apps/sudo/app/routes/workspace-abuse.tsx · flagon-io/g1t

const [detail, runners, tokens] = await Promise.all([settle(identity.workspace(slug)), settle(runnersAdmin.list(slug)), settle(telemetryTokens(slug))]);

41

if (detail.ok && !detail.value) throw data(`There is no workspace called ${slug}.`, { status: 404 });

42

const done = new URL(request.url).searchParams.get("done");

43

const DONE: Record<string, string> = {

44

suspended: `Suspended ${slug}, and put a hold on its compute.`,

45

lifted: `Lifted the suspension of ${slug}, and the hold it put on.`,

46

runners: "Removed the runners. What they were running failed; their credentials stopped at once.",

47

tokens: "Revoked the tokens. Anything sending with them is refused from now on.",

};

return {

slug,

suspended: detail.ok ? (detail.value?.suspended ?? null) : null,

52

runners: runners.ok ? runners.value : ([] as AdminRunner[]),

53

runnersError: runners.ok ? null : runners.error,

54

tokens: tokens.ok ? tokens.value : [],

55

tokensError: tokens.ok ? null : tokens.error,

56

error: detail.ok ? null : detail.error,

57

done: done ? (DONE[done] ?? null) : null,

};

}

/** Puts the suspension's hold on, or takes it off, keeping every other allowance. */

62

async function setHold(slug: string, hold: string | null, staff: string, note: string): Promise<string | null> {

63

const account = await admin.account(slug);

64

if (!account.ok) return account.error.message;

65

const { allowances, id, kind } = account.value.summary.account;

66

if (kind === "enterprise") return null;

67

const current = allowances?.hold ?? null;

68

// Lifting takes off only a hold a suspension put there.

69

if (hold === null && !isSuspensionHold(current)) return null;

70

const set = await admin.setAllowances(id, { plan: false, ossRepoMicros: null, trialMicros: null, ...allowances, hold }, note, staff);

71

return set.ok ? null : set.error.message;

72

}

73

74

export async function action({ params, request, context }: Route.ActionArgs) {

75

const staff = requireStaff(context);

76

const slug = slugOf(params.slug);

77

const form = await request.formData();

78

const intent = text(form, "intent");

79

const back = (done: string) => redirect(`/workspaces/${encodeURIComponent(slug)}/abuse?done=${done}`);

80

if (intent === "suspend") {

81

const reason = parseReason(text(form, "reason"));

82

if (!reason.ok) return data({ error: reason.error, section: "suspend" }, { status: 422 });

83

const result = await identity.suspendWorkspace(slug, true, reason.value, staff.email);

84

if (!result.ok) return data({ error: result.error.message, section: "suspend" }, { status: 422 });

85

const held = await setHold(slug, suspensionHold(reason.value), staff.email, `Suspended: ${reason.value}`);

86

if (held) return data({ error: `Suspended, but the hold on its compute was not set: ${held}`, section: "suspend" }, { status: 422 });

87

throw back("suspended");

88

}

89

if (intent === "lift") {

90

const result = await identity.suspendWorkspace(slug, false, "", staff.email);

91

if (!result.ok) return data({ error: result.error.message, section: "suspend" }, { status: 422 });

92

const held = await setHold(slug, null, staff.email, "Suspension lifted");

93

if (held) return data({ error: `Lifted, but the hold on its compute was not taken off: ${held}`, section: "suspend" }, { status: 422 });

94

throw back("lifted");

95

}

96

if (intent === "remove-runners") {

97

const id = text(form, "id") || null;

98

const result = await runnersAdmin.remove(slug, id, staff.email);

99

if (!result.ok) return data({ error: result.error.message, section: "runners" }, { status: 422 });

100

throw back("runners");

101

}

102

if (intent === "revoke-tokens") {

103

const project = text(form, "project");

104

const only = text(form, "id");

105

const tokens = await telemetry.tokens({ project_id: project });

106

for (const token of tokens.filter((token) => !only || token.id === only)) {

107

await telemetry.revokeToken({ project_id: project, id: token.id });

108

}

109

console.log(`sudo: ${staff.email} revoked ingest tokens of ${slug}'s project ${project}`);

110

throw back("tokens");

111

}

112

return data({ error: "Unknown action.", section: "top" }, { status: 400 });

113

}

114

115

export default function WorkspaceAbuse({ loaderData, actionData }: Route.ComponentProps) {

116

const { slug, suspended, runners, runnersError, tokens, tokensError, error, done } = loaderData;

117

const errorFor = (section: string) => (actionData && "section" in actionData && actionData.section === section ? actionData.error : null);

return (

<ArrowLeft size={14} /> {slug}

122

</Link>

123

<PageHeader

124

title="Suspend and clean up"

125

description={`What staff can stop in ${slug} after abuse: the workspace itself, its self-hosted runners, and its projects' telemetry tokens.`}

126

/>

127

128

{done && <Notice tone="ok">{done}</Notice>}

129

{error && <Notice tone="warn">Identity did not answer: {error}</Notice>}

</div>

{suspended ? (

Suspended <When at={suspended.at} /> by {suspended.by}: {suspended.reason}

137

</Notice>

138

{errorFor("suspend") && <Notice tone="error">{errorFor("suspend")}</Notice>}

Lift the suspension

</Button>

</Form>

) : (

</Field>

{errorFor("suspend") && <Notice tone="error">{errorFor("suspend")}</Notice>}

Suspend {slug}

</Button>

</Form>

)}

</Section>

<Section

id="runners"

title="Self-hosted runners"

159

description="Removing a runner fails what it was running and stops its credential at once. Removing all of them also ends the registration tokens the workspace has out."

160

className="mt-6"

161

>

162

{runnersError && <Notice tone="warn">Actions did not answer: {runnersError}</Notice>}

163

{errorFor("runners") && <Notice tone="error">{errorFor("runners")}</Notice>}

164

{runners.length === 0 ? (

165

<EmptyState title="No runners">{slug} has no self-hosted runners.</EmptyState>

166

) : (

167

168

{runners.map((runner) => (

<Form

method="post"

key={runner.id}

className="flex flex-wrap items-center justify-between gap-2 rounded-lg border border-line bg-surface px-3 py-2 text-sm"

173

>

174

175

<span className="font-mono">{runner.name}</span>

176

{runner.repo && <span className="text-muted"> · {runner.repo}</span>}

177

178

{runner.os} · {runner.version} · last seen {runner.lastSeenAt ? <When at={runner.lastSeenAt} /> : "never"}

179

{runner.createdBy ? ` · added by ${runner.createdBy}` : ""}

</span>

</span>

{runner.busy && <Badge tone="warn">Running a job</Badge>}

Remove

</Button>

</span>

</Form>

))}

Remove all {runners.length} and end registration tokens

</Button>

</Form>

</div>

)}

</Section>

<Section

id="telemetry"

title="Telemetry ingest tokens"

203

description="Tokens people made to send OpenTelemetry to a project. Revoking one refuses anything sent with it from then on. g1t's own token for its deployments is not listed."

204

className="mt-6"

205

>

206