local-serverless-stack 0.0.13 → 0.1.1

package/CHANGELOG.md

@@ -5,6 +5,108 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.1] - 2026-05-21
+
+### Added
+- **DynamoDB tables: search filter**: the DynamoDB tab now has a text input in the table-list header that filters rows by table name or owning service as you type, so finding a table no longer requires `Ctrl+F`. When a query matches nothing, an empty state shows the active query.
+
+## [0.1.0] - 2026-05-21
+
+### Added
+- **S3 bucket support, end-to-end**: LSS now parses `AWS::S3::Bucket` from CloudFormation, provisions buckets in LocalStack, and (when present) wires `NotificationConfiguration.LambdaConfigurations` to a Lambda proxy that forwards into `serverless-offline`. Versioning, `Filter.S3Key.Rules` (prefix/suffix), and multiple lambda configurations per bucket are honored.
+  - **New service** `src/server/services/s3-explorer.ts` exposing `listBuckets`, `getBucket`, `listObjects`, `getObject`, `headObject`, `putObject`, `deleteObject`. Per-region client cache mirrors `QueueInspector`/`DynamoExplorer`. Client uses `forcePathStyle: true` so LocalStack receives the bucket name in the URL path rather than as a virtual-host subdomain.
+  - **New REST routes** under `/api/buckets`:
+    - `GET /api/buckets` — list buckets with enriched metadata (`objectCount`, `totalSize`, `region`, `createdAt`).
+    - `GET /api/buckets/:name` — describe a bucket (versioning, notifications count, object/size totals, region).
+    - `GET /api/buckets/:name/objects` — list objects with `prefix`, `delimiter`, `maxKeys`, `continuationToken` query params.
+    - `GET /api/buckets/:name/objects/content?key=...&download=0|1` — stream an object back. Sets `Content-Type` from the object's stored mime; `?download=1` flips to an attachment disposition. Used by the UI for preview and download.
+    - `POST /api/buckets/:name/objects` — upload `{ key, body, contentType?, encoding? }` (encoding `base64` flips the body decoder for binary uploads).
+    - `DELETE /api/buckets/:name/objects?key=...` — delete a single object.
+  - **New dashboard tab "S3"** in `App.vue` between Queues and DynamoDB.
+  - **`/buckets`** — lazy-loaded `BucketsPage.vue` wraps `BucketsView.vue`. Shows three stats (buckets, objects, total size), a service-owner column (links back to `/services/:name`), versioning + notifications counters, and refreshes every 10s.
+  - **`/buckets/:name`** — lazy-loaded `BucketDetailPage.vue` wraps `BucketDetail.vue`. Shows the four bucket stats, an **Upload object** card (key, optional content-type, free-form body) that POSTs through `/api/buckets/:name/objects`, and an **Objects** table with prefix filter, per-row open-in-tab preview, download, and delete (behind a confirm).
+  - **`@aws-sdk/client-s3`** added to the main package.
+  - **`/api/resources`** now returns `{ tables, queues, topics, buckets }` and **`/api/resources/owners`** returns a `buckets` array of `{ name, service }` pairs.
+  - **`GET /api/services`** `resourceBreakdown` now includes `buckets` count (rendered as `🪣` chip in `ServicesList.vue`).
+  - **Overview page** got a fifth stat column for S3 buckets and the **S3 Buckets** entry in "What's covered" is now `Supported` and links to `/buckets`.
+  - **Service detail page** got a Buckets stat and a clickable bucket list that navigates to `/buckets/:name`.
+  - `S3Resource` interface in `cloudformation-parser.ts` carries `versioningEnabled` and an array of `S3NotificationConfig { functionRef, events, filterPrefix?, filterSuffix? }`.
+
+- **`pro-sample-microservice` example**: same surface as `sample-microservice` (Users/Sessions/Orders tables, OrderProcessing queue, OrderEvents topic, uploads bucket with S3 → Lambda notification, full handler set) but pointed at `localstack/localstack-pro:latest`. Lives on its own ports (LSS `3111`, LocalStack `4571`, offline `3010 / 3011`) so it can run side by side with the community example and an external LocalStack on `4566`. Ships with `.env.example` documenting the required `LOCALSTACK_AUTH_TOKEN` and npm scripts wrapped in `dotenv-cli` so secrets reach both LSS and `serverless-offline` without polluting the shell.
+
+- **`.env` support in `sample-microservice`**: matching `.env.example` (with a note that recent community images ≥ 2026.5 also require a token), `.env` / `.env.local` added to `.gitignore`, and every npm script (`lss:start|stop|status|logs|seed*`, `package`, `offline`, `deploy`) wrapped in `dotenv -- ...` via the new `dotenv-cli` devDep.
+
+- **`sample-microservice` S3 handlers**: `aws.js` now exports an `S3Client` (with `forcePathStyle: true`), and three new handlers exercise the round-trip:
+  - `uploadFile.js` — `POST /uploads` → puts an object under `incoming/{filename}` (supports `encoding: "base64"`).
+  - `listUploads.js` — `GET /uploads?prefix=` → lists objects with metadata.
+  - `onUpload.js` — bound to the bucket's `s3:ObjectCreated:*` notification under the `incoming/` prefix; reads the object back and writes a synthetic row into the `Orders` table (`userId=s3-upload`) so the trigger is visible from the DynamoDB explorer.
+  - `serverless.yml` declares the bucket, the notification (with `Filter.S3Key.Rules` prefix), and adds the three corresponding `functions:`. Env var `UPLOADS_BUCKET` injected for the handlers.
+
+### Changed
+- **`bin/cli.js` PID and log files are now scoped to `serverPort`**: `/tmp/lss-orchestrator-{serverPort}.{pid,log}` instead of the previous global `/tmp/lss-orchestrator.{pid,log}`. The legacy global path is still used when `serverPort` is the default `3100`, so existing single-project setups keep working. This removes the old "PID file is global across all working directories" gotcha — multiple LSS instances (one per example/project) can now coexist on the same machine.
+- **`LocalStackManager` container and volume are scoped to the LocalStack port**: container name is `lss-localstack` for the default `4566` and `lss-localstack-{port}` otherwise; the persistence volume follows the same scheme (`{containerName}-data`). Two examples no longer collide on either the Docker container name or the persistence volume.
+- **Removed the hardcoded `-p 4571:4571` extra port binding** from the LocalStack Docker invocation. It clashed with examples whose LocalStack port is `4571`, and the legacy "edge" port it exposed is obsolete in modern LocalStack (everything flows through the primary port).
+- **`sample-microservice` ports moved off the defaults**: LSS dashboard now on `3110` (was `3101`), LocalStack now on `4570` (was `4566`). Avoids colliding with an external LocalStack on `4566`. The `serverless-offline` ports (`3000`/`3001`) are unchanged.
+- **`sample-microservice` package.json**: added `dotenv-cli` to `devDependencies`; every script wrapped in `dotenv -- ...`. Updated description to mention S3.
+- **Resource breakdown / owner types** in `src/ui/src/services/api.ts` gained the `buckets` fields. The `ServiceResource.type` union now includes `'s3'`, `ResourceBreakdown` includes `buckets: number`, and `ResourceOwnersResponse` includes `buckets: ResourceOwner[]`. Existing `.catch(() => ({...}))` fallbacks in `QueuesView.vue` and `DynamoTablesList.vue` were widened to include the new field.
+
+### Fixed
+- **`resolveLambdaName` now reads `FunctionName` straight from the parsed CFN** instead of hand-crafting `${service}-api-${shortName}`. The old heuristic only worked when the user's stage happened to be `api`; for any other stage (e.g. the default `dev`) the LocalStack proxy would forward to a name `serverless-offline` doesn't recognize and the invocation 404'd with `Function does not exist`. Both the LocalStack proxy and its invoke URL now use the same fully-qualified name (`pro-sample-microservice-dev-onUpload`) that `serverless-offline` exposes on its `lambdaPort`. The old `resolveLambdaFunctionName` helper was removed; `shortFunctionName` is kept only as a last-resort fallback when a logical id isn't present in the parsed CFN.
+- **Event source ARN resolution uses CFN `logicalId` instead of kebab-casing**: `Fn::GetAtt: [OrderProcessingQueue, Arn]` now looks up `OrderProcessingQueue` directly in a logical-id → resource map populated from the parsed template, then derives the real ARN from the resource's actual `QueueName` / `TableName` / `TopicName`. The previous kebab-case match (`order-processing-queue` vs `service-OrderProcessing`) silently failed whenever the user set an explicit `QueueName`/`TableName`, leaving SQS and DynamoDB stream consumers completely unwired.
+- **DynamoDB stream ARN is now fetched via `DescribeTable.LatestStreamArn`** (with up to 5 × 300ms retries while the stream provisions), rather than hand-crafting `arn:aws:dynamodb:...:table/X/stream/NEW_AND_OLD_IMAGES` — the real ARN has a timestamp suffix and the hand-crafted one was always rejected with `Stream not found`.
+- **`CreateEventSourceMappingCommand` now sets `StartingPosition: 'TRIM_HORIZON'` for stream sources** (any resolved ARN starting with `arn:aws:dynamodb:` or `arn:aws:kinesis:`). DynamoDB Streams and Kinesis require this field; SQS forbids it, so the flag is `undefined` for SQS mappings.
+- **CloudFormation parser detects DynamoDB streams via `StreamViewType`** (the field that actually lives in `AWS::DynamoDB::Table.StreamSpecification`) instead of the non-existent `StreamEnabled` boolean. Before, every parsed table came back with `streamEnabled: false`, which meant LSS created the table without streams even when CFN asked for them.
+- **S3 `PutBucketNotificationConfiguration` now passes `SkipDestinationValidation: true`**. LocalStack Pro implements the same synchronous test-invoke validation real S3 does, and was rejecting our config with `Unable to validate the following destination configurations` because the `lambda:InvokeFunction` permission for `s3.amazonaws.com` hadn't fully propagated by the time we wrote the notification. The flag tells S3 to trust the permission we just added rather than probing the destination. (Community LocalStack was lax about this; Pro isn't.)
+- **`ServerlessDeploymentBucket` is now skipped at parse time**. Serverless Framework injects this `AWS::S3::Bucket` for its own deployment artifacts; its name lives behind CloudFormation pseudo-parameters LSS doesn't resolve, so every registration was logging `Failed to provision s3:ServerlessDeploymentBucket: The specified bucket is not valid`. It isn't useful for local dev and is now filtered before provisioning ever runs.
+- **`provisionResources` rebuilds the logical-id map on each call**, so the fixes above don't leak resource lookups across services when the same `ResourceProvisioner` singleton is reused for multiple registrations.
+
+### Documentation
+- **`README.md`**: feature list now mentions S3, LocalStack `SERVICES` example updated to `dynamodb,sqs,sns,s3,lambda`, and the "CLI Implementation Details" section reflects the per-port PID/log paths.
+- **`docs/CONFIGURATION.md`**: default `services` array now includes `s3`, examples updated.
+- **`examples/sample-microservice/README.md`**: replaced the "PID file is global" warning with the new ports table; added an S3 section to the HTTP examples and the "Things to play with in the UI" tour.
+- **`examples/pro-sample-microservice/README.md`**: brand-new walkthrough — prerequisites, token setup, port table, run/reset commands, diff summary against the community example.
+- **Example configs** (`lss.config.json`, `lss.config.json.example`) now list `s3` in the default services array.
+
+## [0.0.15] - 2026-05-21
+
+### Added
+- **Queue detail page with AWS-style send/receive workflow**: clicking a queue in `/queues` now opens `/queues/:name` (lazy-loaded, follows the same routed-page + tabs pattern as the DynamoDB explorer) instead of the old read-only modal. The new page exposes three tabs:
+  - **Send & receive** — the headline upgrade. Send arbitrary messages (body, optional `DelaySeconds`, message attributes with `String`/`Number`/`Binary` types). For FIFO queues the form auto-switches to `MessageGroupId` + optional `MessageDeduplicationId` and hides the `DelaySeconds` field (FIFO rejects it). Poll the queue with configurable `MaxNumberOfMessages` (1–10), `VisibilityTimeout`, and `WaitTimeSeconds` (long polling, 0–20). Received messages appear in a table with body preview, message ID, `SentTimestamp`, attribute count, and expandable JSON pretty-print of the full body plus AWS-side attributes (sender, receive count, etc.) and message attributes. Each row supports **Copy body** to clipboard and **Delete** by `ReceiptHandle`. A **Purge queue** action lives under the poll panel, behind a `TConfirmDialog` (warns about the AWS 60s rate limit).
+  - **Consumers** — the existing Lambda event-source mapping list, promoted to a dedicated tab.
+  - **Attributes** — Identity (queue URL + ARN), Configuration (FIFO, visibility timeout, retention, delayed counter, created/last-polled timestamps), and a Throughput card with the processed-share progress bar and the **Reset processed counter** action that used to live in the modal footer.
+- **`POST /api/queues/:name/messages`**: send a message. Body is `{ body, delaySeconds?, messageAttributes?: [{ name, type, value }], messageGroupId?, messageDeduplicationId? }`. Validates `delaySeconds` is 0–900, ignores it for FIFO queues, and auto-injects `messageGroupId: 'default'` when the queue is FIFO and the field is omitted.
+- **`POST /api/queues/:name/messages/receive`**: poll. Body is `{ maxNumberOfMessages?, visibilityTimeout?, waitTimeSeconds? }` (clamped server-side to 1–10 and 0–20). Returns `{ messages: SqsMessage[] }` with `messageId`, `receiptHandle`, `body`, `md5OfBody`, AWS `attributes` (`SentTimestamp`, `ApproximateReceiveCount`, etc.) and `messageAttributes`.
+- **`POST /api/queues/:name/messages/delete`**: delete a single message by `receiptHandle`.
+- **`POST /api/queues/:name/purge`**: PurgeQueue passthrough.
+- API client helpers `sendQueueMessage`, `receiveQueueMessages`, `deleteQueueMessage`, `purgeQueue` in `src/ui/src/services/api.ts`, plus the supporting `SendQueueMessageInput` / `ReceiveQueueMessagesInput` / `SqsMessage` / `SqsMessageAttributeInput` types.
+
+### Changed
+- `QueueInspector` now keeps a per-region cache of `SQSClient` and `LambdaClient` instances (same pattern `DynamoExplorer` already uses). `listQueues`, `getQueue`, and the new send/receive/delete/purge methods all accept an optional `region` argument, and every `/api/queues/*` route forwards `?region=` through. Background metric polling still uses the default region.
+- `QueuesView.vue` row click and the trailing **Details** button now navigate to `/queues/:name` instead of opening the in-page modal. The modal, the local `selectedQueueName` state, and the modal-only "Reset processed counter" button were removed from the list view; the reset action lives on the new Attributes tab.
+
+## [0.0.14] - 2026-05-20
+
+### Added
+- **Full-screen dashboard with URL-based navigation**: the Vue dashboard now uses `vue-router` instead of a single in-memory tab state. Every section is a real URL — `/`, `/services`, `/services/:name`, `/queues`, `/dynamo`, `/dynamo/:name` — so views are bookmarkable, shareable, and the browser back/forward buttons work as expected. DynamoDB table sub-tabs (Items / Indexes / Settings / Seed) are persisted via `?tab=...` so deep links land on the exact sub-view. Pages are code-split (lazy-loaded) so the initial bundle stays small.
+- **Landing-style Overview page**: replaces the old "Resources" tab. Shows a project pitch hero, a live "Server status" card (LocalStack running, Dynamo Proxy enabled/listening, Auto-package on/off, Persistence on/off), an "LESC configuration" card (default region, server port, enabled LocalStack services, seeds dir, active config file path), four totalizers (services running/total, tables, queues, topics) and a "What's covered" panel listing supported resource types — `✓ SNS Topics`, `✓ SQS Queues`, `✓ DynamoDB Tables`, `⏳ S3 Buckets` (planned).
+- **`/services/:name` detail page**: lifecycle controls (Start / Stop / Logs / Delete / Refresh), metadata block (path, region, invoke port, PID, last updated), and resources grouped by type (Lambda functions, DynamoDB tables, SQS queues, SNS topics, event-source mappings). Each declared DynamoDB table or SQS queue is a clickable tag that navigates to its detail view.
+- **"Service" column on the Queues and DynamoDB lists**: each row now shows which microservice declared that queue/table, with a tag that links back to the service detail page. Resources not declared by any registered service render as `unmanaged` / `—`. Powered by a new `GET /api/resources/owners` endpoint that joins the cached CloudFormation templates and filters by region.
+- **Seeds embedded in the DynamoDB explorer**: the standalone "Seeds" tab is gone. Tables that exist only as a seed file (no live table yet) now appear as **ghost rows** in the DynamoDB tables list (reduced opacity, `Not created` badge, "Register service to provision" hint). When a table has a matching seed file, its detail view gets a new **"Seed" sub-tab** with three actions: **Apply** (insert seed items), **Redo** (purge + re-apply, behind a confirmation), and **Purge** (delete every item in the table). Each destructive action goes through a `TConfirmDialog`.
+- **`GET /api/config`**: exposes the runtime LSS configuration snapshot to the UI — `serverPort`, `localstack` (mode/endpoint/port/edition/version/image and `hasAuthToken: boolean`), `dynamoProxy.enabled/port`, `region`, `services`, `persistence`, `debug`, `seedsDir`, `autoPackage`, `packageCommand`, `packageTimeoutMs`, and `configPath`. The actual LocalStack auth token is never returned, only whether one is set.
+- **`GET /api/resources/owners`**: returns `{ tables, queues, topics }` where each entry is `{ name, service }`, computed by parsing each cached CloudFormation template. Respects `?region=` and filters owner mappings to services registered in the requested region.
+- `GET /api/services` now includes `resourceBreakdown: { lambdas, tables, queues, topics }` so the Services table can render per-type chips (`λ`/`🗄`/`📨`/`📣`) instead of a single opaque resource count.
+- `GET /api/health` response now includes a `dynamoProxy: { enabled, running, port }` block so the navbar and Overview can show whether the proxy is actually listening, not just whether it was configured.
+
+### Changed
+- **Dashboard uses the full viewport width**. The old `<TContainer size="xl">` cap (~1200px) is gone — wide monitors no longer waste half the screen on margins. A sticky secondary nav bar sits under the navbar with `RouterLink`s for the top-level sections.
+- The DynamoDB tables view was refactored from a 2-column card grid to a denser **table layout** to accommodate the new Service and Seed columns and the ghost-row affordance.
+- The DynamoDB Proxy status is now surfaced as a soft badge in the navbar (when enabled) alongside the existing LocalStack status badge.
+- `Service` typing in the UI moved from inline `interface Service` to the shared `ServiceSummary` / `ServiceDetail` / `ResourceBreakdown` / `ResourceOwner` types in `src/ui/src/services/api.ts`, and the API client gained `getConfig()`, `listResourceOwners()` helpers.
+
+### Removed
+- The standalone **"Seeds" tab** and its top-level dashboard entry. All seed actions are now reached from inside the relevant DynamoDB table's detail view, and unprovisioned seeds are visible as ghost rows in the DynamoDB tables list.
+- `src/ui/src/components/ResourcesOverview.vue`, `src/ui/src/components/SeedsPanel.vue`, and `src/ui/src/components/dynamo/DynamoTab.vue` — replaced by the new routed pages (`pages/OverviewPage.vue`, `pages/DynamoPage.vue` + `pages/DynamoTablePage.vue`) and the new `components/dynamo/DynamoSeedPanel.vue`.
+
 ## [0.0.13] - 2026-05-19
 
 ### Added
@@ -12,6 +114,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - `POST /api/services/register` now returns a clear `400` with an actionable message (`"CloudFormation template not found at ... Run 'serverless package' in the service directory, or enable autoPackage in lss.config.json."`) when the template is missing and `autoPackage` is disabled, instead of leaking the underlying `ENOENT` stack trace as a `500`.
+- Auto-package failures now log the full stdout/stderr of the package command to the orchestrator log (`/tmp/lss-orchestrator.log`) with delimiter lines, so failures from `serverless-webpack`, stage validators, missing params, etc. are diagnosable. The HTTP response now points users to the orchestrator log for the full transcript.
 - The configuration summary printed at startup now includes the active `autoPackage` and (when enabled) `packageCommand` values.
 
 ## [0.0.12] - 2026-05-19

package/README.md

@@ -8,7 +8,7 @@ LSS provides a unified local development environment for serverless microservice
 
 ## Features
 
-- **Centralized LocalStack**: Single LocalStack instance manages DynamoDB, SQS, SNS, and Lambda
+- **Centralized LocalStack**: Single LocalStack instance manages DynamoDB, SQS, SNS, S3, and Lambda
 - **Auto-provisioning**: Parses CloudFormation templates from `sls package` and provisions resources automatically
 - **Event source mappings**: Automatically connects SQS queues to Lambda handlers via LocalStack
 - **Lambda proxies**: Generated proxy functions forward events to serverless-offline invoke endpoints
@@ -218,7 +218,7 @@ local-serverless-stack/
 ### LocalStack Settings
 
 LocalStack is configured with:
-- Services: `dynamodb,sqs,sns,lambda`
+- Services: `dynamodb,sqs,sns,s3,lambda`
 - Persistence: Enabled (volume: `lss-localstack-data`)
 - Lambda executor: `local` (no Docker-in-Docker required)
 - Docker socket: Mounted from host
@@ -482,15 +482,15 @@ sequenceDiagram
 The `npx lss` CLI is implemented in `/bin/cli.js` and provides:
 
 - **Background Process Management**: Uses `spawn` with `detached: true` to run orchestrator independently
-- **PID File**: Stores process ID in `/tmp/lss-orchestrator.pid`
-- **Log File**: Redirects stdout/stderr to `/tmp/lss-orchestrator.log`
+- **PID File**: Stores process ID in `/tmp/lss-orchestrator-{serverPort}.pid` (or `/tmp/lss-orchestrator.pid` when serverPort is the default 3100). The port-scoped path lets multiple LSS instances coexist — one per project — without trampling each other.
+- **Log File**: Redirects stdout/stderr to `/tmp/lss-orchestrator-{serverPort}.log` (or `/tmp/lss-orchestrator.log` for the default port).
 - **Process Monitoring**: Checks if process is alive before starting/stopping
 - **Clean Shutdown**: Sends SIGTERM for graceful termination
 
 ### Files
 
-- **PID File**: `/tmp/lss-orchestrator.pid`
-- **Log File**: `/tmp/lss-orchestrator.log`
+- **PID File**: `/tmp/lss-orchestrator-{serverPort}.pid`
+- **Log File**: `/tmp/lss-orchestrator-{serverPort}.log`
 
 ## Troubleshooting
 

package/bin/cli.js

@@ -5,8 +5,27 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 
-const PID_FILE = path.join(os.tmpdir(), 'lss-orchestrator.pid');
-const LOG_FILE = path.join(os.tmpdir(), 'lss-orchestrator.log');
+// Default paths used when no config is present. The actual paths are derived
+// per-invocation by runtimePaths() below, scoped to the configured serverPort
+// so multiple examples (each with their own lss.config.json) can run in parallel.
+const DEFAULT_PID_FILE = path.join(os.tmpdir(), 'lss-orchestrator.pid');
+const DEFAULT_LOG_FILE = path.join(os.tmpdir(), 'lss-orchestrator.log');
+
+// PID/log file paths scoped to the cwd's serverPort. Multiple examples sitting
+// in different folders no longer trample each other.
+function runtimePaths() {
+  const cfg = getConfig(loadConfig());
+  const port = cfg.serverPort;
+  // Keep the legacy global path when the default port is in use so existing
+  // installations don't lose their running process across an upgrade.
+  if (!port || port === 3100) {
+    return { pidFile: DEFAULT_PID_FILE, logFile: DEFAULT_LOG_FILE };
+  }
+  return {
+    pidFile: path.join(os.tmpdir(), `lss-orchestrator-${port}.pid`),
+    logFile: path.join(os.tmpdir(), `lss-orchestrator-${port}.log`),
+  };
+}
 
 /**
  * Load configuration from lss.config.json or .lssrc
@@ -82,8 +101,10 @@ function getOrchestratorPath() {
 }
 
 function startOrchestrator() {
-  if (fs.existsSync(PID_FILE)) {
-    const pid = fs.readFileSync(PID_FILE, 'utf8').trim();
+  const { pidFile, logFile } = runtimePaths();
+
+  if (fs.existsSync(pidFile)) {
+    const pid = fs.readFileSync(pidFile, 'utf8').trim();
     try {
       process.kill(pid, 0);
       const config = loadConfig();
@@ -96,7 +117,7 @@ function startOrchestrator() {
       }
       return;
     } catch (e) {
-      fs.unlinkSync(PID_FILE);
+      fs.unlinkSync(pidFile);
     }
   }
 
@@ -112,7 +133,7 @@ function startOrchestrator() {
     process.exit(1);
   }
 
-  const logFd = fs.openSync(LOG_FILE, 'a');
+  const logFd = fs.openSync(logFile, 'a');
   
   // Load config
   const config = loadConfig();
@@ -167,57 +188,59 @@ function startOrchestrator() {
   child.unref();
   
   fs.closeSync(logFd);
-  fs.writeFileSync(PID_FILE, child.pid.toString());
-  
+  fs.writeFileSync(pidFile, child.pid.toString());
+
   console.log('🚀 LSS Orchestrator started (PID:', child.pid + ')');
   console.log(`📊 Server: http://localhost:${cfg.serverPort}`);
   console.log(`🔧 LocalStack: http://localhost:${cfg.localstackPort} (mode: ${mode}, edition: ${edition})`);
   if (enableDynamoProxy) {
     console.log(`🔄 DynamoDB Proxy: http://localhost:${cfg.dynamoProxyPort} (enabled)`);
   }
-  console.log('📝 Logs:', LOG_FILE);
-  
+  console.log('📝 Logs:', logFile);
+
   setTimeout(() => {
     try {
       process.kill(child.pid, 0);
       console.log('✅ Service is running');
     } catch (e) {
-      console.error('❌ Service failed to start. Check logs:', LOG_FILE);
-      if (fs.existsSync(PID_FILE)) {
-        fs.unlinkSync(PID_FILE);
+      console.error('❌ Service failed to start. Check logs:', logFile);
+      if (fs.existsSync(pidFile)) {
+        fs.unlinkSync(pidFile);
       }
     }
   }, 2000);
 }
 
 function stopOrchestrator() {
-  if (!fs.existsSync(PID_FILE)) {
+  const { pidFile } = runtimePaths();
+  if (!fs.existsSync(pidFile)) {
     console.log('⚠️  LSS Orchestrator is not running');
     return;
   }
 
-  const pid = fs.readFileSync(PID_FILE, 'utf8').trim();
-  
+  const pid = fs.readFileSync(pidFile, 'utf8').trim();
+
   try {
     process.kill(pid, 'SIGTERM');
-    fs.unlinkSync(PID_FILE);
+    fs.unlinkSync(pidFile);
     console.log('🛑 LSS Orchestrator stopped (PID:', pid + ')');
   } catch (e) {
     console.error('❌ Failed to stop process:', e.message);
-    if (fs.existsSync(PID_FILE)) {
-      fs.unlinkSync(PID_FILE);
+    if (fs.existsSync(pidFile)) {
+      fs.unlinkSync(pidFile);
     }
   }
 }
 
 function showStatus() {
-  if (!fs.existsSync(PID_FILE)) {
+  const { pidFile, logFile } = runtimePaths();
+  if (!fs.existsSync(pidFile)) {
     console.log('⚪ LSS Orchestrator: NOT RUNNING');
     return;
   }
 
-  const pid = fs.readFileSync(PID_FILE, 'utf8').trim();
-  
+  const pid = fs.readFileSync(pidFile, 'utf8').trim();
+
   try {
     process.kill(pid, 0);
     const config = loadConfig();
@@ -228,10 +251,10 @@ function showStatus() {
     if (cfg.enableDynamoProxy) {
       console.log(`🔄 DynamoDB Proxy: http://localhost:${cfg.dynamoProxyPort} (enabled)`);
     }
-    console.log('📝 Logs:', LOG_FILE);
+    console.log('📝 Logs:', logFile);
   } catch (e) {
     console.log('⚪ LSS Orchestrator: NOT RUNNING (stale PID file)');
-    fs.unlinkSync(PID_FILE);
+    fs.unlinkSync(pidFile);
   }
 }
 
@@ -276,7 +299,8 @@ function postJson(path, body) {
 }
 
 function ensureRunningOrExit() {
-  if (!fs.existsSync(PID_FILE)) {
+  const { pidFile } = runtimePaths();
+  if (!fs.existsSync(pidFile)) {
     console.error('❌ LSS Orchestrator is not running. Start it with: npx lss start');
     process.exit(1);
   }
@@ -392,14 +416,15 @@ Examples:
 }
 
 function showLogs() {
-  if (!fs.existsSync(LOG_FILE)) {
+  const { logFile } = runtimePaths();
+  if (!fs.existsSync(logFile)) {
     console.log('⚠️  No logs found');
     return;
   }
-  
-  console.log('📝 Logs from:', LOG_FILE);
+
+  console.log('📝 Logs from:', logFile);
   console.log('---');
-  const logs = fs.readFileSync(LOG_FILE, 'utf8');
+  const logs = fs.readFileSync(logFile, 'utf8');
   const lines = logs.split('\n');
   const lastLines = lines.slice(-50).join('\n');
   console.log(lastLines);

package/dist/server/index.js

@@ -5,8 +5,10 @@ import { fileURLToPath } from 'url';
 import { servicesRouter, processManager } from './routes/services.js';
 import { resourcesRouter } from './routes/resources.js';
 import { queuesRouter } from './routes/queues.js';
+import { bucketsRouter } from './routes/buckets.js';
 import { seedsRouter } from './routes/seeds.js';
 import { dynamoRouter } from './routes/dynamo.js';
+import { configRouter } from './routes/config.js';
 import { LocalStackManager } from './services/localstack-manager.js';
 import { ConfigManager } from './services/config-manager.js';
 import { QueueInspector } from './services/queue-inspector.js';
@@ -16,6 +18,7 @@ const __dirname = path.dirname(__filename);
 const app = express();
 const configManager = ConfigManager.getInstance();
 const PORT = configManager.getDashboardPort();
+let dynamoProxyServer = null;
 // Middleware
 app.use(cors());
 app.use(express.json());
@@ -23,13 +26,20 @@ app.use(express.json());
 app.use('/api/services', servicesRouter);
 app.use('/api/resources', resourcesRouter);
 app.use('/api/queues', queuesRouter);
+app.use('/api/buckets', bucketsRouter);
 app.use('/api/seeds', seedsRouter);
 app.use('/api/dynamo', dynamoRouter);
+app.use('/api/config', configRouter);
 // Health check
 app.get('/api/health', (_req, res) => {
     res.json({
         status: 'ok',
         localstack: LocalStackManager.getInstance().isRunning(),
+        dynamoProxy: {
+            enabled: configManager.isEnableDynamoProxy(),
+            running: Boolean(dynamoProxyServer?.listening),
+            port: configManager.getDynamoProxyPort(),
+        },
     });
 });
 // Serve frontend build (fallback for SPA)
@@ -54,7 +64,7 @@ async function start() {
         // Optional DynamoDB proxy
         if (configManager.isEnableDynamoProxy()) {
             const proxyPort = configManager.getDynamoProxyPort();
-            startDynamoProxy(localstack.getEndpoint(), proxyPort);
+            dynamoProxyServer = startDynamoProxy(localstack.getEndpoint(), proxyPort);
         }
         // Print configuration summary
         configManager.printSummary();

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;AAClD,MAAM,IAAI,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC;AAE9C,aAAa;AACb,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAChB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAExB,aAAa;AACb,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AACzC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AACnC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAErC,eAAe;AACf,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,GAAG,CAAC,IAAI,CAAC;QACP,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,iBAAiB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE;KACxD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,0CAA0C;AAC1C,uDAAuD;AACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAClD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,8BAA8B;AAC9B,KAAK,UAAU,KAAK;IAClB,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAElD,wBAAwB;QACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAEzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACpB,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,2BAA2B,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,cAAc,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC;QAE5C,0BAA0B;QAC1B,IAAI,aAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrD,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QAED,8BAA8B;QAC9B,aAAa,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oBAAoB;AACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,cAAc,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,cAAc,CAAC,OAAO,EAAE,CAAC;IACzB,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;AAClD,MAAM,IAAI,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC;AAC9C,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAEjD,aAAa;AACb,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAChB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAExB,aAAa;AACb,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AACzC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACvC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AACnC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAErC,eAAe;AACf,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,GAAG,CAAC,IAAI,CAAC;QACP,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,iBAAiB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE;QACvD,WAAW,EAAE;YACX,OAAO,EAAE,aAAa,CAAC,mBAAmB,EAAE;YAC5C,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC;YAC9C,IAAI,EAAE,aAAa,CAAC,kBAAkB,EAAE;SACzC;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,0CAA0C;AAC1C,uDAAuD;AACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAClD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AACrC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,8BAA8B;AAC9B,KAAK,UAAU,KAAK;IAClB,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAElD,wBAAwB;QACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAEzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACpB,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,2BAA2B,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,cAAc,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC;QAE5C,0BAA0B;QAC1B,IAAI,aAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrD,iBAAiB,GAAG,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5E,CAAC;QAED,8BAA8B;QAC9B,aAAa,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oBAAoB;AACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,cAAc,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,cAAc,CAAC,OAAO,EAAE,CAAC;IACzB,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,KAAK,EAAE,CAAC"}

package/dist/server/routes/buckets.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export { router as bucketsRouter };
+//# sourceMappingURL=buckets.d.ts.map

package/dist/server/routes/buckets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../../src/server/routes/buckets.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA+HxB,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,CAAC"}

package/dist/server/routes/buckets.js

@@ -0,0 +1,128 @@
+import { Router } from 'express';
+import { S3Explorer } from '../services/s3-explorer.js';
+const router = Router();
+const explorer = S3Explorer.getInstance();
+// S3 bucket name rules are stricter than DNS, but the only constraints we enforce here
+// are anti-traversal — actual validation happens server-side at LocalStack.
+function isValidBucketName(name) {
+    return (typeof name === 'string' &&
+        name.length > 0 &&
+        name.length <= 63 &&
+        !name.includes('/') &&
+        !name.includes('..') &&
+        !name.includes('\\'));
+}
+function isValidObjectKey(key) {
+    return typeof key === 'string' && key.length > 0 && key.length <= 1024 && !key.includes('..');
+}
+function fail(res, error, status = 500) {
+    const message = error instanceof Error ? error.message : 'Unknown error';
+    return res.status(status).json({ error: message });
+}
+function getRegion(req) {
+    const r = req.query.region;
+    return typeof r === 'string' && r ? r : undefined;
+}
+router.get('/', async (req, res) => {
+    try {
+        const buckets = await explorer.listBuckets(getRegion(req));
+        res.json(buckets);
+    }
+    catch (error) {
+        fail(res, error);
+    }
+});
+router.get('/:name', async (req, res) => {
+    const name = req.params.name;
+    if (!isValidBucketName(name))
+        return fail(res, new Error('Invalid bucket name'), 400);
+    try {
+        const bucket = await explorer.getBucket(name, getRegion(req));
+        if (!bucket)
+            return res.status(404).json({ error: 'Bucket not found' });
+        return res.json(bucket);
+    }
+    catch (error) {
+        return fail(res, error);
+    }
+});
+router.get('/:name/objects', async (req, res) => {
+    const name = req.params.name;
+    if (!isValidBucketName(name))
+        return fail(res, new Error('Invalid bucket name'), 400);
+    const prefix = typeof req.query.prefix === 'string' ? req.query.prefix : undefined;
+    const continuationToken = typeof req.query.continuationToken === 'string' ? req.query.continuationToken : undefined;
+    const delimiter = typeof req.query.delimiter === 'string' ? req.query.delimiter : undefined;
+    const maxKeysRaw = req.query.maxKeys;
+    const maxKeys = typeof maxKeysRaw === 'string' ? parseInt(maxKeysRaw, 10) : undefined;
+    try {
+        const result = await explorer.listObjects(name, { prefix, continuationToken, maxKeys, delimiter }, getRegion(req));
+        return res.json(result);
+    }
+    catch (error) {
+        return fail(res, error);
+    }
+});
+// Fetch the raw object body. Used by the UI to preview text or download files.
+router.get('/:name/objects/content', async (req, res) => {
+    const name = req.params.name;
+    if (!isValidBucketName(name))
+        return fail(res, new Error('Invalid bucket name'), 400);
+    const key = req.query.key;
+    if (!isValidObjectKey(key))
+        return fail(res, new Error('Invalid object key'), 400);
+    try {
+        const obj = await explorer.getObject(name, key, getRegion(req));
+        if (!obj)
+            return res.status(404).json({ error: 'Object not found' });
+        // ?download=1 forces an attachment disposition; otherwise inline view.
+        const wantDownload = req.query.download === '1' || req.query.download === 'true';
+        if (obj.contentType)
+            res.setHeader('Content-Type', obj.contentType);
+        if (wantDownload) {
+            const fname = key.split('/').pop() || 'download';
+            res.setHeader('Content-Disposition', `attachment; filename="${fname}"`);
+        }
+        res.setHeader('Content-Length', String(obj.size));
+        return res.send(obj.body);
+    }
+    catch (error) {
+        return fail(res, error);
+    }
+});
+router.post('/:name/objects', async (req, res) => {
+    const name = req.params.name;
+    if (!isValidBucketName(name))
+        return fail(res, new Error('Invalid bucket name'), 400);
+    const { key, body, contentType, encoding } = req.body ?? {};
+    if (!isValidObjectKey(key))
+        return fail(res, new Error('key (string) is required'), 400);
+    if (typeof body !== 'string')
+        return fail(res, new Error('body (string) is required'), 400);
+    // encoding="base64" lets the UI upload binary content via a JSON body.
+    const payload = encoding === 'base64' ? Buffer.from(body, 'base64') : body;
+    try {
+        await explorer.putObject(name, { key, body: payload, contentType }, getRegion(req));
+        return res.json({ success: true });
+    }
+    catch (error) {
+        return fail(res, error, 400);
+    }
+});
+router.delete('/:name/objects', async (req, res) => {
+    const name = req.params.name;
+    if (!isValidBucketName(name))
+        return fail(res, new Error('Invalid bucket name'), 400);
+    const key = req.query.key;
+    if (!isValidObjectKey(key))
+        return fail(res, new Error('Invalid object key'), 400);
+    try {
+        await explorer.deleteObject(name, key, getRegion(req));
+        return res.json({ success: true });
+    }
+    catch (error) {
+        return fail(res, error, 400);
+    }
+});
+export { router as bucketsRouter };
+//# sourceMappingURL=buckets.js.map

package/dist/server/routes/buckets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../src/server/routes/buckets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AACxB,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;AAE1C,uFAAuF;AACvF,4EAA4E;AAC5E,SAAS,iBAAiB,CAAC,IAAa;IACtC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,IAAI,EAAE;QACjB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,IAAI,CAAC,GAAa,EAAE,KAAc,EAAE,MAAM,GAAG,GAAG;IACvD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACzD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,iBAAiB,GACrB,OAAO,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CACvC,IAAI,EACJ,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,EACjD,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACzE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;IAC1B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAErE,uEAAuE;QACvE,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;QACjF,IAAI,GAAG,CAAC,WAAW;YAAE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACpE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,KAAK,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC;IAE5F,uEAAuE;IACvE,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;IAC1B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,CAAC"}

package/dist/server/routes/config.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export { router as configRouter };
+//# sourceMappingURL=config.d.ts.map

package/dist/server/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/server/routes/config.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAiCxB,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}

package/dist/server/routes/config.js

@@ -0,0 +1,35 @@
+import { Router } from 'express';
+import { ConfigManager } from '../services/config-manager.js';
+const router = Router();
+// Public-safe LSS configuration snapshot for the UI overview.
+// Never expose the LocalStack auth token — only whether it's set.
+router.get('/', (_req, res) => {
+    const cm = ConfigManager.getInstance();
+    res.json({
+        serverPort: cm.getServerPort(),
+        localstack: {
+            mode: cm.getMode(),
+            endpoint: cm.getLocalStackEndpoint(),
+            port: cm.getLocalStackPort(),
+            edition: cm.getLocalStackEdition(),
+            version: cm.getLocalStackVersion(),
+            image: cm.getLocalStackImage(),
+            hasAuthToken: Boolean(cm.getLocalStackAuthToken()),
+        },
+        dynamoProxy: {
+            enabled: cm.isEnableDynamoProxy(),
+            port: cm.getDynamoProxyPort(),
+        },
+        region: cm.getRegion(),
+        services: cm.getServices(),
+        persistence: cm.isPersistence(),
+        debug: cm.isDebug(),
+        seedsDir: cm.getSeedsDir(),
+        autoPackage: cm.isAutoPackage(),
+        packageCommand: cm.getPackageCommand(),
+        packageTimeoutMs: cm.getPackageTimeoutMs(),
+        configPath: cm.getConfigPath(),
+    });
+});
+export { router as configRouter };
+//# sourceMappingURL=config.js.map

package/dist/server/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/server/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB,8DAA8D;AAC9D,kEAAkE;AAClE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC;QACP,UAAU,EAAE,EAAE,CAAC,aAAa,EAAE;QAC9B,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE;YAClB,QAAQ,EAAE,EAAE,CAAC,qBAAqB,EAAE;YACpC,IAAI,EAAE,EAAE,CAAC,iBAAiB,EAAE;YAC5B,OAAO,EAAE,EAAE,CAAC,oBAAoB,EAAE;YAClC,OAAO,EAAE,EAAE,CAAC,oBAAoB,EAAE;YAClC,KAAK,EAAE,EAAE,CAAC,kBAAkB,EAAE;YAC9B,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC;SACnD;QACD,WAAW,EAAE;YACX,OAAO,EAAE,EAAE,CAAC,mBAAmB,EAAE;YACjC,IAAI,EAAE,EAAE,CAAC,kBAAkB,EAAE;SAC9B;QACD,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE;QACtB,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,aAAa,EAAE;QAC/B,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE;QACnB,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,aAAa,EAAE;QAC/B,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE;QACtC,gBAAgB,EAAE,EAAE,CAAC,mBAAmB,EAAE;QAC1C,UAAU,EAAE,EAAE,CAAC,aAAa,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}

package/dist/server/routes/queues.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queues.d.ts","sourceRoot":"","sources":["../../../src/server/routes/queues.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA4CxB,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}
+{"version":3,"file":"queues.d.ts","sourceRoot":"","sources":["../../../src/server/routes/queues.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAyHxB,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}