{% extends 'layouts/base.html' %}
{% block subtitle %}<p class="text-secondary">Run a reviewed job now. Save a plan only when you need to reuse it.</p>{% endblock %}
{% block content %}{% if session.username == 'admin' %}<div class="note mb-3"><a href="/setup">Finish named-administrator onboarding and retire bootstrap admin.</a></div>{% endif %}
<div class="mode-banner"><div><span class="pill">AIM 3.3.0rc8 / SERVICE API 1.0</span><h2>Select. Review. Run once.</h2><p>The core owns inventory, validation, credentials and native execution. This workspace owns your workflow.</p></div><a class="btn btn-primary" href="/plan">New run &rarr;</a></div>
{% include 'partials/attention.html' %}
<div class="experience-links"><a class="experience-link" href="/customers"><span class="entity-symbol" aria-hidden="true">&#9633;</span><span><strong>Explore your inventory</strong><small>Groups, subgroups and linked host workspaces. Current metadata, no host probes.</small></span></a><a class="experience-link" href="/insights"><span class="entity-symbol" aria-hidden="true">&#9636;</span><span><strong>Understand your run history</strong><small>Per-host outcomes and playbook insights from retained WebGUI jobs only.</small></span></a></div><div class="row g-3 stats-row">{% for label,value,note in [('Customers',customers|length,'Available to the configured core identity'),('Available operations',playbooks|length,'Union of customer-scoped catalogs'),('Execution', 'Enabled' if execution_enabled and core.execution.enabled else 'Disabled','Both WebGUI policy and core opt-in must allow runs')] %}<div class="col-md-4"><section class="card metric-card"><span class="metric-label">{{ label }}</span><strong class="metric-value">{{ value }}</strong><span class="text-secondary small">{{ note }}</span></section></div>{% endfor %}</div>
<section class="card mt-4"><div class="card-header"><h2 class="h5 mb-0">Recent jobs</h2><a href="/jobs">All jobs &rarr;</a></div><div class="table-responsive"><table class="table align-middle mb-0"><thead><tr><th>Job</th><th>Requester</th><th>Mode</th><th>Status</th><th>Created</th></tr></thead><tbody>{% for j in recent_jobs %}<tr><td><a href="/jobs/{{ j.id }}">{{ j.id[:12] }}</a></td><td>{{ j.username }}</td><td>{{ j.mode }}</td><td><span class="status-tag status-{{ j.display_status }}"><span class="status-dot-mini" aria-hidden="true"></span>{{ j.display_status|replace('_',' ') }}</span></td><td><time class="js-local-time" datetime="{{ j.created_at|utc_iso }}">{{ j.created_at|utc }}</time></td></tr>{% else %}<tr><td colspan="5" class="empty-state">No jobs yet. Start with New run; a saved plan is not required.</td></tr>{% endfor %}</tbody></table></div></section>
<div class="row g-4 mt-1"><section class="col-xl-8"><div class="card"><div class="card-header"><h2 class="h5 mb-0">Inventory workspaces</h2><a href="/customers">View inventory &rarr;</a></div>{% include 'partials/customers.html' %}</div></section><aside class="col-xl-4"><div class="card"><div class="card-body p-4"><h2 class="h5">Native inventory authentication</h2><p>Usernames and Vault references retain AIM's normal precedence. Custom credential overrides and raw module output are not exposed. Core 3.2 provides safety-filtered detailed play/task/host progress.</p><p class="form-text">Execution streams detailed play/task/host events plus structured stages and counters. Readiness and live SSH/WinRM acceptance remain separate checks.</p><a class="btn btn-outline-primary" href="/plans">Saved plans</a></div></div></aside></div>
{% endblock %}