Initial

server/routes/index.js

@@ -16,6 +16,7 @@ import { packagingRoutes } from './packagingRoutes.js';
 import { psadtRoutes } from './psadtRoutes.js';
 import { runPlanRoutes } from './runPlanRoutes.js';
 import { settingsRoutes } from './settingsRoutes.js';
+import { systemJobRoutes } from './systemJobRoutes.js';
 import { userRoutes } from './userRoutes.js';
 import { variableRoutes } from './variableRoutes.js';
 
@@ -41,4 +42,5 @@ apiRoutes.use('/intune/applications', applicationRoutes);
 apiRoutes.use('/intune', governanceRoutes);
 apiRoutes.use('/runplans', runPlanRoutes);
 apiRoutes.use('/jobs', jobRoutes);
+apiRoutes.use('/system-jobs', systemJobRoutes);
 apiRoutes.use('/logs', logRoutes);

server/routes/systemJobRoutes.js

@@ -0,0 +1,11 @@
+import { Router } from 'express';
+import { cancel, index, runNow } from '../controllers/systemJobController.js';
+import { requireAdmin, requireAuth } from '../middleware/auth.js';
+
+export const systemJobRoutes = Router();
+
+// Control-plane job management is admin-only and every action is audited.
+systemJobRoutes.get('/', requireAuth, requireAdmin, index);
+systemJobRoutes.post('/:jobId/run', requireAuth, requireAdmin, runNow);
+systemJobRoutes.post('/:jobId/cancel', requireAuth, requireAdmin, cancel);
+