `None` |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+| `--errors` | `bool` | Show structured error information instead of full logs | `False` |
+| `--query` | `str` | Filter log lines matching this text (requires Loki) | `None` |
+
+#### `ellf services start`
+
+Start a service on the cluster.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `str` | Name or ID of the service (or the last service if not set) | `None` |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--worker-class` | `str` | Worker class to launch the service on. Generally one of: ['medium', 'large', 'gpu'] | `None` |
+| `--no-wait` | `bool` | Don't wait for the service to be ready after starting | `False` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services stop`
+
+Stop a service on the cluster.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `str` | Name or ID of the service (or the last service if not set) | `None` |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services delete`
+
+Delete a service by name or ID.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `Union[str, UUID]` | Name or ID of the service |  |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services url`
+
+Print the bearer-token-authenticated URL for a service. Mints a fresh 90-day token via ``POST /v1/service/issue-token`` and formats it together with the service's public URL so the result can be dropped into an MCP client config or curl invocation: curl -H "Authorization: Bearer <token>" <url> Use ``services rotate-token`` to mint a new token without printing the URL again.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `Union[str, UUID]` | Name or ID of the service |  |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
+#### `ellf services rotate-token`
+
+Mint a fresh 90-day token for an existing service. Issuing a new token does not invalidate previous ones -- they remain valid until their own expiration. Use this when the previous token is leaked, or when you want a longer remaining window for an MCP client config.
+
+| Argument | Type | Description | Default |
+| --- | --- | --- | --- |
+| `name_or_id` | `Union[str, UUID]` | Name or ID of the service |  |
+| `project_id` | `str` | Name, slug, or ID of service's project (or the last project if not set) | `None` |
+| `cluster_id` | `str` | Name, slug, or ID of the cluster to search for service name (or the last cluster if not set) | `None` |
+| `--json` | `bool` | Output the result as JSON | `False` |
+
 ### `ellf support`
 
 #### `ellf support create`

{ellf_cli-6.0.4 → ellf_cli-6.0.5}/ellf_cli/about.json

@@ -1,7 +1,7 @@
 {
   "title": "Ellf CLI",
   "name": "ellf-cli",
-  "version": "6.0.4",
+  "version": "6.0.5",
   "summary": "Ellf Command Line Interface",
   "uri": "https://prodi.gy",
   "prog": "ellf",

{ellf_cli-6.0.4 → ellf_cli-6.0.5}/ellf_cli/commands/__init__.py

@@ -19,6 +19,7 @@ from . import (
     publish_data,
     recipes,
     secrets,
+    services,
     support,
     tasks,
     todos,
@@ -50,6 +51,7 @@ __all__ = [
     "recipes",
     "actions",
     "tasks",
+    "services",
     "secrets",
     "support",
     "general",

{ellf_cli-6.0.4 → ellf_cli-6.0.5}/ellf_cli/commands/_recipe_subcommand.py

@@ -25,6 +25,7 @@ from ellf_pam_sdk.models import (
     RecipeDetail,
     RecipeListingLatest,
     RecipePlanCreating,
+    ServiceCreating,
     TaskCreating,
 )
 from ellf_pam_sdk.recipe_utils import (
@@ -53,7 +54,7 @@ def get_converter(arg_type: type) -> ConverterType | None:
 def _get_noun(recipe: RecipeDetail) -> str:
     """Derive a human-readable noun from a recipe's job_type or is_action flag."""
     jt = getattr(recipe, "job_type", None)
-    if jt in ("task", "action", "agent"):
+    if jt in ("task", "action", "agent", "service"):
         return jt
     return "action" if recipe.is_action else "task"
 
@@ -135,6 +136,10 @@ def create_from_recipe(
         job_id = _create_agent(
             auth.client, task_or_action_name, project_id, plan, exists_ok=exists_ok
         )
+    elif jt == "service":
+        job_id = _create_service(
+            auth.client, task_or_action_name, project_id, plan, exists_ok=exists_ok
+        )
     elif recipe.is_action:
         job_id = _create_action(
             auth.client, task_or_action_name, project_id, plan, exists_ok=exists_ok
@@ -381,6 +386,31 @@ def _create_agent(
     return JobID(id=agent.id, job_type=JobType.agent)
 
 
+def _create_service(
+    client: Client,
+    name: str | None,
+    project_id: UUID,
+    plan: RecipePlanCreating,
+    exists_ok: bool = False,
+) -> JobID:
+    body = ServiceCreating(name=name, project_id=project_id, plan=plan)
+    try:
+        service = client.service.create(body)
+    except EllfErrors.ProjectNotFound:
+        err = Messages.E013.format(name=project_id)
+        raise CLIError(err)
+    except EllfErrors.ServiceExists:
+        if exists_ok:
+            msg.info(Messages.T001.format(noun="service", name=name))
+            service = client.service.read(name=name, project_id=project_id)
+            return JobID(id=service.id, job_type=JobType.service)
+        err = Messages.E014.format(noun="service", name=name, project=project_id)
+        raise CLIError(err)
+    except EllfErrors.ServiceInvalid:
+        raise CLIError(Messages.E004.format(noun="service", name=name))
+    return JobID(id=service.id, job_type=JobType.service)
+
+
 def _uuid7() -> UUID:
     """Generate a UUIDv7 (time-sortable) as a stdlib uuid.UUID."""
     return UUID(int=uuid_utils.uuid7().int)

ellf_cli-6.0.5/ellf_cli/commands/services.py

@@ -0,0 +1,390 @@
+import builtins
+from collections.abc import Sequence
+from typing import Optional, Union
+from uuid import UUID
+
+from radicli import Arg
+from wasabi import msg
+
+from ellf_pam_sdk.models import ServiceDetail, ServiceSummary
+
+from ..cli import cli
+from ..errors import BrokerError, CLIError, EllfError, HTTPXErrors
+from ..messages import Messages
+from ..query import (
+    delete_job,
+    resolve_recipe,
+    resolve_service,
+    start_job,
+    stop_job,
+)
+from ..ui import (
+    print_args_table,
+    print_info_table,
+    print_logs,
+    print_mutation_result,
+    print_recipes_help,
+    print_table_with_select,
+)
+from ._recipe_subcommand import (
+    create_from_recipe,
+    create_from_recipe_file,
+    request_recipes,
+)
+from ._state import get_auth_state, get_saved_settings
+
+
+@cli.subcommand_with_extra(
+    "services",
+    "create",
+    exists_ok=Arg("--exists-ok", help=Messages.exists_ok),
+    no_start=Arg("--no-start", help=Messages.no_start),
+    no_wait=Arg("--no-wait", help=Messages.no_wait.format(noun="service")),
+    _show_help=Arg("--help", "-h", help=Messages.help),
+)
+def create(
+    exists_ok: bool = False,
+    no_start: bool = False,
+    no_wait: bool = False,
+    _show_help: bool = False,
+    _extra: builtins.list[str] = [],
+) -> UUID | None:
+    """
+    Create a new service. The available service recipes are fetched from your
+    cluster and are added as dynamic subcommands. You can see more details
+    and available arguments by calling the subcommand with --help, e.g. create
+    [name] --help
+    """
+    auth = get_auth_state()
+    settings = get_saved_settings()
+    is_file_mode = settings.recipes_file is not None
+    try:
+        schemas = request_recipes(auth=auth, job_type="service")
+    except EllfError as e:
+        raise CLIError(Messages.E009, e)
+    except HTTPXErrors as e:
+        raise CLIError(Messages.E009, e)
+    if not _extra:
+        print_recipes_help(schemas, "Create a new service", "services create")
+        return None
+    args = [*_extra]
+    name = args.pop(0)
+    if name not in schemas:
+        opts = f"Available: {', '.join(schemas.keys())}"
+        raise CLIError(Messages.E010.format(noun="service", name=name), opts)
+    if is_file_mode:
+        schema = schemas[name]
+        job_spec = create_from_recipe_file(
+            schema, args, command="services", show_help=_show_help, job_type="service"
+        )
+        msg.good(Messages.T002.format(noun="service", name=job_spec.name))
+        print_args_table(job_spec.plan.args or {}, job_spec.plan.cli_names or {})
+        if not no_start:
+            response = auth.broker_client.jobs.start_job(job_spec)
+            if response.cluster_change is not None:
+                msg.good(Messages.T005.format(noun="service", name=job_spec.job_id))
+            elif response.cluster_error is not None:
+                raise CLIError(
+                    Messages.E025.format(noun="service", name=job_spec.job_id),
+                    response.cluster_error,
+                )
+        return job_spec.job_id
+    schema = resolve_recipe(name, cluster_id=auth.cluster_id)
+    service_id, plan = create_from_recipe(
+        schema, args, command="services", show_help=_show_help, exists_ok=exists_ok
+    )
+    msg.good(Messages.T002.format(noun="service", name=service_id))
+    print_args_table(plan.args, schema.form_schema.cli_names)
+    if not no_start:
+        try:
+            start(service_id, no_wait=no_wait)
+        except Exception:
+            auth.client.service.delete(id=service_id)
+            raise
+    return service_id
+
+
+@cli.subcommand(
+    "services",
+    "list",
+    select=Arg(
+        "--select",
+        help=Messages.select.format(
+            opts=[*builtins.list(ServiceSummary.model_fields), "state"]
+        ),
+    ),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def list(
+    select: builtins.list[str] = ["id", "name", "state", "project_name"],
+    as_json: bool = False,
+) -> Sequence[ServiceSummary]:
+    """List the services on the cluster."""
+    auth = get_auth_state()
+    items = builtins.list(auth.client.service.all(page_size=100))
+    if "state" in select and items:
+        job_ids = [item.id for item in items]
+        try:
+            statuses = auth.broker_client.jobs.get_batch_status(job_ids).statuses
+        except (BrokerError, *HTTPXErrors):
+            statuses = {}
+        enriched = []
+        for item in items:
+            d = item.model_dump(include=set(s for s in select if s != "state"))
+            status = statuses.get(str(item.id))
+            d["state"] = status.state.value if status else "unknown"
+            enriched.append(d)
+        print_table_with_select(enriched, select=select, as_json=as_json)
+    else:
+        print_table_with_select(items, select=select, as_json=as_json)
+    return items
+
+
+@cli.subcommand(
+    "services",
+    "info",
+    name_or_id=Arg(help=Messages.name_or_id.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    select=Arg(
+        "--select",
+        help=Messages.select.format(opts=builtins.list(ServiceDetail.model_fields)),
+    ),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def info(
+    name_or_id: Union[str, UUID],
+    cluster_id: Optional[Union[str, UUID]] = None,
+    project_id: Optional[Union[str, UUID]] = None,
+    select: Optional[builtins.list[str]] = None,
+    as_json: bool = False,
+) -> ServiceDetail:
+    """Print information about a service on the cluster."""
+    auth = get_auth_state()
+    res = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    try:
+        status = auth.broker_client.jobs.get_status(res.id)
+        msg.text(f"State: {status.state.value}", icon="info")
+    except (BrokerError, *HTTPXErrors):
+        pass
+    print_info_table(res, exclude=["plan"], as_json=as_json, select=select)
+    return res
+
+
+@cli.subcommand(
+    "services",
+    "logs",
+    name_or_id=Arg(help=Messages.name_or_id_optional.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+    show_errors=Arg(
+        "--errors", help="Show structured error information instead of full logs"
+    ),
+    query=Arg("--query", help="Filter log lines matching this text (requires Loki)"),
+)
+def logs(
+    name_or_id: Optional[Union[str, UUID]] = None,
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    as_json: bool = False,
+    show_errors: bool = False,
+    query: Optional[str] = None,
+) -> str | None:
+    """Get logs for a service on the cluster."""
+    job = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    auth = get_auth_state()
+    if job.last_execution_id is None:
+        raise CLIError(Messages.E051.format(noun="service", name=job.name, id=job.id))
+    if show_errors:
+        try:
+            resp = auth.broker_client.jobs.errors(job_id=job.last_execution_id)
+        except BrokerError as e:
+            raise CLIError(Messages.E011.format(noun="service"), e)
+        if as_json:
+            print(resp.model_dump_json(indent=2))
+        else:
+            msg.text(f"State: {resp.state}", icon="info")
+            if resp.errors:
+                for err in resp.errors:
+                    msg.fail(err.message)
+                    if err.traceback:
+                        print(err.traceback)
+                        print()
+            elif resp.tail:
+                msg.warn("No structured errors found. Last 50 lines:")
+                print(resp.tail)
+            else:
+                msg.good("No errors found")
+        return None
+    try:
+        text = auth.broker_client.jobs.logs(job_id=job.last_execution_id, query=query)
+    except BrokerError as e:
+        raise CLIError(Messages.E011.format(noun="service"), e)
+    print_logs(text, as_json=as_json)
+    return text
+
+
+@cli.subcommand(
+    "services",
+    "start",
+    name_or_id=Arg(help=Messages.name_or_id_optional.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    worker_class=Arg(
+        "--worker-class",
+        help=Messages.recipe_worker_class.format(noun="service"),
+    ),
+    no_wait=Arg("--no-wait", help=Messages.no_wait.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def start(
+    name_or_id: Optional[Union[str, UUID]] = None,
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    worker_class: Optional[str] = None,
+    no_wait: bool = False,
+    as_json: bool = False,
+) -> UUID:
+    """Start a service on the cluster."""
+    job = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    start_job(
+        job,
+        worker_class,
+        get_auth_state(),
+        wait=not no_wait,
+        quiet=as_json,
+    )
+    if as_json:
+        print_mutation_result(
+            {"id": str(job.id), "status": "started"}, "", as_json=True
+        )
+    return job.id
+
+
+@cli.subcommand(
+    "services",
+    "stop",
+    name_or_id=Arg(help=Messages.name_or_id_optional.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def stop(
+    name_or_id: Optional[Union[str, UUID]] = None,
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    as_json: bool = False,
+) -> UUID:
+    """Stop a service on the cluster."""
+    job = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    stop_job(job, get_auth_state(), quiet=as_json)
+    if as_json:
+        print_mutation_result(
+            {"id": str(job.id), "status": "stopped"}, "", as_json=True
+        )
+    return job.id
+
+
+@cli.subcommand(
+    "services",
+    "delete",
+    name_or_id=Arg(help=Messages.name_or_id.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def delete(
+    name_or_id: Union[str, UUID],
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    as_json: bool = False,
+) -> UUID:
+    """Delete a service by name or ID."""
+    job = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    delete_job(job, get_auth_state(), quiet=as_json)
+    if as_json:
+        print_mutation_result({"id": str(job.id), "deleted": True}, "", as_json=True)
+    return job.id
+
+
+@cli.subcommand(
+    "services",
+    "url",
+    name_or_id=Arg(help=Messages.name_or_id.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def url(
+    name_or_id: Union[str, UUID],
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    as_json: bool = False,
+) -> dict[str, str]:
+    """Print the bearer-token-authenticated URL for a service.
+
+    Mints a fresh 90-day token via ``POST /v1/service/issue-token`` and
+    formats it together with the service's public URL so the result can
+    be dropped into an MCP client config or curl invocation:
+
+        curl -H "Authorization: Bearer <token>" <url>
+
+    Use ``services rotate-token`` to mint a new token without printing
+    the URL again.
+    """
+    auth = get_auth_state()
+    service = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    token = auth.client.service.issue_token(id=service.id)
+    result = {
+        "url": service.url,
+        "access_token": token.access_token,
+        "expires_at": token.expires_at.isoformat(),
+    }
+    if as_json:
+        print_mutation_result(result, "", as_json=True)
+    else:
+        msg.good(f"URL:        {service.url}")
+        msg.text(f"Token:      {token.access_token}")
+        msg.text(f"Expires at: {token.expires_at.isoformat()}")
+        msg.text(
+            f"Try it:     curl -H 'Authorization: Bearer {token.access_token}' "
+            f"{service.url}"
+        )
+    return result
+
+
+@cli.subcommand(
+    "services",
+    "rotate-token",
+    name_or_id=Arg(help=Messages.name_or_id.format(noun="service")),
+    project_id=Arg(help=Messages.project_id.format(noun="service")),
+    cluster_id=Arg(help=Messages.cluster_id.format(noun="service")),
+    as_json=Arg("--json", help=Messages.as_json),
+)
+def rotate_token(
+    name_or_id: Union[str, UUID],
+    project_id: Optional[Union[str, UUID]] = None,
+    cluster_id: Optional[Union[str, UUID]] = None,
+    as_json: bool = False,
+) -> dict[str, str]:
+    """Mint a fresh 90-day token for an existing service.
+
+    Issuing a new token does not invalidate previous ones -- they remain
+    valid until their own expiration. Use this when the previous token
+    is leaked, or when you want a longer remaining window for an MCP
+    client config.
+    """
+    auth = get_auth_state()
+    service = resolve_service(name_or_id, cluster_id=cluster_id, project_id=project_id)
+    token = auth.client.service.issue_token(id=service.id)
+    result = {
+        "access_token": token.access_token,
+        "expires_at": token.expires_at.isoformat(),
+    }
+    if as_json:
+        print_mutation_result(result, "", as_json=True)
+    else:
+        msg.good(f"Token:      {token.access_token}")
+        msg.text(f"Expires at: {token.expires_at.isoformat()}")
+    return result

{ellf_cli-6.0.4 → ellf_cli-6.0.5}/ellf_cli/config.py

@@ -38,6 +38,7 @@ class SavedSettings(BaseModel):
     task: UUID | None = None
     action: UUID | None = None
     agent: UUID | None = None
+    service: UUID | None = None
     pam_host: str | None = DEFAULT_PAM_HOST
     cluster_id: UUID | None = None
     org_id: UUID | None = None
@@ -51,6 +52,7 @@ class SavedSettings(BaseModel):
             task=None,
             action=None,
             agent=None,
+            service=None,
             pam_host=DEFAULT_PAM_HOST,
             cluster_id=None,
             org_id=None,
@@ -68,11 +70,12 @@ class SavedSettings(BaseModel):
                 raise
 
     def reset_defaults(self) -> None:
-        """Reset defaut project/task/action/agent, e.g. on host changes."""
+        """Reset defaut project/task/action/agent/service, e.g. on host changes."""
         self.project = None
         self.task = None
         self.action = None
         self.agent = None
+        self.service = None
 
     def to_json(self) -> JSONableDict:
         data = {}
@@ -98,7 +101,9 @@ class SavedSettings(BaseModel):
     @overload
     def update(
         self,
-        field: Literal["project", "task", "action", "agent", "cluster_id", "org_id"],
+        field: Literal[
+            "project", "task", "action", "agent", "service", "cluster_id", "org_id"
+        ],
         value: UUID | None = None,
     ) -> UUID | None: ...
 
@@ -111,6 +116,7 @@ class SavedSettings(BaseModel):
             "task",
             "action",
             "agent",
+            "service",
             "cluster_id",
             "org_id",
             "recipes_file",