On a node
Everything the daemon does
Machines
A create wizard, then per-machine console, guest exec and files, network and egress policy, storage, snapshots and backups, and migration. VMs that share a stack get Start all and Stop all, and published ports show in the list.
Built; run against a mock APISandboxes and agents
Disposable sandboxes with their warm pool, and agent sessions with approvals, checkpoints and a terminal.
Built; run against a mock APINetwork policy
Decide what a user-mode guest may reach: presets, observe then suggest then apply, and the node default.
Built; run against a mock APIImages and pools
The checksum-pinned catalog, machine templates, warm pools and OCI images, each with a copy-as-fluxctl button.
Built; run against a mock APIHost
Memory, pressure and topology, GPU passthrough on Linux, and the Apple host on a Mac. Pages a host cannot serve are hidden.
Built; run against a mock APIAccess and audit
Your quota, the event history and an API explorer that lists every route and runs the safe reads.
Built; run against a mock APIOn fleet central
Hosts, tenants and bills
Hosts
Cordon, drain, scrub and lease hosts, with the 24-hour minimum lease shown as it elapses.
Built; run against a mock APIVirtual machines
Launch from the image catalog, power, logs and delete, across every host a tenant can see.
Built; run against a mock APIA machine's screen, snapshots and commands
Open a VM for its live screen (and, for macOS guests, Control: clicks, scrolling and keys), snapshots, clones and a command runner.
Screen, snapshots, clones and commands run against a real Linux guest through a real central; Control only against a mockTenants, keys and members
Quotas, token rotation, named API keys that are shown once, and a tenant's members: add by work email, change a role, remove.
Built; run against a mock APIImage catalog
Operators add, edit and remove catalog images; tenants launch from them.
Built; run against a mock APIBilling and activity
Usage and billing, the audit log, alerts and signed webhooks. Sign in with a token or with SSO.
Built; run against a mock APIWhat is and is not verified
- Typechecking, unit tests and a headless-Chrome pass over every page (phone and desktop width, both themes) run against a mock API. The mock serves plausible shapes, not real daemon output.
- Not yet run against a live daemon: the in-browser terminals, the strict content security policy with the lazily loaded terminal chunk, and several response shapes that are rendered generically for now.
- Through a Kairon node the UI is reached on the node’s console relay, which must stay off the internet. See the guide.