remove the 1NFR4 dashboard panel and the now-writer-less audit log
This commit is contained in:
damocles
mara
parent
c3cd36bc41
commit
22adfd1451
21 changed files with 61 additions and 983 deletions
|
|
@ -1,13 +1,11 @@
|
|||
// /logs.html entry point: log viewer with four sub-tabs (AGENT, INFRA,
|
||||
// SYSTEM, AUDIT). Build log history has moved to /builds.html.
|
||||
// /logs.html entry point: log viewer with three sub-tabs (AGENT, INFRA,
|
||||
// SYSTEM). Build log history has moved to /builds.html.
|
||||
// AGENT — per-container journald viewer, backed by GET /api/journal/{name}
|
||||
// INFRA — infra-container journald viewer (hive-ci, hive-forge, …),
|
||||
// same API but full machine journal only (no unit filter)
|
||||
// SYSTEM — host service logs, backed by GET /api/journal-host
|
||||
// AUDIT — agent-initiated privileged-action trail, GET /api/audit-log;
|
||||
// live-appends via the `audit_entry_added` /dashboard/stream event
|
||||
//
|
||||
// Tab routing via URL hash (#agent, #infra, #system, #audit). Default: #agent.
|
||||
// Tab routing via URL hash (#agent, #infra, #system). Default: #agent.
|
||||
//
|
||||
// URL params `?agent=name` and `?unit=svc` pre-select the agent + unit.
|
||||
// When `?agent=` names an infra container the INFRA tab is activated instead.
|
||||
|
|
@ -15,10 +13,9 @@
|
|||
// INFRA, and SYSTEM tabs so the operator knows how stale the output is.
|
||||
|
||||
import {
|
||||
$, fmtAgeSecs, openStream, initServerWarnings,
|
||||
$, fmtAgeSecs, initServerWarnings,
|
||||
} from './common.js';
|
||||
import { el } from '@hive/shared/dom.js';
|
||||
import { epochSec } from './util.js';
|
||||
import '@hive/shared/hive-tab-strip.js';
|
||||
|
||||
(() => {
|
||||
|
|
@ -127,12 +124,25 @@ import '@hive/shared/hive-tab-strip.js';
|
|||
if (infraSelect) infraSelect.addEventListener('change', fetchInfra);
|
||||
if (infraRefresh) infraRefresh.addEventListener('click', fetchInfra);
|
||||
|
||||
// Fixed allowlist — the four hive infra services never change at
|
||||
// runtime, and there's no dashboard API exposing just the name list
|
||||
// (the one that used to, `/api/state`'s `infra_containers` field, was
|
||||
// start/stop-panel-only and is gone). Mirrors `hive_priv_sock::InfraContainer::ALL`.
|
||||
const INFRA_NAMES = ['hive-ci', 'hive-forge', 'hive-gateway', 'hive-matrix'];
|
||||
|
||||
// ─── container list init ──────────────────────────────────────────────
|
||||
// Fetch /api/state once and populate both the AGENT selector (agents only)
|
||||
// and the INFRA selector (infra containers only). Also handles the
|
||||
// ?agent= / ?unit= deep-link, routing to the INFRA tab when the named
|
||||
// container is an infra container.
|
||||
// Fetch /api/state once to populate the AGENT selector (agents only);
|
||||
// INFRA is a fixed list (see INFRA_NAMES). Also handles the ?agent= /
|
||||
// ?unit= deep-link, routing to the INFRA tab when the named container
|
||||
// is an infra container.
|
||||
async function loadContainerLists() {
|
||||
if (infraSelect) {
|
||||
infraSelect.replaceChildren();
|
||||
infraSelect.append(el('option', { value: '' }, '— select container —'));
|
||||
for (const name of INFRA_NAMES) {
|
||||
infraSelect.append(el('option', { value: name }, name));
|
||||
}
|
||||
}
|
||||
try {
|
||||
const resp = await fetch('/api/state');
|
||||
if (!resp.ok) return;
|
||||
|
|
@ -147,21 +157,11 @@ import '@hive/shared/hive-tab-strip.js';
|
|||
}
|
||||
}
|
||||
|
||||
// Populate INFRA selector.
|
||||
const infraNames = new Set((state.infra_containers || []).map((c) => c.name));
|
||||
if (infraSelect) {
|
||||
infraSelect.replaceChildren();
|
||||
infraSelect.append(el('option', { value: '' }, '— select container —'));
|
||||
for (const name of infraNames) {
|
||||
infraSelect.append(el('option', { value: name }, name));
|
||||
}
|
||||
}
|
||||
|
||||
// Deep-link: honour ?agent= and ?unit= URL params.
|
||||
const urlAgent = new URLSearchParams(location.search).get('agent');
|
||||
const urlUnit = new URLSearchParams(location.search).get('unit');
|
||||
if (urlAgent) {
|
||||
if (infraNames.has(urlAgent)) {
|
||||
if (INFRA_NAMES.includes(urlAgent)) {
|
||||
// Route to INFRA tab.
|
||||
logTabs.show('infra');
|
||||
if (infraSelect) {
|
||||
|
|
@ -225,180 +225,25 @@ import '@hive/shared/hive-tab-strip.js';
|
|||
if (systemUnitSelect) systemUnitSelect.addEventListener('change', fetchSystem);
|
||||
if (systemRefresh) systemRefresh.addEventListener('click', fetchSystem);
|
||||
|
||||
// ─── AUDIT tab ──────────────────────────────────────────────────────
|
||||
// Operator-visible trail of agent-initiated privileged actions, backed
|
||||
// by GET /api/audit-log → { entries: [...], total: N } (entries
|
||||
// newest-first, server-clamped to 500; `total` drives "latest 500 of N").
|
||||
// Per-entry: { id, ts_unix (secs), agent, action, target, outcome, detail }.
|
||||
// outcome is 'ok' | 'err'; a capability denial is 'err' with detail
|
||||
// starting "denied:" — coloured amber to read apart from an execution
|
||||
// failure. Lazy-fetched on tab show (like SYSTEM); filter is a
|
||||
// client-side substring on the cached rows.
|
||||
|
||||
const auditList = $('audit-list');
|
||||
const auditFilter = $('audit-filter');
|
||||
const auditRefresh = $('audit-refresh');
|
||||
const auditCount = $('audit-count');
|
||||
|
||||
let auditEntries = [];
|
||||
let auditTotal = 0;
|
||||
let auditFetching = false;
|
||||
|
||||
// ts_unix arrives as an RFC 3339 string — fmtAgeSecs wants an age
|
||||
// in seconds, so normalize via epochSec first.
|
||||
function auditFmtWhen(ts) {
|
||||
if (!ts) return '';
|
||||
const age = Math.floor(Date.now() / 1000) - epochSec(ts);
|
||||
return fmtAgeSecs(Math.max(0, age)) + ' ago';
|
||||
}
|
||||
|
||||
// outcome → badge. 'ok' green; an 'err' whose detail starts "denied:" is a
|
||||
// capability refusal (amber, labelled "denied"); other 'err' red. The
|
||||
// literal outcome is the fallback label so a new value still renders.
|
||||
function auditOutcomeBadge(outcome, detail) {
|
||||
const denied = outcome === 'err'
|
||||
&& typeof detail === 'string' && detail.startsWith('denied:');
|
||||
const cls = outcome === 'ok'
|
||||
? 'audit-outcome audit-outcome-ok'
|
||||
: denied
|
||||
? 'audit-outcome audit-outcome-denied'
|
||||
: 'audit-outcome audit-outcome-err';
|
||||
return el('span', { class: cls }, denied ? 'denied' : (outcome || '?'));
|
||||
}
|
||||
|
||||
function auditMatches(e, q) {
|
||||
if (!q) return true;
|
||||
return `${e.agent || ''} ${e.action || ''} ${e.target || ''} ${e.detail || ''}`
|
||||
.toLowerCase().includes(q);
|
||||
}
|
||||
|
||||
function renderAudit() {
|
||||
if (!auditList) return;
|
||||
const q = (auditFilter ? auditFilter.value : '').trim().toLowerCase();
|
||||
const rows = auditEntries.filter((e) => auditMatches(e, q));
|
||||
|
||||
if (auditCount) {
|
||||
const shown = auditEntries.length;
|
||||
const clamped = auditTotal > shown;
|
||||
let txt = clamped
|
||||
? `latest ${shown} of ${auditTotal}`
|
||||
: `${shown} entr${shown === 1 ? 'y' : 'ies'}`;
|
||||
if (q) txt += ` · ${rows.length} match${rows.length === 1 ? '' : 'es'}`;
|
||||
auditCount.textContent = txt;
|
||||
}
|
||||
|
||||
auditList.replaceChildren();
|
||||
if (rows.length === 0) {
|
||||
auditList.append(el('p', { class: 'meta' },
|
||||
q ? '(no matching entries)' : '(no privileged actions recorded yet)'));
|
||||
return;
|
||||
}
|
||||
|
||||
const table = el('table', { class: 'audit-table' });
|
||||
table.append(el('thead', {},
|
||||
el('tr', {},
|
||||
el('th', { class: 'audit-when-th' }, 'when'),
|
||||
el('th', {}, 'agent'),
|
||||
el('th', {}, 'action'),
|
||||
el('th', {}, 'target'),
|
||||
el('th', { class: 'audit-outcome-th' }, 'outcome'),
|
||||
el('th', {}, 'detail'),
|
||||
)));
|
||||
const tbody = el('tbody', {});
|
||||
for (const e of rows) {
|
||||
tbody.append(el('tr', {},
|
||||
el('td', {
|
||||
class: 'audit-when meta',
|
||||
title: e.ts_unix ? new Date(e.ts_unix).toISOString() : '',
|
||||
}, auditFmtWhen(e.ts_unix)),
|
||||
el('td', { class: 'audit-agent' }, e.agent || ''),
|
||||
el('td', { class: 'audit-action' }, e.action || ''),
|
||||
el('td', { class: 'audit-target' }, e.target || ''),
|
||||
el('td', { class: 'audit-outcome-td' }, auditOutcomeBadge(e.outcome, e.detail)),
|
||||
el('td', { class: 'audit-detail meta' }, e.detail || ''),
|
||||
));
|
||||
}
|
||||
table.append(tbody);
|
||||
const wrap = el('div', { class: 'audit-table-wrap' });
|
||||
wrap.append(table);
|
||||
auditList.append(wrap);
|
||||
}
|
||||
|
||||
async function fetchAudit() {
|
||||
if (!auditList || auditFetching) return;
|
||||
auditFetching = true;
|
||||
try {
|
||||
const resp = await fetch('/api/audit-log');
|
||||
if (!resp.ok) throw new Error('http ' + resp.status);
|
||||
const data = await resp.json();
|
||||
auditEntries = Array.isArray(data.entries) ? data.entries : [];
|
||||
auditTotal = typeof data.total === 'number' ? data.total : auditEntries.length;
|
||||
renderAudit();
|
||||
} catch (err) {
|
||||
auditList.replaceChildren();
|
||||
auditList.append(el('p', { class: 'meta' }, 'fetch failed: ' + err));
|
||||
} finally {
|
||||
auditFetching = false;
|
||||
}
|
||||
}
|
||||
|
||||
if (auditRefresh) auditRefresh.addEventListener('click', fetchAudit);
|
||||
if (auditFilter) auditFilter.addEventListener('input', renderAudit);
|
||||
|
||||
// Live-append: an `audit_entry_added` event on /dashboard/stream carries a
|
||||
// new row flattened at the top level ({ kind, seq, id, ts_unix, agent,
|
||||
// action, target, outcome, detail }). Prepend it (newest-first), de-duped
|
||||
// by id against whatever the cold fetch already returned, and bump the
|
||||
// total so the "latest N of M" header stays right. Re-render only while
|
||||
// the AUDIT tab is in view; otherwise the next tab-show fetch is
|
||||
// authoritative anyway. Wired into the shared stream onmessage above.
|
||||
function onAuditEntryAdded(ev) {
|
||||
if (auditEntries.some((e) => e.id === ev.id)) return;
|
||||
auditEntries.unshift({
|
||||
id: ev.id, ts_unix: ev.ts_unix, agent: ev.agent, action: ev.action,
|
||||
target: ev.target, outcome: ev.outcome, detail: ev.detail,
|
||||
});
|
||||
auditTotal += 1;
|
||||
if (logTabs.active() === 'audit') renderAudit();
|
||||
}
|
||||
|
||||
// ─── init ─────────────────────────────────────────────────────────────
|
||||
|
||||
// Wire the shared tab strip now that fetchSystem + the element refs it
|
||||
// needs are defined. Its initial show() paints the active pane and, if
|
||||
// the deep-linked tab is SYSTEM/AUDIT, kicks off the lazy fetch via onShow.
|
||||
// the deep-linked tab is SYSTEM, kicks off the lazy fetch via onShow.
|
||||
// Default: AGENT (build logs moved to /builds.html).
|
||||
logTabs = document.getElementById('logs-tabbar').configure({
|
||||
tabs: [
|
||||
{ id: 'agent', label: 'AGENT' },
|
||||
{ id: 'infra', label: 'INFRA' },
|
||||
{ id: 'system', label: 'SYSTEM' },
|
||||
{ id: 'audit', label: 'AUDIT' },
|
||||
],
|
||||
defaultId: 'agent',
|
||||
onShow: (id) => {
|
||||
if (id === 'system') fetchSystem();
|
||||
else if (id === 'audit') fetchAudit();
|
||||
},
|
||||
});
|
||||
loadContainerLists();
|
||||
|
||||
// Subscribe to the dashboard SSE stream for audit live-appends.
|
||||
// kinds= narrows this from all 17 wire kinds down to the 1 this page
|
||||
// acts on. This page was one of 4 unfiltered `/api/dashboard/stream`
|
||||
// subscribers before this (subscription discipline, part 1 of the
|
||||
// dashboard-event-stream-split issue).
|
||||
{
|
||||
const es = openStream('/api/dashboard/stream?kinds=audit_entry_added');
|
||||
if (es) {
|
||||
es.onmessage = (e) => {
|
||||
let ev;
|
||||
try { ev = JSON.parse(e.data); } catch { return; }
|
||||
if (ev.kind === 'audit_entry_added') onAuditEntryAdded(ev);
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
// Tick the last-fetched timestamps every 30s so "fetched 1m ago" stays
|
||||
// accurate without a manual refresh.
|
||||
setInterval(() => {
|
||||
|
|
@ -411,8 +256,6 @@ import '@hive/shared/hive-tab-strip.js';
|
|||
if (systemLastFetch && systemFetchTs && !systemFetchTs.hidden) {
|
||||
systemFetchTs.textContent = fmtFetchTs(systemLastFetch);
|
||||
}
|
||||
// Keep the audit "ago" column honest while that tab is in view.
|
||||
if (auditEntries.length && logTabs.active() === 'audit') renderAudit();
|
||||
}, 30_000);
|
||||
|
||||
})();
|
||||
|
|
|
|||
Loading…
Reference in a new issue