Enclave

Component · ui/

console

A web console for launching runs and watching the live stream + audit log — a human-facing view of the same API the SDK and MCP server use, with authentication and org-scoped tenancy.

Role in the architecture#

The console is a client of the control-plane REST API, exactly like the SDK. It signs users in against the console-api identity authority, holds the resulting JWT, and calls the same authenticated, org-scoped routes.

Source
ui/src/main.tsx → AppRoutes.tsx; the API layer is RTK Query under ui/src/app/apis/ (controlPlaneApi.ts, consoleApi.ts).

What it does#

  • Launch runs — submit code, language, an egress policy, and credential scopes, then watch the session go.
  • Live stream + audit — the SSE stream and the immutable audit log, side by side, as a run unfolds.
  • Org switcher & members/RBAC — every view is scoped to the active org; roles (owner/admin/developer/viewer) gate what's available.
  • API keys — mint and revoke ek_… keys for programmatic access via the SDK/MCP.

Stack#

Vite + React + MUI with Redux Toolkit for state. It's a pure front end: all authorization is enforced server-side by the control plane and console-api, so the console only reflects what those services permit — a viewer hidden from a button is also rejected by the API.