@andrian.yablonskyy/thub-coordinator 1.0.0

package/test/scheduler.test.js

@@ -0,0 +1,375 @@
+/**
+ * @file        packages/coordinator/test/scheduler.test.js
+ * @description Tests: scheduler, registry, groups, job id allocation, and admin queue operations
+ *
+ * @author      Andrian Yablonskyy
+ * @copyright   Copyright (c) 2026 Andrian Yablonskyy. All rights reserved.
+ *
+ * This file is part of TestHub and is proprietary and confidential.
+ * Unauthorized copying, modification, distribution, or use of this file,
+ * via any medium, is strictly prohibited without prior written permission
+ * from AdSystem.PRO.
+ */
+
+'use strict';
+
+const test = require('node:test'),
+  assert = require('node:assert/strict'),
+  fs = require('node:fs'),
+  os = require('node:os'),
+  path = require('node:path'),
+  { EventEmitter } = require('node:events'),
+
+  { openDb } = require('../src/db'),
+  { createEventsService } = require('../src/services/events'),
+  { createRegistryService } = require('../src/services/registry'),
+  { createAgentsService } = require('../src/services/agents'),
+  { createGroupsService } = require('../src/services/groups'),
+  { createArtifactsService } = require('../src/services/artifacts'),
+  { createJobsService } = require('../src/services/jobs'),
+  { createScheduler } = require('../src/services/scheduler'),
+  { createHeartbeatMonitor } = require('../src/services/heartbeat'),
+  { JOB_STATES, RESOURCE_STATES } = require('@andrian.yablonskyy/thub-common');
+
+function buildTestServices(overrides = {}){
+  const db = openDb(':memory:'),
+    // Own bus per test, not the module-level singleton (production's
+    // there's-only-one-Coordinator-process bus) — sharing it across every
+    // test in this file would pile up listeners test after test with no
+    // teardown, eventually tripping Node's MaxListenersExceededWarning.
+    bus = new EventEmitter(),
+    events = createEventsService(db),
+    registry = createRegistryService(db, { bus, events }),
+    agents = createAgentsService(db, { events }),
+    groups = createGroupsService(db, { events, registry }),
+    artifactsDir = fs.mkdtempSync(path.join(os.tmpdir(), 'thub-test-artifacts-')),
+    config = {
+      scheduler: { assignAckTimeoutSec: 15, requeueOnLost: true, maxQueuedPerAgent: 20, tickIntervalSec: 3600 },
+      jobs: { defaultTimeoutSec: 1800, maxTimeoutSec: 14400 },
+      heartbeat: { intervalSec: 10, missedLimit: 3, sweepIntervalSec: 3600 },
+      artifactsDir,
+      sessionSecret: 'test-secret',
+      publicUrl: 'http://localhost:8080',
+      artifacts: { linkTtlHours: 1 },
+      ...overrides
+    },
+    artifacts = createArtifactsService(db, { config }),
+    jobs = createJobsService(db, { bus, events, registry, artifacts, config }),
+    scheduler = createScheduler(db, { bus, events, registry, config }),
+    heartbeatMonitor = createHeartbeatMonitor(db, { bus, events, registry, jobs, config });
+  return { db, registry, agents, groups, artifacts, jobs, scheduler, heartbeatMonitor, artifactsDir };
+}
+
+function registerResource(registry, { name, type, labels = [], groups = [], clientId } = {}){
+  const { resourceId } = registry.registerAuto({ clientId: clientId || `client-${name}`, name, type, labels, groups });
+  return registry.get(resourceId);
+}
+
+function makeSpec(overrides = {}){
+  return {
+    target: { type: 'sw', labels: [] },
+    firmware: { url: 'https://x/app.bin' },
+    tests: { url: 'https://x/tests.tar.gz' },
+    ...overrides
+  };
+}
+
+test('scheduler assigns a queued job to a matching idle resource', () => {
+  const { registry, agents, jobs, scheduler } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    resource = registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: [] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+
+  const job = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() });
+  assert.equal(job.state, JOB_STATES.QUEUED);
+
+  scheduler.runPass();
+
+  const assigned = jobs.get(job.id);
+  assert.equal(assigned.state, JOB_STATES.ASSIGNED);
+  assert.equal(assigned.resource_id, resource.id);
+  assert.equal(registry.get(resource.id).status, RESOURCE_STATES.BUSY);
+});
+
+test('job submission is rejected (422) when no resource could ever satisfy its labels', () => {
+  const { registry, agents, jobs } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' });
+  registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: ['board:a'] });
+
+  assert.throws(
+    () =>
+      jobs.create({
+        agentId: agent.id,
+        source: 'cli',
+        spec: makeSpec({ target: { type: 'sw', labels: ['board:b'] } })
+      }),
+    /No registered resource/
+  );
+});
+
+test('a job stays QUEUED while its only matching resource is busy', () => {
+  const { registry, agents, jobs, scheduler } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    resource = registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: ['board:a'] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+
+  const first = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec({ target: { type: 'sw', labels: ['board:a'] } }) }),
+    second = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec({ target: { type: 'sw', labels: ['board:a'] } }) });
+  scheduler.runPass();
+
+  assert.equal(jobs.get(first.id).state, JOB_STATES.ASSIGNED);
+  assert.equal(jobs.get(second.id).state, JOB_STATES.QUEUED);
+});
+
+test('heartbeat sweeper marks a silent resource OUT_OF_SERVICE and requeues its active job', () => {
+  const { db, registry, agents, jobs, scheduler, heartbeatMonitor } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    resource = registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: [] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+
+  const job = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() });
+  scheduler.runPass();
+  assert.equal(jobs.get(job.id).state, JOB_STATES.ASSIGNED);
+
+  // Simulate 3+ missed heartbeats (heartbeatIntervalSec=10) by backdating last_heartbeat_at.
+  const staleTs = new Date(Date.now() - 60_000).toISOString();
+  db.prepare('UPDATE resources SET last_heartbeat_at = ? WHERE id = ?').run(staleTs, resource.id);
+
+  heartbeatMonitor.sweepOnce();
+
+  assert.equal(registry.get(resource.id).status, RESOURCE_STATES.OUT_OF_SERVICE);
+  // requeueOnLost defaults true and attempt was 1, so LOST -> QUEUED.
+  assert.equal(jobs.get(job.id).state, JOB_STATES.QUEUED);
+});
+
+test('job ids are split by source: A-##### for ci, M-##### for cli', () => {
+  const { registry, agents, jobs } = buildTestServices(),
+    { agent } = agents.create({ name: 'mixed', kind: 'ci' });
+  registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: [] });
+
+  const ciJob = jobs.create({ agentId: agent.id, source: 'ci', spec: makeSpec() }),
+    cliJob = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() }),
+    ciJob2 = jobs.create({ agentId: agent.id, source: 'ci', spec: makeSpec() });
+
+  assert.match(ciJob.id, /^A-\d{5}$/);
+  assert.match(cliJob.id, /^M-\d{5}$/);
+  // Independent counters: the second ci job increments the A series only.
+  assert.equal(Number(ciJob2.id.slice(2)), Number(ciJob.id.slice(2)) + 1);
+});
+
+test('admin resetQueue cancels every active job and leaves finished ones alone', () => {
+  const { registry, agents, jobs, scheduler } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    resource = registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: [] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+
+  const assigned = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() });
+  scheduler.runPass();
+  assert.equal(jobs.get(assigned.id).state, JOB_STATES.ASSIGNED);
+
+  const queued = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() }),
+    finished = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() });
+  jobs.setState(finished.id, JOB_STATES.PASSED);
+
+  const canceled = jobs.resetQueue();
+
+  assert.equal(canceled, 2);
+  assert.equal(jobs.get(assigned.id).state, JOB_STATES.CANCELED);
+  assert.equal(jobs.get(queued.id).state, JOB_STATES.CANCELED);
+  assert.equal(jobs.get(finished.id).state, JOB_STATES.PASSED); // untouched
+});
+
+test('admin cleanHistory deletes finished jobs, their artifacts on disk, and leaves active jobs alone', () => {
+  const { registry, agents, artifacts, jobs, artifactsDir } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' });
+  registerResource(registry, { name: 'lab-sw-01', type: 'sw', labels: [] });
+
+  const finished = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() });
+  jobs.setState(finished.id, JOB_STATES.PASSED);
+  artifacts.storeGenerated(finished.id, 'console.log', Buffer.from('hello'), 'text/plain');
+  assert.ok(fs.existsSync(path.join(artifactsDir, finished.id)));
+
+  const active = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec() }),
+
+    deleted = jobs.cleanHistory();
+
+  assert.equal(deleted, 1);
+  assert.equal(jobs.get(finished.id), undefined);
+  assert.equal(fs.existsSync(path.join(artifactsDir, finished.id)), false);
+  assert.ok(jobs.get(active.id)); // active job untouched
+});
+
+test('resource re-registration overwrites type/labels/status and marks its stale active job LOST', () => {
+  const { registry, agents, jobs, scheduler } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    resource = registerResource(registry, { name: 'lab-hw-01', type: 'hw', labels: ['board:a'] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+
+  const job = jobs.create({ agentId: agent.id, source: 'cli', spec: makeSpec({ target: { type: 'hw', labels: ['board:a'] } }) });
+  scheduler.runPass();
+  assert.equal(jobs.get(job.id).state, JOB_STATES.ASSIGNED);
+  assert.equal(registry.get(resource.id).status, RESOURCE_STATES.BUSY);
+
+  // Simulate the daemon crashing and restarting with a changed config.
+  const { resourceId } = registry.registerAuto({
+    clientId: 'client-lab-hw-01',
+    name: 'lab-hw-01',
+    type: 'sw',
+    labels: ['board:b']
+  });
+  assert.equal(resourceId, resource.id);
+
+  const reregistered = registry.get(resource.id);
+  assert.equal(reregistered.type, 'sw');
+  assert.deepEqual(reregistered.labels, ['board:b']);
+  assert.equal(reregistered.status, RESOURCE_STATES.REGISTERED);
+  assert.equal(reregistered.busy_source, null);
+
+  // The stale job it was holding is now LOST (then requeued, since attempt < 2).
+  assert.equal(jobs.get(job.id).state, JOB_STATES.QUEUED);
+});
+
+test('resource re-registration does not clear an admin-set MAINTENANCE status', () => {
+  const { registry } = buildTestServices(),
+    resource = registerResource(registry, { name: 'lab-sw-02', type: 'sw', labels: [] });
+  registry.heartbeat(resource.id, { state: 'idle' });
+  registry.setMaintenance(resource.id, true);
+
+  registry.registerAuto({ clientId: 'client-lab-sw-02', name: 'lab-sw-02', type: 'sw', labels: [] });
+
+  assert.equal(registry.get(resource.id).status, RESOURCE_STATES.MAINTENANCE);
+});
+
+test('renaming a Client (same clientId, new name) updates the same resource in place', () => {
+  const { registry } = buildTestServices(),
+    resource = registerResource(registry, { clientId: 'stable-uuid-1', name: 'old-name', type: 'sw', labels: [] }),
+
+    { resourceId } = registry.registerAuto({ clientId: 'stable-uuid-1', name: 'new-name', type: 'sw', labels: [] });
+
+  assert.equal(resourceId, resource.id);
+  assert.equal(registry.get(resource.id).name, 'new-name');
+  assert.equal(registry.list().length, 1); // not a second resource
+});
+
+test('a name already claimed by a different clientId is rejected, whether new or a rename', () => {
+  const { registry } = buildTestServices();
+  registerResource(registry, { clientId: 'uuid-a', name: 'shared-name', type: 'sw', labels: [] });
+  registerResource(registry, { clientId: 'uuid-b', name: 'other-name', type: 'sw', labels: [] });
+
+  assert.throws(
+    () => registry.registerAuto({ clientId: 'uuid-c', name: 'shared-name', type: 'sw', labels: [] }),
+    /already registered by a different client/
+  );
+  assert.throws(
+    () => registry.registerAuto({ clientId: 'uuid-b', name: 'shared-name', type: 'sw', labels: [] }),
+    /already used by another client/
+  );
+});
+
+test('a name held by an OUT_OF_SERVICE (abandoned) client can be reclaimed by a new registration', () => {
+  const { registry } = buildTestServices(),
+    abandoned = registerResource(registry, { clientId: 'old-uuid', name: 'lab-01', type: 'sw', labels: [] });
+  registry.markOutOfService(abandoned.id);
+
+  const { resourceId } = registry.registerAuto({ clientId: 'new-uuid', name: 'lab-01', type: 'hw', labels: ['x'] });
+
+  assert.equal(resourceId, abandoned.id); // took over the same row, not a duplicate
+  const reclaimed = registry.get(resourceId);
+  assert.equal(reclaimed.client_id, 'new-uuid');
+  assert.equal(reclaimed.type, 'hw');
+  assert.equal(reclaimed.status, RESOURCE_STATES.REGISTERED);
+  assert.equal(registry.list().length, 1);
+});
+
+test('a name held by an OUT_OF_SERVICE client can be reclaimed via a rename too, without duplicating the row', () => {
+  const { registry } = buildTestServices(),
+    abandoned = registerResource(registry, { clientId: 'old-uuid', name: 'lab-02', type: 'sw', labels: [] });
+  registry.markOutOfService(abandoned.id);
+  const renaming = registerResource(registry, { clientId: 'live-uuid', name: 'my-bench', type: 'sw', labels: [] }),
+
+    { resourceId } = registry.registerAuto({ clientId: 'live-uuid', name: 'lab-02', type: 'sw', labels: [] });
+
+  assert.equal(resourceId, renaming.id);
+  assert.equal(registry.get(renaming.id).name, 'lab-02');
+  // The abandoned row is still there (history preserved), just renamed out of the way.
+  assert.equal(registry.list().length, 2);
+  assert.equal(registry.get(abandoned.id).name, `lab-02__stale-${abandoned.id}`);
+});
+
+test('a legacy resource with no clientId (pre-dates the feature) is adopted by name on first registration', () => {
+  const { db, registry } = buildTestServices(),
+    resource = registerResource(registry, { clientId: 'will-be-overwritten', name: 'legacy-01', type: 'sw', labels: [] });
+  // Simulate a pre-migration row: no client_id yet.
+  db.prepare('UPDATE resources SET client_id = NULL WHERE id = ?').run(resource.id);
+
+  const { resourceId } = registry.registerAuto({ clientId: 'brand-new-uuid', name: 'legacy-01', type: 'sw', labels: ['x'] });
+
+  assert.equal(resourceId, resource.id); // adopted, not duplicated
+  assert.equal(registry.get(resource.id).client_id, 'brand-new-uuid');
+  assert.equal(registry.list().length, 1);
+});
+
+test('a job with target.group only schedules onto resources that are members of that group', () => {
+  const { registry, agents, groups, jobs, scheduler } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    groupA = groups.create({ name: 'group-a' }),
+    groupB = groups.create({ name: 'group-b' }),
+
+    inGroupA = registerResource(registry, { name: 'lab-a', type: 'sw', groups: [groupA.id] }),
+    inGroupB = registerResource(registry, { name: 'lab-b', type: 'sw', groups: [groupB.id] });
+  registry.heartbeat(inGroupA.id, { state: 'idle' });
+  registry.heartbeat(inGroupB.id, { state: 'idle' });
+
+  const job = jobs.create({
+    agentId: agent.id,
+    source: 'cli',
+    spec: makeSpec({ target: { type: 'sw', labels: [], group: groupA.id } })
+  });
+  scheduler.runPass();
+
+  const assigned = jobs.get(job.id);
+  assert.equal(assigned.state, JOB_STATES.ASSIGNED);
+  assert.equal(assigned.resource_id, inGroupA.id); // not inGroupB, despite being IDLE and type-matching
+});
+
+test('a job with target.group is rejected (422) when no resource is ever a member of that group', () => {
+  const { registry, agents, groups, jobs } = buildTestServices(),
+    { agent } = agents.create({ name: 'ci', kind: 'ci' }),
+    group = groups.create({ name: 'empty-group' });
+  registerResource(registry, { name: 'lab-01', type: 'sw', groups: [] }); // exists, but not a member
+
+  assert.throws(
+    () =>
+      jobs.create({
+        agentId: agent.id,
+        source: 'cli',
+        spec: makeSpec({ target: { type: 'sw', labels: [], group: group.id } })
+      }),
+    /No registered resource/
+  );
+});
+
+test('a resource can belong to several groups at once', () => {
+  const { registry, groups } = buildTestServices(),
+    g1 = groups.create({ name: 'g1' }),
+    g2 = groups.create({ name: 'g2' }),
+
+    resource = registerResource(registry, { name: 'multi-group', type: 'sw', groups: [g1.id, g2.id] });
+
+  assert.deepEqual(registry.get(resource.id).group_ids, [g1.id, g2.id]);
+});
+
+test('deleting a group strips it from every resource that listed it, without touching the resource otherwise', () => {
+  const { registry, groups } = buildTestServices(),
+    g1 = groups.create({ name: 'to-delete' }),
+    g2 = groups.create({ name: 'keep-me' }),
+    resource = registerResource(registry, { name: 'lab-01', type: 'sw', labels: ['x'], groups: [g1.id, g2.id] });
+
+  groups.remove(g1.id);
+
+  const after = registry.get(resource.id);
+  assert.deepEqual(after.group_ids, [g2.id]);
+  assert.deepEqual(after.labels, ['x']); // untouched
+  assert.equal(groups.get(g1.id), undefined);
+  assert.ok(groups.get(g2.id));
+});

package/views/admin/agents.pug

@@ -0,0 +1,53 @@
+extends ../layout
+
+block content
+  .d-flex.justify-content-between.align-items-center.mb-3
+    h1.h4.mb-0 Agents (CI / developers)
+    button.btn.btn-primary.btn-sm(type="button" data-bs-toggle="modal" data-bs-target="#addAgentModal") Register agent
+
+  if newToken
+    .alert.alert-warning
+      strong Token (shown once):
+      |
+      code= newToken
+
+  table.table.table-hover.align-middle
+    thead
+      tr
+        th Name
+        th Kind
+        th Created
+        th Last used
+        th Status
+        th
+    tbody
+      each a in agents
+        tr(class=a.revoked_at ? 'opacity-50' : '')
+          td= a.name
+          td.text-uppercase= a.kind
+          td= fmtDate(a.created_at)
+          td= fmtDate(a.last_used_at, 'never')
+          td= a.revoked_at ? 'revoked' : 'active'
+          td
+            if !a.revoked_at
+              form(method="post" action=`/admin/agents/${a.id}/revoke` onsubmit="return confirm('Revoke this agent token?')")
+                button.btn.btn-sm.btn-outline-danger(type="submit") Revoke
+
+  .modal(tabindex="-1" id="addAgentModal")
+    .modal-dialog
+      .modal-content
+        form(method="post" action="/admin/agents")
+          .modal-header
+            h5.modal-title Register agent
+            button.btn-close(type="button" data-bs-dismiss="modal")
+          .modal-body
+            .mb-3
+              label.form-label Name
+              input.form-control(type="text" name="name" placeholder="ci-firmware or jane.dev" required)
+            .mb-3
+              label.form-label Kind
+              select.form-select(name="kind")
+                option(value="ci") ci
+                option(value="cli") cli
+          .modal-footer
+            button.btn.btn-primary(type="submit") Create

package/views/groups/list.pug

@@ -0,0 +1,94 @@
+extends ../layout
+
+block content
+  .d-flex.justify-content-between.align-items-center.mb-3
+    h1.h4.mb-0 Groups
+    if canManage
+      button.btn.btn-primary.btn-sm(type="button" data-bs-toggle="modal" data-bs-target="#addGroupModal") Add group
+
+  p.text-body-secondary.small.
+    A job can be constrained to run only on resources in a group with `thub run --group <id>` (§13.1).
+    A resource joins a group by listing its id under `groups` in the Client's own config — membership isn't set here.
+
+  if groups.length
+    table.table.table-hover.align-middle
+      thead
+        tr
+          th Name
+          th ID
+          th Comment
+          th Resources
+          th Created
+          if canManage
+            th Actions
+      tbody
+        each g in groups
+          tr
+            td= g.name
+            td
+              code.small.me-1= g.id
+              button.btn.btn-sm.btn-outline-secondary.copy-btn(
+                type="button"
+                aria-label="Copy group ID to clipboard"
+                data-bs-toggle="tooltip"
+                data-bs-title="Copy to clipboard"
+                data-copy=g.id
+              )
+                i.bi.bi-clipboard
+            td= g.comment || '—'
+            td= g.resourceCount
+            td= fmtDate(g.created_at)
+            if canManage
+              td
+                button.btn.btn-sm.btn-outline-secondary(type="button" data-bs-toggle="modal" data-bs-target=`#editGroupModal-${g.id}`) Edit
+                form.d-inline.ms-1(method="post" action=`/groups/${g.id}/delete` onsubmit="return confirm('Delete this group? Any resource listing it will just stop matching on it.')")
+                  button.btn.btn-sm.btn-outline-danger(type="submit") Delete
+
+              .modal(tabindex="-1" id=`editGroupModal-${g.id}`)
+                .modal-dialog
+                  .modal-content
+                    form(method="post" action=`/groups/${g.id}`)
+                      .modal-header
+                        h5.modal-title Edit group
+                        button.btn-close(type="button" data-bs-dismiss="modal")
+                      .modal-body
+                        .mb-3
+                          label.form-label Name
+                          input.form-control(type="text" name="name" value=g.name required)
+                        .mb-3
+                          label.form-label Comment
+                          textarea.form-control(name="comment" rows="2")= g.comment || ''
+                        p.text-body-secondary.small.mb-0
+                          | ID:
+                          code.me-1= g.id
+                          button.btn.btn-sm.btn-outline-secondary.copy-btn(
+                            type="button"
+                            aria-label="Copy group ID to clipboard"
+                            data-bs-toggle="tooltip"
+                            data-bs-title="Copy to clipboard"
+                            data-copy=g.id
+                          )
+                            i.bi.bi-clipboard
+                      .modal-footer
+                        button.btn.btn-primary(type="submit") Save
+  else
+    p.text-body-secondary No groups yet.
+
+  if canManage
+    .modal(tabindex="-1" id="addGroupModal")
+      .modal-dialog
+        .modal-content
+          form(method="post" action="/groups")
+            .modal-header
+              h5.modal-title Add group
+              button.btn-close(type="button" data-bs-dismiss="modal")
+            .modal-body
+              .mb-3
+                label.form-label Name
+                input.form-control(type="text" name="name" placeholder="ci-nightly" required)
+              .mb-3
+                label.form-label Comment
+                textarea.form-control(name="comment" rows="2" placeholder="Optional")
+              p.text-body-secondary.small.mb-0 The group's id (a UUID) is generated once it's created.
+            .modal-footer
+              button.btn.btn-primary(type="submit") Create

package/views/index.pug

@@ -0,0 +1,37 @@
+extends layout
+include mixins/status-badge
+
+block content
+  h1.h4.mb-2 Overview
+
+  .row.g-3.mb-4
+    .col-md-4
+      .card
+        .card-body
+          h6.card-subtitle.mb-2.text-body-secondary Queue length
+          p.display-6= queueLength
+    .col-md-4
+      .card
+        .card-body
+          h6.card-subtitle.mb-2.text-body-secondary Jobs in last 24h
+          p.display-6= jobsLast24h
+    .col-md-4
+      .card
+        .card-body
+          h6.card-subtitle.mb-2.text-body-secondary Resources online
+          p.display-6= `${onlineCount} / ${resources.length}`
+
+  .row.g-3
+    each r in resources
+      .col-sm-6.col-md-4.col-lg-3
+        .card.h-100(class=`border-${{IDLE:'success',BUSY:'primary',OUT_OF_SERVICE:'danger',MAINTENANCE:'secondary',REGISTERED:'secondary'}[r.status] || 'secondary'}`)
+          .card-body
+            h5.card-title= r.name
+            p.card-text.mb-1
+              +resourceBadge(r.status)
+              |
+              = ' ' + r.type.toUpperCase()
+            if r.busy_source
+              p.card-text.small.text-body-secondary busy: #{r.busy_source} #{r.busy_reason ? '— ' + r.busy_reason : ''}
+            p.card-text.small.text-body-secondary
+              | heartbeat: #{fmtDate(r.last_heartbeat_at, 'never')}

package/views/jobs/list.pug

@@ -0,0 +1,45 @@
+extends ../layout
+include ../mixins/status-badge
+
+block content
+  .d-flex.justify-content-between.align-items-center.mb-3
+    h1.h4.mb-0 Jobs
+    if canManage
+      .btn-group
+        form(method="post" action="/jobs/reset-queue" onsubmit="return confirm('Cancel every queued/assigned/preparing/running job? This stops in-flight work.')")
+          button.btn.btn-sm.btn-outline-warning(type="submit") Reset queue
+        form.ms-1(method="post" action="/jobs/clean-history" onsubmit="return confirm('Permanently delete all finished jobs and their logs/artifacts? This cannot be undone.')")
+          button.btn.btn-sm.btn-outline-danger(type="submit") Clean history
+
+  form.row.g-2.mb-3(method="get")
+    .col-auto
+      select.form-select.form-select-sm(name="state" onchange="this.form.submit()")
+        option(value="") any state
+        each s in ['QUEUED','ASSIGNED','PREPARING','RUNNING','PASSED','FAILED','ERROR','TIMEOUT','CANCELED','LOST']
+          option(value=s selected=filters.state === s)= s
+    .col-auto
+      select.form-select.form-select-sm(name="source" onchange="this.form.submit()")
+        option(value="") any source
+        option(value="ci" selected=filters.source === 'ci') ci
+        option(value="cli" selected=filters.source === 'cli') cli
+
+  table.table.table-hover.align-middle
+    thead
+      tr
+        th Job
+        th Source
+        th User
+        th State
+        th Resource
+        th Created
+        th Finished
+    tbody
+      each j in jobs
+        tr
+          td: a(href=`/jobs/${j.id}`)= j.id
+          td.text-uppercase= j.source
+          td= j.spec.user || '—'
+          td: +jobBadge(j.state)
+          td= j.resource ? j.resource.name : '—'
+          td= fmtDate(j.created_at)
+          td= fmtDate(j.finished_at)

package/views/jobs/show.pug

@@ -0,0 +1,42 @@
+extends ../layout
+include ../mixins/status-badge
+include ../mixins/log-viewer
+
+block content
+  .d-flex.justify-content-between.align-items-center.mb-3
+    h1.h4.mb-0
+      = job.id
+      |
+      +jobBadge(job.state)
+    if canCancel
+      form(method="post" action=`/jobs/${job.id}/cancel`)
+        button.btn.btn-outline-danger.btn-sm(type="submit") Cancel
+
+  dl.row
+    dt.col-sm-2 Source
+    dd.col-sm-10.text-uppercase= job.source
+    if job.spec.user
+      dt.col-sm-2 User
+      dd.col-sm-10= job.spec.user
+    dt.col-sm-2 Resource
+    dd.col-sm-10= job.resource ? job.resource.name : '—'
+    dt.col-sm-2 Target
+    dd.col-sm-10= `${job.spec.target.type} — ${(job.spec.target.labels || []).join(', ')}`
+    dt.col-sm-2 Created
+    dd.col-sm-10= fmtDate(job.created_at)
+    if job.message
+      dt.col-sm-2 Message
+      dd.col-sm-10= job.message
+
+  h2.h6.mt-4 Log
+  +logViewer(job.id, jobActive)
+
+  h2.h6.mt-4#artifacts Artifacts
+  if artifacts.length
+    ul.list-group
+      each a in artifacts
+        li.list-group-item.d-flex.justify-content-between
+          span= a.name
+          a(href=a.url) download
+  else
+    p.text-body-secondary No artifacts yet.