feat(cloud): enforce host governance budgets

apps/device-host-agent/host_agent/web/app.py

@@ -117,6 +117,7 @@ def _dashboard_body(
 ) -> str:
     heartbeat = snapshot.get("last_heartbeat")
     assignment = snapshot.get("current_assignment")
+    policy = snapshot.get("host_policy")
     heartbeat_text = (
         f"{'ok' if heartbeat['ok'] else 'failed'} at {heartbeat['at']} "
         f"({heartbeat['device_count']} devices)"
@@ -129,6 +130,17 @@ def _dashboard_body(
         if assignment
         else "none"
     )
+    policy_text = (
+        "revision {revision}; self-submission {self_submission}; "
+        "max active tasks {max_active}; daily token budget {daily_budget}".format(
+            revision=policy["revision"],
+            self_submission="enabled" if policy["self_submission_enabled"] else "disabled",
+            max_active=policy["max_active_tasks"] or "unlimited",
+            daily_budget=policy["daily_token_budget"] or "unmetered",
+        )
+        if policy
+        else "no Cloud policy cached"
+    )
     device_rows = "".join(
         f"<tr><td>{escape(device.id)}</td><td>{escape(device.name or '')}</td>"
         f"<td>{escape(device.driver_type)}</td><td>{escape(device.status)}</td></tr>"
@@ -146,6 +158,10 @@ def _dashboard_body(
       <h2>Heartbeat</h2>
       <p id="last-heartbeat">{escape(heartbeat_text)}</p>
     </section>
+    <section>
+      <h2>Cloud policy</h2>
+      <p id="host-policy">{escape(policy_text)}</p>
+    </section>
     <section>
       <h2>Current assignment</h2>
       <p id="current-assignment">{escape(assignment_text)}</p>
@@ -168,6 +184,13 @@ def _dashboard_body(
         document.getElementById("current-assignment").textContent = current
           ? current.task_id + " on " + current.device_id + " (started " + current.started_at + ")"
           : "none";
+        var policy = data.status.host_policy;
+        document.getElementById("host-policy").textContent = policy
+          ? "revision " + policy.revision + "; self-submission "
+            + (policy.self_submission_enabled ? "enabled" : "disabled")
+            + "; max active tasks " + (policy.max_active_tasks || "unlimited")
+            + "; daily token budget " + (policy.daily_token_budget || "unmetered")
+          : "no Cloud policy cached";
         var body = document.getElementById("device-status-body");
         body.innerHTML = "";
         data.devices.forEach(function (device) {{