@datasynx/agentic-ai-cartography 2.7.0 → 2.9.0

package/dist/index.cjs

@@ -49,6 +49,7 @@ __export(src_exports, {
   DEFAULT_SERVER_NAME: () => DEFAULT_SERVER_NAME,
   DEFAULT_TENANT: () => DEFAULT_TENANT,
   DriftConfigSchema: () => DriftConfigSchema,
+  GraphStoreBackend: () => GraphStoreBackend,
   INGEST_SCHEMA_VERSION: () => INGEST_SCHEMA_VERSION,
   IngestEnvelopeSchema: () => IngestEnvelopeSchema,
   InvalidTenantError: () => InvalidTenantError,
@@ -136,6 +137,7 @@ __export(src_exports, {
   createSqliteQueryBackend: () => createSqliteQueryBackend,
   currentOs: () => currentOs,
   cursorDeeplink: () => cursorDeeplink,
+  dashboardHtml: () => dashboardHtml,
   databasesScanner: () => databasesScanner,
   deepMerge: () => deepMerge,
   defaultAllowedHosts: () => defaultAllowedHosts,
@@ -220,6 +222,7 @@ __export(src_exports, {
   nodesToAssets: () => nodesToAssets,
   normalizeId: () => normalizeId,
   normalizeTenant: () => normalizeTenant,
+  openStoreBackend: () => openStoreBackend,
   orgKeyPath: () => orgKeyPath,
   osUser: () => osUser,
   parseApiArgs: () => parseApiArgs,
@@ -4653,6 +4656,148 @@ var SqliteStoreBackend = class {
   }
 };
 
+// src/store/graph.ts
+function toNum(v) {
+  if (typeof v === "number") return v;
+  if (v && typeof v === "object" && "toNumber" in v && typeof v.toNumber === "function") {
+    return v.toNumber();
+  }
+  return Number(v ?? 0);
+}
+var GraphStoreBackend = class {
+  constructor(driver) {
+    this.driver = driver;
+  }
+  async run(cypher, params) {
+    const session = this.driver.session();
+    try {
+      return await session.run(cypher, params);
+    } finally {
+      await session.close();
+    }
+  }
+  async upsertNode(org, node, identity, contributor) {
+    const res = await this.run(
+      `MERGE (n:Node {org: $org, globalId: $globalId})
+       ON CREATE SET n._created = true
+       ON MATCH  SET n._created = false
+       SET n.id = $id, n.contentHash = $contentHash, n.type = $type, n.name = $name,
+           n.domain = $domain, n.owner = $owner,
+           n.confidence = CASE WHEN n.confidence IS NULL OR $confidence > n.confidence THEN $confidence ELSE n.confidence END
+       MERGE (c:Contributor {org: $org, globalId: $globalId, machineId: $machineId})
+       SET c.hostname = $hostname, c.user = $user, c.at = $at,
+           c.confidence = CASE WHEN c.confidence IS NULL OR $contribConfidence > c.confidence THEN $contribConfidence ELSE c.confidence END
+       RETURN n._created AS created`,
+      {
+        org,
+        globalId: identity.globalId,
+        contentHash: identity.contentHash,
+        id: node.id,
+        type: node.type,
+        name: node.name,
+        domain: node.domain ?? null,
+        owner: node.owner ?? null,
+        confidence: node.confidence,
+        machineId: contributor.machineId,
+        hostname: contributor.hostname,
+        user: contributor.user,
+        at: contributor.at,
+        contribConfidence: contributor.confidence
+      }
+    );
+    return res.records[0]?.get("created") === true ? "created" : "merged";
+  }
+  async insertEdge(org, edge) {
+    await this.run(
+      `MATCH (s:Node {org: $org, id: $source})
+       MATCH (t:Node {org: $org, id: $target})
+       MERGE (s)-[r:DEPENDS {relationship: $rel}]->(t)
+       SET r.evidence = $evidence, r.confidence = $confidence`,
+      { org, source: edge.sourceId, target: edge.targetId, rel: edge.relationship, evidence: edge.evidence, confidence: edge.confidence }
+    );
+  }
+  async getSummary(org) {
+    const totals = await this.run(
+      `MATCH (n:Node {org: $org})
+       OPTIONAL MATCH (n)-[r:DEPENDS]->(:Node {org: $org})
+       RETURN count(DISTINCT n) AS nodes, count(r) AS edges`,
+      { org }
+    );
+    const byType = await this.run(`MATCH (n:Node {org: $org}) RETURN n.type AS k, count(*) AS c`, { org });
+    const byDomain = await this.run(`MATCH (n:Node {org: $org}) RETURN coalesce(n.domain, '(none)') AS k, count(*) AS c`, { org });
+    const byRel = await this.run(`MATCH (:Node {org: $org})-[r:DEPENDS]->(:Node {org: $org}) RETURN r.relationship AS k, count(*) AS c`, { org });
+    const top = await this.run(
+      `MATCH (n:Node {org: $org})
+       OPTIONAL MATCH (n)-[r:DEPENDS]-(:Node {org: $org})
+       RETURN n.id AS id, n.name AS name, n.type AS type, count(r) AS degree
+       ORDER BY degree DESC, id ASC LIMIT 10`,
+      { org }
+    );
+    const contrib = await this.run(`MATCH (c:Contributor {org: $org}) RETURN count(DISTINCT c.machineId) AS contributors`, { org });
+    const counts = (r) => {
+      const out = {};
+      for (const rec of r.records) out[String(rec.get("k"))] = toNum(rec.get("c"));
+      return out;
+    };
+    return {
+      org,
+      totals: { nodes: toNum(totals.records[0]?.get("nodes")), edges: toNum(totals.records[0]?.get("edges")) },
+      nodesByType: counts(byType),
+      nodesByDomain: counts(byDomain),
+      edgesByRelationship: counts(byRel),
+      topConnected: top.records.map((rec) => ({
+        id: String(rec.get("id")),
+        name: String(rec.get("name")),
+        type: String(rec.get("type")),
+        degree: toNum(rec.get("degree"))
+      })),
+      contributors: toNum(contrib.records[0]?.get("contributors"))
+    };
+  }
+  async getContributors(globalId2) {
+    const res = await this.run(
+      `MATCH (c:Contributor {globalId: $globalId})
+       RETURN c.machineId AS machineId, c.hostname AS hostname, c.user AS user, c.org AS org, c.at AS at, c.confidence AS confidence`,
+      { globalId: globalId2 }
+    );
+    return res.records.map((rec) => ({
+      machineId: String(rec.get("machineId")),
+      hostname: String(rec.get("hostname")),
+      user: String(rec.get("user")),
+      organization: rec.get("org") != null ? String(rec.get("org")) : void 0,
+      at: String(rec.get("at")),
+      confidence: toNum(rec.get("confidence"))
+    }));
+  }
+  async close() {
+    await this.driver.close();
+  }
+};
+
+// src/store/index.ts
+async function defaultNeo4jDriver(url, user, password) {
+  const mod = await import("neo4j-driver");
+  return mod.default.driver(url, mod.default.auth.basic(user, password));
+}
+async function openStoreBackend(db, opts = {}) {
+  if (opts.backend === "graph" && opts.graphUrl) {
+    try {
+      const make = opts.driverFactory ?? defaultNeo4jDriver;
+      const driver = await make(opts.graphUrl, opts.graphUser ?? "neo4j", opts.graphPassword ?? "");
+      if (driver.verifyConnectivity) await driver.verifyConnectivity();
+      logInfo("central store: graph backend active", { host: stripSensitive(opts.graphUrl) });
+      return new GraphStoreBackend(driver);
+    } catch (err) {
+      logWarn("central store: graph backend unavailable \u2014 falling back to SQLite", {
+        host: stripSensitive(opts.graphUrl),
+        reason: err instanceof Error ? err.message : String(err)
+      });
+      return new SqliteStoreBackend(db);
+    }
+  }
+  return new SqliteStoreBackend(db);
+}
+
 // src/store/query.ts
 var NotFoundError = class extends Error {
   constructor(message) {
@@ -4967,9 +5112,9 @@ var IngestEnvelopeSchema = import_zod5.z.object({
   contributor: ContributorSchema.optional(),
   anonymizationLevel: import_zod5.z.enum(["none", "anonymized", "full"]).optional()
 });
-function ingestEnvelope(store, envelope, opts = {}) {
+async function ingestEnvelope(store, envelope, opts = {}) {
   const anonMode = opts.anonMode ?? "reject";
-  const org = envelope.org ?? opts.defaultOrg ?? "local";
+  const org = normalizeTenant(envelope.org ?? opts.defaultOrg);
   const level = envelope.anonymizationLevel ?? "anonymized";
   const at = (/* @__PURE__ */ new Date()).toISOString();
   const contributor = {
@@ -5020,7 +5165,7 @@ function ingestEnvelope(store, envelope, opts = {}) {
     }
     const safe = check.node;
     const identity = computeIdentity(org, safe);
-    const outcome = store.upsertNode(org, safe, identity, { ...contributor, confidence: safe.confidence });
+    const outcome = await store.upsertNode(org, safe, identity, { ...contributor, confidence: safe.confidence });
     accepted += 1;
     if (outcome === "merged") merged += 1;
     acceptedNodeIds.add(safe.id);
@@ -5036,7 +5181,7 @@ function ingestEnvelope(store, envelope, opts = {}) {
     if (acceptedNodeIds.size > 0 && (!acceptedNodeIds.has(edge.sourceId) || !acceptedNodeIds.has(edge.targetId))) {
       continue;
     }
-    store.insertEdge(org, edge);
+    await store.insertEdge(org, edge);
     edges += 1;
   }
   logInfo("ingest", { org, accepted, merged, rejected, edges, violations, level, anonMode });
@@ -5046,7 +5191,7 @@ function ingestEnvelope(store, envelope, opts = {}) {
 // src/central/server.ts
 function createIngestHandler(store, opts = {}) {
   const quota = opts.quota;
-  return (body) => {
+  return async (body) => {
     const parsed = IngestEnvelopeSchema.safeParse(body);
     if (!parsed.success) {
       const issues = parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`);
@@ -5062,7 +5207,7 @@ function createIngestHandler(store, opts = {}) {
       }
     }
     try {
-      const result = ingestEnvelope(store, parsed.data, opts);
+      const result = await ingestEnvelope(store, parsed.data, opts);
       return { status: 200, body: result };
     } catch (err) {
       logWarn("ingest: failed", { error: err instanceof Error ? err.message : String(err) });
@@ -5991,7 +6136,7 @@ async function resolveNlQuery(db, sessionId, search, raw, opts) {
 
 // src/mcp/server.ts
 var SERVER_NAME = "cartography";
-var SERVER_VERSION = "2.7.0";
+var SERVER_VERSION = "2.9.0";
 var SERVICE_TYPES = NODE_TYPE_GROUPS.web;
 var DATA_TYPES = NODE_TYPE_GROUPS.data;
 var lexicalSearch = async (db, sessionId, query, opts) => db.searchNodes(sessionId, query, { types: opts.types, limit: opts.limit }).map((node) => ({ node }));
@@ -6066,9 +6211,10 @@ function createMcpServer(opts = {}) {
     "graph-summary",
     "cartography://graph/summary",
     { title: "Topology summary", description: "Low-token aggregate index of the whole landscape \u2014 read this first.", mimeType: "text/markdown" },
-    (uri) => {
+    async (uri) => {
       if (org !== void 0) {
-        return { contents: [{ uri: uri.href, mimeType: "text/markdown", text: summaryText(db.getOrgSummary(org)) }] };
+        const s = opts.orgSummary ? await opts.orgSummary(org) : db.getOrgSummary(org);
+        return { contents: [{ uri: uri.href, mimeType: "text/markdown", text: summaryText(s) }] };
       }
       const sid = resolveSession();
       if (!sid) return { contents: [{ uri: uri.href, mimeType: "text/markdown", text: "No discovery session found. Run discovery first." }] };
@@ -6143,8 +6289,8 @@ function createMcpServer(opts = {}) {
   server.registerTool(
     "get_summary",
     { title: "Get topology summary", description: "Low-token overview of the whole landscape (counts, types, domains, most-connected, anomalies).", inputSchema: {}, annotations: readOnly },
-    () => {
-      if (org !== void 0) return json(db.getOrgSummary(org));
+    async () => {
+      if (org !== void 0) return json(opts.orgSummary ? await opts.orgSummary(org) : db.getOrgSummary(org));
       const sid = resolveSession();
       if (!sid) return json({ error: "No discovery session found." });
       return json(db.getGraphSummary(sid));
@@ -6670,7 +6816,7 @@ async function runHttp(factory, opts = {}) {
           res.writeHead(413, { "content-type": "application/json" }).end('{"error":"payload too large"}');
           return;
         }
-        const out = onIngest(value);
+        const out = await onIngest(value);
         res.writeHead(out.status, { "content-type": "application/json", ...out.headers ?? {} }).end(JSON.stringify(out.body));
         return;
       }
@@ -8375,6 +8521,156 @@ function handleGraphqlGet() {
   return { status: 200, body: SDL };
 }
 
+// src/web/dashboard.ts
+var STYLE = `
+*{box-sizing:border-box;margin:0;padding:0}
+:root{--bg:#0f1419;--panel:#161b22;--line:#2d333b;--fg:#e6edf3;--dim:#8b949e;--accent:#3b82f6;--ok:#3fb950;--warn:#d29922;--crit:#f85149}
+body{font:13px/1.5 ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,sans-serif;background:var(--bg);color:var(--fg);height:100vh;display:flex;flex-direction:column;overflow:hidden}
+header{display:flex;align-items:center;gap:12px;padding:8px 14px;border-bottom:1px solid var(--line);background:var(--panel)}
+header h1{font-size:15px;font-weight:600;letter-spacing:.3px}
+header .ver{color:var(--dim);font-size:11px}
+header .spacer{flex:1}
+header input{background:var(--bg);border:1px solid var(--line);color:var(--fg);border-radius:6px;padding:5px 8px;font-size:12px;width:200px}
+header input:focus{outline:none;border-color:var(--accent)}
+header button{background:var(--accent);border:none;color:#fff;border-radius:6px;padding:6px 12px;font-size:12px;cursor:pointer}
+main{flex:1;display:grid;grid-template-columns:300px 1fr 320px;overflow:hidden}
+.col{overflow:auto;padding:12px;border-right:1px solid var(--line)}
+.col:last-child{border-right:none;border-left:1px solid var(--line)}
+.card{background:var(--panel);border:1px solid var(--line);border-radius:8px;padding:10px 12px;margin-bottom:10px}
+.card h2{font-size:11px;text-transform:uppercase;letter-spacing:.6px;color:var(--dim);margin-bottom:8px}
+.stat{display:flex;justify-content:space-between;padding:2px 0}
+.stat b{font-variant-numeric:tabular-nums}
+.bar{height:4px;border-radius:2px;background:var(--accent);margin-top:2px}
+#search{width:100%;background:var(--bg);border:1px solid var(--line);color:var(--fg);border-radius:6px;padding:6px 8px;margin-bottom:8px}
+.node-item{padding:6px 8px;border-radius:6px;cursor:pointer;border:1px solid transparent}
+.node-item:hover{background:var(--panel)}
+.node-item.sel{background:var(--panel);border-color:var(--accent)}
+.node-item .t{color:var(--dim);font-size:11px}
+#center{position:relative;padding:0}
+#graph{display:block;width:100%;height:100%;background:radial-gradient(circle at 50% 40%,#11161d,#0d1117)}
+#empty{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;color:var(--dim);text-align:center;padding:20px}
+.kv{display:flex;justify-content:space-between;gap:8px;padding:3px 0;border-bottom:1px solid var(--line)}
+.kv span:first-child{color:var(--dim)}
+.kv span:last-child{text-align:right;word-break:break-all}
+.chip{display:inline-block;background:var(--bg);border:1px solid var(--line);border-radius:10px;padding:1px 8px;font-size:11px;margin:2px 2px 0 0}
+.sev-high,.sev-critical{color:var(--crit)} .sev-medium,.sev-warning{color:var(--warn)} .sev-low,.sev-info{color:var(--dim)}
+#toast{position:fixed;bottom:14px;left:50%;transform:translateX(-50%);background:var(--crit);color:#fff;padding:8px 14px;border-radius:6px;font-size:12px;opacity:0;transition:opacity .2s;pointer-events:none}
+#toast.show{opacity:1}
+`;
+var SCRIPT = String.raw`
+const $=(s)=>document.querySelector(s), api=(p)=>{
+  const h={accept:'application/json'};
+  const t=sessionStorage.getItem('cartograph_token'); if(t) h.authorization='Bearer '+t;
+  const tn=sessionStorage.getItem('cartograph_tenant'); if(tn) h['x-cartograph-tenant']=tn;
+  return fetch(p,{headers:h}).then(async r=>{ if(!r.ok){ const e=new Error('http '+r.status); e.status=r.status; throw e; } return r.json(); });
+};
+function toast(m){ const t=$('#toast'); t.textContent=m; t.classList.add('show'); setTimeout(()=>t.classList.remove('show'),2600); }
+let NODES=[], SELECTED=null;
+
+async function boot(){
+  try{
+    const s=await api('/v1/summary'); renderSummary(s);
+    const n=await api('/v1/nodes?limit=1000'); NODES=n.nodes; renderList(NODES);
+  }catch(e){
+    if(e.status===401){ toast('Unauthorized — enter a bearer token and Reload.'); }
+    else if(e.status===404){ const em=$('#empty'); em.textContent='No discovery session yet. Run a scan, then Reload.'; em.style.display='flex'; }
+    else toast('Failed to load: '+e.message);
+  }
+}
+function renderSummary(s){
+  const max=Math.max(1,...Object.values(s.nodesByType));
+  const types=Object.entries(s.nodesByType).sort((a,b)=>b[1]-a[1]).slice(0,12)
+    .map(([k,v])=>'<div class="stat"><span>'+esc(k)+'</span><b>'+v+'</b></div><div class="bar" style="width:'+(v/max*100)+'%"></div>').join('');
+  const anom=(s.anomalies||[]).slice(0,12).map(a=>'<div class="stat"><span class="sev-'+a.severity+'">'+esc(a.kind)+'</span><span class="t">'+esc(a.nodeId)+'</span></div>').join('') || '<div class="t">none</div>';
+  $('#summary').innerHTML=
+    '<div class="card"><h2>Totals</h2><div class="stat"><span>Nodes</span><b>'+s.totals.nodes+'</b></div><div class="stat"><span>Edges</span><b>'+s.totals.edges+'</b></div>'+(s.contributors!=null?'<div class="stat"><span>Contributors</span><b>'+s.contributors+'</b></div>':'')+'</div>'+
+    '<div class="card"><h2>Nodes by type</h2>'+types+'</div>'+
+    '<div class="card"><h2>Anomalies</h2>'+anom+'</div>';
+}
+function renderList(nodes){
+  $('#list').innerHTML=nodes.map(n=>'<div class="node-item" data-id="'+esc(n.id)+'"><div>'+esc(n.name)+'</div><div class="t">'+esc(n.type)+'</div></div>').join('')||'<div class="t">no nodes</div>';
+  $('#list').querySelectorAll('.node-item').forEach(el=>el.onclick=()=>select(el.dataset.id));
+}
+function esc(s){ return String(s==null?'':s).replace(/[&<>"]/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c])); }
+
+async function select(id){
+  SELECTED=id;
+  $('#list').querySelectorAll('.node-item').forEach(el=>el.classList.toggle('sel',el.dataset.id===id));
+  const node=NODES.find(n=>n.id===id);
+  try{
+    const dep=await api('/v1/nodes/'+encodeURIComponent(id)+'/dependencies?direction=both&maxDepth=2');
+    renderDetail(node,dep); drawGraph(id,dep);
+  }catch(e){ toast('drill-down failed: '+e.message); }
+}
+function renderDetail(node,dep){
+  if(!node){ $('#detail').innerHTML='<div class="t">node not in current page</div>'; return; }
+  const fields=[['id',node.id],['type',node.type],['name',node.name],['confidence',node.confidence],['domain',node.domain],['owner',node.owner]]
+    .filter(([,v])=>v!=null).map(([k,v])=>'<div class="kv"><span>'+k+'</span><span>'+esc(v)+'</span></div>').join('');
+  const tags=(node.tags||[]).map(t=>'<span class="chip">'+esc(t)+'</span>').join('');
+  const edges=(dep.edges||[]).map(e=>'<div class="kv"><span>'+esc(e.relationship)+'</span><span>'+esc(e.sourceId===node.id?('→ '+e.targetId):('← '+e.sourceId))+'</span></div>').join('')||'<div class="t">no dependencies</div>';
+  $('#detail').innerHTML='<div class="card"><h2>Node</h2>'+fields+(tags?'<div style="margin-top:6px">'+tags+'</div>':'')+'</div><div class="card"><h2>Dependencies ('+(dep.nodes?dep.nodes.length:0)+')</h2>'+edges+'</div>';
+}
+
+const cv=()=>$('#graph'), ctx=()=>cv().getContext('2d');
+function drawGraph(rootId,dep){
+  $('#empty').style.display='none';
+  const c=cv(); const dpr=window.devicePixelRatio||1; const w=c.clientWidth,h=c.clientHeight;
+  c.width=w*dpr; c.height=h*dpr; const g=ctx(); g.setTransform(dpr,0,0,dpr,0,0); g.clearRect(0,0,w,h);
+  const nodes=dep.nodes||[]; const cx=w/2,cy=h/2;
+  // root at center; others on a circle, radius by depth.
+  const pos={}; pos[rootId]={x:cx,y:cy};
+  const others=nodes.filter(n=>n.id!==rootId);
+  others.forEach((n,i)=>{ const a=(i/Math.max(1,others.length))*Math.PI*2; const r=90+(n.depth||1)*70; pos[n.id]={x:cx+Math.cos(a)*r,y:cy+Math.sin(a)*r}; });
+  // edges
+  g.strokeStyle='#30363d'; g.lineWidth=1.2;
+  (dep.edges||[]).forEach(e=>{ const a=pos[e.sourceId],b=pos[e.targetId]; if(a&&b){ g.beginPath(); g.moveTo(a.x,a.y); g.lineTo(b.x,b.y); g.stroke(); } });
+  // nodes
+  const byId={}; nodes.forEach(n=>byId[n.id]=n);
+  Object.entries(pos).forEach(([id,p])=>{ const n=byId[id]; const root=id===rootId;
+    g.beginPath(); g.arc(p.x,p.y,root?13:8,0,Math.PI*2);
+    g.fillStyle=root?'#3b82f6':'#21262d'; g.fill(); g.lineWidth=root?2:1; g.strokeStyle=root?'#60a5fa':'#484f58'; g.stroke();
+    g.fillStyle='#c9d1d9'; g.font=(root?'600 12px':'11px')+' ui-sans-serif'; g.textAlign='center';
+    g.fillText((n&&n.name?n.name:id).slice(0,22),p.x,p.y-(root?20:14));
+  });
+}
+
+document.addEventListener('DOMContentLoaded',()=>{
+  const t=sessionStorage.getItem('cartograph_token'); if(t)$('#token').value=t;
+  const tn=sessionStorage.getItem('cartograph_tenant'); if(tn)$('#tenant').value=tn;
+  $('#reload').onclick=()=>{ sessionStorage.setItem('cartograph_token',$('#token').value.trim()); sessionStorage.setItem('cartograph_tenant',$('#tenant').value.trim()); boot(); };
+  $('#search').oninput=(e)=>{ const q=e.target.value.toLowerCase(); renderList(NODES.filter(n=>n.name.toLowerCase().includes(q)||n.id.toLowerCase().includes(q)||n.type.toLowerCase().includes(q))); };
+  boot();
+});
+`;
+function dashboardHtml(opts = {}) {
+  const version = opts.version ?? "";
+  return `<!DOCTYPE html>
+<html lang="en"><head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Cartograph dashboard</title>
+<style>${STYLE}</style>
+</head><body>
+<header>
+  <h1>Cartograph</h1><span class="ver">${version ? `v${version}` : ""}</span>
+  <span class="spacer"></span>
+  <input id="tenant" placeholder="tenant (optional)" autocomplete="off">
+  <input id="token" type="password" placeholder="bearer token" autocomplete="off">
+  <button id="reload">Reload</button>
+</header>
+<main>
+  <div class="col"><div id="summary"></div></div>
+  <div class="col" id="center"><canvas id="graph"></canvas><div id="empty">Select a node to explore its dependencies.</div></div>
+  <div class="col">
+    <input id="search" placeholder="Search nodes\u2026" autocomplete="off">
+    <div id="list"></div>
+    <div id="detail"></div>
+  </div>
+</main>
+<div id="toast"></div>
+<script>${SCRIPT}</script>
+</body></html>`;
+}
+
 // src/api/server.ts
 var DEPENDENCIES_RE = /^\/v1\/nodes\/(.+)\/dependencies$/;
 var MAX_GRAPHQL_BYTES = 1024 * 1024;
@@ -8416,6 +8712,8 @@ async function runApi(opts) {
   });
   const restDeps = { backend: opts.backend, version: opts.version };
   const openApiDoc = buildOpenApiDocument({ version: opts.version });
+  const dashboardEnabled = opts.dashboard !== false;
+  const dashboardPage = dashboardEnabled ? dashboardHtml({ version: opts.version }) : "";
   const allowedOrigins = opts.allowedOrigins ?? [];
   assertSafeBind({ host: host2, port: requestedPort, ...opts.allowedHosts ? { allowedHosts: opts.allowedHosts } : {}, ...token ? { token } : {} });
   let allowedHosts = opts.allowedHosts ?? [];
@@ -8458,6 +8756,11 @@ async function runApi(opts) {
           finish(200);
           return;
         }
+        if (dashboardEnabled && (path === "/" || path === "/app") && req.method === "GET") {
+          res.writeHead(200, { "content-type": "text/html; charset=utf-8", ...cors }).end(dashboardPage);
+          finish(200);
+          return;
+        }
         if (path === "/v1/health") {
           if (req.method !== "GET") {
             send(res, 405, { error: "method not allowed" }, { allow: "GET", ...cors });
@@ -8622,6 +8925,7 @@ function parseApiArgs(argv) {
     const a = argv[i];
     if (a === "--http") continue;
     else if (a === "--no-graphql") opts.graphql = false;
+    else if (a === "--no-dashboard") opts.dashboard = false;
     else if (a === "--port") opts.port = Number(argv[++i]);
     else if (a === "--host") opts.host = argv[++i];
     else if (a === "--allowed-hosts") opts.allowedHosts = splitList(argv[++i]);
@@ -8657,12 +8961,14 @@ async function startApi(opts = {}) {
     ...opts.allowedOrigins ? { allowedOrigins: opts.allowedOrigins } : {},
     ...token ? { token } : {},
     ...opts.graphql === false ? { graphql: false } : {},
+    ...opts.dashboard === false ? { dashboard: false } : {},
     ...opts.tenant ? { tenant: { defaultTenant: normalizeTenant(opts.tenant) } } : {},
     log: log2
   });
   const graphqlNote = opts.graphql === false ? " [REST only]" : " + /graphql";
+  const dashNote = opts.dashboard === false ? "" : ` \xB7 dashboard http://${host2}:${port}/`;
   log2(
-    `Cartograph API (REST${graphqlNote}) on http://${host2}:${port}/v1${token ? " (auth: bearer token required)" : ""} (tenant: ${normalizeTenant(opts.tenant)})`
+    `Cartograph API (REST${graphqlNote}) on http://${host2}:${port}/v1${token ? " (auth: bearer token required)" : ""} (tenant: ${normalizeTenant(opts.tenant)})${dashNote}`
   );
   return server;
 }
@@ -11927,6 +12233,7 @@ function checkClaudePrerequisites() {
   DEFAULT_SERVER_NAME,
   DEFAULT_TENANT,
   DriftConfigSchema,
+  GraphStoreBackend,
   INGEST_SCHEMA_VERSION,
   IngestEnvelopeSchema,
   InvalidTenantError,
@@ -12014,6 +12321,7 @@ function checkClaudePrerequisites() {
   createSqliteQueryBackend,
   currentOs,
   cursorDeeplink,
+  dashboardHtml,
   databasesScanner,
   deepMerge,
   defaultAllowedHosts,
@@ -12098,6 +12406,7 @@ function checkClaudePrerequisites() {
   nodesToAssets,
   normalizeId,
   normalizeTenant,
+  openStoreBackend,
   orgKeyPath,
   osUser,
   parseApiArgs,