lakebed 0.0.8 → 0.0.10

package/src/anonymous-server.js

@@ -12,6 +12,7 @@ import {
   validateAnonymousDeployPayload
 } from "./anonymous.js";
 import { authFromUrl as resolveAuthFromUrl, createGuestAuth, requestOrigin, shooBaseUrlFromEnv } from "./auth.js";
+import { createSourceRuntimeFromEnv } from "./source-runtime.js";
 import { WebSocketServer } from "ws";
 
 function now() {
@@ -256,6 +257,7 @@ function quotaLimitForBucket(bucket, deploy) {
 }
 
 const USER_LIMIT_OVERRIDE_KEYS = ["requestsPerDay", "mutationsPerDay"];
+const USER_BOOST_MULTIPLIER = 20;
 
 function normalizeUserId(value) {
   const userId = String(value ?? "").trim();
@@ -276,6 +278,25 @@ function normalizeLimitOverrideValue(value, key) {
   return parsed;
 }
 
+function normalizeOptionalBoolean(value, key) {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (typeof value === "boolean") {
+    return value;
+  }
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if (normalized === "true") {
+      return true;
+    }
+    if (normalized === "false") {
+      return false;
+    }
+  }
+  throw new Error(`${key} must be a boolean.`);
+}
+
 function normalizeUserLimitOverrides(value = {}) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("limits must be a JSON object.");
@@ -298,9 +319,19 @@ function normalizeUserLimitOverrides(value = {}) {
   return overrides;
 }
 
-function limitsWithOverrides(baseLimits, limitOverrides) {
+function limitsWithBoost(baseLimits, boost = false) {
+  if (!boost) {
+    return { ...baseLimits };
+  }
+
+  return Object.fromEntries(
+    Object.entries(baseLimits).map(([key, value]) => [key, Number.isFinite(value) ? value * USER_BOOST_MULTIPLIER : value])
+  );
+}
+
+function limitsWithOverrides(baseLimits, limitOverrides, boost = false) {
   return {
-    ...baseLimits,
+    ...limitsWithBoost(baseLimits, boost),
     ...normalizeUserLimitOverrides(limitOverrides ?? {})
   };
 }
@@ -309,6 +340,7 @@ function userFromOwner(owner, current = {}) {
   const id = normalizeUserId(owner?.id ?? current.id);
   return {
     avatarUrl: owner?.avatarUrl ?? current.avatarUrl ?? null,
+    boost: Boolean(current.boost),
     createdAt: current.createdAt ?? now(),
     displayName: owner?.displayName ?? owner?.login ?? current.displayName ?? id,
     id,
@@ -326,13 +358,15 @@ function adminUserSummary({ activeDeployCount = 0, deployCount = 0, usage = [],
   return {
     activeDeployCount,
     avatarUrl: user.avatarUrl,
+    boost: Boolean(user.boost),
+    boostMultiplier: USER_BOOST_MULTIPLIER,
     createdAt: user.createdAt,
     defaultLimits: DEFAULT_ANONYMOUS_LIMITS,
     deployCount,
     displayName: user.displayName ?? user.login ?? user.id,
     id: user.id,
     limitOverrides,
-    limits: limitsWithOverrides(DEFAULT_ANONYMOUS_LIMITS, limitOverrides),
+    limits: limitsWithOverrides(DEFAULT_ANONYMOUS_LIMITS, limitOverrides, user.boost),
     login: user.login,
     provider: user.provider,
     providerId: user.providerId,
@@ -656,6 +690,15 @@ function adminDeploySummary({ artifact, artifactBytes = 0, deploy, logBytes = 0,
     logBytes,
     logEntries,
     name: artifact?.name ?? "Lakebed Capsule",
+    owner: deploy.owner
+      ? {
+          avatarUrl: deploy.owner.avatarUrl ?? null,
+          displayName: deploy.owner.displayName ?? deploy.owner.login ?? deploy.owner.id,
+          id: deploy.owner.id,
+          login: deploy.owner.login ?? null,
+          url: deploy.owner.url ?? null
+        }
+      : null,
     ownerId: deploy.ownerId,
     slug: deploy.slug,
     stateBytes,
@@ -677,16 +720,17 @@ function adminHtml() {
     <style>
       :root {
         color-scheme: dark;
-        --bg: #10100f;
-        --panel: #181816;
-        --line: #34342f;
-        --line-strong: #575247;
-        --text: #f3efe2;
-        --muted: #aaa28f;
-        --accent: #9ad66b;
-        --warn: #e9bc5d;
-        --bad: #ee7d71;
-        --ink: #0f120d;
+        --bg: #0f1115;
+        --panel: #16191f;
+        --panel-soft: #1b2028;
+        --line: #2a303a;
+        --line-strong: #3c4654;
+        --text: #e7eaf0;
+        --muted: #8f9aaa;
+        --accent: #d9e1ec;
+        --bad: #f08080;
+        --warn: #e0b55f;
+        --ink: #0c0e12;
       }
 
       * {
@@ -694,15 +738,11 @@ function adminHtml() {
       }
 
       body {
-        margin: 0;
-        background:
-          linear-gradient(90deg, rgba(154, 214, 107, 0.06) 1px, transparent 1px),
-          linear-gradient(180deg, rgba(154, 214, 107, 0.04) 1px, transparent 1px),
-          var(--bg);
-        background-size: 34px 34px;
+        background: var(--bg);
         color: var(--text);
-        font-family: "DIN Alternate", "Avenir Next", "Helvetica Neue", sans-serif;
+        font-family: Inter, "Avenir Next", "Helvetica Neue", Arial, sans-serif;
         letter-spacing: 0;
+        margin: 0;
       }
 
       button,
@@ -722,105 +762,164 @@ function adminHtml() {
 
       .shell {
         margin: 0 auto;
-        max-width: 1280px;
+        max-width: 1440px;
         min-height: 100vh;
-        padding: 24px 28px;
+        padding: 18px 22px;
       }
 
       .topbar {
         align-items: center;
         display: flex;
-        gap: 18px;
+        gap: 16px;
         justify-content: space-between;
-        margin-bottom: 24px;
+        margin-bottom: 14px;
       }
 
       .brand {
         display: grid;
-        gap: 4px;
+        gap: 2px;
       }
 
-      .eyebrow {
-        color: var(--accent);
+      .eyebrow,
+      .mono,
+      small,
+      th,
+      label,
+      .status-line,
+      .pager {
+        color: var(--muted);
         font-family: "SFMono-Regular", Consolas, monospace;
         font-size: 12px;
       }
 
-      h1 {
-        font-size: clamp(24px, 3vw, 36px);
-        font-weight: 700;
-        line-height: 1;
+      h1,
+      h2,
+      h3 {
         margin: 0;
       }
 
-      .actions {
+      h1 {
+        font-size: 28px;
+        line-height: 1.05;
+      }
+
+      h2 {
+        font-size: 15px;
+      }
+
+      h3 {
+        font-size: 14px;
+      }
+
+      .actions,
+      .tabs,
+      .pager,
+      .limit-actions {
+        align-items: center;
         display: flex;
-        flex-wrap: wrap;
-        gap: 10px;
+        gap: 8px;
+      }
+
+      .actions {
         justify-content: flex-end;
       }
 
+      .button,
+      .tab,
+      .row-action,
+      .icon-button {
+        align-items: center;
+        border-radius: 6px;
+        cursor: pointer;
+        display: inline-flex;
+        justify-content: center;
+      }
+
       .button {
         background: var(--accent);
         border: 1px solid var(--accent);
-        border-radius: 6px;
         color: var(--ink);
-        cursor: pointer;
         font-weight: 700;
-        min-height: 40px;
-        padding: 0 14px;
+        min-height: 34px;
+        padding: 0 12px;
       }
 
-      .button.secondary {
+      .button.secondary,
+      .tab,
+      .row-action,
+      .icon-button {
         background: transparent;
+        border: 1px solid var(--line-strong);
         color: var(--text);
       }
 
-      .metrics {
-        display: grid;
-        gap: 1px;
-        grid-template-columns: repeat(6, minmax(130px, 1fr));
-        margin-bottom: 26px;
+      .button:disabled,
+      .tab:disabled,
+      .row-action:disabled,
+      .icon-button:disabled {
+        cursor: default;
+        opacity: 0.48;
       }
 
-      .metric {
-        background: rgba(24, 24, 22, 0.94);
-        border: 1px solid var(--line);
-        min-height: 96px;
-        padding: 16px;
+      .tabs {
+        border-bottom: 1px solid var(--line);
+        margin-bottom: 14px;
+      }
+
+      .tab {
+        border-bottom-left-radius: 0;
+        border-bottom-right-radius: 0;
+        border-color: transparent;
+        min-height: 34px;
+        padding: 0 12px;
       }
 
-      .metric:first-child {
-        border-radius: 8px 0 0 8px;
+      .tab.active {
+        background: var(--panel);
+        border-color: var(--line);
+        border-bottom-color: var(--panel);
+        color: var(--text);
+        margin-bottom: -1px;
+      }
+
+      .metrics {
+        display: grid;
+        gap: 8px;
+        grid-template-columns: repeat(6, minmax(120px, 1fr));
+        margin-bottom: 14px;
       }
 
-      .metric:last-child {
-        border-radius: 0 8px 8px 0;
+      .metric {
+        background: var(--panel);
+        border: 1px solid var(--line);
+        border-radius: 6px;
+        min-height: 68px;
+        padding: 10px 12px;
       }
 
       .metric span {
         color: var(--muted);
         display: block;
         font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
-        margin-bottom: 12px;
+        font-size: 11px;
+        margin-bottom: 7px;
       }
 
       .metric strong {
         display: block;
-        font-size: 26px;
+        font-size: 20px;
         line-height: 1.1;
       }
 
       .panel {
-        background: rgba(24, 24, 22, 0.96);
+        background: var(--panel);
         border: 1px solid var(--line);
-        border-radius: 8px;
+        border-radius: 6px;
         overflow: hidden;
       }
 
       .panel + .panel {
-        margin-top: 18px;
+        margin-top: 12px;
       }
 
       .panel-head {
@@ -829,18 +928,16 @@ function adminHtml() {
         display: flex;
         gap: 12px;
         justify-content: space-between;
-        padding: 14px 16px;
+        padding: 10px 12px;
       }
 
-      .panel-head h2 {
-        font-size: 16px;
-        margin: 0;
+      .panel-head.tight {
+        align-items: flex-start;
       }
 
-      .status-line {
-        color: var(--muted);
-        font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
+      .panel-title {
+        display: grid;
+        gap: 3px;
       }
 
       .table-wrap {
@@ -849,27 +946,32 @@ function adminHtml() {
 
       table {
         border-collapse: collapse;
-        min-width: 1220px;
+        min-width: 900px;
         width: 100%;
       }
 
+      .deploy-table {
+        min-width: 960px;
+      }
+
+      .user-table {
+        min-width: 840px;
+      }
+
       th,
       td {
         border-bottom: 1px solid var(--line);
-        padding: 12px 14px;
+        padding: 8px 10px;
         text-align: left;
-        vertical-align: top;
+        vertical-align: middle;
       }
 
       th {
-        color: var(--muted);
-        font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
         font-weight: 600;
       }
 
       td {
-        font-size: 14px;
+        font-size: 13px;
         white-space: nowrap;
       }
 
@@ -877,185 +979,215 @@ function adminHtml() {
         border-bottom: 0;
       }
 
-      .deploy-name {
+      .stack {
         display: grid;
-        gap: 4px;
-        min-width: 240px;
+        gap: 2px;
       }
 
-      .deploy-name strong {
-        font-size: 15px;
+      .primary-text {
+        color: var(--text);
+        font-weight: 700;
       }
 
-      .mono,
-      .deploy-name small {
-        color: var(--muted);
-        font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
+      .name-cell {
+        display: grid;
+        gap: 3px;
+        min-width: 160px;
       }
 
-      .deploy-name small {
+      .name-cell small {
         white-space: normal;
       }
 
+      .user-cell {
+        display: grid;
+        gap: 3px;
+        min-width: 150px;
+      }
+
+      .name-line {
+        align-items: center;
+        display: flex;
+        gap: 6px;
+      }
+
+      .github-link {
+        align-items: center;
+        color: var(--muted);
+        display: inline-flex;
+        height: 18px;
+        justify-content: center;
+        width: 18px;
+      }
+
+      .github-link:hover {
+        color: var(--accent);
+      }
+
+      .github-link svg {
+        height: 15px;
+        width: 15px;
+      }
+
       .pill {
         border: 1px solid var(--line-strong);
         border-radius: 999px;
         display: inline-flex;
         font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
-        padding: 3px 8px;
+        font-size: 11px;
+        line-height: 1;
+        padding: 4px 7px;
       }
 
       .pill.active {
-        border-color: rgba(154, 214, 107, 0.75);
+        border-color: #65758a;
         color: var(--accent);
       }
 
       .pill.expired {
-        border-color: rgba(238, 125, 113, 0.75);
+        border-color: rgba(240, 128, 128, 0.75);
         color: var(--bad);
       }
 
       .pill.terminated {
-        border-color: rgba(233, 188, 93, 0.75);
+        border-color: rgba(224, 181, 95, 0.75);
         color: var(--warn);
       }
 
-      .status-cell {
-        align-items: center;
-        display: flex;
-        gap: 8px;
-      }
-
       .row-action {
-        background: transparent;
-        border: 1px solid rgba(238, 125, 113, 0.8);
-        border-radius: 6px;
-        color: var(--bad);
-        cursor: pointer;
-        font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
-        min-height: 32px;
-        padding: 0 10px;
+        min-height: 30px;
+        padding: 0 9px;
       }
 
-      .row-action:disabled {
-        border-color: var(--line);
-        color: var(--muted);
-        cursor: default;
-        opacity: 0.62;
+      .icon-button {
+        height: 30px;
+        padding: 0;
+        width: 30px;
       }
 
-      .row-action.neutral {
-        border-color: var(--line-strong);
-        color: var(--text);
+      .icon-button svg {
+        height: 15px;
+        width: 15px;
       }
 
-      .row-action.primary {
-        border-color: rgba(154, 214, 107, 0.8);
-        color: var(--accent);
+      .icon-button.danger {
+        border-color: rgba(240, 128, 128, 0.62);
+        color: var(--bad);
       }
 
-      .user-name {
+      .limit-cell {
         display: grid;
         gap: 4px;
-        min-width: 220px;
+        min-width: 112px;
       }
 
-      .user-name strong {
-        font-size: 15px;
+      .limit-combo {
+        display: grid;
+        gap: 4px;
+        min-width: 220px;
       }
 
-      .limit-cell {
+      .limit-row {
+        align-items: center;
         display: grid;
         gap: 6px;
-        min-width: 150px;
+        grid-template-columns: 16px 86px 1fr;
       }
 
-      .limit-cell input {
-        min-height: 34px;
-        padding: 0 10px;
+      .limit-row input {
+        min-height: 28px;
+        padding: 0 7px;
       }
 
-      .limit-form {
-        align-items: end;
-        display: grid;
-        gap: 8px;
-        grid-template-columns: minmax(180px, 1fr) 132px 132px auto;
-        width: min(100%, 720px);
+      .usage-cell {
+        min-width: 128px;
       }
 
-      .limit-form .field {
-        gap: 5px;
+      input {
+        background: #10131a;
+        border: 1px solid var(--line-strong);
+        border-radius: 6px;
+        color: var(--text);
+        min-height: 30px;
+        outline: none;
+        padding: 0 9px;
+        width: 100%;
       }
 
-      .limit-form input {
-        min-height: 36px;
+      input:focus {
+        border-color: #69778a;
       }
 
-      .limit-actions {
-        display: flex;
-        gap: 8px;
+      input[type="checkbox"] {
+        height: 16px;
+        min-height: 0;
+        width: 16px;
       }
 
-      th:nth-child(8),
-      td:nth-child(8),
-      th:nth-child(9),
-      td:nth-child(9) {
-        min-width: 124px;
+      .checkbox {
+        align-items: center;
+        color: var(--text);
+        display: inline-flex;
+        gap: 7px;
+        min-height: 30px;
       }
 
-      .login {
-        align-items: center;
-        display: flex;
-        min-height: calc(100vh - 56px);
+      .limit-form,
+      .detail-form {
+        align-items: end;
+        display: grid;
+        gap: 8px;
       }
 
-      .login-panel {
-        background: rgba(24, 24, 22, 0.98);
-        border: 1px solid var(--line);
-        border-radius: 8px;
-        max-width: 460px;
-        padding: 24px;
-        width: 100%;
+      .limit-form {
+        grid-template-columns: minmax(160px, 0.7fr) 100px 100px auto auto;
+        width: min(100%, 650px);
       }
 
-      .login-panel h1 {
-        font-size: 34px;
-        margin-bottom: 20px;
+      .detail-form {
+        grid-template-columns: auto 128px 128px auto auto;
+        width: min(100%, 700px);
       }
 
       .field {
         display: grid;
-        gap: 8px;
+        gap: 4px;
       }
 
-      label {
-        color: var(--muted);
-        font-family: "SFMono-Regular", Consolas, monospace;
-        font-size: 12px;
+      .pager {
+        border-top: 1px solid var(--line);
+        justify-content: flex-end;
+        min-height: 40px;
+        padding: 7px 10px;
       }
 
-      input {
-        background: #0c0d0b;
-        border: 1px solid var(--line-strong);
+      .pager button {
+        min-height: 28px;
+      }
+
+      .login {
+        align-items: center;
+        display: flex;
+        min-height: calc(100vh - 36px);
+      }
+
+      .login-panel {
+        background: var(--panel);
+        border: 1px solid var(--line);
         border-radius: 6px;
-        color: var(--text);
-        min-height: 44px;
-        outline: none;
-        padding: 0 12px;
+        max-width: 420px;
+        padding: 22px;
         width: 100%;
       }
 
-      input:focus {
-        border-color: var(--accent);
+      .login-panel h1 {
+        margin-bottom: 18px;
       }
 
       .form-row {
         display: flex;
-        gap: 10px;
-        margin-top: 16px;
+        gap: 8px;
+        margin-top: 14px;
       }
 
       .error {
@@ -1067,13 +1199,14 @@ function adminHtml() {
         display: none;
       }
 
-      @media (max-width: 860px) {
+      @media (max-width: 960px) {
         .shell {
-          padding: 18px;
+          padding: 14px;
         }
 
         .topbar,
-        .panel-head {
+        .panel-head,
+        .panel-head.tight {
           align-items: flex-start;
           flex-direction: column;
         }
@@ -1082,19 +1215,14 @@ function adminHtml() {
           justify-content: flex-start;
         }
 
-        .limit-form {
-          grid-template-columns: 1fr;
-          width: 100%;
-        }
-
         .metrics {
           grid-template-columns: repeat(2, minmax(0, 1fr));
         }
 
-        .metric,
-        .metric:first-child,
-        .metric:last-child {
-          border-radius: 8px;
+        .limit-form,
+        .detail-form {
+          grid-template-columns: 1fr;
+          width: 100%;
         }
       }
     </style>
@@ -1123,12 +1251,18 @@ function adminHtml() {
             <h1>Deploy monitor</h1>
           </div>
           <div class="actions">
+            <span class="status-line" id="status-line">Loading</span>
             <button class="button secondary" id="refresh-button" type="button">Refresh</button>
             <button class="button secondary" id="logout-button" type="button">Lock</button>
           </div>
         </header>
 
-        <section class="metrics" aria-label="Deploy resource totals">
+        <nav class="tabs" aria-label="Admin sections">
+          <button class="tab" id="deployments-tab" type="button">Deployments</button>
+          <button class="tab" id="users-tab" type="button">Users</button>
+        </nav>
+
+        <section class="metrics" aria-label="Resource totals">
           <div class="metric"><span>deploys</span><strong id="metric-deploys">0</strong></div>
           <div class="metric"><span>artifact bytes</span><strong id="metric-artifacts">0 B</strong></div>
           <div class="metric"><span>state bytes</span><strong id="metric-state">0 B</strong></div>
@@ -1137,35 +1271,40 @@ function adminHtml() {
           <div class="metric"><span>mutations today</span><strong id="metric-mutations">0</strong></div>
         </section>
 
-        <section class="panel">
+        <section class="panel" id="deployments-view">
           <div class="panel-head">
-            <h2>Deploy resource table</h2>
-            <div class="status-line" id="status-line">Loading</div>
+            <div class="panel-title">
+              <h2>Deployments</h2>
+              <span class="mono" id="deployments-count">0 deploys</span>
+            </div>
           </div>
           <div class="table-wrap">
-            <table>
+            <table class="deploy-table">
               <thead>
                 <tr>
                   <th>Deploy</th>
+                  <th>User</th>
                   <th>Status</th>
                   <th>Created</th>
                   <th>Expires</th>
-                  <th>Artifact</th>
-                  <th>State</th>
-                  <th>Logs</th>
-                  <th>Requests</th>
-                  <th>Mutations</th>
-                  <th>Connections</th>
+                  <th>Usage</th>
+                  <th>Storage</th>
+                  <th>Conn</th>
+                  <th></th>
                 </tr>
               </thead>
               <tbody id="deploy-rows"></tbody>
             </table>
           </div>
+          <div class="pager" id="deploy-pager"></div>
         </section>
 
-        <section class="panel">
-          <div class="panel-head">
-            <h2>User limit overrides</h2>
+        <section class="panel hidden" id="users-view">
+          <div class="panel-head tight">
+            <div class="panel-title">
+              <h2>User limit overrides</h2>
+              <span class="mono" id="users-count">0 users</span>
+            </div>
             <form class="limit-form" id="new-user-limit-form">
               <div class="field">
                 <label for="new-user-id">User id</label>
@@ -1179,40 +1318,121 @@ function adminHtml() {
                 <label for="new-user-mutations">Mutations</label>
                 <input id="new-user-mutations" name="mutationsPerDay" inputmode="numeric" min="1" step="1" type="number" />
               </div>
+              <label class="checkbox" for="new-user-boost">
+                <input id="new-user-boost" name="boost" type="checkbox" aria-label="Boost new user" />
+                Boost
+              </label>
               <button class="button secondary" type="submit">Save</button>
             </form>
           </div>
           <div class="table-wrap">
-            <table>
+            <table class="user-table">
               <thead>
                 <tr>
                   <th>User</th>
+                  <th>Created</th>
+                  <th>Boost</th>
                   <th>Deploys</th>
-                  <th>Requests today</th>
-                  <th>Mutations today</th>
-                  <th>Request limit</th>
-                  <th>Mutation limit</th>
+                  <th>Usage</th>
+                  <th>Limits</th>
                   <th>Actions</th>
                 </tr>
               </thead>
               <tbody id="user-rows"></tbody>
             </table>
           </div>
+          <div class="pager" id="user-pager"></div>
+        </section>
+
+        <section class="hidden" id="user-detail-view">
+          <section class="panel">
+            <div class="panel-head tight">
+              <div class="panel-title">
+                <a class="mono" data-route="users" href="/admin/users">Back to users</a>
+                <div class="name-line">
+                  <h2 id="detail-title">User</h2>
+                  <span id="detail-github"></span>
+                </div>
+                <span class="mono" id="detail-meta"></span>
+              </div>
+              <form class="detail-form" id="user-detail-form">
+                <label class="checkbox" for="detail-boost">
+                  <input id="detail-boost" name="boost" type="checkbox" aria-label="Boost selected user" />
+                  Boost
+                </label>
+                <div class="field">
+                  <label for="detail-requests">Requests</label>
+                  <input id="detail-requests" name="requestsPerDay" inputmode="numeric" min="1" step="1" type="number" />
+                </div>
+                <div class="field">
+                  <label for="detail-mutations">Mutations</label>
+                  <input id="detail-mutations" name="mutationsPerDay" inputmode="numeric" min="1" step="1" type="number" />
+                </div>
+                <button class="button secondary" type="submit">Save</button>
+                <button class="row-action" id="detail-clear-button" type="button">Clear</button>
+              </form>
+            </div>
+          </section>
+
+          <section class="panel">
+            <div class="panel-head">
+              <div class="panel-title">
+                <h2>Deployments</h2>
+                <span class="mono" id="user-deployments-count">0 deploys</span>
+              </div>
+            </div>
+            <div class="table-wrap">
+              <table class="deploy-table">
+                <thead>
+                  <tr>
+                    <th>Deploy</th>
+                    <th>User</th>
+                    <th>Status</th>
+                    <th>Created</th>
+                    <th>Expires</th>
+                    <th>Usage</th>
+                    <th>Storage</th>
+                    <th>Conn</th>
+                    <th></th>
+                  </tr>
+                </thead>
+                <tbody id="user-deploy-rows"></tbody>
+              </table>
+            </div>
+            <div class="pager" id="user-deploy-pager"></div>
+          </section>
         </section>
       </section>
     </main>
 
     <script>
+      const pageSize = 20;
       const loginView = document.getElementById("login-view");
       const dashboardView = document.getElementById("dashboard-view");
       const loginForm = document.getElementById("login-form");
       const loginError = document.getElementById("login-error");
+      const statusLine = document.getElementById("status-line");
+      const deploymentsView = document.getElementById("deployments-view");
+      const usersView = document.getElementById("users-view");
+      const userDetailView = document.getElementById("user-detail-view");
       const rows = document.getElementById("deploy-rows");
       const userRows = document.getElementById("user-rows");
+      const userDeployRows = document.getElementById("user-deploy-rows");
+      const deployPager = document.getElementById("deploy-pager");
+      const userPager = document.getElementById("user-pager");
+      const userDeployPager = document.getElementById("user-deploy-pager");
       const newUserLimitForm = document.getElementById("new-user-limit-form");
-      const statusLine = document.getElementById("status-line");
-      let terminatingDeployId = null;
-      let savingUserId = null;
+      const userDetailForm = document.getElementById("user-detail-form");
+      const state = {
+        deployPage: 1,
+        loadingUserId: null,
+        savingUserId: null,
+        summary: null,
+        terminatingDeployId: null,
+        userDeployPage: 1,
+        userDetail: null,
+        userPage: 1
+      };
 
       function show(view) {
         loginView.classList.toggle("hidden", view !== "login");
@@ -1239,21 +1459,104 @@ function adminHtml() {
           return "unknown";
         }
         return new Intl.DateTimeFormat(undefined, {
-          dateStyle: "medium",
+          dateStyle: "short",
           timeStyle: "short"
         }).format(new Date(value));
       }
 
+      function plural(count, label) {
+        return formatNumber(count) + " " + label + (count === 1 ? "" : "s");
+      }
+
+      function shortId(value) {
+        return String(value || "").slice(0, 8);
+      }
+
       function setMetric(id, value) {
         document.getElementById(id).textContent = value;
       }
 
+      function textCell(value, className) {
+        const td = document.createElement("td");
+        td.textContent = value;
+        if (className) {
+          td.className = className;
+        }
+        return td;
+      }
+
+      function stackCell(lines, className) {
+        const td = document.createElement("td");
+        const wrap = document.createElement("div");
+        wrap.className = "stack" + (className ? " " + className : "");
+        for (const line of lines) {
+          const item = document.createElement("span");
+          item.textContent = line;
+          wrap.appendChild(item);
+        }
+        td.appendChild(wrap);
+        return td;
+      }
+
+      function externalLink(link) {
+        link.target = "_blank";
+        link.rel = "noopener noreferrer";
+        return link;
+      }
+
+      function githubProfileLink(url, label) {
+        if (!url) {
+          return null;
+        }
+        const link = document.createElement("a");
+        link.className = "github-link";
+        link.href = url;
+        link.title = "Open GitHub profile";
+        link.setAttribute("aria-label", "Open GitHub profile for " + label);
+        link.innerHTML = '<svg viewBox="0 0 16 16" aria-hidden="true" fill="currentColor"><path d="M8 0C3.58 0 0 3.67 0 8.19c0 3.62 2.29 6.69 5.47 7.78.4.08.55-.18.55-.4 0-.2-.01-.84-.01-1.53-2.01.38-2.53-.5-2.69-.96-.09-.24-.48-.96-.82-1.16-.28-.15-.68-.53-.01-.54.63-.01 1.08.59 1.23.84.72 1.24 1.87.89 2.33.68.07-.53.28-.89.51-1.1-1.78-.21-3.64-.91-3.64-4.04 0-.89.31-1.62.82-2.19-.08-.21-.36-1.04.08-2.16 0 0 .67-.22 2.2.84A7.37 7.37 0 0 1 8 3.98c.68 0 1.36.09 2 .27 1.53-1.06 2.2-.84 2.2-.84.44 1.12.16 1.95.08 2.16.51.57.82 1.3.82 2.19 0 3.14-1.87 3.83-3.65 4.04.29.26.54.75.54 1.52 0 1.1-.01 1.98-.01 2.25 0 .22.15.48.55.4A8.06 8.06 0 0 0 16 8.19C16 3.67 12.42 0 8 0Z"/></svg>';
+        return externalLink(link);
+      }
+
+      function routeFor(view, userId) {
+        if (view === "user") {
+          return "/admin/users/" + encodeURIComponent(userId);
+        }
+        if (view === "users") {
+          return "/admin/users";
+        }
+        return "/admin/deployments";
+      }
+
+      function parseRoute() {
+        const userMatch = window.location.pathname.match(/^\\/admin\\/users\\/(.+)$/);
+        if (userMatch) {
+          return { userId: decodeURIComponent(userMatch[1]), view: "user" };
+        }
+        if (window.location.pathname === "/admin/users") {
+          return { view: "users" };
+        }
+        if (window.location.pathname === "/admin/deployments") {
+          return { view: "deployments" };
+        }
+        if (new URLSearchParams(window.location.search).get("tab") === "deployments") {
+          return { view: "deployments" };
+        }
+        if (new URLSearchParams(window.location.search).get("tab") === "users") {
+          return { view: "users" };
+        }
+        return { view: "users" };
+      }
+
+      function navigate(view, userId) {
+        history.pushState({}, "", routeFor(view, userId));
+        renderCurrent();
+      }
+
       function parseLimitValue(value, name) {
         const trimmed = String(value || "").trim();
         if (!trimmed) {
           return null;
         }
-
         const parsed = Number(trimmed);
         if (!Number.isSafeInteger(parsed) || parsed < 1) {
           throw new Error(name + " must be a positive integer.");
@@ -1261,87 +1564,241 @@ function adminHtml() {
         return parsed;
       }
 
-      function textCell(value, className) {
-        const td = document.createElement("td");
-        td.textContent = value;
-        if (className) {
-          td.className = className;
+      function pageCount(total) {
+        return Math.max(1, Math.ceil(total / pageSize));
+      }
+
+      function clampPage(page, total) {
+        return Math.min(Math.max(1, page), pageCount(total));
+      }
+
+      function pageItems(items, page) {
+        const currentPage = clampPage(page, items.length);
+        const start = (currentPage - 1) * pageSize;
+        return {
+          currentPage,
+          items: items.slice(start, start + pageSize),
+          start
+        };
+      }
+
+      function renderPager(container, total, page, onPage) {
+        container.replaceChildren();
+        if (total <= pageSize) {
+          return;
         }
-        return td;
+        const currentPage = clampPage(page, total);
+        const start = (currentPage - 1) * pageSize + 1;
+        const end = Math.min(total, currentPage * pageSize);
+        const label = document.createElement("span");
+        const previous = document.createElement("button");
+        const next = document.createElement("button");
+        label.textContent = formatNumber(start) + "-" + formatNumber(end) + " of " + formatNumber(total);
+        previous.className = "row-action";
+        previous.type = "button";
+        previous.textContent = "Prev";
+        previous.disabled = currentPage <= 1;
+        previous.addEventListener("click", () => onPage(currentPage - 1));
+        next.className = "row-action";
+        next.type = "button";
+        next.textContent = "Next";
+        next.disabled = currentPage >= pageCount(total);
+        next.addEventListener("click", () => onPage(currentPage + 1));
+        container.appendChild(label);
+        container.appendChild(previous);
+        container.appendChild(next);
       }
 
       function deployCell(deploy) {
         const td = document.createElement("td");
         const wrap = document.createElement("div");
-        const name = document.createElement("strong");
-        const link = document.createElement("a");
+        const name = document.createElement("a");
         const id = document.createElement("small");
-        wrap.className = "deploy-name";
-        link.href = deploy.url;
-        link.textContent = deploy.name || deploy.slug;
-        name.appendChild(link);
-        id.textContent = deploy.id + " / " + deploy.slug;
+        wrap.className = "name-cell";
+        name.className = "primary-text";
+        name.href = deploy.url;
+        name.textContent = deploy.name || deploy.slug;
+        externalLink(name);
+        id.textContent = shortId(deploy.id) + " / " + deploy.slug;
         wrap.appendChild(name);
         wrap.appendChild(id);
         td.appendChild(wrap);
         return td;
       }
 
-      function statusCell(deploy) {
+      function deployUserCell(deploy) {
         const td = document.createElement("td");
         const wrap = document.createElement("div");
+        wrap.className = "user-cell";
+        if (!deploy.ownerId) {
+          const anon = document.createElement("span");
+          anon.className = "mono";
+          anon.textContent = "anonymous";
+          wrap.appendChild(anon);
+          td.appendChild(wrap);
+          return td;
+        }
+
+        const line = document.createElement("div");
+        const link = document.createElement("a");
+        const id = document.createElement("small");
+        const label = deploy.owner?.login || deploy.owner?.displayName || deploy.ownerId;
+        line.className = "name-line";
+        link.className = "primary-text";
+        link.dataset.route = "user";
+        link.href = routeFor("user", deploy.ownerId);
+        link.textContent = label;
+        id.textContent = deploy.ownerId;
+        line.appendChild(link);
+        const github = githubProfileLink(deploy.owner?.url, label);
+        if (github) {
+          line.appendChild(github);
+        }
+        wrap.appendChild(line);
+        wrap.appendChild(id);
+        td.appendChild(wrap);
+        return td;
+      }
+
+      function statusCell(deploy) {
+        const td = document.createElement("td");
         const pill = document.createElement("span");
-        wrap.className = "status-cell";
         pill.className = "pill " + deploy.status;
         pill.textContent = deploy.status;
-        wrap.appendChild(pill);
-
-        if (deploy.status === "active") {
-          const button = document.createElement("button");
-          button.className = "row-action";
-          button.type = "button";
-          button.textContent = terminatingDeployId === deploy.id ? "Terminating" : "Terminate";
-          button.disabled = terminatingDeployId === deploy.id;
-          button.addEventListener("click", () => {
-            void terminateDeploy(deploy).catch((error) => {
-              statusLine.textContent = error instanceof Error ? error.message : String(error);
-            });
+        td.appendChild(pill);
+        return td;
+      }
+
+      function usageCell(deploy) {
+        return stackCell(
+          [
+            "R " + formatNumber(deploy.requestsToday) + " / " + formatNumber(deploy.limits.requestsPerDay),
+            "M " + formatNumber(deploy.mutationsToday) + " / " + formatNumber(deploy.limits.mutationsPerDay)
+          ],
+          "mono"
+        );
+      }
+
+      function storageCell(deploy) {
+        return stackCell(
+          [
+            formatNumber(deploy.stateRows) + " rows / " + formatBytes(deploy.stateBytes),
+            "artifact " + formatBytes(deploy.artifactBytes)
+          ],
+          "mono"
+        );
+      }
+
+      function actionCell(deploy) {
+        const td = document.createElement("td");
+        if (deploy.status !== "active") {
+          return td;
+        }
+        const button = document.createElement("button");
+        button.className = "icon-button danger";
+        button.type = "button";
+        button.title = "Terminate deploy";
+        button.setAttribute("aria-label", "Terminate deploy " + deploy.id);
+        button.disabled = state.terminatingDeployId === deploy.id;
+        button.innerHTML = '<svg viewBox="0 0 24 24" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 6h18"/><path d="M8 6V4h8v2"/><path d="M19 6l-1 14H6L5 6"/><path d="M10 11v6"/><path d="M14 11v6"/></svg>';
+        button.addEventListener("click", () => {
+          void terminateDeploy(deploy).catch((error) => {
+            statusLine.textContent = error instanceof Error ? error.message : String(error);
           });
-          wrap.appendChild(button);
+        });
+        td.appendChild(button);
+        return td;
+      }
+
+      function renderDeployRows(tbody, deploys, emptyText) {
+        tbody.replaceChildren();
+        if (!deploys.length) {
+          const tr = document.createElement("tr");
+          const td = textCell(emptyText, "mono");
+          td.colSpan = 9;
+          tr.appendChild(td);
+          tbody.appendChild(tr);
+          return;
         }
 
-        td.appendChild(wrap);
-        return td;
+        for (const deploy of deploys) {
+          const tr = document.createElement("tr");
+          tr.appendChild(deployCell(deploy));
+          tr.appendChild(deployUserCell(deploy));
+          tr.appendChild(statusCell(deploy));
+          tr.appendChild(textCell(formatTime(deploy.createdAt), "mono"));
+          tr.appendChild(textCell(formatTime(deploy.expiresAt), "mono"));
+          tr.appendChild(usageCell(deploy));
+          tr.appendChild(storageCell(deploy));
+          tr.appendChild(textCell(formatNumber(deploy.connections), "mono"));
+          tr.appendChild(actionCell(deploy));
+          tbody.appendChild(tr);
+        }
       }
 
       function userCell(user) {
         const td = document.createElement("td");
         const wrap = document.createElement("div");
-        const name = document.createElement("strong");
+        const line = document.createElement("div");
+        const name = document.createElement("a");
         const id = document.createElement("small");
-        wrap.className = "user-name";
-        if (user.url) {
-          const link = document.createElement("a");
-          link.href = user.url;
-          link.textContent = user.login || user.displayName || user.id;
-          name.appendChild(link);
-        } else {
-          name.textContent = user.login || user.displayName || user.id;
-        }
-        id.className = "mono";
+        const label = user.login || user.displayName || user.id;
+        wrap.className = "user-cell";
+        line.className = "name-line";
+        name.className = "primary-text";
+        name.dataset.route = "user";
+        name.href = routeFor("user", user.id);
+        name.textContent = label;
         id.textContent = user.id;
-        wrap.appendChild(name);
+        line.appendChild(name);
+        const github = githubProfileLink(user.url, label);
+        if (github) {
+          line.appendChild(github);
+        }
+        wrap.appendChild(line);
         wrap.appendChild(id);
         td.appendChild(wrap);
         return td;
       }
 
-      function limitInputCell(user, key, label) {
+      function boostCell(user) {
         const td = document.createElement("td");
-        const wrap = document.createElement("div");
+        const label = document.createElement("label");
+        const input = document.createElement("input");
+        label.className = "checkbox";
+        input.type = "checkbox";
+        input.dataset.key = "boost";
+        input.checked = Boolean(user.boost);
+        input.setAttribute("aria-label", "Boost " + user.id);
+        input.addEventListener("change", () => {
+          void saveUserSettings(user.id, input.closest("tr")).catch((error) => {
+            statusLine.textContent = error instanceof Error ? error.message : String(error);
+          });
+        });
+        label.appendChild(input);
+        label.appendChild(document.createTextNode("20x"));
+        td.appendChild(label);
+        return td;
+      }
+
+      function userUsageCell(user) {
+        return stackCell(
+          [
+            "R " + formatNumber(user.requestsToday) + " / " + formatNumber(user.limits.requestsPerDay),
+            "M " + formatNumber(user.mutationsToday) + " / " + formatNumber(user.limits.mutationsPerDay)
+          ],
+          "mono usage-cell"
+        );
+      }
+
+      function limitControl(user, key, label, shortLabel) {
+        const row = document.createElement("div");
+        const prefix = document.createElement("span");
         const input = document.createElement("input");
         const effective = document.createElement("small");
-        wrap.className = "limit-cell";
+        row.className = "limit-row";
+        prefix.className = "mono";
+        prefix.textContent = shortLabel;
         input.inputMode = "numeric";
         input.min = "1";
         input.step = "1";
@@ -1350,10 +1807,19 @@ function adminHtml() {
         input.value = user.limitOverrides[key] ? String(user.limitOverrides[key]) : "";
         input.placeholder = String(user.defaultLimits[key]);
         input.setAttribute("aria-label", label + " override for " + user.id);
-        effective.className = "mono";
-        effective.textContent = "effective " + formatNumber(user.limits[key]);
-        wrap.appendChild(input);
-        wrap.appendChild(effective);
+        effective.textContent = formatNumber(user.limits[key]);
+        row.appendChild(prefix);
+        row.appendChild(input);
+        row.appendChild(effective);
+        return row;
+      }
+
+      function userLimitsCell(user) {
+        const td = document.createElement("td");
+        const wrap = document.createElement("div");
+        wrap.className = "limit-combo";
+        wrap.appendChild(limitControl(user, "requestsPerDay", "Request limit", "R"));
+        wrap.appendChild(limitControl(user, "mutationsPerDay", "Mutation limit", "M"));
         td.appendChild(wrap);
         return td;
       }
@@ -1364,21 +1830,24 @@ function adminHtml() {
         const save = document.createElement("button");
         const clear = document.createElement("button");
         wrap.className = "limit-actions";
-        save.className = "row-action primary";
+        save.className = "row-action";
         save.type = "button";
-        save.textContent = savingUserId === user.id ? "Saving" : "Save";
-        save.disabled = savingUserId === user.id;
+        save.textContent = state.savingUserId === user.id ? "Saving" : "Save";
+        save.disabled = state.savingUserId === user.id;
         save.addEventListener("click", () => {
-          void saveUserLimits(user.id, save.closest("tr")).catch((error) => {
+          void saveUserSettings(user.id, save.closest("tr")).catch((error) => {
             statusLine.textContent = error instanceof Error ? error.message : String(error);
           });
         });
-        clear.className = "row-action neutral";
+        clear.className = "row-action";
         clear.type = "button";
         clear.textContent = "Clear";
-        clear.disabled = savingUserId === user.id;
+        clear.disabled = state.savingUserId === user.id;
         clear.addEventListener("click", () => {
-          void saveUserLimits(user.id, null, { requestsPerDay: null, mutationsPerDay: null }).catch((error) => {
+          void saveUserSettings(user.id, null, {
+            boost: Boolean(user.boost),
+            limits: { requestsPerDay: null, mutationsPerDay: null }
+          }).catch((error) => {
             statusLine.textContent = error instanceof Error ? error.message : String(error);
           });
         });
@@ -1388,7 +1857,7 @@ function adminHtml() {
         return td;
       }
 
-      function render(summary) {
+      function renderMetrics(summary) {
         setMetric("metric-deploys", formatNumber(summary.deployCount));
         setMetric("metric-artifacts", formatBytes(summary.totals.artifactBytes));
         setMetric("metric-state", formatBytes(summary.totals.stateBytes));
@@ -1396,42 +1865,128 @@ function adminHtml() {
         setMetric("metric-requests", formatNumber(summary.totals.requestsToday));
         setMetric("metric-mutations", formatNumber(summary.totals.mutationsToday));
         statusLine.textContent = "Updated " + formatTime(summary.generatedAt);
-        rows.replaceChildren();
+      }
 
-        for (const deploy of summary.deploys) {
+      function renderDeployments() {
+        const deploys = state.summary?.deploys || [];
+        state.deployPage = clampPage(state.deployPage, deploys.length);
+        const page = pageItems(deploys, state.deployPage);
+        document.getElementById("deployments-count").textContent = plural(deploys.length, "deploy");
+        renderDeployRows(rows, page.items, "No deployments yet.");
+        renderPager(deployPager, deploys.length, state.deployPage, (nextPage) => {
+          state.deployPage = nextPage;
+          renderDeployments();
+        });
+      }
+
+      function renderUsers() {
+        const users = state.summary?.users || [];
+        state.userPage = clampPage(state.userPage, users.length);
+        const page = pageItems(users, state.userPage);
+        document.getElementById("users-count").textContent = plural(users.length, "user");
+        userRows.replaceChildren();
+
+        if (!page.items.length) {
           const tr = document.createElement("tr");
-          tr.appendChild(deployCell(deploy));
-          tr.appendChild(statusCell(deploy));
-          tr.appendChild(textCell(formatTime(deploy.createdAt)));
-          tr.appendChild(textCell(formatTime(deploy.expiresAt)));
-          tr.appendChild(textCell(formatBytes(deploy.artifactBytes), "mono"));
-          tr.appendChild(textCell(formatBytes(deploy.stateBytes) + " / " + formatNumber(deploy.stateRows) + " rows", "mono"));
-          tr.appendChild(textCell(formatBytes(deploy.logBytes) + " / " + formatNumber(deploy.logEntries) + " entries", "mono"));
-          tr.appendChild(textCell(formatNumber(deploy.requestsToday) + " / " + formatNumber(deploy.limits.requestsPerDay), "mono"));
-          tr.appendChild(textCell(formatNumber(deploy.mutationsToday) + " / " + formatNumber(deploy.limits.mutationsPerDay), "mono"));
-          tr.appendChild(textCell(formatNumber(deploy.connections), "mono"));
-          rows.appendChild(tr);
+          const td = textCell("No claimed users or manual overrides yet.", "mono");
+          td.colSpan = 7;
+          tr.appendChild(td);
+          userRows.appendChild(tr);
         }
 
-        userRows.replaceChildren();
-        for (const user of summary.users || []) {
+        for (const user of page.items) {
           const tr = document.createElement("tr");
           tr.appendChild(userCell(user));
+          tr.appendChild(textCell(formatTime(user.createdAt), "mono"));
+          tr.appendChild(boostCell(user));
           tr.appendChild(textCell(formatNumber(user.activeDeployCount) + " / " + formatNumber(user.deployCount), "mono"));
-          tr.appendChild(textCell(formatNumber(user.requestsToday) + " / " + formatNumber(user.limits.requestsPerDay), "mono"));
-          tr.appendChild(textCell(formatNumber(user.mutationsToday) + " / " + formatNumber(user.limits.mutationsPerDay), "mono"));
-          tr.appendChild(limitInputCell(user, "requestsPerDay", "Request limit"));
-          tr.appendChild(limitInputCell(user, "mutationsPerDay", "Mutation limit"));
+          tr.appendChild(userUsageCell(user));
+          tr.appendChild(userLimitsCell(user));
           tr.appendChild(userActionCell(user));
           userRows.appendChild(tr);
         }
 
-        if (!summary.users?.length) {
-          const tr = document.createElement("tr");
-          const td = textCell("No claimed users or manual overrides yet.", "mono");
-          td.colSpan = 7;
-          tr.appendChild(td);
-          userRows.appendChild(tr);
+        renderPager(userPager, users.length, state.userPage, (nextPage) => {
+          state.userPage = nextPage;
+          renderUsers();
+        });
+      }
+
+      function fillDetailForm(user) {
+        userDetailForm.dataset.userId = user.id;
+        document.getElementById("detail-boost").checked = Boolean(user.boost);
+        document.getElementById("detail-requests").value = user.limitOverrides.requestsPerDay ? String(user.limitOverrides.requestsPerDay) : "";
+        document.getElementById("detail-requests").placeholder = String(user.defaultLimits.requestsPerDay);
+        document.getElementById("detail-mutations").value = user.limitOverrides.mutationsPerDay ? String(user.limitOverrides.mutationsPerDay) : "";
+        document.getElementById("detail-mutations").placeholder = String(user.defaultLimits.mutationsPerDay);
+      }
+
+      function renderUserDetail(userId) {
+        const detail = state.userDetail?.user?.id === userId ? state.userDetail : null;
+        if (!detail) {
+          document.getElementById("detail-title").textContent = "Loading user";
+          document.getElementById("detail-github").replaceChildren();
+          document.getElementById("detail-meta").textContent = userId;
+          renderDeployRows(userDeployRows, [], "Loading deployments.");
+          userDeployPager.replaceChildren();
+          if (state.loadingUserId !== userId) {
+            void loadUserDetail(userId).catch((error) => {
+              statusLine.textContent = error instanceof Error ? error.message : String(error);
+            });
+          }
+          return;
+        }
+
+        const user = detail.user;
+        const deploys = detail.deploys || [];
+        state.userDeployPage = clampPage(state.userDeployPage, deploys.length);
+        const page = pageItems(deploys, state.userDeployPage);
+        const userLabel = user.login || user.displayName || user.id;
+        const detailGithub = document.getElementById("detail-github");
+        document.getElementById("detail-title").textContent = userLabel;
+        detailGithub.replaceChildren();
+        const github = githubProfileLink(user.url, userLabel);
+        if (github) {
+          detailGithub.appendChild(github);
+        }
+        document.getElementById("detail-meta").textContent =
+          user.id +
+          " · created " +
+          formatTime(user.createdAt) +
+          " · " +
+          formatNumber(user.activeDeployCount) +
+          " active / " +
+          formatNumber(user.deployCount) +
+          " total";
+        document.getElementById("user-deployments-count").textContent = plural(deploys.length, "deploy");
+        fillDetailForm(user);
+        renderDeployRows(userDeployRows, page.items, "This user has no deployments.");
+        renderPager(userDeployPager, deploys.length, state.userDeployPage, (nextPage) => {
+          state.userDeployPage = nextPage;
+          renderUserDetail(user.id);
+        });
+      }
+
+      function renderCurrent() {
+        const route = parseRoute();
+        const isUsers = route.view === "users" || route.view === "user";
+        document.getElementById("deployments-tab").classList.toggle("active", route.view === "deployments");
+        document.getElementById("users-tab").classList.toggle("active", isUsers);
+        deploymentsView.classList.toggle("hidden", route.view !== "deployments");
+        usersView.classList.toggle("hidden", route.view !== "users");
+        userDetailView.classList.toggle("hidden", route.view !== "user");
+
+        if (!state.summary) {
+          return;
+        }
+
+        renderMetrics(state.summary);
+        if (route.view === "deployments") {
+          renderDeployments();
+        } else if (route.view === "users") {
+          renderUsers();
+        } else {
+          renderUserDetail(route.userId);
         }
       }
 
@@ -1449,21 +2004,47 @@ function adminHtml() {
         if (!response.ok) {
           throw new Error(await response.text());
         }
-        render(await response.json());
+        state.summary = await response.json();
+        state.userDetail = null;
         show("dashboard");
+        renderCurrent();
       }
 
-      async function saveUserLimits(userId, row, explicitLimits) {
-        const limits = explicitLimits || {
-          requestsPerDay: parseLimitValue(row.querySelector('input[data-key="requestsPerDay"]').value, "Request limit"),
-          mutationsPerDay: parseLimitValue(row.querySelector('input[data-key="mutationsPerDay"]').value, "Mutation limit")
+      async function loadUserDetail(userId) {
+        state.loadingUserId = userId;
+        try {
+          const response = await fetch("/admin/api/users/" + encodeURIComponent(userId));
+          if (response.status === 401) {
+            show("login");
+            return;
+          }
+          if (!response.ok) {
+            throw new Error(await response.text());
+          }
+          state.userDetail = await response.json();
+        } finally {
+          state.loadingUserId = null;
+        }
+        renderCurrent();
+      }
+
+      function settingsFromRow(row) {
+        return {
+          boost: row.querySelector('input[data-key="boost"]').checked,
+          limits: {
+            requestsPerDay: parseLimitValue(row.querySelector('input[data-key="requestsPerDay"]').value, "Request limit"),
+            mutationsPerDay: parseLimitValue(row.querySelector('input[data-key="mutationsPerDay"]').value, "Mutation limit")
+          }
         };
+      }
 
-        savingUserId = userId;
-        statusLine.textContent = "Saving limits for " + userId;
+      async function saveUserSettings(userId, row, explicitSettings) {
+        const settings = explicitSettings || settingsFromRow(row);
+        state.savingUserId = userId;
+        statusLine.textContent = "Saving " + userId;
         try {
           const response = await fetch("/admin/api/users/" + encodeURIComponent(userId) + "/limits", {
-            body: JSON.stringify({ limits }),
+            body: JSON.stringify(settings),
             headers: { "Content-Type": "application/json" },
             method: "PUT"
           });
@@ -1477,7 +2058,7 @@ function adminHtml() {
             throw new Error(await response.text());
           }
         } finally {
-          savingUserId = null;
+          state.savingUserId = null;
         }
         await loadSummary();
       }
@@ -1487,12 +2068,12 @@ function adminHtml() {
           return;
         }
 
-        terminatingDeployId = deploy.id;
+        state.terminatingDeployId = deploy.id;
         statusLine.textContent = "Terminating " + deploy.id;
         const response = await fetch("/admin/api/deploys/" + encodeURIComponent(deploy.id) + "/terminate", {
           method: "POST"
         });
-        terminatingDeployId = null;
+        state.terminatingDeployId = null;
 
         if (response.status === 401) {
           show("login");
@@ -1534,16 +2115,20 @@ function adminHtml() {
         }
 
         try {
+          const boost = document.getElementById("new-user-boost").checked;
           const requestsPerDay = parseLimitValue(form.get("requestsPerDay"), "Request limit");
           const mutationsPerDay = parseLimitValue(form.get("mutationsPerDay"), "Mutation limit");
-          if (!requestsPerDay && !mutationsPerDay) {
-            statusLine.textContent = "Enter at least one custom limit.";
+          if (!boost && !requestsPerDay && !mutationsPerDay) {
+            statusLine.textContent = "Enter a custom limit or turn on boost.";
             return;
           }
 
-          await saveUserLimits(userId, null, {
-            requestsPerDay,
-            mutationsPerDay
+          await saveUserSettings(userId, null, {
+            boost,
+            limits: {
+              requestsPerDay,
+              mutationsPerDay
+            }
           });
           newUserLimitForm.reset();
         } catch (error) {
@@ -1551,15 +2136,60 @@ function adminHtml() {
         }
       });
 
+      userDetailForm.addEventListener("submit", async (event) => {
+        event.preventDefault();
+        const userId = userDetailForm.dataset.userId;
+        if (!userId) {
+          return;
+        }
+        try {
+          await saveUserSettings(userId, null, {
+            boost: document.getElementById("detail-boost").checked,
+            limits: {
+              requestsPerDay: parseLimitValue(document.getElementById("detail-requests").value, "Request limit"),
+              mutationsPerDay: parseLimitValue(document.getElementById("detail-mutations").value, "Mutation limit")
+            }
+          });
+        } catch (error) {
+          statusLine.textContent = error instanceof Error ? error.message : String(error);
+        }
+      });
+
+      document.getElementById("detail-clear-button").addEventListener("click", () => {
+        const userId = userDetailForm.dataset.userId;
+        if (!userId) {
+          return;
+        }
+        void saveUserSettings(userId, null, {
+          boost: document.getElementById("detail-boost").checked,
+          limits: { requestsPerDay: null, mutationsPerDay: null }
+        }).catch((error) => {
+          statusLine.textContent = error instanceof Error ? error.message : String(error);
+        });
+      });
+
+      document.getElementById("deployments-tab").addEventListener("click", () => navigate("deployments"));
+      document.getElementById("users-tab").addEventListener("click", () => navigate("users"));
       document.getElementById("refresh-button").addEventListener("click", () => {
         void loadSummary();
       });
-
       document.getElementById("logout-button").addEventListener("click", async () => {
         await fetch("/admin/api/logout", { method: "POST" });
         show("login");
       });
 
+      document.addEventListener("click", (event) => {
+        const link = event.target.closest("a[data-route]");
+        if (!link) {
+          return;
+        }
+        event.preventDefault();
+        history.pushState({}, "", link.href);
+        renderCurrent();
+      });
+
+      window.addEventListener("popstate", renderCurrent);
+
       void loadSummary().catch((error) => {
         statusLine.textContent = error.message;
         show("dashboard");
@@ -1601,7 +2231,7 @@ function developerHtml({ authConfigured, deploys = [], user }) {
   const rows = deploys
     .map(
       (deploy) => `<tr>
-        <td><a href="${escapeHtml(deploy.url)}">${escapeHtml(deploy.name)}</a><small>${escapeHtml(deploy.deployId)} / ${escapeHtml(deploy.slug)}</small></td>
+        <td><a href="${escapeHtml(deploy.url)}" target="_blank" rel="noopener noreferrer">${escapeHtml(deploy.name)}</a><small>${escapeHtml(deploy.deployId)} / ${escapeHtml(deploy.slug)}</small></td>
         <td><span class="pill ${escapeHtml(deploy.status)}">${escapeHtml(deploy.status)}</span></td>
         <td>${escapeHtml(new Date(deploy.createdAt).toLocaleString())}</td>
         <td>${escapeHtml(new Date(deploy.expiresAt).toLocaleString())}</td>
@@ -1844,9 +2474,18 @@ export class MemoryAnonymousStore {
     return normalizeUserLimitOverrides(this.users.get(normalizeUserId(userId))?.limitOverrides ?? {});
   }
 
-  async setUserLimitOverrides(userId, limitOverrides) {
+  async getUserLimitSettings(userId) {
+    const user = this.users.get(normalizeUserId(userId));
+    return {
+      boost: Boolean(user?.boost),
+      limitOverrides: normalizeUserLimitOverrides(user?.limitOverrides ?? {})
+    };
+  }
+
+  async setAdminUserSettings(userId, { boost, limitOverrides } = {}) {
     const id = normalizeUserId(userId);
     const current = this.users.get(id) ?? {
+      boost: false,
       createdAt: now(),
       displayName: id,
       id,
@@ -1854,28 +2493,36 @@ export class MemoryAnonymousStore {
     };
     const user = {
       ...current,
+      boost: boost === undefined ? Boolean(current.boost) : Boolean(boost),
       displayName: current.displayName ?? current.login ?? id,
       id,
-      limitOverrides: normalizeUserLimitOverrides(limitOverrides),
+      limitOverrides:
+        limitOverrides === undefined
+          ? normalizeUserLimitOverrides(current.limitOverrides ?? {})
+          : normalizeUserLimitOverrides(limitOverrides),
       updatedAt: now()
     };
     this.users.set(id, user);
     return this.getAdminUser(id);
   }
 
+  async setUserLimitOverrides(userId, limitOverrides) {
+    return this.setAdminUserSettings(userId, { limitOverrides });
+  }
+
   async deployWithUserLimitOverrides(deploy) {
     if (!deploy?.ownerId) {
       return deploy;
     }
 
-    const limitOverrides = await this.getUserLimitOverrides(deploy.ownerId);
-    if (Object.keys(limitOverrides).length === 0) {
+    const { boost, limitOverrides } = await this.getUserLimitSettings(deploy.ownerId);
+    if (!boost && Object.keys(limitOverrides).length === 0) {
       return deploy;
     }
 
     return {
       ...deploy,
-      limits: limitsWithOverrides(deploy.limits, limitOverrides)
+      limits: limitsWithOverrides(deploy.limits, limitOverrides, boost)
     };
   }
 
@@ -1918,7 +2565,11 @@ export class MemoryAnonymousStore {
 
     return users
       .filter(Boolean)
-      .sort((left, right) => String(left.login ?? left.id).localeCompare(String(right.login ?? right.id)));
+      .sort(
+        (left, right) =>
+          String(right.createdAt).localeCompare(String(left.createdAt)) ||
+          String(left.login ?? left.id).localeCompare(String(right.login ?? right.id))
+      );
   }
 
   storeArtifact({ artifact, artifactHash, clientBundleBase64, clientBundleHash, createdAt }) {
@@ -2361,15 +3012,17 @@ export class PostgresAnonymousStore {
         display_name text,
         avatar_url text,
         url text,
+        boost boolean not null default false,
         limit_overrides_json jsonb not null default '{}',
         created_at timestamptz not null,
         updated_at timestamptz not null
       )
     `);
+    await this.query("alter table users add column if not exists boost boolean not null default false");
     await this.query(`
       insert into users(
         id, provider, provider_id, login, display_name, avatar_url, url,
-        limit_overrides_json, created_at, updated_at
+        boost, limit_overrides_json, created_at, updated_at
       )
       select distinct on (owner_id)
         owner_id,
@@ -2379,6 +3032,7 @@ export class PostgresAnonymousStore {
         coalesce(owner_json->>'displayName', owner_json->>'login', owner_id),
         owner_json->>'avatarUrl',
         owner_json->>'url',
+        false,
         '{}'::jsonb,
         coalesce(claimed_at, created_at, now()),
         coalesce(claimed_at, created_at, now())
@@ -2411,6 +3065,7 @@ export class PostgresAnonymousStore {
 
     return {
       avatarUrl: row.avatar_url ?? null,
+      boost: Boolean(row.boost),
       createdAt: new Date(row.created_at).toISOString(),
       displayName: row.display_name ?? row.login ?? row.id,
       id: row.id,
@@ -2462,35 +3117,54 @@ export class PostgresAnonymousStore {
     return normalizeUserLimitOverrides(result.rows[0]?.limit_overrides_json ?? {});
   }
 
-  async setUserLimitOverrides(userId, limitOverrides) {
+  async getUserLimitSettings(userId) {
+    const result = await this.query("select boost, limit_overrides_json from users where id = $1", [normalizeUserId(userId)]);
+    return {
+      boost: Boolean(result.rows[0]?.boost),
+      limitOverrides: normalizeUserLimitOverrides(result.rows[0]?.limit_overrides_json ?? {})
+    };
+  }
+
+  async setAdminUserSettings(userId, { boost, limitOverrides } = {}) {
     const id = normalizeUserId(userId);
+    const current = await this.query("select boost, limit_overrides_json from users where id = $1", [id]);
+    const nextBoost = boost === undefined ? Boolean(current.rows[0]?.boost) : Boolean(boost);
+    const nextLimitOverrides =
+      limitOverrides === undefined
+        ? normalizeUserLimitOverrides(current.rows[0]?.limit_overrides_json ?? {})
+        : normalizeUserLimitOverrides(limitOverrides);
     const updatedAt = now();
     await this.query(
       `
-      insert into users(id, display_name, limit_overrides_json, created_at, updated_at)
-      values($1, $2, $3::jsonb, $4, $4)
+      insert into users(id, display_name, boost, limit_overrides_json, created_at, updated_at)
+      values($1, $2, $3, $4::jsonb, $5, $5)
       on conflict(id) do update set
+        boost = excluded.boost,
         limit_overrides_json = excluded.limit_overrides_json,
         updated_at = excluded.updated_at
       `,
-      [id, id, JSON.stringify(normalizeUserLimitOverrides(limitOverrides)), updatedAt]
+      [id, id, nextBoost, JSON.stringify(nextLimitOverrides), updatedAt]
     );
     return this.getAdminUser(id);
   }
 
+  async setUserLimitOverrides(userId, limitOverrides) {
+    return this.setAdminUserSettings(userId, { limitOverrides });
+  }
+
   async deployWithUserLimitOverrides(deploy) {
     if (!deploy?.ownerId) {
       return deploy;
     }
 
-    const limitOverrides = await this.getUserLimitOverrides(deploy.ownerId);
-    if (Object.keys(limitOverrides).length === 0) {
+    const { boost, limitOverrides } = await this.getUserLimitSettings(deploy.ownerId);
+    if (!boost && Object.keys(limitOverrides).length === 0) {
       return deploy;
     }
 
     return {
       ...deploy,
-      limits: limitsWithOverrides(deploy.limits, limitOverrides)
+      limits: limitsWithOverrides(deploy.limits, limitOverrides, boost)
     };
   }
 
@@ -2579,7 +3253,7 @@ export class PostgresAnonymousStore {
         where d.owner_id is not null
         group by d.owner_id
       ) q on q.owner_id = u.id
-      order by coalesce(u.login, u.id) asc
+      order by u.created_at desc, coalesce(u.login, u.id) asc
       `,
       [windowStart]
     );
@@ -3185,6 +3859,7 @@ export async function startAnonymousServer({
   publicRootUrl,
   quiet = false,
   shooBaseUrl = shooBaseUrlFromEnv(),
+  sourceRuntime,
   store
 } = {}) {
   const resolvedAppBaseDomain = normalizeAppBaseDomain(appBaseDomain);
@@ -3193,6 +3868,7 @@ export async function startAnonymousServer({
   const resolvedDeveloperSessionSecret =
     developerSessionSecret || resolvedGithubOAuth?.sessionSecret || resolvedGithubOAuth?.clientSecret || adminPassword || "";
   const resolvedStore = store ?? (await createAnonymousStoreFromEnv());
+  const resolvedSourceRuntime = sourceRuntime === undefined ? createSourceRuntimeFromEnv() : sourceRuntime;
   await resolvedStore.initialize();
   const subscriptions = new Map();
 
@@ -3204,12 +3880,16 @@ export async function startAnonymousServer({
     return counts;
   }
 
-  async function adminSummary() {
+  async function adminDeploysWithConnections() {
     const connections = activeConnectionCounts();
-    const deploys = (await resolvedStore.listDeployResourceUsage()).map((deploy) => ({
+    return (await resolvedStore.listDeployResourceUsage()).map((deploy) => ({
       ...deploy,
       connections: connections.get(deploy.id) ?? 0
     }));
+  }
+
+  async function adminSummary() {
+    const deploys = await adminDeploysWithConnections();
     const users = await resolvedStore.listAdminUsers();
     const totals = deploys.reduce(
       (acc, deploy) => ({
@@ -3244,6 +3924,21 @@ export async function startAnonymousServer({
     };
   }
 
+  async function adminUserDetail(userId) {
+    const user = await resolvedStore.getAdminUser(userId);
+    if (!user) {
+      return null;
+    }
+
+    const deploys = (await adminDeploysWithConnections()).filter((deploy) => deploy.ownerId === user.id);
+    return {
+      deployCount: deploys.length,
+      deploys,
+      generatedAt: now(),
+      user
+    };
+  }
+
   function currentDeveloper(req) {
     return developerFromRequest(req, resolvedDeveloperSessionSecret);
   }
@@ -3304,6 +3999,7 @@ export async function startAnonymousServer({
             auth: subscription.auth,
             deployId,
             name,
+            sourceRuntime: resolvedSourceRuntime,
             state: resolvedStore
           });
           websocketSend(ws, { data, name, op: "query.result" });
@@ -3495,7 +4191,14 @@ export async function startAnonymousServer({
         return;
       }
 
-      if (req.method === "GET" && (requestUrl.pathname === "/admin" || requestUrl.pathname === "/admin/")) {
+      if (
+        req.method === "GET" &&
+        (requestUrl.pathname === "/admin" ||
+          requestUrl.pathname === "/admin/" ||
+          requestUrl.pathname === "/admin/deployments" ||
+          requestUrl.pathname === "/admin/users" ||
+          /^\/admin\/users\/[^/]+$/.test(requestUrl.pathname))
+      ) {
         sendText(res, 200, adminHtml(), { "Content-Type": "text/html; charset=utf-8" });
         return;
       }
@@ -3536,6 +4239,29 @@ export async function startAnonymousServer({
         return;
       }
 
+      const adminUserDetailMatch =
+        req.method === "GET" ? requestUrl.pathname.match(/^\/admin\/api\/users\/([^/]+)$/) : null;
+      if (adminUserDetailMatch) {
+        if (!isAdminConfigured(adminPassword)) {
+          sendJson(res, 503, { error: "Lakebed admin is not configured. Set LAKEBED_ADMIN_PASSWORD." });
+          return;
+        }
+
+        if (!isAdminAuthenticated(req, adminPassword)) {
+          sendJson(res, 401, { error: "Admin authentication required." });
+          return;
+        }
+
+        const detail = await adminUserDetail(decodeURIComponent(adminUserDetailMatch[1]));
+        if (!detail) {
+          sendJson(res, 404, { error: "Unknown user." });
+          return;
+        }
+
+        sendJson(res, 200, detail);
+        return;
+      }
+
       const userLimitsMatch =
         req.method === "PUT" ? requestUrl.pathname.match(/^\/admin\/api\/users\/([^/]+)\/limits$/) : null;
       if (userLimitsMatch) {
@@ -3551,14 +4277,22 @@ export async function startAnonymousServer({
 
         const body = await readJsonBody(req, 4096);
         let limitOverrides;
+        let boost;
         try {
-          limitOverrides = normalizeUserLimitOverrides(body.limits ?? body.limitOverrides ?? {});
+          const rawLimitOverrides = body.limits ?? body.limitOverrides;
+          limitOverrides = rawLimitOverrides === undefined ? undefined : normalizeUserLimitOverrides(rawLimitOverrides);
+          boost = normalizeOptionalBoolean(body.boost, "boost");
         } catch (error) {
           sendJson(res, 400, { error: error instanceof Error ? error.message : String(error) });
           return;
         }
 
-        const user = await resolvedStore.setUserLimitOverrides(decodeURIComponent(userLimitsMatch[1]), limitOverrides);
+        const user = await (typeof resolvedStore.setAdminUserSettings === "function"
+          ? resolvedStore.setAdminUserSettings(decodeURIComponent(userLimitsMatch[1]), {
+              boost,
+              limitOverrides
+            })
+          : resolvedStore.setUserLimitOverrides(decodeURIComponent(userLimitsMatch[1]), limitOverrides ?? {}));
         await refreshOwnerSubscriptions(user.id);
         sendJson(res, 200, { user });
         return;
@@ -3762,6 +4496,7 @@ export async function startAnonymousServer({
             auth: subscription.auth,
             deployId: subscription.deploy.id,
             name: message.name,
+            sourceRuntime: resolvedSourceRuntime,
             state: resolvedStore
           });
           websocketSend(ws, { data, id: message.id, name: message.name, ok: true, op: "query.result" });
@@ -3779,7 +4514,9 @@ export async function startAnonymousServer({
             artifact: subscription.artifact,
             auth: subscription.auth,
             deployId: subscription.deploy.id,
+            limits: subscription.deploy.limits,
             name: message.name,
+            sourceRuntime: resolvedSourceRuntime,
             state: resolvedStore
           });
           websocketSend(ws, { id: message.id, ok: true, op: "mutation.result", result });