[Devin-Holland]

Deploy order: HarperFast/central-manager#953 must merge and deploy first. This page calls its new GET /Admin/Host/ and shows "Couldn't load hosts." until that is live.

⊙ Problem

Staff can see regions in the admin section but not hosts. Answering "which hosts does this customer run on?" or "what is degraded in us-ord?" takes direct database queries.

🤔 Is a full page warranted now?

Yes, as asked: a list with filters next to Regions, read-only. Host edits stay where they are; this only adds a view.

💡 Solution

• New Admin → Hosts page, shown to accounts holding host:read, backed by central-manager's new GET /Admin/Host/ (HarperFast/central-manager#953).
• Shows running hosts by default; the status filter also offers Running + degraded and All statuses.
• Organization picker: pick from the list, type a unique name, or paste an org- id (resolver). It finds the org's dedicated hosts and the shared hosts its instances run on. Ambiguous text explains itself instead of querying, as does an org list still loading or failed.
• Provider, location and region filters run on the server; a search box narrows by name, id, FQDN or IP.

⚖️ Alternatives

• Client-side filtering only, like Regions — "show all" includes every removed host ever created, and the org filter needs the server-side join.

🤔 Should the org picker accept a pasted id without the directory?

Yes: the directory needs org:read, which host:read does not imply, so a pasted org- id is the fallback. Dropping it would leave such accounts with no org filter.

🔧 Changes

• src/features/admin/hosts/index.tsx — the page: filters, org resolution, table.
• src/features/admin/hosts/queries/getHosts.ts — query string and request; blank filters are left out because the endpoint rejects them.
• src/features/admin/routes.ts, src/features/admin/components/AdminShell.tsx — the route, and a nav item requiring host:read; AdminShell's existing per-page check redirects a deep link from anyone without it.
• src/integrations/api/api.patch.d.ts — host:read permission and the response type until the generated OpenAPI types include the endpoint.

✅ Verification

• pnpm test 5711 passing on this head (5875 on a trial rebase onto current stage). Page tests and query tests cover the default RUNNING request, server-side org filter, ambiguous and partial names, a loading or failed org list, the no-org:read path, error state and client search. The ambiguity guard fails its tests when removed. Shell visibility and route tests include Hosts.
• Rendered the real page against stub data in the browser (light, dark, narrow): status, org and search filters behave as described.
• Not run against a deployed central-manager; the endpoint itself was smoke-tested on released Harper 5.2.15 and 5.3.1 in HarperFast/central-manager#953.

_{🤖 Generated by Claude Code (Claude Opus 5.5); posted via @Devin-Holland.}

Related PRs: 2 independent
Complexity: medium

_{Review-Coverage: authored=claude; ran=codex,gemini; adjudicated=domain; declined=cursor-grok,cursor-composer,cursor-kimi,cursor-muse,muse; rounds=3; full=1 @ 93bb826}

_{Review-Attention: read ~6m (decisions: do-less-alternative, default-status-running, unpaged-host-list, status-comma-contract) @ 93bb826}

[gemini-code-assist]

Code Review

This pull request introduces a new 'Hosts' section to the admin dashboard, allowing administrators to view, search, and filter the fleet of hosts by status, organization, cloud provider, location, and region. It adds the /admin/hosts route, navigation items, permission checks for host:read, and comprehensive tests. The review feedback focuses on improving TypeScript type safety under strict null checks by explicitly converting potential null values from API responses to undefined when using them in helper functions and maps.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	80.09%	15014 / 18745
🔵	Statements	80.04%	15947 / 19923
🔵	Functions	75.57%	4017 / 5315
🔵	Branches	74.71%	11666 / 15613

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
src/features/admin/routes.ts	72.72%	100%	60%	72.72%	33-34, 40-41, 47-48
src/features/admin/components/AdminShell.tsx	29.41%	46.66%	60%	33.33%	42-64
src/features/admin/hosts/index.tsx	84.61%	78.94%	77.77%	88.88%	91, 101, 126, 127, 128, 198-199, 203, 208-210, 222, 260-272
src/features/admin/hosts/queries/getHosts.ts	100%	100%	100%	100%

Generated in workflow #2390 for commit 93bb826 by the Vitest Coverage Report Action

[DavidCockerill]

Good call rejecting a shared name in the org resolver instead of taking the first match. Nothing blocking; the two inline notes are about the page giving a confident wrong answer to someone looking up a customer in a hurry. As you said, this waits on central-manager#953 being deployed.

_{Findings drafted by claude-opus-5-5 via daivid-review, reviewed and posted by @DavidCockerill.}

[DavidCockerill]

Both notes are covered, thanks. I'm fine with Running as the default now that the combined option is right under it. Good to go once central-manager#953 is deployed.

_{Findings drafted by claude-opus-5-5 via daivid-review, reviewed and posted by @DavidCockerill.}