arc-1 0.9.19 → 0.9.21

package/dist/server/types.d.ts

@@ -9,6 +9,8 @@
  */
 /** MCP transport type */
 export type TransportType = 'stdio' | 'http-streamable';
+/** Read-only admin UI mode */
+export type UiMode = 'off' | 'local' | 'web';
 /** Feature toggle: auto detects from SAP system, on/off forces */
 export type FeatureToggle = 'auto' | 'on' | 'off';
 /** Per-field config source (used by resolveConfig + startup log + `config show`). */
@@ -31,6 +33,12 @@ export interface ServerConfig {
     cookieString?: string;
     transport: TransportType;
     httpAddr: string;
+    /** Read-only inspection UI: off (default), local sidecar server, or mounted web routes on the HTTP server. */
+    uiMode: UiMode;
+    /** Bind address for local sidecar UI mode. Ignored when uiMode='web'. */
+    uiAddr: string;
+    /** Open the local UI in the system browser after startup (local/dev convenience only). */
+    uiOpen: boolean;
     allowWrites: boolean;
     allowDataPreview: boolean;
     allowFreeSQL: boolean;
@@ -63,6 +71,8 @@ export interface ServerConfig {
     /** Clock tolerance in seconds for JWT exp/nbf validation (default: 0 — no tolerance) */
     oidcClockTolerance?: number;
     xsuaaAuth: boolean;
+    /** Explicit unsafe opt-in for HTTP `/mcp` without API-key, OIDC, or XSUAA auth. */
+    allowHttpNoAuth: boolean;
     /**
      * Lifetime of an OAuth DCR registration (`client_id`) in seconds.
      * Default: 30 days. Positive values are clamped to `[60s, 90d]`. Set to
@@ -87,6 +97,8 @@ export interface ServerConfig {
     btpOAuthCallbackPort: number;
     ppEnabled: boolean;
     ppStrict: boolean;
+    /** True only when SAP_PP_STRICT / --pp-strict was explicitly provided. */
+    ppStrictExplicit: boolean;
     /** Opt-in: allow shared cookie auth to coexist with PP (shared client only) */
     ppAllowSharedCookies: boolean;
     /** Opt-in: disable SAML redirect for ADT requests (X-SAP-SAML2 + saml2=disabled) */
@@ -94,6 +106,8 @@ export interface ServerConfig {
     logFile?: string;
     logLevel: 'debug' | 'info' | 'warn' | 'error';
     logFormat: 'text' | 'json';
+    /** Hide SAP response details from client-facing tool errors while retaining server-side correlation data. */
+    minimalErrors: boolean;
     /** Tool mode: 'standard' (12 intent tools, SAPGit feature-gated) or 'hyperfocused' (1 universal SAP tool, ~200 tokens) */
     toolMode: 'standard' | 'hyperfocused';
     /** Absolute paths to extension plugins to load at startup (from ARC1_PLUGINS, CSV). Each contributes
@@ -104,6 +118,14 @@ export interface ServerConfig {
      *  and the tool must declare `write` scope. A dedicated switch (not implied by `allowWrites`) so
      *  enabling built-in writes never silently grants plugins code execution. */
     allowPluginExecute: boolean;
+    /** Opt-in: allow plugin tools to make low-level WRITE calls (`ctx.http.post`/`put`/`delete`) to
+     *  **non-ADT** SAP paths (OData `/sap/opu/odata/…`, custom ICF `/sap/bc/http/…`). Default false.
+     *  Writes to `/sap/bc/adt/…` object endpoints are ALWAYS refused (they need package-allowlist
+     *  enforcement that this raw surface can't do — those wait for the v2 `ctx.write` vocabulary). Also
+     *  requires `allowWrites=true` and a `write`-scoped tool. `SAP_ALLOWED_PACKAGES` does NOT constrain
+     *  these calls (no ABAP package in an OData/ICF path) — the gates are this opt-in + `allowWrites` +
+     *  scope + `denyActions` + SAP-side service auth (+ Cloud Connector allowlist on BTP). */
+    allowPluginRawWrites: boolean;
     /** Path to custom abaplint.jsonc config file for lint rules */
     abaplintConfig?: string;
     /** Enable pre-write lint validation (default: true) */

package/dist/server/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAExD,kEAAkE;AAClE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;AAElD,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAE3B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAGlB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IAGjB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;IAGtB,cAAc,EAAE,aAAa,CAAC;IAC9B,WAAW,EAAE,aAAa,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,WAAW,EAAE,aAAa,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,gBAAgB,EAAE,aAAa,CAAC;IAChC,WAAW,EAAE,aAAa,CAAC;IAC3B,cAAc,EAAE,aAAa,CAAC;IAC9B,UAAU,EAAE,aAAa,CAAC;IAG1B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACtC,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,sHAAsH;IACtH,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IAEnB;;;;;;wEAMoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;qCASiC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAG7B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,oBAAoB,EAAE,OAAO,CAAC;IAG9B,oFAAoF;IACpF,YAAY,EAAE,OAAO,CAAC;IAGtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAG3B,0HAA0H;IAC1H,QAAQ,EAAE,UAAU,GAAG,cAAc,CAAC;IAGtC;sGACkG;IAClG,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;iFAG6E;IAC7E,kBAAkB,EAAE,OAAO,CAAC;IAG5B,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;;;iDAQ6C;IAC7C,gBAAgB,EAAE,OAAO,CAAC;IAG1B,oGAAoG;IACpG,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjD,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,mBAAmB,EAAE,MAAM,CAAC;IAG5B;;;gEAG4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IAGtB;;;oDAGgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;mDAS+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAGlB;;;8EAG0E;IAC1E,cAAc,EAAE,MAAM,EAAE,CAAC;IAGzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,6DAA6D;AAC7D,eAAO,MAAM,cAAc,EAAE,YAkD5B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yBAAyB;AACzB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAExD,8BAA8B;AAC9B,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;AAE7C,kEAAkE;AAClE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;AAElD,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAE3B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAGlB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IAGjB,8GAA8G;IAC9G,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,MAAM,EAAE,OAAO,CAAC;IAGhB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;IAGtB,cAAc,EAAE,aAAa,CAAC;IAC9B,WAAW,EAAE,aAAa,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,WAAW,EAAE,aAAa,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,gBAAgB,EAAE,aAAa,CAAC;IAChC,WAAW,EAAE,aAAa,CAAC;IAC3B,cAAc,EAAE,aAAa,CAAC;IAC9B,UAAU,EAAE,aAAa,CAAC;IAG1B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACtC,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,sHAAsH;IACtH,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,eAAe,EAAE,OAAO,CAAC;IAEzB;;;;;;wEAMoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;qCASiC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAG7B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,+EAA+E;IAC/E,oBAAoB,EAAE,OAAO,CAAC;IAG9B,oFAAoF;IACpF,YAAY,EAAE,OAAO,CAAC;IAGtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,6GAA6G;IAC7G,aAAa,EAAE,OAAO,CAAC;IAGvB,0HAA0H;IAC1H,QAAQ,EAAE,UAAU,GAAG,cAAc,CAAC;IAGtC;sGACkG;IAClG,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;iFAG6E;IAC7E,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;;;8FAM0F;IAC1F,oBAAoB,EAAE,OAAO,CAAC;IAG9B,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;;;iDAQ6C;IAC7C,gBAAgB,EAAE,OAAO,CAAC;IAG1B,oGAAoG;IACpG,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjD,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,mBAAmB,EAAE,MAAM,CAAC;IAG5B;;;gEAG4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IAGtB;;;oDAGgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;mDAS+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAGlB;;;8EAG0E;IAC1E,cAAc,EAAE,MAAM,EAAE,CAAC;IAGzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,6DAA6D;AAC7D,eAAO,MAAM,cAAc,EAAE,YAyD5B,CAAC"}

package/dist/server/types.js

@@ -17,6 +17,9 @@ export const DEFAULT_CONFIG = {
     insecure: false,
     transport: 'stdio',
     httpAddr: '0.0.0.0:8080',
+    uiMode: 'off',
+    uiAddr: '127.0.0.1:8711',
+    uiOpen: false,
     allowWrites: false,
     allowDataPreview: false,
     allowFreeSQL: false,
@@ -36,15 +39,18 @@ export const DEFAULT_CONFIG = {
     featureFlp: 'auto',
     systemType: 'auto',
     xsuaaAuth: false,
+    allowHttpNoAuth: false,
     oauthDcrTtlSeconds: 30 * 24 * 60 * 60, // 30 days; set to 0 to disable expiration
     btpOAuthCallbackPort: 0,
     ppEnabled: false,
     ppStrict: false,
+    ppStrictExplicit: false,
     ppAllowSharedCookies: false,
     disableSaml2: false,
     toolMode: 'standard',
     plugins: [],
     allowPluginExecute: false,
+    allowPluginRawWrites: false,
     lintBeforeWrite: true,
     checkBeforeWrite: false,
     cacheMode: 'auto',
@@ -57,6 +63,7 @@ export const DEFAULT_CONFIG = {
     allowedOrigins: [],
     logLevel: 'info',
     logFormat: 'text',
+    minimalErrors: false,
     verbose: false,
 };
 //# sourceMappingURL=types.js.map

package/dist/server/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuLH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,GAAG,EAAE,EAAE;IACP,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,cAAc;IACxB,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,KAAK;IACvB,YAAY,EAAE,KAAK;IACnB,oBAAoB,EAAE,KAAK;IAC3B,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,CAAC,MAAM,CAAC;IACzB,iBAAiB,EAAE,EAAE;IACrB,WAAW,EAAE,EAAE;IACf,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,gBAAgB,EAAE,MAAM;IACxB,WAAW,EAAE,MAAM;IACnB,cAAc,EAAE,MAAM;IACtB,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,CAAC;IACvB,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,oBAAoB,EAAE,KAAK;IAC3B,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,EAAE;IACX,kBAAkB,EAAE,KAAK;IACzB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,KAAK;IACvB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,KAAK;IAClB,mBAAmB,EAAE,EAAE;IACvB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,CAAC,EAAE,gEAAgE;IAC9E,cAAc,EAAE,EAAE;IAClB,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;CACf,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgNH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,GAAG,EAAE,EAAE;IACP,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,KAAK;IACb,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,KAAK;IACvB,YAAY,EAAE,KAAK;IACnB,oBAAoB,EAAE,KAAK;IAC3B,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,CAAC,MAAM,CAAC;IACzB,iBAAiB,EAAE,EAAE;IACrB,WAAW,EAAE,EAAE;IACf,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,gBAAgB,EAAE,MAAM;IACxB,WAAW,EAAE,MAAM;IACnB,cAAc,EAAE,MAAM;IACtB,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,KAAK;IAChB,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,CAAC;IACvB,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,gBAAgB,EAAE,KAAK;IACvB,oBAAoB,EAAE,KAAK;IAC3B,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,EAAE;IACX,kBAAkB,EAAE,KAAK;IACzB,oBAAoB,EAAE,KAAK;IAC3B,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,KAAK;IACvB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,KAAK;IAClB,mBAAmB,EAAE,EAAE;IACvB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,CAAC,EAAE,gEAAgE;IAC9E,cAAc,EAAE,EAAE;IAClB,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,KAAK;IACpB,OAAO,EAAE,KAAK;CACf,CAAC"}

package/dist/server/ui-log-buffer.d.ts

@@ -0,0 +1,29 @@
+import type { AuditEvent } from './audit.js';
+import type { LogSink } from './sinks/types.js';
+export interface UiLogEntry {
+    timestamp: string;
+    level: string;
+    event: string;
+    requestId?: string;
+    user?: string;
+    clientId?: string;
+    [key: string]: unknown;
+}
+export interface UiLogQuery {
+    event?: string;
+    level?: string;
+    requestId?: string;
+    limit?: number;
+}
+export declare class UiLogBufferSink implements LogSink {
+    private readonly maxEntries;
+    private readonly entries;
+    constructor(maxEntries?: number);
+    write(event: AuditEvent): void;
+    list(query?: UiLogQuery): {
+        total: number;
+        limit: number;
+        items: UiLogEntry[];
+    };
+}
+//# sourceMappingURL=ui-log-buffer.d.ts.map

package/dist/server/ui-log-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-log-buffer.d.ts","sourceRoot":"","sources":["../../src/server/ui-log-buffer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAgB,YAAW,OAAO;IAGjC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAEf,UAAU,SAAM;IAE7C,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAO9B,IAAI,CAAC,KAAK,GAAE,UAAe,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,EAAE,CAAA;KAAE;CAapF"}

package/dist/server/ui-log-buffer.js

@@ -0,0 +1,72 @@
+export class UiLogBufferSink {
+    maxEntries;
+    entries = [];
+    constructor(maxEntries = 500) {
+        this.maxEntries = maxEntries;
+    }
+    write(event) {
+        this.entries.push(sanitizeAuditEvent(event));
+        while (this.entries.length > this.maxEntries) {
+            this.entries.shift();
+        }
+    }
+    list(query = {}) {
+        const limit = clampLimit(query.limit);
+        const filtered = this.entries
+            .filter((entry) => !query.event || entry.event === query.event)
+            .filter((entry) => !query.level || entry.level === query.level)
+            .filter((entry) => !query.requestId || entry.requestId === query.requestId);
+        return {
+            total: filtered.length,
+            limit,
+            items: filtered.slice(-limit).reverse(),
+        };
+    }
+}
+function sanitizeAuditEvent(event) {
+    const sanitized = {};
+    for (const [key, value] of Object.entries(event)) {
+        if (isSensitiveLogField(key))
+            continue;
+        sanitized[key] = sanitizeValue(value);
+    }
+    return sanitized;
+}
+function isSensitiveLogField(key) {
+    return ([
+        'requestBody',
+        'responseBody',
+        'requestHeaders',
+        'responseHeaders',
+        'errorBody',
+        'resultPreview',
+        'registeredClientId',
+    ].includes(key) || /password|token|secret|cookie|authorization|csrf/i.test(key));
+}
+function sanitizeValue(value) {
+    if (typeof value === 'string') {
+        return value.length > 500 ? `${value.slice(0, 500)}... [truncated ${value.length} chars]` : value;
+    }
+    if (Array.isArray(value)) {
+        return value.map(sanitizeValue);
+    }
+    if (value && typeof value === 'object') {
+        const result = {};
+        for (const [key, nested] of Object.entries(value)) {
+            if (isSensitiveLogField(key)) {
+                result[key] = '[REDACTED]';
+            }
+            else {
+                result[key] = sanitizeValue(nested);
+            }
+        }
+        return result;
+    }
+    return value;
+}
+function clampLimit(limit) {
+    if (limit === undefined || !Number.isFinite(limit))
+        return 100;
+    return Math.max(1, Math.min(500, Math.trunc(limit)));
+}
+//# sourceMappingURL=ui-log-buffer.js.map

package/dist/server/ui-log-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-log-buffer.js","sourceRoot":"","sources":["../../src/server/ui-log-buffer.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,eAAe;IAGG;IAFZ,OAAO,GAAiB,EAAE,CAAC;IAE5C,YAA6B,aAAa,GAAG;QAAhB,eAAU,GAAV,UAAU,CAAM;IAAG,CAAC;IAEjD,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAoB,EAAE;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;aAC1B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;aAC9D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;aAC9D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAE9E,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,KAAK;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;SACxC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAiB;IAC3C,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAA6B,EAAE,CAAC;QAC7E,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,SAAS,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAuB,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,CACL;QACE,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,iBAAiB;QACjB,WAAW;QACX,eAAe;QACf,oBAAoB;KACrB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kDAAkD,CAAC,IAAI,CAAC,GAAG,CAAC,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/server/ui-state.d.ts

@@ -0,0 +1,32 @@
+import type { ConfigSource, ServerConfig } from './types.js';
+export interface UiOverview {
+    app: {
+        name: 'ARC-1';
+        version: string;
+        startedAt: string;
+        uptimeSeconds: number;
+        pid: number;
+        node: string;
+    };
+    transport: {
+        type: ServerConfig['transport'];
+        httpAddr: string;
+        uiMode: ServerConfig['uiMode'];
+        uiAddr: string;
+    };
+    safety: ReturnType<typeof sanitizeSafetyConfig>;
+    auth: ReturnType<typeof summarizeAuthConfig>;
+    cache: {
+        mode: ServerConfig['cacheMode'];
+        file?: string;
+        warmup: boolean;
+        warmupPackages: string;
+    };
+}
+export declare function buildUiOverview(config: ServerConfig, version: string, startedAt: string): UiOverview;
+export declare function sanitizeConfigForUi(config: ServerConfig): Record<string, unknown>;
+export declare function sanitizeConfigSourcesForUi(sources: Record<string, ConfigSource>): Record<string, ConfigSource>;
+export declare function sanitizeFeaturesForUi(features: unknown): Record<string, unknown>;
+export declare function sanitizeSafetyConfig(config: ServerConfig): Record<string, unknown>;
+export declare function summarizeAuthConfig(config: ServerConfig): Record<string, unknown>;
+//# sourceMappingURL=ui-state.d.ts.map

package/dist/server/ui-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-state.d.ts","sourceRoot":"","sources":["../../src/server/ui-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI7D,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE;QACH,IAAI,EAAE,OAAO,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAChD,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC7C,KAAK,EAAE;QACL,IAAI,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAyBpG;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8EjF;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAE9G;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBhF;AAoCD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYlF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0BjF"}

package/dist/server/ui-state.js

@@ -0,0 +1,230 @@
+const FEATURE_KEYS = ['hana', 'abapGit', 'gcts', 'rap', 'amdp', 'ui5', 'transport', 'ui5repo', 'flp'];
+export function buildUiOverview(config, version, startedAt) {
+    return {
+        app: {
+            name: 'ARC-1',
+            version,
+            startedAt,
+            uptimeSeconds: Math.floor(process.uptime()),
+            pid: process.pid,
+            node: process.version,
+        },
+        transport: {
+            type: config.transport,
+            httpAddr: config.httpAddr,
+            uiMode: config.uiMode,
+            uiAddr: config.uiAddr,
+        },
+        safety: sanitizeSafetyConfig(config),
+        auth: summarizeAuthConfig(config),
+        cache: {
+            mode: config.cacheMode,
+            file: config.cacheMode === 'sqlite' || config.cacheMode === 'auto' ? config.cacheFile : undefined,
+            warmup: config.cacheWarmup,
+            warmupPackages: config.cacheWarmupPackages,
+        },
+    };
+}
+export function sanitizeConfigForUi(config) {
+    return {
+        url: sanitizeUrl(config.url),
+        username: config.username,
+        password: { configured: config.password.length > 0 },
+        client: config.client,
+        language: config.language,
+        insecure: config.insecure,
+        cookieFile: config.cookieFile,
+        cookieString: { configured: !!config.cookieString },
+        transport: config.transport,
+        httpAddr: config.httpAddr,
+        uiMode: config.uiMode,
+        uiAddr: config.uiAddr,
+        uiOpen: config.uiOpen,
+        safety: sanitizeSafetyConfig(config),
+        features: {
+            abapGit: config.featureAbapGit,
+            gcts: config.featureGcts,
+            rap: config.featureRap,
+            amdp: config.featureAmdp,
+            ui5: config.featureUi5,
+            transport: config.featureTransport,
+            hana: config.featureHana,
+            ui5repo: config.featureUi5Repo,
+            flp: config.featureFlp,
+        },
+        system: {
+            type: config.systemType,
+            abapRelease: config.abapRelease,
+            disableSaml2: config.disableSaml2,
+        },
+        auth: summarizeAuthConfig(config),
+        btp: {
+            serviceKey: { configured: !!config.btpServiceKey },
+            serviceKeyFile: config.btpServiceKeyFile,
+            oauthCallbackPort: config.btpOAuthCallbackPort,
+        },
+        principalPropagation: {
+            enabled: config.ppEnabled,
+            strict: config.ppStrict,
+            allowSharedCookies: config.ppAllowSharedCookies,
+        },
+        logging: {
+            file: config.logFile,
+            level: config.logLevel,
+            format: config.logFormat,
+            verbose: config.verbose,
+        },
+        toolMode: config.toolMode,
+        plugins: {
+            configured: config.plugins.length,
+            paths: config.plugins,
+            allowExecute: config.allowPluginExecute,
+            allowRawWrites: config.allowPluginRawWrites,
+        },
+        lint: {
+            config: config.abaplintConfig,
+            beforeWrite: config.lintBeforeWrite,
+            checkBeforeWrite: config.checkBeforeWrite,
+        },
+        cache: {
+            mode: config.cacheMode,
+            file: config.cacheFile,
+            warmup: config.cacheWarmup,
+            warmupPackages: config.cacheWarmupPackages,
+        },
+        concurrency: {
+            maxConcurrent: config.maxConcurrent,
+        },
+        rateLimiting: {
+            authRateLimit: config.authRateLimit,
+            mcpRateLimit: config.rateLimit,
+        },
+        browser: {
+            allowedOrigins: config.allowedOrigins,
+        },
+    };
+}
+export function sanitizeConfigSourcesForUi(sources) {
+    return { ...sources };
+}
+export function sanitizeFeaturesForUi(features) {
+    if (!features || typeof features !== 'object') {
+        return {
+            probed: false,
+            message: 'Feature probe has not completed yet.',
+        };
+    }
+    const source = features;
+    const result = {};
+    for (const key of FEATURE_KEYS) {
+        const status = sanitizeFeatureStatus(key, source[key]);
+        if (status)
+            result[key] = status;
+    }
+    if (typeof source.abapRelease === 'string')
+        result.abapRelease = source.abapRelease;
+    if (source.systemType === 'btp' || source.systemType === 'onprem')
+        result.systemType = source.systemType;
+    if (source.discoveryMap instanceof Map)
+        result.discovery = { endpointCount: source.discoveryMap.size };
+    const textSearch = sanitizeTextSearch(source.textSearch);
+    if (textSearch)
+        result.textSearch = textSearch;
+    const authProbe = sanitizeAuthProbe(source.authProbe);
+    if (authProbe)
+        result.authProbe = authProbe;
+    result.probed = true;
+    return result;
+}
+function sanitizeFeatureStatus(name, value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const source = value;
+    if (typeof source.available !== 'boolean')
+        return undefined;
+    return {
+        id: typeof source.id === 'string' ? source.id : name,
+        available: source.available,
+        mode: typeof source.mode === 'string' ? source.mode : 'unknown',
+        ...(typeof source.message === 'string' ? { message: source.message } : {}),
+        ...(typeof source.probedAt === 'string' ? { probedAt: source.probedAt } : {}),
+    };
+}
+function sanitizeTextSearch(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const source = value;
+    if (typeof source.available !== 'boolean')
+        return undefined;
+    return {
+        available: source.available,
+        ...(typeof source.reason === 'string' ? { reason: source.reason } : {}),
+    };
+}
+function sanitizeAuthProbe(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const source = value;
+    return {
+        searchAccess: source.searchAccess === true,
+        ...(typeof source.searchReason === 'string' ? { searchReason: source.searchReason } : {}),
+        transportAccess: source.transportAccess === true,
+        ...(typeof source.transportReason === 'string' ? { transportReason: source.transportReason } : {}),
+    };
+}
+export function sanitizeSafetyConfig(config) {
+    return {
+        allowWrites: config.allowWrites,
+        allowDataPreview: config.allowDataPreview,
+        allowFreeSQL: config.allowFreeSQL,
+        allowTransportWrites: config.allowTransportWrites,
+        allowGitWrites: config.allowGitWrites,
+        allowedPackages: config.allowedPackages,
+        allowedTransports: config.allowedTransports,
+        denyActions: config.denyActions,
+        readOnlyDefault: !config.allowWrites,
+    };
+}
+export function summarizeAuthConfig(config) {
+    return {
+        apiKeys: {
+            count: config.apiKeys?.length ?? 0,
+            profiles: config.apiKeys?.map((entry) => entry.profile) ?? [],
+        },
+        oidc: {
+            configured: !!config.oidcIssuer,
+            issuer: config.oidcIssuer,
+            audience: config.oidcAudience,
+            clockTolerance: config.oidcClockTolerance,
+        },
+        xsuaa: {
+            enabled: config.xsuaaAuth,
+            dcrTtlSeconds: config.oauthDcrTtlSeconds,
+            dcrSigningSecret: { configured: !!config.dcrSigningSecret },
+        },
+        sap: {
+            basic: !!(config.username && config.password),
+            cookieFile: !!config.cookieFile,
+            cookieString: !!config.cookieString,
+            btpServiceKey: !!(config.btpServiceKey || config.btpServiceKeyFile),
+            destination: !!process.env.SAP_BTP_DESTINATION,
+            principalPropagation: config.ppEnabled,
+        },
+    };
+}
+function sanitizeUrl(raw) {
+    if (!raw)
+        return '';
+    try {
+        const url = new URL(raw);
+        url.username = url.username ? '[REDACTED]' : '';
+        url.password = url.password ? '[REDACTED]' : '';
+        url.search = '';
+        url.hash = '';
+        return url.toString();
+    }
+    catch {
+        return raw.replace(/\/\/[^/@]+:[^/@]+@/, '//[REDACTED]@');
+    }
+}
+//# sourceMappingURL=ui-state.js.map

package/dist/server/ui-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-state.js","sourceRoot":"","sources":["../../src/server/ui-state.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AA2B/G,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,OAAe,EAAE,SAAiB;IACtF,OAAO;QACL,GAAG,EAAE;YACH,IAAI,EAAE,OAAO;YACb,OAAO;YACP,SAAS;YACT,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;QACD,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACpC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,IAAI,EAAE,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACjG,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,cAAc,EAAE,MAAM,CAAC,mBAAmB;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;QACpD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE;QACnD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACpC,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,GAAG,EAAE,MAAM,CAAC,UAAU;YACtB,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,GAAG,EAAE,MAAM,CAAC,UAAU;YACtB,SAAS,EAAE,MAAM,CAAC,gBAAgB;YAClC,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,GAAG,EAAE,MAAM,CAAC,UAAU;SACvB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC;QACD,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACjC,GAAG,EAAE;YACH,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,cAAc,EAAE,MAAM,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,MAAM,CAAC,oBAAoB;SAC/C;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,MAAM,CAAC,SAAS;YACzB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,kBAAkB,EAAE,MAAM,CAAC,oBAAoB;SAChD;QACD,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;YACjC,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,YAAY,EAAE,MAAM,CAAC,kBAAkB;YACvC,cAAc,EAAE,MAAM,CAAC,oBAAoB;SAC5C;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,WAAW,EAAE,MAAM,CAAC,eAAe;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,cAAc,EAAE,MAAM,CAAC,mBAAmB;SAC3C;QACD,WAAW,EAAE;YACX,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,MAAM,CAAC,SAAS;SAC/B;QACD,OAAO,EAAE;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAqC;IAC9E,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sCAAsC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACpF,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACzG,IAAI,MAAM,CAAC,YAAY,YAAY,GAAG;QAAE,MAAM,CAAC,SAAS,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACvG,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAc;IACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC/D,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,IAAI;QAC1C,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,CAAC,MAAM,CAAC,WAAW;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,OAAO;QACL,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;YAClC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;SAC9D;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;YAC/B,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,QAAQ,EAAE,MAAM,CAAC,YAAY;YAC7B,cAAc,EAAE,MAAM,CAAC,kBAAkB;SAC1C;QACD,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,SAAS;YACzB,aAAa,EAAE,MAAM,CAAC,kBAAkB;YACxC,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE;SAC5D;QACD,GAAG,EAAE;YACH,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;YAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;YAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;YACnC,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,iBAAiB,CAAC;YACnE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC9C,oBAAoB,EAAE,MAAM,CAAC,SAAS;SACvC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/server/ui.d.ts

@@ -0,0 +1,20 @@
+import type { Server as HttpServer } from 'node:http';
+import type { Express, RequestHandler } from 'express';
+import express from 'express';
+import type { CachingLayer } from '../cache/caching-layer.js';
+import type { ConfigSource, ServerConfig } from './types.js';
+import type { UiLogBufferSink } from './ui-log-buffer.js';
+export interface UiServerDeps {
+    config: ServerConfig;
+    sources: Record<string, ConfigSource>;
+    version: string;
+    startedAt: string;
+    cachingLayer?: CachingLayer;
+    logBuffer?: UiLogBufferSink;
+    getFeatures: () => unknown;
+}
+export declare function createUiApiRouter(deps: UiServerDeps): express.Router;
+export declare function mountUiStaticRoutes(app: Express): void;
+export declare function mountUiRoutes(app: Express, deps: UiServerDeps, auth?: RequestHandler): void;
+export declare function startLocalUiServer(deps: UiServerDeps): Promise<HttpServer>;
+//# sourceMappingURL=ui.d.ts.map

package/dist/server/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/server/ui.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAW,cAAc,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAS1D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,MAAM,OAAO,CAAC;CAC5B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CA0HpE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAatD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI,CAM3F;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAsChF"}