ReadonlycapabilitiesReadonlycredentialthe credential this plane spends against, so a hub can share one budget across planes
ReadonlyendpointReadonlyhttpReadonlykindwhat this plane is, for an error message: an account id, a namespace, an endpoint
A node does not serve a deployed bundle back; the version id is an address, not a body.
Registers a site. A bundle path and a probe have no default, so they are asked for here.
Removes a site. The route is session-only, so a node may refuse an API token here.
Points a site at a version it already holds; no new version is created.
every site this token may reach; one node answers in one page, so there is nothing to walk
The node's own log, which is what tails means here: it owns the process that wrote it.
The Prometheus exposition the node serves; text rather than JSON, so it skips the envelope.
Writes the site record back.
POST /api/sites is the only write on a site record, so it is an upsert rather than a patch
endpoint; the current record is read first and merged, or a partial change would drop the rest.
Moves the pointer back; naming a version picks it, leaving it out takes the previous one.
Optionalversion: stringSends a share of traffic to one version.
A real split at the node's own front door, keyed per visitor rather than per request, so a session stays on one side of it for as long as the rollout lasts.
the node's own report: what it is running and how it is
Deploys a bundle to a site that already exists.
A site is a host, a bundle path and a probe, and an upload carries none of the three, so an unknown site is a named refusal from the node rather than a site invented from a Worker name.
Versions of one site, newest first.
GET /api/versions answers for everything the token reaches, so the site filter is on the rows
rather than on a query parameter.
The operations every executor has.
Anything a particular executor cannot do is absent from here and reached through a capability instead, so this interface stays the set of things that work everywhere.