@tonyclaw/agent-inspector 3.0.45 → 3.0.46

package/src/cli/templates/skill-onboard.ts

@@ -24,8 +24,14 @@ export type SkillOnboardContext = {
   readonly version: string;
   /** The default proxy port (mirrors `DEFAULT_PORT` in `src/cli.ts`). */
   readonly port: number;
-  /** Public UI base URL, including the configured base path. */
+  /** Public backend control/agent Base URL, including the configured Base Path. */
   readonly baseUrl: string;
+  /** Optional composed or standalone UI URL. Undefined preserves the legacy composed default. */
+  readonly uiUrl?: string | null;
+  /** REST/SSE Base URL. Falls back to baseUrl for compatibility. */
+  readonly controlBaseUrl?: string;
+  /** Proxy/MCP Base URL. Falls back to baseUrl for compatibility. */
+  readonly agentBaseUrl?: string;
   /** MCP config key selected by onboarding. */
   readonly mcpName?: string;
   /** Selected onboarding target type. */
@@ -56,24 +62,29 @@ export const REQUIRED_PHASE_HEADINGS = [
 ] as const;
 
 export function renderSkillOnboard(ctx: SkillOnboardContext): string {
-  const { version, port, baseUrl, detectedSummary } = ctx;
+  const { version, port, detectedSummary } = ctx;
+  const controlBaseUrl = ctx.controlBaseUrl ?? ctx.baseUrl;
+  const agentBaseUrl = ctx.agentBaseUrl ?? ctx.baseUrl;
+  const uiUrl = ctx.uiUrl === undefined ? ctx.baseUrl : ctx.uiUrl;
   const mcpName = ctx.mcpName ?? "agent-inspector";
   const targetKind = ctx.targetKind ?? "default";
   const targetArguments = ctx.onboardTargetArguments ?? "";
   const instanceName = ctx.instanceName ?? null;
-  const healthUrl = `${baseUrl}/api/health`;
-  const configUrl = `${baseUrl}/api/config`;
-  const anthropicProxyUrl = `${baseUrl}/proxy`;
-  const openAiProxyUrl = `${baseUrl}/proxy/v1`;
-  const mcpUrl = `${baseUrl}/api/mcp`;
-  const logsUrl = `${baseUrl}/api/logs`;
+  const healthUrl = `${controlBaseUrl}/api/health`;
+  const runtimeUrl = `${controlBaseUrl}/api/runtime`;
+  const configUrl = `${controlBaseUrl}/api/config`;
+  const anthropicProxyUrl = `${agentBaseUrl}/proxy`;
+  const openAiProxyUrl = `${agentBaseUrl}/proxy/v1`;
+  const mcpUrl = `${agentBaseUrl}/api/mcp`;
+  const logsUrl = `${controlBaseUrl}/api/logs`;
+  const providersUrl = `${controlBaseUrl}/api/providers`;
   const statusCommand = `agent-inspector onboard --status${targetArguments}`;
   const refreshCommand = `agent-inspector onboard --force${targetArguments}`;
   const startCommand =
     targetKind === "instance" && instanceName !== null
       ? `agent-inspector instance start ${instanceName}`
       : targetKind === "base-url"
-        ? `# Explicit target ${baseUrl}: do not start a replacement local runtime.`
+        ? `# Explicit control target ${controlBaseUrl}: do not start a replacement local runtime.`
         : "agent-inspector --mode simple --background --no-open";
   const fullModeCommand =
     targetKind === "instance" && instanceName !== null
@@ -95,17 +106,27 @@ if (-not $found) { throw 'agent-inspector is not on PATH' }
 & $found.Source ${windowsStartArguments}`;
   const startExplanation =
     targetKind === "base-url"
-      ? `The selected Inspector target is the explicit Base URL \`${baseUrl}\`. Do not launch a default local runtime as a substitute; verify the selected target and ask its operator for help if it is unavailable.`
-      : `Start or reuse the selected Inspector runtime. It listens on port ${String(port)} and preserves the selected Base Path. Use \`${fullModeCommand}\` only when the user needs raw headers, raw response, or SSE chunks.`;
+      ? `The selected Inspector target uses control Base URL \`${controlBaseUrl}\` and agent Base URL \`${agentBaseUrl}\`. Do not launch a default local runtime as a substitute; verify the selected target and ask its operator for help if it is unavailable.`
+      : `Start or reuse the selected Inspector backend. Its public control and agent endpoints preserve the selected Base Path; a Web UI may be composed at the same URL, hosted separately, or intentionally absent in backend-only mode. Use \`${fullModeCommand}\` only when the user needs raw headers, raw response, or SSE chunks.`;
   const stopSnippet =
     targetKind === "instance" && instanceName !== null
       ? `agent-inspector instance stop ${instanceName}`
       : targetKind === "base-url"
-        ? `# Ask the operator of ${baseUrl} to stop the selected runtime.`
+        ? `# Ask the operator of ${controlBaseUrl} to stop the selected runtime.`
         : `# Unix / macOS\n  lsof -ti:${String(port)} | xargs -r kill -9\n\n  # Windows PowerShell\n  Get-NetTCPConnection -LocalPort ${String(port)} | ForEach-Object { Stop-Process -Id $_.OwningProcess -Force }`;
+  const providerScopeGuidance =
+    targetKind === "default"
+      ? "The unmanaged default target owns the local Agent Inspector data directory used by the file checks below."
+      : `The selected target is not the unmanaged default data directory. Do not inspect or edit local ~/.agent-inspector Provider files as a substitute. Query \`${providersUrl}\`, use the selected target's MCP Provider tools with explicit approval, or ask its operator to configure Providers. Skip local-file commands below.`;
+  const selectedUi =
+    uiUrl === null ? "not supplied (do not infer one from a backend URL)" : `\`${uiUrl}\``;
+  const uiTour =
+    uiUrl === null
+      ? "not supplied; continue with MCP/REST, and ask the operator for a standalone UI URL only if the user needs one"
+      : `\`${uiUrl}\` — use this explicit composed or standalone browser URL; do not replace it with the control or agent Base URL`;
   return `---
 name: agent-inspector-onboard
-description: Guided setup for Agent Inspector v${version}: start the proxy, wire your AI coding tool, capture your first request, and learn the Web UI.
+description: Guided setup for Agent Inspector v${version}: start or select the backend, wire your AI coding tool, and capture your first request with or without a Web UI.
 metadata:
   author: agent-inspector
   version: ${version}
@@ -113,12 +134,16 @@ metadata:
 
 # Agent Inspector onboard
 
-Guide the user from "I just installed Agent Inspector" to "I can see my AI tool's traffic in the Web UI". This is a teaching experience: you'll do real work in their environment while explaining each step.
+Guide the user from "I just installed Agent Inspector" to "my coding agent can use the proxy, REST API, and MCP surface". The backend works in composed and headless deployments; treat the Web UI as an optional presentation surface.
 
 Environment detected by the installer:
 ${detectedSummary || "  (no known AI tool detected — the user can still use the generic curl example in Phase 4)"}
 
-Selected Inspector target: \`${baseUrl}\` (MCP key: \`${mcpName}\`).
+Selected Inspector surfaces:
+- UI URL: ${selectedUi}
+- Control Base URL: \`${controlBaseUrl}\`
+- Agent Base URL: \`${agentBaseUrl}\`
+- MCP key: \`${mcpName}\`
 
 > **PAUSE protocol.** Every \`**PAUSE**\` marker in this skill is a real stop.
 > Use the \`AskUserQuestion\` tool to actually wait for the user before
@@ -146,9 +171,11 @@ ${statusCommand}
 
 **DO:** Then probe the three pieces of state this skill touches. Use targeted checks — do **not** read large JSON files into the conversation.
 
+**DO:** ${providerScopeGuidance}
+
 \`\`\`bash
-# 1. Is the proxy already up?
-curl -fsS "${healthUrl}" 2>/dev/null && echo "PROXY: up" || echo "PROXY: down"
+# 1. Is the backend already up?
+curl -fsS "${healthUrl}" 2>/dev/null && echo "BACKEND: up" || echo "BACKEND: down"
 
 # 2. Does the provider config have a real provider key?
 agent_inspector_data_dir() {
@@ -209,12 +236,12 @@ $dataDir = Resolve-AgentInspectorDataDir
 $providers = Join-Path $dataDir 'providers.json'
 $legacyConfig = Join-Path $dataDir 'config.json'
 
-# 1. Is the proxy already up?
+# 1. Is the backend already up?
 try {
   $null = Invoke-RestMethod -Uri "${healthUrl}" -TimeoutSec 2 -ErrorAction Stop
-  Write-Host 'PROXY: up'
+  Write-Host 'BACKEND: up'
 } catch {
-  Write-Host 'PROXY: down'
+  Write-Host 'BACKEND: down'
 }
 
 # 2. Does the config have a real provider key?
@@ -284,7 +311,7 @@ node -e "const fs=require('node:fs'),p=require('node:path');const names=process.
 \`\`\`
 ## Welcome to Agent Inspector!
 
-Agent Inspector is an agent observability and knowledge-capture platform for AI coding tools. The \`agent-inspector\` CLI runs a transparent local proxy + Web UI, so you can see model requests and responses, system prompts, tool definitions, message history, timing, and token counts captured live in a browser tab.
+Agent Inspector is an agent observability and knowledge-capture platform for AI coding tools. Its backend owns the transparent model proxy, REST/SSE APIs, capture storage, and MCP server. The default CLI composes a Web UI at the same public Base URL, while \`--backend-only\` keeps every Coding Agent surface available without serving UI files.
 
 Agent Inspector starts in **Simple mode** by default. Simple mode is the right habit for everyday use: it keeps requests, responses, tools, timing, and token usage while avoiding heavier raw headers, raw response, and detailed SSE chunk artifacts. Use **Full mode** only when the user is debugging provider headers, raw response payloads, or SSE stream details.
 
@@ -304,6 +331,8 @@ Ready? Let's start with the provider.
 
 ## Phase 2: Provider setup
 
+**DO:** ${providerScopeGuidance}
+
 **EXPLAIN:** "A 'provider' is an upstream LLM endpoint — Anthropic, OpenAI, MiniMax, etc. agent-inspector routes each request to the right upstream based on the model name. You need at least one provider configured for the proxy to forward traffic."
 
 **DO:** First, re-check whether \`<dataDir>/providers.json\` already has a real key (Phase 0 may have raced with a manual edit). Use the same data-dir resolution and \`grep -qE '"apiKey":"sk-'\` (bash) or \`Select-String\` (PowerShell) check from Phase 0. If a real key is present, skip the rest of this phase.
@@ -399,7 +428,7 @@ $json | Set-Content -Path $file -Encoding UTF8
 
 **EXPLAIN:** "${startExplanation}"
 
-**DO:** Skip this phase entirely if the Phase 0 health check already reported \`PROXY: up\` and the user opted to skip done phases.
+**DO:** Skip this phase entirely if the Phase 0 health check already reported \`BACKEND: up\` and the user opted to skip done phases.
 
 **DO:** Otherwise, use the selected target command below. An explicit wrapper Base URL is connection-only and must not cause a replacement local runtime to start.
 
@@ -412,7 +441,7 @@ ${bashStartSnippet}
 ${powershellStartSnippet}
 \`\`\`
 
-Then wait for the port to be ready:
+Then wait for the selected backend health URL to be ready:
 
 \`\`\`bash
 for i in $(seq 1 20); do
@@ -421,12 +450,18 @@ for i in $(seq 1 20); do
 done
 \`\`\`
 
-**DO:** Hit the health endpoint to confirm the proxy is alive:
+**DO:** Hit the health endpoint to confirm the backend is alive:
 
 \`\`\`bash
 curl -sS "${healthUrl}"
 \`\`\`
 
+**DO:** Read the token-free runtime discovery document. Report \`deploymentMode\` and capabilities; do not treat \`backend-only\` as a failure or infer that a UI is present.
+
+\`\`\`bash
+curl -sS "${runtimeUrl}"
+\`\`\`
+
 **DO:** Read \`/api/config\` and tell the user which capture mode is active. If deeper capture is required, offer \`${fullModeCommand}\`.
 
 \`\`\`bash
@@ -566,10 +601,11 @@ done
 
 ## Phase 6: Tour & wrap
 
-**EXPLAIN:** "Everything's working. Here's the cheat sheet for the Web UI and the supporting surfaces:"
+**EXPLAIN:** "Everything's working. Here's the cheat sheet for the backend surfaces and the optional Web UI:"
 
-- **Web UI**: \`${baseUrl}\` — collapsible log rows, per-tab Copy/Expand in the log header, Diff with Raw (request body), Diff with Previous (compare adjacent requests), Replay (re-send a request), Export (JSON ZIP).
-- **MCP server**: \`${mcpUrl}\` — connect from your coding agent to query logs, replay, and test providers without leaving the editor. Look for the "MCP Ready" badge in the Web UI header.
+- **Runtime discovery**: \`${runtimeUrl}\` — token-free deployment mode, UI Base Path, control/agent Base URLs, and capabilities.
+- **Web UI**: ${uiTour}.
+- **MCP server**: \`${mcpUrl}\` — connect from the coding agent to query logs, replay, and test providers; it does not require a Web UI process.
 - **REST API**: \`/api/logs\`, \`/api/sessions\`, \`/api/providers\` — for scripting and shell-based inspection.
 - **Stop the proxy**:
 
@@ -580,7 +616,7 @@ ${stopSnippet}
 - **Re-run onboard**: \`${refreshCommand}\` refreshes this skill.
 - **Check onboard files**: \`${statusCommand}\` shows whether generated skills are
   current, outdated, missing, newer, or custom.
-- **Full docs**: see the project README (linked from the Web UI footer).
+- **Full docs**: see the project README; do not depend on a UI footer being available.
 
 > **PAUSE** — use \`AskUserQuestion\` with header \`All set?\` and options \`["All set, I'm done", "Wait, I want to revisit a phase"]\`. Wait for the answer.
 

package/src/cli.ts

@@ -8,9 +8,11 @@ import { existsSync } from "node:fs";
 import type { Readable, Writable } from "node:stream";
 import packageJson from "../package.json";
 import {
+  AGENT_INSPECTOR_BASE_PATH_ENV,
   AGENT_INSPECTOR_INTERNAL_STRIPPED_BASE_PATH_ENV,
   appendBasePathToOrigin,
   getConfiguredBasePath,
+  normalizePublicBasePath,
 } from "./lib/basePath.js";
 import {
   AGENT_INSPECTOR_CLI_ENTRY_ENV,
@@ -34,6 +36,7 @@ import {
 import {
   closeIdentityProxyGracefully,
   forceCloseIdentityProxy,
+  parseUiOriginAllowlist,
   startIdentityProxy,
   stopIdentityProxyAdmission,
   type ManagedInstanceControlOptions,
@@ -83,6 +86,14 @@ Global options:
   -h, --help      Show this help without starting a runtime
   -v, --version   Print the package version
 
+Start options:
+  --backend-only, --headless  Start the API, proxy, and MCP runtime without serving the UI
+  --with-ui                  Serve the independently built UI through the protected ingress
+  --port, -p <port>          Public ingress port (default: 9527)
+  --host, -H <host>          Bind host (default: 127.0.0.1)
+  --background               Start a hidden supervisor and return after readiness
+  --no-open                  Do not open the UI after startup
+
 Run \`agent-inspector instance --help\`, \`agent-inspector onboard --help\`, or
 \`agent-inspector doctor --help\` for command-specific options.`);
 }
@@ -309,11 +320,26 @@ function readCaptureMode(raw: unknown): CaptureMode | null {
   return typeof value === "string" ? parseCaptureMode(value) : null;
 }
 
-function printAccessHints(port: number, host?: string, basePath = ""): void {
+function printAccessHints(
+  port: number,
+  host: string | undefined,
+  basePath: string,
+  serveUi: boolean,
+  publicOrigin: string | undefined,
+): void {
   const networkUrls = networkUrlsForBindHost(port, host);
-  for (const line of formatAccessHintLines(port, networkUrls, host, basePath)) {
+  for (const line of formatAccessHintLines(port, networkUrls, host, basePath, serveUi)) {
     console.log(line);
   }
+  if (publicOrigin !== undefined) {
+    const publicBaseUrl = appendBasePathToOrigin(publicOrigin, "/", basePath);
+    if (serveUi) console.log(`   Public UI:      ${publicBaseUrl}`);
+    console.log(`   Public control Base: ${publicBaseUrl}`);
+    console.log(`   Public agent Base:   ${publicBaseUrl}`);
+    console.log(`   Public REST API: ${appendBasePathToOrigin(publicOrigin, "/api", basePath)}`);
+    console.log(`   Public proxy:    ${appendBasePathToOrigin(publicOrigin, "/proxy", basePath)}`);
+    console.log(`   Public MCP:     ${appendBasePathToOrigin(publicOrigin, "/api/mcp", basePath)}`);
+  }
   if (!isLoopbackHost(host)) {
     const proxyTokenConfigured = (process.env["AGENT_INSPECTOR_PROXY_TOKEN"] ?? "") !== "";
     const legacyProxyEnabled =
@@ -345,6 +371,19 @@ function readPositiveIntegerEnv(name: string): number | undefined {
   return undefined;
 }
 
+function normalizeExplicitPublicOrigin(value: string | undefined): string | null | undefined {
+  if (value === undefined || value.trim().length === 0) return undefined;
+  try {
+    const parsed = new URL(value.trim());
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return null;
+    if (parsed.username.length > 0 || parsed.password.length > 0) return null;
+    if (parsed.pathname !== "/" || parsed.search.length > 0 || parsed.hash.length > 0) return null;
+    return parsed.origin;
+  } catch {
+    return null;
+  }
+}
+
 type BackgroundSupervisorOptions = {
   port: number;
   host: string | undefined;
@@ -353,6 +392,7 @@ type BackgroundSupervisorOptions = {
   captureMode: CaptureMode;
   enableIdentityProxy: boolean;
   legacyAliasEnabled: boolean;
+  serveUi: boolean;
 };
 
 function buildBackgroundSupervisorArgs(options: BackgroundSupervisorOptions): string[] {
@@ -372,6 +412,9 @@ function buildBackgroundSupervisorArgs(options: BackgroundSupervisorOptions): st
   if (options.legacyAliasEnabled) {
     args.push("--legacy-port");
   }
+  if (!options.serveUi) {
+    args.push("--backend-only");
+  }
   return args;
 }
 
@@ -395,17 +438,17 @@ function pickUpstreamPort(publicPort: number, legacyAliasPort: number | null): n
   return DEFAULT_UPSTREAM_PORT;
 }
 
-/** Try to start the identity proxy. Returns `null` (and prints a warning)
- *  if the listen port is already in use by another process — e.g. when
- *  restarting a previous instance that didn't shut down cleanly. The
- *  TanStack Start server keeps running either way; clients just lose the
- *  per-PID attribution until they fall back to direct port `port` access. */
+/** Try to start an identity-proxy ingress. The primary caller treats a
+ *  `null` result as fatal; only an optional compatibility alias may degrade. */
 async function tryStartIdentityProxy(
   identityPort: number,
   upstreamPort: number,
   listenHost: string,
   upstreamHost: string,
   managedInstance: ManagedInstanceControlOptions | undefined,
+  allowedUiOrigins: readonly string[],
+  uiDirectory: string | undefined,
+  publicOrigin: string | undefined,
 ): Promise<import("node:http").Server | null> {
   try {
     const server = await startIdentityProxy({
@@ -423,6 +466,9 @@ async function tryStartIdentityProxy(
         .split(",")
         .map((host) => host.trim())
         .filter((host) => host.length > 0),
+      allowedUiOrigins,
+      uiDirectory,
+      publicOrigin,
       maxRequestBytes: readPositiveIntegerEnv("AGENT_INSPECTOR_MAX_REQUEST_BYTES"),
       requestTimeoutMs: readPositiveIntegerEnv("AGENT_INSPECTOR_REQUEST_TIMEOUT_MS"),
       managedInstance,
@@ -430,11 +476,7 @@ async function tryStartIdentityProxy(
     return server;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.warn(
-      `[identity-proxy] Could not listen on port ${identityPort}: ${message}. ` +
-        `Falling back to OS-scan heuristic on port ${upstreamPort}. ` +
-        `Pass --identity-proxy-port <n> to choose another port, or --no-identity-proxy to disable.`,
-    );
+    console.warn(`[identity-proxy] Could not listen on port ${identityPort}: ${message}.`);
     return null;
   }
 }
@@ -467,6 +509,7 @@ async function runStart(args: string[]): Promise<void> {
   let captureModeWasSpecified = false;
   let enableIdentityProxy = true;
   let legacyAliasEnabled = false;
+  let serveUi = process.env["AGENT_INSPECTOR_BACKEND_ONLY"] !== "1";
 
   if (envMode !== undefined && envMode !== "") {
     const parsedMode = parseCaptureMode(envMode);
@@ -546,6 +589,14 @@ async function runStart(args: string[]): Promise<void> {
       case "--background":
         background = true;
         break;
+      case "--backend-only":
+      case "--headless":
+        serveUi = false;
+        open = false;
+        break;
+      case "--with-ui":
+        serveUi = true;
+        break;
       case "--config-dir":
         configDir = args[i + 1];
         i++;
@@ -618,6 +669,40 @@ async function runStart(args: string[]): Promise<void> {
     process.exitCode = 1;
     return;
   }
+  if (!serveUi) open = false;
+  if (!enableIdentityProxy && serveUi) {
+    console.error(
+      "The decoupled UI is composed only by the protected ingress. Use --backend-only with --no-identity-proxy, or keep the identity proxy enabled.",
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const uiOriginAllowlist = parseUiOriginAllowlist(process.env["AGENT_INSPECTOR_UI_ORIGINS"]);
+  if (uiOriginAllowlist.rejected.length > 0) {
+    console.error(
+      `Invalid AGENT_INSPECTOR_UI_ORIGINS entries: ${uiOriginAllowlist.rejected.join(", ")}. Only exact loopback http(s) origins are accepted; use a same-origin authenticated gateway for remote UI hosting.`,
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const publicOrigin = normalizeExplicitPublicOrigin(process.env["AGENT_INSPECTOR_PUBLIC_ORIGIN"]);
+  if (publicOrigin === null) {
+    console.error(
+      "Invalid AGENT_INSPECTOR_PUBLIC_ORIGIN. Use an exact http(s) origin without credentials, path, query, or fragment.",
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const uiDirectoryCandidate = join(__dirname, "../.output/ui");
+  const uiIndexPath = join(uiDirectoryCandidate, "index.html");
+  const uiDirectory = serveUi && existsSync(uiIndexPath) ? uiDirectoryCandidate : undefined;
+  if (serveUi && uiDirectory === undefined) {
+    console.error(
+      `Agent Inspector UI artifact is missing at ${uiIndexPath}. Run the composed build or use --backend-only.`,
+    );
+    process.exitCode = 1;
+    return;
+  }
 
   /**
    * Check if a port is in use and kill the process using it
@@ -655,11 +740,22 @@ async function runStart(args: string[]): Promise<void> {
   const upstreamHost = enableIdentityProxy ? DEFAULT_BIND_HOST : host;
   process.env["PORT"] = String(upstreamPort);
 
+  const configuredBasePath = process.env[AGENT_INSPECTOR_BASE_PATH_ENV];
+  if (configuredBasePath !== undefined && normalizePublicBasePath(configuredBasePath) === null) {
+    console.error(
+      `Invalid ${AGENT_INSPECTOR_BASE_PATH_ENV}. Use / for root or URL-safe path segments such as /inspector or /foo-bar/v1.`,
+    );
+    process.exitCode = 1;
+    return;
+  }
   const basePath = getConfiguredBasePath(process.env);
-  const url = urlForHost(port, host);
-  const uiUrl = appendBasePathToOrigin(url, "/", basePath);
-  const proxyUrl = appendBasePathToOrigin(url, "/proxy", basePath);
-  const proxyMessagesUrl = appendBasePathToOrigin(url, "/proxy/v1/messages", basePath);
+  const bindOrigin = urlForHost(port, host);
+  const outwardOrigin = publicOrigin ?? bindOrigin;
+  const surfaceBaseUrl = appendBasePathToOrigin(outwardOrigin, "/", basePath);
+  const uiUrl = serveUi ? surfaceBaseUrl : null;
+  const proxyUrl = appendBasePathToOrigin(outwardOrigin, "/proxy", basePath);
+  const openAiProxyUrl = appendBasePathToOrigin(outwardOrigin, "/proxy/v1", basePath);
+  const proxyMessagesUrl = appendBasePathToOrigin(outwardOrigin, "/proxy/v1/messages", basePath);
   const legacyUrl =
     legacyAliasPort === null
       ? null
@@ -674,8 +770,10 @@ async function runStart(args: string[]): Promise<void> {
       : appendBasePathToOrigin(localUrlForPort(legacyAliasPort), "/api/mcp", basePath);
 
   if (!forceRestart && (await isInspectorHealthy(port, host, basePath))) {
-    console.log(`agent-inspector is already running at ${uiUrl}`);
-    printAccessHints(port, host, basePath);
+    console.log(
+      `agent-inspector ${serveUi ? "is already running" : "backend is already running"} at ${surfaceBaseUrl}`,
+    );
+    printAccessHints(port, host, basePath, serveUi, publicOrigin);
     if (captureModeWasSpecified) {
       const runningMode = await getRunningCaptureMode(port, host, basePath);
       if (runningMode !== null && runningMode !== captureMode) {
@@ -684,7 +782,7 @@ async function runStart(args: string[]): Promise<void> {
       }
     }
     console.log(`Use --force-restart to restart the existing instance.`);
-    if (open && openWasSpecified) {
+    if (open && openWasSpecified && uiUrl !== null) {
       openBrowser(uiUrl);
     }
     return;
@@ -725,6 +823,7 @@ async function runStart(args: string[]): Promise<void> {
       captureMode,
       enableIdentityProxy,
       legacyAliasEnabled,
+      serveUi,
     });
     const supervisorProcess = spawn(process.execPath, [cliEntry, ...supervisorArgs], {
       stdio: "ignore",
@@ -738,8 +837,10 @@ async function runStart(args: string[]): Promise<void> {
     supervisorProcess.unref();
 
     if (await waitForInspectorHealthy(port, 10000, host, basePath)) {
-      console.log(`agent-inspector background server is ready at ${uiUrl}`);
-      printAccessHints(port, host, basePath);
+      console.log(
+        `agent-inspector background ${serveUi ? "server" : "backend"} is ready at ${surfaceBaseUrl}`,
+      );
+      printAccessHints(port, host, basePath, serveUi, publicOrigin);
       if (legacyProxyUrl !== null && legacyMcpUrl !== null) {
         console.log(`   Legacy proxy:  ${legacyProxyUrl}`);
         console.log(`   Legacy MCP:    ${legacyMcpUrl}`);
@@ -748,48 +849,18 @@ async function runStart(args: string[]): Promise<void> {
       console.log(`Route AI coding tools through the identity proxy for accurate PID attribution:`);
       console.log(`   Claude Code:  ANTHROPIC_BASE_URL=${proxyUrl} claude`);
       console.log(`   OpenCode:     LLM_BASE_URL=${proxyUrl} opencode`);
-      console.log(`   MiMo Code:    OPENAI_BASE_URL=${proxyUrl} mimo`);
-      if (open && openWasSpecified) {
+      console.log(`   MiMo Code:    OPENAI_BASE_URL=${openAiProxyUrl} mimo`);
+      if (open && openWasSpecified && uiUrl !== null) {
         openBrowser(uiUrl);
       }
       return;
     }
 
-    console.error(`agent-inspector background server did not become ready at ${uiUrl}.`);
+    console.error(`agent-inspector background server did not become ready at ${surfaceBaseUrl}.`);
     process.exitCode = 1;
     return;
   }
 
-  console.log(`Server running at ${uiUrl}`);
-  console.log(`   Capture mode: ${captureMode}`);
-  console.log(`   Proxy: ${proxyUrl}`);
-  printAccessHints(port, host, basePath);
-  if (legacyUrl !== null && legacyProxyUrl !== null && legacyMcpUrl !== null) {
-    console.log(`   Legacy UI:      ${legacyUrl}`);
-    console.log(`   Legacy proxy:   ${legacyProxyUrl}`);
-    console.log(`   Legacy MCP:     ${legacyMcpUrl}`);
-  }
-  console.log(``);
-  console.log(`Route AI coding tools through the proxy:`);
-  console.log(`   Claude Code:  ANTHROPIC_BASE_URL=${proxyUrl} claude`);
-  console.log(`   OpenCode:     LLM_BASE_URL=${proxyUrl} opencode`);
-  console.log(`   MiMo Code:    OPENAI_BASE_URL=${proxyUrl} mimo`);
-  console.log(`   Direct HTTP:  curl ${proxyMessagesUrl} -d '{"model":"...","messages":[...]}'`);
-  console.log(
-    `   Remote/container tools: use the Network proxy URL above when shown; otherwise restart with --host 0.0.0.0 or a reachable IP.`,
-  );
-  console.log(``);
-  console.log(`Routing environment variables:`);
-  console.log(`   ROUTES            JSON map of model prefix -> upstream URL`);
-  console.log(`   DEFAULT_UPSTREAM  Fallback upstream for unmatched models`);
-  console.log(
-    `   Example: ROUTES='{"claude-":"https://api.anthropic.com","MiniMax":"https://api.minimaxi.com/anthropic"}'`,
-  );
-
-  if (open) {
-    openBrowser(uiUrl);
-  }
-
   // Compute server path
   const outputDir = __dirname;
   const serverPath = join(outputDir, "../.output/server/index.mjs");
@@ -831,6 +902,7 @@ async function runStart(args: string[]): Promise<void> {
   serverEnv["AGENT_INSPECTOR_PUBLIC_PORT"] = String(port);
   serverEnv["PROXY_PORT"] = String(port);
   serverEnv["AGENT_INSPECTOR_CAPTURE_MODE"] = captureMode;
+  serverEnv["AGENT_INSPECTOR_BACKEND_ONLY"] = serveUi ? "0" : "1";
   const workerDir = join(__dirname, "workers");
   if (existsSync(workerDir)) {
     serverEnv["AGENT_INSPECTOR_WORKER_DIR"] = workerDir;
@@ -933,10 +1005,23 @@ async function runStart(args: string[]): Promise<void> {
       host,
       upstreamHost,
       managedInstanceControl,
+      uiOriginAllowlist.origins,
+      uiDirectory,
+      publicOrigin,
     );
-    if (primaryProxy !== null) {
-      identityProxies.push({ label: "primary", port, server: primaryProxy });
+    if (primaryProxy === null) {
+      console.error(
+        `Agent Inspector could not bind its protected public ingress at ${bindOrigin}; stopping the private backend.`,
+      );
+      requestSupervisorShutdown("SIGTERM");
+      const failedStartupShutdown = currentSupervisorShutdown();
+      if (failedStartupShutdown !== null) await failedStartupShutdown;
+      process.off("SIGINT", handleSigint);
+      process.off("SIGTERM", handleSigterm);
+      process.exitCode = 1;
+      return;
     }
+    identityProxies.push({ label: "primary", port, server: primaryProxy });
     if (legacyAliasPort !== null) {
       const legacyProxy = await tryStartIdentityProxy(
         legacyAliasPort,
@@ -944,6 +1029,9 @@ async function runStart(args: string[]): Promise<void> {
         host,
         upstreamHost,
         managedInstanceControl,
+        uiOriginAllowlist.origins,
+        uiDirectory,
+        publicOrigin,
       );
       if (legacyProxy !== null) {
         identityProxies.push({ label: "legacy", port: legacyAliasPort, server: legacyProxy });
@@ -957,11 +1045,13 @@ async function runStart(args: string[]): Promise<void> {
     // not started yet so the public port is not yet accepting traffic.
     const upstreamProbeBasePath = enableIdentityProxy ? "" : basePath;
     if (await waitForInspectorHealthy(upstreamPort, 5000, host, upstreamProbeBasePath)) {
-      console.log(`agent-inspector background server is ready at ${uiUrl}`);
+      console.log(
+        `agent-inspector background ${serveUi ? "server" : "backend"} is ready at ${surfaceBaseUrl}`,
+      );
       if (identityProxies.length > 0) {
         console.log(`Identity proxy ready on port ${port} (PID-attributing proxy).`);
       }
-      printAccessHints(port, host, basePath);
+      printAccessHints(port, host, basePath, serveUi, publicOrigin);
       if (legacyProxyUrl !== null && legacyMcpUrl !== null) {
         console.log(`   Legacy proxy:  ${legacyProxyUrl}`);
         console.log(`   Legacy MCP:    ${legacyMcpUrl}`);
@@ -972,7 +1062,7 @@ async function runStart(args: string[]): Promise<void> {
           `Route AI coding tools through the identity proxy for accurate PID attribution:`,
           `   Claude Code:  ANTHROPIC_BASE_URL=${proxyUrl} claude`,
           `   OpenCode:     LLM_BASE_URL=${proxyUrl} opencode`,
-          `   MiMo Code:    OPENAI_BASE_URL=${proxyUrl} mimo`,
+          `   MiMo Code:    OPENAI_BASE_URL=${openAiProxyUrl} mimo`,
           legacyProxyUrl === null
             ? `   Override the port with --port <n> when needed.`
             : `   Legacy configs using ${legacyProxyUrl} still work.`,
@@ -980,14 +1070,25 @@ async function runStart(args: string[]): Promise<void> {
       }
       return;
     }
-    console.error(`agent-inspector background server did not become ready at ${uiUrl}.`);
+    console.error(`agent-inspector background server did not become ready at ${surfaceBaseUrl}.`);
+    process.exitCode = 1;
+    return;
+  }
+
+  if (!(await waitForInspectorHealthy(port, 10_000, host, basePath))) {
+    console.error(`Agent Inspector did not become ready at ${surfaceBaseUrl}; stopping startup.`);
+    requestSupervisorShutdown("SIGTERM");
+    const failedStartupShutdown = currentSupervisorShutdown();
+    if (failedStartupShutdown !== null) await failedStartupShutdown;
+    process.off("SIGINT", handleSigint);
+    process.off("SIGTERM", handleSigterm);
     process.exitCode = 1;
     return;
   }
 
   if (identityProxies.length > 0) {
     console.log(``);
-    console.log(`Identity proxy ready at ${url} (PID-attributing public entrypoint).`);
+    console.log(`Identity proxy ready at ${bindOrigin} (PID-attributing ingress).`);
     if (legacyAliasPort !== null) {
       const legacyReady = identityProxies.some((proxy) => proxy.label === "legacy");
       if (legacyReady) {
@@ -999,6 +1100,28 @@ async function runStart(args: string[]): Promise<void> {
     }
   }
 
+  console.log(
+    `${serveUi ? "UI and backend" : "Backend control and agent runtime"} running at ${surfaceBaseUrl}`,
+  );
+  console.log(`   Capture mode: ${captureMode}`);
+  console.log(`   Proxy: ${proxyUrl}`);
+  printAccessHints(port, host, basePath, serveUi, publicOrigin);
+  if (legacyUrl !== null && legacyProxyUrl !== null && legacyMcpUrl !== null) {
+    console.log(`   Legacy UI:      ${legacyUrl}`);
+    console.log(`   Legacy proxy:   ${legacyProxyUrl}`);
+    console.log(`   Legacy MCP:     ${legacyMcpUrl}`);
+  }
+  console.log(``);
+  console.log(`Route AI coding tools through the proxy:`);
+  console.log(`   Claude Code:  ANTHROPIC_BASE_URL=${proxyUrl} claude`);
+  console.log(`   OpenCode:     LLM_BASE_URL=${proxyUrl} opencode`);
+  console.log(`   MiMo Code:    OPENAI_BASE_URL=${openAiProxyUrl} mimo`);
+  console.log(`   Direct HTTP:  curl ${proxyMessagesUrl} -d '{"model":"...","messages":[...]}'`);
+  console.log(
+    `   Remote/container tools: use the Network proxy URL above when shown; otherwise restart with --host 0.0.0.0 or a reachable IP.`,
+  );
+  if (open && uiUrl !== null) openBrowser(uiUrl);
+
   process.exitCode = await serverExit;
 
   const activeSupervisorShutdown = currentSupervisorShutdown();