9 Commits

Include renames

Author	SHA1	Message	Date
Emil	749396da05	Drive coordinator upload and reduction from the workload catalog	2026-08-02 17:47:47 +03:00
Efremenko Arhip	3a1461315f	feat: self-service worker enrollment bound to a user account ... Let a signed-in user turn their own machine into a worker without the shared token. The coordinator already binds a JWT-authenticated registration to owner_id as untrusted; this adds the missing pieces. userservice: long-lived worker keys (scimesh_wk_live_*, hash-at-rest) with create/list/revoke and a public /worker-tokens/exchange that trades a key for a short-lived JWT carrying the owner current role/verified. python worker: SCIMESH_WORKER_KEY + SCIMESH_USERSERVICE_URL; a token provider exchanges the key and refreshes the JWT proactively and on 401, so a long-running worker survives token expiry. Static bearer token path is unchanged. coordinator UI: an "add your machine" page that mints a key and shows a ready-to-run command, proxying key management to the userservice; the dashboard gains an owner-scoped "my machines" section. docs: how to run a worker from your account, plus the untrusted/quorum/ verified trust model.	2026-07-27 16:11:07 +03:00
Efremenko Arhip	49eb662798	feat(coordinator): logout button in the operator UI ... The dashboard and job pages show a 'Log out' control (POST /ui/logout) and a 'Signed in · <role>' label when a userservice session is active. Under basic auth (no session) neither appears, so the fallback UI is unchanged. Threads a template-only Session view (json:"-") from authctx into the dashboard and job views. Tests assert the control renders only in session mode.	2026-07-26 21:03:50 +03:00
Efremenko Arhip	c8c6455caf	feat(coordinator): owner-scope UI views by logged-in user ... With a UI session, the dashboard and job pages are scoped to the caller: - Overview lists only the user's own jobs (admin/basic-auth operator: all) - JobDetail, artifact download, and preview 404 on another user's job - scoping keys off authctx: no requester (basic auth) still sees everything, so the fallback operator UI is unchanged ListJobs gains an owner filter (SQL WHERE) so paging stays correct per user. Tests cover Overview scoping and cross-user JobDetail rejection.	2026-07-26 20:12:49 +03:00
Emil	8b738efd5d	Add safe artifact previews	2026-07-24 17:04:07 +03:00
Emil	d0aeb7fc95	Upgrade pipeline observability UI	2026-07-24 15:13:59 +03:00
Emil	19cbf7f113	Harden distributed pipeline	2026-07-24 14:16:42 +03:00
Emil	7547a30bde	Add job cancellation and dataset row limit	2026-07-23 23:14:25 +03:00
Emil	e83e0b5e1f	Add local operator web interface	2026-07-23 22:08:58 +03:00