server: render the read-only dashboard pages with topcoat

Cargo.toml

@@ -125,6 +125,7 @@ tokio-util = { version = "0.7.19", features = [ "io", "compat" ] }
 toml = "1.1.6"
 topcoat = { version = "0.10.0", default-features = false, features = [
   "asset",
+  "discover",
   "router",
   "runtime",
   "serve",

crates/server/src/cli.rs

@@ -4,6 +4,7 @@ use std::{ffi::OsString, net::SocketAddr, path::PathBuf, sync::Arc};
 use circus_common::Database;
 use circus_config::Config;
 use clap::Parser;
+use color_eyre::eyre::WrapErr;
 use tokio::net::TcpListener;
 
 use crate::{
@@ -207,7 +208,10 @@ where
   // Drain in-memory cache-serving counters into the cache_traffic table.
   state.spawn_cache_traffic_flush();
 
-  let app = routes::router(state, &config);
+  let app = routes::router(state, &config).wrap_err(
+    "loading dashboard assets, bundle them with --bundle-assets or set \
+     ui.dashboard = false",
+  )?;
 
   let bind_addr = format!("{host}:{port}");
   tracing::info!(

crates/server/src/routes/dashboard/admin.rs

@@ -28,18 +28,15 @@ use super::{
   shared::{
     ApiKeyView,
     DashboardContext,
-    DashboardPage,
     LinkedIdentityView,
     PageError,
     Pagination,
     RenderExt,
     UserView,
-    enforce_page_access,
   },
   templates::{
     AdminTemplate,
     AgentView,
-    NewsTemplate,
     NotificationTaskView,
     NotificationsTemplate,
     PinnedOutputView,
@@ -707,26 +704,6 @@ pub(super) async fn user_unlink(
   Redirect::to("/users").into_response()
 }
 
-/// Render the news page at `/news`: list of recent announcements plus,
-/// for admins, the form to publish a new one.
-pub(super) async fn news_page(
-  State(state): State<AppState>,
-  ctx: DashboardContext,
-) -> Result<Html<String>, PageError> {
-  enforce_page_access(&state.config, &ctx, DashboardPage::News)?;
-  let items = circus_common::repo::news::list(&state.pool, 50, 0)
-    .await
-    .unwrap_or_default();
-  let tmpl = NewsTemplate {
-    ui: ui_config(&state),
-    items,
-    is_admin: ctx.is_admin,
-    auth_name: ctx.auth_name.clone(),
-    csrf_token: ctx.csrf_token.clone(),
-  };
-  tmpl.render_html_or_500()
-}
-
 #[derive(serde::Deserialize)]
 pub(super) struct NewsCreateForm {
   title:      String,
@@ -782,6 +759,28 @@ pub(super) async fn news_delete(
   Redirect::to("/news").into_response()
 }
 
+/// `POST /starred/{id}/delete` removes a job from the viewer's own stars.
+pub(super) async fn starred_delete(
+  State(state): State<AppState>,
+  Path(id): Path<Uuid>,
+  ctx: DashboardContext,
+  Form(form): Form<CsrfOnlyForm>,
+) -> Response {
+  let Some(user_id) = ctx.viewer_user_id else {
+    return StatusCode::UNAUTHORIZED.into_response();
+  };
+  if let Err(e) = ctx.check_csrf(&form.csrf_token) {
+    return e.into_response();
+  }
+  if let Err(e) =
+    circus_common::repo::starred_jobs::delete_for_user(&state.pool, user_id, id)
+      .await
+  {
+    tracing::warn!(id = %id, "Failed to unstar job: {e}");
+  }
+  Redirect::to("/starred").into_response()
+}
+
 /// Form payload for `POST /project/{id}/notifications`: the kind of
 /// notification (webhook, email, ...) and a JSON blob holding the
 /// kind-specific configuration.